@noy-db/hub 0.2.0-pre.27 → 0.2.0-pre.28

package/dist/team/index.d.cts

@@ -1,12 +1,12 @@
-import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-CwrTuYFI.cjs';
-export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-CwrTuYFI.cjs';
+import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-B_eCkuEI.cjs';
+export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-B_eCkuEI.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
-import '../strategy-D1zjEV3n.cjs';
+import '../strategy-DDNvt_UD.cjs';
 import '../errors-Dwk2k1xY.cjs';
 import '../strategy-BSxFXGzb.cjs';
 import '../index-BMmajblo.cjs';
-import '../index-DoxKSsMj.cjs';
+import '../index-CVnt2Qmq.cjs';
 import '@noy-db/attestation';
 
 /**

package/dist/team/index.d.ts

@@ -1,12 +1,12 @@
-import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-CkSWJt0H.js';
-export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-CkSWJt0H.js';
+import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-84nsWSDF.js';
+export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-84nsWSDF.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
-import '../strategy-YQ1qJWyq.js';
+import '../strategy-BoITAb2H.js';
 import '../errors-Dwk2k1xY.js';
 import '../strategy-BSxFXGzb.js';
 import '../index-BMmajblo.js';
-import '../index-LaexBi3v.js';
+import '../index-DxBNV54L.js';
 import '@noy-db/attestation';
 
 /**

package/dist/team/index.js

@@ -5,7 +5,7 @@ import {
   getCredential,
   listCredentials,
   putCredential
-} from "../chunk-5EITJMUJ.js";
+} from "../chunk-ENC4C6XW.js";
 import {
   burnPaperRecoveryEntry,
   deriveMagicLinkContentKey,
@@ -29,13 +29,13 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-IWGVH2RR.js";
+} from "../chunk-QBC2TZHC.js";
 import "../chunk-J73KU4AE.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-DONPLWRC.js";
+} from "../chunk-SWGVCSIY.js";
 import {
   buildRecipientKeyringFile,
   changeSecret,
@@ -52,9 +52,9 @@ import {
   persistKeyring,
   revoke,
   updateKeyringIdentity
-} from "../chunk-LXA2E3VI.js";
+} from "../chunk-VSL3W2MO.js";
 import "../chunk-2QR2PQTT.js";
-import "../chunk-AD6RNBAW.js";
+import "../chunk-QSLIT4JZ.js";
 import "../chunk-7JSP3E67.js";
 import "../chunk-DDOYOMAD.js";
 export {

package/dist/{transition-guard-CJmb8O8q.d.ts → transition-guard-BZhOlrFT.d.ts}

@@ -1,4 +1,4 @@
-import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-CkSWJt0H.js';
+import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-84nsWSDF.js';
 
 /**
  * Register a guard for a collection. Guards run on every `put()` /

package/dist/{transition-guard-Dzj68JWC.d.cts → transition-guard-Bekgaxux.d.cts}

@@ -1,4 +1,4 @@
-import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-CwrTuYFI.cjs';
+import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-B_eCkuEI.cjs';
 
 /**
  * Register a guard for a collection. Guards run on every `put()` /

package/dist/tx/index.d.cts

@@ -1,12 +1,12 @@
-import { eC as TransactionInvariant, gj as TxStrategy } from '../types-CwrTuYFI.cjs';
-export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-CwrTuYFI.cjs';
+import { eC as TransactionInvariant, gj as TxStrategy } from '../types-B_eCkuEI.cjs';
+export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-B_eCkuEI.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
-import '../strategy-D1zjEV3n.cjs';
+import '../strategy-DDNvt_UD.cjs';
 import '../errors-Dwk2k1xY.cjs';
 import '../strategy-BSxFXGzb.cjs';
 import '../index-BMmajblo.cjs';
-import '../index-DoxKSsMj.cjs';
+import '../index-CVnt2Qmq.cjs';
 import '@noy-db/attestation';
 
