@open-mercato/core 0.6.7 → 0.6.8-develop.6875.1.871a4afc94

package/dist/modules/query_index/lib/search-tokens.js

@@ -1,5 +1,9 @@
 import { sql } from "kysely";
-import { resolveSearchConfig } from "@open-mercato/shared/lib/search/config";
+import {
+  isSearchFieldBlocklisted,
+  resolveSearchConfig,
+  resolveSearchTokenLimits
+} from "@open-mercato/shared/lib/search/config";
 import { tokenizeText } from "@open-mercato/shared/lib/search/tokenize";
 import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
 import { createLogger } from "@open-mercato/shared/lib/logger";
@@ -33,16 +37,14 @@ function collectTextValues(value) {
   }
   return [];
 }
-function shouldIndexField(field, value, config) {
+function shouldIndexField(field, value, config, entityType) {
   if (typeof value !== "string" && !Array.isArray(value)) return false;
   const lower = field.toLowerCase();
   if (lower === "id" || lower.endsWith("_id") || lower.endsWith(".id")) return false;
   if (lower.endsWith("_at")) return false;
   if (["created_at", "updated_at", "deleted_at", "tenant_id", "organization_id"].includes(lower)) return false;
-  if (config.blocklistedFields.some((blocked) => lower.includes(blocked))) return false;
-  const values = collectTextValues(value);
-  if (!values.length) return false;
-  return values.some((text) => tokenizeText(text, config).tokens.length > 0);
+  if (isSearchFieldBlocklisted(field, entityType, config)) return false;
+  return collectTextValues(value).some((text) => text.length > 0);
 }
 function buildSearchTokenRows(params) {
   const config = params.config ?? resolveSearchConfig();
@@ -55,18 +57,29 @@ function buildSearchTokenRows(params) {
     organizationId: params.organizationId ?? DEFAULT_SCOPE.organizationId,
     tenantId: params.tenantId ?? DEFAULT_SCOPE.tenantId
   };
+  const limits = resolveSearchTokenLimits(config);
+  const recordLimit = limits.maxTokensPerRecord > 0 ? limits.maxTokensPerRecord : Number.POSITIVE_INFINITY;
+  const fieldLimit = limits.maxTokensPerField > 0 ? limits.maxTokensPerField : Number.POSITIVE_INFINITY;
   for (const [field, rawValue] of Object.entries(params.doc)) {
-    if (!shouldIndexField(field, rawValue, config)) continue;
+    if (tokens.length >= recordLimit) break;
+    if (!shouldIndexField(field, rawValue, config, params.entityType)) continue;
     const values = collectTextValues(rawValue);
     const seen = /* @__PURE__ */ new Set();
+    let fieldTokenCount = 0;
     for (const text of values) {
-      const { tokens: textTokens, hashes } = tokenizeText(text, config);
+      if (tokens.length >= recordLimit || fieldTokenCount >= fieldLimit) break;
+      const remainingLimit = Math.min(recordLimit - tokens.length, fieldLimit - fieldTokenCount);
+      const candidateLimit = fieldTokenCount + remainingLimit;
+      const tokenConfig = Number.isFinite(candidateLimit) ? { ...config, maxTokensPerField: candidateLimit } : config;
+      const { tokens: textTokens, hashes } = tokenizeText(text, tokenConfig);
       for (let i = 0; i < textTokens.length; i += 1) {
+        if (tokens.length >= recordLimit || fieldTokenCount >= fieldLimit) break;
         const token = textTokens[i];
         const hash = hashes[i];
         const dedupeKey = `${field}|${hash}`;
         if (seen.has(dedupeKey)) continue;
         seen.add(dedupeKey);
+        fieldTokenCount += 1;
         debug("token.generated", { entityType: params.entityType, recordId: params.recordId, field, hash });
         tokens.push({
           entity_type: params.entityType,
@@ -106,15 +119,15 @@ function buildFieldPairs(recordId, doc) {
   }
   return pairs;
 }
-async function replaceSearchTokensForRecord(db, params) {
+async function replaceSearchTokensForRecord(db, params, options) {
   const rows = buildSearchTokenRows(params);
   const config = params.config ?? resolveSearchConfig();
   if (!config.enabled) return;
   const organizationId = params.organizationId ?? null;
   const tenantId = params.tenantId ?? null;
   const fieldPairs = buildFieldPairs(String(params.recordId), params.doc);
-  await db.transaction().execute(async (trx) => {
-    let deleteQuery = trx.deleteFrom("search_tokens").where("entity_type", "=", params.entityType).where(sql`organization_id is not distinct from ${organizationId}`).where(sql`tenant_id is not distinct from ${tenantId}`);
+  const writeTokens = async (executor) => {
+    let deleteQuery = executor.deleteFrom("search_tokens").where("entity_type", "=", params.entityType).where(sql`organization_id is not distinct from ${organizationId}`).where(sql`tenant_id is not distinct from ${tenantId}`);
     if (fieldPairs.length) {
       deleteQuery = deleteQuery.where((eb) => eb.or(
         fieldPairs.map(([rid, field]) => eb.and([
@@ -129,14 +142,20 @@ async function replaceSearchTokensForRecord(db, params) {
     if (!rows.length) return;
     const payloads = rows.map((row) => ({ ...row, created_at: sql`now()` }));
     for (const batch of chunk(payloads, INSERT_BATCH_SIZE)) {
-      await trx.insertInto("search_tokens").values(batch).execute();
+      await executor.insertInto("search_tokens").values(batch).execute();
     }
-  });
+  };
+  if (options?.trx) {
+    await writeTokens(options.trx);
+    return;
+  }
+  await db.transaction().execute(writeTokens);
 }
-async function deleteSearchTokensForRecord(db, params) {
+async function deleteSearchTokensForRecord(db, params, options) {
   const organizationId = params.organizationId ?? null;
   const tenantId = params.tenantId ?? null;
-  await db.deleteFrom("search_tokens").where("entity_type", "=", params.entityType).where("entity_id", "=", String(params.recordId)).where(sql`organization_id is not distinct from ${organizationId}`).where(sql`tenant_id is not distinct from ${tenantId}`).execute();
+  const executor = options?.trx ?? db;
+  await executor.deleteFrom("search_tokens").where("entity_type", "=", params.entityType).where("entity_id", "=", String(params.recordId)).where(sql`organization_id is not distinct from ${organizationId}`).where(sql`tenant_id is not distinct from ${tenantId}`).execute();
 }
 async function replaceSearchTokensForBatch(db, payloads) {
   if (!payloads.length) return;

