@noy-db/hub 0.1.0-pre.8 → 0.1.0-pre.9

package/dist/index.d.cts

@@ -1,16 +1,16 @@
-import { at as NoydbStore, aR as UserEnvelope, aS as PublicEnvelope, aT as GateName, aU as GatePolicy, aV as VaultPolicy, aW as ActiveTier, aX as FactorProof, ar as UnlockedKeyring, aY as Vault, aA as DiffEntry } from './types-arFMsCtn.cjs';
-export { aZ as AccessibleVault, ax as AppendInput, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, a_ as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, a$ as BuiltInGateName, b0 as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, b1 as CacheOptions, b2 as CacheStats, b3 as ChangeEvent, ay as ChangeType, a7 as ClosePeriodOptions, b4 as Collection, b5 as CollectionChangeEvent, b6 as CollectionConflictResolver, ai as CollectionFrame, az as CollectionInstant, b7 as Conflict, b8 as ConflictPolicy, b9 as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, ba as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bb as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bc as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bd as DeepPartial, be as DelegationToken, bf as DeleteManyResult, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bg as DirtyEntry, bh as ELEVATION_AUDIT_COLLECTION, bi as ElevatedHandle, av as EncryptedEnvelope, bj as EnrollAuthenticatorOptions, bk as ExportCapability, bl as ExportChunk, bm as ExportFormat, bn as ExportStreamOptions, bo as FactorKind, bp as FactorRequirement, bq as GhostRecord, br as GrantOptions, bs as HistoryConfig, bt as HistoryEntry, au as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, bu as INDEXED_STORE_POLICY, bv as ImportCapability, bw as InferOutput, bx as IssueDelegationOptions, by as IssueMagicLinkGrantOptions, aB as JsonPatch, aC as JsonPatchOp, bz as KeyringAuthenticator, bA as KeyringFile, aD as LedgerEntry, aE as LedgerStore, bB as ListAccessibleVaultsOptions, bC as ListPageResult, bD as LiveUserEnvelope, bE as LocaleReadOptions, bF as Lru, bG as LruOptions, bH as LruStats, bI as MAGIC_LINK_CONTENT_INFO_PREFIX, bJ as MAGIC_LINK_GRANTS_COLLECTION, bK as MAGIC_LINK_KEK_INFO_PREFIX, bL as MagicLinkGrantPayload, bM as MagicLinkGrantRecord, bN as NOYDB_BACKUP_VERSION, bO as NOYDB_FORMAT_VERSION, bP as NOYDB_KEYRING_VERSION, bQ as NOYDB_SYNC_VERSION, bR as Noydb, bS as NoydbBundleStore, bT as NoydbEventMap, bU as NoydbOptions, a8 as OpenPeriodOptions, a9 as PERIODS_COLLECTION, bV as PUBLIC_ENVELOPE_FIELDS, bW as PaperRecoveryDoc, bX as PaperRecoveryEntry, bY as PassphrasePolicy, bZ as PassphraseValidationResult, aa as PeriodRecord, b_ as Permission, b$ as Permissions, c0 as PlaintextTranslatorContext, c1 as PlaintextTranslatorFn, P as PolicyEnforcer, c2 as PresenceHandle, c3 as PresencePeer, aw as PruneOptions, c4 as PublicEnvelopeField, c5 as PublicEnvelopeSchema, c6 as PublicEnvelopeText, c7 as PullMode, c8 as PullOptions, c9 as PullPolicy, ca as PullResult, cb as PushMode, cc as PushOptions, cd as PushPolicy, ce as PushResult, cf as PutManyItemOptions, cg as PutManyOptions, ch as PutManyResult, ci as QueryAcrossOptions, cj as QueryAcrossResult, ck as QuickUnlockState, cl as QuickUnlockStore, cm as ReAuthOperation, cn as RecoverPassphraseInput, co as RecoverPassphraseResult, cp as RecoverUserOptions, cq as RecoveryProof, cr as ResolvedPublicEnvelopeSchema, cs as RevokeOptions, aq as Role, ct as RotatePassphraseInput, cu as SessionPolicy, cv as SetPublicEnvelopeInput, U as SlotInfo, V as SlotRecord, cw as StandardSchemaV1, cx as StandardSchemaV1Issue, cy as StandardSchemaV1SyncResult, cz as StoreAuth, cA as StoreAuthKind, cB as StoreCapabilities, cC as SyncEngine, cD as SyncMetadata, cE as SyncPolicy, cF as SyncScheduler, cG as SyncSchedulerStatus, cH as SyncStatus, cI as SyncTarget, cJ as SyncTargetRole, cK as SyncTransaction, cL as SyncTransactionResult, cM as TierMode, cN as TranslatorAuditEntry, al as TxCollection, am as TxContext, cO as TxOp, an as TxVault, cP as USER_ENVELOPE_COLLECTION, cQ as USER_ENVELOPE_MAX_BYTES, cR as Unsubscribe, cS as UserApi, cT as UserEnvelopeCheckGate, cU as UserEnvelopeOversizedError, cV as UserEnvelopePresented, cW as UserInfo, cX as VaultBackup, aF as VaultEngine, aj as VaultFrame, aG as VaultInstant, cY as VaultPolicyOnDisk, cZ as VaultSnapshot, aH as VerifyResult, W as VersionRecord, c_ as WarningRules, c$ as WeakPassphraseError, d0 as WeakPassphraseReason, d1 as WrappedDeksBlob, g as applyI18nLocale, aI as applyPatch, d2 as assertStrongPassphrase, d3 as buildRecipientKeyringFile, d4 as burnPaperRecoveryEntry, aJ as canonicalJson, aK as computePatch, n as createEnforcer, d5 as createNoydb, d6 as createStore, d7 as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, aL as diff, d8 as enrollAuthenticator, d9 as estimateEntropy, da as evaluateExportCapability, db as evaluateImportCapability, dc as findAuthenticator, aM as formatDiff, dd as hasExportCapability, de as hasImportCapability, df as hasRecoveryEnrolled, aN as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, dg as isMagicLinkGrantExpired, dh as isPublicEnvelope, di as issueDelegation, dj as keyringRecoverPassphrase, dk as keyringRotatePassphrase, dl as listMagicLinkGrants, dm as listUsers, dn as listUsersWithEnvelopes, dp as loadActiveDelegations, dq as loadPaperRecoveryEntries, dr as magicLinkGrantRecordId, ds as mintPaperRecoveryEntry, dt as mintWrappedDeksBlob, aO as paddedIndex, aP as parseIndex, du as readMagicLinkGrantRecord, dv as recoverUser, dw as removeAuthenticator, r as resolveI18nText, dx as resolvePublicEnvelopeSchema, dy as revokeDelegation, dz as revokeMagicLinkGrant, ao as runTransaction, dA as savePaperRecoveryEntries, aQ as sha256Hex, dB as unwrapDeksFromBlob, dC as unwrapDeksFromPaperEntry, dD as unwrapMagicLinkGrant, v as validateI18nTextValue, dE as validatePassphrase, dF as validatePublicEnvelopeInput, dG as validateSchemaInput, dH as validateSchemaOutput, o as validateSessionPolicy, dI as writeMagicLinkGrant } from './types-arFMsCtn.cjs';
