selfstore 1.6.7 → 1.6.9

package/dist/{drive-Cf_ulDfn.d.ts → drive-DF08V8-L.d.ts}

@@ -1,4 +1,4 @@
-import { B as BackupTarget, P as PeerSource } from './store-CSxHlrov.js';
+import { B as BackupTarget, P as PeerSource } from './store-CbGrlMME.js';
 import { K as KV } from './cache-ilsK3Tki.js';
 
 /**

package/dist/{flows-BIWaqRUz.d.ts → flows-dwgDgv6_.d.ts}

@@ -1,6 +1,6 @@
-import { t as StoreError, B as BackupTarget, L as LocalStore, k as ReplicaState } from './store-CSxHlrov.js';
+import { t as StoreError, B as BackupTarget, L as LocalStore, k as ReplicaState } from './store-CbGrlMME.js';
 import { K as KV } from './cache-ilsK3Tki.js';
-import { W as WebdavConfig, S as S3Config, D as DriveAuth } from './drive-Cf_ulDfn.js';
+import { W as WebdavConfig, S as S3Config, D as DriveAuth } from './drive-DF08V8-L.js';
 import { F as FlowStore } from './machine-ALMkT3mk.js';
 
 type ConnectKind = 'drive' | 'file' | 'webdav' | 's3';

package/dist/flows.d.ts

@@ -1,6 +1,6 @@
-export { c as ConnectFlow, a as ConnectFlowOptions, h as ConnectFlowOutcome, b as ConnectKind, i as ConnectResolution, j as ConnectSnapshot, k as ConnectStep, C as ConnectTargets, l as Connector, F as FlowHost, J as JoinEngine, g as JoinFlow, m as JoinOutcome, n as JoinPreview, o as JoinSnapshot, p as JoinStep, q as REPLICA_ID, R as ReplicaFlow, r as ReplicaFlowOptions, s as ReplicaSnapshot, t as ReplicaStep, u as ShareBusy, d as ShareEngine, f as ShareFlow, e as ShareLevel, v as ShareLinkInfo, w as ShareMemberInfo, x as ShareSnapshot, y as connectFlow, z as joinFlow, A as replicaFlow, B as shareFlow } from './flows-BIWaqRUz.js';
+export { c as ConnectFlow, a as ConnectFlowOptions, h as ConnectFlowOutcome, b as ConnectKind, i as ConnectResolution, j as ConnectSnapshot, k as ConnectStep, C as ConnectTargets, l as Connector, F as FlowHost, J as JoinEngine, g as JoinFlow, m as JoinOutcome, n as JoinPreview, o as JoinSnapshot, p as JoinStep, q as REPLICA_ID, R as ReplicaFlow, r as ReplicaFlowOptions, s as ReplicaSnapshot, t as ReplicaStep, u as ShareBusy, d as ShareEngine, f as ShareFlow, e as ShareLevel, v as ShareLinkInfo, w as ShareMemberInfo, x as ShareSnapshot, y as connectFlow, z as joinFlow, A as replicaFlow, B as shareFlow } from './flows-dwgDgv6_.js';
 export { F as FlowStore, w as withDeadline } from './machine-ALMkT3mk.js';
-import './store-CSxHlrov.js';
+import './store-CbGrlMME.js';
 import './cache-ilsK3Tki.js';
 import './sync.js';
-import './drive-Cf_ulDfn.js';
+import './drive-DF08V8-L.js';

package/dist/flows.js

@@ -1,12 +1,12 @@
-export { connectFlow, joinFlow, shareFlow } from './chunk-XN2J35I5.js';
-import { connect, connect2, connect4, connect3, fromSession, fromSession2, fromSession3, fromSession4 } from './chunk-WF732QXN.js';
-import './chunk-JGDX663H.js';
-import { makeMachine, toStoreError } from './chunk-43BJDRPT.js';
-export { withDeadline } from './chunk-43BJDRPT.js';
-import './chunk-KHER6MWR.js';
+export { connectFlow, joinFlow, shareFlow } from './chunk-L6PT3NKO.js';
+import { connect, connect2, connect4, connect3, fromSession, fromSession2, fromSession3, fromSession4 } from './chunk-JQ22IG2T.js';
+import './chunk-5SII5YHE.js';
+import { makeMachine, toStoreError } from './chunk-OIAXYI35.js';
+export { withDeadline } from './chunk-OIAXYI35.js';
+import './chunk-CT2HTWA7.js';
 import './chunk-QBCU7OOP.js';
-import './chunk-6746AL4I.js';
-import './chunk-VBFMMR7Q.js';
+import './chunk-CM3HSBCE.js';
+import './chunk-SFF7KKM4.js';
 
