[{"data":1,"prerenderedAt":3271},["ShallowReactive",2],{"navigation":3,"\u002Fservices\u002Fwithdrawal":927,"mdc-awjrsd-key":3230,"mdc--rqv6ec-key":3246,"mdc--u5mbys-key":3258},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":900,"access":12,"apiToc":929,"body":930,"category":3221,"description":3222,"extension":3223,"meta":3224,"navigation":3221,"nest":3225,"path":901,"seo":3226,"sinceVersion":3221,"status":3227,"stem":902,"subtitle":3221,"tier":3228,"tocExternal":3221,"__hash__":3229},"docs\u002Fservices\u002Fwithdrawal.md",false,{"type":931,"value":932,"toc":3199},"minimark",[933,936,940,966,971,999,1002,1041,1045,1065,1069,1102,1106,1135,1146,1150,1160,1166,1315,1328,1334,1384,1577,1582,1747,1760,1764,1778,1911,2018,2022,2149,2194,2202,2206,2212,2247,2315,2325,2329,2353,2433,2443,2447,2466,2473,2483,2599,2605,2611,2694,2700,2706,2879,2885,2891,2897,2900,2904,2958,2962,2976,3041,3052,3056,3113,3117,3195],[934,935,900],"h1",{"id":900},[937,938],"service-meta",{":rows":939},"[{\"label\":\"Subpath\",\"value\":\"`@noy-db\u002Fhub\u002Fportability`\"},{\"label\":\"Factory\",\"value\":\"`withPortability()`\"},{\"label\":\"Layer\",\"value\":\"`with-audit`\"}]",[941,942,944],"callout",{"color":943,"icon":369},"info",[945,946,947,951,952,956,957,959,960,965],"p",{},[948,949,950],"strong",{},"Two halves of one service."," Withdrawal and export are the two workflows of the single ",[953,954,955],"code",{},"withPortability()"," opt-in. This page covers ",[948,958,900],{}," — the destructive half (export-then-dispose). For a non-destructive portable copy and the shared opt-in setup, see ",[948,961,962],{},[963,964,800],"a",{"href":801},".",[967,968,970],"h2",{"id":969},"what-it-does","What it does",[945,972,973,974,977,978,981,982,986,987,990,991,994,995,998],{},"Withdrawal lets a ",[948,975,976],{},"non-owner"," remove ",[948,979,980],{},"their own"," accessible data from a shared\n",[963,983,985],{"href":984},".\u002Fteam","vault"," — always building a re-keyed portable copy first, then disposing of\nthe source (",[953,988,989],{},"delete"," or ",[953,992,993],{},"freeze","). Like ",[963,996,997],{"href":801},"export",", it is scoped\ncryptographically: it operates only on collections whose DEKs the caller's keyring holds.",[945,1000,1001],{},"There are two workflows, by role:",[1003,1004,1005,1020],"ul",{},[1006,1007,1008,1011,1012,1015,1016,1019],"li",{},[948,1009,1010],{},"One-party"," — ",[953,1013,1014],{},"unilateralWithdrawal()"," (destructive, disabled by default behind a\nfail-closed policy gate). For an ",[953,1017,1018],{},"operator"," with read-write grants who may remove their\nown slice in one step.",[1006,1021,1022,1011,1025,1028,1029,1032,1033,1036,1037,1040],{},[948,1023,1024],{},"Two-party",[953,1026,1027],{},"requestWithdrawal()"," files a durable request; an owner or admin\nreviews it with ",[953,1030,1031],{},"listWithdrawalRequests()"," and settles it with ",[953,1034,1035],{},"approveWithdrawal()","\nor ",[953,1038,1039],{},"rejectWithdrawal()",". This is the path for read-only roles that cannot delete\nanything themselves.",[967,1042,1044],{"id":1043},"when-you-need-it","When you need it",[1003,1046,1047,1054,1062],{},[1006,1048,1049,1050,1053],{},"GDPR-style ",[948,1051,1052],{},"erasure"," (Art. 17) for the clients of a firm-run vault — a departing\nclient's records leave the vault after they take their copy.",[1006,1055,1056,1057,1061],{},"Letting a read-only client ",[1058,1059,1060],"em",{},"request"," deletion that the firm then executes under its\nown authority, with every step recorded in the tamper-evident ledger.",[1006,1063,1064],{},"Regulated offboarding where the firm must retain a frozen, hash-pinned snapshot of the\nwithdrawn records instead of deleting them outright.",[967,1066,1068],{"id":1067},"prerequisites","Prerequisites",[1003,1070,1071,1085,1099],{},[1006,1072,1073,1078,1079,1081,1082,965],{},[948,1074,1075],{},[953,1076,1077],{},"portabilityStrategy: withPortability()"," — withdrawal is part of the same opt-in as ",[963,1080,800],{"href":801},"; in a multi-user vault add ",[953,1083,1084],{},"teamStrategy: withTeam()",[1006,1086,1087,1090,1091,1094,1095,1098],{},[1058,1088,1089],{},"For the one-party (self-serve destructive) path:"," the firm must enable the policy gate described below, and the withdrawing user needs ",[953,1092,1093],{},"rw"," on ",[948,1096,1097],{},"every"," withdrawn collection.",[1006,1100,1101],{},"The two-party path is available to any granted member with no extra configuration.",[967,1103,1105],{"id":1104},"opt-in","Opt in",[945,1107,1108,1109,1111,1112,1116,1117,1120,1121,1124,1125,1128,1129,1134],{},"Withdrawal is enabled by the same ",[953,1110,1077],{}," opt-in as\nexport — see ",[963,1113,1115],{"href":1114},"\u002Fservices\u002Fportability#opt-in","portability → Opt in"," for the full\n",[953,1118,1119],{},"createNoydb()"," setup. Without it, every ",[953,1122,1123],{},"vault.user.*"," method throws\n",[953,1126,1127],{},"PortabilityNotEnabledError",". The multi-user scenarios below assume a vault provisioned\nwith ",[963,1130,1131],{"href":984},[953,1132,1133],{},"withTeam()",", where the firm (owner) has granted the caller a keyring.",[945,1136,1137,1138,1141,1142,1145],{},"The ",[948,1139,1140],{},"one-party"," path additionally requires the firm to enable a policy gate (below);\nthe ",[948,1143,1144],{},"two-party"," path is available to any granted member with no extra configuration.",[967,1147,1149],{"id":1148},"two-party-withdrawal-request-approvereject","Two-party withdrawal (request → approve\u002Freject)",[945,1151,1152,1153,990,1156,1159],{},"The conservative path: the requester files a durable request; a firm-side owner or\nadmin decides it. A read-only ",[953,1154,1155],{},"client",[953,1157,1158],{},"viewer"," — who can never delete records\nthemselves — uses exactly this flow.",[945,1161,1162,1165],{},[948,1163,1164],{},"Requester side"," — file the request:",[1167,1168,1173],"pre",{"className":1169,"code":1170,"language":1171,"meta":1172,"style":1172},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","\u002F\u002F