[{"data":1,"prerenderedAt":2360},["ShallowReactive",2],{"navigation":3,"\u002Frecipes\u002Funlock-ceremonies":927},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":589,"access":12,"apiToc":929,"body":930,"category":2352,"description":2353,"extension":2354,"meta":2355,"navigation":2352,"nest":2352,"path":590,"seo":2356,"sinceVersion":2352,"status":2357,"stem":591,"subtitle":2352,"tier":2358,"tocExternal":2352,"__hash__":2359},"docs\u002Frecipes\u002Funlock-ceremonies.md",false,{"type":931,"value":932,"toc":2341},"minimark",[933,937,965,973,986,991,1043,1047,1050,1243,1247,1261,1419,1426,1430,1450,1611,1618,1622,1636,1973,1985,1989,1996,2214,2218,2227,2284,2288,2309,2313,2337],[934,935,589],"h1",{"id":936},"unlock-ceremonies",[938,939,940],"blockquote",{},[941,942,943,947,948,951,952,956,957,960,961,964],"p",{},[944,945,946],"strong",{},"Audience:"," an app developer designing how users open the vault — day zero, every day after, and the day everything is lost.\n",[944,949,950],{},"Bundle:"," core + ",[953,954,955],"code",{},"@noy-db\u002Fon-webauthn"," (passkeys) + ",[953,958,959],{},"@noy-db\u002Fon-recovery"," (printed codes) + ",[953,962,963],{},"withSession()"," (re-auth policy).",[941,966,967,968,972],{},"Unlocking is a ",[969,970,971],"em",{},"ceremony",", not a config option: something the user does, in an order you design. This recipe walks the complete lifecycle — the secret as root of trust, a passkey so nothing is typed day-to-day, a session policy that refuses sensitive operations until fresh proof-of-presence, and recovery codes for the day the passkey and secret are both gone. Methods stack: one vault, several ways in.",[941,974,975,976,985],{},"Verified by: ",[977,978,982],"a",{"href":979,"rel":980},"https:\u002F\u002Fgithub.com\u002Fnoy-db\u002Fdocs\u002Fblob\u002Fmain\u002Fshowcases\u002Fsrc\u002Frecipe-unlock-ceremonies.recipe.test.ts",[981],"nofollow",[953,983,984],{},"showcases\u002Fsrc\u002Frecipe-unlock-ceremonies.recipe.test.ts"," — the code below is the same code that runs there (with a synthetic PRF authenticator standing in for Touch ID; the calls are identical against real hardware).",[987,988,990],"h2",{"id":989},"prerequisites","Prerequisites",[992,993,994,1004,1016,1037],"ul",{},[995,996,997,1000,1001],"li",{},[944,998,999],{},"Packages:"," ",[953,1002,1003],{},"pnpm add @noy-db\u002Fhub @noy-db\u002Fon-webauthn @noy-db\u002Fon-recovery",[995,1005,1006,1011,1012,1015],{},[944,1007,1008],{},[953,1009,1010],{},"sessionStrategy: withSession()"," for the policy step — the enforcer ships in ",[953,1013,1014],{},"@noy-db\u002Fhub\u002Fsession",".",[995,1017,1018,1021,1022,1025,1026,1029,1030,1036],{},[944,1019,1020],{},"A browser with WebAuthn"," for passkeys (",[953,1023,1024],{},"navigator.credentials"," + the PRF extension — every UI runs ",[953,1027,1028],{},"isWebAuthnAvailable()"," as the pre-flight). Node-side unlock uses the ",[977,1031,1032,1035],{"href":115},[953,1033,1034],{},"at-*"," family"," instead.",[995,1038,1039,1042],{},[944,1040,1041],{},"Somewhere to persist the enrollment record"," — it is opaque ciphertext, so any store or plain file works.",[987,1044,1046],{"id":1045},"day-zero-the-secret-creates-the-vault","Day zero — the secret creates the vault",[941,1048,1049],{},"The secret is the root of trust: it derives the key that wraps everything else.",[1051,1052,1057],"pre",{"className":1053,"code":1054,"language":1055,"meta":1056,"style":1056},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb } from '@noy-db\u002Fhub'\nimport { toBrowserIdb } from '@noy-db\u002Fto-browser-idb'\n\nconst db = await createNoydb({\n  store: toBrowserIdb(),\n  user: 'alice',\n  secret: 'correct horse battery staple', \u002F\u002F 4+ diceware words or 12+ chars\n})\nconst vault = await