[{"data":1,"prerenderedAt":2468},["ShallowReactive",2],{"navigation":3,"\u002Frecipes\u002Fecho-secret-enrollment":927},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":539,"access":12,"apiToc":929,"body":930,"category":2459,"description":2460,"extension":2461,"meta":2462,"navigation":2459,"nest":2459,"path":540,"seo":2463,"sinceVersion":2464,"status":2465,"stem":541,"subtitle":2459,"tier":2466,"tocExternal":2459,"__hash__":2467},"docs\u002Frecipes\u002Fecho-secret-enrollment.md",false,{"type":931,"value":932,"toc":2446},"minimark",[933,937,971,986,989,994,1030,1034,1093,1097,1104,1114,1122,1125,1217,1228,1232,1235,1240,1243,1249,1255,1269,1272,1276,1279,1298,1304,1308,1329,1336,1509,1532,1536,1546,1636,1643,1686,1697,1701,1704,1713,1724,1737,1741,1744,2025,2029,2032,2037,2212,2218,2411,2414,2418,2442],[934,935,539],"h1",{"id":936},"composing-an-echo-secret",[938,939,940],"blockquote",{},[941,942,943,947,948,953,954,957,958,962,963,966,967,970],"p",{},[944,945,946],"strong",{},"Audience:"," an app developer writing the enrollment screen for a vault in ",[949,950,952],"a",{"href":951},"\u002Fservices\u002Fsession-tiers#tier-1-echo-secret","echo mode"," — and, through that screen, the person choosing the secret.\n",[944,955,956],{},"Bundle:"," core only — ",[959,960,961],"code",{},"@noy-db\u002Fhub"," with ",[959,964,965],{},"secretMode: 'echo'",". No satellite package, no ",[959,968,969],{},"with*()"," service.",[941,972,973,974,977,978,981,982,985],{},"An echo secret is one sentence, enrolled as three parts. The user types the first part (the ",[944,975,976],{},"prompt","), the vault answers with the second (the ",[944,979,980],{},"echo","), the user recognizes it and types the third (the ",[944,983,984],{},"key","). That middle step is the whole point: a phishing page can copy your unlock screen pixel for pixel, but it cannot produce the middle of a sentence it has never seen.",[941,987,988],{},"Which makes the choice of sentence the load-bearing decision. The mechanism is only as good as the echo the user picks, and the failure mode is specific and common: people reach for autobiography, and autobiography is searchable. This page is the guidance to put in front of them.",[990,991,993],"h2",{"id":992},"prerequisites","Prerequisites",[995,996,997,1018,1024],"ul",{},[998,999,1000,1003,1004,1006,1007,1010,1011,1013,1014,1017],"li",{},[944,1001,1002],{},"A vault in echo mode"," — ",[959,1005,965],{}," at ",[959,1008,1009],{},"createNoydb",". The mode is chosen at enrollment and recorded in the keyring; see ",[949,1012,844],{"href":951}," for the full API, the reveal policies, and how to migrate an existing vault with ",[959,1015,1016],{},"rotateSecret",".",[998,1019,1020,1023],{},[944,1021,1022],{},"An enrollment screen with three fields."," Not one field with separators — the three parts are three inputs. A single-field entry for an echo vault cannot work and must not be offered.",[998,1025,1026,1029],{},[944,1027,1028],{},"Nothing else."," No package to install, no strategy to wire in.",[990,1031,1033],{"id":1032},"what-this-gets-you","What this gets you",[1035,1036,1037,1050],"table",{},[1038,1039,1040],"thead",{},[1041,1042,1043,1047],"tr",{},[1044,1045,1046],"th",{},"What the user gets",[1044,1048,1049],{},"Which part provides it",[1051,1052,1053,1065,1073,1083],"tbody",{},[1041,1054,1055,1059],{},[1056,1057,1058],"td",{},"A phishing page cannot complete the unlock",[1056,1060,1061,1062,1064],{},"the ",[944,1063,980],{},", revealed by the vault before the user finishes",[1041,1066,1067,1070],{},[1056,1068,1069],{},"No single-string form to be tricked into typing",[1056,1071,1072],{},"the three-part key derivation — no concatenation is equivalent to it",[1041,1074,1075,1078],{},[1056,1076,1077],{},"A retrieval cue for a secret typed twice a year",[1056,1079,1061,1080,1082],{},[944,1081,980],{},", which is the middle of the user's own sentence",[1041,1084,1085,1088],{},[1056,1086,1087],{},"Resistance to someone who guesses the first part",[1056,1089,1061,1090,1092],{},[944,1091,984],{},", which the echo does not disclose",[990,1094,1096],{"id":1095},"rule-1-one-sentence-split-in-three","Rule 1 — one sentence, split in three",[941,1098,1099,1100,1103],{},"Do not ask for three unrelated secrets. Ask for ",[944,1101,1102],{},"one sentence the user will still recognize in three years",", then split it at two natural