+import { at as NoydbStore, aR as UserEnvelope, aS as PublicEnvelope, aT as GateName, aU as GatePolicy, aV as VaultPolicy, aW as ActiveTier, aX as FactorProof, ar as UnlockedKeyring, aY as Vault, aA as DiffEntry } from './types-Bnb82f5R.cjs';
+export { aZ as AccessibleVault, ax as AppendInput, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, a_ as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, a$ as BuiltInGateName, b0 as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, b1 as CacheOptions, b2 as CacheStats, b3 as ChangeEvent, ay as ChangeType, a7 as ClosePeriodOptions, b4 as Collection, b5 as CollectionChangeEvent, b6 as CollectionConflictResolver, ai as CollectionFrame, az as CollectionInstant, b7 as Conflict, b8 as ConflictPolicy, b9 as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, ba as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bb as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bc as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bd as DeepPartial, be as DeepPartialOrNull, bf as DelegationToken, bg as DeleteManyResult, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bh as DirtyEntry, bi as ELEVATION_AUDIT_COLLECTION, bj as ElevatedHandle, av as EncryptedEnvelope, bk as EnrollAuthenticatorOptions, bl as ExportCapability, bm as ExportChunk, bn as ExportFormat, bo as ExportStreamOptions, bp as FactorKind, bq as FactorRequirement, br as GhostRecord, bs as GrantOptions, bt as HistoryConfig, bu as HistoryEntry, au as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, bv as INDEXED_STORE_POLICY, bw as ImportCapability, bx as InferOutput, by as IssueDelegationOptions, bz as IssueMagicLinkGrantOptions, aB as JsonPatch, aC as JsonPatchOp, bA as KeyringAuthenticator, bB as KeyringFile, aD as LedgerEntry, aE as LedgerStore, bC as ListAccessibleVaultsOptions, bD as ListPageResult, bE as LiveUserEnvelope, bF as LocaleReadOptions, bG as Lru, bH as LruOptions, bI as LruStats, bJ as MAGIC_LINK_CONTENT_INFO_PREFIX, bK as MAGIC_LINK_GRANTS_COLLECTION, bL as MAGIC_LINK_KEK_INFO_PREFIX, bM as MagicLinkGrantPayload, bN as MagicLinkGrantRecord, bO as NOYDB_BACKUP_VERSION, bP as NOYDB_FORMAT_VERSION, bQ as NOYDB_KEYRING_VERSION, bR as NOYDB_SYNC_VERSION, bS as Noydb, bT as NoydbBundleStore, bU as NoydbEventMap, bV as NoydbOptions, a8 as OpenPeriodOptions, a9 as PERIODS_COLLECTION, bW as PUBLIC_ENVELOPE_FIELDS, bX as PaperRecoveryDoc, bY as PaperRecoveryEntry, bZ as PassphrasePolicy, b_ as PassphraseValidationResult, aa as PeriodRecord, b$ as Permission, c0 as Permissions, c1 as PlaintextTranslatorContext, c2 as PlaintextTranslatorFn, P as PolicyEnforcer, c3 as PresenceHandle, c4 as PresencePeer, aw as PruneOptions, c5 as PublicEnvelopeField, c6 as PublicEnvelopeSchema, c7 as PublicEnvelopeText, c8 as PullMode, c9 as PullOptions, ca as PullPolicy, cb as PullResult, cc as PushMode, cd as PushOptions, ce as PushPolicy, cf as PushResult, cg as PutManyItemOptions, ch as PutManyOptions, ci as PutManyResult, cj as QueryAcrossOptions, ck as QueryAcrossResult, cl as QuickUnlockState, cm as QuickUnlockStore, cn as ReAuthOperation, co as RecoverPassphraseInput, cp as RecoverPassphraseResult, cq as RecoverUserOptions, cr as RecoveryProof, cs as ResolvedPublicEnvelopeSchema, ct as RevokeOptions, aq as Role, cu as RotatePassphraseInput, cv as SessionPolicy, cw as SetPublicEnvelopeInput, U as SlotInfo, V as SlotRecord, cx as SlotRewrapCeremony, cy as SlotRewrapContext, cz as StandardSchemaV1, cA as StandardSchemaV1Issue, cB as StandardSchemaV1SyncResult, cC as StoreAuth, cD as StoreAuthKind, cE as StoreCapabilities, cF as SyncEngine, cG as SyncMetadata, cH as SyncPolicy, cI as SyncScheduler, cJ as SyncSchedulerStatus, cK as SyncStatus, cL as SyncTarget, cM as SyncTargetRole, cN as SyncTransaction, cO as SyncTransactionResult, cP as TierMode, cQ as TranslatorAuditEntry, al as TxCollection, am as TxContext, cR as TxOp, an as TxVault, cS as USER_ENVELOPE_COLLECTION, cT as USER_ENVELOPE_MAX_BYTES, cU as Unsubscribe, cV as UpdateAuthenticatorOptions, cW as UpdateUserOptions, cX as UserApi, cY as UserEnvelopeCheckGate, cZ as UserEnvelopeOversizedError, c_ as UserEnvelopePresented, c$ as UserInfo, d0 as VaultBackup, aF as VaultEngine, aj as VaultFrame, aG as VaultInstant, d1 as VaultPolicyOnDisk, d2 as VaultSnapshot, aH as VerifyResult, W as VersionRecord, d3 as WarningRules, d4 as WeakPassphraseError, d5 as WeakPassphraseReason, d6 as WrappedDeksBlob, g as applyI18nLocale, aI as applyPatch, d7 as assertStrongPassphrase, d8 as buildRecipientKeyringFile, d9 as burnPaperRecoveryEntry, aJ as canonicalJson, aK as