[{"data":1,"prerenderedAt":2611},["ShallowReactive",2],{"navigation":3,"\u002Fservices\u002Fdirectory":927,"mdc-8bt02u-key":2571,"mdc-eoi3j5-key":2587},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":669,"access":12,"apiToc":929,"body":930,"category":2562,"description":2563,"extension":2564,"meta":2565,"navigation":2562,"nest":2566,"path":670,"seo":2567,"sinceVersion":2562,"status":2568,"stem":671,"subtitle":2562,"tier":2569,"tocExternal":2562,"__hash__":2570},"docs\u002Fservices\u002Fdirectory.md",false,{"type":931,"value":932,"toc":2544},"minimark",[933,936,940,945,974,982,986,1031,1411,1415,1420,1427,1590,1594,1597,1652,1656,1665,1681,1901,1925,1933,1937,1941,2000,2004,2127,2131,2278,2282,2328,2333,2342,2389,2392,2491,2495,2540],[934,935,669],"h1",{"id":669},[937,938],"service-meta",{":rows":939},"[{\"label\":\"Subpath\",\"value\":\"`@noy-db\u002Fhub` (root export)\"},{\"label\":\"Type\",\"value\":\"Core feature — `listUsers` and `listUsersWithEnvelopes` are always available.\"}]",[941,942,944],"h2",{"id":943},"what-it-does","What it does",[946,947,948,949,953,954,957,958,962,963,966,967,970,971,973],"p",{},"Any multi-user vault eventually needs a \"who's on this team\" screen. Directory is the\npair of visibility flags that shape that listing: a vault-level toggle that turns\nenumeration off entirely for non-admins, and a per-user flag that lets an individual\nopt out of showing up in it. Both are checked by ",[950,951,952],"code",{},"listUsersWithEnvelopes",", the\njoin helper from the ",[955,956,868],"a",{"href":869}," collaboration family that combines each\n",[959,960,961],"strong",{},"keyring"," (a ",[955,964,965],{"href":54},"role-carrying access record",") with\nits decrypted ",[959,968,969],{},"user envelope"," (the per-principal profile record described in\n",[955,972,884],{"href":885},") — documented in full below, since it is\nwhere both directory flags are enforced.",[946,975,976,977,981],{},"Neither flag is a security boundary. Both are plain JSON sidecars stored next to the\nvault's other metadata — see ",[955,978,980],{"href":979},"#limits-gotchas","Limits & gotchas"," — so treat them as\nadmin-UI polish, not as a way to hide a principal's existence from someone with direct\nstore access.",[941,983,985],{"id":984},"setup","Setup",[946,987,988,989,992,993,995,996,999,1000,1003,1004,1006,1007,999,1010,1013,1014,1017,1018,1021,1022,1026,1027,1030],{},"There is nothing to opt into — both flags are part of the always-on core, no ",[950,990,991],{},"with*()","\nstrategy required. The directory toggle is reachable from any ",[950,994,62],{}," instance\n(",[950,997,998],{},"db.getDirectoryEnabled","\u002F",[950,1001,1002],{},"setDirectoryEnabled","); the per-user flag is reachable from\nany open ",[950,1005,94],{}," (",[950,1008,1009],{},"vault.user.getMyVisibility",[950,1011,1012],{},"setMyVisibility",") — there is no\n",[950,1015,1016],{},"vault.setDirectoryEnabled"," or ",[950,1019,1020],{},"db.user.setMyVisibility"," shortcut on the other object.\nEnumerating ",[1023,1024,1025],"em",{},"more than one"," principal does need a second user, which requires opting\ninto multi-user grants with ",[950,1028,1029],{},"withTeam()",":",[1032,1033,1038],"pre",{"className":1034,"code":1035,"language":1036,"meta":1037,"style":1037},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb } from '@noy-db\u002Fhub'\nimport { withTeam } from '@noy-db\u002Fhub\u002Fteam'\nimport { toMemory } from '@noy-db\u002Fto-memory'\n\nconst store = toMemory() \u002F\u002F shared by every session below; swap for to-file \u002F to-postgres in production\n\nconst owner = await createNoydb({\n  store,\n  teamStrategy: withTeam(),\n  user: 'alice',\n  secret: 'alice-pass-2026-strong',\n})\nconst ownerVault = await owner.openVault('demo')\n\nawait owner.grant('demo', {\n  userId: 'bob',\n  displayName: 'Bob',\n  role: 'viewer',\n  secret: 'bob-pass-2026-strong',\n})\n\nawait owner.getDirectoryEnabled('demo')\n\u002F\u002F → true — enabled by default, no _meta\u002Fdirectory document