[{"data":1,"prerenderedAt":2999},["ShallowReactive",2],{"navigation":3,"\u002Fservices\u002Ftransferable-partitions":927,"mdc--ftuop3-key":2792,"mdc--lw52c-key":2803,"mdc-k9ckfx-key":2907,"mdc--2hdkl1-key":2965,"mdc--gfdecs-key":2978},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":929,"access":12,"apiToc":930,"body":931,"category":2782,"description":2783,"extension":2784,"meta":2785,"navigation":2786,"nest":2787,"path":881,"seo":2788,"sinceVersion":2782,"status":2789,"stem":882,"subtitle":2782,"tier":2790,"tocExternal":2782,"__hash__":2791},"docs\u002Fservices\u002Ftransferable-partitions.md","transferable partitions",false,{"type":932,"value":933,"toc":2767},"minimark",[934,938,942,947,986,990,1003,1007,1032,1036,1075,1310,1314,1324,1905,1909,1917,1938,1942,2417,2421,2475,2479,2522,2525,2564,2568,2585,2618,2621,2707,2711,2763],[935,936,929],"h1",{"id":937},"transferable-partitions",[939,940],"service-meta",{":rows":941},"[{\"label\":\"Subpath\",\"value\":\"`@noy-db\u002Fhub\u002Fcargo`, on every published version since the `\u002Fpod` + `\u002Fcargo` split (noy-db#833, #812) — `\u002Fcargo` carries `describeExtraction`, `extractPartition`, `adoptPartition`, `createOwnerOnAdoptedPartition` and `walkClosure`. The old `@noy-db\u002Fhub\u002Fbundle` was last present in 0.3.0 and is gone from both rails, so there is no longer a version where it is the right import. (`\u002Fbundle` also re-exported the unrelated `.noydb` container helpers; those live on `\u002Fpod` — see [bundle](.\u002Fbundle.md).)\"},{\"label\":\"Factory\",\"value\":\"`withCargo()` gates the source-side `extractPartition`; `describeExtraction`, `adoptPartition`, `createOwnerOnAdoptedPartition`, and `walkClosure` are ungated named imports. `withCargo()` itself is exported from `@noy-db\u002Fhub\u002Fcargo`.\"},{\"label\":\"Layer\",\"value\":\"`with-cargo`\"},{\"label\":\"Cluster\",\"value\":\"F — Snapshot & Portability\"},{\"label\":\"LOC cost\",\"value\":\"off-bundle when not opted in — the extraction crypto is dynamically imported only once `withCargo()` is passed to `createNoydb()`\"}]",[943,944,946],"h2",{"id":945},"what-it-does","What it does",[948,949,950,951,955,956,960,961,964,965,969,970,973,974,977,978,981,982,985],"p",{},"A ",[952,953,954],"strong",{},"vault"," is noy-db's end-to-end-encrypted, per-tenant data space (see\n",[957,958,959],"a",{"href":48},"Vaults & collections","). Transferable partitions let an owner\ncarve a subset of one vault's records out into a ",[952,962,963],{},"new, independently-owned vault"," — an\nowner-transfer ceremony, not a data export. Starting from a seed predicate (e.g. \"every client row\nwhere ",[966,967,968],"code",{},"operatorUserId"," equals X\"), it walks the foreign-key closure so every reference resolves,\nre-encrypts the selected records under ",[952,971,972],{},"fresh per-collection data-encryption keys (DEKs)",", and\nseals those DEKs under a ",[952,975,976],{},"one-time transfer key",". The recipient adopts the resulting bundle into\ntheir own store and mints the first owner ",[952,979,980],{},"keyring"," (the per-user file of wrapped encryption keys\n— see ",[957,983,984],{"href":54},"Core 06 — Permissions and keyring","); from that point they\nhold the only keys, and the source owner has no path back into the partition. The source vault is left untouched (aside from an\noptional audit entry) — extraction is a copy, not a move.",[943,987,989],{"id":988},"when-you-need-it","When you need it",[991,992,993,997,1000],"ul",{},[994,995,996],"li",{},"A firm spins a sub-portfolio off into a dedicated department's own vault — for example, handing\none client group's records (bills, receipts, worker rosters) to a new owner when that department\nsplits off.",[994,998,999],{},"A client exercises data portability — taking the records they control to a new provider, with\naudit and schema fidelity intact, as a cryptographic right rather than a vendor favour.",[994,1001,1002],{},"Splitting a shared vault along an ownership boundary without a manual dump-and-replay, which loses\nthe FK closure, schema, and audit chain.",[943,1004,1006],{"id":1005},"prerequisites","Prerequisites",[991,1008,1009,1022],{},[994,1010,1011,1017,1018,1021],{},[952,1012,1013,1016],{},[966,1014,1015],{},"cargoStrategy: withCargo()"," on the source vault's client"," — it gates ",[966,1019,1020],{},"extractPartition"," only; the recipient side adopts with ungated named imports and needs no opt-in.",[994,1023,1024,1027,1028,1031],{},[952,1025,1026],{},"The mandated Shamir recovery profile at partition creation"," — the ",[966,1029,1030],{},"@noy-db\u002Fon-shamir"," provider must be injected when the partition is created, or it cannot be extracted later.",[943,1033,1035],{"id":1034},"opt-in","Opt in",[948,1037,1038,1041,1042,1041,1045,1048,1049,1052,1053,1055,1056,1058,1059,1062,1063,1066,1067,1070,1071,1074],{},[966,1039,1040],{},"describeExtraction",", ",[966,1043,1044],{},"adoptPartition",[966,1046,1047],{},"createOwnerOnAdoptedPartition",", and ",[966,1050,1051],{},"walkClosure"," tree-shake\nnaturally via direct named imports — no strategy to wire in. The source-side ",[966,1054,1020],{}," is\nthe one gated call: pass ",[966,1057,1015],{}," to ",[966,1060,1061],{},"createNoydb()"," on the ",[952,1064,1065],{},"source"," vault's\nclient, or it throws ",[966,1068,1069],{},"CargoNotEnabledError",". The recipient side never needs ",[966,1072,1073],{},"withCargo()"," — adoption\ncarries no source instance to gate against.",[1076,1077,1082],"pre",{"className":1078,"code":1079,"language":1080,"meta":1081,"style":1081},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb } from '@noy-db\u002Fhub'\nimport { toMemory } from '@noy-db\u002Fto-memory'\nimport { withCargo } from '@noy-db\u002Fhub\u002Fcargo'\n\n\u002F\u002F ── Source side (owner only) ──────────────────────────────────────────\nconst source = await createNoydb({\n  store: toMemory(),\n  user: 'alice',\n  secret: 'source-owner-secret',\n  cargoStrategy: withCargo(), \u002F\u002F required for extractPartition below\n})\nconst sourceVault = await source.openVault('acme')\n","ts","",[966,1083,1084,1117,1138,1159,1166,1173,1198,1216,1234,1251,1269,1278],{"__ignoreMap":1081},[1085,1086,1089,1093,1097,1101,1104,1107,1110,1114],"span",{"class":1087,"line":1088},"line",1,[1085,1090,1092],{"class":1091},"s7zQu","import",[1085,1094,1096],{"class":1095},"sMK4o"," {",[1085,1098,1100],{"class":1099},"sTEyZ"," createNoydb",[1085,1102,1103],{"class":1095}," }",[1085,1105,1106],{"class":1091}," from",[1085,1108,1109],{"class":1095}," '",[1085,1111,1113],{"class":1112},"sfazB","@noy-db\u002Fhub",[1085,1115,1116],{"class":1095},"'\n",[1085,1118,1120,1122,1124,1127,1129,1131,1133,1136],{"class":1087,"line":1119},2,[1085,1121,1092],{"class":1091},[1085,1123,1096],{"class":1095},[1085,1125,1126],{"class":1099}," toMemory",[1085,1128,1103],{"class":1095},[1085,1130,1106],{"class":1091},[1085,1132,1109],{"class":1095},[1085,1134,1135],{"class":1112},"@noy-db\u002Fto-memory",[1085,1137,1116],{"class":1095},[1085,1139,1141,1143,1145,1148,1150,1152,1154,1157],{"class":1087,"line":1140},3,[1085,1142,1092],{"class":1091},[1085,1144,1096],{"class":1095},[1085,1146,1147],{"class":1099}," withCargo",[1085,1149,1103],{"class":1095},[1085,1151,1106],{"class":1091},[1085,1153,1109],{"class":1095},[1085,1155,1156],{"class":1112},"@noy-db\u002Fhub\u002Fcargo",[1085,1158,1116],{"class":1095},[1085,1160,1162],{"class":1087,"line":1161},4,[1085,1163,1165],{"emptyLinePlaceholder":1164},true,"\n",[1085,1167,1169],{"class":1087,"line":1168},5,[1085,1170,1172],{"class":1171},"sHwdD","\u002F\u002F ── Source side (owner only) ──────────────────────────────────────────\n",[1085,1174,1176,1180,1183,1186,1189,1192,1195],{"class":1087,"line":1175},6,[1085,1177,1179],{"class":1178},"spNyl","const",[1085,1181,1182],{"class":1099}," source ",[1085,1184,1185],{"class":1095},"=",[1085,1187,1188],{"class":1091}," await",[1085,1190,1100],{"class":1191},"s2Zo4",[1085,1193,1194],{"class":1099},"(",[1085,1196,1197],{"class":1095},"{\n",[1085,1199,1201,1205,1208,1210,1213],{"class":1087,"line":1200},7,[1085,1202,1204],{"class":1203},"swJcz","  store",[1085,1206,1207],{"class":1095},":",[1085,1209,1126],{"class":1191},[1085,1211,1212],{"class":1099},"()",[1085,1214,1215],{"class":1095},",\n",[1085,1217,1219,1222,1224,1226,1229,1232],{"class":1087,"line":1218},8,[1085,1220,1221],{"class":1203},"  user",[1085,1223,1207],{"class":1095},[1085,1225,1109],{"class":1095},[1085,1227,1228],{"class":1112},"alice",[1085,1230,1231],{"class":1095},"'",[1085,1233,1215],{"class":1095},[1085,1235,1237,1240,1242,1244,1247,1249],{"class":1087,"line":1236},9,[1085,1238,1239],{"class":1203},"  secret",[1085,1241,1207],{"class":1095},[1085,1243,1109],{"class":1095},[1085,1245,1246],{"class":1112},"source-owner-secret",[1085,1248,1231],{"class":1095},[1085,1250,1215],{"class":1095},[1085,1252,1254,1257,1259,1261,1263,1266],{"class":1087,"line":1253},10,[1085,1255,1256],{"class":1203},"  cargoStrategy",[1085,1258,1207],{"class":1095},[1085,1260,1147],{"class":1191},[1085,1262,1212],{"class":1099},[1085,1264,1265],{"class":1095},",",[1085,1267,1268],{"class":1171}," \u002F\u002F required for extractPartition below\n",[1085,1270,1272,1275],{"class":1087,"line":1271},11,[1085,1273,1274],{"class":1095},"}",[1085,1276,1277],{"class":1099},")\n",[1085,1279,1281,1283,1286,1288,1290,1293,1296,1299,1301,1303,1306,1308],{"class":1087,"line":1280},12,[1085,1282,1179],{"class":1178},[1085,1284,1285],{"class":1099}," sourceVault ",[1085,1287,1185],{"class":1095},[1085,1289,1188],{"class":1091},[1085,1291,1292],{"class":1099}," source",[1085,1294,1295],{"class":1095},".",[1085,1297,1298],{"class":1191},"openVault",[1085,1300,1194],{"class":1099},[1085,1302,1231],{"class":1095},[1085,1304,1305],{"class":1112},"acme",[1085,1307,1231],{"class":1095},[1085,1309,1277],{"class":1099},[943,1311,1313],{"id":1312},"usage","Usage",[948,1315,1316,1317,1319,1320,1323],{},"Continuing from the ",[966,1318,1065],{}," client and ",[966,1321,1322],{},"sourceVault"," opened above, the transfer runs in four\nsteps: preview, extract (source side), adopt, then mint the recipient's owner (recipient side).",[1076,1325,1327],{"className":1078,"code":1326,"language":1080,"meta":1081,"style":1081},"import {\n  describeExtraction,\n  extractPartition,\n  adoptPartition,\n  createOwnerOnAdoptedPartition,\n} from '@noy-db\u002Fhub\u002Fcargo'\n\nconst preview = await describeExtraction(sourceVault, {\n  seeds: { clients: (c) => c.operatorUserId === 'ops-team-42' },\n})\n\u002F\u002F → {\n\u002F\u002F     totalRecords: 128,\n\u002F\u002F     totalBytes: 41230,\n\u002F\u002F     byCollection: [\n\u002F\u002F       { name: 'bills', recordCount: 54, bytes: 18120, oldestTs: '2026-01-04T…', newestTs: '2026-06-30T…' },\n\u002F\u002F       { name: 'clients', recordCount: 12, bytes: 3110 },\n\u002F\u002F       { name: 'workers', recordCount: 62, bytes: 20000 },\n\u002F\u002F     ],\n\u002F\u002F     graph: { depth: 2, cyclesDetected: false },\n\u002F\u002F     inaccessible: [],\n\u002F\u002F   }\n\u002F\u002F Computed from raw encrypted envelopes — decrypts nothing.