@vaultkeepr/core 0.1.3 → 0.2.0

package/dist/index.mjs

@@ -33,6 +33,78 @@ function getEntryGroupLabel(folder) {
   if (!folder) return ENTRY_GROUP_LABELS.identifiants;
   return ENTRY_GROUP_LABELS[folder] ?? folder;
 }
+var JUNK_SUBDOMAIN_PREFIXES = /* @__PURE__ */ new Set([
+  "www",
+  "app",
+  "mobile",
+  "accounts",
+  "dashboard",
+  "kyc",
+  "mail",
+  "web",
+  "my",
+  "login",
+  "portal",
+  "id",
+  "news"
+]);
+function brandFrom(url) {
+  if (!url?.trim()) return null;
+  try {
+    const raw = url.includes("://") ? url : `https://${url}`;
+    const host = new URL(raw).hostname.replace(/^www\./i, "");
+    if (/^\d+(\.\d+){3}$/.test(host)) return null;
+    const parts = host.split(".").filter(Boolean);
+    if (parts.length < 2) return null;
+    let label = parts[0];
+    if (JUNK_SUBDOMAIN_PREFIXES.has(label.toLowerCase()) && parts.length > 2) label = parts[1];
+    if (!label) return null;
+    return { brand: label.charAt(0).toUpperCase() + label.slice(1).toLowerCase(), host: host.toLowerCase() };
+  } catch {
+    return null;
+  }
+}
+function cleanEntryTitle(rawTitle, url) {
+  const raw = rawTitle.trim();
+  let candidate = raw;
+  {
+    const lower = raw.toLowerCase();
+    let pos = lower.indexOf("passkey");
+    while (pos > 0) {
+      let i = pos;
+      while (i > 0 && /\s/.test(raw.charAt(i - 1))) i--;
+      const prefix = raw.slice(0, i);
+      if (i < pos && !prefix.includes("\n")) {
+        let j = pos + 7;
+        while (j < raw.length && /\s/.test(raw.charAt(j))) j++;
+        const tail = raw.slice(j);
+        if (j > pos + 7 && tail.length > 0 && !tail.includes("\n")) {
+          if (prefix.trim() !== "" && /\d/.test(tail)) candidate = prefix.trim();
+          break;
+        }
+      }
+      pos = lower.indexOf("passkey", pos + 1);
+    }
+  }
+  const brandInfo = brandFrom(url);
+  if (brandInfo) {
+    if (!candidate) return brandInfo.brand;
+    if (/^[\d\s()+.-]+$/.test(candidate)) return brandInfo.brand;
+    if (candidate.toLowerCase() === brandInfo.brand.toLowerCase()) return brandInfo.brand;
+    const schemeStripped = candidate.replace(/^https?:\/\//i, "");
+    const nl = schemeStripped.lastIndexOf("\n");
+    const slash = schemeStripped.indexOf("/", nl + 1);
+    const hostCandidate = slash === -1 ? schemeStripped : schemeStripped.slice(0, slash);
+    if (hostCandidate.toLowerCase() === brandInfo.host) {
+      return brandInfo.brand;
+    }
+  }
+  return candidate || brandInfo?.brand || raw;
+}
+function getEntryDisplayName(entry, primaryUrl) {
+  const url = primaryUrl ?? entry.urls?.[0]?.uri ?? entry.url ?? void 0;
+  return cleanEntryTitle(entry.title ?? entry.username ?? "", url);
+}
 function resolveFolderName(folderId, folderTree) {
   if (!folderId) return ENTRY_GROUP_LABELS.identifiants;
   if (folderId in ENTRY_GROUP_LABELS) return ENTRY_GROUP_LABELS[folderId];
@@ -531,9 +603,12 @@ function normalizeUrl(raw) {
   let u = (raw ?? "").trim().toLowerCase();
   u = u.replace(/^https?:\/\//, "");
   u = u.replace(/^www\./, "");
-  u = u.replace(/#.*$/, "");
-  u = u.replace(/\/+$/, "");
-  return u;
+  const nl = u.lastIndexOf("\n");