computePatch, n as createEnforcer, da as createNoydb, db as createStore, dc as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, aL as diff, dd as enrollAuthenticator, de as estimateEntropy, df as evaluateExportCapability, dg as evaluateImportCapability, dh as findAuthenticator, aM as formatDiff, di as hasExportCapability, dj as hasImportCapability, dk as hasRecoveryEnrolled, aN as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, dl as isMagicLinkGrantExpired, dm as isPublicEnvelope, dn as issueDelegation, dp as keyringRecoverPassphrase, dq as keyringRotatePassphrase, dr as listMagicLinkGrants, ds as listUsers, dt as listUsersWithEnvelopes, du as loadActiveDelegations, dv as loadPaperRecoveryEntries, dw as magicLinkGrantRecordId, dx as mintPaperRecoveryEntry, dy as mintWrappedDeksBlob, aO as paddedIndex, aP as parseIndex, dz as readMagicLinkGrantRecord, dA as recoverUser, dB as removeAuthenticator, r as resolveI18nText, dC as resolvePublicEnvelopeSchema, dD as revokeDelegation, dE as revokeMagicLinkGrant, ao as runTransaction, dF as savePaperRecoveryEntries, aQ as sha256Hex, dG as unwrapDeksFromBlob, dH as unwrapDeksFromPaperEntry, dI as unwrapMagicLinkGrant, v as validateI18nTextValue, dJ as validatePassphrase, dK as validatePublicEnvelopeInput, dL as validateSchemaInput, dM as validateSchemaOutput, o as validateSessionPolicy, dN as writeMagicLinkGrant } from './types-Bnb82f5R.cjs';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.cjs';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.cjs';
 import { N as NoydbError } from './index-6xNpPsxR.cjs';
 export { A as AlreadyElevatedError, B as BackupCorruptedError, a as BackupLedgerError, b as BundleIntegrityError, c as BundleVersionConflictError, C as ConflictError, D as DEFAULT_JOIN_MAX_ROWS, d as DanglingReferenceError, e as DecryptionError, f as DelegationTargetMissingError, g as DictKeyInUseError, h as DictKeyMissingError, E as ElevationExpiredError, i as ExportCapabilityError, F as FilenameSanitizationError, G as GroupCardinalityError, I as ImportCapabilityError, j as IndexRequiredError, k as IndexWriteFailureError, l as InvalidKeyError, J as JoinContext, m as JoinLeg, n as JoinStrategy, o as JoinTooLargeError, p as JoinableSource, K as KeyringExpiredError, L as LedgerContentionError, q as LiveQuery, r as LiveUpstream, s as LocaleNotSpecifiedError, M as MissingTranslationError, t as NetworkError, u as NoAccessError, v as NotFoundError, O as OrderBy, P as PathEscapeError, w as PeriodClosedError, x as PermissionDeniedError, y as PrivilegeEscalationError, Q as Query, z as QueryPlan, H as QuerySource, R as ReadOnlyAtInstantError, S as ReadOnlyError, T as ReadOnlyFrameError, U as RefDescriptor, V as RefIntegrityError, W as RefMode, X as RefRegistry, Y as RefScopeError, Z as RefViolation, _ as ReservedCollectionNameError, $ as ScanBuilder, a0 as ScanPageProvider, a1 as SchemaValidationError, a2 as SessionExpiredError, a3 as SessionNotFoundError, a4 as SessionPolicyError, a5 as StoreCapabilityError, a6 as TamperedError, a7 as TierDemoteDeniedError, a8 as TierNotGrantedError, a9 as TranslatorNotConfiguredError, aa as ValidationError, ab as applyJoins, ac as buildLiveQuery, ad as executePlan, ae as ref, af as resetJoinWarnings } from './index-6xNpPsxR.cjs';
-export { C as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, a as NOYDB_BUNDLE_MAGIC, b as NOYDB_BUNDLE_PREFIX_BYTES, c as NoydbBundleHeader, d as NoydbBundleReadResult, W as WriteNoydbBundleOptions, g as generateULID, h as hasNoydbBundleMagic, i as isULID, r as readNoydbBundle, e as readNoydbBundleHeader, f as readNoydbBundlePublicEnvelope, j as resetBrotliSupportCache, w as writeNoydbBundle } from './index-DsVbTDZI.cjs';
+export { C as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, a as NOYDB_BUNDLE_MAGIC, b as NOYDB_BUNDLE_PREFIX_BYTES, c as NoydbBundleHeader, d as NoydbBundleReadResult, W as WriteNoydbBundleOptions, g as generateULID, h as hasNoydbBundleMagic, i as isULID, r as readNoydbBundle, e as readNoydbBundleHeader, f as readNoydbBundlePublicEnvelope, j as resetBrotliSupportCache, w as writeNoydbBundle } from './index-CywCC1qZ.cjs';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.cjs';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.cjs';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-BZKx666y.cjs';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-Da1B0TIK.cjs';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-SBHmi6D0.cjs';
 export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedRow, L as LiveAggregation, R as Reducer, i as ReducerOptions, j as avg, l as count, m as groupAndReduce, n as max, o as min, r as reduceRecords, s as sum } from './strategy-D-SrOLCl.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-CIyfmKsg.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-BEfzPKwo.cjs';
 import './lazy-builder-CZVLKh0Z.cjs';
 
 /**

package/dist/index.d.ts

@@ -1,16 +1,16 @@
-import { at as NoydbStore, aR as UserEnvelope, aS as PublicEnvelope, aT as GateName, aU as GatePolicy, aV as VaultPolicy, aW as ActiveTier, aX as FactorProof, ar as UnlockedKeyring, aY as Vault, aA as DiffEntry } from './types-DD9eKKNc.js';