\n\nconst { bundleBytes, transferKey, sealId } = await extractPartition(sourceVault, {\n  seeds: { clients: (c) => c.operatorUserId === 'ops-team-42' },\n  carrySchemas: true, \u002F\u002F optional — carry persisted JSON Schemas (default false)\n  carryLedger: true,  \u002F\u002F optional — carry the re-chained audit ledger (default false)\n})\n\u002F\u002F → { bundleBytes: Uint8Array(…), transferKey: Uint8Array(32), sealId: 'nQ3f…' }\n\u002F\u002F Deliver `transferKey` out-of-band; it never travels inside `bundleBytes`.\n\n\u002F\u002F ── Recipient side (ungated) ────────────────────────────────────────────\nconst destinationStore = toMemory()\nawait adoptPartition(bundleBytes, { transferKey, destinationStore, vaultName: 'dept-spinoff' })\n\u002F\u002F → { vaultName: 'dept-spinoff', needsOwner: true, sealId: 'nQ3f…' }\n\nawait createOwnerOnAdoptedPartition(destinationStore, 'dept-spinoff', {\n  userId: 'bob',\n  secret: 'recipient-owner-secret',\n  transferKey,\n})\n\u002F\u002F → { vaultName: 'dept-spinoff', userId: 'bob' }\n\n\u002F\u002F Now open it normally — a keyring exists.\nconst recipient = await createNoydb({ store: destinationStore, user: 'bob', secret: 'recipient-owner-secret' })\nconst deptVault = await recipient.openVault('dept-spinoff')\n",[966,1328,1329,1336,1343,1350,1357,1364,1376,1380,1401,1449,1455,1460,1465,1471,1477,1483,1489,1495,1501,1507,1513,1519,1525,1530,1566,1603,1620,1635,1642,1648,1654,1659,1665,1680,1721,1727,1732,1755,1772,1788,1796,1803,1809,1814,1820,1876],{"__ignoreMap":1081},[1085,1330,1331,1333],{"class":1087,"line":1088},[1085,1332,1092],{"class":1091},[1085,1334,1335],{"class":1095}," {\n",[1085,1337,1338,1341],{"class":1087,"line":1119},[1085,1339,1340],{"class":1099},"  describeExtraction",[1085,1342,1215],{"class":1095},[1085,1344,1345,1348],{"class":1087,"line":1140},[1085,1346,1347],{"class":1099},"  extractPartition",[1085,1349,1215],{"class":1095},[1085,1351,1352,1355],{"class":1087,"line":1161},[1085,1353,1354],{"class":1099},"  adoptPartition",[1085,1356,1215],{"class":1095},[1085,1358,1359,1362],{"class":1087,"line":1168},[1085,1360,1361],{"class":1099},"  createOwnerOnAdoptedPartition",[1085,1363,1215],{"class":1095},[1085,1365,1366,1368,1370,1372,1374],{"class":1087,"line":1175},[1085,1367,1274],{"class":1095},[1085,1369,1106],{"class":1091},[1085,1371,1109],{"class":1095},[1085,1373,1156],{"class":1112},[1085,1375,1116],{"class":1095},[1085,1377,1378],{"class":1087,"line":1200},[1085,1379,1165],{"emptyLinePlaceholder":1164},[1085,1381,1382,1384,1387,1389,1391,1394,1397,1399],{"class":1087,"line":1218},[1085,1383,1179],{"class":1178},[1085,1385,1386],{"class":1099}," preview ",[1085,1388,1185],{"class":1095},[1085,1390,1188],{"class":1091},[1085,1392,1393],{"class":1191}," describeExtraction",[1085,1395,1396],{"class":1099},"(sourceVault",[1085,1398,1265],{"class":1095},[1085,1400,1335],{"class":1095},[1085,1402,1403,1406,1408,1410,1413,1415,1418,1422,1425,1428,1431,1433,1436,1439,1441,1444,1446],{"class":1087,"line":1236},[1085,1404,1405],{"class":1203},"  seeds",[1085,1407,1207],{"class":1095},[1085,1409,1096],{"class":1095},[1085,1411,1412],{"class":1191}," clients",[1085,1414,1207],{"class":1095},[1085,1416,1417],{"class":1095}," (",[1085,1419,1421],{"class":1420},"sHdIc","c",[1085,1423,1424],{"class":1095},")",[1085,1426,1427],{"class":1178}," =>",[1085,1429,1430],{"class":1099}," c",[1085,1432,1295],{"class":1095},[1085,1434,1435],{"class":1099},"operatorUserId ",[1085,1437,1438],{"class":1095},"===",[1085,1440,1109],{"class":1095},[1085,1442,1443],{"class":1112},"ops-team-42",[1085,1445,1231],{"class":1095},[1085,1447,1448],{"class":1095}," },\n",[1085,1450,1451,1453],{"class":1087,"line":1253},[1085,1452,1274],{"class":1095},[1085,1454,1277],{"class":1099},[1085,1456,1457],{"class":1087,"line":1271},[1085,1458,1459],{"class":1171},"\u002F\u002F → {\n",[1085,1461,1462],{"class":1087,"line":1280},[1085,1463,1464],{"class":1171},"\u002F\u002F     totalRecords: 128,\n",[1085,1466,1468],{"class":1087,"line":1467},13,[1085,1469,1470],{"class":1171},"\u002F\u002F     totalBytes: 41230,\n",[1085,1472,1474],{"class":1087,"line":1473},14,[1085,1475,1476],{"class":1171},"\u002F\u002F     byCollection: [\n",[1085,1478,1480],{"class":1087,"line":1479},15,[1085,1481,1482],{"class":1171},"\u002F\u002F       { name: 'bills', recordCount: 54, bytes: 18120, oldestTs: '2026-01-04T…', newestTs: '2026-06-30T…' },\n",[1085,1484,1486],{"class":1087,"line":1485},16,[1085,1487,1488],{"class":1171},"\u002F\u002F       { name: 'clients', recordCount: 12, bytes: 3110 },\n",[1085,1490,1492],{"class":1087,"line":1491},17,[1085,1493,1494],{"class":1171},"\u002F\u002F       { name: 'workers', recordCount: 62, bytes: 20000 },\n",[1085,1496,1498],{"class":1087,"line":1497},18,[1085,1499,1500],{"class":1171},"\u002F\u002F     ],\n",[1085,1502,1504],{"class":1087,"line":1503},19,[1085,1505,1506],{"class":1171},"\u002F\u002F     graph: { depth: 2, cyclesDetected: false },\n",[1085,1508,1510],{"class":1087,"line":1509},20,[1085,1511,1512],{"class":1171},"\u002F\u002F     inaccessible: [],\n",[1085,1514,1516],{"class":1087,"line":1515},21,[1085,1517,1518],{"class":1171},"\u002F\u002F   }\n",[1085,1520,1522],{"class":1087,"line":1521},22,[1085,1523,1524],{"class":1171},"\u002F\u002F Computed from raw encrypted envelopes — decrypts nothing.