+  const hash = u.indexOf("#", nl + 1);
+  if (hash !== -1) u = u.slice(0, hash);
+  let end = u.length;
+  while (end > 0 && u.charAt(end - 1) === "/") end--;
+  return u.slice(0, end);
 }
 function entryFingerprint(entry) {
   const url = normalizeUrl(entry.url ?? "");
@@ -702,14 +777,14 @@ function isEncryptedExport(jsonStr) {
     return false;
   }
 }
-async function importEncryptedVault(encryptedJson, password, argon2Opts) {
+async function importEncryptedVault(encryptedJson, password, argon2Opts, precomputed) {
   const payload = JSON.parse(encryptedJson.trim());
   if (payload?.format !== ENCRYPTED_EXPORT_FORMAT || !payload.salt || !payload.nonce || !payload.ciphertext) {
     throw new Error("Format d'export chiffr\xE9 invalide.");
   }
   const salt = hexToBytes3(payload.salt);
   const effectiveOpts = payload.kdf ? { t: payload.kdf.t, m: payload.kdf.m, p: payload.kdf.p, dkLen: payload.kdf.dkLen } : argon2Opts ?? {};
-  const key = await deriveKeyFromPasswordArgon2(password, salt, effectiveOpts);
+  const key = precomputed?.key ?? await deriveKeyFromPasswordArgon2(password, precomputed?.salt ?? salt, effectiveOpts);
   const plaintext = decryptVault(
     {
       ciphertext: payload.ciphertext,
@@ -1421,7 +1496,6 @@ function isEnpassCsv(text) {
   const firstLine = text.split(/\r?\n/)[0];
   if (!firstLine) return false;
   const rawHeaders = firstLine.split(",");
-  const headers = rawHeaders.map((h) => h.replace(/^["']|["']$/g, "").trim());
   return rawHeaders.some((h) => {
     const clean = h.replace(/^["']|["']$/g, "").trim();
     return clean === "Title";
@@ -1959,22 +2033,28 @@ function parseCsvNoteExtras(rawNote) {
   let totpSecret;
   const customFields = [];
   for (const line of lines) {
-    const to = line.match(/^TOTP:\s+(.+)$/);
-    if (to) {
-      totpSecret = to[1].trim();
-      continue;
+    if (line.startsWith("TOTP:")) {
+      let j = 5;
+      while (j < line.length && /\s/.test(line.charAt(j))) j++;
+      if (j > 5 && j < line.length) {
+        totpSecret = line.slice(j).trim();
+        continue;
+      }
     }
-    const fieldsMatch = line.match(/^Fields:\s+(.+)$/);
-    if (fieldsMatch) {
-      const entries = fieldsMatch[1].split("|");
-      for (const entry of entries) {
-        const colonIdx = entry.indexOf(":");
-        if (colonIdx > 0) {
-          customFields.push({
-            name: entry.slice(0, colonIdx).trim(),
-            value: entry.slice(colonIdx + 1).trim(),
-            type: "text"
-          });
+    if (line.startsWith("Fields:")) {
+      let j = 7;
+      while (j < line.length && /\s/.test(line.charAt(j))) j++;
+      if (j > 7 && j < line.length) {
+        const entries = line.slice(j).split("|");
+        for (const entry of entries) {
+          const colonIdx = entry.indexOf(":");
+          if (colonIdx > 0) {
+            customFields.push({
+              name: entry.slice(0, colonIdx).trim(),
+              value: entry.slice(colonIdx + 1).trim(),
+              type: "text"
+            });
+          }
         }
       }
     }
@@ -2475,7 +2555,6 @@ function exportCsv(vault, opts = {}) {
         continue;