db.openVault('acme')\n","ts","",[953,1058,1059,1092,1113,1120,1145,1163,1181,1203,1212],{"__ignoreMap":1056},[1060,1061,1064,1068,1072,1076,1079,1082,1085,1089],"span",{"class":1062,"line":1063},"line",1,[1060,1065,1067],{"class":1066},"s7zQu","import",[1060,1069,1071],{"class":1070},"sMK4o"," {",[1060,1073,1075],{"class":1074},"sTEyZ"," createNoydb",[1060,1077,1078],{"class":1070}," }",[1060,1080,1081],{"class":1066}," from",[1060,1083,1084],{"class":1070}," '",[1060,1086,1088],{"class":1087},"sfazB","@noy-db\u002Fhub",[1060,1090,1091],{"class":1070},"'\n",[1060,1093,1095,1097,1099,1102,1104,1106,1108,1111],{"class":1062,"line":1094},2,[1060,1096,1067],{"class":1066},[1060,1098,1071],{"class":1070},[1060,1100,1101],{"class":1074}," toBrowserIdb",[1060,1103,1078],{"class":1070},[1060,1105,1081],{"class":1066},[1060,1107,1084],{"class":1070},[1060,1109,1110],{"class":1087},"@noy-db\u002Fto-browser-idb",[1060,1112,1091],{"class":1070},[1060,1114,1116],{"class":1062,"line":1115},3,[1060,1117,1119],{"emptyLinePlaceholder":1118},true,"\n",[1060,1121,1123,1127,1130,1133,1136,1139,1142],{"class":1062,"line":1122},4,[1060,1124,1126],{"class":1125},"spNyl","const",[1060,1128,1129],{"class":1074}," db ",[1060,1131,1132],{"class":1070},"=",[1060,1134,1135],{"class":1066}," await",[1060,1137,1075],{"class":1138},"s2Zo4",[1060,1140,1141],{"class":1074},"(",[1060,1143,1144],{"class":1070},"{\n",[1060,1146,1148,1152,1155,1157,1160],{"class":1062,"line":1147},5,[1060,1149,1151],{"class":1150},"swJcz","  store",[1060,1153,1154],{"class":1070},":",[1060,1156,1101],{"class":1138},[1060,1158,1159],{"class":1074},"()",[1060,1161,1162],{"class":1070},",\n",[1060,1164,1166,1169,1171,1173,1176,1179],{"class":1062,"line":1165},6,[1060,1167,1168],{"class":1150},"  user",[1060,1170,1154],{"class":1070},[1060,1172,1084],{"class":1070},[1060,1174,1175],{"class":1087},"alice",[1060,1177,1178],{"class":1070},"'",[1060,1180,1162],{"class":1070},[1060,1182,1184,1187,1189,1191,1194,1196,1199],{"class":1062,"line":1183},7,[1060,1185,1186],{"class":1150},"  secret",[1060,1188,1154],{"class":1070},[1060,1190,1084],{"class":1070},[1060,1192,1193],{"class":1087},"correct horse battery staple",[1060,1195,1178],{"class":1070},[1060,1197,1198],{"class":1070},",",[1060,1200,1202],{"class":1201},"sHwdD"," \u002F\u002F 4+ diceware words or 12+ chars\n",[1060,1204,1206,1209],{"class":1062,"line":1205},8,[1060,1207,1208],{"class":1070},"}",[1060,1210,1211],{"class":1074},")\n",[1060,1213,1215,1217,1220,1222,1224,1227,1229,1232,1234,1236,1239,1241],{"class":1062,"line":1214},9,[1060,1216,1126],{"class":1125},[1060,1218,1219],{"class":1074}," vault ",[1060,1221,1132],{"class":1070},[1060,1223,1135],{"class":1066},[1060,1225,1226],{"class":1074}," db",[1060,1228,1015],{"class":1070},[1060,1230,1231],{"class":1138},"openVault",[1060,1233,1141],{"class":1074},[1060,1235,1178],{"class":1070},[1060,1237,1238],{"class":1087},"acme",[1060,1240,1178],{"class":1070},[1060,1242,1211],{"class":1074},[987,1244,1246],{"id":1245},"enroll-a-passkey","Enroll a passkey",[941,1248,1249,1252,1253,1256,1257,1260],{},[953,1250,1251],{},"enrollWebAuthn"," calls ",[953,1254,1255],{},"navigator.credentials.create",", derives a wrapping key from the authenticator's PRF output, and returns an ",[944,1258,1259],{},"enrollment record"," — the keyring wrapped under a key that never left the hardware:",[1051,1262,1264],{"className":1053,"code":1263,"language":1055,"meta":1056,"style":1056},"import { enrollWebAuthn, isWebAuthnAvailable } from '@noy-db\u002Fon-webauthn'\n\nif (isWebAuthnAvailable()) {\n  const keyring = await db.team.getKeyring('acme')\n  const enrollment = await enrollWebAuthn(keyring, 'acme')\n  \u002F\u002F persist it anywhere — it is opaque ciphertext:\n  