selfstore 1.3.0 → 1.5.0

package/dist/flows.d.ts

@@ -1,326 +1,6 @@
-import { t as StoreError, B as BackupTarget, L as LocalStore, k as ReplicaState } from './store-2RnED1Vq.js';
-import { K as KV } from './cache-De5_sALA.js';
-import { W as WebdavConfig, S as S3Config, D as DriveAuth } from './drive-DNiDXBDe.js';
-import { F as FlowStore } from './machine-ALMkT3mk.js';
-export { w as withDeadline } from './machine-ALMkT3mk.js';
+export { c as ConnectFlow, a as ConnectFlowOptions, h as ConnectFlowOutcome, b as ConnectKind, i as ConnectResolution, j as ConnectSnapshot, k as ConnectStep, C as ConnectTargets, l as Connector, F as FlowHost, J as JoinEngine, g as JoinFlow, m as JoinOutcome, n as JoinPreview, o as JoinSnapshot, p as JoinStep, q as REPLICA_ID, R as ReplicaFlow, r as ReplicaFlowOptions, s as ReplicaSnapshot, t as ReplicaStep, u as ShareBusy, d as ShareEngine, f as ShareFlow, e as ShareLevel, v as ShareLinkInfo, w as ShareMemberInfo, x as ShareSnapshot, y as connectFlow, z as joinFlow, A as replicaFlow, B as shareFlow } from './flows-BBMVdP1S.js';
+export { F as FlowStore, w as withDeadline } from './machine-ALMkT3mk.js';
+import './store-C20_6JBo.js';
+import './cache-ilsK3Tki.js';
 import './sync.js';
-
-type ConnectKind = 'drive' | 'file' | 'webdav' | 's3';
-/** Produce a connected BackupTarget, or null when the user cancelled the
- *  gesture (consent refused, picker closed). Custom connectors slot custom
- *  targets - or test fakes - into the same journey. */
-type Connector = () => Promise<BackupTarget | null>;
-/** Which destinations the flow offers, and how to open each one. The offer
- *  renders in this OBJECT's insertion order: the host decides which
- *  destination leads by how it writes the object, not by a ranking here. */
-interface ConnectTargets {
-    /** Google Drive: the auth strategy (e.g. gisDriveAuth), or a custom connector. */
-    drive?: DriveAuth | Connector;
-    /** Local file via the browser's picker (true), or a custom connector. On
-     *  browsers without the File System Access API the flow degrades to the
-     *  manual download mode by itself. The object form offers TWO gestures on
-     *  the same destination: `create` (save picker: start or overwrite a backup
-     *  file) and `open` (open picker: adopt an EXISTING backup file - it then
-     *  goes through the same inspect/password/resolution journey). */
-    file?: true | Connector | {
-        create?: true | Connector;
-        open?: true | Connector;
-    };
-    /** WebDAV: true renders a 'form' step and expects submitWebdav(config);
-     *  a fixed WebdavConfig skips the form; or a custom connector. */
-    webdav?: true | WebdavConfig | Connector;
-    /** S3-compatible bucket (Amazon S3, R2, B2, MinIO): true renders a 'form'
-     *  step and expects submitS3(config); a fixed S3Config skips the form; or a
-     *  custom connector. Offer it alongside `webdav` and the widget groups both
-     *  under one "your server" entry with a WebDAV/S3 toggle. */
-    s3?: true | S3Config | Connector;
-}
-/** What the flows need from the store. The simple store exposes this as
- *  `store.flowHost`; an advanced-store app builds it by hand. */
-interface FlowHost {
-    engine: LocalStore;
-    kv: KV;
-    /** Backup file name on the destination (the simple store uses `app.zip`). */
-    backupName: string;
-}
-interface ConnectFlowOptions {
-    /** Declare when this device holds data worth a question: only then does an
-     *  existing backup raise the 'conflict' step with the destructive choices.
-     *  Default: never - the flow applies defaultResolution. */
-    hasLocalData?: () => boolean;
-    /** How to reconcile with a destination that already holds a backup when the
-     *  conflict step is not raised. Default 'merge' - the only choice that
-     *  loses nothing on either side. 'resume' adopts the backup (the
-     *  destination wins; this device's working copy is replaced), 'replace'
-     *  overwrites the backup with this device. An encrypted backup still asks
-     *  for its password first, whatever the resolution; an empty destination
-     *  is not concerned (this device's data simply becomes its content). */
-    defaultResolution?: ConnectResolution;
-    /** Skip the password step on an encrypted backup: adopt it AS is (resume)
-     *  and complete with the store locked - nothing readable, nothing
-     *  clobbered - for the host to unlock on its own surface (engine.unlock)
-     *  after the connect. Adoption is forced whatever defaultResolution says:
-     *  without the proven key a merge is impossible and a replace would
-     *  destroy a backup no one proved they own. Hosts that let a device
-     *  holding real local data connect should keep the password-first
-     *  journey - adoption replaces the working copy. */
-    deferUnlock?: boolean;
-    /**
-     * A secret the host already holds (an app passphrase, a derived key), used
-     * to encrypt the backup when this journey creates or adopts one that is NOT
-     * already encrypted - an empty destination, or a plaintext file.
-     *
-     * Two things need it. A store built with `requireEncryption` refuses a
-     * passwordless attach outright (ENCRYPTION_REQUIRED), so without this the
-     * connect journey cannot complete at all. And even without that setting, a
-     * fresh backup is better born encrypted than written in clear and protected
-     * on a second write, which would leave cleartext on the destination in
-     * between.
-     *
-     * Never used against a destination whose backup is already encrypted: that
-     * one is proven through the password step (or adopted locked under
-     * `deferUnlock`), so a host secret that happens to differ can neither fail
-     * the attach nor overwrite what it cannot read. Resolved lazily, so the
-     * secret is only read when a connect actually needs it. Must satisfy the
-     * store's password policy.
-     */
-    password?: string | (() => string | Promise<string>);
-    /** Deadline for each network leg (inspect, trial-read, attach), ms. */
-    deadlineMs?: number;
-}
-type ConnectStep = 'choose' | 'form' | 'authorizing' | 'password' | 'conflict' | 'connected' | 'error';
-/** How to reconcile with a destination that already holds a backup. */
-type ConnectResolution = 'merge' | 'resume' | 'replace';
-/** What connecting did. 'merged': both sides folded. 'started': empty
- *  destination now holds this device's data. 'resumed': the backup won,
- *  this device adopted it. 'replaced': this device won, the backup was
- *  overwritten. 'manual': degraded download-on-demand file mode. */
-type ConnectFlowOutcome = 'merged' | 'started' | 'resumed' | 'replaced' | 'manual';
-interface ConnectSnapshot {
-    step: ConnectStep;
-    /** The destinations to offer, in the order given. */
-    kinds: readonly ConnectKind[];
-    /** The destination being connected (null while choosing). */
-    kind: ConnectKind | null;
-    /** Set when step === 'connected'. */
-    outcome: ConnectFlowOutcome | null;
-    /** Known after inspection: the destination already holds a backup. */
-    hasBackup: boolean;
-    /** ...and that backup is encrypted. */
-    encrypted: boolean;
-    /** The last submitPassword() was wrong (stay on 'password', say so). */
-    passwordError: boolean;
-    /** An async leg is in flight (render a spinner, disable the actions). */
-    busy: boolean;
-    /** Set when step === 'error': show `labelKey`, log `message`. */
-    error: StoreError | null;
-}
-interface ConnectFlow extends FlowStore<ConnectSnapshot> {
-    /** Pick a destination. Call it inside the user's click: the consent popup /
-     *  file picker opens synchronously from the gesture. Ignored while a leg is
-     *  already in flight (one popup per gesture). For a `file` target declared
-     *  with the object form, `variant` picks the gesture: 'create' (default,
-     *  save picker) or 'open' (adopt an existing backup file). */
-    choose(kind: ConnectKind, variant?: 'create' | 'open'): void;
-    /** 'form' step (webdav: true): submit the server config. */
-    submitWebdav(config: WebdavConfig): void;
-    /** 'form' step (s3: true): submit the bucket config. */
-    submitS3(config: S3Config): void;
-    /** 'password' step: prove the backup's password. Wrong password sets
-     *  passwordError and stays here; nothing is attached either way. */
-    submitPassword(password: string): void;
-    /** 'password' step escape hatch: give up on a forgotten password and start a
-     *  fresh backup over the protected one. The encrypted backup is overwritten
-     *  by this device's data (possibly empty) and lost for good - the only way
-     *  out when the password cannot be recovered. */
-    overwrite(): void;
-    /** 'conflict' step: pick the reconciliation. */
-    resolveConflict(how: ConnectResolution): void;
-    /** Abandon the journey in progress: back to 'choose'. A late resolution of
