selfstore 1.6.2 → 1.6.4

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { n as Snapshot, E as EncodeOptions, H as Header, e as PasswordPolicy, B as BackupTarget, q as StatusDescriptor, t as StoreError, c as LocalStoreState, L as LocalStore } from './store-C20_6JBo.js';
-export { d as Mode, P as PasswordCheck, f as PasswordRequirement, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, o as SnapshotFile, p as StatusAction, s as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-C20_6JBo.js';
+import { n as Snapshot, E as EncodeOptions, H as Header, e as PasswordPolicy, B as BackupTarget, q as StatusDescriptor, t as StoreError, c as LocalStoreState, L as LocalStore } from './store-BQhcwSbe.js';
+export { d as Mode, P as PasswordCheck, f as PasswordRequirement, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, o as SnapshotFile, p as StatusAction, s as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-BQhcwSbe.js';
 import { L as LocalCache, K as KV } from './cache-ilsK3Tki.js';
 import { SyncConfig } from './sync.js';
-import { D as DriveAuth, W as WebdavConfig, S as S3Config } from './drive-BhiTdk-Q.js';
-export { c as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-CwJPULbf.js';
+import { D as DriveAuth, W as WebdavConfig, S as S3Config } from './drive-CO_mNEgi.js';
+export { c as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-hr_BimjH.js';
 
 declare const BACKUP_EXTENSION = ".zip";
 declare const BACKUP_MIME = "application/zip";
@@ -44,6 +44,21 @@ declare class EncryptedBackupBuilder extends BackupBuilder {
     constructor(snapshot: Snapshot, opts: EncodeOptions);
     /** Brand the README shipped inside the encrypted ZIP. */
     withReadme(text: string): EncryptedBackupBuilder;
+    /**
+     * A second secret that also opens this backup - a recovery code the user
+     * printed and put away.
+     *
+     * A password that only lives in one person's memory is the likeliest way a
+     * local-first backup dies: no server can reset it, so the day it is
+     * forgotten the data is gone for good. The envelope has always held several
+     * key slots (see `keys[]` in the header); this exposes them where a backup
+     * is actually written. Each secret wraps the SAME data key, so either one
+     * opens the file and neither can read the other.
+     *
+     * Call it more than once for more than one recovery secret. Reading needs no
+     * change: `restore(...).withPassword(code)` already tries every slot.
+     */
+    alsoOpenedWith(secret: string): EncryptedBackupBuilder;
 }
 declare class RestoreBuilder {
     private readonly input;

package/dist/index.js

@@ -1,11 +1,11 @@
-import { indexedDbCache, memoryCache, isLockableCache, createLocalStore } from './chunk-5QGCGAAI.js';
-export { gisDriveAuth } from './chunk-5QGCGAAI.js';
-import { saveToDisk } from './chunk-GZBCJXAX.js';
-export { pickFromDisk, saveToDisk } from './chunk-GZBCJXAX.js';
+import { indexedDbCache, memoryCache, isLockableCache, createLocalStore } from './chunk-5L7JC2SH.js';
+export { gisDriveAuth } from './chunk-5L7JC2SH.js';
+import { saveToDisk } from './chunk-5W2G6DWU.js';
+export { pickFromDisk, saveToDisk } from './chunk-5W2G6DWU.js';
 import './chunk-SKWHKM25.js';
 import { fromSession, fromSession2, fromSession3, connect4, connect3, isSupported, connect2, connect } from './chunk-WF732QXN.js';
-import { restore } from './chunk-2JJYLXAC.js';
-export { BACKUP_EXTENSION, BACKUP_MIME, backup, changePassword, checkPasswordPolicy, restore } from './chunk-2JJYLXAC.js';
+import { restore } from './chunk-FEJC2WGL.js';
+export { BACKUP_EXTENSION, BACKUP_MIME, backup, changePassword, checkPasswordPolicy, restore } from './chunk-FEJC2WGL.js';
 import './chunk-KHER6MWR.js';
 import './chunk-QBCU7OOP.js';
 import './chunk-6746AL4I.js';

package/dist/local-YUWUSQ5O.js

@@ -0,0 +1,7 @@
+export { downloadBlob, pickFromDisk, pickSaveHandle, saveToDisk, writeToHandle } from './chunk-5W2G6DWU.js';
+import './chunk-FEJC2WGL.js';
+import './chunk-KHER6MWR.js';
+import './chunk-6746AL4I.js';
+import './chunk-VBFMMR7Q.js';
+//# sourceMappingURL=local-YUWUSQ5O.js.map
+//# sourceMappingURL=local-YUWUSQ5O.js.map

