@vaultkeepr/core 0.1.2 → 0.2.0

package/dist/index.js

@@ -33,6 +33,7 @@ __export(index_exports, {
   EXTENSION_MIN_PAYLOAD_VERSION: () => EXTENSION_MIN_PAYLOAD_VERSION,
   FRAGMENTED_DEFAULT_THRESHOLD: () => FRAGMENTED_DEFAULT_THRESHOLD,
   FRAGMENTED_DEFAULT_TOTAL: () => FRAGMENTED_DEFAULT_TOTAL,
+  KeyJoinError: () => KeyJoinError,
   MOBILE_MAX_PAYLOAD_VERSION: () => MOBILE_MAX_PAYLOAD_VERSION,
   MOBILE_MIN_PAYLOAD_VERSION: () => MOBILE_MIN_PAYLOAD_VERSION,
   P256_SPKI_HEADER: () => P256_SPKI_HEADER,
@@ -43,11 +44,14 @@ __export(index_exports, {
   PAYLOAD_VERSION_V2: () => PAYLOAD_VERSION_V2,
   PAYLOAD_VERSION_V3: () => PAYLOAD_VERSION_V3,
   PAYLOAD_VERSION_V4: () => PAYLOAD_VERSION_V4,
+  RECOVERY_CODE_LENGTH: () => RECOVERY_CODE_LENGTH,
   TAG_COLORS: () => TAG_COLORS,
   VALID_TAGS: () => VALID_TAGS,
   VaultKeepR_SLM: () => VaultKeepR_SLM,
+  accountKeyState: () => accountKeyState,
   addEntry: () => addEntry,
   analyzeVaultHealth: () => analyzeVaultHealth,
+  argon2RecoveryKdf: () => argon2RecoveryKdf,
   buildAttestationObject: () => buildAttestationObject,
   buildAuthDataForCreate: () => buildAuthDataForCreate,
   buildAuthDataForGet: () => buildAuthDataForGet,
@@ -62,6 +66,7 @@ __export(index_exports, {
   captureError: () => captureError,
   checkEmailBreaches: () => checkEmailBreaches,
   checkVaultBreaches: () => checkVaultBreaches,
+  cleanEntryTitle: () => cleanEntryTitle,
   cleanMrzField: () => cleanMrzField,
   clearErrorBuffer: () => clearErrorBuffer,
   clearHiddenWalletCache: () => clearHiddenWalletCache,
@@ -72,8 +77,10 @@ __export(index_exports, {
   createExportPayload: () => createExportPayload,
   createFolder: () => createFolder,
   createKeyEnvelope: () => createKeyEnvelope,
+  createRecoveryBlob: () => createRecoveryBlob,
   createSecureShare: () => createSecureShare,
   createVaultPayload: () => createVaultPayload,
+  decideEncryptedImport: () => decideEncryptedImport,
   decompressVault: () => decompressVault,
   decryptFromPair: () => decryptFromPair,
   decryptKeyEnvelope: () => decryptKeyEnvelope,
@@ -95,6 +102,7 @@ __export(index_exports, {
   deriveMrzKseed: () => deriveMrzKseed,
   deriveNfcKey: () => deriveNfcKey,
   derivePairSecret: () => derivePairSecret,
+  deriveRecoveryId: () => deriveRecoveryId,
   digitsOnly: () => digitsOnly,
   encryptAndFragmentDocument: () => encryptAndFragmentDocument,
   encryptForPair: () => encryptForPair,
@@ -112,6 +120,7 @@ __export(index_exports, {
   formatCardDisplayMasked: () => formatCardDisplayMasked,
   formatCardNumber: () => formatCardNumber,
   formatErrorReport: () => formatErrorReport,
+  formatRecoveryCode: () => formatRecoveryCode,
   fromBase64Url: () => fromBase64Url,
   generateBlurredThumbnailCanvas: () => generateBlurredThumbnailCanvas,
   generateCredentialId: () => generateCredentialId,
@@ -123,17 +132,22 @@ __export(index_exports, {
   generatePassphrase: () => generatePassphrase,
   generatePassword: () => generatePassword,
   generatePrfSalt: () => generatePrfSalt,
+  generateRecoveryCode: () => generateRecoveryCode,
   generateSaltArgon2: () => generateSaltArgon2,
   generateSharePin: () => generateSharePin,
   getCardBrand: () => getCardBrand,
   getChecksumAddress: () => getChecksumAddress,
+  getEntryDisplayName: () => getEntryDisplayName,
   getEntryGroupLabel: () => getEntryGroupLabel,
   getErrorBuffer: () => getErrorBuffer,
   getHiddenWalletFromPassword: () => getHiddenWalletFromPassword,
+  getHiddenWalletFromSecretKey: () => getHiddenWalletFromSecretKey,
   getHiddenWalletLegacy: () => getHiddenWalletLegacy,
   getHiddenWalletPrivateKey: () => getHiddenWalletPrivateKey,
+  getHiddenWalletPrivateKeyFromSecretKey: () => getHiddenWalletPrivateKeyFromSecretKey,
   getLast4: () => getLast4,
   getMostUsedEntries: () => getMostUsedEntries,
+  getPwnedCountForHash: () => getPwnedCountForHash,
   getPwnedPasswordCount: () => getPwnedPasswordCount,
   getTOTPCode: () => getTOTPCode,