-     *  the abandoned leg is discarded. */
-    cancel(): void;
-    /** 'error' step: back to 'choose' to try again. */
-    retry(): void;
-}
-declare function connectFlow(store: FlowHost | {
-    flowHost: FlowHost;
-}, targets: ConnectTargets, options?: ConnectFlowOptions): ConnectFlow;
-
-/** The one replica this flow manages, as its id on the engine. */
-declare const REPLICA_ID = "replica";
-type ReplicaStep = 'idle' | 'choose' | 'form-webdav' | 'form-s3';
-interface ReplicaSnapshot {
-    step: ReplicaStep;
-    /** The kinds the host offers, in ConnectTargets order. */
-    kinds: ConnectKind[];
-    busy: boolean;
-    error: StoreError | null;
-    /** The live engine entry (label, lastPublishAt, lastError), null when none. */
-    replica: ReplicaState | null;
-}
-interface ReplicaFlowOptions {
-    /** File name of the copy on its destination. Default: the primary backup
-     *  name with `.replica` before the extension ("App.zip" -> "App.replica.zip"),
-     *  which a same-account Drive never confuses with the primary file and the
-     *  backups panel never lists as a backup of its own. */
-    fileName?: string;
-    /** Rebuild the target of a custom Connector kind on restore() (built-in
-     *  kinds rebuild by themselves). Without it, custom kinds are not restored. */
-    restoreTarget?: (kind: ConnectKind) => Promise<BackupTarget | null>;
-}
-interface ReplicaFlow extends FlowStore<ReplicaSnapshot> {
-    /** Show the destination choice (from the user's gesture). */
-    open(): void;
-    /** Back to idle; never an error. */
-    cancel(): void;
-    /** Run a destination (inside the user's click - pickers and consent popups
-     *  open from it). `webdav: true` / `s3: true` route to their form step. */
-    pick(kind: ConnectKind): void;
-    /** 'form-webdav' step: submit the server config. */
-    submitWebdav(config: WebdavConfig): void;
-    /** 'form-s3' step: submit the bucket config. */
-    submitS3(config: S3Config): void;
-    /** Detach the copy and forget its session. Never deletes remote data. */
-    remove(): Promise<void>;
-    /** Silent reboot: re-attach the copy recorded by a past session, if any.
-     *  Never throws - an unreachable destination retries at the next boot. */
-    restore(): Promise<void>;
-    /** Detach from the engine (the replica itself stays attached). */
-    dispose(): void;
-}
-declare function replicaFlow(store: FlowHost | {
-    flowHost: FlowHost;
-}, targets: ConnectTargets, options?: ReplicaFlowOptions): ReplicaFlow;
-
-type ShareLevel = 'read' | 'write';
-interface ShareLinkInfo {
-    /** Engine-scoped stable id (revoke keys on it). */
-    id: string;
-    /** The invitation URL to hand out. */
-    url: string;
-    level: ShareLevel;
-}
-interface ShareMemberInfo {
-    /** Engine-scoped stable id (removeMember keys on it). */
-    id: string;
-    label?: string;
-    /** This row is the local user. */
-    self?: boolean;
-    /** This row owns the share (the app may render a badge, the flow does not care). */
-    owner?: boolean;
-}
-/** The app-side port the flow drives. Implementations wrap whatever transport
- *  the app shares through; every method may throw (SelfstoreError preferred,
- *  anything is normalized). */
-interface ShareEngine {
-    /** The current truth: active links and members. */
-    list(): Promise<{
-        links: ShareLinkInfo[];
-        members: ShareMemberInfo[];
-    }>;
-    createLink(opts: {
-        level: ShareLevel;
-    }): Promise<ShareLinkInfo>;
-    revokeLink(id: string): Promise<void>;
-    /** Optional: engines without member management simply omit it. */
-    removeMember?(id: string): Promise<void>;
-    /** Optional: END the whole share in one gesture - every link dead, every
-     *  member out. Engines whose transport has such a move (an invitation to
-     *  kill, a file to re-privatize) expose it; the widget renders the action
-     *  only then. */
-    revokeAll?(): Promise<void>;
-}
-type ShareBusy = 'refresh' | 'create' | 'revoke' | 'remove' | 'revoke-all' | null;
-interface ShareSnapshot {
-    links: readonly ShareLinkInfo[];
-    members: readonly ShareMemberInfo[];
-    /** The operation in flight, or null. */
-    busy: ShareBusy;
-    /** The last refresh failed: the lists shown are the last-known good ones. */
-    stale: boolean;
-    /** The last operation's problem (the lists are never cleared by an error). */
-    error: StoreError | null;
-    /** True once the engine offers removeMember (render the row action at all). */
-    canRemoveMembers: boolean;
-    /** True once the engine offers revokeAll (render the end-the-share action). */
-    canRevokeAll: boolean;
-}
-interface ShareFlow extends FlowStore<ShareSnapshot> {
-    /** Re-list from the engine. Failure keeps the last-known lists (stale). */
-    refresh(): Promise<void>;
-    /** Create an invitation link. Resolves to it, or null when refused (an
-     *  operation was already in flight). */
-    createLink(opts: {
-        level: ShareLevel;
-    }): Promise<ShareLinkInfo | null>;
-    /** Revoke a link. The link leaves the snapshot only once the engine
-     *  confirmed. Resolves to whether it did. */
-    revokeLink(id: string): Promise<boolean>;
-    /** Remove a member (never yourself - refused up front). Resolves to whether
-     *  the engine confirmed. */
-    removeMember(id: string): Promise<boolean>;
-    /** End the whole share: every link and member leaves the snapshot only
-     *  once the engine confirmed. Resolves to whether it did. */
-    revokeAll(): Promise<boolean>;
-}
-declare function shareFlow(engine: ShareEngine, options?: {
-    deadlineMs?: number;
-}): ShareFlow;
-
-/** What the user is about to join - enough to render an honest question. */
-interface JoinPreview {
-    /** The share's display name, when the link carries one. */
-    label?: string;
-    /** Who shared it (a name, an email - whatever the engine knows). */
-    from?: string;
-    level?: ShareLevel;
-}
-/** How joining ended, other than plain failure:
- *  'joined'    - this device now follows the share.
- *  'mismatch'  - this device already follows a DIFFERENT share: joining a
- *                second one is refused (leave the first, or use another
- *                device/profile).
- *  'no-invite' - the invitation is spent, expired, or aimed at another
- *                account (switching accounts may be the fix). */
-type JoinOutcome = 'joined' | 'mismatch' | 'no-invite';
-/** The app-side port: how a link is read and honoured on this transport. */
-interface JoinEngine {
-    /** Read-only look at the invitation. Must change NOTHING. */
-    preview(link: string): Promise<JoinPreview>;
-    /** Consume the invitation and wire the share. Resolve null when the user
-     *  backed out of a popup the engine had to open (an account chooser, a
-     *  consent screen): the flow returns to 'ready' silently - backing out of
-     *  a human gesture is not an error, here as everywhere in these flows. */
-    join(link: string): Promise<JoinOutcome | null>;
-    /** Optional: re-run the account chooser (the invite may belong to another
-     *  account). The flow re-previews after it. */
-    switchAccount?(): Promise<void>;
-}
-type JoinStep = 'previewing' | 'ready' | 'joining' | 'joined' | 'mismatch' | 'no-invite' | 'error';
-interface JoinSnapshot {
-    /** The invitation this flow was opened with - held here so the UI can
-     *  always find it again. */
-    link: string;
-    step: JoinStep;
-    /** Set once previewed (kept through errors, so retry re-renders context). */
-    preview: JoinPreview | null;
-    /** The engine offers an account switch. */
-    canSwitchAccount: boolean;
-    busy: boolean;
-    /** Set when step === 'error': show `labelKey`, log `message`. */
-    error: StoreError | null;
-}
-interface JoinFlow extends FlowStore<JoinSnapshot> {
-    /** Say yes: consume the invitation. Only from 'ready'. */
-    accept(): void;
-    /** Re-run the account chooser, then preview again under the new account.
-     *  Available from 'ready', 'no-invite' and 'error' when the engine offers it. */
-    switchAccount(): void;
-    /** From 'error': preview again and resume the journey. */
-    retry(): void;
-}
-declare function joinFlow(link: string, engine: JoinEngine, options?: {
-    deadlineMs?: number;
-}): JoinFlow;
-
-export { type ConnectFlow, type ConnectFlowOptions, type ConnectFlowOutcome, type ConnectKind, type ConnectResolution, type ConnectSnapshot, type ConnectStep, type ConnectTargets, type Connector, type FlowHost, FlowStore, type JoinEngine, type JoinFlow, type JoinOutcome, type JoinPreview, type JoinSnapshot, type JoinStep, REPLICA_ID, type ReplicaFlow, type ReplicaFlowOptions, type ReplicaSnapshot, type ReplicaStep, type ShareBusy, type ShareEngine, type ShareFlow, type ShareLevel, type ShareLinkInfo, type ShareMemberInfo, type ShareSnapshot, connectFlow, joinFlow, replicaFlow, shareFlow };
+import './drive-BhiTdk-Q.js';