required\n","ts","",[950,1039,1040,1073,1094,1115,1122,1145,1150,1171,1180,1196,1214,1231,1240,1272,1277,1304,1321,1338,1355,1371,1378,1383,1405],{"__ignoreMap":1037},[1041,1042,1045,1049,1053,1057,1060,1063,1066,1070],"span",{"class":1043,"line":1044},"line",1,[1041,1046,1048],{"class":1047},"s7zQu","import",[1041,1050,1052],{"class":1051},"sMK4o"," {",[1041,1054,1056],{"class":1055},"sTEyZ"," createNoydb",[1041,1058,1059],{"class":1051}," }",[1041,1061,1062],{"class":1047}," from",[1041,1064,1065],{"class":1051}," '",[1041,1067,1069],{"class":1068},"sfazB","@noy-db\u002Fhub",[1041,1071,1072],{"class":1051},"'\n",[1041,1074,1076,1078,1080,1083,1085,1087,1089,1092],{"class":1043,"line":1075},2,[1041,1077,1048],{"class":1047},[1041,1079,1052],{"class":1051},[1041,1081,1082],{"class":1055}," withTeam",[1041,1084,1059],{"class":1051},[1041,1086,1062],{"class":1047},[1041,1088,1065],{"class":1051},[1041,1090,1091],{"class":1068},"@noy-db\u002Fhub\u002Fteam",[1041,1093,1072],{"class":1051},[1041,1095,1097,1099,1101,1104,1106,1108,1110,1113],{"class":1043,"line":1096},3,[1041,1098,1048],{"class":1047},[1041,1100,1052],{"class":1051},[1041,1102,1103],{"class":1055}," toMemory",[1041,1105,1059],{"class":1051},[1041,1107,1062],{"class":1047},[1041,1109,1065],{"class":1051},[1041,1111,1112],{"class":1068},"@noy-db\u002Fto-memory",[1041,1114,1072],{"class":1051},[1041,1116,1118],{"class":1043,"line":1117},4,[1041,1119,1121],{"emptyLinePlaceholder":1120},true,"\n",[1041,1123,1125,1129,1132,1135,1138,1141],{"class":1043,"line":1124},5,[1041,1126,1128],{"class":1127},"spNyl","const",[1041,1130,1131],{"class":1055}," store ",[1041,1133,1134],{"class":1051},"=",[1041,1136,1103],{"class":1137},"s2Zo4",[1041,1139,1140],{"class":1055},"() ",[1041,1142,1144],{"class":1143},"sHwdD","\u002F\u002F shared by every session below; swap for to-file \u002F to-postgres in production\n",[1041,1146,1148],{"class":1043,"line":1147},6,[1041,1149,1121],{"emptyLinePlaceholder":1120},[1041,1151,1153,1155,1158,1160,1163,1165,1168],{"class":1043,"line":1152},7,[1041,1154,1128],{"class":1127},[1041,1156,1157],{"class":1055}," owner ",[1041,1159,1134],{"class":1051},[1041,1161,1162],{"class":1047}," await",[1041,1164,1056],{"class":1137},[1041,1166,1167],{"class":1055},"(",[1041,1169,1170],{"class":1051},"{\n",[1041,1172,1174,1177],{"class":1043,"line":1173},8,[1041,1175,1176],{"class":1055},"  store",[1041,1178,1179],{"class":1051},",\n",[1041,1181,1183,1187,1189,1191,1194],{"class":1043,"line":1182},9,[1041,1184,1186],{"class":1185},"swJcz","  teamStrategy",[1041,1188,1030],{"class":1051},[1041,1190,1082],{"class":1137},[1041,1192,1193],{"class":1055},"()",[1041,1195,1179],{"class":1051},[1041,1197,1199,1202,1204,1206,1209,1212],{"class":1043,"line":1198},10,[1041,1200,1201],{"class":1185},"  user",[1041,1203,1030],{"class":1051},[1041,1205,1065],{"class":1051},[1041,1207,1208],{"class":1068},"alice",[1041,1210,1211],{"class":1051},"'",[1041,1213,1179],{"class":1051},[1041,1215,1217,1220,1222,1224,1227,1229],{"class":1043,"line":1216},11,[1041,1218,1219],{"class":1185},"  secret",[1041,1221,1030],{"class":1051},[1041,1223,1065],{"class":1051},[1041,1225,1226],{"class":1068},"alice-pass-2026-strong",[1041,1228,1211],{"class":1051},[1041,1230,1179],{"class":1051},[1041,1232,1234,1237],{"class":1043,"line":1233},12,[1041,1235,1236],{"class":1051},"}",[1041,1238,1239],{"class":1055},")\n",[1041,1241,1243,1245,1248,1250,1252,1255,1258,1261,1263,1265,1268,1270],{"class":1043,"line":1242},13,[1041,1244,1128],{"class":1127},[1041,1246,1247],{"class":1055}," ownerVault ",[1041,1249,1134],{"class":1051},[1041,1251,1162],{"class":1047},[1041,1253,1254],{"class":1055}," owner",[1041,1256,1257],{"class":1051},".",[1041,1259,1260],{"class":1137},"openVault",[1041,1262,1167],{"class":1055},[1041,1264,1211],{"class":1051},[1041,1266,1267],{"class":1068},"demo",[1041,1269,1211],{"class":1051},[1041,1271,1239],{"class":1055},[1041,1273,1275],{"class":1043,"line":1274},14,[1041,1276,1121],{"emptyLinePlaceholder":1120},[1041,1278,1280,1283,1285,1287,1290,1292,1294,1296,1298,1301],{"class":1043,"line":1279},15,[1041,1281,1282],{"class":1047},"await",[1041,1284,1254],{"class":1055},[1041,1286,1257],{"class":1051},[1041,1288,1289],{"class":1137},"grant",[1041,1291,1167],{"class":1055},[1041,1293,1211],{"class":1051},[1041,1295,1267],{"class":1068},[1041,1297,1211],{"class":1051},[1041,1299,1300],{"class":1051},",",[1041,1302,1303],{"class":1051}," {\n",[1041,1305,1307,1310,1312,1314,1317,1319],{"class":1043,"line":1306},16,[1041,1308,1309],{"class":1185},"  userId",[1041,1311,1030],{"class":1051},[1041,1313,1065],{"class":1051},[1041,1315,1316],{"class":1068},"bob",[1041,1318,1211],{"class":1051},[1041,1320,1179],{"class":1051},[1041,1322,1324,1327,1329,1331,1334,1336],{"class":1043,"line":1323},17,[1041,1325,1326],{"class":1185},"  