@fortemi/core 2026.9.6 → 2026.9.7

package/dist/index.js

@@ -6975,6 +6975,61 @@ var migration0033 = {
   `
 };
 
+// src/migrations/0034_lifecycle_purge_authority.ts
+init_geometry_buffer();
+var migration0034 = {
+  version: 34,
+  name: "0034_lifecycle_purge_authority",
+  sql: `
+    ALTER TABLE deletion_receipt RENAME TO deletion_receipt_legacy_0023;
+
+    CREATE TABLE lifecycle_purge_preview (
+      id TEXT PRIMARY KEY,
+      selector_fingerprint TEXT NOT NULL,
+      selector JSONB NOT NULL,
+      selected_note_ids JSONB NOT NULL,
+      counts JSONB NOT NULL,
+      expires_at TIMESTAMPTZ NOT NULL,
+      consumed_by TEXT
+    );
+
+    CREATE TABLE lifecycle_purge_operation (
+      id TEXT PRIMARY KEY,
+      preview_id TEXT NOT NULL UNIQUE REFERENCES lifecycle_purge_preview(id),
+      selector_fingerprint TEXT NOT NULL,
+      state TEXT NOT NULL CHECK (state IN ('cleanup_pending', 'completed')),
+      counts JSONB NOT NULL,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      completed_at TIMESTAMPTZ
+    );
+
+    CREATE TABLE lifecycle_purge_erasure_target (
+      operation_id TEXT NOT NULL REFERENCES lifecycle_purge_operation(id),
+      note_id TEXT NOT NULL,
+      PRIMARY KEY (operation_id, note_id)
+    );
+    CREATE INDEX idx_lifecycle_purge_erasure_note
+      ON lifecycle_purge_erasure_target(note_id);
+
+    CREATE TABLE lifecycle_purge_blob_cleanup (
+      operation_id TEXT NOT NULL REFERENCES lifecycle_purge_operation(id),
+      blob_id TEXT NOT NULL,
+      content_hash TEXT NOT NULL,
+      completed_at TIMESTAMPTZ,
+      PRIMARY KEY (operation_id, blob_id)
+    );
+
+    CREATE TABLE deletion_receipt (
+      operation_id TEXT PRIMARY KEY REFERENCES lifecycle_purge_operation(id),
+      contract_version TEXT NOT NULL,
+      outcome TEXT NOT NULL CHECK (outcome = 'completed'),
+      counts JSONB NOT NULL,
+      completed_at TIMESTAMPTZ NOT NULL,
+      policy JSONB NOT NULL
+    );
+  `
+};
+
 // src/migrations/index.ts
 var allMigrations = [
   migration0001,
@@ -7009,7 +7064,8 @@ var allMigrations = [
   migration0030,
   migration0031,
   migration0032,
-  migration0033
+  migration0033,
+  migration0034
 ];
 
 // src/data-archive.ts
@@ -7538,6 +7594,13 @@ var NotesRepository = class {
    */
   async restore(id) {
     await this.db.transaction(async (tx) => {
+      const retained = await tx.query(
+        "SELECT 1 FROM lifecycle_purge_erasure_target WHERE note_id = $1 LIMIT 1",
+        [id]
+      );
+      if (retained.rows.length > 0) {
+        throw new Error("Terminally purged notes cannot be restored");
+      }
       await tx.query(
         `UPDATE note SET deleted_at = NULL, updated_at = now() WHERE id = $1`,
         [id]
@@ -24223,6 +24286,46 @@ function countOutcomes(outcomes) {
 
 // src/repositories/lifecycle-purge-repository.ts
 init_geometry_buffer();
+
+// src/purge-selector.ts
+init_geometry_buffer();
+var LIFECYCLE_PURGE_MAX_NOTE_IDS = 500;
+function assertPurgeOpaqueId(value, label) {
+  if (typeof value !== "string" || value.trim() !== value || value.length === 0 || value.length > 200) {
+    throw new Error(`${label} must be a nonempty opaque identifier`);
+  }
+}
+function validatePurgeSelector(selector) {
+  const nonempty = (value) => typeof value === "string" && value.trim() === value && value.length > 0;
+  if (!selector.note_ids && !selector.source || selector.note_ids !== void 0 && (!Array.isArray(selector.note_ids) || selector.note_ids.length === 0 || selector.note_ids.length > LIFECYCLE_PURGE_MAX_NOTE_IDS || !selector.note_ids.every(nonempty) || new Set(selector.note_ids).size !== selector.note_ids.length) || selector.source !== void 0 && (!nonempty(selector.source.namespace) || selector.source.namespace.length > 200 || selector.source.external_id !== void 0 && !nonempty(selector.source.external_id)) || selector.source?.external_id !== void 0 && selector.source.external_id.length > 1e3 || selector.tenant_id !== void 0 && !nonempty(selector.tenant_id) || selector.archive_id !== void 0 && selector.archive_id !== null && !nonempty(selector.archive_id)) {
+    throw new Error("Purge selector must target nonempty note_ids or source identity");
+  }
+}
+function purgeSelectorHash(selector) {
+  validatePurgeSelector(selector);
+  return computeHash(new TextEncoder().encode(JSON.stringify({
+    selector_version: 2,
+    source_scope_required: selector.tenant_id !== void 0 || selector.archive_id !== void 0 || selector.source !== void 0,
+    tenant_id: selector.tenant_id ?? "default",
+    archive_id: selector.archive_id ?? null,
+    note_ids: [...selector.note_ids ?? []].sort(),
+    source: selector.source ? {
+      namespace: selector.source.namespace,
+      external_id_hash: selector.source.external_id ? computeHash(new TextEncoder().encode(selector.source.external_id)) : null
+    } : null
+  })));
+}
+
+// src/repositories/lifecycle-purge-repository.ts
+var LIFECYCLE_PURGE_CONTRACT_VERSION = "1.0.0";
+var LIFECYCLE_PURGE_PREVIEW_TTL_SECONDS = 900;
+var RECEIPT_POLICY = {
+  authority: "Fortemi/fortemi#1092",
+  mode: "terminal_purge",
+  receipt_contains_content: false,
+  backup_disposition: "beyond_use_then_reerase",
+  restore_reerasure: true
+};
 function zeroCounts() {
   return {
     notes: 0,
@@ -24237,18 +24340,14 @@ function zeroCounts() {
     source_identities: 0
   };
 }
-function selectorHash(selector) {
-  return computeHash(new TextEncoder().encode(JSON.stringify({
-    tenant_id: selector.tenant_id ?? "default",
-    archive_id: selector.archive_id ?? null,
-    note_ids: [...selector.note_ids ?? []].sort(),
-    source: selector.source ? {
-      namespace: selector.source.namespace,
-      external_id_hash: selector.source.external_id ? computeHash(new TextEncoder().encode(selector.source.external_id)) : null
-    } : null
-  })));
+function asCounts(value) {
+  return { ...zeroCounts(), ...value };
+}
+function iso(value) {
+  return value instanceof Date ? value.toISOString() : new Date(value).toISOString();
 }
 function buildSelectorWhere(selector, startIdx) {
+  validatePurgeSelector(selector);
   const clauses = [];
   const params = [];
   let idx = startIdx;
@@ -24269,7 +24368,6 @@ function buildSelectorWhere(selector, startIdx) {
     if (selector.source) params.push(selector.source.namespace);
     if (selector.source?.external_id) params.push(selector.source.external_id);
   }
-  if (clauses.length === 0) throw new Error("Purge selector must target note_ids or source identity");
   return { sql: clauses.join(" AND "), params };
 }
 async function selectedNoteIds(db, selector) {
@@ -24280,129 +24378,375 @@ async function selectedNoteIds(db, selector) {
   );
   return result.rows.map((row) => row.id);
 }
+async function countSelected(db, noteIds) {
+  const counts = zeroCounts();
+  if (noteIds.length === 0) return counts;
+  const queries = [
+    "SELECT COUNT(*) AS count FROM note WHERE id = ANY($1)",
+    `SELECT
+       (SELECT COUNT(*) FROM note_revision WHERE note_id = ANY($1))
+       + (SELECT COUNT(*) FROM note_original_history WHERE note_id = ANY($1)) AS count`,
+    `SELECT
+       (SELECT COUNT(*) FROM link WHERE source_note_id = ANY($1) OR target_note_id = ANY($1))
+       + (SELECT COUNT(*) FROM link_url_target WHERE source_note_id = ANY($1)) AS count`,
+    `SELECT
+       (SELECT COUNT(*) FROM note_tag WHERE note_id = ANY($1))
+       + (SELECT COUNT(*) FROM note_skos_tag WHERE note_id = ANY($1)) AS count`,
+    `SELECT
+       (SELECT COUNT(*) FROM embedding WHERE note_id = ANY($1))
+       + (SELECT COUNT(*) FROM embedding_set_member WHERE note_id = ANY($1)) AS count`,
+    "SELECT COUNT(*) AS count FROM attachment WHERE note_id = ANY($1)",
+    `SELECT COUNT(*) AS count FROM attachment_blob ab
+       WHERE EXISTS (SELECT 1 FROM attachment a
+         WHERE (a.blob_id = ab.id OR a.preview_blob_id = ab.id) AND a.note_id = ANY($1))
+       AND NOT EXISTS (SELECT 1 FROM attachment a
+         WHERE (a.blob_id = ab.id OR a.preview_blob_id = ab.id) AND NOT (a.note_id = ANY($1)))`,
+    "SELECT COUNT(*) AS count FROM graph_edge_artifact WHERE from_note_id = ANY($1) OR to_note_id = ANY($1)",
+    `SELECT
+       (SELECT COUNT(*) FROM provenance_edge
+          WHERE note_id = ANY($1)
+             OR revision_id IN (SELECT id FROM note_revision WHERE note_id = ANY($1)))
+       + (SELECT COUNT(*) FROM provenance_derivation
+          WHERE source_note_id = ANY($1)
+             OR revision_id IN (SELECT id FROM note_revision WHERE note_id = ANY($1)))
+       + (SELECT COUNT(*) FROM provenance_record
+          WHERE note_id = ANY($1)
+             OR attachment_id IN (SELECT id FROM attachment WHERE note_id = ANY($1))) AS count`,
+    "SELECT COUNT(*) AS count FROM source_identity WHERE note_id = ANY($1)"
+  ];
+  const values = [];
+  for (const sql of queries) {
+    const result = await db.query(sql, [noteIds]);
+    values.push(Number(result.rows[0]?.count ?? 0));
+  }
+  [
+    counts.notes,
+    counts.revisions,
+    counts.links,
+    counts.tags,
+    counts.embeddings,
+    counts.attachments,
+    counts.blobs,
+    counts.graph_edges,
+    counts.provenance_edges,
+    counts.source_identities
+  ] = values;
+  return counts;
+}
+async function deleteSelected(tx, noteIds, deleteSourceJournals = false) {
+  if (noteIds.length === 0) return [];
+  const params = [noteIds];
+  const blobs = await tx.query(
+    `SELECT ab.id, ab.content_hash FROM attachment_blob ab WHERE EXISTS (
+       SELECT 1 FROM attachment a
+       WHERE (a.blob_id = ab.id OR a.preview_blob_id = ab.id) AND a.note_id = ANY($1))
+       AND NOT EXISTS (SELECT 1 FROM attachment a
+         WHERE (a.blob_id = ab.id OR a.preview_blob_id = ab.id) AND NOT (a.note_id = ANY($1)))`,
+    params
+  );
