@noy-db/hub 0.2.0-pre.7 → 0.2.0-pre.9

package/dist/index.cjs

@@ -46,7 +46,7 @@ var init_types = __esm({
 });
 
 // src/errors.ts
-var NoydbError, DecryptionError, TamperedError, InvalidKeyError, KeyringCorruptError, NoAccessError, ReadOnlyError, ReadOnlyAtInstantError, ReadOnlyFrameError, PermissionDeniedError, ExportCapabilityError, KeyringExpiredError, ImportCapabilityError, StoreCapabilityError, PrivilegeEscalationError, PeriodClosedError, RecordLockedError, FieldFrozenError, InvariantError, AmendmentForbiddenError, DirectoryDisabledError, TierNotGrantedError, ElevationExpiredError, AlreadyElevatedError, TierDemoteDeniedError, DelegationTargetMissingError, ConflictError, LedgerContentionError, BundleVersionConflictError, NetworkError, NotFoundError, ValidationError, SchemaValidationError, SchemaUpdateError, NonAdditiveSchemaChangeError, SchemaLockedError, SchemaFenceError, MigrationRequiredError, QuiesceTimeoutError, GroupCardinalityError, IndexRequiredError, IndexWriteFailureError, BundleIntegrityError, BundleSealMismatchError, ReservedCollectionNameError, DictKeyMissingError, DictKeyInUseError, MissingTranslationError, LocaleNotSpecifiedError, TranslatorNotConfiguredError, BackupLedgerError, BackupCorruptedError, AttestationError, SessionExpiredError, SessionNotFoundError, SessionPolicyError, JoinTooLargeError, CrossJoinTooLargeError, CrossJoinSourceUnknownError, DanglingReferenceError, FilenameSanitizationError, PathEscapeError, DerivationCycleError, DerivationDepthError, DerivationOutputUnknownError, DerivationOutputShapeError, DerivationCapExceededError, MaterializedViewCycleError, MaterializedViewSourceUnknownError, MaterializedViewTooLargeError, MaterializedViewConfigError, OverlayBaseIsVirtualError, OverlayCollectionUnavailableError, OverlayNameCollisionError, OverlayIdMismatchError, SnapshotNotFoundError;
+var NoydbError, DecryptionError, TamperedError, InvalidKeyError, KeyringCorruptError, NoAccessError, ReadOnlyError, ReadOnlyAtInstantError, ReadOnlyFrameError, PermissionDeniedError, ExportCapabilityError, KeyringExpiredError, ImportCapabilityError, StoreCapabilityError, PrivilegeEscalationError, PeriodClosedError, RecordLockedError, FieldFrozenError, InvariantError, AmendmentForbiddenError, DirectoryDisabledError, TierNotGrantedError, ElevationExpiredError, AlreadyElevatedError, TierDemoteDeniedError, DelegationTargetMissingError, ConflictError, LedgerContentionError, BundleVersionConflictError, NetworkError, NotFoundError, ValidationError, SchemaValidationError, SchemaUpdateError, NonAdditiveSchemaChangeError, SchemaLockedError, SchemaFenceError, MigrationRequiredError, QuiesceTimeoutError, GroupCardinalityError, IndexRequiredError, IndexWriteFailureError, BundleIntegrityError, BundleSealMismatchError, ReservedCollectionNameError, DictKeyMissingError, DictKeyInUseError, MissingTranslationError, LocaleNotSpecifiedError, ScriptViolationError, TranslatorNotConfiguredError, BackupLedgerError, BackupCorruptedError, AttestationError, SessionExpiredError, SessionNotFoundError, SessionPolicyError, JoinTooLargeError, CrossJoinTooLargeError, CrossJoinSourceUnknownError, DanglingReferenceError, FilenameSanitizationError, PathEscapeError, DerivationCycleError, DerivationDepthError, DerivationOutputUnknownError, DerivationOutputShapeError, DerivationCapExceededError, MaterializedViewCycleError, MaterializedViewSourceUnknownError, MaterializedViewTooLargeError, MaterializedViewConfigError, OverlayBaseIsVirtualError, OverlayCollectionUnavailableError, OverlayNameCollisionError, OverlayIdMismatchError, SnapshotNotFoundError;
 var init_errors = __esm({
   "src/errors.ts"() {
     "use strict";
