@gscdump/engine 0.6.1 → 0.6.3

package/dist/adapters/r2-manifest.d.mts

@@ -1,149 +1,4 @@
-import { TableName, TableName as TableName$1 } from "gscdump/contracts";
-import { SearchType } from "gscdump/query";
-/**
- * Compaction tier of a manifest entry. Determines which compactor stage may
- * pick it up as input:
- * - `raw`: per-day file produced by `writeDay`. Eligible for raw→d7 merge at 7d.
- * - `d7`: weekly compaction output. Eligible for d7→d30 merge at 30d.
- * - `d30`: monthly compaction output (matches the legacy `monthly/` partition
- *   shape — pre-tier entries are read as `d30`). Eligible for d30→d90 at 90d.
- * - `d90`: quarterly cold-tier output. Terminal; never recompacted.
- *
- * Without an explicit tier, entries written before this field landed default
- * to `raw` for `daily/` partitions and `d30` for `monthly/` partitions, so
- * the tiered compactor picks the right inputs without a backfill rewrite.
- */
-type CompactionTier = 'raw' | 'd7' | 'd30' | 'd90';
-interface ManifestEntry {
-  userId: string;
-  siteId?: string;
-  table: TableName;
-  partition: string;
-  objectKey: string;
-  rowCount: number;
-  bytes: number;
-  createdAt: number;
-  retiredAt?: number;
-  /** Table schema version at write time. Omitted on pre-#27 entries — treat as 1. */
-  schemaVersion?: number;
-  /**
-   * Compaction tier. Omitted on entries written before tiered compaction —
-   * treat as `raw` for `daily/` partitions and `d30` for `monthly/` partitions
-   * (see {@link inferLegacyTier}).
-   */
-  tier?: CompactionTier;
-  /**
-   * GSC search-type this entry covers (web | discover | news | googleNews |
-   * image | video). Omitted on entries written before per-type partitioning
-   * landed — treat as `web` (see {@link inferSearchType}). Compaction merges
-   * only entries with the same searchType.
-   */
-  searchType?: SearchType;
-}
-interface ListLiveFilter {
-  userId: string;
-  siteId?: string;
-  table?: TableName;
-  partitions?: string[];
-  /**
-   * Narrow to a single compaction tier. Tier-aware compaction stages set this
-   * so the store doesn't have to return (and the caller doesn't have to scan)
-   * the entire manifest just to compact the raw cohort. Legacy entries without
-   * an explicit `tier` field match on {@link inferLegacyTier}.
-   */
-  tier?: CompactionTier;
-}
-interface WatermarkScope {
-  userId: string;
-  siteId?: string;
-  table: TableName;
-}
-interface Watermark extends WatermarkScope {
-  newestDateSynced: string;
-  oldestDateSynced: string;
-  lastSyncAt: number;
-}
-interface WatermarkFilter {
-  userId: string;
-  siteId?: string;
-  table?: TableName;
-}
-type SyncStateKind = 'pending' | 'inflight' | 'done' | 'failed';
-interface SyncStateScope {
-  userId: string;
-  siteId?: string;
-  table: TableName;
-  date: string;
-  /**
-   * GSC search-type this sync state covers. Omitted = `web` (the legacy
-   * default; matches pre-#5 sync states stored before per-type sync landed).
-   * Lookups must compare via {@link inferSearchType} so a missing field
-   * matches an explicit `'web'` and vice versa.
