selfstore 1.8.7 → 1.8.9

package/dist/advanced.d.ts

@@ -1,12 +1,12 @@
-import { B as BackupTarget } from './store-BiQ-BuVl.js';
-export { A as AuthExpiredError, a as BuiltinTargetKind, E as EncodeOptions, H as Header, K as KdfParams, L as LocalStore, b as LocalStoreOptions, c as LocalStoreState, M as MirrorState, d as Mode, e as PasswordCheck, f as PasswordPolicy, g as PasswordRequirement, P as PeerSource, h as PeerState, R as RESERVED_COLLECTION_PREFIX, i as RESERVED_STORE_MODES, j as RecipientStanza, k as ReplicaState, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, n as Snapshot, o as SnapshotFile, p as StatusAction, q as StatusDescriptor, r as StatusInput, s as StorageState, t as StoreError, u as StoreGroupConfig, v as SyncJournalEntry, w as SyncSource, T as TargetKind, x as checkPasswordPolicy, y as createLocalStore, z as deriveStatus, C as errorLabelKey, D as isAuthExpired, F as isReservedStoreMode, G as isSelfstoreError } from './store-BiQ-BuVl.js';
+import { B as BackupTarget } from './store-CiLoRJmy.js';
+export { A as AuthExpiredError, a as BuiltinTargetKind, E as EncodeOptions, H as Header, K as KdfParams, L as LocalStore, b as LocalStoreOptions, c as LocalStoreState, M as MirrorState, d as Mode, e as PasswordCheck, f as PasswordPolicy, g as PasswordRequirement, P as PeerSource, h as PeerState, R as RESERVED_COLLECTION_PREFIX, i as RESERVED_STORE_MODES, j as RecipientStanza, k as ReplicaState, l as SelfstoreError, m as SelfstoreErrorCode, n as Severity, o as Snapshot, p as SnapshotFile, q as StatusAction, r as StatusDescriptor, s as StatusInput, t as StorageState, S as StoreError, u as StoreGroupConfig, v as SyncJournalEntry, w as SyncSource, T as TargetKind, x as checkPasswordPolicy, y as createLocalStore, z as deriveStatus, C as errorLabelKey, D as isAuthExpired, F as isReservedStoreMode, G as isSelfstoreError } from './store-CiLoRJmy.js';
 import { K as KV } from './cache-ilsK3Tki.js';
 export { C as CachedFile, L as LocalCache, e as LockableCache, i as indexedDbCache, f as isLockableCache, m as memoryCache } from './cache-ilsK3Tki.js';
-export { G as GisDriveAuthOptions, a as GisTokenPersistence, d as datedName, e as exportSnapshot, g as gisDriveAuth, i as importSnapshot, b as inspect, c as isEncrypted, p as pickFromDisk, s as saveToDisk } from './local-VLHtF3vT.js';
-import { c as connect$2, f as fromSession$2, a as connect$3, b as fromSession$3, p as peer } from './s3-DvsnA-FK.js';
-export { S as S3Config, d as S3ConnectOptions, W as WebdavConfig, e as WebdavConnectOptions, g as WebdavPeerOptions } from './s3-DvsnA-FK.js';
-import { c as connect$1, f as fromSession$1, p as preview, a as adopt, b as findOrCreateOwnFile, l as listBackups, d as createBackup, e as deleteBackup, r as renameBackup, g as account } from './drive-CTYvGg_7.js';
-export { h as DriveAccount, i as DriveAuth, j as DriveBackupInfo, D as DriveOptions } from './drive-CTYvGg_7.js';
+export { G as GisDriveAuthOptions, a as GisTokenPersistence, d as datedName, e as exportSnapshot, g as gisDriveAuth, i as importSnapshot, b as inspect, c as isEncrypted, p as pickFromDisk, s as saveToDisk } from './local-CldSa9EY.js';
+import { c as connect$2, f as fromSession$2, a as connect$3, b as fromSession$3, p as peer } from './s3-DgyTwMRc.js';
+export { S as S3Config, d as S3ConnectOptions, W as WebdavConfig, e as WebdavConnectOptions, g as WebdavPeerOptions } from './s3-DgyTwMRc.js';
+import { c as connect$1, f as fromSession$1, p as preview, b as adopt, d as findOrCreateOwnFile, l as listBackups, e as createBackup, g as deleteBackup, r as renameBackup, h as account } from './drive-B2fm71qD.js';
+export { i as DriveAccount, a as DriveAuth, j as DriveBackupInfo, D as DriveOptions } from './drive-B2fm71qD.js';
 import './sync.js';
 
