[{"data":1,"prerenderedAt":3087},["ShallowReactive",2],{"navigation":3,"\u002Fservices\u002Fsession":927,"mdc--7sa3b2-key":3042,"mdc-oseh7k-key":3054,"mdc-sym6q7-key":3066,"mdc--639uwn-key":3078},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":840,"access":12,"apiToc":929,"body":930,"category":3033,"description":3034,"extension":3035,"meta":3036,"navigation":3033,"nest":3037,"path":841,"seo":3038,"sinceVersion":3033,"status":3039,"stem":842,"subtitle":3033,"tier":3040,"tocExternal":3033,"__hash__":3041},"docs\u002Fservices\u002Fsession.md",false,{"type":931,"value":932,"toc":3012},"minimark",[933,936,940,945,983,987,1010,1014,1051,1055,1349,1352,1386,1390,1395,1404,1653,1824,1844,1875,1900,1904,1929,1967,2245,2259,2263,2343,2347,2534,2539,2652,2660,2666,2707,2713,2784,2788,2833,2837,2865,2869,2917,2921,2970,2974,3008],[934,935,840],"h1",{"id":840},[937,938],"service-meta",{":rows":939},"[{\"label\":\"Subpath\",\"value\":\"`@noy-db\u002Fhub\u002Fsession`\"},{\"label\":\"Factory\",\"value\":\"`withSession()`\"},{\"label\":\"Cluster\",\"value\":\"G — Collaboration & Auth\"},{\"label\":\"LOC cost\",\"value\":\"~495 (off-bundle when not opted in)\"}]",[941,942,944],"h2",{"id":943},"what-it-does","What it does",[946,947,948,949,953,954,958,959,962,963,966,967,970,971,974,975,978,979,982],"p",{},"Every noy-db vault starts locked: the app calls an unlock function (secret, WebAuthn, OIDC, magic-link — one of the ",[950,951,952],"code",{},"on-*"," packages) and gets back a ",[955,956,957],"strong",{},"keyring",", the decrypted per-user key material held in memory for that call. ",[950,960,961],{},"@noy-db\u002Fhub\u002Fsession"," builds two things on top of a single unlock: ",[955,964,965],{},"session tokens"," — a serializable handle you can stash in ",[950,968,969],{},"sessionStorage"," and hand to ",[950,972,973],{},"resolveSession()"," later so the app doesn't re-run the unlock ceremony on every call — and a ",[955,976,977],{},"session policy"," shape (idle\u002Fabsolute timeouts, an optional lock-on-background, and a list of high-risk operations that should require re-auth) that a ",[950,980,981],{},"PolicyEnforcer"," object can enforce for you once you drive it from your own code (see Usage). It also keeps a process-wide registry of active sessions so a \"log out everywhere\" action can revoke them all at once.",[941,984,986],{"id":985},"when-you-need-it","When you need it",[988,989,990,994,997,1000],"ul",{},[991,992,993],"li",{},"Long-running web apps that need idle\u002Fabsolute timeouts",[991,995,996],{},"Sensitive operations that must require fresh re-auth",[991,998,999],{},"Mobile\u002Fdesktop apps that should lock when backgrounded",[991,1001,1002,1003,1006,1007],{},"Multi-tab coordination via ",[950,1004,1005],{},"revokeSession(id)"," \u002F ",[950,1008,1009],{},"revokeAllSessions()",[941,1011,1013],{"id":1012},"prerequisites","Prerequisites",[988,1015,1016,1042],{},[991,1017,1018,1021,1022,1026,1027,1030,1031,1033,1034,1037,1038,1041],{},[955,1019,1020],{},"An enrolled unlock method to re-verify against"," — the policy engine decides ",[1023,1024,1025],"em",{},"when"," re-auth is due; ",[1023,1028,1029],{},"how"," is your app calling an ",[950,1032,952],{}," verifier (e.g. ",[950,1035,1036],{},"verifyPasswordSlot"," from ",[950,1039,1040],{},"@noy-db\u002Fon-password",") and reporting the result. Without an enrolled method there is nothing to re-verify.",[991,1043,1044,1050],{},[955,1045,1046,1047],{},"A ",[950,1048,1049],{},"sessionPolicy"," — the factory enables enforcement; the policy object declares which operations require fresh auth.",[941,1052,1054],{"id":1053},"opt-in","Opt in",[1056,1057,1062],"pre",{"className":1058,"code":1059,"language":1060,"meta":1061,"style":1061},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb } from '@noy-db\u002Fhub'\nimport { toMemory } from '@noy-db\u002Fto-memory'\nimport { withSession } from '@noy-db\u002Fhub\u002Fsession'\n\nconst db = await createNoydb({\n  store: toMemory(),\n  user: 'alice',\n  sessionStrategy: withSession(),\n\n  sessionPolicy: {\n    idleTimeoutMs: 15 * 60_000,\n    absoluteTimeoutMs: 8 * 60 * 60_000,\n    lockOnBackground: true,\n    requireReAuthFor: ['export', 'grant', 'rotate'],\n  },\n})\n","ts","",[950,1063,1064,1097,1118,1138,1145,1170,1188,1206,1220,1225,1236,1256,1278,1292,1334,1340],{"__ignoreMap":1061},[1065,1066,1069,1073,1077,1081,1084,1087,1090,1094],"span",{"class":1067,"line":1068},"line",1,[1065,1070,1072],{"class":1071},"s7zQu","import",[1065,1074,1076],{"class":1075},"sMK4o"," {",[1065,1078,1080],{"class":1079},"sTEyZ"," createNoydb",[1065,1082,1083],{"class":1075}," }",[1065,1085,1086],{"class":1071}," from",[1065,1088,1089],{"class":1075}," '",[1065,1091,1093],{"class":1092},"sfazB","@noy-db\u002Fhub",[1065,1095,1096],{"class":1075},"'\n",[1065,1098,1100,1102,1104,1107,1109,1111,1113,1116],{"class":1067,"line":1099},2,[1065,1101,1072],{"class":1071},[1065,1103,1076],{"class":1075},[1065,1105,1106],{"class":1079}," toMemory",[1065,1108,1083],{"class":1075},[1065,1110,1086],{"class":1071},[1065,1112,1089],{"class":1075},[1065,1114,1115],{"class":1092},"@noy-db\u002Fto-memory",[1065,1117,1096],{"class":1075},[1065,1119,1121,1123,1125,1128,1130,1132,1134,1136],{"class":1067,"line":1120},3,[1065,1122,1072],{"class":1071},[1065,1124,1076],{"class":1075},[1065,1126,1127],{"class":1079}," withSession",[1065,1129,1083],{"class":1075},[1065,1131,1086],{"class":1071},[1065,1133,1089],{"class":1075},[1065,1135,961],{"class":1092},[1065,1137,1096],{"class":1075},[1065,1139,1141],{"class":1067,"line":1140},4,[1065,1142,1144],{"emptyLinePlaceholder":1143},true,"\n",[1065,1146,1148,1152,1155,1158,1161,1164,1167],{"class":1067,"line":1147},5,[1065,1149,1151],{"class":1150},"spNyl","const",[1065,1153,1154],{"class":1079}," db ",[1065,1156,1157],{"class":1075},"=",[1065,1159,1160],{"class":1071}," await",[1065,1162,1080],{"class":1163},"s2Zo4",[1065,1165,1166],{"class":1079},"(",[1065,1168,1169],{"class":1075},"{\n",[1065,1171,1173,1177,1180,1182,1185],{"class":1067,"line":1172},6,[1065,1174,1176],{"class":1175},"swJcz","  store",[1065,1178,1179],{"class":1075},":",[1065,1181,1106],{"class":1163},[1065,1183,1184],{"class":1079},"()",[1065,1186,1187],{"class":1075},",\n",[1065,1189,1191,1194,1196,1198,1201,1204],{"class":1067,"line":1190},7,[1065,1192,1193],{"class":1175},"  user",[1065,1195,1179],{"class":1075},[1065,1197,1089],{"class":1075},[1065,1199,1200],{"class":1092},"alice",[1065,1202,1203],{"class":1075},"'",[1065,1205,1187],{"class":1075},[1065,1207,1209,1212,1214,1216,1218],{"class":1067,"line":1208},8,[1065,1210,1211],{"class":1175},"  sessionStrategy",[1065,1213,1179],{"class":1075},[1065,1215,1127],{"class":1163},[1065,1217,1184],{"class":1079},[1065,1219,1187],{"class":1075},[1065,1221,1223],{"class":1067,"line":1222},9,[1065,1224,1144],{"emptyLinePlaceholder":1143},[1065,1226,1228,1231,1233],{"class":1067,"line":1227},10,[1065,1229,1230],{"class":1175},"  sessionPolicy",[1065,1232,1179],{"class":1075},[1065,1234,1235],{"class":1075}," {\n",[1065,1237,1239,1242,1244,1248,1251,1254],{"class":1067,"line":1238},11,[1065,1240,1241],{"class":1175},"    idleTimeoutMs",[1065,1243,1179],{"class":1075},[1065,1245,1247],{"class":1246},"sbssI"," 15",[1065,1249,1250],{"class":1075}," *",[1065,1252,1253],{"class":1246}," 60_000",[1065,1255,1187],{"class":1075},[1065,1257,1259,1262,1264,1267,1269,1272,1274,1276],{"class":1067,"line":1258},12,[1065,1260,1261],{"class":1175},"    absoluteTimeoutMs",[1065,1263,1179],{"class":1075},[1065,1265,1266],{"class":1246}," 8",[1065,1268,1250],{"class":1075},[1065,1270,1271],{"class":1246}," 60",[1065,1273,1250],{"class":1075},[1065,1275,1253],{"class":1246},[1065,1277,1187],{"class":1075},[1065,1279,1281,1284,1286,1290],{"class":1067,"line":1280},13,[1065,1282,1283],{"class":1175},"    lockOnBackground",[1065,1285,1179],{"class":1075},[1065,1287,1289],{"class":1288},"sfNiH"," true",[1065,1291,1187],{"class":1075},[1065,1293,1295,1298,1300,1303,1305,1308,1310,1313,1315,1318,1320,1322,1324,1327,1329,1332],{"class":1067,"line":1294},14,[1065,1296,1297],{"class":1175},"    requireReAuthFor",[1065,1299,1179],{"class":1075},[1065,1301,1302],{"class":1079}," [",[1065,1304,1203],{"class":1075},[1065,1306,1307],{"class":1092},"export",[1065,1309,1203],{"class":1075},[1065,1311,1312],{"class":1075},",",[1065,1314,1089],{"class":1075},[1065,1316,1317],{"class":1092},"grant",[1065,1319,1203],{"class":1075},[1065,1321,1312],{"class":1075},[1065,1323,1089],{"class":1075},[1065,1325,1326],{"class":1092},"rotate",[1065,1328,1203],{"class":1075},[1065,1330,1331],{"class":1079},"]",[1065,1333,1187],{"class":1075},[1065,1335,1337],{"class":1067,"line":1336},15,[1065,1338,1339],{"class":1075},"  },\n",[1065,1341,1343,1346],{"class":1067,"line":1342},16,[1065,1344,1345],{"class":1075},"}",[1065,1347,1348],{"class":1079},")\n",[946,1350,1351],{},"Dev-unlock (separate, no strategy):",[1056,1353,1355],{"className":1058,"code":1354,"language":1060,"meta":1061,"style":1061},"import { enableDevUnlock, loadDevUnlock, isDevUnlockActive } from '@noy-db\u002Fhub'\n",[950,1356,1357],{"__ignoreMap":1061},[1065,1358,1359,1361,1363,1366,1368,1371,1373,1376,1378,1380,1382,1384],{"class":1067,"line":1068},[1065,1360,1072],{"class":1071},[1065,1362,1076],{"class":1075},[1065,1364,1365],{"class":1079}," enableDevUnlock",[1065,1367,1312],{"class":1075},[1065,1369,1370],{"class":1079}," loadDevUnlock",[1065,1372,1312],{"class":1075},[1065,1374,1375],{"class":1079}," isDevUnlockActive",[1065,1377,1083],{"class":1075},[1065,1379,1086],{"class":1071},[1065,1381,1089],{"class":1075},[1065,1383,1093],{"class":1092},[1065,1385,1096],{"class":1075},[941,1387,1389],{"id":1388},"usage","Usage",[1391,1392,1394],"h3",{"id":1393},"create-and-resolve-a-session-token","Create and resolve a session token",[946,1396,1397,1400,1401,1403],{},[950,1398,1399],{},"createSession()"," wraps an already-unlocked keyring in a token; ",[950,1402,973],{}," turns that token back into a keyring later, without re-running the unlock ceremony.",[1056,1405,1407],{"className":1058,"code":1406,"language":1060,"meta":1061,"style":1061},"import { createNoydb } from '@noy-db\u002Fhub'\nimport { withSession, createSession, resolveSession } from '@noy-db\u002Fhub\u002Fsession'\nimport { verifyPasswordSlot } from '@noy-db\u002Fon-password'\n\nconst db = await createNoydb({\n  store: myStore,\n  user: 'alice',\n  sessionStrategy: withSession(),\n})\n\n\u002F\u002F verifyPasswordSlot() is one unlock path — it returns an UnlockedKeyring\n\u002F\u002F (role, permissions, and the DEKs used to read\u002Fwrite each collection).\n\u002F\u002F WebAuthn, OIDC, and magic-link unlocks return the same shape.