@jwilleke/ngdpbase-types 5.39.0 → 5.41.0

package/lib/src/utils/bip39English.js

@@ -0,0 +1,2 @@
+/** BIP-0039 English wordlist (official 2048 words). */
+export const BIP39_ENGLISH = ['abandon', 'ability', 'able', 'about', 'above', 'absent', 'absorb', 'abstract', 'absurd', 'abuse', 'access', 'accident', 'account', 'accuse', 'achieve', 'acid', 'acoustic', 'acquire', 'across', 'act', 'action', 'actor', 'actress', 'actual', 'adapt', 'add', 'addict', 'address', 'adjust', 'admit', 'adult', 'advance', 'advice', 'aerobic', 'affair', 'afford', 'afraid', 'again', 'age', 'agent', 'agree', 'ahead', 'aim', 'air', 'airport', 'aisle', 'alarm', 'album', 'alcohol', 'alert', 'alien', 'all', 'alley', 'allow', 'almost', 'alone', 'alpha', 'already', 'also', 'alter', 'always', 'amateur', 'amazing', 'among', 'amount', 'amused', 'analyst', 'anchor', 'ancient', 'anger', 'angle', 'angry', 'animal', 'ankle', 'announce', 'annual', 'another', 'answer', 'antenna', 'antique', 'anxiety', 'any', 'apart', 'apology', 'appear', 'apple', 'approve', 'april', 'arch', 'arctic', 'area', 'arena', 'argue', 'arm', 'armed', 'armor', 'army', 'around', 'arrange', 'arrest', 'arrive', 'arrow', 'art', 'artefact', 'artist', 'artwork', 'ask', 'aspect', 'assault', 'asset', 'assist', 'assume', 'asthma', 'athlete', 'atom', 'attack', 'attend', 'attitude', 'attract', 'auction', 'audit', 'august', 'aunt', 'author', 'auto', 'autumn', 'average', 'avocado', 'avoid', 'awake', 'aware', 'away', 'awesome', 'awful', 'awkward', 'axis', 'baby', 'bachelor', 'bacon', 'badge', 'bag', 'balance', 'balcony', 'ball', 'bamboo', 'banana', 'banner', 'bar', 'barely', 'bargain', 'barrel', 'base', 'basic', 'basket', 'battle', 'beach', 'bean', 'beauty', 'because', 'become', 'beef', 'before', 'begin', 'behave', 'behind', 'believe', 'below', 'belt', 'bench', 'benefit', 'best', 'betray', 'better', 'between', 'beyond', 'bicycle', 'bid', 'bike', 'bind', 'biology', 'bird', 'birth', 'bitter', 'black', 'blade', 'blame', 'blanket', 'blast', 'bleak', 'bless', 'blind', 'blood', 'blossom', 'blouse', 'blue', 'blur', 'blush', 'board', 'boat', 'body', 'boil', 'bomb', 'bone', 'bonus', 'book', 'boost', 'border', 'boring', 'borrow', 'boss', 'bottom', 'bounce', 'box', 'boy', 'bracket', 'brain', 'brand', 'brass', 'brave', 'bread', 'breeze', 'brick', 'bridge', 'brief', 'bright', 'bring', 'brisk', 'broccoli', 'broken', 'bronze', 'broom', 'brother', 'brown', 'brush', 'bubble', 'buddy', 'budget', 'buffalo', 'build', 'bulb', 'bulk', 'bullet', 'bundle', 'bunker', 'burden', 'burger', 'burst', 'bus', 'business', 'busy', 'butter', 'buyer', 'buzz', 'cabbage', 'cabin', 'cable', 'cactus', 'cage', 'cake', 'call', 'calm', 'camera', 'camp', 'can', 'canal', 'cancel', 'candy', 'cannon', 'canoe', 'canvas', 'canyon', 'capable', 'capital', 'captain', 'car', 'carbon', 'card', 'cargo', 'carpet', 'carry', 'cart', 'case', 'cash', 'casino', 'castle', 'casual', 'cat', 'catalog', 'catch', 'category', 'cattle', 'caught', 'cause', 'caution', 'cave', 'ceiling', 'celery', 'cement', 'census', 'century', 'cereal', 'certain', 'chair', 'chalk', 'champion', 'change', 'chaos', 'chapter', 'charge', 'chase', 'chat', 'cheap', 'check', 'cheese', 'chef', 'cherry', 'chest', 'chicken', 'chief', 'child', 'chimney', 'choice', 'choose', 'chronic', 'chuckle', 'chunk', 'churn', 'cigar', 'cinnamon', 'circle', 'citizen', 'city', 'civil', 'claim', 'clap', 'clarify', 'claw', 'clay', 'clean', 'clerk', 'clever', 'click', 'client', 'cliff', 'climb', 'clinic', 'clip', 'clock', 'clog', 'close', 'cloth', 'cloud', 'clown', 'club', 'clump', 'cluster', 'clutch', 'coach', 'coast', 'coconut', 'code', 'coffee', 'coil', 'coin', 'collect', 'color', 'column', 'combine', 'come', 'comfort', 'comic', 'common', 'company', 'concert', 'conduct', 'confirm', 'congress', 'connect', 'consider', 'control', 'convince', 'cook', 'cool', 'copper', 'copy', 'coral', 'core', 'corn', 'correct', 'cost', 'cotton', 'couch', 'country', 'couple', 'course', 'cousin', 'cover', 'coyote', 'crack', 'cradle', 'craft', 'cram', 'crane', 'crash', 'crater', 'crawl', 'crazy', 'cream', 'credit', 'creek', 'crew', 'cricket', 'crime', 'crisp', 'critic', 'crop', 'cross', 'crouch', 'crowd', 'crucial', 'cruel', 'cruise', 'crumble', 'crunch', 'crush', 'cry', 'crystal', 'cube', 'culture', 'cup', 'cupboard', 'curious', 'current', 'curtain', 'curve', 'cushion', 'custom', 'cute', 'cycle', 'dad', 'damage', 'damp', 'dance', 'danger', 'daring', 'dash', 'daughter', 'dawn', 'day', 'deal', 'debate', 'debris', 'decade', 'december', 'decide', 'decline', 'decorate', 'decrease', 'deer', 'defense', 'define', 'defy', 'degree', 'delay', 'deliver', 'demand', 'demise', 'denial', 'dentist', 'deny', 'depart', 'depend', 'deposit', 'depth', 'deputy', 'derive', 'describe', 'desert', 'design', 'desk', 'despair', 'destroy', 'detail', 'detect', 'develop', 'device', 'devote', 'diagram', 'dial', 'diamond', 