selfstore 1.8.20 → 1.8.22

package/dist/{local-DrziuI_t.d.ts → local-8H61XxbL.d.ts}

@@ -1,5 +1,5 @@
-import { o as Snapshot, E as EncodeOptions, H as Header } from './store-DhrWMYg_.js';
-import { a as DriveAuth } from './drive-BLRsK32w.js';
+import { o as Snapshot, E as EncodeOptions, H as Header } from './store-CIbiNoiE.js';
+import { a as DriveAuth } from './drive-86CHuTij.js';
 
 /** Serialize a snapshot to a portable backup blob (compressed; encrypted if a password is given). */
 declare function exportSnapshot(snapshot: Snapshot, opts: EncodeOptions): Promise<Blob>;

package/dist/local-XET4G32B.js

@@ -0,0 +1,7 @@
+export { datedName, downloadBlob, pickFromDisk, pickSaveHandle, saveToDisk, writeToHandle } from './chunk-AUH35AAQ.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=local-XET4G32B.js.map
+//# sourceMappingURL=local-XET4G32B.js.map

package/dist/{local-DPS35F5C.js.map → local-XET4G32B.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"local-DPS35F5C.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"local-XET4G32B.js"}

package/dist/{manager-BlSs6Q5S.d.ts → manager-Di6lNE4E.d.ts}

@@ -1,5 +1,5 @@
 import { K as KV } from './cache-ilsK3Tki.js';
-import { B as BackupTarget, L as LocalStore } from './store-DhrWMYg_.js';
+import { B as BackupTarget, L as LocalStore } from './store-CIbiNoiE.js';
 import { F as FlowStore } from './machine-ALMkT3mk.js';
 
 /** What the destination reports about a listed file (one cheap metadata call). */

package/dist/manager-drive-YLSLQ63O.js

@@ -0,0 +1,10 @@
+export { createBackupsManager, driveBackupsHost } from './chunk-EBCQ7ZG7.js';
+import './chunk-3KAAPYPO.js';
+import './chunk-JTNFZV2B.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=manager-drive-YLSLQ63O.js.map
+//# sourceMappingURL=manager-drive-YLSLQ63O.js.map

package/dist/{manager-drive-4WLKOOXO.js.map → manager-drive-YLSLQ63O.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"manager-drive-4WLKOOXO.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"manager-drive-YLSLQ63O.js"}

package/dist/s3-43RWNCV3.js

@@ -0,0 +1,11 @@
+export { connect, fromSession } from './chunk-LUNYYH6D.js';
+import './chunk-QSLHEE2L.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-QBCU7OOP.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-FJGWTBAL.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=s3-43RWNCV3.js.map
+//# sourceMappingURL=s3-43RWNCV3.js.map

package/dist/s3-43RWNCV3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"s3-43RWNCV3.js"}

package/dist/{s3-BLgf6hqR.d.ts → s3-BsbVn3fw.d.ts}

@@ -1,4 +1,4 @@
-import { B as BackupTarget, P as PeerSource } from './store-DhrWMYg_.js';
+import { B as BackupTarget, P as PeerSource } from './store-CIbiNoiE.js';
 import { K as KV } from './cache-ilsK3Tki.js';
 
 /**

package/dist/{store-DhrWMYg_.d.ts → store-CIbiNoiE.d.ts}

@@ -149,7 +149,7 @@ interface EncodeOptions {
     extraSecrets?: string[];
 }
 
-type SelfstoreErrorCode = 'BAD_FORMAT' | 'UNSUPPORTED_VERSION' | 'PASSWORD_REQUIRED' | 'DECRYPT_FAILED' | 'TOO_LARGE' | 'VERIFY_FAILED' | 'FOREIGN_BACKUP' | 'AUTH_EXPIRED' | 'TARGET_UNAVAILABLE' | 'TARGET_WRITE_FAILED' | 'TARGET_GONE' | 'NOT_CONNECTED' | 'WEAK_PASSWORD' | 'ENCRYPTION_REQUIRED' | 'UNEXPECTEDLY_UNENCRYPTED' | 'SCHEMA_TOO_NEW' | 'IDENTITY_REQUIRED' | 'SIGNATURE_INVALID' | 'NOT_A_RECIPIENT' | 'MANIFEST_ROLLBACK';
+type SelfstoreErrorCode = 'BAD_FORMAT' | 'UNSUPPORTED_VERSION' | 'PASSWORD_REQUIRED' | 'DECRYPT_FAILED' | 'TOO_LARGE' | 'VERIFY_FAILED' | 'FOREIGN_BACKUP' | 'AUTH_EXPIRED' | 'TARGET_UNAVAILABLE' | 'TARGET_WRITE_FAILED' | 'TARGET_GONE' | 'NOT_CONNECTED' | 'WEAK_PASSWORD' | 'ENCRYPTION_REQUIRED' | 'UNEXPECTEDLY_UNENCRYPTED' | 'SCHEMA_TOO_NEW' | 'IDENTITY_REQUIRED' | 'SIGNATURE_INVALID' | 'NOT_A_RECIPIENT' | 'MANIFEST_ROLLBACK' | 'CLOCK_DRIFT';
 /**
  * i18n key for an error code: lower-camel-cased under `error.`, e.g.
  * 'error.authExpired'. The library ships the key, the app owns the copy;