\nconst keyring = await verifyPasswordSlot(passwordSlot, 'correct horse battery staple')\n\nconst { token, sessionId } = await createSession(keyring, 'acme-corp', {\n  ttlMs: 15 * 60_000, \u002F\u002F defaults to 60 minutes if omitted\n})\n",[950,1408,1409,1427,1455,1474,1478,1494,1505,1519,1531,1537,1541,1547,1552,1557,1584,1588,1627,1646],{"__ignoreMap":1061},[1065,1410,1411,1413,1415,1417,1419,1421,1423,1425],{"class":1067,"line":1068},[1065,1412,1072],{"class":1071},[1065,1414,1076],{"class":1075},[1065,1416,1080],{"class":1079},[1065,1418,1083],{"class":1075},[1065,1420,1086],{"class":1071},[1065,1422,1089],{"class":1075},[1065,1424,1093],{"class":1092},[1065,1426,1096],{"class":1075},[1065,1428,1429,1431,1433,1435,1437,1440,1442,1445,1447,1449,1451,1453],{"class":1067,"line":1099},[1065,1430,1072],{"class":1071},[1065,1432,1076],{"class":1075},[1065,1434,1127],{"class":1079},[1065,1436,1312],{"class":1075},[1065,1438,1439],{"class":1079}," createSession",[1065,1441,1312],{"class":1075},[1065,1443,1444],{"class":1079}," resolveSession",[1065,1446,1083],{"class":1075},[1065,1448,1086],{"class":1071},[1065,1450,1089],{"class":1075},[1065,1452,961],{"class":1092},[1065,1454,1096],{"class":1075},[1065,1456,1457,1459,1461,1464,1466,1468,1470,1472],{"class":1067,"line":1120},[1065,1458,1072],{"class":1071},[1065,1460,1076],{"class":1075},[1065,1462,1463],{"class":1079}," verifyPasswordSlot",[1065,1465,1083],{"class":1075},[1065,1467,1086],{"class":1071},[1065,1469,1089],{"class":1075},[1065,1471,1040],{"class":1092},[1065,1473,1096],{"class":1075},[1065,1475,1476],{"class":1067,"line":1140},[1065,1477,1144],{"emptyLinePlaceholder":1143},[1065,1479,1480,1482,1484,1486,1488,1490,1492],{"class":1067,"line":1147},[1065,1481,1151],{"class":1150},[1065,1483,1154],{"class":1079},[1065,1485,1157],{"class":1075},[1065,1487,1160],{"class":1071},[1065,1489,1080],{"class":1163},[1065,1491,1166],{"class":1079},[1065,1493,1169],{"class":1075},[1065,1495,1496,1498,1500,1503],{"class":1067,"line":1172},[1065,1497,1176],{"class":1175},[1065,1499,1179],{"class":1075},[1065,1501,1502],{"class":1079}," myStore",[1065,1504,1187],{"class":1075},[1065,1506,1507,1509,1511,1513,1515,1517],{"class":1067,"line":1190},[1065,1508,1193],{"class":1175},[1065,1510,1179],{"class":1075},[1065,1512,1089],{"class":1075},[1065,1514,1200],{"class":1092},[1065,1516,1203],{"class":1075},[1065,1518,1187],{"class":1075},[1065,1520,1521,1523,1525,1527,1529],{"class":1067,"line":1208},[1065,1522,1211],{"class":1175},[1065,1524,1179],{"class":1075},[1065,1526,1127],{"class":1163},[1065,1528,1184],{"class":1079},[1065,1530,1187],{"class":1075},[1065,1532,1533,1535],{"class":1067,"line":1222},[1065,1534,1345],{"class":1075},[1065,1536,1348],{"class":1079},[1065,1538,1539],{"class":1067,"line":1227},[1065,1540,1144],{"emptyLinePlaceholder":1143},[1065,1542,1543],{"class":1067,"line":1238},[1065,1544,1546],{"class":1545},"sHwdD","\u002F\u002F verifyPasswordSlot() is one unlock path — it returns an UnlockedKeyring\n",[1065,1548,1549],{"class":1067,"line":1258},[1065,1550,1551],{"class":1545},"\u002F\u002F (role, permissions, and the DEKs used to read\u002Fwrite each collection).\n",[1065,1553,1554],{"class":1067,"line":1280},[1065,1555,1556],{"class":1545},"\u002F\u002F WebAuthn, OIDC, and magic-link unlocks return the same shape.\n",[1065,1558,1559,1561,1564,1566,1568,1570,1573,1575,1577,1580,1582],{"class":1067,"line":1294},[1065,1560,1151],{"class":1150},[1065,1562,1563],{"class":1079}," keyring ",[1065,1565,1157],{"class":1075},[1065,1567,1160],{"class":1071},[1065,1569,1463],{"class":1163},[1065,1571,1572],{"class":1079},"(passwordSlot",[1065,1574,1312],{"class":1075},[1065,1576,1089],{"class":1075},[1065,1578,1579],{"class":1092},"correct horse battery staple",[1065,1581,1203],{"class":1075},[1065,1583,1348],{"class":1079},[1065,1585,1586],{"class":1067,"line":1336},[1065,1587,1144],{"emptyLinePlaceholder":1143},[1065,1589,1590,1592,1594,1597,1599,1602,1604,1607,1609,1611,1614,1616,1618,1621,1623,1625],{"class":1067,"line":1342},[1065,1591,1151],{"class":1150},[1065,1593,1076],{"class":1075},[1065,1595,1596],{"class":1079}," token",[1065,1598,1312],{"class":1075},[1065,1600,1601],{"class":1079}," sessionId ",[1065,1603,1345],{"class":1075},[1065,1605,1606],{"class":1075}," =",[1065,1608,1160],{"class":1071},[1065,1610,1439],{"class":1163},[1065,1612,1613],{"class":1079},"(keyring",[1065,1615,1312],{"class":1075},[1065,1617,1089],{"class":1075},[1065,1619,1620],{"class":1092},"acme-corp",[1065,1622,1203],{"class":1075},[1065,1624,1312],{"class":1075},[1065,1626,1235],{"class":1075},[1065,1628,1630,1633,1635,1637,1639,1641,1643],{"class":1067,"line":1629},17,[1065,1631,1632],{"class":1175},"  ttlMs",[1065,1634,1179],{"class":1075},[1065,1636,1247],{"class":1246},[1065,1638,1250],{"class":1075},[1065,1640,1253],{"class":1246},[1065,1642,1312],{"class":1075},[1065,1644,1645],{"class":1545}," \u002F\u002F defaults to 60 minutes if omitted\n",[1065,1647,1649,1651],{"class":1067,"line":1648},18,[1065,1650,1345],{"class":1075},[1065,1652,1348],{"class":1079},[1056,1654,1657],{"className":1655,"code":1656,"language":141,"meta":1061,"style":1061},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n  \"_noydb_session\": 1,\n  \"sessionId\": \"01J8Z3F9R2K4Q6T8V0W2X4Y6Z8\",\n  \"userId\": \"alice\",\n  \"vault\": \"acme-corp\",\n  \"role\": \"owner\",\n  \"expiresAt\": \"2026-07-09T13:15:00.000Z\",\n  \"wrappedKek\": \"Qk3f9CjH2s0LpV…\",\n  \"kekIv\": \"u8xQnR2b…\"\n}\n",[950,1658,1659,1663,1681,1702,1721,1740,1760,1780,1800,1819],{"__ignoreMap":1061},[1065,1660,1661],{"class":1067,"line":1068},[1065,1662,1169],{"class":1075},[1065,1664,1665,1668,1671,1674,1676,1679],{"class":1067,"line":1099},[1065,1666,1667],{"class":1075},"  \"",[1065,1669,1670],{"class":1150},"_noydb_session",[1065,1672,1673],{"class":1075},"\"",[1065,1675,1179],{"class":1075},[1065,1677,1678],{"class":1246}," 