 /**

package/dist/tx/index.d.ts

@@ -1,12 +1,12 @@
-import { eC as TransactionInvariant, gj as TxStrategy } from '../types-CkSWJt0H.js';
-export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-CkSWJt0H.js';
+import { eC as TransactionInvariant, gj as TxStrategy } from '../types-84nsWSDF.js';
+export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-84nsWSDF.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
-import '../strategy-YQ1qJWyq.js';
+import '../strategy-BoITAb2H.js';
 import '../errors-Dwk2k1xY.js';
 import '../strategy-BSxFXGzb.js';
 import '../index-BMmajblo.js';
-import '../index-LaexBi3v.js';
+import '../index-DxBNV54L.js';
 import '@noy-db/attestation';
 
 /**

package/dist/{types-CkSWJt0H.d.ts → types-84nsWSDF.d.ts}

@@ -1,9 +1,9 @@
 import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-ChSqcF5t.js';
-import { c as OnMissingPolicy, a as I18nTextDescriptor, L as Layer, j as AggregateSpec, N as MoneyDescriptor, A as AggregateStrategy } from './strategy-YQ1qJWyq.js';
+import { c as OnMissingPolicy, a as I18nTextDescriptor, L as Layer, k as AggregateSpec, P as MoneyDescriptor, A as AggregateStrategy } from './strategy-BoITAb2H.js';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.js';
 import { L as LedgerEntry, F as ForgetStrategy, S as SubjectRef, b as ForgetResult } from './index-BMmajblo.js';
 import { N as NoydbError } from './errors-Dwk2k1xY.js';
-import { Q as Query, c as JoinStrategy, j as RefRegistry, R as RefDescriptor, d as JoinableSource, l as RefViolation, S as ScanBuilder } from './index-LaexBi3v.js';
+import { Q as Query, c as JoinStrategy, j as RefRegistry, R as RefDescriptor, d as JoinableSource, l as RefViolation, S as ScanBuilder } from './index-DxBNV54L.js';
 import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BmhBSPCH.js';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
@@ -2748,7 +2748,7 @@ interface ScriptWarning {
  * - `'filter'` ⇒ returns a copy with disallowed characters stripped + warnings.
  * - `'warn'` ⇒ returns the value unchanged + warnings.
  */
-declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor, exempt?: ReadonlySet<string>): {
     value: Record<string, unknown>;
     warnings: ScriptWarning[];
 };
@@ -2827,10 +2827,21 @@ interface I18nStrategy {
      * non-fatal warnings. Returns the value unchanged when the field has
      * no `script` option, or under `NO_I18N`.
      */
-    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor, exempt?: ReadonlySet<string>): {
         value: Record<string, unknown>;
         warnings: ScriptWarning[];
     };
+    /**
+     * Per-field locales that are unchanged round-tripped densify fills (exempt
+     * from write-time script enforcement). Empty under NO_I18N. (#435)
+     */
+    computeExemptFills(prior: Record<string, unknown> | undefined, incoming: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>): Map<string, Set<string>>;
+    /**
+     * Eager-fill empty i18n slots from each field's substitute chain and record
+     * provenance in `record['_i18nFilled']`. Mutates `record`. No-op under
+     * NO_I18N. (#435)
+     */
+    densify(record: Record<string, unknown>, prior: Record<string, unknown> | undefined, fields: Record<string, I18nTextDescriptor>): void;
     /**
      * Construct a typed `DictionaryHandle` for the named dictionary.
      * Throws under `NO_I18N`.
@@ -11066,6 +11077,12 @@ declare class Collection<T> {
      * Declared via the `i18nFields` collection option.
      */
     private readonly i18nFields;
+    /**
+     * #435 — the densify-enabled subset of {@link i18nFields} (fields whose
+     * descriptor opts in via `densifyOnWrite: true`). `undefined` when none opt
+     * in, so the write path skips all densify work for ordinary collections.
+     */
+    private readonly i18nDensifyFields;
     /**
      * Map of field name → `DictKeyDescriptor` for fields declared with
      * `dictKey()`. Used by `get()`/`list()` to add `<field>Label` virtual
@@ -11624,6 +11641,17 @@ declare class Collection<T> {
         readonly source?: string;
         readonly sourceTs?: string;
     }): Promise<void>;
+    /**
+     * #435 — resolve the prior stored record (with its `_i18nFilled` marker) for
+     * densify. Eager: in-memory cache; lazy: LRU then adapter. undefined if absent.
+     */
+    private resolveDensifyPrior;
+    /**
+     * #435 — densify provenance for a record: which i18n slots were auto-filled,
+     * e.g. `{ name: ['en'] }`. undefined when nothing was filled. The marker is
+     * stripped from ordinary reads; this is the sanctioned audit accessor.
+     */
+    i18nProvenance(id: string): Promise<Record<string, readonly string[]> | undefined>;
     /**
      * Validate a record against this collection's schema WITHOUT writing it.
      * Returns the (possibly coerced) record on success; throws
@@ -13648,6 +13676,19 @@ interface NoydbEventMap {
         id: string;
         pruned: number;
     };
+    /**
+     * A non-fatal i18n script violation under `onScriptViolation: 'warn' | 'filter'`.
+     * 'warn' stored the value as-is; 'filter' stripped disallowed characters
+     * (the event is the only signal the stored data was mutated). 'reject'
+     * throws `ScriptViolationError` and emits nothing. (#435)
+     */
+    'i18n:script-violation': {
+        vault: string;
+        collection: string;
+        id: string;
+        mode: 'warn' | 'filter';
+        warning: ScriptWarning;
+    };
     /**
      * Emitted when a persisted-index side-car put/delete fails after the
      * main record write already succeeded. The main record is durable; the