@@ -564,6 +564,27 @@ Resolutions:
         this.field = field;
       }
     };
+    ScriptViolationError = class extends NoydbError {
+      /** The field whose value violated its script constraint. */
+      field;
+      /** The locale slot (e.g. `'en'`) that was checked. */
+      locale;
+      /** The Unicode scripts allowed for this slot. */
+      expected;
+      /** A short sample of the offending characters, for diagnostics. */
+      sample;
+      constructor(field, locale, expected, sample, message) {
+        super(
+          "SCRIPT_VIOLATION",
+          message ?? `Field "${field}" slot "${locale}" expects script(s) [${expected.join(", ")}] but contains disallowed character(s): "${sample}".`
+        );
+        this.name = "ScriptViolationError";
+        this.field = field;
+        this.locale = locale;
+        this.expected = expected;
+        this.sample = sample;
+      }
+    };
     TranslatorNotConfiguredError = class extends NoydbError {
       /** The field that requested auto-translation. */
       field;
@@ -4115,6 +4136,7 @@ __export(src_exports, {
   SchemaLockedError: () => SchemaLockedError,
   SchemaUpdateError: () => SchemaUpdateError,
   SchemaValidationError: () => SchemaValidationError,
+  ScriptViolationError: () => ScriptViolationError,
   SessionExpiredError: () => SessionExpiredError,
   SessionNotFoundError: () => SessionNotFoundError,
   SessionPolicyError: () => SessionPolicyError,
@@ -4190,6 +4212,7 @@ __export(src_exports, {
   enableDevUnlock: () => enableDevUnlock,
   encryptBytes: () => encryptBytes,
   encryptDeterministic: () => encryptDeterministic,
+  enforceScript: () => enforceScript,
   enrollAuthenticator: () => enrollAuthenticator,
   envelopePayloadHash: () => envelopePayloadHash,
   estimateEntropy: () => estimateEntropy,
@@ -4210,6 +4233,7 @@ __export(src_exports, {
   hasRecoveryEnrolled: () => hasRecoveryEnrolled,
   hashEntry: () => hashEntry,
   i18nText: () => i18nText,
+  inferScripts: () => inferScripts,
   isDevUnlockActive: () => isDevUnlockActive,
   isDictCollectionName: () => isDictCollectionName,
   isDictKeyDescriptor: () => isDictKeyDescriptor,
@@ -4270,6 +4294,7 @@ __export(src_exports, {
   resetJoinWarnings: () => resetJoinWarnings,
   resolveCrdtSnapshot: () => resolveCrdtSnapshot,
   resolveI18nText: () => resolveI18nText,
+  resolvePolicy: () => resolvePolicy,
   resolvePublicEnvelopeSchema: () => resolveSchema,
   resolveSession: () => resolveSession,
   revokeAllSessions: () => revokeAllSessions,
@@ -9744,6 +9769,16 @@ var NO_CRDT = {
 
 // src/i18n/core.ts
 init_errors();
+
+// src/i18n/policy.ts
+function resolvePolicy(onMissing, layer) {
+  const explicit = onMissing && typeof onMissing === "object" ? onMissing[layer] : void 0;
+  const scalar = typeof onMissing === "string" ? onMissing : void 0;
+  const layerDefault = layer === "guard" ? "substitute" : void 0;
+  return explicit ?? layerDefault ?? scalar ?? "throw";
+}
+
+// src/i18n/core.ts
 function i18nText(options) {
   return { _noydbI18nText: true, options };
 }
@@ -9806,7 +9841,21 @@ function validateI18nTextValue(value, field, descriptor) {
     }
   }
 }
-function resolveI18nText(value, locale, fallback, field) {
+function toChain(fallback) {
+  return Array.isArray(fallback) ? fallback : fallback ? [fallback] : [];
+}
+function pickFromChain(value, chain) {
+  for (const fb of chain) {
+    if (fb === "any") {
+      const any = Object.values(value).find((v) => v !== "");
+      if (any !== void 0) return any;
+    } else if (value[fb] !== void 0 && value[fb] !== "") {
+      return value[fb];
+    }
+  }
+  return void 0;
+}
