@open-mercato/core 0.6.7-develop.6842.1.8cd8a8883c → 0.6.7-develop.6859.1.e4727b568a

package/dist/modules/query_index/lib/reindexer.js

@@ -193,51 +193,57 @@ async function reindexEntity(em, options) {
   let jobFailed = false;
   const writeTotals = createEmptyUpsertIndexBatchResult();
   options?.onProgress?.({ processed, total, chunkSize: 0 });
-  if (resetCoverage) {
-    if (force) {
+  if (force && (resetCoverage || usingPartitions)) {
+    try {
+      let purgeQuery = db.deleteFrom("entity_indexes").where("entity_type", "=", entityType);
+      if (tenantId !== void 0) {
+        purgeQuery = purgeQuery.where(sql`tenant_id is not distinct from ${tenantId ?? null}`);
+      }
+      if (organizationId !== void 0) {
+        purgeQuery = purgeQuery.where(sql`organization_id is not distinct from ${organizationId ?? null}`);
+      }
+      if (usingPartitions && partitionIndex !== null) {
+        purgeQuery = purgeQuery.where(
+          sql`mod(abs(hashtext(entity_id::text)), ${partitionCountRaw}) = ${partitionIndex}`
+        );
+      }
+      await purgeQuery.execute();
+    } catch (error) {
+      logger.warn("Failed to purge index rows before force reindex", {
+        entityType,
+        tenantId: tenantId ?? null,
+        organizationId: organizationId ?? null,
+        partitionIndex: usingPartitions ? partitionIndex : null,
+        error: error instanceof Error ? error.message : error
+      });
+    }
+  }
+  if (force && resetCoverage && !usingPartitions && emitVectorize && eventBus) {
+    if (tenantId !== void 0) {
+      const payload = {
+        entityType,
+        tenantId: tenantId ?? null
+      };
+      if (organizationId !== void 0) payload.organizationId = organizationId ?? null;
       try {
-        let purgeQuery = db.deleteFrom("entity_indexes").where("entity_type", "=", entityType);
-        if (tenantId !== void 0) {
-          purgeQuery = purgeQuery.where(sql`tenant_id is not distinct from ${tenantId ?? null}`);
-        }
-        if (organizationId !== void 0) {
-          purgeQuery = purgeQuery.where(sql`organization_id is not distinct from ${organizationId ?? null}`);
-        }
-        await purgeQuery.execute();
-      } catch (error) {
-        logger.warn("Failed to purge index rows before force reindex", {
+        await eventBus.emitEvent("query_index.vectorize_purge", payload);
+      } catch (err) {
+        logger.warn("Failed to queue vector purge before force reindex", {
           entityType,
           tenantId: tenantId ?? null,
           organizationId: organizationId ?? null,
-          error: error instanceof Error ? error.message : error
+          error: err instanceof Error ? err.message : err
         });
       }
-      if (emitVectorize && eventBus) {
-        if (tenantId !== void 0) {
-          const payload = {
-            entityType,
-            tenantId: tenantId ?? null
-          };
-          if (organizationId !== void 0) payload.organizationId = organizationId ?? null;
-          try {
-            await eventBus.emitEvent("query_index.vectorize_purge", payload);
-          } catch (err) {
-            logger.warn("Failed to queue vector purge before force reindex", {
-              entityType,
-              tenantId: tenantId ?? null,
-              organizationId: organizationId ?? null,
-              error: err instanceof Error ? err.message : err
-            });
-          }
-        } else {
-          logger.warn("Skipping vector purge for force reindex without tenant scope", {
-            entityType
-          });
-        }
-      }
+    } else {
+      logger.warn("Skipping vector purge for force reindex without tenant scope", {
+        entityType
+      });
     }
+  }
+  if (resetCoverage) {
     const nowTs = Date.now();
-    for (const scope of baseCounts.values()) {
+    for (const scope of usingPartitions ? [] : baseCounts.values()) {
       const key = `${entityType}|${scopeKey(scope.tenantId, scope.organizationId)}`;
       const last = lastCoverageReset.get(key) ?? 0;
       if (force || nowTs - last >= COVERAGE_REFRESH_THROTTLE_MS) {

package/dist/modules/query_index/lib/reindexer.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/reindexer.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { resolveRegisteredEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { decryptIndexDocForSearch, encryptIndexDocForStorage } from '@open-mercato/shared/lib/encryption/indexDoc'\nimport {\n  upsertIndexBatch,\n  assertIndexBatchWritesLanded,\n  createEmptyUpsertIndexBatchResult,\n  mergeUpsertIndexBatchResults,\n  QueryIndexBatchWriteError,\n  type AnyRow,\n} from './batch'\nimport { refreshCoverageSnapshot, writeCoverageCounts, applyCoverageAdjustments } from './coverage'\nimport { prepareJob, updateJobProgress, finalizeJob, type JobScope } from './jobs'\nimport { purgeOrphans } from './stale'\nimport type { VectorIndexService } from '@open-mercato/search/vector'\nimport { isSearchDebugEnabled } from './search-tokens'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('query_index').child({ component: 'reindexer' })\n\nexport type ReindexJobOptions = {\n  entityType: string\n  tenantId?: string | null\n  organizationId?: string | null\n  force?: boolean\n  batchSize?: number\n  emitVectorizeEvents?: boolean\n  eventBus?: {\n    emitEvent(event: string, payload: any, options?: any): Promise<void>\n  }\n  partitionCount?: number\n  partitionIndex?: number\n  resetCoverage?: boolean\n  onProgress?: (info: { processed: number; total: number; chunkSize: number }) => void\n  vectorService?: VectorIndexService | null\n}\n\nexport type ReindexJobResult = {\n  processed: number\n  total: number\n  tenantScopes: Array<string | null>\n  scopes: Array<{ tenantId: string | null; organizationId: string | null }>\n}\n\nexport const DEFAULT_REINDEX_PARTITIONS = 5\nconst DEFAULT_BATCH_SIZE = 500\n/**\n * Above this many failed records the purge exclusion list stops being a sane query, so\n * the purge is skipped entirely instead. Failing closed keeps stale rows; the alternative\n * deletes index entries the run failed to rebuild.\n */\nconst MAX_PURGE_EXCLUSIONS = 1000\nconst deriveOrgFromId = new Set<string>(['directory:organization'])\nconst COVERAGE_REFRESH_THROTTLE_MS = 5 * 60 * 1000\nconst lastCoverageReset = new Map<string, number>()\n\nconst REINDEX_DECRYPT_DEBUG_KEYS = ['display_name', 'first_name', 'last_name', 'brand_name', 'legal_name', 'primary_email', 'primary_phone'] as const\n\nexport type ReindexDecryptDebugPayload = {\n  entityType: string\n  tenantId: string | null\n  organizationId: string | null\n  keys: string[]\n}\n\nexport function buildReindexDecryptDebugPayload(\n  entityType: string,\n  doc: Record<string, unknown>,\n  scope: { organizationId: string | null; tenantId: string | null },\n): ReindexDecryptDebugPayload {\n  const presentKeys: string[] = []\n  for (const key of REINDEX_DECRYPT_DEBUG_KEYS) {\n    const value = doc[key]\n    if (key in doc && value != null && value !== '') presentKeys.push(key)\n  }\n  return {\n    entityType,\n    tenantId: scope.tenantId ?? null,\n    organizationId: scope.organizationId ?? null,\n    keys: presentKeys,\n  }\n}\n\nasync function cleanupLegacyJobScopes(\n  db: Kysely<any>,\n  options: {\n    entityType: string\n    organizationId: string | null\n    tenantId: string | null\n    activePartitionCount: number | null\n  },\n): Promise<void> {\n  await db\n    .deleteFrom('entity_index_jobs' as any)\n    .where('entity_type' as any, '=', options.entityType)\n    .where(sql<boolean>`organization_id is not distinct from ${options.organizationId}`)\n    .where(sql<boolean>`tenant_id is not distinct from ${options.tenantId}`)\n    .where(sql<boolean>`partition_count is distinct from ${options.activePartitionCount}`)\n    .execute()\n}\n\nfunction toNumber(value: unknown): number {\n  if (typeof value === 'number') return Number.isFinite(value) ? value : 0\n  if (typeof value === 'string') {\n    const parsed = Number(value)\n    return Number.isFinite(parsed) ? parsed : 0\n  }\n  return 0\n}\n\nasync function getColumnSet(db: Kysely<any>, tableName: string): Promise<Set<string>> {\n  try {\n    const rows = await db\n      .selectFrom('information_schema.columns' as any)\n      .select(['column_name' as any])\n      .where(sql<boolean>`table_schema = current_schema()`)\n      .where('table_name' as any, '=', tableName)\n      .execute() as Array<{ column_name: string }>\n    return new Set(rows.map((row) => String(row.column_name).toLowerCase()))\n  } catch {\n    return new Set<string>()\n  }\n}\n\nexport async function reindexEntity(\n  em: EntityManager,\n  options: ReindexJobOptions,\n): Promise<ReindexJobResult> {\n  const entityType = String(options?.entityType || '')\n  if (!entityType) {\n    return {\n      processed: 0,\n      total: 0,\n      tenantScopes: [],\n      scopes: [],\n    }\n  }\n  const tenantIdInput = options?.tenantId\n  const tenantId = tenantIdInput === 'undefined' ? undefined : tenantIdInput\n  const organizationIdInput = options?.organizationId\n  const organizationId = organizationIdInput === 'undefined' ? undefined : organizationIdInput\n  const force = options?.force === true\n  const batchSize = Number.isFinite(options?.batchSize) && options!.batchSize! > 0\n    ? Math.max(1, Math.trunc(options!.batchSize!))\n    : DEFAULT_BATCH_SIZE\n  const emitVectorize = options?.emitVectorizeEvents === true\n  const eventBus = options?.eventBus\n  const vectorService = options?.vectorService ?? null\n  const partitionCountRaw = Number.isFinite(options?.partitionCount)\n    ? Math.max(1, Math.trunc(options!.partitionCount!))\n    : 1\n  const usingPartitions = partitionCountRaw > 1\n  const partitionIndexRaw = Number.isFinite(options?.partitionIndex)\n    ? Math.max(0, Math.trunc(options!.partitionIndex!))\n    : 0\n  const partitionIndex = usingPartitions\n    ? Math.min(partitionIndexRaw, partitionCountRaw - 1)\n    : null\n  const resetCoverage = options?.resetCoverage ?? (!usingPartitions || partitionIndex === 0)\n\n  const db = (em as any).getKysely() as Kysely<any>\n  // Resolve the source table strictly via registered MikroORM metadata. We must\n  // never fall back to a pluralized guess derived from the caller-supplied id\n  // here: doing so would let a principal with `query_index.reindex` point the\n  // reindexer at arbitrary tables (e.g. `auth_users`, `users`) and read their\n  // rows into the index, bypassing tenant scoping and entity-level encryption.\n  const table = resolveRegisteredEntityTableName(em, entityType)\n  if (!table || entityType === 'query_index:search_token' || table === 'search_tokens') {\n    if (!table) {\n      logger.warn('Refusing to reindex unregistered entity type', {\n        entityType,\n      })\n    }\n    return {\n      processed: 0,\n      total: 0,\n      tenantScopes: [],\n      scopes: [],\n    }\n  }\n  const columns = await getColumnSet(db, table)\n  const hasOrgCol = columns.has('organization_id')\n  const hasTenantCol = columns.has('tenant_id')\n  const hasDeletedCol = columns.has('deleted_at')\n\n  const jobScope: JobScope = {\n    entityType,\n    organizationId: organizationId ?? null,\n    tenantId: tenantId ?? null,\n    partitionIndex,\n    partitionCount: usingPartitions ? partitionCountRaw : null,\n  }\n\n  if (!force) {\n    const activeJob = await db\n      .selectFrom('entity_index_jobs' as any)\n      .select(['id' as any])\n      .where('entity_type' as any, '=', entityType)\n      .where('finished_at' as any, 'is', null as any)\n      .where(sql<boolean>`organization_id is not distinct from ${null}`)\n      .where(sql<boolean>`tenant_id is not distinct from ${tenantId ?? null}`)\n      .where(sql<boolean>`partition_index is not distinct from ${partitionIndex}`)\n      .where(sql<boolean>`partition_count is not distinct from ${usingPartitions ? partitionCountRaw : null}`)\n      .executeTakeFirst()\n    if (activeJob) {\n      return {\n        processed: 0,\n        total: 0,\n        tenantScopes: [],\n        scopes: [],\n      }\n    }\n  }\n\n  if (resetCoverage) {\n    await cleanupLegacyJobScopes(db, {\n      entityType,\n      organizationId: jobScope.organizationId ?? null,\n      tenantId: jobScope.tenantId ?? null,\n      activePartitionCount: jobScope.partitionCount ?? null,\n    })\n  }\n\n  const scopeKey = (tenantValue: string | null, orgValue: string | null) => `${tenantValue ?? '__null__'}|${orgValue ?? '__null__'}`\n\n  const applyBaseWhere = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n    let chain = q\n    if (hasDeletedCol) chain = chain.where('b.deleted_at' as any, 'is', null as any)\n    if (tenantId !