localStorage.setItem('acme-passkey', JSON.stringify(enrollment))\n}\n",[953,1265,1266,1290,1294,1310,1344,1372,1377,1414],{"__ignoreMap":1056},[1060,1267,1268,1270,1272,1275,1277,1280,1282,1284,1286,1288],{"class":1062,"line":1063},[1060,1269,1067],{"class":1066},[1060,1271,1071],{"class":1070},[1060,1273,1274],{"class":1074}," enrollWebAuthn",[1060,1276,1198],{"class":1070},[1060,1278,1279],{"class":1074}," isWebAuthnAvailable",[1060,1281,1078],{"class":1070},[1060,1283,1081],{"class":1066},[1060,1285,1084],{"class":1070},[1060,1287,955],{"class":1087},[1060,1289,1091],{"class":1070},[1060,1291,1292],{"class":1062,"line":1094},[1060,1293,1119],{"emptyLinePlaceholder":1118},[1060,1295,1296,1299,1302,1305,1308],{"class":1062,"line":1115},[1060,1297,1298],{"class":1066},"if",[1060,1300,1301],{"class":1074}," (",[1060,1303,1304],{"class":1138},"isWebAuthnAvailable",[1060,1306,1307],{"class":1074},"()) ",[1060,1309,1144],{"class":1070},[1060,1311,1312,1315,1318,1321,1323,1325,1327,1329,1331,1334,1336,1338,1340,1342],{"class":1062,"line":1122},[1060,1313,1314],{"class":1125},"  const",[1060,1316,1317],{"class":1074}," keyring",[1060,1319,1320],{"class":1070}," =",[1060,1322,1135],{"class":1066},[1060,1324,1226],{"class":1074},[1060,1326,1015],{"class":1070},[1060,1328,868],{"class":1074},[1060,1330,1015],{"class":1070},[1060,1332,1333],{"class":1138},"getKeyring",[1060,1335,1141],{"class":1150},[1060,1337,1178],{"class":1070},[1060,1339,1238],{"class":1087},[1060,1341,1178],{"class":1070},[1060,1343,1211],{"class":1150},[1060,1345,1346,1348,1351,1353,1355,1357,1359,1362,1364,1366,1368,1370],{"class":1062,"line":1147},[1060,1347,1314],{"class":1125},[1060,1349,1350],{"class":1074}," enrollment",[1060,1352,1320],{"class":1070},[1060,1354,1135],{"class":1066},[1060,1356,1274],{"class":1138},[1060,1358,1141],{"class":1150},[1060,1360,1361],{"class":1074},"keyring",[1060,1363,1198],{"class":1070},[1060,1365,1084],{"class":1070},[1060,1367,1238],{"class":1087},[1060,1369,1178],{"class":1070},[1060,1371,1211],{"class":1150},[1060,1373,1374],{"class":1062,"line":1165},[1060,1375,1376],{"class":1201},"  \u002F\u002F persist it anywhere — it is opaque ciphertext:\n",[1060,1378,1379,1382,1384,1387,1389,1391,1394,1396,1398,1401,1403,1406,1408,1411],{"class":1062,"line":1183},[1060,1380,1381],{"class":1074},"  localStorage",[1060,1383,1015],{"class":1070},[1060,1385,1386],{"class":1138},"setItem",[1060,1388,1141],{"class":1150},[1060,1390,1178],{"class":1070},[1060,1392,1393],{"class":1087},"acme-passkey",[1060,1395,1178],{"class":1070},[1060,1397,1198],{"class":1070},[1060,1399,1400],{"class":1074}," JSON",[1060,1402,1015],{"class":1070},[1060,1404,1405],{"class":1138},"stringify",[1060,1407,1141],{"class":1150},[1060,1409,1410],{"class":1074},"enrollment",[1060,1412,1413],{"class":1150},"))\n",[1060,1415,1416],{"class":1062,"line":1205},[1060,1417,1418],{"class":1070},"}\n",[941,1420,1421,1422,1425],{},"The secret still works — enrollment ",[969,1423,1424],{},"adds"," a way in, it never replaces one.",[987,1427,1429],{"id":1428},"every-day-after-unlock-with-a-touch","Every day after — unlock with a touch",[941,1431,1432,1252,1435,1438,1439,1442,1443,1445,1446,1449],{},[953,1433,1434],{},"unlockWebAuthn",[953,1436,1437],{},"navigator.credentials.get",", reproduces the wrapping key from the same authenticator, and hands back the full keyring. Feed it to ",[953,1440,1441],{},"createNoydb"," through the ",[953,1444,1333],{}," callback — the cold-start contract every ",[953,1447,1448],{},"on-*"," method satisfies:",[1051,1451,1453],{"className":1053,"code":1452,"language":1055,"meta":1056,"style":1056},"import { unlockWebAuthn } from '@noy-db\u002Fon-webauthn'\n\nconst enrollment = JSON.parse(localStorage.getItem('acme-passkey')!)