@open-mercato/core 0.8.1-develop.7215.1.60786cf836 → 0.8.1-develop.7219.1.f96cb57e70

package/dist/modules/entities/lib/helpers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/entities/lib/helpers.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/core'\nimport type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport { encryptCustomFieldValue, resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport {\n  MAX_CUSTOM_FIELD_KEYS_PER_RECORD,\n  TOO_MANY_CUSTOM_FIELDS_ERROR,\n} from '@open-mercato/shared/modules/entities/validation'\nimport { CustomFieldDef, CustomFieldValue } from '../data/entities'\nimport { loadScopedCustomFieldDefs } from './scoped-field-defs'\n\ntype Primitive = string | number | boolean | null | undefined\ntype PrimitiveOrArray = Primitive | Primitive[]\n\nexport type SetRecordCustomFieldsOptions = {\n  entityId: string\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n  values: Record<string, PrimitiveOrArray>\n  // When true (default), try to use field definitions to decide storage column\n  preferDefs?: boolean\n  // Optional: notify external systems (e.g., indexing) when values changed\n  onChanged?: (payload: { entityId: string; recordId: string; organizationId: string | null; tenantId: string | null }) => Promise<void> | void\n  // Optional: re-use an existing tenant encryption service instance\n  encryptionService?: TenantDataEncryptionService | null\n}\n\nfunction columnFromKind(kind: string): keyof CustomFieldValue {\n  switch (kind) {\n    case 'text':\n    case 'select':\n    case 'currency':\n    case 'dictionary':\n    case 'phone':\n      return 'valueText'\n    case 'multiline':\n      return 'valueMultiline'\n    case 'integer':\n      return 'valueInt'\n    case 'float':\n      return 'valueFloat'\n    case 'boolean':\n      return 'valueBool'\n    default:\n      return 'valueText'\n  }\n}\n\nfunction columnFromJsValue(v: Primitive): keyof CustomFieldValue {\n  if (v === null || v === undefined) return 'valueText'\n  if (typeof v === 'boolean') return 'valueBool'\n  if (typeof v === 'number') return Number.isInteger(v) ? 'valueInt' : 'valueFloat'\n  return 'valueText'\n}\n\n// Clears all value columns to avoid leftovers on update\nfunction clearValueColumns(cf: CustomFieldValue) {\n  cf.valueText = null\n  cf.valueMultiline = null\n  cf.valueInt = null\n  cf.valueFloat = null\n  cf.valueBool = null\n}\n\nexport async function setRecordCustomFields(\n  em: EntityManager,\n  opts: SetRecordCustomFieldsOptions,\n): Promise<void> {\n  const { entityId, recordId, values } = opts\n  const organizationId = opts.organizationId ?? null\n  const tenantId = opts.tenantId ?? null\n  const preferDefs = opts.preferDefs !== false\n\n  let defsByKey: Map<string, CustomFieldDef> | undefined\n  if (preferDefs) {\n    defsByKey = await loadScopedCustomFieldDefs(em, { entityId, organizationId, tenantId })\n  }\n\n  const toPersist: CustomFieldValue[] = []\n  let encryptionService: TenantDataEncryptionService | null | undefined\n  const encryptionCache = new Map<string | null, string | null>()\n  const getEncryptionService = () => {\n    if (encryptionService !== undefined) return encryptionService\n    encryptionService = resolveTenantEncryptionService(em as any, opts.encryptionService)\n    return encryptionService\n  }\n  const keys = Object.keys(values)\n  const presentKeyCount = keys.filter((key) => values[key] !== undefined).length\n  if (preferDefs && presentKeyCount > MAX_CUSTOM_FIELD_KEYS_PER_RECORD) {\n    throw new Error(TOO_MANY_CUSTOM_FIELDS_ERROR)\n  }\n\n  // Run the per-key delete+insert work inside ONE database transaction so a\n  // multi-value replacement is atomic and isolated. The array branch deletes the\n  // existing rows for a key and inserts the replacements; without an enclosing\n  // transaction those can land in separate commit boundaries under MikroORM's\n  // FlushMode.AUTO (a query elsewhere in the unit auto-flushes part of the work),\n  // which intermittently left the field with the delete applied but the inserts\n  // missing \u2014 the multi-select EDIT reverted to []. The single commit below makes\n  // it all-or-nothing. We only open our own transaction when the caller has not\n  // already started one (commands fork the request em and may run setCustomFields\n  // outside their own withAtomicFlush tx); join an ambient transaction otherwise.\n  const txEm = em as {\n    begin?: () => Promise<void>\n    commit?: () => Promise<void>\n    rollback?: () => Promise<void>\n    isInTransaction?: () => boolean\n  }\n  const txCapable =\n    typeof txEm.begin === 'function' &&\n    typeof txEm.commit === 'function' &&\n    typeof txEm.rollback === 'function' &&\n    typeof txEm.isInTransaction === 'function'\n  const ownCustomFieldTransaction = txCapable && !txEm.isInTransaction!()\n  if (ownCustomFieldTransaction) await txEm.begin!()\n  try {\n  for (const fieldKey of keys) {\n    const raw = values[fieldKey]\n    if (raw === undefined) continue\n\n    const def = defsByKey?.get(fieldKey)\n    const encrypted = Boolean(def?.configJson && (def as any).configJson?.encrypted)\n    const isArray = Array.isArray(raw)\n    // When array (multi-value): replace all existing rows for the key. Delete\n    // first, then create replacements, all inside the transaction opened above.\n    // Creating rows before a native delete can auto-flush and delete the new\n    // values; mixing em.remove(stale) with new rows for the same EAV scope was\n    // observed to commit an empty set under MikroORM v7. The explicit order keeps\n    // the replacement atomic without letting old-row cleanup target new rows.\n    if (isArray) {\n      const arr = raw as Primitive[]\n      await em.nativeDelete(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey })\n      for (const val of arr) {\n        const col: keyof CustomFieldValue = encrypted ? 'valueText' : def ? columnFromKind(def.kind) : columnFromJsValue(val)\n        const cf = em.create(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey, createdAt: new Date() })\n        clearValueColumns(cf)\n        const stored = encrypted\n          ? await encryptCustomFieldValue(val, tenantId, getEncryptionService(), encryptionCache)\n          : val\n        switch (col) {\n          case 'valueText': cf.valueText = stored == null ? null : String(stored); break\n          case 'valueMultiline': cf.valueMultiline = stored == null ? null : String(stored); break\n          case 'valueInt': cf.valueInt = stored == null ? null : Number(stored); break\n          case 'valueFloat': cf.valueFloat = stored == null ? null : Number(stored); break\n          case 'valueBool': cf.valueBool = stored == null ? null : Boolean(stored); break\n          default: cf.valueText = stored == null ? null : String(stored); break\n        }\n        toPersist.push(cf)\n      }\n      continue\n    }\n\n    const column: keyof CustomFieldValue = encrypted ? 