selfstore 1.8.19 → 1.8.21

package/dist/{local-Dh6eGiK9.d.ts → local-8H61XxbL.d.ts}

@@ -1,5 +1,5 @@
-import { o as Snapshot, E as EncodeOptions, H as Header } from './store-Cs6QIzzG.js';
-import { a as DriveAuth } from './drive-CY_Vsj7V.js';
+import { o as Snapshot, E as EncodeOptions, H as Header } from './store-CIbiNoiE.js';
+import { a as DriveAuth } from './drive-86CHuTij.js';
 
 /** Serialize a snapshot to a portable backup blob (compressed; encrypted if a password is given). */
 declare function exportSnapshot(snapshot: Snapshot, opts: EncodeOptions): Promise<Blob>;

package/dist/local-XET4G32B.js

@@ -0,0 +1,7 @@
+export { datedName, downloadBlob, pickFromDisk, pickSaveHandle, saveToDisk, writeToHandle } from './chunk-AUH35AAQ.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=local-XET4G32B.js.map
+//# sourceMappingURL=local-XET4G32B.js.map

package/dist/{local-DPS35F5C.js.map → local-XET4G32B.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"local-DPS35F5C.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"local-XET4G32B.js"}

package/dist/{manager-DhoIbJyg.d.ts → manager-Di6lNE4E.d.ts}

@@ -1,5 +1,5 @@
 import { K as KV } from './cache-ilsK3Tki.js';
-import { B as BackupTarget, L as LocalStore } from './store-Cs6QIzzG.js';
+import { B as BackupTarget, L as LocalStore } from './store-CIbiNoiE.js';
 import { F as FlowStore } from './machine-ALMkT3mk.js';
 
 /** What the destination reports about a listed file (one cheap metadata call). */

package/dist/manager-drive-YLSLQ63O.js

@@ -0,0 +1,10 @@
+export { createBackupsManager, driveBackupsHost } from './chunk-EBCQ7ZG7.js';
+import './chunk-3KAAPYPO.js';
+import './chunk-JTNFZV2B.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=manager-drive-YLSLQ63O.js.map
+//# sourceMappingURL=manager-drive-YLSLQ63O.js.map

package/dist/{manager-drive-4WLKOOXO.js.map → manager-drive-YLSLQ63O.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"manager-drive-4WLKOOXO.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"manager-drive-YLSLQ63O.js"}

package/dist/s3-43RWNCV3.js

@@ -0,0 +1,11 @@
+export { connect, fromSession } from './chunk-LUNYYH6D.js';
+import './chunk-QSLHEE2L.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-QBCU7OOP.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-FJGWTBAL.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=s3-43RWNCV3.js.map
+//# sourceMappingURL=s3-43RWNCV3.js.map

package/dist/s3-43RWNCV3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"s3-43RWNCV3.js"}

package/dist/{s3-0qqIyphl.d.ts → s3-BsbVn3fw.d.ts}

@@ -1,4 +1,4 @@
-import { B as BackupTarget, P as PeerSource } from './store-Cs6QIzzG.js';
+import { B as BackupTarget, P as PeerSource } from './store-CIbiNoiE.js';
 import { K as KV } from './cache-ilsK3Tki.js';
 