1",[1065,1680,1187],{"class":1075},[1065,1682,1683,1685,1688,1690,1692,1695,1698,1700],{"class":1067,"line":1120},[1065,1684,1667],{"class":1075},[1065,1686,1687],{"class":1150},"sessionId",[1065,1689,1673],{"class":1075},[1065,1691,1179],{"class":1075},[1065,1693,1694],{"class":1075}," \"",[1065,1696,1697],{"class":1092},"01J8Z3F9R2K4Q6T8V0W2X4Y6Z8",[1065,1699,1673],{"class":1075},[1065,1701,1187],{"class":1075},[1065,1703,1704,1706,1709,1711,1713,1715,1717,1719],{"class":1067,"line":1140},[1065,1705,1667],{"class":1075},[1065,1707,1708],{"class":1150},"userId",[1065,1710,1673],{"class":1075},[1065,1712,1179],{"class":1075},[1065,1714,1694],{"class":1075},[1065,1716,1200],{"class":1092},[1065,1718,1673],{"class":1075},[1065,1720,1187],{"class":1075},[1065,1722,1723,1725,1728,1730,1732,1734,1736,1738],{"class":1067,"line":1147},[1065,1724,1667],{"class":1075},[1065,1726,1727],{"class":1150},"vault",[1065,1729,1673],{"class":1075},[1065,1731,1179],{"class":1075},[1065,1733,1694],{"class":1075},[1065,1735,1620],{"class":1092},[1065,1737,1673],{"class":1075},[1065,1739,1187],{"class":1075},[1065,1741,1742,1744,1747,1749,1751,1753,1756,1758],{"class":1067,"line":1172},[1065,1743,1667],{"class":1075},[1065,1745,1746],{"class":1150},"role",[1065,1748,1673],{"class":1075},[1065,1750,1179],{"class":1075},[1065,1752,1694],{"class":1075},[1065,1754,1755],{"class":1092},"owner",[1065,1757,1673],{"class":1075},[1065,1759,1187],{"class":1075},[1065,1761,1762,1764,1767,1769,1771,1773,1776,1778],{"class":1067,"line":1190},[1065,1763,1667],{"class":1075},[1065,1765,1766],{"class":1150},"expiresAt",[1065,1768,1673],{"class":1075},[1065,1770,1179],{"class":1075},[1065,1772,1694],{"class":1075},[1065,1774,1775],{"class":1092},"2026-07-09T13:15:00.000Z",[1065,1777,1673],{"class":1075},[1065,1779,1187],{"class":1075},[1065,1781,1782,1784,1787,1789,1791,1793,1796,1798],{"class":1067,"line":1208},[1065,1783,1667],{"class":1075},[1065,1785,1786],{"class":1150},"wrappedKek",[1065,1788,1673],{"class":1075},[1065,1790,1179],{"class":1075},[1065,1792,1694],{"class":1075},[1065,1794,1795],{"class":1092},"Qk3f9CjH2s0LpV…",[1065,1797,1673],{"class":1075},[1065,1799,1187],{"class":1075},[1065,1801,1802,1804,1807,1809,1811,1813,1816],{"class":1067,"line":1222},[1065,1803,1667],{"class":1075},[1065,1805,1806],{"class":1150},"kekIv",[1065,1808,1673],{"class":1075},[1065,1810,1179],{"class":1075},[1065,1812,1694],{"class":1075},[1065,1814,1815],{"class":1092},"u8xQnR2b…",[1065,1817,1818],{"class":1075},"\"\n",[1065,1820,1821],{"class":1067,"line":1227},[1065,1822,1823],{"class":1075},"}\n",[946,1825,1826,1829,1830,1832,1833,1835,1836,1839,1840,1843],{},[950,1827,1828],{},"token"," is JSON-serializable — store it in ",[950,1831,969],{},". Despite the field name, ",[950,1834,1786],{}," does not carry the KEK itself (the KEK is a non-extractable key and can't be exported); it holds the vault's DEK set plus role\u002Fpermissions, encrypted with a separate, non-extractable ",[955,1837,1838],{},"session key"," that lives only in a module-level ",[950,1841,1842],{},"Map"," for the life of the tab. Closing the tab drops the session key and makes every token issued in it permanently unresolvable — that's the built-in \"closing the tab logs you out\" behavior.",[1056,1845,1847],{"className":1058,"code":1846,"language":1060,"meta":1061,"style":1061},"\u002F\u002F Later — same tab, e.g. after a client-side navigation:\nconst keyringAgain = await resolveSession(token)\n\u002F\u002F → { userId: 'alice', displayName: 'Alice', role: 'owner', permissions: { 'acme-corp': 'rw' }, deks: Map(2) {…}, kek: null, salt: Uint8Array(32), authenticators: [] }\n",[950,1848,1849,1854,1870],{"__ignoreMap":1061},[1065,1850,1851],{"class":1067,"line":1068},[1065,1852,1853],{"class":1545},"\u002F\u002F Later — same tab, e.g. after a client-side navigation:\n",[1065,1855,1856,1858,1861,1863,1865,1867],{"class":1067,"line":1099},[1065,1857,1151],{"class":1150},[1065,1859,1860],{"class":1079}," keyringAgain ",[1065,1862,1157],{"class":1075},[1065,1864,1160],{"class":1071},[1065,1866,1444],{"class":1163},[1065,1868,1869],{"class":1079},"(token)\n",[1065,1871,1872],{"class":1067,"line":1120},[1065,1873,1874],{"class":1545},"\u002F\u002F → { userId: 'alice', displayName: 'Alice', role: 'owner', permissions: { 'acme-corp': 'rw' }, deks: Map(2) {…}, kek: null, salt: Uint8Array(32), authenticators: [] }\n",[946,1876,1877,1880,1881,1884,1885,1888,1889,1891,1892,1895,1896,1899],{},[950,1878,1879],{},"kek"," comes back ",[950,1882,1883],{},"null"," — sessions only need the DEKs to read\u002Fwrite records, not the KEK. If ",[950,1886,1887],{},"token.expiresAt"," has passed, ",[950,1890,973],{}," throws ",[950,1893,1894],{},"SessionExpiredError","; if the session key isn't in the store (tab reloaded, or the session was revoked), it throws ",[950,1897,1898],{},"SessionNotFoundError",".",[1391,1901,1903],{"id":1902},"validate-a-policy-then-enforce-it-yourself","Validate a policy, then enforce it yourself",[946,1905,1906,1907,1909,1910,1913,1914,1917,1918,1921,1922,1925,1926,1899],{},"Passing ",[950,1908,1049],{}," to ",[950,1911,1912],{},"createNoydb()"," validates it at construction time — ",[950,1915,1916],{},"validateSessionPolicy()"," (called automatically when ",[950,1919,1920],{},"withSession()"," is wired in) throws a plain ",[950,1923,1924],{},"Error"," if the shape is malformed, e.g. ",[950,1927,1928],{},"idleTimeoutMs >= absoluteTimeoutMs",[946,1930,1931,1932,1935,1936,1939,1940,1943,1944,1943,1947,1950,1951,1954,1955,1957,1958,1960,1961,1963,1964,1179],{},"Validation is as far as the wiring goes today. Idle\u002Fabsolute timeouts and the ",[950,1933,1934],{},"requireReAuthFor"," gate are ",[955,1937,1938],{},"not"," currently enforced automatically: ",[950,1941,1942],{},"db.grant()",", ",[950,1945,1946],{},"db.revoke()",[950,1948,1949],{},"db.rotate()",", and ",[950,1952,1953],{},"db.changeSecret()"," do not check ",[950,1956,1049],{}," on their own, and there is no public API to attach an enforcer to a running ",[950,1959,62],{}," instance. If you need that behavior today, drive a ",[950,1962,981],{}," yourself with ",[950,1965,1966],{},"createEnforcer()",[1056,1968,1970],{"className":1058,"code":1969,"language":1060,"meta":1061,"style":1061},"import { createEnforcer } from '@noy-db\u002Fhub\u002Fsession'\n\nconst enforcer = createEnforcer({\n  policy: {\n    idleTimeoutMs: 15 * 60_000,\n    absoluteTimeoutMs: 8 * 60 * 60_000,\n    requireReAuthFor: ['grant', 'rotate'],\n  },\n  sessionId,\n  onRevoke: (reason) => {\n    \u002F\u002F 'idle' | 'absolute' | 'background' — decide what your app does,\n    \u002F\u002F e.g. clear local UI state and prompt for re-unlock.