clientVault was opened by a read-only `client` keyring\nconst req = await clientVault.user.requestWithdrawal({\n  disposition: 'freeze',          \u002F\u002F 'delete' (default) or 'freeze'\n  legalBasis: 'gdpr-art-17',\n  expiresInMs: 14 * 24 * 3600_000, \u002F\u002F optional: request lapses after 14 days\n})\n\u002F\u002F → { requestId: 'wr-9f2c41d0be57a6e83d1f0a2b', status: 'pending',\n\u002F\u002F     expiresAt: '2026-07-22T09:00:00.000Z' }\n","ts","",[953,1174,1175,1184,1223,1248,1266,1294,1303,1309],{"__ignoreMap":1172},[1176,1177,1180],"span",{"class":1178,"line":1179},"line",1,[1176,1181,1183],{"class":1182},"sHwdD","\u002F\u002F clientVault was opened by a read-only `client` keyring\n",[1176,1185,1187,1191,1195,1199,1203,1206,1208,1211,1213,1217,1220],{"class":1178,"line":1186},2,[1176,1188,1190],{"class":1189},"spNyl","const",[1176,1192,1194],{"class":1193},"sTEyZ"," req ",[1176,1196,1198],{"class":1197},"sMK4o","=",[1176,1200,1202],{"class":1201},"s7zQu"," await",[1176,1204,1205],{"class":1193}," clientVault",[1176,1207,965],{"class":1197},[1176,1209,1210],{"class":1193},"user",[1176,1212,965],{"class":1197},[1176,1214,1216],{"class":1215},"s2Zo4","requestWithdrawal",[1176,1218,1219],{"class":1193},"(",[1176,1221,1222],{"class":1197},"{\n",[1176,1224,1226,1230,1233,1236,1239,1242,1245],{"class":1178,"line":1225},3,[1176,1227,1229],{"class":1228},"swJcz","  disposition",[1176,1231,1232],{"class":1197},":",[1176,1234,1235],{"class":1197}," '",[1176,1237,993],{"class":1238},"sfazB",[1176,1240,1241],{"class":1197},"'",[1176,1243,1244],{"class":1197},",",[1176,1246,1247],{"class":1182},"          \u002F\u002F 'delete' (default) or 'freeze'\n",[1176,1249,1251,1254,1256,1258,1261,1263],{"class":1178,"line":1250},4,[1176,1252,1253],{"class":1228},"  legalBasis",[1176,1255,1232],{"class":1197},[1176,1257,1235],{"class":1197},[1176,1259,1260],{"class":1238},"gdpr-art-17",[1176,1262,1241],{"class":1197},[1176,1264,1265],{"class":1197},",\n",[1176,1267,1269,1272,1274,1278,1281,1284,1286,1289,1291],{"class":1178,"line":1268},5,[1176,1270,1271],{"class":1228},"  expiresInMs",[1176,1273,1232],{"class":1197},[1176,1275,1277],{"class":1276},"sbssI"," 14",[1176,1279,1280],{"class":1197}," *",[1176,1282,1283],{"class":1276}," 24",[1176,1285,1280],{"class":1197},[1176,1287,1288],{"class":1276}," 3600_000",[1176,1290,1244],{"class":1197},[1176,1292,1293],{"class":1182}," \u002F\u002F optional: request lapses after 14 days\n",[1176,1295,1297,1300],{"class":1178,"line":1296},6,[1176,1298,1299],{"class":1197},"}",[1176,1301,1302],{"class":1193},")\n",[1176,1304,1306],{"class":1178,"line":1305},7,[1176,1307,1308],{"class":1182},"\u002F\u002F → { requestId: 'wr-9f2c41d0be57a6e83d1f0a2b', status: 'pending',\n",[1176,1310,1312],{"class":1178,"line":1311},8,[1176,1313,1314],{"class":1182},"\u002F\u002F     expiresAt: '2026-07-22T09:00:00.000Z' }\n",[945,1316,1317,1318,1320,1321,1323,1324,1327],{},"The requester's accessible collections are recorded automatically from their grants. A\nrequester whose role can read ",[1058,1319,1097],{}," collection (e.g. a ",[953,1322,1158],{},") must name the\ncollections explicitly via ",[953,1325,1326],{},"scope.collections"," — an all-collection withdrawal request\nis rejected as too broad.",[945,1329,1330,1333],{},[948,1331,1332],{},"Owner side"," — review the queue:",[1167,1335,1337],{"className":1169,"code":1336,"language":1171,"meta":1172,"style":1172},"const pending = await ownerVault.user.listWithdrawalRequests({ status: 'pending' })\n",[953,1338,1339],{"__ignoreMap":1172},[1176,1340,1341,1343,1346,1348,1350,1353,1355,1357,1359,1362,1364,1367,1370,1372,1374,1377,1379,1382],{"class":1178,"line":1179},[1176,1342,1190],{"class":1189},[1176,1344,1345],{"class":1193}," pending ",[1176,1347,1198],{"class":1197},[1176,1349,1202],{"class":1201},[1176,1351,1352],{"class":1193}," ownerVault",[1176,1354,965],{"class":1197},[1176,1356,1210],{"class":1193},[1176,1358,965],{"class":1197},[1176,1360,1361],{"class":1215},"listWithdrawalRequests",[1176,1363,1219],{"class":1193},[1176,1365,1366],{"class":1197},"{",[1176,1368,1369],{"class":1228}," status",[1176,1371,1232],{"class":1197},[1176,1373,1235],{"class":1197},[1176,1375,1376],{"class":1238},"pending",[1176,1378,1241],{"class":1197},[1176,1380,1381],{"class":1197}," }",[1176,1383,1302],{"class":1193},[1167,1385,1388],{"className":1386,"code":1387,"language":141,"meta":1172,"style":1172},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","[\n  {\n    \"requestId\": \"wr-9f2c41d0be57a6e83d1f0a2b\",\n    \"requester\": \"client1\",\n    \"collections\": [\"invoices\"],\n    \"disposition\": \"freeze\",\n    \"legalBasis\": \"gdpr-art-17\",\n    \"status\": \"pending\",\n    \"requestedAt\": \"2026-07-08T09:00:00.000Z\",\n    \"expiresAt\": \"2026-07-22T09:00:00.000Z\"\n  }\n]\n",[953,1389,1390,1395,1400,1423,1443,1467,1486,1505,1524,1545,1565,1571],{"__ignoreMap":1172},[1176,1391,1392],{"class":1178,"line":1179},[1176,1393,1394],{"class":1197},"[\n",[1176,1396,1397],{"class":1178,"line":1186},[1176,1398,1399],{"class":1197},"  {\n",[1176,1401,1402,1405,1408,1411,1413,1416,1419,1421],{"class":1178,"line":1225},[1176,1403,1404],{"class":1197},"    \"",[1176,1406,1407],{"class":1189},"requestId",[1176,1409,1410],{"class":1197},"\"",[1176,1412,1232],{"class":1197},[1176,1414,1415],{"class":1197}," \"",[1176,1417,1418],{"class":1238},"wr-9f2c41d0be57a6e83d1f0a2b",[1176,1420,1410],{"class":1197},[1176,1422,1265],{"class":1197},[1176,1424,1425,1427,1430,1432,1434,1436,1439,1441],{"class":1178,"line":1250},[1176,1426,1404],{"class":1197},[1176,1428,1429],{"class":1189},"requester",[1176,1431,1410],{"class":1197},[1176,1433,1232],{"class":1197},[1176,1435,1415],{"class":1197},[1176,1437,1438],{"class":1238},"client1",[1176,1440,1410],{"class":1197},[1176,1442,1265],{"class":1197},[1176,1444,1445,1447,1450,1452,1454,1457,1459,1462,1464],{"class":1178,"line":1268},[1176,1446,1404],{"class":1197},[1176,1448,1449],{"class":1189},"collections",[1176,1451,1410],{"class":1197},[1176,1453,1232],{"class":1197},[1176,1455,1456],{"class":1197}," [",[1176,1458,1410],{"class":1197},[1176,1460,1461],{"class":1238},"invoices",[1176,1463,1410],{"class":1197},[1176,1465,1466],{"class":1197},"],\n",[1176,1468,1469,1471,1474,1476,1478,1480,1482,1484],{"class":1178,"line":1296},[1176,1470,1404],{"class":1197},[1176,1472,1473],{"class":1189},"disposition",[1176,1475,1410],{"class":1197},[1176,1477,1232],{"class":1197},[1176,1479,1415],{"class":1197},[1176,1481,993],{"class":1238},[1176,1483,1410],{"class":1197},[1176,1485,1265],{"class":1197},[1176,1487,1488,1490,1493,1495,1497,1499,1501,1503],{"class":1178,"line":1305},[1176,1489,1404],{"class":1197},[1176,1491,1492],{"class":1189},"legalBasis",[1176,1494,1410],{"class":1197},[1176,1496,1232],{"class":1197},[1176,1498,1415],{"class":1197},[1176,1500,1260],{"class":1238},[1176,1502,1410],{"class":1197},[1176,1504,1265],{"class":1197},[1176,1506,1507,1509,1512,1514,1516,1518,1520,1522],{"class":1178,"line":1311},[1176,1508,1404],{"class":1197},[1176,1510,1511],{"class":1189},"status",[1176,1513,1410],{"class":1197},[1176,1515,1232],{"class":1197},[1176,1517,1415],{"class":1197},[1176,1519,1376],{"class":1238},[1176,1521,1410],{"class":1197},[1176,1523,1265],{"class":1197},[1176,1525,1527,1529,1532,1534,1536,1538,1541,1543],{"class":1178,"line":1526},9,[1176,1528,1404],{"class":1197},[1176,1530,1531],{"class":1189},"requestedAt",[1176,1533,1410],{"class":1197},[1176,1535,1232],{"class":1197},[1176,1537,1415],{"class":1197},[1176,1539,1540],{"class":1238},"2026-07-08T09:00:00.000Z",[1176,1542,1410],{"class":1197},[1176,1544,1265],{"class":1197},[1176,1546,1548,1550,1553,1555,1557,1559,1562],{"class":1178,"line":1547},10,[1176,1549,1404],{"class":1197},[1176,1551,1552],{"class":1189},"expiresAt",[1176,1554,1410],{"class":1197},[1176,1556,1232],{"class":1197},[1176,1558,1415],{"class":1197},[1176,1560,1561],{"class":1238},"2026-07-22T09:00:00.000Z",[1176,1563,1564],{"class":1197},"\"\n",[1176,1566,1568],{"class":1178,"line":1567},11,[1176,1569,1570],{"class":1197},"  }\n",[1176,1572,1574],{"class":1178,"line":1573},12,[1176,1575,1576],{"class":1197},"]\n",[945,1578,1579,1581],{},[948,1580,1332],{}," — approve (extract-and-dispose under firm authority) or reject:",[1167,1583,1585],{"className":1169,"code":1584,"language":1171,"meta":1172,"style":1172},"const { bundle, snapshot } = await ownerVault.user.approveWithdrawal(\n  'wr-9f2c41d0be57a6e83d1f0a2b',\n  { reKey: { secret: 'handover-secret' } }, \u002F\u002F conveyed to the requester out-of-band\n)\n\u002F\u002F bundle   → Uint8Array — the requester's re-keyed portable copy\n\u002F\u002F snapshot → { withdrawalId, sha256, recordCount, frozenAt }  (freeze disposition only)\n\n\u002F\u002F …or decline; no data is touched:\nawait ownerVault.user.rejectWithdrawal('wr-9f2c41d0be57a6e83d1f0a2b', {\n  reason: 'statutory retention period still running',\n})\n\u002F\u002F → the request record with status: 'rejected', decidedBy, decidedAt, rejectReason\n",[953,1586,1587,1623,1634,1666,1670,1675,1680,1686,1691,1720,1736,1742],{"__ignoreMap":1172},[1176,1588,1589,1591,1594,1597,1599,1602,1604,1607,1609,1611,1613,1615,1617,1620],{"class":1178,"line":1179},[1176,1590,1190],{"class":1189},[1176,1592,1593],{"class":1197}," {",[1176,1595,1596],{"class":1193}," bundle",[1176,1598,1244],{"class":1197},[1176,1600,1601],{"class":1193}," snapshot ",[1176,1603,1299],{"class":1197},[1176,1605,1606],{"class":1197}," =",[1176,1608,1202],{"class":1201},[1176,1610,1352],{"class":1193},[1176,1612,965],{"class":1197},[1176,1614,1210],{"class":1193},[1176,1616,965],{"class":1197},[1176,1618,1619],{"class":1215},"approveWithdrawal",[1176,1621,1622],{"class":1193},"(\n",[1176,1624,1625,1628,1630,1632],{"class":1178,"line":1186},[1176,1626,1627],{"class":1197},"  '",[1176,1629,1418],{"class":1238},[1176,1631,1241],{"class":1197},[1176,1633,1265],{"class":1197},[1176,1635,1636,1639,1642,1644,1646,1649,1651,1653,1656,1658,1660,1663],{"class":1178,"line":1225},[1176,1637,1638],{"class":1197},"  {",[1176,1640,1641],{"class":1228}," reKey",[1176,1643,1232],{"class":1197},[1176,1645,1593],{"class":1197},[1176,1647,1648],{"class":1228}," secret",[1176,1650,1232],{"class":1197},[1176,1652,1235],{"class":1197},[1176,1654,1655],{"class":1238},"handover-secret",[1176,1657,1241],{"class":1197},[1176,1659,1381],{"class":1197},[1176,1661,1662],{"class":1197}," },",[1176,1664,1665],{"class":1182}," \u002F\u002F conveyed to the requester out-of-band\n",[1176,1667,1668],{"class":1178,"line":1250},[1176,1669,1302],{"class":1193},[1176,1671,1672],{"class":1178,"line":1268},[1176,1673,1674],{"class":1182},"\u002F\u002F bundle   → Uint8Array — the requester's re-keyed portable copy\n",[1176,1676,1677],{"class":1178,"line":1296},[1176,1678,1679],{"class":1182},"\u002F\u002F snapshot → { withdrawalId, sha256, recordCount, frozenAt }  (freeze disposition only)\n",[1176,1681,1682],{"class":1178,"line":1305},[1176,1683,1685],{"emptyLinePlaceholder":1684},true,"\n",[1176,1687,1688],{"class":1178,"line":1311},[1176,1689,1690],{"class":1182},"\u002F\u002F …or decline; no data is touched:\n",[1176,1692,1693,1696,1698,1700,1702,1704,1707,1709,1711,1713,1715,1717],{"class":1178,"line":1526},[1176,1694,1695],{"class":1201},"await",[1176,1697,1352],{"class":1193},[1176,1699,965],{"class":1197},[1176,1701,1210],{"class":1193},[1176,1703,965],{"class":1197},[1176,1705,1706],{"class":1215},"rejectWithdrawal",[1176,1708,1219],{"class":1193},[1176,1710,1241],{"class":1197},[1176,1712,1418],{"class":1238},[1176,1714,1241],{"class":1197},[1176,1716,1244],{"class":1197},[1176,1718,1719],{"class":1197}," {\n",[1176,1721,1722,1725,1727,1729,1732,1734],{"class":1178,"line":1547},[1176,1723,1724],{"class":1228},"  reason",[1176,1726,1232],{"class":1197},[1176,1728,1235],{"class":1197},[1176,1730,1731],{"class":1238},"statutory retention period still