       }
       if (e.folder === "cartes") {
-        const m = parseCardMeta(e.notes);
         rows.push(
           [
             csvEscape("cartes"),
@@ -2831,7 +2910,10 @@ import { sha512 } from "@noble/hashes/sha2.js";
 var TOTP_STEP_SEC = 30;
 function base32Decode(input) {
   const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-  const clean = input.replace(/\s/g, "").toUpperCase().replace(/=+$/, "");
+  const upper = input.replace(/\s/g, "").toUpperCase();
+  let end = upper.length;
+  while (end > 0 && upper.charAt(end - 1) === "=") end--;
+  const clean = upper.slice(0, end);
   const bits = [];
   for (let i = 0; i < clean.length; i++) {
     const idx = alphabet.indexOf(clean[i]);
@@ -2902,9 +2984,9 @@ function parseTOTPUri(uri) {
 import { sha1 as sha12 } from "@noble/hashes/legacy.js";
 import { utf8ToBytes as utf8ToBytes4, bytesToHex as bytesToHex5 } from "@noble/hashes/utils.js";
 var RANGE_BASE = "https://api.pwnedpasswords.com/range/";
-async function getPwnedPasswordCount(password, options) {
-  if (!password.length) return 0;
-  const hash = bytesToHex5(sha12(utf8ToBytes4(password))).toUpperCase();
+async function getPwnedCountForHash(sha1Hex, options) {
+  const hash = sha1Hex.trim().toUpperCase();
+  if (hash.length !== 40) throw new Error(`Invalid SHA-1 length: ${hash.length}`);
   const prefix = hash.slice(0, 5);
   const suffix = hash.slice(5);
   const fetchFn = options?.fetchFn ?? fetch;
@@ -2920,7 +3002,6 @@ async function getPwnedPasswordCount(password, options) {
     throw new Error(`PwnedPasswords API: ${res.status}`);
   }
   const text = await res.text();
-  const suffixUpper = suffix.toUpperCase();
   for (const line of text.split("\n")) {
     const trimmed = line.trim();
     if (!trimmed) continue;
@@ -2928,13 +3009,18 @@ async function getPwnedPasswordCount(password, options) {
     if (colon < 0) continue;
     const h = trimmed.slice(0, colon).toUpperCase();
     const countStr = trimmed.slice(colon + 1);
-    if (h === suffixUpper) {
+    if (h === suffix) {
       const n = parseInt(countStr, 10);
       return Number.isFinite(n) ? n : 0;
     }
   }
   return 0;
 }
+async function getPwnedPasswordCount(password, options) {
+  if (!password.length) return 0;
+  const hash = bytesToHex5(sha12(utf8ToBytes4(password))).toUpperCase();
+  return getPwnedCountForHash(hash, options);
+}
 
 // src/wordlist.ts
 var EFF_WORDLIST = [
@@ -11512,7 +11598,10 @@ function toBase64Url2(bytes) {
   for (let i = 0; i < bytes.length; i++) {
     binary += String.fromCharCode(bytes[i]);
   }
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const b64 = btoa(binary).replace(/\+/g, "-").replace(/\//g, "_");
+  let end = b64.length;
+  while (end > 0 && b64.charAt(end - 1) === "=") end -= 1;
+  return b64.slice(0, end);
 }
 function fromBase64Url2(str) {
   const base64 = str.replace(/-/g, "+").replace(/_/g, "/");
@@ -11575,6 +11664,26 @@ async function getHiddenWalletFromPassword(masterPassword, secretKey) {
   _hwCache.set(cacheKey, account);
   return account;
 }
+async function getHiddenWalletFromSecretKey(secretKey) {
+  const cacheKey = keccak256(toHex(`${secretKey}:sk-only:v1`));