== undefined && hasTenantCol) {\n      chain = tenantId === null\n        ? chain.where('b.tenant_id' as any, 'is', null as any)\n        : chain.where('b.tenant_id' as any, '=', tenantId)\n    }\n    if (organizationId !== undefined && hasOrgCol) {\n      chain = organizationId === null\n        ? chain.where('b.organization_id' as any, 'is', null as any)\n        : chain.where('b.organization_id' as any, '=', organizationId)\n    }\n    if (usingPartitions && partitionIndex !== null) {\n      chain = chain.where(sql<boolean>`mod(abs(hashtext(b.id::text)), ${partitionCountRaw}) = ${partitionIndex}`)\n    }\n    return chain\n  }\n\n  type ScopeStats = { tenantId: string | null; organizationId: string | null; count: number }\n  const baseCounts = new Map<string, ScopeStats>()\n  const registerBaseCount = (tenantValue: string | null, orgValue: string | null, count: number) => {\n    const key = scopeKey(tenantValue, orgValue)\n    baseCounts.set(key, { tenantId: tenantValue, organizationId: orgValue, count })\n  }\n\n  const groupByTenant = hasTenantCol && tenantId === undefined\n  const groupByOrg = hasOrgCol && organizationId === undefined\n\n  if (groupByTenant || groupByOrg) {\n    let groupQuery = applyBaseWhere(\n      db.selectFrom(`${table} as b` as any).select(sql<number>`count(*)`.as('count')),\n    )\n    if (groupByTenant) {\n      groupQuery = groupQuery.select('b.tenant_id as tenant_id' as any).groupBy('b.tenant_id' as any)\n    }\n    if (groupByOrg) {\n      groupQuery = groupQuery.select('b.organization_id as organization_id' as any).groupBy('b.organization_id' as any)\n    }\n    const rows = await groupQuery.execute() as Array<Record<string, unknown>>\n    for (const row of rows) {\n      const bucketTenant = groupByTenant\n        ? ((row as any)?.tenant_id ?? null)\n        : (tenantId === undefined ? null : tenantId ?? null)\n      const bucketOrg = groupByOrg\n        ? ((row as any)?.organization_id ?? null)\n        : (organizationId === undefined ? null : organizationId ?? null)\n      registerBaseCount(bucketTenant, bucketOrg, toNumber((row as any)?.count))\n    }\n  } else {\n    const row = await applyBaseWhere(\n      db.selectFrom(`${table} as b` as any).select(sql<number>`count(*)`.as('count')),\n    ).executeTakeFirst() as { count: unknown } | undefined\n    const bucketTenant = tenantId === undefined ? null : tenantId ?? null\n    const bucketOrg = organizationId === undefined ? null : organizationId ?? null\n    registerBaseCount(bucketTenant, bucketOrg, toNumber(row?.count))\n  }\n\n  const total = Array.from(baseCounts.values()).reduce((acc, value) => acc + (Number.isFinite(value.count) ? value.count : 0), 0)\n  await prepareJob(db, jobScope, 'reindexing', { totalCount: total })\n  const jobRow = await db\n    .selectFrom('entity_index_jobs' as any)\n    .select(['started_at' as any])\n    .where('entity_type' as any, '=', entityType)\n    .where('organization_id' as any, 'is', null as any)\n    .where(sql<boolean>`tenant_id is not distinct from ${tenantId ?? null}`)\n    .where(sql<boolean>`partition_index is not distinct from ${partitionIndex}`)\n    .where(sql<boolean>`partition_count is not distinct from ${usingPartitions ? partitionCountRaw : null}`)\n    .orderBy('started_at' as any, 'desc')\n    .executeTakeFirst() as { started_at: Date | string } | undefined\n  const jobStartedAt = jobRow?.started_at ? new Date(jobRow.started_at) : new Date()\n  const deriveOrg = deriveOrgFromId.has(entityType)\n    ? (row: AnyRow) => String(row.id)\n    : undefined\n\n  const scopeOverrides: { tenantId?: string; orgId?: string } = {}\n  if (tenantId !== undefined && tenantId !== null) {\n    scopeOverrides.tenantId = String(tenantId)\n  }\n  if (organizationId !== undefined && organizationId !== null) {\n    scopeOverrides.orgId = String(organizationId)\n  }\n\n  const scopeEntries = Array.from(baseCounts.values()).map((entry) => ({\n    tenantId: entry.tenantId,\n    organizationId: entry.organizationId,\n  }))\n  const tenantScopes = Array.from(\n    new Set(scopeEntries.map((entry) => entry.tenantId ?? null)),\n  )\n\n  let processed = 0\n  let lastId: string | null = null\n  let jobFailed = false\n  const writeTotals = createEmptyUpsertIndexBatchResult()\n\n  options?.onProgress?.({ processed, total, chunkSize: 0 })\n\n  if (resetCoverage) {\n    if (force) {\n      try {\n        let purgeQuery = db\n          .deleteFrom('entity_indexes' as any)\n          .where('entity_type' as any, '=', entityType)\n        if (tenantId !== undefined) {\n          purgeQuery = purgeQuery.where(sql<boolean>`tenant_id is not distinct from ${tenantId ?? null}`)\n        }\n        if (organizationId !== undefined) {\n          purgeQuery = purgeQuery.where(sql<boolean>`organization_id is not distinct from ${organizationId ?? null}`)\n        }\n        await purgeQuery.execute()\n      } catch (error) {\n        logger.warn('Failed to purge index rows before force reindex', {\n          entityType,\n          tenantId: tenantId ?? null,\n          organizationId: organizationId ?? null,\n          error: error instanceof Error ? error.message : error,\n        })\n      }\n\n      if (emitVectorize && eventBus) {\n        if (tenantId !== undefined) {\n          const payload: Record<string, unknown> = {\n            entityType,\n            tenantId: tenantId ?? null,\n          }\n          if (organizationId !== undefined) payload.organizationId = organizationId ?? null\n          try {\n            await eventBus.emitEvent('query_index.vectorize_purge', payload)\n          } catch (err) {\n            logger.warn('Failed to queue vector purge before force reindex', {\n              entityType,\n              tenantId: tenantId ?? null,\n              organizationId: organizationId ?? null,\n              error: err instanceof Error ? err.message : err,\n            })\n          }\n        } else {\n          logger.warn('Skipping vector purge for force reindex without tenant scope', {\n            entityType,\n          })\n        }\n      }\n    }\n\n    const nowTs = Date.now()\n    for (const scope of baseCounts.values()) {\n      const key = `${entityType}|${scopeKey(scope.tenantId, scope.organizationId)}`\n      const last = lastCoverageReset.get(key) ?? 0\n      if (force || nowTs - last >= COVERAGE_REFRESH_THROTTLE_MS) {\n        await writeCoverageCounts(em, {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          withDeleted: false,\n        }, {\n          baseCount: scope.count,\n          indexedCount: 0,\n          vectorCount: emitVectorize ? 0 : undefined,\n        })\n        lastCoverageReset.set(key, nowTs)\n      }\n    }\n  }\n\n  try {\n    while (true) {\n      let query = applyBaseWhere(\n        db\n          .selectFrom(`${table} as b` as any)\n          .selectAll('b' as any)\n          .orderBy('b.id' as any, 'asc')\n          .limit(batchSize),\n      )\n      if (lastId !== null) {\n        query = query.where('b.id' as any, '>', lastId)\n      }\n      const rows = await query.execute() as AnyRow[]\n      if (!rows.length) break\n\n      const encryption = resolveTenantEncryptionService(em as any)\n      const dekKeyCache = new Map<string | null, string | null>()\n      const encryptDoc = async (\n        targetEntity: string,\n        doc: Record<string, unknown>,\n        scope: { organizationId: string | null; tenantId: string | null },\n      ) => {\n        return await encryptIndexDocForStorage(\n          targetEntity,\n          doc,\n          { tenantId: scope.tenantId ?? null, organizationId: scope.organizationId ?? null },\n          encryption,\n        )\n      }\n      const decryptDoc = async (\n        targetEntity: string,\n        doc: Record<string, unknown>,\n        scope: { organizationId: string | null; tenantId: string | null },\n      ) => {\n        const result = await decryptIndexDocForSearch(\n          targetEntity,\n          doc,\n          { tenantId: scope.tenantId ?? null, organizationId: scope.organizationId ?? null },\n          encryption,\n          dekKeyCache,\n        )\n        if (isSearchDebugEnabled()) {\n          logger.debug('Reindex decrypt', buildReindexDecryptDebugPayload(targetEntity, result as Record<string, unknown>, scope))\n        }\n        return result\n      }\n\n      const batchResult = await upsertIndexBatch(db, entityType, rows, scopeOverrides, { deriveOrganizationId: deriveOrg, encryptDoc, decryptDoc })\n      mergeUpsertIndexBatchResults(writeTotals, batchResult)\n\n      // A whole batch failing is infrastructural (pool exhausted, disk full, KMS down),\n      // not a poison record. Abort now instead of grinding through the rest of the table.\n      if (batchResult.written === 0 && batchResult.attempted > 0) {\n        throw new QueryIndexBatchWriteError(entityType, writeTotals)\n      }\n\n      const failedInBatch = new Set(batchResult.failedRecordIds)\n      const writtenRows = failedInBatch.size ? rows.filter((row) => !failedInBatch.has(String(row.id))) : rows\n\n      const coverageDeltas = new Map<string, { tenantId: string | null; organizationId: string | null; delta: number }>()\n      for (const row of writtenRows) {\n        const scopeTenant = tenantId !== undefined\n          ? tenantId ?? null\n          : (hasTenantCol ? ((row as AnyRow).tenant_id ?? null) : null)\n        const scopeOrg = organizationId !== undefined\n          ? organizationId ?? null\n          : (hasOrgCol ? ((row as AnyRow).organization_id ?? null) : (deriveOrg ? deriveOrg(row) ?? null : null))\n        const key = scopeKey(scopeTenant ?? null, scopeOrg ?? null)\n        const existingDelta = coverageDeltas.get(key)\n        if (existingDelta) existingDelta.delta += 1\n        else coverageDeltas.set(key, {\n          tenantId: scopeTenant ?? null,\n          organizationId: scopeOrg ?? null,\n          delta: 1,\n        })\n      }\n      if (coverageDeltas.size > 0) {\n        await applyCoverageAdjustments(\n          em,\n          Array.from(coverageDeltas.values()).map((entry) => ({\n            entityType,\n            tenantId: entry.tenantId,\n            organizationId: entry.organizationId,\n            withDeleted: false,\n            deltaBase: 0,\n            deltaIndex: entry.delta,\n          })),\n        )\n      }\n\n      if (emitVectorize && eventBus) {\n        await Promise.all(\n          writtenRows.map((row) => {\n            const scopeOrg = organizationId !== undefined\n              ? organizationId ?? null\n              : hasOrgCol\n                ? ((row as AnyRow).organization_id ?? null)\n                : (deriveOrg ? deriveOrg(row) ?? null : null)\n            const scopeTenant = tenantId !== undefined\n              ? tenantId ?? null\n              : (hasTenantCol ? ((row as AnyRow).tenant_id ?? null) : null)\n            return eventBus\n              .emitEvent('query_index.vectorize_one', {\n                entityType,\n                recordId: String(row.id),\n                organizationId: scopeOrg,\n                tenantId: scopeTenant,\n              })\n              .catch(() => undefined)\n          }),\n        )\n      }\n\n      processed += batchResult.written\n      lastId = String(rows[rows.length - 1]!.id)\n      options?.onProgress?.({ processed, total, chunkSize: batchResult.written })\n      await updateJobProgress(db, jobScope, batchResult.written)\n    }\n\n    // Records this run failed to write still look untouched to the purge predicate, so\n    // without the exclusion the purge would delete the index rows it just failed to\n    // rebuild \u2014 turning a stale entry into a missing one.\n    const purgeExclusions = writeTotals.failedRecordIds\n    if (purgeExclusions.length > MAX_PURGE_EXCLUSIONS) {\n      logger.warn('Skipping orphan purge after widespread write failures', {\n        entityType,\n        failedRecords: purgeExclusions.length,\n      })\n    } else {\n      await purgeOrphans(db, {\n        entityType,\n        tenantId,\n        organizationId,\n        partitionIndex: usingPartitions ? partitionIndex : null,\n        partitionCount: usingPartitions ? partitionCountRaw : null,\n        startedAt: jobStartedAt,\n        excludeRecordIds: purgeExclusions,\n      })\n    }\n\n    if (force && vectorService && (!usingPartitions || partitionIndex === null)) {\n      try {\n        await vectorService.removeOrphans({\n          entityId: entityType,\n          tenantId,\n          organizationId,\n          olderThan: jobStartedAt,\n        })\n      } catch (error) {\n        logger.warn('Failed to prune vector orphans after reindex', {\n          entityType,\n          tenantId: tenantId ?? null,\n          organizationId: organizationId ?? null,\n          error: error instanceof Error ? error.message : error,\n        })\n      }\n    }\n\n    for (const scope of scopeEntries) {\n      await refreshCoverageSnapshot(\n        em,\n        {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          withDeleted: false,\n        },\n      )\n    }\n\n    // Deliberately after the coverage refresh: the authoritative recount is what keeps\n    // indexed_count truthful, and it is most worth having when a run has just failed.\n    // Throwing here fails the queue job so the loss is visible instead of silent.\n    if (writeTotals.searchTokenFailures > 0) {\n      logger.warn('Search token writes failed during reindex', {\n        entityType,\n        batches: writeTotals.searchTokenFailures,\n      })\n    }\n    assertIndexBatchWritesLanded(entityType, writeTotals)\n  } catch (error) {\n    jobFailed = true\n    throw error\n  } finally {\n    // Still finalized on failure: the scope stays wedged behind the active-job guard\n    // while finished_at is null. The status carries the outcome instead.\n    await finalizeJob(db, jobScope, jobFailed ? { status: 'failed' } : {})\n  }\n\n  return {\n    processed,\n    total,\n    scopes: scopeEntries,\n    tenantScopes,\n  }\n}\n"],