'valueText' : def ? columnFromKind(def.kind) : columnFromJsValue(raw as Primitive)\n    const storedValue = encrypted\n      ? await encryptCustomFieldValue(raw as Primitive, tenantId, getEncryptionService(), encryptionCache)\n      : raw\n\n    let cf = await em.findOne(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey })\n    if (!cf) {\n      cf = em.create(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey, createdAt: new Date() })\n      toPersist.push(cf)\n    }\n    clearValueColumns(cf)\n    switch (column) {\n      case 'valueText':\n        cf.valueText = (storedValue as Primitive) == null ? null : String(storedValue as Primitive)\n        break\n      case 'valueMultiline':\n        cf.valueMultiline = (storedValue as Primitive) == null ? null : String(storedValue as Primitive)\n        break\n      case 'valueInt':\n        cf.valueInt = (storedValue as Primitive) == null ? null : Number(storedValue as Primitive)\n        break\n      case 'valueFloat':\n        cf.valueFloat = (storedValue as Primitive) == null ? null : Number(storedValue as Primitive)\n        break\n      case 'valueBool':\n        cf.valueBool = (storedValue as Primitive) == null ? null : Boolean(storedValue as Primitive)\n        break\n      default:\n        cf.valueText = (storedValue as Primitive) == null ? null : String(storedValue as Primitive)\n        break\n    }\n  }\n\n  if (toPersist.length) em.persist(toPersist)\n  await em.flush()\n    if (ownCustomFieldTransaction) await txEm.commit!()\n  } catch (err) {\n    if (ownCustomFieldTransaction) {\n      try { await txEm.rollback!() } catch { /* surface the original error, not a rollback failure */ }\n    }\n    throw err\n  }\n  // Emit hook for indexing if requested (outside CRUD flows). Runs AFTER the\n  // transaction commits so consumers observe the persisted rows.\n  try {\n    if (typeof opts.onChanged === 'function') {\n      await opts.onChanged({ entityId, recordId, organizationId, tenantId })\n    }\n  } catch {\n    // Non-blocking\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,yBAAyB,sCAAsC;AACxE;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAyB,wBAAwB;AACjD,SAAS,iCAAiC;AAmB1C,SAAS,eAAe,MAAsC;AAC5D,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,kBAAkB,GAAsC;AAC/D,MAAI,MAAM,QAAQ,MAAM,OAAW,QAAO;AAC1C,MAAI,OAAO,MAAM,UAAW,QAAO;AACnC,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,UAAU,CAAC,IAAI,aAAa;AACrE,SAAO;AACT;AAGA,SAAS,kBAAkB,IAAsB;AAC/C,KAAG,YAAY;AACf,KAAG,iBAAiB;AACpB,KAAG,WAAW;AACd,KAAG,aAAa;AAChB,KAAG,YAAY;AACjB;AAEA,eAAsB,sBACpB,IACA,MACe;AACf,QAAM,EAAE,UAAU,UAAU,OAAO,IAAI;AACvC,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,aAAa,KAAK,eAAe;AAEvC,MAAI;AACJ,MAAI,YAAY;AACd,gBAAY,MAAM,0BAA0B,IAAI,EAAE,UAAU,gBAAgB,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,YAAgC,CAAC;AACvC,MAAI;AACJ,QAAM,kBAAkB,oBAAI,IAAkC;AAC9D,QAAM,uBAAuB,MAAM;AACjC,QAAI,sBAAsB,OAAW,QAAO;AAC5C,wBAAoB,+BAA+B,IAAW,KAAK,iBAAiB;AACpF,WAAO;AAAA,EACT;AACA,QAAM,OAAO,OAAO,KAAK,MAAM;AAC/B,QAAM,kBAAkB,KAAK,OAAO,CAAC,QAAQ,OAAO,GAAG,MAAM,MAAS,EAAE;AACxE,MAAI,cAAc,kBAAkB,kCAAkC;AACpE,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAYA,QAAM,OAAO;AAMb,QAAM,YACJ,OAAO,KAAK,UAAU,cACtB,OAAO,KAAK,WAAW,cACvB,OAAO,KAAK,aAAa,cACzB,OAAO,KAAK,oBAAoB;AAClC,QAAM,4BAA4B,aAAa,CAAC,KAAK,gBAAiB;AACtE,MAAI,0BAA2B,OAAM,KAAK,MAAO;AACjD,MAAI;AACJ,eAAW,YAAY,MAAM;AAC3B,YAAM,MAAM,OAAO,QAAQ;AAC3B,UAAI,QAAQ,OAAW;AAEvB,YAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,YAAM,YAAY,QAAQ,KAAK,cAAe,IAAY,YAAY,SAAS;AAC/E,YAAM,UAAU,MAAM,QAAQ,GAAG;AAOjC,UAAI,SAAS;AACX,cAAM,MAAM;AACZ,cAAM,GAAG,aAAa,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,SAAS,CAAC;AAClG,mBAAW,OAAO,KAAK;AACrB,gBAAM,MAA8B,YAAY,cAAc,MAAM,eAAe,IAAI,IAAI,IAAI,kBAAkB,GAAG;AACpH,gBAAMA,MAAK,GAAG,OAAO,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,UAAU,WAAW,oBAAI,KAAK,EAAE,CAAC;AACxH,4BAAkBA,GAAE;AACpB,gBAAM,SAAS,YACX,MAAM,wBAAwB,KAAK,UAAU,qBAAqB,GAAG,eAAe,IACpF;AACJ,kBAAQ,KAAK;AAAA,YACX,KAAK;AAAa,cAAAA,IAAG,YAAY,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YACzE,KAAK;AAAkB,cAAAA,IAAG,iBAAiB,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YACnF,KAAK;AAAY,cAAAA,IAAG,WAAW,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YACvE,KAAK;AAAc,cAAAA,IAAG,aAAa,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YAC3E,KAAK;AAAa,cAAAA,IAAG,YAAY,UAAU,OAAO,OAAO,QAAQ,MAAM;AAAG;AAAA,YAC1E;AAAS,cAAAA,IAAG,YAAY,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,UAClE;AACA,oBAAU,KAAKA,GAAE;AAAA,QACnB;AACA;AAAA,MACF;AAEA,YAAM,SAAiC,YAAY,cAAc,MAAM,eAAe,IAAI,IAAI,IAAI,kBAAkB,GAAgB;AACpI,YAAM,cAAc,YAChB,MAAM,wBAAwB,KAAkB,UAAU,qBAAqB,GAAG,eAAe,IACjG;AAEJ,UAAI,KAAK,MAAM,GAAG,QAAQ,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,SAAS,CAAC;AACtG,UAAI,CAAC,IAAI;AACP,aAAK,GAAG,OAAO,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,UAAU,WAAW,oBAAI,KAAK,EAAE,CAAC;AAClH,kBAAU,KAAK,EAAE;AAAA,MACnB;AACA,wBAAkB,EAAE;AACpB,cAAQ,QAAQ;AAAA,QACd,KAAK;AACH,aAAG,YAAa,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC1F;AAAA,QACF,KAAK;AACH,aAAG,iBAAkB,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC/F;AAAA,QACF,KAAK;AACH,aAAG,WAAY,eAA6B,OAAO,OAAO,OAAO,WAAwB;AACzF;AAAA,QACF,KAAK;AACH,aAAG,aAAc,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC3F;AAAA,QACF,KAAK;AACH,aAAG,YAAa,eAA6B,OAAO,OAAO,QAAQ,WAAwB;AAC3F;AAAA,QACF;AACE,aAAG,YAAa,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC1F;AAAA,MACJ;AAAA,IACF;AAEA,QAAI,UAAU,OAAQ,IAAG,QAAQ,SAAS;AAC1C,UAAM,GAAG,MAAM;AACb,QAAI,0BAA2B,OAAM,KAAK,OAAQ;AAAA,EACpD,SAAS,KAAK;AACZ,QAAI,2BAA2B;AAC7B,UAAI;AAAE,cAAM,KAAK,SAAU;AAAA,MAAE,QAAQ;AAAA,MAA2D;AAAA,IAClG;AACA,UAAM;AAAA,EACR;AAGA,MAAI;AACF,QAAI,OAAO,KAAK,cAAc,YAAY;AACxC,YAAM,KAAK,UAAU,EAAE,UAAU,UAAU,gBAAgB,SAAS,CAAC;AAAA,IACvE;AAAA,EACF,QAAQ;AAAA,EAER;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/core'\nimport type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport { encryptCustomFieldValue, resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport {\n  MAX_CUSTOM_FIELD_KEYS_PER_RECORD,\n  TOO_MANY_CUSTOM_FIELDS_ERROR,\n} from '@open-mercato/shared/modules/entities/validation'\nimport { CustomFieldDef, CustomFieldValue } from '../data/entities'\nimport { loadScopedCustomFieldDefs } from './scoped-field-defs'\n\ntype Primitive = string | number | boolean | null | undefined\ntype PrimitiveOrArray = Primitive | Primitive[]\n\nexport type SetRecordCustomFieldsOptions = {\n  entityId: string\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n  values: Record<string, PrimitiveOrArray>\n  // When true (default), try to use field definitions to decide storage column\n  preferDefs?: boolean\n  // Optional: notify external systems (e.g., indexing) when values changed\n  onChanged?: (payload: { entityId: string; recordId: string; organizationId: string | null; tenantId: string | null }) => Promise<void> | void\n  // Optional: re-use an existing tenant encryption service instance\n  encryptionService?: TenantDataEncryptionService | null\n}\n\nfunction columnFromKind(kind: string): keyof CustomFieldValue {\n  switch (kind) {\n    case 'text':\n    case 'select':\n    case 'currency':\n    case 'dictionary':\n    case 'phone':\n      return 'valueText'\n    case 'multiline':\n      return 'valueMultiline'\n    case 'integer':\n      return 'valueInt'\n    case 'float':\n      return 'valueFloat'\n    case 'boolean':\n      return 'valueBool'\n    default:\n      return 'valueText'\n  }\n}\n\nfunction columnFromJsValue(v: Primitive): keyof CustomFieldValue {\n  if (v === null || v === undefined) return 'valueText'\n  if (typeof v === 'boolean') return 'valueBool'\n  if (typeof v === 'number') return Number.isInteger(v) ? 'valueInt' : 'valueFloat'\n  return 'valueText'\n}\n\n// Clears all value columns to avoid leftovers on update\nfunction clearValueColumns(cf: CustomFieldValue) {\n  cf.valueText = null\n  cf.valueMultiline = null\n  cf.valueInt = null\n  cf.valueFloat = null\n  cf.valueBool = null\n}\n\nexport async function setRecordCustomFields(\n  em: EntityManager,\n  opts: SetRecordCustomFieldsOptions,\n): Promise<void> {\n  const { entityId, recordId, values } = opts\n  const organizationId = opts.organizationId ?? null\n  const tenantId = opts.tenantId ?? null\n  const preferDefs = opts.preferDefs !== false\n\n  let defsByKey: Map<string, CustomFieldDef> | undefined\n  if (preferDefs) {\n    defsByKey = await loadScopedCustomFieldDefs(em, { entityId, organizationId, tenantId })\n  }\n\n  const toPersist: CustomFieldValue[] = []\n  let encryptionService: TenantDataEncryptionService | null | undefined\n  const encryptionCache = new Map<string | null, string | null>()\n  const getEncryptionService = () => {\n    if (encryptionService !== undefined) return encryptionService\n    encryptionService = resolveTenantEncryptionService(em as any, opts.encryptionService)\n    return encryptionService\n  }\n  const keys = Object.keys(values)\n  const presentKeyCount = keys.filter((key) => values[key] !== undefined).length\n  if (preferDefs && presentKeyCount > MAX_CUSTOM_FIELD_KEYS_PER_RECORD) {\n    throw new Error(TOO_MANY_CUSTOM_FIELDS_ERROR)\n  }\n\n  // Run the per-key delete+insert work inside ONE database transaction so a\n  // multi-value replacement is atomic and isolated. The array branch deletes the\n  // existing rows for a key and inserts the replacements; without an enclosing\n  // transaction those can land in separate commit boundaries under MikroORM's\n  // FlushMode.AUTO (a query elsewhere in the unit auto-flushes part of the work),\n  // which intermittently left the field with the delete applied but the inserts\n  // missing \u2014 the multi-select EDIT reverted to []. The single commit below makes\n  // it all-or-nothing. We only open our own transaction when the caller has not\n  // already started one (commands fork the request em and may run setCustomFields\n  // outside their own withAtomicFlush tx); join an ambient transaction otherwise.\n  const txEm = em as {\n    begin?: () => Promise<void>\n    commit?: () => Promise<void>\n    rollback?: () => Promise<void>\n    isInTransaction?: () => boolean\n  }\n  const txCapable =\n    typeof txEm.begin === 'function' &&\n    typeof txEm.commit === 'function' &&\n    typeof txEm.rollback === 'function' &&\n    typeof txEm.isInTransaction === 'function'\n  const ownCustomFieldTransaction = txCapable && !txEm.isInTransaction!()\n  if (ownCustomFieldTransaction) await txEm.begin!()\n  try {\n  for (const fieldKey of keys) {\n    const raw = values[fieldKey]\n    if (raw === undefined) continue\n\n    const def = defsByKey?.get(fieldKey)\n    const encrypted = Boolean(def?.configJson && (def as any).configJson?.encrypted)\n    const isArray = Array.isArray(raw)\n    // When array (multi-value): replace all existing rows for the key. Delete\n    // first, then create replacements, all inside the transaction opened above.\n    // Creating rows before a native delete can auto-flush and delete the new\n    // values; mixing em.remove(stale) with new rows for the same EAV scope was\n    // observed to commit an empty set under MikroORM v7. The explicit order keeps\n    // the replacement atomic without letting old-row cleanup target new rows.\n    if (isArray) {\n      const arr = raw as Primitive[]\n      await em.nativeDelete(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey })\n      for (const val of arr) {\n        const col: keyof CustomFieldValue = encrypted ? 'valueText' : def ? columnFromKind(def.kind) : columnFromJsValue(val)\n        const cf = em.create(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey, createdAt: new Date() })\n        clearValueColumns(cf)\n        const stored = encrypted\n          ? await encryptCustomFieldValue(val, tenantId, getEncryptionService(), encryptionCache, { entityId, fieldKey })\n          : val\n        switch (col) {\n          case 'valueText': cf.valueText = stored == null ? null : String(stored); break\n          case 'valueMultiline': cf.valueMultiline = stored == null ? null : String(stored); break\n          case 'valueInt': cf.valueInt = stored == null ? null : Number(stored); break\n          case 'valueFloat': cf.valueFloat = stored == null ? null : Number(stored); break\n          case 'valueBool': cf.valueBool = stored == null ? null : Boolean(stored); break\n          default: cf.valueText = stored == null ? null : String(stored); break\n        }\n        toPersist.push(cf)\n      }\n      continue\n    }\n\n    const column: keyof CustomFieldValue = encrypted ? 