+  const cached = _hwCache.get(cacheKey);
+  if (cached) return cached;
+  const privateKey = await getHiddenWalletPrivateKeyFromSecretKey(secretKey);
+  const account = privateKeyToAccount(privateKey);
+  _hwCache.set(cacheKey, account);
+  return account;
+}
+async function getHiddenWalletPrivateKeyFromSecretKey(secretKey) {
+  const salt = deriveHwSalt(secretKey);
+  const inputBytes = new TextEncoder().encode(secretKey);
+  let derived;
+  if (_argon2Provider) {
+    derived = await _argon2Provider(inputBytes, salt, HW_ARGON2_OPTS);
+  } else {
+    derived = argon2id2(inputBytes, salt, HW_ARGON2_OPTS);
+  }
+  return bytesToHex8(derived);
+}
 function clearHiddenWalletCache() {
   _hwCache.clear();
 }
@@ -11737,7 +11846,9 @@ function calculateMrzChecksum(str) {
   return sum % 10;
 }
 function cleanMrzField(str) {
-  return str.replace(/<+$/g, "").replace(/</g, " ").trim();
+  let end = str.length;
+  while (end > 0 && str.charAt(end - 1) === "<") end--;
+  return str.slice(0, end).replace(/</g, " ").trim();
 }
 function parseMrzDate(str) {
   if (str.length !== 6) return "";
@@ -12006,6 +12117,7 @@ import { secp256k1 as secp256k12 } from "@noble/curves/secp256k1.js";
 import { xchacha20poly1305 as xchacha20poly13057 } from "@noble/ciphers/chacha.js";
 import { randomBytes as randomBytes8 } from "@noble/ciphers/utils.js";
 import { hkdf as hkdf5 } from "@noble/hashes/hkdf.js";
+import { hmac as hmac4 } from "@noble/hashes/hmac.js";
 import { sha256 as sha2568 } from "@noble/hashes/sha2.js";
 import { bytesToHex as bytesToHex10, hexToBytes as hexToBytes8, utf8ToBytes as utf8ToBytes8 } from "@noble/hashes/utils.js";
 var NONCE_LENGTH5 = 24;
@@ -12020,8 +12132,10 @@ function generateSharePin() {
   const num = (bytes[0] << 24 | bytes[1] << 16 | bytes[2] << 8 | bytes[3]) >>> 0;
   return String(num % 1e6).padStart(PIN_LENGTH, "0");
 }
-function computeApiPinHash(pin) {
-  return bytesToHex10(sha2568(utf8ToBytes8(pin)));
+var PIN_PROOF_INFO = utf8ToBytes8("vaultkeepr-share-pin-proof-v1");
+function computeApiPinHash(pin, keyHex) {
+  const proofKey = hmac4(sha2568, hexToBytes8(keyHex), PIN_PROOF_INFO);
+  return bytesToHex10(hmac4(sha2568, proofKey, utf8ToBytes8(pin)));
 }
 function generateShareId() {
   const ts = Date.now().toString(36);
@@ -12039,7 +12153,6 @@ function deriveShareKeyV1(sharedSecret, pin) {
 function createSecureShare(payload, pin) {
   const sharePin = pin ?? generateSharePin();
   const shareId = generateShareId();
-  const apiPinHash = computeApiPinHash(sharePin);
   const fullPayload = {
     ...payload,
     version: SHARE_VERSION,
@@ -12052,6 +12165,7 @@ function createSecureShare(payload, pin) {
   }
   const ephemeralPrivate = secp256k12.utils.randomSecretKey();
   const ephemeralPublic = secp256k12.getPublicKey(ephemeralPrivate, false);
+  const apiPinHash = computeApiPinHash(sharePin, bytesToHex10(ephemeralPrivate));
   const shareKey = deriveShareKeyV2(ephemeralPrivate, sharePin);
   const nonce = randomBytes8(NONCE_LENGTH5);
   const chacha = xchacha20poly13057(shareKey, nonce);
@@ -12187,7 +12301,7 @@ function calculatePasswordStrength(password) {