package/dist/modules/query_index/lib/search-tokens.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/search-tokens.ts"],
-  "sourcesContent": ["import { type Kysely, sql } from 'kysely'\nimport { resolveSearchConfig, type SearchConfig } from '@open-mercato/shared/lib/search/config'\nimport { tokenizeText } from '@open-mercato/shared/lib/search/tokenize'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('query_index').child({ component: 'search-tokens' })\n\nconst INSERT_BATCH_SIZE = 500\n\nfunction chunk<T>(items: T[], size: number): T[][] {\n  if (size <= 0) return [items]\n  const out: T[][] = []\n  for (let i = 0; i < items.length; i += size) out.push(items.slice(i, i + size))\n  return out\n}\n\nexport type SearchTokenRow = {\n  entity_type: string\n  entity_id: string\n  organization_id: string | null\n  tenant_id: string | null\n  field: string\n  token_hash: string\n  token?: string | null\n}\n\ntype BuildTokenOptions = {\n  entityType: string\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n  doc?: Record<string, unknown> | null\n  config?: SearchConfig\n}\n\nconst DEFAULT_SCOPE = { organizationId: null, tenantId: null }\ntype EntityFieldPair = [string, string]\n\nexport const isSearchDebugEnabled = (): boolean => {\n  return parseBooleanToken(process.env.OM_SEARCH_DEBUG ?? '') === true\n}\n\nconst debug = (event: string, payload: Record<string, unknown>) => {\n  if (!isSearchDebugEnabled()) return\n  try {\n    logger.debug('Search token event', { event, payload })\n  } catch {\n    // ignore\n  }\n}\n\nfunction collectTextValues(value: unknown): string[] {\n  if (typeof value === 'string') return [value]\n  if (Array.isArray(value)) {\n    const out: string[] = []\n    for (const entry of value) {\n      if (typeof entry === 'string') out.push(entry)\n    }\n    return out\n  }\n  return []\n}\n\nfunction shouldIndexField(field: string, value: unknown, config: SearchConfig): boolean {\n  if (typeof value !== 'string' && !Array.isArray(value)) return false\n  const lower = field.toLowerCase()\n  if (lower === 'id' || lower.endsWith('_id') || lower.endsWith('.id')) return false\n  if (lower.endsWith('_at')) return false\n  if (['created_at', 'updated_at', 'deleted_at', 'tenant_id', 'organization_id'].includes(lower)) return false\n  if (config.blocklistedFields.some((blocked) => lower.includes(blocked))) return false\n  const values = collectTextValues(value)\n  if (!values.length) return false\n  return values.some((text) => tokenizeText(text, config).tokens.length > 0)\n}\n\nexport function buildSearchTokenRows(params: BuildTokenOptions): SearchTokenRow[] {\n  const config = params.config ?? resolveSearchConfig()\n  if (!config.enabled) return []\n  if (!params.doc) return []\n  const tokens: SearchTokenRow[] = []\n  const capturePairs = isSearchDebugEnabled() && params.entityType === 'customers:customer_deal'\n  const debugPairs: Array<{ field: string; hash: string }> = []\n  const scope = {\n    organizationId: params.organizationId ?? DEFAULT_SCOPE.organizationId,\n    tenantId: params.tenantId ?? DEFAULT_SCOPE.tenantId,\n  }\n\n  for (const [field, rawValue] of Object.entries(params.doc)) {\n    if (!shouldIndexField(field, rawValue, config)) continue\n    const values = collectTextValues(rawValue)\n    const seen = new Set<string>()\n    for (const text of values) {\n      const { tokens: textTokens, hashes } = tokenizeText(text, config)\n      for (let i = 0; i < textTokens.length; i += 1) {\n        const token = textTokens[i]\n        const hash = hashes[i]\n        const dedupeKey = `${field}|${hash}`\n        if (seen.has(dedupeKey)) continue\n        seen.add(dedupeKey)\n        debug('token.generated', { entityType: params.entityType, recordId: params.recordId, field, hash })\n        tokens.push({\n          entity_type: params.entityType,\n          entity_id: String(params.recordId),\n          organization_id: scope.organizationId,\n          tenant_id: scope.tenantId,\n          field,\n          token_hash: hash,\n          token: config.storeRawTokens ? token : null,\n        })\n        if (capturePairs) {\n          debugPairs.push({ field, hash })\n        }\n      }\n    }\n  }\n  if (capturePairs) {\n    debug('deal.tokens', {\n      entityType: params.entityType,\n      recordId: params.recordId,\n      tokenCount: debugPairs.length,\n      tokens: debugPairs,\n    })\n  }\n  debug('doc.completed', { entityType: params.entityType, recordId: params.recordId, tokenCount: tokens.length })\n\n  return tokens\n}\n\nfunction buildFieldPairs(recordId: string, doc?: Record<string, unknown> | null): EntityFieldPair[] {\n  if (!doc) return []\n  const pairs: EntityFieldPair[] = []\n  const dedupe = new Set<string>()\n  for (const field of Object.keys(doc)) {\n    const key = `${recordId}|${field}`\n    if (dedupe.has(key)) continue\n    dedupe.add(key)\n    pairs.push([recordId, field])\n  }\n  return pairs\n}\n\nexport async function replaceSearchTokensForRecord(\n  db: Kysely<any>,\n  params: BuildTokenOptions\n): Promise<void> {\n  const rows = buildSearchTokenRows(params)\n  const config = params.config ?? resolveSearchConfig()\n  if (!config.enabled) return\n  const organizationId = params.organizationId ?? null\n  const tenantId = params.tenantId ?? null\n  const fieldPairs = buildFieldPairs(String(params.recordId), params.doc)\n\n  await db.transaction().execute(async (trx) => {\n    let deleteQuery = trx\n      .deleteFrom('search_tokens' as any)\n      .where('entity_type' as any, '=', params.entityType)\n      .where(sql<boolean>`organization_id is not distinct from ${organizationId}`)\n      .where(sql<boolean>`tenant_id is not distinct from ${tenantId}`)\n    if (fieldPairs.length) {\n      deleteQuery = deleteQuery.where((eb: any) => eb.or(\n        fieldPairs.map(([rid, field]) => eb.and([\n          eb('entity_id' as any, '=', rid),\n          eb('field' as any, '=', field),\n        ])),\n      ))\n    } else {\n      deleteQuery = deleteQuery.where('entity_id' as any, '=', String(params.recordId))\n    }\n    await deleteQuery.execute()\n    if (!rows.length) return\n    const payloads = rows.map((row) => ({ ...row, created_at: sql`now()` }))\n    for (const batch of chunk(payloads, INSERT_BATCH_SIZE)) {\n      await trx.insertInto('search_tokens' as any).values(batch as any).execute()\n    }\n  })\n}\n\nexport async function deleteSearchTokensForRecord(\n  db: Kysely<any>,\n  params: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null }\n): Promise<void> {\n  const organizationId = params.organizationId ?? null\n  const tenantId = params.tenantId ?? null\n  await db\n    .deleteFrom('search_tokens' as any)\n    .where('entity_type' as any, '=', params.entityType)\n    .where('entity_id' as any, '=', String(params.recordId))\n    .where(sql<boolean>`organization_id is not distinct from ${organizationId}`)\n    .where(sql<boolean>`tenant_id is not distinct from ${tenantId}`)\n    .execute()\n}\n\nexport async function replaceSearchTokensForBatch(\n  db: Kysely<any>,\n  payloads: Array<BuildTokenOptions & { doc: Record<string, unknown> }>\n): Promise<void> {\n  if (!payloads.length) return\n  const config = resolveSearchConfig()\n  if (!config.enabled) return\n\n  const rows = payloads.flatMap((payload) => buildSearchTokenRows({ ...payload, config }))\n  if (!rows.length) {\n    const entityType = payloads[0]?.entityType\n    if (!entityType) return\n    const ids = payloads.map((p) => String(p.recordId))\n    await db\n      .deleteFrom('search_tokens' as any)\n      .where('entity_type' as any, '=', entityType)\n      .where('entity_id' as any, 'in', ids)\n      .execute()\n    return\n  }\n\n  const scopeKey = (org: string | null, tenant: string | null) => `${org ?? '__null__'}|${tenant ?? '__null__'}`\n  const scopeBuckets = new Map<string, { organizationId: string | null; tenantId: string | null; ids: Set<string> }>()\n\n  for (const payload of payloads) {\n    const org = payload.organizationId ?? null\n    const tenant = payload.tenantId ?? null\n    const key = scopeKey(org, tenant)\n    const bucket = scopeBuckets.get(key) ?? { organizationId: org, tenantId: tenant, ids: new Set<string>() }\n    bucket.ids.add(String(payload.recordId))\n    scopeBuckets.set(key, bucket)\n  }\n\n  await db.transaction().execute(async (trx) => {\n    for (const [, bucket] of scopeBuckets.entries()) {\n      // Delete by entity_id: a batch replaces all of a record's tokens, and a per-field OR over the\n      // whole batch overflows the query compiler's call stack on large batches.\n      const deleteQuery = trx\n        .deleteFrom('search_tokens' as any)\n        .where('entity_type' as any, '=', payloads[0].entityType)\n        .where(sql<boolean>`organization_id is not distinct from ${bucket.organizationId}`)\n        .where(sql<boolean>`tenant_id is not distinct from ${bucket.tenantId}`)\n        .where('entity_id' as any, 'in', Array.from(bucket.ids))\n      await deleteQuery.execute()\n    }\n    const payloadWithTimestamps = rows.map((row) => ({ ...row, created_at: sql`now()` }))\n    for (const batch of chunk(payloadWithTimestamps, INSERT_BATCH_SIZE)) {\n      await trx.insertInto('search_tokens' as any).values(batch as any).execute()\n    }\n  })\n}\n"],
-  "mappings": "AAAA,SAAsB,WAAW;AACjC,SAAS,2BAA8C;AACvD,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAE/E,MAAM,oBAAoB;AAE1B,SAAS,MAAS,OAAY,MAAqB;AACjD,MAAI,QAAQ,EAAG,QAAO,CAAC,KAAK;AAC5B,QAAM,MAAa,CAAC;AACpB,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,KAAM,KAAI,KAAK,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC;AAC9E,SAAO;AACT;AAqBA,MAAM,gBAAgB,EAAE,gBAAgB,MAAM,UAAU,KAAK;AAGtD,MAAM,uBAAuB,MAAe;AACjD,SAAO,kBAAkB,QAAQ,IAAI,mBAAmB,EAAE,MAAM;AAClE;AAEA,MAAM,QAAQ,CAAC,OAAe,YAAqC;AACjE,MAAI,CAAC,qBAAqB,EAAG;AAC7B,MAAI;AACF,WAAO,MAAM,sBAAsB,EAAE,OAAO,QAAQ,CAAC;AAAA,EACvD,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,kBAAkB,OAA0B;AACnD,MAAI,OAAO,UAAU,SAAU,QAAO,CAAC,KAAK;AAC5C,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAM,MAAgB,CAAC;AACvB,eAAW,SAAS,OAAO;AACzB,UAAI,OAAO,UAAU,SAAU,KAAI,KAAK,KAAK;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AACA,SAAO,CAAC;AACV;AAEA,SAAS,iBAAiB,OAAe,OAAgB,QAA+B;AACtF,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAC/D,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,UAAU,QAAQ,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,KAAK,EAAG,QAAO;AAC7E,MAAI,MAAM,SAAS,KAAK,EAAG,QAAO;AAClC,MAAI,CAAC,cAAc,cAAc,cAAc,aAAa,iBAAiB,EAAE,SAAS,KAAK,EAAG,QAAO;AACvG,MAAI,OAAO,kBAAkB,KAAK,CAAC,YAAY,MAAM,SAAS,OAAO,CAAC,EAAG,QAAO;AAChF,QAAM,SAAS,kBAAkB,KAAK;AACtC,MAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,SAAO,OAAO,KAAK,CAAC,SAAS,aAAa,MAAM,MAAM,EAAE,OAAO,SAAS,CAAC;AAC3E;AAEO,SAAS,qBAAqB,QAA6C;AAChF,QAAM,SAAS,OAAO,UAAU,oBAAoB;AACpD,MAAI,CAAC,OAAO,QAAS,QAAO,CAAC;AAC7B,MAAI,CAAC,OAAO,IAAK,QAAO,CAAC;AACzB,QAAM,SAA2B,CAAC;AAClC,QAAM,eAAe,qBAAqB,KAAK,OAAO,eAAe;AACrE,QAAM,aAAqD,CAAC;AAC5D,QAAM,QAAQ;AAAA,IACZ,gBAAgB,OAAO,kBAAkB,cAAc;AAAA,IACvD,UAAU,OAAO,YAAY,cAAc;AAAA,EAC7C;AAEA,aAAW,CAAC,OAAO,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG,GAAG;AAC1D,QAAI,CAAC,iBAAiB,OAAO,UAAU,MAAM,EAAG;AAChD,UAAM,SAAS,kBAAkB,QAAQ;AACzC,UAAM,OAAO,oBAAI,IAAY;AAC7B,eAAW,QAAQ,QAAQ;AACzB,YAAM,EAAE,QAAQ,YAAY,OAAO,IAAI,aAAa,MAAM,MAAM;AAChE,eAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK,GAAG;AAC7C,cAAM,QAAQ,WAAW,CAAC;AAC1B,cAAM,OAAO,OAAO,CAAC;AACrB,cAAM,YAAY,GAAG,KAAK,IAAI,IAAI;AAClC,YAAI,KAAK,IAAI,SAAS,EAAG;AACzB,aAAK,IAAI,SAAS;AAClB,cAAM,mBAAmB,EAAE,YAAY,OAAO,YAAY,UAAU,OAAO,UAAU,OAAO,KAAK,CAAC;AAClG,eAAO,KAAK;AAAA,UACV,aAAa,OAAO;AAAA,UACpB,WAAW,OAAO,OAAO,QAAQ;AAAA,UACjC,iBAAiB,MAAM;AAAA,UACvB,WAAW,MAAM;AAAA,UACjB;AAAA,UACA,YAAY;AAAA,UACZ,OAAO,OAAO,iBAAiB,QAAQ;AAAA,QACzC,CAAC;AACD,YAAI,cAAc;AAChB,qBAAW,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,QACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,cAAc;AAChB,UAAM,eAAe;AAAA,MACnB,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,YAAY,WAAW;AAAA,MACvB,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACA,QAAM,iBAAiB,EAAE,YAAY,OAAO,YAAY,UAAU,OAAO,UAAU,YAAY,OAAO,OAAO,CAAC;AAE9G,SAAO;AACT;AAEA,SAAS,gBAAgB,UAAkB,KAAyD;AAClG,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,QAA2B,CAAC;AAClC,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,SAAS,OAAO,KAAK,GAAG,GAAG;AACpC,UAAM,MAAM,GAAG,QAAQ,IAAI,KAAK;AAChC,QAAI,OAAO,IAAI,GAAG,EAAG;AACrB,WAAO,IAAI,GAAG;AACd,UAAM,KAAK,CAAC,UAAU,KAAK,CAAC;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,eAAsB,6BACpB,IACA,QACe;AACf,QAAM,OAAO,qBAAqB,MAAM;AACxC,QAAM,SAAS,OAAO,UAAU,oBAAoB;AACpD,MAAI,CAAC,OAAO,QAAS;AACrB,QAAM,iBAAiB,OAAO,kBAAkB;AAChD,QAAM,WAAW,OAAO,YAAY;AACpC,QAAM,aAAa,gBAAgB,OAAO,OAAO,QAAQ,GAAG,OAAO,GAAG;AAEtE,QAAM,GAAG,YAAY,EAAE,QAAQ,OAAO,QAAQ;AAC5C,QAAI,cAAc,IACf,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,qCAA8C,QAAQ,EAAE;AACjE,QAAI,WAAW,QAAQ;AACrB,oBAAc,YAAY,MAAM,CAAC,OAAY,GAAG;AAAA,QAC9C,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,IAAI;AAAA,UACtC,GAAG,aAAoB,KAAK,GAAG;AAAA,UAC/B,GAAG,SAAgB,KAAK,KAAK;AAAA,QAC/B,CAAC,CAAC;AAAA,MACJ,CAAC;AAAA,IACH,OAAO;AACL,oBAAc,YAAY,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC;AAAA,IAClF;AACA,UAAM,YAAY,QAAQ;AAC1B,QAAI,CAAC,KAAK,OAAQ;AAClB,UAAM,WAAW,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,WAAW,EAAE;AACvE,eAAW,SAAS,MAAM,UAAU,iBAAiB,GAAG;AACtD,YAAM,IAAI,WAAW,eAAsB,EAAE,OAAO,KAAY,EAAE,QAAQ;AAAA,IAC5E;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,4BACpB,IACA,QACe;AACf,QAAM,iBAAiB,OAAO,kBAAkB;AAChD,QAAM,WAAW,OAAO,YAAY;AACpC,QAAM,GACH,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC,EACtD,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,qCAA8C,QAAQ,EAAE,EAC9D,QAAQ;AACb;AAEA,eAAsB,4BACpB,IACA,UACe;AACf,MAAI,CAAC,SAAS,OAAQ;AACtB,QAAM,SAAS,oBAAoB;AACnC,MAAI,CAAC,OAAO,QAAS;AAErB,QAAM,OAAO,SAAS,QAAQ,CAAC,YAAY,qBAAqB,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;AACvF,MAAI,CAAC,KAAK,QAAQ;AAChB,UAAM,aAAa,SAAS,CAAC,GAAG;AAChC,QAAI,CAAC,WAAY;AACjB,UAAM,MAAM,SAAS,IAAI,CAAC,MAAM,OAAO,EAAE,QAAQ,CAAC;AAClD,UAAM,GACH,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,aAAoB,MAAM,GAAG,EACnC,QAAQ;AACX;AAAA,EACF;AAEA,QAAM,WAAW,CAAC,KAAoB,WAA0B,GAAG,OAAO,UAAU,IAAI,UAAU,UAAU;AAC5G,QAAM,eAAe,oBAAI,IAA0F;AAEnH,aAAW,WAAW,UAAU;AAC9B,UAAM,MAAM,QAAQ,kBAAkB;AACtC,UAAM,SAAS,QAAQ,YAAY;AACnC,UAAM,MAAM,SAAS,KAAK,MAAM;AAChC,UAAM,SAAS,aAAa,IAAI,GAAG,KAAK,EAAE,gBAAgB,KAAK,UAAU,QAAQ,KAAK,oBAAI,IAAY,EAAE;AACxG,WAAO,IAAI,IAAI,OAAO,QAAQ,QAAQ,CAAC;AACvC,iBAAa,IAAI,KAAK,MAAM;AAAA,EAC9B;AAEA,QAAM,GAAG,YAAY,EAAE,QAAQ,OAAO,QAAQ;AAC5C,eAAW,CAAC,EAAE,MAAM,KAAK,aAAa,QAAQ,GAAG;AAG/C,YAAM,cAAc,IACjB,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,SAAS,CAAC,EAAE,UAAU,EACvD,MAAM,2CAAoD,OAAO,cAAc,EAAE,EACjF,MAAM,qCAA8C,OAAO,QAAQ,EAAE,EACrE,MAAM,aAAoB,MAAM,MAAM,KAAK,OAAO,GAAG,CAAC;AACzD,YAAM,YAAY,QAAQ;AAAA,IAC5B;AACA,UAAM,wBAAwB,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,WAAW,EAAE;AACpF,eAAW,SAAS,MAAM,uBAAuB,iBAAiB,GAAG;AACnE,YAAM,IAAI,WAAW,eAAsB,EAAE,OAAO,KAAY,EAAE,QAAQ;AAAA,IAC5E;AAAA,EACF,CAAC;AACH;",
+  "sourcesContent": ["import { type Kysely, type Transaction, sql } from 'kysely'\nimport {\n  isSearchFieldBlocklisted,\n  resolveSearchConfig,\n  resolveSearchTokenLimits,\n  type SearchConfig,\n} from '@open-mercato/shared/lib/search/config'\nimport { tokenizeText } from '@open-mercato/shared/lib/search/tokenize'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('query_index').child({ component: 'search-tokens' })\n\nconst INSERT_BATCH_SIZE = 500\n\nfunction chunk<T>(items: T[], size: number): T[][] {\n  if (size <= 0) return [items]\n  const out: T[][] = []\n  for (let i = 0; i < items.length; i += size) out.push(items.slice(i, i + size))\n  return out\n}\n\nexport type SearchTokenRow = {\n  entity_type: string\n  entity_id: string\n  organization_id: string | null\n  tenant_id: string | null\n  field: string\n  token_hash: string\n  token?: string | null\n}\n\ntype BuildTokenOptions = {\n  entityType: string\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n  doc?: Record<string, unknown> | null\n  config?: SearchConfig\n}\n\nconst DEFAULT_SCOPE = { organizationId: null, tenantId: null }\ntype EntityFieldPair = [string, string]\ntype SearchTokenExecutor = Kysely<any> | Transaction<any>\n\nexport const isSearchDebugEnabled = (): boolean => {\n  return parseBooleanToken(process.env.OM_SEARCH_DEBUG ?? '') === true\n}\n\nconst debug = (event: string, payload: Record<string, unknown>) => {\n  if (!isSearchDebugEnabled()) return\n  try {\n    logger.debug('Search token event', { event, payload })\n  } catch {\n    // ignore\n  }\n}\n\nfunction collectTextValues(value: unknown): string[] {\n  if (typeof value === 'string') return [value]\n  if (Array.isArray(value)) {\n    const out: string[] = []\n    for (const entry of value) {\n      if (typeof entry === 'string') out.push(entry)\n    }\n    return out\n  }\n  return []\n}\n\nfunction shouldIndexField(\n  field: string,\n  value: unknown,\n  config: SearchConfig,\n  entityType: string | null,\n): boolean {\n  if (typeof value !== 'string' && !Array.isArray(value)) return false\n  const lower = field.toLowerCase()\n  if (lower === 'id' || lower.endsWith('_id') || lower.endsWith('.id')) return false\n  if (lower.endsWith('_at')) return false\n  if (['created_at', 'updated_at', 'deleted_at', 'tenant_id', 'organization_id'].includes(lower)) return false\n  if (isSearchFieldBlocklisted(field, entityType, config)) return false\n  return collectTextValues(value).some((text) => text.length > 0)\n}\n\nexport function buildSearchTokenRows(params: BuildTokenOptions): SearchTokenRow[] {\n  const config = params.config ?? resolveSearchConfig()\n  if (!config.enabled) return []\n  if (!params.doc) return []\n  const tokens: SearchTokenRow[] = []\n  const capturePairs = isSearchDebugEnabled() && params.entityType === 'customers:customer_deal'\n  const debugPairs: Array<{ field: string; hash: string }> = []\n  const scope = {\n    organizationId: params.organizationId ?? DEFAULT_SCOPE.organizationId,\n    tenantId: params.tenantId ?? DEFAULT_SCOPE.tenantId,\n  }\n  const limits = resolveSearchTokenLimits(config)\n  const recordLimit = limits.maxTokensPerRecord > 0 ? limits.maxTokensPerRecord : Number.POSITIVE_INFINITY\n  const fieldLimit = limits.maxTokensPerField > 0 ? limits.maxTokensPerField : Number.POSITIVE_INFINITY\n\n  for (const [field, rawValue] of Object.entries(params.doc)) {\n    if (tokens.length >= recordLimit) break\n    if (!shouldIndexField(field, rawValue, config, params.entityType)) continue\n    const values = collectTextValues(rawValue)\n    const seen = new Set<string>()\n    let fieldTokenCount = 0\n    for (const text of values) {\n      if (tokens.length >= recordLimit || fieldTokenCount >= fieldLimit) break\n      const remainingLimit = Math.min(recordLimit - tokens.length, fieldLimit - fieldTokenCount)\n      const candidateLimit = fieldTokenCount + remainingLimit\n      const tokenConfig = Number.isFinite(candidateLimit)\n        ? { ...config, maxTokensPerField: candidateLimit }\n        : config\n      const { tokens: textTokens, hashes } = tokenizeText(text, tokenConfig)\n      for (let i = 0; i < textTokens.length; i += 1) {\n        if (tokens.length >= recordLimit || fieldTokenCount >= fieldLimit) break\n        const token = textTokens[i]\n        const hash = hashes[i]\n        const dedupeKey = `${field}|${hash}`\n        if (seen.has(dedupeKey)) continue\n        seen.add(dedupeKey)\n        fieldTokenCount += 1\n        debug('token.generated', { entityType: params.entityType, recordId: params.recordId, field, hash })\n        tokens.push({\n          entity_type: params.entityType,\n          entity_id: String(params.recordId),\n          organization_id: scope.organizationId,\n          tenant_id: scope.tenantId,\n          field,\n          token_hash: hash,\n          token: config.storeRawTokens ? token : null,\n        })\n        if (capturePairs) {\n          debugPairs.push({ field, hash })\n        }\n      }\n    }\n  }\n  if (capturePairs) {\n    debug('deal.tokens', {\n      entityType: params.entityType,\n      recordId: params.recordId,\n      tokenCount: debugPairs.length,\n      tokens: debugPairs,\n    })\n  }\n  debug('doc.completed', { entityType: params.entityType, recordId: params.recordId, tokenCount: tokens.length })\n\n  return tokens\n}\n\nfunction buildFieldPairs(recordId: string, doc?: Record<string, unknown> | null): EntityFieldPair[] {\n  if (!doc) return []\n  const pairs: EntityFieldPair[] = []\n  const dedupe = new Set<string>()\n  for (const field of Object.keys(doc)) {\n    const key = `${recordId}|${field}`\n    if (dedupe.has(key)) continue\n    dedupe.add(key)\n    pairs.push([recordId, field])\n  }\n  return pairs\n}\n\nexport async function replaceSearchTokensForRecord(\n  db: Kysely<any>,\n  params: BuildTokenOptions,\n  options?: { trx?: SearchTokenExecutor },\n): Promise<void> {\n  const rows = buildSearchTokenRows(params)\n  const config = params.config ?? resolveSearchConfig()\n  if (!config.enabled) return\n  const organizationId = params.organizationId ?? null\n  const tenantId = params.tenantId ?? null\n  const fieldPairs = buildFieldPairs(String(params.recordId), params.doc)\n\n  const writeTokens = async (executor: SearchTokenExecutor): Promise<void> => {\n    let deleteQuery = executor\n      .deleteFrom('search_tokens' as any)\n      .where('entity_type' as any, '=', params.entityType)\n      .where(sql<boolean>`organization_id is not distinct from ${organizationId}`)\n      .where(sql<boolean>`tenant_id is not distinct from ${tenantId}`)\n    if (fieldPairs.length) {\n      deleteQuery = deleteQuery.where((eb: any) => eb.or(\n        fieldPairs.map(([rid, field]) => eb.and([\n          eb('entity_id' as any, '=', rid),\n          eb('field' as any, '=', field),\n        ])),\n      ))\n    } else {\n      deleteQuery = deleteQuery.where('entity_id' as any, '=', String(params.recordId))\n    }\n    await deleteQuery.execute()\n    if (!rows.length) return\n    const payloads = rows.map((row) => ({ ...row, created_at: sql`now()` }))\n    for (const batch of chunk(payloads, INSERT_BATCH_SIZE)) {\n      await executor.insertInto('search_tokens' as any).values(batch as any).execute()\n    }\n  }\n\n  if (options?.trx) {\n    await writeTokens(options.trx)\n    return\n  }\n\n  await db.transaction().execute(writeTokens)\n}\n\nexport async function deleteSearchTokensForRecord(\n  db: Kysely<any>,\n  params: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null },\n  options?: { trx?: SearchTokenExecutor },\n): Promise<void> {\n  const organizationId = params.organizationId ?? null\n  const tenantId = params.tenantId ?? null\n  const executor = options?.trx ?? db\n  await executor\n    .deleteFrom('search_tokens' as any)\n    .where('entity_type' as any, '=', params.entityType)\n    .where('entity_id' as any, '=', String(params.recordId))\n    .where(sql<boolean>`organization_id is not distinct from ${organizationId}`)\n    .where(sql<boolean>`tenant_id is not distinct from ${tenantId}`)\n    .execute()\n}\n\nexport async function replaceSearchTokensForBatch(\n  db: Kysely<any>,\n  payloads: Array<BuildTokenOptions & { doc: Record<string, unknown> }>\n): Promise<void> {\n  if (!payloads.length) return\n  const config = resolveSearchConfig()\n  if (!config.enabled) return\n\n  const rows = payloads.flatMap((payload) => buildSearchTokenRows({ ...payload, config }))\n  if (!rows.length) {\n    const entityType = payloads[0]?.entityType\n    if (!entityType) return\n    const ids = payloads.map((p) => String(p.recordId))\n    await db\n      .deleteFrom('search_tokens' as any)\n      .where('entity_type' as any, '=', entityType)\n      .where('entity_id' as any, 'in', ids)\n      .execute()\n    return\n  }\n\n  const scopeKey = (org: string | null, tenant: string | null) => `${org ?? '__null__'}|${tenant ?? '__null__'}`\n  const scopeBuckets = new Map<string, { organizationId: string | null; tenantId: string | null; ids: Set<string> }>()\n\n  for (const payload of payloads) {\n    const org = payload.organizationId ?? null\n    const tenant = payload.tenantId ?? null\n    const key = scopeKey(org, tenant)\n    const bucket = scopeBuckets.get(key) ?? { organizationId: org, tenantId: tenant, ids: new Set<string>() }\n    bucket.ids.add(String(payload.recordId))\n    scopeBuckets.set(key, bucket)\n  }\n\n  await db.transaction().execute(async (trx) => {\n    for (const [, bucket] of scopeBuckets.entries()) {\n      // Delete by entity_id: a batch replaces all of a record's tokens, and a per-field OR over the\n      // whole batch overflows the query compiler's call stack on large batches.\n      const deleteQuery = trx\n        .deleteFrom('search_tokens' as any)\n        .where('entity_type' as any, '=', payloads[0].entityType)\n        .where(sql<boolean>`organization_id is not distinct from ${bucket.organizationId}`)\n        .where(sql<boolean>`tenant_id is not distinct from ${bucket.tenantId}`)\n        .where('entity_id' as any, 'in', Array.from(bucket.ids))\n      await deleteQuery.execute()\n    }\n    const payloadWithTimestamps = rows.map((row) => ({ ...row, created_at: sql`now()` }))\n    for (const batch of chunk(payloadWithTimestamps, INSERT_BATCH_SIZE)) {\n      await trx.insertInto('search_tokens' as any).values(batch as any).execute()\n    }\n  })\n}\n"],
+  "mappings": "AAAA,SAAwC,WAAW;AACnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAE/E,MAAM,oBAAoB;AAE1B,SAAS,MAAS,OAAY,MAAqB;AACjD,MAAI,QAAQ,EAAG,QAAO,CAAC,KAAK;AAC5B,QAAM,MAAa,CAAC;AACpB,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,KAAM,KAAI,KAAK,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC;AAC9E,SAAO;AACT;AAqBA,MAAM,gBAAgB,EAAE,gBAAgB,MAAM,UAAU,KAAK;AAItD,MAAM,uBAAuB,MAAe;AACjD,SAAO,kBAAkB,QAAQ,IAAI,mBAAmB,EAAE,MAAM;AAClE;AAEA,MAAM,QAAQ,CAAC,OAAe,YAAqC;AACjE,MAAI,CAAC,qBAAqB,EAAG;AAC7B,MAAI;AACF,WAAO,MAAM,sBAAsB,EAAE,OAAO,QAAQ,CAAC;AAAA,EACvD,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,kBAAkB,OAA0B;AACnD,MAAI,OAAO,UAAU,SAAU,QAAO,CAAC,KAAK;AAC5C,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAM,MAAgB,CAAC;AACvB,eAAW,SAAS,OAAO;AACzB,UAAI,OAAO,UAAU,SAAU,KAAI,KAAK,KAAK;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AACA,SAAO,CAAC;AACV;AAEA,SAAS,iBACP,OACA,OACA,QACA,YACS;AACT,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAC/D,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,UAAU,QAAQ,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,KAAK,EAAG,QAAO;AAC7E,MAAI,MAAM,SAAS,KAAK,EAAG,QAAO;AAClC,MAAI,CAAC,cAAc,cAAc,cAAc,aAAa,iBAAiB,EAAE,SAAS,KAAK,EAAG,QAAO;AACvG,MAAI,yBAAyB,OAAO,YAAY,MAAM,EAAG,QAAO;AAChE,SAAO,kBAAkB,KAAK,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;AAChE;AAEO,SAAS,qBAAqB,QAA6C;AAChF,QAAM,SAAS,OAAO,UAAU,oBAAoB;AACpD,MAAI,CAAC,OAAO,QAAS,QAAO,CAAC;AAC7B,MAAI,CAAC,OAAO,IAAK,QAAO,CAAC;AACzB,QAAM,SAA2B,CAAC;AAClC,QAAM,eAAe,qBAAqB,KAAK,OAAO,eAAe;AACrE,QAAM,aAAqD,CAAC;AAC5D,QAAM,QAAQ;AAAA,IACZ,gBAAgB,OAAO,kBAAkB,cAAc;AAAA,IACvD,UAAU,OAAO,YAAY,cAAc;AAAA,EAC7C;AACA,QAAM,SAAS,yBAAyB,MAAM;AAC9C,QAAM,cAAc,OAAO,qBAAqB,IAAI,OAAO,qBAAqB,OAAO;AACvF,QAAM,aAAa,OAAO,oBAAoB,IAAI,OAAO,oBAAoB,OAAO;AAEpF,aAAW,CAAC,OAAO,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG,GAAG;AAC1D,QAAI,OAAO,UAAU,YAAa;AAClC,QAAI,CAAC,iBAAiB,OAAO,UAAU,QAAQ,OAAO,UAAU,EAAG;AACnE,UAAM,SAAS,kBAAkB,QAAQ;AACzC,UAAM,OAAO,oBAAI,IAAY;AAC7B,QAAI,kBAAkB;AACtB,eAAW,QAAQ,QAAQ;AACzB,UAAI,OAAO,UAAU,eAAe,mBAAmB,WAAY;AACnE,YAAM,iBAAiB,KAAK,IAAI,cAAc,OAAO,QAAQ,aAAa,eAAe;AACzF,YAAM,iBAAiB,kBAAkB;AACzC,YAAM,cAAc,OAAO,SAAS,cAAc,IAC9C,EAAE,GAAG,QAAQ,mBAAmB,eAAe,IAC/C;AACJ,YAAM,EAAE,QAAQ,YAAY,OAAO,IAAI,aAAa,MAAM,WAAW;AACrE,eAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK,GAAG;AAC7C,YAAI,OAAO,UAAU,eAAe,mBAAmB,WAAY;AACnE,cAAM,QAAQ,WAAW,CAAC;AAC1B,cAAM,OAAO,OAAO,CAAC;AACrB,cAAM,YAAY,GAAG,KAAK,IAAI,IAAI;AAClC,YAAI,KAAK,IAAI,SAAS,EAAG;AACzB,aAAK,IAAI,SAAS;AAClB,2BAAmB;AACnB,cAAM,mBAAmB,EAAE,YAAY,OAAO,YAAY,UAAU,OAAO,UAAU,OAAO,KAAK,CAAC;AAClG,eAAO,KAAK;AAAA,UACV,aAAa,OAAO;AAAA,UACpB,WAAW,OAAO,OAAO,QAAQ;AAAA,UACjC,iBAAiB,MAAM;AAAA,UACvB,WAAW,MAAM;AAAA,UACjB;AAAA,UACA,YAAY;AAAA,UACZ,OAAO,OAAO,iBAAiB,QAAQ;AAAA,QACzC,CAAC;AACD,YAAI,cAAc;AAChB,qBAAW,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,QACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,cAAc;AAChB,UAAM,eAAe;AAAA,MACnB,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,YAAY,WAAW;AAAA,MACvB,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACA,QAAM,iBAAiB,EAAE,YAAY,OAAO,YAAY,UAAU,OAAO,UAAU,YAAY,OAAO,OAAO,CAAC;AAE9G,SAAO;AACT;AAEA,SAAS,gBAAgB,UAAkB,KAAyD;AAClG,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,QAA2B,CAAC;AAClC,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,SAAS,OAAO,KAAK,GAAG,GAAG;AACpC,UAAM,MAAM,GAAG,QAAQ,IAAI,KAAK;AAChC,QAAI,OAAO,IAAI,GAAG,EAAG;AACrB,WAAO,IAAI,GAAG;AACd,UAAM,KAAK,CAAC,UAAU,KAAK,CAAC;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,eAAsB,6BACpB,IACA,QACA,SACe;AACf,QAAM,OAAO,qBAAqB,MAAM;AACxC,QAAM,SAAS,OAAO,UAAU,oBAAoB;AACpD,MAAI,CAAC,OAAO,QAAS;AACrB,QAAM,iBAAiB,OAAO,kBAAkB;AAChD,QAAM,WAAW,OAAO,YAAY;AACpC,QAAM,aAAa,gBAAgB,OAAO,OAAO,QAAQ,GAAG,OAAO,GAAG;AAEtE,QAAM,cAAc,OAAO,aAAiD;AAC1E,QAAI,cAAc,SACf,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,qCAA8C,QAAQ,EAAE;AACjE,QAAI,WAAW,QAAQ;AACrB,oBAAc,YAAY,MAAM,CAAC,OAAY,GAAG;AAAA,QAC9C,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,IAAI;AAAA,UACtC,GAAG,aAAoB,KAAK,GAAG;AAAA,UAC/B,GAAG,SAAgB,KAAK,KAAK;AAAA,QAC/B,CAAC,CAAC;AAAA,MACJ,CAAC;AAAA,IACH,OAAO;AACL,oBAAc,YAAY,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC;AAAA,IAClF;AACA,UAAM,YAAY,QAAQ;AAC1B,QAAI,CAAC,KAAK,OAAQ;AAClB,UAAM,WAAW,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,WAAW,EAAE;AACvE,eAAW,SAAS,MAAM,UAAU,iBAAiB,GAAG;AACtD,YAAM,SAAS,WAAW,eAAsB,EAAE,OAAO,KAAY,EAAE,QAAQ;AAAA,IACjF;AAAA,EACF;AAEA,MAAI,SAAS,KAAK;AAChB,UAAM,YAAY,QAAQ,GAAG;AAC7B;AAAA,EACF;AAEA,QAAM,GAAG,YAAY,EAAE,QAAQ,WAAW;AAC5C;AAEA,eAAsB,4BACpB,IACA,QACA,SACe;AACf,QAAM,iBAAiB,OAAO,kBAAkB;AAChD,QAAM,WAAW,OAAO,YAAY;AACpC,QAAM,WAAW,SAAS,OAAO;AACjC,QAAM,SACH,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC,EACtD,MAAM,2CAAoD,cAAc,EAAE,EAC1E,MAAM,qCAA8C,QAAQ,EAAE,EAC9D,QAAQ;AACb;AAEA,eAAsB,4BACpB,IACA,UACe;AACf,MAAI,CAAC,SAAS,OAAQ;AACtB,QAAM,SAAS,oBAAoB;AACnC,MAAI,CAAC,OAAO,QAAS;AAErB,QAAM,OAAO,SAAS,QAAQ,CAAC,YAAY,qBAAqB,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;AACvF,MAAI,CAAC,KAAK,QAAQ;AAChB,UAAM,aAAa,SAAS,CAAC,GAAG;AAChC,QAAI,CAAC,WAAY;AACjB,UAAM,MAAM,SAAS,IAAI,CAAC,MAAM,OAAO,EAAE,QAAQ,CAAC;AAClD,UAAM,GACH,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,aAAoB,MAAM,GAAG,EACnC,QAAQ;AACX;AAAA,EACF;AAEA,QAAM,WAAW,CAAC,KAAoB,WAA0B,GAAG,OAAO,UAAU,IAAI,UAAU,UAAU;AAC5G,QAAM,eAAe,oBAAI,IAA0F;AAEnH,aAAW,WAAW,UAAU;AAC9B,UAAM,MAAM,QAAQ,kBAAkB;AACtC,UAAM,SAAS,QAAQ,YAAY;AACnC,UAAM,MAAM,SAAS,KAAK,MAAM;AAChC,UAAM,SAAS,aAAa,IAAI,GAAG,KAAK,EAAE,gBAAgB,KAAK,UAAU,QAAQ,KAAK,oBAAI,IAAY,EAAE;AACxG,WAAO,IAAI,IAAI,OAAO,QAAQ,QAAQ,CAAC;AACvC,iBAAa,IAAI,KAAK,MAAM;AAAA,EAC9B;AAEA,QAAM,GAAG,YAAY,EAAE,QAAQ,OAAO,QAAQ;AAC5C,eAAW,CAAC,EAAE,MAAM,KAAK,aAAa,QAAQ,GAAG;AAG/C,YAAM,cAAc,IACjB,WAAW,eAAsB,EACjC,MAAM,eAAsB,KAAK,SAAS,CAAC,EAAE,UAAU,EACvD,MAAM,2CAAoD,OAAO,cAAc,EAAE,EACjF,MAAM,qCAA8C,OAAO,QAAQ,EAAE,EACrE,MAAM,aAAoB,MAAM,MAAM,KAAK,OAAO,GAAG,CAAC;AACzD,YAAM,YAAY,QAAQ;AAAA,IAC5B;AACA,UAAM,wBAAwB,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,WAAW,EAAE;AACpF,eAAW,SAAS,MAAM,uBAAuB,iBAAiB,GAAG;AACnE,YAAM,IAAI,WAAW,eAAsB,EAAE,OAAO,KAAY,EAAE,QAAQ;AAAA,IAC5E;AAAA,EACF,CAAC;AACH;",
   "names": []
 }

