@noy-db/hub 0.2.0-pre.7 → 0.2.0-pre.8

package/dist/tx/index.d.ts

@@ -1,10 +1,10 @@
-import { aw as TxStrategy } from '../types-DT7cXRHq.js';
-export { ax as AmendmentTxOptions, ay as TxCollection, az as TxContext, aA as TxVault, aB as runTransaction } from '../types-DT7cXRHq.js';
+import { aF as TxStrategy } from '../types-DGU60JDt.js';
+export { aG as AmendmentTxOptions, aH as TxCollection, aI as TxContext, aJ as TxVault, aK as runTransaction } from '../types-DGU60JDt.js';
 import '../lazy-builder-7tIpFyWN.js';
 import '../predicate-BSAGEyu5.js';
 import '../strategy-DSTrsZ8t.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-CmWQyC4e.js';
+import '../index-D8I_pyJD.js';
 import '@noy-db/attestation';
 
 /**

package/dist/tx/index.js

@@ -3,9 +3,9 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-OA6HE2RW.js";
+} from "../chunk-TFBP23BX.js";
 import "../chunk-FZU343FL.js";
-import "../chunk-REQJJIPP.js";
+import "../chunk-B6PB7JLN.js";
 
 // src/tx/dry-run.ts
 var SEP = " ";
@@ -43,7 +43,7 @@ async function runDryRun(db, fn) {
     const gctx = { existing: before, vault: facade, userId: v.userId, role: v.role };
     try {
       await registry.runChecks(op.collectionName, after, gctx);
-      const { GuardExecutor } = await import("../executor-V3DKOADS.js");
+      const { GuardExecutor } = await import("../executor-5PNY7LGW.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, op.id, before, after);
       }

package/dist/{types-DT7cXRHq.d.ts → types-DGU60JDt.d.ts}

@@ -1,7 +1,7 @@
 import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-7tIpFyWN.js';
 import { b as AggregateSpec, A as AggregateStrategy } from './strategy-DSTrsZ8t.js';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.js';
-import { N as NoydbError, Q as Query, av as RefRegistry, as as RefDescriptor, a6 as JoinableSource, ax as RefViolation, ay as ScanBuilder } from './index-CmWQyC4e.js';
+import { N as NoydbError, Q as Query, aw as RefRegistry, at as RefDescriptor, a7 as JoinableSource, ay as RefViolation, az as ScanBuilder } from './index-D8I_pyJD.js';
 import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BSAGEyu5.js';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
@@ -1644,6 +1644,51 @@ interface PeriodsStrategy {
     appendPeriodLedgerEntry(ledger: LedgerStore | null, actor: string, envelope: EncryptedEnvelope, periodName: string): Promise<void>;
 }
 
+/**
+ * Per-layer i18n resolution policy.
+ *
+ * `onMissing` governs what happens when a multilingual field is resolved
+ * to a target locale that is absent. It may be a single scalar policy or
+ * a per-layer map, so a field can be lenient at the app read boundary but
+ * strict inside a materialized view.
+ *
+ * Effective policy for layer `λ`:
+ *
+ * ```
+ * explicit(λ) = typeof onMissing === 'object' ? onMissing[λ] : undefined
+ * scalar      = typeof onMissing === 'string' ? onMissing : undefined
+ * policy(λ)   = explicit(λ) ?? layerDefault(λ) ?? scalar ?? 'throw'
+ * ```
+ *
+ * - `layerDefault('guard') = 'substitute'` — guards are lenient unless
+ *   EXPLICITLY overridden; they never inherit a scalar policy (a guard
+ *   reading a display value must not hard-fail on a missing locale).
+ * - every other layer has no default, so it inherits the scalar, else
+ *   falls back to `'throw'` (today's behavior — zero breaking change).
+ *
+ * @public
+ */
+type OnMissing = 'substitute' | 'null' | 'throw';
+/**
+ * The contexts in which a multilingual field is resolved. Each can carry
+ * its own `onMissing` policy.
+ *
+ * - `read`       — ordinary app reads (`get`/`list`/query projection).
+ * - `guard`      — a guard callback reading a value.
+ * - `join`       — a joined record expanded onto a row.
+ * - `mv`         — materialized-view input.
+ * - `derivation` — derivation input.
+ * - `export`     — bundle/public-envelope export.
+ */
+type Layer = 'read' | 'guard' | 'join' | 'mv' | 'derivation' | 'export';
+/** Field-level policy: a single scalar, or a per-layer map. */
+type OnMissingPolicy = OnMissing | Partial<Record<Layer, OnMissing>>;
+/**
+ * Resolve the effective `OnMissing` for a layer from a field's declared
+ * policy. See module docs for the resolution rule.
+ */
+declare function resolvePolicy(onMissing: OnMissingPolicy | undefined, layer: Layer): OnMissing;
+
 /**
  * i18nText schema type —
  *
@@ -1685,6 +1730,37 @@ interface PeriodsStrategy {
  * Pluralization, RTL rendering, date/number formatting, per-locale CRDT
  * merging.
  */
+
+/** Flatten an intersection into a single object literal for nicer hovers. */
+type Prettify<T> = {
+    [K in keyof T]: T[K];
+} & {};
+/**
+ * The stored shape of a multilingual field, inferred from its `required`
+ * mode — so the compiler forces you to handle an absent optional locale
+ * (`string | undefined`) instead of silently yielding `undefined`.
+ *
+ * Mirrors `i18nText({ languages, required })`:
+ * - `'all'` (default) — every locale required: `{ th: string; en: string }`
+ * - `'any'`           — every locale optional: `{ th?: string; en?: string }`
+ *   (the "at least one present" guarantee is runtime-only — not expressible
+ *   in TypeScript — so each key is optional)
+ * - `readonly L[]`    — listed locales required, the rest optional:
+ *   `I18nMap<'th'|'en', ['th']>` → `{ th: string; en?: string }`
+ *
+ * @example
+ * ```ts
+ * type Lang = 'th' | 'en'
+ * interface Contact {
+ *   name: I18nMap<Lang, 'any'>      // { th?: string; en?: string }
+ *   legalName: I18nMap<Lang, ['th']> // { th: string; en?: string }
+ *   slug: I18nMap<Lang>             // { th: string; en: string }
+ * }
+ * ```
+ *
+ * @public
+ */
+type I18nMap<Langs extends string, Required extends 'all' | 'any' | readonly Langs[] = 'all'> = Required extends 'all' ? Record<Langs, string> : Required extends 'any' ? Partial<Record<Langs, string>> : Required extends readonly (infer R extends Langs)[] ? Prettify<Record<R, string> & Partial<Record<Exclude<Langs, R>, string>>> : never;
 /**
  * Options for `i18nText()`.
  *
@@ -1713,6 +1789,38 @@ interface I18nTextOptions {
      * before `put()` if a translator is configured. Default: `false`.
      */
     readonly autoTranslate?: boolean;
+    /**
+     * What to do when this field is resolved to a locale that is absent.
+     * A single policy, or a per-layer map (read/guard/join/mv/derivation/
+     * export). Default `'throw'` — today's behavior, zero breaking change.
+     * See {@link OnMissingPolicy}.
+     *
+     * NOTE (current wiring): the `read` layer (`get`/`list`) is enforced.
+     * Guard, derivation, mv, join and export reads currently resolve
+     * through the same read path and so observe the `read`/scalar policy;
+     * dedicated per-layer enforcement for those contexts is a tracked
+     * follow-up (mv/join additionally require resolution to be injected
+     * into the query/aggregate pipeline, which today reads raw maps).
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /**
+     * Ordered preferred-substitute locales used when `onMissing` resolves
+     * to `'substitute'` and the target locale is absent. `'any'` as an
+     * element means "first non-empty value". A caller-supplied `fallback`
+     * at read time takes precedence over this declared list.
+     */
+    readonly substitute?: readonly string[];
+    /**
+     * Per-locale script enforcement (write-time). `'auto'` infers the
+     * allowed Unicode scripts per locale (asymmetric Latin tolerance); an
+     * object overrides per slot. Absent ⇒ no check. See `./script.ts`.
+     */
+    readonly script?: 'auto' | Partial<Record<string, readonly string[]>>;
+    /**
+     * What to do when a slot's value contains characters outside its
+     * allowed script set. Default `'reject'`.
+     */
+    readonly onScriptViolation?: 'reject' | 'filter' | 'warn';
 }
 /**
  * Descriptor returned by `i18nText()`. Attach to the collection's
@@ -1767,7 +1875,15 @@ declare function validateI18nTextValue(value: unknown, field: string, descriptor
  * @param field    Field name used in `LocaleNotSpecifiedError` messages.
  * @returns The resolved string, OR the original map when `locale === 'raw'`.
  */
+/** Options for the policy-aware form of {@link resolveI18nText}. */
+interface ResolveI18nOptions {
+    /** Effective policy for the resolution layer. Default `'throw'`. */
+    readonly policy?: OnMissing;
+    /** Declared substitute chain; applied only under policy `'substitute'`. */
+    readonly substitute?: readonly string[];
+}
 declare function resolveI18nText(value: Record<string, string>, locale: string, fallback?: string | readonly string[], field?: string): string | Record<string, string>;
+declare function resolveI18nText(value: Record<string, string>, locale: string, fallback: string | readonly string[] | undefined, field: string | undefined, opts: ResolveI18nOptions): string | Record<string, string> | null;
 /**
  * Return all leaf values at `path`, expanding `[].` array wildcards.
  *
@@ -1799,8 +1915,12 @@ declare function setAtPathInPlace(obj: Record<string, unknown>, path: string, va
  * @param i18nFields  Map of field path → `I18nTextDescriptor`.
  * @param locale      The requested locale (or `'raw'`).
