platform-types 1.10.742 → 1.10.743

package/dist/log.d.ts

@@ -100,6 +100,10 @@ declare global {
         tier: AuditExportTier;
     };
     interface AuditExportColdCoverage {
+        /**
+         * `pending-delivery` is no longer produced: an export whose end passed `visibleThrough` is
+         * now cut to it (`AuditExportSourceManifest.clamp`). It stays for manifests stored before.
+         */
         state: 'complete' | 'pending-delivery' | 'incomplete' | 'not-read' | 'unsupported';
         reason?: 'COLD_OBJECT_TOO_LARGE' | 'COLD_READ_FAILED' | 'COLD_LENS_UNSUPPORTED' | 'BUDGET_EXHAUSTED' | 'DEDUP_SET_OVERFLOW' | 'FISCAL_REPLAY_IDS_NOT_CAPTURED' | 'COLD_TIER_NOT_ENUMERATED';
         arrivalWindow: {
@@ -119,7 +123,17 @@ declare global {
         rowsOtherTenant: number;
         rowsOutOfRange: number;
         duplicatesOfHot: number;
+        /**
+         * Cold-only rows in the file: read rows less hot duplicates and, once the export worker
+         * nets them, less `erasedRowsOmitted`.
+         */
         coldOnlyEmitted: number;
+        /**
+         * Cold-only rows read but left out of the file for naming an already-erased customer;
+         * written by the export worker. Absent when none was. Summed over every source with
+         * `hot.erasedRowsOmitted`, it equals the manifest's own `erasedRowsOmitted`.
+         */
+        erasedRowsOmitted?: number;
         legacyRows: number;
         excludedAnonymous: number;
         invalidRows: number;
@@ -129,8 +143,11 @@ declare global {
         tierPlan: 'hot-only-no-archive' | 'hot-authoritative' | 'hot-and-cold';
         tierPlanReason: string;
         hot: AuditHistorySourceCoverage & {
+            /** Hot rows in the file, net of `erasedRowsOmitted`. */
             emitted: number;
             nearExpiryRecorded: number;
+            /** Hot rows read but left out for naming an already-erased customer (export worker). Absent when none was. */
+            erasedRowsOmitted?: number;
         };
         cold?: AuditExportColdCoverage;
     }
@@ -148,7 +165,25 @@ declare global {
             fromIso: string;
             toIso: string;
         };
+        /**
+         * The end every read of the capture used: `requested.toIso` bounded by `captureStartedAt`,
+         * and cut further to the cold delivery horizon when {@link clamp} is present.
+         */
         effectiveTo: string;
+        /**
+         * Present when the export's end was cut short of the request; written by the export engine
+         * (`buildAuditExportManifest`). `COLD_DELIVERY_HORIZON`: the selection holds an archived
+         * surface (`userActivity`, `fiscalAudit`, `storefrontEvents`) and the requested end lies past
+         * the instant the capture can prove the cold archive delivered — `captureStartedAt` less
+         * the delivery window (`sources[].cold.visibleThrough`, about 24 h 15 min). The whole file,
+         * every surface in it, ends at `to` (equal to `effectiveTo`); nothing after it is in the
+         * file, and the coverage states describe the cut range. `requested` stays as asked. Absent
+         * when nothing was cut — a selection of `entityAudit`/`loginHistory` alone never is.
+         */
+        clamp?: {
+            to: string;
+            reason: 'COLD_DELIVERY_HORIZON';
+        };
         captureStartedAt: string;
         captureCompletedAt?: string;
         lifetimeMs: number;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.742",
+	"version": "1.10.743",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",