-export { aZ as AccessibleVault, ax as AppendInput, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, a_ as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, a$ as BuiltInGateName, b0 as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, b1 as CacheOptions, b2 as CacheStats, b3 as ChangeEvent, ay as ChangeType, a7 as ClosePeriodOptions, b4 as Collection, b5 as CollectionChangeEvent, b6 as CollectionConflictResolver, ai as CollectionFrame, az as CollectionInstant, b7 as Conflict, b8 as ConflictPolicy, b9 as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, ba as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bb as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bc as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bd as DeepPartial, be as DelegationToken, bf as DeleteManyResult, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bg as DirtyEntry, bh as ELEVATION_AUDIT_COLLECTION, bi as ElevatedHandle, av as EncryptedEnvelope, bj as EnrollAuthenticatorOptions, bk as ExportCapability, bl as ExportChunk, bm as ExportFormat, bn as ExportStreamOptions, bo as FactorKind, bp as FactorRequirement, bq as GhostRecord, br as GrantOptions, bs as HistoryConfig, bt as HistoryEntry, au as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, bu as INDEXED_STORE_POLICY, bv as ImportCapability, bw as InferOutput, bx as IssueDelegationOptions, by as IssueMagicLinkGrantOptions, aB as JsonPatch, aC as JsonPatchOp, bz as KeyringAuthenticator, bA as KeyringFile, aD as LedgerEntry, aE as LedgerStore, bB as ListAccessibleVaultsOptions, bC as ListPageResult, bD as LiveUserEnvelope, bE as LocaleReadOptions, bF as Lru, bG as LruOptions, bH as LruStats, bI as MAGIC_LINK_CONTENT_INFO_PREFIX, bJ as MAGIC_LINK_GRANTS_COLLECTION, bK as MAGIC_LINK_KEK_INFO_PREFIX, bL as MagicLinkGrantPayload, bM as MagicLinkGrantRecord, bN as NOYDB_BACKUP_VERSION, bO as NOYDB_FORMAT_VERSION, bP as NOYDB_KEYRING_VERSION, bQ as NOYDB_SYNC_VERSION, bR as Noydb, bS as NoydbBundleStore, bT as NoydbEventMap, bU as NoydbOptions, a8 as OpenPeriodOptions, a9 as PERIODS_COLLECTION, bV as PUBLIC_ENVELOPE_FIELDS, bW as PaperRecoveryDoc, bX as PaperRecoveryEntry, bY as PassphrasePolicy, bZ as PassphraseValidationResult, aa as PeriodRecord, b_ as Permission, b$ as Permissions, c0 as PlaintextTranslatorContext, c1 as PlaintextTranslatorFn, P as PolicyEnforcer, c2 as PresenceHandle, c3 as PresencePeer, aw as PruneOptions, c4 as PublicEnvelopeField, c5 as PublicEnvelopeSchema, c6 as PublicEnvelopeText, c7 as PullMode, c8 as PullOptions, c9 as PullPolicy, ca as PullResult, cb as PushMode, cc as PushOptions, cd as PushPolicy, ce as PushResult, cf as PutManyItemOptions, cg as PutManyOptions, ch as PutManyResult, ci as QueryAcrossOptions, cj as QueryAcrossResult, ck as QuickUnlockState, cl as QuickUnlockStore, cm as ReAuthOperation, cn as RecoverPassphraseInput, co as RecoverPassphraseResult, cp as RecoverUserOptions, cq as RecoveryProof, cr as ResolvedPublicEnvelopeSchema, cs as RevokeOptions, aq as Role, ct as RotatePassphraseInput, cu as SessionPolicy, cv as SetPublicEnvelopeInput, U as SlotInfo, V as SlotRecord, cw as StandardSchemaV1, cx as StandardSchemaV1Issue, cy as StandardSchemaV1SyncResult, cz as StoreAuth, cA as StoreAuthKind, cB as StoreCapabilities, cC as SyncEngine, cD as SyncMetadata, cE as SyncPolicy, cF as SyncScheduler, cG as SyncSchedulerStatus, cH as SyncStatus, cI as SyncTarget, cJ as SyncTargetRole, cK as SyncTransaction, cL as SyncTransactionResult, cM as TierMode, cN as TranslatorAuditEntry, al as TxCollection, am as TxContext, cO as TxOp, an as TxVault, cP as USER_ENVELOPE_COLLECTION, cQ as USER_ENVELOPE_MAX_BYTES, cR as Unsubscribe, cS as UserApi, cT as UserEnvelopeCheckGate, cU as UserEnvelopeOversizedError, cV as UserEnvelopePresented, cW as UserInfo, cX as VaultBackup, aF as VaultEngine, aj as VaultFrame, aG as VaultInstant, cY as VaultPolicyOnDisk, cZ as VaultSnapshot, aH as VerifyResult, W as VersionRecord, c_ as WarningRules, c$ as WeakPassphraseError, d0 as WeakPassphraseReason, d1 as WrappedDeksBlob, g as applyI18nLocale, aI as applyPatch, d2 as assertStrongPassphrase, d3 as buildRecipientKeyringFile, d4 as burnPaperRecoveryEntry, aJ as canonicalJson, aK as computePatch, n as createEnforcer, d5 as createNoydb, d6 as createStore, d7 as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, aL as diff, d8 as enrollAuthenticator, d9 as estimateEntropy, da as evaluateExportCapability, db as evaluateImportCapability, dc as findAuthenticator, aM as formatDiff, dd as hasExportCapability, de as hasImportCapability, df as hasRecoveryEnrolled, aN as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, dg as isMagicLinkGrantExpired, dh as isPublicEnvelope, di as issueDelegation, dj as keyringRecoverPassphrase, dk as keyringRotatePassphrase, dl as listMagicLinkGrants, dm as listUsers, dn as listUsersWithEnvelopes, dp as loadActiveDelegations, dq as loadPaperRecoveryEntries, dr as magicLinkGrantRecordId, ds as mintPaperRecoveryEntry, dt as mintWrappedDeksBlob, aO as paddedIndex, aP as parseIndex, du as readMagicLinkGrantRecord, dv as recoverUser, dw as removeAuthenticator, r as resolveI18nText, dx as resolvePublicEnvelopeSchema, dy as revokeDelegation, dz as revokeMagicLinkGrant, ao as runTransaction, dA as savePaperRecoveryEntries, aQ as sha256Hex, dB as unwrapDeksFromBlob, dC as unwrapDeksFromPaperEntry, dD as unwrapMagicLinkGrant, v as validateI18nTextValue, dE as validatePassphrase, dF as validatePublicEnvelopeInput, dG as validateSchemaInput, dH as validateSchemaOutput, o as validateSessionPolicy, dI as writeMagicLinkGrant } from './types-DD9eKKNc.js';