'diary', 'dice', 'diesel', 'diet', 'differ', 'digital', 'dignity', 'dilemma', 'dinner', 'dinosaur', 'direct', 'dirt', 'disagree', 'discover', 'disease', 'dish', 'dismiss', 'disorder', 'display', 'distance', 'divert', 'divide', 'divorce', 'dizzy', 'doctor', 'document', 'dog', 'doll', 'dolphin', 'domain', 'donate', 'donkey', 'donor', 'door', 'dose', 'double', 'dove', 'draft', 'dragon', 'drama', 'drastic', 'draw', 'dream', 'dress', 'drift', 'drill', 'drink', 'drip', 'drive', 'drop', 'drum', 'dry', 'duck', 'dumb', 'dune', 'during', 'dust', 'dutch', 'duty', 'dwarf', 'dynamic', 'eager', 'eagle', 'early', 'earn', 'earth', 'easily', 'east', 'easy', 'echo', 'ecology', 'economy', 'edge', 'edit', 'educate', 'effort', 'egg', 'eight', 'either', 'elbow', 'elder', 'electric', 'elegant', 'element', 'elephant', 'elevator', 'elite', 'else', 'embark', 'embody', 'embrace', 'emerge', 'emotion', 'employ', 'empower', 'empty', 'enable', 'enact', 'end', 'endless', 'endorse', 'enemy', 'energy', 'enforce', 'engage', 'engine', 'enhance', 'enjoy', 'enlist', 'enough', 'enrich', 'enroll', 'ensure', 'enter', 'entire', 'entry', 'envelope', 'episode', 'equal', 'equip', 'era', 'erase', 'erode', 'erosion', 'error', 'erupt', 'escape', 'essay', 'essence', 'estate', 'eternal', 'ethics', 'evidence', 'evil', 'evoke', 'evolve', 'exact', 'example', 'excess', 'exchange', 'excite', 'exclude', 'excuse', 'execute', 'exercise', 'exhaust', 'exhibit', 'exile', 'exist', 'exit', 'exotic', 'expand', 'expect', 'expire', 'explain', 'expose', 'express', 'extend', 'extra', 'eye', 'eyebrow', 'fabric', 'face', 'faculty', 'fade', 'faint', 'faith', 'fall', 'false', 'fame', 'family', 'famous', 'fan', 'fancy', 'fantasy', 'farm', 'fashion', 'fat', 'fatal', 'father', 'fatigue', 'fault', 'favorite', 'feature', 'february', 'federal', 'fee', 'feed', 'feel', 'female', 'fence', 'festival', 'fetch', 'fever', 'few', 'fiber', 'fiction', 'field', 'figure', 'file', 'film', 'filter', 'final', 'find', 'fine', 'finger', 'finish', 'fire', 'firm', 'first', 'fiscal', 'fish', 'fit', 'fitness', 'fix', 'flag', 'flame', 'flash', 'flat', 'flavor', 'flee', 'flight', 'flip', 'float', 'flock', 'floor', 'flower', 'fluid', 'flush', 'fly', 'foam', 'focus', 'fog', 'foil', 'fold', 'follow', 'food', 'foot', 'force', 'forest', 'forget', 'fork', 'fortune', 'forum', 'forward', 'fossil', 'foster', 'found', 'fox', 'fragile', 'frame', 'frequent', 'fresh', 'friend', 'fringe', 'frog', 'front', 'frost', 'frown', 'frozen', 'fruit', 'fuel', 'fun', 'funny', 'furnace', 'fury', 'future', 'gadget', 'gain', 'galaxy', 'gallery', 'game', 'gap', 'garage', 'garbage', 'garden', 'garlic', 'garment', 'gas', 'gasp', 'gate', 'gather', 'gauge', 'gaze', 'general', 'genius', 'genre', 'gentle', 'genuine', 'gesture', 'ghost', 'giant', 'gift', 'giggle', 'ginger', 'giraffe', 'girl', 'give', 'glad', 'glance', 'glare', 'glass', 'glide', 'glimpse', 'globe', 'gloom', 'glory', 'glove', 'glow', 'glue', 'goat', 'goddess', 'gold', 'good', 'goose', 'gorilla', 'gospel', 'gossip', 'govern', 'gown', 'grab', 'grace', 'grain', 'grant', 'grape', 'grass', 'gravity', 'great', 'green', 'grid', 'grief', 'grit', 'grocery', 'group', 'grow', 'grunt', 'guard', 'guess', 'guide', 'guilt', 'guitar', 'gun', 'gym', 'habit', 'hair', 'half', 'hammer', 'hamster', 'hand', 'happy', 'harbor', 'hard', 'harsh', 'harvest', 'hat', 'have', 'hawk', 'hazard', 'head', 'health', 'heart', 'heavy', 'hedgehog', 'height', 'hello', 'helmet', 'help', 'hen', 'hero', 'hidden', 'high', 'hill', 'hint', 'hip', 'hire', 'history', 'hobby', 'hockey', 'hold', 'hole', 'holiday', 'hollow', 'home', 'honey', 'hood', 'hope', 'horn', 'horror', 'horse', 'hospital', 'host', 'hotel', 'hour', 'hover', 'hub', 'huge', 'human', 'humble', 'humor', 'hundred', 'hungry', 'hunt', 'hurdle', 'hurry', 'hurt', 'husband', 'hybrid', 'ice', 'icon', 'idea', 'identify', 'idle', 'ignore', 'ill', 'illegal', 'illness', 'image', 'imitate', 'immense', 'immune', 'impact', 'impose', 'improve', 'impulse', 'inch', 'include', 'income', 'increase', 'index', 'indicate', 'indoor', 'industry', 'infant', 'inflict', 'inform', 'inhale', 'inherit', 'initial', 'inject', 'injury', 'inmate', 'inner', 'innocent', 'input', 'inquiry', 'insane', 'insect', 'inside', 'inspire', 'install', 'intact', 'interest', 'into', 'invest', 'invite', 'involve', 'iron', 'island', 'isolate', 'issue', 'item', 'ivory', 'jacket', 'jaguar', 'jar', 'jazz', 'jealous', 'jeans', 'jelly', 'jewel', 'job', 'join', 'joke', 'journey', 'joy', 'judge', 'juice', 'jump', 'jungle', 'junior', 'junk', 'just', 'kangaroo', 'keen', 'keep', 'ketchup', 'key', 'kick', 'kid', 'kidney', 'kind', 'kingdom', 'kiss', 'kit', 'kitchen', 'kite', 'kitten', 'kiwi', 'knee', 'knife', 'knock', 'know', 'lab', 'label', 'labor', 'ladder', 'lady', 'lake', 'lamp', 'language', 'laptop', 'large', 'later', 'latin', 'laugh', 'laundry', 'lava', 'law', 'lawn', 'lawsuit', 