\nconst unlocked = await unlockWebAuthn(enrollment) \u002F\u002F ← the touch\n\nconst db = await createNoydb({\n  store: toBrowserIdb(),\n  user: 'alice',\n  getKeyring: async () => unlocked,\n})\n",[953,1454,1455,1474,1478,1518,1537,1541,1557,1569,1583,1604],{"__ignoreMap":1056},[1060,1456,1457,1459,1461,1464,1466,1468,1470,1472],{"class":1062,"line":1063},[1060,1458,1067],{"class":1066},[1060,1460,1071],{"class":1070},[1060,1462,1463],{"class":1074}," unlockWebAuthn",[1060,1465,1078],{"class":1070},[1060,1467,1081],{"class":1066},[1060,1469,1084],{"class":1070},[1060,1471,955],{"class":1087},[1060,1473,1091],{"class":1070},[1060,1475,1476],{"class":1062,"line":1094},[1060,1477,1119],{"emptyLinePlaceholder":1118},[1060,1479,1480,1482,1485,1487,1489,1491,1494,1497,1499,1502,1504,1506,1508,1510,1513,1516],{"class":1062,"line":1115},[1060,1481,1126],{"class":1125},[1060,1483,1484],{"class":1074}," enrollment ",[1060,1486,1132],{"class":1070},[1060,1488,1400],{"class":1074},[1060,1490,1015],{"class":1070},[1060,1492,1493],{"class":1138},"parse",[1060,1495,1496],{"class":1074},"(localStorage",[1060,1498,1015],{"class":1070},[1060,1500,1501],{"class":1138},"getItem",[1060,1503,1141],{"class":1074},[1060,1505,1178],{"class":1070},[1060,1507,1393],{"class":1087},[1060,1509,1178],{"class":1070},[1060,1511,1512],{"class":1074},")",[1060,1514,1515],{"class":1070},"!",[1060,1517,1211],{"class":1074},[1060,1519,1520,1522,1525,1527,1529,1531,1534],{"class":1062,"line":1122},[1060,1521,1126],{"class":1125},[1060,1523,1524],{"class":1074}," unlocked ",[1060,1526,1132],{"class":1070},[1060,1528,1135],{"class":1066},[1060,1530,1463],{"class":1138},[1060,1532,1533],{"class":1074},"(enrollment) ",[1060,1535,1536],{"class":1201},"\u002F\u002F ← the touch\n",[1060,1538,1539],{"class":1062,"line":1147},[1060,1540,1119],{"emptyLinePlaceholder":1118},[1060,1542,1543,1545,1547,1549,1551,1553,1555],{"class":1062,"line":1165},[1060,1544,1126],{"class":1125},[1060,1546,1129],{"class":1074},[1060,1548,1132],{"class":1070},[1060,1550,1135],{"class":1066},[1060,1552,1075],{"class":1138},[1060,1554,1141],{"class":1074},[1060,1556,1144],{"class":1070},[1060,1558,1559,1561,1563,1565,1567],{"class":1062,"line":1183},[1060,1560,1151],{"class":1150},[1060,1562,1154],{"class":1070},[1060,1564,1101],{"class":1138},[1060,1566,1159],{"class":1074},[1060,1568,1162],{"class":1070},[1060,1570,1571,1573,1575,1577,1579,1581],{"class":1062,"line":1205},[1060,1572,1168],{"class":1150},[1060,1574,1154],{"class":1070},[1060,1576,1084],{"class":1070},[1060,1578,1175],{"class":1087},[1060,1580,1178],{"class":1070},[1060,1582,1162],{"class":1070},[1060,1584,1585,1588,1590,1593,1596,1599,1602],{"class":1062,"line":1214},[1060,1586,1587],{"class":1138},"  getKeyring",[1060,1589,1154],{"class":1070},[1060,1591,1592],{"class":1125}," async",[1060,1594,1595],{"class":1070}," ()",[1060,1597,1598],{"class":1125}," =>",[1060,1600,1601],{"class":1074}," unlocked",[1060,1603,1162],{"class":1070},[1060,1605,1607,1609],{"class":1062,"line":1606},10,[1060,1608,1208],{"class":1070},[1060,1610,1211],{"class":1074},[941,1612,1613,1614,1617],{},"No secret in the page, nothing to keylog — the property the ",[977,1615,1616],{"href":464},"threat model"," leans on.",[987,1619,1621],{"id":1620},"gate-sensitive-operations-session-policy","Gate sensitive operations — session policy",[941,1623,1624,1625,1628,1629,1632,1633,1635],{},"The session layer is a ",[969,1626,1627],{},"policy oracle",": it refuses operations you listed, and ",[944,1630,1631],{},"your app supplies the re-auth act"," — a fresh ",[953,1634,1448],{}," verification — before proceeding:",[1051,1637,1639],{"className":1053,"code":1638,"language":1055,"meta":1056,"style":1056},"import { createSession, createEnforcer } from '@noy-db\u002Fhub\u002Fsession'\nimport { SessionPolicyError } from '@noy-db\u002Fhub'\n\nconst { token, sessionId } = await