-   */
-  searchType?: SearchType;
-}
-interface SyncState extends SyncStateScope {
-  state: SyncStateKind;
-  updatedAt: number;
-  attempts: number;
-  error?: string;
-}
-interface SyncStateFilter {
-  userId: string;
-  siteId?: string;
-  table?: TableName;
-  state?: SyncStateKind;
-  searchType?: SearchType;
-}
-interface SyncStateDetail {
-  at?: number;
-  error?: string;
-}
-interface LockScope {
-  userId: string;
-  siteId?: string;
-  table: TableName;
-  partition: string;
-}
-interface PurgeFilter {
-  userId: string;
-  siteId?: string;
-}
-interface ManifestPurgeResult {
-  entriesRemoved: number;
-  watermarksRemoved: number;
-  syncStatesRemoved: number;
-}
-interface ManifestStore {
-  listLive: (filter: ListLiveFilter) => Promise<ManifestEntry[]>;
-  listAll: (filter: ListLiveFilter) => Promise<ManifestEntry[]>;
-  registerVersion: (entry: ManifestEntry, superseding?: ManifestEntry[]) => Promise<void>;
-  registerVersions: (entries: ManifestEntry[], superseding?: ManifestEntry[]) => Promise<void>;
-  listRetired: (olderThan: number) => Promise<ManifestEntry[]>;
-  delete: (entries: ManifestEntry[]) => Promise<void>;
-  getWatermarks: (filter: WatermarkFilter) => Promise<Watermark[]>;
-  bumpWatermark: (scope: WatermarkScope, date: string, at?: number) => Promise<void>;
-  getSyncStates: (filter: SyncStateFilter) => Promise<SyncState[]>;
-  setSyncState: (scope: SyncStateScope, state: SyncStateKind, detail?: SyncStateDetail) => Promise<void>;
-  /**
-   * Serialize concurrent writers against the same scope. Held across the
-   * write+register window so GC (orphan sweep) won't delete bytes that are
-   * midway between `dataSource.write` and `manifestStore.registerVersion`.
-   * Scope = tenant × table × partition.
-   */
-  withLock: <T>(scope: LockScope, fn: () => Promise<T>) => Promise<T>;
-  /**
-   * GDPR-grade tenant purge. Removes every manifest entry, watermark, and
-   * sync-state record matching the filter. Does NOT touch the underlying
-   * data-source bytes; callers (typically {@link StorageEngine.purgeTenant})
-   * must sweep the tenant prefix separately before invoking this so that
-   * mid-flight failures can't leave orphan parquet with no manifest record.
-   *
-   * On stores with CAS-backed sharding (R2 manifest) this may issue one
-   * mutation per shard. On read-only stores (HTTP) this throws.
-   */
-  purgeTenant: (filter: PurgeFilter) => Promise<ManifestPurgeResult>;
-}
+import { N as TableName, m as ManifestStore } from "../_chunks/storage.mjs";
 interface R2ObjectMetadata {
   etag: string;
 }
@@ -194,17 +49,17 @@ interface R2ManifestBucketLike {
 type R2ManifestEvent = {
   kind: 'cas-attempt';
   siteId: string;
-  table: TableName$1;
+  table: TableName;
   attempt: number;
 } | {
   kind: 'cas-rejected';
   siteId: string;
-  table: TableName$1;
+  table: TableName;
   attempt: number;
 } | {
   kind: 'cas-committed';
   siteId: string;
-  table: TableName$1;
+  table: TableName;
   attempts: number;
 };
 interface CreateR2ManifestStoreOptions {

package/dist/adapters/r2-manifest.mjs

@@ -1,11 +1,4 @@
-function inferSearchType(entry) {
-	return entry.searchType ?? "web";
-}
-function inferLegacyTier(entry) {
-	if (entry.tier !== void 0) return entry.tier;
-	if (entry.partition.startsWith("daily/")) return "raw";
-	if (entry.partition.startsWith("monthly/")) return "d30";
-}
+import { i as inferSearchType, r as inferLegacyTier } from "../_chunks/storage.mjs";
 const SHARD_RE = /^u_[^/]+\/manifest\/(?<siteId>[^/]+)\/(?<table>[^/]+)\/HEAD$/;
 function defaultSnapshotId() {
 	return `${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;

package/dist/adapters/r2.d.mts

@@ -1,50 +1,4 @@
-interface DataSource {
-  read: (key: string, range?: {
-    offset: number;
-    length: number;
-  }, signal?: AbortSignal) => Promise<Uint8Array>;
-  write: (key: string, bytes: Uint8Array) => Promise<void>;
-  delete: (keys: string[]) => Promise<void>;
-  /**
-   * One-shot listing under a prefix. Implementations may cap the number of
-   * returned keys (typically 10k) — callers iterating full tenant space
-   * should prefer `streamList` when available or narrow the prefix.
-   */
-  list: (prefix: string) => Promise<string[]>;
-  /**
-   * Per-key URI probe. Returns a URI string DuckDB's `httpfs` (or an
-   * equivalent engine that fetches its own I/O) can read directly, or
-   * `undefined` if the key isn't URI-resolvable on this backend and the
-   * caller must fall back to `read(key)` for the bytes.
-   *
-   * Contracts:
-   * - When defined, the returned URI MUST yield byte-identical content to
-   *   `read(key)`. Callers rely on this for correctness.