   } else {
     feedback.push("passwordFeedback.addSpecialChars");
   }
-  if (!/(.)\\1{2,}/.test(password)) {
+  if (!/(.)\1{2,}/.test(password)) {
     score += 10;
   } else {
     feedback.push("passwordFeedback.avoidRepeated");
@@ -12394,6 +12508,59 @@ function mergePrfCredentials(local, remote) {
   for (const cred of local) byId.set(cred.credentialId, cred);
   return Array.from(byId.values());
 }
+function legacyContactKey(c) {
+  return JSON.stringify([c.label, c.email, c.telegram, c.address, c.publicKey]);
+}
+function mergeLegacyContacts(base, local, remote) {
+  const byKey = /* @__PURE__ */ new Map();
+  for (const c of [...local ?? [], ...remote ?? []]) {
+    const key = legacyContactKey(c);
+    const existing = byKey.get(key);
+    if (!existing) {
+      byKey.set(key, c);
+      continue;
+    }
+    if (c.addedAt !== existing.addedAt) {
+      byKey.set(key, c.addedAt > existing.addedAt ? c : existing);
+    } else {
+      byKey.set(key, deterministicPick(existing, c));
+    }
+  }
+  if (byKey.size === 0) return void 0;
+  const ordered = [];
+  const placed = /* @__PURE__ */ new Set();
+  for (const c of base ?? []) {
+    const key = legacyContactKey(c);
+    const kept = byKey.get(key);
+    if (kept && !placed.has(key)) {
+      placed.add(key);
+      ordered.push(kept);
+    }
+  }
+  const additions = Array.from(byKey.entries()).filter(([key]) => !placed.has(key));
+  additions.sort((a, b) => {
+    if (a[1].addedAt !== b[1].addedAt) return a[1].addedAt < b[1].addedAt ? -1 : 1;
+    return JSON.stringify(a[1]) <= JSON.stringify(b[1]) ? -1 : 1;
+  });
+  for (const [, c] of additions) ordered.push(c);
+  return ordered;
+}
+function mergeMonitoredEmails(base, local, remote) {
+  const present = /* @__PURE__ */ new Set();
+  for (const v of [...local ?? [], ...remote ?? []]) present.add(v);
+  if (present.size === 0) return void 0;
+  const ordered = [];
+  for (const v of base ?? []) {
+    if (present.has(v) && !ordered.includes(v)) ordered.push(v);
+  }
+  const additions = [];
+  for (const v of present) {
+    if (!ordered.includes(v)) additions.push(v);
+  }
+  additions.sort((a, b) => a.localeCompare(b));
+  for (const v of additions) ordered.push(v);
+  return ordered;
+}
 function threeWayMerge(base, local, remote) {
   const effectiveBase = base ?? {
     version: local.version,
@@ -12457,6 +12624,16 @@ function threeWayMerge(base, local, remote) {
     (sum, f) => sum + (f.originalSize || 0),
     0
   );
+  const mergedLegacyContacts = mergeLegacyContacts(
+    base ? base.legacyContacts : void 0,
+    local.legacyContacts,
+    remote.legacyContacts
+  );
+  const mergedMonitoredEmails = mergeMonitoredEmails(
+    base ? base.monitoredEmails : void 0,
+    local.monitoredEmails,
+    remote.monitoredEmails
+  );
   const out = {
     version: Math.max(local.version, remote.version),
     createdAt: local.createdAt,
@@ -12481,6 +12658,15 @@ function threeWayMerge(base, local, remote) {
   if (Object.keys(mergedEntryTombstones).length > 0) {
     out.entryTombstones = mergedEntryTombstones;
   }
+  if (mergedLegacyContacts) {
+    out.legacyContacts = mergedLegacyContacts;