package/dist/flows.js

@@ -1,4 +1,4 @@
-export { connectFlow, joinFlow, shareFlow } from './chunk-3XR3GLR2.js';
+export { connectFlow, joinFlow, shareFlow } from './chunk-I243KZMZ.js';
 import { connect, connect2, connect4, connect3, fromSession, fromSession2, fromSession3, fromSession4 } from './chunk-TEIAFKFS.js';
 import './chunk-SRKUHFRG.js';
 import { makeMachine, toStoreError } from './chunk-43BJDRPT.js';

package/dist/flows.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/flows/replica.ts"],"names":["connect","config","fromSession"],"mappings":";;;;;;;;;;;AAgCO,IAAM,UAAA,GAAa;AAK1B,IAAM,KAAA,GAAQ,UAAA;AACd,IAAM,UAAA,GAAa,QAAA;AAqDnB,SAAS,QAAA,CAAS,IAAQ,MAAA,EAAoB;AAC7C,EAAA,OAAO;AAAA,IACN,KAAK,CAAc,GAAA,KAAgB,EAAA,CAAG,GAAA,CAAO,SAAS,GAAG,CAAA;AAAA,IACzD,GAAA,EAAK,CAAC,GAAA,EAAa,KAAA,KAAmB,GAAG,GAAA,CAAI,MAAA,GAAS,KAAK,KAAK,CAAA;AAAA,IAChE,KAAK,CAAC,GAAA,KAAgB,EAAA,CAAG,GAAA,CAAI,SAAS,GAAG;AAAA,GAC1C;AACD;AAEA,SAAS,gBAAgB,UAAA,EAA4B;AACpD,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,WAAA,CAAY,GAAG,CAAA;AACtC,EAAA,OAAO,GAAA,GAAM,CAAA,GACV,CAAA,EAAG,UAAA,CAAW,MAAM,CAAA,EAAG,GAAG,CAAC,CAAA,QAAA,EAAW,WAAW,KAAA,CAAM,GAAG,CAAC,CAAA,CAAA,GAC3D,GAAG,UAAU,CAAA,QAAA,CAAA;AACjB;AAEO,SAAS,WAAA,CACf,KAAA,EACA,OAAA,EACA,OAAA,GAA8B,EAAC,EACjB;AACd,EAAA,MAAM,IAAA,GAAO,UAAA,IAAc,KAAA,GAAQ,KAAA,CAAM,QAAA,GAAW,KAAA;AACpD,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,IAAA,CAAK,EAAA,EAAI,KAAK,CAAA;AACnC,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,QAAA,IAAY,eAAA,CAAgB,KAAK,UAAU,CAAA;AACpE,EAAA,MAAM,KAAA,GAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAoB,MAAA;AAAA,IACrD,CAAC,CAAA,KAAA,CAAO,CAAA,KAAM,OAAA,IAAW,CAAA,KAAM,MAAA,IAAU,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,IAAA,KAAS,OAAA,CAAQ,CAAC,CAAA,IAAK;AAAA,GACzF;AAEA,EAAA,MAAM,OAAA,GAAU,MACf,MAAA,CAAO,KAAA,CAAM,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,UAAU,CAAA,IAAK,IAAA;AAE3D,EAAA,MAAM,IAAI,WAAA,CAA6B;AAAA,IACtC,IAAA,EAAM,MAAA;AAAA,IACN,KAAA;AAAA,IACA,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,IAAA;AAAA,IACP,SAAS,OAAA;AAAQ,GACjB,CAAA;AAGD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,CAAE,GAAA,CAAI,EAAE,OAAA,EAAS,OAAA,EAAQ,EAAG,CAAC,CAAA;AAGlE,EAAA,IAAI,QAAA,GAAgC,IAAA;AAEpC,EAAA,SAAS,aAAa,IAAA,EAAqC;AAC1D,IAAA,MAAM,IAAA,GAAO,QAAQ,IAAI,CAAA;AACzB,IAAA,IAAI,IAAA,IAAQ,MAAM,OAAO,IAAA;AACzB,IAAA,IAAI,OAAO,IAAA,KAAS,UAAA,EAAY,OAAO,IAAA;AACvC,IAAA,IAAI,SAAS,OAAA,EAAS;AACrB,MAAA,MAAM,IAAA,GAAO,IAAA;AACb,MAAA,OAAO,MAAM,OAAA,CAAa,EAAE,MAAM,EAAA,EAAI,GAAA,EAAK,UAAU,CAAA;AAAA,IACtD;AACA,IAAA,IAAI,SAAS,MAAA,EAAQ;AACpB,MAAA,OAAO,MAAMA,QAAAA,CAAY,EAAE,EAAA,EAAI,GAAA,EAAK,UAAU,CAAA;AAAA,IAC/C;AACA,IAAA,IAAI,SAAS,IAAA,EAAM;AAClB,MAAA,MAAMC,OAAAA,GAAS,IAAA;AACf,MAAA,OAAO,MAAMD,QAAAA,CAAU,EAAE,IAAI,GAAA,EAAK,MAAA,EAAAC,SAAQ,CAAA;AAAA,IAC3C;AACA,IAAA,MAAM,MAAA,GAAS,IAAA;AACf,IAAA,OAAO,MAAMD,QAAAA,CAAc,EAAE,EAAA,EAAI,GAAA,EAAK,QAAQ,CAAA;AAAA,EAC/C;AAEA,EAAA,eAAe,GAAA,CAAI,MAAmB,SAAA,EAAqC;AAC1E,IAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACjC,IAAA,IAAI;AACH,MAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,MAAA,IAAI,CAAC,MAAA,EAAQ;AAEZ,QAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AACrB,QAAA;AAAA,MACD;AACA,MAAA,IAAI,OAAA,EAAQ,EAAG,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAC9C,MAAA,MAAA,CAAO,aAAA,CAAc,MAAA,EAAQ,EAAE,EAAA,EAAI,YAAY,CAAA;AAC/C,MAAA,QAAA,GAAW,MAAA;AACX,MAAA,MAAM,GAAA,CAAI,GAAA,CAAI,UAAA,EAAY,EAAE,MAA8B,CAAA;AAC1D,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS,OAAA,EAAQ,EAAG,CAAA;AAAA,IACrE,SAAS,CAAA,EAAG;AACX,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,KAAA,EAAO,OAAO,YAAA,CAAa,CAAC,GAAG,CAAA;AAAA,IAC9C;AAAA,EACD;AAEA,EAAA,eAAe,mBAAmB,IAAA,EAAiD;AAClF,IAAA,IAAI,SAAS,OAAA,EAAS;AACrB,MAAA,MAAM,OAAO,OAAA,CAAQ,KAAA;AACrB,MAAA,IAAI,IAAA,IAAQ,IAAA,IAAQ,OAAO,IAAA,KAAS,YAAY,OAAO,IAAA;AACvD,MAAA,OAAO,YAAiB,EAAE,IAAA,EAAM,MAAM,EAAA,EAAI,GAAA,EAAK,UAAU,CAAA;AAAA,IAC1D;AACA,IAAA,IAAI,SAAS,MAAA,EAAQ,OAAOE,aAAgB,EAAE,EAAA,EAAI,KAAK,CAAA;AACvD,IAAA,IAAI,SAAS,QAAA,EAAU,OAAOA,aAAkB,EAAE,EAAA,EAAI,KAAK,CAAA;AAC3D,IAAA,OAAOA,YAAAA,CAAc,EAAE,EAAA,EAAI,GAAA,EAAK,CAAA;AAAA,EACjC;AAEA,EAAA,OAAO;AAAA,IACN,IAAI,QAAA,GAAW;AACd,MAAA,OAAO,CAAA,CAAE,QAAA;AAAA,IACV,CAAA;AAAA,IACA,WAAW,CAAA,CAAE,SAAA;AAAA,IAEb,IAAA,GAAO;AACN,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,MAAM,CAAA;AAAA,IACtC,CAAA;AAAA,IAEA,MAAA,GAAS;AACR,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAAA,IACjD,CAAA;AAAA,IAEA,KAAK,IAAA,EAAM;AACV,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,MAAM,IAAA,GAAO,QAAQ,IAAI,CAAA;AACzB,MAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,MAAA,IAAI,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,EAAM;AACvC,QAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,aAAA,EAAe,KAAA,EAAO,MAAM,CAAA;AAC1C,QAAA;AAAA,MACD;AACA,MAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,IAAA,EAAM;AACnC,QAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,MAAM,CAAA;AACtC,QAAA;AAAA,MACD;AACA,MAAA,MAAM,SAAA,GAAY,aAAa,IAAI,CAAA;AACnC,MAAA,IAAI,SAAA,EAAW,KAAK,GAAA,CAAI,IAAA,EAAM,SAAS,CAAA;AAAA,IACxC,CAAA;AAAA,IAEA,aAAa,MAAA,EAAQ;AACpB,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,KAAK,GAAA,CAAI,UAAU,MAAMF,QAAAA,CAAc,EAAE,EAAA,EAAI,GAAA,EAAK,MAAA,EAAQ,CAAC,CAAA;AAAA,IAC5D,CAAA;AAAA,IAEA,SAAS,MAAA,EAAQ;AAChB,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,KAAK,GAAA,CAAI,MAAM,MAAMA,QAAAA,CAAU,EAAE,EAAA,EAAI,GAAA,EAAK,MAAA,EAAQ,CAAC,CAAA;AAAA,IACpD,CAAA;AAAA,IAEA,MAAM,MAAA,GAAS;AACd,MAAA,MAAM,MAAA,GAAS,QAAA;AACf,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,IAAI,OAAA,EAAQ,EAAG,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAC9C,MAAA,MAAM,GAAA,CAAI,IAAI,UAAU,CAAA;AAGxB,MAAA,MAAM,MAAA,EAAQ,UAAA,EAAW,CAAE,KAAA,CAAM,MAAM,MAAS,CAAA;AAChD,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS,OAAA,EAAQ,EAAG,CAAA;AAAA,IACrE,CAAA;AAAA,IAEA,MAAM,OAAA,GAAU;AACf,MAAA,IAAI;AACH,QAAA,IAAI,SAAQ,EAAG;AACf,QAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,GAAA,CAAmB,UAAU,CAAA;AACtD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACb,QAAA,MAAM,MAAA,GACJ,MAAM,OAAA,CAAQ,aAAA,GAAgB,MAAA,CAAO,IAAI,CAAA,IAAO,MAAM,kBAAA,CAAmB,MAAA,CAAO,IAAI,CAAA;AACtF,QAAA,IAAI,CAAC,MAAA,EAAQ;AACb,QAAA,MAAA,CAAO,aAAA,CAAc,MAAA,EAAQ,EAAE,EAAA,EAAI,YAAY,CAAA;AAC/C,QAAA,QAAA,GAAW,MAAA;AACX,QAAA,CAAA,CAAE,GAAA,CAAI,EAAE,OAAA,EAAS,OAAA,IAAW,CAAA;AAAA,MAC7B,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACD,CAAA;AAAA,IAEA,OAAA,GAAU;AACT,MAAA,KAAA,EAAM;AAAA,IACP;AAAA,GACD;AACD","file":"flows.js","sourcesContent":["// The backup-copy journey: attach ONE replica (a second destination receiving\n// the same encrypted backup as the primary home) behind a small state machine\n// the widgets can render. Reuses the connect flow's target specs, but there is\n// no password step, no conflict step and no deadline: a replica carries the\n// primary's bytes as-is, and every connector may contain a human gesture.\n\nimport type { BackupTarget } from '../persistence/target';\nimport type { KV } from '../persistence/cache';\nimport type { ReplicaState, StoreError } from '../persistence/store';\nimport { makeMachine, toStoreError, type FlowStore } from './machine';\nimport type { ConnectKind, ConnectTargets, Connector, FlowHost } from './connect';\nimport {\n\tconnect as driveConnect,\n\tfromSession as driveFromSession,\n\ttype DriveAuth\n} from '../persistence/targets/drive';\nimport {\n\tconnect as fileConnect,\n\tfromSession as fileFromSession\n} from '../persistence/targets/file';\nimport {\n\tconnect as webdavConnect,\n\tfromSession as webdavFromSession,\n\ttype WebdavConfig\n} from '../persistence/targets/webdav';\nimport {\n\tconnect as s3Connect,\n\tfromSession as s3FromSession,\n\ttype S3Config\n} from '../persistence/targets/s3';\n\n/** The one replica this flow manages, as its id on the engine. */\nexport const REPLICA_ID = 'replica';\n\n// The replica's target session lives in the SAME kv as the primary's, so every\n// key is prefixed: a second driveTarget (say) must never read or clobber the\n// primary connection's session keys.