-   * - Backends with a native URI for every key (filesystem: absolute path,
-   *   R2 via `httpfs`: signed URL) may always return a string.
-   * - Backends without a native URI shape (in-memory) omit the method or
-   *   return `undefined` per call.
-   * - Mixed-per-query is allowed: some keys in one query may return a URI,
-   *   others may not; the executor branches per key.
-   */
-  uri?: (key: string) => string | undefined;
-  /**
-   * Optional — probe the byte size of a key without reading it. Used by
-   * the engine to fill in `WriteResult.bytes` when a codec reports 0 or
-   * unknown but the file is non-trivial.
-   */
-  head?: (key: string) => Promise<{
-    bytes: number;
-  } | undefined>;
-  /**
-   * Optional streaming variant of `list`. Implementations that page
-   * backing-store results (R2, S3) should implement this and yield keys
-   * lazily. `list` may return up to an adapter-defined cap (typically
-   * 10k keys); callers iterating full tenant space must prefer
-   * `streamList` when available, or chunk by narrower prefixes.
-   */
-  streamList?: (prefix: string) => AsyncIterable<string>;
-}
+import { a as DataSource } from "../_chunks/storage.mjs";
 interface R2GetOptions {
   range?: {
     offset: number;

package/dist/contracts.d.mts

@@ -1,436 +1,2 @@
-import { Row, Row as Row$1, TableName, TableName as TableName$1, TenantCtx, TenantCtx as TenantCtx$1 } from "gscdump/contracts";
-import { BuilderState, SearchType, SearchType as SearchType$1 } from "gscdump/query";
-/**
- * Per-tier age threshold in days. Default ladder collapses on these gates:
- * - raw → d7 once a daily file is older than `raw` days (default 7).
- * - d7 → d30 once the entire weekly bucket sits behind `d7` days (default 30).
- * - d30 → d90 once the entire monthly bucket sits behind `d30` days (default 90).
- */
-interface CompactionThresholds {
-  raw?: number;
-  d7?: number;
-  d30?: number;
-}
-type ComparisonFilter = 'new' | 'lost' | 'improving' | 'declining';
-interface WriteCtx extends TenantCtx$1 {
-  table: TableName$1;
-  date?: string;
-  now?: () => number;
-  /**
-   * GSC search-type partition this write belongs to. Defaults to `'web'`.
-   * Non-web values (`discover`, `news`, `googleNews`, `image`, `video`)
-   * cause the writer to insert the type into the object key path so files
-   * for different search types coexist without colliding.
-   */
-  searchType?: SearchType$1;
-}
-interface QueryCtx extends TenantCtx$1 {
-  table?: TableName$1;
-  signal?: AbortSignal;
-}
-interface GcCtx {
-  now?: () => number;
-  userId?: string;
-  siteId?: string;
-}
-/**
- * Compaction tier of a manifest entry. Determines which compactor stage may
- * pick it up as input:
- * - `raw`: per-day file produced by `writeDay`. Eligible for raw→d7 merge at 7d.
- * - `d7`: weekly compaction output. Eligible for d7→d30 merge at 30d.
- * - `d30`: monthly compaction output (matches the legacy `monthly/` partition
- *   shape — pre-tier entries are read as `d30`). Eligible for d30→d90 at 90d.
- * - `d90`: quarterly cold-tier output. Terminal; never recompacted.
- *
- * Without an explicit tier, entries written before this field landed default
- * to `raw` for `daily/` partitions and `d30` for `monthly/` partitions, so
- * the tiered compactor picks the right inputs without a backfill rewrite.
- */
-type CompactionTier = 'raw' | 'd7' | 'd30' | 'd90';
-interface ManifestEntry {
-  userId: string;
-  siteId?: string;
-  table: TableName$1;
-  partition: string;
-  objectKey: string;
-  rowCount: number;
-  bytes: number;
-  createdAt: number;
-  retiredAt?: number;
-  /** Table schema version at write time. Omitted on pre-#27 entries — treat as 1. */
-  schemaVersion?: number;
-  /**
-   * Compaction tier. Omitted on entries written before tiered compaction —
-   * treat as `raw` for `daily/` partitions and `d30` for `monthly/` partitions
-   * (see {@link inferLegacyTier}).