package/dist/sync.d.ts

@@ -4,7 +4,13 @@
  * string so a plain string comparison equals causal order.
  */
 type Hlc = string;
-/** A fresh random replica id (one per device). */
+/**
+ * A fresh random replica id (one per device). Not a secret - but two replicas
+ * sharing an id lose the tiebreak that makes the order total, so it comes from
+ * the same source as everything else here. `randomUUID` is exposed only in a
+ * secure context; `getRandomValues` is not, which is why the fallback is that
+ * one and never `Math.random`.
+ */
 declare function createNode(): string;
 
 /**
@@ -79,11 +85,6 @@ interface ReplicaState {
     meta: SyncMeta;
 }
 type State = ReplicaState;
-/**
- * Merge replica `b` into `a` (commutative for the convergent strategies). The
- * optional `base` lets 'manual' tell a true concurrent conflict from a one-sided
- * change; without it, 'manual' errs toward surfacing.
- */
 declare function merge(a: State, b: State, config: SyncConfig, base?: SyncMeta): MergeResult;
 /**
  * Concurrent same-id edits that a convergent strategy resolves silently by keeping

package/dist/sync.js

@@ -1,3 +1,5 @@
-export { changes, createMeta, createNode, detectConflicts, merge, stamp } from './chunk-SKWHKM25.js';
+export { changes, createMeta, createNode, detectConflicts, merge, stamp } from './chunk-23UAUYSW.js';
+import './chunk-FJGWTBAL.js';
+import './chunk-XMC67RNM.js';
 //# sourceMappingURL=sync.js.map
 //# sourceMappingURL=sync.js.map

package/dist/webdav-EEQKX5TZ.js

@@ -0,0 +1,9 @@
+export { connect, fromSession, peer } from './chunk-JZHWAX34.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-QBCU7OOP.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
+//# sourceMappingURL=webdav-EEQKX5TZ.js.map
+//# sourceMappingURL=webdav-EEQKX5TZ.js.map

package/dist/webdav-EEQKX5TZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"webdav-EEQKX5TZ.js"}

package/dist/widgets.d.ts

@@ -1,11 +1,11 @@
-import { S as StoreLike, F as FlowHost, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow } from './connect-GY1R9c6Q.js';
+import { S as StoreLike, F as FlowHost, C as ConnectTargets, a as ConnectFlowOptions, b as ConnectKind, c as ConnectFlow } from './connect-Bob2mofK.js';
 import { ShareEngine, ShareLevel, ShareFlow, JoinEngine, JoinFlow, ReplicaFlow } from './flows.js';
-import { f as BackupsManager } from './manager-BlSs6Q5S.js';
-import './store-DhrWMYg_.js';
+import { f as BackupsManager } from './manager-Di6lNE4E.js';
+import './store-CIbiNoiE.js';
 import './cache-ilsK3Tki.js';
 import './sync.js';
-import './drive-BLRsK32w.js';
-import './s3-BLgf6hqR.js';
+import './drive-86CHuTij.js';
+import './s3-BsbVn3fw.js';
 import './machine-ALMkT3mk.js';
 
 /** Flat key -> string map; widgets merge a partial override over EN defaults. */
@@ -685,6 +685,20 @@ declare class SelfstoreDestinationElement extends FlowWidget {
  * a host can still mount separately, with every knob they already had. What is
  * added here is only the CHOICE between them, which follows the engine's own
  * status - the same signal the gate uses to decide whether to be on screen.
+ *
+ * WHERE IT FITS, and where it does not. Before a home is chosen this element IS
+ * the gate, and the gate is a full-viewport modal (measured: it covers the page
+ * at z-index 280 and takes focus). That is right for an app whose data means
+ * nothing until the user answers - a wallet, a record, anything the user will
+ * be told is safe - and it is the reason the question is asked once, up front,
+ * instead of hiding in a settings screen.
+ *
+ * It is wrong for a page that must work before any answer: a landing demo, a
+ * scratchpad, anything whose whole point is that you can type first. There,
+ * mount <selfstore-destination> (the panel on its own, no modal) or
+ * <selfstore-status> (one line), and offer the connect journey from a control
+ * the user reaches deliberately. Both are the same elements this one composes,
+ * so nothing is lost by starting there.
  */
 