+function resolveI18nText(value, locale, fallback, field, opts) {
   if (locale === "raw") {
     return value;
   }
@@ -9816,19 +9865,21 @@ function resolveI18nText(value, locale, fallback, field) {
   if (value[locale] !== void 0 && value[locale] !== "") {
     return value[locale];
   }
-  const chain = Array.isArray(fallback) ? fallback : fallback ? [fallback] : [];
-  for (const fb of chain) {
-    if (fb === "any") {
-      const any = Object.values(value).find((v) => v !== "");
-      if (any !== void 0) return any;
-    } else if (value[fb] !== void 0 && value[fb] !== "") {
-      return value[fb];
-    }
+  const policy = opts?.policy ?? "throw";
+  const callerChain = toChain(fallback);
+  const callerHit = pickFromChain(value, callerChain);
+  if (callerHit !== void 0) return callerHit;
+  if (policy === "substitute") {
+    const subHit = pickFromChain(value, toChain(opts?.substitute));
+    if (subHit !== void 0) return subHit;
+  }
+  if (policy === "throw") {
+    throw new LocaleNotSpecifiedError(
+      field ?? "<unknown>",
+      `No translation available for locale "${locale}"` + (callerChain.length > 0 ? ` or fallback chain [${callerChain.join(", ")}]` : "") + "."
+    );
   }
-  throw new LocaleNotSpecifiedError(
-    field ?? "<unknown>",
-    `No translation available for locale "${locale}"` + (chain.length > 0 ? ` or fallback chain [${chain.join(", ")}]` : "") + "."
-  );
+  return null;
 }
 function getAtPath(obj, path) {
   const arrayIdx = path.indexOf("[].");
@@ -9865,7 +9916,7 @@ function setAtPathInPlace(obj, path, value) {
   }
   obj[path] = value;
 }
-function applyAtPath(obj, path, locale, fallback) {
+function applyAtPath(obj, path, locale, fallback, opts) {
   const arrayIdx = path.indexOf("[].");
   if (arrayIdx !== -1) {
     const arrayKey = path.slice(0, arrayIdx);
@@ -9876,7 +9927,7 @@ function applyAtPath(obj, path, locale, fallback) {
       ...obj,
       [arrayKey]: arr.map((item) => {
         if (!item || typeof item !== "object" || Array.isArray(item)) return item;
-        return applyAtPath(item, restPath, locale, fallback);
+        return applyAtPath(item, restPath, locale, fallback, opts);
       })
     };
   }
@@ -9888,7 +9939,7 @@ function applyAtPath(obj, path, locale, fallback) {
     if (!nested || typeof nested !== "object" || Array.isArray(nested)) return obj;
     return {
       ...obj,
-      [head]: applyAtPath(nested, rest, locale, fallback)
+      [head]: applyAtPath(nested, rest, locale, fallback, opts)
     };
   }
   const raw = obj[path];
@@ -9896,15 +9947,20 @@ function applyAtPath(obj, path, locale, fallback) {
   if (typeof raw !== "object" || Array.isArray(raw)) return obj;
   return {
     ...obj,
-    [path]: resolveI18nText(raw, locale, fallback, path)
+    [path]: resolveI18nText(raw, locale, fallback, path, opts)
   };
 }
-function applyI18nLocale(record, i18nFields, locale, fallback) {
+function applyI18nLocale(record, i18nFields, locale, fallback, layer = "read") {
   const fieldNames = Object.keys(i18nFields);
   if (fieldNames.length === 0) return record;
   let result = record;
-  for (const field of fieldNames) {
-    result = applyAtPath(result, field, locale, fallback);
+  for (const [field, descriptor] of Object.entries(i18nFields)) {
+    const { onMissing, substitute } = descriptor.options;
+    const opts = {
+      policy: resolvePolicy(onMissing, layer),
+      ...substitute !== void 0 ? { substitute } : {}
+    };
+    result = applyAtPath(result, field, locale, fallback, opts);
   }
   return result;
 }
@@ -9922,6 +9978,9 @@ var NO_I18N = {
   validateI18nTextValue() {
     throw notEnabled("i18nText field validation");