\n",[1085,1526,1528],{"class":1087,"line":1527},23,[1085,1529,1165],{"emptyLinePlaceholder":1164},[1085,1531,1533,1535,1537,1540,1542,1545,1547,1550,1552,1555,1557,1560,1562,1564],{"class":1087,"line":1532},24,[1085,1534,1179],{"class":1178},[1085,1536,1096],{"class":1095},[1085,1538,1539],{"class":1099}," bundleBytes",[1085,1541,1265],{"class":1095},[1085,1543,1544],{"class":1099}," transferKey",[1085,1546,1265],{"class":1095},[1085,1548,1549],{"class":1099}," sealId ",[1085,1551,1274],{"class":1095},[1085,1553,1554],{"class":1095}," =",[1085,1556,1188],{"class":1091},[1085,1558,1559],{"class":1191}," extractPartition",[1085,1561,1396],{"class":1099},[1085,1563,1265],{"class":1095},[1085,1565,1335],{"class":1095},[1085,1567,1569,1571,1573,1575,1577,1579,1581,1583,1585,1587,1589,1591,1593,1595,1597,1599,1601],{"class":1087,"line":1568},25,[1085,1570,1405],{"class":1203},[1085,1572,1207],{"class":1095},[1085,1574,1096],{"class":1095},[1085,1576,1412],{"class":1191},[1085,1578,1207],{"class":1095},[1085,1580,1417],{"class":1095},[1085,1582,1421],{"class":1420},[1085,1584,1424],{"class":1095},[1085,1586,1427],{"class":1178},[1085,1588,1430],{"class":1099},[1085,1590,1295],{"class":1095},[1085,1592,1435],{"class":1099},[1085,1594,1438],{"class":1095},[1085,1596,1109],{"class":1095},[1085,1598,1443],{"class":1112},[1085,1600,1231],{"class":1095},[1085,1602,1448],{"class":1095},[1085,1604,1606,1609,1611,1615,1617],{"class":1087,"line":1605},26,[1085,1607,1608],{"class":1203},"  carrySchemas",[1085,1610,1207],{"class":1095},[1085,1612,1614],{"class":1613},"sfNiH"," true",[1085,1616,1265],{"class":1095},[1085,1618,1619],{"class":1171}," \u002F\u002F optional — carry persisted JSON Schemas (default false)\n",[1085,1621,1623,1626,1628,1630,1632],{"class":1087,"line":1622},27,[1085,1624,1625],{"class":1203},"  carryLedger",[1085,1627,1207],{"class":1095},[1085,1629,1614],{"class":1613},[1085,1631,1265],{"class":1095},[1085,1633,1634],{"class":1171},"  \u002F\u002F optional — carry the re-chained audit ledger (default false)\n",[1085,1636,1638,1640],{"class":1087,"line":1637},28,[1085,1639,1274],{"class":1095},[1085,1641,1277],{"class":1099},[1085,1643,1645],{"class":1087,"line":1644},29,[1085,1646,1647],{"class":1171},"\u002F\u002F → { bundleBytes: Uint8Array(…), transferKey: Uint8Array(32), sealId: 'nQ3f…' }\n",[1085,1649,1651],{"class":1087,"line":1650},30,[1085,1652,1653],{"class":1171},"\u002F\u002F Deliver `transferKey` out-of-band; it never travels inside `bundleBytes`.\n",[1085,1655,1657],{"class":1087,"line":1656},31,[1085,1658,1165],{"emptyLinePlaceholder":1164},[1085,1660,1662],{"class":1087,"line":1661},32,[1085,1663,1664],{"class":1171},"\u002F\u002F ── Recipient side (ungated) ────────────────────────────────────────────\n",[1085,1666,1668,1670,1673,1675,1677],{"class":1087,"line":1667},33,[1085,1669,1179],{"class":1178},[1085,1671,1672],{"class":1099}," destinationStore ",[1085,1674,1185],{"class":1095},[1085,1676,1126],{"class":1191},[1085,1678,1679],{"class":1099},"()\n",[1085,1681,1683,1686,1689,1692,1694,1696,1698,1700,1703,1705,1708,1710,1712,1715,1717,1719],{"class":1087,"line":1682},34,[1085,1684,1685],{"class":1091},"await",[1085,1687,1688],{"class":1191}," adoptPartition",[1085,1690,1691],{"class":1099},"(bundleBytes",[1085,1693,1265],{"class":1095},[1085,1695,1096],{"class":1095},[1085,1697,1544],{"class":1099},[1085,1699,1265],{"class":1095},[1085,1701,1702],{"class":1099}," destinationStore",[1085,1704,1265],{"class":1095},[1085,1706,1707],{"class":1203}," vaultName",[1085,1709,1207],{"class":1095},[1085,1711,1109],{"class":1095},[1085,1713,1714],{"class":1112},"dept-spinoff",[1085,1716,1231],{"class":1095},[1085,1718,1103],{"class":1095},[1085,1720,1277],{"class":1099},[1085,1722,1724],{"class":1087,"line":1723},35,[1085,1725,1726],{"class":1171},"\u002F\u002F → { vaultName: 'dept-spinoff', needsOwner: true, sealId: 'nQ3f…' }\n",[1085,1728,1730],{"class":1087,"line":1729},36,[1085,1731,1165],{"emptyLinePlaceholder":1164},[1085,1733,1735,1737,1740,1743,1745,1747,1749,1751,1753],{"class":1087,"line":1734},37,[1085,1736,1685],{"class":1091},[1085,1738,1739],{"class":1191}," createOwnerOnAdoptedPartition",[1085,1741,1742],{"class":1099},"(destinationStore",[1085,1744,1265],{"class":1095},[1085,1746,1109],{"class":1095},[1085,1748,1714],{"class":1112},[1085,1750,1231],{"class":1095},[1085,1752,1265],{"class":1095},[1085,1754,1335],{"class":1095},[1085,1756,1758,1761,1763,1765,1768,1770],{"class":1087,"line":1757},38,[1085,1759,1760],{"class":1203},"  userId",[1085,1762,1207],{"class":1095},[1085,1764,1109],{"class":1095},[1085,1766,1767],{"class":1112},"bob",[1085,1769,1231],{"class":1095},[1085,1771,1215],{"class":1095},[1085,1773,1775,1777,1779,1781,1784,1786],{"class":1087,"line":1774},39,[1085,1776,1239],{"class":1203},[1085,1778,1207],{"class":1095},[1085,1780,1109],{"class":1095},[1085,1782,1783],{"class":1112},"recipient-owner-secret",[1085,1785,1231],{"class":1095},[1085,1787,1215],{"class":1095},[1085,1789,1791,1794],{"class":1087,"line":1790},40,[1085,1792,1793],{"class":1099},"  transferKey",[1085,1795,1215],{"class":1095},[1085,1797,1799,1801],{"class":1087,"line":1798},41,[1085,1800,1274],{"class":1095},[1085,1802,1277],{"class":1099},[1085,1804,1806],{"class":1087,"line":1805},42,[1085,1807,1808],{"class":1171},"\u002F\u002F → { vaultName: 'dept-spinoff', userId: 'bob' }\n",[1085,1810,1812],{"class":1087,"line":1811},43,[1085,1813,1165],{"emptyLinePlaceholder":1164},[1085,1815,1817],{"class":1087,"line":1816},44,[1085,1818,1819],{"class":1171},"\u002F\u002F Now open it normally — a keyring exists.