  * @param fallback    Fallback chain (optional).
+ * @param layer       Resolution layer (default `'read'`). Each field's
+ *                    `onMissing` policy is resolved for this layer, so the
+ *                    same record resolves leniently on a get but strictly
+ *                    inside an mv/derivation.
  */
-declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
 
 type EventHandler<T> = (data: T) => void;
 /** Typed event emitter for NOYDB events. */
@@ -2325,6 +2445,16 @@ interface DictKeyDescriptor<Keys extends string = string> {
     readonly name: string;
     /** Declared valid keys. When set, `put()` rejects keys not in this set. */
     readonly keys: readonly Keys[] | undefined;
+    /**
+     * What to do when a label is missing for the resolved locale. Mirrors
+     * `i18nText`'s `onMissing`. Default behavior (when unset) preserves the
+     * legacy contract: a missing label is omitted (scalar) or `null`
+     * (array element) — i.e. `'null'`. Set `'substitute'` to walk the
+     * declared `substitute` chain, or `'throw'` to raise.
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /** Ordered preferred-substitute locales for label resolution. */
+    readonly substitute?: readonly string[];
 }
 /**
  * Create a `DictKeyDescriptor` for a dictionary-backed enum field.
@@ -2343,7 +2473,10 @@ interface DictKeyDescriptor<Keys extends string = string> {
  * })
  * ```
  */
-declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[]): DictKeyDescriptor<Keys>;
+declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[], opts?: {
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+}): DictKeyDescriptor<Keys>;
 /** Runtime predicate for detecting a DictKeyDescriptor. */
 declare function isDictKeyDescriptor(x: unknown): x is DictKeyDescriptor;
 /**
@@ -2487,6 +2620,32 @@ declare class DictionaryHandle<Keys extends string = string> {
     resolveLabel(key: string, locale: string, fallback?: string | readonly string[]): Promise<string | undefined>;
 }
 
+/**
+ * Infer the allowed Unicode scripts for a BCP-47 locale, with asymmetric
+ * Latin tolerance. A script subtag (`th-Latn`) wins over the base
+ * language. Unknown locales default to `['Latin']`.
+ */
+declare function inferScripts(locale: string): readonly string[];
+/** A non-fatal script violation recorded under `'filter'`/`'warn'` modes. */
+interface ScriptWarning {
+    readonly field: string;
+    readonly locale: string;
+    readonly expected: readonly string[];
+    readonly sample: string;
+}
+/**
+ * Enforce a field's script constraint over an i18nText value map.
+ *
+ * - No `script` option ⇒ returns the value unchanged.
+ * - `onScriptViolation: 'reject'` (default) ⇒ throws {@link ScriptViolationError}.
+ * - `'filter'` ⇒ returns a copy with disallowed characters stripped + warnings.
+ * - `'warn'` ⇒ returns the value unchanged + warnings.
+ */
+declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+    value: Record<string, unknown>;
+    warnings: ScriptWarning[];
+};
+
 /**
  * Strategy seam for the optional i18n (multi-locale + dictionary)
  * subsystem. Core imports `I18nStrategy` type-only + `NO_I18N` stub;
@@ -2548,13 +2707,23 @@ interface I18nStrategy {
      * return a new object. Returns the input unchanged under
      * `NO_I18N`.
      */
-    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
     /**
      * Validate that an i18nText field's value satisfies its descriptor
      * (required locales present, etc.). Throws under `NO_I18N` —
      * declaring i18nFields without opting in is a misconfiguration.
      */
     validateI18nTextValue(value: unknown, field: string, descriptor: I18nTextDescriptor): void;
+    /**
+     * Enforce per-locale script constraints over an i18nText value map
+     * (write-time). Returns the (possibly filtered) value plus any
+     * non-fatal warnings. Returns the value unchanged when the field has
+     * no `script` option, or under `NO_I18N`.
+     */
+    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+        value: Record<string, unknown>;
+        warnings: ScriptWarning[];
+    };
     /**
      * Construct a typed `DictionaryHandle` for the named dictionary.
      * Throws under `NO_I18N`.
@@ -12604,4 +12773,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type ConsentStrategy as $, type BlobFieldPolicy as A, type BlobStrategy as B, type BlobFieldsConfig as C, DICT_COLLECTION_PREFIX as D, type BlobObject as E, type BlobPutOptions as F, type BlobResponseOptions as G, BlobSet as H, type I18nStrategy as I, type BlobStrategyOpenArgs as J, type CompactRunOptions as K, type CompactionContext as L, type CompactionResult as M, DEFAULT_CHUNK_SIZE as N, EXPORT_AUDIT_COLLECTION as O, PolicyEnforcer as P, ExportBlobsAbortedError as Q, type ExportBlobsAuditEntry as R, type SessionStrategy as S, type ExportBlobsHandle as T, type ExportBlobsOptions as U, type ExportedBlob as V, type SlotInfo as W, type SlotRecord as X, type VersionRecord as Y, createExportBlobsHandle as Z, runCompaction as _, type DictEntry as a, type DiffEntry as a$, CONSENT_AUDIT_COLLECTION as a0, type ConsentAuditEntry as a1, type ConsentAuditFilter as a2, type ConsentContext as a3, type ConsentOp as a4, loadConsentEntries as a5, writeConsentEntry as a6, type PeriodsStrategy as a7, type CarryForwardContext as a8, type ClosePeriodOptions as a9, TxVault as aA, runTransaction as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, OverlayedViewRegistry as aO, type OverlayedViewStrategyHandle as aP, type SyncStrategy as aQ, type Role as aR, type UnlockedKeyring as aS, type HistoryStrategy as aT, type NoydbStore as aU, type HistoryOptions as aV, type EncryptedEnvelope as aW, type PruneOptions as aX, type AppendInput as aY, type ChangeType as aZ, CollectionInstant as a_, type OpenPeriodOptions as aa, PERIODS_COLLECTION as ab, type PeriodRecord as ac, type ReadOnlyCollection as ad, appendPeriodLedgerEntry as ae, assertTsWritable as af, chainAnchor as ag, loadPeriods as ah, validatePeriodName as ai, type GuardStrategy as aj, type GuardChange as ak, type GuardContext as al, GuardRegistry as am, type GuardStrategyHandle as an, ReadOnlyVaultFacade as ao, type ShadowStrategy as ap, CollectionFrame as aq, VaultFrame as ar, type NoydbBundleStore as as, type RetentionPolicy as at, type SnapshotStrategy as au, type SnapshotMeta as av, type TxStrategy as aw, type AmendmentTxOptions as ax, TxCollection as ay, TxContext as az, type DictKeyDescriptor as b, type DerivationDescriptor as b$, type JsonPatch as b0, type JsonPatchOp as b1, type LedgerEntry as b2, LedgerStore as b3, type VaultEngine as b4, VaultInstant as b5, type VerifyResult as b6, applyPatch as b7, canonicalJson as b8, computePatch as b9, type SchemaUpdateStrategy as bA, type TransformFn as bB, type PersistedSchemaEnvelope as bC, type UpdateDecision as bD, type DirectoryConfig as bE, type UserVisibility as bF, type AccessibleVault as bG, type AffectedDocument as bH, BUNDLE_STORE_POLICY as bI, type BuiltInGateName as bJ, type CacheOptions as bK, type CacheStats as bL, type ChangeEvent as bM, type CollectionChangeEvent as bN, type CollectionConflictResolver as bO, type CollectionDescriptor as bP, type CollectionStats as bQ, type Conflict as bR, type ConflictPolicy as bS, type ConflictStrategy as bT, type CrossTierAccessEvent as bU, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bV, DELEGATIONS_COLLECTION as bW, type DeepPartial as bX, type DeepPartialOrNull as bY, type DelegationToken as bZ, type DeleteManyResult as b_, diff as ba, formatDiff as bb, hashEntry as bc, paddedIndex as bd, parseIndex as be, sha256Hex as bf, type PublicEnvelope as bg, type SealingKeyProvider as bh, type BundleRecipient as bi, type RecipientSealer as bj, type RecipientHint as bk, Vault as bl, type RecoveryEnrollmentInput as bm, type ShamirRecoveryProvider as bn, type MVQueryContext as bo, type RegisteredMV as bp, MaterializedViewRegistry as bq, type MaterializedFromMeta as br, type MaterializedViewOutput as bs, type UnionSource as bt, type UserEnvelope as bu, type GateName as bv, type GatePolicy as bw, type VaultPolicy as bx, type ActiveTier as by, type FactorProof as bz, DictionaryHandle as c, type PassphrasePolicy as c$, type DirtyEntry as c0, type DryRunResult as c1, type DumpSchemaOptions as c2, ELEVATION_AUDIT_COLLECTION as c3, ElevatedHandle as c4, type EnrollAuthenticatorOptions as c5, type EnrollAuthenticatorWrappingDEKsOptions as c6, type EnrollAuthenticatorWrappingKEKOptions as c7, type EnrollRecoveryResult as c8, type ExportCapability as c9, type ListAccessibleVaultsOptions as cA, type ListPageResult as cB, type ListUsersOptions as cC, type LiveUserEnvelope as cD, type LocaleReadOptions as cE, Lru as cF, type LruOptions as cG, type LruStats as cH, MAGIC_LINK_CONTENT_INFO_PREFIX as cI, MAGIC_LINK_GRANTS_COLLECTION as cJ, MAGIC_LINK_KEK_INFO_PREFIX as cK, type MagicLinkGrantPayload as cL, type MagicLinkGrantRecord as cM, type MaterializedViewDescriptor as