   },
+  enforceScript(value) {
+    return { value, warnings: [] };
+  },
   buildDictionaryHandle() {
     throw notEnabled("vault.dictionary()");
   }
@@ -13111,6 +13170,22 @@ var Collection = class {
         setAtPathInPlace(obj, field, translated);
       }
     }
+    if (this.i18nFields) {
+      const obj = record;
+      for (const [field, descriptor] of Object.entries(this.i18nFields)) {
+        if (!descriptor.options.script) continue;
+        for (const leaf of getAtPath(obj, field)) {
+          if (!leaf || typeof leaf !== "object" || Array.isArray(leaf)) continue;
+          const leafMap = leaf;
+          const { value: cleaned } = this.i18nStrategy.enforceScript(
+            leafMap,
+            field,
+            descriptor
+          );
+          if (cleaned !== leafMap) Object.assign(leafMap, cleaned);
+        }
+      }
+    }
     if (this.i18nPutValidator !== void 0) {
       this.i18nPutValidator(record);
     }
@@ -14553,17 +14628,52 @@ var Collection = class {
     }
     if (hasDict && this.dictKeyFields && this.dictLabelResolver && locale !== "raw") {
       const withLabels = { ...result };
+      const resolver = this.dictLabelResolver;
       for (const [field, desc] of Object.entries(this.dictKeyFields)) {
-        const key = result[field];
-        if (typeof key !== "string") continue;
-        const label = await this.dictLabelResolver(
-          desc.name,
-          key,
-          locale,
-          localeOpts?.fallback
-        );
-        if (label !== void 0) {
-          withLabels[`${field}Label`] = label;
+        const policy = desc.onMissing ? resolvePolicy(desc.onMissing, "read") : "null";
+        const fallback = policy === "substitute" ? localeOpts?.fallback ?? desc.substitute : localeOpts?.fallback;
+        const resolveKey = async (key) => {
+          const label = await resolver(desc.name, key, locale, fallback);
+          if (label === void 0) {
+            if (policy === "throw") {
+              throw new LocaleNotSpecifiedError(
+                field,
+                `dictKey "${field}": no label for key "${key}" in locale "${locale}".`
+              );
+            }
+            return null;
+          }
+          return label;
+        };
+        if (field.includes("[].")) {
+          const parts = field.split("[].");
+          const arrayKey = parts[0];
+          const leaf = parts[1];
+          if (!leaf || leaf.includes(".")) continue;
+          const arr = withLabels[arrayKey];
+          if (!Array.isArray(arr)) continue;
+          const labelKey = `${leaf}Label`;
+          withLabels[arrayKey] = await Promise.all(
+            arr.map(async (el) => {
+              if (!el || typeof el !== "object" || Array.isArray(el)) return el;
+              const k = el[leaf];
+              if (typeof k !== "string") return el;
+              return { ...el, [labelKey]: await resolveKey(k) };
+            })
+          );
+          continue;
+        }
+        const val = result[field];
+        if (Array.isArray(val)) {
+          withLabels[`${field}Label`] = await Promise.all(
+            val.map(async (k) => ({
+              key: k,
+              label: typeof k === "string" ? await resolveKey(k) : null
+            }))
+          );
+        } else if (typeof val === "string") {
+          const label = await resolveKey(val);
+          if (label !== null) withLabels[`${field}Label`] = label;
         }
       }
       result = withLabels;
@@ -15438,8 +15548,14 @@ function dictCollectionName(dictionaryName) {
 function isDictCollectionName(name) {
   return name.startsWith(DICT_COLLECTION_PREFIX);
