selfstore 1.8.1 → 1.8.2

package/dist/{chunk-ZV2S3I76.js → chunk-7N2YR3QW.js}

@@ -1,9 +1,9 @@
 import { createNode, createMeta, gcTombstones, stamp, merge, unsyncableCounts, idPathFor, detectConflicts, changes } from './chunk-SKWHKM25.js';
-import { inspect, checkPasswordPolicy, writeBox, BACKUP_MIME, readBoxWithSync, asBytes } from './chunk-ZDHTKFAL.js';
-import { openManifest, GROUP_KEYING } from './chunk-CT2HTWA7.js';
+import { inspect, checkPasswordPolicy, writeBox, BACKUP_MIME, readBoxWithSync, asBytes } from './chunk-BNDFMU3J.js';
+import { openManifest, GROUP_KEYING } from './chunk-453KRCMM.js';
 import { seal, isEnvelope, unseal, newDeviceKey } from './chunk-QBCU7OOP.js';
-import { mintSlot, MAX_KEY_SLOTS, mintExternalSlot, openSlot } from './chunk-CM3HSBCE.js';
-import { SelfstoreError, isAuthExpired, errorLabelKey, isSelfstoreError } from './chunk-SFF7KKM4.js';
+import { mintSlot, MAX_KEY_SLOTS, mintExternalSlot, openSlot } from './chunk-HK4VPO65.js';
+import { SelfstoreError, isAuthExpired, errorLabelKey, isSelfstoreError } from './chunk-CPN2KUD5.js';
 import { openDB } from 'idb';
 
 // src/persistence/target.ts
@@ -172,6 +172,15 @@ function createLocalStore(opts) {
   let queuedKind = null;
   let prefetched = null;
   const PREFETCH_TTL_MS = 6e4;
+  async function remoteAppOf(target) {
+    try {
+      const blob = prefetched && prefetched.target === target ? prefetched.blob : await target.load();
+      if (!blob || blob.size === 0) return null;
+      return (await inspect(blob)).app ?? null;
+    } catch {
+      return null;
+    }
+  }
   const peerList = [];
   const mirrorList = [];
   const replicaList = [];
@@ -973,6 +982,7 @@ function createLocalStore(opts) {
   }
   stateSnapshot = buildState();
   return {
+    app,
     get state() {
       return stateSnapshot;
     },
@@ -1129,6 +1139,13 @@ function createLocalStore(opts) {
       }
       if (attachOpts?.password) assertPasswordPolicy(attachOpts.password);
       return serialize(async () => {
+        const remoteApp = await remoteAppOf(target);
+        if (remoteApp !== null && remoteApp !== app) {
+          throw new SelfstoreError(
+            "FOREIGN_BACKUP",
+            `attachTarget(): the destination holds a backup written by app "${remoteApp}", not "${app}". Open it in its own application, or pick another file.`
+          );
+        }
         const g = cfg ? {
           identity: cfg.identity,
           admin: cfg.admin,
@@ -1186,7 +1203,8 @@ function createLocalStore(opts) {
     },
     async inspectTarget(target) {
       const blob = await target.load();
-      if (!blob || blob.size === 0) return { hasBackup: false, date: null, encrypted: false };
+      if (!blob || blob.size === 0)
+        return { hasBackup: false, date: null, encrypted: false, app: null };
       let marker;
       try {
         marker = target.stat ? await target.stat() : null;
@@ -1198,7 +1216,10 @@ function createLocalStore(opts) {
       return {
         hasBackup: true,
         date: header.createdAt ?? null,
-        encrypted: header.encryption !== "none"
+        encrypted: header.encryption !== "none",
+        // Required by the format since generation 1, but a hand-made file may
+        // omit it: absent reads as "cannot tell", never as an accusation.
+        app: header.app ?? null
       };
     },
     setManualFile() {
@@ -1909,7 +1930,7 @@ function indexedDbCache(name, opts) {
       sealKey = null;
     },
     async reseal(secret) {
-      const { keyFromPassword, freshCacheKdf } = await import('./cache-lock-7D6N42ZP.js');
+      const { keyFromPassword, freshCacheKdf } = await import('./cache-lock-RCN3JJ4Q.js');
       const previous = sealKey;
       if (previous === null) {
         throw new SelfstoreError(
@@ -1943,7 +1964,7 @@ function indexedDbCache(name, opts) {
       sealKey = next;
     },
     async unlock(secret) {
-      const { keyFromPassword, freshCacheKdf, opens } = await import('./cache-lock-7D6N42ZP.js');
+      const { keyFromPassword, freshCacheKdf, opens } = await import('./cache-lock-RCN3JJ4Q.js');
       const d = await db();
       let candidate;
       if (typeof secret === "string") {
@@ -2050,5 +2071,5 @@ function gisDriveAuth(opts) {
 }
 
 export { RESERVED_STORE_MODES, createLocalStore, deriveStatus, gisDriveAuth, indexedDbCache, isLockableCache, isReservedStoreMode, memoryCache };
-//# sourceMappingURL=chunk-ZV2S3I76.js.map
-//# sourceMappingURL=chunk-ZV2S3I76.js.map
+//# sourceMappingURL=chunk-7N2YR3QW.js.map
+//# sourceMappingURL=chunk-7N2YR3QW.js.map