\n  },\n})\n\nenforcer.touch() \u002F\u002F call at the top of every operation you want the idle timer to track\n\nenforcer.checkOperation('grant')\n\u002F\u002F → throws SessionPolicyError: Operation \"grant\" requires re-authentication per the active session policy.\n\u002F\u002F (or SessionExpiredError, thrown defensively, if absoluteTimeoutMs has already elapsed)\n\nawait db.grant('acme-corp', { grantee: 'bob@example.com', role: 'operator' })\n",[950,1971,1972,1991,1995,2010,2019,2033,2051,2077,2081,2088,2110,2115,2120,2124,2130,2134,2150,2154,2173,2179,2185,2190],{"__ignoreMap":1061},[1065,1973,1974,1976,1978,1981,1983,1985,1987,1989],{"class":1067,"line":1068},[1065,1975,1072],{"class":1071},[1065,1977,1076],{"class":1075},[1065,1979,1980],{"class":1079}," createEnforcer",[1065,1982,1083],{"class":1075},[1065,1984,1086],{"class":1071},[1065,1986,1089],{"class":1075},[1065,1988,961],{"class":1092},[1065,1990,1096],{"class":1075},[1065,1992,1993],{"class":1067,"line":1099},[1065,1994,1144],{"emptyLinePlaceholder":1143},[1065,1996,1997,1999,2002,2004,2006,2008],{"class":1067,"line":1120},[1065,1998,1151],{"class":1150},[1065,2000,2001],{"class":1079}," enforcer ",[1065,2003,1157],{"class":1075},[1065,2005,1980],{"class":1163},[1065,2007,1166],{"class":1079},[1065,2009,1169],{"class":1075},[1065,2011,2012,2015,2017],{"class":1067,"line":1140},[1065,2013,2014],{"class":1175},"  policy",[1065,2016,1179],{"class":1075},[1065,2018,1235],{"class":1075},[1065,2020,2021,2023,2025,2027,2029,2031],{"class":1067,"line":1147},[1065,2022,1241],{"class":1175},[1065,2024,1179],{"class":1075},[1065,2026,1247],{"class":1246},[1065,2028,1250],{"class":1075},[1065,2030,1253],{"class":1246},[1065,2032,1187],{"class":1075},[1065,2034,2035,2037,2039,2041,2043,2045,2047,2049],{"class":1067,"line":1172},[1065,2036,1261],{"class":1175},[1065,2038,1179],{"class":1075},[1065,2040,1266],{"class":1246},[1065,2042,1250],{"class":1075},[1065,2044,1271],{"class":1246},[1065,2046,1250],{"class":1075},[1065,2048,1253],{"class":1246},[1065,2050,1187],{"class":1075},[1065,2052,2053,2055,2057,2059,2061,2063,2065,2067,2069,2071,2073,2075],{"class":1067,"line":1190},[1065,2054,1297],{"class":1175},[1065,2056,1179],{"class":1075},[1065,2058,1302],{"class":1079},[1065,2060,1203],{"class":1075},[1065,2062,1317],{"class":1092},[1065,2064,1203],{"class":1075},[1065,2066,1312],{"class":1075},[1065,2068,1089],{"class":1075},[1065,2070,1326],{"class":1092},[1065,2072,1203],{"class":1075},[1065,2074,1331],{"class":1079},[1065,2076,1187],{"class":1075},[1065,2078,2079],{"class":1067,"line":1208},[1065,2080,1339],{"class":1075},[1065,2082,2083,2086],{"class":1067,"line":1222},[1065,2084,2085],{"class":1079},"  sessionId",[1065,2087,1187],{"class":1075},[1065,2089,2090,2093,2095,2098,2102,2105,2108],{"class":1067,"line":1227},[1065,2091,2092],{"class":1163},"  onRevoke",[1065,2094,1179],{"class":1075},[1065,2096,2097],{"class":1075}," (",[1065,2099,2101],{"class":2100},"sHdIc","reason",[1065,2103,2104],{"class":1075},")",[1065,2106,2107],{"class":1150}," =>",[1065,2109,1235],{"class":1075},[1065,2111,2112],{"class":1067,"line":1238},[1065,2113,2114],{"class":1545},"    \u002F\u002F 'idle' | 'absolute' | 'background' — decide what your app does,\n",[1065,2116,2117],{"class":1067,"line":1258},[1065,2118,2119],{"class":1545},"    \u002F\u002F e.g. clear local UI state and prompt for re-unlock.\n",[1065,2121,2122],{"class":1067,"line":1280},[1065,2123,1339],{"class":1075},[1065,2125,2126,2128],{"class":1067,"line":1294},[1065,2127,1345],{"class":1075},[1065,2129,1348],{"class":1079},[1065,2131,2132],{"class":1067,"line":1336},[1065,2133,1144],{"emptyLinePlaceholder":1143},[1065,2135,2136,2139,2141,2144,2147],{"class":1067,"line":1342},[1065,2137,2138],{"class":1079},"enforcer",[1065,2140,1899],{"class":1075},[1065,2142,2143],{"class":1163},"touch",[1065,2145,2146],{"class":1079},"() ",[1065,2148,2149],{"class":1545},"\u002F\u002F call at the top of every operation you want the idle timer to track\n",[1065,2151,2152],{"class":1067,"line":1629},[1065,2153,1144],{"emptyLinePlaceholder":1143},[1065,2155,2156,2158,2160,2163,2165,2167,2169,2171],{"class":1067,"line":1648},[1065,2157,2138],{"class":1079},[1065,2159,1899],{"class":1075},[1065,2161,2162],{"class":1163},"checkOperation",[1065,2164,1166],{"class":1079},[1065,2166,1203],{"class":1075},[1065,2168,1317],{"class":1092},[1065,2170,1203],{"class":1075},[1065,2172,1348],{"class":1079},[1065,2174,2176],{"class":1067,"line":2175},19,[1065,2177,2178],{"class":1545},"\u002F\u002F → throws SessionPolicyError: Operation \"grant\" requires re-authentication per the active session policy.