+  const sources = await tx.query(
+    "SELECT DISTINCT tenant_id, archive_id, namespace FROM source_identity WHERE note_id = ANY($1)",
+    params
+  );
+  await tx.query("DELETE FROM community_assignment WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM graph_edge_artifact WHERE from_note_id = ANY($1) OR to_note_id = ANY($1)", params);
+  await tx.query("DELETE FROM embedding_set_member WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM embedding WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM attachment_embedding WHERE attachment_id IN (SELECT id FROM attachment WHERE note_id = ANY($1))", params);
+  await tx.query("DELETE FROM attachment WHERE note_id = ANY($1)", params);
+  await tx.query(
+    `DELETE FROM attachment_blob ab WHERE ab.id = ANY($1)
+       AND NOT EXISTS (SELECT 1 FROM attachment a WHERE a.blob_id = ab.id OR a.preview_blob_id = ab.id)`,
+    [blobs.rows.map((row) => row.id)]
+  );
+  await tx.query("DELETE FROM source_identity WHERE note_id = ANY($1)", params);
+  if (deleteSourceJournals) {
+    for (const source of sources.rows) {
+      const scope = [source.tenant_id, source.archive_id, source.namespace];
+      const stillOwned = await tx.query(
+        `SELECT 1 FROM source_identity
+         WHERE tenant_id = $1 AND archive_id IS NOT DISTINCT FROM $2 AND namespace = $3 LIMIT 1`,
+        scope
+      );
+      if (stillOwned.rows.length === 0) {
+        await tx.query(
+          "DELETE FROM source_import_batch WHERE tenant_id = $1 AND archive_id IS NOT DISTINCT FROM $2 AND namespace = $3",
+          scope
+        );
+        await tx.query(
+          "DELETE FROM source_import_run WHERE tenant_id = $1 AND archive_id IS NOT DISTINCT FROM $2 AND namespace = $3",
+          scope
+        );
+      }
+    }
+  }
+  await tx.query(
+    `DELETE FROM provenance_edge
+      WHERE note_id = ANY($1)
+         OR revision_id IN (SELECT id FROM note_revision WHERE note_id = ANY($1))`,
+    params
+  );
+  await tx.query("DELETE FROM job_queue WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM collection_note WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM note_skos_tag WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM note_tag WHERE note_id = ANY($1)", params);
+  await tx.query(
+    `DELETE FROM shard_field_presence
+      WHERE (component = 'notes' AND record_id = ANY($1))
+         OR (component = 'links' AND record_id IN (
+           SELECT id FROM link WHERE source_note_id = ANY($1) OR target_note_id = ANY($1)
+           UNION
+           SELECT id FROM link_url_target WHERE source_note_id = ANY($1)
+         ))`,
+    params
+  );
+  await tx.query("DELETE FROM link_url_target WHERE source_note_id = ANY($1)", params);
+  await tx.query("DELETE FROM link WHERE source_note_id = ANY($1) OR target_note_id = ANY($1)", params);
+  await tx.query("DELETE FROM note_revision WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM note_revised_current WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM note_original WHERE note_id = ANY($1)", params);
+  await tx.query("DELETE FROM note WHERE id = ANY($1)", params);
+  return blobs.rows;
+}
+async function statusFrom(db, operationId) {
+  const result = await db.query(
+    `SELECT o.id, o.state, o.counts, r.counts AS receipt_counts,
+            r.completed_at AS receipt_completed_at, r.policy AS receipt_policy
+            ,(SELECT COUNT(*) FROM lifecycle_purge_blob_cleanup b
+               WHERE b.operation_id = o.id AND b.completed_at IS NULL) AS blob_cleanup_pending
+       FROM lifecycle_purge_operation o
+       LEFT JOIN deletion_receipt r ON r.operation_id = o.id
+      WHERE o.id = $1`,
+    [operationId]
+  );
+  const row = result.rows[0];
+  if (!row) return null;
+  const receipt = row.receipt_completed_at === null ? void 0 : {
+    contract_version: LIFECYCLE_PURGE_CONTRACT_VERSION,
+    operation_id: row.id,
+    outcome: "completed",
+    counts: asCounts(row.receipt_counts),
+    completed_at: iso(row.receipt_completed_at),
+    policy: row.receipt_policy ?? RECEIPT_POLICY
+  };
+  return {
+    contract_version: LIFECYCLE_PURGE_CONTRACT_VERSION,
+    operation_id: row.id,
+    outcome: row.state,
+    counts: asCounts(row.counts),
+    blob_cleanup_pending: Number(row.blob_cleanup_pending),
+    search_cleanup_pending: false,
+    ...receipt ? { receipt } : {}
+  };
+}
+async function finalize(tx, operationId) {
+  const completedAt = (/* @__PURE__ */ new Date()).toISOString();
+  await tx.query(
+    `UPDATE lifecycle_purge_operation SET state = 'completed', completed_at = $2 WHERE id = $1`,
+    [operationId, completedAt]
+  );
+  await tx.query(
+    `INSERT INTO deletion_receipt (operation_id, contract_version, outcome, counts, completed_at, policy)
+     SELECT id, $2, 'completed', counts, $3, $4::jsonb FROM lifecycle_purge_operation WHERE id = $1
+     ON CONFLICT (operation_id) DO UPDATE SET outcome = 'completed', completed_at = $3`,
+    [operationId, LIFECYCLE_PURGE_CONTRACT_VERSION, completedAt, JSON.stringify(RECEIPT_POLICY)]
+  );
+}
+async function reeraseLifecyclePurgeTargets(tx, candidateNoteIds, trackBlobCleanup = false) {
+  const capability = await tx.query(
+    "SELECT to_regclass('lifecycle_purge_erasure_target')::text AS erasure_target"
+  );
+  if (capability.rows[0]?.erasure_target === null) {
+    return { note_ids: [], operation_ids: [] };
+  }
+  const result = candidateNoteIds ? await tx.query(
+    `SELECT DISTINCT t.note_id, t.operation_id
+           FROM lifecycle_purge_erasure_target t JOIN note n ON n.id = t.note_id
+          WHERE t.note_id = ANY($1) ORDER BY t.note_id`,
+    [candidateNoteIds]
+  ) : await tx.query(
+    `SELECT DISTINCT t.note_id, t.operation_id
+           FROM lifecycle_purge_erasure_target t JOIN note n ON n.id = t.note_id
+          ORDER BY t.note_id`
+  );
+  if (result.rows.length === 0) return { note_ids: [], operation_ids: [] };
+  const noteIds = [...new Set(result.rows.map((row) => row.note_id))];
+  const operationIds = [...new Set(result.rows.map((row) => row.operation_id))];
+  await tx.query("UPDATE lifecycle_purge_operation SET state = 'cleanup_pending', completed_at = NULL WHERE id = ANY($1)", [operationIds]);
+  await tx.query("DELETE FROM deletion_receipt WHERE operation_id = ANY($1)", [operationIds]);
+  const blobs = await deleteSelected(tx, noteIds);
+  for (const operationId of operationIds) {
+    for (const blob of trackBlobCleanup ? blobs : []) {
+      await tx.query(
+        `INSERT INTO lifecycle_purge_blob_cleanup
+          (operation_id, blob_id, content_hash, completed_at)
+         VALUES ($1, $2, $3, NULL)
+         ON CONFLICT (operation_id, blob_id)
+         DO UPDATE SET content_hash = $3, completed_at = NULL`,
+        [operationId, blob.id, blob.content_hash]
+      );
+    }
+    if (!trackBlobCleanup || blobs.length === 0) await finalize(tx, operationId);
+  }
+  return { note_ids: noteIds, operation_ids: operationIds };
+}
 var LifecyclePurgeRepository = class {
-  constructor(db, events) {
+  constructor(db, events, blobStore) {
     this.db = db;
     this.events = events;
+    this.blobStore = blobStore;
   }
   async preview(selector) {
-    const noteIds = await selectedNoteIds(this.db, selector);
-    return { selector_hash: selectorHash(selector), counts: await this.count(noteIds) };
-  }
-  async purge(selector, operationKey) {
-    const existing = await this.db.query(
-      `SELECT id, operation_key, tenant_id, archive_id, selector_hash, outcome, counts, completed_at, policy
-       FROM deletion_receipt
-       WHERE operation_key = $1`,
-      [operationKey]
-    );
-    if (existing.rows[0]) return existing.rows[0];
-    const hash = selectorHash(selector);
-    let receipt;
-    await this.db.transaction(async (tx) => {
+    validatePurgeSelector(selector);
+    return this.db.transaction(async (tx) => {
+      await tx.query("DELETE FROM lifecycle_purge_preview WHERE consumed_by IS NULL AND expires_at <= now()");
       const noteIds = await selectedNoteIds(tx, selector);
-      const counts = await this.count(noteIds, tx);
-      await this.deleteSelected(tx, noteIds);
-      receipt = {
-        id: generateId(),
-        operation_key: operationKey,
-        tenant_id: selector.tenant_id ?? "default",
-        archive_id: selector.archive_id ?? null,
-        selector_hash: hash,
-        outcome: "completed",
-        counts,
-        completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-        policy: {
-          authority: "fortemi#1092",
-          mode: "terminal-purge",
-          receipt_contains_content: false
+      const counts = await countSelected(tx, noteIds);
+      const previewId = generateId();
+      const expiresAt = new Date(Date.now() + LIFECYCLE_PURGE_PREVIEW_TTL_SECONDS * 1e3).toISOString();
+      await tx.query(
+        `INSERT INTO lifecycle_purge_preview
+          (id, selector_fingerprint, selector, selected_note_ids, counts, expires_at, consumed_by)
+         VALUES ($1, $2, $3::jsonb, $4::jsonb, $5::jsonb, $6, NULL)`,
+        [previewId, purgeSelectorHash(selector), JSON.stringify(selector), JSON.stringify(noteIds), JSON.stringify(counts), expiresAt]
+      );
+      return { contract_version: LIFECYCLE_PURGE_CONTRACT_VERSION, preview_id: previewId, counts, expires_at: expiresAt };
+    });
+  }
+  async begin(request) {
+    assertPurgeOpaqueId(request.operation_id, "operation_id");
+    assertPurgeOpaqueId(request.preview_id, "preview_id");
+    let created = false;
+    const status = await this.db.transaction(async (tx) => {
+      const existing = await tx.query("SELECT preview_id FROM lifecycle_purge_operation WHERE id = $1", [request.operation_id]);
+      if (existing.rows[0]) {