   getTOTPRemainingSeconds: () => getTOTPRemainingSeconds,
@@ -147,6 +161,7 @@ __export(index_exports, {
   importProtonPassJson: () => importProtonPassJson,
   importVaultText: () => importVaultText,
   isAcceptablePayloadVersion: () => isAcceptablePayloadVersion,
+  isAccountKeyText: () => isAccountKeyText,
   isCurrentPayloadVersion: () => isCurrentPayloadVersion,
   isEncryptedExport: () => isEncryptedExport,
   isNfcPayloadV1: () => isNfcPayloadV1,
@@ -158,15 +173,19 @@ __export(index_exports, {
   isPasskeyPrivateKeyEncrypted: () => isPasskeyPrivateKeyEncrypted,
   isPrfSupported: () => isPrfSupported,
   isProtonPassExport: () => isProtonPassExport,
+  isValidRecoveryCode: () => isValidRecoveryCode,
   isWebAuthnSupported: () => isWebAuthnSupported,
+  joinWithKeyCode: () => joinWithKeyCode,
   maskCardNumber: () => maskCardNumber,
   mergeFolderTrees: () => mergeFolderTrees,
   mergeFolders: () => mergeFolders,
   mergeFragments: () => mergeFragments,
   mergeImportedEntries: () => mergeImportedEntries,
   moveFolder: () => moveFolder,
+  normalizeRecoveryCode: () => normalizeRecoveryCode,
   normalizeSignatureForKdf: () => normalizeSignatureForKdf,
   normalizeUrl: () => normalizeUrl,
+  openRecoveryBlob: () => openRecoveryBlob,
   parseMRZ: () => parseMRZ,
   parseMrzDate: () => parseMrzDate,
   parsePairPayload: () => parsePairPayload,
@@ -176,6 +195,10 @@ __export(index_exports, {
   parseTOTPUri: () => parseTOTPUri,
   parseVault: () => parseVault,
   parseVaultPayload: () => parseVaultPayload,
+  passageIdentity: () => passageIdentity,
+  passageNext: () => passageNext,
+  pointerWalletFor: () => pointerWalletFor,
+  prepareKeyJoin: () => prepareKeyJoin,
   publicKeyToCose: () => publicKeyToCose,
   publicKeyToSpki: () => publicKeyToSpki,
   reassembleAndDecryptDocument: () => reassembleAndDecryptDocument,
@@ -239,6 +262,78 @@ function getEntryGroupLabel(folder) {
   if (!folder) return ENTRY_GROUP_LABELS.identifiants;
   return ENTRY_GROUP_LABELS[folder] ?? folder;
 }
+var JUNK_SUBDOMAIN_PREFIXES = /* @__PURE__ */ new Set([
+  "www",
+  "app",
+  "mobile",
+  "accounts",
+  "dashboard",
+  "kyc",
+  "mail",
+  "web",
+  "my",
+  "login",
+  "portal",
+  "id",
+  "news"
+]);
+function brandFrom(url) {
+  if (!url?.trim()) return null;
+  try {
+    const raw = url.includes("://") ? url : `https://${url}`;
+    const host = new URL(raw).hostname.replace(/^www\./i, "");
+    if (/^\d+(\.\d+){3}$/.test(host)) return null;
+    const parts = host.split(".").filter(Boolean);
+    if (parts.length < 2) return null;
+    let label = parts[0];
+    if (JUNK_SUBDOMAIN_PREFIXES.has(label.toLowerCase()) && parts.length > 2) label = parts[1];
+    if (!label) return null;
+    return { brand: label.charAt(0).toUpperCase() + label.slice(1).toLowerCase(), host: host.toLowerCase() };
+  } catch {
+    return null;
+  }
+}
+function cleanEntryTitle(rawTitle, url) {
+  const raw = rawTitle.trim();
+  let candidate = raw;
+  {
+    const lower = raw.toLowerCase();
+    let pos = lower.indexOf("passkey");
+    while (pos > 0) {
+      let i = pos;
+      while (i > 0 && /\s/.test(raw.charAt(i - 1))) i--;
+      const prefix = raw.slice(0, i);
+      if (i < pos && !prefix.includes("\n")) {
+        let j = pos + 7;
+        while (j < raw.length && /\s/.test(raw.charAt(j))) j++;
+        const tail = raw.slice(j);
+        if (j > pos + 7 && tail.length > 0 && !tail.includes("\n")) {
+          if (prefix.trim() !== "" && /\d/.test(tail)) candidate = prefix.trim();
+          break;
+        }
+      }
+      pos = lower.indexOf("passkey", pos + 1);
+    }
+  }
+  const brandInfo = brandFrom(url);
+  if (brandInfo) {
+    if (!candidate) return brandInfo.brand;
+    if (/^[\d\s()+.-]+$/.test(candidate)) return brandInfo.brand;
+    if (candidate.toLowerCase() === brandInfo.brand.toLowerCase()) return brandInfo.brand;
+    const schemeStripped = candidate.replace(/^https?:\/\//i, "");