+  }
+  if (mergedMonitoredEmails) {
+    out.monitoredEmails = mergedMonitoredEmails;
+  }
+  if (local.secretKey !== void 0 || remote.secretKey !== void 0) {
+    out.secretKey = local.secretKey !== void 0 && remote.secretKey !== void 0 ? deterministicPick(local.secretKey, remote.secretKey) : local.secretKey ?? remote.secretKey;
+  }
   return out;
 }
 function mergeFolders(base, local, remote, baseTombstones, localTombstones, remoteTombstones, now) {
@@ -14722,7 +14908,7 @@ var BIP39_WORDLIST = [
   "zoo"
 ];
 function suggestBip39Words(prefix, limit = 5) {
-  const p = prefix.toLowerCase().trim();
+  const p = (prefix ?? "").toLowerCase().trim();
   if (!p) return [];
   const results = [];
   for (const word of BIP39_WORDLIST) {
@@ -15000,6 +15186,146 @@ var VaultKeepR_SLM = class {
     return { severity, ...data };
   }
 };
+
+// src/account-state.ts
+function accountKeyState(input) {
+  if (input.hasSecretKey) return { kind: "ready" };
+  if (input.remote?.moved) return { kind: "read_only_pair" };
+  if (input.remote?.exists || input.hasLocalVault) return { kind: "passage" };
+  return { kind: "choose" };
+}
+function pointerWalletFor(input) {
+  return input.hasSecretKey && input.remoteMoved ? input.smartAccount : input.eoa;
+}
+function passageNext(step, event) {
+  switch (`${step}:${event}`) {
+    case "idle:key_generated":
+      return { step: "key_pending", discardPendingKey: false };
+    case "key_pending:copy_ok":
+      return { step: "copied", discardPendingKey: false };
+    case "key_pending:copy_failed":
+      return { step: "idle", discardPendingKey: true };
+    case "copied:move_ok":
+      return { step: "moved", discardPendingKey: false };
+    case "copied:move_failed":
+      return { step: "copied", discardPendingKey: false };
+    case "copied:move_conflict":
+      return { step: "idle", discardPendingKey: true };
+    case "moved:promote_ok":
+      return { step: "done", discardPendingKey: false };
+    default:
+      return { error: `invalid passage transition: ${step} + ${event}` };
+  }
+}
+function passageIdentity(step) {
+  return step === "done" ? "smart_account" : "legacy";
+}
+
+// src/recovery-code.ts
+import { argon2id as argon2id3 } from "@noble/hashes/argon2.js";
+import { bytesToHex as bytesToHex12, hexToBytes as hexToBytes10 } from "@noble/hashes/utils.js";
+import { randomBytes as randomBytes10 } from "@noble/ciphers/utils.js";
+var RECOVERY_CODE_LENGTH = 20;
+var ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+var ID_SALT = new TextEncoder().encode("vaultkeepr-recovery-id-v1");
+var SALT_LENGTH2 = 16;
+var ARGON2_OPTS2 = { t: 3, m: 65536, p: 4, dkLen: 32 };
+var SECRET_KEY_HEX = /^[0-9a-fA-F]{64}$/;
+function isAccountKeyText(value) {
+  if (SECRET_KEY_HEX.test(value)) return true;
+  if (value.length < 32 || value.length > 4096 || value.includes("BEGIN PGP")) return false;
+  return !isEnvelopeText(value);
+}
+function isEnvelopeText(value) {
+  if (!value.startsWith("{")) return false;
+  try {
+    const o = JSON.parse(value);
+    return !!o && typeof o === "object" && typeof o.v === "number" && typeof o.iv === "string" && typeof o.ct === "string";