displayName",[1041,1328,1030],{"class":1051},[1041,1330,1065],{"class":1051},[1041,1332,1333],{"class":1068},"Bob",[1041,1335,1211],{"class":1051},[1041,1337,1179],{"class":1051},[1041,1339,1341,1344,1346,1348,1351,1353],{"class":1043,"line":1340},18,[1041,1342,1343],{"class":1185},"  role",[1041,1345,1030],{"class":1051},[1041,1347,1065],{"class":1051},[1041,1349,1350],{"class":1068},"viewer",[1041,1352,1211],{"class":1051},[1041,1354,1179],{"class":1051},[1041,1356,1358,1360,1362,1364,1367,1369],{"class":1043,"line":1357},19,[1041,1359,1219],{"class":1185},[1041,1361,1030],{"class":1051},[1041,1363,1065],{"class":1051},[1041,1365,1366],{"class":1068},"bob-pass-2026-strong",[1041,1368,1211],{"class":1051},[1041,1370,1179],{"class":1051},[1041,1372,1374,1376],{"class":1043,"line":1373},20,[1041,1375,1236],{"class":1051},[1041,1377,1239],{"class":1055},[1041,1379,1381],{"class":1043,"line":1380},21,[1041,1382,1121],{"emptyLinePlaceholder":1120},[1041,1384,1386,1388,1390,1392,1395,1397,1399,1401,1403],{"class":1043,"line":1385},22,[1041,1387,1282],{"class":1047},[1041,1389,1254],{"class":1055},[1041,1391,1257],{"class":1051},[1041,1393,1394],{"class":1137},"getDirectoryEnabled",[1041,1396,1167],{"class":1055},[1041,1398,1211],{"class":1051},[1041,1400,1267],{"class":1068},[1041,1402,1211],{"class":1051},[1041,1404,1239],{"class":1055},[1041,1406,1408],{"class":1043,"line":1407},23,[1041,1409,1410],{"class":1143},"\u002F\u002F → true — enabled by default, no _meta\u002Fdirectory document required\n",[941,1412,1414],{"id":1413},"usage","Usage",[1416,1417,1419],"h3",{"id":1418},"opt-yourself-out-of-the-listing","Opt yourself out of the listing",[946,1421,1422,1423,1426],{},"Own-only — there is no method that takes another user's ",[950,1424,1425],{},"keyringId",", so no caller can\nhide or unhide a different principal:",[1032,1428,1430],{"className":1034,"code":1429,"language":1036,"meta":1037,"style":1037},"const bobSession = await createNoydb({\n  store,\n  teamStrategy: withTeam(),\n  user: 'bob',\n  secret: 'bob-pass-2026-strong',\n})\nconst bobVault = await bobSession.openVault('demo')\n\nawait bobVault.user.setMyVisibility({ hidden: true })\nawait bobVault.user.getMyVisibility()\n\u002F\u002F → { hidden: true }\n",[950,1431,1432,1449,1455,1467,1481,1495,1501,1529,1533,1567,1585],{"__ignoreMap":1037},[1041,1433,1434,1436,1439,1441,1443,1445,1447],{"class":1043,"line":1044},[1041,1435,1128],{"class":1127},[1041,1437,1438],{"class":1055}," bobSession ",[1041,1440,1134],{"class":1051},[1041,1442,1162],{"class":1047},[1041,1444,1056],{"class":1137},[1041,1446,1167],{"class":1055},[1041,1448,1170],{"class":1051},[1041,1450,1451,1453],{"class":1043,"line":1075},[1041,1452,1176],{"class":1055},[1041,1454,1179],{"class":1051},[1041,1456,1457,1459,1461,1463,1465],{"class":1043,"line":1096},[1041,1458,1186],{"class":1185},[1041,1460,1030],{"class":1051},[1041,1462,1082],{"class":1137},[1041,1464,1193],{"class":1055},[1041,1466,1179],{"class":1051},[1041,1468,1469,1471,1473,1475,1477,1479],{"class":1043,"line":1117},[1041,1470,1201],{"class":1185},[1041,1472,1030],{"class":1051},[1041,1474,1065],{"class":1051},[1041,1476,1316],{"class":1068},[1041,1478,1211],{"class":1051},[1041,1480,1179],{"class":1051},[1041,1482,1483,1485,1487,1489,1491,1493],{"class":1043,"line":1124},[1041,1484,1219],{"class":1185},[1041,1486,1030],{"class":1051},[1041,1488,1065],{"class":1051},[1041,1490,1366],{"class":1068},[1041,1492,1211],{"class":1051},[1041,1494,1179],{"class":1051},[1041,1496,1497,1499],{"class":1043,"line":1147},[1041,1498,1236],{"class":1051},[1041,1500,1239],{"class":1055},[1041,1502,1503,1505,1508,1510,1512,1515,1517,1519,1521,1523,1525,1527],{"class":1043,"line":1152},[1041,1504,1128],{"class":1127},[1041,1506,1507],{"class":1055}," bobVault ",[1041,1509,1134],{"class":1051},[1041,1511,1162],{"class":1047},[1041,1513,1514],{"class":1055}," bobSession",[1041,1516,1257],{"class":1051},[1041,1518,1260],{"class":1137},[1041,1520,1167],{"class":1055},[1041,1522,1211],{"class":1051},[1041,1524,1267],{"class":1068},[1041,1526,1211],{"class":1051},[1041,1528,1239],{"class":1055},[1041,1530,1531],{"class":1043,"line":1173},[1041,1532,1121],{"emptyLinePlaceholder":1120},[1041,1534,1535,1537,1540,1542,1545,1547,1549,1551,1554,1557,1559,1563,1565],{"class":1043,"line":1182},[1041,1536,1282],{"class":1047},[1041,1538,1539],{"class":1055}," bobVault",[1041,1541,1257],{"class":1051},[1041,1543,1544],{"class":1055},"user",[1041,1546,1257],{"class":1051},[1041,1548,1012],{"class":1137},[1041,1550,1167],{"class":1055},[1041,1552,1553],{"class":1051},"{",[1041,1555,1556],{"class":1185}," hidden",[1041,1558,1030],{"class":1051},[1041,1560,1562],{"class":1561},"sfNiH"," true",[1041,1564,1059],{"class":1051},[1041,1566,1239],{"class":1055},[1041,1568,1569,1571,1573,1575,1577,1579,1582],{"class":1043,"line":1198},[1041,1570,1282],{"class":1047},[1041,1572,1539],{"class":1055},[1041,1574,1257],{"class":1051},[1041,1576,1544],{"class":1055},[1041,1578,1257],{"class":1051},[1041,1580,1581],{"class":1137},"getMyVisibility",[1041,1583,1584],{"class":1055},"()\n",[1041,1586,1587],{"class":1043,"line":1216},[1041,1588,1589],{"class":1143},"\u002F\u002F → { hidden: true }\n",[1416,1591,1593],{"id":1592},"toggle-the-vault-level-directory","Toggle the vault-level directory",[946,1595,1596],{},"Owner-only:",[1032,1598,1600],{"className":1034,"code":1599,"language":1036,"meta":1037,"style":1037},"await owner.setDirectoryEnabled('demo', false)\nawait owner.getDirectoryEnabled('demo')\n\u002F\u002F → false\n",[950,1601,1602,1627,1647],{"__ignoreMap":1037},[1041,1603,1604,1606,1608,1610,1612,1614,1616,1618,1620,1622,1625],{"class":1043,"line":1044},[1041,1605,1282],{"class":1047},[1041,1607,1254],{"class":1055},[1041,1609,1257],{"class":1051},[1041,1611,1002],{"class":1137},[1041,1613,1167],{"class":1055},[1041,1615,1211],{"class":1051},[1041,1617,1267],{"class":1068},[1041,1619,1211],{"class":1051},[1041,1621,1300],{"class":1051},[1041,1623,1624],{"class":1561}," false",[1041,1626,1239],{"class":1055},[1041,1628,1629,1631,1633,1635,1637,1639,1641,1643,1645],{"class":1043,"line":1075},[1041,1630,1282],{"class":1047},[1041,1632,1254],{"class":1055},[1041,1634,1257],{"class":1051},[1041,1636,1394],{"class":1137},[1041,1638,1167],{"class":1055},[1041,1640,1211],{"class":1051},[1041,1642,1267],{"class":1068},[1041,1644,1211],{"class":1051},[1041,1646,1239],{"class":1055},[1041,1648,1649],{"class":1043,"line":1096},[1041,1650,1651],{"class":1143},"\u002F\u002F → false\n",[1416,1653,1655],{"id":1654},"what-the-flags-do-to-a-listing","What the flags do to a listing",[946,1657,1658,1661,1662,1664],{},[950,1659,1660],{},"listUsersWithEnvelopes(store, vault, userEnvelopeDek, callerRole, options?)"," is the\nread path that enforces both flags together. It joins every granted keyring with its\ndecrypted ",[955,1663,969],{"href":885}," and applies, in order: the\nvault-level toggle, then the per-user hide flag.",[946,1666,1667,1668,1671,1672,1674,1675,1677,1678,1680],{},"It takes the vault's ",[950,1669,1670],{},"_users"," collection key as a plain argument rather than an open\n",[950,1673,94],{}," session, and today there is no public ",[950,1676,94],{}," method that returns that key —\nsee ",[955,1679,980],{"href":979},". The snippet below is illustrative of the\ncall shape, not something you can copy-paste and run as-is until a public accessor\nexists:",[1032,1682,1684],{"className":1034,"code":1683,"language":1036,"meta":1037,"style":1037},"import { listUsersWithEnvelopes, DirectoryDisabledError } from '@noy-db\u002Fhub'\n\nawait owner.setDirectoryEnabled('demo', true) \u002F\u002F re-enable after the toggle example above\n\n\u002F\u002F userEnvelopeDek: no public accessor yet — see Limits & gotchas below.\n\u002F\u002F This is the vault's `_users` collection DEK; server-side \u002F admin tooling\n\u002F\u002F that already manages store and key access supplies it directly.\ndeclare const userEnvelopeDek: CryptoKey\n\nconst rows = await listUsersWithEnvelopes(store, 'demo', userEnvelopeDek, 'owner')\n\u002F\u002F rows: [{ user: { userId: 'alice', role: 'owner', ... }, envelope: {...} }]\n\u002F\u002F       (bob is filtered out — hidden: true, caller did not ask for includeHidden)\n\nconst all = await listUsersWithEnvelopes(store, 'demo', userEnvelopeDek, 'owner', {\n  includeHidden: true,\n})\n\u002F\u002F all: [{ user: { userId: 'alice', ... }, envelope: {...} },\n\u002F\u002F       { user: { userId: 'bob', ... },   envelope: {...