package/dist/modules/query_index/lib/subscriber-scope.js

@@ -1,5 +1,6 @@
 import { getEntityIds } from "@open-mercato/shared/lib/encryption/entityIds";
 import { resolveRegisteredEntityTableName } from "@open-mercato/shared/lib/query/engine";
+import { listEntityMetadata } from "@open-mercato/shared/lib/db/entityMetadata";
 class QueryIndexScopeError extends Error {
   constructor(message) {
     super(message);
@@ -15,9 +16,7 @@ function resolveQueryIndexSourceMetadata(em, entityType) {
   if (!table) {
     throw new QueryIndexScopeError(`Query index entity type has no registered ORM table: ${entityType}`);
   }
-  const registry = em.getMetadata?.();
-  const allMetadataRaw = typeof registry?.getAll === "function" ? registry.getAll() : null;
-  const allMetadata = Array.isArray(allMetadataRaw) ? allMetadataRaw : allMetadataRaw instanceof Map ? Array.from(allMetadataRaw.values()) : Object.values(allMetadataRaw ?? {});
+  const allMetadata = listEntityMetadata(em);
   const metadata = allMetadata.find((candidate) => String(candidate.tableName ?? "") === table);
   if (!metadata) {
     throw new QueryIndexScopeError(`Query index entity metadata was not found for table: ${table}`);