'layer', 'lazy', 'leader', 'leaf', 'learn', 'leave', 'lecture', 'left', 'leg', 'legal', 'legend', 'leisure', 'lemon', 'lend', 'length', 'lens', 'leopard', 'lesson', 'letter', 'level', 'liar', 'liberty', 'library', 'license', 'life', 'lift', 'light', 'like', 'limb', 'limit', 'link', 'lion', 'liquid', 'list', 'little', 'live', 'lizard', 'load', 'loan', 'lobster', 'local', 'lock', 'logic', 'lonely', 'long', 'loop', 'lottery', 'loud', 'lounge', 'love', 'loyal', 'lucky', 'luggage', 'lumber', 'lunar', 'lunch', 'luxury', 'lyrics', 'machine', 'mad', 'magic', 'magnet', 'maid', 'mail', 'main', 'major', 'make', 'mammal', 'man', 'manage', 'mandate', 'mango', 'mansion', 'manual', 'maple', 'marble', 'march', 'margin', 'marine', 'market', 'marriage', 'mask', 'mass', 'master', 'match', 'material', 'math', 'matrix', 'matter', 'maximum', 'maze', 'meadow', 'mean', 'measure', 'meat', 'mechanic', 'medal', 'media', 'melody', 'melt', 'member', 'memory', 'mention', 'menu', 'mercy', 'merge', 'merit', 'merry', 'mesh', 'message', 'metal', 'method', 'middle', 'midnight', 'milk', 'million', 'mimic', 'mind', 'minimum', 'minor', 'minute', 'miracle', 'mirror', 'misery', 'miss', 'mistake', 'mix', 'mixed', 'mixture', 'mobile', 'model', 'modify', 'mom', 'moment', 'monitor', 'monkey', 'monster', 'month', 'moon', 'moral', 'more', 'morning', 'mosquito', 'mother', 'motion', 'motor', 'mountain', 'mouse', 'move', 'movie', 'much', 'muffin', 'mule', 'multiply', 'muscle', 'museum', 'mushroom', 'music', 'must', 'mutual', 'myself', 'mystery', 'myth', 'naive', 'name', 'napkin', 'narrow', 'nasty', 'nation', 'nature', 'near', 'neck', 'need', 'negative', 'neglect', 'neither', 'nephew', 'nerve', 'nest', 'net', 'network', 'neutral', 'never', 'news', 'next', 'nice', 'night', 'noble', 'noise', 'nominee', 'noodle', 'normal', 'north', 'nose', 'notable', 'note', 'nothing', 'notice', 'novel', 'now', 'nuclear', 'number', 'nurse', 'nut', 'oak', 'obey', 'object', 'oblige', 'obscure', 'observe', 'obtain', 'obvious', 'occur', 'ocean', 'october', 'odor', 'off', 'offer', 'office', 'often', 'oil', 'okay', 'old', 'olive', 'olympic', 'omit', 'once', 'one', 'onion', 'online', 'only', 'open', 'opera', 'opinion', 'oppose', 'option', 'orange', 'orbit', 'orchard', 'order', 'ordinary', 'organ', 'orient', 'original', 'orphan', 'ostrich', 'other', 'outdoor', 'outer', 'output', 'outside', 'oval', 'oven', 'over', 'own', 'owner', 'oxygen', 'oyster', 'ozone', 'pact', 'paddle', 'page', 'pair', 'palace', 'palm', 'panda', 'panel', 'panic', 'panther', 'paper', 'parade', 'parent', 'park', 'parrot', 'party', 'pass', 'patch', 'path', 'patient', 'patrol', 'pattern', 'pause', 'pave', 'payment', 'peace', 'peanut', 'pear', 'peasant', 'pelican', 'pen', 'penalty', 'pencil', 'people', 'pepper', 'perfect', 'permit', 'person', 'pet', 'phone', 'photo', 'phrase', 'physical', 'piano', 'picnic', 'picture', 'piece', 'pig', 'pigeon', 'pill', 'pilot', 'pink', 'pioneer', 'pipe', 'pistol', 'pitch', 'pizza', 'place', 'planet', 'plastic', 'plate', 'play', 'please', 'pledge', 'pluck', 'plug', 'plunge', 'poem', 'poet', 'point', 'polar', 'pole', 'police', 'pond', 'pony', 'pool', 'popular', 'portion', 'position', 'possible', 'post', 'potato', 'pottery', 'poverty', 'powder', 'power', 'practice', 'praise', 'predict', 'prefer', 'prepare', 'present', 'pretty', 'prevent', 'price', 'pride', 'primary', 'print', 'priority', 'prison', 'private', 'prize', 'problem', 'process', 'produce', 'profit', 'program', 'project', 'promote', 'proof', 'property', 'prosper', 'protect', 'proud', 'provide', 'public', 'pudding', 'pull', 'pulp', 'pulse', 'pumpkin', 'punch', 'pupil', 'puppy', 'purchase', 'purity', 'purpose', 'purse', 'push', 'put', 'puzzle', 'pyramid', 'quality', 'quantum', 'quarter', 'question', 'quick', 'quit', 'quiz', 'quote', 'rabbit', 'raccoon', 'race', 'rack', 'radar', 'radio', 'rail', 'rain', 'raise', 'rally', 'ramp', 'ranch', 'random', 'range', 'rapid', 'rare', 'rate', 'rather', 'raven', 'raw', 'razor', 'ready', 'real', 'reason', 'rebel', 'rebuild', 'recall', 'receive', 'recipe', 'record', 'recycle', 'reduce', 'reflect', 'reform', 'refuse', 'region', 'regret', 'regular', 'reject', 'relax', 'release', 'relief', 'rely', 'remain', 'remember', 'remind', 'remove', 'render', 'renew', 'rent', 'reopen', 'repair', 'repeat', 'replace', 'report', 'require', 'rescue', 'resemble', 'resist', 'resource', 'response', 'result', 'retire', 'retreat', 'return', 'reunion', 'reveal', 'review', 'reward', 'rhythm', 'rib', 'ribbon', 'rice', 'rich', 'ride', 'ridge', 'rifle', 'right', 'rigid', 'ring', 'riot', 'ripple', 'risk', 'ritual', 'rival', 'river', 'road', 'roast', 'robot', 'robust', 'rocket', 'romance', 'roof', 'rookie', 'room', 'rose', 'rotate', 'rough', 'round', 'route', 'royal', 'rubber', 'rude', 'rug', 'rule', 'run', 'runway', 'rural', 'sad', 'saddle', 'sadness', 'safe', 'sail', 'salad', 'salmon', 