-   */
-  tier?: CompactionTier;
-  /**
-   * GSC search-type this entry covers (web | discover | news | googleNews |
-   * image | video). Omitted on entries written before per-type partitioning
-   * landed — treat as `web` (see {@link inferSearchType}). Compaction merges
-   * only entries with the same searchType.
-   */
-  searchType?: SearchType$1;
-}
-interface ListLiveFilter {
-  userId: string;
-  siteId?: string;
-  table?: TableName$1;
-  partitions?: string[];
-  /**
-   * Narrow to a single compaction tier. Tier-aware compaction stages set this
-   * so the store doesn't have to return (and the caller doesn't have to scan)
-   * the entire manifest just to compact the raw cohort. Legacy entries without
-   * an explicit `tier` field match on {@link inferLegacyTier}.
-   */
-  tier?: CompactionTier;
-}
-interface DataSource {
-  read: (key: string, range?: {
-    offset: number;
-    length: number;
-  }, signal?: AbortSignal) => Promise<Uint8Array>;
-  write: (key: string, bytes: Uint8Array) => Promise<void>;
-  delete: (keys: string[]) => Promise<void>;
-  /**
-   * One-shot listing under a prefix. Implementations may cap the number of
-   * returned keys (typically 10k) — callers iterating full tenant space
-   * should prefer `streamList` when available or narrow the prefix.
-   */
-  list: (prefix: string) => Promise<string[]>;
-  /**
-   * Per-key URI probe. Returns a URI string DuckDB's `httpfs` (or an
-   * equivalent engine that fetches its own I/O) can read directly, or
-   * `undefined` if the key isn't URI-resolvable on this backend and the
-   * caller must fall back to `read(key)` for the bytes.
-   *
-   * Contracts:
-   * - When defined, the returned URI MUST yield byte-identical content to
-   *   `read(key)`. Callers rely on this for correctness.
-   * - Backends with a native URI for every key (filesystem: absolute path,
-   *   R2 via `httpfs`: signed URL) may always return a string.
-   * - Backends without a native URI shape (in-memory) omit the method or
-   *   return `undefined` per call.
-   * - Mixed-per-query is allowed: some keys in one query may return a URI,
-   *   others may not; the executor branches per key.
-   */
-  uri?: (key: string) => string | undefined;
-  /**
-   * Optional — probe the byte size of a key without reading it. Used by
-   * the engine to fill in `WriteResult.bytes` when a codec reports 0 or
-   * unknown but the file is non-trivial.
-   */
-  head?: (key: string) => Promise<{
-    bytes: number;
-  } | undefined>;
-  /**
-   * Optional streaming variant of `list`. Implementations that page
-   * backing-store results (R2, S3) should implement this and yield keys
-   * lazily. `list` may return up to an adapter-defined cap (typically
-   * 10k keys); callers iterating full tenant space must prefer
-   * `streamList` when available, or chunk by narrower prefixes.
-   */
-  streamList?: (prefix: string) => AsyncIterable<string>;
-}
-interface WatermarkScope {
-  userId: string;
-  siteId?: string;
-  table: TableName$1;
-}
-interface Watermark extends WatermarkScope {
-  newestDateSynced: string;
-  oldestDateSynced: string;
-  lastSyncAt: number;
-}
-interface WatermarkFilter {
-  userId: string;
-  siteId?: string;
-  table?: TableName$1;
-}
-type SyncStateKind = 'pending' | 'inflight' | 'done' | 'failed';
-interface SyncStateScope {
-  userId: string;
-  siteId?: string;
-  table: TableName$1;
-  date: string;
-  /**
-   * GSC search-type this sync state covers. Omitted = `web` (the legacy
-   * default; matches pre-#5 sync states stored before per-type sync landed).
-   * Lookups must compare via {@link inferSearchType} so a missing field
-   * matches an explicit `'web'` and vice versa.