 // src/flows/replica.ts
 var REPLICA_ID = "replica";

package/dist/groups.js

@@ -1,8 +1,8 @@
-import { generateIdentity } from './chunk-KHER6MWR.js';
-export { GROUP_KEYING, generateIdentity, groupCryptoAvailable, keyId, newGroupId, openManifest, publicIdentity, signManifest } from './chunk-KHER6MWR.js';
+import { generateIdentity } from './chunk-CT2HTWA7.js';
+export { GROUP_KEYING, generateIdentity, groupCryptoAvailable, keyId, newGroupId, openManifest, publicIdentity, signManifest } from './chunk-CT2HTWA7.js';
 import { seal, isEnvelope, unseal, newDeviceKey } from './chunk-QBCU7OOP.js';
-import { assertKdfBounds, deriveKey, freshKdfParams } from './chunk-6746AL4I.js';
-import { SelfstoreError } from './chunk-VBFMMR7Q.js';
+import { assertKdfBounds, deriveKey, freshKdfParams } from './chunk-CM3HSBCE.js';
+import { SelfstoreError } from './chunk-SFF7KKM4.js';
 
 // src/persistence/identity.ts
 var VAULT_KEY = "groupVaultKey";

package/dist/households.d.ts

@@ -1,4 +1,4 @@
-import { B as BackupTarget, P as PeerSource, L as LocalStore } from './store-CSxHlrov.js';
+import { B as BackupTarget, P as PeerSource, L as LocalStore } from './store-CbGrlMME.js';
 import { K as KV } from './cache-ilsK3Tki.js';
 import './sync.js';
 

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { n as Snapshot, E as EncodeOptions, H as Header, f as PasswordPolicy, B as BackupTarget, q as StatusDescriptor, t as StoreError, c as LocalStoreState, L as LocalStore } from './store-CSxHlrov.js';
-export { d as Mode, e as PasswordCheck, g as PasswordRequirement, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, o as SnapshotFile, p as StatusAction, s as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-CSxHlrov.js';
+import { n as Snapshot, E as EncodeOptions, H as Header, f as PasswordPolicy, B as BackupTarget, q as StatusDescriptor, t as StoreError, c as LocalStoreState, L as LocalStore } from './store-CbGrlMME.js';
+export { d as Mode, e as PasswordCheck, g as PasswordRequirement, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, o as SnapshotFile, p as StatusAction, s as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-CbGrlMME.js';
 import { L as LocalCache, K as KV } from './cache-ilsK3Tki.js';
 import { SyncConfig } from './sync.js';
-import { D as DriveAuth, W as WebdavConfig, S as S3Config } from './drive-Cf_ulDfn.js';
-export { c as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-DM1WxzUX.js';
+import { D as DriveAuth, W as WebdavConfig, S as S3Config } from './drive-DF08V8-L.js';
+export { c as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-Cx655vG6.js';
 
 declare const BACKUP_EXTENSION = ".zip";
 declare const BACKUP_MIME = "application/zip";
@@ -24,6 +24,20 @@ declare class BackupBuilder {
     constructor(snapshot: Snapshot, opts: EncodeOptions);
     /** Encrypt the backup (AES-256-GCM over an Argon2id-derived key). */
     encryptedWith(password: string): EncryptedBackupBuilder;
+    /**
+     * Read the backup back before handing it over, and throw VERIFY_FAILED if it
+     * does not hold what went in.
+     *
+     * A backup encrypted with a key nobody can reproduce, truncated, or built
+     * from an empty snapshot looks exactly like a good one: right name, right
+     * date, plausible size. The difference only shows up on the day of the
+     * disaster, when it is too late to make another. The only way to know is to
+     * open it, and it costs one decrypt of data the app already holds.
+     *
+     * Applies to every terminal below, so a host cannot verify and then write a
+     * different set of bytes by accident.
+     */
+    verified(): BackupBuilder;
     /** The backup as raw bytes. */
     toBytes(): Promise<Uint8Array>;
     /** The backup as a Blob, ready to upload or hand to a save dialog. */
@@ -42,6 +56,8 @@ declare class BackupBuilder {
 }
 declare class EncryptedBackupBuilder extends BackupBuilder {
     constructor(snapshot: Snapshot, opts: EncodeOptions);
+    /** Same guarantee, keeping the encrypted chain's own links reachable. */
+    verified(): EncryptedBackupBuilder;
     /** Brand the README shipped inside the encrypted ZIP. */
     withReadme(text: string): EncryptedBackupBuilder;
     /**