 declare class SelfstoreStorageElement extends FlowWidget {

package/dist/widgets.js

@@ -1,12 +1,14 @@
-import { saveToDisk, datedName } from './chunk-DCEXWSM6.js';
-import { connectFlow, shareFlow, joinFlow } from './chunk-LKIRWVXM.js';
-import { isOpenSupported } from './chunk-TKWU52LK.js';
-import './chunk-W22V5CRM.js';
-import './chunk-J5MFXJU6.js';
-import './chunk-MGDXR3RB.js';
-import './chunk-QBCU7OOP.js';
-import './chunk-O3Y6FORN.js';
-import './chunk-3OBJOMQ2.js';
+import { saveToDisk, datedName } from './chunk-AUH35AAQ.js';
+import { connectFlow, shareFlow, joinFlow } from './chunk-LYO36VYB.js';
+import './chunk-3BWBBGFW.js';
+import { isOpenSupported } from './chunk-GW5CYP4C.js';
+import './chunk-3KAAPYPO.js';
+import './chunk-JTNFZV2B.js';
+import './chunk-757ZOSUI.js';
+import './chunk-HHPJPEEG.js';
+import './chunk-OY2A5DCB.js';
+import './chunk-RREJ2MFN.js';
+import './chunk-XMC67RNM.js';
 