\n",[1085,1821,1823,1825,1828,1830,1832,1834,1836,1839,1842,1844,1846,1848,1851,1853,1855,1857,1859,1861,1864,1866,1868,1870,1872,1874],{"class":1087,"line":1822},45,[1085,1824,1179],{"class":1178},[1085,1826,1827],{"class":1099}," recipient ",[1085,1829,1185],{"class":1095},[1085,1831,1188],{"class":1091},[1085,1833,1100],{"class":1191},[1085,1835,1194],{"class":1099},[1085,1837,1838],{"class":1095},"{",[1085,1840,1841],{"class":1203}," store",[1085,1843,1207],{"class":1095},[1085,1845,1702],{"class":1099},[1085,1847,1265],{"class":1095},[1085,1849,1850],{"class":1203}," user",[1085,1852,1207],{"class":1095},[1085,1854,1109],{"class":1095},[1085,1856,1767],{"class":1112},[1085,1858,1231],{"class":1095},[1085,1860,1265],{"class":1095},[1085,1862,1863],{"class":1203}," secret",[1085,1865,1207],{"class":1095},[1085,1867,1109],{"class":1095},[1085,1869,1783],{"class":1112},[1085,1871,1231],{"class":1095},[1085,1873,1103],{"class":1095},[1085,1875,1277],{"class":1099},[1085,1877,1879,1881,1884,1886,1888,1891,1893,1895,1897,1899,1901,1903],{"class":1087,"line":1878},46,[1085,1880,1179],{"class":1178},[1085,1882,1883],{"class":1099}," deptVault ",[1085,1885,1185],{"class":1095},[1085,1887,1188],{"class":1091},[1085,1889,1890],{"class":1099}," recipient",[1085,1892,1295],{"class":1095},[1085,1894,1298],{"class":1191},[1085,1896,1194],{"class":1099},[1085,1898,1231],{"class":1095},[1085,1900,1714],{"class":1112},[1085,1902,1231],{"class":1095},[1085,1904,1277],{"class":1099},[943,1906,1908],{"id":1907},"lifecycle","Lifecycle",[1076,1910,1915],{"className":1911,"code":1913,"language":1914},[1912],"language-text","source vault ──extractPartition──▶ extracted bundle ──adoptPartition──▶ ADOPTED, UNOWNED ──createOwnerOnAdoptedPartition──▶ OWNED\n (owner only)  re-keyed, sealed,    _meta\u002Fadoption,    recipient keyring,\n               bundleKind header     keyring empty       seal destroyed\n","text",[966,1916,1913],{"__ignoreMap":1081},[948,1918,1919,1920,1929,1930,1933,1934,1937],{},"The FK graph is ",[952,1921,1922,1923],{},"auto-derived from ",[957,1924,1925,1928],{"href":682},[966,1926,1927],{},"ref()"," declarations"," (tracked\ninternally as the ",[966,1931,1932],{},"RefRegistry",") — you supply only ",[966,1935,1936],{},"seeds",", not a hand-written edge list. The walk is\ntwo-phase: inbound expansion grows the scope from the seeds (a client's bills travel with it), then\noutbound completion pulls referenced parents so no FK dangles (without re-expanding those parents\ninto unrelated siblings).",[943,1939,1941],{"id":1940},"api","API",[991,1943,1944,1972,2146,2155,2344,2355,2367,2379,2390],{},[994,1945,1946,1949,1950,1953,1954,1957,1958,1961,1962,1964,1965,1968,1969,1971],{},[966,1947,1948],{},"describeExtraction(vault, { seeds, maxDepth? })"," → ",[966,1951,1952],{},"ExtractionPreview"," — read-only dry-run\n(counts, bytes, ",[966,1955,1956],{},"_ts"," span, graph depth, ",[966,1959,1960],{},"inaccessible[]","); writes nothing. Takes the same\n",[966,1963,1936],{},"\u002F",[966,1966,1967],{},"maxDepth"," as ",[966,1970,1051],{}," below.",[994,1973,1974,1949,1977,1980,1981,1984,1985,1988,1989,1295,1991],{},[966,1975,1976],{},"extractPartition(vault, options)",[966,1978,1979],{},"{ bundleBytes, transferKey, sealId }"," — ",[952,1982,1983],{},"owner-only",";\nnon-destructive on the source. Routes through the vault's ",[966,1986,1987],{},"cargoStrategy",", so an un-opted-in\ncaller throws ",[966,1990,1069],{},[1992,1993,1994,2013],"table",{},[1995,1996,1997],"thead",{},[1998,1999,2000,2004,2007,2010],"tr",{},[2001,2002,2003],"th",{},"Option",[2001,2005,2006],{},"Type",[2001,2008,2009],{},"Default",[2001,2011,2012],{},"Purpose",[2014,2015,2016,2034,2056,2076,2104,2124],"tbody",{},[1998,2017,2018,2023,2028,2031],{},[2019,2020,2021],"td",{},[966,2022,1936],{},[2019,2024,2025],{},[966,2026,2027],{},"Record\u003Cstring, (record) => boolean | Promise\u003Cboolean>>",[2019,2029,2030],{},"required",[2019,2032,2033],{},"Per-collection predicate selecting the root records the closure grows from.",[1998,2035,2036,2040,2045,2050],{},[2019,2037,2038],{},[966,2039,1967],{},[2019,2041,2042],{},[966,2043,2044],{},"number",[2019,2046,2047],{},[966,2048,2049],{},"16",[2019,2051,2052,2053,1295],{},"Max fixed-point iterations of the inbound\u002Foutbound walk before throwing ",[966,2054,2055],{},"PartitionExtractionError",[1998,2057,2058,2063,2068,2073],{},[2019,2059,2060],{},[966,2061,2062],{},"compression",[2019,2064,2065],{},[966,2066,2067],{},"'auto' | 'brotli' | 'gzip' | 'none'",[2019,2069,2070],{},[966,2071,2072],{},"'auto'",[2019,2074,2075],{},"Bundle-byte compression.",[1998,2077,2078,2083,2088,2093],{},[2019,2079,2080],{},[966,2081,2082],{},"carrySchemas",[2019,2084,2085],{},[966,2086,2087],{},"boolean",[2019,2089,2090],{},[966,2091,2092],{},"false",[2019,2094,2095,2096,2099,2100,1295],{},"Re-key and carry ",[966,2097,2098],{},"_schemas\u002F\u003Ccollection>"," for the closure — see ",[957,2101,2103],{"href":2102},"#carry-opt-ins","Carry opt-ins",[1998,2105,2106,2111,2115,2119],{},[2019,2107,2108],{},[966,2109,2110],{},"carryLedger",[2019,2112,2113],{},[966,2114,2087],{},[2019,2116,2117],{},[966,2118,2092],{},[2019,2120,2121,2122,1295],{},"Filter, re-chain, and carry the audit ledger for the closure — see ",[957,2123,2103],{"href":2102},[1998,2125,2126,2131,2136,2139],{},[2019,2127,2128],{},[966,2129,2130],{},"fieldProjection",[2019,2132,2133],{},[966,2134,2135],{},"Record\u003Cstring, readonly string[]>",[2019,2137,2138],{},"none",[2019,2140,2141,2142,2145],{},"Per-collection allow-list of fields to keep; non-listed fields are dropped before re-encryption (",[966,2143,2144],{},"id"," is always kept). A projected collection's schema is not carried.",[994,2147,2148,2151,2152,1295],{},[966,2149,2150],{},"adoptPartition(bundleBytes, { transferKey, destinationStore, vaultName })"," →\n",[966,2153,2154],{},"{ vaultName, needsOwner: true, sealId }",[994,2156,2157,1949,2160,2163,2164,2167,2168,2229],{},[966,2158,2159],{},"createOwnerOnAdoptedPartition(store, vaultName, options)",[966,2161,2162],{},"{ vaultName, userId }"," — mints the\nfirst owner and destroys the transfer seal. ",[966,2165,2166],{},"options"," is one of two shapes:",[1992,2169,2170,2181],{},[1995,2171,2172],{},[1998,2173,2174,2177,2179],{},[2001,2175,2176],{},"Standard