cN, MemoryRecipientSealer as cO, MemorySealingKeyProvider as cP, NOYDB_BACKUP_VERSION as cQ, NOYDB_FORMAT_VERSION as cR, NOYDB_KEYRING_VERSION as cS, NOYDB_SYNC_VERSION as cT, Noydb as cU, type NoydbEventMap as cV, type NoydbOptions as cW, type OverlayViewDescriptor as cX, PUBLIC_ENVELOPE_FIELDS as cY, type PaperRecoveryDoc as cZ, type PaperRecoveryEntry as c_, type ExportChunk as ca, type ExportFormat as cb, type ExportStreamOptions as cc, type FactorKind as cd, type FactorProofBundle as ce, type FactorRequirement as cf, type FenceDoc as cg, type FenceState as ch, type FieldChange as ci, type FieldDescriptor as cj, type FieldSource as ck, type GhostRecord as cl, type GrantOptions as cm, type GuardViolation as cn, type HistoryConfig as co, type HistoryEntry as cp, INDEXED_STORE_POLICY as cq, type ImportCapability as cr, type InferOutput as cs, type InternalCollectionStats as ct, type IssueDelegationOptions as cu, type IssueMagicLinkGrantOptions as cv, type KeyringAuthenticator as cw, type KeyringAuthenticatorWrappingDEKs as cx, type KeyringAuthenticatorWrappingKEK as cy, type KeyringFile as cz, type DictionaryOptions as d, type SyncTransactionResult as d$, type PassphraseValidationResult as d0, type Permission as d1, type Permissions as d2, type PersistedSchemaKind as d3, type PlaintextTranslatorContext as d4, type PlaintextTranslatorFn as d5, PresenceHandle as d6, type PresencePeer as d7, type PublicEnvelopeField as d8, type PublicEnvelopeSchema as d9, type RotateRecoveryResult as dA, SEALED_PASSPHRASE_RECORD_ID as dB, type SchemaDelta as dC, type SchemaIntrospection as dD, type SealedEnvelope as dE, type SealedPassphrase as dF, type SessionPolicy as dG, type SetPublicEnvelopeInput as dH, type ShamirRecoveryDoc as dI, type ShamirRecoveryEntry as dJ, type SlotRewrapCeremony as dK, type SlotRewrapContext as dL, type StandardSchemaV1 as dM, type StandardSchemaV1Issue as dN, type StandardSchemaV1SyncResult as dO, type StoreAuth as dP, type StoreAuthKind as dQ, type StoreCapabilities as dR, SyncEngine as dS, type SyncMetadata as dT, type SyncPolicy as dU, SyncScheduler as dV, type SyncSchedulerStatus as dW, type SyncStatus as dX, type SyncTarget as dY, type SyncTargetRole as dZ, SyncTransaction as d_, type PublicEnvelopeText as da, type PullMode as db, type PullOptions as dc, type PullPolicy as dd, type PullResult as de, type PushMode as df, type PushOptions as dg, type PushPolicy as dh, type PushResult as di, type PutManyItemOptions as dj, type PutManyOptions as dk, type PutManyResult as dl, type QueryAcrossOptions as dm, type QueryAcrossResult as dn, type QuickUnlockState as dp, QuickUnlockStore as dq, type ReAuthOperation as dr, type RecoverPassphraseInput as ds, type RecoverPassphraseResult as dt, type RecoverUserOptions as du, type RecoveryProof as dv, type ResolvedPublicEnvelopeSchema as dw, type RevokeOptions as dx, type RotatePassphraseInput as dy, type RotateRecoveryOptions as dz, type I18nTextDescriptor as e, recoverUser as e$, type TabChannel as e0, type TabCoordinationOptions as e1, type TabLockManager as e2, type TabPresence as e3, type TabRole as e4, type TierMode as e5, type TranslatorAuditEntry as e6, type TxOp as e7, USER_ENVELOPE_COLLECTION as e8, USER_ENVELOPE_MAX_BYTES as e9, deriveMagicLinkContentKey as eA, enrollAuthenticator as eB, estimateEntropy as eC, evaluateExportCapability as eD, evaluateImportCapability as eE, findAuthenticator as eF, hasExportCapability as eG, hasImportCapability as eH, hasRecoveryEnrolled as eI, isMagicLinkGrantExpired as eJ, isPublicEnvelope as eK, issueDelegation as eL, recoverPassphrase as eM, rotatePassphrase as eN, listMagicLinkGrants as eO, listUsers as eP, listUsersWithEnvelopes as eQ, loadActiveDelegations as eR, loadPaperRecoveryEntries as eS, loadSealedPassphrase as eT, loadShamirRecoveryEntries as eU, magicLinkGrantRecordId as eV, mintPaperRecoveryEntry as eW, mintShamirRecoveryEntry as eX, mintWrappedDeksBlob as eY, parseSealedEnvelope as eZ, readMagicLinkGrantRecord as e_, type Unsubscribe as ea, type UpdateAuthenticatorOptions as eb, type UpdateContext as ec, type UpdateUserOptions as ed, UserApi as ee, type UserEnvelopeCheckGate as ef, UserEnvelopeOversizedError as eg, type UserEnvelopePresented as eh, type UserInfo as ei, type VaultBackup as ej, type VaultPolicyOnDisk as ek, type VaultSchemaSnapshot as el, type VaultSnapshot as em, type WarningRules as en, WeakPassphraseError as eo, type WeakPassphraseReason as ep, type WrappedDeksBlob as eq, type WriteConflict as er, type WriteEvent as es, type WriteHook as et, type WriteQueue as eu, assertStrongPassphrase as ev, buildRecipientKeyringFile as ew, burnPaperRecoveryEntry as ex, createNoydb as ey, createStore as ez, type I18nTextOptions as f, removeAuthenticator as f0, resolveSchema as f1, revokeDelegation as f2, revokeMagicLinkGrant as f3, savePaperRecoveryEntries as f4, saveSealedPassphrase as f5, saveShamirRecoveryEntries as f6, unwrapDeksFromBlob as f7, unwrapDeksFromPaperEntry as f8, unwrapDeksFromShamirEntry as f9, unwrapMagicLinkGrant as fa, validatePassphrase as fb, validatePublicEnvelopeInput as fc, validateSchemaInput as fd, validateSchemaOutput as fe, writeMagicLinkGrant as ff, changeSecret as fg, createOwnerKeyring as fh, ensureCollectionDEK as fi, grant as fj, loadKeyring as fk, persistKeyring as fl, revoke as fm, updateAuthenticator as fn, updateKeyringIdentity as fo, applyI18nLocale as g, dictCollectionName as h, dictKey as i, getAtPath as j, i18nText as k, isDictCollectionName as l, isDictKeyDescriptor as m, isI18nTextDescriptor as n, createEnforcer as o, validateSessionPolicy as p, BLOB_CHUNKS_COLLECTION as q, resolveI18nText as r, setAtPathInPlace as s, BLOB_COLLECTION as t, BLOB_EVICTION_AUDIT_COLLECTION as u, validateI18nTextValue as v, BLOB_INDEX_COLLECTION as w, BLOB_SLOTS_PREFIX as x, BLOB_VERSIONS_PREFIX as y, type BlobEvictionEntry as z };
+export { type ExportBlobsAuditEntry as $, BLOB_COLLECTION as A, type BlobStrategy as B, BLOB_EVICTION_AUDIT_COLLECTION as C, DICT_COLLECTION_PREFIX as D, BLOB_INDEX_COLLECTION as E, BLOB_SLOTS_PREFIX as F, BLOB_VERSIONS_PREFIX as G, type BlobEvictionEntry as H, type I18nStrategy as I, type BlobFieldPolicy as J, type BlobFieldsConfig as K, type Layer as L, type BlobObject as M, type BlobPutOptions as N, type OnMissing as O, PolicyEnforcer as P, type BlobResponseOptions as Q, type ResolveI18nOptions as R, type ScriptWarning as S, BlobSet as T, type BlobStrategyOpenArgs as U, type CompactRunOptions as V, type CompactionContext as W, type CompactionResult as X, DEFAULT_CHUNK_SIZE as Y, EXPORT_AUDIT_COLLECTION as Z, ExportBlobsAbortedError as _, type DictEntry as a, type UnlockedKeyring as a$, type ExportBlobsHandle as a0, type ExportBlobsOptions as a1, type ExportedBlob as a2, type SlotInfo as a3, type SlotRecord as a4, type VersionRecord as a5, createExportBlobsHandle as a6, runCompaction as a7, type ConsentStrategy as a8, CONSENT_AUDIT_COLLECTION as a9, VaultFrame as aA, type NoydbBundleStore as aB, type RetentionPolicy as aC, type SnapshotStrategy as aD, type SnapshotMeta as aE, type TxStrategy as aF, type AmendmentTxOptions as aG, TxCollection as aH, TxContext as aI, TxVault as aJ, runTransaction as aK, type DerivationStrategy as aL, type DerivationContext as aM, type ArrayOutputSpec as aN, DerivationRegistry as aO, type DerivationStrategyHandle as aP, type DerivedFromMeta as aQ, type OutputSpec as aR, type RecordOutputSpec as aS, type MaterializedViewStrategy as aT, type MaterializedViewStrategyHandle as aU, type OverlayedViewStrategy as aV, Collection as aW, OverlayedViewRegistry as aX, type OverlayedViewStrategyHandle as aY, type SyncStrategy as aZ, type Role as a_, type ConsentAuditEntry as aa, type ConsentAuditFilter as ab, type ConsentContext as ac, type ConsentOp as ad, loadConsentEntries as ae, writeConsentEntry as af, type PeriodsStrategy as ag, type CarryForwardContext as ah, type ClosePeriodOptions as ai, type OpenPeriodOptions as aj, PERIODS_COLLECTION as ak, type PeriodRecord as al, type ReadOnlyCollection as am, appendPeriodLedgerEntry as an, assertTsWritable as ao, chainAnchor as ap, loadPeriods as aq, validatePeriodName as ar, type GuardStrategy as as, type GuardChange as at, type GuardContext as au, GuardRegistry as av, type GuardStrategyHandle as aw, ReadOnlyVaultFacade as ax, type ShadowStrategy as ay, CollectionFrame as az, type DictKeyDescriptor as b, type ConflictPolicy as b$, type HistoryStrategy as b0, type NoydbStore as b1, type HistoryOptions as b2, type EncryptedEnvelope as b3, type PruneOptions as b4, type AppendInput as b5, type ChangeType as b6, CollectionInstant as b7, type DiffEntry as b8, type JsonPatch as b9, type MaterializedFromMeta as bA, type MaterializedViewOutput as bB, type UnionSource as bC, type UserEnvelope as bD, type GateName as bE, type GatePolicy as bF, type VaultPolicy as bG, type ActiveTier as bH, type FactorProof as bI, type SchemaUpdateStrategy as bJ, type TransformFn as bK, type PersistedSchemaEnvelope