createSession(keyring, 'acme', { ttlMs: 15 * 60_000 })\n\nconst enforcer = createEnforcer({\n  policy: { idleTimeoutMs: 15 * 60_000, requireReAuthFor: ['grant'] },\n  sessionId,\n  onRevoke: (reason) => showLockScreen(reason), \u002F\u002F 'idle' | 'absolute' | 'background'\n})\n\nenforcer.touch() \u002F\u002F top of every operation the idle timer should track\n\ntry {\n  enforcer.checkOperation('grant')\n} catch (e) {\n  if (e instanceof SessionPolicyError) {\n    await unlockWebAuthn(enrollment) \u002F\u002F fresh proof-of-presence\n    \u002F\u002F …now perform the grant\n  }\n}\n",[953,1640,1641,1665,1684,1688,1744,1748,1763,1806,1813,1841,1847,1852,1869,1874,1883,1904,1917,1939,1956,1962,1968],{"__ignoreMap":1056},[1060,1642,1643,1645,1647,1650,1652,1655,1657,1659,1661,1663],{"class":1062,"line":1063},[1060,1644,1067],{"class":1066},[1060,1646,1071],{"class":1070},[1060,1648,1649],{"class":1074}," createSession",[1060,1651,1198],{"class":1070},[1060,1653,1654],{"class":1074}," createEnforcer",[1060,1656,1078],{"class":1070},[1060,1658,1081],{"class":1066},[1060,1660,1084],{"class":1070},[1060,1662,1014],{"class":1087},[1060,1664,1091],{"class":1070},[1060,1666,1667,1669,1671,1674,1676,1678,1680,1682],{"class":1062,"line":1094},[1060,1668,1067],{"class":1066},[1060,1670,1071],{"class":1070},[1060,1672,1673],{"class":1074}," SessionPolicyError",[1060,1675,1078],{"class":1070},[1060,1677,1081],{"class":1066},[1060,1679,1084],{"class":1070},[1060,1681,1088],{"class":1087},[1060,1683,1091],{"class":1070},[1060,1685,1686],{"class":1062,"line":1115},[1060,1687,1119],{"emptyLinePlaceholder":1118},[1060,1689,1690,1692,1694,1697,1699,1702,1704,1706,1708,1710,1713,1715,1717,1719,1721,1723,1725,1728,1730,1734,1737,1740,1742],{"class":1062,"line":1122},[1060,1691,1126],{"class":1125},[1060,1693,1071],{"class":1070},[1060,1695,1696],{"class":1074}," token",[1060,1698,1198],{"class":1070},[1060,1700,1701],{"class":1074}," sessionId ",[1060,1703,1208],{"class":1070},[1060,1705,1320],{"class":1070},[1060,1707,1135],{"class":1066},[1060,1709,1649],{"class":1138},[1060,1711,1712],{"class":1074},"(keyring",[1060,1714,1198],{"class":1070},[1060,1716,1084],{"class":1070},[1060,1718,1238],{"class":1087},[1060,1720,1178],{"class":1070},[1060,1722,1198],{"class":1070},[1060,1724,1071],{"class":1070},[1060,1726,1727],{"class":1150}," ttlMs",[1060,1729,1154],{"class":1070},[1060,1731,1733],{"class":1732},"sbssI"," 15",[1060,1735,1736],{"class":1070}," *",[1060,1738,1739],{"class":1732}," 60_000",[1060,1741,1078],{"class":1070},[1060,1743,1211],{"class":1074},[1060,1745,1746],{"class":1062,"line":1147},[1060,1747,1119],{"emptyLinePlaceholder":1118},[1060,1749,1750,1752,1755,1757,1759,1761],{"class":1062,"line":1165},[1060,1751,1126],{"class":1125},[1060,1753,1754],{"class":1074}," enforcer ",[1060,1756,1132],{"class":1070},[1060,1758,1654],{"class":1138},[1060,1760,1141],{"class":1074},[1060,1762,1144],{"class":1070},[1060,1764,1765,1768,1770,1772,1775,1777,1779,1781,1783,1785,1788,1790,1793,1795,1798,1800,1803],{"class":1062,"line":1183},[1060,1766,1767],{"class":1150},"  policy",[1060,1769,1154],{"class":1070},[1060,1771,1071],{"class":1070},[1060,1773,1774],{"class":1150}," idleTimeoutMs",[1060,1776,1154],{"class":1070},[1060,1778,1733],{"class":1732},[1060,1780,1736],{"class":1070},[1060,1782,1739],{"class":1732},[1060,1784,1198],{"class":1070},[1060,1786,1787],{"class":1150}," requireReAuthFor",[1060,1789,1154],{"class":1070},[1060,1791,1792],{"class":1074}," [",[1060,1794,1178],{"class":1070},[1060,1796,1797],{"class":1087},"grant",[1060,1799,1178],{"class":1070},[1060,1801,1802],{"class":1074},"] ",[1060,1804,1805],{"class":1070},"},\n",[1060,1807,1808,1811],{"class":1062,"line":1205},[1060,1809,1810],{"class":1074},"  