running",[1176,1733,1241],{"class":1197},[1176,1735,1265],{"class":1197},[1176,1737,1738,1740],{"class":1178,"line":1567},[1176,1739,1299],{"class":1197},[1176,1741,1302],{"class":1193},[1176,1743,1744],{"class":1178,"line":1573},[1176,1745,1746],{"class":1182},"\u002F\u002F → the request record with status: 'rejected', decidedBy, decidedAt, rejectReason\n",[945,1748,1137,1749,1751,1752,1755,1756,1759],{},[953,1750,1473],{}," the requester chose flows through end-to-end — approval runs the same\nextract-and-dispose engine as ",[953,1753,1754],{},"unilateralWithdrawal",". The request record itself is\nplaintext metadata (collection names, disposition, legal basis — nothing the owner\ncannot already see) and carries ",[948,1757,1758],{},"no secret",": the re-key secret is supplied by\nthe approver at approval time and handed to the requester out-of-band, so no secret is\never stored at rest.",[967,1761,1763],{"id":1762},"one-party-withdrawal-operator-self-serve","One-party withdrawal (operator self-serve)",[945,1765,1766,1767,1769,1770,1773,1774,1777],{},"An ",[953,1768,1018],{}," — a member with read-write grants on their collections — can withdraw in\none step, if the firm has enabled the ",[953,1771,1772],{},"client-unilateral-withdraw"," gate. The gate is\n",[948,1775,1776],{},"disabled by default and fails closed","; the firm opts in at vault creation, per\njurisdiction or contract:",[1167,1779,1781],{"className":1169,"code":1780,"language":1171,"meta":1172,"style":1172},"const owner = await createNoydb({\n  user: 'firm',\n  secret: 'owner-pw-long-enough',\n  teamStrategy: withTeam(),\n  policy: {\n    gates: { 'client-unilateral-withdraw': { enabled: true, minTier: 1 } },\n  },\n})\n",[953,1782,1783,1801,1817,1833,1848,1857,1900,1905],{"__ignoreMap":1172},[1176,1784,1785,1787,1790,1792,1794,1797,1799],{"class":1178,"line":1179},[1176,1786,1190],{"class":1189},[1176,1788,1789],{"class":1193}," owner ",[1176,1791,1198],{"class":1197},[1176,1793,1202],{"class":1201},[1176,1795,1796],{"class":1215}," createNoydb",[1176,1798,1219],{"class":1193},[1176,1800,1222],{"class":1197},[1176,1802,1803,1806,1808,1810,1813,1815],{"class":1178,"line":1186},[1176,1804,1805],{"class":1228},"  user",[1176,1807,1232],{"class":1197},[1176,1809,1235],{"class":1197},[1176,1811,1812],{"class":1238},"firm",[1176,1814,1241],{"class":1197},[1176,1816,1265],{"class":1197},[1176,1818,1819,1822,1824,1826,1829,1831],{"class":1178,"line":1225},[1176,1820,1821],{"class":1228},"  secret",[1176,1823,1232],{"class":1197},[1176,1825,1235],{"class":1197},[1176,1827,1828],{"class":1238},"owner-pw-long-enough",[1176,1830,1241],{"class":1197},[1176,1832,1265],{"class":1197},[1176,1834,1835,1838,1840,1843,1846],{"class":1178,"line":1250},[1176,1836,1837],{"class":1228},"  teamStrategy",[1176,1839,1232],{"class":1197},[1176,1841,1842],{"class":1215}," withTeam",[1176,1844,1845],{"class":1193},"()",[1176,1847,1265],{"class":1197},[1176,1849,1850,1853,1855],{"class":1178,"line":1268},[1176,1851,1852],{"class":1228},"  policy",[1176,1854,1232],{"class":1197},[1176,1856,1719],{"class":1197},[1176,1858,1859,1862,1864,1866,1868,1870,1872,1874,1876,1879,1881,1885,1887,1890,1892,1895,1897],{"class":1178,"line":1296},[1176,1860,1861],{"class":1228},"    gates",[1176,1863,1232],{"class":1197},[1176,1865,1593],{"class":1197},[1176,1867,1235],{"class":1197},[1176,1869,1772],{"class":1228},[1176,1871,1241],{"class":1197},[1176,1873,1232],{"class":1197},[1176,1875,1593],{"class":1197},[1176,1877,1878],{"class":1228}," enabled",[1176,1880,1232],{"class":1197},[1176,1882,1884],{"class":1883},"sfNiH"," true",[1176,1886,1244],{"class":1197},[1176,1888,1889],{"class":1228}," minTier",[1176,1891,1232],{"class":1197},[1176,1893,1894],{"class":1276}," 1",[1176,1896,1381],{"class":1197},[1176,1898,1899],{"class":1197}," },\n",[1176,1901,1902],{"class":1178,"line":1305},[1176,1903,1904],{"class":1197},"  },\n",[1176,1906,1907,1909],{"class":1178,"line":1311},[1176,1908,1299],{"class":1197},[1176,1910,1302],{"class":1193},[1167,1912,1914],{"className":1169,"code":1913,"language":1171,"meta":1172,"style":1172},"\u002F\u002F operatorVault was opened by an `operator` keyring with rw grants\nconst { bundle, snapshot } = await operatorVault.user.unilateralWithdrawal({\n  legalBasis: 'gdpr-art-17',\n  disposition: 'delete',                       \u002F\u002F default\n  reKey: { secret: 'takeaway-secret' },\n})\n\u002F\u002F → { bundle: Uint8Array } — the re-keyed copy; the source records are gone\n",[953,1915,1916,1921,1954,1968,1985,2007,2013],{"__ignoreMap":1172},[1176,1917,1918],{"class":1178,"line":1179},[1176,1919,1920],{"class":1182},"\u002F\u002F operatorVault was opened by an `operator` keyring with rw grants\n",[1176,1922,1923,1925,1927,1929,1931,1933,1935,1937,1939,1942,1944,1946,1948,1950,1952],{"class":1178,"line":1186},[1176,1924,1190],{"class":1189},[1176,1926,1593],{"class":1197},[1176,1928,1596],{"class":1193},[1176,1930,1244],{"class":1197},[1176,1932,1601],{"class":1193},[1176,1934,1299],{"class":1197},[1176,1936,1606],{"class":1197},[1176,1938,1202],{"class":1201},[1176,1940,1941],{"class":1193}," operatorVault",[1176,1943,965],{"class":1197},[1176,1945,1210],{"class":1193},[1176,1947,965],{"class":1197},[1176,1949,1754],{"class":1215},[1176,1951,1219],{"class":1193},[1176,1953,1222],{"class":1197},[1176,1955,1956,1958,1960,1962,1964,1966],{"class":1178,"line":1225},[1176,1957,1253],{"class":1228},[1176,1959,1232],{"class":1197},[1176,1961,1235],{"class":1197},[1176,1963,1260],{"class":1238},[1176,1965,1241],{"class":1197},[1176,1967,1265],{"class":1197},[1176,1969,1970,1972,1974,1976,1978,1980,1982],{"class":1178,"line":1250},[1176,1971,1229],{"class":1228},[1176,1973,1232],{"class":1197},[1176,1975,1235],{"class":1197},[1176,1977,989],{"class":1238},[1176,1979,1241],{"class":1197},[1176,1981,1244],{"class":1197},[1176,1983,1984],{"class":1182},"                       \u002F\u002F default\n",[1176,1986,1987,1990,1992,1994,1996,1998,2000,2003,2005],{"class":1178,"line":1268},[1176,1988,1989],{"class":1228},"  