 /**

package/dist/backups.d.ts

@@ -1,8 +1,8 @@
-import { B as BackupsHost } from './manager-DZ1c_aSS.js';
-export { a as BackupFileInfo, b as BackupOwner, c as BackupRow, d as BackupsErrorCode, e as BackupsKeys, f as BackupsManager, g as BackupsNaming, h as BackupsSnapshot, K as KnownBackups, i as createBackupsManager } from './manager-DZ1c_aSS.js';
-import { D as DriveOptions } from './drive-CTYvGg_7.js';
+import { B as BackupsHost } from './manager-BqzTVaep.js';
+export { a as BackupFileInfo, b as BackupOwner, c as BackupRow, d as BackupsErrorCode, e as BackupsKeys, f as BackupsManager, g as BackupsNaming, h as BackupsSnapshot, K as KnownBackups, i as createBackupsManager } from './manager-BqzTVaep.js';
+import { D as DriveOptions } from './drive-B2fm71qD.js';
 import './cache-ilsK3Tki.js';
-import './store-BiQ-BuVl.js';
+import './store-CiLoRJmy.js';
 import './sync.js';
 import './machine-ALMkT3mk.js';
 

package/dist/{flows-vX9zy9bI.d.ts → connect-DaZFPJdt.d.ts}

@@ -1,7 +1,7 @@
-import { t as StoreError, B as BackupTarget, L as LocalStore, k as ReplicaState } from './store-BiQ-BuVl.js';
+import { S as StoreError, B as BackupTarget, L as LocalStore } from './store-CiLoRJmy.js';
 import { K as KV } from './cache-ilsK3Tki.js';
-import { i as DriveAuth } from './drive-CTYvGg_7.js';
-import { W as WebdavConfig, S as S3Config } from './s3-DvsnA-FK.js';
+import { a as DriveAuth } from './drive-B2fm71qD.js';
+import { W as WebdavConfig, S as S3Config } from './s3-DgyTwMRc.js';
 import { F as FlowStore } from './machine-ALMkT3mk.js';
 
 type ConnectKind = 'drive' | 'file' | 'webdav' | 's3';
@@ -189,179 +189,4 @@ interface ConnectFlow extends FlowStore<ConnectSnapshot> {
 }
 declare function connectFlow(store: StoreLike, targets: ConnectTargets, options?: ConnectFlowOptions): ConnectFlow;
 