-  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,wCAAwC;AACjD,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B,iCAAiC;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,yBAAyB,qBAAqB,gCAAgC;AACvF,SAAS,YAAY,mBAAmB,mBAAkC;AAC1E,SAAS,oBAAoB;AAE7B,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AA0BpE,MAAM,6BAA6B;AAC1C,MAAM,qBAAqB;AAM3B,MAAM,uBAAuB;AAC7B,MAAM,kBAAkB,oBAAI,IAAY,CAAC,wBAAwB,CAAC;AAClE,MAAM,+BAA+B,IAAI,KAAK;AAC9C,MAAM,oBAAoB,oBAAI,IAAoB;AAElD,MAAM,6BAA6B,CAAC,gBAAgB,cAAc,aAAa,cAAc,cAAc,iBAAiB,eAAe;AASpI,SAAS,gCACd,YACA,KACA,OAC4B;AAC5B,QAAM,cAAwB,CAAC;AAC/B,aAAW,OAAO,4BAA4B;AAC5C,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,OAAO,OAAO,SAAS,QAAQ,UAAU,GAAI,aAAY,KAAK,GAAG;AAAA,EACvE;AACA,SAAO;AAAA,IACL;AAAA,IACA,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,MAAM;AAAA,EACR;AACF;AAEA,eAAe,uBACb,IACA,SAMe;AACf,QAAM,GACH,WAAW,mBAA0B,EACrC,MAAM,eAAsB,KAAK,QAAQ,UAAU,EACnD,MAAM,2CAAoD,QAAQ,cAAc,EAAE,EAClF,MAAM,qCAA8C,QAAQ,QAAQ,EAAE,EACtE,MAAM,uCAAgD,QAAQ,oBAAoB,EAAE,EACpF,QAAQ;AACb;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,OAAO,KAAK;AAC3B,WAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,eAAe,aAAa,IAAiB,WAAyC;AACpF,MAAI;AACF,UAAM,OAAO,MAAM,GAChB,WAAW,4BAAmC,EAC9C,OAAO,CAAC,aAAoB,CAAC,EAC7B,MAAM,oCAA6C,EACnD,MAAM,cAAqB,KAAK,SAAS,EACzC,QAAQ;AACX,WAAO,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,OAAO,IAAI,WAAW,EAAE,YAAY,CAAC,CAAC;AAAA,EACzE,QAAQ;AACN,WAAO,oBAAI,IAAY;AAAA,EACzB;AACF;AAEA,eAAsB,cACpB,IACA,SAC2B;AAC3B,QAAM,aAAa,OAAO,SAAS,cAAc,EAAE;AACnD,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO;AAAA,MACP,cAAc,CAAC;AAAA,MACf,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,QAAM,gBAAgB,SAAS;AAC/B,QAAM,WAAW,kBAAkB,cAAc,SAAY;AAC7D,QAAM,sBAAsB,SAAS;AACrC,QAAM,iBAAiB,wBAAwB,cAAc,SAAY;AACzE,QAAM,QAAQ,SAAS,UAAU;AACjC,QAAM,YAAY,OAAO,SAAS,SAAS,SAAS,KAAK,QAAS,YAAa,IAC3E,KAAK,IAAI,GAAG,KAAK,MAAM,QAAS,SAAU,CAAC,IAC3C;AACJ,QAAM,gBAAgB,SAAS,wBAAwB;AACvD,QAAM,WAAW,SAAS;AAC1B,QAAM,gBAAgB,SAAS,iBAAiB;AAChD,QAAM,oBAAoB,OAAO,SAAS,SAAS,cAAc,IAC7D,KAAK,IAAI,GAAG,KAAK,MAAM,QAAS,cAAe,CAAC,IAChD;AACJ,QAAM,kBAAkB,oBAAoB;AAC5C,QAAM,oBAAoB,OAAO,SAAS,SAAS,cAAc,IAC7D,KAAK,IAAI,GAAG,KAAK,MAAM,QAAS,cAAe,CAAC,IAChD;AACJ,QAAM,iBAAiB,kBACnB,KAAK,IAAI,mBAAmB,oBAAoB,CAAC,IACjD;AACJ,QAAM,gBAAgB,SAAS,kBAAkB,CAAC,mBAAmB,mBAAmB;AAExF,QAAM,KAAM,GAAW,UAAU;AAMjC,QAAM,QAAQ,iCAAiC,IAAI,UAAU;AAC7D,MAAI,CAAC,SAAS,eAAe,8BAA8B,UAAU,iBAAiB;AACpF,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,gDAAgD;AAAA,QAC1D;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO;AAAA,MACP,cAAc,CAAC;AAAA,MACf,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,QAAM,UAAU,MAAM,aAAa,IAAI,KAAK;AAC5C,QAAM,YAAY,QAAQ,IAAI,iBAAiB;AAC/C,QAAM,eAAe,QAAQ,IAAI,WAAW;AAC5C,QAAM,gBAAgB,QAAQ,IAAI,YAAY;AAE9C,QAAM,WAAqB;AAAA,IACzB;AAAA,IACA,gBAAgB,kBAAkB;AAAA,IAClC,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,gBAAgB,kBAAkB,oBAAoB;AAAA,EACxD;AAEA,MAAI,CAAC,OAAO;AACV,UAAM,YAAY,MAAM,GACrB,WAAW,mBAA0B,EACrC,OAAO,CAAC,IAAW,CAAC,EACpB,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,eAAsB,MAAM,IAAW,EAC7C,MAAM,2CAAoD,IAAI,EAAE,EAChE,MAAM,qCAA8C,YAAY,IAAI,EAAE,EACtE,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,2CAAoD,kBAAkB,oBAAoB,IAAI,EAAE,EACtG,iBAAiB;AACpB,QAAI,WAAW;AACb,aAAO;AAAA,QACL,WAAW;AAAA,QACX,OAAO;AAAA,QACP,cAAc,CAAC;AAAA,QACf,QAAQ,CAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,MAAI,eAAe;AACjB,UAAM,uBAAuB,IAAI;AAAA,MAC/B;AAAA,MACA,gBAAgB,SAAS,kBAAkB;AAAA,MAC3C,UAAU,SAAS,YAAY;AAAA,MAC/B,sBAAsB,SAAS,kBAAkB;AAAA,IACnD,CAAC;AAAA,EACH;AAEA,QAAM,WAAW,CAAC,aAA4B,aAA4B,GAAG,eAAe,UAAU,IAAI,YAAY,UAAU;AAEhI,QAAM,iBAAiB,CAA+C,MAAc;AAClF,QAAI,QAAQ;AACZ,QAAI,cAAe,SAAQ,MAAM,MAAM,gBAAuB,MAAM,IAAW;AAC/E,QAAI,aAAa,UAAa,cAAc;AAC1C,cAAQ,aAAa,OACjB,MAAM,MAAM,eAAsB,MAAM,IAAW,IACnD,MAAM,MAAM,eAAsB,KAAK,QAAQ;AAAA,IACrD;AACA,QAAI,mBAAmB,UAAa,WAAW;AAC7C,cAAQ,mBAAmB,OACvB,MAAM,MAAM,qBAA4B,MAAM,IAAW,IACzD,MAAM,MAAM,qBAA4B,KAAK,cAAc;AAAA,IACjE;AACA,QAAI,mBAAmB,mBAAmB,MAAM;AAC9C,cAAQ,MAAM,MAAM,qCAA8C,iBAAiB,OAAO,cAAc,EAAE;AAAA,IAC5G;AACA,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,oBAAI,IAAwB;AAC/C,QAAM,oBAAoB,CAAC,aAA4B,UAAyB,UAAkB;AAChG,UAAM,MAAM,SAAS,aAAa,QAAQ;AAC1C,eAAW,IAAI,KAAK,EAAE,UAAU,aAAa,gBAAgB,UAAU,MAAM,CAAC;AAAA,EAChF;AAEA,QAAM,gBAAgB,gBAAgB,aAAa;AACnD,QAAM,aAAa,aAAa,mBAAmB;AAEnD,MAAI,iBAAiB,YAAY;AAC/B,QAAI,aAAa;AAAA,MACf,GAAG,WAAW,GAAG,KAAK,OAAc,EAAE,OAAO,cAAsB,GAAG,OAAO,CAAC;AAAA,IAChF;AACA,QAAI,eAAe;AACjB,mBAAa,WAAW,OAAO,0BAAiC,EAAE,QAAQ,aAAoB;AAAA,IAChG;AACA,QAAI,YAAY;AACd,mBAAa,WAAW,OAAO,sCAA6C,EAAE,QAAQ,mBAA0B;AAAA,IAClH;AACA,UAAM,OAAO,MAAM,WAAW,QAAQ;AACtC,eAAW,OAAO,MAAM;AACtB,YAAM,eAAe,gBACf,KAAa,aAAa,OAC3B,aAAa,SAAY,OAAO,YAAY;AACjD,YAAM,YAAY,aACZ,KAAa,mBAAmB,OACjC,mBAAmB,SAAY,OAAO,kBAAkB;AAC7D,wBAAkB,cAAc,WAAW,SAAU,KAAa,KAAK,CAAC;AAAA,IAC1E;AAAA,EACF,OAAO;AACL,UAAM,MAAM,MAAM;AAAA,MAChB,GAAG,WAAW,GAAG,KAAK,OAAc,EAAE,OAAO,cAAsB,GAAG,OAAO,CAAC;AAAA,IAChF,EAAE,iBAAiB;AACnB,UAAM,eAAe,aAAa,SAAY,OAAO,YAAY;AACjE,UAAM,YAAY,mBAAmB,SAAY,OAAO,kBAAkB;AAC1E,sBAAkB,cAAc,WAAW,SAAS,KAAK,KAAK,CAAC;AAAA,EACjE;AAEA,QAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,UAAU,OAAO,OAAO,SAAS,MAAM,KAAK,IAAI,MAAM,QAAQ,IAAI,CAAC;AAC9H,QAAM,WAAW,IAAI,UAAU,cAAc,EAAE,YAAY,MAAM,CAAC;AAClE,QAAM,SAAS,MAAM,GAClB,WAAW,mBAA0B,EACrC,OAAO,CAAC,YAAmB,CAAC,EAC5B,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,mBAA0B,MAAM,IAAW,EACjD,MAAM,qCAA8C,YAAY,IAAI,EAAE,EACtE,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,2CAAoD,kBAAkB,oBAAoB,IAAI,EAAE,EACtG,QAAQ,cAAqB,MAAM,EACnC,iBAAiB;AACpB,QAAM,eAAe,QAAQ,aAAa,IAAI,KAAK,OAAO,UAAU,IAAI,oBAAI,KAAK;AACjF,QAAM,YAAY,gBAAgB,IAAI,UAAU,IAC5C,CAAC,QAAgB,OAAO,IAAI,EAAE,IAC9B;AAEJ,QAAM,iBAAwD,CAAC;AAC/D,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,mBAAe,WAAW,OAAO,QAAQ;AAAA,EAC3C;AACA,MAAI,mBAAmB,UAAa,mBAAmB,MAAM;AAC3D,mBAAe,QAAQ,OAAO,cAAc;AAAA,EAC9C;AAEA,QAAM,eAAe,MAAM,KAAK,WAAW,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,IACnE,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,EAAE;AACF,QAAM,eAAe,MAAM;AAAA,IACzB,IAAI,IAAI,aAAa,IAAI,CAAC,UAAU,MAAM,YAAY,IAAI,CAAC;AAAA,EAC7D;AAEA,MAAI,YAAY;AAChB,MAAI,SAAwB;AAC5B,MAAI,YAAY;AAChB,QAAM,cAAc,kCAAkC;AAEtD,WAAS,aAAa,EAAE,WAAW,OAAO,WAAW,EAAE,CAAC;AAExD,MAAI,eAAe;AACjB,QAAI,OAAO;AACT,UAAI;AACF,YAAI,aAAa,GACd,WAAW,gBAAuB,EAClC,MAAM,eAAsB,KAAK,UAAU;AAC9C,YAAI,aAAa,QAAW;AAC1B,uBAAa,WAAW,MAAM,qCAA8C,YAAY,IAAI,EAAE;AAAA,QAChG;AACA,YAAI,mBAAmB,QAAW;AAChC,uBAAa,WAAW,MAAM,2CAAoD,kBAAkB,IAAI,EAAE;AAAA,QAC5G;AACA,cAAM,WAAW,QAAQ;AAAA,MAC3B,SAAS,OAAO;AACd,eAAO,KAAK,mDAAmD;AAAA,UAC7D;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,CAAC;AAAA,MACH;AAEA,UAAI,iBAAiB,UAAU;AAC7B,YAAI,aAAa,QAAW;AAC1B,gBAAM,UAAmC;AAAA,YACvC;AAAA,YACA,UAAU,YAAY;AAAA,UACxB;AACA,cAAI,mBAAmB,OAAW,SAAQ,iBAAiB,kBAAkB;AAC7E,cAAI;AACF,kBAAM,SAAS,UAAU,+BAA+B,OAAO;AAAA,UACjE,SAAS,KAAK;AACZ,mBAAO,KAAK,qDAAqD;AAAA,cAC/D;AAAA,cACA,UAAU,YAAY;AAAA,cACtB,gBAAgB,kBAAkB;AAAA,cAClC,OAAO,eAAe,QAAQ,IAAI,UAAU;AAAA,YAC9C,CAAC;AAAA,UACH;AAAA,QACF,OAAO;AACL,iBAAO,KAAK,gEAAgE;AAAA,YAC1E;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ,KAAK,IAAI;AACvB,eAAW,SAAS,WAAW,OAAO,GAAG;AACvC,YAAM,MAAM,GAAG,UAAU,IAAI,SAAS,MAAM,UAAU,MAAM,cAAc,CAAC;AAC3E,YAAM,OAAO,kBAAkB,IAAI,GAAG,KAAK;AAC3C,UAAI,SAAS,QAAQ,QAAQ,8BAA8B;AACzD,cAAM,oBAAoB,IAAI;AAAA,UAC5B;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,aAAa;AAAA,QACf,GAAG;AAAA,UACD,WAAW,MAAM;AAAA,UACjB,cAAc;AAAA,UACd,aAAa,gBAAgB,IAAI;AAAA,QACnC,CAAC;AACD,0BAAkB,IAAI,KAAK,KAAK;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,WAAO,MAAM;AACX,UAAI,QAAQ;AAAA,QACV,GACG,WAAW,GAAG,KAAK,OAAc,EACjC,UAAU,GAAU,EACpB,QAAQ,QAAe,KAAK,EAC5B,MAAM,SAAS;AAAA,MACpB;AACA,UAAI,WAAW,MAAM;AACnB,gBAAQ,MAAM,MAAM,QAAe,KAAK,MAAM;AAAA,MAChD;AACA,YAAM,OAAO,MAAM,MAAM,QAAQ;AACjC,UAAI,CAAC,KAAK,OAAQ;AAElB,YAAM,aAAa,+BAA+B,EAAS;AAC3D,YAAM,cAAc,oBAAI,IAAkC;AAC1D,YAAM,aAAa,OACjB,cACA,KACA,UACG;AACH,eAAO,MAAM;AAAA,UACX;AAAA,UACA;AAAA,UACA,EAAE,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,UACjF;AAAA,QACF;AAAA,MACF;AACA,YAAM,aAAa,OACjB,cACA,KACA,UACG;AACH,cAAM,SAAS,MAAM;AAAA,UACnB;AAAA,UACA;AAAA,UACA,EAAE,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,UACjF;AAAA,UACA;AAAA,QACF;AACA,YAAI,qBAAqB,GAAG;AAC1B,iBAAO,MAAM,mBAAmB,gCAAgC,cAAc,QAAmC,KAAK,CAAC;AAAA,QACzH;AACA,eAAO;AAAA,MACT;AAEA,YAAM,cAAc,MAAM,iBAAiB,IAAI,YAAY,MAAM,gBAAgB,EAAE,sBAAsB,WAAW,YAAY,WAAW,CAAC;AAC5I,mCAA6B,aAAa,WAAW;AAIrD,UAAI,YAAY,YAAY,KAAK,YAAY,YAAY,GAAG;AAC1D,cAAM,IAAI,0BAA0B,YAAY,WAAW;AAAA,MAC7D;AAEA,YAAM,gBAAgB,IAAI,IAAI,YAAY,eAAe;AACzD,YAAM,cAAc,cAAc,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,cAAc,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI;AAEpG,YAAM,iBAAiB,oBAAI,IAAuF;AAClH,iBAAW,OAAO,aAAa;AAC7B,cAAM,cAAc,aAAa,SAC7B,YAAY,OACX,eAAiB,IAAe,aAAa,OAAQ;AAC1D,cAAM,WAAW,mBAAmB,SAChC,kBAAkB,OACjB,YAAc,IAAe,mBAAmB,OAAS,YAAY,UAAU,GAAG,KAAK,OAAO;AACnG,cAAM,MAAM,SAAS,eAAe,MAAM,YAAY,IAAI;AAC1D,cAAM,gBAAgB,eAAe,IAAI,GAAG;AAC5C,YAAI,cAAe,eAAc,SAAS;AAAA,YACrC,gBAAe,IAAI,KAAK;AAAA,UAC3B,UAAU,eAAe;AAAA,UACzB,gBAAgB,YAAY;AAAA,UAC5B,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,UAAI,eAAe,OAAO,GAAG;AAC3B,cAAM;AAAA,UACJ;AAAA,UACA,MAAM,KAAK,eAAe,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,YAClD;AAAA,YACA,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,aAAa;AAAA,YACb,WAAW;AAAA,YACX,YAAY,MAAM;AAAA,UACpB,EAAE;AAAA,QACJ;AAAA,MACF;AAEA,UAAI,iBAAiB,UAAU;AAC7B,cAAM,QAAQ;AAAA,UACZ,YAAY,IAAI,CAAC,QAAQ;AACvB,kBAAM,WAAW,mBAAmB,SAChC,kBAAkB,OAClB,YACI,IAAe,mBAAmB,OACnC,YAAY,UAAU,GAAG,KAAK,OAAO;AAC5C,kBAAM,cAAc,aAAa,SAC7B,YAAY,OACX,eAAiB,IAAe,aAAa,OAAQ;AAC1D,mBAAO,SACJ,UAAU,6BAA6B;AAAA,cACtC;AAAA,cACA,UAAU,OAAO,IAAI,EAAE;AAAA,cACvB,gBAAgB;AAAA,cAChB,UAAU;AAAA,YACZ,CAAC,EACA,MAAM,MAAM,MAAS;AAAA,UAC1B,CAAC;AAAA,QACH;AAAA,MACF;AAEA,mBAAa,YAAY;AACzB,eAAS,OAAO,KAAK,KAAK,SAAS,CAAC,EAAG,EAAE;AACzC,eAAS,aAAa,EAAE,WAAW,OAAO,WAAW,YAAY,QAAQ,CAAC;AAC1E,YAAM,kBAAkB,IAAI,UAAU,YAAY,OAAO;AAAA,IAC3D;AAKA,UAAM,kBAAkB,YAAY;AACpC,QAAI,gBAAgB,SAAS,sBAAsB;AACjD,aAAO,KAAK,yDAAyD;AAAA,QACnE;AAAA,QACA,eAAe,gBAAgB;AAAA,MACjC,CAAC;AAAA,IACH,OAAO;AACL,YAAM,aAAa,IAAI;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA,gBAAgB,kBAAkB,iBAAiB;AAAA,QACnD,gBAAgB,kBAAkB,oBAAoB;AAAA,QACtD,WAAW;AAAA,QACX,kBAAkB;AAAA,MACpB,CAAC;AAAA,IACH;AAEA,QAAI,SAAS,kBAAkB,CAAC,mBAAmB,mBAAmB,OAAO;AAC3E,UAAI;AACF,cAAM,cAAc,cAAc;AAAA,UAChC,UAAU;AAAA,UACV;AAAA,UACA;AAAA,UACA,WAAW;AAAA,QACb,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,KAAK,gDAAgD;AAAA,UAC1D;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,eAAW,SAAS,cAAc;AAChC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,aAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAKA,QAAI,YAAY,sBAAsB,GAAG;AACvC,aAAO,KAAK,6CAA6C;AAAA,QACvD;AAAA,QACA,SAAS,YAAY;AAAA,MACvB,CAAC;AAAA,IACH;AACA,iCAA6B,YAAY,WAAW;AAAA,EACtD,SAAS,OAAO;AACd,gBAAY;AACZ,UAAM;AAAA,EACR,UAAE;AAGA,UAAM,YAAY,IAAI,UAAU,YAAY,EAAE,QAAQ,SAAS,IAAI,CAAC,CAAC;AAAA,EACvE;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { resolveRegisteredEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { decryptIndexDocForSearch, encryptIndexDocForStorage } from '@open-mercato/shared/lib/encryption/indexDoc'\nimport {\n  upsertIndexBatch,\n  assertIndexBatchWritesLanded,\n  createEmptyUpsertIndexBatchResult,\n  mergeUpsertIndexBatchResults,\n  QueryIndexBatchWriteError,\n  type AnyRow,\n} from './batch'\nimport { refreshCoverageSnapshot, writeCoverageCounts, applyCoverageAdjustments } from './coverage'\nimport { prepareJob, updateJobProgress, finalizeJob, type JobScope } from './jobs'\nimport { purgeOrphans } from './stale'\nimport type { VectorIndexService } from '@open-mercato/search/vector'\nimport { isSearchDebugEnabled } from './search-tokens'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('query_index').child({ component: 'reindexer' })\n\nexport type ReindexJobOptions = {\n  entityType: string\n  tenantId?: string | null\n  organizationId?: string | null\n  force?: boolean\n  batchSize?: number\n  emitVectorizeEvents?: boolean\n  eventBus?: {\n    emitEvent(event: string, payload: any, options?: any): Promise<void>\n  }\n  partitionCount?: number\n  partitionIndex?: number\n  resetCoverage?: boolean\n  onProgress?: (info: { processed: number; total: number; chunkSize: number }) => void\n  vectorService?: VectorIndexService | null\n}\n\nexport type ReindexJobResult = {\n  processed: number\n  total: number\n  tenantScopes: Array<string | null>\n  scopes: Array<{ tenantId: string | null; organizationId: string | null }>\n}\n\nexport const DEFAULT_REINDEX_PARTITIONS = 5\nconst DEFAULT_BATCH_SIZE = 500\n/**\n * Above this many failed records the purge exclusion list stops being a sane query, so\n * the purge is skipped entirely instead. Failing closed keeps stale rows; the alternative\n * deletes index entries the run failed to rebuild.