reKey",[1176,1991,1232],{"class":1197},[1176,1993,1593],{"class":1197},[1176,1995,1648],{"class":1228},[1176,1997,1232],{"class":1197},[1176,1999,1235],{"class":1197},[1176,2001,2002],{"class":1238},"takeaway-secret",[1176,2004,1241],{"class":1197},[1176,2006,1899],{"class":1197},[1176,2008,2009,2011],{"class":1178,"line":1296},[1176,2010,1299],{"class":1197},[1176,2012,1302],{"class":1193},[1176,2014,2015],{"class":1178,"line":1305},[1176,2016,2017],{"class":1182},"\u002F\u002F → { bundle: Uint8Array } — the re-keyed copy; the source records are gone\n",[967,2019,2021],{"id":2020},"who-can-do-what","Who can do what",[2023,2024,2025,2052],"table",{},[2026,2027,2028],"thead",{},[2029,2030,2031,2035,2039,2043],"tr",{},[2032,2033,2034],"th",{},"Role",[2032,2036,2037],{},[953,2038,1754],{},[2032,2040,2041],{},[953,2042,1216],{},[2032,2044,2045,2048,2049],{},[953,2046,2047],{},"approve"," \u002F ",[953,2050,2051],{},"reject",[2053,2054,2055,2086,2103,2125],"tbody",{},[2029,2056,2057,2066,2075,2080],{},[2058,2059,2060,2048,2063],"td",{},[953,2061,2062],{},"owner",[953,2064,2065],{},"admin",[2058,2067,2068,2069],{},"no — use ",[963,2070,2072],{"href":2071},".\u002Ftransferable-partitions",[953,2073,2074],{},"extractPartition",[2058,2076,2077,2078],{},"needs explicit ",[953,2079,1326],{},[2058,2081,2082,2085],{},[948,2083,2084],{},"yes"," (the only roles that can)",[2029,2087,2088,2092,2098,2100],{},[2058,2089,2090],{},[953,2091,1018],{},[2058,2093,2094,2095,2097],{},"yes — ",[953,2096,1093],{}," grants only, gate must be enabled",[2058,2099,2084],{},[2058,2101,2102],{},"no",[2029,2104,2105,2111,2114,2123],{},[2058,2106,2107,2048,2109],{},[953,2108,1155],{},[953,2110,1158],{},[2058,2112,2113],{},"no — read-only by construction",[2058,2115,2116,2117,2119,2120,2122],{},"yes — this is their path (a ",[953,2118,1158],{}," must name ",[953,2121,1326],{},")",[2058,2124,2102],{},[2029,2126,2127,2132,2143,2147],{},[2058,2128,2129],{},[953,2130,2131],{},"custodian",[2058,2133,2134,2135,2138,2139,2142],{},"no — use the audited ",[963,2136,661],{"href":2137},".\u002Fcustody"," ",[953,2140,2141],{},"liberate()"," ceremony",[2058,2144,2077,2145],{},[953,2146,1326],{},[2058,2148,2102],{},[1003,2150,2151,2169,2180,2183],{},[1006,2152,2153,2154,2156,2157,2159,2160,2162,2163,2166,2167,965],{},"Read-only roles can never delete anything, regardless of policy — a ",[953,2155,1155],{},"\u002F",[953,2158,1158],{},"\ncalling ",[953,2161,1754],{}," gets a ",[953,2164,2165],{},"ReadOnlyError"," pointing at ",[953,2168,1216],{},[1006,2170,2171,2172,1094,2174,2176,2177,2179],{},"Destructive self-serve requires ",[953,2173,1093],{},[948,2175,1097],{}," withdrawn collection; the export\nscope of a destructive op is the caller's ",[953,2178,1093],{}," grants only.",[1006,2181,2182],{},"Owner-class roles hold blanket authority over the vault, so \"withdrawing my slice\" is\nthe wrong tool for them; they extract and hand over whole partitions instead.",[1006,2184,2185,2186,990,2188,2190,2191,2193],{},"Approving\u002Frejecting requires an ",[953,2187,2062],{},[953,2189,2065],{}," keyring in addition to the policy\ngate — a ",[953,2192,2131],{}," is deliberately excluded, because approving a destructive\nextract-and-dispose is a governance act on par with grant\u002Frevoke.",[945,2195,2196,2197,2201],{},"(For who may take a non-destructive copy, see ",[963,2198,2200],{"href":2199},"\u002Fservices\u002Fportability#who-can-do-what","portability → Who can do what"," — export is open to every role.)",[967,2203,2205],{"id":2204},"source-dispositions","Source dispositions",[945,2207,2208,2209,2211],{},"Both withdrawal paths accept a ",[953,2210,1473],{}," deciding what happens to the source\nrecords after the portable copy is built:",[1003,2213,2214,2229],{},[1006,2215,2216,2220,2221,2224,2225,2228],{},[948,2217,2218],{},[953,2219,989],{}," (default) — ",[1058,2222,2223],{},"delete-closure",": the records leave the vault entirely\n(GDPR Art. 17-style erasure). The re-keyed bundle is always produced ",[948,2226,2227],{},"first",", so a\ncrash before deletion loses nothing; deletion is idempotent, so a crashed run can be\nre-run safely.",[1006,2230,2231,2235,2236,2239,2240,2243,2244,1232],{},[948,2232,2233],{},[953,2234,993],{}," — the firm retains a ",[948,2237,2238],{},"write-once",", hash-pinned snapshot of the original\nciphertext envelopes at ",[953,2241,2242],{},"_frozen_snapshots\u002F\u003CwithdrawalId>"," (already under the firm's\nown DEKs — no re-key), then delete-closures the live records. The result includes a\n",[953,2245,2246],{},"FrozenSnapshotRef",[1167,2248,2250],{"className":1169,"code":2249,"language":1171,"meta":1172,"style":1172},"interface FrozenSnapshotRef {\n  withdrawalId: string   \u002F\u002F 'wd-…'\n  sha256: string         \u002F\u002F hex digest of the snapshot body\n  recordCount: number\n  frozenAt: string       \u002F\u002F ISO timestamp\n}\n",[953,2251,2252,2263,2276,2288,2298,2310],{"__ignoreMap":1172},[1176,2253,2254,2257,2261],{"class":1178,"line":1179},[1176,2255,2256],{"class":1189},"interface",[1176,2258,2260],{"class":2259},"sBMFI"," FrozenSnapshotRef",[1176,2262,1719],{"class":1197},[1176,2264,2265,2268,2270,2273],{"class":1178,"line":1186},[1176,2266,2267],{"class":1228},"  withdrawalId",[1176,2269,1232],{"class":1197},[1176,2271,2272],{"class":2259}," string",[1176,2274,2275],{"class":1182},"   \u002F\u002F 'wd-…'\n",[1176,2277,2278,2281,2283,2285],{"class":1178,"line":1225},[1176,2279,2280],{"class":1228},"  sha256",[1176,2282,1232],{"class":1197},[1176,2284,2272],{"class":2259},[1176,2286,2287],{"class":1182},"         \u002F\u002F hex digest of the snapshot body\n",[1176,2289,2290,2293,2295],{"class":1178,"line":1250},[1176,2291,2292],{"class":1228},"  recordCount",[1176,2294,1232],{"class":1197},[1176,2296,2297],{"class":2259}," number\n",[1176,2299,2300,2303,2305,2307],{"class":1178,"line":1268},[1176,2301,2302],{"class":1228},"  frozenAt",[1176,2304,1232],{"class":1197},[1176,2306,2272],{"class":2259},[1176,2308,2309],{"class":1182},"       \u002F\u002F ISO timestamp\n",[1176,2311,2312],{"class":1178,"line":1296},[1176,2313,2314],{"class":1197},"}\n",[945,2316,1137,2317,2320,2321,2324],{},[953,2318,2319],{},"sha256"," is pinned into the tamper-evident ledger, making the retained snapshot\nprovably unaltered. The snapshot write is compare-and-swap \"create-only\", so re-running\nan interrupted withdrawal with the same ",[953,2322,2323],{},"withdrawalId"," never overwrites it.",[967,2326,2328],{"id":2327},"policy-gates","Policy gates",[945,2330,2331,2332,2335,2336,2340,2341,2344,2345,2348,2349,2352],{},"Policy ",[948,2333,2334],{},"gates"," are named checkpoints evaluated against the caller's session strength —\nits ",[963,2337,2339],{"href":2338},".