as bL, type UpdateDecision as bM, type DirectoryConfig as bN, type UserVisibility as bO, type AccessibleVault as bP, type AffectedDocument as bQ, BUNDLE_STORE_POLICY as bR, type BuiltInGateName as bS, type CacheOptions as bT, type CacheStats as bU, type ChangeEvent as bV, type CollectionChangeEvent as bW, type CollectionConflictResolver as bX, type CollectionDescriptor as bY, type CollectionStats as bZ, type Conflict as b_, type JsonPatchOp as ba, type LedgerEntry as bb, LedgerStore as bc, type VaultEngine as bd, VaultInstant as be, type VerifyResult as bf, applyPatch as bg, canonicalJson as bh, computePatch as bi, diff as bj, formatDiff as bk, hashEntry as bl, paddedIndex as bm, parseIndex as bn, sha256Hex as bo, type PublicEnvelope as bp, type SealingKeyProvider as bq, type BundleRecipient as br, type RecipientSealer as bs, type RecipientHint as bt, Vault as bu, type RecoveryEnrollmentInput as bv, type ShamirRecoveryProvider as bw, type MVQueryContext as bx, type RegisteredMV as by, MaterializedViewRegistry as bz, DictionaryHandle as c, NOYDB_KEYRING_VERSION as c$, type ConflictStrategy as c0, type CrossTierAccessEvent as c1, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c2, DELEGATIONS_COLLECTION as c3, type DeepPartial as c4, type DeepPartialOrNull as c5, type DelegationToken as c6, type DeleteManyResult as c7, type DerivationDescriptor as c8, type DirtyEntry as c9, type ImportCapability as cA, type InferOutput as cB, type InternalCollectionStats as cC, type IssueDelegationOptions as cD, type IssueMagicLinkGrantOptions as cE, type KeyringAuthenticator as cF, type KeyringAuthenticatorWrappingDEKs as cG, type KeyringAuthenticatorWrappingKEK as cH, type KeyringFile as cI, type ListAccessibleVaultsOptions as cJ, type ListPageResult as cK, type ListUsersOptions as cL, type LiveUserEnvelope as cM, type LocaleReadOptions as cN, Lru as cO, type LruOptions as cP, type LruStats as cQ, MAGIC_LINK_CONTENT_INFO_PREFIX as cR, MAGIC_LINK_GRANTS_COLLECTION as cS, MAGIC_LINK_KEK_INFO_PREFIX as cT, type MagicLinkGrantPayload as cU, type MagicLinkGrantRecord as cV, type MaterializedViewDescriptor as cW, MemoryRecipientSealer as cX, MemorySealingKeyProvider as cY, NOYDB_BACKUP_VERSION as cZ, NOYDB_FORMAT_VERSION as c_, type DryRunResult as ca, type DumpSchemaOptions as cb, ELEVATION_AUDIT_COLLECTION as cc, ElevatedHandle as cd, type EnrollAuthenticatorOptions as ce, type EnrollAuthenticatorWrappingDEKsOptions as cf, type EnrollAuthenticatorWrappingKEKOptions as cg, type EnrollRecoveryResult as ch, type ExportCapability as ci, type ExportChunk as cj, type ExportFormat as ck, type ExportStreamOptions as cl, type FactorKind as cm, type FactorProofBundle as cn, type FactorRequirement as co, type FenceDoc as cp, type FenceState as cq, type FieldChange as cr, type FieldDescriptor as cs, type FieldSource as ct, type GhostRecord as cu, type GrantOptions as cv, type GuardViolation as cw, type HistoryConfig as cx, type HistoryEntry as cy, INDEXED_STORE_POLICY as cz, type DictionaryOptions as d, SyncEngine as d$, NOYDB_SYNC_VERSION as d0, Noydb as d1, type NoydbEventMap as d2, type NoydbOptions as d3, type OverlayViewDescriptor as d4, PUBLIC_ENVELOPE_FIELDS as d5, type PaperRecoveryDoc as d6, type PaperRecoveryEntry as d7, type PassphrasePolicy as d8, type PassphraseValidationResult as d9, type ReAuthOperation as dA, type RecoverPassphraseInput as dB, type RecoverPassphraseResult as dC, type RecoverUserOptions as dD, type RecoveryProof as dE, type ResolvedPublicEnvelopeSchema as dF, type RevokeOptions as dG, type RotatePassphraseInput as dH, type RotateRecoveryOptions as dI, type RotateRecoveryResult as dJ, SEALED_PASSPHRASE_RECORD_ID as dK, type SchemaDelta as dL, type SchemaIntrospection as dM, type SealedEnvelope as dN, type SealedPassphrase as dO, type SessionPolicy as dP, type SetPublicEnvelopeInput as dQ, type ShamirRecoveryDoc as dR, type ShamirRecoveryEntry as dS, type SlotRewrapCeremony as dT, type SlotRewrapContext as dU, type StandardSchemaV1 as dV, type StandardSchemaV1Issue as dW, type StandardSchemaV1SyncResult as dX, type StoreAuth as dY, type StoreAuthKind as dZ, type StoreCapabilities as d_, type Permission as da, type Permissions as db, type PersistedSchemaKind as dc, type PlaintextTranslatorContext as dd, type PlaintextTranslatorFn as de, PresenceHandle as df, type PresencePeer as dg, type PublicEnvelopeField as dh, type PublicEnvelopeSchema as di, type PublicEnvelopeText as dj, type PullMode as dk, type PullOptions as dl, type PullPolicy as dm, type PullResult as dn, type PushMode as dp, type PushOptions as dq, type PushPolicy as dr, type PushResult as ds, type PutManyItemOptions as dt, type PutManyOptions as du, type PutManyResult as dv, type QueryAcrossOptions as dw, type QueryAcrossResult as dx, type QuickUnlockState as dy, QuickUnlockStore as dz, type I18nMap as e, loadPaperRecoveryEntries as e$, type SyncMetadata as e0, type SyncPolicy as e1, SyncScheduler as e2, type SyncSchedulerStatus as e3, type SyncStatus as e4, type SyncTarget as e5, type SyncTargetRole as e6, SyncTransaction as e7, type SyncTransactionResult as e8, type TabChannel as e9, type WriteConflict as eA, type WriteEvent as eB, type WriteHook as eC, type WriteQueue as eD, assertStrongPassphrase as eE, buildRecipientKeyringFile as eF, burnPaperRecoveryEntry as eG, createNoydb as eH, createStore as eI, deriveMagicLinkContentKey as eJ, enrollAuthenticator as eK, estimateEntropy as eL, evaluateExportCapability as eM, evaluateImportCapability as eN, findAuthenticator as eO, hasExportCapability as eP, hasImportCapability as eQ, hasRecoveryEnrolled as eR, isMagicLinkGrantExpired as eS, isPublicEnvelope as eT, issueDelegation as eU, recoverPassphrase as eV, rotatePassphrase as eW, listMagicLinkGrants as eX, listUsers as eY, listUsersWithEnvelopes as eZ, loadActiveDelegations as e_, type TabCoordinationOptions as ea, type TabLockManager as eb, type TabPresence as ec, type TabRole as ed, type TierMode as ee, type TranslatorAuditEntry as ef, type TxOp as eg, USER_ENVELOPE_COLLECTION as eh, USER_ENVELOPE_MAX_BYTES as ei, type Unsubscribe as ej, type UpdateAuthenticatorOptions as ek, type UpdateContext as el, type UpdateUserOptions as em, UserApi as en, type UserEnvelopeCheckGate as eo, UserEnvelopeOversizedError as ep, type UserEnvelopePresented as eq, type UserInfo as er, type VaultBackup as es, type VaultPolicyOnDisk as et, type VaultSchemaSnapshot as eu, type VaultSnapshot as ev, type WarningRules as ew, WeakPassphraseError as ex, type WeakPassphraseReason as ey, type WrappedDeksBlob as ez, type I18nTextDescriptor as f, loadSealedPassphrase as f0, loadShamirRecoveryEntries as f1, magicLinkGrantRecordId as f2, mintPaperRecoveryEntry as f3, mintShamirRecoveryEntry as f4, mintWrappedDeksBlob as f5, parseSealedEnvelope as f6, readMagicLinkGrantRecord as f7, recoverUser as f8, removeAuthenticator as f9, resolveSchema as fa, revokeDelegation as fb, revokeMagicLinkGrant as fc, savePaperRecoveryEntries as fd, saveSealedPassphrase as fe, saveShamirRecoveryEntries as ff, unwrapDeksFromBlob as fg, unwrapDeksFromPaperEntry as fh, unwrapDeksFromShamirEntry as fi, unwrapMagicLinkGrant as fj, validatePassphrase as fk, validatePublicEnvelopeInput as fl, validateSchemaInput as fm, validateSchemaOutput as fn, writeMagicLinkGrant as fo, changeSecret as fp, createOwnerKeyring as fq, ensureCollectionDEK as fr, grant as fs, loadKeyring as ft, persistKeyring as fu, revoke as fv, updateAuthenticator as fw, updateKeyringIdentity as fx, type I18nTextOptions as g, type OnMissingPolicy as h, applyI18nLocale as i, dictCollectionName as j, dictKey as k, enforceScript as l, getAtPath as m, i18nText as n, inferScripts as o, isDictCollectionName as p, isDictKeyDescriptor as q, isI18nTextDescriptor as r, resolveI18nText as s, resolvePolicy as t, setAtPathInPlace as u, validateI18nTextValue as v, type SessionStrategy as w, createEnforcer as x, validateSessionPolicy as y, BLOB_CHUNKS_COLLECTION as z };

package/dist/{types-r-y7TIqj.d.cts → types-DjunxzJa.d.cts}

@@ -1,7 +1,7 @@
 import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-wY4pMCEe.cjs';
 import { b as AggregateSpec, A as AggregateStrategy } from './strategy-DSTrsZ8t.cjs';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.cjs';
-import { N as NoydbError, Q as Query, av as RefRegistry, as as RefDescriptor, a6 as JoinableSource, ax as RefViolation, ay as ScanBuilder } from './index-vB43MAt4.cjs';
+import { N as NoydbError, Q as Query, aw as RefRegistry, at as RefDescriptor, a7 as JoinableSource, ay as RefViolation, az as ScanBuilder } from './index-4fBVt8j9.cjs';
 import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BSAGEyu5.cjs';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
@@ -1644,6 +1644,51 @@ interface PeriodsStrategy {
     appendPeriodLedgerEntry(ledger: LedgerStore | null, actor: string, envelope: EncryptedEnvelope, periodName: string): Promise<void>;
 }
 
+/**
+ * Per-layer i18n resolution policy.