+        if (existing.rows[0].preview_id !== request.preview_id) throw new Error("Purge operation ID was already used for another preview");
+        return await statusFrom(tx, request.operation_id);
+      }
+      const previewResult = await tx.query(
+        `SELECT selector_fingerprint, selector, selected_note_ids, counts, expires_at, consumed_by
+           FROM lifecycle_purge_preview WHERE id = $1`,
+        [request.preview_id]
+      );
+      const preview = previewResult.rows[0];
+      if (!preview) throw new Error("Lifecycle purge preview was not found");
+      if (preview.consumed_by !== null) throw new Error("Lifecycle purge preview was already consumed");
+      if (new Date(preview.expires_at).getTime() <= Date.now()) throw new Error("Lifecycle purge preview expired; create a new preview");
+      validatePurgeSelector(preview.selector);
+      if (purgeSelectorHash(preview.selector) !== preview.selector_fingerprint) throw new Error("Lifecycle purge preview integrity check failed");
+      const currentIds = await selectedNoteIds(tx, preview.selector);
+      const currentCounts = await countSelected(tx, currentIds);
+      if (JSON.stringify(currentIds) !== JSON.stringify(preview.selected_note_ids) || JSON.stringify(currentCounts) !== JSON.stringify(asCounts(preview.counts))) {
+        throw new Error("Lifecycle purge preview is stale; create a new preview");
+      }
+      const now2 = (/* @__PURE__ */ new Date()).toISOString();
+      await tx.query(
+        `INSERT INTO lifecycle_purge_operation
+          (id, preview_id, selector_fingerprint, state, counts, created_at)
+         VALUES ($1, $2, $3, 'cleanup_pending', $4::jsonb, $5)`,
+        [request.operation_id, request.preview_id, preview.selector_fingerprint, JSON.stringify(currentCounts), now2]
+      );
+      for (const noteId of currentIds) {
+        await tx.query(
+          "INSERT INTO lifecycle_purge_erasure_target (operation_id, note_id) VALUES ($1, $2)",
+          [request.operation_id, noteId]
+        );
+      }
+      const blobs = await deleteSelected(
+        tx,
+        currentIds,
+        preview.selector.source !== void 0 && preview.selector.source.external_id === void 0
+      );
+      if (this.blobStore) {
+        for (const blob of blobs) {
+          await tx.query(
+            `INSERT INTO lifecycle_purge_blob_cleanup
+              (operation_id, blob_id, content_hash, completed_at)
+             VALUES ($1, $2, $3, NULL)`,
+            [request.operation_id, blob.id, blob.content_hash]
+          );
         }
-      };
+      }
       await tx.query(
-        `INSERT INTO deletion_receipt
-          (id, operation_key, tenant_id, archive_id, selector_hash, outcome, counts, completed_at, policy)
-         VALUES ($1, $2, $3, $4, $5, 'completed', $6::jsonb, $7, $8::jsonb)`,
-        [
-          receipt.id,
-          receipt.operation_key,
-          receipt.tenant_id,
-          receipt.archive_id,
-          receipt.selector_hash,
-          JSON.stringify(receipt.counts),
-          receipt.completed_at,
-          JSON.stringify(receipt.policy)
-        ]
+        `UPDATE lifecycle_purge_preview
+            SET consumed_by = $2, selector = '{}'::jsonb, selected_note_ids = '[]'::jsonb
+          WHERE id = $1`,
+        [request.preview_id, request.operation_id]
       );
+      if (!this.blobStore || blobs.length === 0) await finalize(tx, request.operation_id);
+      created = true;
+      return await statusFrom(tx, request.operation_id);
     });
-    const completedReceipt = receipt;
-    if (!completedReceipt) throw new Error("Purge transaction did not produce a receipt");
-    this.events?.emit("purge.completed", { receiptId: completedReceipt.id, counts: completedReceipt.counts });
-    return completedReceipt;
-  }
-  async count(noteIds, db = this.db) {
-    const counts = zeroCounts();
-    if (noteIds.length === 0) return counts;
-    const params = [noteIds];
-    const rows = await Promise.all([
-      db.query("SELECT COUNT(*) AS count FROM note WHERE id = ANY($1)", params),
-      db.query("SELECT COUNT(*) AS count FROM note_revision WHERE note_id = ANY($1)", params),
-      db.query("SELECT COUNT(*) AS count FROM link WHERE source_note_id = ANY($1) OR target_note_id = ANY($1)", params),
-      db.query("SELECT COUNT(*) AS count FROM note_tag WHERE note_id = ANY($1)", params),
-      db.query("SELECT COUNT(*) AS count FROM embedding WHERE note_id = ANY($1)", params),
-      db.query("SELECT COUNT(*) AS count FROM attachment WHERE note_id = ANY($1)", params),
-      db.query(
-        `SELECT COUNT(*) AS count FROM attachment_blob ab
-         WHERE EXISTS (SELECT 1 FROM attachment a WHERE a.blob_id = ab.id AND a.note_id = ANY($1))`,
-        params
-      ),
-      db.query("SELECT COUNT(*) AS count FROM graph_edge_artifact WHERE from_note_id = ANY($1) OR to_note_id = ANY($1)", params),
-      db.query(
-        `SELECT COUNT(*) AS count FROM provenance_edge
-         WHERE (entity_type = 'note' AND entity_id = ANY($1))
-            OR (attributes ->> 'note_id') = ANY($1)`,
-        params
-      ),
-      db.query("SELECT COUNT(*) AS count FROM source_identity WHERE note_id = ANY($1)", params)
-    ]);
-    const values = rows.map((row) => Number.parseInt(row.rows[0]?.count ?? "0", 10));
-    [
-      counts.notes,
-      counts.revisions,
-      counts.links,
-      counts.tags,
-      counts.embeddings,
-      counts.attachments,
-      counts.blobs,
-      counts.graph_edges,
-      counts.provenance_edges,
-      counts.source_identities
-    ] = values;
-    return counts;
+    if (created && status.outcome === "completed") {
+      this.events?.emit("purge.completed", {
+        receiptId: status.operation_id,
+        counts: status.counts
+      });
+    }
+    return status;
+  }
+  async status(operationId) {
+    assertPurgeOpaqueId(operationId, "operation_id");
+    return statusFrom(this.db, operationId);
+  }
+  async resume(operationId) {
+    assertPurgeOpaqueId(operationId, "operation_id");
+    const initial = await this.status(operationId);
+    if (!initial) throw new Error("Lifecycle purge operation was not found");
+    if (initial.outcome === "completed") return initial;
+    if (!this.blobStore) throw new Error("Lifecycle purge byte cleanup requires the configured BlobStore");
+    const pending = await this.db.query(
+      `SELECT blob_id, content_hash FROM lifecycle_purge_blob_cleanup
+        WHERE operation_id = $1 AND completed_at IS NULL ORDER BY blob_id`,
+      [operationId]
+    );
+    for (const blob of pending.rows) {
+      if (!this.blobStore.delete) throw new Error("Lifecycle purge requires BlobStore.delete()");
+      await this.blobStore.delete(blob.content_hash);
+      await this.db.query(
+        `UPDATE lifecycle_purge_blob_cleanup SET completed_at = $3
+          WHERE operation_id = $1 AND blob_id = $2`,
+        [operationId, blob.blob_id, (/* @__PURE__ */ new Date()).toISOString()]
+      );
+    }
+    await this.db.transaction(async (tx) => {
+      const remaining = await tx.query(
+        "SELECT 1 FROM lifecycle_purge_blob_cleanup WHERE operation_id = $1 AND completed_at IS NULL LIMIT 1",
+        [operationId]
+      );
+      if (remaining.rows.length === 0) await finalize(tx, operationId);
+    });
+    const completed = await this.status(operationId);
+    if (completed.outcome === "completed") {
+      this.events?.emit("purge.completed", {
+        receiptId: completed.operation_id,
+        counts: completed.counts
+      });
+    }
+    return completed;
   }
-  async deleteSelected(tx, noteIds) {
-    if (noteIds.length === 0) return;
-    const params = [noteIds];
-    await tx.query("DELETE FROM community_assignment WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM graph_edge_artifact WHERE from_note_id = ANY($1) OR to_note_id = ANY($1)", params);
-    await tx.query("DELETE FROM embedding_set_member WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM embedding WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM attachment_embedding WHERE attachment_id IN (SELECT id FROM attachment WHERE note_id = ANY($1))", params);
-    await tx.query("DELETE FROM attachment WHERE note_id = ANY($1)", params);
-    await tx.query(
-      `DELETE FROM attachment_blob ab
-       WHERE NOT EXISTS (SELECT 1 FROM attachment a WHERE a.blob_id = ab.id)`
-    );
-    await tx.query("DELETE FROM source_identity WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM provenance_edge WHERE (entity_type = $2 AND entity_id = ANY($1)) OR (attributes ->> $3) = ANY($1)", [noteIds, "note", "note_id"]);
-    await tx.query("DELETE FROM job_queue WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM collection_note WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM note_tag WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM link WHERE source_note_id = ANY($1) OR target_note_id = ANY($1)", params);
-    await tx.query("DELETE FROM note_revision WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM note_revised_current WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM note_original WHERE note_id = ANY($1)", params);
-    await tx.query("DELETE FROM shard_field_presence WHERE component = $2 AND record_id = ANY($1)", [noteIds, "notes"]);
-    await tx.query("DELETE FROM note WHERE id = ANY($1)", params);
+  /** Compatibility convenience: create and consume a fresh preview. */
+  async purge(selector, operationId) {
+    validatePurgeSelector(selector);
+    assertPurgeOpaqueId(operationId, "operation_id");
+    const existing = await this.db.query(
+      "SELECT selector_fingerprint FROM lifecycle_purge_operation WHERE id = $1",
+      [operationId]
+    );
+    if (existing.rows[0]) {
+      if (existing.rows[0].selector_fingerprint !== purgeSelectorHash(selector)) {