-/** The one replica this flow manages, as its id on the engine. */
-declare const REPLICA_ID = "replica";
-type ReplicaStep = 'idle' | 'choose' | 'form-webdav' | 'form-s3';
-interface ReplicaSnapshot {
-    step: ReplicaStep;
-    /** The kinds the host offers, in ConnectTargets order. */
-    kinds: ConnectKind[];
-    busy: boolean;
-    error: StoreError | null;
-    /** The live engine entry (label, lastPublishAt, lastError), null when none. */
-    replica: ReplicaState | null;
-}
-interface ReplicaFlowOptions {
-    /** File name of the copy on its destination. Default: the primary backup
-     *  name with `.replica` before the extension ("App.zip" -> "App.replica.zip"),
-     *  which a same-account Drive never confuses with the primary file and the
-     *  backups panel never lists as a backup of its own. */
-    fileName?: string;
-    /** Rebuild the target of a custom Connector kind on restore() (built-in
-     *  kinds rebuild by themselves). Without it, custom kinds are not restored. */
-    restoreTarget?: (kind: ConnectKind) => Promise<BackupTarget | null>;
-}
-interface ReplicaFlow extends FlowStore<ReplicaSnapshot> {
-    /** Show the destination choice (from the user's gesture). */
-    open(): void;
-    /** Back to idle; never an error. */
-    cancel(): void;
-    /** Run a destination (inside the user's click - pickers and consent popups
-     *  open from it). `webdav: true` / `s3: true` route to their form step. */
-    pick(kind: ConnectKind): void;
-    /** 'form-webdav' step: submit the server config. */
-    submitWebdav(config: WebdavConfig): void;
-    /** 'form-s3' step: submit the bucket config. */
-    submitS3(config: S3Config): void;
-    /** Detach the copy and forget its session. Never deletes remote data. */
-    remove(): Promise<void>;
-    /** Silent reboot: re-attach the copy recorded by a past session, if any.
-     *  Never throws - an unreachable destination retries at the next boot. */
-    restore(): Promise<void>;
-    /** Detach from the engine (the replica itself stays attached). */
-    dispose(): void;
-}
-declare function replicaFlow(store: StoreLike, targets: ConnectTargets, options?: ReplicaFlowOptions): ReplicaFlow;
-
-type ShareLevel = 'read' | 'write';
-interface ShareLinkInfo {
-    /** Engine-scoped stable id (revoke keys on it). */
-    id: string;
-    /** The invitation URL to hand out. */
-    url: string;
-    level: ShareLevel;
-}
-interface ShareMemberInfo {
-    /** Engine-scoped stable id (removeMember keys on it). */
-    id: string;
-    label?: string;
-    /** This row is the local user. */
-    self?: boolean;
-    /** This row owns the share (the app may render a badge, the flow does not care). */
-    owner?: boolean;
-}
-/** The app-side port the flow drives. Implementations wrap whatever transport
- *  the app shares through; every method may throw (SelfstoreError preferred,
- *  anything is normalized). */
-interface ShareEngine {
-    /** The current truth: active links and members. */
-    list(): Promise<{
-        links: ShareLinkInfo[];
-        members: ShareMemberInfo[];
-    }>;
-    createLink(opts: {
-        level: ShareLevel;
-    }): Promise<ShareLinkInfo>;
-    revokeLink(id: string): Promise<void>;
-    /** Optional: engines without member management simply omit it. */
-    removeMember?(id: string): Promise<void>;
-    /** Optional: END the whole share in one gesture - every link dead, every
-     *  member out. Engines whose transport has such a move (an invitation to
-     *  kill, a file to re-privatize) expose it; the widget renders the action
-     *  only then. */
-    revokeAll?(): Promise<void>;
-}
-type ShareBusy = 'refresh' | 'create' | 'revoke' | 'remove' | 'revoke-all' | null;
-interface ShareSnapshot {
-    links: readonly ShareLinkInfo[];
-    members: readonly ShareMemberInfo[];
-    /** The operation in flight, or null. */
-    busy: ShareBusy;
-    /** The last refresh failed: the lists shown are the last-known good ones. */
-    stale: boolean;
-    /** The last operation's problem (the lists are never cleared by an error). */
-    error: StoreError | null;
-    /** True once the engine offers removeMember (render the row action at all). */
-    canRemoveMembers: boolean;
-    /** True once the engine offers revokeAll (render the end-the-share action). */
-    canRevokeAll: boolean;
-}
-interface ShareFlow extends FlowStore<ShareSnapshot> {
-    /** Re-list from the engine. Failure keeps the last-known lists (stale). */
-    refresh(): Promise<void>;
-    /** Create an invitation link. Resolves to it, or null when refused (an