\n */\nconst MAX_PURGE_EXCLUSIONS = 1000\nconst deriveOrgFromId = new Set<string>(['directory:organization'])\nconst COVERAGE_REFRESH_THROTTLE_MS = 5 * 60 * 1000\nconst lastCoverageReset = new Map<string, number>()\n\nconst REINDEX_DECRYPT_DEBUG_KEYS = ['display_name', 'first_name', 'last_name', 'brand_name', 'legal_name', 'primary_email', 'primary_phone'] as const\n\nexport type ReindexDecryptDebugPayload = {\n  entityType: string\n  tenantId: string | null\n  organizationId: string | null\n  keys: string[]\n}\n\nexport function buildReindexDecryptDebugPayload(\n  entityType: string,\n  doc: Record<string, unknown>,\n  scope: { organizationId: string | null; tenantId: string | null },\n): ReindexDecryptDebugPayload {\n  const presentKeys: string[] = []\n  for (const key of REINDEX_DECRYPT_DEBUG_KEYS) {\n    const value = doc[key]\n    if (key in doc && value != null && value !== '') presentKeys.push(key)\n  }\n  return {\n    entityType,\n    tenantId: scope.tenantId ?? null,\n    organizationId: scope.organizationId ?? null,\n    keys: presentKeys,\n  }\n}\n\nasync function cleanupLegacyJobScopes(\n  db: Kysely<any>,\n  options: {\n    entityType: string\n    organizationId: string | null\n    tenantId: string | null\n    activePartitionCount: number | null\n  },\n): Promise<void> {\n  await db\n    .deleteFrom('entity_index_jobs' as any)\n    .where('entity_type' as any, '=', options.entityType)\n    .where(sql<boolean>`organization_id is not distinct from ${options.organizationId}`)\n    .where(sql<boolean>`tenant_id is not distinct from ${options.tenantId}`)\n    .where(sql<boolean>`partition_count is distinct from ${options.activePartitionCount}`)\n    .execute()\n}\n\nfunction toNumber(value: unknown): number {\n  if (typeof value === 'number') return Number.isFinite(value) ? value : 0\n  if (typeof value === 'string') {\n    const parsed = Number(value)\n    return Number.isFinite(parsed) ? parsed : 0\n  }\n  return 0\n}\n\nasync function getColumnSet(db: Kysely<any>, tableName: string): Promise<Set<string>> {\n  try {\n    const rows = await db\n      .selectFrom('information_schema.columns' as any)\n      .select(['column_name' as any])\n      .where(sql<boolean>`table_schema = current_schema()`)\n      .where('table_name' as any, '=', tableName)\n      .execute() as Array<{ column_name: string }>\n    return new Set(rows.map((row) => String(row.column_name).toLowerCase()))\n  } catch {\n    return new Set<string>()\n  }\n}\n\nexport async function reindexEntity(\n  em: EntityManager,\n  options: ReindexJobOptions,\n): Promise<ReindexJobResult> {\n  const entityType = String(options?.entityType || '')\n  if (!entityType) {\n    return {\n      processed: 0,\n      total: 0,\n      tenantScopes: [],\n      scopes: [],\n    }\n  }\n  const tenantIdInput = options?.tenantId\n  const tenantId = tenantIdInput === 'undefined' ? undefined : tenantIdInput\n  const organizationIdInput = options?.organizationId\n  const organizationId = organizationIdInput === 'undefined' ? undefined : organizationIdInput\n  const force = options?.force === true\n  const batchSize = Number.isFinite(options?.batchSize) && options!.batchSize! > 0\n    ? Math.max(1, Math.trunc(options!.batchSize!))\n    : DEFAULT_BATCH_SIZE\n  const emitVectorize = options?.emitVectorizeEvents === true\n  const eventBus = options?.eventBus\n  const vectorService = options?.vectorService ?? null\n  const partitionCountRaw = Number.isFinite(options?.partitionCount)\n    ? Math.max(1, Math.trunc(options!.partitionCount!))\n    : 1\n  const usingPartitions = partitionCountRaw > 1\n  const partitionIndexRaw = Number.isFinite(options?.partitionIndex)\n    ? Math.max(0, Math.trunc(options!.partitionIndex!))\n    : 0\n  const partitionIndex = usingPartitions\n    ? Math.min(partitionIndexRaw, partitionCountRaw - 1)\n    : null\n  const resetCoverage = options?.resetCoverage ?? (!usingPartitions || partitionIndex === 0)\n\n  const db = (em as any).getKysely() as Kysely<any>\n  // Resolve the source table strictly via registered MikroORM metadata. We must\n  // never fall back to a pluralized guess derived from the caller-supplied id\n  // here: doing so would let a principal with `query_index.reindex` point the\n  // reindexer at arbitrary tables (e.g. `auth_users`, `users`) and read their\n  // rows into the index, bypassing tenant scoping and entity-level encryption.\n  const table = resolveRegisteredEntityTableName(em, entityType)\n  if (!table || entityType === 'query_index:search_token' || table === 'search_tokens') {\n    if (!table) {\n      logger.warn('Refusing to reindex unregistered entity type', {\n        entityType,\n      })\n    }\n    return {\n      processed: 0,\n      total: 0,\n      tenantScopes: [],\n      scopes: [],\n    }\n  }\n  const columns = await getColumnSet(db, table)\n  const hasOrgCol = columns.has('organization_id')\n  const hasTenantCol = columns.has('tenant_id')\n  const hasDeletedCol = columns.has('deleted_at')\n\n  const jobScope: JobScope = {\n    entityType,\n    organizationId: organizationId ?? null,\n    tenantId: tenantId ?? null,\n    partitionIndex,\n    partitionCount: usingPartitions ? partitionCountRaw : null,\n  }\n\n  if (!force) {\n    const activeJob = await db\n      .selectFrom('entity_index_jobs' as any)\n      .select(['id' as any])\n      .where('entity_type' as any, '=', entityType)\n      .where('finished_at' as any, 'is', null as any)\n      .where(sql<boolean>`organization_id is not distinct from ${null}`)\n      .where(sql<boolean>`tenant_id is not distinct from ${tenantId ?? null}`)\n      .where(sql<boolean>`partition_index is not distinct from ${partitionIndex}`)\n      .where(sql<boolean>`partition_count is not distinct from ${usingPartitions ? partitionCountRaw : null}`)\n      .executeTakeFirst()\n    if (activeJob) {\n      return {\n        processed: 0,\n        total: 0,\n        tenantScopes: [],\n        scopes: [],\n      }\n    }\n  }\n\n  if (resetCoverage) {\n    await cleanupLegacyJobScopes(db, {\n      entityType,\n      organizationId: jobScope.organizationId ?? null,\n      tenantId: jobScope.tenantId ?? null,\n      activePartitionCount: jobScope.partitionCount ?? null,\n    })\n  }\n\n  const scopeKey = (tenantValue: string | null, orgValue: string | null) => `${tenantValue ?? '__null__'}|${orgValue ?? '__null__'}`\n\n  const applyBaseWhere = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n    let chain = q\n    if (hasDeletedCol) chain = chain.where('b.deleted_at' as any, 'is', null as any)\n    if (tenantId !== undefined && hasTenantCol) {\n      chain = tenantId === null\n        ? chain.where('b.tenant_id' as any, 'is', null as any)\n        : chain.where('b.tenant_id' as any, '=', tenantId)\n    }\n    if (organizationId !== undefined && hasOrgCol) {\n      chain = organizationId === null\n        ? chain.where('b.organization_id' as any, 'is', null as any)\n        : chain.where('b.organization_id' as any, '=', organizationId)\n    }\n    if (usingPartitions && partitionIndex !== null) {\n      chain = chain.where(sql<boolean>`mod(abs(hashtext(b.id::text)), ${partitionCountRaw}) = ${partitionIndex}`)\n    }\n    return chain\n  }\n\n  type ScopeStats = { tenantId: string | null; organizationId: string | null; count: number }\n  const baseCounts = new Map<string, ScopeStats>()\n  const registerBaseCount = (tenantValue: string | null, orgValue: string | null, count: number) => {\n    const key = scopeKey(tenantValue, orgValue)\n    baseCounts.set(key, { tenantId: tenantValue, organizationId: orgValue, count })\n  }\n\n  const groupByTenant = hasTenantCol && tenantId === undefined\n  const groupByOrg = hasOrgCol && organizationId === undefined\n\n  if (groupByTenant || groupByOrg) {\n    let groupQuery = applyBaseWhere(\n      db.selectFrom(`${table} as b` as any).select(sql<number>`count(*)`.as('count')),\n    )\n    if (groupByTenant) {\n      groupQuery = groupQuery.select('b.tenant_id as tenant_id' as any).groupBy('b.tenant_id' as any)\n    }\n    if (groupByOrg) {\n      groupQuery = groupQuery.select('b.organization_id as organization_id' as any).groupBy('b.organization_id' as any)\n    }\n    const rows = await groupQuery.execute() as Array<Record<string, unknown>>\n    for (const row of rows) {\n      const bucketTenant = groupByTenant\n        ? ((row as any)?.tenant_id ?? null)\n        : (tenantId === undefined ? null : tenantId ?? null)\n      const bucketOrg = groupByOrg\n        ? ((row as any)?.organization_id ?? null)\n        : (organizationId === undefined ? null : organizationId ?? null)\n      registerBaseCount(bucketTenant, bucketOrg, toNumber((row as any)?.count))\n    }\n  } else {\n    const row = await applyBaseWhere(\n      db.selectFrom(`${table} as b` as any).select(sql<number>`count(*)`.as('count')),\n    ).executeTakeFirst() as { count: unknown } | undefined\n    const bucketTenant = tenantId === undefined ? null : tenantId ?? null\n    const bucketOrg = organizationId === undefined ? null : organizationId ?? null\n    registerBaseCount(bucketTenant, bucketOrg, toNumber(row?.count))\n  }\n\n  const total = Array.from(baseCounts.values()).reduce((acc, value) => acc + (Number.isFinite(value.count) ? value.count : 0), 0)\n  await prepareJob(db, jobScope, 'reindexing', { totalCount: total })\n  const jobRow = await db\n    .selectFrom('entity_index_jobs' as any)\n    .select(['started_at' as any])\n    .where('entity_type' as any, '=', entityType)\n    .where('organization_id' as any, 'is', null as any)\n    .where(sql<boolean>`tenant_id is not distinct from ${tenantId ?? null}`)\n    .where(sql<boolean>`partition_index is not distinct from ${partitionIndex}`)\n    .where(sql<boolean>`partition_count is not distinct from ${usingPartitions ? partitionCountRaw : null}`)\n    .orderBy('started_at' as any, 'desc')\n    .executeTakeFirst() as { started_at: Date | string } | undefined\n  const jobStartedAt = jobRow?.started_at ? new Date(jobRow.started_at) : new Date()\n  const deriveOrg = deriveOrgFromId.has(entityType)\n    ? (row: AnyRow) => String(row.id)\n    : undefined\n\n  const scopeOverrides: { tenantId?: string; orgId?: string } = {}\n  if (tenantId !== undefined && tenantId !== null) {\n    scopeOverrides.tenantId = String(tenantId)\n  }\n  if (organizationId !== undefined && organizationId !== null) {\n    scopeOverrides.orgId = String(organizationId)\n  }\n\n  const scopeEntries = Array.from(baseCounts.values()).map((entry) => ({\n    tenantId: entry.tenantId,\n    organizationId: entry.organizationId,\n  }))\n  const tenantScopes = Array.from(\n    new Set(scopeEntries.map((entry) => entry.tenantId ?? null)),\n  )\n\n  let processed = 0\n  let lastId: string | null = null\n  let jobFailed = false\n  const writeTotals = createEmptyUpsertIndexBatchResult()\n\n  options?.onProgress?.({ processed, total, chunkSize: 0 })\n\n  // Partitions run concurrently, so a scope-wide purge here would delete rows a sibling\n  // partition has already written and never rebuild them (the run still reports success\n  // because progress counts attempted writes). Each partition therefore purges only the\n  // slice it is about to rebuild, and every partition purges \u2014 restricting the purge to\n  // the coverage-resetting partition would otherwise leave the other slices' stale rows\n  // behind on a forced rebuild.