\n",[1065,2180,2182],{"class":1067,"line":2181},20,[1065,2183,2184],{"class":1545},"\u002F\u002F (or SessionExpiredError, thrown defensively, if absoluteTimeoutMs has already elapsed)\n",[1065,2186,2188],{"class":1067,"line":2187},21,[1065,2189,1144],{"emptyLinePlaceholder":1143},[1065,2191,2193,2196,2199,2201,2203,2205,2207,2209,2211,2213,2215,2218,2220,2222,2225,2227,2229,2232,2234,2236,2239,2241,2243],{"class":1067,"line":2192},22,[1065,2194,2195],{"class":1071},"await",[1065,2197,2198],{"class":1079}," db",[1065,2200,1899],{"class":1075},[1065,2202,1317],{"class":1163},[1065,2204,1166],{"class":1079},[1065,2206,1203],{"class":1075},[1065,2208,1620],{"class":1092},[1065,2210,1203],{"class":1075},[1065,2212,1312],{"class":1075},[1065,2214,1076],{"class":1075},[1065,2216,2217],{"class":1175}," grantee",[1065,2219,1179],{"class":1075},[1065,2221,1089],{"class":1075},[1065,2223,2224],{"class":1092},"bob@example.com",[1065,2226,1203],{"class":1075},[1065,2228,1312],{"class":1075},[1065,2230,2231],{"class":1175}," role",[1065,2233,1179],{"class":1075},[1065,2235,1089],{"class":1075},[1065,2237,2238],{"class":1092},"operator",[1065,2240,1203],{"class":1075},[1065,2242,1083],{"class":1075},[1065,2244,1348],{"class":1079},[946,2246,2247,2250,2251,2254,2255,2258],{},[950,2248,2249],{},"checkOperation()"," is synchronous and only inspects the policy you passed in — call it yourself immediately before any operation you want gated; ",[950,2252,2253],{},"absoluteTimeoutMs"," always wins over ",[950,2256,2257],{},"idleTimeoutMs"," once the deadline passes, regardless of activity.",[1391,2260,2262],{"id":2261},"check-liveness-and-revoke","Check liveness and revoke",[1056,2264,2266],{"className":1058,"code":2265,"language":1060,"meta":1061,"style":1061},"import { isSessionAlive, revokeSession, activeSessionCount } from '@noy-db\u002Fhub\u002Fsession'\n\nisSessionAlive(token)     \u002F\u002F → true\nrevokeSession(sessionId)  \u002F\u002F explicit logout — removes the session key from the store\nisSessionAlive(token)     \u002F\u002F → false\nactiveSessionCount()      \u002F\u002F → 0\n",[950,2267,2268,2297,2301,2312,2323,2332],{"__ignoreMap":1061},[1065,2269,2270,2272,2274,2277,2279,2282,2284,2287,2289,2291,2293,2295],{"class":1067,"line":1068},[1065,2271,1072],{"class":1071},[1065,2273,1076],{"class":1075},[1065,2275,2276],{"class":1079}," isSessionAlive",[1065,2278,1312],{"class":1075},[1065,2280,2281],{"class":1079}," revokeSession",[1065,2283,1312],{"class":1075},[1065,2285,2286],{"class":1079}," activeSessionCount",[1065,2288,1083],{"class":1075},[1065,2290,1086],{"class":1071},[1065,2292,1089],{"class":1075},[1065,2294,961],{"class":1092},[1065,2296,1096],{"class":1075},[1065,2298,2299],{"class":1067,"line":1099},[1065,2300,1144],{"emptyLinePlaceholder":1143},[1065,2302,2303,2306,2309],{"class":1067,"line":1120},[1065,2304,2305],{"class":1163},"isSessionAlive",[1065,2307,2308],{"class":1079},"(token)     ",[1065,2310,2311],{"class":1545},"\u002F\u002F → true\n",[1065,2313,2314,2317,2320],{"class":1067,"line":1140},[1065,2315,2316],{"class":1163},"revokeSession",[1065,2318,2319],{"class":1079},"(sessionId)  ",[1065,2321,2322],{"class":1545},"\u002F\u002F explicit logout — removes the session key from the store\n",[1065,2324,2325,2327,2329],{"class":1067,"line":1147},[1065,2326,2305],{"class":1163},[1065,2328,2308],{"class":1079},[1065,2330,2331],{"class":1545},"\u002F\u002F → false\n",[1065,2333,2334,2337,2340],{"class":1067,"line":1172},[1065,2335,2336],{"class":1163},"activeSessionCount",[1065,2338,2339],{"class":1079},"()      ",[1065,2341,2342],{"class":1545},"\u002F\u002F → 0\n",[941,2344,2346],{"id":2345},"api","API",[988,2348,2349,2363,2376,2385,2396,2405,2414,2439,2450,2472,2502,2517],{},[991,2350,2351,2354,2355,2358,2359,2362],{},[950,2352,2353],{},"createSession(keyring, vault, options?)"," → ",[950,2356,2357],{},"Promise\u003C{ token: SessionToken, sessionId: string }>"," — wrap an unlocked keyring in a serializable token. ",[950,2360,2361],{},"options.ttlMs"," defaults to 60 minutes.",[991,2364,2365,2354,2368,2371,2372,1006,2374,1899],{},[950,2366,2367],{},"resolveSession(token)",[950,2369,2370],{},"Promise\u003CUnlockedKeyring>"," — turn a token back into a keyring. Throws ",[950,2373,1894],{},[950,2375,1898],{},[991,2377,2378,2354,2381,2384],{},[950,2379,2380],{},"revokeSession(sessionId)",[950,2382,2383],{},"void"," — drop one session's key from the store.",[991,2386,2387,2354,2389,2391,2392,2395],{},[950,2388,1009],{},[950,2390,2383],{}," — clear every active session (called by ",[950,2393,2394],{},"db.close()",").",[991,2397,2398,2354,2401,2404],{},[950,2399,2400],{},"isSessionAlive(token)",[950,2402,2403],{},"boolean"," — metadata-only check (not expired + key still in the store); does not decrypt anything.",[991,2406,2407,2354,2410,2413],{},[950,2408,2409],{},"activeSessionCount()",[950,2411,2412],{},"number"," — size of the session-key store; useful for diagnostics\u002Ftests.",[991,2415,2416,2354,2419,2421,2422,2425,2426,2428,2429,2432,2433,2436,2437,1899],{},[950,2417,2418],{},"validateSessionPolicy(policy)",[950,2420,2383],{}," — call-time validation of a ",[950,2423,2424],{},"SessionPolicy","; throws a plain ",[950,2427,1924],{}," (not a ",[950,2430,2431],{},"NoydbError",") on a malformed policy. Runs automatically when ",[950,2434,2435],{},"createNoydb({ sessionPolicy })"," is used with ",[950,2438,1920],{},[991,2440,2441,2354,2443,2446,2447,1899],{},[950,2442,1920],{},[950,2444,2445],{},"SessionStrategy"," — the opt-in factory passed to ",[950,2448,2449],{},"createNoydb({ sessionStrategy })",[991,2451,2452,2354,2455,2457,2458,2461,2462,2464,2465,2468,2469,2471],{},[950,2453,2454],{},"createEnforcer(opts)",[950,2456,981],{}," — builds a stateful timer\u002Flistener object for one session from ",[950,2459,2460],{},"{ policy, sessionId, onRevoke }",". Nothing in ",[950,2463,62],{}," installs one automatically