\nconst SCOPE = 'replica:';\nconst RECORD_KEY = 'record';\n\n/** What survives a reboot: which provider the copy lives on. The target's own\n *  session (file id, handle, server config) is persisted by the target module\n *  itself, under the scoped kv. */\ninterface ReplicaRecord {\n\tkind: ConnectKind;\n}\n\nexport type ReplicaStep = 'idle' | 'choose' | 'form-webdav' | 'form-s3';\n\nexport interface ReplicaSnapshot {\n\tstep: ReplicaStep;\n\t/** The kinds the host offers, in ConnectTargets order. */\n\tkinds: ConnectKind[];\n\tbusy: boolean;\n\terror: StoreError | null;\n\t/** The live engine entry (label, lastPublishAt, lastError), null when none. */\n\treplica: ReplicaState | null;\n}\n\nexport interface ReplicaFlowOptions {\n\t/** File name of the copy on its destination. Default: the primary backup\n\t *  name with `.replica` before the extension (\"App.zip\" -> \"App.replica.zip\"),\n\t *  which a same-account Drive never confuses with the primary file and the\n\t *  backups panel never lists as a backup of its own. */\n\tfileName?: string;\n\t/** Rebuild the target of a custom Connector kind on restore() (built-in\n\t *  kinds rebuild by themselves). Without it, custom kinds are not restored. */\n\trestoreTarget?: (kind: ConnectKind) => Promise<BackupTarget | null>;\n}\n\nexport interface ReplicaFlow extends FlowStore<ReplicaSnapshot> {\n\t/** Show the destination choice (from the user's gesture). */\n\topen(): void;\n\t/** Back to idle; never an error. */\n\tcancel(): void;\n\t/** Run a destination (inside the user's click - pickers and consent popups\n\t *  open from it). `webdav: true` / `s3: true` route to their form step. */\n\tpick(kind: ConnectKind): void;\n\t/** 'form-webdav' step: submit the server config. */\n\tsubmitWebdav(config: WebdavConfig): void;\n\t/** 'form-s3' step: submit the bucket config. */\n\tsubmitS3(config: S3Config): void;\n\t/** Detach the copy and forget its session. Never deletes remote data. */\n\tremove(): Promise<void>;\n\t/** Silent reboot: re-attach the copy recorded by a past session, if any.\n\t *  Never throws - an unreachable destination retries at the next boot. */\n\trestore(): Promise<void>;\n\t/** Detach from the engine (the replica itself stays attached). */\n\tdispose(): void;\n}\n\nfunction scopedKv(kv: KV, prefix: string): KV {\n\treturn {\n\t\tget: <T = unknown>(key: string) => kv.get<T>(prefix + key),\n\t\tset: (key: string, value: unknown) => kv.set(prefix + key, value),\n\t\tdel: (key: string) => kv.del(prefix + key)\n\t};\n}\n\nfunction replicaFileName(backupName: string): string {\n\tconst dot = backupName.lastIndexOf('.');\n\treturn dot > 0\n\t\t? `${backupName.slice(0, dot)}.replica${backupName.slice(dot)}`\n\t\t: `${backupName}.replica`;\n}\n\nexport function replicaFlow(\n\tstore: FlowHost | { flowHost: FlowHost },\n\ttargets: ConnectTargets,\n\toptions: ReplicaFlowOptions = {}\n): ReplicaFlow {\n\tconst host = 'flowHost' in store ? store.flowHost : store;\n\tconst engine = host.engine;\n\tconst skv = scopedKv(host.kv, SCOPE);\n\tconst fileName = options.fileName ?? replicaFileName(host.backupName);\n\tconst kinds = (Object.keys(targets) as ConnectKind[]).filter(\n\t\t(k) => (k === 'drive' || k === 'file' || k === 'webdav' || k === 's3') && targets[k] != null\n\t);\n\n\tconst current = (): ReplicaState | null =>\n\t\tengine.state.replicas.find((r) => r.id === REPLICA_ID) ?? null;\n\n\tconst m = makeMachine<ReplicaSnapshot>({\n\t\tstep: 'idle',\n\t\tkinds,\n\t\tbusy: false,\n\t\terror: null,\n\t\treplica: current()\n\t});\n\n\t// Follow the engine: every publish (or publish failure) refreshes the entry.\n\tconst unsub = engine.subscribe(() => m.set({ replica: current() }));\n\n\t// Held for remove(): disconnect() lets the target forget its own session.\n\tlet attached: BackupTarget | null = null;\n\n\tfunction connectorFor(kind: ConnectKind): Connector | null {\n\t\tconst spec = targets[kind];\n\t\tif (spec == null) return null;\n\t\tif (typeof spec === 'function') return spec;\n\t\tif (kind === 'drive') {\n\t\t\tconst auth = spec as DriveAuth;\n\t\t\treturn () => driveConnect({ auth, kv: skv, fileName });\n\t\t}\n\t\tif (kind === 'file') {\n\t\t\treturn () => fileConnect({ kv: skv, fileName });\n\t\t}\n\t\tif (kind === 's3') {\n\t\t\tconst config = spec as S3Config; // 's3: true' goes through the form step\n\t\t\treturn () => s3Connect({ kv: skv, config });\n\t\t}\n\t\tconst config = spec as WebdavConfig; // 'webdav: true' goes through the form step\n\t\treturn () => webdavConnect({ kv: skv, config });\n\t}\n\n\tasync function run(kind: ConnectKind, connector: Connector): Promise<void> {\n\t\tm.set({ busy: true, error: null });\n\t\ttry {\n\t\t\tconst target = await connector();\n\t\t\tif (!target) {\n\t\t\t\t// Cancelled picker/consent: stay where the user was, no error.\n\t\t\t\tm.set({ busy: false });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (current()) engine.detachReplica(REPLICA_ID); // swap, never a dup-id throw\n\t\t\tengine.attachReplica(target, { id: REPLICA_ID });\n\t\t\tattached = target;\n\t\t\tawait skv.set(RECORD_KEY, { kind } satisfies ReplicaRecord);\n\t\t\tm.set({ step: 'idle', busy: false, error: null, replica: current() });\n\t\t} catch (e) {\n\t\t\tm.set({ busy: false, error: toStoreError(e) });\n\t\t}\n\t}\n\n\tasync function builtinFromSession(kind: ConnectKind): Promise<BackupTarget | null> {\n\t\tif (kind === 'drive') {\n\t\t\tconst spec = targets.drive;\n\t\t\tif (spec == null || typeof spec === 'function') return null;\n\t\t\treturn driveFromSession({ auth: spec, kv: skv, fileName });\n\t\t}\n\t\tif (kind === 'file') return fileFromSession({ kv: skv });\n\t\tif (kind === 'webdav') return webdavFromSession({ kv: skv });\n\t\treturn s3FromSession({ kv: skv });\n\t}\n\n\treturn {\n\t\tget snapshot() {\n\t\t\treturn m.snapshot;\n\t\t},\n\t\tsubscribe: m.subscribe,\n\n\t\topen() {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tm.set({ step: 'choose', error: null });\n\t\t},\n\n\t\tcancel() {\n\t\t\tm.set({ step: 'idle', busy: false, error: null });\n\t\t},\n\n\t\tpick(kind) {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tconst spec = targets[kind];\n\t\t\tif (spec == null) return;\n\t\t\tif (kind === 'webdav' && spec === true) {\n\t\t\t\tm.set({ step: 'form-webdav', error: null });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (kind === 's3' && spec === true) {\n\t\t\t\tm.set({ step: 'form-s3', error: null });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst connector = connectorFor(kind);\n\t\t\tif (connector) void run(kind, connector);\n\t\t},\n\n\t\tsubmitWebdav(config) {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tvoid run('webdav', () => webdavConnect({ kv: skv, config }));\n\t\t},\n\n\t\tsubmitS3(config) {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tvoid run('s3', () => s3Connect({ kv: skv, config }));\n\t\t},\n\n\t\tasync remove() {\n\t\t\tconst target = attached;\n\t\t\tattached = null;\n\t\t\tif (current()) engine.detachReplica(REPLICA_ID);\n\t\t\tawait skv.del(RECORD_KEY);\n\t\t\t// Forget locally only - a BackupTarget's disconnect never deletes\n\t\t\t// remote data, so the copy stays where it is for a manual recovery.\n\t\t\tawait target?.disconnect().catch(() => undefined);\n\t\t\tm.set({ step: 'idle', busy: false, error: null, replica: current() });\n\t\t},\n\n\t\tasync restore() {\n\t\t\ttry {\n\t\t\t\tif (current()) return;\n\t\t\t\tconst record = await skv.get<ReplicaRecord>(RECORD_KEY);\n\t\t\t\tif (!record) return;\n\t\t\t\tconst target =\n\t\t\t\t\t(await options.restoreTarget?.(record.kind)) ?? (await builtinFromSession(record.kind));\n\t\t\t\tif (!target) return; // unreachable or custom kind: retry next boot\n\t\t\t\tengine.attachReplica(target, { id: REPLICA_ID });\n\t\t\t\tattached = target;\n\t\t\t\tm.set({ replica: current() });\n\t\t\t} catch {\n\t\t\t\t// Silent reboot by contract: the record stays, the next boot retries.\n\t\t\t}\n\t\t},\n\n\t\tdispose() {\n\t\t\tunsub();\n\t\t}\n\t};\n}\n"]}