package/dist/index.js

@@ -1,16 +1,16 @@
-import { indexedDbCache, memoryCache, isLockableCache, createLocalStore } from './chunk-CB24V3VH.js';
-export { gisDriveAuth } from './chunk-CB24V3VH.js';
-import { saveToDisk } from './chunk-X2MCHPSY.js';
-export { pickFromDisk, saveToDisk } from './chunk-X2MCHPSY.js';
+import { indexedDbCache, memoryCache, isLockableCache, createLocalStore } from './chunk-ZU6I247L.js';
+export { gisDriveAuth } from './chunk-ZU6I247L.js';
+import { saveToDisk } from './chunk-XEIT5LET.js';
+export { pickFromDisk, saveToDisk } from './chunk-XEIT5LET.js';
 import './chunk-SKWHKM25.js';
-import { fromSession, fromSession2, fromSession3, connect4, connect3, isSupported, connect2, connect } from './chunk-WF732QXN.js';
-import { restore } from './chunk-JGDX663H.js';
-export { BACKUP_EXTENSION, BACKUP_MIME, backup, changePassword, checkPasswordPolicy, restore } from './chunk-JGDX663H.js';
-import './chunk-KHER6MWR.js';
+import { fromSession, fromSession2, fromSession3, connect4, connect3, isSupported, connect2, connect } from './chunk-JQ22IG2T.js';
+import { restore } from './chunk-5SII5YHE.js';
+export { BACKUP_EXTENSION, BACKUP_MIME, backup, changePassword, checkPasswordPolicy, restore } from './chunk-5SII5YHE.js';
+import './chunk-CT2HTWA7.js';
 import './chunk-QBCU7OOP.js';
-import './chunk-6746AL4I.js';
-import { SelfstoreError } from './chunk-VBFMMR7Q.js';
-export { SelfstoreError, errorLabelKey, isSelfstoreError } from './chunk-VBFMMR7Q.js';
+import './chunk-CM3HSBCE.js';
+import { SelfstoreError } from './chunk-SFF7KKM4.js';
+export { SelfstoreError, errorLabelKey, isSelfstoreError } from './chunk-SFF7KKM4.js';
 
 // src/simple/simple.ts
 function idFieldOf(sync, collection) {

package/dist/{local-DM1WxzUX.d.ts → local-Cx655vG6.d.ts}

@@ -1,5 +1,5 @@
-import { n as Snapshot, E as EncodeOptions, H as Header } from './store-CSxHlrov.js';
-import { D as DriveAuth } from './drive-Cf_ulDfn.js';
+import { n as Snapshot, E as EncodeOptions, H as Header } from './store-CbGrlMME.js';
+import { D as DriveAuth } from './drive-DF08V8-L.js';
 
 /** Serialize a snapshot to a portable backup blob (compressed; encrypted if a password is given). */
 declare function exportSnapshot(snapshot: Snapshot, opts: EncodeOptions): Promise<Blob>;

package/dist/local-ERVES7FZ.js

@@ -0,0 +1,7 @@
+export { datedName, downloadBlob, pickFromDisk, pickSaveHandle, saveToDisk, writeToHandle } from './chunk-XEIT5LET.js';
+import './chunk-5SII5YHE.js';
+import './chunk-CT2HTWA7.js';
+import './chunk-CM3HSBCE.js';
+import './chunk-SFF7KKM4.js';
+//# sourceMappingURL=local-ERVES7FZ.js.map
+//# sourceMappingURL=local-ERVES7FZ.js.map

package/dist/{local-4ESDP4TU.js.map → local-ERVES7FZ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"local-4ESDP4TU.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"local-ERVES7FZ.js"}

package/dist/{store-CSxHlrov.d.ts → store-CbGrlMME.d.ts}

@@ -138,13 +138,18 @@ interface EncodeOptions {
         dataKey: Uint8Array;
         slots: KeySlot[];
     };
+    /** Read the bytes back before returning them, and throw VERIFY_FAILED if
+     *  they do not hold what went in. Carried in the options rather than on the
+     *  builder so it survives every link of the chain: set on one link and lost
+     *  by the next is the silent failure this whole feature exists to prevent. */
+    verify?: boolean;
     /** Extra secrets that ALSO open this backup, each getting its own key slot
      *  around the same data key - typically a recovery code the user printed.
      *  Only meaningful alongside `password`. */
     extraSecrets?: string[];
 }
 