+ *
+ * `onMissing` governs what happens when a multilingual field is resolved
+ * to a target locale that is absent. It may be a single scalar policy or
+ * a per-layer map, so a field can be lenient at the app read boundary but
+ * strict inside a materialized view.
+ *
+ * Effective policy for layer `λ`:
+ *
+ * ```
+ * explicit(λ) = typeof onMissing === 'object' ? onMissing[λ] : undefined
+ * scalar      = typeof onMissing === 'string' ? onMissing : undefined
+ * policy(λ)   = explicit(λ) ?? layerDefault(λ) ?? scalar ?? 'throw'
+ * ```
+ *
+ * - `layerDefault('guard') = 'substitute'` — guards are lenient unless
+ *   EXPLICITLY overridden; they never inherit a scalar policy (a guard
+ *   reading a display value must not hard-fail on a missing locale).
+ * - every other layer has no default, so it inherits the scalar, else
+ *   falls back to `'throw'` (today's behavior — zero breaking change).
+ *
+ * @public
+ */
+type OnMissing = 'substitute' | 'null' | 'throw';
+/**
+ * The contexts in which a multilingual field is resolved. Each can carry
+ * its own `onMissing` policy.
+ *
+ * - `read`       — ordinary app reads (`get`/`list`/query projection).
+ * - `guard`      — a guard callback reading a value.
+ * - `join`       — a joined record expanded onto a row.
+ * - `mv`         — materialized-view input.
+ * - `derivation` — derivation input.
+ * - `export`     — bundle/public-envelope export.
+ */
+type Layer = 'read' | 'guard' | 'join' | 'mv' | 'derivation' | 'export';
+/** Field-level policy: a single scalar, or a per-layer map. */
+type OnMissingPolicy = OnMissing | Partial<Record<Layer, OnMissing>>;
+/**
+ * Resolve the effective `OnMissing` for a layer from a field's declared
+ * policy. See module docs for the resolution rule.
+ */
+declare function resolvePolicy(onMissing: OnMissingPolicy | undefined, layer: Layer): OnMissing;
+
 /**
  * i18nText schema type —
  *
@@ -1685,6 +1730,37 @@ interface PeriodsStrategy {
  * Pluralization, RTL rendering, date/number formatting, per-locale CRDT
  * merging.
  */
+
+/** Flatten an intersection into a single object literal for nicer hovers. */
+type Prettify<T> = {
+    [K in keyof T]: T[K];
+} & {};
+/**
+ * The stored shape of a multilingual field, inferred from its `required`
+ * mode — so the compiler forces you to handle an absent optional locale
+ * (`string | undefined`) instead of silently yielding `undefined`.
+ *
+ * Mirrors `i18nText({ languages, required })`:
+ * - `'all'` (default) — every locale required: `{ th: string; en: string }`
+ * - `'any'`           — every locale optional: `{ th?: string; en?: string }`
+ *   (the "at least one present" guarantee is runtime-only — not expressible
+ *   in TypeScript — so each key is optional)
+ * - `readonly L[]`    — listed locales required, the rest optional:
+ *   `I18nMap<'th'|'en', ['th']>` → `{ th: string; en?: string }`
+ *
+ * @example
+ * ```ts
+ * type Lang = 'th' | 'en'
+ * interface Contact {
+ *   name: I18nMap<Lang, 'any'>      // { th?: string; en?: string }
+ *   legalName: I18nMap<Lang, ['th']> // { th: string; en?: string }
+ *   slug: I18nMap<Lang>             // { th: string; en: string }
+ * }
+ * ```
+ *
+ * @public
+ */
+type I18nMap<Langs extends string, Required extends 'all' | 'any' | readonly Langs[] = 'all'> = Required extends 'all' ? Record<Langs, string> : Required extends 'any' ? Partial<Record<Langs, string>> : Required extends readonly (infer R extends Langs)[] ? Prettify<Record<R, string> & Partial<Record<Exclude<Langs, R>, string>>> : never;
 /**
  * Options for `i18nText()`.
  *
@@ -1713,6 +1789,38 @@ interface I18nTextOptions {
      * before `put()` if a translator is configured. Default: `false`.
      */
     readonly autoTranslate?: boolean;
+    /**
+     * What to do when this field is resolved to a locale that is absent.
+     * A single policy, or a per-layer map (read/guard/join/mv/derivation/
+     * export). Default `'throw'` — today's behavior, zero breaking change.
+     * See {@link OnMissingPolicy}.
+     *
+     * NOTE (current wiring): the `read` layer (`get`/`list`) is enforced.
+     * Guard, derivation, mv, join and export reads currently resolve
+     * through the same read path and so observe the `read`/scalar policy;
+     * dedicated per-layer enforcement for those contexts is a tracked
+     * follow-up (mv/join additionally require resolution to be injected
+     * into the query/aggregate pipeline, which today reads raw maps).
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /**
+     * Ordered preferred-substitute locales used when `onMissing` resolves
+     * to `'substitute'` and the target locale is absent. `'any'` as an
+     * element means "first non-empty value". A caller-supplied `fallback`
+     * at read time takes precedence over this declared list.
+     */
+    readonly substitute?: readonly string[];
+    /**
+     * Per-locale script enforcement (write-time). `'auto'` infers the
+     * allowed Unicode scripts per locale (asymmetric Latin tolerance); an
+     * object overrides per slot. Absent ⇒ no check. See `./script.ts`.
+     */
+    readonly script?: 'auto' | Partial<Record<string, readonly string[]>>;
+    /**
+     * What to do when a slot's value contains characters outside its
+     * allowed script set. Default `'reject'`.
+     */
+    readonly onScriptViolation?: 'reject' | 'filter' | 'warn';
 }
 /**
  * Descriptor returned by `i18nText()`. Attach to the collection's
@@ -1767,7 +1875,15 @@ declare function validateI18nTextValue(value: unknown, field: string, descriptor
  * @param field    Field name used in `LocaleNotSpecifiedError` messages.
  * @returns The resolved string, OR the original map when `locale === 'raw'`.
  */
+/** Options for the policy-aware form of {@link resolveI18nText}. */
+interface ResolveI18nOptions {
+    /** Effective policy for the resolution layer. Default `'throw'`. */
+    readonly policy?: OnMissing;
+    /** Declared substitute chain; applied only under policy `'substitute'`. */
+    readonly substitute?: readonly string[];
+}
 declare function resolveI18nText(value: Record<string, string>, locale: string, fallback?: string | readonly string[], field?: string): string | Record<string, string>;
+declare function resolveI18nText(value: Record<string, string>, locale: string, fallback: string | readonly string[] | undefined, field: string | undefined, opts: ResolveI18nOptions): string | Record<string, string> | null;
 /**
  * Return all leaf values at `path`, expanding `[].` array wildcards.
  *
@@ -1799,8 +1915,12 @@ declare function setAtPathInPlace(obj: Record<string, unknown>, path: string, va
  * @param i18nFields  Map of field path → `I18nTextDescriptor`.
  * @param locale      The requested locale (or `'raw'`).
  * @param fallback    Fallback chain (optional).
+ * @param layer       Resolution layer (default `'read'`). Each field's
+ *                    `onMissing` policy is resolved for this layer, so the
+ *                    same record resolves leniently on a get but strictly
+ *                    inside an mv/derivation.
  */
-declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
 
 type EventHandler<T> = (data: T) => void;
 /** Typed event emitter for NOYDB events. */
@@ -2325,6 +2445,16 @@ interface DictKeyDescriptor<Keys extends string = string> {
     readonly name: string;
     /** Declared valid keys. When set, `put()` rejects keys not in this set. */
     readonly keys: readonly Keys[] | undefined;
+    /**
+     * What to do when a label is missing for the resolved locale. Mirrors
+     * `i18nText`'s `onMissing`. Default behavior (when unset) preserves the
+     * legacy contract: a missing label is omitted (scalar) or `null`
+     * (array element) — i.e. `'null'`. Set `'substitute'` to walk the
+     * declared `substitute` chain, or `'throw'` to raise.