 /**

package/dist/{store-Cs6QIzzG.d.ts → store-CIbiNoiE.d.ts}

@@ -149,7 +149,7 @@ interface EncodeOptions {
     extraSecrets?: string[];
 }
 
-type SelfstoreErrorCode = 'BAD_FORMAT' | 'UNSUPPORTED_VERSION' | 'PASSWORD_REQUIRED' | 'DECRYPT_FAILED' | 'TOO_LARGE' | 'VERIFY_FAILED' | 'FOREIGN_BACKUP' | 'AUTH_EXPIRED' | 'TARGET_UNAVAILABLE' | 'TARGET_WRITE_FAILED' | 'TARGET_GONE' | 'NOT_CONNECTED' | 'WEAK_PASSWORD' | 'ENCRYPTION_REQUIRED' | 'UNEXPECTEDLY_UNENCRYPTED' | 'SCHEMA_TOO_NEW' | 'IDENTITY_REQUIRED' | 'SIGNATURE_INVALID' | 'NOT_A_RECIPIENT' | 'MANIFEST_ROLLBACK';
+type SelfstoreErrorCode = 'BAD_FORMAT' | 'UNSUPPORTED_VERSION' | 'PASSWORD_REQUIRED' | 'DECRYPT_FAILED' | 'TOO_LARGE' | 'VERIFY_FAILED' | 'FOREIGN_BACKUP' | 'AUTH_EXPIRED' | 'TARGET_UNAVAILABLE' | 'TARGET_WRITE_FAILED' | 'TARGET_GONE' | 'NOT_CONNECTED' | 'WEAK_PASSWORD' | 'ENCRYPTION_REQUIRED' | 'UNEXPECTEDLY_UNENCRYPTED' | 'SCHEMA_TOO_NEW' | 'IDENTITY_REQUIRED' | 'SIGNATURE_INVALID' | 'NOT_A_RECIPIENT' | 'MANIFEST_ROLLBACK' | 'CLOCK_DRIFT';
 /**
  * i18n key for an error code: lower-camel-cased under `error.`, e.g.
  * 'error.authExpired'. The library ships the key, the app owns the copy;
@@ -566,8 +566,16 @@ interface LocalStore {
     detachTarget(opts?: {
         keepSession?: boolean;
     }): Promise<void>;
-    /** Build the portable .selfstore blob (for a manual download or dated copy). */
-    exportBlob(): Promise<Blob>;
+    /** Build the portable .selfstore blob (for a manual download or dated copy).
+     *
+     *  `plaintext` writes a READABLE copy even when the store is protected: the
+     *  same ZIP, with `selfstore.json` in the clear, for someone who wants to
+     *  read, inspect or move their own data. It changes nothing about the store
+     *  or its destination - the real backup stays encrypted. Refused while
+     *  locked, and refused outright on a `requireEncryption` store. */
+    exportBlob(opts?: {
+        plaintext?: boolean;
+    }): Promise<Blob>;
     /** Mark the file-manual pending download as resolved. */
     markDownloaded(): void;
     /** Stop persisting (shared computer). */

package/dist/sync.d.ts

@@ -4,7 +4,13 @@
  * string so a plain string comparison equals causal order.
  */
 type Hlc = string;
-/** A fresh random replica id (one per device). */
+/**
+ * A fresh random replica id (one per device). Not a secret - but two replicas
+ * sharing an id lose the tiebreak that makes the order total, so it comes from
+ * the same source as everything else here. `randomUUID` is exposed only in a
+ * secure context; `getRandomValues` is not, which is why the fallback is that
+ * one and never `Math.random`.
+ */
 declare function createNode(): string;
 
 /**
@@ -79,11 +85,6 @@ interface ReplicaState {
     meta: SyncMeta;
 }
 type State = ReplicaState;
-/**
- * Merge replica `b` into `a` (commutative for the convergent strategies). The
- * optional `base` lets 'manual' tell a true concurrent conflict from a one-sided
- * change; without it, 'manual' errs toward surfacing.
- */
 declare function merge(a: State, b: State, config: SyncConfig, base?: SyncMeta): MergeResult;
 /**
  * Concurrent same-id edits that a convergent strategy resolves silently by keeping

package/dist/sync.js

@@ -1,3 +1,5 @@
-export { changes, createMeta, createNode, detectConflicts, merge, stamp } from './chunk-SKWHKM25.js';
+export { changes, createMeta, createNode, detectConflicts, merge, stamp } from './chunk-23UAUYSW.js';
+import './chunk-FJGWTBAL.js';
+import './chunk-XMC67RNM.js';
 //# sourceMappingURL=sync.js.map
 //# sourceMappingURL=sync.js.map

package/dist/webdav-EEQKX5TZ.js

@@ -0,0 +1,9 @@
+export { connect, fromSession, peer } from './chunk-JZHWAX34.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-QBCU7OOP.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=webdav-EEQKX5TZ.js.map
+//# sourceMappingURL=webdav-EEQKX5TZ.js.map