\n  if (force && (resetCoverage || usingPartitions)) {\n    try {\n      let purgeQuery = db\n        .deleteFrom('entity_indexes' as any)\n        .where('entity_type' as any, '=', entityType)\n      if (tenantId !== undefined) {\n        purgeQuery = purgeQuery.where(sql<boolean>`tenant_id is not distinct from ${tenantId ?? null}`)\n      }\n      if (organizationId !== undefined) {\n        purgeQuery = purgeQuery.where(sql<boolean>`organization_id is not distinct from ${organizationId ?? null}`)\n      }\n      if (usingPartitions && partitionIndex !== null) {\n        purgeQuery = purgeQuery.where(\n          sql<boolean>`mod(abs(hashtext(entity_id::text)), ${partitionCountRaw}) = ${partitionIndex}`,\n        )\n      }\n      await purgeQuery.execute()\n    } catch (error) {\n      logger.warn('Failed to purge index rows before force reindex', {\n        entityType,\n        tenantId: tenantId ?? null,\n        organizationId: organizationId ?? null,\n        partitionIndex: usingPartitions ? partitionIndex : null,\n        error: error instanceof Error ? error.message : error,\n      })\n    }\n  }\n\n  // The vector purge is scope-wide and cannot be partitioned \u2014 the queued job deletes every\n  // vector for the scope. Emitting it from one partition while siblings are already queueing\n  // per-record vectorize jobs is the same race the row purge just had, so a partitioned run\n  // leaves it to the caller that owns the fan-out (`api/reindex.ts` queues it once, before\n  // dispatching any partition).\n  if (force && resetCoverage && !usingPartitions && emitVectorize && eventBus) {\n    if (tenantId !== undefined) {\n      const payload: Record<string, unknown> = {\n        entityType,\n        tenantId: tenantId ?? null,\n      }\n      if (organizationId !== undefined) payload.organizationId = organizationId ?? null\n      try {\n        await eventBus.emitEvent('query_index.vectorize_purge', payload)\n      } catch (err) {\n        logger.warn('Failed to queue vector purge before force reindex', {\n          entityType,\n          tenantId: tenantId ?? null,\n          organizationId: organizationId ?? null,\n          error: err instanceof Error ? err.message : err,\n        })\n      }\n    } else {\n      logger.warn('Skipping vector purge for force reindex without tenant scope', {\n        entityType,\n      })\n    }\n  }\n\n  if (resetCoverage) {\n    // Only meaningful for an unpartitioned run: `baseCounts` holds this partition's slice,\n    // so writing it as the scope's base count under-reports by the partition factor, and\n    // zeroing indexed_count scope-wide discards deltas siblings have already applied. The\n    // authoritative `refreshCoverageSnapshot` at the end of every partition owns the counts\n    // for partitioned runs.\n    const nowTs = Date.now()\n    for (const scope of usingPartitions ? [] : baseCounts.values()) {\n      const key = `${entityType}|${scopeKey(scope.tenantId, scope.organizationId)}`\n      const last = lastCoverageReset.get(key) ?? 0\n      if (force || nowTs - last >= COVERAGE_REFRESH_THROTTLE_MS) {\n        await writeCoverageCounts(em, {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          withDeleted: false,\n        }, {\n          baseCount: scope.count,\n          indexedCount: 0,\n          vectorCount: emitVectorize ? 0 : undefined,\n        })\n        lastCoverageReset.set(key, nowTs)\n      }\n    }\n  }\n\n  try {\n    while (true) {\n      let query = applyBaseWhere(\n        db\n          .selectFrom(`${table} as b` as any)\n          .selectAll('b' as any)\n          .orderBy('b.id' as any, 'asc')\n          .limit(batchSize),\n      )\n      if (lastId !== null) {\n        query = query.where('b.id' as any, '>', lastId)\n      }\n      const rows = await query.execute() as AnyRow[]\n      if (!rows.length) break\n\n      const encryption = resolveTenantEncryptionService(em as any)\n      const dekKeyCache = new Map<string | null, string | null>()\n      const encryptDoc = async (\n        targetEntity: string,\n        doc: Record<string, unknown>,\n        scope: { organizationId: string | null; tenantId: string | null },\n      ) => {\n        return await encryptIndexDocForStorage(\n          targetEntity,\n          doc,\n          { tenantId: scope.tenantId ?? null, organizationId: scope.organizationId ?? null },\n          encryption,\n        )\n      }\n      const decryptDoc = async (\n        targetEntity: string,\n        doc: Record<string, unknown>,\n        scope: { organizationId: string | null; tenantId: string | null },\n      ) => {\n        const result = await decryptIndexDocForSearch(\n          targetEntity,\n          doc,\n          { tenantId: scope.tenantId ?? null, organizationId: scope.organizationId ?? null },\n          encryption,\n          dekKeyCache,\n        )\n        if (isSearchDebugEnabled()) {\n          logger.debug('Reindex decrypt', buildReindexDecryptDebugPayload(targetEntity, result as Record<string, unknown>, scope))\n        }\n        return result\n      }\n\n      const batchResult = await upsertIndexBatch(db, entityType, rows, scopeOverrides, { deriveOrganizationId: deriveOrg, encryptDoc, decryptDoc })\n      mergeUpsertIndexBatchResults(writeTotals, batchResult)\n\n      // A whole batch failing is infrastructural (pool exhausted, disk full, KMS down),\n      // not a poison record. Abort now instead of grinding through the rest of the table.\n      if (batchResult.written === 0 && batchResult.attempted > 0) {\n        throw new QueryIndexBatchWriteError(entityType, writeTotals)\n      }\n\n      const failedInBatch = new Set(batchResult.failedRecordIds)\n      const writtenRows = failedInBatch.size ? rows.filter((row) => !failedInBatch.has(String(row.id))) : rows\n\n      const coverageDeltas = new Map<string, { tenantId: string | null; organizationId: string | null; delta: number }>()\n      for (const row of writtenRows) {\n        const scopeTenant = tenantId !== undefined\n          ? tenantId ?? null\n          : (hasTenantCol ? ((row as AnyRow).tenant_id ?? null) : null)\n        const scopeOrg = organizationId !== undefined\n          ? organizationId ?? null\n          : (hasOrgCol ? ((row as AnyRow).organization_id ?? null) : (deriveOrg ? deriveOrg(row) ?? null : null))\n        const key = scopeKey(scopeTenant ?? null, scopeOrg ?? null)\n        const existingDelta = coverageDeltas.get(key)\n        if (existingDelta) existingDelta.delta += 1\n        else coverageDeltas.set(key, {\n          tenantId: scopeTenant ?? null,\n          organizationId: scopeOrg ?? null,\n          delta: 1,\n        })\n      }\n      if (coverageDeltas.size > 0) {\n        await applyCoverageAdjustments(\n          em,\n          Array.from(coverageDeltas.values()).map((entry) => ({\n            entityType,\n            tenantId: entry.tenantId,\n            organizationId: entry.organizationId,\n            withDeleted: false,\n            deltaBase: 0,\n            deltaIndex: entry.delta,\n          })),\n        )\n      }\n\n      if (emitVectorize && eventBus) {\n        await Promise.all(\n          writtenRows.map((row) => {\n            const scopeOrg = organizationId !== undefined\n              ? organizationId ?? null\n              : hasOrgCol\n                ? ((row as AnyRow).organization_id ?? null)\n                : (deriveOrg ? deriveOrg(row) ?? null : null)\n            const scopeTenant = tenantId !== undefined\n              ? tenantId ?? null\n              : (hasTenantCol ? ((row as AnyRow).tenant_id ?? null) : null)\n            return eventBus\n              .emitEvent('query_index.vectorize_one', {\n                entityType,\n                recordId: String(row.id),\n                organizationId: scopeOrg,\n                tenantId: scopeTenant,\n              })\n              .catch(() => undefined)\n          }),\n        )\n      }\n\n      processed += batchResult.written\n      lastId = String(rows[rows.length - 1]!.id)\n      options?.onProgress?.({ processed, total, chunkSize: batchResult.written })\n      await updateJobProgress(db, jobScope, batchResult.written)\n    }\n\n    // Records this run failed to write still look untouched to the purge predicate, so\n    // without the exclusion the purge would delete the index rows it just failed to\n    // rebuild \u2014 turning a stale entry into a missing one.\n    const purgeExclusions = writeTotals.failedRecordIds\n    if (purgeExclusions.length > MAX_PURGE_EXCLUSIONS) {\n      logger.warn('Skipping orphan purge after widespread write failures', {\n        entityType,\n        failedRecords: purgeExclusions.length,\n      })\n    } else {\n      await purgeOrphans(db, {\n        entityType,\n        tenantId,\n        organizationId,\n        partitionIndex: usingPartitions ? partitionIndex : null,\n        partitionCount: usingPartitions ? partitionCountRaw : null,\n        startedAt: jobStartedAt,\n        excludeRecordIds: purgeExclusions,\n      })\n    }\n\n    if (force && vectorService && (!usingPartitions || partitionIndex === null)) {\n      try {\n        await vectorService.removeOrphans({\n          entityId: entityType,\n          tenantId,\n          organizationId,\n          olderThan: jobStartedAt,\n        })\n      } catch (error) {\n        logger.warn('Failed to prune vector orphans after reindex', {\n          entityType,\n          tenantId: tenantId ?? null,\n          organizationId: organizationId ?? null,\n          error: error instanceof Error ? error.message : error,\n        })\n      }\n    }\n\n    for (const scope of scopeEntries) {\n      await refreshCoverageSnapshot(\n        em,\n        {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          withDeleted: false,\n        },\n      )\n    }\n\n    // Deliberately after the coverage refresh: the authoritative recount is what keeps\n    // indexed_count truthful, and it is most worth having when a run has just failed.\n    // Throwing here fails the queue job so the loss is visible instead of silent.\n    if (writeTotals.searchTokenFailures > 0) {\n      logger.warn('Search token writes failed during reindex', {\n        entityType,\n        batches: writeTotals.searchTokenFailures,\n      })\n    }\n    assertIndexBatchWritesLanded(entityType, writeTotals)\n  } catch (error) {\n    jobFailed = true\n    throw error\n  } finally {\n    // Still finalized on failure: the scope stays wedged behind the active-job guard\n    // while finished_at is null. The status carries the outcome instead.\n    await finalizeJob(db, jobScope, jobFailed ? { status: 'failed' } : {})\n  }\n\n  return {\n    processed,\n    total,\n    scopes: scopeEntries,\n    tenantScopes,\n  }\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,wCAAwC;AACjD,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B,iCAAiC;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,yBAAyB,qBAAqB,gCAAgC;AACvF,SAAS,YAAY,mBAAmB,mBAAkC;AAC1E,SAAS,oBAAoB;AAE7B,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AA0BpE,MAAM,6BAA6B;AAC1C,MAAM,qBAAqB;AAM3B,MAAM,uBAAuB;AAC7B,MAAM,kBAAkB,oBAAI,IAAY,CAAC,wBAAwB,CAAC;AAClE,MAAM,+BAA+B,IAAI,KAAK;AAC9C,MAAM,oBAAoB,oBAAI,IAAoB;AAElD,MAAM,6BAA6B,CAAC,gBAAgB,cAAc,aAAa,cAAc,cAAc,iBAAiB,eAAe;AASpI,SAAS,gCACd,YACA,KACA,OAC4B;AAC5B,QAAM,cAAwB,CAAC;AAC/B,aAAW,OAAO,4BAA4B;AAC5C,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,OAAO,OAAO,SAAS,QAAQ,UAAU,GAAI,aAAY,KAAK,GAAG;AAAA,EACvE;AACA,SAAO;AAAA,IACL;AAAA,IACA,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,MAAM;AAAA,EACR;AACF;AAEA,eAAe,uBACb,IACA,SAMe;AACf,QAAM,GACH,WAAW,mBAA0B,EACrC,MAAM,eAAsB,KAAK,QAAQ,UAAU,EACnD,MAAM,2CAAoD,QAAQ,cAAc,EAAE,EAClF,MAAM,qCAA8C,QAAQ,QAAQ,EAAE,EACtE,MAAM,uCAAgD,QAAQ,oBAAoB,EAAE,EACpF,QAAQ;AACb;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,OAAO,KAAK;AAC3B,WAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,eAAe,aAAa,IAAiB,WAAyC;AACpF,MAAI;AACF,UAAM,OAAO,MAAM,GAChB,WAAW,4BAAmC,EAC9C,OAAO,CAAC,aAAoB,CAAC,EAC7B,MAAM,oCAA6C,EACnD,MAAM,cAAqB,KAAK,SAAS,EACzC,QAAQ;AACX,WAAO,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,OAAO,IAAI,WAAW,EAAE,YAAY,CAAC,CAAC;AAAA,EACzE,QAAQ;AACN,WAAO,oBAAI,IAAY;AAAA,EACzB;AACF;AAEA,eAAsB,cACpB,IACA,SAC2B;AAC3B,QAAM,aAAa,OAAO,SAAS,cAAc,EAAE;AACnD,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO;AAAA,MACP,cAAc,CAAC;AAAA,MACf,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,QAAM,gBAAgB,SAAS;AAC/B,QAAM,WAAW,kBAAkB,cAAc,SAAY;AAC7D,QAAM,sBAAsB,SAAS;AACrC,QAAM,iBAAiB,wBAAwB,cAAc,SAAY;AACzE,QAAM,QAAQ,SAAS,UAAU;AACjC,QAAM,YAAY,OAAO,SAAS,SAAS,SAAS,KAAK,QAAS,YAAa,IAC3E,KAAK,IAAI,GAAG,KAAK,MAAM,QAAS,SAAU,CAAC,IAC3C;AACJ,QAAM,gBAAgB,SAAS,wBAAwB;AACvD,QAAM,WAAW,SAAS;AAC1B,QAAM,gBAAgB,SAAS,iBAAiB;AAChD,QAAM,oBAAoB,OAAO,SAAS,SAAS,cAAc,IAC7D,KAAK,IAAI,GAAG,KAAK,MAAM,QAAS,cAAe,CAAC,IAChD;AACJ,QAAM,kBAAkB,oBAAoB;AAC5C,QAAM,oBAAoB,OAAO,SAAS,SAAS,cAAc,IAC7D,KAAK,IAAI,GAAG,KAAK,MAAM,QAAS,cAAe,CAAC,IAChD;AACJ,QAAM,iBAAiB,kBACnB,KAAK,IAAI,mBAAmB,oBAAoB,CAAC,IACjD;AACJ,QAAM,gBAAgB,SAAS,kBAAkB,CAAC,mBAAmB,mBAAmB;AAExF,QAAM,KAAM,GAAW,UAAU;AAMjC,QAAM,QAAQ,iCAAiC,IAAI,UAAU;AAC7D,MAAI,CAAC,SAAS,eAAe,8BAA8B,UAAU,iBAAiB;AACpF,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,gDAAgD;AAAA,QAC1D;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO;AAAA,MACP,cAAc,CAAC;AAAA,MACf,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,QAAM,UAAU,MAAM,aAAa,IAAI,KAAK;AAC5C,QAAM,YAAY,QAAQ,IAAI,iBAAiB;AAC/C,QAAM,eAAe,QAAQ,IAAI,WAAW;AAC5C,QAAM,gBAAgB,QAAQ,IAAI,YAAY;AAE9C,QAAM,WAAqB;AAAA,IACzB;AAAA,IACA,gBAAgB,kBAAkB;AAAA,IAClC,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,gBAAgB,kBAAkB,oBAAoB;AAAA,EACxD;AAEA,MAAI,CAAC,OAAO;AACV,UAAM,YAAY,MAAM,GACrB,WAAW,mBAA0B,EACrC,OAAO,CAAC,IAAW,CAAC,EACpB,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,eAAsB,MAAM,IAAW,EAC7C,MAAM,2CAAoD,IAAI,EAAE,EAChE,MAAM,qCAA8C,YAAY,IAAI,EAAE,EACtE,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,2CAAoD,kBAAkB,oBAAoB,IAAI,EAAE,EACtG,iBAAiB;AACpB,QAAI,WAAW;AACb,aAAO;AAAA,QACL,WAAW;AAAA,QACX,OAAO;AAAA,QACP,cAAc,CAAC;AAAA,QACf,QAAQ,CAAC;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,MAAI,eAAe;AACjB,UAAM,uBAAuB,IAAI;AAAA,MAC/B;AAAA,MACA,gBAAgB,SAAS,kBAAkB;AAAA,MAC3C,UAAU,SAAS,YAAY;AAAA,MAC/B,sBAAsB,SAAS,kBAAkB;AAAA,IACnD,CAAC;AAAA,EACH;AAEA,QAAM,WAAW,CAAC,aAA4B,aAA4B,GAAG,eAAe,UAAU,IAAI,YAAY,UAAU;AAEhI,QAAM,iBAAiB,CAA+C,MAAc;AAClF,QAAI,QAAQ;AACZ,QAAI,cAAe,SAAQ,MAAM,MAAM,gBAAuB,MAAM,IAAW;AAC/E,QAAI,aAAa,UAAa,cAAc;AAC1C,cAAQ,aAAa,OACjB,MAAM,MAAM,eAAsB,MAAM,IAAW,IACnD,MAAM,MAAM,eAAsB,KAAK,QAAQ;AAAA,IACrD;AACA,QAAI,mBAAmB,UAAa,WAAW;AAC7C,cAAQ,mBAAmB,OACvB,MAAM,MAAM,qBAA4B,MAAM,IAAW,IACzD,MAAM,MAAM,qBAA4B,KAAK,cAAc;AAAA,IACjE;AACA,QAAI,mBAAmB,mBAAmB,MAAM;AAC9C,cAAQ,MAAM,MAAM,qCAA8C,iBAAiB,OAAO,cAAc,EAAE;AAAA,IAC5G;AACA,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,oBAAI,IAAwB;AAC/C,QAAM,oBAAoB,CAAC,aAA4B,UAAyB,UAAkB;AAChG,UAAM,MAAM,SAAS,aAAa,QAAQ;AAC1C,eAAW,IAAI,KAAK,EAAE,UAAU,aAAa,gBAAgB,UAAU,MAAM,CAAC;AAAA,EAChF;AAEA,QAAM,gBAAgB,gBAAgB,aAAa;AACnD,QAAM,aAAa,aAAa,mBAAmB;AAEnD,MAAI,iBAAiB,YAAY;AAC/B,QAAI,aAAa;AAAA,MACf,GAAG,WAAW,GAAG,KAAK,OAAc,EAAE,OAAO,cAAsB,GAAG,OAAO,CAAC;AAAA,IAChF;AACA,QAAI,eAAe;AACjB,mBAAa,WAAW,OAAO,0BAAiC,EAAE,QAAQ,aAAoB;AAAA,IAChG;AACA,QAAI,YAAY;AACd,mBAAa,WAAW,OAAO,sCAA6C,EAAE,QAAQ,mBAA0B;AAAA,IAClH;AACA,UAAM,OAAO,MAAM,WAAW,QAAQ;AACtC,eAAW,OAAO,MAAM;AACtB,YAAM,eAAe,gBACf,KAAa,aAAa,OAC3B,aAAa,SAAY,OAAO,YAAY;AACjD,YAAM,YAAY,aACZ,KAAa,mBAAmB,OACjC,mBAAmB,SAAY,OAAO,kBAAkB;AAC7D,wBAAkB,cAAc,WAAW,SAAU,KAAa,KAAK,CAAC;AAAA,IAC1E;AAAA,EACF,OAAO;AACL,UAAM,MAAM,MAAM;AAAA,MAChB,GAAG,WAAW,GAAG,KAAK,OAAc,EAAE,OAAO,cAAsB,GAAG,OAAO,CAAC;AAAA,IAChF,EAAE,iBAAiB;AACnB,UAAM,eAAe,aAAa,SAAY,OAAO,YAAY;AACjE,UAAM,YAAY,mBAAmB,SAAY,OAAO,kBAAkB;AAC1E,sBAAkB,cAAc,WAAW,SAAS,KAAK,KAAK,CAAC;AAAA,EACjE;AAEA,QAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,UAAU,OAAO,OAAO,SAAS,MAAM,KAAK,IAAI,MAAM,QAAQ,IAAI,CAAC;AAC9H,QAAM,WAAW,IAAI,UAAU,cAAc,EAAE,YAAY,MAAM,CAAC;AAClE,QAAM,SAAS,MAAM,GAClB,WAAW,mBAA0B,EACrC,OAAO,CAAC,YAAmB,CAAC,EAC5B,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,mBAA0B,MAAM,IAAW,EACjD,MAAM,qCAA8C,YAAY,IAAI,EAAE,EACtE,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,2CAAoD,kBAAkB,oBAAoB,IAAI,EAAE,EACtG,QAAQ,cAAqB,MAAM,EACnC,iBAAiB;AACpB,QAAM,eAAe,QAAQ,aAAa,IAAI,KAAK,OAAO,UAAU,IAAI,oBAAI,KAAK;AACjF,QAAM,YAAY,gBAAgB,IAAI,UAAU,IAC5C,CAAC,QAAgB,OAAO,IAAI,EAAE,IAC9B;AAEJ,QAAM,iBAAwD,CAAC;AAC/D,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,mBAAe,WAAW,OAAO,QAAQ;AAAA,EAC3C;AACA,MAAI,mBAAmB,UAAa,mBAAmB,MAAM;AAC3D,mBAAe,QAAQ,OAAO,cAAc;AAAA,EAC9C;AAEA,QAAM,eAAe,MAAM,KAAK,WAAW,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,IACnE,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,EAAE;AACF,QAAM,eAAe,MAAM;AAAA,IACzB,IAAI,IAAI,aAAa,IAAI,CAAC,UAAU,MAAM,YAAY,IAAI,CAAC;AAAA,EAC7D;AAEA,MAAI,YAAY;AAChB,MAAI,SAAwB;AAC5B,MAAI,YAAY;AAChB,QAAM,cAAc,kCAAkC;AAEtD,WAAS,aAAa,EAAE,WAAW,OAAO,WAAW,EAAE,CAAC;AAQxD,MAAI,UAAU,iBAAiB,kBAAkB;AAC/C,QAAI;AACF,UAAI,aAAa,GACd,WAAW,gBAAuB,EAClC,MAAM,eAAsB,KAAK,UAAU;AAC9C,UAAI,aAAa,QAAW;AAC1B,qBAAa,WAAW,MAAM,qCAA8C,YAAY,IAAI,EAAE;AAAA,MAChG;AACA,UAAI,mBAAmB,QAAW;AAChC,qBAAa,WAAW,MAAM,2CAAoD,kBAAkB,IAAI,EAAE;AAAA,MAC5G;AACA,UAAI,mBAAmB,mBAAmB,MAAM;AAC9C,qBAAa,WAAW;AAAA,UACtB,0CAAmD,iBAAiB,OAAO,cAAc;AAAA,QAC3F;AAAA,MACF;AACA,YAAM,WAAW,QAAQ;AAAA,IAC3B,SAAS,OAAO;AACd,aAAO,KAAK,mDAAmD;AAAA,QAC7D;AAAA,QACA,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,gBAAgB,kBAAkB,iBAAiB;AAAA,QACnD,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAOA,MAAI,SAAS,iBAAiB,CAAC,mBAAmB,iBAAiB,UAAU;AAC3E,QAAI,aAAa,QAAW;AAC1B,YAAM,UAAmC;AAAA,QACvC;AAAA,QACA,UAAU,YAAY;AAAA,MACxB;AACA,UAAI,mBAAmB,OAAW,SAAQ,iBAAiB,kBAAkB;AAC7E,UAAI;AACF,cAAM,SAAS,UAAU,+BAA+B,OAAO;AAAA,MACjE,SAAS,KAAK;AACZ,eAAO,KAAK,qDAAqD;AAAA,UAC/D;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,eAAe,QAAQ,IAAI,UAAU;AAAA,QAC9C,CAAC;AAAA,MACH;AAAA,IACF,OAAO;AACL,aAAO,KAAK,gEAAgE;AAAA,QAC1E;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,eAAe;AAMjB,UAAM,QAAQ,KAAK,IAAI;AACvB,eAAW,SAAS,kBAAkB,CAAC,IAAI,WAAW,OAAO,GAAG;AAC9D,YAAM,MAAM,GAAG,UAAU,IAAI,SAAS,MAAM,UAAU,MAAM,cAAc,CAAC;AAC3E,YAAM,OAAO,kBAAkB,IAAI,GAAG,KAAK;AAC3C,UAAI,SAAS,QAAQ,QAAQ,8BAA8B;AACzD,cAAM,oBAAoB,IAAI;AAAA,UAC5B;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,aAAa;AAAA,QACf,GAAG;AAAA,UACD,WAAW,MAAM;AAAA,UACjB,cAAc;AAAA,UACd,aAAa,gBAAgB,IAAI;AAAA,QACnC,CAAC;AACD,0BAAkB,IAAI,KAAK,KAAK;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,WAAO,MAAM;AACX,UAAI,QAAQ;AAAA,QACV,GACG,WAAW,GAAG,KAAK,OAAc,EACjC,UAAU,GAAU,EACpB,QAAQ,QAAe,KAAK,EAC5B,MAAM,SAAS;AAAA,MACpB;AACA,UAAI,WAAW,MAAM;AACnB,gBAAQ,MAAM,MAAM,QAAe,KAAK,MAAM;AAAA,MAChD;AACA,YAAM,OAAO,MAAM,MAAM,QAAQ;AACjC,UAAI,CAAC,KAAK,OAAQ;AAElB,YAAM,aAAa,+BAA+B,EAAS;AAC3D,YAAM,cAAc,oBAAI,IAAkC;AAC1D,YAAM,aAAa,OACjB,cACA,KACA,UACG;AACH,eAAO,MAAM;AAAA,UACX;AAAA,UACA;AAAA,UACA,EAAE,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,UACjF;AAAA,QACF;AAAA,MACF;AACA,YAAM,aAAa,OACjB,cACA,KACA,UACG;AACH,cAAM,SAAS,MAAM;AAAA,UACnB;AAAA,UACA;AAAA,UACA,EAAE,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,UACjF;AAAA,UACA;AAAA,QACF;AACA,YAAI,qBAAqB,GAAG;AAC1B,iBAAO,MAAM,mBAAmB,gCAAgC,cAAc,QAAmC,KAAK,CAAC;AAAA,QACzH;AACA,eAAO;AAAA,MACT;AAEA,YAAM,cAAc,MAAM,iBAAiB,IAAI,YAAY,MAAM,gBAAgB,EAAE,sBAAsB,WAAW,YAAY,WAAW,CAAC;AAC5I,mCAA6B,aAAa,WAAW;AAIrD,UAAI,YAAY,YAAY,KAAK,YAAY,YAAY,GAAG;AAC1D,cAAM,IAAI,0BAA0B,YAAY,WAAW;AAAA,MAC7D;AAEA,YAAM,gBAAgB,IAAI,IAAI,YAAY,eAAe;AACzD,YAAM,cAAc,cAAc,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,cAAc,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI;AAEpG,YAAM,iBAAiB,oBAAI,IAAuF;AAClH,iBAAW,OAAO,aAAa;AAC7B,cAAM,cAAc,aAAa,SAC7B,YAAY,OACX,eAAiB,IAAe,aAAa,OAAQ;AAC1D,cAAM,WAAW,mBAAmB,SAChC,kBAAkB,OACjB,YAAc,IAAe,mBAAmB,OAAS,YAAY,UAAU,GAAG,KAAK,OAAO;AACnG,cAAM,MAAM,SAAS,eAAe,MAAM,YAAY,IAAI;AAC1D,cAAM,gBAAgB,eAAe,IAAI,GAAG;AAC5C,YAAI,cAAe,eAAc,SAAS;AAAA,YACrC,gBAAe,IAAI,KAAK;AAAA,UAC3B,UAAU,eAAe;AAAA,UACzB,gBAAgB,YAAY;AAAA,UAC5B,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,UAAI,eAAe,OAAO,GAAG;AAC3B,cAAM;AAAA,UACJ;AAAA,UACA,MAAM,KAAK,eAAe,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,YAClD;AAAA,YACA,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,aAAa;AAAA,YACb,WAAW;AAAA,YACX,YAAY,MAAM;AAAA,UACpB,EAAE;AAAA,QACJ;AAAA,MACF;AAEA,UAAI,iBAAiB,UAAU;AAC7B,cAAM,QAAQ;AAAA,UACZ,YAAY,IAAI,CAAC,QAAQ;AACvB,kBAAM,WAAW,mBAAmB,SAChC,kBAAkB,OAClB,YACI,IAAe,mBAAmB,OACnC,YAAY,UAAU,GAAG,KAAK,OAAO;AAC5C,kBAAM,cAAc,aAAa,SAC7B,YAAY,OACX,eAAiB,IAAe,aAAa,OAAQ;AAC1D,mBAAO,SACJ,UAAU,6BAA6B;AAAA,cACtC;AAAA,cACA,UAAU,OAAO,IAAI,EAAE;AAAA,cACvB,gBAAgB;AAAA,cAChB,UAAU;AAAA,YACZ,CAAC,EACA,MAAM,MAAM,MAAS;AAAA,UAC1B,CAAC;AAAA,QACH;AAAA,MACF;AAEA,mBAAa,YAAY;AACzB,eAAS,OAAO,KAAK,KAAK,SAAS,CAAC,EAAG,EAAE;AACzC,eAAS,aAAa,EAAE,WAAW,OAAO,WAAW,YAAY,QAAQ,CAAC;AAC1E,YAAM,kBAAkB,IAAI,UAAU,YAAY,OAAO;AAAA,IAC3D;AAKA,UAAM,kBAAkB,YAAY;AACpC,QAAI,gBAAgB,SAAS,sBAAsB;AACjD,aAAO,KAAK,yDAAyD;AAAA,QACnE;AAAA,QACA,eAAe,gBAAgB;AAAA,MACjC,CAAC;AAAA,IACH,OAAO;AACL,YAAM,aAAa,IAAI;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA,gBAAgB,kBAAkB,iBAAiB;AAAA,QACnD,gBAAgB,kBAAkB,oBAAoB;AAAA,QACtD,WAAW;AAAA,QACX,kBAAkB;AAAA,MACpB,CAAC;AAAA,IACH;AAEA,QAAI,SAAS,kBAAkB,CAAC,mBAAmB,mBAAmB,OAAO;AAC3E,UAAI;AACF,cAAM,cAAc,cAAc;AAAA,UAChC,UAAU;AAAA,UACV;AAAA,UACA;AAAA,UACA,WAAW;AAAA,QACb,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,KAAK,gDAAgD;AAAA,UAC1D;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,eAAW,SAAS,cAAc;AAChC,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,aAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAKA,QAAI,YAAY,sBAAsB,GAAG;AACvC,aAAO,KAAK,6CAA6C;AAAA,QACvD;AAAA,QACA,SAAS,YAAY;AAAA,MACvB,CAAC;AAAA,IACH;AACA,iCAA6B,YAAY,WAAW;AAAA,EACtD,SAAS,OAAO;AACd,gBAAY;AACZ,UAAM;AAAA,EACR,UAAE;AAGA,UAAM,YAAY,IAAI,UAAU,YAAY,EAAE,QAAQ,SAAS,IAAI,CAAC,CAAC;AAAA,EACvE;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/query_index/lib/subscriber-scope.js

@@ -1,5 +1,6 @@
 import { getEntityIds } from "@open-mercato/shared/lib/encryption/entityIds";
 import { resolveRegisteredEntityTableName } from "@open-mercato/shared/lib/query/engine";
+import { listEntityMetadata } from "@open-mercato/shared/lib/db/entityMetadata";
 class QueryIndexScopeError extends Error {
   constructor(message) {
     super(message);
@@ -15,9 +16,7 @@ function resolveQueryIndexSourceMetadata(em, entityType) {
   if (!table) {
     throw new QueryIndexScopeError(`Query index entity type has no registered ORM table: ${entityType}`);
   }
-  const registry = em.getMetadata?.();
-  const allMetadataRaw = typeof registry?.getAll === "function" ? registry.getAll() : null;
-  const allMetadata = Array.isArray(allMetadataRaw) ? allMetadataRaw : allMetadataRaw instanceof Map ? Array.from(allMetadataRaw.values()) : Object.values(allMetadataRaw ?? {});
+  const allMetadata = listEntityMetadata(em);
   const metadata = allMetadata.find((candidate) => String(candidate.tableName ?? "") === table);
   if (!metadata) {
     throw new QueryIndexScopeError(`Query index entity metadata was not found for table: ${table}`);

package/dist/modules/query_index/lib/subscriber-scope.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/subscriber-scope.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getEntityIds } from '@open-mercato/shared/lib/encryption/entityIds'\nimport { resolveRegisteredEntityTableName } from '@open-mercato/shared/lib/query/engine'\n\nexport type QueryIndexScope = {\n  tenantId: string | null\n  organizationId: string | null\n}\n\nexport type QueryIndexSourceMetadata = {\n  table: string\n  organizationColumn: string | null\n  tenantColumn: string | null\n}\n\nexport type QueryIndexSourceScope =\n  | { kind: 'global' }\n  | { kind: 'missing' }\n  | { kind: 'row'; scope: QueryIndexScope }\n\ntype QueryIndexEntityMetadata = {\n  tableName?: unknown\n  properties?: Record<string, { fieldNames?: unknown }>\n}\n\nexport class QueryIndexScopeError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'QueryIndexScopeError'\n  }\n}\n\ntype ResolveRecordScopeInput = {\n  payloadTenantId: string | null | undefined\n  payloadOrganizationId: string | null | undefined\n  hasPayloadTenantId: boolean\n  hasPayloadOrganizationId: boolean\n  sourceScope: QueryIndexSourceScope\n}\n\ntype ResolveReindexScopeInput = {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n  allowAllTenants?: boolean\n}\n\nexport function resolveQueryIndexSourceMetadata(\n  em: EntityManager,\n  entityType: string,\n): QueryIndexSourceMetadata {\n  const registeredEntityIds = Object.values(getEntityIds(false)).flatMap((moduleEntities) => Object.values(moduleEntities ?? {}))\n  if (!registeredEntityIds.includes(entityType)) {\n    throw new QueryIndexScopeError(`Query index entity type is not registered: ${entityType}`)\n  }\n\n  const table = resolveRegisteredEntityTableName(em, entityType as never)\n  if (!table) {\n    throw new QueryIndexScopeError(`Query index entity type has no registered ORM table: ${entityType}`)\n  }\n\n  const registry = em.getMetadata?.