+    const nl = schemeStripped.lastIndexOf("\n");
+    const slash = schemeStripped.indexOf("/", nl + 1);
+    const hostCandidate = slash === -1 ? schemeStripped : schemeStripped.slice(0, slash);
+    if (hostCandidate.toLowerCase() === brandInfo.host) {
+      return brandInfo.brand;
+    }
+  }
+  return candidate || brandInfo?.brand || raw;
+}
+function getEntryDisplayName(entry, primaryUrl) {
+  const url = primaryUrl ?? entry.urls?.[0]?.uri ?? entry.url ?? void 0;
+  return cleanEntryTitle(entry.title ?? entry.username ?? "", url);
+}
 function resolveFolderName(folderId, folderTree) {
   if (!folderId) return ENTRY_GROUP_LABELS.identifiants;
   if (folderId in ENTRY_GROUP_LABELS) return ENTRY_GROUP_LABELS[folderId];
@@ -737,9 +832,12 @@ function normalizeUrl(raw) {
   let u = (raw ?? "").trim().toLowerCase();
   u = u.replace(/^https?:\/\//, "");
   u = u.replace(/^www\./, "");
-  u = u.replace(/#.*$/, "");
-  u = u.replace(/\/+$/, "");
-  return u;
+  const nl = u.lastIndexOf("\n");
+  const hash = u.indexOf("#", nl + 1);
+  if (hash !== -1) u = u.slice(0, hash);
+  let end = u.length;
+  while (end > 0 && u.charAt(end - 1) === "/") end--;
+  return u.slice(0, end);
 }
 function entryFingerprint(entry) {
   const url = normalizeUrl(entry.url ?? "");
@@ -908,14 +1006,14 @@ function isEncryptedExport(jsonStr) {
     return false;
   }
 }
-async function importEncryptedVault(encryptedJson, password, argon2Opts) {
+async function importEncryptedVault(encryptedJson, password, argon2Opts, precomputed) {
   const payload = JSON.parse(encryptedJson.trim());
   if (payload?.format !== ENCRYPTED_EXPORT_FORMAT || !payload.salt || !payload.nonce || !payload.ciphertext) {
     throw new Error("Format d'export chiffr\xE9 invalide.");
   }
   const salt = (0, import_utils5.hexToBytes)(payload.salt);
   const effectiveOpts = payload.kdf ? { t: payload.kdf.t, m: payload.kdf.m, p: payload.kdf.p, dkLen: payload.kdf.dkLen } : argon2Opts ?? {};
-  const key = await deriveKeyFromPasswordArgon2(password, salt, effectiveOpts);
+  const key = precomputed?.key ?? await deriveKeyFromPasswordArgon2(password, precomputed?.salt ?? salt, effectiveOpts);
   const plaintext = decryptVault(
     {
       ciphertext: payload.ciphertext,
@@ -1627,7 +1725,6 @@ function isEnpassCsv(text) {
   const firstLine = text.split(/\r?\n/)[0];
   if (!firstLine) return false;
   const rawHeaders = firstLine.split(",");
-  const headers = rawHeaders.map((h) => h.replace(/^["']|["']$/g, "").trim());
   return rawHeaders.some((h) => {
     const clean = h.replace(/^["']|["']$/g, "").trim();
     return clean === "Title";
@@ -2165,22 +2262,28 @@ function parseCsvNoteExtras(rawNote) {
   let totpSecret;
   const customFields = [];
   for (const line of lines) {
-    const to = line.match(/^TOTP:\s+(.+)$/);
-    if (to) {
-      totpSecret = to[1].trim();
-      continue;
+    if (line.startsWith("TOTP:")) {
+      let j = 5;
+      while (j < line.length && /\s/.test(line.charAt(j))) j++;
+      if (j > 5 && j < line.length) {
+        totpSecret = line.slice(j).trim();
+        continue;
+      }
     }
-    const fieldsMatch = line.match(/^Fields:\s+(.+)$/);
-    if (fieldsMatch) {
-      const entries = fieldsMatch[1].split("|");
-      for (const entry of entries) {
-        const colonIdx = entry.indexOf(":");
-        if (colonIdx > 0) {
-          customFields.push({
-            name: entry.slice(0, colonIdx).trim(),
-            value: entry.slice(colonIdx + 1).trim(),
-            type: "text"
-          });
+    if (line.startsWith("Fields:")) {
+      let j = 7;
+      while (j < line.length && /\s/.test(line.charAt(j))) j++;
+      if (j > 7 && j < line.length) {
+        const entries = line.slice(j).split("|");
+        for (const entry of entries) {
+          const colonIdx = entry.indexOf(":");
+          if (colonIdx > 0) {
+            customFields.push({
+              name: entry.slice(0, colonIdx).trim(),