package/dist/modules/query_index/lib/subscriber-scope.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/subscriber-scope.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getEntityIds } from '@open-mercato/shared/lib/encryption/entityIds'\nimport { resolveRegisteredEntityTableName } from '@open-mercato/shared/lib/query/engine'\n\nexport type QueryIndexScope = {\n  tenantId: string | null\n  organizationId: string | null\n}\n\nexport type QueryIndexSourceMetadata = {\n  table: string\n  organizationColumn: string | null\n  tenantColumn: string | null\n}\n\nexport type QueryIndexSourceScope =\n  | { kind: 'global' }\n  | { kind: 'missing' }\n  | { kind: 'row'; scope: QueryIndexScope }\n\ntype QueryIndexEntityMetadata = {\n  tableName?: unknown\n  properties?: Record<string, { fieldNames?: unknown }>\n}\n\nexport class QueryIndexScopeError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'QueryIndexScopeError'\n  }\n}\n\ntype ResolveRecordScopeInput = {\n  payloadTenantId: string | null | undefined\n  payloadOrganizationId: string | null | undefined\n  hasPayloadTenantId: boolean\n  hasPayloadOrganizationId: boolean\n  sourceScope: QueryIndexSourceScope\n}\n\ntype ResolveReindexScopeInput = {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n  allowAllTenants?: boolean\n}\n\nexport function resolveQueryIndexSourceMetadata(\n  em: EntityManager,\n  entityType: string,\n): QueryIndexSourceMetadata {\n  const registeredEntityIds = Object.values(getEntityIds(false)).flatMap((moduleEntities) => Object.values(moduleEntities ?? {}))\n  if (!registeredEntityIds.includes(entityType)) {\n    throw new QueryIndexScopeError(`Query index entity type is not registered: ${entityType}`)\n  }\n\n  const table = resolveRegisteredEntityTableName(em, entityType as never)\n  if (!table) {\n    throw new QueryIndexScopeError(`Query index entity type has no registered ORM table: ${entityType}`)\n  }\n\n  const registry = em.getMetadata?.()\n  const allMetadataRaw = typeof registry?.getAll === 'function' ? registry.getAll() : null\n  const allMetadata: QueryIndexEntityMetadata[] = Array.isArray(allMetadataRaw)\n    ? allMetadataRaw as QueryIndexEntityMetadata[]\n    : allMetadataRaw instanceof Map\n      ? Array.from(allMetadataRaw.values()) as QueryIndexEntityMetadata[]\n      : Object.values(allMetadataRaw ?? {}) as QueryIndexEntityMetadata[]\n  const metadata = allMetadata.find((candidate) => String(candidate.tableName ?? '') === table)\n  if (!metadata) {\n    throw new QueryIndexScopeError(`Query index entity metadata was not found for table: ${table}`)\n  }\n\n  return {\n    table,\n    organizationColumn: resolveScopeColumn(metadata, 'organizationId', table),\n    tenantColumn: resolveScopeColumn(metadata, 'tenantId', table),\n  }\n}\n\nexport async function loadQueryIndexRowScope(\n  em: EntityManager,\n  source: QueryIndexSourceMetadata,\n  recordId: string,\n): Promise<QueryIndexSourceScope> {\n  if (!source.organizationColumn && !source.tenantColumn) {\n    return { kind: 'global' }\n  }\n\n  const db = em.getKysely<any>()\n  const columns = [source.organizationColumn, source.tenantColumn].filter((column): column is string => column !== null)\n  const row = await db\n    .selectFrom(source.table as any)\n    .select(columns as any)\n    .where('id' as any, '=', recordId)\n    .executeTakeFirst() as Record<string, string | null | undefined> | undefined\n\n  if (!row) {\n    return { kind: 'missing' }\n  }\n\n  return {\n    kind: 'row',\n    scope: {\n      organizationId: source.organizationColumn ? row[source.organizationColumn] ?? null : null,\n      tenantId: source.tenantColumn ? row[source.tenantColumn] ?? null : null,\n    },\n  }\n}\n\nexport function resolveQueryIndexRecordScope(input: ResolveRecordScopeInput): QueryIndexScope {\n  const {\n    payloadTenantId,\n    payloadOrganizationId,\n    hasPayloadTenantId,\n    hasPayloadOrganizationId,\n    sourceScope,\n  } = input\n\n  if (sourceScope.kind === 'global') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId || payloadTenantId !== null || payloadOrganizationId !== null) {\n      throw new QueryIndexScopeError(\n        'Query index event for a global entity must explicitly provide tenantId and organizationId as null'\n      )\n    }\n\n    return {\n      tenantId: null,\n      organizationId: null,\n    }\n  }\n\n  if (sourceScope.kind === 'missing') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId) {\n      throw new QueryIndexScopeError(\n        'Query index event is missing tenantId/organizationId and source row scope could not be resolved'\n      )\n    }\n\n    return {\n      tenantId: payloadTenantId ?? null,\n      organizationId: payloadOrganizationId ?? null,\n    }\n  }\n\n  const rowScope = sourceScope.scope\n\n  if (hasPayloadTenantId && !isSameScopeValue(payloadTenantId, rowScope.tenantId)) {\n    throw new QueryIndexScopeError(\n      `Query index event tenantId does not match source row scope (payload=${String(payloadTenantId ?? null)}, row=${String(rowScope.tenantId)})`\n    )\n  }\n\n  if (hasPayloadOrganizationId && !isSameScopeValue(payloadOrganizationId, rowScope.organizationId)) {\n    throw new QueryIndexScopeError(\n      `Query index event organizationId does not match source row scope (payload=${String(payloadOrganizationId ?? null)}, row=${String(rowScope.organizationId)})`\n    )\n  }\n\n  return {\n    tenantId: hasPayloadTenantId ? (payloadTenantId ?? null) : rowScope.tenantId,\n    organizationId: hasPayloadOrganizationId ? (payloadOrganizationId ?? null) : rowScope.organizationId,\n  }\n}\n\nexport function resolveQueryIndexReindexScope(input: ResolveReindexScopeInput): {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n} {\n  if (input.tenantId === undefined && input.allowAllTenants !== true) {\n    throw new QueryIndexScopeError(\n      'Query index reindex requires tenantId to be set explicitly; all-tenant reindex must opt in with allowAllTenants=true'\n    )\n  }\n\n  return {\n    tenantId: input.tenantId,\n    organizationId: input.organizationId,\n  }\n}\n\nfunction isSameScopeValue(left: string | null | undefined, right: string | null): boolean {\n  return (left ?? null) === right\n}\n\nfunction resolveScopeColumn(metadata: QueryIndexEntityMetadata, property: string, table: string): string | null {\n  const scopeProperty = metadata.properties?.[property]\n  if (!scopeProperty) return null\n  const fieldNames = scopeProperty.fieldNames\n  if (!Array.isArray(fieldNames) || fieldNames.length !== 1 || typeof fieldNames[0] !== 'string' || !fieldNames[0]) {\n    throw new QueryIndexScopeError(\n      `Query index ${property} metadata must map exactly one physical column for table: ${table}`\n    )\n  }\n  return fieldNames[0]\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,wCAAwC;AAuB1C,MAAM,6BAA6B,MAAM;AAAA,EAC9C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAgBO,SAAS,gCACd,IACA,YAC0B;AAC1B,QAAM,sBAAsB,OAAO,OAAO,aAAa,KAAK,CAAC,EAAE,QAAQ,CAAC,mBAAmB,OAAO,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAC9H,MAAI,CAAC,oBAAoB,SAAS,UAAU,GAAG;AAC7C,UAAM,IAAI,qBAAqB,8CAA8C,UAAU,EAAE;AAAA,EAC3F;AAEA,QAAM,QAAQ,iCAAiC,IAAI,UAAmB;AACtE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,qBAAqB,wDAAwD,UAAU,EAAE;AAAA,EACrG;AAEA,QAAM,WAAW,GAAG,cAAc;AAClC,QAAM,iBAAiB,OAAO,UAAU,WAAW,aAAa,SAAS,OAAO,IAAI;AACpF,QAAM,cAA0C,MAAM,QAAQ,cAAc,IACxE,iBACA,0BAA0B,MACxB,MAAM,KAAK,eAAe,OAAO,CAAC,IAClC,OAAO,OAAO,kBAAkB,CAAC,CAAC;AACxC,QAAM,WAAW,YAAY,KAAK,CAAC,cAAc,OAAO,UAAU,aAAa,EAAE,MAAM,KAAK;AAC5F,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,qBAAqB,wDAAwD,KAAK,EAAE;AAAA,EAChG;AAEA,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,mBAAmB,UAAU,kBAAkB,KAAK;AAAA,IACxE,cAAc,mBAAmB,UAAU,YAAY,KAAK;AAAA,EAC9D;AACF;AAEA,eAAsB,uBACpB,IACA,QACA,UACgC;AAChC,MAAI,CAAC,OAAO,sBAAsB,CAAC,OAAO,cAAc;AACtD,WAAO,EAAE,MAAM,SAAS;AAAA,EAC1B;AAEA,QAAM,KAAK,GAAG,UAAe;AAC7B,QAAM,UAAU,CAAC,OAAO,oBAAoB,OAAO,YAAY,EAAE,OAAO,CAAC,WAA6B,WAAW,IAAI;AACrH,QAAM,MAAM,MAAM,GACf,WAAW,OAAO,KAAY,EAC9B,OAAO,OAAc,EACrB,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AAEpB,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,MAAM,UAAU;AAAA,EAC3B;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,gBAAgB,OAAO,qBAAqB,IAAI,OAAO,kBAAkB,KAAK,OAAO;AAAA,MACrF,UAAU,OAAO,eAAe,IAAI,OAAO,YAAY,KAAK,OAAO;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,6BAA6B,OAAiD;AAC5F,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,YAAY,SAAS,UAAU;AACjC,QAAI,CAAC,sBAAsB,CAAC,4BAA4B,oBAAoB,QAAQ,0BAA0B,MAAM;AAClH,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,YAAY,SAAS,WAAW;AAClC,QAAI,CAAC,sBAAsB,CAAC,0BAA0B;AACpD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU,mBAAmB;AAAA,MAC7B,gBAAgB,yBAAyB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,WAAW,YAAY;AAE7B,MAAI,sBAAsB,CAAC,iBAAiB,iBAAiB,SAAS,QAAQ,GAAG;AAC/E,UAAM,IAAI;AAAA,MACR,uEAAuE,OAAO,mBAAmB,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ,CAAC;AAAA,IAC1I;AAAA,EACF;AAEA,MAAI,4BAA4B,CAAC,iBAAiB,uBAAuB,SAAS,cAAc,GAAG;AACjG,UAAM,IAAI;AAAA,MACR,6EAA6E,OAAO,yBAAyB,IAAI,CAAC,SAAS,OAAO,SAAS,cAAc,CAAC;AAAA,IAC5J;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,qBAAsB,mBAAmB,OAAQ,SAAS;AAAA,IACpE,gBAAgB,2BAA4B,yBAAyB,OAAQ,SAAS;AAAA,EACxF;AACF;AAEO,SAAS,8BAA8B,OAG5C;AACA,MAAI,MAAM,aAAa,UAAa,MAAM,oBAAoB,MAAM;AAClE,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB;AACF;AAEA,SAAS,iBAAiB,MAAiC,OAA+B;AACxF,UAAQ,QAAQ,UAAU;AAC5B;AAEA,SAAS,mBAAmB,UAAoC,UAAkB,OAA8B;AAC9G,QAAM,gBAAgB,SAAS,aAAa,QAAQ;AACpD,MAAI,CAAC,cAAe,QAAO;AAC3B,QAAM,aAAa,cAAc;AACjC,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,OAAO,WAAW,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,GAAG;AAChH,UAAM,IAAI;AAAA,MACR,eAAe,QAAQ,6DAA6D,KAAK;AAAA,IAC3F;AAAA,EACF;AACA,SAAO,WAAW,CAAC;AACrB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getEntityIds } from '@open-mercato/shared/lib/encryption/entityIds'\nimport { resolveRegisteredEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { listEntityMetadata } from '@open-mercato/shared/lib/db/entityMetadata'\n\nexport type QueryIndexScope = {\n  tenantId: string | null\n  organizationId: string | null\n}\n\nexport type QueryIndexSourceMetadata = {\n  table: string\n  organizationColumn: string | null\n  tenantColumn: string | null\n}\n\nexport type QueryIndexSourceScope =\n  | { kind: 'global' }\n  | { kind: 'missing' }\n  | { kind: 'row'; scope: QueryIndexScope }\n\ntype QueryIndexEntityMetadata = {\n  tableName?: unknown\n  properties?: Record<string, { fieldNames?: unknown }>\n}\n\nexport class QueryIndexScopeError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'QueryIndexScopeError'\n  }\n}\n\ntype ResolveRecordScopeInput = {\n  payloadTenantId: string | null | undefined\n  payloadOrganizationId: string | null | undefined\n  hasPayloadTenantId: boolean\n  hasPayloadOrganizationId: boolean\n  sourceScope: QueryIndexSourceScope\n}\n\ntype ResolveReindexScopeInput = {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n  allowAllTenants?: boolean\n}\n\nexport function resolveQueryIndexSourceMetadata(\n  em: EntityManager,\n  entityType: string,\n): QueryIndexSourceMetadata {\n  const registeredEntityIds = Object.values(getEntityIds(false)).flatMap((moduleEntities) => Object.values(moduleEntities ?? {}))\n  if (!registeredEntityIds.includes(entityType)) {\n    throw new QueryIndexScopeError(`Query index entity type is not registered: ${entityType}`)\n  }\n\n  const table = resolveRegisteredEntityTableName(em, entityType as never)\n  if (!table) {\n    throw new QueryIndexScopeError(`Query index entity type has no registered ORM table: ${entityType}`)\n  }\n\n  const allMetadata = listEntityMetadata(em) as unknown as QueryIndexEntityMetadata[]\n  const metadata = allMetadata.find((candidate) => String(candidate.tableName ?? '') === table)\n  if (!metadata) {\n    throw new QueryIndexScopeError(`Query index entity metadata was not found for table: ${table}`)\n  }\n\n  return {\n    table,\n    organizationColumn: resolveScopeColumn(metadata, 'organizationId', table),\n    tenantColumn: resolveScopeColumn(metadata, 'tenantId', table),\n  }\n}\n\nexport async function loadQueryIndexRowScope(\n  em: EntityManager,\n  source: QueryIndexSourceMetadata,\n  recordId: string,\n): Promise<QueryIndexSourceScope> {\n  if (!source.organizationColumn && !source.tenantColumn) {\n    return { kind: 'global' }\n  }\n\n  const db = em.getKysely<any>()\n  const columns = [source.organizationColumn, source.tenantColumn].filter((column): column is string => column !== null)\n  const row = await db\n    .selectFrom(source.table as any)\n    .select(columns as any)\n    .where('id' as any, '=', recordId)\n    .executeTakeFirst() as Record<string, string | null | undefined> | undefined\n\n  if (!row) {\n    return { kind: 'missing' }\n  }\n\n  return {\n    kind: 'row',\n    scope: {\n      organizationId: source.organizationColumn ? row[source.organizationColumn] ?? null : null,\n      tenantId: source.tenantColumn ? row[source.tenantColumn] ?? null : null,\n    },\n  }\n}\n\nexport function resolveQueryIndexRecordScope(input: ResolveRecordScopeInput): QueryIndexScope {\n  const {\n    payloadTenantId,\n    payloadOrganizationId,\n    hasPayloadTenantId,\n    hasPayloadOrganizationId,\n    sourceScope,\n  } = input\n\n  if (sourceScope.kind === 'global') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId || payloadTenantId !== null || payloadOrganizationId !== null) {\n      throw new QueryIndexScopeError(\n        'Query index event for a global entity must explicitly provide tenantId and organizationId as null'\n      )\n    }\n\n    return {\n      tenantId: null,\n      organizationId: null,\n    }\n  }\n\n  if (sourceScope.kind === 'missing') {\n    if (!hasPayloadTenantId || !hasPayloadOrganizationId) {\n      throw new QueryIndexScopeError(\n        'Query index event is missing tenantId/organizationId and source row scope could not be resolved'\n      )\n    }\n\n    return {\n      tenantId: payloadTenantId ?? null,\n      organizationId: payloadOrganizationId ?? null,\n    }\n  }\n\n  const rowScope = sourceScope.scope\n\n  if (hasPayloadTenantId && !isSameScopeValue(payloadTenantId, rowScope.tenantId)) {\n    throw new QueryIndexScopeError(\n      `Query index event tenantId does not match source row scope (payload=${String(payloadTenantId ?? null)}, row=${String(rowScope.tenantId)})`\n    )\n  }\n\n  if (hasPayloadOrganizationId && !isSameScopeValue(payloadOrganizationId, rowScope.organizationId)) {\n    throw new QueryIndexScopeError(\n      `Query index event organizationId does not match source row scope (payload=${String(payloadOrganizationId ?? null)}, row=${String(rowScope.organizationId)})`\n    )\n  }\n\n  return {\n    tenantId: hasPayloadTenantId ? (payloadTenantId ?? null) : rowScope.tenantId,\n    organizationId: hasPayloadOrganizationId ? (payloadOrganizationId ?? null) : rowScope.organizationId,\n  }\n}\n\nexport function resolveQueryIndexReindexScope(input: ResolveReindexScopeInput): {\n  tenantId: string | null | undefined\n  organizationId: string | null | undefined\n} {\n  if (input.tenantId === undefined && input.allowAllTenants !== true) {\n    throw new QueryIndexScopeError(\n      'Query index reindex requires tenantId to be set explicitly; all-tenant reindex must opt in with allowAllTenants=true'\n    )\n  }\n\n  return {\n    tenantId: input.tenantId,\n    organizationId: input.organizationId,\n  }\n}\n\nfunction isSameScopeValue(left: string | null | undefined, right: string | null): boolean {\n  return (left ?? null) === right\n}\n\nfunction resolveScopeColumn(metadata: QueryIndexEntityMetadata, property: string, table: string): string | null {\n  const scopeProperty = metadata.properties?.[property]\n  if (!scopeProperty) return null\n  const fieldNames = scopeProperty.fieldNames\n  if (!Array.isArray(fieldNames) || fieldNames.length !== 1 || typeof fieldNames[0] !== 'string' || !fieldNames[0]) {\n    throw new QueryIndexScopeError(\n      `Query index ${property} metadata must map exactly one physical column for table: ${table}`\n    )\n  }\n  return fieldNames[0]\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,wCAAwC;AACjD,SAAS,0BAA0B;AAuB5B,MAAM,6BAA6B,MAAM;AAAA,EAC9C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAgBO,SAAS,gCACd,IACA,YAC0B;AAC1B,QAAM,sBAAsB,OAAO,OAAO,aAAa,KAAK,CAAC,EAAE,QAAQ,CAAC,mBAAmB,OAAO,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAC9H,MAAI,CAAC,oBAAoB,SAAS,UAAU,GAAG;AAC7C,UAAM,IAAI,qBAAqB,8CAA8C,UAAU,EAAE;AAAA,EAC3F;AAEA,QAAM,QAAQ,iCAAiC,IAAI,UAAmB;AACtE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,qBAAqB,wDAAwD,UAAU,EAAE;AAAA,EACrG;AAEA,QAAM,cAAc,mBAAmB,EAAE;AACzC,QAAM,WAAW,YAAY,KAAK,CAAC,cAAc,OAAO,UAAU,aAAa,EAAE,MAAM,KAAK;AAC5F,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,qBAAqB,wDAAwD,KAAK,EAAE;AAAA,EAChG;AAEA,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,mBAAmB,UAAU,kBAAkB,KAAK;AAAA,IACxE,cAAc,mBAAmB,UAAU,YAAY,KAAK;AAAA,EAC9D;AACF;AAEA,eAAsB,uBACpB,IACA,QACA,UACgC;AAChC,MAAI,CAAC,OAAO,sBAAsB,CAAC,OAAO,cAAc;AACtD,WAAO,EAAE,MAAM,SAAS;AAAA,EAC1B;AAEA,QAAM,KAAK,GAAG,UAAe;AAC7B,QAAM,UAAU,CAAC,OAAO,oBAAoB,OAAO,YAAY,EAAE,OAAO,CAAC,WAA6B,WAAW,IAAI;AACrH,QAAM,MAAM,MAAM,GACf,WAAW,OAAO,KAAY,EAC9B,OAAO,OAAc,EACrB,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AAEpB,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,MAAM,UAAU;AAAA,EAC3B;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,gBAAgB,OAAO,qBAAqB,IAAI,OAAO,kBAAkB,KAAK,OAAO;AAAA,MACrF,UAAU,OAAO,eAAe,IAAI,OAAO,YAAY,KAAK,OAAO;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,6BAA6B,OAAiD;AAC5F,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,YAAY,SAAS,UAAU;AACjC,QAAI,CAAC,sBAAsB,CAAC,4BAA4B,oBAAoB,QAAQ,0BAA0B,MAAM;AAClH,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,YAAY,SAAS,WAAW;AAClC,QAAI,CAAC,sBAAsB,CAAC,0BAA0B;AACpD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU,mBAAmB;AAAA,MAC7B,gBAAgB,yBAAyB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,WAAW,YAAY;AAE7B,MAAI,sBAAsB,CAAC,iBAAiB,iBAAiB,SAAS,QAAQ,GAAG;AAC/E,UAAM,IAAI;AAAA,MACR,uEAAuE,OAAO,mBAAmB,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ,CAAC;AAAA,IAC1I;AAAA,EACF;AAEA,MAAI,4BAA4B,CAAC,iBAAiB,uBAAuB,SAAS,cAAc,GAAG;AACjG,UAAM,IAAI;AAAA,MACR,6EAA6E,OAAO,yBAAyB,IAAI,CAAC,SAAS,OAAO,SAAS,cAAc,CAAC;AAAA,IAC5J;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,qBAAsB,mBAAmB,OAAQ,SAAS;AAAA,IACpE,gBAAgB,2BAA4B,yBAAyB,OAAQ,SAAS;AAAA,EACxF;AACF;AAEO,SAAS,8BAA8B,OAG5C;AACA,MAAI,MAAM,aAAa,UAAa,MAAM,oBAAoB,MAAM;AAClE,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB;AACF;AAEA,SAAS,iBAAiB,MAAiC,OAA+B;AACxF,UAAQ,QAAQ,UAAU;AAC5B;AAEA,SAAS,mBAAmB,UAAoC,UAAkB,OAA8B;AAC9G,QAAM,gBAAgB,SAAS,aAAa,QAAQ;AACpD,MAAI,CAAC,cAAe,QAAO;AAC3B,QAAM,aAAa,cAAc;AACjC,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,OAAO,WAAW,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,GAAG;AAChH,UAAM,IAAI;AAAA,MACR,eAAe,QAAQ,6DAA6D,KAAK;AAAA,IAC3F;AAAA,EACF;AACA,SAAO,WAAW,CAAC;AACrB;",
   "names": []
 }