pauses:",[1105,1106,1111],"pre",{"className":1107,"code":1109,"language":1110},[1108],"language-text","prompt   \"the part you type to start\"\necho     \"the part we will show you\"\nkey      \"the part you type to finish\"\n","text",[959,1112,1109],{"__ignoreMap":1113},"",[941,1115,1116,1117,1121],{},"A sentence survives in memory as a unit; three unrelated fragments do not. The split also has to fall where the sentence ",[1118,1119,1120],"em",{},"bends",", so that seeing the echo makes the key feel inevitable rather than arbitrary.",[941,1123,1124],{},"Shape to aim for:",[1105,1126,1130],{"className":1127,"code":1128,"language":1129,"meta":1113,"style":1113},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","const parts = {\n  prompt: 'mi chiamo vicio',\n  echo:   'ma da piccolo al santanna mi chiamavano',\n  key:    'ciccio',\n}\n","ts",[959,1131,1132,1152,1175,1193,1211],{"__ignoreMap":1113},[1133,1134,1137,1141,1145,1149],"span",{"class":1135,"line":1136},"line",1,[1133,1138,1140],{"class":1139},"spNyl","const",[1133,1142,1144],{"class":1143},"sTEyZ"," parts ",[1133,1146,1148],{"class":1147},"sMK4o","=",[1133,1150,1151],{"class":1147}," {\n",[1133,1153,1155,1159,1162,1165,1169,1172],{"class":1135,"line":1154},2,[1133,1156,1158],{"class":1157},"swJcz","  prompt",[1133,1160,1161],{"class":1147},":",[1133,1163,1164],{"class":1147}," '",[1133,1166,1168],{"class":1167},"sfazB","mi chiamo vicio",[1133,1170,1171],{"class":1147},"'",[1133,1173,1174],{"class":1147},",\n",[1133,1176,1178,1181,1183,1186,1189,1191],{"class":1135,"line":1177},3,[1133,1179,1180],{"class":1157},"  echo",[1133,1182,1161],{"class":1147},[1133,1184,1185],{"class":1147},"   '",[1133,1187,1188],{"class":1167},"ma da piccolo al santanna mi chiamavano",[1133,1190,1171],{"class":1147},[1133,1192,1174],{"class":1147},[1133,1194,1196,1199,1201,1204,1207,1209],{"class":1135,"line":1195},4,[1133,1197,1198],{"class":1157},"  key",[1133,1200,1161],{"class":1147},[1133,1202,1203],{"class":1147},"    '",[1133,1205,1206],{"class":1167},"ciccio",[1133,1208,1171],{"class":1147},[1133,1210,1174],{"class":1147},[1133,1212,1214],{"class":1135,"line":1213},5,[1133,1215,1216],{"class":1147},"}\n",[941,1218,1219,1220,1223,1224,1227],{},"That example is the right ",[944,1221,1222],{},"shape"," — a short opener, a longer middle that carries the recognition, a short ending that completes it — and deliberately the wrong ",[944,1225,1226],{},"content",". Every clause in it is a true biographical fact: a real name, a real school, a real childhood nickname. Which brings us to the rule that matters most.",[990,1229,1231],{"id":1230},"rule-2-the-echo-must-be-unguessable-by-an-acquaintance","Rule 2 — the echo must be unguessable by an acquaintance",[941,1233,1234],{},"The echo is what an attacker most wants, because a guessed prompt yields a revealed echo, and an echo in hand makes a perfect imitation of your unlock screen possible. So the question to put to the user is not \"is this memorable?\" but:",[938,1236,1237],{},[941,1238,1239],{},"Could someone who knows me — or someone who reads my public profiles for ten minutes — write this sentence?",[941,1241,1242],{},"If the answer is anything but a firm no, the sentence fails.",[941,1244,1245,1248],{},[944,1246,1247],{},"Never use"," (all of it is public, inferable, or asked over dinner): your name, a parent's or child's name, a school or university, a home town or street, a nickname anyone has used out loud, an employer, a wedding date, a pet's name, a sports team, a birthday.",[941,1250,1251,1254],{},[944,1252,1253],{},"Use instead",", either of:",[995,1256,1257,1263],{},[998,1258,1259,1262],{},[944,1260,1261],{},"A private memory"," — something true that was never told to anyone. The thought you had in a specific waiting room; what you were reading the night before a move; the thing you almost said and did not. True memories are durable, and there is nobody to have overheard them.",[998,1264,1265,1268],{},[944,1266,1267],{},"A deliberately false fact"," — a real-sounding sentence that is not true of you. Invented, memorized once, and therefore unavailable to anyone researching your actual life. A false fact is often easier to keep private than a true one, because it never appears anywhere.",[941,1270,1271],{},"The hub cannot check any of this. No validator can distinguish a private memory from a published one, so the guidance lives here and on your enrollment screen, and nowhere in the