package/dist/webdav-EEQKX5TZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"webdav-EEQKX5TZ.js"}

package/dist/widgets.d.ts

@@ -1,11 +1,11 @@
-import { S as StoreLike, F as FlowHost, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow } from './connect-BTVzRJY8.js';
+import { S as StoreLike, F as FlowHost, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow } from './connect-Bob2mofK.js';
 import { ShareEngine, ShareLevel, ShareFlow, JoinEngine, JoinFlow, ReplicaFlow } from './flows.js';
-import { f as BackupsManager } from './manager-DhoIbJyg.js';
-import './store-Cs6QIzzG.js';
+import { f as BackupsManager } from './manager-Di6lNE4E.js';
+import './store-CIbiNoiE.js';
 import './cache-ilsK3Tki.js';
 import './sync.js';
-import './drive-CY_Vsj7V.js';
-import './s3-0qqIyphl.js';
+import './drive-86CHuTij.js';
+import './s3-BsbVn3fw.js';
 import './machine-ALMkT3mk.js';
 
 /** Flat key -> string map; widgets merge a partial override over EN defaults. */
@@ -576,6 +576,7 @@ declare class SelfstoreGateElement extends FlowWidget {
     constructor();
     attributeChangedCallback(name: string): void;
     connectedCallback(): void;
+    disconnectedCallback(): void;
     private host;
     private wire;
     /** The library already derives "no durable home yet" - asking the target
@@ -684,6 +685,20 @@ declare class SelfstoreDestinationElement extends FlowWidget {
  * a host can still mount separately, with every knob they already had. What is
  * added here is only the CHOICE between them, which follows the engine's own
  * status - the same signal the gate uses to decide whether to be on screen.
+ *
+ * WHERE IT FITS, and where it does not. Before a home is chosen this element IS
+ * the gate, and the gate is a full-viewport modal (measured: it covers the page
+ * at z-index 280 and takes focus). That is right for an app whose data means
+ * nothing until the user answers - a wallet, a record, anything the user will
+ * be told is safe - and it is the reason the question is asked once, up front,
+ * instead of hiding in a settings screen.
+ *
+ * It is wrong for a page that must work before any answer: a landing demo, a
+ * scratchpad, anything whose whole point is that you can type first. There,
+ * mount <selfstore-destination> (the panel on its own, no modal) or
+ * <selfstore-status> (one line), and offer the connect journey from a control
+ * the user reaches deliberately. Both are the same elements this one composes,
+ * so nothing is lost by starting there.
  */
 
 declare class SelfstoreStorageElement extends FlowWidget {
@@ -831,10 +846,36 @@ declare class SelfstoreAccountElement extends FlowWidget {
  *  file on the device, a server for WebDAV, a bucket for object storage. */
 declare const defaultIcons: Record<ConnectKind, string>;
 
-/** Register the elements as <PREFIX-connect>, <PREFIX-share>, <PREFIX-join>,
- *  <PREFIX-status>, <PREFIX-backups>, <PREFIX-gate> and
- *  <PREFIX-destination> (default prefix 'selfstore'). Safe to call twice;
- *  throws in environments without custom elements (browser code only). */
+/** Register <PREFIX-connect>: the "where does my data live" journey. */
+declare function defineConnect(prefix?: string): void;
+/** Register <PREFIX-status>: the live storage status line. */
+declare function defineStatus(prefix?: string): void;
+/** Register <PREFIX-share>: publishing an invitation. */
+declare function defineShare(prefix?: string): void;
+/** Register <PREFIX-join>: accepting an invitation. */
+declare function defineJoin(prefix?: string): void;
+/** Register <PREFIX-backups>: the named-backup manager. */
+declare function defineBackups(prefix?: string): void;
+/** Register <PREFIX-gate>, the blocking first-run screen, with the
+ *  <PREFIX-connect> child it builds for itself. */
+declare function defineGate(prefix?: string): void;
+/** Register <PREFIX-destination>, the storage panel, with the connect and
+ *  status elements it composes. */
+declare function defineDestination(prefix?: string): void;
+/** Register <PREFIX-storage>: the whole journey in one tag. It chooses between
+ *  the gate and the destination panel from the engine's own status, so both
+ *  come with it. */
+declare function defineStorage(prefix?: string): void;
+/** Register <PREFIX-account>, the header control, with the status row it
+ *  composes for anything needing attention. */
+declare function defineAccount(prefix?: string): void;
+/** Register all nine elements at once (default prefix 'selfstore'). Safe to
+ *  call twice; throws in environments without custom elements (browser code
+ *  only).
+ *
+ *  Convenient, and the reason a small app ships every widget: naming all nine
+ *  here is what pins them in the bundle. Reach for the single-widget functions
+ *  above when size matters. */
 declare function defineSelfstoreWidgets(prefix?: string): void;
 