package/dist/modules/query_index/migrations/Migration20260731105052_query_index.js

@@ -0,0 +1,17 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260731105052_query_index extends Migration {
+  isTransactional() {
+    return false;
+  }
+  up() {
+    this.addSql(`drop index concurrently if exists "search_tokens_presence_idx";`);
+    this.addSql(`create index concurrently "search_tokens_presence_idx" on "search_tokens" ("entity_type", "tenant_id", "organization_id");`);
+  }
+  down() {
+    this.addSql(`drop index concurrently if exists "search_tokens_presence_idx";`);
+  }
+}
+export {
+  Migration20260731105052_query_index
+};
+//# sourceMappingURL=Migration20260731105052_query_index.js.map

package/dist/modules/query_index/migrations/Migration20260731105052_query_index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/query_index/migrations/Migration20260731105052_query_index.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\n// Availability-probe index (.ai/specs/2026-07-31-search-token-probe-index.md).\n// The query engines gate like/ilike routing on \"does (entity_type, tenant, org)\n// have any search tokens?\". Neither existing index serves that probe as an\n// access path \u2014 lookup_idx buries tenant_id behind field/token_hash \u2014 so on a\n// large search_tokens the planner degraded the probe to a seq scan and the MISS\n// answer had to exhaust every entry for the entity type (p95 12.5 s in\n// production, #4723). With this (entity_type, tenant_id, organization_id)\n// prefix and the index-usable `= / IS NULL` predicates the availability\n// resolver emits, both the hit AND the miss become a B-tree prefix seek.\n//\n// search_tokens is high-churn, so the index is built CONCURRENTLY to avoid\n// blocking writes during the build. CREATE INDEX CONCURRENTLY cannot run\n// inside a transaction, hence isTransactional() => false; the migration runner\n// applies migrations one-by-one, so this opt-out is safe (same pattern as\n// Migration20260611103000_query_index). Drop first so retrying a failed\n// concurrent build removes PostgreSQL's invalid index stub instead of letting\n// IF NOT EXISTS silently accept it.\nexport class Migration20260731105052_query_index extends Migration {\n\n  override isTransactional(): boolean {\n    return false;\n  }\n\n  override up(): void | Promise<void> {\n    this.addSql(`drop index concurrently if exists \"search_tokens_presence_idx\";`);\n    this.addSql(`create index concurrently \"search_tokens_presence_idx\" on \"search_tokens\" (\"entity_type\", \"tenant_id\", \"organization_id\");`);\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql(`drop index concurrently if exists \"search_tokens_presence_idx\";`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAmBnB,MAAM,4CAA4C,UAAU;AAAA,EAExD,kBAA2B;AAClC,WAAO;AAAA,EACT;AAAA,EAES,KAA2B;AAClC,SAAK,OAAO,iEAAiE;AAC7E,SAAK,OAAO,4HAA4H;AAAA,EAC1I;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,iEAAiE;AAAA,EAC/E;AAEF;",
+  "names": []
+}

package/dist/modules/query_index/subscribers/coverage_refresh.js

@@ -1,4 +1,5 @@
 import { recordIndexerError } from "@open-mercato/shared/lib/indexers/error-log";
+import { isReadProjectionAlwaysConsistent } from "@open-mercato/shared/lib/data/consistency";
 import { refreshCoverageSnapshot } from "../lib/coverage.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("query_index").child({ component: "coverage-refresh" });
@@ -51,6 +52,9 @@ async function handle(payload, ctx) {
           payload
         }
       );
+      if (isReadProjectionAlwaysConsistent()) {
+        throw err;
+      }
     }
   };
   if (delayMs === 0) {