today; call it yourself and drive it with ",[950,2466,2467],{},"touch()","\u002F",[950,2470,2249],{}," if you want idle\u002Fabsolute-timeout or re-auth-gate enforcement (see Usage above).",[991,2473,2474,2476,2477,2479,2480,2482,2483,2486,2487,2490,2491,2494,2495,2468,2498,2501],{},[950,2475,981],{}," — the class ",[950,2478,1966],{}," returns: ",[950,2481,2467],{}," (reset the idle timer), ",[950,2484,2485],{},"checkOperation(op)"," (throw if ",[950,2488,2489],{},"op"," needs re-auth or the absolute timeout has passed), ",[950,2492,2493],{},"destroy()"," (tear down timers\u002Flisteners), plus ",[950,2496,2497],{},"idleMs",[950,2499,2500],{},"ageMs"," getters.",[991,2503,2504,1006,2507,1006,2510,1006,2513,2516],{},[950,2505,2506],{},"enableDevUnlock(vault, userId, keyring, options)",[950,2508,2509],{},"loadDevUnlock(vault, userId, options?)",[950,2511,2512],{},"clearDevUnlock(vault, userId, options?)",[950,2514,2515],{},"isDevUnlockActive(vault, userId, options?)"," — development-only persistent unlock (see below).",[991,2518,2519,1943,2521,1943,2523,2526,2527,2530,2531,2533],{},[950,2520,1894],{},[950,2522,1898],{},[950,2524,2525],{},"SessionPolicyError"," — re-exported here so ",[950,2528,2529],{},"instanceof"," checks don't need the root ",[950,2532,1093],{}," barrel.",[1391,2535,2537],{"id":2536},"sessionpolicy",[950,2538,2424],{},[2540,2541,2542,2561],"table",{},[2543,2544,2545],"thead",{},[2546,2547,2548,2552,2555,2558],"tr",{},[2549,2550,2551],"th",{},"Option",[2549,2553,2554],{},"Type",[2549,2556,2557],{},"Default",[2549,2559,2560],{},"Effect",[2562,2563,2564,2584,2604,2626],"tbody",{},[2546,2565,2566,2571,2575,2581],{},[2567,2568,2569],"td",{},[950,2570,2257],{},[2567,2572,2573],{},[950,2574,2412],{},[2567,2576,2577,2580],{},[950,2578,2579],{},"undefined"," (no idle limit)",[2567,2582,2583],{},"Session is revoked if no operation runs for this long; the clock resets on every successful operation.",[2546,2585,2586,2590,2594,2599],{},[2567,2587,2588],{},[950,2589,2253],{},[2567,2591,2592],{},[950,2593,2412],{},[2567,2595,2596,2598],{},[950,2597,2579],{}," (no absolute limit)",[2567,2600,2601,2602,1899],{},"Session is revoked this long after creation, regardless of activity. Overrides ",[950,2603,2257],{},[2546,2605,2606,2610,2615,2620],{},[2567,2607,2608],{},[950,2609,1934],{},[2567,2611,2612],{},[950,2613,2614],{},"readonly ('export' | 'grant' | 'revoke' | 'rotate' | 'changeSecret')[]",[2567,2616,2617],{},[950,2618,2619],{},"[]",[2567,2621,2622,2623,2625],{},"Operations that throw ",[950,2624,2525],{}," until the user re-unlocks, even with a live session.",[2546,2627,2628,2633,2637,2642],{},[2567,2629,2630],{},[950,2631,2632],{},"lockOnBackground",[2567,2634,2635],{},[950,2636,2403],{},[2567,2638,2639],{},[950,2640,2641],{},"false",[2567,2643,2644,2645,1943,2648,2651],{},"Revoke the session when the tab is hidden (",[950,2646,2647],{},"visibilitychange",[950,2649,2650],{},"document.hidden === true","). No-op outside a browser.",[946,2653,2654,2656,2657,2659],{},[950,2655,1916],{}," also rejects a policy where ",[950,2658,1928],{}," — the idle window has to fit inside the absolute one.",[1391,2661,2663],{"id":2662},"createsessionoptions",[950,2664,2665],{},"CreateSessionOptions",[2540,2667,2668,2680],{},[2543,2669,2670],{},[2546,2671,2672,2674,2676,2678],{},[2549,2673,2551],{},[2549,2675,2554],{},[2549,2677,2557],{},[2549,2679,2560],{},[2562,2681,2682],{},[2546,2683,2684,2689,2693,2699],{},[2567,2685,2686],{},[950,2687,2688],{},"ttlMs",[2567,2690,2691],{},[950,2692,2412],{},[2567,2694,2695,2698],{},[950,2696,2697],{},"3_600_000"," (60 minutes)",[2567,2700,2701,2702,1891,2704,2706],{},"How long the token is valid; ",[950,2703,973],{},[950,2705,1894],{}," past this.",[1391,2708,2710],{"id":2709},"devunlockoptions",[950,2711,2712],{},"DevUnlockOptions",[2540,2714,2715,2727],{},[2543,2716,2717],{},[2546,2718,2719,2721,2723,2725],{},[2549,2720,2551],{},[2549,2722,2554],{},[2549,2724,2557],{},[2549,2726,2560],{},[2562,2728,2729,2755],{},[2546,2730,2731,2736,2741,2744],{},[2567,2732,2733],{},[950,2734,2735],{},"acknowledge",[2567,2737,2738],{},[950,2739,2740],{},"string",[2567,2742,2743],{},"— required",[2567,2745,2746,2747,2750,2751,2754],{},"Must be exactly ",[950,2748,2749],{},"'I-UNDERSTAND-THIS-DISABLES-UNLOCK-SECURITY'",", or ",[950,2752,2753],{},"enableDevUnlock()"," throws.",[2546,2756,2757,2762,2766,2770],{},[2567,2758,2759],{},[950,2760,2761],{},"persistAcrossTabs",[2567,2763,2764],{},[950,2765,2403],{},[2567,2767,2768],{},[950,2769,2641],{},[2567,2771,2772,2774,2775,2777,2778,2774,2781,1899],{},[950,2773,2641],{}," stores in ",[950,2776,969],{}," (cleared on tab close); ",[950,2779,2780],{},"true",[950,2782,2783],{},"localStorage",[941,2785,2787],{"id":2786},"dev-unlock","Dev-unlock",[946,2789,2790,1006,2792,2795,2796,2799,2800,2803,2804,2468,2807,2468,2810,2468,2813,2816,2817,2819,2820,2823,2824,2827,2828,2830,2831,1899],{},[950,2791,2753],{},[950,2793,2794],{},"loadDevUnlock()"," skip the unlock ceremony entirely on every page load by writing the keyring's DEKs to browser storage — it exists purely to remove secret re-entry from the hot-reload inner loop. It refuses to run unless ",[950,2797,2798],{},"NODE_ENV"," is not ",[950,2801,2802],{},"production"," and the hostname is ",[950,2805,2806],{},"localhost",[950,2808,2809],{},"127.0.0.1",[950,2811,2812],{},"::1",[950,2814,2815],{},"*.local",", requires the exact ",[950,2818,2735],{}," string above, and prints an unsuppressable console warning on first use. ",[950,2821,2822],{},"clearDevUnlock()"," removes the stored payload; ",[950,2825,2826],{},"isDevUnlockActive()"," checks whether one exists. It is