-type SelfstoreErrorCode = 'BAD_FORMAT' | 'UNSUPPORTED_VERSION' | 'PASSWORD_REQUIRED' | 'DECRYPT_FAILED' | 'TOO_LARGE' | 'AUTH_EXPIRED' | 'TARGET_UNAVAILABLE' | 'TARGET_WRITE_FAILED' | 'TARGET_GONE' | 'NOT_CONNECTED' | 'WEAK_PASSWORD' | 'ENCRYPTION_REQUIRED' | 'UNEXPECTEDLY_UNENCRYPTED' | 'SCHEMA_TOO_NEW' | 'IDENTITY_REQUIRED' | 'SIGNATURE_INVALID' | 'NOT_A_RECIPIENT' | 'MANIFEST_ROLLBACK';
+type SelfstoreErrorCode = 'BAD_FORMAT' | 'UNSUPPORTED_VERSION' | 'PASSWORD_REQUIRED' | 'DECRYPT_FAILED' | 'TOO_LARGE' | 'VERIFY_FAILED' | 'AUTH_EXPIRED' | 'TARGET_UNAVAILABLE' | 'TARGET_WRITE_FAILED' | 'TARGET_GONE' | 'NOT_CONNECTED' | 'WEAK_PASSWORD' | 'ENCRYPTION_REQUIRED' | 'UNEXPECTEDLY_UNENCRYPTED' | 'SCHEMA_TOO_NEW' | 'IDENTITY_REQUIRED' | 'SIGNATURE_INVALID' | 'NOT_A_RECIPIENT' | 'MANIFEST_ROLLBACK';
 /**
  * i18n key for an error code: lower-camel-cased under `error.`, e.g.
  * 'error.authExpired'. The library ships the key, the app owns the copy;

package/dist/widgets.d.ts

@@ -1,9 +1,9 @@
-import { S as StoreLike, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow, d as ShareEngine, e as ShareLevel, f as ShareFlow, J as JoinEngine, g as JoinFlow, R as ReplicaFlow } from './flows-BIWaqRUz.js';
+import { S as StoreLike, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow, d as ShareEngine, e as ShareLevel, f as ShareFlow, J as JoinEngine, g as JoinFlow, R as ReplicaFlow } from './flows-dwgDgv6_.js';
 import { BackupsManager } from './backups.js';
-import './store-CSxHlrov.js';
+import './store-CbGrlMME.js';
 import './cache-ilsK3Tki.js';
 import './sync.js';
-import './drive-Cf_ulDfn.js';
+import './drive-DF08V8-L.js';
 import './machine-ALMkT3mk.js';
 
 /** Flat key -> string map; widgets merge a partial override over EN defaults. */
@@ -18,12 +18,20 @@ declare abstract class FlowWidget extends HTMLElement {
     protected unsub: (() => void) | null;
     /** The widget's EN default strings; subclasses provide theirs. */
     protected abstract defaults(): WidgetLabels;
+    /** Translations shipped with the widget, by language subtag ('fr'). A widget
+     *  without any stays English until the host passes `labels`. */
+    protected packs(): Record<string, WidgetLabels>;
     /** Build the current view into the given container. */
     protected abstract view(into: HTMLElement): void;
     constructor();
     /** Partial override map, merged over the EN defaults (also the i18n hook). */
     get labels(): WidgetLabels;
     set labels(map: WidgetLabels);
+    /** The shipped translation for the page's language, if the widget has one.
+     *  An explicit `lang` on the element (or on any ancestor) wins over the
+     *  document's, which wins over the browser's, so a host that already sets
+     *  `<html lang>` gets translated copy without writing a single label. */
+    private localized;
     protected t(key: string): string;
     /** A heading an empty-string label removes: labels = { 'share.title': '' }
      *  hides that heading (the host page already says it) without a fork.
@@ -83,6 +91,7 @@ declare class SelfstoreConnectElement extends FlowWidget {
     #private;
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
+    protected packs(): Record<string, WidgetLabels>;
     /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
     get store(): StoreLike | null;
     set store(v: StoreLike | null);
@@ -169,6 +178,7 @@ declare class SelfstoreShareElement extends FlowWidget {
     #private;
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
+    protected packs(): Record<string, WidgetLabels>;
     /** The app-side transport of links and memberships (see ShareEngine). */
     get engine(): ShareEngine | null;
     set engine(v: ShareEngine | null);
@@ -238,6 +248,7 @@ declare class SelfstoreJoinElement extends FlowWidget {
     #private;
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
+    protected packs(): Record<string, WidgetLabels>;
     get engine(): JoinEngine | null;
     set engine(v: JoinEngine | null);
     /** The invitation. Also settable as the `link` attribute. */
@@ -268,6 +279,7 @@ declare class SelfstoreStatusElement extends FlowWidget {
     #private;
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
+    protected packs(): Record<string, WidgetLabels>;
     /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
     get store(): StoreLike | null;
     set store(v: StoreLike | null);
@@ -310,6 +322,7 @@ declare class SelfstoreBackupsElement extends FlowWidget {
     #private;
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
+    protected packs(): Record<string, WidgetLabels>;
     /** The headless manager this panel drives (see 'selfstore/backups'). */
     get manager(): BackupsManager | null;
     set manager(v: BackupsManager | null);
@@ -447,6 +460,7 @@ declare class SelfstoreGateElement extends FlowWidget {
     #private;
     static get observedAttributes(): string[];
     protected defaults(): WidgetLabels;
+    protected packs(): Record<string, WidgetLabels>;
     /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
     get store(): StoreLike | null;
     set store(v: StoreLike | null);