-     *  operation was already in flight). */
-    createLink(opts: {
-        level: ShareLevel;
-    }): Promise<ShareLinkInfo | null>;
-    /** Revoke a link. The link leaves the snapshot only once the engine
-     *  confirmed. Resolves to whether it did. */
-    revokeLink(id: string): Promise<boolean>;
-    /** Remove a member (never yourself - refused up front). Resolves to whether
-     *  the engine confirmed. */
-    removeMember(id: string): Promise<boolean>;
-    /** End the whole share: every link and member leaves the snapshot only
-     *  once the engine confirmed. Resolves to whether it did. */
-    revokeAll(): Promise<boolean>;
-}
-declare function shareFlow(engine: ShareEngine, options?: {
-    deadlineMs?: number;
-}): ShareFlow;
-
-/** What the user is about to join - enough to render an honest question. */
-interface JoinPreview {
-    /** The share's display name, when the link carries one. */
-    label?: string;
-    /** Who shared it (a name, an email - whatever the engine knows). */
-    from?: string;
-    level?: ShareLevel;
-}
-/** How joining ended, other than plain failure:
- *  'joined'    - this device now follows the share.
- *  'mismatch'  - this device already follows a DIFFERENT share: joining a
- *                second one is refused (leave the first, or use another
- *                device/profile).
- *  'no-invite' - the invitation is spent, expired, or aimed at another
- *                account (switching accounts may be the fix). */
-type JoinOutcome = 'joined' | 'mismatch' | 'no-invite';
-/** The app-side port: how a link is read and honoured on this transport. */
-interface JoinEngine {
-    /** Read-only look at the invitation. Must change NOTHING. */
-    preview(link: string): Promise<JoinPreview>;
-    /** Consume the invitation and wire the share. Resolve null when the user
-     *  backed out of a popup the engine had to open (an account chooser, a
-     *  consent screen): the flow returns to 'ready' silently - backing out of
-     *  a human gesture is not an error, here as everywhere in these flows. */
-    join(link: string): Promise<JoinOutcome | null>;
-    /** Optional: re-run the account chooser (the invite may belong to another
-     *  account). The flow re-previews after it. */
-    switchAccount?(): Promise<void>;
-}
-type JoinStep = 'previewing' | 'ready' | 'joining' | 'joined' | 'mismatch' | 'no-invite' | 'error';
-interface JoinSnapshot {
-    /** The invitation this flow was opened with - held here so the UI can
-     *  always find it again. */
-    link: string;
-    step: JoinStep;
-    /** Set once previewed (kept through errors, so retry re-renders context). */
-    preview: JoinPreview | null;
-    /** The engine offers an account switch. */
-    canSwitchAccount: boolean;
-    busy: boolean;
-    /** Set when step === 'error': show `labelKey`, log `message`. */
-    error: StoreError | null;
-}
-interface JoinFlow extends FlowStore<JoinSnapshot> {
-    /** Say yes: consume the invitation. Only from 'ready'. */
-    accept(): void;
-    /** Re-run the account chooser, then preview again under the new account.
-     *  Available from 'ready', 'no-invite' and 'error' when the engine offers it. */
-    switchAccount(): void;
-    /** From 'error': preview again and resume the journey. */
-    retry(): void;
-}
-declare function joinFlow(link: string, engine: JoinEngine, options?: {
-    deadlineMs?: number;
-}): JoinFlow;
-
-export { joinFlow as A, replicaFlow as B, type ConnectTargets as C, shareFlow as D, type FlowHost as F, type JoinEngine as J, type ReplicaFlow as R, type StoreLike as S, type ConnectFlowOptions as a, type ConnectKind as b, type ConnectFlow as c, type ShareEngine as d, type ShareLevel as e, type ShareFlow as f, type JoinFlow as g, type ConnectFlowOutcome as h, type ConnectResolution as i, type ConnectSnapshot as j, type ConnectStep as k, type Connector as l, type JoinOutcome as m, type JoinPreview as n, type JoinSnapshot as o, type JoinStep as p, REPLICA_ID as q, type ReplicaFlowOptions as r, type ReplicaSnapshot as s, type ReplicaStep as t, type ResumeOffer as u, type ShareBusy as v, type ShareLinkInfo as w, type ShareMemberInfo as x, type ShareSnapshot as y, connectFlow as z };
+export { type ConnectTargets as C, type FlowHost as F, type ResumeOffer as R, type StoreLike as S, type ConnectFlowOptions as a, type ConnectKind as b, type ConnectFlow as c, type ConnectFlowOutcome as d, type ConnectResolution as e, type ConnectSnapshot as f, type ConnectStep as g, type Connector as h, connectFlow as i };