+import { at as NoydbStore, aR as UserEnvelope, aS as PublicEnvelope, aT as GateName, aU as GatePolicy, aV as VaultPolicy, aW as ActiveTier, aX as FactorProof, ar as UnlockedKeyring, aY as Vault, aA as DiffEntry } from './types-Bo7NSXJr.js';
+export { aZ as AccessibleVault, ax as AppendInput, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, a_ as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, a$ as BuiltInGateName, b0 as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, b1 as CacheOptions, b2 as CacheStats, b3 as ChangeEvent, ay as ChangeType, a7 as ClosePeriodOptions, b4 as Collection, b5 as CollectionChangeEvent, b6 as CollectionConflictResolver, ai as CollectionFrame, az as CollectionInstant, b7 as Conflict, b8 as ConflictPolicy, b9 as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, ba as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bb as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bc as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bd as DeepPartial, be as DeepPartialOrNull, bf as DelegationToken, bg as DeleteManyResult, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bh as DirtyEntry, bi as ELEVATION_AUDIT_COLLECTION, bj as ElevatedHandle, av as EncryptedEnvelope, bk as EnrollAuthenticatorOptions, bl as ExportCapability, bm as ExportChunk, bn as ExportFormat, bo as ExportStreamOptions, bp as FactorKind, bq as FactorRequirement, br as GhostRecord, bs as GrantOptions, bt as HistoryConfig, bu as HistoryEntry, au as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, bv as INDEXED_STORE_POLICY, bw as ImportCapability, bx as InferOutput, by as IssueDelegationOptions, bz as IssueMagicLinkGrantOptions, aB as JsonPatch, aC as JsonPatchOp, bA as KeyringAuthenticator, bB as KeyringFile, aD as LedgerEntry, aE as LedgerStore, bC as ListAccessibleVaultsOptions, bD as ListPageResult, bE as LiveUserEnvelope, bF as LocaleReadOptions, bG as Lru, bH as LruOptions, bI as LruStats, bJ as MAGIC_LINK_CONTENT_INFO_PREFIX, bK as MAGIC_LINK_GRANTS_COLLECTION, bL as MAGIC_LINK_KEK_INFO_PREFIX, bM as MagicLinkGrantPayload, bN as MagicLinkGrantRecord, bO as NOYDB_BACKUP_VERSION, bP as NOYDB_FORMAT_VERSION, bQ as NOYDB_KEYRING_VERSION, bR as NOYDB_SYNC_VERSION, bS as Noydb, bT as NoydbBundleStore, bU as NoydbEventMap, bV as NoydbOptions, a8 as OpenPeriodOptions, a9 as PERIODS_COLLECTION, bW as PUBLIC_ENVELOPE_FIELDS, bX as PaperRecoveryDoc, bY as PaperRecoveryEntry, bZ as PassphrasePolicy, b_ as PassphraseValidationResult, aa as PeriodRecord, b$ as Permission, c0 as Permissions, c1 as PlaintextTranslatorContext, c2 as PlaintextTranslatorFn, P as PolicyEnforcer, c3 as PresenceHandle, c4 as PresencePeer, aw as PruneOptions, c5 as PublicEnvelopeField, c6 as PublicEnvelopeSchema, c7 as PublicEnvelopeText, c8 as PullMode, c9 as PullOptions, ca as PullPolicy, cb as PullResult, cc as PushMode, cd as PushOptions, ce as PushPolicy, cf as PushResult, cg as PutManyItemOptions, ch as PutManyOptions, ci as PutManyResult, cj as QueryAcrossOptions, ck as QueryAcrossResult, cl as QuickUnlockState, cm as QuickUnlockStore, cn as ReAuthOperation, co as RecoverPassphraseInput, cp as RecoverPassphraseResult, cq as RecoverUserOptions, cr as RecoveryProof, cs as ResolvedPublicEnvelopeSchema, ct as RevokeOptions, aq as Role, cu as RotatePassphraseInput, cv as SessionPolicy, cw as SetPublicEnvelopeInput, U as SlotInfo, V as SlotRecord, cx as SlotRewrapCeremony, cy as SlotRewrapContext, cz as StandardSchemaV1, cA as StandardSchemaV1Issue, cB as StandardSchemaV1SyncResult, cC as StoreAuth, cD as StoreAuthKind, cE as StoreCapabilities, cF as SyncEngine, cG as SyncMetadata, cH as SyncPolicy, cI as SyncScheduler, cJ as SyncSchedulerStatus, cK as SyncStatus, cL as SyncTarget, cM as SyncTargetRole, cN as SyncTransaction, cO as SyncTransactionResult, cP as TierMode, cQ as TranslatorAuditEntry, al as TxCollection, am as TxContext, cR as TxOp, an as TxVault, cS as USER_ENVELOPE_COLLECTION, cT as USER_ENVELOPE_MAX_BYTES, cU as Unsubscribe, cV as UpdateAuthenticatorOptions, cW as UpdateUserOptions, cX as UserApi, cY as UserEnvelopeCheckGate, cZ as UserEnvelopeOversizedError, c_ as UserEnvelopePresented, c$ as UserInfo, d0 as VaultBackup, aF as VaultEngine, aj as VaultFrame, aG as VaultInstant, d1 as VaultPolicyOnDisk, d2 as VaultSnapshot, aH as VerifyResult, W as VersionRecord, d3 as WarningRules, d4 as WeakPassphraseError, d5 as WeakPassphraseReason, d6 as WrappedDeksBlob, g as applyI18nLocale, aI as applyPatch, d7 as assertStrongPassphrase, d8 as buildRecipientKeyringFile, d9 as burnPaperRecoveryEntry, aJ as canonicalJson, aK as computePatch, n as createEnforcer, da as createNoydb, db as createStore, dc as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, aL as diff, dd as enrollAuthenticator, de as estimateEntropy, df as evaluateExportCapability, dg as evaluateImportCapability, dh as findAuthenticator, aM as formatDiff, di as hasExportCapability, dj as hasImportCapability, dk as hasRecoveryEnrolled, aN as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, dl