+        throw new Error("Purge operation key conflicts with selector");
+      }
+      let replay = await this.status(operationId);
+      if (replay.outcome === "cleanup_pending") replay = await this.resume(operationId);
+      if (!replay.receipt) throw new Error("Lifecycle purge did not produce a terminal receipt");
+      return replay.receipt;
+    }
+    const preview = await this.preview(selector);
+    let status = await this.begin({ operation_id: operationId, preview_id: preview.preview_id });
+    if (status.outcome === "cleanup_pending") status = await this.resume(operationId);
+    if (!status.receipt) throw new Error("Lifecycle purge did not produce a terminal receipt");
+    return status.receipt;
   }
 };
 
@@ -24898,7 +25242,7 @@ function parseObject(value) {
   if (typeof value === "string") return JSON.parse(value);
   return value;
 }
-function iso(value) {
+function iso2(value) {
   if (!value) return void 0;
   return value instanceof Date ? value.toISOString() : value;
 }
@@ -24990,7 +25334,7 @@ var CommunitiesRepository = class {
         graphSourceId: row.graph_source_id,
         searchQuery: parameters?.filters?.query,
         filters: parameters?.filters ?? void 0,
-        createdAt: iso(row.created_at),
+        createdAt: iso2(row.created_at),
         freshness: freshness?.status ?? "unknown"
       };
     });
@@ -39140,7 +39484,7 @@ function jsonObject3(value) {
   if (typeof value === "string") return JSON.parse(value);
   return value;
 }
-function iso2(value) {
+function iso3(value) {
   return value instanceof Date ? value.toISOString() : value;
 }
 function coreV1OptionErrors(options) {
@@ -39473,8 +39817,8 @@ async function exportShardBytes(db, options, mode) {
       ...row.extraction_status !== null ? { extraction_status: row.extraction_status } : {},
       ...row.extraction_reason !== null ? { reason: row.extraction_reason } : {},
       ...!coreV1 ? {
-        created_at: iso2(row.created_at),
-        deleted_at: row.deleted_at ? iso2(row.deleted_at) : null
+        created_at: iso3(row.created_at),
+        deleted_at: row.deleted_at ? iso3(row.deleted_at) : null
       } : {},
       attachment: {
         // `path` is the display filename per the binary-attachment projection
@@ -39755,7 +40099,7 @@ async function exportShardBytes(db, options, mode) {
       parameters: jsonObject3(row.parameters_json),
       input_hash: row.input_hash,
       freshness: jsonObject3(row.freshness_json) ?? { status: "unknown" },
-      created_at: iso2(row.created_at)
+      created_at: iso3(row.created_at)
     }));
     files.set("graph_sources.json", encoder5.encode(JSON.stringify(shardGraphSources)));
     components4.push("graph_sources");
@@ -39807,7 +40151,7 @@ async function exportShardBytes(db, options, mode) {
         representative_note_ids: community.representative_note_ids ?? [],
         metadata: jsonObject3(community.metadata_json)
       })),
-      created_at: iso2(row.created_at)
+      created_at: iso3(row.created_at)
     }));
     files.set("communities.json", encoder5.encode(JSON.stringify(shardCommunitySets)));
     components4.push("communities");
@@ -39840,7 +40184,7 @@ async function exportShardBytes(db, options, mode) {
         if (!tagsByName.has(name)) {
           tagsByName.set(name, {
             name,
-            created_at: iso2(template.created_at)
+            created_at: iso3(template.created_at)
           });
         }
       }
@@ -40281,6 +40625,7 @@ async function importNativeFullV1(db, data, options = {}) {
   }
   const sidecars = collectSidecarBlobs(files);
   let promotion;
+  const reerasedOperationIds = [];
   try {
     let appliedCounts = {};
     await db.transaction(async (tx) => {
@@ -40312,8 +40657,29 @@ async function importNativeFullV1(db, data, options = {}) {
       });
       appliedCounts = stateCounts(selected);
       await writeNativeLineage(tx, selected, manifest, components3.every((component) => state[component].length === 0));
+      const reerased = await reeraseLifecyclePurgeTargets(
+        tx,
+        selected.notes.map((note) => note.id),
+        Boolean(options.blobStore)
+      );
+      reerasedOperationIds.push(...reerased.operation_ids);
+      if (reerased.note_ids.length > 0) {
+        warnings.push(
+          `${reerased.note_ids.length} retained lifecycle purge target(s) were re-erased before indexing.`
+        );
+      }
       await options.onProgress?.({ phase: "index", done: 0, total: 1 });
     });
+    if (options.blobStore) {
+      const lifecycle = new LifecyclePurgeRepository(db, void 0, options.blobStore);
+      for (const operationId of reerasedOperationIds) {
+        try {
+          await lifecycle.resume(operationId);
+        } catch {
+          warnings.push("A restored purge target was re-erased, but byte cleanup remains pending.");
+        }
+      }
+    }
     try {
       await options.onProgress?.({ phase: "index", done: 1, total: 1 });
     } catch {
@@ -40453,6 +40819,7 @@ async function importShard(db, data, options) {
   });
   const inputData = data instanceof ArrayBuffer ? new Uint8Array(data) : data;
   let files;
+  const reerasedOperationIds = [];
   try {
     await report?.({ phase: "unpack", done: 0, total: 1 });
     files = unpackTarGz(inputData);
@@ -41611,6 +41978,17 @@ async function importShard(db, data, options) {
         report?.({ phase: "embedding_set_members", done: index + 1, total: parsedEmbMembers.length });
         await maybeYield2(index + 1, batchSize);
       }
+      const reerased = await reeraseLifecyclePurgeTargets(
+        tx,
+        parsedNotes.map((note) => note.id),
+        Boolean(options?.blobStore)
+      );
+      reerasedOperationIds.push(...reerased.operation_ids);
+      if (reerased.note_ids.length > 0) {
+        warnings.push(
+          `${reerased.note_ids.length} retained lifecycle purge target(s) were re-erased before indexing.`
+        );
+      }
     });
     report?.({ phase: "index", done: 1, total: 1 });
   } catch (err) {
@@ -41633,6 +42011,16 @@ async function importShard(db, data, options) {
       capability_report: capabilityReport
     };
   }
+  if (options?.blobStore) {
+    const lifecycle = new LifecyclePurgeRepository(db, void 0, options.blobStore);
+    for (const operationId of reerasedOperationIds) {
+      try {
+        await lifecycle.resume(operationId);
+      } catch {
+        warnings.push("A restored purge target was re-erased, but byte cleanup remains pending.");
+      }
+    }
+  }
   return {
     success: true,
     counts,
@@ -46306,7 +46694,11 @@ var RECORD_COLLECTIONS = [
   "source_identity",
   "source_import_run",
   "source_import_batch",
-  "deletion_receipt"
+  "deletion_receipt",
+  "lifecycle_purge_preview",
+  "lifecycle_purge_operation",
+  "lifecycle_purge_erasure_target",
+  "lifecycle_purge_blob_cleanup"
 ];
 var RECORD_STORE_CAPABILITIES = {
   crud: true,
@@ -46315,6 +46707,7 @@ var RECORD_STORE_CAPABILITIES = {
   boundedTextScan: true,
   sourceAddressedUpsert: true,
   deletionReceipts: true,
+  purgeJournalCompaction: true,
   typedMetadataPredicates: false,
   evidenceLocators: false,
   fullTextSearch: false,
@@ -46365,6 +46758,12 @@ var MemoryRecordStore = class {
     return (await this.applyBatch([{ op: "delete", collection, id }]))[0];
   }
   async applyBatch(mutations) {
+    return this.commitBatch(mutations, []);
+  }
+  async applyPurgeBatch(mutations, scrubJournal) {
+    return this.commitBatch(mutations, scrubJournal);
+  }
+  async commitBatch(mutations, scrubJournal) {
     if (mutations.length === 0) return [];
     const stagedCollections = /* @__PURE__ */ new Map();
     for (const [collection, records] of this.collections) {
@@ -46373,7 +46772,8 @@ var MemoryRecordStore = class {
         new Map([...records].map(([id, record]) => [id, structuredClone(record)]))
       );
     }
-    const stagedJournal = structuredClone(this.journal);
+    const scrub = new Set(scrubJournal.map((key3) => `${key3.collection}\0${key3.id}`));
+    const stagedJournal = structuredClone(this.journal).filter((entry) => !scrub.has(`${entry.collection}\0${entry.id}`));
     let stagedSeq = this.seq;
     const entries = [];
     const table = (collection) => {
@@ -46430,10 +46830,10 @@ var MemoryRecordStore = class {
 
 // src/records/idb-record-store.ts
 init_geometry_buffer();
-var DB_VERSION = 3;
+var DB_VERSION = 4;
 var JOURNAL_STORE = "journal";
 var META_STORE = "meta";
-var RECORD_SCHEMA_VERSION = 3;
+var RECORD_SCHEMA_VERSION = 4;
 function requestToPromise(request) {
   return new Promise((resolve, reject) => {
     request.onsuccess = () => resolve(request.result);
@@ -46517,6 +46917,12 @@ var IdbRecordStore = class _IdbRecordStore {
     return (await this.applyBatch([{ op: "delete", collection, id }]))[0];
   }
   async applyBatch(mutations) {
+    return this.commitBatch(mutations, []);
+  }
+  async applyPurgeBatch(mutations, scrubJournal) {
+    return this.commitBatch(mutations, scrubJournal);
+  }
+  async commitBatch(mutations, scrubJournal) {
     if (mutations.length === 0) return [];
     const normalizedMutations = mutations.map(normalizeRecordMutation);
     const collections = [...new Set(normalizedMutations.map((mutation) => mutation.collection))];
@@ -46524,6 +46930,23 @@ var IdbRecordStore = class _IdbRecordStore {
     const completed = transactionComplete(tx);
     const pendingEntries = [];
     try {
+      if (scrubJournal.length > 0) {
+        const scrub = new Set(scrubJournal.map((key3) => `${key3.collection}\0${key3.id}`));
+        await new Promise((resolve, reject) => {
+          const request = tx.objectStore(JOURNAL_STORE).openCursor();
+          request.onerror = () => reject(request.error);