package/dist/{drive-CTYvGg_7.d.ts → drive-B2fm71qD.d.ts}

@@ -1,4 +1,4 @@
-import { B as BackupTarget } from './store-BiQ-BuVl.js';
+import { B as BackupTarget } from './store-CiLoRJmy.js';
 import { K as KV } from './cache-ilsK3Tki.js';
 
 /**
@@ -137,4 +137,4 @@ declare function renameBackup(opts: {
     fileName: string;
 }): Promise<void>;
 
-export { type DriveOptions as D, adopt as a, findOrCreateOwnFile as b, connect as c, createBackup as d, deleteBackup as e, fromSession as f, account as g, type DriveAccount as h, type DriveAuth as i, type DriveBackupInfo as j, listBackups as l, preview as p, renameBackup as r };
+export { type DriveOptions as D, type DriveAuth as a, adopt as b, connect as c, findOrCreateOwnFile as d, createBackup as e, fromSession as f, deleteBackup as g, account as h, type DriveAccount as i, type DriveBackupInfo as j, listBackups as l, preview as p, renameBackup as r };

package/dist/flows.d.ts

@@ -1,7 +1,186 @@
-export { c as ConnectFlow, a as ConnectFlowOptions, h as ConnectFlowOutcome, b as ConnectKind, i as ConnectResolution, j as ConnectSnapshot, k as ConnectStep, C as ConnectTargets, l as Connector, F as FlowHost, J as JoinEngine, g as JoinFlow, m as JoinOutcome, n as JoinPreview, o as JoinSnapshot, p as JoinStep, q as REPLICA_ID, R as ReplicaFlow, r as ReplicaFlowOptions, s as ReplicaSnapshot, t as ReplicaStep, u as ResumeOffer, v as ShareBusy, d as ShareEngine, f as ShareFlow, e as ShareLevel, w as ShareLinkInfo, x as ShareMemberInfo, y as ShareSnapshot, z as connectFlow, A as joinFlow, B as replicaFlow, D as shareFlow } from './flows-vX9zy9bI.js';
-export { F as FlowStore, w as withDeadline } from './machine-ALMkT3mk.js';
-import './store-BiQ-BuVl.js';
+import { b as ConnectKind, S as StoreLike, C as ConnectTargets } from './connect-DaZFPJdt.js';
+export { c as ConnectFlow, a as ConnectFlowOptions, d as ConnectFlowOutcome, e as ConnectResolution, f as ConnectSnapshot, g as ConnectStep, h as Connector, F as FlowHost, R as ResumeOffer, i as connectFlow } from './connect-DaZFPJdt.js';
+import { S as StoreError, k as ReplicaState, B as BackupTarget } from './store-CiLoRJmy.js';
+import { F as FlowStore } from './machine-ALMkT3mk.js';
+export { w as withDeadline } from './machine-ALMkT3mk.js';
+import { W as WebdavConfig, S as S3Config } from './s3-DgyTwMRc.js';
 import './cache-ilsK3Tki.js';
+import './drive-B2fm71qD.js';
 import './sync.js';
-import './drive-CTYvGg_7.js';
-import './s3-DvsnA-FK.js';
+
+/** The one replica this flow manages, as its id on the engine. */
+declare const REPLICA_ID = "replica";
+type ReplicaStep = 'idle' | 'choose' | 'form-webdav' | 'form-s3';
+interface ReplicaSnapshot {
+    step: ReplicaStep;
+    /** The kinds the host offers, in ConnectTargets order. */
+    kinds: ConnectKind[];
+    busy: boolean;
+    error: StoreError | null;
+    /** The live engine entry (label, lastPublishAt, lastError), null when none. */
+    replica: ReplicaState | null;
+}
+interface ReplicaFlowOptions {
+    /** File name of the copy on its destination. Default: the primary backup
+     *  name with `.replica` before the extension ("App.zip" -> "App.replica.zip"),
+     *  which a same-account Drive never confuses with the primary file and the
+     *  backups panel never lists as a backup of its own. */
+    fileName?: string;
+    /** Rebuild the target of a custom Connector kind on restore() (built-in
+     *  kinds rebuild by themselves). Without it, custom kinds are not restored. */
+    restoreTarget?: (kind: ConnectKind) => Promise<BackupTarget | null>;
+}
+interface ReplicaFlow extends FlowStore<ReplicaSnapshot> {
+    /** Show the destination choice (from the user's gesture). */
+    open(): void;
+    /** Back to idle; never an error. */
+    cancel(): void;
+    /** Run a destination (inside the user's click - pickers and consent popups
+     *  open from it). `webdav: true` / `s3: true` route to their form step. */
+    pick(kind: ConnectKind): void;
+    /** 'form-webdav' step: submit the server config. */
+    submitWebdav(config: WebdavConfig): void;
+    /** 'form-s3' step: submit the bucket config. */
+    submitS3(config: S3Config): void;
+    /** Detach the copy and forget its session. Never deletes remote data. */
+    remove(): Promise<void>;
+    /** Silent reboot: re-attach the copy recorded by a past session, if any.
+     *  Never throws - an unreachable destination retries at the next boot. */
+    restore(): Promise<void>;
+    /** Detach from the engine (the replica itself stays attached). */
+    dispose(): void;
+}
+declare function replicaFlow(store: StoreLike, targets: ConnectTargets, options?: ReplicaFlowOptions): ReplicaFlow;
+
+type ShareLevel = 'read' | 'write';
+interface ShareLinkInfo {
+    /** Engine-scoped stable id (revoke keys on it). */
+    id: string;
+    /** The invitation URL to hand out. */
+    url: string;
+    level: ShareLevel;
+}
+interface ShareMemberInfo {
+    /** Engine-scoped stable id (removeMember keys on it). */
+    id: string;
+    label?: string;
+    /** This row is the local user. */
+    self?: boolean;
+    /** This row owns the share (the app may render a badge, the flow does not care). */
+    owner?: boolean;
+}
+/** The app-side port the flow drives. Implementations wrap whatever transport
+ *  the app shares through; every method may throw (SelfstoreError preferred,
+ *  anything is normalized). */
+interface ShareEngine {
+    /** The current truth: active links and members. */