+{"version":3,"sources":["../src/flows/replica.ts"],"names":["connect","config","fromSession"],"mappings":";;;;;;;;;;;AAgCO,IAAM,UAAA,GAAa;AAK1B,IAAM,KAAA,GAAQ,UAAA;AACd,IAAM,UAAA,GAAa,QAAA;AAqDnB,SAAS,QAAA,CAAS,IAAQ,MAAA,EAAoB;AAC7C,EAAA,OAAO;AAAA,IACN,KAAK,CAAc,GAAA,KAAgB,EAAA,CAAG,GAAA,CAAO,SAAS,GAAG,CAAA;AAAA,IACzD,GAAA,EAAK,CAAC,GAAA,EAAa,KAAA,KAAmB,GAAG,GAAA,CAAI,MAAA,GAAS,KAAK,KAAK,CAAA;AAAA,IAChE,KAAK,CAAC,GAAA,KAAgB,EAAA,CAAG,GAAA,CAAI,SAAS,GAAG;AAAA,GAC1C;AACD;AAEA,SAAS,gBAAgB,UAAA,EAA4B;AACpD,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,WAAA,CAAY,GAAG,CAAA;AACtC,EAAA,OAAO,GAAA,GAAM,CAAA,GACV,CAAA,EAAG,UAAA,CAAW,MAAM,CAAA,EAAG,GAAG,CAAC,CAAA,QAAA,EAAW,WAAW,KAAA,CAAM,GAAG,CAAC,CAAA,CAAA,GAC3D,GAAG,UAAU,CAAA,QAAA,CAAA;AACjB;AAEO,SAAS,WAAA,CACf,KAAA,EACA,OAAA,EACA,OAAA,GAA8B,EAAC,EACjB;AACd,EAAA,MAAM,IAAA,GAAO,UAAA,IAAc,KAAA,GAAQ,KAAA,CAAM,QAAA,GAAW,KAAA;AACpD,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,IAAA,CAAK,EAAA,EAAI,KAAK,CAAA;AACnC,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,QAAA,IAAY,eAAA,CAAgB,KAAK,UAAU,CAAA;AACpE,EAAA,MAAM,KAAA,GAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAoB,MAAA;AAAA,IACrD,CAAC,CAAA,KAAA,CAAO,CAAA,KAAM,OAAA,IAAW,CAAA,KAAM,MAAA,IAAU,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,IAAA,KAAS,OAAA,CAAQ,CAAC,CAAA,IAAK;AAAA,GACzF;AAEA,EAAA,MAAM,OAAA,GAAU,MACf,MAAA,CAAO,KAAA,CAAM,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,UAAU,CAAA,IAAK,IAAA;AAE3D,EAAA,MAAM,IAAI,WAAA,CAA6B;AAAA,IACtC,IAAA,EAAM,MAAA;AAAA,IACN,KAAA;AAAA,IACA,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,IAAA;AAAA,IACP,SAAS,OAAA;AAAQ,GACjB,CAAA;AAGD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,CAAE,GAAA,CAAI,EAAE,OAAA,EAAS,OAAA,EAAQ,EAAG,CAAC,CAAA;AAGlE,EAAA,IAAI,QAAA,GAAgC,IAAA;AAEpC,EAAA,SAAS,aAAa,IAAA,EAAqC;AAC1D,IAAA,MAAM,IAAA,GAAO,QAAQ,IAAI,CAAA;AACzB,IAAA,IAAI,IAAA,IAAQ,MAAM,OAAO,IAAA;AACzB,IAAA,IAAI,OAAO,IAAA,KAAS,UAAA,EAAY,OAAO,IAAA;AACvC,IAAA,IAAI,SAAS,OAAA,EAAS;AACrB,MAAA,MAAM,IAAA,GAAO,IAAA;AACb,MAAA,OAAO,MAAM,OAAA,CAAa,EAAE,MAAM,EAAA,EAAI,GAAA,EAAK,UAAU,CAAA;AAAA,IACtD;AACA,IAAA,IAAI,SAAS,MAAA,EAAQ;AACpB,MAAA,OAAO,MAAMA,QAAAA,CAAY,EAAE,EAAA,EAAI,GAAA,EAAK,UAAU,CAAA;AAAA,IAC/C;AACA,IAAA,IAAI,SAAS,IAAA,EAAM;AAClB,MAAA,MAAMC,OAAAA,GAAS,IAAA;AACf,MAAA,OAAO,MAAMD,QAAAA,CAAU,EAAE,IAAI,GAAA,EAAK,MAAA,EAAAC,SAAQ,CAAA;AAAA,IAC3C;AACA,IAAA,MAAM,MAAA,GAAS,IAAA;AACf,IAAA,OAAO,MAAMD,QAAAA,CAAc,EAAE,EAAA,EAAI,GAAA,EAAK,QAAQ,CAAA;AAAA,EAC/C;AAEA,EAAA,eAAe,GAAA,CAAI,MAAmB,SAAA,EAAqC;AAC1E,IAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACjC,IAAA,IAAI;AACH,MAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,MAAA,IAAI,CAAC,MAAA,EAAQ;AAEZ,QAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AACrB,QAAA;AAAA,MACD;AACA,MAAA,IAAI,OAAA,EAAQ,EAAG,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAC9C,MAAA,MAAA,CAAO,aAAA,CAAc,MAAA,EAAQ,EAAE,EAAA,EAAI,YAAY,CAAA;AAC/C,MAAA,QAAA,GAAW,MAAA;AACX,MAAA,MAAM,GAAA,CAAI,GAAA,CAAI,UAAA,EAAY,EAAE,MAA8B,CAAA;AAC1D,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS,OAAA,EAAQ,EAAG,CAAA;AAAA,IACrE,SAAS,CAAA,EAAG;AACX,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,KAAA,EAAO,OAAO,YAAA,CAAa,CAAC,GAAG,CAAA;AAAA,IAC9C;AAAA,EACD;AAEA,EAAA,eAAe,mBAAmB,IAAA,EAAiD;AAClF,IAAA,IAAI,SAAS,OAAA,EAAS;AACrB,MAAA,MAAM,OAAO,OAAA,CAAQ,KAAA;AACrB,MAAA,IAAI,IAAA,IAAQ,IAAA,IAAQ,OAAO,IAAA,KAAS,YAAY,OAAO,IAAA;AACvD,MAAA,OAAO,YAAiB,EAAE,IAAA,EAAM,MAAM,EAAA,EAAI,GAAA,EAAK,UAAU,CAAA;AAAA,IAC1D;AACA,IAAA,IAAI,SAAS,MAAA,EAAQ,OAAOE,aAAgB,EAAE,EAAA,EAAI,KAAK,CAAA;AACvD,IAAA,IAAI,SAAS,QAAA,EAAU,OAAOA,aAAkB,EAAE,EAAA,EAAI,KAAK,CAAA;AAC3D,IAAA,OAAOA,YAAAA,CAAc,EAAE,EAAA,EAAI,GAAA,EAAK,CAAA;AAAA,EACjC;AAEA,EAAA,OAAO;AAAA,IACN,IAAI,QAAA,GAAW;AACd,MAAA,OAAO,CAAA,CAAE,QAAA;AAAA,IACV,CAAA;AAAA,IACA,WAAW,CAAA,CAAE,SAAA;AAAA,IAEb,IAAA,GAAO;AACN,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,MAAM,CAAA;AAAA,IACtC,CAAA;AAAA,IAEA,MAAA,GAAS;AACR,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAAA,IACjD,CAAA;AAAA,IAEA,KAAK,IAAA,EAAM;AACV,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,MAAM,IAAA,GAAO,QAAQ,IAAI,CAAA;AACzB,MAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,MAAA,IAAI,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,EAAM;AACvC,QAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,aAAA,EAAe,KAAA,EAAO,MAAM,CAAA;AAC1C,QAAA;AAAA,MACD;AACA,MAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,IAAA,EAAM;AACnC,QAAA,CAAA,CAAE,IAAI,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,MAAM,CAAA;AACtC,QAAA;AAAA,MACD;AACA,MAAA,MAAM,SAAA,GAAY,aAAa,IAAI,CAAA;AACnC,MAAA,IAAI,SAAA,EAAW,KAAK,GAAA,CAAI,IAAA,EAAM,SAAS,CAAA;AAAA,IACxC,CAAA;AAAA,IAEA,aAAa,MAAA,EAAQ;AACpB,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,KAAK,GAAA,CAAI,UAAU,MAAMF,QAAAA,CAAc,EAAE,EAAA,EAAI,GAAA,EAAK,MAAA,EAAQ,CAAC,CAAA;AAAA,IAC5D,CAAA;AAAA,IAEA,SAAS,MAAA,EAAQ;AAChB,MAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,MAAA,KAAK,GAAA,CAAI,MAAM,MAAMA,QAAAA,CAAU,EAAE,EAAA,EAAI,GAAA,EAAK,MAAA,EAAQ,CAAC,CAAA;AAAA,IACpD,CAAA;AAAA,IAEA,MAAM,MAAA,GAAS;AACd,MAAA,MAAM,MAAA,GAAS,QAAA;AACf,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,IAAI,OAAA,EAAQ,EAAG,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAC9C,MAAA,MAAM,GAAA,CAAI,IAAI,UAAU,CAAA;AAGxB,MAAA,MAAM,MAAA,EAAQ,UAAA,EAAW,CAAE,KAAA,CAAM,MAAM,MAAS,CAAA;AAChD,MAAA,CAAA,CAAE,GAAA,CAAI,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS,OAAA,EAAQ,EAAG,CAAA;AAAA,IACrE,CAAA;AAAA,IAEA,MAAM,OAAA,GAAU;AACf,MAAA,IAAI;AACH,QAAA,IAAI,SAAQ,EAAG;AACf,QAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,GAAA,CAAmB,UAAU,CAAA;AACtD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACb,QAAA,MAAM,MAAA,GACJ,MAAM,OAAA,CAAQ,aAAA,GAAgB,MAAA,CAAO,IAAI,CAAA,IAAO,MAAM,kBAAA,CAAmB,MAAA,CAAO,IAAI,CAAA;AACtF,QAAA,IAAI,CAAC,MAAA,EAAQ;AACb,QAAA,MAAA,CAAO,aAAA,CAAc,MAAA,EAAQ,EAAE,EAAA,EAAI,YAAY,CAAA;AAC/C,QAAA,QAAA,GAAW,MAAA;AACX,QAAA,CAAA,CAAE,GAAA,CAAI,EAAE,OAAA,EAAS,OAAA,IAAW,CAAA;AAAA,MAC7B,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACD,CAAA;AAAA,IAEA,OAAA,GAAU;AACT,MAAA,KAAA,EAAM;AAAA,IACP;AAAA,GACD;AACD","file":"flows.js","sourcesContent":["// The backup-copy journey: attach ONE replica (a second destination receiving\n// the same encrypted backup as the primary home) behind a small state machine\n// the widgets can render. Reuses the connect flow's target specs, but there is\n// no password step, no conflict step and no deadline: a replica carries the\n// primary's bytes as-is, and every connector may contain a human gesture.\n\nimport type { BackupTarget } from '../persistence/target';\nimport type { KV } from '../persistence/cache';\nimport type { ReplicaState, StoreError } from '../persistence/store';\nimport { makeMachine, toStoreError, type FlowStore } from './machine';\nimport type { ConnectKind, ConnectTargets, Connector, StoreLike } from './connect';\nimport {\n\tconnect as driveConnect,\n\tfromSession as driveFromSession,\n\ttype DriveAuth\n} from '../persistence/targets/drive';\nimport {\n\tconnect as fileConnect,\n\tfromSession as fileFromSession\n} from '../persistence/targets/file';\nimport {\n\tconnect as webdavConnect,\n\tfromSession as webdavFromSession,\n\ttype WebdavConfig\n} from '../persistence/targets/webdav';\nimport {\n\tconnect as s3Connect,\n\tfromSession as s3FromSession,\n\ttype S3Config\n} from '../persistence/targets/s3';\n\n/** The one replica this flow manages, as its id on the engine. */\nexport const REPLICA_ID = 'replica';\n\n// The replica's target session lives in the SAME kv as the primary's, so every\n// key is prefixed: a second driveTarget (say) must never read or clobber the\n// primary connection's session keys.