+              value: entry.slice(colonIdx + 1).trim(),
+              type: "text"
+            });
+          }
         }
       }
     }
@@ -2681,7 +2784,6 @@ function exportCsv(vault, opts = {}) {
         continue;
       }
       if (e.folder === "cartes") {
-        const m = parseCardMeta(e.notes);
         rows.push(
           [
             csvEscape("cartes"),
@@ -3037,7 +3139,10 @@ var import_sha25 = require("@noble/hashes/sha2.js");
 var TOTP_STEP_SEC = 30;
 function base32Decode(input) {
   const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-  const clean = input.replace(/\s/g, "").toUpperCase().replace(/=+$/, "");
+  const upper = input.replace(/\s/g, "").toUpperCase();
+  let end = upper.length;
+  while (end > 0 && upper.charAt(end - 1) === "=") end--;
+  const clean = upper.slice(0, end);
   const bits = [];
   for (let i = 0; i < clean.length; i++) {
     const idx = alphabet.indexOf(clean[i]);
@@ -3108,9 +3213,9 @@ function parseTOTPUri(uri) {
 var import_legacy2 = require("@noble/hashes/legacy.js");
 var import_utils9 = require("@noble/hashes/utils.js");
 var RANGE_BASE = "https://api.pwnedpasswords.com/range/";
-async function getPwnedPasswordCount(password, options) {
-  if (!password.length) return 0;
-  const hash = (0, import_utils9.bytesToHex)((0, import_legacy2.sha1)((0, import_utils9.utf8ToBytes)(password))).toUpperCase();
+async function getPwnedCountForHash(sha1Hex, options) {
+  const hash = sha1Hex.trim().toUpperCase();
+  if (hash.length !== 40) throw new Error(`Invalid SHA-1 length: ${hash.length}`);
   const prefix = hash.slice(0, 5);
   const suffix = hash.slice(5);
   const fetchFn = options?.fetchFn ?? fetch;
@@ -3126,7 +3231,6 @@ async function getPwnedPasswordCount(password, options) {
     throw new Error(`PwnedPasswords API: ${res.status}`);
   }
   const text = await res.text();
-  const suffixUpper = suffix.toUpperCase();
   for (const line of text.split("\n")) {
     const trimmed = line.trim();
     if (!trimmed) continue;
@@ -3134,13 +3238,18 @@ async function getPwnedPasswordCount(password, options) {
     if (colon < 0) continue;
     const h = trimmed.slice(0, colon).toUpperCase();
     const countStr = trimmed.slice(colon + 1);
-    if (h === suffixUpper) {
+    if (h === suffix) {
       const n = parseInt(countStr, 10);
       return Number.isFinite(n) ? n : 0;
     }
   }
   return 0;
 }
+async function getPwnedPasswordCount(password, options) {
+  if (!password.length) return 0;
+  const hash = (0, import_utils9.bytesToHex)((0, import_legacy2.sha1)((0, import_utils9.utf8ToBytes)(password))).toUpperCase();
+  return getPwnedCountForHash(hash, options);
+}
 
 // src/wordlist.ts
 var EFF_WORDLIST = [
@@ -11718,7 +11827,10 @@ function toBase64Url2(bytes) {
   for (let i = 0; i < bytes.length; i++) {
     binary += String.fromCharCode(bytes[i]);
   }
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const b64 = btoa(binary).replace(/\+/g, "-").replace(/\//g, "_");
+  let end = b64.length;
+  while (end > 0 && b64.charAt(end - 1) === "=") end -= 1;
+  return b64.slice(0, end);
 }
 function fromBase64Url2(str) {
   const base64 = str.replace(/-/g, "+").replace(/_/g, "/");
@@ -11781,6 +11893,26 @@ async function getHiddenWalletFromPassword(masterPassword, secretKey) {
   _hwCache.set(cacheKey, account);
   return account;
 }
+async function getHiddenWalletFromSecretKey(secretKey) {
+  const cacheKey = (0, import_viem.keccak256)((0, import_viem.toHex)(`${secretKey}:sk-only:v1`));
+  const cached = _hwCache.get(cacheKey);
+  if (cached) return cached;
+  const privateKey = await getHiddenWalletPrivateKeyFromSecretKey(secretKey);
+  const account = (0, import_accounts.privateKeyToAccount)(privateKey);
+  _hwCache.set(cacheKey, account);
+  return account;
+}
+async function getHiddenWalletPrivateKeyFromSecretKey(secretKey) {
+  const salt = deriveHwSalt(secretKey);
+  const inputBytes = new TextEncoder().encode(secretKey);