as isMagicLinkGrantExpired, dm as isPublicEnvelope, dn as issueDelegation, dp as keyringRecoverPassphrase, dq as keyringRotatePassphrase, dr as listMagicLinkGrants, ds as listUsers, dt as listUsersWithEnvelopes, du as loadActiveDelegations, dv as loadPaperRecoveryEntries, dw as magicLinkGrantRecordId, dx as mintPaperRecoveryEntry, dy as mintWrappedDeksBlob, aO as paddedIndex, aP as parseIndex, dz as readMagicLinkGrantRecord, dA as recoverUser, dB as removeAuthenticator, r as resolveI18nText, dC as resolvePublicEnvelopeSchema, dD as revokeDelegation, dE as revokeMagicLinkGrant, ao as runTransaction, dF as savePaperRecoveryEntries, aQ as sha256Hex, dG as unwrapDeksFromBlob, dH as unwrapDeksFromPaperEntry, dI as unwrapMagicLinkGrant, v as validateI18nTextValue, dJ as validatePassphrase, dK as validatePublicEnvelopeInput, dL as validateSchemaInput, dM as validateSchemaOutput, o as validateSessionPolicy, dN as writeMagicLinkGrant } from './types-Bo7NSXJr.js';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.js';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.js';
 import { N as NoydbError } from './index-DJTf9yxn.js';
 export { A as AlreadyElevatedError, B as BackupCorruptedError, a as BackupLedgerError, b as BundleIntegrityError, c as BundleVersionConflictError, C as ConflictError, D as DEFAULT_JOIN_MAX_ROWS, d as DanglingReferenceError, e as DecryptionError, f as DelegationTargetMissingError, g as DictKeyInUseError, h as DictKeyMissingError, E as ElevationExpiredError, i as ExportCapabilityError, F as FilenameSanitizationError, G as GroupCardinalityError, I as ImportCapabilityError, j as IndexRequiredError, k as IndexWriteFailureError, l as InvalidKeyError, J as JoinContext, m as JoinLeg, n as JoinStrategy, o as JoinTooLargeError, p as JoinableSource, K as KeyringExpiredError, L as LedgerContentionError, q as LiveQuery, r as LiveUpstream, s as LocaleNotSpecifiedError, M as MissingTranslationError, t as NetworkError, u as NoAccessError, v as NotFoundError, O as OrderBy, P as PathEscapeError, w as PeriodClosedError, x as PermissionDeniedError, y as PrivilegeEscalationError, Q as Query, z as QueryPlan, H as QuerySource, R as ReadOnlyAtInstantError, S as ReadOnlyError, T as ReadOnlyFrameError, U as RefDescriptor, V as RefIntegrityError, W as RefMode, X as RefRegistry, Y as RefScopeError, Z as RefViolation, _ as ReservedCollectionNameError, $ as ScanBuilder, a0 as ScanPageProvider, a1 as SchemaValidationError, a2 as SessionExpiredError, a3 as SessionNotFoundError, a4 as SessionPolicyError, a5 as StoreCapabilityError, a6 as TamperedError, a7 as TierDemoteDeniedError, a8 as TierNotGrantedError, a9 as TranslatorNotConfiguredError, aa as ValidationError, ab as applyJoins, ac as buildLiveQuery, ad as executePlan, ae as ref, af as resetJoinWarnings } from './index-DJTf9yxn.js';
-export { C as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, a as NOYDB_BUNDLE_MAGIC, b as NOYDB_BUNDLE_PREFIX_BYTES, c as NoydbBundleHeader, d as NoydbBundleReadResult, W as WriteNoydbBundleOptions, g as generateULID, h as hasNoydbBundleMagic, i as isULID, r as readNoydbBundle, e as readNoydbBundleHeader, f as readNoydbBundlePublicEnvelope, j as resetBrotliSupportCache, w as writeNoydbBundle } from './index-Dp4tKCjX.js';
+export { C as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, a as NOYDB_BUNDLE_MAGIC, b as NOYDB_BUNDLE_PREFIX_BYTES, c as NoydbBundleHeader, d as NoydbBundleReadResult, W as WriteNoydbBundleOptions, g as generateULID, h as hasNoydbBundleMagic, i as isULID, r as readNoydbBundle, e as readNoydbBundleHeader, f as readNoydbBundlePublicEnvelope, j as resetBrotliSupportCache, w as writeNoydbBundle } from './index-8QDuznDr.js';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-BygpnIWe.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-BdPp68qn.js';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-SBHmi6D0.js';
 export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedRow, L as LiveAggregation, R as Reducer, i as ReducerOptions, j as avg, l as count, m as groupAndReduce, n as max, o as min, r as reduceRecords, s as sum } from './strategy-D-SrOLCl.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-B0eU2Qv9.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-lsoL3eEW.js';
 import './lazy-builder-BwEoBQZ9.js';
 
 /**

package/dist/index.js

@@ -31,7 +31,7 @@ import {
   readNoydbBundlePublicEnvelope,
   resetBrotliSupportCache,
   writeNoydbBundle
-} from "./chunk-WN6UK7PM.js";
+} from "./chunk-EXHNQEV4.js";
 import {
   PUBLIC_ENVELOPE_RECORD_ID,
   isPublicEnvelope,
@@ -39,13 +39,13 @@ import {
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-RSPLI376.js";
+} from "./chunk-PTVMYYON.js";
 import {
   CONSENT_AUDIT_COLLECTION
 } from "./chunk-M62XNWRA.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-7XBQS42M.js";
+} from "./chunk-QGZRWRSL.js";
 import "./chunk-UF3BUNQZ.js";
 import {
   CollectionFrame,
@@ -69,7 +69,7 @@ import {
   isI18nTextDescriptor,
   resolveI18nText,
   validateI18nTextValue
-} from "./chunk-2WGMYBYS.js";
+} from "./chunk-MDDTIZUO.js";
 import {
   createBundleStore,
   routeStore,
@@ -89,12 +89,12 @@ import {
   getCredential,
   listCredentials,
   putCredential
-} from "./chunk-TOQK4KAN.js";