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /** Ordered preferred-substitute locales for label resolution. */
+    readonly substitute?: readonly string[];
 }
 /**
  * Create a `DictKeyDescriptor` for a dictionary-backed enum field.
@@ -2343,7 +2473,10 @@ interface DictKeyDescriptor<Keys extends string = string> {
  * })
  * ```
  */
-declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[]): DictKeyDescriptor<Keys>;
+declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[], opts?: {
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+}): DictKeyDescriptor<Keys>;
 /** Runtime predicate for detecting a DictKeyDescriptor. */
 declare function isDictKeyDescriptor(x: unknown): x is DictKeyDescriptor;
 /**
@@ -2487,6 +2620,32 @@ declare class DictionaryHandle<Keys extends string = string> {
     resolveLabel(key: string, locale: string, fallback?: string | readonly string[]): Promise<string | undefined>;
 }
 
+/**
+ * Infer the allowed Unicode scripts for a BCP-47 locale, with asymmetric
+ * Latin tolerance. A script subtag (`th-Latn`) wins over the base
+ * language. Unknown locales default to `['Latin']`.
+ */
+declare function inferScripts(locale: string): readonly string[];
+/** A non-fatal script violation recorded under `'filter'`/`'warn'` modes. */
+interface ScriptWarning {
+    readonly field: string;
+    readonly locale: string;
+    readonly expected: readonly string[];
+    readonly sample: string;
+}
+/**
+ * Enforce a field's script constraint over an i18nText value map.
+ *
+ * - No `script` option ⇒ returns the value unchanged.
+ * - `onScriptViolation: 'reject'` (default) ⇒ throws {@link ScriptViolationError}.
+ * - `'filter'` ⇒ returns a copy with disallowed characters stripped + warnings.
+ * - `'warn'` ⇒ returns the value unchanged + warnings.
+ */
+declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+    value: Record<string, unknown>;
+    warnings: ScriptWarning[];
+};
+
 /**
  * Strategy seam for the optional i18n (multi-locale + dictionary)
  * subsystem. Core imports `I18nStrategy` type-only + `NO_I18N` stub;
@@ -2548,13 +2707,23 @@ interface I18nStrategy {
      * return a new object. Returns the input unchanged under
      * `NO_I18N`.
      */
-    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
     /**
      * Validate that an i18nText field's value satisfies its descriptor
      * (required locales present, etc.). Throws under `NO_I18N` —
      * declaring i18nFields without opting in is a misconfiguration.
      */
     validateI18nTextValue(value: unknown, field: string, descriptor: I18nTextDescriptor): void;
+    /**
+     * Enforce per-locale script constraints over an i18nText value map
+     * (write-time). Returns the (possibly filtered) value plus any
+     * non-fatal warnings. Returns the value unchanged when the field has
+     * no `script` option, or under `NO_I18N`.
+     */
+    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+        value: Record<string, unknown>;
+        warnings: ScriptWarning[];
+    };
     /**
      * Construct a typed `DictionaryHandle` for the named dictionary.
      * Throws under `NO_I18N`.
@@ -12604,4 +12773,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type ConsentStrategy as $, type BlobFieldPolicy as A, type BlobStrategy as B, type BlobFieldsConfig as C, DICT_COLLECTION_PREFIX as D, type BlobObject as E, type BlobPutOptions as F, type BlobResponseOptions as G, BlobSet as H, type I18nStrategy as I, type BlobStrategyOpenArgs as J, type CompactRunOptions as K, type CompactionContext as L, type CompactionResult as M, DEFAULT_CHUNK_SIZE as N, EXPORT_AUDIT_COLLECTION as O, PolicyEnforcer as P, ExportBlobsAbortedError as Q, type ExportBlobsAuditEntry as R, type SessionStrategy as S, type ExportBlobsHandle as T, type ExportBlobsOptions as U, type ExportedBlob as V, type SlotInfo as W, type SlotRecord as X, type VersionRecord as Y, createExportBlobsHandle as Z, runCompaction as _, type DictEntry as a, type DiffEntry as a$, CONSENT_AUDIT_COLLECTION as a0, type ConsentAuditEntry as a1, type ConsentAuditFilter as a2, type ConsentContext as a3, type ConsentOp as a4, loadConsentEntries as a5, writeConsentEntry as a6, type PeriodsStrategy as a7, type CarryForwardContext as a8, type ClosePeriodOptions as a9, TxVault as aA, runTransaction as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, OverlayedViewRegistry as aO, type OverlayedViewStrategyHandle as aP, type SyncStrategy as aQ, type Role as aR, type UnlockedKeyring as aS, type HistoryStrategy as aT, type NoydbStore as aU, type HistoryOptions as aV, type EncryptedEnvelope as aW, type PruneOptions as aX, type AppendInput as aY, type ChangeType as aZ, CollectionInstant as a_, type OpenPeriodOptions as aa, PERIODS_COLLECTION as ab, type PeriodRecord as ac, type ReadOnlyCollection as ad, appendPeriodLedgerEntry as ae, assertTsWritable as af, chainAnchor as ag, loadPeriods as ah, validatePeriodName as ai, type GuardStrategy as aj, type GuardChange as ak, type GuardContext as al, GuardRegistry as am, type GuardStrategyHandle as an, ReadOnlyVaultFacade as ao, type ShadowStrategy as ap, CollectionFrame as aq, VaultFrame as ar, type NoydbBundleStore as as, type RetentionPolicy as at, type SnapshotStrategy as au, type SnapshotMeta as av, type TxStrategy as aw, type AmendmentTxOptions as ax, TxCollection as ay, TxContext as az, type DictKeyDescriptor as b, type DerivationDescriptor as b$, type JsonPatch as b0, type JsonPatchOp as b1, type LedgerEntry as b2, LedgerStore as b3, type VaultEngine as b4, VaultInstant as b5, type VerifyResult as b6, applyPatch as b7, canonicalJson as b8, computePatch as b9, type SchemaUpdateStrategy as bA, type TransformFn as bB, type PersistedSchemaEnvelope as bC, type UpdateDecision as bD, type DirectoryConfig as bE, type UserVisibility as bF, type AccessibleVault as bG, type AffectedDocument as bH, BUNDLE_STORE_POLICY as bI, type BuiltInGateName as bJ, type CacheOptions as bK, type CacheStats as bL, type ChangeEvent as bM, type CollectionChangeEvent as bN, type CollectionConflictResolver as bO, type CollectionDescriptor as bP, type CollectionStats as bQ, type Conflict as bR, type ConflictPolicy as bS, type ConflictStrategy as bT, type CrossTierAccessEvent as bU, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bV, DELEGATIONS_COLLECTION as bW, type DeepPartial as bX, type DeepPartialOrNull as bY, type DelegationToken as bZ, type DeleteManyResult as b_, diff as ba, formatDiff as bb, hashEntry as bc, paddedIndex as bd, parseIndex as be, sha256Hex as bf, type PublicEnvelope as bg, type SealingKeyProvider as bh, type BundleRecipient as bi, type RecipientSealer as bj, type RecipientHint as bk, Vault as bl, type RecoveryEnrollmentInput as bm, type ShamirRecoveryProvider as bn, type MVQueryContext as bo, type RegisteredMV as bp, MaterializedViewRegistry as bq, type MaterializedFromMeta as br, type MaterializedViewOutput as bs, type UnionSource as bt, type UserEnvelope as bu, type GateName as bv, type GatePolicy as bw, type VaultPolicy as bx, type ActiveTier as by, type FactorProof as bz, DictionaryHandle as c, type PassphrasePolicy as c$, type DirtyEntry as c0, type DryRunResult as c1, type DumpSchemaOptions as c2, ELEVATION_AUDIT_COLLECTION as c3, ElevatedHandle as c4, type EnrollAuthenticatorOptions as c5, type EnrollAuthenticatorWrappingDEKsOptions as c6, type EnrollAuthenticatorWrappingKEKOptions as c7, type EnrollRecoveryResult as c8, type ExportCapability as c9, type ListAccessibleVaultsOptions as cA, type ListPageResult as cB, type ListUsersOptions as cC, type LiveUserEnvelope as cD, type LocaleReadOptions as cE, Lru as cF, type LruOptions as cG, type LruStats as cH, MAGIC_LINK_CONTENT_INFO_PREFIX as cI, MAGIC_LINK_GRANTS_COLLECTION as cJ, MAGIC_LINK_KEK_INFO_PREFIX as cK, type MagicLinkGrantPayload as cL, type MagicLinkGrantRecord as cM, type MaterializedViewDescriptor as cN, MemoryRecipientSealer as cO, MemorySealingKeyProvider as cP, NOYDB_BACKUP_VERSION as cQ, NOYDB_FORMAT_VERSION as cR, NOYDB_KEYRING_VERSION as cS, NOYDB_SYNC_VERSION as cT, Noydb as cU, type NoydbEventMap as cV, type NoydbOptions as cW, type OverlayViewDescriptor as cX, PUBLIC_ENVELOPE_FIELDS as cY, type PaperRecoveryDoc as cZ, type PaperRecoveryEntry as c_, type ExportChunk as ca, type