+  let derived;
+  if (_argon2Provider) {
+    derived = await _argon2Provider(inputBytes, salt, HW_ARGON2_OPTS);
+  } else {
+    derived = (0, import_argon22.argon2id)(inputBytes, salt, HW_ARGON2_OPTS);
+  }
+  return (0, import_viem.bytesToHex)(derived);
+}
 function clearHiddenWalletCache() {
   _hwCache.clear();
 }
@@ -11943,7 +12075,9 @@ function calculateMrzChecksum(str) {
   return sum % 10;
 }
 function cleanMrzField(str) {
-  return str.replace(/<+$/g, "").replace(/</g, " ").trim();
+  let end = str.length;
+  while (end > 0 && str.charAt(end - 1) === "<") end--;
+  return str.slice(0, end).replace(/</g, " ").trim();
 }
 function parseMrzDate(str) {
   if (str.length !== 6) return "";
@@ -12212,6 +12346,7 @@ var import_secp256k12 = require("@noble/curves/secp256k1.js");
 var import_chacha7 = require("@noble/ciphers/chacha.js");
 var import_utils19 = require("@noble/ciphers/utils.js");
 var import_hkdf5 = require("@noble/hashes/hkdf.js");
+var import_hmac4 = require("@noble/hashes/hmac.js");
 var import_sha29 = require("@noble/hashes/sha2.js");
 var import_utils20 = require("@noble/hashes/utils.js");
 var NONCE_LENGTH5 = 24;
@@ -12226,8 +12361,10 @@ function generateSharePin() {
   const num = (bytes[0] << 24 | bytes[1] << 16 | bytes[2] << 8 | bytes[3]) >>> 0;
   return String(num % 1e6).padStart(PIN_LENGTH, "0");
 }
-function computeApiPinHash(pin) {
-  return (0, import_utils20.bytesToHex)((0, import_sha29.sha256)((0, import_utils20.utf8ToBytes)(pin)));
+var PIN_PROOF_INFO = (0, import_utils20.utf8ToBytes)("vaultkeepr-share-pin-proof-v1");
+function computeApiPinHash(pin, keyHex) {
+  const proofKey = (0, import_hmac4.hmac)(import_sha29.sha256, (0, import_utils20.hexToBytes)(keyHex), PIN_PROOF_INFO);
+  return (0, import_utils20.bytesToHex)((0, import_hmac4.hmac)(import_sha29.sha256, proofKey, (0, import_utils20.utf8ToBytes)(pin)));
 }
 function generateShareId() {
   const ts = Date.now().toString(36);
@@ -12245,7 +12382,6 @@ function deriveShareKeyV1(sharedSecret, pin) {
 function createSecureShare(payload, pin) {
   const sharePin = pin ?? generateSharePin();
   const shareId = generateShareId();
-  const apiPinHash = computeApiPinHash(sharePin);
   const fullPayload = {
     ...payload,
     version: SHARE_VERSION,
@@ -12258,6 +12394,7 @@ function createSecureShare(payload, pin) {
   }
   const ephemeralPrivate = import_secp256k12.secp256k1.utils.randomSecretKey();
   const ephemeralPublic = import_secp256k12.secp256k1.getPublicKey(ephemeralPrivate, false);
+  const apiPinHash = computeApiPinHash(sharePin, (0, import_utils20.bytesToHex)(ephemeralPrivate));
   const shareKey = deriveShareKeyV2(ephemeralPrivate, sharePin);
   const nonce = (0, import_utils19.randomBytes)(NONCE_LENGTH5);
   const chacha = (0, import_chacha7.xchacha20poly1305)(shareKey, nonce);
@@ -12393,7 +12530,7 @@ function calculatePasswordStrength(password) {
   } else {
     feedback.push("passwordFeedback.addSpecialChars");
   }
-  if (!/(.)\\1{2,}/.test(password)) {
+  if (!/(.)\1{2,}/.test(password)) {
     score += 10;
   } else {
     feedback.push("passwordFeedback.avoidRepeated");
@@ -12600,6 +12737,59 @@ function mergePrfCredentials(local, remote) {
   for (const cred of local) byId.set(cred.credentialId, cred);
   return Array.from(byId.values());
 }
+function legacyContactKey(c) {
+  return JSON.stringify([c.label, c.email, c.telegram, c.address, c.publicKey]);
+}
+function mergeLegacyContacts(base, local, remote) {
+  const byKey = /* @__PURE__ */ new Map();
+  for (const c of [...local ?? [], ...remote ?? []]) {
+    const key = legacyContactKey(c);
+    const existing = byKey.get(key);
+    if (!existing) {
+      byKey.set(key, c);
+      continue;
+    }
+    if (c.addedAt !== existing.addedAt) {
+      byKey.set(key, c.addedAt > existing.addedAt ? c : existing);
+    } else {
+      byKey.set(key, deterministicPick(existing, c));
+    }
+  }