-   */
-  searchType?: SearchType$1;
-}
-interface SyncState extends SyncStateScope {
-  state: SyncStateKind;
-  updatedAt: number;
-  attempts: number;
-  error?: string;
-}
-interface SyncStateFilter {
-  userId: string;
-  siteId?: string;
-  table?: TableName$1;
-  state?: SyncStateKind;
-  searchType?: SearchType$1;
-}
-interface SyncStateDetail {
-  at?: number;
-  error?: string;
-}
-interface LockScope {
-  userId: string;
-  siteId?: string;
-  table: TableName$1;
-  partition: string;
-}
-interface PurgeFilter {
-  userId: string;
-  siteId?: string;
-}
-interface ManifestPurgeResult {
-  entriesRemoved: number;
-  watermarksRemoved: number;
-  syncStatesRemoved: number;
-}
-interface PurgeResult {
-  userId: string;
-  siteId?: string;
-  prefix: string;
-  objectsDeleted: number;
-  entriesRemoved: number;
-  watermarksRemoved: number;
-  syncStatesRemoved: number;
-  at: number;
-}
-interface PurgeUrlsResult {
-  userId: string;
-  siteId?: string;
-  urlsRequested: number;
-  entriesRewritten: number;
-  rowsRemoved: number;
-  bytesAfter: number;
-  at: number;
-}
-interface ManifestStore {
-  listLive: (filter: ListLiveFilter) => Promise<ManifestEntry[]>;
-  listAll: (filter: ListLiveFilter) => Promise<ManifestEntry[]>;
-  registerVersion: (entry: ManifestEntry, superseding?: ManifestEntry[]) => Promise<void>;
-  registerVersions: (entries: ManifestEntry[], superseding?: ManifestEntry[]) => Promise<void>;
-  listRetired: (olderThan: number) => Promise<ManifestEntry[]>;
-  delete: (entries: ManifestEntry[]) => Promise<void>;
-  getWatermarks: (filter: WatermarkFilter) => Promise<Watermark[]>;
-  bumpWatermark: (scope: WatermarkScope, date: string, at?: number) => Promise<void>;
-  getSyncStates: (filter: SyncStateFilter) => Promise<SyncState[]>;
-  setSyncState: (scope: SyncStateScope, state: SyncStateKind, detail?: SyncStateDetail) => Promise<void>;
-  /**
-   * Serialize concurrent writers against the same scope. Held across the
-   * write+register window so GC (orphan sweep) won't delete bytes that are
-   * midway between `dataSource.write` and `manifestStore.registerVersion`.
-   * Scope = tenant × table × partition.
-   */
-  withLock: <T>(scope: LockScope, fn: () => Promise<T>) => Promise<T>;
-  /**
-   * GDPR-grade tenant purge. Removes every manifest entry, watermark, and
-   * sync-state record matching the filter. Does NOT touch the underlying
-   * data-source bytes; callers (typically {@link StorageEngine.purgeTenant})
-   * must sweep the tenant prefix separately before invoking this so that
-   * mid-flight failures can't leave orphan parquet with no manifest record.
-   *
-   * On stores with CAS-backed sharding (R2 manifest) this may issue one
-   * mutation per shard. On read-only stores (HTTP) this throws.
-   */
-  purgeTenant: (filter: PurgeFilter) => Promise<ManifestPurgeResult>;
-}
-interface WriteResult {
-  bytes: number;
-  rowCount: number;
-}
-interface CodecCtx {
-  table: TableName$1;
-}
-/**
- * Key-oriented codec. Each method owns its I/O through `dataSource`:
- * - Node / browser codecs read/write bytes via `dataSource.read` / `.write`.
- * - Workers codecs let DuckDB's httpfs read/write remote URIs directly (via
- *   `dataSource.uri`) and never materialise bytes in JS.
- *
- * The engine never touches bytes; it just hands rows + keys to the codec.
- *
- * Invariants every implementation MUST uphold:
- * - `writeRows` with an empty `rows` array MUST still write a file
- *   carrying the canonical column set for `ctx.table` — a schema-correct
- *   empty file. No placeholder-column shortcuts; readers depend on the
- *   schema being present for `union_by_name` merges.
- * - `WriteResult.bytes` MUST be the real byte size written to the
- *   data source (not 0, not an estimate) so the engine can enforce the
- *   payload ceiling without a second `head` round-trip.
- * - `WriteResult.rowCount` MUST equal `rows.length` (or, for
- *   `compactRows`, the sum of input row counts).