} }]\n",[950,1685,1686,1710,1714,1742,1746,1751,1756,1761,1778,1782,1821,1826,1831,1835,1874,1885,1891,1896],{"__ignoreMap":1037},[1041,1687,1688,1690,1692,1695,1697,1700,1702,1704,1706,1708],{"class":1043,"line":1044},[1041,1689,1048],{"class":1047},[1041,1691,1052],{"class":1051},[1041,1693,1694],{"class":1055}," listUsersWithEnvelopes",[1041,1696,1300],{"class":1051},[1041,1698,1699],{"class":1055}," DirectoryDisabledError",[1041,1701,1059],{"class":1051},[1041,1703,1062],{"class":1047},[1041,1705,1065],{"class":1051},[1041,1707,1069],{"class":1068},[1041,1709,1072],{"class":1051},[1041,1711,1712],{"class":1043,"line":1075},[1041,1713,1121],{"emptyLinePlaceholder":1120},[1041,1715,1716,1718,1720,1722,1724,1726,1728,1730,1732,1734,1736,1739],{"class":1043,"line":1096},[1041,1717,1282],{"class":1047},[1041,1719,1254],{"class":1055},[1041,1721,1257],{"class":1051},[1041,1723,1002],{"class":1137},[1041,1725,1167],{"class":1055},[1041,1727,1211],{"class":1051},[1041,1729,1267],{"class":1068},[1041,1731,1211],{"class":1051},[1041,1733,1300],{"class":1051},[1041,1735,1562],{"class":1561},[1041,1737,1738],{"class":1055},") ",[1041,1740,1741],{"class":1143},"\u002F\u002F re-enable after the toggle example above\n",[1041,1743,1744],{"class":1043,"line":1117},[1041,1745,1121],{"emptyLinePlaceholder":1120},[1041,1747,1748],{"class":1043,"line":1124},[1041,1749,1750],{"class":1143},"\u002F\u002F userEnvelopeDek: no public accessor yet — see Limits & gotchas below.\n",[1041,1752,1753],{"class":1043,"line":1147},[1041,1754,1755],{"class":1143},"\u002F\u002F This is the vault's `_users` collection DEK; server-side \u002F admin tooling\n",[1041,1757,1758],{"class":1043,"line":1152},[1041,1759,1760],{"class":1143},"\u002F\u002F that already manages store and key access supplies it directly.\n",[1041,1762,1763,1766,1769,1772,1774],{"class":1043,"line":1173},[1041,1764,1765],{"class":1127},"declare",[1041,1767,1768],{"class":1127}," const",[1041,1770,1771],{"class":1055}," userEnvelopeDek",[1041,1773,1030],{"class":1051},[1041,1775,1777],{"class":1776},"sBMFI"," CryptoKey\n",[1041,1779,1780],{"class":1043,"line":1182},[1041,1781,1121],{"emptyLinePlaceholder":1120},[1041,1783,1784,1786,1789,1791,1793,1795,1798,1800,1802,1804,1806,1808,1810,1812,1814,1817,1819],{"class":1043,"line":1198},[1041,1785,1128],{"class":1127},[1041,1787,1788],{"class":1055}," rows ",[1041,1790,1134],{"class":1051},[1041,1792,1162],{"class":1047},[1041,1794,1694],{"class":1137},[1041,1796,1797],{"class":1055},"(store",[1041,1799,1300],{"class":1051},[1041,1801,1065],{"class":1051},[1041,1803,1267],{"class":1068},[1041,1805,1211],{"class":1051},[1041,1807,1300],{"class":1051},[1041,1809,1771],{"class":1055},[1041,1811,1300],{"class":1051},[1041,1813,1065],{"class":1051},[1041,1815,1816],{"class":1068},"owner",[1041,1818,1211],{"class":1051},[1041,1820,1239],{"class":1055},[1041,1822,1823],{"class":1043,"line":1216},[1041,1824,1825],{"class":1143},"\u002F\u002F rows: [{ user: { userId: 'alice', role: 'owner', ... }, envelope: {...} }]\n",[1041,1827,1828],{"class":1043,"line":1233},[1041,1829,1830],{"class":1143},"\u002F\u002F       (bob is filtered out — hidden: true, caller did not ask for includeHidden)\n",[1041,1832,1833],{"class":1043,"line":1242},[1041,1834,1121],{"emptyLinePlaceholder":1120},[1041,1836,1837,1839,1842,1844,1846,1848,1850,1852,1854,1856,1858,1860,1862,1864,1866,1868,1870,1872],{"class":1043,"line":1274},[1041,1838,1128],{"class":1127},[1041,1840,1841],{"class":1055}," all ",[1041,1843,1134],{"class":1051},[1041,1845,1162],{"class":1047},[1041,1847,1694],{"class":1137},[1041,1849,1797],{"class":1055},[1041,1851,1300],{"class":1051},[1041,1853,1065],{"class":1051},[1041,1855,1267],{"class":1068},[1041,1857,1211],{"class":1051},[1041,1859,1300],{"class":1051},[1041,1861,1771],{"class":1055},[1041,1863,1300],{"class":1051},[1041,1865,1065],{"class":1051},[1041,1867,1816],{"class":1068},[1041,1869,1211],{"class":1051},[1041,1871,1300],{"class":1051},[1041,1873,1303],{"class":1051},[1041,1875,1876,1879,1881,1883],{"class":1043,"line":1279},[1041,1877,1878],{"class":1185},"  includeHidden",[1041,1880,1030],{"class":1051},[1041,1882,1562],{"class":1561},[1041,1884,1179],{"class":1051},[1041,1886,1887,1889],{"class":1043,"line":1306},[1041,1888,1236],{"class":1051},[1041,1890,1239],{"class":1055},[1041,1892,1893],{"class":1043,"line":1323},[1041,1894,1895],{"class":1143},"\u002F\u002F all: [{ user: { userId: 'alice', ... }, envelope: {...} },\n",[1041,1897,1898],{"class":1043,"line":1340},[1041,1899,1900],{"class":1143},"\u002F\u002F       { user: { userId: 'bob', ... },   envelope: {...