-export { type BackupsAction, type DestinationAction, FlowWidget, SelfstoreAccountElement, SelfstoreBackupsElement, SelfstoreConnectElement, SelfstoreDestinationElement, SelfstoreGateElement, SelfstoreJoinElement, SelfstoreShareElement, SelfstoreStatusElement, SelfstoreStorageElement, type ShareAction, type WebdavPreset, type WidgetLabels, defaultIcons, defineSelfstoreWidgets };
+export { type BackupsAction, type DestinationAction, FlowWidget, SelfstoreAccountElement, SelfstoreBackupsElement, SelfstoreConnectElement, SelfstoreDestinationElement, SelfstoreGateElement, SelfstoreJoinElement, SelfstoreShareElement, SelfstoreStatusElement, SelfstoreStorageElement, type ShareAction, type WebdavPreset, type WidgetLabels, defaultIcons, defineAccount, defineBackups, defineConnect, defineDestination, defineGate, defineJoin, defineSelfstoreWidgets, defineShare, defineStatus, defineStorage };

package/dist/widgets.js

@@ -1,12 +1,14 @@
-import { saveToDisk, datedName } from './chunk-DCEXWSM6.js';
-import { connectFlow, shareFlow, joinFlow } from './chunk-LKIRWVXM.js';
-import { isOpenSupported } from './chunk-TKWU52LK.js';
-import './chunk-W22V5CRM.js';
-import './chunk-J5MFXJU6.js';
-import './chunk-MGDXR3RB.js';
-import './chunk-QBCU7OOP.js';
-import './chunk-O3Y6FORN.js';
-import './chunk-3OBJOMQ2.js';
+import { saveToDisk, datedName } from './chunk-AUH35AAQ.js';
+import { connectFlow, shareFlow, joinFlow } from './chunk-LYO36VYB.js';
+import './chunk-3BWBBGFW.js';
+import { isOpenSupported } from './chunk-GW5CYP4C.js';
+import './chunk-3KAAPYPO.js';
+import './chunk-JTNFZV2B.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
 