+  } catch {
+    return false;
+  }
+}
+var argon2RecoveryKdf = (codeBytes2, salt) => argon2id3(codeBytes2, salt, ARGON2_OPTS2);
+function generateRecoveryCode() {
+  const bytes = randomBytes10(RECOVERY_CODE_LENGTH);
+  let code = "";
+  for (const b of bytes) code += ALPHABET[b % 32];
+  return code;
+}
+function normalizeRecoveryCode(input) {
+  return input.toUpperCase().replace(/[\s-]/g, "").replace(/O/g, "0").replace(/[IL]/g, "1");
+}
+function isValidRecoveryCode(input) {
+  const code = normalizeRecoveryCode(input);
+  return code.length === RECOVERY_CODE_LENGTH && [...code].every((c) => ALPHABET.includes(c));
+}
+function formatRecoveryCode(code) {
+  const canonical = normalizeRecoveryCode(code);
+  return canonical.match(/.{1,5}/g)?.join("-") ?? canonical;
+}
+function codeBytes(code) {
+  const canonical = normalizeRecoveryCode(code);
+  if (!isValidRecoveryCode(canonical)) throw new Error("Invalid recovery code");
+  return new TextEncoder().encode(canonical);
+}
+async function deriveRecoveryId(code, kdf = argon2RecoveryKdf) {
+  return bytesToHex12(await kdf(codeBytes(code), ID_SALT));
+}
+async function createRecoveryBlob(secretKeyHex, code, kdf = argon2RecoveryKdf) {
+  if (!isAccountKeyText(secretKeyHex)) throw new Error("Invalid secret key");
+  const salt = randomBytes10(SALT_LENGTH2);
+  const key = await kdf(codeBytes(code), salt);
+  const encrypted = encryptVault(secretKeyHex, key);
+  return { version: 1, salt: bytesToHex12(salt), encrypted };
+}
+async function openRecoveryBlob(blob, code, kdf = argon2RecoveryKdf) {
+  if (blob.version !== 1) throw new Error("Unsupported recovery blob version");
+  let plain;
+  try {
+    const key = await kdf(codeBytes(code), hexToBytes10(blob.salt));
+    plain = decryptVault(blob.encrypted, key);
+  } catch {
+    throw new Error("Recovery failed");
+  }
+  const secretKey = typeof plain === "string" ? plain : new TextDecoder().decode(plain);
+  if (!isAccountKeyText(secretKey)) throw new Error("Recovery failed");
+  return secretKey;
+}
+
+// src/key-join.ts
+var KeyJoinError = class extends Error {
+  constructor(code) {
+    super(code);
+    this.code = code;
+    this.name = "KeyJoinError";
+  }
+  code;
+};
+async function prepareKeyJoin(secretKeyHex, post, kdf) {
+  const code = generateRecoveryCode();
+  const blob = await createRecoveryBlob(secretKeyHex, code, kdf);
+  const id = await deriveRecoveryId(code, kdf);
+  await post(id, blob);
+  return { code: formatRecoveryCode(code) };
+}
+async function joinWithKeyCode(input, fetchBlob, kdf) {
+  const code = normalizeRecoveryCode(input);
+  if (!isValidRecoveryCode(code)) throw new KeyJoinError("invalid_code");
+  const id = await deriveRecoveryId(code, kdf);
+  const blob = await fetchBlob(id);
+  if (!blob) throw new KeyJoinError("not_found");
+  return openRecoveryBlob(blob, code, kdf);
+}
+
+// src/import-key-policy.ts
+function decideEncryptedImport(input) {
+  const device = input.deviceKey ? input.deviceKey.toLowerCase() : null;
+  const file = input.fileKey ? input.fileKey.toLowerCase() : null;
+  if (!device && !file) return { action: "import_keyless" };