package/dist/{types-CwrTuYFI.d.cts → types-B_eCkuEI.d.cts}

@@ -1,9 +1,9 @@
 import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-eYZzLEL1.cjs';
-import { c as OnMissingPolicy, a as I18nTextDescriptor, L as Layer, j as AggregateSpec, N as MoneyDescriptor, A as AggregateStrategy } from './strategy-D1zjEV3n.cjs';
+import { c as OnMissingPolicy, a as I18nTextDescriptor, L as Layer, k as AggregateSpec, P as MoneyDescriptor, A as AggregateStrategy } from './strategy-DDNvt_UD.cjs';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.cjs';
 import { L as LedgerEntry, F as ForgetStrategy, S as SubjectRef, b as ForgetResult } from './index-BMmajblo.cjs';
 import { N as NoydbError } from './errors-Dwk2k1xY.cjs';
-import { Q as Query, c as JoinStrategy, j as RefRegistry, R as RefDescriptor, d as JoinableSource, l as RefViolation, S as ScanBuilder } from './index-DoxKSsMj.cjs';
+import { Q as Query, c as JoinStrategy, j as RefRegistry, R as RefDescriptor, d as JoinableSource, l as RefViolation, S as ScanBuilder } from './index-CVnt2Qmq.cjs';
 import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BmhBSPCH.cjs';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
@@ -2748,7 +2748,7 @@ interface ScriptWarning {
  * - `'filter'` ⇒ returns a copy with disallowed characters stripped + warnings.
  * - `'warn'` ⇒ returns the value unchanged + warnings.
  */
-declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor, exempt?: ReadonlySet<string>): {
     value: Record<string, unknown>;
     warnings: ScriptWarning[];
 };
@@ -2827,10 +2827,21 @@ interface I18nStrategy {
      * non-fatal warnings. Returns the value unchanged when the field has
      * no `script` option, or under `NO_I18N`.
      */
-    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor, exempt?: ReadonlySet<string>): {
         value: Record<string, unknown>;
         warnings: ScriptWarning[];
     };
+    /**
+     * Per-field locales that are unchanged round-tripped densify fills (exempt
+     * from write-time script enforcement). Empty under NO_I18N. (#435)
+     */
+    computeExemptFills(prior: Record<string, unknown> | undefined, incoming: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>): Map<string, Set<string>>;
+    /**
+     * Eager-fill empty i18n slots from each field's substitute chain and record
+     * provenance in `record['_i18nFilled']`. Mutates `record`. No-op under
+     * NO_I18N. (#435)
+     */
+    densify(record: Record<string, unknown>, prior: Record<string, unknown> | undefined, fields: Record<string, I18nTextDescriptor>): void;
     /**
      * Construct a typed `DictionaryHandle` for the named dictionary.
      * Throws under `NO_I18N`.
@@ -11066,6 +11077,12 @@ declare class Collection<T> {
      * Declared via the `i18nFields` collection option.
      */
     private readonly i18nFields;
+    /**
+     * #435 — the densify-enabled subset of {@link i18nFields} (fields whose
+     * descriptor opts in via `densifyOnWrite: true`). `undefined` when none opt
+     * in, so the write path skips all densify work for ordinary collections.
+     */
+    private readonly i18nDensifyFields;
     /**
      * Map of field name → `DictKeyDescriptor` for fields declared with
      * `dictKey()`. Used by `get()`/`list()` to add `<field>Label` virtual
@@ -11624,6 +11641,17 @@ declare class Collection<T> {
         readonly source?: string;
         readonly sourceTs?: string;
     }): Promise<void>;
+    /**
+     * #435 — resolve the prior stored record (with its `_i18nFilled` marker) for
+     * densify. Eager: in-memory cache; lazy: LRU then adapter. undefined if absent.
+     */
+    private resolveDensifyPrior;
+    /**
+     * #435 — densify provenance for a record: which i18n slots were auto-filled,
+     * e.g. `{ name: ['en'] }`. undefined when nothing was filled. The marker is
+     * stripped from ordinary reads; this is the sanctioned audit accessor.
+     */
+    i18nProvenance(id: string): Promise<Record<string, readonly string[]> | undefined>;
     /**
      * Validate a record against this collection's schema WITHOUT writing it.
      * Returns the (possibly coerced) record on success; throws
@@ -13648,6 +13676,19 @@ interface NoydbEventMap {
         id: string;
         pruned: number;
     };
+    /**
+     * A non-fatal i18n script violation under `onScriptViolation: 'warn' | 'filter'`.
+     * 'warn' stored the value as-is; 'filter' stripped disallowed characters
+     * (the event is the only signal the stored data was mutated). 'reject'
+     * throws `ScriptViolationError` and emits nothing. (#435)
+     */
+    'i18n:script-violation': {
+        vault: string;
+        collection: string;
+        id: string;
+        mode: 'warn' | 'filter';
+        warning: ScriptWarning;
+    };
     /**
      * Emitted when a persisted-index side-car put/delete fails after the
      * main record write already succeeded. The main record is durable; the