} }]\n",[946,1902,1903,1906,1907,1017,1909,1912,1913,1916,1917,1920,1921,1924],{},[950,1904,1905],{},"includeHidden: true"," itself requires ",[950,1908,1816],{},[950,1910,1911],{},"admin","; any other role passing it\nthrows ",[950,1914,1915],{},"PermissionDeniedError",". With the directory disabled and ",[950,1918,1919],{},"callerRole: 'viewer'",",\nthe same call throws ",[950,1922,1923],{},"DirectoryDisabledError"," instead:",[1032,1926,1931],{"className":1927,"code":1929,"language":1930},[1928],"language-text","Vault \"demo\" has its user directory disabled. Only owners and admins\ncan call listUsersWithEnvelopes() here. Use db.setDirectoryEnabled(vault, true) to re-enable.\n","text",[950,1932,1929],{"__ignoreMap":1037},[941,1934,1936],{"id":1935},"api-reference","API reference",[1416,1938,1940],{"id":1939},"types","Types",[1942,1943,1944,1960],"table",{},[1945,1946,1947],"thead",{},[1948,1949,1950,1954,1957],"tr",{},[1951,1952,1953],"th",{},"Export",[1951,1955,1956],{},"Shape",[1951,1958,1959],{},"Purpose",[1961,1962,1963,1982],"tbody",{},[1948,1964,1965,1971,1976],{},[1966,1967,1968],"td",{},[950,1969,1970],{},"DirectoryConfig",[1966,1972,1973],{},[950,1974,1975],{},"{ enabled: boolean }",[1966,1977,1978,1979,1257],{},"Vault-level directory toggle, persisted at ",[950,1980,1981],{},"_meta\u002Fdirectory",[1948,1983,1984,1989,1994],{},[1966,1985,1986],{},[950,1987,1988],{},"UserVisibility",[1966,1990,1991],{},[950,1992,1993],{},"{ hidden: boolean }",[1966,1995,1996,1997,1257],{},"Per-user hide flag, persisted at ",[950,1998,1999],{},"_meta\u002Fvisibility\u002F\u003CkeyringId>",[1416,2001,2003],{"id":2002},"directory-toggle","Directory toggle",[1942,2005,2006,2017],{},[1945,2007,2008],{},[1948,2009,2010,2012,2015],{},[1951,2011,1953],{},[1951,2013,2014],{},"Signature",[1951,2016,1959],{},[1961,2018,2019,2048,2066,2084,2108],{},[1948,2020,2021,2026,2031],{},[1966,2022,2023],{},[950,2024,2025],{},"readDirectoryConfig",[1966,2027,2028],{},[950,2029,2030],{},"(store, vault) => Promise\u003CDirectoryConfig | undefined>",[1966,2032,2033,2034,2036,2037,2040,2041,2044,2045,2047],{},"Read ",[950,2035,1981],{},". ",[950,2038,2039],{},"undefined"," means no document exists yet — callers treat that as ",[950,2042,2043],{},"{ enabled: true }",". A corrupted document also reads back as ",[950,2046,2039],{}," rather than throwing.",[1948,2049,2050,2055,2060],{},[1966,2051,2052],{},[950,2053,2054],{},"persistDirectoryConfig",[1966,2056,2057],{},[950,2058,2059],{},"(store, vault, config: DirectoryConfig) => Promise\u003Cvoid>",[1966,2061,2062,2063,2065],{},"Write ",[950,2064,1981],{},". No role check — the role gate lives in the wrapper below.",[1948,2067,2068,2073,2078],{},[1966,2069,2070],{},[950,2071,2072],{},"db.getDirectoryEnabled(vault)",[1966,2074,2075],{},[950,2076,2077],{},"Promise\u003Cboolean>",[1966,2079,2080,2081,2083],{},"Kernel wrapper over ",[950,2082,2025],{},"; no role gate — anyone who can open the vault can read the toggle.",[1948,2085,2086,2091,2096],{},[1966,2087,2088],{},[950,2089,2090],{},"db.setDirectoryEnabled(vault, enabled)",[1966,2092,2093],{},[950,2094,2095],{},"Promise\u003Cvoid>",[1966,2097,2080,2098,2100,2101,2104,2105,2107],{},[950,2099,2054],{},"; ",[959,2102,2103],{},"owner-only",", throws ",[950,2106,1915],{}," otherwise.",[1948,2109,2110,2115,2120],{},[1966,2111,2112],{},[950,2113,2114],{},"DIRECTORY_RECORD_ID",[1966,2116,2117],{},[950,2118,2119],{},"'directory'",[1966,2121,2122,2123,2126],{},"The ",[950,2124,2125],{},"_meta"," record id the toggle lives at.",[1416,2128,2130],{"id":2129},"per-user-visibility","Per-user visibility",[1942,2132,2133,2143],{},[1945,2134,2135],{},[1948,2136,2137,2139,2141],{},[1951,2138,1953],{},[1951,2140,2014],{},[1951,2142,1959],{},[1961,2144,2145,2166,2183,2206,2221,2238,2259],{},[1948,2146,2147,2152,2157],{},[1966,2148,2149],{},[950,2150,2151],{},"readUserVisibility",[1966,2153,2154],{},[950,2155,2156],{},"(store, vault, keyringId) => Promise\u003CUserVisibility | undefined>",[1966,2158,2033,2159,2036,2161,2040,2163,1257],{},[950,2160,1999],{},[950,2162,2039],{},[950,2164,2165],{},"{ hidden: false }",[1948,2167,2168,2173,2178],{},[1966,2169,2170],{},[950,2171,2172],{},"persistUserVisibility",[1966,2174,2175],{},[950,2176,2177],{},"(store, vault, keyringId, visibility: UserVisibility) => Promise\u003Cvoid>",[1966,2179,2062,2180,2182],{},[950,2181,1999],{},". No ownership check — the own-only rule