+          request.onsuccess = () => {
+            const cursor = request.result;
+            if (!cursor) {
+              resolve();
+              return;
+            }
+            const entry = cursor.value;
+            if (scrub.has(`${entry.collection}\0${entry.id}`)) cursor.delete();
+            cursor.continue();
+          };
+        });
+      }
       for (const mutation of normalizedMutations) {
         const records = tx.objectStore(mutation.collection);
         const pending = mutation.op === "put" ? {
@@ -46689,6 +47112,8 @@ var CanonicalNotesRepository = class {
     await this.store.put("note", { ...note, deleted_at: nowIso(), updated_at: nowIso() });
   }
   async restore(noteId) {
+    const retained = (await this.store.list("lifecycle_purge_erasure_target")).some((target) => target.note_id === noteId);
+    if (retained) throw new Error("Terminally purged notes cannot be restored");
     const note = await this.store.get("note", noteId);
     if (!note) throw new Error(`Note not found: ${noteId}`);
     await this.store.put("note", { ...note, deleted_at: null, updated_at: nowIso() });
@@ -46922,11 +47347,12 @@ async function projectAttachments(db, store) {
   for (const att of attachments) {
     await db.query(
       `INSERT INTO attachment (
-         id, note_id, blob_id, document_type_id, mime_type, extracted_text,
+         id, note_id, blob_id, preview_blob_id, document_type_id, mime_type, extracted_text,
          filename, display_name, position, status, created_at, deleted_at
        )
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13)
        ON CONFLICT (id) DO UPDATE SET
+         preview_blob_id = EXCLUDED.preview_blob_id,
          mime_type = EXCLUDED.mime_type,
          extracted_text = EXCLUDED.extracted_text,
          filename = EXCLUDED.filename,
@@ -46938,6 +47364,7 @@ async function projectAttachments(db, store) {
         att.id,
         att.note_id,
         att.blob_id,
+        att.preview_blob_id ?? null,
         att.document_type_id,
         att.mime_type,
         att.extracted_text,
@@ -46955,7 +47382,7 @@ async function projectAttachments(db, store) {
     `UPDATE attachment_blob ab
      SET reference_count = (
        SELECT COUNT(*) FROM attachment a
-       WHERE a.blob_id = ab.id AND a.deleted_at IS NULL
+       WHERE (a.blob_id = ab.id OR a.preview_blob_id = ab.id) AND a.deleted_at IS NULL
      )`
   );
   return { blobs: blobs.length, attachments: attachments.length };
@@ -47310,6 +47737,306 @@ function createRecordBackend(store, options = {}) {
 
 // src/records/record-shard.ts
 init_geometry_buffer();
+
+// src/records/lifecycle-purge.ts
+init_geometry_buffer();
+var RECEIPT_POLICY2 = {
+  authority: "Fortemi/fortemi#1092",
+  mode: "terminal_purge",
+  receipt_contains_content: false,
+  backup_disposition: "beyond_use_then_reerase",
+  restore_reerasure: true
+};
+function zeroCounts2() {
+  return {
+    notes: 0,
+    revisions: 0,
+    links: 0,
+    tags: 0,
+    embeddings: 0,
+    attachments: 0,
+    blobs: 0,
+    graph_edges: 0,
+    provenance_edges: 0,
+    source_identities: 0
+  };
+}
+function asCounts2(value) {
+  return { ...zeroCounts2(), ...value };
+}
+async function selectedNoteIds2(store, selector) {
+  validatePurgeSelector(selector);
+  const notes = await store.list("note");
+  const requested = selector.note_ids ? new Set(selector.note_ids) : null;
+  if (selector.tenant_id === void 0 && selector.archive_id === void 0 && !selector.source) {
+    return notes.filter((note) => requested.has(note.id)).map((note) => note.id).sort();
+  }
+  const identities = await store.list("source_identity");
+  const scoped2 = new Set(identities.filter((identity) => identity.tenant_id === (selector.tenant_id ?? "default") && identity.archive_id === (selector.archive_id ?? null) && (!selector.source || identity.namespace === selector.source.namespace) && (selector.source?.external_id === void 0 || identity.external_id === selector.source.external_id)).map((identity) => identity.note_id));
+  return notes.filter((note) => scoped2.has(note.id) && (!requested || requested.has(note.id))).map((note) => note.id).sort();
+}
+function attachmentBlobIds(attachment) {
+  return [attachment.blob_id, attachment.preview_blob_id].filter((id) => Boolean(id));
+}
+async function removableBlobs(store, noteSet) {
+  const attachments = await store.list("attachment");
+  const candidates = new Set(attachments.filter((record) => noteSet.has(record.note_id)).flatMap(attachmentBlobIds));
+  for (const record of attachments) {
+    if (!noteSet.has(record.note_id)) {
+      for (const id of attachmentBlobIds(record)) candidates.delete(id);
+    }
+  }
+  return (await store.list("attachment_blob")).filter((record) => candidates.has(record.id));
+}
+async function count(store, noteIds) {
+  const counts = zeroCounts2();
+  if (noteIds.length === 0) return counts;
+  const noteSet = new Set(noteIds);
+  counts.notes = (await store.list("note")).filter((record) => noteSet.has(record.id)).length;
+  counts.revisions = (await store.list("note_revision")).filter((record) => noteSet.has(record.note_id)).length;
+  counts.links = (await store.list("link")).filter((record) => noteSet.has(record.source_note_id) || noteSet.has(record.target_note_id)).length;
+  counts.tags = (await store.list("note_tag")).filter((record) => noteSet.has(record.note_id)).length;
+  counts.attachments = (await store.list("attachment")).filter((record) => noteSet.has(record.note_id)).length;
+  counts.blobs = (await removableBlobs(store, noteSet)).length;
+  counts.source_identities = (await store.list("source_identity")).filter((record) => noteSet.has(record.note_id)).length;
+  return counts;
+}
+function receiptFromRecord(record) {
+  return {
+    contract_version: LIFECYCLE_PURGE_CONTRACT_VERSION,
+    operation_id: record.operation_id,
+    outcome: "completed",
+    counts: asCounts2(record.counts),
+    completed_at: record.completed_at,
+    policy: record.policy
+  };
+}
+async function recordStorePurgeStatus(store, operationId) {
+  assertPurgeOpaqueId(operationId, "operation_id");
+  const operation = await store.get("lifecycle_purge_operation", operationId);
+  if (!operation) return null;
+  const receipt = await store.get("deletion_receipt", operationId);
+  const pending = (await store.list("lifecycle_purge_blob_cleanup")).filter((record) => record.operation_id === operationId && record.completed_at === null).length;
+  return {
+    contract_version: LIFECYCLE_PURGE_CONTRACT_VERSION,
+    operation_id: operationId,
+    outcome: operation.state,
+    counts: asCounts2(operation.counts),
+    blob_cleanup_pending: pending,
+    search_cleanup_pending: false,
+    ...receipt ? { receipt: receiptFromRecord(receipt) } : {}
+  };
+}
+async function previewRecordStorePurge(store, selector) {
+  if (!store.applyPurgeBatch) throw new Error("RecordStore purge requires atomic journal-compacting applyPurgeBatch() support");
+  validatePurgeSelector(selector);
+  const now2 = Date.now();
+  const mutations = (await store.list("lifecycle_purge_preview")).filter((record) => record.consumed_by === null && Date.parse(record.expires_at) <= now2).map((record) => ({ op: "delete", collection: "lifecycle_purge_preview", id: record.id }));
+  const noteIds = await selectedNoteIds2(store, selector);
+  const counts = await count(store, noteIds);
+  const previewId = generateId();
+  const expiresAt = new Date(now2 + LIFECYCLE_PURGE_PREVIEW_TTL_SECONDS * 1e3).toISOString();
+  mutations.push({
+    op: "put",
+    collection: "lifecycle_purge_preview",
+    record: {
+      id: previewId,
+      selector_fingerprint: purgeSelectorHash(selector),
+      selector: structuredClone(selector),
+      selected_note_ids: noteIds,
+      counts,
+      expires_at: expiresAt,
+      consumed_by: null
+    }
+  });
+  await store.applyPurgeBatch(
+    mutations,
+    mutations.filter((mutation) => mutation.op === "delete").map((mutation) => ({ collection: mutation.collection, id: mutation.id }))
+  );
+  return {
+    contract_version: LIFECYCLE_PURGE_CONTRACT_VERSION,
+    preview_id: previewId,
+    counts,
+    expires_at: expiresAt
+  };
+}
+async function graphDeletionMutations(store, noteIds, deleteSourceJournals) {
+  const noteSet = new Set(noteIds);
+  const mutations = [];
+  for (const collection of [
+    "note_revised_current",
+    "note_original",
+    "note_revision",
+    "note_tag",
+    "collection_note",
+    "attachment",
+    "source_identity"
+  ]) {
+    for (const record of await store.list(collection)) {
+      const noteId = collection === "note_revised_current" ? record.id : "note_id" in record && typeof record.note_id === "string" ? record.note_id : null;
+      if (noteId && noteSet.has(noteId)) mutations.push({ op: "delete", collection, id: record.id });
+    }
+  }
+  for (const record of await store.list("link")) {
+    if (noteSet.has(record.source_note_id) || noteSet.has(record.target_note_id)) {
+      mutations.push({ op: "delete", collection: "link", id: record.id });
+    }
+  }
+  for (const note of await store.list("note")) {
+    if (noteSet.has(note.id)) mutations.push({ op: "delete", collection: "note", id: note.id });
+  }
+  const blobs = await removableBlobs(store, noteSet);
+  for (const blob of blobs) mutations.push({ op: "delete", collection: "attachment_blob", id: blob.id });
+  if (deleteSourceJournals) {
+    const selectedIdentities = (await store.list("source_identity")).filter((identity) => noteSet.has(identity.note_id));
+    const survivors = (await store.list("source_identity")).filter((identity) => !noteSet.has(identity.note_id));
+    const scopeKey = (record) => JSON.stringify([record.tenant_id, record.archive_id, record.namespace]);