 }
-function dictKey(name, keys) {
-  return { _noydbDictKey: true, name, keys };
+function dictKey(name, keys, opts) {
+  return {
+    _noydbDictKey: true,
+    name,
+    keys,
+    ...opts?.onMissing !== void 0 ? { onMissing: opts.onMissing } : {},
+    ...opts?.substitute !== void 0 ? { substitute: opts.substitute } : {}
+  };
 }
 function isDictKeyDescriptor(x) {
   return typeof x === "object" && x !== null && x._noydbDictKey === true;
@@ -19747,6 +19863,119 @@ var NO_SNAPSHOTS = {
   },
   async restoreSnapshot() {
     throw NOT_ENABLED5;
+  },
+  async autoSnapshot() {
+    throw NOT_ENABLED5;
+  }
+};
+
+// src/snapshots/scheduler.ts
+var SnapshotScheduler = class {
+  policy;
+  callbacks;
+  debounceTimer = null;
+  intervalTimer = null;
+  lastFireTime = 0;
+  firing = false;
+  started = false;
+  boundVisibility = null;
+  boundUnload = null;
+  constructor(policy, callbacks) {
+    this.policy = policy;
+    this.callbacks = callbacks;
+    if (this.shouldRegisterUnload()) {
+      this.boundVisibility = this.handleVisibility.bind(this);
+      this.boundUnload = this.handleUnload.bind(this);
+    }
+  }
+  start() {
+    if (this.started) return;
+    this.started = true;
+    if (this.policy.mode === "interval") {
+      const ms = this.policy.intervalMs ?? 3e5;
+      this.intervalTimer = setInterval(() => {
+        void this.execFire();
+      }, ms);
+    }
+    if (this.boundVisibility && this.boundUnload) {
+      if (typeof document !== "undefined") {
+        document.addEventListener("visibilitychange", this.boundVisibility);
+      }
+      if (typeof globalThis.addEventListener === "function") {
+        globalThis.addEventListener("pagehide", this.boundUnload);
+      }
+      if (typeof process !== "undefined" && typeof process.on === "function") {
+        process.on("beforeExit", this.boundUnload);
+      }
+    }
+  }
+  stop() {
+    if (!this.started) return;
+    this.started = false;
+    if (this.debounceTimer) {
+      clearTimeout(this.debounceTimer);
+      this.debounceTimer = null;
+    }
+    if (this.intervalTimer) {
+      clearInterval(this.intervalTimer);
+      this.intervalTimer = null;
+    }
+    if (this.boundVisibility && this.boundUnload) {
+      if (typeof document !== "undefined") {
+        document.removeEventListener("visibilitychange", this.boundVisibility);
+      }
+      if (typeof globalThis.removeEventListener === "function") {
+        globalThis.removeEventListener("pagehide", this.boundUnload);
+      }
+      if (typeof process !== "undefined" && typeof process.removeListener === "function") {
+        process.removeListener("beforeExit", this.boundUnload);
+      }
+    }
+  }
+  notifyChange() {
+    if (!this.started) return;
+    if (this.policy.mode === "debounce") this.resetDebounce();
+  }
+  resetDebounce() {
+    if (this.debounceTimer) clearTimeout(this.debounceTimer);
+    const ms = this.policy.debounceMs ?? 3e4;
+    this.debounceTimer = setTimeout(() => {
+      this.debounceTimer = null;
+      void this.execFire();
+    }, ms);
+  }
+  async execFire() {
+    if (this.firing) return;
+    const minInterval = this.policy.minIntervalMs ?? 0;
+    if (minInterval > 0 && Date.now() - this.lastFireTime < minInterval) {
+      if (this.policy.mode === "debounce") this.resetDebounce();
+      return;
+    }
+    if (this.callbacks.pendingCount() === 0) return;
+    this.firing = true;
+    try {
+      await this.callbacks.fire();
+      this.lastFireTime = Date.now();
+    } catch {
+    } finally {
+      this.firing = false;
+    }
+  }
+  handleVisibility() {