package/dist/widgets.js

@@ -1,11 +1,11 @@
-import { connectFlow, shareFlow, joinFlow } from './chunk-XN2J35I5.js';
-import { isOpenSupported } from './chunk-WF732QXN.js';
-import './chunk-JGDX663H.js';
-import './chunk-43BJDRPT.js';
-import './chunk-KHER6MWR.js';
+import { connectFlow, shareFlow, joinFlow } from './chunk-L6PT3NKO.js';
+import { isOpenSupported } from './chunk-JQ22IG2T.js';
+import './chunk-5SII5YHE.js';
+import './chunk-OIAXYI35.js';
+import './chunk-CT2HTWA7.js';
 import './chunk-QBCU7OOP.js';
-import './chunk-6746AL4I.js';
-import './chunk-VBFMMR7Q.js';
+import './chunk-CM3HSBCE.js';
+import './chunk-SFF7KKM4.js';
 
 // src/widgets/base.ts
 var baseStyles = `
@@ -343,6 +343,11 @@ var FlowWidget = class extends HTMLElement {
   body;
   overrides = {};
   unsub = null;
+  /** Translations shipped with the widget, by language subtag ('fr'). A widget
+   *  without any stays English until the host passes `labels`. */
+  packs() {
+    return {};
+  }
   constructor() {
     super();
     this.root = this.attachShadow({ mode: "open" });
@@ -360,8 +365,16 @@ var FlowWidget = class extends HTMLElement {
     this.overrides = map ?? {};
     this.rerender();
   }
+  /** The shipped translation for the page's language, if the widget has one.
+   *  An explicit `lang` on the element (or on any ancestor) wins over the
+   *  document's, which wins over the browser's, so a host that already sets
+   *  `<html lang>` gets translated copy without writing a single label. */
+  localized() {
+    const tag = this.closest("[lang]")?.getAttribute("lang") || document.documentElement.lang || navigator.language || "";
+    return this.packs()[tag.slice(0, 2).toLowerCase()] ?? {};
+  }
   t(key) {
-    return this.overrides[key] ?? this.defaults()[key] ?? key;
+    return this.overrides[key] ?? this.localized()[key] ?? this.defaults()[key] ?? key;
   }
   /** A heading an empty-string label removes: labels = { 'share.title': '' }
    *  hides that heading (the host page already says it) without a fork.
@@ -374,7 +387,7 @@ var FlowWidget = class extends HTMLElement {
    *  ('error.targetUnavailable', ...), with a generic fallback. */
   errorText(labelKey) {
     if (labelKey) {
-      const specific = this.overrides[labelKey] ?? this.defaults()[labelKey];
+      const specific = this.overrides[labelKey] ?? this.localized()[labelKey] ?? this.defaults()[labelKey];
       if (specific) return specific;
     }
     return this.t("error.generic");
@@ -470,6 +483,66 @@ var EN = {
   "error.decryptFailed": "This backup could not be opened with that password.",
   "error.badFormat": "This file does not look like a readable backup."
 };
+var FR = {
+  "connect.title": "O\xF9 enregistrer vos donn\xE9es ?",
+  "connect.recommended": "Recommand\xE9",
+  "connect.drive": "Google Drive",
+  "connect.drive.sub": "Disponible sur tous vos appareils",
+  "connect.file": "Un fichier sur cet appareil",
+  "connect.file.sub": "Hors ligne, le fichier reste chez vous",
+  "connect.file.new": "Nouvelle sauvegarde",
+  "connect.file.open": "Ouvrir un fichier existant",
+  "connect.webdav": "Mon serveur (WebDAV)",
+  "connect.webdav.sub": "Nextcloud, ownCloud, le v\xF4tre",
+  "connect.s3": "Mon bucket (S3)",
+  "connect.s3.sub": "Amazon S3, R2, B2, MinIO",
+  "connect.server": "Mon serveur",
+  "connect.server.sub": "WebDAV ou un bucket S3 que vous contr\xF4lez",
+  "connect.tab.webdav": "WebDAV",
+  "connect.tab.s3": "S3",
+  "connect.s3.endpoint": "URL du point d'acc\xE8s",
+  "connect.s3.region": "R\xE9gion",
+  "connect.s3.bucket": "Bucket",
+  "connect.s3.key": "Chemin du fichier",
+  "connect.s3.accessKeyId": "Identifiant de la cl\xE9 d'acc\xE8s",
+  "connect.s3.secret": "Cl\xE9 secr\xE8te",
+  "connect.s3.submit": "Connecter",
+  "connect.connecting": "Connexion en cours...",
+  "connect.connecting.drive": "Autorisez l'acc\xE8s dans la fen\xEAtre Google.",
+  "connect.cancel": "Annuler",
+  "connect.retry": "R\xE9essayer",