ExportFormat as cb, type ExportStreamOptions as cc, type FactorKind as cd, type FactorProofBundle as ce, type FactorRequirement as cf, type FenceDoc as cg, type FenceState as ch, type FieldChange as ci, type FieldDescriptor as cj, type FieldSource as ck, type GhostRecord as cl, type GrantOptions as cm, type GuardViolation as cn, type HistoryConfig as co, type HistoryEntry as cp, INDEXED_STORE_POLICY as cq, type ImportCapability as cr, type InferOutput as cs, type InternalCollectionStats as ct, type IssueDelegationOptions as cu, type IssueMagicLinkGrantOptions as cv, type KeyringAuthenticator as cw, type KeyringAuthenticatorWrappingDEKs as cx, type KeyringAuthenticatorWrappingKEK as cy, type KeyringFile as cz, type DictionaryOptions as d, type SyncTransactionResult as d$, type PassphraseValidationResult as d0, type Permission as d1, type Permissions as d2, type PersistedSchemaKind as d3, type PlaintextTranslatorContext as d4, type PlaintextTranslatorFn as d5, PresenceHandle as d6, type PresencePeer as d7, type PublicEnvelopeField as d8, type PublicEnvelopeSchema as d9, type RotateRecoveryResult as dA, SEALED_PASSPHRASE_RECORD_ID as dB, type SchemaDelta as dC, type SchemaIntrospection as dD, type SealedEnvelope as dE, type SealedPassphrase as dF, type SessionPolicy as dG, type SetPublicEnvelopeInput as dH, type ShamirRecoveryDoc as dI, type ShamirRecoveryEntry as dJ, type SlotRewrapCeremony as dK, type SlotRewrapContext as dL, type StandardSchemaV1 as dM, type StandardSchemaV1Issue as dN, type StandardSchemaV1SyncResult as dO, type StoreAuth as dP, type StoreAuthKind as dQ, type StoreCapabilities as dR, SyncEngine as dS, type SyncMetadata as dT, type SyncPolicy as dU, SyncScheduler as dV, type SyncSchedulerStatus as dW, type SyncStatus as dX, type SyncTarget as dY, type SyncTargetRole as dZ, SyncTransaction as d_, type PublicEnvelopeText as da, type PullMode as db, type PullOptions as dc, type PullPolicy as dd, type PullResult as de, type PushMode as df, type PushOptions as dg, type PushPolicy as dh, type PushResult as di, type PutManyItemOptions as dj, type PutManyOptions as dk, type PutManyResult as dl, type QueryAcrossOptions as dm, type QueryAcrossResult as dn, type QuickUnlockState as dp, QuickUnlockStore as dq, type ReAuthOperation as dr, type RecoverPassphraseInput as ds, type RecoverPassphraseResult as dt, type RecoverUserOptions as du, type RecoveryProof as dv, type ResolvedPublicEnvelopeSchema as dw, type RevokeOptions as dx, type RotatePassphraseInput as dy, type RotateRecoveryOptions as dz, type I18nTextDescriptor as e, recoverUser as e$, type TabChannel as e0, type TabCoordinationOptions as e1, type TabLockManager as e2, type TabPresence as e3, type TabRole as e4, type TierMode as e5, type TranslatorAuditEntry as e6, type TxOp as e7, USER_ENVELOPE_COLLECTION as e8, USER_ENVELOPE_MAX_BYTES as e9, deriveMagicLinkContentKey as eA, enrollAuthenticator as eB, estimateEntropy as eC, evaluateExportCapability as eD, evaluateImportCapability as eE, findAuthenticator as eF, hasExportCapability as eG, hasImportCapability as eH, hasRecoveryEnrolled as eI, isMagicLinkGrantExpired as eJ, isPublicEnvelope as eK, issueDelegation as eL, recoverPassphrase as eM, rotatePassphrase as eN, listMagicLinkGrants as eO, listUsers as eP, listUsersWithEnvelopes as eQ, loadActiveDelegations as eR, loadPaperRecoveryEntries as eS, loadSealedPassphrase as eT, loadShamirRecoveryEntries as eU, magicLinkGrantRecordId as eV, mintPaperRecoveryEntry as eW, mintShamirRecoveryEntry as eX, mintWrappedDeksBlob as eY, parseSealedEnvelope as eZ, readMagicLinkGrantRecord as e_, type Unsubscribe as ea, type UpdateAuthenticatorOptions as eb, type UpdateContext as ec, type UpdateUserOptions as ed, UserApi as ee, type UserEnvelopeCheckGate as ef, UserEnvelopeOversizedError as eg, type UserEnvelopePresented as eh, type UserInfo as ei, type VaultBackup as ej, type VaultPolicyOnDisk as ek, type VaultSchemaSnapshot as el, type VaultSnapshot as em, type WarningRules as en, WeakPassphraseError as eo, type WeakPassphraseReason as ep, type WrappedDeksBlob as eq, type WriteConflict as er, type WriteEvent as es, type WriteHook as et, type WriteQueue as eu, assertStrongPassphrase as ev, buildRecipientKeyringFile as ew, burnPaperRecoveryEntry as ex, createNoydb as ey, createStore as ez, type I18nTextOptions as f, removeAuthenticator as f0, resolveSchema as f1, revokeDelegation as f2, revokeMagicLinkGrant as f3, savePaperRecoveryEntries as f4, saveSealedPassphrase as f5, saveShamirRecoveryEntries as f6, unwrapDeksFromBlob as f7, unwrapDeksFromPaperEntry as f8, unwrapDeksFromShamirEntry as f9, unwrapMagicLinkGrant as fa, validatePassphrase as fb, validatePublicEnvelopeInput as fc, validateSchemaInput as fd, validateSchemaOutput as fe, writeMagicLinkGrant as ff, changeSecret as fg, createOwnerKeyring as fh, ensureCollectionDEK as fi, grant as fj, loadKeyring as fk, persistKeyring as fl, revoke as fm, updateAuthenticator as fn, updateKeyringIdentity as fo, applyI18nLocale as g, dictCollectionName as h, dictKey as i, getAtPath as j, i18nText as k, isDictCollectionName as l, isDictKeyDescriptor as m, isI18nTextDescriptor as n, createEnforcer as o, validateSessionPolicy as p, BLOB_CHUNKS_COLLECTION as q, resolveI18nText as r, setAtPathInPlace as s, BLOB_COLLECTION as t, BLOB_EVICTION_AUDIT_COLLECTION as u, validateI18nTextValue as v, BLOB_INDEX_COLLECTION as w, BLOB_SLOTS_PREFIX as x, BLOB_VERSIONS_PREFIX as y, type BlobEvictionEntry as z };
+export { type ExportBlobsAuditEntry as $, BLOB_COLLECTION as A, type BlobStrategy as B, BLOB_EVICTION_AUDIT_COLLECTION as C, DICT_COLLECTION_PREFIX as D, BLOB_INDEX_COLLECTION as E, BLOB_SLOTS_PREFIX as F, BLOB_VERSIONS_PREFIX as G, type BlobEvictionEntry as H, type I18nStrategy as I, type BlobFieldPolicy as J, type BlobFieldsConfig as K, type Layer as L, type BlobObject as M, type BlobPutOptions as N, type OnMissing as O, PolicyEnforcer as P, type BlobResponseOptions as Q, type ResolveI18nOptions as R, type ScriptWarning as S, BlobSet as T, type BlobStrategyOpenArgs as U, type CompactRunOptions as V, type CompactionContext as W, type CompactionResult as X, DEFAULT_CHUNK_SIZE as Y, EXPORT_AUDIT_COLLECTION as Z, ExportBlobsAbortedError as _, type DictEntry as a, type UnlockedKeyring as a$, type ExportBlobsHandle as a0, type ExportBlobsOptions as a1, type ExportedBlob as a2, type SlotInfo as a3, type SlotRecord as a4, type VersionRecord as a5, createExportBlobsHandle as a6, runCompaction as a7, type ConsentStrategy as a8, CONSENT_AUDIT_COLLECTION as a9, VaultFrame as aA, type NoydbBundleStore as aB, type RetentionPolicy as aC, type SnapshotStrategy as aD, type SnapshotMeta as aE, type TxStrategy as aF, type AmendmentTxOptions as aG, TxCollection as aH, TxContext as aI, TxVault as aJ, runTransaction as aK, type DerivationStrategy as aL, type DerivationContext as aM, type ArrayOutputSpec as aN, DerivationRegistry as aO, type DerivationStrategyHandle as aP, type DerivedFromMeta as aQ, type OutputSpec as aR, type RecordOutputSpec as aS, type MaterializedViewStrategy as aT, type MaterializedViewStrategyHandle as aU, type OverlayedViewStrategy as aV, Collection as aW, OverlayedViewRegistry as aX, type OverlayedViewStrategyHandle as aY, type SyncStrategy as aZ, type Role as a_, type ConsentAuditEntry as aa, type ConsentAuditFilter as ab, type ConsentContext as ac, type ConsentOp as ad, loadConsentEntries as ae, writeConsentEntry as af, type PeriodsStrategy as ag, type CarryForwardContext as ah, type ClosePeriodOptions as ai, type OpenPeriodOptions as aj, PERIODS_COLLECTION as ak, type PeriodRecord as al, type ReadOnlyCollection as am, appendPeriodLedgerEntry as an, assertTsWritable as ao, chainAnchor as ap, loadPeriods as aq, validatePeriodName as ar, type GuardStrategy as as, type GuardChange as at, type GuardContext as au, GuardRegistry as av, type GuardStrategyHandle as aw, ReadOnlyVaultFacade as ax, type ShadowStrategy as ay, CollectionFrame as az, type DictKeyDescriptor as b, type ConflictPolicy as b$, type HistoryStrategy as b0, type NoydbStore as b1, type HistoryOptions as b2, type EncryptedEnvelope as b3, type PruneOptions as b4, type AppendInput as b5, type ChangeType as b6, CollectionInstant as b7, type DiffEntry as b8, type JsonPatch as b9, type