\nconst SCOPE = 'replica:';\nconst RECORD_KEY = 'record';\n\n/** What survives a reboot: which provider the copy lives on. The target's own\n *  session (file id, handle, server config) is persisted by the target module\n *  itself, under the scoped kv. */\ninterface ReplicaRecord {\n\tkind: ConnectKind;\n}\n\nexport type ReplicaStep = 'idle' | 'choose' | 'form-webdav' | 'form-s3';\n\nexport interface ReplicaSnapshot {\n\tstep: ReplicaStep;\n\t/** The kinds the host offers, in ConnectTargets order. */\n\tkinds: ConnectKind[];\n\tbusy: boolean;\n\terror: StoreError | null;\n\t/** The live engine entry (label, lastPublishAt, lastError), null when none. */\n\treplica: ReplicaState | null;\n}\n\nexport interface ReplicaFlowOptions {\n\t/** File name of the copy on its destination. Default: the primary backup\n\t *  name with `.replica` before the extension (\"App.zip\" -> \"App.replica.zip\"),\n\t *  which a same-account Drive never confuses with the primary file and the\n\t *  backups panel never lists as a backup of its own. */\n\tfileName?: string;\n\t/** Rebuild the target of a custom Connector kind on restore() (built-in\n\t *  kinds rebuild by themselves). Without it, custom kinds are not restored. */\n\trestoreTarget?: (kind: ConnectKind) => Promise<BackupTarget | null>;\n}\n\nexport interface ReplicaFlow extends FlowStore<ReplicaSnapshot> {\n\t/** Show the destination choice (from the user's gesture). */\n\topen(): void;\n\t/** Back to idle; never an error. */\n\tcancel(): void;\n\t/** Run a destination (inside the user's click - pickers and consent popups\n\t *  open from it). `webdav: true` / `s3: true` route to their form step. */\n\tpick(kind: ConnectKind): void;\n\t/** 'form-webdav' step: submit the server config. */\n\tsubmitWebdav(config: WebdavConfig): void;\n\t/** 'form-s3' step: submit the bucket config. */\n\tsubmitS3(config: S3Config): void;\n\t/** Detach the copy and forget its session. Never deletes remote data. */\n\tremove(): Promise<void>;\n\t/** Silent reboot: re-attach the copy recorded by a past session, if any.\n\t *  Never throws - an unreachable destination retries at the next boot. */\n\trestore(): Promise<void>;\n\t/** Detach from the engine (the replica itself stays attached). */\n\tdispose(): void;\n}\n\nfunction scopedKv(kv: KV, prefix: string): KV {\n\treturn {\n\t\tget: <T = unknown>(key: string) => kv.get<T>(prefix + key),\n\t\tset: (key: string, value: unknown) => kv.set(prefix + key, value),\n\t\tdel: (key: string) => kv.del(prefix + key)\n\t};\n}\n\nfunction replicaFileName(backupName: string): string {\n\tconst dot = backupName.lastIndexOf('.');\n\treturn dot > 0\n\t\t? `${backupName.slice(0, dot)}.replica${backupName.slice(dot)}`\n\t\t: `${backupName}.replica`;\n}\n\nexport function replicaFlow(\n\tstore: StoreLike,\n\ttargets: ConnectTargets,\n\toptions: ReplicaFlowOptions = {}\n): ReplicaFlow {\n\tconst host = 'flowHost' in store ? store.flowHost : store;\n\tconst engine = host.engine;\n\tconst skv = scopedKv(host.kv, SCOPE);\n\tconst fileName = options.fileName ?? replicaFileName(host.backupName);\n\tconst kinds = (Object.keys(targets) as ConnectKind[]).filter(\n\t\t(k) => (k === 'drive' || k === 'file' || k === 'webdav' || k === 's3') && targets[k] != null\n\t);\n\n\tconst current = (): ReplicaState | null =>\n\t\tengine.state.replicas.find((r) => r.id === REPLICA_ID) ?? null;\n\n\tconst m = makeMachine<ReplicaSnapshot>({\n\t\tstep: 'idle',\n\t\tkinds,\n\t\tbusy: false,\n\t\terror: null,\n\t\treplica: current()\n\t});\n\n\t// Follow the engine: every publish (or publish failure) refreshes the entry.\n\tconst unsub = engine.subscribe(() => m.set({ replica: current() }));\n\n\t// Held for remove(): disconnect() lets the target forget its own session.\n\tlet attached: BackupTarget | null = null;\n\n\tfunction connectorFor(kind: ConnectKind): Connector | null {\n\t\tconst spec = targets[kind];\n\t\tif (spec == null) return null;\n\t\tif (typeof spec === 'function') return spec;\n\t\tif (kind === 'drive') {\n\t\t\tconst auth = spec as DriveAuth;\n\t\t\treturn () => driveConnect({ auth, kv: skv, fileName });\n\t\t}\n\t\tif (kind === 'file') {\n\t\t\treturn () => fileConnect({ kv: skv, fileName });\n\t\t}\n\t\tif (kind === 's3') {\n\t\t\tconst config = spec as S3Config; // 's3: true' goes through the form step\n\t\t\treturn () => s3Connect({ kv: skv, config });\n\t\t}\n\t\tconst config = spec as WebdavConfig; // 'webdav: true' goes through the form step\n\t\treturn () => webdavConnect({ kv: skv, config });\n\t}\n\n\tasync function run(kind: ConnectKind, connector: Connector): Promise<void> {\n\t\tm.set({ busy: true, error: null });\n\t\ttry {\n\t\t\tconst target = await connector();\n\t\t\tif (!target) {\n\t\t\t\t// Cancelled picker/consent: stay where the user was, no error.\n\t\t\t\tm.set({ busy: false });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (current()) engine.detachReplica(REPLICA_ID); // swap, never a dup-id throw\n\t\t\tengine.attachReplica(target, { id: REPLICA_ID });\n\t\t\tattached = target;\n\t\t\tawait skv.set(RECORD_KEY, { kind } satisfies ReplicaRecord);\n\t\t\tm.set({ step: 'idle', busy: false, error: null, replica: current() });\n\t\t} catch (e) {\n\t\t\tm.set({ busy: false, error: toStoreError(e) });\n\t\t}\n\t}\n\n\tasync function builtinFromSession(kind: ConnectKind): Promise<BackupTarget | null> {\n\t\tif (kind === 'drive') {\n\t\t\tconst spec = targets.drive;\n\t\t\tif (spec == null || typeof spec === 'function') return null;\n\t\t\treturn driveFromSession({ auth: spec, kv: skv, fileName });\n\t\t}\n\t\tif (kind === 'file') return fileFromSession({ kv: skv });\n\t\tif (kind === 'webdav') return webdavFromSession({ kv: skv });\n\t\treturn s3FromSession({ kv: skv });\n\t}\n\n\treturn {\n\t\tget snapshot() {\n\t\t\treturn m.snapshot;\n\t\t},\n\t\tsubscribe: m.subscribe,\n\n\t\topen() {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tm.set({ step: 'choose', error: null });\n\t\t},\n\n\t\tcancel() {\n\t\t\tm.set({ step: 'idle', busy: false, error: null });\n\t\t},\n\n\t\tpick(kind) {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tconst spec = targets[kind];\n\t\t\tif (spec == null) return;\n\t\t\tif (kind === 'webdav' && spec === true) {\n\t\t\t\tm.set({ step: 'form-webdav', error: null });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (kind === 's3' && spec === true) {\n\t\t\t\tm.set({ step: 'form-s3', error: null });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst connector = connectorFor(kind);\n\t\t\tif (connector) void run(kind, connector);\n\t\t},\n\n\t\tsubmitWebdav(config) {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tvoid run('webdav', () => webdavConnect({ kv: skv, config }));\n\t\t},\n\n\t\tsubmitS3(config) {\n\t\t\tif (m.snapshot.busy) return;\n\t\t\tvoid run('s3', () => s3Connect({ kv: skv, config }));\n\t\t},\n\n\t\tasync remove() {\n\t\t\tconst target = attached;\n\t\t\tattached = null;\n\t\t\tif (current()) engine.detachReplica(REPLICA_ID);\n\t\t\tawait skv.del(RECORD_KEY);\n\t\t\t// Forget locally only - a BackupTarget's disconnect never deletes\n\t\t\t// remote data, so the copy stays where it is for a manual recovery.\n\t\t\tawait target?.disconnect().catch(() => undefined);\n\t\t\tm.set({ step: 'idle', busy: false, error: null, replica: current() });\n\t\t},\n\n\t\tasync restore() {\n\t\t\ttry {\n\t\t\t\tif (current()) return;\n\t\t\t\tconst record = await skv.get<ReplicaRecord>(RECORD_KEY);\n\t\t\t\tif (!record) return;\n\t\t\t\tconst target =\n\t\t\t\t\t(await options.restoreTarget?.(record.kind)) ?? (await builtinFromSession(record.kind));\n\t\t\t\tif (!target) return; // unreachable or custom kind: retry next boot\n\t\t\t\tengine.attachReplica(target, { id: REPLICA_ID });\n\t\t\t\tattached = target;\n\t\t\t\tm.set({ replica: current() });\n\t\t\t} catch {\n\t\t\t\t// Silent reboot by contract: the record stays, the next boot retries.\n\t\t\t}\n\t\t},\n\n\t\tdispose() {\n\t\t\tunsub();\n\t\t}\n\t};\n}\n"]}

