Version 0.57.0

The recovery program can now show everything your account code derives, including your wallet.

An account code is not a password, it is the root: the identity the server knows you by, the key that opens your recovery list, your public code, and the wallet that pays for storage all come from it. Getting files back is half of what somebody needs if NMTS is gone; the other half is getting the wallet back, and nothing else can do that computation for them, so nmts-recovery --derive prints the public values and --secrets adds the wallet private keys behind a warning. It is checked against fixtures taken from the library NMTS itself uses, because a program that disagreed with the browser about an address would send somebody to fund the wrong one. The program also reads a recovery kit directly now, and says out loud that it is taking the account code from the file rather than asking.

Renamed the recovery map to the recovery list, because it was never a map.

A map is a figure of speech, and this product's own rule is that copy does not use them. What the file actually holds is a list: every file's name, folder, size, its key, and where its pieces are stored — locked with your account code. The file itself is untouched, extension and all, because copies of it are already on people's disks and the recovery program reads them by name. What a person calls a thing and what a parser looks for are allowed to differ.

The recovery kit now holds everything: your account code and your recovery list, in one file, with instructions.

Until now the two halves of a recovery were two downloads, deliberately: the list is useless without the code, so keeping them apart made losing one survivable — that is still true, and the list download is still the safer one. But being safe is worth nothing to somebody who cannot find the second file, so the kit is now the one-file option: the code, the whole list, and step-by-step instructions for the recovery program in English and Korean, printed into the file for whoever opens it years from now. ⛔ It is the dangerous file by design, because whoever takes it takes every file and the wallet that pays for storage, since one account code opens both. The kit says so above the code, in both languages, and the screen says so before it is written.

Downloading a recovery list now says what else you need before it saves.

The list on its own does not bring files back, and the moment somebody reaches for it is the moment that sentence lands. The panel names the two things that have to be beside it — your account code, which is deliberately not inside the file, and the recovery program — and where the program lives. The kit's own warning grew for the same reason, and the code gate that used to write the kit the instant a typed code checked out now shows the warning too: the person on a machine that does not remember them was the one person who never saw what the file contains.