\u002Fsession-tiers","session tier"," (tier 1 = full secret unlock, tier 2 =\nauthenticated login, tier 3 = quick resume) — plus any extra factor proofs the vault's\npolicy demands (see ",[963,2342,796],{"href":2343},".\u002Fpolicy","). Built-in gates ",[948,2346,2347],{},"fail closed"," when the\npolicy does not configure them; only developer-defined ",[953,2350,2351],{},"app:*"," gates default to allow.",[2023,2354,2355,2376],{},[2026,2356,2357],{},[2029,2358,2359,2362,2365,2371],{},[2032,2360,2361],{},"Gate",[2032,2363,2364],{},"Guards",[2032,2366,2367,2370],{},[953,2368,2369],{},"PERSONAL_POLICY"," default",[2032,2372,2373,2370],{},[953,2374,2375],{},"STRICT_POLICY",[2053,2377,2378,2398,2414],{},[2029,2379,2380,2384,2388,2393],{},[2058,2381,2382],{},[953,2383,1772],{},[2058,2385,2386],{},[953,2387,1754],{},[2058,2389,2390],{},[948,2391,2392],{},"disabled",[2058,2394,2395,2397],{},[948,2396,2392],{},"; if a firm enables it, it inherits a two-factor proof (TOTP\u002Femail-OTP ×2) + shared-device block",[2029,2399,2400,2405,2409,2412],{},[2058,2401,2402],{},[953,2403,2404],{},"user-request-withdrawal",[2058,2406,2407],{},[953,2408,1216],{},[2058,2410,2411],{},"enabled, tier 1",[2058,2413,2411],{},[2029,2415,2416,2421,2427,2430],{},[2058,2417,2418],{},[953,2419,2420],{},"approve-user-withdrawal",[2058,2422,2423,2048,2425],{},[953,2424,1619],{},[953,2426,1706],{},[2058,2428,2429],{},"enabled, tier 2",[2058,2431,2432],{},"tier 2 + TOTP\u002Femail-OTP factor + shared-device block",[945,2434,2435,2436,2438,2439,2442],{},"Non-destructive ",[963,2437,997],{"href":801}," has ",[948,2440,2441],{},"no gate"," by design: a portable\ncopy of data the caller can already decrypt cannot be denied — it is only audited.",[967,2444,2446],{"id":2445},"api-reference","API reference",[945,2448,2449,2450,2452,2453,2457,2458,2461,2462,2465],{},"All five withdrawal methods live on ",[953,2451,1123],{}," once the shared\n",[963,2454,2455],{"href":1114},[953,2456,955],{}," strategy is wired. (The\nnon-destructive ",[953,2459,2460],{},"exportMyAccessibleData"," lives on\n",[963,2463,800],{"href":2464},"\u002Fservices\u002Fportability#api-reference",".)",[2467,2468,2470],"h3",{"id":2469},"vaultuserunilateralwithdrawalopts",[953,2471,2472],{},"vault.user.unilateralWithdrawal(opts)",[945,2474,2475,2476,2479,2480,965],{},"Destructive one-party export-and-dispose. ",[953,2477,2478],{},"WithdrawResult"," is\n",[953,2481,2482],{},"{ bundle: Uint8Array; snapshot?: FrozenSnapshotRef }",[2023,2484,2485,2501],{},[2026,2486,2487],{},[2029,2488,2489,2492,2495,2498],{},[2032,2490,2491],{},"Option",[2032,2493,2494],{},"Type",[2032,2496,2497],{},"Default",[2032,2499,2500],{},"Meaning",[2053,2502,2503,2525,2543,2562,2583],{},[2029,2504,2505,2509,2514,2519],{},[2058,2506,2507],{},[953,2508,1492],{},[2058,2510,2511],{},[953,2512,2513],{},"string",[2058,2515,2516],{},[948,2517,2518],{},"required",[2058,2520,2521,2522,2122],{},"Recorded in the audit entry (e.g. ",[953,2523,2524],{},"'gdpr-art-17'",[2029,2526,2527,2532,2537,2540],{},[2058,2528,2529],{},[953,2530,2531],{},"reKey",[2058,2533,2534],{},[953,2535,2536],{},"{ secret: string }",[2058,2538,2539],{},"inherit",[2058,2541,2542],{},"Re-key the exported bundle",[2029,2544,2545,2549,2554,2559],{},[2058,2546,2547],{},[953,2548,1473],{},[2058,2550,2551],{},[953,2552,2553],{},"'delete' | 'freeze'",[2058,2555,2556],{},[953,2557,2558],{},"'delete'",[2058,2560,2561],{},"What happens to the source",[2029,2563,2564,2569,2574,2580],{},[2058,2565,2566],{},[953,2567,2568],{},"scope",[2058,2570,2571],{},[953,2572,2573],{},"{ collections?: string[] }",[2058,2575,2576,2577,2579],{},"all ",[953,2578,1093],{}," grants",[2058,2581,2582],{},"Narrow the withdrawal",[2029,2584,2585,2589,2593,2596],{},[2058,2586,2587],{},[953,2588,2323],{},[2058,2590,2591],{},[953,2592,2513],{},[2058,2594,2595],{},"random",[2058,2597,2598],{},"Stable id for idempotent resume after a crash",[2467,2600,2602],{"id":2601},"vaultuserrequestwithdrawalopts",[953,2603,2604],{},"vault.user.requestWithdrawal(opts?)",[945,2606,2607,2608,965],{},"Files a durable pending request; returns ",[953,2609,2610],{},"{ requestId, status, expiresAt? }",[2023,2612,2613,2625],{},[2026,2614,2615],{},[2029,2616,2617,2619,2621,2623],{},[2032,2618,2491],{},[2032,2620,2494],{},[2032,2622,2497],{},[2032,2624,2500],{},[2053,2626,2627,2643,2660,2676],{},[2029,2628,2629,2633,2637,2640],{},[2058,2630,2631],{},[953,2632,2568],{},[2058,2634,2635],{},[953,2636,2573],{},[2058,2638,2639],{},"caller's grants",[2058,2641,2642],{},"Required when the caller can read every collection",[2029,2644,2645,2649,2653,2657],{},[2058,2646,2647],{},[953,2648,1473],{},[2058,2650,2651],{},[953,2652,2553],{},[2058,2654,2655],{},[953,2656,2558],{},[2058,2658,2659],{},"Requested source disposition",[2029,2661,2662,2666,2670,2673],{},[2058,2663,2664],{},[953,2665,1492],{},[2058,2667,2668],{},[953,2669,2513],{},[2058,2671,2672],{},"—",[2058,2674,2675],{},"Recorded on the request",[2029,2677,2678,2683,2688,2691],{},[2058,2679,2680],{},[953,2681,2682],{},"expiresInMs",[2058,2684,2685],{},[953,2686,2687],{},"number",[2058,2689,2690],{},"never",[2058,2692,2693],{},"After this, the request can no longer be approved",[2467,2695,2697],{"id":2696},"vaultuserlistwithdrawalrequests-status",[953,2698,2699],{},"vault.user.listWithdrawalRequests({ status? })",[945,2701,2702,2703,965],{},"Owner side. Optionally filter