package/dist/groups.d.ts

@@ -1,5 +1,5 @@
-import { G as GroupIdentity, K as KV } from './cache-De5_sALA.js';
-export { a as GROUP_KEYING, b as GroupManifest, c as GroupMember, S as SignedManifest, g as generateIdentity, d as groupCryptoAvailable, k as keyId, n as newGroupId, o as openManifest, p as publicIdentity, s as signManifest } from './cache-De5_sALA.js';
+import { G as GroupIdentity, K as KV } from './cache-ilsK3Tki.js';
+export { a as GROUP_KEYING, b as GroupManifest, c as GroupMember, S as SignedManifest, g as generateIdentity, d as groupCryptoAvailable, k as keyId, n as newGroupId, o as openManifest, p as publicIdentity, s as signManifest } from './cache-ilsK3Tki.js';
 
 interface IdentityVault {
     /** The stored identity, or null when none exists yet. On a protected

package/dist/households.d.ts

@@ -1,5 +1,5 @@
-import { B as BackupTarget, g as PeerSource, L as LocalStore } from './store-2RnED1Vq.js';
-import { K as KV } from './cache-De5_sALA.js';
+import { B as BackupTarget, g as PeerSource, L as LocalStore } from './store-C20_6JBo.js';
+import { K as KV } from './cache-ilsK3Tki.js';
 import './sync.js';
 
 /** Why a code was refused. `malformed` covers bad transport, wrong structure or

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { n as Snapshot, E as EncodeOptions, H as Header, e as PasswordPolicy, B as BackupTarget, q as StatusDescriptor, t as StoreError, c as LocalStoreState, L as LocalStore } from './store-2RnED1Vq.js';
-export { d as Mode, P as PasswordCheck, f as PasswordRequirement, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, o as SnapshotFile, p as StatusAction, s as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-2RnED1Vq.js';
-import { L as LocalCache, K as KV } from './cache-De5_sALA.js';
+import { n as Snapshot, E as EncodeOptions, H as Header, e as PasswordPolicy, B as BackupTarget, q as StatusDescriptor, t as StoreError, c as LocalStoreState, L as LocalStore } from './store-C20_6JBo.js';
+export { d as Mode, P as PasswordCheck, f as PasswordRequirement, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, o as SnapshotFile, p as StatusAction, s as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-C20_6JBo.js';
+import { L as LocalCache, K as KV } from './cache-ilsK3Tki.js';
 import { SyncConfig } from './sync.js';
-import { D as DriveAuth, W as WebdavConfig, S as S3Config } from './drive-DNiDXBDe.js';
-export { c as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-DsXG7QW7.js';
+import { D as DriveAuth, W as WebdavConfig, S as S3Config } from './drive-BhiTdk-Q.js';
+export { c as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-6OALceUy.js';
 
 declare const BACKUP_EXTENSION = ".zip";
 declare const BACKUP_MIME = "application/zip";

package/dist/index.js

@@ -1,5 +1,5 @@
-import { indexedDbCache, memoryCache, isLockableCache, createLocalStore } from './chunk-XI3MGK4M.js';
-export { gisDriveAuth } from './chunk-XI3MGK4M.js';
+import { indexedDbCache, memoryCache, isLockableCache, createLocalStore } from './chunk-FL66ACWR.js';
+export { gisDriveAuth } from './chunk-FL66ACWR.js';
 import { saveToDisk } from './chunk-UWVAKBU4.js';
 export { pickFromDisk, saveToDisk } from './chunk-UWVAKBU4.js';
 import './chunk-SKWHKM25.js';

package/dist/{local-DsXG7QW7.d.ts → local-6OALceUy.d.ts}

@@ -1,5 +1,5 @@
-import { n as Snapshot, E as EncodeOptions, H as Header } from './store-2RnED1Vq.js';
-import { D as DriveAuth } from './drive-DNiDXBDe.js';
+import { n as Snapshot, E as EncodeOptions, H as Header } from './store-C20_6JBo.js';
+import { D as DriveAuth } from './drive-BhiTdk-Q.js';
 