lives in the wrapper below.",[1948,2184,2185,2190,2195],{},[1966,2186,2187],{},[950,2188,2189],{},"deleteUserVisibility",[1966,2191,2192],{},[950,2193,2194],{},"(store, vault, keyringId) => Promise\u003Cvoid>",[1966,2196,2197,2198,2201,2202,2205],{},"Delete the sidecar. Called by ",[950,2199,2200],{},"revoke()"," so a hidden flag never leaks onto a re-granted ",[950,2203,2204],{},"userId",". Idempotent.",[1948,2207,2208,2213,2218],{},[1966,2209,2210],{},[950,2211,2212],{},"vault.user.getMyVisibility()",[1966,2214,2215],{},[950,2216,2217],{},"Promise\u003CUserVisibility>",[1966,2219,2220],{},"Read the caller's own flag.",[1948,2222,2223,2228,2232],{},[1966,2224,2225],{},[950,2226,2227],{},"vault.user.setMyVisibility({ hidden })",[1966,2229,2230],{},[950,2231,2095],{},[1966,2233,2234,2235,2237],{},"Set the caller's own flag. Own-only by construction — no ",[950,2236,1425],{}," parameter exists on this method.",[1948,2239,2240,2245,2250],{},[1966,2241,2242],{},[950,2243,2244],{},"visibilityRecordId(keyringId)",[1966,2246,2247],{},[950,2248,2249],{},"(keyringId: string) => string",[1966,2251,2252,2253,2255,2256,1257],{},"Compose the ",[950,2254,2125],{}," record id: ",[950,2257,2258],{},"`visibility\u002F${keyringId}`",[1948,2260,2261,2266,2271],{},[1966,2262,2263],{},[950,2264,2265],{},"VISIBILITY_RECORD_PREFIX",[1966,2267,2268],{},[950,2269,2270],{},"'visibility\u002F'",[1966,2272,2273,2274,2277],{},"The prefix ",[950,2275,2276],{},"visibilityRecordId"," uses.",[1416,2279,2281],{"id":2280},"shared","Shared",[1942,2283,2284,2292],{},[1945,2285,2286],{},[1948,2287,2288,2290],{},[1951,2289,1953],{},[1951,2291,1959],{},[1961,2293,2294,2307],{},[1948,2295,2296,2301],{},[1966,2297,2298],{},[950,2299,2300],{},"META_COLLECTION",[1966,2302,2303,2306],{},[950,2304,2305],{},"'_meta'"," — the reserved collection both records live in.",[1948,2308,2309,2313],{},[1966,2310,2311],{},[950,2312,1923],{},[1966,2314,2315,2316,2318,2319,2321,2322,2324,2325,1257],{},"Thrown by ",[950,2317,952],{}," when the directory is disabled and the caller is neither ",[950,2320,1816],{}," nor ",[950,2323,1911],{},". Carries ",[950,2326,2327],{},".vault",[1416,2329,2331],{"id":2330},"listuserswithenvelopesstore-vault-userenvelopedek-callerrole-options",[950,2332,1660],{},[946,2334,2335,2336,2338,2339,2341],{},"Exported from ",[950,2337,1069],{}," root; defined in the ",[950,2340,868],{}," collaboration family and\ndocumented here because this is where both directory flags are actually enforced.",[1942,2343,2344,2354],{},[1945,2345,2346],{},[1948,2347,2348,2350,2352],{},[1951,2349,1953],{},[1951,2351,2014],{},[1951,2353,1959],{},[1961,2355,2356],{},[1948,2357,2358,2362,2367],{},[1966,2359,2360],{},[950,2361,952],{},[1966,2363,2364],{},[950,2365,2366],{},"\u003CT>(store: NoydbStore, vault: string, userEnvelopeDek: CryptoKey, callerRole: Role, options?: { includeHidden?: boolean }) => Promise\u003CArray\u003C{ user: UserInfo; envelope: UserEnvelope\u003CT> | null }>>",[1966,2368,2369,2370,2373,2374,2377,2378,1017,2380,2382,2383,2385,2386,1257],{},"Joins every granted keyring with its decrypted user envelope, applying the vault-level toggle then the per-user hide flag. ",[950,2371,2372],{},"options.includeHidden"," requires ",[950,2375,2376],{},"callerRole"," to be ",[950,2379,1816],{},[950,2381,1911],{},"; passing it as any other role throws ",[950,2384,1915],{},". A principal with no persisted envelope comes back with ",[950,2387,2388],{},"envelope: null",[941,2390,980],{"id":2391},"limits-gotchas",[2393,2394,2395,2421,2445,2457,2475],"ul",{},[2396,2397,2398,2405,2406,2409,2410,2412,2413,2415,2416,2418,2419,1257],"li",{},[959,2399,2400,2402,2403,1257],{},[950,2401,952],{}," takes a raw collection key, not a ",[950,2404,94],{}," It reads\ndirectly against a ",[950,2407,2408],{},"NoydbStore",", so it needs the vault's ",[950,2411,1670],{}," collection DEK and\nthe caller's role as plain arguments rather than deriving them from an open ",[950,2414,94],{},"\nsession — there is currently no public ",[950,2417,94],{}," method that returns that key. It is\nmeant for server-side \u002F admin tooling that already manages store and key access\nitself, not a one-line call from arbitrary app code holding only a ",[950,2420,94],{},[2396,2422,2423,2426,2427,2430,2431,2433,2434,2436,2437,2440,2441,2444],{},[959,2424,2425],{},"UX flag, not a privacy guarantee."," Both records are plaintext JSON sidecars (the\nenvelope's ",[950,2428,2429],{},"_iv"," is left empty — see ",[955,2432,784],{"href":785},"),\nand only gate the ",[950,2435,952],{}," join. The keyring file at\n",[950,2438,2439],{},"_keyring\u002F\u003CuserId>"," and the encrypted envelope at ",[950,2442,2443],{},"_users\u002F\u003CkeyringId>"," are both still\npresent and listable to anyone with direct store read access. These flags stop an\nadmin UI from accidentally rendering a hidden teammate — they do not hide that the\nprincipal exists from a determined attacker.",[2396,2446,2447,2450,2451,2453,2454,2456],{},[959,2448,2449],{},"A missing document is not \"off.