 // src/widgets/icons.ts
 var INK = "#8a8f98";
@@ -38,13 +40,23 @@ var baseStyles = `
 	color: inherit;
 	--_accent: var(--selfstore-accent, #2563eb);
 	--_accent-ink: var(--selfstore-accent-contrast, #ffffff);
-	--_ink-dim: var(--selfstore-muted, color-mix(in srgb, currentColor 55%, transparent));
+	/* Dimmed ink is TEXT too - it words every sub, hint and field label - so it
+	   answers to 4.5:1, and an alpha over the host background is what decides
+	   that. At 55% a near-black ink on white composited to 3.99:1 and failed;
+	   62% lands at 5.0:1 there and at 6.3:1 for a near-white ink on a near-black
+	   page, while still reading a clear step below the main ink. */
+	--_ink-dim: var(--selfstore-muted, color-mix(in srgb, currentColor 62%, transparent));
 	--_border: var(--selfstore-border, color-mix(in srgb, currentColor 16%, transparent));
 	--_radius: var(--selfstore-radius, 12px);
 	--_gap: var(--selfstore-gap, 0.6rem);
 	--_danger: var(--selfstore-danger, #dc2626);
-	--_ok: var(--selfstore-ok, #16a34a);
-	--_warn: var(--selfstore-warn, #d97706);
+	/* Severity colors are read as TEXT (see sev-* below), so they answer to the
+	   4.5:1 text threshold, not the 3:1 one for a graphic. The obvious green and
+	   amber of a palette sit at 3.3:1 and 3.2:1 on white and fail it: a status
+	   line is exactly the sentence someone needs to read. One step darker each
+	   clears it at 5.0:1 without changing which color anyone thinks they see. */
+	--_ok: var(--selfstore-ok, #15803d);
+	--_warn: var(--selfstore-warn, #b45309);
 }
 /* Status severity, as a text color the dot inherits (background: currentColor). */
 [part~='sev-ok'] { color: var(--_ok); }
@@ -155,6 +167,12 @@ span[part~='status-glyph'] {
 	animation: ss-spin 0.8s linear infinite;
 }
 @keyframes ss-spin { to { transform: rotate(360deg); } }
+/* An endless spin is the one motion here, and it runs during the wait someone
+   with vestibular trouble cannot escape. Keep the shape as the busy signal,
+   drop the rotation. */
+@media (prefers-reduced-motion: reduce) {
+	[part='spinner'] { animation: none; border-top-color: var(--_border); }
+}
 button[part~='button'] {
 	font: inherit;
 	padding: 0.45rem 0.9rem;
@@ -1019,7 +1037,7 @@ var SelfstoreConnectElement = class extends FlowWidget {
         h("div", { part: "title" }, this.t("connect.password.title")),
         h("div", { part: "hint" }, this.t("connect.password.hint")),
         field,
-        s.passwordError ? h("div", { part: "error-note" }, this.t("connect.password.wrong")) : null,
+        s.passwordError ? h("div", { part: "error-note", role: "alert" }, this.t("connect.password.wrong")) : null,
         h(
           "div",
           { part: "row" },
@@ -1632,7 +1650,9 @@ var SelfstoreShareElement = class extends FlowWidget {
     put(into, this.heading("title", "share.title"));
     if (s.stale) into.append(h("div", { part: "hint" }, this.t("share.stale")));
     if (s.error && !s.stale) {
-      into.append(h("div", { part: "error-note" }, this.errorText(s.error.labelKey)));
+      into.append(
+        h("div", { part: "error-note", role: "alert" }, this.errorText(s.error.labelKey))
+      );
     }
     if (this.#withCreate) {
       const missing = this.#levels.filter((l) => !s.links.some((k) => k.level === l));
@@ -2118,6 +2138,7 @@ var FR5 = {
   "status.action.reconnect": "Retrouver l'acc\xE8s",
   "status.action.unlock": "D\xE9verrouiller"
 };
+var GLYPH = { ok: "\u2713", warn: "!", danger: "!", info: "" };
 var SelfstoreStatusElement = class extends FlowWidget {
   static get observedAttributes() {
     return ["variant"];
@@ -2146,6 +2167,7 @@ var SelfstoreStatusElement = class extends FlowWidget {
   }
   connectedCallback() {
     super.connectedCallback();
+    if (!this.hasAttribute("role")) this.setAttribute("role", "status");
     if (this.hasAttribute("variant"))
       this.variant = this.getAttribute("variant");
     this.follow(this.hostOf());
@@ -2174,7 +2196,6 @@ var SelfstoreStatusElement = class extends FlowWidget {
       part: `status-dot sev-${status.severity}`,
       "aria-hidden": "true"
     });
-    const GLYPH = { ok: "\u2713", warn: "!", danger: "!", info: "" };
     const glyph = GLYPH[status.severity];
     const sign = glyph ? h("span", { part: `status-glyph sev-${status.severity}`, "aria-hidden": "true" }, glyph) : dot;
     if (this.#variant === "dot") {
@@ -2944,7 +2965,7 @@ var SelfstoreBackupsElement = class extends FlowWidget {
             this.rerender();
           }
         }),