code.",[990,1273,1275],{"id":1274},"rule-3-longer-echo-better-echo","Rule 3 — longer echo, better echo",[941,1277,1278],{},"The echo carries the recognition, so length costs the user nothing at unlock — they read it, they do not type it. Length buys two things:",[995,1280,1281,1287],{},[998,1282,1283,1286],{},[944,1284,1285],{},"Recognition quality."," A seven-word middle is unmistakably yours; a two-word one might be anyone's.",[998,1288,1289,1292,1293,1297],{},[944,1290,1291],{},"Resistance to offline guessing."," Anyone holding a copy of the keyring or pod file can test candidate echoes offline against the stored verifier, without limit. Each guess costs 600,000 PBKDF2 iterations, and there is no minimum-entropy floor on an echo — so the only thing standing between a short, ordinary echo and a determined file-holder is how ordinary it is. See the ",[949,1294,1296],{"href":1295},"\u002Ffaq\u002Fthreat-model#a-phishing-page-imitating-the-unlock-screen","threat model"," for the full accounting.",[941,1299,1300,1301,1303],{},"Aim for a middle part of five words or more. Length in the ",[944,1302,984],{}," matters for the same reason and is worth encouraging, though the key is typed, so there is a real trade against usability.",[990,1305,1307],{"id":1306},"rule-4-write-it-as-a-natural-sentence","Rule 4 — write it as a natural sentence",[941,1309,1310,1311,1314,1315,1318,1319,1318,1322,1318,1325,1328],{},"The validator was tuned for this: echo-mode parts allow words of ",[944,1312,1313],{},"one character or more",", relaxed from the standard phrase's three-character floor, precisely so that Romance-language function words — ",[1118,1316,1317],{},"mi",", ",[1118,1320,1321],{},"da",[1118,1323,1324],{},"al",[1118,1326,1327],{},"è"," — do not get a valid sentence rejected. Word-count floors are unchanged: at least three words in the prompt, at least six across all three parts combined.",[941,1330,1331,1332,1335],{},"What has not been relaxed is the ",[944,1333,1334],{},"character pattern",": lowercase letters and single spaces only. No capitals, no digits, no punctuation. A sentence with a period or an apostrophe in it must lose them at enrollment:",[1105,1337,1339],{"className":1127,"code":1338,"language":1129,"meta":1113,"style":1113},"import { validateEchoSecret } from '@noy-db\u002Fhub'\n\nvalidateEchoSecret({\n  prompt: 'mi chiamo vicio',\n  echo: 'ma da piccolo al santanna mi chiamavano',\n  key: 'ciccio',\n})\n\u002F\u002F → { ok: true, words: 11 }\n\nvalidateEchoSecret({ prompt: 'ciao', echo: 'come stai oggi amico', key: 'bene grazie' })\n\u002F\u002F → { ok: false, reason: 'too-few-words', minimum: 3, got: 1 }   — the prompt is one word\n",[959,1340,1341,1366,1372,1384,1398,1412,1427,1436,1443,1448,1503],{"__ignoreMap":1113},[1133,1342,1343,1347,1350,1353,1356,1359,1361,1363],{"class":1135,"line":1136},[1133,1344,1346],{"class":1345},"s7zQu","import",[1133,1348,1349],{"class":1147}," {",[1133,1351,1352],{"class":1143}," validateEchoSecret",[1133,1354,1355],{"class":1147}," }",[1133,1357,1358],{"class":1345}," from",[1133,1360,1164],{"class":1147},[1133,1362,961],{"class":1167},[1133,1364,1365],{"class":1147},"'\n",[1133,1367,1368],{"class":1135,"line":1154},[1133,1369,1371],{"emptyLinePlaceholder":1370},true,"\n",[1133,1373,1374,1378,1381],{"class":1135,"line":1177},[1133,1375,1377],{"class":1376},"s2Zo4","validateEchoSecret",[1133,1379,1380],{"class":1143},"(",[1133,1382,1383],{"class":1147},"{\n",[1133,1385,1386,1388,1390,1392,1394,1396],{"class":1135,"line":1195},[1133,1387,1158],{"class":1157},[1133,1389,1161],{"class":1147},[1133,1391,1164],{"class":1147},[1133,1393,1168],{"class":1167},[1133,1395,1171],{"class":1147},[1133,1397,1174],{"class":1147},[1133,1399,1400,1402,1404,1406,1408,1410],{"class":1135,"line":1213},[1133,1401,1180],{"class":1157},[1133,1403,1161],{"class":1147},[1133,1405,1164],{"class":1147},[1133,1407,1188],{"class":1167},[1133,1409,1171],{"class":1147},[1133,1411,1174],{"class":1147},[1133,1413,1415,1417,1419,1421,1423,1425],{"class":1135,"line":1414},6,[1133,1416,1198],{"class":1157},[1133,1418,1161],{"class":1147},[1133,1420,1164],{"class":1147},[1133,1422,1206],{"class":1167},[1133,1424,1171],{"class":1147},[1133,1426,1174],{"class":1147},[1133,1428,1430,1433],{"class":1135,"line":1429},7,[1133,1431,1432],{"class":1147},"}",[1133,1434,1435],{"class":1143},")\n",[1133,1437,1439],{"class":1135,"line":1438},8,[1133,1440,1442],{"class":1441},"sHwdD","\u002F\u002F → { ok: true, words: 11 }\n",[1133,1444,1446],{"class":1135,"line":1445},9,[1133,1447,1371],{"emptyLinePlaceholder":1370},[1133,1449,1451,1453,1455,1458,1461,1463,1465,1468,1470,1473,1476,1478,1480,1483,1485,1487,1490,1492,1494,1497,1499,1501],{"class":1135,"line":1450},10,[1133,1452,1377],{"class":1376},[1133,1454,1380],{"class":1143},[1133,1456,1457],{"class":1147},"{",[1133,1459,1460],{"class":1157}," prompt",[1133,1462,1161],{"class":1147},[1133,1464,1164],{"class":1147},[1133,1466,1467],{"class":1167},"ciao",[1133,1469,1171],{"class":1147},[1133,1471,1472],{"class":1147},",",[1133,1474,1475],{"class":1157}," echo",[1133,1477,1161],{"class":1147},[1133,1479,1164],{"class":1147},[1133,1481,1482],{"class":1167},"come stai oggi amico",[1133,1484,1171],{"class":1147},[1133,1486,1472],{"class":1147},[1133,1488,1489],{"class":1157}," key",[1133,1491,1161],{"class":1147},[1133,1493,1164],{"class":1147},[1133,1495,1496],{"class":1167},"bene grazie",[1133,1498,1171],{"class":1147},[1133,1500,1355],{"class":1147},[1133,1502,1435],{"class":1143},[1133,1504,1506],{"class":1135,"line":1505},11,[1133,1507,1508],{"class":1441},"\u002F\u002F → { ok: false, reason: 'too-few-words', minimum: 3, got: 1 }   — the prompt is one word\n",[941,1510,1511,1512,1515,1516,1519,1520,1523,1524,1527,1528,1531],{},"Show the user ",[1118,1513,1514],{},"which part"," failed. ",[959,1517,1518],{},"assertStrongEchoSecret"," throws a ",[959,1521,1522],{},"WeakSecretError"," carrying a ",[959,1525,1526],{},"reason"," and a ",[959,1529,1530],{},"suggestion",", and the suggestion is prompt-specific when the prompt is what failed.",[990,1533,1535],{"id":1534},"rule-5-set-a-mask-hint-and-keep-it-a-hint","Rule 5 — set a mask hint, and keep it a hint",[941,1537,1538,1539,1542,1543,1161],{},"The revealed echo appears on a screen, so it is shoulder-surfable. The keyring carries an optional ",[959,1540,1541],{},"echoMaskHint",", stored verbatim and handed back to the player as ",[959,1544,1545],{},"ceremony.maskHint",[1105,1547,1549],{"className":1127,"code":1548,"language":1129,"meta":1113,"style":1113},"const db = await createNoydb({\n  store, user: 'vicio', secretMode: 'echo', secret: parts,\n  echoMaskHint: 'first-letters',\n})\n",[959,1550,1551,1570,1614,1630],{"__ignoreMap":1113},[1133,1552,1553,1555,1558,1560,1563,1566,1568],{"class":1135,"line":1136},[1133,1554,1140],{"class":1139},[1133,1556,1557],{"class":1143}," db ",[1133,1559,1148],{"class":1147},[1133,1561,1562],{"class":1345}," await",[1133,1564,1565],{"class":1376}," createNoydb",[1133,1567,1380],{"class":1143},[1133,1569,1383],{"class":1147},[1133,1571,1572,1575,1577,1580,1582,1584,1587,1589,1591,1594,1596,1598,1600,1602,1604,1607,1609,1612],{"class":1135,"line":1154},[1133,1573,1574],{"class":1143},"  store",[1133,1576,1472],{"class":1147},[1133,1578,1579],{"class":1157}," user",[1133,1581,1161],{"class":1147},[1133,1583,1164],{"class":1147},[1133,1585,1586],{"class":1167},"vicio",[1133,1588,1171],{"class":1147},[1133,1590,1472],{"class":1147},[1133,1592,1593],{"class":1157}," secretMode",[1133,1595,1161],{"class":1147},[1133,1597,1164],{"class":1147},[1133,1599,980],{"class":1167},[1133,1601,1171],{"class":1147},[1133,1603,1472],{"class":1147},[1133,1605,1606],{"class":1157}," secret",[1133,1608,1161],{"class":1147},[1133,1610,1611],{"class":1143}," parts",[1133,1613,1174],{"class":1147},[1133,1615,1616,1619,1621,1623,1626,1628],{"class":1135,"line":1177},[1133,1617,1618],{"class":1157},"  echoMaskHint",[1133,1620,1161],{"class":1147},[1133,1622,1164],{"class":1147},[1133,1624,1625],{"class":1167},"first-letters",[1133,1627,1171],{"class":1147},[1133,1629,1174],{"class":1147},[1133,1631,1632,1634],{"class":1135,"line":1195},[1133,1633,1432],{"class":1147},[1133,1635,1435],{"class":1143},[941,1637,1638,1639,1642],{},"The hub attaches ",[944,1640,1641],{},"no meaning"," to the string — it neither validates nor interprets it. That makes the vocabulary yours, so pick a small one and use it consistently across every surface that opens your vaults. A workable set:",[1035,1644,1645,1655],{},[1038,1646,1647],{},[1041,1648,1649,1652],{},[1044,1650,1651],{},"Hint",[1044,1653,1654],{},"What a player renders",[1051,1656,1657,1666,1676],{},[1041,1658,1659,1663],{},[1056,1660,1661],{},[959,1662,1625],{},[1056,1664,1665],{},"the first letter of each word, the rest as dots — enough to recognize, little to