'valueText' : def ? columnFromKind(def.kind) : columnFromJsValue(raw as Primitive)\n    const storedValue = encrypted\n      ? await encryptCustomFieldValue(raw as Primitive, tenantId, getEncryptionService(), encryptionCache, { entityId, fieldKey })\n      : raw\n\n    let cf = await em.findOne(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey })\n    if (!cf) {\n      cf = em.create(CustomFieldValue, { entityId, recordId, organizationId, tenantId, fieldKey, createdAt: new Date() })\n      toPersist.push(cf)\n    }\n    clearValueColumns(cf)\n    switch (column) {\n      case 'valueText':\n        cf.valueText = (storedValue as Primitive) == null ? null : String(storedValue as Primitive)\n        break\n      case 'valueMultiline':\n        cf.valueMultiline = (storedValue as Primitive) == null ? null : String(storedValue as Primitive)\n        break\n      case 'valueInt':\n        cf.valueInt = (storedValue as Primitive) == null ? null : Number(storedValue as Primitive)\n        break\n      case 'valueFloat':\n        cf.valueFloat = (storedValue as Primitive) == null ? null : Number(storedValue as Primitive)\n        break\n      case 'valueBool':\n        cf.valueBool = (storedValue as Primitive) == null ? null : Boolean(storedValue as Primitive)\n        break\n      default:\n        cf.valueText = (storedValue as Primitive) == null ? null : String(storedValue as Primitive)\n        break\n    }\n  }\n\n  if (toPersist.length) em.persist(toPersist)\n  await em.flush()\n    if (ownCustomFieldTransaction) await txEm.commit!()\n  } catch (err) {\n    if (ownCustomFieldTransaction) {\n      try { await txEm.rollback!() } catch { /* surface the original error, not a rollback failure */ }\n    }\n    throw err\n  }\n  // Emit hook for indexing if requested (outside CRUD flows). Runs AFTER the\n  // transaction commits so consumers observe the persisted rows.\n  try {\n    if (typeof opts.onChanged === 'function') {\n      await opts.onChanged({ entityId, recordId, organizationId, tenantId })\n    }\n  } catch {\n    // Non-blocking\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,yBAAyB,sCAAsC;AACxE;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAyB,wBAAwB;AACjD,SAAS,iCAAiC;AAmB1C,SAAS,eAAe,MAAsC;AAC5D,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,kBAAkB,GAAsC;AAC/D,MAAI,MAAM,QAAQ,MAAM,OAAW,QAAO;AAC1C,MAAI,OAAO,MAAM,UAAW,QAAO;AACnC,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,UAAU,CAAC,IAAI,aAAa;AACrE,SAAO;AACT;AAGA,SAAS,kBAAkB,IAAsB;AAC/C,KAAG,YAAY;AACf,KAAG,iBAAiB;AACpB,KAAG,WAAW;AACd,KAAG,aAAa;AAChB,KAAG,YAAY;AACjB;AAEA,eAAsB,sBACpB,IACA,MACe;AACf,QAAM,EAAE,UAAU,UAAU,OAAO,IAAI;AACvC,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,aAAa,KAAK,eAAe;AAEvC,MAAI;AACJ,MAAI,YAAY;AACd,gBAAY,MAAM,0BAA0B,IAAI,EAAE,UAAU,gBAAgB,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,YAAgC,CAAC;AACvC,MAAI;AACJ,QAAM,kBAAkB,oBAAI,IAAkC;AAC9D,QAAM,uBAAuB,MAAM;AACjC,QAAI,sBAAsB,OAAW,QAAO;AAC5C,wBAAoB,+BAA+B,IAAW,KAAK,iBAAiB;AACpF,WAAO;AAAA,EACT;AACA,QAAM,OAAO,OAAO,KAAK,MAAM;AAC/B,QAAM,kBAAkB,KAAK,OAAO,CAAC,QAAQ,OAAO,GAAG,MAAM,MAAS,EAAE;AACxE,MAAI,cAAc,kBAAkB,kCAAkC;AACpE,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAYA,QAAM,OAAO;AAMb,QAAM,YACJ,OAAO,KAAK,UAAU,cACtB,OAAO,KAAK,WAAW,cACvB,OAAO,KAAK,aAAa,cACzB,OAAO,KAAK,oBAAoB;AAClC,QAAM,4BAA4B,aAAa,CAAC,KAAK,gBAAiB;AACtE,MAAI,0BAA2B,OAAM,KAAK,MAAO;AACjD,MAAI;AACJ,eAAW,YAAY,MAAM;AAC3B,YAAM,MAAM,OAAO,QAAQ;AAC3B,UAAI,QAAQ,OAAW;AAEvB,YAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,YAAM,YAAY,QAAQ,KAAK,cAAe,IAAY,YAAY,SAAS;AAC/E,YAAM,UAAU,MAAM,QAAQ,GAAG;AAOjC,UAAI,SAAS;AACX,cAAM,MAAM;AACZ,cAAM,GAAG,aAAa,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,SAAS,CAAC;AAClG,mBAAW,OAAO,KAAK;AACrB,gBAAM,MAA8B,YAAY,cAAc,MAAM,eAAe,IAAI,IAAI,IAAI,kBAAkB,GAAG;AACpH,gBAAMA,MAAK,GAAG,OAAO,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,UAAU,WAAW,oBAAI,KAAK,EAAE,CAAC;AACxH,4BAAkBA,GAAE;AACpB,gBAAM,SAAS,YACX,MAAM,wBAAwB,KAAK,UAAU,qBAAqB,GAAG,iBAAiB,EAAE,UAAU,SAAS,CAAC,IAC5G;AACJ,kBAAQ,KAAK;AAAA,YACX,KAAK;AAAa,cAAAA,IAAG,YAAY,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YACzE,KAAK;AAAkB,cAAAA,IAAG,iBAAiB,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YACnF,KAAK;AAAY,cAAAA,IAAG,WAAW,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YACvE,KAAK;AAAc,cAAAA,IAAG,aAAa,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,YAC3E,KAAK;AAAa,cAAAA,IAAG,YAAY,UAAU,OAAO,OAAO,QAAQ,MAAM;AAAG;AAAA,YAC1E;AAAS,cAAAA,IAAG,YAAY,UAAU,OAAO,OAAO,OAAO,MAAM;AAAG;AAAA,UAClE;AACA,oBAAU,KAAKA,GAAE;AAAA,QACnB;AACA;AAAA,MACF;AAEA,YAAM,SAAiC,YAAY,cAAc,MAAM,eAAe,IAAI,IAAI,IAAI,kBAAkB,GAAgB;AACpI,YAAM,cAAc,YAChB,MAAM,wBAAwB,KAAkB,UAAU,qBAAqB,GAAG,iBAAiB,EAAE,UAAU,SAAS,CAAC,IACzH;AAEJ,UAAI,KAAK,MAAM,GAAG,QAAQ,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,SAAS,CAAC;AACtG,UAAI,CAAC,IAAI;AACP,aAAK,GAAG,OAAO,kBAAkB,EAAE,UAAU,UAAU,gBAAgB,UAAU,UAAU,WAAW,oBAAI,KAAK,EAAE,CAAC;AAClH,kBAAU,KAAK,EAAE;AAAA,MACnB;AACA,wBAAkB,EAAE;AACpB,cAAQ,QAAQ;AAAA,QACd,KAAK;AACH,aAAG,YAAa,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC1F;AAAA,QACF,KAAK;AACH,aAAG,iBAAkB,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC/F;AAAA,QACF,KAAK;AACH,aAAG,WAAY,eAA6B,OAAO,OAAO,OAAO,WAAwB;AACzF;AAAA,QACF,KAAK;AACH,aAAG,aAAc,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC3F;AAAA,QACF,KAAK;AACH,aAAG,YAAa,eAA6B,OAAO,OAAO,QAAQ,WAAwB;AAC3F;AAAA,QACF;AACE,aAAG,YAAa,eAA6B,OAAO,OAAO,OAAO,WAAwB;AAC1F;AAAA,MACJ;AAAA,IACF;AAEA,QAAI,UAAU,OAAQ,IAAG,QAAQ,SAAS;AAC1C,UAAM,GAAG,MAAM;AACb,QAAI,0BAA2B,OAAM,KAAK,OAAQ;AAAA,EACpD,SAAS,KAAK;AACZ,QAAI,2BAA2B;AAC7B,UAAI;AAAE,cAAM,KAAK,SAAU;AAAA,MAAE,QAAQ;AAAA,MAA2D;AAAA,IAClG;AACA,UAAM;AAAA,EACR;AAGA,MAAI;AACF,QAAI,OAAO,KAAK,cAAc,YAAY;AACxC,YAAM,KAAK,UAAU,EAAE,UAAU,UAAU,gBAAgB,SAAS,CAAC;AAAA,IACvE;AAAA,EACF,QAAQ;AAAA,EAER;AACF;",
   "names": ["cf"]
 }

package/dist/modules/query_index/lib/batch.js

@@ -1,7 +1,7 @@
 import { sql } from "kysely";
 import { recordIndexerError } from "@open-mercato/shared/lib/indexers/error-log";
 import { isUniqueViolation } from "@open-mercato/shared/lib/db/pg-errors";
-import { buildIndexDocument } from "./document.js";
+import { buildIndexDocument, rebuildAggregateSearchField } from "./document.js";
 import { replaceSearchTokensForBatch, isSearchDebugEnabled } from "./search-tokens.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveSearchConfig } from "@open-mercato/shared/lib/search/config";
@@ -169,7 +169,7 @@ async function upsertIndexBatch(db, entityType, rows, scope, options = {}) {
           tenantId: scopeTenant ?? null
         });
         if (decrypted && typeof decrypted === "object") {
-          tokenDoc = decrypted;
+          tokenDoc = rebuildAggregateSearchField(decrypted, { entityType, config: searchConfig });
         }
       } catch (decryptError) {
         logger.warn("Failed to decrypt index document for search tokens", { entityType, recordId });

package/dist/modules/query_index/lib/batch.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/batch.ts"],