package/dist/modules/query_index/subscribers/coverage_refresh.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/subscribers/coverage_refresh.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { refreshCoverageSnapshot } from '../lib/coverage'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('query_index').child({ component: 'coverage-refresh' })\n\nexport const metadata = { event: 'query_index.coverage.refresh', persistent: false }\n\ntype Payload = {\n  entityType?: string\n  tenantId?: string | null\n  organizationId?: string | null\n  withDeleted?: boolean\n  delayMs?: number\n}\n\nconst DEFAULT_DELAY_MS = 0\nconst pending = new Map<string, NodeJS.Timeout>()\n\nfunction forkRefreshEntityManager(em: EntityManager): EntityManager {\n  const fork = (em as unknown as { fork?: (options?: Record<string, unknown>) => EntityManager }).fork\n  if (typeof fork !== 'function') return em\n  return fork.call(em, { clear: true, freshEventManager: true, useContext: false })\n}\n\nfunction scopeKey(input: Payload): string {\n  const entity = String(input.entityType || '')\n  const tenant = input.tenantId ?? '__null__'\n  const org = input.organizationId ?? '__null__'\n  const deleted = input.withDeleted ? '1' : '0'\n\n  return `${entity}|${tenant}|${org}|${deleted}`\n}\n\nexport default async function handle(payload: Payload, ctx: { resolve: <T = any>(name: string) => T }) {\n  const entityType = String(payload?.entityType || '')\n  if (!entityType) {\n    return\n  }\n\n  const tenantId = payload?.tenantId ?? null\n  const organizationId = payload?.organizationId ?? null\n  const withDeleted = payload?.withDeleted === true\n  const delayMs = typeof payload?.delayMs === 'number' && payload.delayMs >= 0 ? payload.delayMs : DEFAULT_DELAY_MS\n\n  const key = scopeKey({ entityType, tenantId, organizationId, withDeleted })\n\n  const handleRefresh = async () => {\n    const em = forkRefreshEntityManager(ctx.resolve<EntityManager>('em'))\n    try {\n      await refreshCoverageSnapshot(em, { entityType, tenantId, organizationId, withDeleted })\n    } catch (err) {\n      logger.warn('Failed to refresh coverage snapshot', {\n        entityType,\n        tenantId,\n        organizationId,\n        withDeleted,\n        error: err instanceof Error ? err.message : err,\n      })\n      await recordIndexerError(\n        { em },\n        {\n          source: 'query_index',\n          handler: 'event:query_index.coverage.refresh',\n          error: err,\n          entityType,\n          tenantId,\n          organizationId,\n          payload,\n        },\n      )\n    }\n  }\n\n  if (delayMs === 0) {\n    await handleRefresh()\n    return\n  }\n\n  const existing = pending.get(key)\n  if (existing) {\n    clearTimeout(existing)\n  }\n\n  const timer = setTimeout(() => {\n    pending.delete(key)\n    void handleRefresh()\n  }, delayMs)\n  if (typeof timer.unref === 'function') {\n    timer.unref()\n  }\n  pending.set(key, timer)\n}\n"],
-  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAE3E,MAAM,WAAW,EAAE,OAAO,gCAAgC,YAAY,MAAM;AAUnF,MAAM,mBAAmB;AACzB,MAAM,UAAU,oBAAI,IAA4B;AAEhD,SAAS,yBAAyB,IAAkC;AAClE,QAAM,OAAQ,GAAkF;AAChG,MAAI,OAAO,SAAS,WAAY,QAAO;AACvC,SAAO,KAAK,KAAK,IAAI,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,MAAM,CAAC;AAClF;AAEA,SAAS,SAAS,OAAwB;AACxC,QAAM,SAAS,OAAO,MAAM,cAAc,EAAE;AAC5C,QAAM,SAAS,MAAM,YAAY;AACjC,QAAM,MAAM,MAAM,kBAAkB;AACpC,QAAM,UAAU,MAAM,cAAc,MAAM;AAE1C,SAAO,GAAG,MAAM,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO;AAC9C;AAEA,eAAO,OAA8B,SAAkB,KAAgD;AACrG,QAAM,aAAa,OAAO,SAAS,cAAc,EAAE;AACnD,MAAI,CAAC,YAAY;AACf;AAAA,EACF;AAEA,QAAM,WAAW,SAAS,YAAY;AACtC,QAAM,iBAAiB,SAAS,kBAAkB;AAClD,QAAM,cAAc,SAAS,gBAAgB;AAC7C,QAAM,UAAU,OAAO,SAAS,YAAY,YAAY,QAAQ,WAAW,IAAI,QAAQ,UAAU;AAEjG,QAAM,MAAM,SAAS,EAAE,YAAY,UAAU,gBAAgB,YAAY,CAAC;AAE1E,QAAM,gBAAgB,YAAY;AAChC,UAAM,KAAK,yBAAyB,IAAI,QAAuB,IAAI,CAAC;AACpE,QAAI;AACF,YAAM,wBAAwB,IAAI,EAAE,YAAY,UAAU,gBAAgB,YAAY,CAAC;AAAA,IACzF,SAAS,KAAK;AACZ,aAAO,KAAK,uCAAuC;AAAA,QACjD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,eAAe,QAAQ,IAAI,UAAU;AAAA,MAC9C,CAAC;AACD,YAAM;AAAA,QACJ,EAAE,GAAG;AAAA,QACL;AAAA,UACE,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,YAAY,GAAG;AACjB,UAAM,cAAc;AACpB;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,MAAI,UAAU;AACZ,iBAAa,QAAQ;AAAA,EACvB;AAEA,QAAM,QAAQ,WAAW,MAAM;AAC7B,YAAQ,OAAO,GAAG;AAClB,SAAK,cAAc;AAAA,EACrB,GAAG,OAAO;AACV,MAAI,OAAO,MAAM,UAAU,YAAY;AACrC,UAAM,MAAM;AAAA,EACd;AACA,UAAQ,IAAI,KAAK,KAAK;AACxB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { isReadProjectionAlwaysConsistent } from '@open-mercato/shared/lib/data/consistency'\nimport { refreshCoverageSnapshot } from '../lib/coverage'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('query_index').child({ component: 'coverage-refresh' })\n\nexport const metadata = { event: 'query_index.coverage.refresh', persistent: false }\n\ntype Payload = {\n  entityType?: string\n  tenantId?: string | null\n  organizationId?: string | null\n  withDeleted?: boolean\n  delayMs?: number\n}\n\nconst DEFAULT_DELAY_MS = 0\nconst pending = new Map<string, NodeJS.Timeout>()\n\nfunction forkRefreshEntityManager(em: EntityManager): EntityManager {\n  const fork = (em as unknown as { fork?: (options?: Record<string, unknown>) => EntityManager }).fork\n  if (typeof fork !== 'function') return em\n  return fork.call(em, { clear: true, freshEventManager: true, useContext: false })\n}\n\nfunction scopeKey(input: Payload): string {\n  const entity = String(input.entityType || '')\n  const tenant = input.tenantId ?? '__null__'\n  const org = input.organizationId ?? '__null__'\n  const deleted = input.withDeleted ? '1' : '0'\n\n  return `${entity}|${tenant}|${org}|${deleted}`\n}\n\nexport default async function handle(payload: Payload, ctx: { resolve: <T = any>(name: string) => T }) {\n  const entityType = String(payload?.entityType || '')\n  if (!entityType) {\n    return\n  }\n\n  const tenantId = payload?.tenantId ?? null\n  const organizationId = payload?.organizationId ?? null\n  const withDeleted = payload?.withDeleted === true\n  const delayMs = typeof payload?.delayMs === 'number' && payload.delayMs >= 0 ? payload.delayMs : DEFAULT_DELAY_MS\n\n  const key = scopeKey({ entityType, tenantId, organizationId, withDeleted })\n\n  const handleRefresh = async () => {\n    const em = forkRefreshEntityManager(ctx.resolve<EntityManager>('em'))\n    try {\n      await refreshCoverageSnapshot(em, { entityType, tenantId, organizationId, withDeleted })\n    } catch (err) {\n      logger.warn('Failed to refresh coverage snapshot', {\n        entityType,\n        tenantId,\n        organizationId,\n        withDeleted,\n        error: err instanceof Error ? err.message : err,\n      })\n      await recordIndexerError(\n        { em },\n        {\n          source: 'query_index',\n          handler: 'event:query_index.coverage.refresh',\n          error: err,\n          entityType,\n          tenantId,\n          organizationId,\n          payload,\n        },\n      )\n      if (isReadProjectionAlwaysConsistent()) {\n        throw err\n      }\n    }\n  }\n\n  if (delayMs === 0) {\n    await handleRefresh()\n    return\n  }\n\n  const existing = pending.get(key)\n  if (existing) {\n    clearTimeout(existing)\n  }\n\n  const timer = setTimeout(() => {\n    pending.delete(key)\n    void handleRefresh()\n  }, delayMs)\n  if (typeof timer.unref === 'function') {\n    timer.unref()\n  }\n  pending.set(key, timer)\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,wCAAwC;AACjD,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAE3E,MAAM,WAAW,EAAE,OAAO,gCAAgC,YAAY,MAAM;AAUnF,MAAM,mBAAmB;AACzB,MAAM,UAAU,oBAAI,IAA4B;AAEhD,SAAS,yBAAyB,IAAkC;AAClE,QAAM,OAAQ,GAAkF;AAChG,MAAI,OAAO,SAAS,WAAY,QAAO;AACvC,SAAO,KAAK,KAAK,IAAI,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,MAAM,CAAC;AAClF;AAEA,SAAS,SAAS,OAAwB;AACxC,QAAM,SAAS,OAAO,MAAM,cAAc,EAAE;AAC5C,QAAM,SAAS,MAAM,YAAY;AACjC,QAAM,MAAM,MAAM,kBAAkB;AACpC,QAAM,UAAU,MAAM,cAAc,MAAM;AAE1C,SAAO,GAAG,MAAM,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO;AAC9C;AAEA,eAAO,OAA8B,SAAkB,KAAgD;AACrG,QAAM,aAAa,OAAO,SAAS,cAAc,EAAE;AACnD,MAAI,CAAC,YAAY;AACf;AAAA,EACF;AAEA,QAAM,WAAW,SAAS,YAAY;AACtC,QAAM,iBAAiB,SAAS,kBAAkB;AAClD,QAAM,cAAc,SAAS,gBAAgB;AAC7C,QAAM,UAAU,OAAO,SAAS,YAAY,YAAY,QAAQ,WAAW,IAAI,QAAQ,UAAU;AAEjG,QAAM,MAAM,SAAS,EAAE,YAAY,UAAU,gBAAgB,YAAY,CAAC;AAE1E,QAAM,gBAAgB,YAAY;AAChC,UAAM,KAAK,yBAAyB,IAAI,QAAuB,IAAI,CAAC;AACpE,QAAI;AACF,YAAM,wBAAwB,IAAI,EAAE,YAAY,UAAU,gBAAgB,YAAY,CAAC;AAAA,IACzF,SAAS,KAAK;AACZ,aAAO,KAAK,uCAAuC;AAAA,QACjD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,eAAe,QAAQ,IAAI,UAAU;AAAA,MAC9C,CAAC;AACD,YAAM;AAAA,QACJ,EAAE,GAAG;AAAA,QACL;AAAA,UACE,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,UAAI,iCAAiC,GAAG;AACtC,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,MAAI,YAAY,GAAG;AACjB,UAAM,cAAc;AACpB;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,MAAI,UAAU;AACZ,iBAAa,QAAQ;AAAA,EACvB;AAEA,QAAM,QAAQ,WAAW,MAAM;AAC7B,YAAQ,OAAO,GAAG;AAClB,SAAK,cAAc;AAAA,EACrB,GAAG,OAAO;AACV,MAAI,OAAO,MAAM,UAAU,YAAY;AACrC,UAAM,MAAM;AAAA,EACd;AACA,UAAQ,IAAI,KAAK,KAAK;AACxB;",
   "names": []
 }

package/dist/modules/query_index/subscribers/delete_one.js

@@ -1,4 +1,5 @@
 import { recordIndexerError } from "@open-mercato/shared/lib/indexers/error-log";
+import { isReadProjectionAlwaysConsistent } from "@open-mercato/shared/lib/data/consistency";
 import { sql } from "kysely";
 import { markDeleted } from "../lib/indexer.js";
 import { applyCoverageAdjustments, createCoverageAdjustments } from "../lib/coverage.js";
@@ -27,7 +28,9 @@ async function handle(payload, ctx) {
   if (!entityType || !recordId) return;
   let organizationId = payload?.organizationId ?? null;
   let tenantId = payload?.tenantId ?? null;
+  const suppressCoverage = payload?.suppressCoverage === true;
   const coverageDelayMs = typeof payload?.coverageDelayMs === "number" ? payload.coverageDelayMs : void 0;
+  const alwaysConsistent = isReadProjectionAlwaysConsistent();
   try {
     const hasPayloadOrganizationId = Object.prototype.hasOwnProperty.call(payload ?? {}, "organizationId");
     const hasPayloadTenantId = Object.prototype.hasOwnProperty.call(payload ?? {}, "tenantId");
@@ -42,6 +45,56 @@ async function handle(payload, ctx) {
     });
     organizationId = resolvedScope.organizationId;
     tenantId = resolvedScope.tenantId;
+    if (alwaysConsistent) {
+      const db = em.getKysely();
+      await db.transaction().execute(async (trx) => {
+        const { wasActive: wasActive2 } = await markDeleted(em, { entityType, recordId, organizationId, tenantId, trx });
+        let baseQuery = trx.selectFrom(source.table).select(["deleted_at"]).where("id", "=", recordId);
+        if (source.organizationColumn) {
+          baseQuery = baseQuery.where(
+            source.organizationColumn,
+            organizationId === null ? "is" : "=",
+            organizationId
+          );
+        }
+        if (source.tenantColumn) {
+          baseQuery = baseQuery.where(sql`${sql.ref(source.tenantColumn)} is not distinct from ${tenantId}`);
+        }
+        const row = await baseQuery.executeTakeFirst();
+        const baseDelta2 = !row || row.deleted_at != null ? -1 : 0;
+        const baseDeltaOverride2 = typeof payload?.coverageBaseDelta === "number" ? payload.coverageBaseDelta : void 0;
+        const indexDeltaOverride2 = typeof payload?.coverageIndexDelta === "number" ? payload.coverageIndexDelta : void 0;
+        let effectiveBaseDelta2 = baseDeltaOverride2 ?? baseDelta2;
+        let effectiveIndexDelta2 = indexDeltaOverride2 ?? (wasActive2 ? -1 : 0);
+        if (!Number.isFinite(effectiveBaseDelta2)) effectiveBaseDelta2 = 0;
+        if (!Number.isFinite(effectiveIndexDelta2)) effectiveIndexDelta2 = 0;
+        if (effectiveBaseDelta2 !== 0 || effectiveIndexDelta2 !== 0) {
+          const adjustments = createCoverageAdjustments({
+            entityType,
+            tenantId: tenantId ?? null,
+            organizationId: organizationId ?? null,
+            baseDelta: effectiveBaseDelta2,
+            indexDelta: effectiveIndexDelta2
+          });
+          if (adjustments.length) {
+            await applyCoverageAdjustments(em, adjustments, { trx });
+          }
+        }
+      });
+      const bus = ctx.resolve("eventBus");
+      const shouldRefreshCoverage2 = !suppressCoverage && (coverageDelayMs === void 0 || coverageDelayMs >= 0);
+      const coverageRefreshDelay2 = coverageDelayMs ?? 0;
+      if (shouldRefreshCoverage2) {
+        await bus.emitEvent("query_index.coverage.refresh", {
+          entityType,
+          tenantId: tenantId ?? null,
+          organizationId: organizationId ?? null,
+          delayMs: coverageRefreshDelay2
+        }, { rethrowHandlerErrors: true });
+      }
+      await bus.emitEvent("search.delete_record", { entityId: entityType, recordId, organizationId, tenantId }, { rethrowHandlerErrors: true });
+      return;
+    }
     const { wasActive } = await markDeleted(em, { entityType, recordId, organizationId, tenantId });
     let baseDelta = 0;
     let baseCheckSucceeded = false;
@@ -84,7 +137,6 @@ async function handle(payload, ctx) {
         await applyCoverageAdjustments(em, adjustments);
       }
     }
-    const suppressCoverage = payload?.suppressCoverage === true;
     const explicitDelayRequested = typeof payload?.coverageDelayMs === "number";
     const shouldRefreshCoverage = !suppressCoverage && (coverageDelayMs === void 0 || coverageDelayMs >= 0) && (explicitDelayRequested || shouldAllowDeleteCoverageRefresh(entityType, tenantId));
     const coverageRefreshDelay = coverageDelayMs ?? 0;