+    if (typeof document !== "undefined" && document.visibilityState === "hidden") {
+      this.flush();
+    }
+  }
+  handleUnload() {
+    this.flush();
+  }
+  flush() {
+    if (this.callbacks.pendingCount() === 0) return;
+    void this.callbacks.fire().catch(() => {
+    });
+  }
+  shouldRegisterUnload() {
+    return this.policy.onUnload ?? this.policy.mode !== "manual";
   }
 };
 
@@ -20103,6 +20332,8 @@ var Noydb = class {
   sessionStrategy;
   syncStrategy;
   snapshotStrategy;
+  snapshotScheduler = null;
+  dirtySnapshotVaults = /* @__PURE__ */ new Set();
   /**
    * Currently-running multi-record transaction, set by
    * `runTransaction` at the start of Phase 2 (commit) and cleared in
@@ -20128,6 +20359,7 @@ var Noydb = class {
     this.sessionStrategy = options.sessionStrategy ?? NO_SESSION;
     this.syncStrategy = options.syncStrategy ?? NO_SYNC;
     this.snapshotStrategy = options.snapshotStrategy ?? NO_SNAPSHOTS;
+    this.initSnapshotCadence();
     this.publicEnvelopeSchema = resolveSchema(options.publicEnvelope);
     if (options.sessionPolicy) {
       this.sessionStrategy.validateSessionPolicy(options.sessionPolicy);
@@ -21084,6 +21316,8 @@ var Noydb = class {
   }
   close() {
     this.closed = true;
+    this.snapshotScheduler?.stop();
+    this.snapshotScheduler = null;
     if (this.sessionTimer) {
       clearTimeout(this.sessionTimer);
       this.sessionTimer = null;
@@ -22129,6 +22363,41 @@ var Noydb = class {
     }
     return this.snapshotStrategy.snapshot(v, this.options.user, opts);
   }
+  /**
+   * Wire the automatic-snapshot cadence when a non-manual `snapshotPolicy` is
+   * configured. Subscribes to `onAfterWrite` to mark the written vault dirty and
+   * nudge the scheduler; the scheduler fires `autoSnapshot()` per dirty vault.
+   * No-op for `mode:'manual'` or no policy.
+   */
+  initSnapshotCadence() {
+    const policy = this.snapshotStrategy.policy;
+    if (!policy || !policy.mode || policy.mode === "manual") return;
+    const scheduler = new SnapshotScheduler(policy, {
+      fire: async () => {
+        const names = [...this.dirtySnapshotVaults];
+        this.dirtySnapshotVaults.clear();
+        for (const name of names) {
+          const v = this.vaultCache.get(name);
+          if (!v) continue;
+          try {
+            await this.snapshotStrategy.autoSnapshot(v, this.options.user);
+          } catch (err) {
+            this.dirtySnapshotVaults.add(name);
+            console.warn(
+              `[noy-db] auto-snapshot failed for vault "${name}": ` + (err instanceof Error ? err.message : String(err))
+            );
+          }
+        }
+      },
+      pendingCount: () => this.dirtySnapshotVaults.size
+    });
+    this.onAfterWrite((event) => {
+      this.dirtySnapshotVaults.add(event.vault);
+      scheduler.notifyChange();
+    });
+    scheduler.start();
+    this.snapshotScheduler = scheduler;
+  }
   /**
    * List all snapshots for the given vault, newest first.
    * Reads only the sidecar index — does not download snapshot bytes.
@@ -23119,6 +23388,139 @@ function withOverlayedView(spec) {
 // src/index.ts
 init_errors();
 init_errors();
+
+// src/i18n/script.ts
+init_errors();
+var LATIN_BASE = /* @__PURE__ */ new Set([
+  "en",
+  "fr",
+  "de",
+  "es",
+  "it",
+  "pt",
+  "nl",
+  "sv",
+  "no",
+  "da",
+  "fi",
+  "is",
+  "pl",
+  "cs",
+  "sk",
+  "hu",
+  "ro",
+  "hr",
+  "sl",
+  "et",
+  "lv",
+  "lt",
+  "tr",
+  "vi",
+  "id",
+  "ms",
+  "tl",
+  "sw",
+  "af",
+  "ca",
+  "gl",
+  "eu",
+  "cy",
+  "ga"
+]);
+var SCRIPT_TABLE = {
+  th: ["Thai"],
+  ko: ["Hangul", "Han"],
+  ja: ["Han", "Hiragana", "Katakana"],