-  "sourcesContent": ["import { type Kysely, sql } from 'kysely'\nimport { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { isUniqueViolation } from '@open-mercato/shared/lib/db/pg-errors'\nimport { buildIndexDocument, type IndexCustomFieldValue } from './document'\nimport { replaceSearchTokensForBatch, isSearchDebugEnabled } from './search-tokens'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveSearchConfig } from '@open-mercato/shared/lib/search/config'\n\nconst logger = createLogger('query_index').child({ component: 'reindex-batch' })\n\n/**\n * Cap on how many per-row failures a single batch persists to `indexer_error_logs`.\n * Under a systemic failure (pool exhausted, disk full, KMS down) every row fails, and\n * writing one error row per record would hammer the database that is already failing.\n * The count of suppressed failures still reaches the caller via `failedRecordIds`.\n */\nconst MAX_RECORDED_ROW_ERRORS_PER_BATCH = 50\n\nexport type AnyRow = Record<string, any> & { id: string | number }\n\nexport type ScopeOverrides = {\n  orgId?: string\n  tenantId?: string\n}\n\n/**\n * What a batch actually wrote, as opposed to what it was asked to write. Callers MUST\n * reconcile `written` against `attempted` \u2014 a batch that loses rows and reports success\n * is how records go permanently missing from the index (issue GSM-266).\n */\nexport type UpsertIndexBatchResult = {\n  attempted: number\n  written: number\n  failedRecordIds: string[]\n  searchTokenFailures: number\n}\n\nexport class QueryIndexBatchWriteError extends Error {\n  readonly entityType: string\n  readonly attempted: number\n  readonly written: number\n  readonly failedRecordIds: string[]\n\n  constructor(entityType: string, result: UpsertIndexBatchResult) {\n    const preview = result.failedRecordIds.slice(0, 10)\n    const suffix = result.failedRecordIds.length > preview.length ? ', ...' : ''\n    super(\n      `[internal] Query index write incomplete for ${entityType}: wrote ${result.written} of ${result.attempted} records` +\n        (preview.length ? ` (failed: ${preview.join(', ')}${suffix})` : ''),\n    )\n    this.name = 'QueryIndexBatchWriteError'\n    this.entityType = entityType\n    this.attempted = result.attempted\n    this.written = result.written\n    this.failedRecordIds = result.failedRecordIds\n  }\n}\n\nexport function assertIndexBatchWritesLanded(entityType: string, result: UpsertIndexBatchResult): void {\n  if (result.written >= result.attempted && result.failedRecordIds.length === 0) return\n  throw new QueryIndexBatchWriteError(entityType, result)\n}\n\nexport function createEmptyUpsertIndexBatchResult(): UpsertIndexBatchResult {\n  return { attempted: 0, written: 0, failedRecordIds: [], searchTokenFailures: 0 }\n}\n\nexport function mergeUpsertIndexBatchResults(\n  target: UpsertIndexBatchResult,\n  addition: UpsertIndexBatchResult,\n): UpsertIndexBatchResult {\n  target.attempted += addition.attempted\n  target.written += addition.written\n  target.searchTokenFailures += addition.searchTokenFailures\n  target.failedRecordIds.push(...addition.failedRecordIds)\n  return target\n}\n\ntype CustomFieldRow = {\n  record_id: string\n  field_key: string\n  value_text: string | null\n  value_multiline: string | null\n  value_int: number | null\n  value_float: number | null\n  value_bool: boolean | null\n  organization_id: string | null\n  tenant_id: string | null\n}\n\nexport type IndexBatchOptions = {\n  deriveOrganizationId?: (row: AnyRow) => string | null | undefined\n  encryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n  decryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n}\n\nfunction normalizeId(value: unknown): string {\n  return String(value)\n}\n\nfunction normalizeScopedValue(value: unknown): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return String(value)\n}\n\ntype IndexRowPayload = {\n  entity_type: string\n  entity_id: string\n  organization_id: string | null\n  tenant_id: string | null\n  doc: Record<string, unknown>\n  tokenDoc: Record<string, unknown>\n  index_version: number\n}\n\nasync function updateIndexRow(db: Kysely<any>, payload: IndexRowPayload): Promise<number> {\n  let updateQuery = db\n    .updateTable('entity_indexes' as any)\n    .set({\n      doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n      index_version: payload.index_version,\n      organization_id: payload.organization_id ?? null,\n      tenant_id: payload.tenant_id ?? null,\n      updated_at: sql`now()`,\n      deleted_at: null,\n    } as any)\n    .where('entity_type' as any, '=', payload.entity_type)\n    .where('entity_id' as any, '=', payload.entity_id)\n  updateQuery = payload.organization_id == null\n    ? updateQuery.where('organization_id' as any, 'is', null as any)\n    : updateQuery.where('organization_id' as any, '=', payload.organization_id)\n  const result = await updateQuery.executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n  return Number(result?.numUpdatedRows ?? 0)\n}\n\nexport async function upsertIndexBatch(\n  db: Kysely<any>,\n  entityType: string,\n  rows: AnyRow[],\n  scope: ScopeOverrides,\n  options: IndexBatchOptions = {},\n): Promise<UpsertIndexBatchResult> {\n  if (!rows.length) return createEmptyUpsertIndexBatchResult()\n  const recordIds = rows.map((row) => normalizeId(row.id))\n\n  const failedRecordIds: string[] = []\n  let searchTokenFailures = 0\n  let recordedRowErrors = 0\n\n  const recordRowFailure = async (\n    recordId: string,\n    error: unknown,\n    handler: string,\n    rowScope: { organizationId: string | null; tenantId: string | null },\n  ): Promise<void> => {\n    failedRecordIds.push(recordId)\n    if (recordedRowErrors >= MAX_RECORDED_ROW_ERRORS_PER_BATCH) return\n    recordedRowErrors += 1\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler,\n        error,\n        entityType,\n        recordId,\n        tenantId: rowScope.tenantId,\n        organizationId: rowScope.organizationId,\n      },\n    ).catch(() => undefined)\n  }\n\n  const shouldMergeCustomerEntity =\n    entityType === 'customers:customer_person_profile' || entityType === 'customers:customer_company_profile'\n\n  let customerEntitiesById: Map<string, AnyRow> | null = null\n  if (shouldMergeCustomerEntity) {\n    const entityIds = Array.from(\n      new Set(\n        rows\n          .map((row) => (row as AnyRow).entity_id || (row as AnyRow).entityId)\n          .filter((value): value is string | number => value !== undefined && value !== null && `${value}` !