()\n  const allMetadataRaw = typeof registry?.getAll === 'function' ? registry.getAll() : null\n  const allMetadata: QueryIndexEntityMetadata[] = Array.isArray(allMetadataRaw)\n    ? allMetadataRaw as QueryIndexEntityMetadata[]\n    : allMetadataRaw instanceof Map\n      ? Array.from(allMetadataRaw.values()) as QueryIndexEntityMetadata[]\n      : Object.values(allMetadataRaw ?? {}) as QueryIndexEntityMetadata[]\n  const metadata = allMetadata.find((candidate) => String(candidate.tableName ?? '') === table)\n  if (!metadata) {\n    throw new QueryIndexScopeError(`Query index entity metadata was not found for table: ${table}`)\n  }\n\n  return {\n    table,\n    organizationColumn: resolveScopeColumn(metadata, 'organizationId', table),\n    tenantColumn: resolveScopeColumn(metadata, 'tenantId', table),\n  }\n}\n\nexport async function loadQueryIndexRowScope(\n  em: EntityManager,\n  source: QueryIndexSourceMetadata,\n  recordId: string,\n): Promise<QueryIndexSourceScope> {\n  if (!source.organizationColumn && !source.tenantColumn) {\n    return { kind: 'global' }\n  }\n\n  const db = em.getKysely<any>()\n  const columns = [source.organizationColumn, source.tenantColumn].filter((column): column is string => column !== null)\n  const row = await db\n    .selectFrom(source.table as any)\n    .select(columns as any)\n    .where('id' as any, '=', recordId)\n    .executeTakeFirst() as Record<string, string | null | undefined> | undefined\n\n  if (!row) {\n    return { kind: 'missing' }\n  }\n\n  return {\n    kind: 'row',\n    scope: {\n      organizationId: source.organizationColumn ? row[source.organizationColumn] ?? null : null,\n      tenantId: source.tenantColumn ? row[source.tenantColumn] ?? null : null,\n    },\n  }\n}\n\nexport function resolveQueryIndexRecordScope(input: ResolveRecordScopeInput): QueryIndexScope {\n  const {\n    payloadTenantId,\n    payloadOrganizationId,\n    hasPayloadTenantId,\n    hasPayloadOrganizationId,\n    sourceScope,\n  } = input\n\n  if (sourceScope.kind === 'global') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId || payloadTenantId !== null || payloadOrganizationId !== null) {\n      throw new QueryIndexScopeError(\n        'Query index event for a global entity must explicitly provide tenantId and organizationId as null'\n      )\n    }\n\n    return {\n      tenantId: null,\n      organizationId: null,\n    }\n  }\n\n  if (sourceScope.kind === 'missing') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId) {\n      throw new QueryIndexScopeError(\n        'Query index event is missing tenantId/organizationId and source row scope could not be resolved'\n      )\n    }\n\n    return {\n      tenantId: payloadTenantId ?? null,\n      organizationId: payloadOrganizationId ?? null,\n    }\n  }\n\n  const rowScope = sourceScope.scope\n\n  if (hasPayloadTenantId && !isSameScopeValue(payloadTenantId, rowScope.tenantId)) {\n    throw new QueryIndexScopeError(\n      `Query index event tenantId does not match source row scope (payload=${String(payloadTenantId ?? null)}, row=${String(rowScope.tenantId)})`\n    )\n  }\n\n  if (hasPayloadOrganizationId && !isSameScopeValue(payloadOrganizationId, rowScope.organizationId)) {\n    throw new QueryIndexScopeError(\n      `Query index event organizationId does not match source row scope (payload=${String(payloadOrganizationId ?? null)}, row=${String(rowScope.organizationId)})`\n    )\n  }\n\n  return {\n    tenantId: hasPayloadTenantId ? (payloadTenantId ?? null) : rowScope.tenantId,\n    organizationId: hasPayloadOrganizationId ? (payloadOrganizationId ?? null) : rowScope.organizationId,\n  }\n}\n\nexport function resolveQueryIndexReindexScope(input: ResolveReindexScopeInput): {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n} {\n  if (input.tenantId === undefined && input.allowAllTenants !== true) {\n    throw new QueryIndexScopeError(\n      'Query index reindex requires tenantId to be set explicitly; all-tenant reindex must opt in with allowAllTenants=true'\n    )\n  }\n\n  return {\n    tenantId: input.tenantId,\n    organizationId: input.organizationId,\n  }\n}\n\nfunction isSameScopeValue(left: string | null | undefined, right: string | null): boolean {\n  return (left ?? null) === right\n}\n\nfunction resolveScopeColumn(metadata: QueryIndexEntityMetadata, property: string, table: string): string | null {\n  const scopeProperty = metadata.properties?.[property]\n  if (!scopeProperty) return null\n  const fieldNames = scopeProperty.fieldNames\n  if (!Array.isArray(fieldNames) || fieldNames.length !== 1 || typeof fieldNames[0] !== 'string' || !fieldNames[0]) {\n    throw new QueryIndexScopeError(\n      `Query index ${property} metadata must map exactly one physical column for table: ${table}`\n    )\n  }\n  return fieldNames[0]\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,wCAAwC;AAuB1C,MAAM,6BAA6B,MAAM;AAAA,EAC9C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAgBO,SAAS,gCACd,IACA,YAC0B;AAC1B,QAAM,sBAAsB,OAAO,OAAO,aAAa,KAAK,CAAC,EAAE,QAAQ,CAAC,mBAAmB,OAAO,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAC9H,MAAI,CAAC,oBAAoB,SAAS,UAAU,GAAG;AAC7C,UAAM,IAAI,qBAAqB,8CAA8C,UAAU,EAAE;AAAA,EAC3F;AAEA,QAAM,QAAQ,iCAAiC,IAAI,UAAmB;AACtE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,qBAAqB,wDAAwD,UAAU,EAAE;AAAA,EACrG;AAEA,QAAM,WAAW,GAAG,cAAc;AAClC,QAAM,iBAAiB,OAAO,UAAU,WAAW,aAAa,SAAS,OAAO,IAAI;AACpF,QAAM,cAA0C,MAAM,QAAQ,cAAc,IACxE,iBACA,0BAA0B,MACxB,MAAM,KAAK,eAAe,OAAO,CAAC,IAClC,OAAO,OAAO,kBAAkB,CAAC,CAAC;AACxC,QAAM,WAAW,YAAY,KAAK,CAAC,cAAc,OAAO,UAAU,aAAa,EAAE,MAAM,KAAK;AAC5F,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,qBAAqB,wDAAwD,KAAK,EAAE;AAAA,EAChG;AAEA,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,mBAAmB,UAAU,kBAAkB,KAAK;AAAA,IACxE,cAAc,mBAAmB,UAAU,YAAY,KAAK;AAAA,EAC9D;AACF;AAEA,eAAsB,uBACpB,IACA,QACA,UACgC;AAChC,MAAI,CAAC,OAAO,sBAAsB,CAAC,OAAO,cAAc;AACtD,WAAO,EAAE,MAAM,SAAS;AAAA,EAC1B;AAEA,QAAM,KAAK,GAAG,UAAe;AAC7B,QAAM,UAAU,CAAC,OAAO,oBAAoB,OAAO,YAAY,EAAE,OAAO,CAAC,WAA6B,WAAW,IAAI;AACrH,QAAM,MAAM,MAAM,GACf,WAAW,OAAO,KAAY,EAC9B,OAAO,OAAc,EACrB,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AAEpB,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,MAAM,UAAU;AAAA,EAC3B;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,gBAAgB,OAAO,qBAAqB,IAAI,OAAO,kBAAkB,KAAK,OAAO;AAAA,MACrF,UAAU,OAAO,eAAe,IAAI,OAAO,YAAY,KAAK,OAAO;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,6BAA6B,OAAiD;AAC5F,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,YAAY,SAAS,UAAU;AACjC,QAAI,CAAC,sBAAsB,CAAC,4BAA4B,oBAAoB,QAAQ,0BAA0B,MAAM;AAClH,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,YAAY,SAAS,WAAW;AAClC,QAAI,CAAC,sBAAsB,CAAC,0BAA0B;AACpD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU,mBAAmB;AAAA,MAC7B,gBAAgB,yBAAyB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,WAAW,YAAY;AAE7B,MAAI,sBAAsB,CAAC,iBAAiB,iBAAiB,SAAS,QAAQ,GAAG;AAC/E,UAAM,IAAI;AAAA,MACR,uEAAuE,OAAO,mBAAmB,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ,CAAC;AAAA,IAC1I;AAAA,EACF;AAEA,MAAI,4BAA4B,CAAC,iBAAiB,uBAAuB,SAAS,cAAc,GAAG;AACjG,UAAM,IAAI;AAAA,MACR,6EAA6E,OAAO,yBAAyB,IAAI,CAAC,SAAS,OAAO,SAAS,cAAc,CAAC;AAAA,IAC5J;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,qBAAsB,mBAAmB,OAAQ,SAAS;AAAA,IACpE,gBAAgB,2BAA4B,yBAAyB,OAAQ,SAAS;AAAA,EACxF;AACF;AAEO,SAAS,8BAA8B,OAG5C;AACA,MAAI,MAAM,aAAa,UAAa,MAAM,oBAAoB,MAAM;AAClE,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB;AACF;AAEA,SAAS,iBAAiB,MAAiC,OAA+B;AACxF,UAAQ,QAAQ,UAAU;AAC5B;AAEA,SAAS,mBAAmB,UAAoC,UAAkB,OAA8B;AAC9G,QAAM,gBAAgB,SAAS,aAAa,QAAQ;AACpD,MAAI,CAAC,cAAe,QAAO;AAC3B,QAAM,aAAa,cAAc;AACjC,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,OAAO,WAAW,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,GAAG;AAChH,UAAM,IAAI;AAAA,MACR,eAAe,QAAQ,6DAA6D,KAAK;AAAA,IAC3F;AAAA,EACF;AACA,SAAO,WAAW,CAAC;AACrB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getEntityIds } from '@open-mercato/shared/lib/encryption/entityIds'\nimport { resolveRegisteredEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { listEntityMetadata } from '@open-mercato/shared/lib/db/entityMetadata'\n\nexport type QueryIndexScope = {\n  tenantId: string | null\n  organizationId: string | null\n}\n\nexport type QueryIndexSourceMetadata = {\n  table: string\n  organizationColumn: string | null\n  tenantColumn: string | null\n}\n\nexport type QueryIndexSourceScope =\n  | { kind: 'global' }\n  | { kind: 'missing' }\n  | { kind: 'row'; scope: QueryIndexScope }\n\ntype QueryIndexEntityMetadata = {\n  tableName?: unknown\n  properties?: Record<string, { fieldNames?: unknown }>\n}\n\nexport class QueryIndexScopeError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'QueryIndexScopeError'\n  }\n}\n\ntype ResolveRecordScopeInput = {\n  payloadTenantId: string | null | undefined\n  payloadOrganizationId: string | null | undefined\n  hasPayloadTenantId: boolean\n  hasPayloadOrganizationId: boolean\n  sourceScope: QueryIndexSourceScope\n}\n\ntype ResolveReindexScopeInput = {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n  allowAllTenants?: boolean\n}\n\nexport function resolveQueryIndexSourceMetadata(\n  em: EntityManager,\n  entityType: string,\n): QueryIndexSourceMetadata {\n  const registeredEntityIds = Object.values(getEntityIds(false)).flatMap((moduleEntities) => Object.values(moduleEntities ?? {}))\n  if (!registeredEntityIds.includes(entityType)) {\n    throw new QueryIndexScopeError(`Query index entity type is not registered: ${entityType}`)\n  }\n\n  const table = resolveRegisteredEntityTableName(em, entityType as never)\n  if (!table) {\n    throw new QueryIndexScopeError(`Query index entity type has no registered ORM table: ${entityType}`)\n  }\n\n  const allMetadata = listEntityMetadata(em) as unknown as QueryIndexEntityMetadata[]\n  const metadata = allMetadata.find((candidate) => String(candidate.tableName ?? '') === table)\n  if (!metadata) {\n    throw new QueryIndexScopeError(`Query index entity metadata was not found for table: ${table}`)\n  }\n\n  return {\n    table,\n    organizationColumn: resolveScopeColumn(metadata, 'organizationId', table),\n    tenantColumn: resolveScopeColumn(metadata, 'tenantId', table),\n  }\n}\n\nexport async function loadQueryIndexRowScope(\n  em: EntityManager,\n  source: QueryIndexSourceMetadata,\n  recordId: string,\n): Promise<QueryIndexSourceScope> {\n  if (!source.organizationColumn && !source.tenantColumn) {\n    return { kind: 'global' }\n  }\n\n  const db = em.getKysely<any>()\n  const columns = [source.organizationColumn, source.tenantColumn].filter((column): column is string => column !== null)\n  const row = await db\n    .selectFrom(source.table as any)\n    .select(columns as any)\n    .where('id' as any, '=', recordId)\n    .executeTakeFirst() as Record<string, string | null | undefined> | undefined\n\n  if (!row) {\n    return { kind: 'missing' }\n  }\n\n  return {\n    kind: 'row',\n    scope: {\n      organizationId: source.organizationColumn ? row[source.organizationColumn] ?? null : null,\n      tenantId: source.tenantColumn ? row[source.tenantColumn] ?? null : null,\n    },\n  }\n}\n\nexport function resolveQueryIndexRecordScope(input: ResolveRecordScopeInput): QueryIndexScope {\n  const {\n    payloadTenantId,\n    payloadOrganizationId,\n    hasPayloadTenantId,\n    hasPayloadOrganizationId,\n    sourceScope,\n  } = input\n\n  if (sourceScope.kind === 'global') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId || payloadTenantId !== null || payloadOrganizationId !== null) {\n      throw new QueryIndexScopeError(\n        'Query index event for a global entity must explicitly provide tenantId and organizationId as null'\n      )\n    }\n\n    return {\n      tenantId: null,\n      organizationId: null,\n    }\n  }\n\n  if (sourceScope.kind === 'missing') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId) {\n      throw new QueryIndexScopeError(\n        'Query index event is missing tenantId/organizationId and source row scope could not be resolved'\n      )\n    }\n\n    return {\n      tenantId: payloadTenantId ?? null,\n      organizationId: payloadOrganizationId ?? null,\n    }\n  }\n\n  const rowScope = sourceScope.scope\n\n  if (hasPayloadTenantId && !isSameScopeValue(payloadTenantId, rowScope.tenantId)) {\n    throw new QueryIndexScopeError(\n      `Query index event tenantId does not match source row scope (payload=${String(payloadTenantId ?? null)}, row=${String(rowScope.tenantId)})`\n    )\n  }\n\n  if (hasPayloadOrganizationId && !isSameScopeValue(payloadOrganizationId, rowScope.organizationId)) {\n    throw new QueryIndexScopeError(\n      `Query index event organizationId does not match source row scope (payload=${String(payloadOrganizationId ?? null)}, row=${String(rowScope.organizationId)})`\n    )\n  }\n\n  return {\n    tenantId: hasPayloadTenantId ? (payloadTenantId ?? null) : rowScope.tenantId,\n    organizationId: hasPayloadOrganizationId ? (payloadOrganizationId ?? null) : rowScope.organizationId,\n  }\n}\n\nexport function resolveQueryIndexReindexScope(input: ResolveReindexScopeInput): {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n} {\n  if (input.tenantId === undefined && input.allowAllTenants !