 // src/widgets/icons.ts
 var INK = "#8a8f98";
@@ -38,7 +40,12 @@ var baseStyles = `
 	color: inherit;
 	--_accent: var(--selfstore-accent, #2563eb);
 	--_accent-ink: var(--selfstore-accent-contrast, #ffffff);
-	--_ink-dim: var(--selfstore-muted, color-mix(in srgb, currentColor 55%, transparent));
+	/* Dimmed ink is TEXT too - it words every sub, hint and field label - so it
+	   answers to 4.5:1, and an alpha over the host background is what decides
+	   that. At 55% a near-black ink on white composited to 3.99:1 and failed;
+	   62% lands at 5.0:1 there and at 6.3:1 for a near-white ink on a near-black
+	   page, while still reading a clear step below the main ink. */
+	--_ink-dim: var(--selfstore-muted, color-mix(in srgb, currentColor 62%, transparent));
 	--_border: var(--selfstore-border, color-mix(in srgb, currentColor 16%, transparent));
 	--_radius: var(--selfstore-radius, 12px);
 	--_gap: var(--selfstore-gap, 0.6rem);
@@ -689,7 +696,7 @@ var EN = {
   "error.foreignBackup": "This backup belongs to a different app. Open it in the app that created it."
 };
 var FR = {
-  "connect.title": "O\xF9 enregistrer vos donn\xE9es ?",
+  "connect.title": "O\xF9 enregistrer vos donn\xE9es\xA0?",
   "connect.recommended": "Recommand\xE9",
   "connect.resume": "Reprendre ma sauvegarde",
   "connect.or": "ou",
@@ -725,8 +732,8 @@ var FR = {
   "connect.password.submit": "Ouvrir",
   "connect.password.show": "Afficher le mot de passe",
   "connect.password.hide": "Masquer le mot de passe",
-  "connect.password.forgot": "Mot de passe oubli\xE9 ?",
-  "connect.password.forgot.warn": "Sans le mot de passe, cette sauvegarde ne peut pas \xEAtre ouverte. Vous pouvez repartir d'une sauvegarde vide : l'ancienne sera perdue d\xE9finitivement.",
+  "connect.password.forgot": "Mot de passe oubli\xE9\xA0?",
+  "connect.password.forgot.warn": "Sans le mot de passe, cette sauvegarde ne peut pas \xEAtre ouverte. Vous pouvez repartir d'une sauvegarde vide\xA0: l'ancienne sera perdue d\xE9finitivement.",
   "connect.password.forgot.confirm": "Remplacer la sauvegarde",
   "connect.password.forgot.back": "Retour",
   "connect.conflict.title": "Une sauvegarde existe d\xE9j\xE0 ici",
@@ -741,12 +748,12 @@ var FR = {
   "connect.webdav.password": "Mot de passe",
   "connect.webdav.submit": "Connecter",
   "connect.webdav.signup": "Cr\xE9er un compte",
-  "connect.webdav.help.more": "Comment faire ?",
+  "connect.webdav.help.more": "Comment faire\xA0?",
   "connect.done": "Connect\xE9. Vos donn\xE9es sont enregistr\xE9es.",
-  "connect.done.manual": "Mode export : ce navigateur ne peut pas garder le fichier ouvert.",
+  "connect.done.manual": "Mode export\xA0: ce navigateur ne peut pas garder le fichier ouvert.",
   "error.generic": "Cela n'a pas fonctionn\xE9. V\xE9rifiez la connexion et r\xE9essayez.",
   "error.targetUnavailable": "La sauvegarde ne r\xE9pond pas. R\xE9essayez dans un instant.",
-  "error.authExpired": "Acc\xE8s expir\xE9 : reconnectez-vous pour continuer.",
+  "error.authExpired": "Acc\xE8s expir\xE9\xA0: reconnectez-vous pour continuer.",
   "error.decryptFailed": "Cette sauvegarde n'a pas pu \xEAtre ouverte avec ce mot de passe.",
   "error.badFormat": "Ce fichier ne ressemble pas \xE0 une sauvegarde lisible.",
   "error.foreignBackup": "Cette sauvegarde appartient \xE0 une autre application. Ouvrez-la dans l'application qui l'a cr\xE9\xE9e."
@@ -1521,7 +1528,7 @@ var FR2 = {
   "share.remove": "Retirer",
   "share.stop": "Arr\xEAter le partage",
   "share.empty": "Personne d'autre n'a acc\xE8s pour le moment.",
-  "share.stale": "Connexion instable : cette vue est peut-\xEAtre en retard.",
+  "share.stale": "Connexion instable\xA0: cette vue est peut-\xEAtre en retard.",
   "error.generic": "Cela n'a pas fonctionn\xE9. V\xE9rifiez la connexion et r\xE9essayez.",
   "error.targetUnavailable": "Le service de partage ne r\xE9pond pas. R\xE9essayez dans un instant."
 };
@@ -2349,11 +2356,11 @@ var FR6 = {
   "backups.newTitle": "Nouvelle sauvegarde",
   "backups.startsBlank": "Elle d\xE9marre vide.",
   "backups.namePh": "Son nom",
-  "backups.willBe": "Fichier : {file}",
+  "backups.willBe": "Fichier\xA0: {file}",
   "backups.taken": "Ce nom est d\xE9j\xE0 pris.",
   "backups.create": "Cr\xE9er",
   "backups.renameTitle": "Renommer cette sauvegarde",
-  "backups.pwHint": "Cette sauvegarde est prot\xE9g\xE9e : entrez son mot de passe.",
+  "backups.pwHint": "Cette sauvegarde est prot\xE9g\xE9e\xA0: entrez son mot de passe.",
   "backups.pwShow": "Afficher le mot de passe",
   "backups.pwHide": "Masquer le mot de passe",
   "backups.cancel": "Annuler",
@@ -2374,7 +2381,7 @@ var FR6 = {
   "backups.replica.remove": "Retirer",
   "backups.replica.save": "Ajouter la copie",
   "backups.replica.webdav.url": "URL du fichier sur le serveur (https://hote:8443/dav/fichier.zip)",
-  "backups.replica.webdav.help": "L'URL compl\xE8te du fichier de sauvegarde, port personnalis\xE9 compris. Le serveur doit autoriser cette application \xE0 le joindre (CORS) : certains h\xE9bergeurs ne le font pas et ne se connecteront pas depuis un navigateur.",
+  "backups.replica.webdav.help": "L'URL compl\xE8te du fichier de sauvegarde, port personnalis\xE9 compris. Le serveur doit autoriser cette application \xE0 le joindre (CORS)\xA0: certains h\xE9bergeurs ne le font pas et ne se connecteront pas depuis un navigateur.",
   "backups.replica.webdav.user": "Identifiant",
   "backups.replica.webdav.password": "Mot de passe",
   "backups.replica.s3.endpoint": "URL du point d'acc\xE8s",
@@ -3463,8 +3470,8 @@ var EN7 = {
   "gate.defer.note": "Data kept only in this browser is lost if its storage is cleared."
 };
 var FR7 = {
-  "gate.title": "O\xF9 enregistrer vos donn\xE9es ?",
-  "gate.hint": "Elles sont chiffr\xE9es sur cet appareil. Choisissez une sauvegarde : tout y sera enregistr\xE9 automatiquement.",
+  "gate.title": "O\xF9 enregistrer vos donn\xE9es\xA0?",
+  "gate.hint": "Elles sont chiffr\xE9es sur cet appareil. Choisissez une sauvegarde\xA0: tout y sera enregistr\xE9 automatiquement.",
   "gate.fine": "",
   "gate.defer": "Plus tard - garder sur cet appareil seulement",
   "gate.defer.note": "Sans sauvegarde, les donn\xE9es disparaissent si le stockage de cet appareil est vid\xE9."