MaterializedFromMeta as bA, type MaterializedViewOutput as bB, type UnionSource as bC, type UserEnvelope as bD, type GateName as bE, type GatePolicy as bF, type VaultPolicy as bG, type ActiveTier as bH, type FactorProof as bI, type SchemaUpdateStrategy as bJ, type TransformFn as bK, type PersistedSchemaEnvelope as bL, type UpdateDecision as bM, type DirectoryConfig as bN, type UserVisibility as bO, type AccessibleVault as bP, type AffectedDocument as bQ, BUNDLE_STORE_POLICY as bR, type BuiltInGateName as bS, type CacheOptions as bT, type CacheStats as bU, type ChangeEvent as bV, type CollectionChangeEvent as bW, type CollectionConflictResolver as bX, type CollectionDescriptor as bY, type CollectionStats as bZ, type Conflict as b_, type JsonPatchOp as ba, type LedgerEntry as bb, LedgerStore as bc, type VaultEngine as bd, VaultInstant as be, type VerifyResult as bf, applyPatch as bg, canonicalJson as bh, computePatch as bi, diff as bj, formatDiff as bk, hashEntry as bl, paddedIndex as bm, parseIndex as bn, sha256Hex as bo, type PublicEnvelope as bp, type SealingKeyProvider as bq, type BundleRecipient as br, type RecipientSealer as bs, type RecipientHint as bt, Vault as bu, type RecoveryEnrollmentInput as bv, type ShamirRecoveryProvider as bw, type MVQueryContext as bx, type RegisteredMV as by, MaterializedViewRegistry as bz, DictionaryHandle as c, NOYDB_KEYRING_VERSION as c$, type ConflictStrategy as c0, type CrossTierAccessEvent as c1, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c2, DELEGATIONS_COLLECTION as c3, type DeepPartial as c4, type DeepPartialOrNull as c5, type DelegationToken as c6, type DeleteManyResult as c7, type DerivationDescriptor as c8, type DirtyEntry as c9, type ImportCapability as cA, type InferOutput as cB, type InternalCollectionStats as cC, type IssueDelegationOptions as cD, type IssueMagicLinkGrantOptions as cE, type KeyringAuthenticator as cF, type KeyringAuthenticatorWrappingDEKs as cG, type KeyringAuthenticatorWrappingKEK as cH, type KeyringFile as cI, type ListAccessibleVaultsOptions as cJ, type ListPageResult as cK, type ListUsersOptions as cL, type LiveUserEnvelope as cM, type LocaleReadOptions as cN, Lru as cO, type LruOptions as cP, type LruStats as cQ, MAGIC_LINK_CONTENT_INFO_PREFIX as cR, MAGIC_LINK_GRANTS_COLLECTION as cS, MAGIC_LINK_KEK_INFO_PREFIX as cT, type MagicLinkGrantPayload as cU, type MagicLinkGrantRecord as cV, type MaterializedViewDescriptor as cW, MemoryRecipientSealer as cX, MemorySealingKeyProvider as cY, NOYDB_BACKUP_VERSION as cZ, NOYDB_FORMAT_VERSION as c_, type DryRunResult as ca, type DumpSchemaOptions as cb, ELEVATION_AUDIT_COLLECTION as cc, ElevatedHandle as cd, type EnrollAuthenticatorOptions as ce, type EnrollAuthenticatorWrappingDEKsOptions as cf, type EnrollAuthenticatorWrappingKEKOptions as cg, type EnrollRecoveryResult as ch, type ExportCapability as ci, type ExportChunk as cj, type ExportFormat as ck, type ExportStreamOptions as cl, type FactorKind as cm, type FactorProofBundle as cn, type FactorRequirement as co, type FenceDoc as cp, type FenceState as cq, type FieldChange as cr, type FieldDescriptor as cs, type FieldSource as ct, type GhostRecord as cu, type GrantOptions as cv, type GuardViolation as cw, type HistoryConfig as cx, type HistoryEntry as cy, INDEXED_STORE_POLICY as cz, type DictionaryOptions as d, SyncEngine as d$, NOYDB_SYNC_VERSION as d0, Noydb as d1, type NoydbEventMap as d2, type NoydbOptions as d3, type OverlayViewDescriptor as d4, PUBLIC_ENVELOPE_FIELDS as d5, type PaperRecoveryDoc as d6, type PaperRecoveryEntry as d7, type PassphrasePolicy as d8, type PassphraseValidationResult as d9, type ReAuthOperation as dA, type RecoverPassphraseInput as dB, type RecoverPassphraseResult as dC, type RecoverUserOptions as dD, type RecoveryProof as dE, type ResolvedPublicEnvelopeSchema as dF, type RevokeOptions as dG, type RotatePassphraseInput as dH, type RotateRecoveryOptions as dI, type RotateRecoveryResult as dJ, SEALED_PASSPHRASE_RECORD_ID as dK, type SchemaDelta as dL, type SchemaIntrospection as dM, type SealedEnvelope as dN, type SealedPassphrase as dO, type SessionPolicy as dP, type SetPublicEnvelopeInput as dQ, type ShamirRecoveryDoc as dR, type ShamirRecoveryEntry as dS, type SlotRewrapCeremony as dT, type SlotRewrapContext as dU, type StandardSchemaV1 as dV, type StandardSchemaV1Issue as dW, type StandardSchemaV1SyncResult as dX, type StoreAuth as dY, type StoreAuthKind as dZ, type StoreCapabilities as d_, type Permission as da, type Permissions as db, type PersistedSchemaKind as dc, type PlaintextTranslatorContext as dd, type PlaintextTranslatorFn as de, PresenceHandle as df, type PresencePeer as dg, type PublicEnvelopeField as dh, type PublicEnvelopeSchema as di, type PublicEnvelopeText as dj, type PullMode as dk, type PullOptions as dl, type PullPolicy as dm, type PullResult as dn, type PushMode as dp, type PushOptions as dq, type PushPolicy as dr, type PushResult as ds, type PutManyItemOptions as dt, type PutManyOptions as du, type PutManyResult as dv, type QueryAcrossOptions as dw, type QueryAcrossResult as dx, type QuickUnlockState as dy, QuickUnlockStore as dz, type I18nMap as e, loadPaperRecoveryEntries as e$, type SyncMetadata as e0, type SyncPolicy as e1, SyncScheduler as e2, type SyncSchedulerStatus as e3, type SyncStatus as e4, type SyncTarget as e5, type SyncTargetRole as e6, SyncTransaction as e7, type SyncTransactionResult as e8, type TabChannel as e9, type WriteConflict as eA, type WriteEvent as eB, type WriteHook as eC, type WriteQueue as eD, assertStrongPassphrase as eE, buildRecipientKeyringFile as eF, burnPaperRecoveryEntry as eG, createNoydb as eH, createStore as eI, deriveMagicLinkContentKey as eJ, enrollAuthenticator as eK, estimateEntropy as eL, evaluateExportCapability as eM, evaluateImportCapability as eN, findAuthenticator as eO, hasExportCapability as eP, hasImportCapability as eQ, hasRecoveryEnrolled as eR, isMagicLinkGrantExpired as eS, isPublicEnvelope as eT, issueDelegation as eU, recoverPassphrase as eV, rotatePassphrase as eW, listMagicLinkGrants as eX, listUsers as eY, listUsersWithEnvelopes as eZ, loadActiveDelegations as e_, type TabCoordinationOptions as ea, type TabLockManager as eb, type TabPresence as ec, type TabRole as ed, type TierMode as ee, type TranslatorAuditEntry as ef, type TxOp as eg, USER_ENVELOPE_COLLECTION as eh, USER_ENVELOPE_MAX_BYTES as ei, type Unsubscribe as ej, type UpdateAuthenticatorOptions as ek, type UpdateContext as el, type UpdateUserOptions as em, UserApi as en, type UserEnvelopeCheckGate as eo, UserEnvelopeOversizedError as ep, type UserEnvelopePresented as eq, type UserInfo as er, type VaultBackup as es, type VaultPolicyOnDisk as et, type VaultSchemaSnapshot as eu, type VaultSnapshot as ev, type WarningRules as ew, WeakPassphraseError as ex, type WeakPassphraseReason as ey, type WrappedDeksBlob as ez, type I18nTextDescriptor as f, loadSealedPassphrase as f0, loadShamirRecoveryEntries as f1, magicLinkGrantRecordId as f2, mintPaperRecoveryEntry as f3, mintShamirRecoveryEntry as f4, mintWrappedDeksBlob as f5, parseSealedEnvelope as f6, readMagicLinkGrantRecord as f7, recoverUser as f8, removeAuthenticator as f9, resolveSchema as fa, revokeDelegation as fb, revokeMagicLinkGrant as fc, savePaperRecoveryEntries as fd, saveSealedPassphrase as fe, saveShamirRecoveryEntries as ff, unwrapDeksFromBlob as fg, unwrapDeksFromPaperEntry as fh, unwrapDeksFromShamirEntry as fi, unwrapMagicLinkGrant as fj, validatePassphrase as fk, validatePublicEnvelopeInput as fl, validateSchemaInput as fm, validateSchemaOutput as fn, writeMagicLinkGrant as fo, changeSecret as fp, createOwnerKeyring as fq, ensureCollectionDEK as fr, grant as fs, loadKeyring as ft, persistKeyring as fu, revoke as fv, updateAuthenticator as fw, updateKeyringIdentity as fx, type I18nTextOptions as g, type OnMissingPolicy as h, applyI18nLocale as i, dictCollectionName as j, dictKey as k, enforceScript as l, getAtPath as m, i18nText as n, inferScripts as o, isDictCollectionName as p, isDictKeyDescriptor as q, isI18nTextDescriptor as r, resolveI18nText as s, resolvePolicy as t, setAtPathInPlace as u, validateI18nTextValue as v, type SessionStrategy as w, createEnforcer as x, validateSessionPolicy as y, BLOB_CHUNKS_COLLECTION as z };