+    list(): Promise<{
+        links: ShareLinkInfo[];
+        members: ShareMemberInfo[];
+    }>;
+    createLink(opts: {
+        level: ShareLevel;
+    }): Promise<ShareLinkInfo>;
+    revokeLink(id: string): Promise<void>;
+    /** Optional: engines without member management simply omit it. */
+    removeMember?(id: string): Promise<void>;
+    /** Optional: END the whole share in one gesture - every link dead, every
+     *  member out. Engines whose transport has such a move (an invitation to
+     *  kill, a file to re-privatize) expose it; the widget renders the action
+     *  only then. */
+    revokeAll?(): Promise<void>;
+}
+type ShareBusy = 'refresh' | 'create' | 'revoke' | 'remove' | 'revoke-all' | null;
+interface ShareSnapshot {
+    links: readonly ShareLinkInfo[];
+    members: readonly ShareMemberInfo[];
+    /** The operation in flight, or null. */
+    busy: ShareBusy;
+    /** The last refresh failed: the lists shown are the last-known good ones. */
+    stale: boolean;
+    /** The last operation's problem (the lists are never cleared by an error). */
+    error: StoreError | null;
+    /** True once the engine offers removeMember (render the row action at all). */
+    canRemoveMembers: boolean;
+    /** True once the engine offers revokeAll (render the end-the-share action). */
+    canRevokeAll: boolean;
+}
+interface ShareFlow extends FlowStore<ShareSnapshot> {
+    /** Re-list from the engine. Failure keeps the last-known lists (stale). */
+    refresh(): Promise<void>;
+    /** Create an invitation link. Resolves to it, or null when refused (an
+     *  operation was already in flight). */
+    createLink(opts: {
+        level: ShareLevel;
+    }): Promise<ShareLinkInfo | null>;
+    /** Revoke a link. The link leaves the snapshot only once the engine
+     *  confirmed. Resolves to whether it did. */
+    revokeLink(id: string): Promise<boolean>;
+    /** Remove a member (never yourself - refused up front). Resolves to whether
+     *  the engine confirmed. */
+    removeMember(id: string): Promise<boolean>;
+    /** End the whole share: every link and member leaves the snapshot only
+     *  once the engine confirmed. Resolves to whether it did. */
+    revokeAll(): Promise<boolean>;
+}
+declare function shareFlow(engine: ShareEngine, options?: {
+    deadlineMs?: number;
+}): ShareFlow;
+
+/** What the user is about to join - enough to render an honest question. */
+interface JoinPreview {
+    /** The share's display name, when the link carries one. */
+    label?: string;
+    /** Who shared it (a name, an email - whatever the engine knows). */
+    from?: string;
+    level?: ShareLevel;
+}
+/** How joining ended, other than plain failure:
+ *  'joined'    - this device now follows the share.
+ *  'mismatch'  - this device already follows a DIFFERENT share: joining a
+ *                second one is refused (leave the first, or use another
+ *                device/profile).
+ *  'no-invite' - the invitation is spent, expired, or aimed at another
+ *                account (switching accounts may be the fix). */
+type JoinOutcome = 'joined' | 'mismatch' | 'no-invite';
+/** The app-side port: how a link is read and honoured on this transport. */
+interface JoinEngine {
+    /** Read-only look at the invitation. Must change NOTHING. */
+    preview(link: string): Promise<JoinPreview>;
+    /** Consume the invitation and wire the share. Resolve null when the user
+     *  backed out of a popup the engine had to open (an account chooser, a
+     *  consent screen): the flow returns to 'ready' silently - backing out of
+     *  a human gesture is not an error, here as everywhere in these flows. */
+    join(link: string): Promise<JoinOutcome | null>;
+    /** Optional: re-run the account chooser (the invite may belong to another
+     *  account). The flow re-previews after it. */
+    switchAccount?(): Promise<void>;
+}
+type JoinStep = 'previewing' | 'ready' | 'joining' | 'joined' | 'mismatch' | 'no-invite' | 'error';
+interface JoinSnapshot {
+    /** The invitation this flow was opened with - held here so the UI can
+     *  always find it again. */
+    link: string;
+    step: JoinStep;
+    /** Set once previewed (kept through errors, so retry re-renders context). */
+    preview: JoinPreview | null;
+    /** The engine offers an account switch. */
+    canSwitchAccount: boolean;
+    busy: boolean;
+    /** Set when step === 'error': show `labelKey`, log `message`. */
+    error: StoreError | null;
+}
+interface JoinFlow extends FlowStore<JoinSnapshot> {
+    /** Say yes: consume the invitation. Only from 'ready'. */
+    accept(): void;
+    /** Re-run the account chooser, then preview again under the new account.
+     *  Available from 'ready', 'no-invite' and 'error' when the engine offers it. */
+    switchAccount(): void;
+    /** From 'error': preview again and resume the journey. */
+    retry(): void;
+}
+declare function joinFlow(link: string, engine: JoinEngine, options?: {
+    deadlineMs?: number;
+}): JoinFlow;
+
+export { ConnectKind, ConnectTargets, FlowStore, type JoinEngine, type JoinFlow, type JoinOutcome, type JoinPreview, type JoinSnapshot, type JoinStep, REPLICA_ID, type ReplicaFlow, type ReplicaFlowOptions, type ReplicaSnapshot, type ReplicaStep, type ShareBusy, type ShareEngine, type ShareFlow, type ShareLevel, type ShareLinkInfo, type ShareMemberInfo, type ShareSnapshot, joinFlow, replicaFlow, shareFlow };