-        taken ? h("div", { part: "error-note" }, this.t("backups.taken")) : clean ? h(
+        taken ? h("div", { part: "error-note", role: "alert" }, this.t("backups.taken")) : clean ? h(
           "div",
           { part: "sub" },
           this.ts("backups.willBe", { file: this.#manager?.fileNameFor(clean) ?? "" })
@@ -3002,7 +3023,7 @@ var SelfstoreBackupsElement = class extends FlowWidget {
             this.rerender();
           }
         }),
-        taken ? h("div", { part: "error-note" }, this.t("backups.taken")) : clean ? h(
+        taken ? h("div", { part: "error-note", role: "alert" }, this.t("backups.taken")) : clean ? h(
           "div",
           { part: "sub" },
           this.ts("backups.willBe", { file: this.#manager?.fileNameFor(clean) ?? "" })
@@ -3109,7 +3130,7 @@ var SelfstoreBackupsElement = class extends FlowWidget {
           this.t(`backups.replica.dest.${kind}`)
         )
       ),
-      snap.error ? h("div", { part: "error-note" }, this.t("error.generic")) : null,
+      snap.error ? h("div", { part: "error-note", role: "alert" }, this.t("error.generic")) : null,
       h(
         "button",
         {
@@ -3161,7 +3182,7 @@ var SelfstoreBackupsElement = class extends FlowWidget {
         c.password,
         (v) => c.password = v
       ),
-      snap.error ? h("div", { part: "error-note" }, this.t("error.generic")) : null,
+      snap.error ? h("div", { part: "error-note", role: "alert" }, this.t("error.generic")) : null,
       h(
         "div",
         { part: "row", style: "margin-top:0.45rem" },
@@ -3218,7 +3239,7 @@ var SelfstoreBackupsElement = class extends FlowWidget {
         c.secretAccessKey,
         (v) => c.secretAccessKey = v
       ),
-      snap.error ? h("div", { part: "error-note" }, this.t("error.generic")) : null,
+      snap.error ? h("div", { part: "error-note", role: "alert" }, this.t("error.generic")) : null,
       h(
         "div",
         { part: "row", style: "margin-top:0.45rem" },
@@ -3628,6 +3649,11 @@ var SelfstoreGateElement = class extends FlowWidget {
     if (deferrable !== null) this.deferrable = deferrable;
     this.wire();
   }
+  disconnectedCallback() {
+    super.disconnectedCallback();
+    document.removeEventListener("focusin", this.#keepFocus);
+    this.#focusBefore = null;
+  }
   host() {
     const s = this.#store;
     if (!s) return null;
@@ -3650,13 +3676,46 @@ var SelfstoreGateElement = class extends FlowWidget {
     if (!host.engine.state.ready) return false;
     return host.engine.state.status.action === "choose-destination";
   }
+  /** Where focus was when the gate took over, so it can be handed back. */
+  #focusBefore = null;
+  /** `aria-modal` tells assistive tech this is modal; it does NOT stop the Tab
+   *  key. Without this, a keyboard user tabs straight out of a screen whose
+   *  whole purpose is to block, and lands in the application behind it -
+   *  invisibly, since the gate still covers what they are now driving.
+   *
+   *  A guard rather than a cycle through the focusable elements: the gate
+   *  contains a `<selfstore-connect>` with its own shadow root, and walking
+   *  focusables across shadow boundaries is the kind of code that quietly
+   *  stops matching the DOM it walks. Anything landing outside comes straight
+   *  back to the card, which is correct whatever the widget grows inside. */
+  #pulling = false;
+  #keepFocus = (e) => {
+    if (!this.#open || this.#pulling) return;
+    if (e.composedPath().includes(this)) return;
+    const card = this.root.querySelector('[part~="gate-card"]');
+    if (!card) return;
+    this.#pulling = true;
+    try {
+      card.focus();
+    } finally {
+      this.#pulling = false;
+    }
+  };
   sync() {
     const open = this.shouldOpen();
     if (open === this.#open) return;
     this.#open = open;
     if (!open) this.#connect = null;
     super.rerender();
-    if (open) this.root.querySelector('[part~="gate-card"]')?.focus();
+    if (open) {
+      this.#focusBefore = document.activeElement ?? null;
+      document.addEventListener("focusin", this.#keepFocus);
+      this.root.querySelector('[part~="gate-card"]')?.focus();
+      return;
+    }
+    document.removeEventListener("focusin", this.#keepFocus);
+    this.#focusBefore?.focus?.();
+    this.#focusBefore = null;
   }
   /** Rebuilding the frame would re-append the child connect element, and a
    *  custom element that leaves the DOM and comes back rebuilds its flow: a
@@ -4529,21 +4588,62 @@ var SelfstoreAccountElement = class extends FlowWidget {
 };
 