sessionId",[1060,1812,1162],{"class":1070},[1060,1814,1815,1818,1820,1822,1826,1828,1830,1833,1836,1838],{"class":1062,"line":1214},[1060,1816,1817],{"class":1138},"  onRevoke",[1060,1819,1154],{"class":1070},[1060,1821,1301],{"class":1070},[1060,1823,1825],{"class":1824},"sHdIc","reason",[1060,1827,1512],{"class":1070},[1060,1829,1598],{"class":1125},[1060,1831,1832],{"class":1138}," showLockScreen",[1060,1834,1835],{"class":1074},"(reason)",[1060,1837,1198],{"class":1070},[1060,1839,1840],{"class":1201}," \u002F\u002F 'idle' | 'absolute' | 'background'\n",[1060,1842,1843,1845],{"class":1062,"line":1606},[1060,1844,1208],{"class":1070},[1060,1846,1211],{"class":1074},[1060,1848,1850],{"class":1062,"line":1849},11,[1060,1851,1119],{"emptyLinePlaceholder":1118},[1060,1853,1855,1858,1860,1863,1866],{"class":1062,"line":1854},12,[1060,1856,1857],{"class":1074},"enforcer",[1060,1859,1015],{"class":1070},[1060,1861,1862],{"class":1138},"touch",[1060,1864,1865],{"class":1074},"() ",[1060,1867,1868],{"class":1201},"\u002F\u002F top of every operation the idle timer should track\n",[1060,1870,1872],{"class":1062,"line":1871},13,[1060,1873,1119],{"emptyLinePlaceholder":1118},[1060,1875,1877,1880],{"class":1062,"line":1876},14,[1060,1878,1879],{"class":1066},"try",[1060,1881,1882],{"class":1070}," {\n",[1060,1884,1886,1889,1891,1894,1896,1898,1900,1902],{"class":1062,"line":1885},15,[1060,1887,1888],{"class":1074},"  enforcer",[1060,1890,1015],{"class":1070},[1060,1892,1893],{"class":1138},"checkOperation",[1060,1895,1141],{"class":1150},[1060,1897,1178],{"class":1070},[1060,1899,1797],{"class":1087},[1060,1901,1178],{"class":1070},[1060,1903,1211],{"class":1150},[1060,1905,1907,1909,1912,1915],{"class":1062,"line":1906},16,[1060,1908,1208],{"class":1070},[1060,1910,1911],{"class":1066}," catch",[1060,1913,1914],{"class":1074}," (e) ",[1060,1916,1144],{"class":1070},[1060,1918,1920,1923,1925,1928,1931,1934,1937],{"class":1062,"line":1919},17,[1060,1921,1922],{"class":1066},"  if",[1060,1924,1301],{"class":1150},[1060,1926,1927],{"class":1074},"e",[1060,1929,1930],{"class":1070}," instanceof",[1060,1932,1673],{"class":1933},"sBMFI",[1060,1935,1936],{"class":1150},") ",[1060,1938,1144],{"class":1070},[1060,1940,1942,1945,1947,1949,1951,1953],{"class":1062,"line":1941},18,[1060,1943,1944],{"class":1066},"    await",[1060,1946,1463],{"class":1138},[1060,1948,1141],{"class":1150},[1060,1950,1410],{"class":1074},[1060,1952,1936],{"class":1150},[1060,1954,1955],{"class":1201},"\u002F\u002F fresh proof-of-presence\n",[1060,1957,1959],{"class":1062,"line":1958},19,[1060,1960,1961],{"class":1201},"    \u002F\u002F …now perform the grant\n",[1060,1963,1965],{"class":1062,"line":1964},20,[1060,1966,1967],{"class":1070},"  }\n",[1060,1969,1971],{"class":1062,"line":1970},21,[1060,1972,1418],{"class":1070},[941,1974,1975,1977,1978,1980,1981,1984],{},[953,1976,1010],{}," on ",[953,1979,1441],{}," enables the machinery; the ",[977,1982,1983],{"href":841},"session page"," covers liveness, revocation, and the full policy surface.",[987,1986,1988],{"id":1987},"the-escape-hatch-printed-recovery-codes","The escape hatch — printed recovery codes",[941,1990,1991,1992,1995],{},"For the day the passkey is lost ",[969,1993,1994],{},"and"," the secret is forgotten: a set of one-time codes, each independently able to unwrap the collection keys. Print them, put them in a drawer:",[1051,1997,1999],{"className":1053,"code":1998,"language":1055,"meta":1056,"style":1056},"import { generateRecoveryCodeSet, parseRecoveryCode } from '@noy-db\u002Fon-recovery'\nimport { unwrapDeksFromPaperEntry } from '@noy-db\u002Fhub'\n\nconst keyring = await db.team.getKeyring('acme')\nconst set = await generateRecoveryCodeSet({ deks: keyring.deks, count: 3 })\n\u002F\u002F set.codes → print these; set.entries → persist alongside the