a separate named import from ",[950,2829,1093],{}," and tree-shakes independently of ",[950,2832,1920],{},[941,2834,2836],{"id":2835},"behavior-when-not-opted-in","Behavior when NOT opted in",[988,2838,2839,2855,2860],{},[991,2840,2841,2842,2844,2845,2848,2849,2852,2853,1899],{},"Setting ",[950,2843,1049],{}," in ",[950,2846,2847],{},"createNoydb"," without ",[950,2850,2851],{},"sessionStrategy: withSession()"," throws at construction time, with a pointer to ",[950,2854,961],{},[991,2856,2857,2859],{},[950,2858,1966],{}," throws under the same gate.",[991,2861,2862,2864],{},[950,2863,1009],{}," is a silent no-op (the registry was never populated).",[941,2866,2868],{"id":2867},"pairs-well-with","Pairs well with",[988,2870,2871,2882,2905],{},[991,2872,2873,2875,2876,2878,2879,2881],{},[955,2874,868],{}," — ",[950,2877,973],{}," restores the same role\u002Fpermissions team assigned at unlock; gating grant\u002Frevoke\u002Frotate behind re-auth requires driving a ",[950,2880,981],{}," yourself (see Usage)",[991,2883,2884,2889,2890,2893,2894,2897,2898,2901,2902,2904],{},[955,2885,2886],{},[2887,2888,625],"a",{"href":626}," — a cloud-store-backed app that gates ",[1023,2891,2892],{},"storage-backend"," access with ",[950,2895,2896],{},"withBroker()"," typically also gates ",[1023,2899,2900],{},"app"," sessions with ",[950,2903,1920],{},"; the two are independent",[991,2906,2907,2910,2911,2914,2915],{},[955,2908,2909],{},"on-webauthn \u002F on-oidc \u002F on-magic-link \u002F on-password"," (separate packages) — unlock paths that produce the ",[950,2912,2913],{},"UnlockedKeyring"," you pass to ",[950,2916,1399],{},[941,2918,2920],{"id":2919},"edge-cases-limits","Edge cases & limits",[988,2922,2923,2931,2937,2967],{},[991,2924,2925,2927,2928,2930],{},[950,2926,2632],{}," registers a ",[950,2929,2647],{}," listener; no-op in non-browser environments.",[991,2932,2933,2934,2936],{},"Absolute timeout overrides idle timeout — you can't extend a session past ",[950,2935,2253],{}," no matter how active you are.",[991,2938,2939,1891,2942,2944,2945,2947,2948,2950,2951,1943,2954,1943,2957,1950,2960,2963,2964,2966],{},[950,2940,2941],{},"PolicyEnforcer.checkOperation(op)",[950,2943,2525],{}," for an ",[950,2946,2489],{}," listed in ",[950,2949,1934],{}," — but only when your own code calls it (see Usage). ",[950,2952,2953],{},"db.grant",[950,2955,2956],{},"db.revoke",[950,2958,2959],{},"db.rotate",[950,2961,2962],{},"db.changeSecret"," do not call it on their own; there is currently no public way to attach an enforcer to a ",[950,2965,62],{}," instance.",[991,2968,2969],{},"The session key store is module-level and tab-scoped: it does not survive a full page reload, and sessions from one tab are not resolvable in another.",[941,2971,2973],{"id":2972},"see-also","See also",[988,2975,2976,2981,2986,2997],{},[991,2977,2978,2980],{},[2887,2979,751],{"href":752}," — planned hub-level observability (timings, cache stats,\nsync stats); session lifecycle timing is the kind of signal it would surface",[991,2982,2983,2985],{},[2887,2984,597],{"href":598}," — the full opt-in catalog",[991,2987,2988,1943,2991,1943,2994],{},[950,2989,2990],{},"__tests__\u002Fsession.test.ts",[950,2992,2993],{},"__tests__\u002Fsession-policy.test.ts",[950,2995,2996],{},"__tests__\u002Fdev-unlock.test.ts",[991,2998,2999,3000,1899],{},"Proven by the recipe walkthrough ",[2887,3001,3005],{"href":3002,"rel":3003},"https:\u002F\u002Fgithub.com\u002Fnoy-db\u002Fdocs\u002Fblob\u002Fmain\u002Fshowcases\u002Fsrc\u002Frecipe-unlock-ceremonies.recipe.test.ts",[3004],"nofollow",[950,3006,3007],{},"recipe-unlock-ceremonies",[3009,3010,3011],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}",{"title":1061,"searchDepth":1120,"depth":1120,"links":3013},[3014,3015,3016,3017,3018,3023,3028,3029,3030,3031,3032],{"id":943,"depth":1099,"text":944},{"id":985,"depth":1099,"text":986},{"id":1012,"depth":1099,"text":1013},{"id":1053,"depth":1099,"text":1054},{"id":1388,"depth":1099,"text":1389,"children":3019},[3020,3021,3022],{"id":1393,"depth":1120,"text":1394},{"id":1902,"depth":1120,"text":1903},{"id":2261,"depth":1120,"text":2262},{"id":2345,"depth":1099,"text":2346,"children":3024},[3025,3026,3027],{"id":2536,"depth":1120,"text":2424},{"id":2662,"depth":1120,"text":2665},{"id":2709,"depth":1120,"text":2712},{"id":2786,"depth":1099,"text":2787},{"id":2835,"depth":1099,"text":2836},{"id":2867,"depth":1099,"text":2868},{"id":2919,"depth":1099,"text":2920},{"id":2972,"depth":1099,"text":2973},null,"Serializable session tokens that skip re-running the unlock ceremony, plus a SessionPolicy for idle\u002Fabsolute timeouts and re-auth gates.","md",{},"service",{"title":840,"description":3034},"stable","important","zsEXKo7QVeCgADirXdUbR_hgZ7hHqJTCqOviuiAZZXE",{"data":3043,"body":3044},{},{"type":3045,"children":3046},"root",[3047],{"type":3048,"tag":946,"props":3049,"children":3050},"element",{},[3051],{"type":3052,"value":3053},"text","G — Collaboration & Auth",{"data":3055,"body":3056},{},{"type":3045,"children":3057},[3058],{"type":3048,"tag":946,"props":3059,"children":3060},{},[3061],{"type":3048,"tag":950,"props":3062,"children":3064},{"className":3063},[],[3065],{"type":3052,"value":961},{"data":3067,"body":3068},{},{"type":3045,"children":3069},[3070],{"type":3048,"tag":946,"props":3071,"children":3072},{},[3073],{"type":3048,"tag":950,"props":3074,"children":3076},{"className":3075},[],[3077],{"type":3052,"value":1920},{"data":3079,"body":3080},{},{"type":3045,"children":3081},[3082],{"type":3048,"tag":946,"props":3083,"children":3084},{},[3085],{"type":3052,"value":3086},"~495 (off-bundle when not opted in)",1791896590533]