package/dist/{local-F2NNXNBS.js.map → local-YUWUSQ5O.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"local-F2NNXNBS.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"local-YUWUSQ5O.js"}

package/dist/{local-CwJPULbf.d.ts → local-hr_BimjH.d.ts}

@@ -1,5 +1,5 @@
-import { n as Snapshot, E as EncodeOptions, H as Header } from './store-C20_6JBo.js';
-import { D as DriveAuth } from './drive-BhiTdk-Q.js';
+import { n as Snapshot, E as EncodeOptions, H as Header } from './store-BQhcwSbe.js';
+import { D as DriveAuth } from './drive-CO_mNEgi.js';
 
 /** Serialize a snapshot to a portable backup blob (compressed; encrypted if a password is given). */
 declare function exportSnapshot(snapshot: Snapshot, opts: EncodeOptions): Promise<Blob>;

package/dist/{store-C20_6JBo.d.ts → store-BQhcwSbe.d.ts}

@@ -138,6 +138,10 @@ interface EncodeOptions {
         dataKey: Uint8Array;
         slots: KeySlot[];
     };
+    /** Extra secrets that ALSO open this backup, each getting its own key slot
+     *  around the same data key - typically a recovery code the user printed.
+     *  Only meaningful alongside `password`. */
+    extraSecrets?: string[];
 }
 
 type SelfstoreErrorCode = 'BAD_FORMAT' | 'UNSUPPORTED_VERSION' | 'PASSWORD_REQUIRED' | 'DECRYPT_FAILED' | 'TOO_LARGE' | 'AUTH_EXPIRED' | 'TARGET_UNAVAILABLE' | 'TARGET_WRITE_FAILED' | 'TARGET_GONE' | 'NOT_CONNECTED' | 'WEAK_PASSWORD' | 'ENCRYPTION_REQUIRED' | 'UNEXPECTEDLY_UNENCRYPTED' | 'SCHEMA_TOO_NEW' | 'IDENTITY_REQUIRED' | 'SIGNATURE_INVALID' | 'NOT_A_RECIPIENT' | 'MANIFEST_ROLLBACK';

package/dist/widgets.d.ts

@@ -1,9 +1,9 @@
-import { S as StoreLike, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow, d as ShareEngine, e as ShareLevel, f as ShareFlow, J as JoinEngine, g as JoinFlow, R as ReplicaFlow } from './flows-BBMVdP1S.js';
+import { S as StoreLike, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow, d as ShareEngine, e as ShareLevel, f as ShareFlow, J as JoinEngine, g as JoinFlow, R as ReplicaFlow } from './flows-DMy_Hbf-.js';
 import { BackupsManager } from './backups.js';
-import './store-C20_6JBo.js';
+import './store-BQhcwSbe.js';
 import './cache-ilsK3Tki.js';
 import './sync.js';
-import './drive-BhiTdk-Q.js';
+import './drive-CO_mNEgi.js';
 import './machine-ALMkT3mk.js';
 
 /** Flat key -> string map; widgets merge a partial override over EN defaults. */

package/dist/widgets.js

@@ -1,6 +1,6 @@
-import { connectFlow, shareFlow, joinFlow } from './chunk-MNODL7RK.js';
+import { connectFlow, shareFlow, joinFlow } from './chunk-D4FL5IPE.js';
 import { isOpenSupported } from './chunk-WF732QXN.js';
-import './chunk-2JJYLXAC.js';
+import './chunk-FEJC2WGL.js';
 import './chunk-43BJDRPT.js';
 import './chunk-KHER6MWR.js';
 import './chunk-QBCU7OOP.js';
@@ -149,7 +149,7 @@ input[part~='input']:focus { outline: 2px solid var(--_accent); outline-offset:
 /* A field that keeps its name visible above the box, placeholders being hints
    and not labels. */
 label[part~='labelled'] { display: flex; flex-direction: column; gap: 0.2rem; width: 100%; }
-label[part~='labelled'] [part~='label'] { font-size: 0.85em; color: var(--_muted); }
+label[part~='labelled'] [part~='label'] { font-size: 0.85em; color: var(--_ink-dim); }
 /* A text input with a trailing button (the password eye) tucked inside it. */
 [part~='field'] { position: relative; display: flex; align-items: center; width: 100%; }
 [part~='field'] input[part~='input'] { padding-right: 2.4rem; }