mode",[2001,2178,2006],{},[2001,2180,2012],{},[2014,2182,2183,2198,2212],{},[1998,2184,2185,2190,2195],{},[2019,2186,2187],{},[966,2188,2189],{},"userId",[2019,2191,2192],{},[966,2193,2194],{},"string",[2019,2196,2197],{},"The recipient's user id.",[1998,2199,2200,2205,2209],{},[2019,2201,2202],{},[966,2203,2204],{},"secret",[2019,2206,2207],{},[966,2208,2194],{},[2019,2210,2211],{},"The recipient owner's secret.",[1998,2213,2214,2219,2224],{},[2019,2215,2216],{},[966,2217,2218],{},"transferKey",[2019,2220,2221],{},[966,2222,2223],{},"Uint8Array",[2019,2225,2226,2227,1295],{},"The 32-byte key delivered out-of-band from ",[966,2228,1020],{},[1992,2230,2231,2242],{},[1995,2232,2233],{},[1998,2234,2235,2238,2240],{},[2001,2236,2237],{},"Managed mode",[2001,2239,2006],{},[2001,2241,2012],{},[2014,2243,2244,2256,2271,2290,2312,2330],{},[1998,2245,2246,2250,2254],{},[2019,2247,2248],{},[966,2249,2189],{},[2019,2251,2252],{},[966,2253,2194],{},[2019,2255,2197],{},[1998,2257,2258,2263,2268],{},[2019,2259,2260],{},[966,2261,2262],{},"secretMode",[2019,2264,2265],{},[966,2266,2267],{},"'managed'",[2019,2269,2270],{},"Selects managed mode instead of a caller-supplied secret.",[1998,2272,2273,2278,2283],{},[2019,2274,2275],{},[966,2276,2277],{},"sealingKey",[2019,2279,2280],{},[966,2281,2282],{},"NoydbSealer",[2019,2284,2285,2286,2289],{},"Seals the minted secret (e.g. an ",[966,2287,2288],{},"at-*"," OS keychain) so the partition auto-unlocks on the recipient's device.",[1998,2291,2292,2296,2301],{},[2019,2293,2294],{},[966,2295,321],{},[2019,2297,2298],{},[966,2299,2300],{},"ReadonlyArray\u003CRecoveryEnrollmentInput>",[2019,2302,2303,2304,2306,2307,2311],{},"Recovery profiles to enroll; must include at least one ",[966,2305,325],{}," profile (see ",[957,2308,2310],{"href":2309},"#edge-cases-limits","Edge cases & limits",").",[1998,2313,2314,2319,2324],{},[2019,2315,2316],{},[966,2317,2318],{},"shamirRecovery",[2019,2320,2321],{},[966,2322,2323],{},"NoydbShamir",[2019,2325,2326,2327,2329],{},"The ",[966,2328,1030],{}," provider backing the mandated Shamir profile.",[1998,2331,2332,2336,2340],{},[2019,2333,2334],{},[966,2335,2218],{},[2019,2337,2338],{},[966,2339,2223],{},[2019,2341,2226,2342,1295],{},[966,2343,1020],{},[994,2345,2346,1949,2349,2352,2353,2311],{},[966,2347,2348],{},"walkClosure(vault, { seeds, maxDepth? })",[966,2350,2351],{},"{ closure, graph }"," — the underlying FK-closure\nprimitive (also used by ",[966,2354,1040],{},[994,2356,2357,1949,2360,2363,2364,2366],{},[966,2358,2359],{},"unsealDeks(seal, transferKey)",[966,2361,2362],{},"Map\u003Cstring, CryptoKey>"," — the reverse of the internal DEK-seal\nstep; used internally by ",[966,2365,1044],{}," and exported for callers that need to validate a\ntransfer key without adopting.",[994,2368,2369,1949,2372,2375,2376,2378],{},[966,2370,2371],{},"decryptExtractedPartition(bundleBytes, transferKey)",[966,2373,2374],{},"Record\u003Cstring, DecryptedRecord[]>"," —\nread-side counterpart to ",[966,2377,1020],{},": decrypts every record of an extracted-partition\nbundle to plaintext (grouped by collection) without adopting it into a vault. Throws on a bundle\nthat isn't an extracted partition, or a wrong transfer key.",[994,2380,2381,2382,2385,2386,2389],{},"Header additions (read pre-decryption by cloud listers): ",[966,2383,2384],{},"bundleKind: 'extracted-partition'"," + a\n",[966,2387,2388],{},"transferSeal"," indicator.",[994,2391,2392,2395,2396,1041,2398,1048,2401,2404,2405,2407,2408,2410,2411,2413,2414,1295],{},[952,2393,2394],{},"Errors:"," ",[966,2397,2055],{},[966,2399,2400],{},"TransferSealError",[966,2402,2403],{},"AdoptionStateError"," are\nre-exported alongside the functions above, from ",[966,2406,1156],{}," — the same subpath as\n",[966,2409,1073],{}," and as ",[966,2412,1069],{},", which has always lived there:\n",[966,2415,2416],{},"import { CargoNotEnabledError } from '@noy-db\u002Fhub\u002Fcargo'",[943,2418,2420],{"id":2419},"behavior-when-not-opted-in","Behavior when NOT opted in",[948,2422,2423,2425,2426,2428,2429,2431,2432,2434,2435,2437,2438,2441,2442,1964,2445,2447,2448,2450,2451,2454,2455,2458,2459,2462,2463,1964,2465,2467,2468,2470,2471,2474],{},[966,2424,1020],{}," is the only gated call: without ",[966,2427,1015],{}," on the source\nvault's client, it throws ",[966,2430,1069],{}," pointing you at ",[966,2433,1073],{}," from\n",[966,2436,1156],{},". The recipient-side functions need no opt-in. An ordinary backup (",[966,2439,2440],{},"writePod",")\nhas no ",[966,2443,2444],{},"bundleKind",[966,2446,2388],{},"; ",[966,2449,1044],{}," rejects it with a ",[966,2452,2453],{},"ValidationError"," pointing\nyou to ",[966,2456,2457],{},"readPod"," + ",[966,2460,2461],{},"vault.load"," instead. ",[966,2464,2082],{},[966,2466,2110],{}," default to ",[966,2469,2092],{},", producing\na clean partition with no ",[966,2472,2473],{},"_internal"," payload.",[943,2476,2478],{"id":2477},"security-model","Security model",[991,2480,2481,2487,2495,2510,2516],{},[994,2482,2483,2486],{},[952,2484,2485],{},"Owner-only extraction."," Producing a re-keyed standalone vault is an ownership operation; a\nnon-owner caller (including a custodian) is rejected.",[994,2488,2489,2395,2492,2494],{},[952,2490,2491],{},"The transfer key never travels in the bundle.",[966,2493,1020],{}," mints a random 32-byte key\nand seals the DEK set under it; the bundle bytes alone are inert. Deliver the key out-of-band —\nin person, through a secrets manager, or any channel outside the bundle transport.",[994,2496,2497,2395,2500,2502,2503,2506,2507,2509],{},[952,2498,2499],{},"DEKs stay sealed at rest after adoption.",[966,2501,1044],{}," validates the key by unsealing in\nmemory only; the sealed payload persists in ",[966,2504,2505],{},"_meta\u002Fadoption"," until ",[966,2508,1047],{},"\nwraps