+} from "./chunk-4PWAI7Q4.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "./chunk-HC7Z5EQZ.js";
+} from "./chunk-AVVPZ4BC.js";
 import {
   USER_ENVELOPE_COLLECTION,
   USER_ENVELOPE_MAX_BYTES,
@@ -123,8 +123,9 @@ import {
   revoke,
   rotateKeys,
   saveUserEnvelope,
+  updateKeyringIdentity,
   validatePassphrase
-} from "./chunk-YVFTBQHL.js";
+} from "./chunk-WDM5XGGS.js";
 import {
   BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,
@@ -161,7 +162,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-Y4CMTMUW.js";
+} from "./chunk-QAVUREFT.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -216,14 +217,14 @@ import {
   detectMimeType,
   isPreCompressed,
   runCompaction
-} from "./chunk-R2ZTGEVP.js";
+} from "./chunk-2CSJGFCB.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION,
   NOYDB_KEYRING_VERSION,
   NOYDB_SYNC_VERSION,
   createStore
-} from "./chunk-PJK6IOBC.js";
+} from "./chunk-RKJ6OL7K.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -454,6 +455,38 @@ async function enrollAuthenticator(store, vault, keyring, options) {
   await persistKeyring(store, vault, next);
   return next;
 }
+async function updateAuthenticator(store, vault, keyring, slotId, options) {
+  if (options.meta === void 0) {
+    throw new ValidationError(
+      `updateAuthenticator: at least one of meta must be provided (slotId: "${slotId}").`
+    );
+  }
+  const idx = keyring.authenticators.findIndex((a) => a.id === slotId);
+  if (idx === -1) {
+    throw new NoAccessError(
+      `updateAuthenticator: slot "${slotId}" not found in vault "${vault}".`
+    );
+  }
+  const existing = keyring.authenticators[idx];
+  const mergedMeta = { ...existing.meta };
+  for (const [k, v] of Object.entries(options.meta)) {
+    if (v === void 0) continue;
+    if (v === null) {
+      delete mergedMeta[k];
+      continue;
+    }
+    mergedMeta[k] = v;
+  }
+  const next = { ...existing, meta: mergedMeta };
+  const nextSlots = [...keyring.authenticators];
+  nextSlots[idx] = next;
+  const nextKeyring = {
+    ...keyring,
+    authenticators: nextSlots
+  };
+  await persistKeyring(store, vault, nextKeyring);
+  return nextKeyring;
+}
 async function removeAuthenticator(store, vault, keyring, slotId) {
   const filtered = keyring.authenticators.filter((a) => a.id !== slotId);
   if (filtered.length === keyring.authenticators.length) {
@@ -895,6 +928,17 @@ var UserApi = class {
    * the envelope on first call. Optimistic-concurrency safe — a stale
    * `_v` (parallel writer on another device) throws `ConflictError`.
    *
+   * Patch semantics (#57):
+   *   - `undefined` (or omitted key) — skip; existing value preserved
+   *   - `null` — delete the field from the merged result
+   *   - any other value — overwrite (deep-merge for plain objects,
+   *     replace for primitives / arrays)
+   *
+   * To clear a field, pass `null` rather than `undefined`. Callers
+   * with shape `T = string | null` where `null` is a meaningful value
+   * should use `setMe` for that specific field instead — `null` here
+   * always means delete.
+   *
    * Gated by the `edit-own-profile` policy gate (default `minTier: 3`).
    * Pass `presented` to satisfy tightened policies that require a
    * factor proof (e.g. STRICT_POLICY's TOTP requirement).
@@ -1066,9 +1110,17 @@ function deepMerge(source, patch) {
   }
   const out = { ...source };
   for (const [key, patchVal] of Object.entries(patch)) {
+    if (patchVal === void 0) {
+      continue;
+    }
+    if (patchVal === null) {
+      delete out[key];
+      continue;
+    }
     const sourceVal = source[key];
-    if (isPlainObject(sourceVal) && isPlainObject(patchVal)) {
-      out[key] = deepMerge(sourceVal, patchVal);
+    if (isPlainObject(patchVal)) {
+      const recurseSource = isPlainObject(sourceVal) ? sourceVal : {};
+      out[key] = deepMerge(recurseSource, patchVal);
     } else {
       out[key] = patchVal;
     }
@@ -5378,7 +5430,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-3QTQADDW.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-6JTACYJV.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -5976,6 +6028,12 @@ var PERSONAL_POLICY = Object.freeze({
     },
     "enroll-authenticator": { minTier: 1 },
     "remove-authenticator": { minTier: 1 },
+    // update-authenticator: meta-only mutation (slot rename, label
+    // changes). Symmetric with enroll/remove under PERSONAL — tier-1
+    // unlock alone. The structural anti-slot-swap guard inside the
+    // implementation enforces wrap-material/id/method immutability
+    // regardless of this gate's settings.
+    "update-authenticator": { minTier: 1 },
     "rotate-unlock": { minTier: 2 },
     "enroll-user": { minTier: 1 },
     "revoke-user": { minTier: 1 },
@@ -5985,6 +6043,12 @@ var PERSONAL_POLICY = Object.freeze({
     // virtue of being a co-owner). Tier-1 unlock is the floor; the
     // STRICT preset adds a recovery/email-OTP requirement.
     "peer-recover-user": { minTier: 1 },
+    // update-user: post-grant identity mutation (role/displayName/
+    // permissions). PERSONAL_POLICY treats this on par with enroll-user
+    // / revoke-user — tier-1 unlock alone. The role-elevation guard
+    // inside the implementation is the structural backstop that this
+    // gate's settings cannot weaken.