+    const emptiedScopes = new Set(selectedIdentities.map(scopeKey).filter((scope) => !survivors.some((item) => scopeKey(item) === scope)));
+    for (const run of await store.list("source_import_run")) {
+      if (emptiedScopes.has(scopeKey(run))) mutations.push({ op: "delete", collection: "source_import_run", id: run.id });
+    }
+    for (const batch of await store.list("source_import_batch")) {
+      if (emptiedScopes.has(scopeKey(batch))) mutations.push({ op: "delete", collection: "source_import_batch", id: batch.id });
+    }
+  }
+  return { mutations, blobs };
+}
+function terminalRecords(operation, completedAt) {
+  const completed = { ...operation, state: "completed", completed_at: completedAt };
+  return {
+    operation: completed,
+    receipt: {
+      id: operation.id,
+      contract_version: LIFECYCLE_PURGE_CONTRACT_VERSION,
+      operation_id: operation.id,
+      outcome: "completed",
+      counts: operation.counts,
+      completed_at: completedAt,
+      policy: RECEIPT_POLICY2
+    }
+  };
+}
+async function beginRecordStorePurge(store, request, blobStore) {
+  if (!store.applyPurgeBatch) throw new Error("RecordStore purge requires atomic journal-compacting applyPurgeBatch() support");
+  assertPurgeOpaqueId(request.operation_id, "operation_id");
+  assertPurgeOpaqueId(request.preview_id, "preview_id");
+  const prior = await store.get("lifecycle_purge_operation", request.operation_id);
+  if (prior) {
+    if (prior.preview_id !== request.preview_id) throw new Error("Purge operation ID was already used for another preview");
+    return await recordStorePurgeStatus(store, request.operation_id);
+  }
+  const preview = await store.get("lifecycle_purge_preview", request.preview_id);
+  if (!preview) throw new Error("Lifecycle purge preview was not found");
+  if (preview.consumed_by !== null) throw new Error("Lifecycle purge preview was already consumed");
+  if (Date.parse(preview.expires_at) <= Date.now()) throw new Error("Lifecycle purge preview expired; create a new preview");
+  const selector = preview.selector;
+  validatePurgeSelector(selector);
+  if (purgeSelectorHash(selector) !== preview.selector_fingerprint) throw new Error("Lifecycle purge preview integrity check failed");
+  const noteIds = await selectedNoteIds2(store, selector);
+  const counts = await count(store, noteIds);
+  if (JSON.stringify(noteIds) !== JSON.stringify(preview.selected_note_ids) || JSON.stringify(counts) !== JSON.stringify(asCounts2(preview.counts))) {
+    throw new Error("Lifecycle purge preview is stale; create a new preview");
+  }
+  const deletion = await graphDeletionMutations(
+    store,
+    noteIds,
+    selector.source !== void 0 && selector.source.external_id === void 0
+  );
+  const now2 = (/* @__PURE__ */ new Date()).toISOString();
+  let operation = {
+    id: request.operation_id,
+    preview_id: request.preview_id,
+    selector_fingerprint: preview.selector_fingerprint,
+    state: blobStore && deletion.blobs.length > 0 ? "cleanup_pending" : "completed",
+    counts,
+    created_at: now2,
+    completed_at: null
+  };
+  const mutations = [...deletion.mutations];
+  for (const noteId of noteIds) {
+    mutations.push({
+      op: "put",
+      collection: "lifecycle_purge_erasure_target",
+      record: { id: `${request.operation_id}\0${noteId}`, operation_id: request.operation_id, note_id: noteId }
+    });
+  }
+  if (blobStore) {
+    for (const blob of deletion.blobs) {
+      mutations.push({
+        op: "put",
+        collection: "lifecycle_purge_blob_cleanup",
+        record: {
+          id: `${request.operation_id}\0${blob.id}`,
+          operation_id: request.operation_id,
+          blob_id: blob.id,
+          content_hash: blob.content_hash,
+          completed_at: null
+        }
+      });
+    }
+  }
+  if (operation.state === "completed") {
+    const terminal = terminalRecords(operation, now2);
+    operation = terminal.operation;
+    mutations.push({ op: "put", collection: "deletion_receipt", record: terminal.receipt });
+  }
+  mutations.push({ op: "put", collection: "lifecycle_purge_operation", record: operation });
+  mutations.push({
+    op: "put",
+    collection: "lifecycle_purge_preview",
+    record: { ...preview, selector: {}, selected_note_ids: [], consumed_by: request.operation_id }
+  });
+  const scrubJournal = deletion.mutations.filter((mutation) => mutation.op === "delete").map((mutation) => ({ collection: mutation.collection, id: mutation.id }));
+  scrubJournal.push({ collection: "lifecycle_purge_preview", id: request.preview_id });
+  await store.applyPurgeBatch(mutations, scrubJournal);
+  return await recordStorePurgeStatus(store, request.operation_id);
+}
+async function resumeRecordStorePurge(store, operationId, blobStore) {
+  if (!store.applyBatch) throw new Error("RecordStore purge requires atomic applyBatch() support");
+  assertPurgeOpaqueId(operationId, "operation_id");
+  const status = await recordStorePurgeStatus(store, operationId);
+  if (!status) throw new Error("Lifecycle purge operation was not found");
+  if (status.outcome === "completed") return status;
+  if (!blobStore?.delete) throw new Error("Lifecycle purge byte cleanup requires BlobStore.delete()");
+  const pending = (await store.list("lifecycle_purge_blob_cleanup")).filter((record) => record.operation_id === operationId && record.completed_at === null);
+  for (const blob of pending) {
+    await blobStore.delete(blob.content_hash);
+    await store.put("lifecycle_purge_blob_cleanup", { ...blob, completed_at: (/* @__PURE__ */ new Date()).toISOString() });
+  }
+  const operation = await store.get("lifecycle_purge_operation", operationId);
+  if (!operation) throw new Error("Lifecycle purge operation was not found");
+  const terminal = terminalRecords(operation, (/* @__PURE__ */ new Date()).toISOString());
+  await store.applyBatch([
+    { op: "put", collection: "lifecycle_purge_operation", record: terminal.operation },
+    { op: "put", collection: "deletion_receipt", record: terminal.receipt }
+  ]);
+  return await recordStorePurgeStatus(store, operationId);
+}
+async function purgeRecordStoreGraph(store, selector, operationId, blobStore) {
+  validatePurgeSelector(selector);
+  assertPurgeOpaqueId(operationId, "operation_id");
+  const existing = await store.get("lifecycle_purge_operation", operationId);
+  if (existing) {
+    if (existing.selector_fingerprint !== purgeSelectorHash(selector)) {
+      throw new Error("Purge operation key conflicts with selector");
+    }
+    let replay = await recordStorePurgeStatus(store, operationId);
+    if (replay.outcome === "cleanup_pending") replay = await resumeRecordStorePurge(store, operationId, blobStore);
+    if (!replay.receipt) throw new Error("Lifecycle purge did not produce a terminal receipt");
+    return replay.receipt;
+  }
+  const preview = await previewRecordStorePurge(store, selector);
+  let status = await beginRecordStorePurge(store, { operation_id: operationId, preview_id: preview.preview_id }, blobStore);
+  if (status.outcome === "cleanup_pending") status = await resumeRecordStorePurge(store, operationId, blobStore);
+  if (!status.receipt) throw new Error("Lifecycle purge did not produce a terminal receipt");
+  return status.receipt;
+}
+async function recordStoreErasureTargetIds(store, candidateNoteIds) {
+  const candidates = candidateNoteIds ? new Set(candidateNoteIds) : null;
+  return new Set((await store.list("lifecycle_purge_erasure_target")).filter((record) => !candidates || candidates.has(record.note_id)).map((record) => record.note_id));
+}
+
+// src/records/record-shard.ts
 var encoder8 = new TextEncoder();
 var decoder9 = new TextDecoder();
 function emptyCounts4() {
@@ -47983,6 +48710,17 @@ async function importShardToRecords(store, data, options) {
       capabilityReport
     );
   }
+  const retainedTargets = await recordStoreErasureTargetIds(
+    store,
+    parsedNotes.map((note) => note.id)
+  );
+  if (retainedTargets.size > 0) {
+    parsedNotes = parsedNotes.filter((note) => !retainedTargets.has(note.id));
+    parsedLinks = parsedLinks.filter((link2) => !retainedTargets.has(link2.from_note_id) && (link2.to_note_id === null || !retainedTargets.has(link2.to_note_id)));
+    warnings.push(
+      `${retainedTargets.size} retained lifecycle purge target(s) were re-erased before record import.`
+    );
+  }
   for (const component of manifest.components ?? []) {
     if (UNSUPPORTED_COMPONENTS.includes(component)) {
       const count2 = manifest.counts?.[component];
@@ -48671,125 +49409,8 @@ function validate3(items, maxItems, initialReason) {
   }));
 }
 
-// src/records/lifecycle-purge.ts
-init_geometry_buffer();
-function hashSelector(selector) {
-  return computeHash(new TextEncoder().encode(JSON.stringify({
-    tenant_id: selector.tenant_id ?? "default",
-    archive_id: selector.archive_id ?? null,
-    note_ids: [...selector.note_ids ?? []].sort(),
-    source: selector.source ? {
-      namespace: selector.source.namespace,
-      external_id_hash: selector.source.external_id ? computeHash(new TextEncoder().encode(selector.source.external_id)) : null
-    } : null
-  })));
-}
-function zeroCounts2() {
-  return {
-    notes: 0,
-    revisions: 0,
-    links: 0,
-    tags: 0,
-    embeddings: 0,
-    attachments: 0,
-    blobs: 0,
-    graph_edges: 0,
-    provenance_edges: 0,
-    source_identities: 0
-  };
-}
-async function selectedNoteIds2(store, selector) {
-  const notes = await store.list("note");
-  if (selector.note_ids?.length) return notes.filter((note) => selector.note_ids.includes(note.id)).map((note) => note.id);
-  if (!selector.source) throw new Error("Purge selector must target note_ids or source identity");
-  const identities = await store.list("source_identity");