+  zh: ["Han"],
+  ar: ["Arabic"],
+  fa: ["Arabic"],
+  ur: ["Arabic"],
+  ru: ["Cyrillic"],
+  uk: ["Cyrillic"],
+  bg: ["Cyrillic"],
+  sr: ["Cyrillic"],
+  he: ["Hebrew"],
+  el: ["Greek"],
+  hi: ["Devanagari"],
+  ta: ["Tamil"],
+  km: ["Khmer"],
+  lo: ["Lao"],
+  my: ["Myanmar"]
+};
+var SUBTAG_SCRIPTS = {
+  Latn: ["Latin"],
+  Cyrl: ["Cyrillic", "Latin"],
+  Hans: ["Han", "Latin"],
+  Hant: ["Han", "Latin"],
+  Thai: ["Thai", "Latin"],
+  Arab: ["Arabic", "Latin"]
+};
+function inferScripts(locale) {
+  const parts = locale.split("-");
+  const subtag = parts.find((t) => /^[A-Z][a-z]{3}$/.test(t));
+  if (subtag && SUBTAG_SCRIPTS[subtag]) return SUBTAG_SCRIPTS[subtag];
+  const base = (parts[0] ?? "").toLowerCase();
+  if (LATIN_BASE.has(base)) return ["Latin"];
+  const primary = SCRIPT_TABLE[base];
+  if (primary) return [...primary, "Latin"];
+  return ["Latin"];
+}
+function allowedFor(descriptor, locale) {
+  const script = descriptor.options.script;
+  if (script && script !== "auto") {
+    const explicit = script[locale];
+    if (explicit) return explicit;
+  }
+  return inferScripts(locale);
+}
+var BASELINE = String.raw`\p{White_Space}\p{Script=Common}\p{Script=Inherited}\p{Mark}`;
+function fullMatcher(scripts) {
+  const cls = scripts.map((s) => `\\p{Script=${s}}`).join("");
+  return new RegExp(`^[${BASELINE}${cls}]*$`, "u");
+}
+function charMatcher(scripts) {
+  const cls = scripts.map((s) => `\\p{Script=${s}}`).join("");
+  return new RegExp(`[${BASELINE}${cls}]`, "u");
+}
+function offendingSample(str, scripts) {
+  const ok = charMatcher(scripts);
+  const bad = [];
+  for (const ch of str) {
+    if (!ok.test(ch)) bad.push(ch);
+    if (bad.length >= 8) break;
+  }
+  return bad.join("");
+}
+function stripDisallowed(str, scripts) {
+  const ok = charMatcher(scripts);
+  let out = "";
+  for (const ch of str) if (ok.test(ch)) out += ch;
+  return out;
+}
+function enforceScript(value, field, descriptor) {
+  const opt = descriptor.options;
+  if (!opt.script) return { value, warnings: [] };
+  const mode = opt.onScriptViolation ?? "reject";
+  const warnings = [];
+  let out = value;
+  for (const [locale, raw] of Object.entries(value)) {
+    if (typeof raw !== "string") continue;
+    const allowed = allowedFor(descriptor, locale);
+    if (fullMatcher(allowed).test(raw)) continue;
+    const sample = offendingSample(raw, allowed);
+    if (mode === "reject") {
+      throw new ScriptViolationError(field, locale, allowed, sample);
+    }
+    warnings.push({ field, locale, expected: allowed, sample });
+    if (mode === "filter") {
+      if (out === value) out = { ...value };
+      out[locale] = stripDisallowed(raw, allowed);
+    }
+  }
+  return { value: out, warnings };
+}
+
+// src/index.ts
 init_errors();
 
 // src/team/sync-credentials.ts
@@ -23880,6 +24282,7 @@ function shortJSON(value) {
   SchemaLockedError,
   SchemaUpdateError,
   SchemaValidationError,
+  ScriptViolationError,
   SessionExpiredError,
   SessionNotFoundError,
   SessionPolicyError,
@@ -23955,6 +24358,7 @@ function shortJSON(value) {
   enableDevUnlock,
   encryptBytes,
   encryptDeterministic,
+  enforceScript,
   enrollAuthenticator,
   envelopePayloadHash,
   estimateEntropy,
@@ -23975,6 +24379,7 @@ function shortJSON(value) {
   hasRecoveryEnrolled,
   hashEntry,
   i18nText,
+  inferScripts,
   isDevUnlockActive,
   isDictCollectionName,
   isDictKeyDescriptor,
@@ -24035,6 +24440,7 @@ function shortJSON(value) {
   resetJoinWarnings,
   resolveCrdtSnapshot,
   resolveI18nText,
+  resolvePolicy,
   resolvePublicEnvelopeSchema,
   resolveSession,
   revokeAllSessions,