- */
-interface ParquetCodec {
-  writeRows: (ctx: CodecCtx, rows: Row$1[], key: string, dataSource: DataSource) => Promise<WriteResult>;
-  readRows: (ctx: CodecCtx, key: string, dataSource: DataSource) => Promise<Row$1[]>;
-  compactRows: (ctx: CodecCtx, inputKeys: string[], outputKey: string, dataSource: DataSource) => Promise<WriteResult>;
-}
-interface QueryResult {
-  rows: Row$1[];
-  sql: string;
-  objectKeys: string[];
-}
-interface ComparisonResult {
-  rows: Row$1[];
-  totalCount: number;
-  totals: Record<string, unknown>;
-}
-interface ExtraResult {
-  key: string;
-  rows: Row$1[];
-}
-interface QueryExecuteOptions {
-  sql: string;
-  params: unknown[];
-  /**
-   * Named placeholder → object keys. The executor substitutes `{{NAME}}`
-   * occurrences in the SQL with the matching `read_parquet([...])` list,
-   * choosing between virtual-FS names or native URIs based on whether
-   * `dataSource.uri` is available.
-   */
-  fileKeys: Record<string, string[]>;
-  dataSource: DataSource;
-  table: TableName$1;
-  signal?: AbortSignal;
-  /**
-   * Optional callback invoked by the executor when it detects the DuckDB
-   * process is approaching a memory ceiling (e.g. ingesting rows after
-   * httpfs decode, or materialising a large temp relation). Callers can
-   * shed work, warm a spillover path, or warn the user. Advisory only —
-   * not all executors implement it.
-   */
-  onMemoryPressure?: (info: {
-    bytes?: number;
-    reason: string;
-  }) => void;
-}
-interface QueryExecuteResult {
-  rows: Row$1[];
-  /** The final SQL actually run (after placeholder substitution). */
-  sql: string;
-  /**
-   * Optional diagnostics the executor may emit for observability + capacity
-   * planning. Undefined on executors that don't instrument their runtime.
-   *
-   * - `peakBytes`: highest resident memory the engine reported during the
-   *   query. Callers may use this to decide whether to drop / compact state
-   *   before the next call.
-   * - `resetRecommended`: executor thinks the underlying connection should
-   *   be recycled (fragmented, near ceiling). Caller-owned decision —
-   *   honored by `BrowserAnalysisRuntime` consumers but not enforced.
-   */
-  diagnostics?: {
-    peakBytes?: number;
-    resetRecommended?: boolean;
-  };
-}
-interface QueryExecutor {
-  execute: (opts: QueryExecuteOptions) => Promise<QueryExecuteResult>;
-}
-interface FileSetRef {
-  table: TableName$1;
-  partitions?: string[];
-}
-interface RunSQLOptions {
-  ctx: TenantCtx$1;
-  /**
-   * Named partition references. Each name becomes a `{{NAME}}` placeholder
-   * substituted into the SQL with the matching list of object keys. The
-   * canonical name is `FILES`; analyzers also use `FILES_PREV` for a prior
-   * window. Providing zero fileSets runs the SQL against no files.
-   */
-  fileSets: Record<string, FileSetRef>;
-  /** Schema-bearing table; defaults to the first fileSet's table. */
-  table?: TableName$1;
-  sql: string;
-  params?: unknown[];
-  signal?: AbortSignal;
-}
-interface StorageEngine {
-  writeDay: (ctx: WriteCtx, rows: Row$1[]) => Promise<void>;
-  query: (ctx: QueryCtx, state: BuilderState) => Promise<QueryResult>;
-  /**
-   * Two-window comparison query (resolver-compiled). Joins a `current` and
-   * `previous` window CTE on dimensions, applies an optional row filter
-   * (`new`/`lost`/`improving`/`declining`), and returns the merged rows plus
-   * total count and unfiltered totals.
-   *
-   * Tenant scoping comes from `ctx.userId`/`ctx.siteId` (manifest lookup) —
-   * the SQL itself is single-tenant against the parquet adapter, which has
-   * `includeSiteId: false`.
-   *
-   * Throws if `current` and `previous` resolve to different tables.
-   */
-  queryComparison: (ctx: QueryCtx, current: BuilderState, previous: BuilderState, filter?: ComparisonFilter) => Promise<ComparisonResult>;
-  /**
-   * Canonical-variant enrichment queries. Returns one result per extra
-   * surface; today only `queryCanonical` triggers an extra. Empty array
-   * when the state has no extras-eligible dimensions.
-   */
-  queryExtras: (ctx: QueryCtx, state: BuilderState) => Promise<ExtraResult[]>;
-  /**
-   * Run arbitrary SQL resolved against named partition sets. Composes
-   * manifest lookup + object reads + placeholder substitution + execution
-   * so callers don't need to reach into `ManifestStore`/`DataSource`
-   * directly.