package/dist/households.d.ts

@@ -1,4 +1,4 @@
-import { B as BackupTarget, P as PeerSource, L as LocalStore } from './store-BiQ-BuVl.js';
+import { B as BackupTarget, P as PeerSource, L as LocalStore } from './store-CiLoRJmy.js';
 import { K as KV } from './cache-ilsK3Tki.js';
 import './sync.js';
 

package/dist/index.d.ts

@@ -1,10 +1,12 @@
-import { n as Snapshot, E as EncodeOptions, H as Header, f as PasswordPolicy, B as BackupTarget, q as StatusDescriptor, t as StoreError, c as LocalStoreState, L as LocalStore } from './store-BiQ-BuVl.js';
-export { d as Mode, e as PasswordCheck, g as PasswordRequirement, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, o as SnapshotFile, p as StatusAction, s as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-BiQ-BuVl.js';
+import { o as Snapshot, E as EncodeOptions, H as Header, f as PasswordPolicy, B as BackupTarget, r as StatusDescriptor, S as StoreError, c as LocalStoreState, L as LocalStore } from './store-CiLoRJmy.js';
+export { d as Mode, e as PasswordCheck, g as PasswordRequirement, l as SelfstoreError, m as SelfstoreErrorCode, n as Severity, p as SnapshotFile, q as StatusAction, t as StorageState, T as TargetKind, x as checkPasswordPolicy, C as errorLabelKey, G as isSelfstoreError } from './store-CiLoRJmy.js';
 import { L as LocalCache, K as KV } from './cache-ilsK3Tki.js';
 import { SyncConfig } from './sync.js';
-import { i as DriveAuth } from './drive-CTYvGg_7.js';
-import { W as WebdavConfig, S as S3Config } from './s3-DvsnA-FK.js';
-export { f as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-VLHtF3vT.js';
+import { R as ResumeOffer, C as ConnectTargets } from './connect-DaZFPJdt.js';
+import { a as DriveAuth } from './drive-B2fm71qD.js';
+import { W as WebdavConfig, S as S3Config } from './s3-DgyTwMRc.js';
+export { f as changePassword, g as gisDriveAuth, p as pickFromDisk, s as saveToDisk } from './local-CldSa9EY.js';
+import './machine-ALMkT3mk.js';
 
 declare const BACKUP_EXTENSION = ".zip";
 declare const BACKUP_MIME = "application/zip";
@@ -112,9 +114,25 @@ interface SimpleOptions {
     /** Per-collection merge tuning (id field mapping, strategies). The default -
      *  records keyed by `id`, later edit wins, deletes propagate - fits most apps. */
     sync?: SyncConfig;
-    /** Google Drive auth, when this app uses Drive: providing it here lets a
-     *  connected Drive backup restore itself on the next start. */
-    drive?: DriveAuth;
+    /**
+     * Google Drive, when this app uses it. Two shapes for two situations:
+     *
+     * `{ clientId }` is the whole wiring - the library builds the browser
+     * connection, keeps ONE session for the app (several would mean several
+     * consent screens), reuses its token across a reload, remembers which
+     * account holds the backup and hands that back to Google so the chooser
+     * stops appearing. Nothing else to write.
+     *
+     * A `DriveAuth` instead, for an app that gets its tokens elsewhere - a
+     * server broker holding a refresh token, a native shell.
+     *
+     * Either way, providing it here is also what lets a connected Drive backup
+     * restore itself on the next start.
+     */
+    drive?: DriveAuth | {
+        clientId: string;
+        scope?: string;
+    };
     /** Where the working copy lives (default: IndexedDB named after the app;
      *  in-memory when IndexedDB does not exist, e.g. tests or SSR). */
     cache?: LocalCache;
@@ -236,6 +254,28 @@ interface SimpleStore<S extends Record<string, SimpleRecord> = Record<string, Si
         kv: KV;
         backupName: string;
     };
+    /** Who holds the destination, when it is known - the Google address behind a
+     *  Drive backup. Learned on connect and remembered across sessions, so a
+     *  surface can NAME the destination ("Google Drive" is not an address) and a
+     *  re-grant can skip the account chooser. Null for a file, or before a first
+     *  connect. Reading it costs nothing: no call goes out. */
+    readonly account: string | null;
+    /** The destination this device already used, ready to hand to a connect flow
+     *  as `options.resume` - so a returning visitor is offered "reopen my backup"
+     *  ahead of the plain destinations, instead of re-deriving a decision the
+     *  library already has on file. Null when there is nothing to resume. */
+    resumeOffer(): ResumeOffer | null;
+    /**
+     * The destinations this store can offer, ready for a connect flow or widget:
+     * Drive first when the app configured it, a file always.
+     *
+     * Consumers were assembling this by hand from the very session the store
+     * built - and the order and the "no client id means no Drive card" rule were
+     * rediscovered each time. An app wanting a different offer (a WebDAV server,
+     * its own target) still writes its own object; this is the default, not a
+     * ceiling.
+     */
+    destinations(): ConnectTargets;
 }
 /**
  * Open (or create) the app's local store. Awaits the initial load, so the