 /** Serialize a snapshot to a portable backup blob (compressed; encrypted if a password is given). */
 declare function exportSnapshot(snapshot: Snapshot, opts: EncodeOptions): Promise<Blob>;

package/dist/{store-2RnED1Vq.d.ts → store-C20_6JBo.d.ts}

@@ -1,4 +1,4 @@
-import { G as GroupIdentity, S as SignedManifest, L as LocalCache } from './cache-De5_sALA.js';
+import { G as GroupIdentity, S as SignedManifest, L as LocalCache } from './cache-ilsK3Tki.js';
 import { CollectionChanges, Conflict, SyncConfig } from './sync.js';
 
 /** A binary attachment (image, PDF, any bytes). */

package/dist/widgets.d.ts

@@ -1,9 +1,9 @@
-import { FlowHost, ConnectTargets, ConnectFlowOptions, ConnectKind, ConnectFlow, ShareEngine, ShareLevel, ShareFlow, JoinEngine, JoinFlow, ReplicaFlow } from './flows.js';
+import { S as StoreLike, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow, d as ShareEngine, e as ShareLevel, f as ShareFlow, J as JoinEngine, g as JoinFlow, R as ReplicaFlow } from './flows-BBMVdP1S.js';
 import { BackupsManager } from './backups.js';
-import './store-2RnED1Vq.js';
-import './cache-De5_sALA.js';
+import './store-C20_6JBo.js';
+import './cache-ilsK3Tki.js';
 import './sync.js';
-import './drive-DNiDXBDe.js';
+import './drive-BhiTdk-Q.js';
 import './machine-ALMkT3mk.js';
 
 /** Flat key -> string map; widgets merge a partial override over EN defaults. */
@@ -84,12 +84,8 @@ declare class SelfstoreConnectElement extends FlowWidget {
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
     /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
-    get store(): FlowHost | {
-        flowHost: FlowHost;
-    } | null;
-    set store(v: FlowHost | {
-        flowHost: FlowHost;
-    } | null);
+    get store(): StoreLike | null;
+    set store(v: StoreLike | null);
     get targets(): ConnectTargets | null;
     set targets(v: ConnectTargets | null);
     get options(): ConnectFlowOptions;
@@ -264,12 +260,8 @@ declare class SelfstoreStatusElement extends FlowWidget {
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
     /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
-    get store(): FlowHost | {
-        flowHost: FlowHost;
-    } | null;
-    set store(v: FlowHost | {
-        flowHost: FlowHost;
-    } | null);
+    get store(): StoreLike | null;
+    set store(v: StoreLike | null);
     /** 'row' (dot + text + action) or 'dot' (the dot alone). Also the attribute. */
     get variant(): 'row' | 'dot';
     set variant(v: 'row' | 'dot' | null);
@@ -417,10 +409,104 @@ declare class SelfstoreBackupsElement extends FlowWidget {
     private closePw;
 }
 
+/**
+ * <selfstore-gate>: the first-run screen that asks where the data should live,
+ * before the app has a durable home. Data that lives only in a browser profile
+ * dies with it, so the question is worth a screen of its own rather than a line
+ * buried in a settings pane.
+ *
+ * It is a frame around <selfstore-connect>, and it decides ONE thing the plain
+ * connect widget cannot: whether to be on screen at all. That condition is the
+ * engine's own `status.action === 'choose-destination'`, which covers both an
+ * ephemeral store and one still on the device-only cache, and which ranks a
+ * destination needing attention above a missing one - so the gate never demands
+ * a choice when the real problem is a broken connection.
+ *
+ *   import { defineSelfstoreWidgets } from 'selfstore/widgets';
+ *   defineSelfstoreWidgets();
+ *
+ *   const el = document.querySelector('selfstore-gate');
+ *   el.store = store;
+ *   el.targets = { file: true, webdav: true };
+ *
+ * The host's own chrome goes in the light DOM through three slots: `brand`
+ * (above the title), `extra` (under the destinations, e.g. a link to a demo)
+ * and `footer` (the app's usual foot). Slotted nodes are never rebuilt.
+ */
+
+declare class SelfstoreGateElement extends FlowWidget {
+    #private;
+    static get observedAttributes(): string[];
+    protected defaults(): WidgetLabels;
+    /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
+    get store(): StoreLike | null;
+    set store(v: StoreLike | null);
+    /** The destinations to offer, exactly as <selfstore-connect> takes them.
+     *  Read when the gate opens; a change while it is open waits for the next
+     *  opening rather than rebuilding a journey under the user. */
+    get targets(): ConnectTargets | null;
+    set targets(v: ConnectTargets | null);
+    /** Options for the connect flow (`defaultResolution`, `password`, ...).
+     *  Same timing as `targets`. */
+    get options(): ConnectFlowOptions;
+    set options(v: ConnectFlowOptions);
+    get icons(): Partial<Record<ConnectKind, string>>;
+    set icons(v: Partial<Record<ConnectKind, string>> | null);
+    get recommended(): ConnectKind | null;
+    set recommended(v: ConnectKind | null);
+    get advanced(): ConnectKind[];
+    set advanced(v: ConnectKind[] | null);
+    get webdavPresets(): WebdavPreset[];
+    set webdavPresets(v: WebdavPreset[] | null);
+    /** Whether the app has finished booting. Leave it true for a plain drop-in;
+     *  an app that restores its destination asynchronously sets it false until
+     *  that settles, so a connected user never glimpses the gate on the way in.
+     *  Also the `armed` attribute (`armed="false"` to hold it shut). */
+    get armed(): boolean;
+    set armed(v: boolean);
+    /** Whether to offer the way out (device-only is a working mode, just a
+     *  fragile one). Also the `deferrable` attribute. Part of the frame, so it
+     *  follows the same timing as `targets`: read when the gate opens. */
+    get deferrable(): boolean;
+    set deferrable(v: boolean);
+    /** Set once the user chose to stay device-only; keeps the gate shut for the
+     *  rest of the session. Assign false to bring it back (a "choose a
+     *  destination" entry somewhere else in the app). */
+    get deferred(): boolean;
+    set deferred(v: boolean);
+    /** Whether the gate is currently on screen. */
+    get open(): boolean;
+    /** The connect element the gate built, for programmatic control (its own
+     *  `flow` included). Null while the gate is shut. */
+    get connect(): SelfstoreConnectElement | null;
+    constructor();
+    attributeChangedCallback(name: string, _old: string | null, value: string | null): void;
+    connectedCallback(): void;
+    private host;
+    private wire;
+    /** The library already derives "no durable home yet" - asking the target
+     *  kind by hand would miss the ranking and nag over a broken connection. */
+    private shouldOpen;
+    private sync;
+    /** Rebuilding the frame would re-append the child connect element, and a
+     *  custom element that leaves the DOM and comes back rebuilds its flow: a
+     *  journey in progress would be dropped on the floor. So while the gate is
+     *  open the frame stands and late cosmetics are pushed into the child.
+     *  Set `labels` before `store` for them to reach the frame's own copy. */
+    protected rerender(): void;
+    /** The gate's title already asks the question; the child's heading would
+     *  repeat it. An empty label removes a heading, and a host that wants it
+     *  back just says so in its own map. */
+    private childLabels;
+    private buildConnect;
+    private deferButton;
+    protected view(into: HTMLElement): void;
+}
+
 /** Register the elements as <PREFIX-connect>, <PREFIX-share>, <PREFIX-join>,
- *  <PREFIX-status> and <PREFIX-backups> (default prefix 'selfstore'). Safe to
- *  call twice; throws in environments without custom elements (browser code
- *  only). */
+ *  <PREFIX-status>, <PREFIX-backups> and <PREFIX-gate> (default prefix
+ *  'selfstore'). Safe to call twice; throws in environments without custom
+ *  elements (browser code only). */
 declare function defineSelfstoreWidgets(prefix?: string): void;
 
-export { type BackupsAction, FlowWidget, SelfstoreBackupsElement, SelfstoreConnectElement, SelfstoreJoinElement, SelfstoreShareElement, SelfstoreStatusElement, type ShareAction, type WebdavPreset, type WidgetLabels, defineSelfstoreWidgets };
+export { type BackupsAction, FlowWidget, SelfstoreBackupsElement, SelfstoreConnectElement, SelfstoreGateElement, SelfstoreJoinElement, SelfstoreShareElement, SelfstoreStatusElement, type ShareAction, type WebdavPreset, type WidgetLabels, defineSelfstoreWidgets };