== true) {\n    throw new QueryIndexScopeError(\n      'Query index reindex requires tenantId to be set explicitly; all-tenant reindex must opt in with allowAllTenants=true'\n    )\n  }\n\n  return {\n    tenantId: input.tenantId,\n    organizationId: input.organizationId,\n  }\n}\n\nfunction isSameScopeValue(left: string | null | undefined, right: string | null): boolean {\n  return (left ?? null) === right\n}\n\nfunction resolveScopeColumn(metadata: QueryIndexEntityMetadata, property: string, table: string): string | null {\n  const scopeProperty = metadata.properties?.[property]\n  if (!scopeProperty) return null\n  const fieldNames = scopeProperty.fieldNames\n  if (!Array.isArray(fieldNames) || fieldNames.length !== 1 || typeof fieldNames[0] !== 'string' || !fieldNames[0]) {\n    throw new QueryIndexScopeError(\n      `Query index ${property} metadata must map exactly one physical column for table: ${table}`\n    )\n  }\n  return fieldNames[0]\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,wCAAwC;AACjD,SAAS,0BAA0B;AAuB5B,MAAM,6BAA6B,MAAM;AAAA,EAC9C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAgBO,SAAS,gCACd,IACA,YAC0B;AAC1B,QAAM,sBAAsB,OAAO,OAAO,aAAa,KAAK,CAAC,EAAE,QAAQ,CAAC,mBAAmB,OAAO,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAC9H,MAAI,CAAC,oBAAoB,SAAS,UAAU,GAAG;AAC7C,UAAM,IAAI,qBAAqB,8CAA8C,UAAU,EAAE;AAAA,EAC3F;AAEA,QAAM,QAAQ,iCAAiC,IAAI,UAAmB;AACtE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,qBAAqB,wDAAwD,UAAU,EAAE;AAAA,EACrG;AAEA,QAAM,cAAc,mBAAmB,EAAE;AACzC,QAAM,WAAW,YAAY,KAAK,CAAC,cAAc,OAAO,UAAU,aAAa,EAAE,MAAM,KAAK;AAC5F,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,qBAAqB,wDAAwD,KAAK,EAAE;AAAA,EAChG;AAEA,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,mBAAmB,UAAU,kBAAkB,KAAK;AAAA,IACxE,cAAc,mBAAmB,UAAU,YAAY,KAAK;AAAA,EAC9D;AACF;AAEA,eAAsB,uBACpB,IACA,QACA,UACgC;AAChC,MAAI,CAAC,OAAO,sBAAsB,CAAC,OAAO,cAAc;AACtD,WAAO,EAAE,MAAM,SAAS;AAAA,EAC1B;AAEA,QAAM,KAAK,GAAG,UAAe;AAC7B,QAAM,UAAU,CAAC,OAAO,oBAAoB,OAAO,YAAY,EAAE,OAAO,CAAC,WAA6B,WAAW,IAAI;AACrH,QAAM,MAAM,MAAM,GACf,WAAW,OAAO,KAAY,EAC9B,OAAO,OAAc,EACrB,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AAEpB,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,MAAM,UAAU;AAAA,EAC3B;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,gBAAgB,OAAO,qBAAqB,IAAI,OAAO,kBAAkB,KAAK,OAAO;AAAA,MACrF,UAAU,OAAO,eAAe,IAAI,OAAO,YAAY,KAAK,OAAO;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,6BAA6B,OAAiD;AAC5F,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,YAAY,SAAS,UAAU;AACjC,QAAI,CAAC,sBAAsB,CAAC,4BAA4B,oBAAoB,QAAQ,0BAA0B,MAAM;AAClH,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,YAAY,SAAS,WAAW;AAClC,QAAI,CAAC,sBAAsB,CAAC,0BAA0B;AACpD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU,mBAAmB;AAAA,MAC7B,gBAAgB,yBAAyB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,WAAW,YAAY;AAE7B,MAAI,sBAAsB,CAAC,iBAAiB,iBAAiB,SAAS,QAAQ,GAAG;AAC/E,UAAM,IAAI;AAAA,MACR,uEAAuE,OAAO,mBAAmB,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ,CAAC;AAAA,IAC1I;AAAA,EACF;AAEA,MAAI,4BAA4B,CAAC,iBAAiB,uBAAuB,SAAS,cAAc,GAAG;AACjG,UAAM,IAAI;AAAA,MACR,6EAA6E,OAAO,yBAAyB,IAAI,CAAC,SAAS,OAAO,SAAS,cAAc,CAAC;AAAA,IAC5J;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,qBAAsB,mBAAmB,OAAQ,SAAS;AAAA,IACpE,gBAAgB,2BAA4B,yBAAyB,OAAQ,SAAS;AAAA,EACxF;AACF;AAEO,SAAS,8BAA8B,OAG5C;AACA,MAAI,MAAM,aAAa,UAAa,MAAM,oBAAoB,MAAM;AAClE,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB;AACF;AAEA,SAAS,iBAAiB,MAAiC,OAA+B;AACxF,UAAQ,QAAQ,UAAU;AAC5B;AAEA,SAAS,mBAAmB,UAAoC,UAAkB,OAA8B;AAC9G,QAAM,gBAAgB,SAAS,aAAa,QAAQ;AACpD,MAAI,CAAC,cAAe,QAAO;AAC3B,QAAM,aAAa,cAAc;AACjC,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,OAAO,WAAW,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,GAAG;AAChH,UAAM,IAAI;AAAA,MACR,eAAe,QAAQ,6DAA6D,KAAK;AAAA,IAC3F;AAAA,EACF;AACA,SAAO,WAAW,CAAC;AACrB;",
   "names": []
 }

package/dist/modules/sales/commands/documents.js

@@ -172,6 +172,19 @@ function cloneJson(value) {
   if (value === null || value === void 0) return value;
   return JSON.parse(JSON.stringify(value));
 }
+async function setDocumentCustomFieldsIfSupplied(em, params) {
+  const { customFields } = params;
+  if (customFields === void 0 || customFields === null) return;
+  const values = typeof customFields === "object" && !Array.isArray(customFields) ? customFields : {};
+  if (!Object.keys(values).length) return;
+  await setRecordCustomFields(em, {
+    entityId: params.entityId,
+    recordId: params.recordId,
+    organizationId: params.organizationId,
+    tenantId: params.tenantId,
+    values: normalizeCustomFieldValues(values)
+  });
+}
 async function resolveCustomerSnapshot(em, organizationId, tenantId, customerEntityId, customerContactId) {
   if (!customerEntityId) return null;
   const customer = await em.findOne(
@@ -2852,6 +2865,20 @@ async function restoreOrderGraph(em, snapshot) {
       organizationId: snapshot.order.organizationId
     }
   );
+  let existingLines = [];
+  if (order) {
+    existingLines = await em.find(
+      SalesOrderLine,
+      { order },
+      { orderBy: { lineNumber: "asc" } }
+    );
+    await assertShippedOrderGraphRestorable(
+      em,
+      order,
+      existingLines,
+      snapshot
+    );
+  }
   if (!order) {
     order = em.create(SalesOrder, {
       id: snapshot.order.id,
@@ -2914,11 +2941,6 @@ async function restoreOrderGraph(em, snapshot) {
   }
   applyOrderSnapshot(order, snapshot.order);
   await em.flush();
-  const existingLines = await em.find(
-    SalesOrderLine,
-    { order: order.id },
-    { fields: ["id"] }
-  );
   const existingAdjustments = await em.find(
     SalesOrderAdjustment,
     { order: order.id },
@@ -3349,6 +3371,13 @@ const createQuoteCommand = {
             tenantId: quote.tenantId,
             tagIds: parsed.tags
           });
+          await setDocumentCustomFieldsIfSupplied(em, {
+            entityId: E.sales.sales_quote,
+            recordId: quote.id,
+            organizationId: quote.organizationId,
+            tenantId: quote.tenantId,
+            customFields: parsed.customFields
+          });
         }
       ],
       { transaction: true }
@@ -4245,6 +4274,13 @@ const createOrderCommand = {
             tenantId: order.tenantId,
             tagIds: parsed.tags
           });
+          await setDocumentCustomFieldsIfSupplied(em, {
+            entityId: E.sales.sales_order,
+            recordId: order.id,
+            organizationId: order.organizationId,
+            tenantId: order.tenantId,
+            customFields: parsed.customFields
+          });
         }
       ],
       { transaction: true }
@@ -4951,29 +4987,76 @@ const quoteAdjustmentDeleteSchema = z.object({
   quoteId: z.string().uuid()
 });
 const SHIPPED_QUANTITY_TOLERANCE = 1e-6;
+const SHIPPED_LINE_NUMERIC_PRICING_FIELDS = [
+  "unitPriceNet",
+  "unitPriceGross",
+  "discountAmount",
+  "discountPercent",
+  "taxRate"
+];
+const SHIPPED_LINE_DERIVED_TOTAL_FIELDS = [
+  "totalNetAmount",
+  "totalGrossAmount"
+];
 const hasNumericChange = (next, previous) => {
   if (next === void 0 || next === null) return false;
   if (previous === void 0 || previous === null) return true;
   return Math.abs(next - previous) > SHIPPED_QUANTITY_TOLERANCE;
 };
+const hasExactNumericChange = (next, previous) => {
+  if (next === void 0 || next === null) {
+    return previous !== void 0 && previous !== null;
+  }
+  if (previous === void 0 || previous === null) return true;
+  return Math.abs(next - previous) > SHIPPED_QUANTITY_TOLERANCE;
+};
 const hasUnitChange = (next, previous) => {
   if (next === void 0 || next === null) return false;
   const normalizedPrevious = (previous ?? "").trim().toLowerCase();
   if (!normalizedPrevious) return false;
   return next.trim().toLowerCase() !== normalizedPrevious;
 };
-async function assertShippedOrderLineEditable(em, order, existingSnapshot, parsed) {
-  const lineId = existingSnapshot?.id;
-  if (!existingSnapshot || !lineId) return;
-  const shippedByLine = await loadShippedQuantityByLine(em, order.id, {
-    tenantId: order.tenantId,
-    organizationId: order.organizationId
+const hasExactUnitChange = (next, previous) => (next ?? "").trim().toLowerCase() !== (previous ?? "").trim().toLowerCase();
+function hasShippedLineTotalChange(next, previous, nextQuantity, exact) {
+  const numericChange = exact ? hasExactNumericChange : hasNumericChange;
+  const previousQuantity = previous.quantity;
+  const canScale = typeof previousQuantity === "number" && Math.abs(previousQuantity) > SHIPPED_QUANTITY_TOLERANCE && typeof nextQuantity === "number";
+  return SHIPPED_LINE_DERIVED_TOTAL_FIELDS.some((field) => {
+    const nextTotal = next[field];
+    const previousTotal = previous[field];
+    if (!canScale || typeof previousTotal !== "number") {
+      return numericChange(nextTotal, previousTotal);
+    }
+    if (nextTotal === void 0 || nextTotal === null) {
+      return exact ? numericChange(nextTotal, previousTotal) : false;
+    }
+    const expectedTotal = previousTotal / previousQuantity * nextQuantity;
+    const tolerance = Math.max(
+      SHIPPED_QUANTITY_TOLERANCE,
+      Math.abs(expectedTotal) * 1e-9
+    );
+    return Math.abs(nextTotal - expectedTotal) > tolerance;
   });
-  const shippedQuantity = shippedByLine.get(lineId) ?? 0;
+}
+function hasShippedLinePricingChange(next, previous, nextQuantity, exact) {
+  const numericChange = exact ? hasExactNumericChange : hasNumericChange;
+  return SHIPPED_LINE_NUMERIC_PRICING_FIELDS.some(
+    (field) => numericChange(next[field], previous[field])
+  ) || hasShippedLineTotalChange(next, previous, nextQuantity, exact) || (exact ? hasExactUnitChange(next.quantityUnit, previous.quantityUnit) : hasUnitChange(next.quantityUnit, previous.quantityUnit));
+}
+async function assertShippedOrderLineChangeAllowed(existingSnapshot, nextSnapshot, shippedQuantity, exact) {
   if (shippedQuantity <= 0) return;
+  const nextQuantity = nextSnapshot ? exact ? nextSnapshot.quantity : nextSnapshot.quantity ?? existingSnapshot.quantity : 0;
+  const quantityInvalid = nextQuantity === void 0 || nextQuantity < shippedQuantity - SHIPPED_QUANTITY_TOLERANCE;
+  const pricingChanged = nextSnapshot !== null && hasShippedLinePricingChange(
+    nextSnapshot,
+    existingSnapshot,
+    nextQuantity,
+    exact
+  );
+  if (!quantityInvalid && !pricingChanged) return;
   const { translate } = await resolveTranslations();
-  const nextQuantity = parsed.quantity ?? existingSnapshot.quantity;
-  if (nextQuantity < shippedQuantity - SHIPPED_QUANTITY_TOLERANCE) {
+  if (quantityInvalid) {
     throw new CrudHttpError(409, {
       error: translate(
         "sales.documents.items.errorQuantityBelowShipped",
@@ -4982,14 +5065,46 @@ async function assertShippedOrderLineEditable(em, order, existingSnapshot, parse
       )
     });
   }
-  const pricingChanged = hasNumericChange(parsed.unitPriceNet, existingSnapshot.unitPriceNet) || hasNumericChange(parsed.unitPriceGross, existingSnapshot.unitPriceGross) || hasNumericChange(parsed.taxRate, existingSnapshot.taxRate) || hasUnitChange(parsed.quantityUnit, existingSnapshot.quantityUnit);
-  if (pricingChanged) {
-    throw new CrudHttpError(409, {
-      error: translate(
-        "sales.documents.items.errorPriceShipped",
-        "You cannot change the price or unit of a line that has shipped items."
-      )
-    });
+  throw new CrudHttpError(409, {
+    error: translate(
+      "sales.documents.items.errorPriceShipped",
+      "You cannot change the price or unit of a line that has shipped items."
+    )
+  });
+}
+async function assertShippedOrderLineEditable(em, order, existingSnapshot, parsed) {
+  const lineId = existingSnapshot?.id;
+  if (!existingSnapshot || !lineId) return;
+  const shippedByLine = await loadShippedQuantityByLine(em, order.id, {
+    tenantId: order.tenantId,
+    organizationId: order.organizationId
+  });
+  const shippedQuantity = shippedByLine.get(lineId) ?? 0;
+  await assertShippedOrderLineChangeAllowed(
+    existingSnapshot,
+    parsed,
+    shippedQuantity,
+    false
+  );
+}
+async function assertShippedOrderGraphRestorable(em, order, existingLines, snapshot) {
+  const shippedByLine = await loadShippedQuantityByLine(em, order.id, {
+    tenantId: order.tenantId,
+    organizationId: order.organizationId
+  });
+  if (shippedByLine.size === 0) return;
+  const snapshotLinesById = new Map(
+    snapshot.lines.flatMap((line) => line.id ? [[line.id, line]] : [])
+  );
+  for (const line of existingLines) {
+    const shippedQuantity = shippedByLine.get(line.id) ?? 0;
+    if (shippedQuantity <= 0) continue;
+    await assertShippedOrderLineChangeAllowed(
+      mapOrderLineEntityToSnapshot(line),
+      snapshotLinesById.get(line.id) ?? null,
+      shippedQuantity,
+      true
+    );
   }
 }
 const FULFILLED_ORDER_STATUS = "fulfilled";