the DEKs under the recipient's KEK and destroys the seal.",[994,2511,2512,2515],{},[952,2513,2514],{},"One-time per destination."," Re-adopting the same bundle into the same store is rejected; into a\ndifferent store it's allowed (the bundle is immutable — the consumed marker is local).",[994,2517,2518,2521],{},[952,2519,2520],{},"Cryptographic ownership."," The recipient's control is that they hold the only DEKs, not a policy\nflag. The source owner cannot read the adopted partition.",[943,2523,2103],{"id":2524},"carry-opt-ins",[991,2526,2527,2541],{},[994,2528,2529,2533,2534,2536,2537,2540],{},[952,2530,2531],{},[966,2532,2082],{}," — re-keys ",[966,2535,2098],{}," for the closure under the destination DEKs,\nso the recipient validates against the same contract and ",[966,2538,2539],{},"noy-db describe"," works on the partition.",[994,2542,2543,2547,2548,2551,2552,2555,2556,2559,2560,2563],{},[952,2544,2545],{},[966,2546,2110],{}," — filters the source audit chain to the closure, re-chains it (fresh\nindices\u002F",[966,2549,2550],{},"prevHash","), recomputes each ",[966,2553,2554],{},"payloadHash"," against the re-keyed ciphertext for the latest\nput per record, and re-encrypts under a fresh ",[966,2557,2558],{},"_ledger"," DEK (sealed with the rest). The\nrecipient's ",[966,2561,2562],{},"verifyBackupIntegrity()"," passes over the re-keyed data. (Open the vault with a\nhistory strategy to exercise it.)",[943,2565,2567],{"id":2566},"audit-trail","Audit trail",[948,2569,2570,2571,2574,2575,1964,2578,2580,2581,2584],{},"All three lifecycle events ride a generic ",[966,2572,2573],{},"'lifecycle'"," ledger op (empty ",[966,2576,2577],{},"collection",[966,2579,2144],{},", detail\nin ",[966,2582,2583],{},"reason","; skipped by the data cross-check, present in the tamper-evident chain):",[991,2586,2587,2599],{},[994,2588,2589,2395,2592,2594,2595,2598],{},[952,2590,2591],{},"Source:",[966,2593,1020],{}," appends ",[966,2596,2597],{},"partition-handed-over:\u003CsealId>"," (the owner's record that\ndata left). No-op without a source history strategy.",[994,2600,2601,2604,2605,2607,2608,2610,2611,2458,2614,2617],{},[952,2602,2603],{},"Destination"," (when ",[966,2606,2110],{}," was used): ",[966,2609,1047],{}," appends\n",[966,2612,2613],{},"creation-of-new-owner:\u003CuserId>",[966,2615,2616],{},"transfer-seal-consumed:\u003CsealId>"," to the carried chain.",[943,2619,2310],{"id":2620},"edge-cases-limits",[991,2622,2623,2657,2671,2677,2695],{},[994,2624,2625,2628,2629,2632,2633,2635,2636,2638,2639,2642,2643,2645,2646,2648,2649,2652,2653,2458,2655,1295],{},[952,2626,2627],{},"Managed mode at owner-create"," is supported: pass\n",[966,2630,2631],{},"{ secretMode: 'managed', sealingKey, recovery, shamirRecovery }"," to\n",[966,2634,1047],{}," and the partition auto-unlocks on the recipient's device (e.g. via\nan ",[966,2637,2288],{}," OS keychain) with no secret. Managed mode ",[952,2640,2641],{},"mandates a strong (Shamir) recovery\nprofile"," at creation — the ",[966,2644,2318],{}," provider (",[966,2647,1030],{},") must be injected. A\nhalf-completed managed adoption (keyring + sealed secret written, recovery enrollment\ninterrupted) is ",[952,2650,2651],{},"idempotent under retry"," — re-run with the same ",[966,2654,2277],{},[966,2656,321],{},[994,2658,2659,2664,2665,2667,2668,2670],{},[952,2660,2661,2663],{},[966,2662,1051],{}," performance"," is O(frontier · inbound-collections · records) per depth — it\nre-scans each inbound collection for every frontier element, which is fine at consumer-firm scale\nand would need an index or pagination to stay fast over very large vaults; ",[966,2666,1967],{}," (default 16)\nthrows ",[966,2669,2055],{}," on runaway graphs.",[994,2672,2673,2676],{},[952,2674,2675],{},"No source-side delete."," The ceremony is non-destructive of source records; deleting the\nwithdrawn records from the source afterward is a separate step the caller performs explicitly —\nextraction never does it for you.",[994,2678,2679,1980,2687,2690,2691,2694],{},[952,2680,2681,2683,2684,2686],{},[966,2682,2110],{}," carries ",[966,2685,2558],{}," entries only",[966,2688,2689],{},"_ledger_deltas"," (historical versions) and\n",[966,2692,2693],{},"_history"," snapshots do not travel with the partition.",[994,2696,2697,2703,2704,2706],{},[952,2698,2699,2700,2702],{},"Records need string ",[966,2701,2144],{},"s"," — a non-string id fails loud (",[966,2705,2055],{},") rather\nthan silently dropping (which would dangle an FK).",[943,2708,2710],{"id":2709},"see-also","See also",[991,2712,2713,2743,2752],{},[994,2714,2715,2716,2719,2720,2723,2724,2727,2728,2730,2731,1417,2734,2730,2736,2739,2740],{},"Pairs with: ",[957,2717,629],{"href":2718},".\u002Fbundle"," (the ",[966,2721,2722],{},".noydb"," container format), ",[957,2725,697],{"href":2726},".\u002Fhistory","\n(",[966,2729,2110],{},"), ",[957,2732,780],{"href":2733},".\u002Fpersisted-schemas",[966,2735,2082],{},[957,2737,661],{"href":2738},".\u002Fcustody","\n(ownership and the custodian role), ",[957,2741,868],{"href":2742},".