\""," Both flags default to the visible\u002Fenabled state\nwhen nothing has been persisted (",[950,2452,2043],{},", ",[950,2455,2165],{},") — there is\nno explicit \"unset\" state to branch on.",[2396,2458,2459,2464,2465,2467,2468,2470,2471,2474],{},[959,2460,2461,2463],{},[950,2462,1905],{}," is role-gated, not caller-gated."," It checks the role you\npass into ",[950,2466,952],{},", so whatever wires ",[950,2469,2376],{}," from your session\nis the actual security boundary — pass it from the unlocked keyring's ",[950,2472,2473],{},"role",", never\nfrom user input.",[2396,2476,2477,2480,2481,2483,2484,2486,2487,2490],{},[959,2478,2479],{},"Revoke cleans up; recovery does not touch it."," ",[950,2482,2200],{}," deletes the visibility\nsidecar so it can't leak onto a re-granted ",[950,2485,2204],{},". Peer-recovery (",[950,2488,2489],{},"recoverUser",")\nonly rewrites the keyring file, so an existing hidden flag survives a secret\nreset for the same principal.",[941,2492,2494],{"id":2493},"see-also","See also",[2393,2496,2497,2505,2510,2515,2521,2530],{},[2396,2498,2499,2501,2502,2504],{},[955,2500,868],{"href":869}," — grant\u002Frevoke\u002Frotate access and the multi-user collaboration\nfamily ",[950,2503,952],{}," belongs to",[2396,2506,2507,2509],{},[955,2508,613],{"href":614}," — the read-only per-user auth\nenrollment view, gated the same admin-facing way as the directory listing",[2396,2511,2512,2514],{},[955,2513,884],{"href":885}," — the per-principal profile record this\nservice filters",[2396,2516,2517,2520],{},[955,2518,2519],{"href":54},"Permissions & keyring"," — roles referenced above",[2396,2522,2523,2525,2526,2529],{},[955,2524,784],{"href":785}," — the ",[950,2527,2528],{},"_iv: ''"," sidecar pattern both\nflags use",[2396,2531,2532,2535,2536],{},[955,2533,2534],{"href":598},"Services overview"," · ",[955,2537,2539],{"href":2538},"\u002Forientation","Orientation map",[2541,2542,2543],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}",{"title":1037,"searchDepth":1096,"depth":1096,"links":2545},[2546,2547,2548,2553,2560,2561],{"id":943,"depth":1075,"text":944},{"id":984,"depth":1075,"text":985},{"id":1413,"depth":1075,"text":1414,"children":2549},[2550,2551,2552],{"id":1418,"depth":1096,"text":1419},{"id":1592,"depth":1096,"text":1593},{"id":1654,"depth":1096,"text":1655},{"id":1935,"depth":1075,"text":1936,"children":2554},[2555,2556,2557,2558,2559],{"id":1939,"depth":1096,"text":1940},{"id":2002,"depth":1096,"text":2003},{"id":2129,"depth":1096,"text":2130},{"id":2280,"depth":1096,"text":2281},{"id":2330,"depth":1096,"text":1660},{"id":2391,"depth":1075,"text":980},{"id":2493,"depth":1075,"text":2494},null,"Vault-level directory toggle and per-user hide flag that filter who shows up when you enumerate a vault's team — always-on, no with*() opt-in required.","md",{},"service",{"title":669,"description":2563},"stable","important","ROxvpIH9A-zEQRkUHZZ9yFOHfPnxz2mGMXsZXKLXYJU",{"data":2572,"body":2573},{},{"type":2574,"children":2575},"root",[2576],{"type":2577,"tag":946,"props":2578,"children":2579},"element",{},[2580,2585],{"type":2577,"tag":950,"props":2581,"children":2583},{"className":2582},[],[2584],{"type":1930,"value":1069},{"type":1930,"value":2586}," (root export)",{"data":2588,"body":2589},{},{"type":2574,"children":2590},[2591],{"type":2577,"tag":946,"props":2592,"children":2593},{},[2594,2596,2602,2604,2609],{"type":1930,"value":2595},"Core feature — ",{"type":2577,"tag":950,"props":2597,"children":2599},{"className":2598},[],[2600],{"type":1930,"value":2601},"listUsers",{"type":1930,"value":2603}," and ",{"type":2577,"tag":950,"props":2605,"children":2607},{"className":2606},[],[2608],{"type":1930,"value":952},{"type":1930,"value":2610}," are always available.",1791896582227]