+    "update-user": { minTier: 1 },
     "export-bundle": { minTier: 1 },
     "export-plaintext": {
       minTier: 1,
@@ -6029,6 +6093,15 @@ var STRICT_POLICY = Object.freeze({
       minTier: 1,
       factors: [{ anyOf: ["totp", "email-otp"] }]
     },
+    // STRICT update-authenticator: same factor floor as enroll/remove.
+    // Even though meta changes don't touch wrap material, a malicious
+    // rename could mislead the user about which device a slot
+    // corresponds to ("MacBook Touch ID" → "iPhone Touch ID" on a
+    // shared workstation). STRICT requires a fresh factor proof.
+    "update-authenticator": {
+      minTier: 1,
+      factors: [{ anyOf: ["totp", "email-otp"] }]
+    },
     "rotate-unlock": { minTier: 1 },
     "enroll-user": {
       minTier: 1,
@@ -6051,6 +6124,18 @@ var STRICT_POLICY = Object.freeze({
       minTier: 1,
       factors: [{ anyOf: ["recovery", "totp", "email-otp", "webauthn-roaming"] }]
     },
+    // STRICT update-user: matches the enroll-user / revoke-user shape
+    // (off-device factor required). Update-user is admin-shaped — it
+    // mutates someone else's role/permissions; STRICT requires a fresh
+    // off-device factor proof so the operator affirmatively re-asserts
+    // identity at the moment of mutation. Platform-bound factors
+    // (Touch ID / password / PIN) intentionally excluded: same logic as
+    // peer-recover-user — the off-device requirement is the whole
+    // point under STRICT.
+    "update-user": {
+      minTier: 1,
+      factors: [{ anyOf: ["totp", "email-otp"] }]
+    },
     "export-bundle": {
       minTier: 1,
       factors: [{ anyOf: ["totp", "email-otp"] }],
@@ -6445,6 +6530,56 @@ var Noydb = class {
     const keyring = await this.getKeyring(vault);
     await revoke(this.options.store, vault, keyring, options);
   }
+  /**
+   * Mutate post-grant identity fields on an existing keyring — `role`,
+   * `displayName`, and/or `permissions`. Pure plaintext-header rewrite:
+   * no DEK rewrap, no KEK required, no authenticator slots touched.
+   * Tier-2 enrollments and recovery codes survive.
+   *
+   * Different from `db.revoke + db.grant`:
+   *
+   *   - Same `userId`, same DEK wrappings, same `granted_by`, same
+   *     `_users/<keyringId>` envelope. Only the specified header
+   *     fields move. Last-write-wins via the standard keyring put.
+   *   - No cascade on role demotion (admins demoted to operator keep
+   *     the keyrings they previously granted; the cascade rules are
+   *     a `db.revoke` concern, not `db.updateUser`).
+   *   - Tier-2 slots NOT dropped — the wrapping is unaffected.
+   *
+   * Role-elevation guard: BOTH the old and new role must satisfy
+   * `db.grant`'s hierarchy. Owner can do anything; admin manages
+   * admin/operator/viewer/client laterally; admin cannot promote to
+   * owner OR demote from owner. The guard runs regardless of the
+   * `update-user` policy gate's settings — gates can only be more
+   * permissive than the structural floor, never less.
+   *
+   * Gated by `update-user`. `STRICT_POLICY` requires a TOTP/email-OTP
+   * factor proof so the operator affirmatively re-asserts identity at
+   * the moment of mutation; `PERSONAL_POLICY` accepts a tier-1 unlock
+   * alone.
+   *
+   * ```ts
+   * await db.updateUser('acme', {
+   *   userId: 'bob',
+   *   role: 'operator',                 // promote
+   *   permissions: { invoices: 'rw' },
+   * }, { factors: [{ kind: 'totp' }] })
+   * ```
+   *
+   * @throws `NoAccessError` when no keyring exists for the target.
+   * @throws `PermissionDeniedError` when the role hierarchy rejects.
+   * @throws `ValidationError` when no field is provided.
+   *
+   * @see #54
+   */
+  async updateUser(vault, options, factors) {
+    await this.checkGate(vault, "update-user", factors);
+    const keyring = await this.getKeyring(vault);
+    await updateKeyringIdentity(this.options.store, vault, keyring, options);
+    if (options.userId === this.options.user) {
+      this.keyringCache.delete(vault);
+    }
+  }
   /**
    * Rotate the DEKs for the given collections in a vault.
    *
@@ -6988,6 +7123,40 @@ var Noydb = class {
     const keyring = await this.getKeyring(vault);
     return keyring.authenticators;
   }
+  /**
+   * Mutate the `meta` blob on an existing authenticator slot — slot
+   * rename, label change, attachment of UI hints. The slot's `id`,
+   * `method`, and wrap material (`wrapped_kek` / `wrapped_deks` + `iv`)
+   * are immutable through this method. Anti-slot-swap is structural,
+   * not gate-driven.
+   *
+   * `meta` patch semantics (#57-aligned):
+   *   - Top-level merge — absent keys preserved
+   *   - `null` value — delete that meta key
+   *   - Other values — replace verbatim
+   *
+   * Use case: per-slot nickname for "iPhone Touch ID" vs "MacBook
+   * Touch ID" disambiguation in admin UIs. The slot id (auto-derived
+   * from credentialId prefix) is not human-friendly; `meta.nickname`
+   * is.
+   *
+   * Gated by `update-authenticator`. PERSONAL_POLICY: tier-1 unlock
+   * alone (matches enroll/remove). STRICT_POLICY: tier-1 +
+   * TOTP/email-OTP factor proof — a malicious rename on a shared
+   * workstation could mislead the user about which device a slot
+   * corresponds to, so STRICT requires fresh factor binding.
+   *
+   * @throws `NoAccessError` when no slot with the given id exists.
+   * @throws `ValidationError` when no patch field is provided.
+   *
+   * @see #55
+   */
+  async updateAuthenticator(vault, slotId, options, presented) {
+    await this.checkGate(vault, "update-authenticator", presented);
+    const keyring = await this.getKeyring(vault);
+    const next = await updateAuthenticator(this.options.store, vault, keyring, slotId, options);
+    this.keyringCache.set(vault, next);
+  }
   /**
    * Native WebAuthn enrollment using the **real** internal keyring (#16).
    *