+  "connect.password.title": "Cette sauvegarde est prot\xE9g\xE9e",
+  "connect.password.hint": "Entrez son mot de passe pour l\u2019ouvrir.",
+  "connect.password.placeholder": "Mot de passe",
+  "connect.password.wrong": "Mot de passe incorrect. R\xE9essayez.",
+  "connect.password.submit": "Ouvrir",
+  "connect.password.show": "Afficher le mot de passe",
+  "connect.password.hide": "Masquer le mot de passe",
+  "connect.password.forgot": "Mot de passe oubli\xE9 ?",
+  "connect.password.forgot.warn": "Sans le mot de passe, cette sauvegarde ne peut pas \xEAtre ouverte. Vous pouvez repartir d\u2019une sauvegarde vide : l\u2019ancienne sera perdue d\xE9finitivement.",
+  "connect.password.forgot.confirm": "Remplacer la sauvegarde",
+  "connect.password.forgot.back": "Retour",
+  "connect.conflict.title": "Cette destination contient d\xE9j\xE0 une sauvegarde",
+  "connect.conflict.merge": "Tout garder",
+  "connect.conflict.merge.sub": "R\xE9unir la sauvegarde et les donn\xE9es de cet appareil",
+  "connect.conflict.resume": "Utiliser la sauvegarde",
+  "connect.conflict.resume.sub": "Cet appareil adopte la sauvegarde existante",
+  "connect.conflict.replace": "Remplacer la sauvegarde",
+  "connect.conflict.replace.sub": "Les donn\xE9es de cet appareil \xE9crasent la sauvegarde",
+  "connect.webdav.url": "URL du serveur",
+  "connect.webdav.user": "Identifiant",
+  "connect.webdav.password": "Mot de passe",
+  "connect.webdav.submit": "Connecter",
+  "connect.webdav.signup": "Cr\xE9er un compte",
+  "connect.webdav.help.more": "Comment faire ?",
+  "connect.done": "Connect\xE9. Vos donn\xE9es sont enregistr\xE9es.",
+  "connect.done.manual": "Mode fichier : exportez apr\xE8s chaque changement.",
+  "error.generic": "Cela n'a pas fonctionn\xE9. V\xE9rifiez la connexion et r\xE9essayez.",
+  "error.targetUnavailable": "La destination ne r\xE9pond pas. R\xE9essayez dans un instant.",
+  "error.authExpired": "Acc\xE8s expir\xE9 : reconnectez-vous pour continuer.",
+  "error.decryptFailed": "Cette sauvegarde n'a pas pu \xEAtre ouverte avec ce mot de passe.",
+  "error.badFormat": "Ce fichier ne ressemble pas \xE0 une sauvegarde lisible."
+};
 var EYE_SHOW = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3-8 10-8 10 8 10 8-3 8-10 8-10-8-10-8Z"/><circle cx="12" cy="12" r="3"/></svg>';
 var EYE_HIDE = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 10 8 10 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"/><path d="M6.61 6.61A18.45 18.45 0 0 0 2 12s3 8 10 8a9.12 9.12 0 0 0 5.39-1.61"/><line x1="2" y1="2" x2="22" y2="22"/></svg>';
 function eyeIcon(visible) {
@@ -508,6 +581,9 @@ var SelfstoreConnectElement = class extends FlowWidget {
   defaults() {
     return EN;
   }
+  packs() {
+    return { fr: FR };
+  }
   /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
   get store() {
     return this.#store;
@@ -1181,6 +1257,26 @@ var EN2 = {
   "error.generic": "That did not work. Check the connection and try again.",
   "error.targetUnavailable": "The share service did not answer. Try again in a moment."
 };
+var FR2 = {
+  "share.title": "Partage",
+  "share.create.read": "Cr\xE9er un lien de lecture",
+  "share.create.write": "Cr\xE9er un lien de modification",
+  "share.creating": "Cr\xE9ation...",
+  "share.level.read": "Peut consulter",
+  "share.level.write": "Peut modifier",
+  "share.copy": "Copier",
+  "share.copied": "Copi\xE9",
+  "share.revoke": "R\xE9voquer",
+  "share.members": "Personnes ayant acc\xE8s",
+  "share.member.you": "vous",
+  "share.member.owner": "propri\xE9taire",
+  "share.remove": "Retirer",
+  "share.stop": "Arr\xEAter le partage",
+  "share.empty": "Personne d'autre n'a acc\xE8s pour le moment.",
+  "share.stale": "Connexion instable : cette vue est peut-\xEAtre en retard.",
+  "error.generic": "Cela n'a pas fonctionn\xE9. V\xE9rifiez la connexion et r\xE9essayez.",
+  "error.targetUnavailable": "Le service de partage ne r\xE9pond pas. R\xE9essayez dans un instant."