+  if (byKey.size === 0) return void 0;
+  const ordered = [];
+  const placed = /* @__PURE__ */ new Set();
+  for (const c of base ?? []) {
+    const key = legacyContactKey(c);
+    const kept = byKey.get(key);
+    if (kept && !placed.has(key)) {
+      placed.add(key);
+      ordered.push(kept);
+    }
+  }
+  const additions = Array.from(byKey.entries()).filter(([key]) => !placed.has(key));
+  additions.sort((a, b) => {
+    if (a[1].addedAt !== b[1].addedAt) return a[1].addedAt < b[1].addedAt ? -1 : 1;
+    return JSON.stringify(a[1]) <= JSON.stringify(b[1]) ? -1 : 1;
+  });
+  for (const [, c] of additions) ordered.push(c);
+  return ordered;
+}
+function mergeMonitoredEmails(base, local, remote) {
+  const present = /* @__PURE__ */ new Set();
+  for (const v of [...local ?? [], ...remote ?? []]) present.add(v);
+  if (present.size === 0) return void 0;
+  const ordered = [];
+  for (const v of base ?? []) {
+    if (present.has(v) && !ordered.includes(v)) ordered.push(v);
+  }
+  const additions = [];
+  for (const v of present) {
+    if (!ordered.includes(v)) additions.push(v);
+  }
+  additions.sort((a, b) => a.localeCompare(b));
+  for (const v of additions) ordered.push(v);
+  return ordered;
+}
 function threeWayMerge(base, local, remote) {
   const effectiveBase = base ?? {
     version: local.version,
@@ -12663,6 +12853,16 @@ function threeWayMerge(base, local, remote) {
     (sum, f) => sum + (f.originalSize || 0),
     0
   );
+  const mergedLegacyContacts = mergeLegacyContacts(
+    base ? base.legacyContacts : void 0,
+    local.legacyContacts,
+    remote.legacyContacts
+  );
+  const mergedMonitoredEmails = mergeMonitoredEmails(
+    base ? base.monitoredEmails : void 0,
+    local.monitoredEmails,
+    remote.monitoredEmails
+  );
   const out = {
     version: Math.max(local.version, remote.version),
     createdAt: local.createdAt,
@@ -12687,6 +12887,15 @@ function threeWayMerge(base, local, remote) {
   if (Object.keys(mergedEntryTombstones).length > 0) {
     out.entryTombstones = mergedEntryTombstones;
   }
+  if (mergedLegacyContacts) {
+    out.legacyContacts = mergedLegacyContacts;
+  }
+  if (mergedMonitoredEmails) {
+    out.monitoredEmails = mergedMonitoredEmails;
+  }
+  if (local.secretKey !== void 0 || remote.secretKey !== void 0) {
+    out.secretKey = local.secretKey !== void 0 && remote.secretKey !== void 0 ? deterministicPick(local.secretKey, remote.secretKey) : local.secretKey ?? remote.secretKey;
+  }
   return out;
 }
 function mergeFolders(base, local, remote, baseTombstones, localTombstones, remoteTombstones, now) {
@@ -14928,7 +15137,7 @@ var BIP39_WORDLIST = [
   "zoo"
 ];
 function suggestBip39Words(prefix, limit = 5) {
-  const p = prefix.toLowerCase().trim();
+  const p = (prefix ?? "").toLowerCase().trim();
   if (!p) return [];
   const results = [];
   for (const word of BIP39_WORDLIST) {
@@ -15206,6 +15415,146 @@ var VaultKeepR_SLM = class {
     return { severity, ...data };
   }
 };
+
+// src/account-state.ts
+function accountKeyState(input) {
+  if (input.hasSecretKey) return { kind: "ready" };
+  if (input.remote?.moved) return { kind: "read_only_pair" };
+  if (input.remote?.exists || input.hasLocalVault) return { kind: "passage" };
+  return { kind: "choose" };
+}
+function pointerWalletFor(input) {
+  return input.hasSecretKey && input.remoteMoved ? input.smartAccount : input.eoa;
+}
+function passageNext(step, event) {
+  switch (`${step}:${event}`) {
+    case "idle:key_generated":
+      return { step: "key_pending", discardPendingKey: false };
+    case "key_pending:copy_ok":
+      return { step: "copied", discardPendingKey: false };
+    case "key_pending:copy_failed":
+      return { step: "idle", discardPendingKey: true };
+    case "copied:move_ok":
+      return { step: "moved", discardPendingKey: false };
+    case "copied:move_failed":
+      return { step: "copied", discardPendingKey: false };
+    case "copied:move_conflict":