vault\n\n\u002F\u002F Years later, the user types one code from the sheet:\nconst parsed = parseRecoveryCode(typedCode)\nif (parsed.status === 'valid') {\n  const deks = await unwrapDeksFromPaperEntry(matchingEntry, parsed.code)\n  \u002F\u002F the recovered DEKs decrypt everything the originals encrypted\n}\n",[953,2000,2001,2025,2044,2048,2079,2123,2128,2132,2137,2151,2177,2205,2210],{"__ignoreMap":1056},[1060,2002,2003,2005,2007,2010,2012,2015,2017,2019,2021,2023],{"class":1062,"line":1063},[1060,2004,1067],{"class":1066},[1060,2006,1071],{"class":1070},[1060,2008,2009],{"class":1074}," generateRecoveryCodeSet",[1060,2011,1198],{"class":1070},[1060,2013,2014],{"class":1074}," parseRecoveryCode",[1060,2016,1078],{"class":1070},[1060,2018,1081],{"class":1066},[1060,2020,1084],{"class":1070},[1060,2022,959],{"class":1087},[1060,2024,1091],{"class":1070},[1060,2026,2027,2029,2031,2034,2036,2038,2040,2042],{"class":1062,"line":1094},[1060,2028,1067],{"class":1066},[1060,2030,1071],{"class":1070},[1060,2032,2033],{"class":1074}," unwrapDeksFromPaperEntry",[1060,2035,1078],{"class":1070},[1060,2037,1081],{"class":1066},[1060,2039,1084],{"class":1070},[1060,2041,1088],{"class":1087},[1060,2043,1091],{"class":1070},[1060,2045,2046],{"class":1062,"line":1115},[1060,2047,1119],{"emptyLinePlaceholder":1118},[1060,2049,2050,2052,2055,2057,2059,2061,2063,2065,2067,2069,2071,2073,2075,2077],{"class":1062,"line":1122},[1060,2051,1126],{"class":1125},[1060,2053,2054],{"class":1074}," keyring ",[1060,2056,1132],{"class":1070},[1060,2058,1135],{"class":1066},[1060,2060,1226],{"class":1074},[1060,2062,1015],{"class":1070},[1060,2064,868],{"class":1074},[1060,2066,1015],{"class":1070},[1060,2068,1333],{"class":1138},[1060,2070,1141],{"class":1074},[1060,2072,1178],{"class":1070},[1060,2074,1238],{"class":1087},[1060,2076,1178],{"class":1070},[1060,2078,1211],{"class":1074},[1060,2080,2081,2083,2086,2088,2090,2092,2094,2097,2100,2102,2104,2106,2109,2111,2114,2116,2119,2121],{"class":1062,"line":1147},[1060,2082,1126],{"class":1125},[1060,2084,2085],{"class":1074}," set ",[1060,2087,1132],{"class":1070},[1060,2089,1135],{"class":1066},[1060,2091,2009],{"class":1138},[1060,2093,1141],{"class":1074},[1060,2095,2096],{"class":1070},"{",[1060,2098,2099],{"class":1150}," deks",[1060,2101,1154],{"class":1070},[1060,2103,1317],{"class":1074},[1060,2105,1015],{"class":1070},[1060,2107,2108],{"class":1074},"deks",[1060,2110,1198],{"class":1070},[1060,2112,2113],{"class":1150}," count",[1060,2115,1154],{"class":1070},[1060,2117,2118],{"class":1732}," 3",[1060,2120,1078],{"class":1070},[1060,2122,1211],{"class":1074},[1060,2124,2125],{"class":1062,"line":1165},[1060,2126,2127],{"class":1201},"\u002F\u002F set.codes → print these; set.entries → persist alongside the vault\n",[1060,2129,2130],{"class":1062,"line":1183},[1060,2131,1119],{"emptyLinePlaceholder":1118},[1060,2133,2134],{"class":1062,"line":1205},[1060,2135,2136],{"class":1201},"\u002F\u002F Years later, the user types one code from the sheet:\n",[1060,2138,2139,2141,2144,2146,2148],{"class":1062,"line":1214},[1060,2140,1126],{"class":1125},[1060,2142,2143],{"class":1074}," parsed ",[1060,2145,1132],{"class":1070},[1060,2147,2014],{"class":1138},[1060,2149,2150],{"class":1074},"(typedCode)\n",[1060,2152,2153,2155,2158,2160,2163,2166,2168,2171,2173,2175],{"class":1062,"line":1606},[1060,2154,1298],{"class":1066},[1060,2156,2157],{"class":1074}," (parsed",[1060,2159,1015],{"class":1070},[1060,2161,2162],{"class":1074},"status ",[1060,2164,2165],{"class":1070},"===",[1060,2167,1084],{"class":1070},[1060,2169,2170],{"class":1087},"valid",[1060,2172,1178],{"class":1070},[1060,2174,1936],{"class":1074},[1060,2176,1144],{"class":1070},[1060,2178,2179,2181,2183,2185,2187,2189,2191,2194,2196,2199,2201,2203],{"class":1062,"line":1849},[1060,2180,1314],{"class":1125},[1060,2182,2099],{"class":1074},[1060,2184,1320],{"class":1070},[1060,2186,1135],{"class":1066},[1060,2188,2033],{"class":1138},[1060,2190,1141],{"class":1150},[1060,2192,2193],{"class":1074},"matchingEntry",[1060,2195,1198],{"class":1070},[1060,2197,2198],{"class":1074}," parsed",[1060,2200,1015],{"class":1070},[1060,2202,953],{"class":1074},[1060,2204,1211],{"class":1150},[1060,2206,2207],{"class":1062,"line":1854},[1060,2208,2209],{"class":1201},"  \u002F\u002F the recovered DEKs decrypt everything the originals encrypted\n",[1060,2211,2212],{"class":1062,"line":1871},[1060,2213,1418],{"class":1070},[987,2215,2217],{"id":2216},"variations","Variations",[941,2219,2220,2221,2223,2224,1154],{},"The ceremony's shape stays the same whichever method plays each part — every ",[953,2222,1448],{}," unlock returns the same ",[953,2225,2226],{},"UnlockedKeyring",[992,2228,2229,2240,2262,2273],{},[995,2230,2231,1000,2234,2239],{},[944,2232,2233],{},"SSO instead of passkeys:",[977,2235,2236],{"href":310},[953,2237,2238],{},"on-oidc"," (Google \u002F Apple \u002F LINE proven in showcases 73–75).",[995,2241,2242,1000,2245,2250,2251,2250,2256,2261],{},[944,2243,2244],{},"Second factors:",[977,2246,2247],{"href":334},[953,2248,2249],{},"on-totp",", ",[977,2252,2253],{"href":302},[953,2254,2255],{},"on-email-otp",[977,2257,2258],{"href":318},[953,2259,2260],{},"on-pin"," for session resume.",[995,2263,2264,1000,2267,2272],{},[944,2265,2266],{},"Social recovery instead of paper:",[977,2268,2269],{"href":326},[953,2270,2271],{},"on-shamir"," splits the recovery secret across trustees.",[995,2274,2275,1000,2278,2283],{},[944,2276,2277],{},"Duress and lockout:",[977,2279,2280],{"href":330},[953,2281,2282],{},"on-threat"," wraps any of the above.",[987,2285,2287],{"id":2286},"when-an-unlock-fails","When an unlock FAILS",[941,2289,2290,2291,2297,2298,2301,2302,2305,2306],{},"⚠️ Before you translate an unlock error into user-facing advice, read ",[977,2292,2293,2294],{"href":367},"Choosing a store → ",[969,2295,2296],{},"A store's locality changes what an unlock error means",". The short version: branch on ",[953,2299,2300],{},"error.details.reason"," first (",[953,2303,2304],{},"'format-superseded'"," is a format transition, not an attack; the absence reasons are unclassifiable), then on whether the store is local or remote — and in every branch, ",[944,2307,2308],{},"say what to preserve before telling anyone to remove anything.",[987,2310,2312],{"id":2311},"see-also","See also",[992,2314,2315,2322,2327,2332],{},[995,2316,2317,2321],{},[977,2318,2319,1035],{"href":115},[953,2320,1448],{}," — the full unlock catalog and how methods compare.",[995,2323,2324,2326],{},[977,2325,366],{"href":367}," — why the same unlock error needs different advice on a remote store.",[995,2328,2329,2331],{},[977,2330,840],{"href":841}," — policies, liveness, revocation in depth.",[995,2333,2334,2336],{},[977,2335,463],{"href":464}," — what each method protects against, honestly.",[2338,2339,2340],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}",{"title":1056,"searchDepth":1115,"depth":1115,"links":2342},[2343,2344,2345,2346,2347,2348,2349,2350,2351],{"id":989,"depth":1094,"text":990},{"id":1045,"depth":1094,"text":1046},{"id":1245,"depth":1094,"text":1246},{"id":1428,"depth":1094,"text":1429},{"id":1620,"depth":1094,"text":1621},{"id":1987,"depth":1094,"text":1988},{"id":2216,"depth":1094,"text":2217},{"id":2286,"depth":1094,"text":2287},{"id":2311,"depth":1094,"text":2312},null,"The full unlock lifecycle: secret setup, passkey enrollment, daily no-secret unlock, session re-auth gates, and printed recovery codes.","md",{},{"title":589,"description":2353},"stable","important","GKsq2iFTTGjw6pmXmyGN0uYR4FGXNf24xfNTFAD4J0w",1791896577179]