+  if (!device && file) return { action: "join_with_file_key" };
+  if (device && !file) return { action: "refuse", reason: "keyless_file_on_keyed_device" };
+  return device === file ? { action: "keep_device_key" } : { action: "refuse", reason: "other_account" };
+}
 export {
   BIP39_WORDLIST,
   BUILTIN_FOLDER_IDS,
@@ -15014,6 +15340,7 @@ export {
   EXTENSION_MIN_PAYLOAD_VERSION,
   FRAGMENTED_DEFAULT_THRESHOLD,
   FRAGMENTED_DEFAULT_TOTAL,
+  KeyJoinError,
   MOBILE_MAX_PAYLOAD_VERSION,
   MOBILE_MIN_PAYLOAD_VERSION,
   P256_SPKI_HEADER,
@@ -15024,11 +15351,14 @@ export {
   PAYLOAD_VERSION_V2,
   PAYLOAD_VERSION_V3,
   PAYLOAD_VERSION_V4,
+  RECOVERY_CODE_LENGTH,
   TAG_COLORS,
   VALID_TAGS,
   VaultKeepR_SLM,
+  accountKeyState,
   addEntry,
   analyzeVaultHealth,
+  argon2RecoveryKdf,
   buildAttestationObject,
   buildAuthDataForCreate,
   buildAuthDataForGet,
@@ -15043,6 +15373,7 @@ export {
   captureError,
   checkEmailBreaches,
   checkVaultBreaches,
+  cleanEntryTitle,
   cleanMrzField,
   clearErrorBuffer,
   clearHiddenWalletCache,
@@ -15053,8 +15384,10 @@ export {
   createExportPayload,
   createFolder,
   createKeyEnvelope,
+  createRecoveryBlob,
   createSecureShare,
   createVaultPayload,
+  decideEncryptedImport,
   decompressVault,
   decryptFromPair,
   decryptKeyEnvelope,
@@ -15076,6 +15409,7 @@ export {
   deriveMrzKseed,
   deriveNfcKey,
   derivePairSecret,
+  deriveRecoveryId,
   digitsOnly,
   encryptAndFragmentDocument,
   encryptForPair,
@@ -15093,6 +15427,7 @@ export {
   formatCardDisplayMasked,
   formatCardNumber,
   formatErrorReport,
+  formatRecoveryCode,
   fromBase64Url,
   generateBlurredThumbnailCanvas,
   generateCredentialId,
@@ -15104,17 +15439,22 @@ export {
   generatePassphrase,
   generatePassword,
   generatePrfSalt,
+  generateRecoveryCode,
   generateSaltArgon2,
   generateSharePin,
   getCardBrand,
   getChecksumAddress,
+  getEntryDisplayName,
   getEntryGroupLabel,
   getErrorBuffer,
   getHiddenWalletFromPassword,
+  getHiddenWalletFromSecretKey,
   getHiddenWalletLegacy,
   getHiddenWalletPrivateKey,
+  getHiddenWalletPrivateKeyFromSecretKey,
   getLast4,
   getMostUsedEntries,
+  getPwnedCountForHash,
   getPwnedPasswordCount,
   getTOTPCode,
   getTOTPRemainingSeconds,
@@ -15128,6 +15468,7 @@ export {
   importProtonPassJson,
   importVaultText,
   isAcceptablePayloadVersion,
+  isAccountKeyText,
   isCurrentPayloadVersion,
   isEncryptedExport,
   isNfcPayloadV1,
@@ -15139,15 +15480,19 @@ export {
   isPasskeyPrivateKeyEncrypted,
   isPrfSupported,
   isProtonPassExport,
+  isValidRecoveryCode,
   isWebAuthnSupported,
+  joinWithKeyCode,
   maskCardNumber,
   mergeFolderTrees,
   mergeFolders,
   mergeFragments,
   mergeImportedEntries,
   moveFolder,
+  normalizeRecoveryCode,
   normalizeSignatureForKdf,
   normalizeUrl,
+  openRecoveryBlob,
   parseMRZ,
   parseMrzDate,
   parsePairPayload,
@@ -15157,6 +15502,10 @@ export {
   parseTOTPUri,
   parseVault,
   parseVaultPayload,
+  passageIdentity,
+  passageNext,
+  pointerWalletFor,
+  prepareKeyJoin,
   publicKeyToCose,
   publicKeyToSpki,
   reassembleAndDecryptDocument,