\u002Fteam",[994,2744,2745,2748,2749,2751],{},[957,2746,2747],{"href":54},"Permissions & Keyring"," — the key hierarchy that\n",[966,2750,1047],{}," bootstraps on the recipient side",[994,2753,2754,2755,1295],{},"Proven by showcase ",[957,2756,2760],{"href":2757,"rel":2758},"https:\u002F\u002Fgithub.com\u002Fnoy-db\u002Fdocs\u002Fblob\u002Fmain\u002Fshowcases\u002Fsrc\u002F88-transferable-partition.showcase.test.ts",[2759],"nofollow",[966,2761,2762],{},"88-transferable-partition",[2764,2765,2766],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}",{"title":1081,"searchDepth":1140,"depth":1140,"links":2768},[2769,2770,2771,2772,2773,2774,2775,2776,2777,2778,2779,2780,2781],{"id":945,"depth":1119,"text":946},{"id":988,"depth":1119,"text":989},{"id":1005,"depth":1119,"text":1006},{"id":1034,"depth":1119,"text":1035},{"id":1312,"depth":1119,"text":1313},{"id":1907,"depth":1119,"text":1908},{"id":1940,"depth":1119,"text":1941},{"id":2419,"depth":1119,"text":2420},{"id":2477,"depth":1119,"text":2478},{"id":2524,"depth":1119,"text":2103},{"id":2566,"depth":1119,"text":2567},{"id":2620,"depth":1119,"text":2310},{"id":2709,"depth":1119,"text":2710},null,"Extract a referentially-complete, re-keyed slice of a vault into a standalone bundle and hand it to a new owner — a cryptographic ownership transfer.","md",{},{"title":880},"service",{"title":929,"description":2783},"stable","important","wOKQ3gFSzWCUCfqSa3bighIONMsAnTAG7dQsb3pkyPk",{"data":2793,"body":2794},{},{"type":2795,"children":2796},"root",[2797],{"type":2798,"tag":948,"props":2799,"children":2800},"element",{},[2801],{"type":1914,"value":2802},"F — Snapshot & Portability",{"data":2804,"body":2805},{},{"type":2795,"children":2806},[2807],{"type":2798,"tag":948,"props":2808,"children":2809},{},[2810,2815,2817,2823,2824,2830,2832,2837,2838,2843,2844,2849,2850,2855,2856,2861,2863,2868,2870,2876,2878,2884,2886,2891,2893,2898,2900,2905],{"type":2798,"tag":966,"props":2811,"children":2813},{"className":2812},[],[2814],{"type":1914,"value":1156},{"type":1914,"value":2816},", on every published version since the ",{"type":2798,"tag":966,"props":2818,"children":2820},{"className":2819},[],[2821],{"type":1914,"value":2822},"\u002Fpod",{"type":1914,"value":2458},{"type":2798,"tag":966,"props":2825,"children":2827},{"className":2826},[],[2828],{"type":1914,"value":2829},"\u002Fcargo",{"type":1914,"value":2831}," split (noy-db#833, #812) — ",{"type":2798,"tag":966,"props":2833,"children":2835},{"className":2834},[],[2836],{"type":1914,"value":2829},{"type":1914,"value":2683},{"type":2798,"tag":966,"props":2839,"children":2841},{"className":2840},[],[2842],{"type":1914,"value":1040},{"type":1914,"value":1041},{"type":2798,"tag":966,"props":2845,"children":2847},{"className":2846},[],[2848],{"type":1914,"value":1020},{"type":1914,"value":1041},{"type":2798,"tag":966,"props":2851,"children":2853},{"className":2852},[],[2854],{"type":1914,"value":1044},{"type":1914,"value":1041},{"type":2798,"tag":966,"props":2857,"children":2859},{"className":2858},[],[2860],{"type":1914,"value":1047},{"type":1914,"value":2862}," and ",{"type":2798,"tag":966,"props":2864,"children":2866},{"className":2865},[],[2867],{"type":1914,"value":1051},{"type":1914,"value":2869},". The old ",{"type":2798,"tag":966,"props":2871,"children":2873},{"className":2872},[],[2874],{"type":1914,"value":2875},"@noy-db\u002Fhub\u002Fbundle",{"type":1914,"value":2877}," was last present in 0.3.0 and is gone from both rails, so there is no longer a version where it is the right import. (",{"type":2798,"tag":966,"props":2879,"children":2881},{"className":2880},[],[2882],{"type":1914,"value":2883},"\u002Fbundle",{"type":1914,"value":2885}," also re-exported the unrelated ",{"type":2798,"tag":966,"props":2887,"children":2889},{"className":2888},[],[2890],{"type":1914,"value":2722},{"type":1914,"value":2892}," container helpers; those live on ",{"type":2798,"tag":966,"props":2894,"children":2896},{"className":2895},[],[2897],{"type":1914,"value":2822},{"type":1914,"value":2899}," — see ",{"type":2798,"tag":957,"props":2901,"children":2903},{"href":2902},".\u002Fbundle.md",[2904],{"type":1914,"value":629},{"type":1914,"value":2906},".)",{"data":2908,"body":2909},{},{"type":2795,"children":2910},[2911],{"type":2798,"tag":948,"props":2912,"children":2913},{},[2914,2919,2921,2926,2927,2932,2933,2938,2939,2944,2945,2950,2952,2957,2959,2964],{"type":2798,"tag":966,"props":2915,"children":2917},{"className":2916},[],[2918],{"type":1914,"value":1073},{"type":1914,"value":2920}," gates the source-side ",{"type":2798,"tag":966,"props":2922,"children":2924},{"className":2923},[],[2925],{"type":1914,"value":1020},{"type":1914,"value":2447},{"type":2798,"tag":966,"props":2928,"children":2930},{"className":2929},[],[2931],{"type":1914,"value":1040},{"type":1914,"value":1041},{"type":2798,"tag":966,"props":2934,"children":2936},{"className":2935},[],[2937],{"type":1914,"value":1044},{"type":1914,"value":1041},{"type":2798,"tag":966,"props":2940,"children":2942},{"className":2941},[],[2943],{"type":1914,"value":1047},{"type":1914,"value":1048},{"type":2798,"tag":966,"props":2946,"children":2948},{"className":2947},[],[2949],{"type":1914,"value":1051},{"type":1914,"value":2951}," are ungated named imports. ",{"type":2798,"tag":966,"props":2953,"children":2955},{"className":2954},[],[2956],{"type":1914,"value":1073},{"type":1914,"value":2958}," itself is exported from ",{"type":2798,"tag":966,"props":2960,"children":2962},{"className":2961},[],[2963],{"type":1914,"value":1156},{"type":1914,"value":1295},{"data":2966,"body":2967},{},{"type":2795,"children":2968},[2969],{"type":2798,"tag":948,"props":2970,"children":2971},{},[2972],{"type":2798,"tag":966,"props":2973,"children":2975},{"className":2974},[],[2976],{"type":1914,"value":2977},"with-cargo",{"data":2979,"body":2980},{},{"type":2795,"children":2981},[2982],{"type":2798,"tag":948,"props":2983,"children":2984},{},[2985,2987,2992,2994],{"type":1914,"value":2986},"off-bundle when not opted in — the extraction crypto is dynamically imported only once ",{"type":2798,"tag":966,"props":2988,"children":2990},{"className":2989},[],[2991],{"type":1914,"value":1073},{"type":1914,"value":2993}," is passed to ",{"type":2798,"tag":966,"props":2995,"children":2997},{"className":2996},[],[2998],{"type":1914,"value":1061},1791896587072]