platform-types 1.10.741 → 1.10.743

package/dist/log.d.ts

@@ -100,6 +100,10 @@ declare global {
         tier: AuditExportTier;
     };
     interface AuditExportColdCoverage {
+        /**
+         * `pending-delivery` is no longer produced: an export whose end passed `visibleThrough` is
+         * now cut to it (`AuditExportSourceManifest.clamp`). It stays for manifests stored before.
+         */
         state: 'complete' | 'pending-delivery' | 'incomplete' | 'not-read' | 'unsupported';
         reason?: 'COLD_OBJECT_TOO_LARGE' | 'COLD_READ_FAILED' | 'COLD_LENS_UNSUPPORTED' | 'BUDGET_EXHAUSTED' | 'DEDUP_SET_OVERFLOW' | 'FISCAL_REPLAY_IDS_NOT_CAPTURED' | 'COLD_TIER_NOT_ENUMERATED';
         arrivalWindow: {
@@ -119,7 +123,17 @@ declare global {
         rowsOtherTenant: number;
         rowsOutOfRange: number;
         duplicatesOfHot: number;
+        /**
+         * Cold-only rows in the file: read rows less hot duplicates and, once the export worker
+         * nets them, less `erasedRowsOmitted`.
+         */
         coldOnlyEmitted: number;
+        /**
+         * Cold-only rows read but left out of the file for naming an already-erased customer;
+         * written by the export worker. Absent when none was. Summed over every source with
+         * `hot.erasedRowsOmitted`, it equals the manifest's own `erasedRowsOmitted`.
+         */
+        erasedRowsOmitted?: number;
         legacyRows: number;
         excludedAnonymous: number;
         invalidRows: number;
@@ -129,8 +143,11 @@ declare global {
         tierPlan: 'hot-only-no-archive' | 'hot-authoritative' | 'hot-and-cold';
         tierPlanReason: string;
         hot: AuditHistorySourceCoverage & {
+            /** Hot rows in the file, net of `erasedRowsOmitted`. */
             emitted: number;
             nearExpiryRecorded: number;
+            /** Hot rows read but left out for naming an already-erased customer (export worker). Absent when none was. */
+            erasedRowsOmitted?: number;
         };
         cold?: AuditExportColdCoverage;
     }
@@ -148,7 +165,25 @@ declare global {
             fromIso: string;
             toIso: string;
         };
+        /**
+         * The end every read of the capture used: `requested.toIso` bounded by `captureStartedAt`,
+         * and cut further to the cold delivery horizon when {@link clamp} is present.
+         */
         effectiveTo: string;
+        /**
+         * Present when the export's end was cut short of the request; written by the export engine
+         * (`buildAuditExportManifest`). `COLD_DELIVERY_HORIZON`: the selection holds an archived
+         * surface (`userActivity`, `fiscalAudit`, `storefrontEvents`) and the requested end lies past
+         * the instant the capture can prove the cold archive delivered — `captureStartedAt` less
+         * the delivery window (`sources[].cold.visibleThrough`, about 24 h 15 min). The whole file,
+         * every surface in it, ends at `to` (equal to `effectiveTo`); nothing after it is in the
+         * file, and the coverage states describe the cut range. `requested` stays as asked. Absent
+         * when nothing was cut — a selection of `entityAudit`/`loginHistory` alone never is.
+         */
+        clamp?: {
+            to: string;
+            reason: 'COLD_DELIVERY_HORIZON';
+        };
         captureStartedAt: string;
         captureCompletedAt?: string;
         lifetimeMs: number;

package/dist/store.d.ts

@@ -340,28 +340,31 @@ declare global {
          */
         tolerancePercent?: number;
     }
-    /** First-touch acquisition metadata captured when this tenant self-registers. */
-    interface StoreAcquisition {
+    /**
+     * The REQUEST leaf: everything a registration client may send. The api
+     * refuses a body carrying `capturedAt`, and refuses any key this type does
+     * not name.
+     */
+    interface StoreAcquisitionInput {
         source: string;
         medium: string;
         campaign: string;
         content?: string;
         /**
          * Meta's ad click id (the `fbclid` URL parameter), present only when the
-         * sign-up arrived from a Meta ad. Case-sensitive: stored and sent to Meta
+         * sign-up arrived from a Meta ad. Case-sensitive: forwarded to Meta
          * byte-for-byte. Trimmed, then 1–500 characters of `[A-Za-z0-9_-]`; only
-         * ever present together with the required UTM keys above.
+         * ever present together with the required UTM keys. REQUEST-only: the api
+         * never writes it to the STORE row, which is why `StoreAcquisition` (the
+         * stored shape) does not declare it.
          */
         fbclid?: string;
+    }
+    /** First-touch acquisition metadata captured when this tenant self-registers. */
+    interface StoreAcquisition extends Omit<StoreAcquisitionInput, 'fbclid'> {
         /** Unix ms, stamped by the api from the registration timestamp. */
         capturedAt: number;
     }
-    /**
-     * The REQUEST leaf: everything a registration client may send, i.e.
-     * `StoreAcquisition` minus the server-owned stamp. The api refuses a body
-     * carrying `capturedAt`, and refuses any key this type does not name.
-     */
-    type StoreAcquisitionInput = Omit<StoreAcquisition, 'capturedAt'>;
     /**
      * The terms-of-service acceptance recorded when this tenant self-registers.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.741",
+	"version": "1.10.743",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",