by ",[953,2704,2705],{},"status: 'pending' | 'approved' | 'rejected'",[1167,2707,2709],{"className":1169,"code":2708,"language":1171,"meta":1172,"style":1172},"interface WithdrawalRequest {\n  requestId: string\n  requester: string\n  collections: readonly string[]\n  disposition: 'delete' | 'freeze'\n  legalBasis?: string\n  status: 'pending' | 'approved' | 'rejected'\n  requestedAt: string\n  expiresAt?: string\n  decidedAt?: string\n  decidedBy?: string\n  rejectReason?: string\n  snapshotSha256?: string   \u002F\u002F set on approved freeze-disposition requests\n}\n",[953,2710,2711,2720,2730,2739,2754,2776,2785,2816,2825,2834,2843,2852,2861,2874],{"__ignoreMap":1172},[1176,2712,2713,2715,2718],{"class":1178,"line":1179},[1176,2714,2256],{"class":1189},[1176,2716,2717],{"class":2259}," WithdrawalRequest",[1176,2719,1719],{"class":1197},[1176,2721,2722,2725,2727],{"class":1178,"line":1186},[1176,2723,2724],{"class":1228},"  requestId",[1176,2726,1232],{"class":1197},[1176,2728,2729],{"class":2259}," string\n",[1176,2731,2732,2735,2737],{"class":1178,"line":1225},[1176,2733,2734],{"class":1228},"  requester",[1176,2736,1232],{"class":1197},[1176,2738,2729],{"class":2259},[1176,2740,2741,2744,2746,2749,2751],{"class":1178,"line":1250},[1176,2742,2743],{"class":1228},"  collections",[1176,2745,1232],{"class":1197},[1176,2747,2748],{"class":1189}," readonly",[1176,2750,2272],{"class":2259},[1176,2752,2753],{"class":1193},"[]\n",[1176,2755,2756,2758,2760,2762,2764,2766,2769,2771,2773],{"class":1178,"line":1268},[1176,2757,1229],{"class":1228},[1176,2759,1232],{"class":1197},[1176,2761,1235],{"class":1197},[1176,2763,989],{"class":1238},[1176,2765,1241],{"class":1197},[1176,2767,2768],{"class":1197}," |",[1176,2770,1235],{"class":1197},[1176,2772,993],{"class":1238},[1176,2774,2775],{"class":1197},"'\n",[1176,2777,2778,2780,2783],{"class":1178,"line":1296},[1176,2779,1253],{"class":1228},[1176,2781,2782],{"class":1197},"?:",[1176,2784,2729],{"class":2259},[1176,2786,2787,2790,2792,2794,2796,2798,2800,2802,2805,2807,2809,2811,2814],{"class":1178,"line":1305},[1176,2788,2789],{"class":1228},"  status",[1176,2791,1232],{"class":1197},[1176,2793,1235],{"class":1197},[1176,2795,1376],{"class":1238},[1176,2797,1241],{"class":1197},[1176,2799,2768],{"class":1197},[1176,2801,1235],{"class":1197},[1176,2803,2804],{"class":1238},"approved",[1176,2806,1241],{"class":1197},[1176,2808,2768],{"class":1197},[1176,2810,1235],{"class":1197},[1176,2812,2813],{"class":1238},"rejected",[1176,2815,2775],{"class":1197},[1176,2817,2818,2821,2823],{"class":1178,"line":1311},[1176,2819,2820],{"class":1228},"  requestedAt",[1176,2822,1232],{"class":1197},[1176,2824,2729],{"class":2259},[1176,2826,2827,2830,2832],{"class":1178,"line":1526},[1176,2828,2829],{"class":1228},"  expiresAt",[1176,2831,2782],{"class":1197},[1176,2833,2729],{"class":2259},[1176,2835,2836,2839,2841],{"class":1178,"line":1547},[1176,2837,2838],{"class":1228},"  decidedAt",[1176,2840,2782],{"class":1197},[1176,2842,2729],{"class":2259},[1176,2844,2845,2848,2850],{"class":1178,"line":1567},[1176,2846,2847],{"class":1228},"  decidedBy",[1176,2849,2782],{"class":1197},[1176,2851,2729],{"class":2259},[1176,2853,2854,2857,2859],{"class":1178,"line":1573},[1176,2855,2856],{"class":1228},"  rejectReason",[1176,2858,2782],{"class":1197},[1176,2860,2729],{"class":2259},[1176,2862,2864,2867,2869,2871],{"class":1178,"line":2863},13,[1176,2865,2866],{"class":1228},"  snapshotSha256",[1176,2868,2782],{"class":1197},[1176,2870,2272],{"class":2259},[1176,2872,2873],{"class":1182},"   \u002F\u002F set on approved freeze-disposition requests\n",[1176,2875,2877],{"class":1178,"line":2876},14,[1176,2878,2314],{"class":1197},[2467,2880,2882],{"id":2881},"vaultuserapprovewithdrawalrequestid-rekey",[953,2883,2884],{},"vault.user.approveWithdrawal(requestId, { reKey? })",[945,2886,2887,2888,2890],{},"Owner side. Extracts the requester's recorded scope under firm authority, disposes of\nthe source per the request's ",[953,2889,1473],{},", marks the request approved, and returns the\nre-keyed bundle to hand back.",[2467,2892,2894],{"id":2893},"vaultuserrejectwithdrawalrequestid-reason",[953,2895,2896],{},"vault.user.rejectWithdrawal(requestId, { reason? })",[945,2898,2899],{},"Owner side. Declines a pending request — no data is touched; returns the updated record.",[967,2901,2903],{"id":2902},"errors","Errors",[2023,2905,2906,2916],{},[2026,2907,2908],{},[2029,2909,2910,2913],{},[2032,2911,2912],{},"Error",[2032,2914,2915],{},"Thrown when",[2053,2917,2918,2929,2939,2948],{},[2029,2919,2920,2924],{},[2058,2921,2922],{},[953,2923,1127],{},[2058,2925,2926,2927],{},"Any method called without ",[953,2928,1077],{},[2029,2930,2931,2936],{},[2058,2932,2933],{},[953,2934,2935],{},"PolicyDeniedError",[2058,2937,2938],{},"The guarding gate is disabled, the session tier is too low, or a required factor is missing",[2029,2940,2941,2945],{},[2058,2942,2943],{},[953,2944,2165],{},[2058,2946,2947],{},"A role without the required write authority attempts a destructive op",[2029,2949,2950,2955],{},[2058,2951,2952],{},[953,2953,2954],{},"WithdrawalRequestError",[2058,2956,2957],{},"Request not found, already decided, expired, or approve\u002Freject called by a non-owner\u002Fadmin",[967,2959,2961],{"id":2960},"audit","Audit",[945,2963,2964,2965,2968,2969,2972,2973,1232],{},"Every operation appends an ",[953,2966,2967],{},"op: 'lifecycle'"," entry to the tamper-evident ledger when the\nvault has ",[963,2970,697],{"href":2971},".