'salon', 'salt', 'salute', 'same', 'sample', 'sand', 'satisfy', 'satoshi', 'sauce', 'sausage', 'save', 'say', 'scale', 'scan', 'scare', 'scatter', 'scene', 'scheme', 'school', 'science', 'scissors', 'scorpion', 'scout', 'scrap', 'screen', 'script', 'scrub', 'sea', 'search', 'season', 'seat', 'second', 'secret', 'section', 'security', 'seed', 'seek', 'segment', 'select', 'sell', 'seminar', 'senior', 'sense', 'sentence', 'series', 'service', 'session', 'settle', 'setup', 'seven', 'shadow', 'shaft', 'shallow', 'share', 'shed', 'shell', 'sheriff', 'shield', 'shift', 'shine', 'ship', 'shiver', 'shock', 'shoe', 'shoot', 'shop', 'short', 'shoulder', 'shove', 'shrimp', 'shrug', 'shuffle', 'shy', 'sibling', 'sick', 'side', 'siege', 'sight', 'sign', 'silent', 'silk', 'silly', 'silver', 'similar', 'simple', 'since', 'sing', 'siren', 'sister', 'situate', 'six', 'size', 'skate', 'sketch', 'ski', 'skill', 'skin', 'skirt', 'skull', 'slab', 'slam', 'sleep', 'slender', 'slice', 'slide', 'slight', 'slim', 'slogan', 'slot', 'slow', 'slush', 'small', 'smart', 'smile', 'smoke', 'smooth', 'snack', 'snake', 'snap', 'sniff', 'snow', 'soap', 'soccer', 'social', 'sock', 'soda', 'soft', 'solar', 'soldier', 'solid', 'solution', 'solve', 'someone', 'song', 'soon', 'sorry', 'sort', 'soul', 'sound', 'soup', 'source', 'south', 'space', 'spare', 'spatial', 'spawn', 'speak', 'special', 'speed', 'spell', 'spend', 'sphere', 'spice', 'spider', 'spike', 'spin', 'spirit', 'split', 'spoil', 'sponsor', 'spoon', 'sport', 'spot', 'spray', 'spread', 'spring', 'spy', 'square', 'squeeze', 'squirrel', 'stable', 'stadium', 'staff', 'stage', 'stairs', 'stamp', 'stand', 'start', 'state', 'stay', 'steak', 'steel', 'stem', 'step', 'stereo', 'stick', 'still', 'sting', 'stock', 'stomach', 'stone', 'stool', 'story', 'stove', 'strategy', 'street', 'strike', 'strong', 'struggle', 'student', 'stuff', 'stumble', 'style', 'subject', 'submit', 'subway', 'success', 'such', 'sudden', 'suffer', 'sugar', 'suggest', 'suit', 'summer', 'sun', 'sunny', 'sunset', 'super', 'supply', 'supreme', 'sure', 'surface', 'surge', 'surprise', 'surround', 'survey', 'suspect', 'sustain', 'swallow', 'swamp', 'swap', 'swarm', 'swear', 'sweet', 'swift', 'swim', 'swing', 'switch', 'sword', 'symbol', 'symptom', 'syrup', 'system', 'table', 'tackle', 'tag', 'tail', 'talent', 'talk', 'tank', 'tape', 'target', 'task', 'taste', 'tattoo', 'taxi', 'teach', 'team', 'tell', 'ten', 'tenant', 'tennis', 'tent', 'term', 'test', 'text', 'thank', 'that', 'theme', 'then', 'theory', 'there', 'they', 'thing', 'this', 'thought', 'three', 'thrive', 'throw', 'thumb', 'thunder', 'ticket', 'tide', 'tiger', 'tilt', 'timber', 'time', 'tiny', 'tip', 'tired', 'tissue', 'title', 'toast', 'tobacco', 'today', 'toddler', 'toe', 'together', 'toilet', 'token', 'tomato', 'tomorrow', 'tone', 'tongue', 'tonight', 'tool', 'tooth', 'top', 'topic', 'topple', 'torch', 'tornado', 'tortoise', 'toss', 'total', 'tourist', 'toward', 'tower', 'town', 'toy', 'track', 'trade', 'traffic', 'tragic', 'train', 'transfer', 'trap', 'trash', 'travel', 'tray', 'treat', 'tree', 'trend', 'trial', 'tribe', 'trick', 'trigger', 'trim', 'trip', 'trophy', 'trouble', 'truck', 'true', 'truly', 'trumpet', 'trust', 'truth', 'try', 'tube', 'tuition', 'tumble', 'tuna', 'tunnel', 'turkey', 'turn', 'turtle', 'twelve', 'twenty', 'twice', 'twin', 'twist', 'two', 'type', 'typical', 'ugly', 'umbrella', 'unable', 'unaware', 'uncle', 'uncover', 'under', 'undo', 'unfair', 'unfold', 'unhappy', 'uniform', 'unique', 'unit', 'universe', 'unknown', 'unlock', 'until', 'unusual', 'unveil', 'update', 'upgrade', 'uphold', 'upon', 'upper', 'upset', 'urban', 'urge', 'usage', 'use', 'used', 'useful', 'useless', 'usual', 'utility', 'vacant', 'vacuum', 'vague', 'valid', 'valley', 'valve', 'van', 'vanish', 'vapor', 'various', 'vast', 'vault', 'vehicle', 'velvet', 'vendor', 'venture', 'venue', 'verb', 'verify', 'version', 'very', 'vessel', 'veteran', 'viable', 'vibrant', 'vicious', 'victory', 'video', 'view', 'village', 'vintage', 'violin', 'virtual', 'virus', 'visa', 'visit', 'visual', 'vital', 'vivid', 'vocal', 'voice', 'void', 'volcano', 'volume', 'vote', 'voyage', 'wage', 'wagon', 'wait', 'walk', 'wall', 'walnut', 'want', 'warfare', 'warm', 'warrior', 'wash', 'wasp', 'waste', 'water', 'wave', 'way', 'wealth', 'weapon', 'wear', 'weasel', 'weather', 'web', 'wedding', 'weekend', 'weird', 'welcome', 'west', 'wet', 'whale', 'what', 'wheat', 'wheel', 'when', 'where', 'whip', 'whisper', 'wide', 'width', 'wife', 'wild', 'will', 'win', 'window', 'wine', 'wing', 'wink', 'winner', 'winter', 'wire', 'wisdom', 'wise', 'wish', 'witness', 'wolf', 'woman', 'wonder', 'wood', 'wool', 'word', 'work', 'world', 'worry', 'worth', 'wrap', 'wreck', 'wrestle', 'wrist', 'write', 'wrong', 'yard', 'year', 'yellow', 'you', 'young', 'youth', 'zebra', 'zero', 'zone', 'zoo'];