package/dist/modules/query_index/subscribers/delete_one.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/subscribers/delete_one.ts"],
-  "sourcesContent": ["import { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { sql } from 'kysely'\nimport { markDeleted } from '../lib/indexer'\nimport { applyCoverageAdjustments, createCoverageAdjustments } from '../lib/coverage'\nimport {\n  loadQueryIndexRowScope,\n  resolveQueryIndexRecordScope,\n  resolveQueryIndexSourceMetadata,\n} from '../lib/subscriber-scope'\n\nexport const metadata = { event: 'query_index.delete_one', persistent: false }\n\n// Mirrors `shouldTriggerCoverageRefresh()` in `@open-mercato/shared/lib/data/engine.ts`\n// as a small local throttle so per-record deletes stop firing an unconditional, immediate\n// full recount. Note: this Map and the shared engine's own throttle Map are independent,\n// so a rare race right after a 5-minute window resets on both could double-fire once \u2014\n// harmless (the recompute is idempotent) and far cheaper than today's per-delete cost.\nconst DELETE_COVERAGE_THROTTLE_MS = 5 * 60 * 1000\nconst lastDeleteCoverageRefreshAt = new Map<string, number>()\n\nfunction shouldAllowDeleteCoverageRefresh(entityType: string, tenantId: string | null): boolean {\n  if (!entityType) return false\n  const key = `${entityType}|${tenantId ?? '__null__'}`\n  const now = Date.now()\n  const last = lastDeleteCoverageRefreshAt.get(key) ?? 0\n  if (now - last < DELETE_COVERAGE_THROTTLE_MS) return false\n  lastDeleteCoverageRefreshAt.set(key, now)\n  return true\n}\n\nexport default async function handle(payload: any, ctx: { resolve: <T=any>(name: string) => T }) {\n  // Forked EntityManager \u2014 this awaited subscriber runs synchronously on the request\n  // `em`; isolating it prevents our queries/writes from resetting the originating CRUD\n  // write's UnitOfWork and dropping its pending changes. See upsert_one.ts for detail.\n  const baseEm = ctx.resolve<any>('em')\n  const em = typeof baseEm?.fork === 'function' ? baseEm.fork() : baseEm\n  const entityType = String(payload?.entityType || '')\n  const recordId = String(payload?.recordId || '')\n  if (!entityType || !recordId) return\n  let organizationId: string | null = payload?.organizationId ?? null\n  let tenantId: string | null = payload?.tenantId ?? null\n  const coverageDelayMs = typeof payload?.coverageDelayMs === 'number' ? payload.coverageDelayMs : undefined\n  try {\n    const hasPayloadOrganizationId = Object.prototype.hasOwnProperty.call(payload ?? {}, 'organizationId')\n    const hasPayloadTenantId = Object.prototype.hasOwnProperty.call(payload ?? {}, 'tenantId')\n    const source = resolveQueryIndexSourceMetadata(em, entityType)\n    const sourceScope = await loadQueryIndexRowScope(em, source, recordId)\n    const resolvedScope = resolveQueryIndexRecordScope({\n      payloadOrganizationId: payload?.organizationId,\n      payloadTenantId: payload?.tenantId,\n      hasPayloadOrganizationId,\n      hasPayloadTenantId,\n      sourceScope,\n    })\n    organizationId = resolvedScope.organizationId\n    tenantId = resolvedScope.tenantId\n\n    const { wasActive } = await markDeleted(em, { entityType, recordId, organizationId, tenantId })\n\n    let baseDelta = 0\n    let baseCheckSucceeded = false\n    try {\n      const db = (em as any).getKysely()\n      let baseQuery = db\n        .selectFrom(source.table as any)\n        .select(['deleted_at' as any])\n        .where('id' as any, '=', recordId)\n      if (source.organizationColumn) {\n        baseQuery = baseQuery.where(\n          source.organizationColumn as any,\n          organizationId === null ? 'is' : '=',\n          organizationId as any,\n        )\n      }\n      if (source.tenantColumn) {\n        baseQuery = baseQuery.where(sql`${sql.ref(source.tenantColumn)} is not distinct from ${tenantId}`)\n      }\n      const row = await baseQuery.executeTakeFirst() as { deleted_at: Date | null } | undefined\n      const baseMissing = !row\n      const baseDeleted = baseMissing || (row && row.deleted_at != null)\n      baseCheckSucceeded = true\n      if (baseDeleted) baseDelta = -1\n    } catch {}\n    if (!baseCheckSucceeded) baseDelta = -1\n\n    const baseDeltaOverride =\n      typeof payload?.coverageBaseDelta === 'number' ? payload.coverageBaseDelta : undefined\n    const indexDeltaOverride =\n      typeof payload?.coverageIndexDelta === 'number' ? payload.coverageIndexDelta : undefined\n    let effectiveBaseDelta = baseDeltaOverride ?? baseDelta\n    let effectiveIndexDelta = indexDeltaOverride ?? (wasActive ? -1 : 0)\n\n    if (!Number.isFinite(effectiveBaseDelta)) effectiveBaseDelta = 0\n    if (!Number.isFinite(effectiveIndexDelta)) effectiveIndexDelta = 0\n\n    if (effectiveBaseDelta !== 0 || effectiveIndexDelta !== 0) {\n      const adjustments = createCoverageAdjustments({\n        entityType,\n        tenantId: tenantId ?? null,\n        organizationId: organizationId ?? null,\n        baseDelta: effectiveBaseDelta,\n        indexDelta: effectiveIndexDelta,\n      })\n      if (adjustments.length) {\n        await applyCoverageAdjustments(em, adjustments)\n      }\n    }\n\n    // The projection row + token removal above are synchronous (the data engine\n    // awaits this subscriber) so list reads are consistent immediately. The coverage\n    // recompute (a COUNT, run inline when delayMs is 0) and the fulltext delete are\n    // secondary, so defer them fire-and-forget to keep write/bulk-delete latency bounded.\n    const suppressCoverage = payload?.suppressCoverage === true\n    const explicitDelayRequested = typeof payload?.coverageDelayMs === 'number'\n    const shouldRefreshCoverage =\n      !suppressCoverage &&\n      (coverageDelayMs === undefined || coverageDelayMs >= 0) &&\n      (explicitDelayRequested || shouldAllowDeleteCoverageRefresh(entityType, tenantId))\n    const coverageRefreshDelay = coverageDelayMs ?? 0\n    void (async () => {\n      try {\n        const bus = ctx.resolve<any>('eventBus')\n        if (shouldRefreshCoverage) {\n          await bus.emitEvent('query_index.coverage.refresh', {\n            entityType,\n            tenantId: tenantId ?? null,\n            organizationId: organizationId ?? null,\n            delayMs: coverageRefreshDelay,\n          })\n        }\n        await bus.emitEvent('search.delete_record', { entityId: entityType, recordId, organizationId, tenantId })\n      } catch (error) {\n        await recordIndexerError(\n          { em },\n          {\n            source: 'query_index',\n            handler: 'event:query_index.delete_one:coverage_search',\n            error,\n            entityType,\n            recordId,\n            tenantId: tenantId ?? null,\n            organizationId: organizationId ?? null,\n            payload,\n          },\n        ).catch(() => {})\n      }\n    })()\n  } catch (error) {\n    await recordIndexerError(\n      { em },\n      {\n        source: 'query_index',\n        handler: 'event:query_index.delete_one',\n        error,\n        entityType,\n        recordId,\n        tenantId: tenantId ?? null,\n        organizationId: organizationId ?? null,\n        payload,\n      },\n    )\n    throw error\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AACnC,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,0BAA0B,iCAAiC;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW,EAAE,OAAO,0BAA0B,YAAY,MAAM;AAO7E,MAAM,8BAA8B,IAAI,KAAK;AAC7C,MAAM,8BAA8B,oBAAI,IAAoB;AAE5D,SAAS,iCAAiC,YAAoB,UAAkC;AAC9F,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,MAAM,GAAG,UAAU,IAAI,YAAY,UAAU;AACnD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,4BAA4B,IAAI,GAAG,KAAK;AACrD,MAAI,MAAM,OAAO,4BAA6B,QAAO;AACrD,8BAA4B,IAAI,KAAK,GAAG;AACxC,SAAO;AACT;AAEA,eAAO,OAA8B,SAAc,KAA8C;AAI/F,QAAM,SAAS,IAAI,QAAa,IAAI;AACpC,QAAM,KAAK,OAAO,QAAQ,SAAS,aAAa,OAAO,KAAK,IAAI;AAChE,QAAM,aAAa,OAAO,SAAS,cAAc,EAAE;AACnD,QAAM,WAAW,OAAO,SAAS,YAAY,EAAE;AAC/C,MAAI,CAAC,cAAc,CAAC,SAAU;AAC9B,MAAI,iBAAgC,SAAS,kBAAkB;AAC/D,MAAI,WAA0B,SAAS,YAAY;AACnD,QAAM,kBAAkB,OAAO,SAAS,oBAAoB,WAAW,QAAQ,kBAAkB;AACjG,MAAI;AACF,UAAM,2BAA2B,OAAO,UAAU,eAAe,KAAK,WAAW,CAAC,GAAG,gBAAgB;AACrG,UAAM,qBAAqB,OAAO,UAAU,eAAe,KAAK,WAAW,CAAC,GAAG,UAAU;AACzF,UAAM,SAAS,gCAAgC,IAAI,UAAU;AAC7D,UAAM,cAAc,MAAM,uBAAuB,IAAI,QAAQ,QAAQ;AACrE,UAAM,gBAAgB,6BAA6B;AAAA,MACjD,uBAAuB,SAAS;AAAA,MAChC,iBAAiB,SAAS;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,qBAAiB,cAAc;AAC/B,eAAW,cAAc;AAEzB,UAAM,EAAE,UAAU,IAAI,MAAM,YAAY,IAAI,EAAE,YAAY,UAAU,gBAAgB,SAAS,CAAC;AAE9F,QAAI,YAAY;AAChB,QAAI,qBAAqB;AACzB,QAAI;AACF,YAAM,KAAM,GAAW,UAAU;AACjC,UAAI,YAAY,GACb,WAAW,OAAO,KAAY,EAC9B,OAAO,CAAC,YAAmB,CAAC,EAC5B,MAAM,MAAa,KAAK,QAAQ;AACnC,UAAI,OAAO,oBAAoB;AAC7B,oBAAY,UAAU;AAAA,UACpB,OAAO;AAAA,UACP,mBAAmB,OAAO,OAAO;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AACA,UAAI,OAAO,cAAc;AACvB,oBAAY,UAAU,MAAM,MAAM,IAAI,IAAI,OAAO,YAAY,CAAC,yBAAyB,QAAQ,EAAE;AAAA,MACnG;AACA,YAAM,MAAM,MAAM,UAAU,iBAAiB;AAC7C,YAAM,cAAc,CAAC;AACrB,YAAM,cAAc,eAAgB,OAAO,IAAI,cAAc;AAC7D,2BAAqB;AACrB,UAAI,YAAa,aAAY;AAAA,IAC/B,QAAQ;AAAA,IAAC;AACT,QAAI,CAAC,mBAAoB,aAAY;AAErC,UAAM,oBACJ,OAAO,SAAS,sBAAsB,WAAW,QAAQ,oBAAoB;AAC/E,UAAM,qBACJ,OAAO,SAAS,uBAAuB,WAAW,QAAQ,qBAAqB;AACjF,QAAI,qBAAqB,qBAAqB;AAC9C,QAAI,sBAAsB,uBAAuB,YAAY,KAAK;AAElE,QAAI,CAAC,OAAO,SAAS,kBAAkB,EAAG,sBAAqB;AAC/D,QAAI,CAAC,OAAO,SAAS,mBAAmB,EAAG,uBAAsB;AAEjE,QAAI,uBAAuB,KAAK,wBAAwB,GAAG;AACzD,YAAM,cAAc,0BAA0B;AAAA,QAC5C;AAAA,QACA,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,WAAW;AAAA,QACX,YAAY;AAAA,MACd,CAAC;AACD,UAAI,YAAY,QAAQ;AACtB,cAAM,yBAAyB,IAAI,WAAW;AAAA,MAChD;AAAA,IACF;AAMA,UAAM,mBAAmB,SAAS,qBAAqB;AACvD,UAAM,yBAAyB,OAAO,SAAS,oBAAoB;AACnE,UAAM,wBACJ,CAAC,qBACA,oBAAoB,UAAa,mBAAmB,OACpD,0BAA0B,iCAAiC,YAAY,QAAQ;AAClF,UAAM,uBAAuB,mBAAmB;AAChD,UAAM,YAAY;AAChB,UAAI;AACF,cAAM,MAAM,IAAI,QAAa,UAAU;AACvC,YAAI,uBAAuB;AACzB,gBAAM,IAAI,UAAU,gCAAgC;AAAA,YAClD;AAAA,YACA,UAAU,YAAY;AAAA,YACtB,gBAAgB,kBAAkB;AAAA,YAClC,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AACA,cAAM,IAAI,UAAU,wBAAwB,EAAE,UAAU,YAAY,UAAU,gBAAgB,SAAS,CAAC;AAAA,MAC1G,SAAS,OAAO;AACd,cAAM;AAAA,UACJ,EAAE,GAAG;AAAA,UACL;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,YACT;AAAA,YACA;AAAA,YACA;AAAA,YACA,UAAU,YAAY;AAAA,YACtB,gBAAgB,kBAAkB;AAAA,YAClC;AAAA,UACF;AAAA,QACF,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAClB;AAAA,IACF,GAAG;AAAA,EACL,SAAS,OAAO;AACd,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;",
-  "names": []
+  "sourcesContent": ["import { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { isReadProjectionAlwaysConsistent } from '@open-mercato/shared/lib/data/consistency'\nimport { sql } from 'kysely'\nimport { markDeleted } from '../lib/indexer'\nimport { applyCoverageAdjustments, createCoverageAdjustments } from '../lib/coverage'\nimport {\n  loadQueryIndexRowScope,\n  resolveQueryIndexRecordScope,\n  resolveQueryIndexSourceMetadata,\n} from '../lib/subscriber-scope'\n\nexport const metadata = { event: 'query_index.delete_one', persistent: false }\n\n// Mirrors `shouldTriggerCoverageRefresh()` in `@open-mercato/shared/lib/data/engine.ts`\n// as a small local throttle so per-record deletes stop firing an unconditional, immediate\n// full recount. Note: this Map and the shared engine's own throttle Map are independent,\n// so a rare race right after a 5-minute window resets on both could double-fire once \u2014\n// harmless (the recompute is idempotent) and far cheaper than today's per-delete cost.\nconst DELETE_COVERAGE_THROTTLE_MS = 5 * 60 * 1000\nconst lastDeleteCoverageRefreshAt = new Map<string, number>()\n\nfunction shouldAllowDeleteCoverageRefresh(entityType: string, tenantId: string | null): boolean {\n  if (!entityType) return false\n  const key = `${entityType}|${tenantId ?? '__null__'}`\n  const now = Date.now()\n  const last = lastDeleteCoverageRefreshAt.get(key) ?? 0\n  if (now - last < DELETE_COVERAGE_THROTTLE_MS) return false\n  lastDeleteCoverageRefreshAt.set(key, now)\n  return true\n}\n\nexport default async function handle(payload: any, ctx: { resolve: <T=any>(name: string) => T }) {\n  // Forked EntityManager \u2014 this awaited subscriber runs synchronously on the request\n  // `em`; isolating it prevents our queries/writes from resetting the originating CRUD\n  // write's UnitOfWork and dropping its pending changes. See upsert_one.ts for detail.\n  const baseEm = ctx.resolve<any>('em')\n  const em = typeof baseEm?.fork === 'function' ? baseEm.fork() : baseEm\n  const entityType = String(payload?.entityType || '')\n  const recordId = String(payload?.recordId || '')\n  if (!entityType || !recordId) return\n  let organizationId: string | null = payload?.organizationId ?? null\n  let tenantId: string | null = payload?.tenantId ?? null\n  const suppressCoverage = payload?.suppressCoverage === true\n  const coverageDelayMs = typeof payload?.coverageDelayMs === 'number' ? payload.coverageDelayMs : undefined\n  const alwaysConsistent = isReadProjectionAlwaysConsistent()\n  try {\n    const hasPayloadOrganizationId = Object.prototype.hasOwnProperty.call(payload ?? {}, 'organizationId')\n    const hasPayloadTenantId = Object.prototype.hasOwnProperty.call(payload ?? {}, 'tenantId')\n    const source = resolveQueryIndexSourceMetadata(em, entityType)\n    const sourceScope = await loadQueryIndexRowScope(em, source, recordId)\n    const resolvedScope = resolveQueryIndexRecordScope({\n      payloadOrganizationId: payload?.organizationId,\n      payloadTenantId: payload?.tenantId,\n      hasPayloadOrganizationId,\n      hasPayloadTenantId,\n      sourceScope,\n    })\n    organizationId = resolvedScope.organizationId\n    tenantId = resolvedScope.tenantId\n\n    if (alwaysConsistent) {\n      const db = (em as any).getKysely()\n      await db.transaction().execute(async (trx: any) => {\n        const { wasActive } = await markDeleted(em, { entityType, recordId, organizationId, tenantId, trx })\n\n        let baseQuery = trx\n          .selectFrom(source.table as any)\n          .select(['deleted_at' as any])\n          .where('id' as any, '=', recordId)\n        if (source.organizationColumn) {\n          baseQuery = baseQuery.where(\n            source.organizationColumn as any,\n            organizationId === null ? 'is' : '=',\n            organizationId as any,\n          )\n        }\n        if (source.tenantColumn) {\n          baseQuery = baseQuery.where(sql`${sql.ref(source.tenantColumn)} is not distinct from ${tenantId}`)\n        }\n        const row = await baseQuery.executeTakeFirst() as { deleted_at: Date | null } | undefined\n        const baseDelta = !row || row.deleted_at != null ? -1 : 0\n\n        const baseDeltaOverride =\n          typeof payload?.coverageBaseDelta === 'number' ? payload.coverageBaseDelta : undefined\n        const indexDeltaOverride =\n          typeof payload?.coverageIndexDelta === 'number' ? payload.coverageIndexDelta : undefined\n        let effectiveBaseDelta = baseDeltaOverride ?? baseDelta\n        let effectiveIndexDelta = indexDeltaOverride ?? (wasActive ? -1 : 0)\n\n        if (!Number.isFinite(effectiveBaseDelta)) effectiveBaseDelta = 0\n        if (!Number.isFinite(effectiveIndexDelta)) effectiveIndexDelta = 0\n\n        if (effectiveBaseDelta !== 0 || effectiveIndexDelta !== 0) {\n          const adjustments = createCoverageAdjustments({\n            entityType,\n            tenantId: tenantId ?? null,\n            organizationId: organizationId ?? null,\n            baseDelta: effectiveBaseDelta,\n            indexDelta: effectiveIndexDelta,\n          })\n          if (adjustments.length) {\n            await applyCoverageAdjustments(em, adjustments, { trx })\n          }\n        }\n      })\n\n      const bus = ctx.resolve<any>('eventBus')\n      const shouldRefreshCoverage =\n        !suppressCoverage && (coverageDelayMs === undefined || coverageDelayMs >= 0)\n      const coverageRefreshDelay = coverageDelayMs ?? 0\n      if (shouldRefreshCoverage) {\n        await bus.emitEvent('query_index.coverage.refresh', {\n          entityType,\n          tenantId: tenantId ?? null,\n          organizationId: organizationId ?? null,\n          delayMs: coverageRefreshDelay,\n        }, { rethrowHandlerErrors: true })\n      }\n      await bus.emitEvent('search.delete_record', { entityId: entityType, recordId, organizationId, tenantId }, { rethrowHandlerErrors: true })\n      return\n    }\n\n    const { wasActive } = await markDeleted(em, { entityType, recordId, organizationId, tenantId })\n\n    let baseDelta = 0\n    let baseCheckSucceeded = false\n    try {\n      const db = (em as any).getKysely()\n      let baseQuery = db\n        .selectFrom(source.table as any)\n        .select(['deleted_at' as any])\n        .where('id' as any, '=', recordId)\n      if (source.organizationColumn) {\n        baseQuery = baseQuery.where(\n          source.organizationColumn as any,\n          organizationId === null ? 'is' : '=',\n          organizationId as any,\n        )\n      }\n      if (source.tenantColumn) {\n        baseQuery = baseQuery.where(sql`${sql.ref(source.tenantColumn)} is not distinct from ${tenantId}`)\n      }\n      const row = await baseQuery.executeTakeFirst() as { deleted_at: Date | null } | undefined\n      const baseMissing = !row\n      const baseDeleted = baseMissing || (row && row.deleted_at != null)\n      baseCheckSucceeded = true\n      if (baseDeleted) baseDelta = -1\n    } catch {}\n    if (!baseCheckSucceeded) baseDelta = -1\n\n    const baseDeltaOverride =\n      typeof payload?.coverageBaseDelta === 'number' ? payload.coverageBaseDelta : undefined\n    const indexDeltaOverride =\n      typeof payload?.coverageIndexDelta === 'number' ? payload.coverageIndexDelta : undefined\n    let effectiveBaseDelta = baseDeltaOverride ?? baseDelta\n    let effectiveIndexDelta = indexDeltaOverride ?? (wasActive ? -1 : 0)\n\n    if (!Number.isFinite(effectiveBaseDelta)) effectiveBaseDelta = 0\n    if (!Number.isFinite(effectiveIndexDelta)) effectiveIndexDelta = 0\n\n    if (effectiveBaseDelta !== 0 || effectiveIndexDelta !== 0) {\n      const adjustments = createCoverageAdjustments({\n        entityType,\n        tenantId: tenantId ?? null,\n        organizationId: organizationId ?? null,\n        baseDelta: effectiveBaseDelta,\n        indexDelta: effectiveIndexDelta,\n      })\n      if (adjustments.length) {\n        await applyCoverageAdjustments(em, adjustments)\n      }\n    }\n\n    // The projection row + token removal above are synchronous (the data engine\n    // awaits this subscriber) so list reads are consistent immediately. The coverage\n    // recompute (a COUNT, run inline when delayMs is 0) and the fulltext delete are\n    // secondary, so defer them fire-and-forget to keep write/bulk-delete latency bounded.\n    const explicitDelayRequested = typeof payload?.coverageDelayMs === 'number'\n    const shouldRefreshCoverage =\n      !suppressCoverage &&\n      (coverageDelayMs === undefined || coverageDelayMs >= 0) &&\n      (explicitDelayRequested || shouldAllowDeleteCoverageRefresh(entityType, tenantId))\n    const coverageRefreshDelay = coverageDelayMs ?? 0\n    void (async () => {\n      try {\n        const bus = ctx.resolve<any>('eventBus')\n        if (shouldRefreshCoverage) {\n          await bus.emitEvent('query_index.coverage.refresh', {\n            entityType,\n            tenantId: tenantId ?? null,\n            organizationId: organizationId ?? null,\n            delayMs: coverageRefreshDelay,\n          })\n        }\n        await bus.emitEvent('search.delete_record', { entityId: entityType, recordId, organizationId, tenantId })\n      } catch (error) {\n        await recordIndexerError(\n          { em },\n          {\n            source: 'query_index',\n            handler: 'event:query_index.delete_one:coverage_search',\n            error,\n            entityType,\n            recordId,\n            tenantId: tenantId ?? null,\n            organizationId: organizationId ?? null,\n            payload,\n          },\n        ).catch(() => {})\n      }\n    })()\n  } catch (error) {\n    await recordIndexerError(\n      { em },\n      {\n        source: 'query_index',\n        handler: 'event:query_index.delete_one',\n        error,\n        entityType,\n        recordId,\n        tenantId: tenantId ?? null,\n        organizationId: organizationId ?? null,\n        payload,\n      },\n    )\n    throw error\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AACnC,SAAS,wCAAwC;AACjD,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,0BAA0B,iCAAiC;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW,EAAE,OAAO,0BAA0B,YAAY,MAAM;AAO7E,MAAM,8BAA8B,IAAI,KAAK;AAC7C,MAAM,8BAA8B,oBAAI,IAAoB;AAE5D,SAAS,iCAAiC,YAAoB,UAAkC;AAC9F,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,MAAM,GAAG,UAAU,IAAI,YAAY,UAAU;AACnD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,4BAA4B,IAAI,GAAG,KAAK;AACrD,MAAI,MAAM,OAAO,4BAA6B,QAAO;AACrD,8BAA4B,IAAI,KAAK,GAAG;AACxC,SAAO;AACT;AAEA,eAAO,OAA8B,SAAc,KAA8C;AAI/F,QAAM,SAAS,IAAI,QAAa,IAAI;AACpC,QAAM,KAAK,OAAO,QAAQ,SAAS,aAAa,OAAO,KAAK,IAAI;AAChE,QAAM,aAAa,OAAO,SAAS,cAAc,EAAE;AACnD,QAAM,WAAW,OAAO,SAAS,YAAY,EAAE;AAC/C,MAAI,CAAC,cAAc,CAAC,SAAU;AAC9B,MAAI,iBAAgC,SAAS,kBAAkB;AAC/D,MAAI,WAA0B,SAAS,YAAY;AACnD,QAAM,mBAAmB,SAAS,qBAAqB;AACvD,QAAM,kBAAkB,OAAO,SAAS,oBAAoB,WAAW,QAAQ,kBAAkB;AACjG,QAAM,mBAAmB,iCAAiC;AAC1D,MAAI;AACF,UAAM,2BAA2B,OAAO,UAAU,eAAe,KAAK,WAAW,CAAC,GAAG,gBAAgB;AACrG,UAAM,qBAAqB,OAAO,UAAU,eAAe,KAAK,WAAW,CAAC,GAAG,UAAU;AACzF,UAAM,SAAS,gCAAgC,IAAI,UAAU;AAC7D,UAAM,cAAc,MAAM,uBAAuB,IAAI,QAAQ,QAAQ;AACrE,UAAM,gBAAgB,6BAA6B;AAAA,MACjD,uBAAuB,SAAS;AAAA,MAChC,iBAAiB,SAAS;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,qBAAiB,cAAc;AAC/B,eAAW,cAAc;AAEzB,QAAI,kBAAkB;AACpB,YAAM,KAAM,GAAW,UAAU;AACjC,YAAM,GAAG,YAAY,EAAE,QAAQ,OAAO,QAAa;AACjD,cAAM,EAAE,WAAAA,WAAU,IAAI,MAAM,YAAY,IAAI,EAAE,YAAY,UAAU,gBAAgB,UAAU,IAAI,CAAC;AAEnG,YAAI,YAAY,IACb,WAAW,OAAO,KAAY,EAC9B,OAAO,CAAC,YAAmB,CAAC,EAC5B,MAAM,MAAa,KAAK,QAAQ;AACnC,YAAI,OAAO,oBAAoB;AAC7B,sBAAY,UAAU;AAAA,YACpB,OAAO;AAAA,YACP,mBAAmB,OAAO,OAAO;AAAA,YACjC;AAAA,UACF;AAAA,QACF;AACA,YAAI,OAAO,cAAc;AACvB,sBAAY,UAAU,MAAM,MAAM,IAAI,IAAI,OAAO,YAAY,CAAC,yBAAyB,QAAQ,EAAE;AAAA,QACnG;AACA,cAAM,MAAM,MAAM,UAAU,iBAAiB;AAC7C,cAAMC,aAAY,CAAC,OAAO,IAAI,cAAc,OAAO,KAAK;AAExD,cAAMC,qBACJ,OAAO,SAAS,sBAAsB,WAAW,QAAQ,oBAAoB;AAC/E,cAAMC,sBACJ,OAAO,SAAS,uBAAuB,WAAW,QAAQ,qBAAqB;AACjF,YAAIC,sBAAqBF,sBAAqBD;AAC9C,YAAII,uBAAsBF,wBAAuBH,aAAY,KAAK;AAElE,YAAI,CAAC,OAAO,SAASI,mBAAkB,EAAG,CAAAA,sBAAqB;AAC/D,YAAI,CAAC,OAAO,SAASC,oBAAmB,EAAG,CAAAA,uBAAsB;AAEjE,YAAID,wBAAuB,KAAKC,yBAAwB,GAAG;AACzD,gBAAM,cAAc,0BAA0B;AAAA,YAC5C;AAAA,YACA,UAAU,YAAY;AAAA,YACtB,gBAAgB,kBAAkB;AAAA,YAClC,WAAWD;AAAA,YACX,YAAYC;AAAA,UACd,CAAC;AACD,cAAI,YAAY,QAAQ;AACtB,kBAAM,yBAAyB,IAAI,aAAa,EAAE,IAAI,CAAC;AAAA,UACzD;AAAA,QACF;AAAA,MACF,CAAC;AAED,YAAM,MAAM,IAAI,QAAa,UAAU;AACvC,YAAMC,yBACJ,CAAC,qBAAqB,oBAAoB,UAAa,mBAAmB;AAC5E,YAAMC,wBAAuB,mBAAmB;AAChD,UAAID,wBAAuB;AACzB,cAAM,IAAI,UAAU,gCAAgC;AAAA,UAClD;AAAA,UACA,UAAU,YAAY;AAAA,UACtB,gBAAgB,kBAAkB;AAAA,UAClC,SAASC;AAAA,QACX,GAAG,EAAE,sBAAsB,KAAK,CAAC;AAAA,MACnC;AACA,YAAM,IAAI,UAAU,wBAAwB,EAAE,UAAU,YAAY,UAAU,gBAAgB,SAAS,GAAG,EAAE,sBAAsB,KAAK,CAAC;AACxI;AAAA,IACF;AAEA,UAAM,EAAE,UAAU,IAAI,MAAM,YAAY,IAAI,EAAE,YAAY,UAAU,gBAAgB,SAAS,CAAC;AAE9F,QAAI,YAAY;AAChB,QAAI,qBAAqB;AACzB,QAAI;AACF,YAAM,KAAM,GAAW,UAAU;AACjC,UAAI,YAAY,GACb,WAAW,OAAO,KAAY,EAC9B,OAAO,CAAC,YAAmB,CAAC,EAC5B,MAAM,MAAa,KAAK,QAAQ;AACnC,UAAI,OAAO,oBAAoB;AAC7B,oBAAY,UAAU;AAAA,UACpB,OAAO;AAAA,UACP,mBAAmB,OAAO,OAAO;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AACA,UAAI,OAAO,cAAc;AACvB,oBAAY,UAAU,MAAM,MAAM,IAAI,IAAI,OAAO,YAAY,CAAC,yBAAyB,QAAQ,EAAE;AAAA,MACnG;AACA,YAAM,MAAM,MAAM,UAAU,iBAAiB;AAC7C,YAAM,cAAc,CAAC;AACrB,YAAM,cAAc,eAAgB,OAAO,IAAI,cAAc;AAC7D,2BAAqB;AACrB,UAAI,YAAa,aAAY;AAAA,IAC/B,QAAQ;AAAA,IAAC;AACT,QAAI,CAAC,mBAAoB,aAAY;AAErC,UAAM,oBACJ,OAAO,SAAS,sBAAsB,WAAW,QAAQ,oBAAoB;AAC/E,UAAM,qBACJ,OAAO,SAAS,uBAAuB,WAAW,QAAQ,qBAAqB;AACjF,QAAI,qBAAqB,qBAAqB;AAC9C,QAAI,sBAAsB,uBAAuB,YAAY,KAAK;AAElE,QAAI,CAAC,OAAO,SAAS,kBAAkB,EAAG,sBAAqB;AAC/D,QAAI,CAAC,OAAO,SAAS,mBAAmB,EAAG,uBAAsB;AAEjE,QAAI,uBAAuB,KAAK,wBAAwB,GAAG;AACzD,YAAM,cAAc,0BAA0B;AAAA,QAC5C;AAAA,QACA,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,WAAW;AAAA,QACX,YAAY;AAAA,MACd,CAAC;AACD,UAAI,YAAY,QAAQ;AACtB,cAAM,yBAAyB,IAAI,WAAW;AAAA,MAChD;AAAA,IACF;AAMA,UAAM,yBAAyB,OAAO,SAAS,oBAAoB;AACnE,UAAM,wBACJ,CAAC,qBACA,oBAAoB,UAAa,mBAAmB,OACpD,0BAA0B,iCAAiC,YAAY,QAAQ;AAClF,UAAM,uBAAuB,mBAAmB;AAChD,UAAM,YAAY;AAChB,UAAI;AACF,cAAM,MAAM,IAAI,QAAa,UAAU;AACvC,YAAI,uBAAuB;AACzB,gBAAM,IAAI,UAAU,gCAAgC;AAAA,YAClD;AAAA,YACA,UAAU,YAAY;AAAA,YACtB,gBAAgB,kBAAkB;AAAA,YAClC,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AACA,cAAM,IAAI,UAAU,wBAAwB,EAAE,UAAU,YAAY,UAAU,gBAAgB,SAAS,CAAC;AAAA,MAC1G,SAAS,OAAO;AACd,cAAM;AAAA,UACJ,EAAE,GAAG;AAAA,UACL;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,YACT;AAAA,YACA;AAAA,YACA;AAAA,YACA,UAAU,YAAY;AAAA,YACtB,gBAAgB,kBAAkB;AAAA,YAClC;AAAA,UACF;AAAA,QACF,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAClB;AAAA,IACF,GAAG;AAAA,EACL,SAAS,OAAO;AACd,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;",
+  "names": ["wasActive", "baseDelta", "baseDeltaOverride", "indexDeltaOverride", "effectiveBaseDelta", "effectiveIndexDelta", "shouldRefreshCoverage", "coverageRefreshDelay"]
 }