\u002Fhistory"," enabled (without it, auditing is a silent no-op). The\nentries participate in the ledger's hash chain but carry no data payload — only a\nstructured ",[953,2974,2975],{},"reason",[2023,2977,2978,2989],{},[2026,2979,2980],{},[2029,2981,2982,2985],{},[2032,2983,2984],{},"Operation",[2032,2986,2987],{},[953,2988,2975],{},[2053,2990,2991,3001,3011,3021,3031],{},[2029,2992,2993,2996],{},[2058,2994,2995],{},"One-party withdrawal",[2058,2997,2998],{},[953,2999,3000],{},"user-unilateral-withdrawal:\u003CuserId>:\u003Cdisposition>:\u003ClegalBasis>",[2029,3002,3003,3006],{},[2058,3004,3005],{},"Request filed",[2058,3007,3008],{},[953,3009,3010],{},"user-withdrawal-request:\u003CrequestId>:\u003CuserId>",[2029,3012,3013,3016],{},[2058,3014,3015],{},"Request approved",[2058,3017,3018],{},[953,3019,3020],{},"user-withdrawal-approved:\u003CrequestId>:\u003Crequester>:\u003Cdisposition>",[2029,3022,3023,3026],{},[2058,3024,3025],{},"Request rejected",[2058,3027,3028],{},[953,3029,3030],{},"user-withdrawal-rejected:\u003CrequestId>:\u003Crequester>",[2029,3032,3033,3036],{},[2058,3034,3035],{},"Freeze snapshot pinned",[2058,3037,3038],{},[953,3039,3040],{},"withdrawal-frozen-snapshot:\u003CwithdrawalId>:\u003Csha256>",[945,3042,3043,3044,3047,3048,2465],{},"(The non-destructive export entry, ",[953,3045,3046],{},"user-export:\u003CuserId>",", is on\n",[963,3049,3051],{"href":3050},"\u002Fservices\u002Fportability#audit","portability → Audit",[967,3053,3055],{"id":3054},"limits-gotchas","Limits & gotchas",[1003,3057,3058,3069,3082,3090,3096,3104],{},[1006,3059,3060,3061,3064,3065,3068],{},"Withdrawal requests live as ",[948,3062,3063],{},"plaintext metadata"," in the reserved\n",[953,3066,3067],{},"_user_withdrawal_requests"," collection — collection names, disposition, legal basis.\nNothing secret in this trust model (the owner sees the data anyway), and no\nsecret is ever stored.",[1006,3070,3071,3072,3074,3075,3078,3079,3081],{},"A ",[953,3073,993],{}," snapshot stays under the firm's own DEKs — it is ",[948,3076,3077],{},"retention",", not\nerasure: the firm can still read it. Use ",[953,3080,989],{}," when the goal is that the data is\ngone.",[1006,3083,3084,3086,3087,3089],{},[953,3085,1754],{}," is unusable until the firm enables\n",[953,3088,1772],{}," in the vault policy — the gate fails closed by default.",[1006,3091,3092,3093,3095],{},"A requester with all-collection read access must pass an explicit\n",[953,3094,1326],{},"; the ceremony refuses an unbounded \"withdraw everything\" request.",[1006,3097,3098,3099,3101,3102,965],{},"Expired requests (past ",[953,3100,1552],{},") can no longer be approved or rejected —\n",[953,3103,2954],{},[1006,3105,3106,3107,3112],{},"Audit entries are only written when a history\u002Fledger strategy is configured; enable\n",[963,3108,3109],{"href":2971},[953,3110,3111],{},"withHistory()"," for the compliance trail.",[967,3114,3116],{"id":3115},"see-also","See also",[1003,3118,3119,3130,3144,3149,3156,3165,3173,3179,3184],{},[1006,3120,3121,3123,3124,3126,3127,3129],{},[963,3122,800],{"href":801}," — the non-destructive other half of ",[953,3125,955],{},": ",[953,3128,2460],{}," and the shared opt-in.",[1006,3131,3132,3135,3136,3139,3140,3143],{},[963,3133,629],{"href":3134},".\u002Fbundle"," — the ",[953,3137,3138],{},".noydb"," container format; ",[953,3141,3142],{},"readPod()"," to open a withdrawn bundle.",[1006,3145,3146,3148],{},[963,3147,868],{"href":984}," — roles, grants, and per-collection permissions.",[1006,3150,3151,2048,3153,3155],{},[963,3152,844],{"href":2338},[963,3154,796],{"href":2343}," — the tier ladder and the gate DSL the withdrawal gates are built on.",[1006,3157,3158,3161,3162,3164],{},[963,3159,3160],{"href":2071},"transferable-partitions"," — owner-side ",[953,3163,2074],{}," for handing over whole partitions.",[1006,3166,3167,3169,3170,3172],{},[963,3168,661],{"href":2137}," — the custodian role and the audited ",[953,3171,2141],{}," ceremony.",[1006,3174,3175,3178],{},[963,3176,685],{"href":3177},".\u002Fforget"," — per-record crypto-shred erasure by subject key.",[1006,3180,3181,3183],{},[963,3182,697],{"href":2971}," — the tamper-evident ledger the audit entries land in.",[1006,3185,3186,3187,965],{},"Proven by showcase ",[963,3188,3192],{"href":3189,"rel":3190},"https:\u002F\u002Fgithub.com\u002Fnoy-db\u002Fdocs\u002Fblob\u002Fmain\u002Fshowcases\u002Fsrc\u002F120-client-portability-withdrawal.showcase.test.ts",[3191],"nofollow",[953,3193,3194],{},"120-client-portability-withdrawal",[3196,3197,3198],"style",{},"html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}",{"title":1172,"searchDepth":1225,"depth":1225,"links":3200},[3201,3202,3203,3204,3205,3206,3207,3208,3209,3210,3217,3218,3219,3220],{"id":969,"depth":1186,"text":970},{"id":1043,"depth":1186,"text":1044},{"id":1067,"depth":1186,"text":1068},{"id":1104,"depth":1186,"text":1105},{"id":1148,"depth":1186,"text":1149},{"id":1762,"depth":1186,"text":1763},{"id":2020,"depth":1186,"text":2021},{"id":2204,"depth":1186,"text":2205},{"id":2327,"depth":1186,"text":2328},{"id":2445,"depth":1186,"text":2446,"children":3211},[3212,3213,3214,3215,3216],{"id":2469,"depth":1225,"text":2472},{"id":2601,"depth":1225,"text":2604},{"id":2696,"depth":1225,"text":2699},{"id":2881,"depth":1225,"text":2884},{"id":2893,"depth":1225,"text":2896},{"id":2902,"depth":1186,"text":2903},{"id":2960,"depth":1186,"text":2961},{"id":3054,"depth":1186,"text":3055},{"id":3115,"depth":1186,"text":3116},null,"Removal half of `withPortability()`: a non-owner withdraws the data their keyring can decrypt — self-serve (gated) or via a two-party ceremony.","md",{},"service",{"title":900,"description":3222},"stable","important","CnASfaJbH-wkOyhcXMwaCB20p8Nor2QlWGZBq9Pb-Xw",{"data":3231,"body":3232},{},{"type":3233,"children":3234},"root",[3235],{"type":3236,"tag":945,"props":3237,"children":3238},"element",{},[3239],{"type":3236,"tag":953,"props":3240,"children":3242},{"className":3241},[],[3243],{"type":3244,"value":3245},"text","@noy-db\u002Fhub\u002Fportability",{"data":3247,"body":3248},{},{"type":3233,"children":3249},[3250],{"type":3236,"tag":945,"props":3251,"children":3252},{},[3253],{"type":3236,"tag":953,"props":3254,"children":3256},{"className":3255},[],[3257],{"type":3244,"value":955},{"data":3259,"body":3260},{},{"type":3233,"children":3261},[3262],{"type":3236,"tag":945,"props":3263,"children":3264},{},[3265],{"type":3236,"tag":953,"props":3266,"children":3268},{"className":3267},[],[3269],{"type":3244,"value":3270},"with-audit",1791896588042]