package/lib/src/utils/browserDescription.js

@@ -0,0 +1,28 @@
+/**
+ * #1532 — a browser and the kind of device it runs on, in words a person
+ * recognises ("Chrome on Windows"), from a User-Agent header. Used where a
+ * person is asked to judge a request someone made: the sign-in approval
+ * message and page. The rules are the ones `suggestedName()` in
+ * `public/js/passkey.js` applies in the browser, so a passkey's suggested name
+ * and an approval request describe the same device the same way.
+ *
+ * Null when the header names neither a browser nor a device we know.
+ */
+export function describeBrowser(userAgent) {
+    const ua = userAgent ?? '';
+    const browser = /Edg(e|A|iOS)?\//.test(ua) ? 'Edge'
+        : /Firefox\/|FxiOS\//.test(ua) ? 'Firefox'
+            : /Chrome\/|CriOS\//.test(ua) ? 'Chrome'
+                : /Safari\//.test(ua) ? 'Safari'
+                    : null;
+    const device = /iPhone/.test(ua) ? 'iPhone'
+        : /iPad/.test(ua) ? 'iPad'
+            : /Android/.test(ua) ? 'Android phone'
+                : /Macintosh|Mac OS X/.test(ua) ? 'Mac'
+                    : /Windows/.test(ua) ? 'Windows'
+                        : /Linux/.test(ua) ? 'Linux'
+                            : null;
+    if (browser && device)
+        return `${browser} on ${device}`;
+    return browser ?? device;
+}

package/lib/src/utils/delegation.js

@@ -0,0 +1,79 @@
+/**
+ * What a delegated credential may never carry (#946, #1198, #1576).
+ *
+ * A person delegates a subset of their own permissions to something acting
+ * for them: an agent token they mint, or an app they allow through the OpenID
+ * Connect provider. Two kinds of permission are never delegable, however
+ * privileged the person:
+ *
+ * - `admin-*` — administration stays with a person at the keyboard
+ *   (#946 decision 3);
+ * - `token-mint` — a delegation never creates a standing credential, or a
+ *   leaked one could breed (#1198);
+ * - `token-extend` — a delegation never lengthens a standing credential, or a
+ *   leaked token could keep itself alive (#1734). Step-up already refuses it
+ *   to a delegation, but a site may turn step-up off; this does not move;
+ * - `proxy-grant` — a token or an app never lets someone act for the person
+ *   (#1762). A proxy grant itself may carry it (that is how a proxy passes
+ *   access on), so this rule is for tokens and apps, not proxy grants;
+ * - `vault-proxy` — it means something only inside a proxy grant, where it
+ *   lets the proxy into the person's vaults (#1762 slice 2); on a token or an
+ *   app it would read as access it can never give.
+ *
+ * One rule for both delegations, so they cannot drift.
+ */
+/** Actions a delegation may never carry, by prefix. */
+export const FORBIDDEN_DELEGATED_PREFIX = 'admin-';
+/** The permission to mint a token — never carried by a delegation. */
+export const MINT_PERMISSION = 'token-mint';
+/** The permission to extend a token — never carried by a delegation (#1734). */
+export const EXTEND_PERMISSION = 'token-extend';
+/** The permission to make a proxy grant — never carried by a token or an app (#1762). */
+export const PROXY_GRANT_PERMISSION = 'proxy-grant';
+/** The proxy grant's vault marker — never carried by a token or an app (#1762). */
+export const VAULT_PROXY_PERMISSION = 'vault-proxy';
+/** Why a scope cannot be delegated, or null when it can. */
+export function refusedDelegatedScope(scope) {
+    if (scope.startsWith(FORBIDDEN_DELEGATED_PREFIX))
+        return `${scope} is an admin permission, which is never delegated`;
+    if (scope === MINT_PERMISSION)
+        return `${MINT_PERMISSION} is never delegated: a delegation never mints a token`;
+    if (scope === EXTEND_PERMISSION)
+        return `${EXTEND_PERMISSION} is never delegated: a delegation never extends a token`;
+    if (scope === VAULT_PROXY_PERMISSION)
+        return `${VAULT_PROXY_PERMISSION} is only for proxy grants: it lets someone acting for you into your vaults`;
+    if (scope === PROXY_GRANT_PERMISSION)
+        return `${PROXY_GRANT_PERMISSION} is never delegated: a token or an app never lets someone act for you`;
+    return null;
+}
+/**
+ * A delegation's permission list as given (#946, #1762): at least one, each a
+ * non-empty string, de-duplicated in order. Throws a caller-safe message. One
+ * rule for agent tokens and proxy grants.
+ */
+export function requireScopeList(scopes) {
+    // An unscoped delegation is rejected, never treated as unrestricted (#946 decision 4).
+    if (!Array.isArray(scopes) || scopes.length === 0) {
+        throw new Error('At least one scope is required');
+    }
+    // Scopes arrive from a request body. A non-string here would be stored and
+    // then match no action for the life of the delegation — a credential that
+    // fails silently rather than at the point of the mistake.
+    if (!scopes.every((s) => typeof s === 'string' && s.trim().length > 0)) {
+        throw new Error('Every scope must be a non-empty string');
+    }
+    return [...new Set(scopes)];
+}
+/**
+ * "Delegate, not grant" (#1178, #1762): the scopes the delegator does not hold,
+ * in order. Empty means every scope is theirs to hand on. `holds` is asked of
+ * the policy decision point; with no answer there is no delegation.
+ */
+export async function lackingScopes(scopes, holds) {
+    const lacking = [];
+    for (const scope of scopes) {
+        if (!(await holds(scope)))
+            lacking.push(scope);
+    }
+    return lacking;
+}