-   */
-  runSQL: (opts: RunSQLOptions) => Promise<QueryResult>;
-  compactTiered: (ctx: WriteCtx, thresholds?: CompactionThresholds) => Promise<void>;
-  gcOrphans: (ctx: GcCtx, graceMs: number) => Promise<{
-    deleted: number;
-  }>;
-  /**
-   * GDPR-grade tenant purge. Deletes every object under the tenant prefix
-   * (parquet, rollups, entity stores), then removes manifest/watermark/
-   * sync-state records via {@link ManifestStore.purgeTenant}.
-   *
-   * Order matters: bytes are deleted before manifest entries, so a
-   * crash mid-purge leaves orphan manifest records (detectable via the
-   * normal orphan sweep) rather than orphan bytes with no record.
-   *
-   * Returns counters suitable for an audit log. Caller is responsible
-   * for persisting the audit entry.
-   */
-  purgeTenant: (ctx: TenantCtx$1) => Promise<PurgeResult>;
-  /**
-   * GDPR URL-matcher purge. Deletes rows whose `url` column matches one of
-   * `urls` across every live parquet entry for the tenant in tables that
-   * carry a `url` column (`pages`, `page_keywords`). Tables without a `url`
-   * column (`keywords`, `countries`, `devices`, `search_appearance`) are
-   * untouched — they never store per-URL data.
-   *
-   * For each affected entry the engine reads the file, filters the matching
-   * rows out, writes a replacement parquet at a new object key, and registers
-   * the new entry as a supersede of the old. Entries with no matches are
-   * left untouched. Entries with all rows matching are replaced by a
-   * schema-bearing empty-rows file.
-   *
-   * Narrower counterpart to {@link purgeTenant}: use this for a per-URL
-   * takedown request; use `purgeTenant` for full-account deletion.
-   */
-  purgeUrls: (ctx: TenantCtx$1, urls: readonly string[]) => Promise<PurgeUrlsResult>;
-  listLive: (filter: ListLiveFilter) => Promise<ManifestEntry[]>;
-  listAll: (filter: ListLiveFilter) => Promise<ManifestEntry[]>;
-  getWatermarks: (filter: WatermarkFilter) => Promise<Watermark[]>;
-  getSyncStates: (filter: SyncStateFilter) => Promise<SyncState[]>;
-  setSyncState: (scope: SyncStateScope, state: SyncStateKind, detail?: SyncStateDetail) => Promise<void>;
-  /** Read the raw bytes of a single object. Rarely needed outside the `dump` CLI. */
-  readObject: (key: string) => Promise<Uint8Array>;
-}
-interface EngineOptions {
-  dataSource: DataSource;
-  manifestStore: ManifestStore;
-  codec: ParquetCodec;
-  executor: QueryExecutor;
-  now?: () => number;
-}
+import { A as SyncStateFilter, C as QueryResult, D as StorageEngine, E as SearchType, F as Watermark, I as WatermarkFilter, L as WatermarkScope, M as SyncStateScope, N as TableName, O as SyncState, P as TenantCtx, R as WriteCtx, S as QueryExecutor, T as RunSQLOptions, a as DataSource, b as QueryExecuteOptions, c as FileSetRef, d as LockScope, f as ManifestEntry, h as ParquetCodec, j as SyncStateKind, k as SyncStateDetail, l as GcCtx, m as ManifestStore, n as CompactionTier, o as EngineOptions, t as CodecCtx, u as ListLiveFilter, w as Row, x as QueryExecuteResult, y as QueryCtx, z as WriteResult } from "./_chunks/storage.mjs";
 export { type CodecCtx, type CompactionTier, type DataSource, type EngineOptions, type FileSetRef, type GcCtx, type ListLiveFilter, type LockScope, type ManifestEntry, type ManifestStore, type ParquetCodec, type QueryCtx, type QueryExecuteOptions, type QueryExecuteResult, type QueryExecutor, type QueryResult, type Row, type RunSQLOptions, type SearchType, type StorageEngine, type SyncState, type SyncStateDetail, type SyncStateFilter, type SyncStateKind, type SyncStateScope, type TableName, type TenantCtx, type Watermark, type WatermarkFilter, type WatermarkScope, type WriteCtx, type WriteResult };