== '')\n          .map((value) => normalizeId(value)),\n      ),\n    )\n    if (entityIds.length) {\n      const entityRows = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, 'in', entityIds)\n        .execute() as AnyRow[]\n      customerEntitiesById = new Map(entityRows.map((row) => [normalizeId(row.id), row]))\n    }\n  }\n\n  const customFieldRows = await db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'record_id' as any,\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n      'organization_id' as any,\n      'tenant_id' as any,\n    ])\n    .where('entity_id' as any, '=', entityType)\n    .where('record_id' as any, 'in', recordIds)\n    .execute() as CustomFieldRow[]\n\n  const customFieldMap = new Map<string, CustomFieldRow[]>()\n  for (const fieldRow of customFieldRows) {\n    const key = normalizeId(fieldRow.record_id)\n    const bucket = customFieldMap.get(key)\n    if (bucket) bucket.push(fieldRow)\n    else customFieldMap.set(key, [fieldRow])\n  }\n\n  const basePayloads: IndexRowPayload[] = []\n\n  const debugEnabled = isSearchDebugEnabled()\n  const searchConfig = resolveSearchConfig()\n\n  for (const row of rows) {\n    const recordId = normalizeId(row.id)\n    const baseOrg = normalizeScopedValue((row as AnyRow).organization_id)\n    const baseTenant = normalizeScopedValue((row as AnyRow).tenant_id)\n    const derivedOrg = options?.deriveOrganizationId\n      ? normalizeScopedValue(options.deriveOrganizationId(row))\n      : undefined\n    const scopeOrg =\n      scope.orgId !== undefined\n        ? scope.orgId\n        : derivedOrg !== undefined\n          ? derivedOrg\n          : baseOrg\n    const scopeTenant = scope.tenantId !== undefined ? scope.tenantId : baseTenant\n    const inputRows = customFieldMap.get(recordId) ?? []\n    const values: IndexCustomFieldValue[] = inputRows.map((fieldRow) => ({\n      key: fieldRow.field_key,\n      value:\n        fieldRow.value_bool ??\n        fieldRow.value_int ??\n        fieldRow.value_float ??\n        fieldRow.value_text ??\n        fieldRow.value_multiline ??\n        null,\n      organizationId: normalizeScopedValue(fieldRow.organization_id),\n      tenantId: normalizeScopedValue(fieldRow.tenant_id),\n    }))\n    const mergedRow = (() => {\n      if (!shouldMergeCustomerEntity || !customerEntitiesById) return row\n      const entityId = (row as AnyRow).entity_id || (row as AnyRow).entityId\n      if (!entityId) return row\n      const entityRow = customerEntitiesById.get(normalizeId(entityId))\n      if (!entityRow) return row\n      return { ...entityRow, ...row }\n    })()\n    let doc = buildIndexDocument(\n      mergedRow,\n      values,\n      {\n        organizationId: scopeOrg ?? null,\n        tenantId: scopeTenant ?? null,\n      },\n      { entityType, config: searchConfig },\n    )\n    let tokenDoc: Record<string, unknown> = doc\n    if (typeof options.encryptDoc === 'function') {\n      try {\n        const encrypted = await options.encryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (encrypted && typeof encrypted === 'object') {\n          doc = encrypted\n          tokenDoc = encrypted\n        }\n      } catch (encryptError) {\n        // Falling through would write the plaintext document into entity_indexes,\n        // which must stay encrypted at rest. Skip the row instead so the previously\n        // encrypted row survives, and let the caller fail the run.\n        await recordRowFailure(recordId, encryptError, 'query_index:reindex-batch:encrypt', {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        continue\n      }\n    }\n    if (typeof options.decryptDoc === 'function') {\n      try {\n        const decrypted = await options.decryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (decrypted && typeof decrypted === 'object') {\n          tokenDoc = decrypted\n        }\n      } catch (decryptError) {\n        // Only affects the search tokens built below; the indexed document itself is\n        // unharmed, so the row still counts as written.\n        logger.warn('Failed to decrypt index document for search tokens', { entityType, recordId })\n        await recordIndexerError(\n          { db },\n          {\n            source: 'fulltext',\n            handler: 'query_index:reindex-batch:decrypt',\n            error: decryptError,\n            entityType,\n            recordId,\n            tenantId: scopeTenant ?? null,\n            organizationId: scopeOrg ?? null,\n          },\n        ).catch(() => undefined)\n      }\n    }\n    basePayloads.push({\n      entity_type: entityType,\n      entity_id: recordId,\n      organization_id: scopeOrg ?? null,\n      tenant_id: scopeTenant ?? null,\n      doc,\n      tokenDoc,\n      index_version: 1,\n    })\n    if (debugEnabled) {\n      const sample = {\n        display_name: (tokenDoc as any).display_name,\n        first_name: (tokenDoc as any).first_name,\n        last_name: (tokenDoc as any).last_name,\n        brand_name: (tokenDoc as any).brand_name,\n        legal_name: (tokenDoc as any).legal_name,\n      }\n      logger.debug('Reindex batch document', {\n        entityType,\n        recordId,\n        organizationId: scopeOrg ?? null,\n        tenantId: scopeTenant ?? null,\n        sample,\n      })\n    }\n  }\n\n  const insertRows = basePayloads.map((payload) => ({\n    entity_type: payload.entity_type,\n    entity_id: payload.entity_id,\n    organization_id: payload.organization_id,\n    tenant_id: payload.tenant_id,\n    doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n    index_version: payload.index_version,\n    created_at: sql`now()`,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }))\n\n  const tokenPayloads = basePayloads.map((payload) => ({\n    entityType: payload.entity_type,\n    recordId: payload.entity_id,\n    organizationId: payload.organization_id,\n    tenantId: payload.tenant_id,\n    doc: payload.tokenDoc,\n  }))\n\n  const writeSearchTokens = async (payloads = tokenPayloads): Promise<void> => {\n    if (!payloads.length) return\n    try {\n      await replaceSearchTokensForBatch(db, payloads)\n    } catch (searchTokenError) {\n      // Record instead of swallowing: a failed token write leaves fulltext search stale.\n      // Not counted as a write failure \u2014 replaceSearchTokensForBatch is transactional, so\n      // tokens end up stale rather than missing, and the record's next write rebuilds them.