+      return { step: "idle", discardPendingKey: true };
+    case "moved:promote_ok":
+      return { step: "done", discardPendingKey: false };
+    default:
+      return { error: `invalid passage transition: ${step} + ${event}` };
+  }
+}
+function passageIdentity(step) {
+  return step === "done" ? "smart_account" : "legacy";
+}
+
+// src/recovery-code.ts
+var import_argon23 = require("@noble/hashes/argon2.js");
+var import_utils23 = require("@noble/hashes/utils.js");
+var import_utils24 = require("@noble/ciphers/utils.js");
+var RECOVERY_CODE_LENGTH = 20;
+var ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+var ID_SALT = new TextEncoder().encode("vaultkeepr-recovery-id-v1");
+var SALT_LENGTH2 = 16;
+var ARGON2_OPTS2 = { t: 3, m: 65536, p: 4, dkLen: 32 };
+var SECRET_KEY_HEX = /^[0-9a-fA-F]{64}$/;
+function isAccountKeyText(value) {
+  if (SECRET_KEY_HEX.test(value)) return true;
+  if (value.length < 32 || value.length > 4096 || value.includes("BEGIN PGP")) return false;
+  return !isEnvelopeText(value);
+}
+function isEnvelopeText(value) {
+  if (!value.startsWith("{")) return false;
+  try {
+    const o = JSON.parse(value);
+    return !!o && typeof o === "object" && typeof o.v === "number" && typeof o.iv === "string" && typeof o.ct === "string";
+  } catch {
+    return false;
+  }
+}
+var argon2RecoveryKdf = (codeBytes2, salt) => (0, import_argon23.argon2id)(codeBytes2, salt, ARGON2_OPTS2);
+function generateRecoveryCode() {
+  const bytes = (0, import_utils24.randomBytes)(RECOVERY_CODE_LENGTH);
+  let code = "";
+  for (const b of bytes) code += ALPHABET[b % 32];
+  return code;
+}
+function normalizeRecoveryCode(input) {
+  return input.toUpperCase().replace(/[\s-]/g, "").replace(/O/g, "0").replace(/[IL]/g, "1");
+}
+function isValidRecoveryCode(input) {
+  const code = normalizeRecoveryCode(input);
+  return code.length === RECOVERY_CODE_LENGTH && [...code].every((c) => ALPHABET.includes(c));
+}
+function formatRecoveryCode(code) {
+  const canonical = normalizeRecoveryCode(code);
+  return canonical.match(/.{1,5}/g)?.join("-") ?? canonical;
+}
+function codeBytes(code) {
+  const canonical = normalizeRecoveryCode(code);
+  if (!isValidRecoveryCode(canonical)) throw new Error("Invalid recovery code");
+  return new TextEncoder().encode(canonical);
+}
+async function deriveRecoveryId(code, kdf = argon2RecoveryKdf) {
+  return (0, import_utils23.bytesToHex)(await kdf(codeBytes(code), ID_SALT));
+}
+async function createRecoveryBlob(secretKeyHex, code, kdf = argon2RecoveryKdf) {
+  if (!isAccountKeyText(secretKeyHex)) throw new Error("Invalid secret key");
+  const salt = (0, import_utils24.randomBytes)(SALT_LENGTH2);
+  const key = await kdf(codeBytes(code), salt);
+  const encrypted = encryptVault(secretKeyHex, key);
+  return { version: 1, salt: (0, import_utils23.bytesToHex)(salt), encrypted };
+}
+async function openRecoveryBlob(blob, code, kdf = argon2RecoveryKdf) {
+  if (blob.version !== 1) throw new Error("Unsupported recovery blob version");
+  let plain;
+  try {
+    const key = await kdf(codeBytes(code), (0, import_utils23.hexToBytes)(blob.salt));
+    plain = decryptVault(blob.encrypted, key);
+  } catch {
+    throw new Error("Recovery failed");
+  }
+  const secretKey = typeof plain === "string" ? plain : new TextDecoder().decode(plain);
+  if (!isAccountKeyText(secretKey)) throw new Error("Recovery failed");
+  return secretKey;
+}
+
+// src/key-join.ts
+var KeyJoinError = class extends Error {
+  constructor(code) {
+    super(code);
+    this.code = code;
+    this.name = "KeyJoinError";
+  }
+  code;
+};
+async function prepareKeyJoin(secretKeyHex, post, kdf) {
+  const code = generateRecoveryCode();
+  const blob = await createRecoveryBlob(secretKeyHex, code, kdf);
+  const id = await deriveRecoveryId(code, kdf);
+  await post(id, blob);
+  return { code: formatRecoveryCode(code) };
+}
+async function joinWithKeyCode(input, fetchBlob, kdf) {