package/lib/src/utils/deriveUsername.js

@@ -0,0 +1,38 @@
+/**
+ * Derive a username from an email address (#1026).
+ *
+ * Extracted from GoogleOIDCProvider so every auto-provisioning path — OIDC and
+ * magic link — produces the same username for the same address. Two rules that
+ * disagree would let one provider create `jim-smith` and the other `jimsmith`
+ * for the same person.
+ */
+/** True if the username is already taken. Treats a lookup error as "free". */
+async function usernameExists(username, userManager) {
+    try {
+        const u = await userManager.getUser(username);
+        return u !== undefined;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Turn an email address into an unused username.
+ *
+ * Local part, lowercased, with anything outside `[a-z0-9]` replaced by a
+ * hyphen; a numeric suffix is appended until the name is free.
+ *
+ * The result is only free as of this call — a caller that derives a name and
+ * creates the account later must be prepared for `createUser` to reject a
+ * duplicate that appeared in between.
+ */
+export async function deriveUsername(email, userManager) {
+    const base = email.split('@')[0].toLowerCase().replace(/[^a-z0-9]/g, '-');
+    let candidate = base;
+    let n = 2;
+    while (await usernameExists(candidate, userManager)) {
+        candidate = `${base}-${n++}`;
+    }
+    return candidate;
+}
+export default deriveUsername;

package/lib/src/utils/emailForLog.js

@@ -0,0 +1,28 @@
+/**
+ * emailForLog — the one way an email address reaches the server log (#1916).
+ *
+ * Rule (operator, 2026-10-20): a full email address never reaches the server
+ * log. A log line names the address's domain only. Audit records are not the
+ * server log and keep full addresses; do not use these helpers on them.
+ */
+/**
+ * The domain(s) of one address or a comma-separated list, lower-cased:
+ * `"Bob <bob@Example.org>, ann@x.io"` → `"example.org,x.io"`. A value
+ * without an `@` (or an empty one) reads as `unknown`.
+ */
+export function emailDomain(to) {
+    const domains = new Set(String(to ?? '').split(',').map((a) => a.trim()).filter(Boolean)
+        .map((a) => (a.includes('@') ? a.slice(a.lastIndexOf('@') + 1).replace(/>$/, '').toLowerCase() : 'unknown')));
+    return [...domains].join(',') || 'unknown';
+}
+/**
+ * Any address inside free text (an SMTP error often quotes the rejected one)
+ * cut to its domain: `bob@example.org` → `…@example.org`.
+ */
+export function redactEmailAddresses(text) {
+    return text.replace(/[^\s<>"'@,;:()[\]]+@([A-Za-z0-9.-]+)/g, '…@$1');
+}
+/** An error's message, with any address in it cut to its domain. */
+export function errorForLog(err) {
+    return redactEmailAddresses(err instanceof Error ? err.message : String(err));
+}

package/lib/src/utils/fileMigrationPlan.d.ts

@@ -0,0 +1,81 @@
+/**
+ * The files migration dry run (#1859, epic #1851): what copying today's
+ * attachments into files WOULD do, worked out from the door's inventory
+ * (`FileManager.inventory`). Pure: it reads nothing and writes nothing.
+ *
+ * The rules are the decision log's
+ * (https://github.com/jwilleke/ngdpbase/issues/1851#issuecomment-6236003946):
+ * - two different files with the same name in one place get a numeric
+ *   suffix, `report.pdf` and `report-001.pdf`;
+ * - each page that shows a renamed file is rewritten to its new name, so it
+ *   keeps showing its own file;
+ * - an unknown or invalid uploader gets an owner from configuration.
+ */
+import type { FileInventory, FileRecord, VaultFileSummary } from '../types/File.js';
+/** The configured values the plan applies (`ngdpbase.files.migration.*`). */
+export interface FileMigrationOptions {
+    /** Recorded uploader → username, applied first (`owner-map`). */
+    ownerMap: Record<string, string>;
+    /** Owner for a file whose record names no user (`default-owner`). */
+    defaultOwner: string;
+    /** Width of the clash suffix: 3 gives `-001` (`clash-suffix-digits`). */
+    suffixDigits: number;
+}
+/** A file the migration would give a new name, and the pages it would rewrite to it. */
+export interface PlannedRename {
+    id: string;
+    from: string;
+    to: string;
+    pages: string[];
+}
+/** Who a group of public files would belong to after the migration. */
+export interface PlannedOwner {
+    /** The uploader the record names, or `null` when it names none. */
+    recorded: string | null;
+    owner: string;
+    /** `kept`: the record names a user; `mapped`: `owner-map`; `default`: `default-owner`. */
+    how: 'kept' | 'mapped' | 'default';
+    files: number;
+}
+export interface FileMigrationReport {
+    publicFiles: {
+        count: number;
+        bytes: number;
+        byType: Array<{
+            type: string;
+            files: number;
+        }>;
+    };
+    owners: PlannedOwner[];
+    /** Public files whose record names no user (before the owner mapping). */
+    noOwner: number;
+    /** Each clashing name, with the renames it would get. */
+    clashes: Array<{
+        name: string;
+        files: number;
+        renames: PlannedRename[];
+    }>;
+    /** Each page that would be rewritten, and to which names. */
+    pagesToRewrite: Array<{
+        page: string;
+        changes: Array<{
+            from: string;
+            to: string;
+        }>;
+    }>;
+    vaults: VaultFileSummary[];
+}
+/** The `-###` name a clash gets: before the extension, `route.png` → `route-001.png`. */
+export declare function suffixedName(name: string, n: number, digits: number): string;
+/**
+ * The new name of every file in one place that shares its name with another
+ * (id → new name). The oldest keeps the name (then the lowest id, so the
+ * answer is the same on every run); the rest are numbered from 1 in that
+ * order, skipping any name already used in the place. Names match exactly,
+ * as a link finds a file today.
+ */
+export declare function planClashRenames(files: ReadonlyArray<Pick<FileRecord, 'id' | 'filename' | 'dateCreated'>>, digits: number): Map<string, string>;
+/** What the migration would do with this inventory. */
+export declare function planFileMigration(inventory: FileInventory, opts: FileMigrationOptions): FileMigrationReport;
+/** The report as the operator reads it. */
+export declare function formatFileMigrationReport(r: FileMigrationReport, header?: string[]): string;