package/dist/modules/query_index/subscribers/upsert_one.js

@@ -1,4 +1,5 @@
 import { recordIndexerError } from "@open-mercato/shared/lib/indexers/error-log";
+import { isReadProjectionAlwaysConsistent } from "@open-mercato/shared/lib/data/consistency";
 import { upsertIndexRow, reindexSearchTokensForRecord } from "../lib/indexer.js";
 import { applyCoverageAdjustments, createCoverageAdjustments } from "../lib/coverage.js";
 import {
@@ -17,6 +18,7 @@ async function handle(payload, ctx) {
   let tenantId = payload?.tenantId ?? null;
   const suppressCoverage = payload?.suppressCoverage === true;
   const coverageDelayMs = typeof payload?.coverageDelayMs === "number" ? payload.coverageDelayMs : void 0;
+  const alwaysConsistent = isReadProjectionAlwaysConsistent();
   try {
     const hasPayloadOrganizationId = Object.prototype.hasOwnProperty.call(payload ?? {}, "organizationId");
     const hasPayloadTenantId = Object.prototype.hasOwnProperty.call(payload ?? {}, "tenantId");
@@ -32,6 +34,64 @@ async function handle(payload, ctx) {
     organizationId = resolvedScope.organizationId;
     tenantId = resolvedScope.tenantId;
     const searchTokenDoc = typeof payload?.searchTokenDoc === "object" && payload.searchTokenDoc && !Array.isArray(payload.searchTokenDoc) ? payload.searchTokenDoc : null;
+    if (alwaysConsistent) {
+      const db = em.getKysely();
+      let result2 = null;
+      await db.transaction().execute(async (trx) => {
+        result2 = await upsertIndexRow(em, {
+          entityType,
+          recordId,
+          organizationId,
+          tenantId,
+          searchTokenDoc,
+          deferSearchTokens: false,
+          trx
+        });
+        if (!suppressCoverage) {
+          const doc = result2.doc;
+          const isActive = !!doc && (doc.deleted_at == null || doc.deleted_at === null);
+          let baseDelta = typeof payload?.coverageBaseDelta === "number" ? payload.coverageBaseDelta : void 0;
+          let indexDelta = typeof payload?.coverageIndexDelta === "number" ? payload.coverageIndexDelta : void 0;
+          const crudAction = typeof payload?.crudAction === "string" ? payload.crudAction : void 0;
+          if (baseDelta === void 0) {
+            if (result2.revived) baseDelta = 1;
+            else if (crudAction === "created") baseDelta = 1;
+            else baseDelta = 0;
+          }
+          if (indexDelta === void 0) {
+            if (isActive && (result2.created || result2.revived)) indexDelta = 1;
+            else indexDelta = 0;
+          }
+          if (!isActive && baseDelta > 0) baseDelta = 0;
+          if (!isActive && indexDelta > 0) indexDelta = 0;
+          if (!Number.isFinite(baseDelta)) baseDelta = 0;
+          if (!Number.isFinite(indexDelta)) indexDelta = 0;
+          const adjustments = createCoverageAdjustments({
+            entityType,
+            tenantId: tenantId ?? null,
+            organizationId: organizationId ?? null,
+            baseDelta,
+            indexDelta
+          });
+          if (adjustments.length) {
+            await applyCoverageAdjustments(em, adjustments, { trx });
+          }
+        }
+      });
+      const bus = ctx.resolve("eventBus");
+      const eventScope = { entityType, recordId, organizationId, tenantId };
+      await bus.emitEvent("query_index.vectorize_one", eventScope, { rethrowHandlerErrors: true });
+      await bus.emitEvent("search.index_record", { entityId: entityType, recordId, organizationId, tenantId }, { rethrowHandlerErrors: true });
+      if (!suppressCoverage && coverageDelayMs !== void 0 && coverageDelayMs >= 0) {
+        await bus.emitEvent("query_index.coverage.refresh", {
+          entityType,
+          tenantId: tenantId ?? null,
+          organizationId: organizationId ?? null,
+          delayMs: coverageDelayMs
+        }, { rethrowHandlerErrors: true });
+      }
+      return;
+    }
     const result = await upsertIndexRow(em, {
       entityType,
       recordId,