+  const code = normalizeRecoveryCode(input);
+  if (!isValidRecoveryCode(code)) throw new KeyJoinError("invalid_code");
+  const id = await deriveRecoveryId(code, kdf);
+  const blob = await fetchBlob(id);
+  if (!blob) throw new KeyJoinError("not_found");
+  return openRecoveryBlob(blob, code, kdf);
+}
+
+// src/import-key-policy.ts
+function decideEncryptedImport(input) {
+  const device = input.deviceKey ? input.deviceKey.toLowerCase() : null;
+  const file = input.fileKey ? input.fileKey.toLowerCase() : null;
+  if (!device && !file) return { action: "import_keyless" };
+  if (!device && file) return { action: "join_with_file_key" };
+  if (device && !file) return { action: "refuse", reason: "keyless_file_on_keyed_device" };
+  return device === file ? { action: "keep_device_key" } : { action: "refuse", reason: "other_account" };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BIP39_WORDLIST,
@@ -15221,6 +15570,7 @@ var VaultKeepR_SLM = class {
   EXTENSION_MIN_PAYLOAD_VERSION,
   FRAGMENTED_DEFAULT_THRESHOLD,
   FRAGMENTED_DEFAULT_TOTAL,
+  KeyJoinError,
   MOBILE_MAX_PAYLOAD_VERSION,
   MOBILE_MIN_PAYLOAD_VERSION,
   P256_SPKI_HEADER,
@@ -15231,11 +15581,14 @@ var VaultKeepR_SLM = class {
   PAYLOAD_VERSION_V2,
   PAYLOAD_VERSION_V3,
   PAYLOAD_VERSION_V4,
+  RECOVERY_CODE_LENGTH,
   TAG_COLORS,
   VALID_TAGS,
   VaultKeepR_SLM,
+  accountKeyState,
   addEntry,
   analyzeVaultHealth,
+  argon2RecoveryKdf,
   buildAttestationObject,
   buildAuthDataForCreate,
   buildAuthDataForGet,
@@ -15250,6 +15603,7 @@ var VaultKeepR_SLM = class {
   captureError,
   checkEmailBreaches,
   checkVaultBreaches,
+  cleanEntryTitle,
   cleanMrzField,
   clearErrorBuffer,
   clearHiddenWalletCache,
@@ -15260,8 +15614,10 @@ var VaultKeepR_SLM = class {
   createExportPayload,
   createFolder,
   createKeyEnvelope,
+  createRecoveryBlob,
   createSecureShare,
   createVaultPayload,
+  decideEncryptedImport,
   decompressVault,
   decryptFromPair,
   decryptKeyEnvelope,
@@ -15283,6 +15639,7 @@ var VaultKeepR_SLM = class {
   deriveMrzKseed,
   deriveNfcKey,
   derivePairSecret,
+  deriveRecoveryId,
   digitsOnly,
   encryptAndFragmentDocument,
   encryptForPair,
@@ -15300,6 +15657,7 @@ var VaultKeepR_SLM = class {
   formatCardDisplayMasked,
   formatCardNumber,
   formatErrorReport,
+  formatRecoveryCode,
   fromBase64Url,
   generateBlurredThumbnailCanvas,
   generateCredentialId,
@@ -15311,17 +15669,22 @@ var VaultKeepR_SLM = class {
   generatePassphrase,
   generatePassword,
   generatePrfSalt,
+  generateRecoveryCode,
   generateSaltArgon2,
   generateSharePin,
   getCardBrand,
   getChecksumAddress,
+  getEntryDisplayName,
   getEntryGroupLabel,
   getErrorBuffer,
   getHiddenWalletFromPassword,
+  getHiddenWalletFromSecretKey,
   getHiddenWalletLegacy,
   getHiddenWalletPrivateKey,
+  getHiddenWalletPrivateKeyFromSecretKey,
   getLast4,
   getMostUsedEntries,
+  getPwnedCountForHash,
   getPwnedPasswordCount,
   getTOTPCode,
   getTOTPRemainingSeconds,
@@ -15335,6 +15698,7 @@ var VaultKeepR_SLM = class {
   importProtonPassJson,
   importVaultText,
   isAcceptablePayloadVersion,
+  isAccountKeyText,
   isCurrentPayloadVersion,
   isEncryptedExport,
   isNfcPayloadV1,
@@ -15346,15 +15710,19 @@ var VaultKeepR_SLM = class {
   isPasskeyPrivateKeyEncrypted,
   isPrfSupported,
   isProtonPassExport,
+  isValidRecoveryCode,
   isWebAuthnSupported,
+  joinWithKeyCode,
   maskCardNumber,
   mergeFolderTrees,
   mergeFolders,
   mergeFragments,
   mergeImportedEntries,
   moveFolder,
+  normalizeRecoveryCode,
   normalizeSignatureForKdf,
   normalizeUrl,
+  openRecoveryBlob,
   parseMRZ,
   parseMrzDate,
   parsePairPayload,
@@ -15364,6 +15732,10 @@ var VaultKeepR_SLM = class {
   parseTOTPUri,
   parseVault,
   parseVaultPayload,
+  passageIdentity,
+  passageNext,
+  pointerWalletFor,
+  prepareKeyJoin,
   publicKeyToCose,
   publicKeyToSpki,
   reassembleAndDecryptDocument,