package/dist/index.js

@@ -1,11 +1,11 @@
-import { indexedDbCache, memoryCache, isLockableCache, createLocalStore } from './chunk-TXAMWBG5.js';
+import { indexedDbCache, memoryCache, gisDriveAuth, isLockableCache, createLocalStore } from './chunk-TXAMWBG5.js';
 export { gisDriveAuth } from './chunk-TXAMWBG5.js';
 import './chunk-SKWHKM25.js';
 import { saveToDisk } from './chunk-DCEXWSM6.js';
 export { pickFromDisk, saveToDisk } from './chunk-DCEXWSM6.js';
 import { fromSession as fromSession$1, fromSession2, isSupported, connect3, connect2, connect } from './chunk-TKWU52LK.js';
 export { hasDesktopFiles, useDesktopFiles } from './chunk-TKWU52LK.js';
-import { fromSession, connect as connect$1 } from './chunk-J5MFXJU6.js';
+import { fromSession, connect as connect$1, account } from './chunk-J5MFXJU6.js';
 import { restore } from './chunk-MGDXR3RB.js';
 export { BACKUP_EXTENSION, BACKUP_MIME, backup, changePassword, checkPasswordPolicy, restore } from './chunk-MGDXR3RB.js';
 import './chunk-QBCU7OOP.js';
@@ -32,6 +32,28 @@ function requireStringId(record, field, collection) {
 function hasIndexedDb() {
   return typeof indexedDB !== "undefined";
 }
+function isDriveAuth(v) {
+  return !!v && typeof v.token === "function";
+}
+var driveAccountKey = (app) => `selfstore.drive.account.${app}`;
+function localStore(job) {
+  try {
+    const store = globalThis.localStorage;
+    return store ? job(store) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function rememberedDriveAccount(app) {
+  return localStore((s) => s.getItem(driveAccountKey(app))) ?? void 0;
+}
+async function learnDriveAccount(app, auth) {
+  try {
+    const who = await account({ auth });
+    if (who.email) localStore((s) => s.setItem(driveAccountKey(app), who.email));
+  } catch {
+  }
+}
 async function selfstore(app, options = {}) {
   if (typeof app !== "string" || app.length === 0) {
     throw new TypeError('selfstore: pass your app name, e.g. selfstore("my-app").');
@@ -42,7 +64,12 @@ async function selfstore(app, options = {}) {
   const emitData = () => dataSubs.forEach((fn) => fn());
   const cache = options.cache ?? (hasIndexedDb() ? indexedDbCache(app, options.cacheLock ? { lock: true } : void 0) : memoryCache());
   const backupName = `${app}.zip`;
-  let driveAuth = options.drive ?? null;
+  let driveAuth = isDriveAuth(options.drive) ? options.drive : options.drive ? gisDriveAuth({
+    clientId: options.drive.clientId,
+    scope: options.drive.scope,
+    persist: "session",
+    hint: () => rememberedDriveAccount(app)
+  }) : null;
   if (options.cacheLock && isLockableCache(cache)) {
     let failed = false;
     while (!await cache.unlock(await options.cacheLock({ failed }))) failed = true;
@@ -180,7 +207,9 @@ async function selfstore(app, options = {}) {
       driveAuth = auth;
       const target = await connect$1({ auth, kv: cache.kv, fileName: backupName });
       if (!target) return "cancelled";
-      return connectTarget(target, opts);
+      const outcome = await connectTarget(target, opts);
+      if (outcome !== "cancelled") void learnDriveAccount(app, auth);
+      return outcome;
     },
     async connectFile(opts) {
       if (isSupported()) {
@@ -253,7 +282,26 @@ async function selfstore(app, options = {}) {
       store.dispose();
     },
     advanced: store,
-    flowHost: { engine: store, kv: cache.kv, backupName }
+    flowHost: { engine: store, kv: cache.kv, backupName },
+    get account() {
+      return rememberedDriveAccount(app) ?? null;
+    },
+    destinations() {
+      return driveAuth ? { drive: driveAuth, file: true } : { file: true };
+    },
+    resumeOffer() {
+      const detail = rememberedDriveAccount(app);
+      if (!driveAuth || !detail) return null;
+      const auth = driveAuth;
+      return {
+        kind: "drive",
+        detail,
+        // Reopening is not searching: fromSession takes the file id already
+        // remembered, where a fresh connect resolves by name and could land on
+        // another file carrying the same one.
+        connect: () => fromSession({ auth, kv: cache.kv, fileName: backupName })
+      };
+    }
   };
   return simple;
 }