+};
 var isOff = (v) => v != null && ["off", "false", "no", "0"].includes(v.trim().toLowerCase());
 var SelfstoreShareElement = class extends FlowWidget {
   static get observedAttributes() {
@@ -1201,6 +1297,9 @@ var SelfstoreShareElement = class extends FlowWidget {
   defaults() {
     return EN2;
   }
+  packs() {
+    return { fr: FR2 };
+  }
   /** The app-side transport of links and memberships (see ShareEngine). */
   get engine() {
     return this.#engine;
@@ -1494,6 +1593,22 @@ var EN3 = {
   "error.generic": "That did not work. Check the connection and try again.",
   "error.targetUnavailable": "The invitation could not be read. Try again in a moment."
 };
+var FR3 = {
+  "join.previewing": "Lecture de l'invitation...",
+  "join.title": "Vous \xEAtes invit\xE9",
+  "join.from": "Partag\xE9 par {from}",
+  "join.level.read": "Vous pourrez consulter.",
+  "join.level.write": "Vous pourrez consulter et modifier.",
+  "join.accept": "Rejoindre",
+  "join.joining": "Connexion en cours...",
+  "join.joined": "C'est fait. Les donn\xE9es partag\xE9es se synchronisent sur cet appareil.",
+  "join.mismatch": "Cet appareil suit d\xE9j\xE0 un autre partage. Quittez-le d'abord, ou utilisez un autre profil.",
+  "join.noInvite": "Cette invitation a d\xE9j\xE0 servi, ou elle vise un autre compte.",
+  "join.switchAccount": "Utiliser un autre compte",
+  "join.retry": "R\xE9essayer",
+  "error.generic": "Cela n'a pas fonctionn\xE9. V\xE9rifiez la connexion et r\xE9essayez.",
+  "error.targetUnavailable": "L'invitation n'a pas pu \xEAtre lue. R\xE9essayez dans un instant."
+};
 var SelfstoreJoinElement = class extends FlowWidget {
   static get observedAttributes() {
     return ["link", "variant"];
@@ -1506,6 +1621,9 @@ var SelfstoreJoinElement = class extends FlowWidget {
   defaults() {
     return EN3;
   }
+  packs() {
+    return { fr: FR3 };
+  }
   get engine() {
     return this.#engine;
   }
@@ -1717,6 +1835,19 @@ var EN4 = {
   "status.action.reconnect": "Reconnect",
   "status.action.unlock": "Unlock"
 };
+var FR4 = {
+  "status.ephemeral": "Rien n'est enregistr\xE9",
+  "status.cacheOnly": "Sur cet appareil seulement",
+  "status.saving": "Enregistrement...",
+  "status.saved": "Sauvegarde \xE0 jour",
+  "status.needsAttention": "Acc\xE8s \xE0 retrouver",
+  "status.locked": "Sauvegarde verrouill\xE9e",
+  "status.pendingDownload": "Modifications \xE0 exporter",
+  "status.action.choose-destination": "Choisir une sauvegarde",
+  "status.action.download": "Exporter",
+  "status.action.reconnect": "Retrouver l'acc\xE8s",
+  "status.action.unlock": "D\xE9verrouiller"
+};
 var SelfstoreStatusElement = class extends FlowWidget {
   static get observedAttributes() {
     return ["variant"];
@@ -1727,6 +1858,9 @@ var SelfstoreStatusElement = class extends FlowWidget {
   defaults() {
     return EN4;
   }
+  packs() {
+    return { fr: FR4 };
+  }
   /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
   get store() {
     return this.#store;
@@ -1885,6 +2019,63 @@ var EN5 = {
   "backups.replica.s3.secret": "Secret access key",
   "error.generic": "That did not work. Check the connection and try again."
 };
+var FR5 = {
+  "backups.mine.heading": "Sauvegardes",
+  "backups.mine.personal": "Sauvegarde principale",
+  "backups.active": "Active",
+  "backups.pill.encrypted": "Chiffr\xE9e",
+  "backups.pill.plain": "Non chiffr\xE9e",
+  "backups.pill.shared": "Partag\xE9e",
+  "backups.pill.private": "Non partag\xE9e",
+  "backups.modified": "modifi\xE9e {when}",
+  "backups.replaceHint": "L'ouvrir remplace les donn\xE9es de cet appareil.",
+  "backups.loading": "Ouverture...",
+  "backups.menu": "Actions",
+  "backups.open": "Ouvrir",
+  "backups.encrypt": "Chiffrer",
+  "backups.share": "Partager",
+  "backups.rename": "Renommer",
+  "backups.delete": "Supprimer",
+  "backups.new": "+ Nouvelle sauvegarde",
+  "backups.newTitle": "Nouvelle sauvegarde",