package/lib/src/utils/instanceEnvBackup.d.ts

@@ -9,6 +9,12 @@ export declare function instanceEnvPath(instanceDataDir: string): string;
  * (`dotenv.parse`, `bootstrap-env.ts`): never a value (#1976).
  */
 export declare function envKeyNames(content: string): string[];
+/**
+ * One `.env` line setting `name` to `value` (#2134): unquoted, or quoted only
+ * when it must be, so the boot's reader (`dotenv.parse`) reads `value` back
+ * exactly. Throws for a value no single line can carry.
+ */
+export declare function envFileLine(name: string, value: string): string;
 /** A short fingerprint of a set of `.env` names (#1976): the first 16 hex digits of a SHA-256 of the sorted names, one per line. */
 export declare function envKeyNamesFingerprint(names: readonly string[]): string;
 /** The file without any line assigning one of `names`. */

package/lib/src/utils/instanceEnvBackup.js

@@ -46,6 +46,19 @@ export function instanceEnvPath(instanceDataDir) {
 export function envKeyNames(content) {
     return Object.keys(dotenv.parse(content)).sort();
 }
+/**
+ * One `.env` line setting `name` to `value` (#2134): unquoted, or quoted only
+ * when it must be, so the boot's reader (`dotenv.parse`) reads `value` back
+ * exactly. Throws for a value no single line can carry.
+ */
+export function envFileLine(name, value) {
+    for (const form of [value, `'${value}'`, `"${value}"`, `\`${value}\``]) {
+        const line = `${name}=${form}`;
+        if (dotenv.parse(line)[name] === value)
+            return line;
+    }
+    throw new Error(`${name} cannot be written as one .env line`);
+}
 /** A short fingerprint of a set of `.env` names (#1976): the first 16 hex digits of a SHA-256 of the sorted names, one per line. */
 export function envKeyNamesFingerprint(names) {
     return createHash('sha256').update([...names].sort().join('\n')).digest('hex').slice(0, 16);

package/lib/src/utils/ipLocation.js

@@ -0,0 +1,106 @@
+/**
+ * #1532 — roughly where a request came from, in words a person recognises
+ * ("Columbus, United States"), for the sign-in approval message and page.
+ *
+ * Two sources, both optional, both off unless the operator turns them on;
+ * nothing is bundled and nothing is looked up outside the site:
+ *
+ * - Cloudflare's visitor-location headers (`cf-ipcity`, `cf-ipcountry`), only
+ *   when the site says it is reached through Cloudflare. Anyone can send these
+ *   headers to a site that is not behind Cloudflare, so they are never read
+ *   unless the operator says so.
+ * - A MaxMind GeoLite2 City database (`.mmdb`) the operator supplies, read
+ *   with `mmdb-lib` (no dependencies of its own). Loaded on first use and
+ *   again when the file changes; one that cannot be read is said once in the
+ *   log and gives no location.
+ *
+ * Null when neither says anything: the location is left out, never guessed.
+ */
+import { readFile, stat } from 'node:fs/promises';
+import { isIPv4, isIPv6 } from 'node:net';
+import { Reader } from 'mmdb-lib';
+import logger from './logger.js';
+/** A place name from a header or a database: printable, one line, short. */
+function placeName(value) {
+    if (typeof value !== 'string')
+        return null;
+    // eslint-disable-next-line no-control-regex
+    const tidy = value.replace(/[\u0000-\u001f\u007f]/g, '').replace(/\s+/g, ' ').trim().slice(0, 80).trim();
+    return tidy || null;
+}
+/** "United States" for "US"; null for anything that is not a real two-letter country (XX unknown, T1 Tor). */
+function countryName(code) {
+    if (typeof code !== 'string' || !/^[A-Z]{2}$/.test(code) || code === 'XX' || code === 'T1')
+        return null;
+    try {
+        const name = new Intl.DisplayNames(['en'], { type: 'region' }).of(code);
+        return name && name !== code ? name : code;
+    }
+    catch {
+        return code;
+    }
+}
+function joined(city, country) {
+    const parts = [city, country].filter((p) => Boolean(p));
+    return parts.length ? parts.join(', ') : null;
+}
+/** An IPv4 address carried as IPv6 (::ffff:1.2.3.4) is looked up as the IPv4 address. */
+function plainAddress(ip) {
+    if (!ip)
+        return null;
+    const v4 = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(ip)?.[1];
+    const address = v4 ?? ip;
+    return isIPv4(address) || isIPv6(address) ? address : null;
+}
+let loaded = null;
+const warned = new Set();
+async function cityReader(file) {
+    try {
+        const { mtimeMs } = await stat(file);
+        if (loaded?.file === file && loaded.mtimeMs === mtimeMs)
+            return loaded.reader;
+        const reader = new Reader(await readFile(file));
+        loaded = { file, mtimeMs, reader };
+        warned.delete(file);
+        return reader;
+    }
+    catch (err) {
+        if (!warned.has(file)) {
+            warned.add(file);
+            logger.warn(`[ipLocation] the GeoLite2 City file ${file} could not be read; sign-in approvals say no location (#1532): ${err.message}`);
+        }
+        return null;
+    }
+}
+/** What the GeoLite2 City file says about `ip`, or null. */
+async function fromGeolite(file, ip) {
+    const address = plainAddress(ip);
+    if (!address)
+        return null;
+    const reader = await cityReader(file);
+    if (!reader)
+        return null;
+    // An IPv4-only database has no IPv6 addresses; mmdb-lib would walk it anyway.
+    if (reader.metadata.ipVersion === 4 && !isIPv4(address))
+        return null;
+    let found;
+    try {
+        found = reader.get(address);
+    }
+    catch {
+        return null;
+    }
+    return joined(placeName(found?.city?.names?.en), countryName(found?.country?.iso_code) ?? placeName(found?.country?.names?.en));
+}
+/**
+ * Roughly where `ip` is: Cloudflare's headers when the site is behind it and
+ * they name a place, else the GeoLite2 file when one is configured, else null.
+ */
+export async function approximateLocation(ip, header, sources) {
+    if (sources.behindCloudflare) {
+        const fromCloudflare = joined(placeName(header('cf-ipcity')), countryName(header('cf-ipcountry')));
+        if (fromCloudflare)
+            return fromCloudflare;
+    }
+    return sources.geoliteFile ? fromGeolite(sources.geoliteFile, ip) : null;
+}