steal",[1041,1667,1668,1673],{},[1056,1669,1670],{},[959,1671,1672],{},"full",[1056,1674,1675],{},"the echo in full; for a private device, or when the user asked for it",[1041,1677,1678,1683],{},[1056,1679,1680],{},[959,1681,1682],{},"tap-to-reveal",[1056,1684,1685],{},"masked until the user deliberately reveals it",[941,1687,1688,1689,1692,1693,1696],{},"Two constraints on whatever vocabulary you choose. The hint is ",[944,1690,1691],{},"plaintext keyring metadata",", like the salt — so it must never contain any part of the echo. And it is a ",[1118,1694,1695],{},"hint",": a player that does not recognize your vocabulary still has to mask by its own judgment rather than fall back to showing everything.",[990,1698,1700],{"id":1699},"rule-6-teach-the-warning-and-mean-it","Rule 6 — teach the warning, and mean it",[941,1702,1703],{},"Enrollment is where the user learns what the ceremony is for. One sentence on the screen, and it has to be unambiguous:",[938,1705,1706],{},[941,1707,1708,1709,1712],{},"If the app ever shows you the wrong middle part — or shows you none at all — ",[944,1710,1711],{},"stop",". Do not type the last part. Close it, open the official app yourself, and change your secret.",[941,1714,1715,1716,1719,1720,1723],{},"Then make your own application obey it. When a user does not recognize the echo, the ceremony is over: show the warning, do not call ",[959,1717,1718],{},"complete()",", and ",[944,1721,1722],{},"do not"," offer a \"skip this step\" or \"verification unavailable\" affordance. An escape hatch is the only thing that can turn a defeated phishing attempt back into a successful one — and once one application ships one, every phishing page will imitate it.",[941,1725,1726,1727,1730,1731,1736],{},"Rate limiting is on you too: the hub keeps no attempt counter, so repeated ",[959,1728,1729],{},"WrongPromptError","s should trigger your own backoff or lockout (",[949,1732,1733],{"href":330},[959,1734,1735],{},"on-threat"," covers the ready-made version).",[990,1738,1740],{"id":1739},"setup","Setup",[941,1742,1743],{},"The complete enrollment call, with everything above applied:",[1105,1745,1747],{"className":1127,"code":1746,"language":1129,"meta":1113,"style":1113},"import { createNoydb, assertStrongEchoSecret } from '@noy-db\u002Fhub'\nimport { toBrowserIdb } from '@noy-db\u002Fto-browser-idb'\n\nconst parts = {\n  prompt: collected.prompt,   \u002F\u002F three separate inputs, never one field\n  echo: collected.echo,\n  key: collected.key,\n}\n\nassertStrongEchoSecret(parts)   \u002F\u002F surface reason + suggestion in the form, before creating anything\n\nconst db = await createNoydb({\n  store: toBrowserIdb(),\n  user: 'vicio',\n  secretMode: 'echo',\n  secret: parts,\n  echoMaskHint: 'first-letters',\n  validateSecret: true,\n})\n\nconst vault = await db.openVault('acme')   \u002F\u002F the keyring and its echo block are written here\n",[959,1748,1749,1772,1792,1796,1806,1824,1838,1852,1856,1860,1870,1874,1891,1905,1921,1937,1949,1964,1978,1985,1990],{"__ignoreMap":1113},[1133,1750,1751,1753,1755,1757,1759,1762,1764,1766,1768,1770],{"class":1135,"line":1136},[1133,1752,1346],{"class":1345},[1133,1754,1349],{"class":1147},[1133,1756,1565],{"class":1143},[1133,1758,1472],{"class":1147},[1133,1760,1761],{"class":1143}," assertStrongEchoSecret",[1133,1763,1355],{"class":1147},[1133,1765,1358],{"class":1345},[1133,1767,1164],{"class":1147},[1133,1769,961],{"class":1167},[1133,1771,1365],{"class":1147},[1133,1773,1774,1776,1778,1781,1783,1785,1787,1790],{"class":1135,"line":1154},[1133,1775,1346],{"class":1345},[1133,1777,1349],{"class":1147},[1133,1779,1780],{"class":1143}," toBrowserIdb",[1133,1782,1355],{"class":1147},[1133,1784,1358],{"class":1345},[1133,1786,1164],{"class":1147},[1133,1788,1789],{"class":1167},"@noy-db\u002Fto-browser-idb",[1133,1791,1365],{"class":1147},[1133,1793,1794],{"class":1135,"line":1177},[1133,1795,1371],{"emptyLinePlaceholder":1370},[1133,1797,1798,1800,1802,1804],{"class":1135,"line":1195},[1133,1799,1140],{"class":1139},[1133,1801,1144],{"class":1143},[1133,1803,1148],{"class":1147},[1133,1805,1151],{"class":1147},[1133,1807,1808,1810,1812,1815,1817,1819,1821],{"class":1135,"line":1213},[1133,1809,1158],{"class":1157},[1133,1811,1161],{"class":1147},[1133,1813,1814],{"class":1143}," collected",[1133,1816,1017],{"class":1147},[1133,1818,976],{"class":1143},[1133,1820,1472],{"class":1147},[1133,1822,1823],{"class":1441},"   \u002F\u002F three separate inputs, never one field\n",[1133,1825,1826,1828,1830,1832,1834,1836],{"class":1135,"line":1414},[1133,1827,1180],{"class":1157},[1133,1829,1161],{"class":1147},[1133,1831,1814],{"class":1143},[1133,1833,1017],{"class":1147},[1133,1835,980],{"class":1143},[1133,1837,1174],{"class":1147},[1133,1839,1840,1842,1844,1846,1848,1850],{"class":1135,"line":1429},[1133,1841,1198],{"class":1157},[1133,1843,1161],{"class":1147},[1133,1845,1814],{"class":1143},[1133,1847,1017],{"class":1147},[1133,1849,984],{"class":1143},[1133,1851,1174],{"class":1147},[1133,1853,1854],{"class":1135,"line":1438},[1133,1855,1216],{"class":1147},[1133,1857,1858],{"class":1135,"line":1445},[1133,1859,1371],{"emptyLinePlaceholder":1370},[1133,1861,1862,1864,1867],{"class":1135,"line":1450},[1133,1863,1518],{"class":1376},[1133,1865,1866],{"class":1143},"(parts)   ",[1133,1868,1869],{"class":1441},"\u002F\u002F surface reason + suggestion in the form, before creating anything\n",[1133,1871,1872],{"class":1135,"line":1505},[1133,1873,1371],{"emptyLinePlaceholder":1370},[1133,1875,1877,1879,1881,1883,1885,1887,1889],{"class":1135,"line":1876},12,[1133,1878,1140],{"class":1139},[1133,1880,1557],{"class":1143},[1133,1882,1148],{"class":1147},[1133,1884,1562],{"class":1345},[1133,1886,1565],{"class":1376},[1133,1888,1380],{"class":1143},[1133,1890,1383],{"class":1147},[1133,1892,1894,1896,1898,1900,1903],{"class":1135,"line":1893},13,[1133,1895,1574],{"class":1157},[1133,1897,1161],{"class":1147},[1133,1899,1780],{"class":1376},[1133,1901,1902],{"class":1143},"()",[1133,1904,1174],{"class":1147},[1133,1906,1908,1911,1913,1915,1917,1919],{"class":1135,"line":1907},14,[1133,1909,1910],{"class":1157},"  user",[1133,1912,1161],{"class":1147},[1133,1914,1164],{"class":1147},[1133,1916,1586],{"class":1167},[1133,1918,1171],{"class":1147},[1133,1920,1174],{"class":1147},[1133,1922,1924,1927,1929,1931,1933,1935],{"class":1135,"line":1923},15,[1133,1925,1926],{"class":1157},"  secretMode",[1133,1928,1161],{"class":1147},[1133,1930,1164],{"class":1147},[1133,1932,980],{"class":1167},[1133,1934,1171],{"class":1147},[1133,1936,1174],{"class":1147},[1133,1938,1940,1943,1945,1947],{"class":1135,"line":1939},16,[1133,1941,1942],{"class":1157},"  secret",[1133,1944,1161],{"class":1147},[1133,1946,1611],{"class":1143},[1133,1948,1174],{"class":1147},[1133,1950,1952,1954,1956,1958,1960,1962],{"class":1135,"line":1951},17,[1133,1953,1618],{"class":1157},[1133,1955,1161],{"class":1147},[1133,1957,1164],{"class":1147},[1133,1959,1625],{"class":1167},[1133,1961,1171],{"class":1147},[1133,1963,1174],{"class":1147},[1133,1965,1967,1970,1972,1976],{"class":1135,"line":1966},18,[1133,1968,1969],{"class":1157},"  validateSecret",[1133,1971,1161],{"class":1147},[1133,1973,1975],{"class":1974},"sfNiH"," true",[1133,1977,1174],{"class":1147},[1133,1979,1981,1983],{"class":1135,"line":1980},19,[1133,1982,1432],{"class":1147},[1133,1984,1435],{"class":1143},[1133,1986,1988],{"class":1135,"line":1987},20,[1133,1989,1371],{"emptyLinePlaceholder":1370},[1133,1991,1993,1995,1998,2000,2002,2005,2007,2010,2012,2014,2017,2019,2022],{"class":1135,"line":1992},21,[1133,1994,1140],{"class":1139},[1133,1996,1997],{"class":1143}," vault ",[1133,1999,1148],{"class":1147},[1133,2001,1562],{"class":1345},[1133,2003,2004],{"class":1143}," db",[1133,2006,1017],{"class":1147},[1133,2008,2009],{"class":1376},"openVault",[1133,2011,1380],{"class":1143},[1133,2013,1171],{"class":1147},[1133,2015,2016],{"class":1167},"acme",[1133,2018,1171],{"class":1147},[1133,2020,2021],{"class":1143},")   ",[1133,2023,2024],{"class":1441},"\u002F\u002F the keyring and its echo block are written here\n",[990,2026,2028],{"id":2027},"verify","Verify",[941,2030,2031],{},"Two checks, both worth running once against your own enrollment screen.",[941,2033,2034],{},[944,2035,2036],{},"The vault reveals exactly what you enrolled:",[1105,2038,2040],{"className":1127,"code":2039,"language":1129,"meta":1113,"style":1113},"import { beginEchoUnlock } from '@noy-db\u002Fhub'\n\nconst ceremony = await beginEchoUnlock(store, 'acme', { userId: 'vicio', prompt: parts.prompt })\nconsole.log(ceremony.reveal === parts.echo)   \u002F\u002F → true\nconsole.log(ceremony.maskHint)                \u002F\u002F → 'first-letters'\n\nconst unlocked = await ceremony.complete({ key: parts.key })\n",[959,2041,2042,2061,2065,2121,2152,2170,2174],{"__ignoreMap":1113},[1133,2043,2044,2046,2048,2051,2053,2055,2057,2059],{"class":1135,"line":1136},[1133,2045,1346],{"class":1345},[1133,2047,1349],{"class":1147},[1133,2049,2050],{"class":1143}," beginEchoUnlock",[1133,2052,1355],{"class":1147},[1133,2054,1358],{"class":1345},[1133,2056,1164],{"class":1147},[1133,2058,961],{"class":1167},[1133,2060,1365],{"class":1147},[1133,2062,2063],{"class":1135,"line":1154},[1133,2064,1371],{"emptyLinePlaceholder":1370},[1133,2066,2067,2069,2072,2074,2076,2078,2081,2083,2085,2087,2089,2091,2093,2096,2098,2100,2102,2104,2106,2108,2110,2112,2114,2117,2119],{"class":1135,"line":1177},[1133,2068,1140],{"class":1139},[1133,2070,2071],{"class":1143}," ceremony ",[1133,2073,1148],{"class":1147},[1133,2075,1562],{"class":1345},[1133,2077,2050],{"class":1376},[1133,2079,2080],{"class":1143},"(store",[1133,2082,1472],{"class":1147},[1133,2084,1164],{"class":1147},[1133,2086,2016],{"class":1167},[1133,2088,1171],{"class":1147},[1133,2090,1472],{"class":1147},[1133,2092,1349],{"class":1147},[1133,2094,2095],{"class":1157}," userId",[1133,2097,1161],{"class":1147},[1133,2099,1164],{"class":1147},[1133,2101,1586],{"class":1167},[1133,2103,1171],{"class":1147},[1133,2105,1472],{"class":1147},[1133,2107,1460],{"class":1157},[1133,2109,1161],{"class":1147},[1133,2111,1611],{"class":1143},[1133,2113,1017],{"class":1147},[1133,2115,2116],{"class":1143},"prompt ",[1133,2118,1432],{"class":1147},[1133,2120,1435],{"class":1143},[1133,2122,2123,2126,2128,2131,2134,2136,2139,2142,2144,2146,2149],{"class":1135,"line":1195},[1133,2124,2125],{"class":1143},"console",[1133,2127,1017],{"class":1147},[1133,2129,2130],{"class":1376},"log",[1133,2132,2133],{"class":1143},"(ceremony",[1133,2135,1017],{"class":1147},[1133,2137,2138],{"class":1143},"reveal ",[1133,2140,2141],{"class":1147},"===",[1133,2143,1611],{"class":1143},[1133,2145,1017],{"class":1147},[1133,2147,2148],{"class":1143},"echo)   ",[1133,2150,2151],{"class":1441},"\u002F\u002F → true\n",[1133,2153,2154,2156,2158,2160,2162,2164,2167],{"class":1135,"line":1213},[1133,2155,2125],{"class":1143},[1133,2157,1017],{"class":1147},[1133,2159,2130],{"class":1376},[1133,2161,2133],{"class":1143},[1133,2163,1017],{"class":1147},[1133,2165,2166],{"class":1143},"maskHint)                ",[1133,2168,2169],{"class":1441},"\u002F\u002F → 'first-letters'\n",[1133,2171,2172],{"class":1135,"line":1414},[1133,2173,1371],{"emptyLinePlaceholder":1370},[1133,2175,2176,2178,2181,2183,2185,2188,2190,2193,2195,2197,2199,2201,2203,2205,2208,2210],{"class":1135,"line":1429},[1133,2177,1140],{"class":1139},[1133,2179,2180],{"class":1143}," unlocked ",[1133,2182,1148],{"class":1147},[1133,2184,1562],{"class":1345},[1133,2186,2187],{"class":1143}," ceremony",[1133,2189,1017],{"class":1147},[1133,2191,2192],{"class":1376},"complete",[1133,2194,1380],{"class":1143},[1133,2196,1457],{"class":1147},[1133,2198,1489],{"class":1157},[1133,2200,1161],{"class":1147},[1133,2202,1611],{"class":1143},[1133,2204,1017],{"class":1147},[1133,2206,2207],{"class":1143},"key ",[1133,2209,1432],{"class":1147},[1133,2211,1435],{"class":1143},[941,2213,2214,2217],{},[944,2215,2216],{},"No joined string opens it"," — the property the whole design rests on:",[1105,2219,2221],{"className":1127,"code":2220,"language":1129,"meta":1113,"style":1113},"import { EchoCeremonyRequiredError } from '@noy-db\u002Fhub'\n\nconst joined = `${parts.prompt}#${parts.echo}#${parts.key}`\nconst wrong = await createNoydb({ store, user: 'vicio', secret: joined })\n\ntry {\n  await wrong.openVault('acme')\n} catch (err) {\n  console.log(err instanceof EchoCeremonyRequiredError)   \u002F\u002F → true\n}\n",[959,2222,2223,2242,2246,2294,2338,2342,2349,2371,2383,2407],{"__ignoreMap":1113},[1133,2224,2225,2227,2229,2232,2234,2236,2238,2240],{"class":1135,"line":1136},[1133,2226,1346],{"class":1345},[1133,2228,1349],{"class":1147},[1133,2230,2231],{"class":1143}," EchoCeremonyRequiredError",[1133,2233,1355],{"class":1147},[1133,2235,1358],{"class":1345},[1133,2237,1164],{"class":1147},[1133,2239,961],{"class":1167},[1133,2241,1365],{"class":1147},[1133,2243,2244],{"class":1135,"line":1154},[1133,2245,1371],{"emptyLinePlaceholder":1370},[1133,2247,2248,2250,2253,2255,2258,2261,2263,2265,2267,2270,2273,2275,2277,2279,2281,2283,2285,2287,2289,2291],{"class":1135,"line":1177},[1133,2249,1140],{"class":1139},[1133,2251,2252],{"class":1143}," joined ",[1133,2254,1148],{"class":1147},[1133,2256,2257],{"class":1147}," `${",[1133,2259,2260],{"class":1143},"parts",[1133,2262,1017],{"class":1147},[1133,2264,976],{"class":1143},[1133,2266,1432],{"class":1147},[1133,2268,2269],{"class":1167},"#",[1133,2271,2272],{"class":1147},"${",[1133,2274,2260],{"class":1143},[1133,2276,1017],{"class":1147},[1133,2278,980],{"class":1143},[1133,2280,1432],{"class":1147},[1133,2282,2269],{"class":1167},[1133,2284,2272],{"class":1147},[1133,2286,2260],{"class":1143},[1133,2288,1017],{"class":1147},[1133,2290,984],{"class":1143},[1133,2292,2293],{"class":1147},"}`\n",[1133,2295,2296,2298,2301,2303,2305,2307,2309,2311,2314,2316,2318,2320,2322,2324,2326,2328,2330,2332,2334,2336],{"class":1135,"line":1195},[1133,2297,1140],{"class":1139},[1133,2299,2300],{"class":1143}," wrong ",[1133,2302,1148],{"class":1147},[1133,2304,1562],{"class":1345},[1133,2306,1565],{"class":1376},[1133,2308,1380],{"class":1143},[1133,2310,1457],{"class":1147},[1133,2312,2313],{"class":1143}," store",[1133,2315,1472],{"class":1147},[1133,2317,1579],{"class":1157},[1133,2319,1161],{"class":1147},[1133,2321,1164],{"class":1147},[1133,2323,1586],{"class":1167},[1133,2325,1171],{"class":1147},[1133,2327,1472],{"class":1147},[1133,2329,1606],{"class":1157},[1133,2331,1161],{"class":1147},[1133,2333,2252],{"class":1143},[1133,2335,1432],{"class":1147},[1133,2337,1435],{"class":1143},[1133,2339,2340],{"class":1135,"line":1213},[1133,2341,1371],{"emptyLinePlaceholder":1370},[1133,2343,2344,2347],{"class":1135,"line":1414},[1133,2345,2346],{"class":1345},"try",[1133,2348,1151],{"class":1147},[1133,2350,2351,2354,2357,2359,2361,2363,2365,2367,2369],{"class":1135,"line":1429},[1133,2352,2353],{"class":1345},"  await",[1133,2355,2356],{"class":1143}," wrong",[1133,2358,1017],{"class":1147},[1133,2360,2009],{"class":1376},[1133,2362,1380],{"class":1157},[1133,2364,1171],{"class":1147},[1133,2366,2016],{"class":1167},[1133,2368,1171],{"class":1147},[1133,2370,1435],{"class":1157},[1133,2372,2373,2375,2378,2381],{"class":1135,"line":1438},[1133,2374,1432],{"class":1147},[1133,2376,2377],{"class":1345}," catch",[1133,2379,2380],{"class":1143}," (err) ",[1133,2382,1383],{"class":1147},[1133,2384,2385,2388,2390,2392,2394,2397,2400,2403,2405],{"class":1135,"line":1445},[1133,2386,2387],{"class":1143},"  console",[1133,2389,1017],{"class":1147},[1133,2391,2130],{"class":1376},[1133,2393,1380],{"class":1157},[1133,2395,2396],{"class":1143},"err",[1133,2398,2399],{"class":1147}," instanceof",[1133,2401,2231],{"class":2402},"sBMFI",[1133,2404,2021],{"class":1157},[1133,2406,2151],{"class":1441},[1133,2408,2409],{"class":1135,"line":1450},[1133,2410,1216],{"class":1147},[941,2412,2413],{},"Any separator behaves the same way, because no single string is equivalent to the three-part derivation. If your unlock screen has a field that would accept that string, it is a phishing flow you shipped yourself — remove it.",[990,2415,2417],{"id":2416},"see-also","See also",[995,2419,2420,2425,2430,2435],{},[998,2421,2422,2424],{},[949,2423,844],{"href":951}," — the full echo API: reveal policies, the ceremony, rotation and migration, pod recipients, errors.",[998,2426,2427,2429],{},[949,2428,463],{"href":1295}," — attacker grading, and what echo mode does not hide.",[998,2431,2432,2434],{},[949,2433,589],{"href":590}," — how tier 1 composes with passkeys, session policy, and recovery codes.",[998,2436,2437,2441],{},[949,2438,2439],{"href":330},[959,2440,1735],{}," — lockout and duress handling around the unlock ceremony.",[2443,2444,2445],"style",{},"html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}",{"title":1113,"searchDepth":1177,"depth":1177,"links":2447},[2448,2449,2450,2451,2452,2453,2454,2455,2456,2457,2458],{"id":992,"depth":1154,"text":993},{"id":1032,"depth":1154,"text":1033},{"id":1095,"depth":1154,"text":1096},{"id":1230,"depth":1154,"text":1231},{"id":1274,"depth":1154,"text":1275},{"id":1306,"depth":1154,"text":1307},{"id":1534,"depth":1154,"text":1535},{"id":1699,"depth":1154,"text":1700},{"id":1739,"depth":1154,"text":1740},{"id":2027,"depth":1154,"text":2028},{"id":2416,"depth":1154,"text":2417},null,"How to choose the three parts of an echo secret — one memorable sentence, an echo no acquaintance could guess, and the warning users must be taught.","md",{},{"title":539,"description":2460},"0.6.0","stable","important","eUnxA46ALL9sIEaisTPfZCU_Whp5JUlFktikgP_qve4",1791896575791]