package/dist/{with-materialized-view-BVfcPlaE.d.ts → with-materialized-view-CAMGQroY.d.ts}

@@ -1,4 +1,4 @@
-import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-CkSWJt0H.js';
+import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-84nsWSDF.js';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-materialized-view-dPG213gd.d.cts → with-materialized-view-DKMaZmkJ.d.cts}

@@ -1,4 +1,4 @@
-import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-CwrTuYFI.cjs';
+import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-B_eCkuEI.cjs';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-overlayed-view-CJ2UDBol.d.cts → with-overlayed-view--lWXImbV.d.cts}

@@ -1,4 +1,4 @@
-import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-CwrTuYFI.cjs';
+import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-B_eCkuEI.cjs';
 
 /**
  * Register a read-shadow overlay: bind an MV-owned base collection to

package/dist/{with-overlayed-view-zYPQzGGh.d.ts → with-overlayed-view-FnOf1v6H.d.ts}

@@ -1,4 +1,4 @@
-import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-CkSWJt0H.js';
+import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-84nsWSDF.js';
 
 /**
  * Register a read-shadow overlay: bind an MV-owned base collection to

package/dist/{with-rollup-B_zbRi3f.d.cts → with-rollup-C5875Ad5.d.cts}

@@ -1,4 +1,4 @@
-import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-CwrTuYFI.cjs';
+import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-B_eCkuEI.cjs';
 
 /**
  * Register a deterministic derivation: one source collection → one or

package/dist/{with-rollup-BvaJefEs.d.ts → with-rollup-xi-mkY6Y.d.ts}

@@ -1,4 +1,4 @@
-import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-CkSWJt0H.js';
+import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-84nsWSDF.js';
 
 /**
  * Register a deterministic derivation: one source collection → one or

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.2.0-pre.27",
+  "version": "0.2.0-pre.28",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -299,14 +299,14 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.2.0-pre.27"
+    "@noy-db/attestation": "0.2.0-pre.28"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^3.23.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.2.0-pre.27"
+    "@noy-db/on-shamir": "0.2.0-pre.28"
   },
   "peerDependencies": {
     "zod-to-json-schema": "^3.25.0"