 // src/entries/widgets.ts
+function register(prefix, tags) {
+  for (const [name, ctor] of Object.entries(tags)) {
+    const tag = `${prefix}-${name}`;
+    if (!customElements.get(tag)) customElements.define(tag, ctor);
+  }
+}
+function defineConnect(prefix = "selfstore") {
+  register(prefix, { connect: SelfstoreConnectElement });
+}
+function defineStatus(prefix = "selfstore") {
+  register(prefix, { status: SelfstoreStatusElement });
+}
+function defineShare(prefix = "selfstore") {
+  register(prefix, { share: SelfstoreShareElement });
+}
+function defineJoin(prefix = "selfstore") {
+  register(prefix, { join: SelfstoreJoinElement });
+}
+function defineBackups(prefix = "selfstore") {
+  register(prefix, { backups: SelfstoreBackupsElement });
+}
+function defineGate(prefix = "selfstore") {
+  register(prefix, { connect: SelfstoreConnectElement, gate: SelfstoreGateElement });
+}
+function defineDestination(prefix = "selfstore") {
+  register(prefix, {
+    connect: SelfstoreConnectElement,
+    status: SelfstoreStatusElement,
+    destination: SelfstoreDestinationElement
+  });
+}
+function defineStorage(prefix = "selfstore") {
+  defineGate(prefix);
+  defineDestination(prefix);
+  register(prefix, { storage: SelfstoreStorageElement });
+}
+function defineAccount(prefix = "selfstore") {
+  register(prefix, {
+    status: SelfstoreStatusElement,
+    account: SelfstoreAccountElement
+  });
+}
 function defineSelfstoreWidgets(prefix = "selfstore") {
-  const define = (name, ctor) => {
-    if (!customElements.get(name)) customElements.define(name, ctor);
-  };
-  define(`${prefix}-connect`, SelfstoreConnectElement);
-  define(`${prefix}-share`, SelfstoreShareElement);
-  define(`${prefix}-join`, SelfstoreJoinElement);
-  define(`${prefix}-status`, SelfstoreStatusElement);
-  define(`${prefix}-backups`, SelfstoreBackupsElement);
-  define(`${prefix}-gate`, SelfstoreGateElement);
-  define(`${prefix}-destination`, SelfstoreDestinationElement);
-  define(`${prefix}-storage`, SelfstoreStorageElement);
-  define(`${prefix}-account`, SelfstoreAccountElement);
+  register(prefix, {
+    connect: SelfstoreConnectElement,
+    share: SelfstoreShareElement,
+    join: SelfstoreJoinElement,
+    status: SelfstoreStatusElement,
+    backups: SelfstoreBackupsElement,
+    gate: SelfstoreGateElement,
+    destination: SelfstoreDestinationElement,
+    storage: SelfstoreStorageElement,
+    account: SelfstoreAccountElement
+  });
 }
 
-export { FlowWidget, SelfstoreAccountElement, SelfstoreBackupsElement, SelfstoreConnectElement, SelfstoreDestinationElement, SelfstoreGateElement, SelfstoreJoinElement, SelfstoreShareElement, SelfstoreStatusElement, SelfstoreStorageElement, defaultIcons, defineSelfstoreWidgets };
+export { FlowWidget, SelfstoreAccountElement, SelfstoreBackupsElement, SelfstoreConnectElement, SelfstoreDestinationElement, SelfstoreGateElement, SelfstoreJoinElement, SelfstoreShareElement, SelfstoreStatusElement, SelfstoreStorageElement, defaultIcons, defineAccount, defineBackups, defineConnect, defineDestination, defineGate, defineJoin, defineSelfstoreWidgets, defineShare, defineStatus, defineStorage };
 //# sourceMappingURL=widgets.js.map
 //# sourceMappingURL=widgets.js.map