+  "backups.startsBlank": "Elle d\xE9marre vide.",
+  "backups.namePh": "Son nom",
+  "backups.willBe": "Fichier : {file}",
+  "backups.taken": "Ce nom est d\xE9j\xE0 pris.",
+  "backups.create": "Cr\xE9er",
+  "backups.renameTitle": "Renommer cette sauvegarde",
+  "backups.pwHint": "Cette sauvegarde est prot\xE9g\xE9e : entrez son mot de passe.",
+  "backups.pwShow": "Afficher le mot de passe",
+  "backups.pwHide": "Masquer le mot de passe",
+  "backups.cancel": "Annuler",
+  "backups.shared.heading": "Partag\xE9es avec moi",
+  "backups.shared.by": "Partag\xE9e par {who}",
+  "backups.shared.leave": "Quitter",
+  "backups.replica.add": "Seconde sauvegarde",
+  "backups.replica.title": "Seconde sauvegarde",
+  "backups.replica.intro": "Le m\xEAme fichier chiffr\xE9, \xE9crit aussi \xE0 un second endroit. Si l\u2019un tombe, l\u2019autre reste.",
+  "backups.replica.dest.drive": "Google Drive",
+  "backups.replica.dest.file": "Un fichier sur cet appareil",
+  "backups.replica.dest.webdav": "Un serveur WebDAV",
+  "backups.replica.dest.s3": "Un bucket S3",
+  "backups.replica.card": "Seconde sauvegarde - {label}",
+  "backups.replica.uptodate": "\xC0 jour, {when}",
+  "backups.replica.pending": "Premi\xE8re copie au prochain enregistrement",
+  "backups.replica.error": "Injoignable - nouvel essai au prochain enregistrement",
+  "backups.replica.remove": "Retirer",
+  "backups.replica.save": "Ajouter la copie",
+  "backups.replica.webdav.url": "URL du fichier sur le serveur (https://hote:8443/dav/fichier.zip)",
+  "backups.replica.webdav.help": "L'URL compl\xE8te du fichier de sauvegarde, port personnalis\xE9 compris. Le serveur doit autoriser cette application \xE0 le joindre (CORS) : certains h\xE9bergeurs ne le font pas et ne se connecteront pas depuis un navigateur.",
+  "backups.replica.webdav.user": "Identifiant",
+  "backups.replica.webdav.password": "Mot de passe",
+  "backups.replica.s3.endpoint": "URL du point d'acc\xE8s",
+  "backups.replica.s3.region": "R\xE9gion",
+  "backups.replica.s3.bucket": "Bucket",
+  "backups.replica.s3.key": "Chemin du fichier",
+  "backups.replica.s3.accessKeyId": "Identifiant de la cl\xE9 d'acc\xE8s",
+  "backups.replica.s3.secret": "Cl\xE9 secr\xE8te",
+  "error.generic": "Cela n'a pas fonctionn\xE9. V\xE9rifiez la connexion et r\xE9essayez."
+};
 var isOff2 = (v) => v != null && ["off", "false", "no", "0"].includes(v.trim().toLowerCase());
 var EYE_OPEN = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z"/><circle cx="12" cy="12" r="3"/></svg>';
 var EYE_SHUT = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m3 3 18 18"/><path d="M10.6 5.1A10.9 10.9 0 0 1 12 5c6.5 0 10 7 10 7a17.4 17.4 0 0 1-3.4 4.4M6.6 6.6A17 17 0 0 0 2 12s3.5 7 10 7a10.7 10.7 0 0 0 5.4-1.4"/></svg>';
@@ -1939,6 +2130,9 @@ var SelfstoreBackupsElement = class extends FlowWidget {
   defaults() {
     return EN5;
   }
+  packs() {
+    return { fr: FR5 };
+  }
   /** The headless manager this panel drives (see 'selfstore/backups'). */
   get manager() {
     return this.#manager;
@@ -2958,6 +3152,13 @@ var EN6 = {
   "gate.defer": "Later - keep it in this browser only",
   "gate.defer.note": "Data kept only in this browser is lost if its storage is cleared."
 };
+var FR6 = {
+  "gate.title": "O\xF9 enregistrer vos donn\xE9es ?",
+  "gate.hint": "Elles sont chiffr\xE9es sur cet appareil. Choisissez une sauvegarde : tout y sera enregistr\xE9 automatiquement.",
+  "gate.fine": "",
+  "gate.defer": "Plus tard - garder sur cet appareil seulement",
+  "gate.defer.note": "Sans sauvegarde, les donn\xE9es disparaissent si le stockage de cet appareil est vid\xE9."
+};
 var GATE_STYLES = `
 :host { display: contents; }
 [part~='gate'] {
@@ -3017,6 +3218,9 @@ var SelfstoreGateElement = class extends FlowWidget {
   defaults() {
     return EN6;
   }
+  packs() {
+    return { fr: FR6 };
+  }
   /** The simple store (anything exposing `flowHost`), or a hand-built FlowHost. */
   get store() {
     return this.#store;