package/lib/src/utils/magicLinkDeviceState.js

@@ -0,0 +1,97 @@
+/**
+ * Magic-link device binding (#1022).
+ *
+ * A magic link is bearer-only: whoever holds the URL can sign in. A forwarded
+ * email, a link pasted into a chat, or a mailbox a second person can read is a
+ * complete account takeover — no second factor, and nothing in the log saying
+ * the redemption came from somewhere unexpected.
+ *
+ * The mitigation is to remember which browser asked for the link (an opaque
+ * value in an HTTP-only cookie, stored alongside the token) and check it at
+ * redemption.
+ *
+ * ## Why this is two features, not one
+ *
+ * Strict binding breaks the most common real flow: request the link on a
+ * laptop, open the mail on a phone. That is not an edge case, and silently
+ * breaking it would be worse than the risk being mitigated. So:
+ *
+ * - **Observability is always on.** Every redemption records whether the
+ *   browser matched, plus IP and User-Agent, through `AuditManager` so it is
+ *   queryable rather than buried in the app log. Costs nothing in UX.
+ * - **Enforcement is opt-in**, behind
+ *   `ngdpbase.auth.magic-link.bind-to-requesting-device` (default `false`).
+ *
+ * ## The direction that must not be got wrong
+ *
+ * An absent cookie is `absent`, never `match`. A forwarded link arrives with no
+ * cookie at all, so treating "no cookie" as a pass would make the enforcement
+ * setting do nothing against the exact attacker it exists to stop.
+ *
+ * A token carrying no stored state is a separate case (`unknown`) and is always
+ * allowed: tokens live in memory for ~15 minutes, so on the deploy that ships
+ * this there are live tokens issued before the feature existed. Refusing those
+ * would sign people out mid-flow for no security gain.
+ */
+import * as crypto from 'crypto';
+/** Cookie carrying the opaque per-request state value. */
+export const DEVICE_STATE_COOKIE = 'ngdp_ml_state';
+/**
+ * The same binding for an OAuth sign-in (#1630): the browser that started the
+ * flow is the one the callback must come back to. Its own cookie, so a
+ * magic-link request and a Google sign-in in flight together do not overwrite
+ * each other. Unlike the magic link there is no cross-device flow here — the
+ * provider redirects the same browser back — so it is always enforced.
+ */
+export const OAUTH_STATE_COOKIE = 'ngdp_oauth_state';
+/** A fresh opaque state value. 32 bytes of CSPRNG, hex-encoded. */
+export function newDeviceState() {
+    return crypto.randomBytes(32).toString('hex');
+}
+/**
+ * Cookie options for the state cookie.
+ *
+ * `SameSite=Lax` rather than `Strict` is deliberate: the redemption arrives as
+ * a top-level navigation from a mail client or webmail tab, and `Strict` would
+ * withhold the cookie on that cross-site click — making every ordinary
+ * redemption look like a mismatch, which is the failure mode most likely to get
+ * this feature switched off.
+ *
+ * `httpOnly` keeps page scripts from reading or forging it. `maxAge` tracks the
+ * token TTL so the cookie does not outlive what it describes.
+ */
+export function deviceStateCookieOptions(ttlMs, secure = false) {
+    return { httpOnly: true, sameSite: 'lax', maxAge: ttlMs, path: '/', secure };
+}
+/**
+ * Compare two same-length secrets without leaking position through timing.
+ *
+ * Different lengths short-circuit to false — the length is already observable
+ * from the cookie itself, so there is nothing to protect there.
+ */
+function safeEqual(a, b) {
+    const bufA = Buffer.from(a, 'utf8');
+    const bufB = Buffer.from(b, 'utf8');
+    if (bufA.length !== bufB.length)
+        return false;
+    return crypto.timingSafeEqual(bufA, bufB);
+}
+/**
+ * Decide what the presented cookie says about the redeeming browser.
+ *
+ * Never throws: this runs on the sign-in path, and an exception here would turn
+ * a legitimate login into a 500.
+ */
+export function evaluateDeviceBinding(input) {
+    const { stored, presented, enforce } = input;
+    // No stored state: the token predates the feature. Not evidence of anything,
+    // so it cannot be grounds for refusal.
+    if (!stored)
+        return { outcome: 'unknown', allowed: true };
+    if (!presented)
+        return { outcome: 'absent', allowed: !enforce };
+    const matched = safeEqual(stored, presented);
+    return matched
+        ? { outcome: 'match', allowed: true }
+        : { outcome: 'mismatch', allowed: !enforce };
+}

package/lib/src/utils/pageUrl.d.ts

@@ -14,5 +14,6 @@ export type PageAction = 'view' | 'edit' | 'save' | 'delete' | 'history' | 'diff
  *
  * @example pageUrl('Main') === '/view/Main'
  * @example pageUrl('vaults/jim/default/Diary', 'edit') === '/vaults/jim/default/Diary/edit'
+ * @example pageUrl('shared/default/Minutes') === '/shared/default/Minutes' (#2125)
  */
 export declare function pageUrl(pageName: string, action?: PageAction): string;