-  return identities.filter((identity) => identity.tenant_id === (selector.tenant_id ?? "default") && identity.archive_id === (selector.archive_id ?? null) && identity.namespace === selector.source.namespace && (selector.source.external_id === void 0 || identity.external_id === selector.source.external_id)).map((identity) => identity.note_id);
-}
-async function count(store, noteIds) {
-  const counts = zeroCounts2();
-  if (noteIds.length === 0) return counts;
-  const noteSet = new Set(noteIds);
-  counts.notes = (await store.list("note")).filter((record) => noteSet.has(record.id)).length;
-  counts.revisions = 0;
-  counts.links = (await store.list("link")).filter((record) => noteSet.has(record.source_note_id) || noteSet.has(record.target_note_id)).length;
-  counts.tags = (await store.list("note_tag")).filter((record) => noteSet.has(record.note_id)).length;
-  counts.attachments = (await store.list("attachment")).filter((record) => noteSet.has(record.note_id)).length;
-  const purgedBlobIds = new Set((await store.list("attachment")).filter((record) => noteSet.has(record.note_id)).map((record) => record.blob_id));
-  counts.blobs = (await store.list("attachment_blob")).filter((record) => purgedBlobIds.has(record.id)).length;
-  counts.source_identities = (await store.list("source_identity")).filter((record) => noteSet.has(record.note_id)).length;
-  return counts;
-}
-async function previewRecordStorePurge(store, selector) {
-  return { selector_hash: hashSelector(selector), counts: await count(store, await selectedNoteIds2(store, selector)) };
-}
-async function purgeRecordStoreGraph(store, selector, operationKey) {
-  if (!store.applyBatch) throw new Error("RecordStore purge requires atomic applyBatch() support");
-  const prior = (await store.list("deletion_receipt")).find((receipt2) => receipt2.operation_key === operationKey);
-  if (prior) return {
-    id: prior.id,
-    operation_key: prior.operation_key,
-    tenant_id: prior.tenant_id,
-    archive_id: prior.archive_id,
-    selector_hash: prior.selector_hash,
-    outcome: "completed",
-    counts: prior.counts,
-    completed_at: prior.completed_at,
-    policy: prior.policy
-  };
-  const noteIds = await selectedNoteIds2(store, selector);
-  const noteSet = new Set(noteIds);
-  const counts = await count(store, noteIds);
-  const mutations = [];
-  for (const collection of ["note_revised_current", "note_original", "note_tag", "collection_note", "attachment", "source_identity"]) {
-    for (const record of await store.list(collection)) {
-      const noteId = collection === "note_revised_current" ? record.id : "note_id" in record && typeof record.note_id === "string" ? record.note_id : null;
-      if (noteId && noteSet.has(noteId)) {
-        mutations.push({ op: "delete", collection, id: record.id });
-      }
-    }
-  }
-  for (const record of await store.list("link")) {
-    if (noteSet.has(record.source_note_id) || noteSet.has(record.target_note_id)) mutations.push({ op: "delete", collection: "link", id: record.id });
-  }
-  for (const record of await store.list("note")) {
-    if (noteSet.has(record.id)) mutations.push({ op: "delete", collection: "note", id: record.id });
-  }
-  const liveBlobIds = new Set((await store.list("attachment")).filter((record) => !noteSet.has(record.note_id)).map((record) => record.blob_id));
-  for (const record of await store.list("attachment_blob")) {
-    if (!liveBlobIds.has(record.id)) mutations.push({ op: "delete", collection: "attachment_blob", id: record.id });
-  }
-  const receipt = {
-    id: generateId(),
-    operation_key: operationKey,
-    tenant_id: selector.tenant_id ?? "default",
-    archive_id: selector.archive_id ?? null,
-    selector_hash: hashSelector(selector),
-    outcome: "completed",
-    counts,
-    completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-    policy: {
-      authority: "fortemi#1092",
-      mode: "terminal-purge",
-      receipt_contains_content: false
-    }
-  };
-  mutations.push({ op: "put", collection: "deletion_receipt", record: receipt });
-  await store.applyBatch(mutations);
-  return {
-    id: receipt.id,
-    operation_key: receipt.operation_key,
-    tenant_id: receipt.tenant_id,
-    archive_id: receipt.archive_id,
-    selector_hash: receipt.selector_hash,
-    outcome: "completed",
-    counts,
-    completed_at: receipt.completed_at,
-    policy: receipt.policy
-  };
-}
-
 // src/index.ts
-var VERSION = "2026.9.6";
+var VERSION = "2026.9.7";
 /*! Bundled license information:
 
 ieee754/index.js:
@@ -48804,6 +49425,6 @@ buffer/index.js:
    *)
 */
 
-export { AIWG_SCAN_REQUIRED_FIELDS, AllowlistTrustStore, ArchiveManager, AttachmentsRepository, BridgeInferenceProvider, CORE_V1_COMPONENTS, CURRENT_MIGRATION_HEAD, CURRENT_SHARD_VERSION, CanonicalAttachmentsRepository, CanonicalNotesRepository, CapabilityManager, CaptureKnowledgeInputSchema, CollectionsRepository, CommunitiesRepository, DATASET_EXECUTION_CAPABILITY_IDS, DATASET_EXECUTION_CONTRACT, DATASET_EXECUTION_SCHEMA_VERSION, DATASET_INGEST_CONTRACT, DATASET_INGEST_SCHEMA_VERSION, DATASET_LINEAGE_CONTRACT, DATASET_LINEAGE_SCHEMA_VERSION, DATASET_MATERIALIZATION_CONTRACT, DATASET_MATERIALIZATION_KINDS, DATASET_MATERIALIZATION_SCHEMA_VERSION, DB_SNAPSHOT_SCHEMA_VERSION, DEFAULT_LARGE_DOCUMENT_CHARS, DEFAULT_LARGE_DOCUMENT_CHUNKS, DatasetIngestError, DatasetIngestExecutor, DatasetLineageLedger, DatasetMaterializationError, DbSnapshotVersionError, EMBED_REQUEST_KIND, EMBED_RESPONSE_KIND, EmbeddingSetsRepository, FORTEMI_BROWSER_LOCAL_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_COMPATIBILITY_PATH, FORTEMI_COMPATIBILITY_STATES, FORTEMI_PORTABLE_SHARD_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES, FORTEMI_SERVER_COMPATIBILITY_REVISION, FORTEMI_STATIC_CACHE_DATASET_EXECUTION_DESCRIPTOR, FallbackRouter, FortemiToolManifest, GetNoteInputSchema, GraphRepository, IdbRecordStore, JOB_CAPABILITIES, JOB_PRIORITIES, JobQueueWorker, LINEAGE_ENTITY_KINDS, LINEAGE_RELATIONSHIP_KINDS, LOCAL_ENDPOINTS, LifecyclePurgeRepository, LineageValidationError, LinksRepository, ListNotesInputSchema, ManageArchiveInputSchema, ManageAttachmentsInputSchema, ManageCapabilitiesInputSchema, ManageCollectionsInputSchema, ManageLinksInputSchema, ManageNoteInputSchema, ManageTagsInputSchema, MemoryBlobStore, MemoryDatasetIngestStore, MemoryRecordStore, MigrationRunner, NotesRepository, OpenAICompatibleProvider, PGliteStorageBackend, PGliteStorageBackendFactory, PGliteWorkerClient, PGliteWorkerStorageBackend, PGliteWorkerStorageBackendFactory, ProvenanceRepository, ProviderRegistry, RECORD_COLLECTIONS, RECORD_SCHEMA_VERSION, RECORD_STORE_CAPABILITIES, REGISTERED_METADATA_PATHS, RemoteBackendError, SHARD_FORMAT, SIGNATURE_ENTRY, SIGNING_ENVELOPE_VERSION, SOURCE_UPSERT_CONTRACT_VERSION, SOURCE_UPSERT_MAX_ITEMS, SUPPORTED_PGLITE_VERSION, SearchInputSchema, SearchRepository, SkosRepository, SourceUpsertRepository, TagsRepository, TemplatesRepository, TransactionProxy, TypedEventBus, VERSION, aiRevisionHandler, aiwgFortemiIndexFromKnowledgeShard, aiwgFortemiIndexToCommunityGraph, aiwgFortemiIndexToKnowledgeShard, aiwgFortemiIndexToKnowledgeShardWithReport, allMigrations, appendPluginScript, assertAiwgFortemiChunkManifest, assertAiwgFortemiChunkPart, assertAiwgFortemiIndexExport, assertAiwgStaticEmbeddingSet, assertShardComponentRecord, bindSearchEvidence, buildAiwgChunkedIndex, buildAiwgStaticEmbeddingSet, buildMetadataPredicateConditions, buildNoteConditions, buildPluginCsp, captureKnowledge, chunkText, classifyError, classifyModel, clearPrefetchedShard, collectionFromShard, collectionToShard, compareDatasetIncrementalParity, computeBlobHash, computeHash, computeLineageDigest, computeSri, conceptTaggingHandler, configureInferenceRuntime, cosineSimilarity, createAiwgFetchChunkLoader, createAiwgFetchDetailLoader, createAiwgIndexController, createAiwgReviewDecisionExport, createBlobStore, createBridgeInferenceProviders, createCosineSemanticProvider, createCspReportHandler, createFortemi, createLazyBlobStore, createLegacyProvider, createLocalProviderProfile, createPGliteBackend, createPGliteInstance, createRecordBackend, createRecordStore, createRemoteBackend, createRoutes, createSearchEvidenceSet, createShardBackend, createShardCapabilityReport, createWorkerEmbedFunction, datasetDestinationScopeKey, defaultStorageBackendFactory, defineInferenceProvider, defineInferenceRuntime, defineLegacyInferenceProvider, defineOpenAICompatibleProvider, deriveDatasetIngestIdempotencyKey, detectCommunities, detectGpuCapabilities, detectInferenceCapabilities, digestDatasetMaterializationValue, discoverLocalProviders, dropAttachmentProjection, dropNoteProjection, dumpDbSnapshot, embeddingConfigToShard, embeddingFromShard, embeddingGenerationHandler, embeddingSetFromShard, embeddingSetMemberToShard, embeddingSetToShard, embeddingToShard, enqueueFullWorkflow, enqueueJob, enqueueNoteCreationJobs, estimateModelFit, estimateVramMB, estimateVramTier, executeDatasetMaterialization, executeDatasetRetrieval, exportFullV1Snapshot, exportShard, exportShardFromRecords, exportShardFromRecordsWithReport, exportShardWithReport, fetchAndValidateFortemiCompatibility, fetchPluginScript, filterAiwgRecordsByPrivacy, findAiwgStaticDuplicatePairs, formatFortemiCompatibilitySummary, fortemiCompatibilityUrl, fortemiManifest, fromPrefetched, generateId, getAiwgFortemiFacets, getAiwgFortemiIndexExportSchema, getConfiguredInferenceProviderId, getEmbedFunction, getEmbeddingTaskSelectionOptions, getFortemiBridge, getFortemiSecretStore, getJobQueueStatus, getKnowledgeShardContractReceipt, getKnowledgeShardProfileRegistry, getKnowledgeShardSchema, getLlmFunction, getNote, getPrefetchedSha256, getProviderRouteRequirementIssue, handleEmbedRequests, hasFortemiSecureSecrets, importFullV1Snapshot, importShard, importShardToRecords, inferInferenceTaskCapability, inferLocalEmbeddingDimensions, isPluginScriptAllowed, isShardPrefetched, isShardSigningSupported, linkFromShard, linkToShard, linkingHandler, listNotes, manageArchive, manageAttachments, manageCapabilities, manageCollections, manageLinks, manageNote, manageTags, matchRoute, mergeInferenceRuntimeConfigs, mergeSearchEvidenceSets, migrateLegacyBlobStore, negotiateDatasetExecutionCapabilities, negotiateDatasetExecutionCapabilitiesFromWire, negotiateDatasetMaterializationProfile, noteFromShard, noteSkosTagToShard, noteToShard, openShard, packTarGz, parseCspReport, parseSearchEvidenceLocator, parseSearchEvidenceSet, prefetchShard, previewRecordStorePurge, profileSupportError, projectAttachments, projectNotes, projectRecords, provenanceEdgeToShard, providerSatisfiesRouteRequirements, purgeRecordStoreGraph, queryAiwgFortemiIndex, queryAiwgHybridIndex, queryAiwgSemanticIndex, registerLlmCapability, registerSemanticCapability, registerSemanticCapabilityWorker, registerServiceWorker, resolveSearchEvidence, restoreDbSnapshot, searchTool, selectBackend, selectEmbeddingTask, selectLlmModel, setEmbedFunction, setEmbeddingTaskSelectionOptions, setLlmFunction, sha256Hex, sidecarBlobDigests, signShard, skosConceptToShard, skosRelationToShard, skosSchemeToShard, suggestTags, tagsToShard, templateToShard, titleGenerationHandler, unpackTarGz, unregisterLlmCapability, unregisterSemanticCapability, upsertRecordStoreRequest, upsertRecordStoreSources, urlLinkToShard, validateAiwgFortemiChunkManifest, validateAiwgFortemiChunkPart, validateAiwgFortemiIndexExport, validateAiwgFortemiIndexExportSchema, validateAiwgFortemiProjectedRecordSchema, validateAiwgStaticEmbeddingSet, validateChecksums, validateCoreV1ShardArchive, validateDatasetBenchmarkEvidence, validateDatasetExecutionDescriptor, validateDatasetExecutionRequest, validateFortemiCompatibilityResponse, validateFullV1ShardArchive, validateProviderRoute, validateRecordV1ShardArchive, validateShardArchive, validateShardComponentRecord, validateShardManifest, verifyDbSnapshotMeta, verifyShardSignature, verifySri };
+export { AIWG_SCAN_REQUIRED_FIELDS, AllowlistTrustStore, ArchiveManager, AttachmentsRepository, BridgeInferenceProvider, CORE_V1_COMPONENTS, CURRENT_MIGRATION_HEAD, CURRENT_SHARD_VERSION, CanonicalAttachmentsRepository, CanonicalNotesRepository, CapabilityManager, CaptureKnowledgeInputSchema, CollectionsRepository, CommunitiesRepository, DATASET_EXECUTION_CAPABILITY_IDS, DATASET_EXECUTION_CONTRACT, DATASET_EXECUTION_SCHEMA_VERSION, DATASET_INGEST_CONTRACT, DATASET_INGEST_SCHEMA_VERSION, DATASET_LINEAGE_CONTRACT, DATASET_LINEAGE_SCHEMA_VERSION, DATASET_MATERIALIZATION_CONTRACT, DATASET_MATERIALIZATION_KINDS, DATASET_MATERIALIZATION_SCHEMA_VERSION, DB_SNAPSHOT_SCHEMA_VERSION, DEFAULT_LARGE_DOCUMENT_CHARS, DEFAULT_LARGE_DOCUMENT_CHUNKS, DatasetIngestError, DatasetIngestExecutor, DatasetLineageLedger, DatasetMaterializationError, DbSnapshotVersionError, EMBED_REQUEST_KIND, EMBED_RESPONSE_KIND, EmbeddingSetsRepository, FORTEMI_BROWSER_LOCAL_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_COMPATIBILITY_PATH, FORTEMI_COMPATIBILITY_STATES, FORTEMI_PORTABLE_SHARD_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES, FORTEMI_SERVER_COMPATIBILITY_REVISION, FORTEMI_STATIC_CACHE_DATASET_EXECUTION_DESCRIPTOR, FallbackRouter, FortemiToolManifest, GetNoteInputSchema, GraphRepository, IdbRecordStore, JOB_CAPABILITIES, JOB_PRIORITIES, JobQueueWorker, LIFECYCLE_PURGE_CONTRACT_VERSION, LIFECYCLE_PURGE_MAX_NOTE_IDS, LIFECYCLE_PURGE_PREVIEW_TTL_SECONDS, LINEAGE_ENTITY_KINDS, LINEAGE_RELATIONSHIP_KINDS, LOCAL_ENDPOINTS, LifecyclePurgeRepository, LineageValidationError, LinksRepository, ListNotesInputSchema, ManageArchiveInputSchema, ManageAttachmentsInputSchema, ManageCapabilitiesInputSchema, ManageCollectionsInputSchema, ManageLinksInputSchema, ManageNoteInputSchema, ManageTagsInputSchema, MemoryBlobStore, MemoryDatasetIngestStore, MemoryRecordStore, MigrationRunner, NotesRepository, OpenAICompatibleProvider, PGliteStorageBackend, PGliteStorageBackendFactory, PGliteWorkerClient, PGliteWorkerStorageBackend, PGliteWorkerStorageBackendFactory, ProvenanceRepository, ProviderRegistry, RECORD_COLLECTIONS, RECORD_SCHEMA_VERSION, RECORD_STORE_CAPABILITIES, REGISTERED_METADATA_PATHS, RemoteBackendError, SHARD_FORMAT, SIGNATURE_ENTRY, SIGNING_ENVELOPE_VERSION, SOURCE_UPSERT_CONTRACT_VERSION, SOURCE_UPSERT_MAX_ITEMS, SUPPORTED_PGLITE_VERSION, SearchInputSchema, SearchRepository, SkosRepository, SourceUpsertRepository, TagsRepository, TemplatesRepository, TransactionProxy, TypedEventBus, VERSION, aiRevisionHandler, aiwgFortemiIndexFromKnowledgeShard, aiwgFortemiIndexToCommunityGraph, aiwgFortemiIndexToKnowledgeShard, aiwgFortemiIndexToKnowledgeShardWithReport, allMigrations, appendPluginScript, assertAiwgFortemiChunkManifest, assertAiwgFortemiChunkPart, assertAiwgFortemiIndexExport, assertAiwgStaticEmbeddingSet, assertShardComponentRecord, beginRecordStorePurge, bindSearchEvidence, buildAiwgChunkedIndex, buildAiwgStaticEmbeddingSet, buildMetadataPredicateConditions, buildNoteConditions, buildPluginCsp, captureKnowledge, chunkText, classifyError, classifyModel, clearPrefetchedShard, collectionFromShard, collectionToShard, compareDatasetIncrementalParity, computeBlobHash, computeHash, computeLineageDigest, computeSri, conceptTaggingHandler, configureInferenceRuntime, cosineSimilarity, createAiwgFetchChunkLoader, createAiwgFetchDetailLoader, createAiwgIndexController, createAiwgReviewDecisionExport, createBlobStore, createBridgeInferenceProviders, createCosineSemanticProvider, createCspReportHandler, createFortemi, createLazyBlobStore, createLegacyProvider, createLocalProviderProfile, createPGliteBackend, createPGliteInstance, createRecordBackend, createRecordStore, createRemoteBackend, createRoutes, createSearchEvidenceSet, createShardBackend, createShardCapabilityReport, createWorkerEmbedFunction, datasetDestinationScopeKey, defaultStorageBackendFactory, defineInferenceProvider, defineInferenceRuntime, defineLegacyInferenceProvider, defineOpenAICompatibleProvider, deriveDatasetIngestIdempotencyKey, detectCommunities, detectGpuCapabilities, detectInferenceCapabilities, digestDatasetMaterializationValue, discoverLocalProviders, dropAttachmentProjection, dropNoteProjection, dumpDbSnapshot, embeddingConfigToShard, embeddingFromShard, embeddingGenerationHandler, embeddingSetFromShard, embeddingSetMemberToShard, embeddingSetToShard, embeddingToShard, enqueueFullWorkflow, enqueueJob, enqueueNoteCreationJobs, estimateModelFit, estimateVramMB, estimateVramTier, executeDatasetMaterialization, executeDatasetRetrieval, exportFullV1Snapshot, exportShard, exportShardFromRecords, exportShardFromRecordsWithReport, exportShardWithReport, fetchAndValidateFortemiCompatibility, fetchPluginScript, filterAiwgRecordsByPrivacy, findAiwgStaticDuplicatePairs, formatFortemiCompatibilitySummary, fortemiCompatibilityUrl, fortemiManifest, fromPrefetched, generateId, getAiwgFortemiFacets, getAiwgFortemiIndexExportSchema, getConfiguredInferenceProviderId, getEmbedFunction, getEmbeddingTaskSelectionOptions, getFortemiBridge, getFortemiSecretStore, getJobQueueStatus, getKnowledgeShardContractReceipt, getKnowledgeShardProfileRegistry, getKnowledgeShardSchema, getLlmFunction, getNote, getPrefetchedSha256, getProviderRouteRequirementIssue, handleEmbedRequests, hasFortemiSecureSecrets, importFullV1Snapshot, importShard, importShardToRecords, inferInferenceTaskCapability, inferLocalEmbeddingDimensions, isPluginScriptAllowed, isShardPrefetched, isShardSigningSupported, linkFromShard, linkToShard, linkingHandler, listNotes, manageArchive, manageAttachments, manageCapabilities, manageCollections, manageLinks, manageNote, manageTags, matchRoute, mergeInferenceRuntimeConfigs, mergeSearchEvidenceSets, migrateLegacyBlobStore, negotiateDatasetExecutionCapabilities, negotiateDatasetExecutionCapabilitiesFromWire, negotiateDatasetMaterializationProfile, noteFromShard, noteSkosTagToShard, noteToShard, openShard, packTarGz, parseCspReport, parseSearchEvidenceLocator, parseSearchEvidenceSet, prefetchShard, previewRecordStorePurge, profileSupportError, projectAttachments, projectNotes, projectRecords, provenanceEdgeToShard, providerSatisfiesRouteRequirements, purgeRecordStoreGraph, queryAiwgFortemiIndex, queryAiwgHybridIndex, queryAiwgSemanticIndex, recordStoreErasureTargetIds, recordStorePurgeStatus, registerLlmCapability, registerSemanticCapability, registerSemanticCapabilityWorker, registerServiceWorker, resolveSearchEvidence, restoreDbSnapshot, resumeRecordStorePurge, searchTool, selectBackend, selectEmbeddingTask, selectLlmModel, setEmbedFunction, setEmbeddingTaskSelectionOptions, setLlmFunction, sha256Hex, sidecarBlobDigests, signShard, skosConceptToShard, skosRelationToShard, skosSchemeToShard, suggestTags, tagsToShard, templateToShard, titleGenerationHandler, unpackTarGz, unregisterLlmCapability, unregisterSemanticCapability, upsertRecordStoreRequest, upsertRecordStoreSources, urlLinkToShard, validateAiwgFortemiChunkManifest, validateAiwgFortemiChunkPart, validateAiwgFortemiIndexExport, validateAiwgFortemiIndexExportSchema, validateAiwgFortemiProjectedRecordSchema, validateAiwgStaticEmbeddingSet, validateChecksums, validateCoreV1ShardArchive, validateDatasetBenchmarkEvidence, validateDatasetExecutionDescriptor, validateDatasetExecutionRequest, validateFortemiCompatibilityResponse, validateFullV1ShardArchive, validateProviderRoute, validateRecordV1ShardArchive, validateShardArchive, validateShardComponentRecord, validateShardManifest, verifyDbSnapshotMeta, verifyShardSignature, verifySri };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map