\n      searchTokenFailures += 1\n      await recordIndexerError(\n        { db },\n        { source: 'fulltext', handler: 'query_index:reindex-batch', error: searchTokenError, entityType, tenantId: scope.tenantId ?? null, organizationId: scope.orgId ?? null },\n      ).catch(() => undefined)\n    }\n  }\n\n  const buildResult = (written: number): UpsertIndexBatchResult => ({\n    attempted: rows.length,\n    written,\n    failedRecordIds,\n    searchTokenFailures,\n  })\n\n  if (!basePayloads.length) return buildResult(0)\n\n  let bulkWriteFailed = false\n  try {\n    // One statement, so it is atomic on its own. Note the arbiter is\n    // (entity_type, entity_id, organization_id_coalesced): two payloads sharing a\n    // conflict key in the same batch would raise 21000 for the whole statement and\n    // fall through to the per-row path below.\n    await db\n      .insertInto('entity_indexes' as any)\n      .values(insertRows as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          doc: sql`excluded.doc`,\n          index_version: sql`excluded.index_version`,\n          organization_id: sql`excluded.organization_id`,\n          tenant_id: sql`excluded.tenant_id`,\n          deleted_at: sql`excluded.deleted_at`,\n          updated_at: sql`now()`,\n        } as any))\n      .execute()\n  } catch (bulkError) {\n    bulkWriteFailed = true\n    logger.warn('Bulk index upsert failed; falling back to per-row writes', {\n      entityType,\n      records: basePayloads.length,\n    })\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler: 'query_index:reindex-batch:bulk',\n        error: bulkError,\n        entityType,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.orgId ?? null,\n      },\n    ).catch(() => undefined)\n  }\n\n  if (!bulkWriteFailed) {\n    await writeSearchTokens()\n    if (debugEnabled) {\n      logger.debug('Reindex batch tokens', {\n        entityType,\n        records: basePayloads.length,\n        scopeOrg: scope.orgId ?? null,\n        scopeTenant: scope.tenantId ?? null,\n      })\n    }\n    return buildResult(basePayloads.length)\n  }\n\n  // Deliberately NOT wrapped in a transaction. In Postgres a single failing statement\n  // aborts the surrounding transaction, and COMMIT on an aborted transaction answers\n  // with a ROLLBACK tag instead of raising \u2014 so one bad row used to discard the entire\n  // batch while this function reported success (issue GSM-266). Each row here is an\n  // independent, idempotent upsert; they share no invariant worth a transaction.\n  let written = 0\n  for (const payload of basePayloads) {\n    try {\n      if (await updateIndexRow(db, payload) > 0) {\n        written += 1\n        continue\n      }\n      try {\n        await db\n          .insertInto('entity_indexes' as any)\n          .values({\n            entity_type: payload.entity_type,\n            entity_id: payload.entity_id,\n            organization_id: payload.organization_id,\n            tenant_id: payload.tenant_id,\n            doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n            index_version: payload.index_version,\n            created_at: sql`now()`,\n            updated_at: sql`now()`,\n            deleted_at: null,\n          } as any)\n          .execute()\n        written += 1\n      } catch (insertError) {\n        // A concurrent worker may have inserted the row between our UPDATE and INSERT.\n        // Only a successful retry of the UPDATE proves the row is actually there.\n        if (isUniqueViolation(insertError) && await updateIndexRow(db, payload) > 0) {\n          written += 1\n          continue\n        }\n        await recordRowFailure(payload.entity_id, insertError, 'query_index:reindex-batch:row', {\n          organizationId: payload.organization_id,\n          tenantId: payload.tenant_id,\n        })\n      }\n    } catch (rowError) {\n      await recordRowFailure(payload.entity_id, rowError, 'query_index:reindex-batch:row', {\n        organizationId: payload.organization_id,\n        tenantId: payload.tenant_id,\n      })\n    }\n  }\n\n  const failedRecordIdSet = new Set(failedRecordIds)\n  await writeSearchTokens(tokenPayloads.filter((payload) => !failedRecordIdSet.has(payload.recordId)))\n  return buildResult(written)\n}\n"],
-  "mappings": "AAAA,SAAsB,WAAW;AACjC,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,0BAAsD;AAC/D,SAAS,6BAA6B,4BAA4B;AAClE,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAQ/E,MAAM,oCAAoC;AAqBnC,MAAM,kCAAkC,MAAM;AAAA,EAMnD,YAAY,YAAoB,QAAgC;AAC9D,UAAM,UAAU,OAAO,gBAAgB,MAAM,GAAG,EAAE;AAClD,UAAM,SAAS,OAAO,gBAAgB,SAAS,QAAQ,SAAS,UAAU;AAC1E;AAAA,MACE,+CAA+C,UAAU,WAAW,OAAO,OAAO,OAAO,OAAO,SAAS,cACtG,QAAQ,SAAS,aAAa,QAAQ,KAAK,IAAI,CAAC,GAAG,MAAM,MAAM;AAAA,IACpE;AACA,SAAK,OAAO;AACZ,SAAK,aAAa;AAClB,SAAK,YAAY,OAAO;AACxB,SAAK,UAAU,OAAO;AACtB,SAAK,kBAAkB,OAAO;AAAA,EAChC;AACF;AAEO,SAAS,6BAA6B,YAAoB,QAAsC;AACrG,MAAI,OAAO,WAAW,OAAO,aAAa,OAAO,gBAAgB,WAAW,EAAG;AAC/E,QAAM,IAAI,0BAA0B,YAAY,MAAM;AACxD;AAEO,SAAS,oCAA4D;AAC1E,SAAO,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAC,GAAG,qBAAqB,EAAE;AACjF;AAEO,SAAS,6BACd,QACA,UACwB;AACxB,SAAO,aAAa,SAAS;AAC7B,SAAO,WAAW,SAAS;AAC3B,SAAO,uBAAuB,SAAS;AACvC,SAAO,gBAAgB,KAAK,GAAG,SAAS,eAAe;AACvD,SAAO;AACT;AA4BA,SAAS,YAAY,OAAwB;AAC3C,SAAO,OAAO,KAAK;AACrB;AAEA,SAAS,qBAAqB,OAA+B;AAC3D,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO,OAAO,KAAK;AACrB;AAYA,eAAe,eAAe,IAAiB,SAA2C;AACxF,MAAI,cAAc,GACf,YAAY,gBAAuB,EACnC,IAAI;AAAA,IACH,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,WAAW,QAAQ,aAAa;AAAA,IAChC,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,CAAQ,EACP,MAAM,eAAsB,KAAK,QAAQ,WAAW,EACpD,MAAM,aAAoB,KAAK,QAAQ,SAAS;AACnD,gBAAc,QAAQ,mBAAmB,OACrC,YAAY,MAAM,mBAA0B,MAAM,IAAW,IAC7D,YAAY,MAAM,mBAA0B,KAAK,QAAQ,eAAe;AAC5E,QAAM,SAAS,MAAM,YAAY,iBAAiB;AAClD,SAAO,OAAO,QAAQ,kBAAkB,CAAC;AAC3C;AAEA,eAAsB,iBACpB,IACA,YACA,MACA,OACA,UAA6B,CAAC,GACG;AACjC,MAAI,CAAC,KAAK,OAAQ,QAAO,kCAAkC;AAC3D,QAAM,YAAY,KAAK,IAAI,CAAC,QAAQ,YAAY,IAAI,EAAE,CAAC;AAEvD,QAAM,kBAA4B,CAAC;AACnC,MAAI,sBAAsB;AAC1B,MAAI,oBAAoB;AAExB,QAAM,mBAAmB,OACvB,UACA,OACA,SACA,aACkB;AAClB,oBAAgB,KAAK,QAAQ;AAC7B,QAAI,qBAAqB,kCAAmC;AAC5D,yBAAqB;AACrB,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,QAAM,4BACJ,eAAe,uCAAuC,eAAe;AAEvE,MAAI,uBAAmD;AACvD,MAAI,2BAA2B;AAC7B,UAAM,YAAY,MAAM;AAAA,MACtB,IAAI;AAAA,QACF,KACG,IAAI,CAAC,QAAS,IAAe,aAAc,IAAe,QAAQ,EAClE,OAAO,CAAC,UAAoC,UAAU,UAAa,UAAU,QAAQ,GAAG,KAAK,OAAO,EAAE,EACtG,IAAI,CAAC,UAAU,YAAY,KAAK,CAAC;AAAA,MACtC;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,aAAa,MAAM,GACtB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,MAAM,SAAS,EAClC,QAAQ;AACX,6BAAuB,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;AAAA,IACpF;AAAA,EACF;AAEA,QAAM,kBAAkB,MAAM,GAC3B,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,UAAU,EACzC,MAAM,aAAoB,MAAM,SAAS,EACzC,QAAQ;AAEX,QAAM,iBAAiB,oBAAI,IAA8B;AACzD,aAAW,YAAY,iBAAiB;AACtC,UAAM,MAAM,YAAY,SAAS,SAAS;AAC1C,UAAM,SAAS,eAAe,IAAI,GAAG;AACrC,QAAI,OAAQ,QAAO,KAAK,QAAQ;AAAA,QAC3B,gBAAe,IAAI,KAAK,CAAC,QAAQ,CAAC;AAAA,EACzC;AAEA,QAAM,eAAkC,CAAC;AAEzC,QAAM,eAAe,qBAAqB;AAC1C,QAAM,eAAe,oBAAoB;AAEzC,aAAW,OAAO,MAAM;AACtB,UAAM,WAAW,YAAY,IAAI,EAAE;AACnC,UAAM,UAAU,qBAAsB,IAAe,eAAe;AACpE,UAAM,aAAa,qBAAsB,IAAe,SAAS;AACjE,UAAM,aAAa,SAAS,uBACxB,qBAAqB,QAAQ,qBAAqB,GAAG,CAAC,IACtD;AACJ,UAAM,WACJ,MAAM,UAAU,SACZ,MAAM,QACN,eAAe,SACb,aACA;AACR,UAAM,cAAc,MAAM,aAAa,SAAY,MAAM,WAAW;AACpE,UAAM,YAAY,eAAe,IAAI,QAAQ,KAAK,CAAC;AACnD,UAAM,SAAkC,UAAU,IAAI,CAAC,cAAc;AAAA,MACnE,KAAK,SAAS;AAAA,MACd,OACE,SAAS,cACT,SAAS,aACT,SAAS,eACT,SAAS,cACT,SAAS,mBACT;AAAA,MACF,gBAAgB,qBAAqB,SAAS,eAAe;AAAA,MAC7D,UAAU,qBAAqB,SAAS,SAAS;AAAA,IACnD,EAAE;AACF,UAAM,aAAa,MAAM;AACvB,UAAI,CAAC,6BAA6B,CAAC,qBAAsB,QAAO;AAChE,YAAM,WAAY,IAAe,aAAc,IAAe;AAC9D,UAAI,CAAC,SAAU,QAAO;AACtB,YAAM,YAAY,qBAAqB,IAAI,YAAY,QAAQ,CAAC;AAChE,UAAI,CAAC,UAAW,QAAO;AACvB,aAAO,EAAE,GAAG,WAAW,GAAG,IAAI;AAAA,IAChC,GAAG;AACH,QAAI,MAAM;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,QACE,gBAAgB,YAAY;AAAA,QAC5B,UAAU,eAAe;AAAA,MAC3B;AAAA,MACA,EAAE,YAAY,QAAQ,aAAa;AAAA,IACrC;AACA,QAAI,WAAoC;AACxC,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAC9C,gBAAM;AACN,qBAAW;AAAA,QACb;AAAA,MACF,SAAS,cAAc;AAIrB,cAAM,iBAAiB,UAAU,cAAc,qCAAqC;AAAA,UAClF,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAC9C,qBAAW;AAAA,QACb;AAAA,MACF,SAAS,cAAc;AAGrB,eAAO,KAAK,sDAAsD,EAAE,YAAY,SAAS,CAAC;AAC1F,cAAM;AAAA,UACJ,EAAE,GAAG;AAAA,UACL;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,YACT,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA,UAAU,eAAe;AAAA,YACzB,gBAAgB,YAAY;AAAA,UAC9B;AAAA,QACF,EAAE,MAAM,MAAM,MAAS;AAAA,MACzB;AAAA,IACF;AACA,iBAAa,KAAK;AAAA,MAChB,aAAa;AAAA,MACb,WAAW;AAAA,MACX,iBAAiB,YAAY;AAAA,MAC7B,WAAW,eAAe;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,QAAI,cAAc;AAChB,YAAM,SAAS;AAAA,QACb,cAAe,SAAiB;AAAA,QAChC,YAAa,SAAiB;AAAA,QAC9B,WAAY,SAAiB;AAAA,QAC7B,YAAa,SAAiB;AAAA,QAC9B,YAAa,SAAiB;AAAA,MAChC;AACA,aAAO,MAAM,0BAA0B;AAAA,QACrC;AAAA,QACA;AAAA,QACA,gBAAgB,YAAY;AAAA,QAC5B,UAAU,eAAe;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,aAAa,aAAa,IAAI,CAAC,aAAa;AAAA,IAChD,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ;AAAA,IACzB,WAAW,QAAQ;AAAA,IACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,EAAE;AAEF,QAAM,gBAAgB,aAAa,IAAI,CAAC,aAAa;AAAA,IACnD,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,KAAK,QAAQ;AAAA,EACf,EAAE;AAEF,QAAM,oBAAoB,OAAO,WAAW,kBAAiC;AAC3E,QAAI,CAAC,SAAS,OAAQ;AACtB,QAAI;AACF,YAAM,4BAA4B,IAAI,QAAQ;AAAA,IAChD,SAAS,kBAAkB;AAIzB,6BAAuB;AACvB,YAAM;AAAA,QACJ,EAAE,GAAG;AAAA,QACL,EAAE,QAAQ,YAAY,SAAS,6BAA6B,OAAO,kBAAkB,YAAY,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,SAAS,KAAK;AAAA,MACzK,EAAE,MAAM,MAAM,MAAS;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,cAAc,CAACA,cAA6C;AAAA,IAChE,WAAW,KAAK;AAAA,IAChB,SAAAA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,aAAa,OAAQ,QAAO,YAAY,CAAC;AAE9C,MAAI,kBAAkB;AACtB,MAAI;AAKF,UAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,UAAiB,EACxB,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,KAAK;AAAA,MACL,eAAe;AAAA,MACf,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,SAAS,WAAW;AAClB,sBAAkB;AAClB,WAAO,KAAK,4DAA4D;AAAA,MACtE;AAAA,MACA,SAAS,aAAa;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,UAAU,MAAM,YAAY;AAAA,QAC5B,gBAAgB,MAAM,SAAS;AAAA,MACjC;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,kBAAkB;AACxB,QAAI,cAAc;AAChB,aAAO,MAAM,wBAAwB;AAAA,QACnC;AAAA,QACA,SAAS,aAAa;AAAA,QACtB,UAAU,MAAM,SAAS;AAAA,QACzB,aAAa,MAAM,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AACA,WAAO,YAAY,aAAa,MAAM;AAAA,EACxC;AAOA,MAAI,UAAU;AACd,aAAW,WAAW,cAAc;AAClC,QAAI;AACF,UAAI,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AACzC,mBAAW;AACX;AAAA,MACF;AACA,UAAI;AACF,cAAM,GACH,WAAW,gBAAuB,EAClC,OAAO;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,iBAAiB,QAAQ;AAAA,UACzB,WAAW,QAAQ;AAAA,UACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,UACtC,eAAe,QAAQ;AAAA,UACvB,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,YAAY;AAAA,QACd,CAAQ,EACP,QAAQ;AACX,mBAAW;AAAA,MACb,SAAS,aAAa;AAGpB,YAAI,kBAAkB,WAAW,KAAK,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AAC3E,qBAAW;AACX;AAAA,QACF;AACA,cAAM,iBAAiB,QAAQ,WAAW,aAAa,iCAAiC;AAAA,UACtF,gBAAgB,QAAQ;AAAA,UACxB,UAAU,QAAQ;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,SAAS,UAAU;AACjB,YAAM,iBAAiB,QAAQ,WAAW,UAAU,iCAAiC;AAAA,QACnF,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,oBAAoB,IAAI,IAAI,eAAe;AACjD,QAAM,kBAAkB,cAAc,OAAO,CAAC,YAAY,CAAC,kBAAkB,IAAI,QAAQ,QAAQ,CAAC,CAAC;AACnG,SAAO,YAAY,OAAO;AAC5B;",
+  "sourcesContent": ["import { type Kysely, sql } from 'kysely'\nimport { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { isUniqueViolation } from '@open-mercato/shared/lib/db/pg-errors'\nimport { buildIndexDocument, rebuildAggregateSearchField, type IndexCustomFieldValue } from './document'\nimport { replaceSearchTokensForBatch, isSearchDebugEnabled } from './search-tokens'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveSearchConfig } from '@open-mercato/shared/lib/search/config'\n\nconst logger = createLogger('query_index').child({ component: 'reindex-batch' })\n\n/**\n * Cap on how many per-row failures a single batch persists to `indexer_error_logs`.\n * Under a systemic failure (pool exhausted, disk full, KMS down) every row fails, and\n * writing one error row per record would hammer the database that is already failing.\n * The count of suppressed failures still reaches the caller via `failedRecordIds`.\n */\nconst MAX_RECORDED_ROW_ERRORS_PER_BATCH = 50\n\nexport type AnyRow = Record<string, any> & { id: string | number }\n\nexport type ScopeOverrides = {\n  orgId?: string\n  tenantId?: string\n}\n\n/**\n * What a batch actually wrote, as opposed to what it was asked to write. Callers MUST\n * reconcile `written` against `attempted` \u2014 a batch that loses rows and reports success\n * is how records go permanently missing from the index (issue GSM-266).\n */\nexport type UpsertIndexBatchResult = {\n  attempted: number\n  written: number\n  failedRecordIds: string[]\n  searchTokenFailures: number\n}\n\nexport class QueryIndexBatchWriteError extends Error {\n  readonly entityType: string\n  readonly attempted: number\n  readonly written: number\n  readonly failedRecordIds: string[]\n\n  constructor(entityType: string, result: UpsertIndexBatchResult) {\n    const preview = result.failedRecordIds.slice(0, 10)\n    const suffix = result.failedRecordIds.length > preview.length ? ', ...' : ''\n    super(\n      `[internal] Query index write incomplete for ${entityType}: wrote ${result.written} of ${result.attempted} records` +\n        (preview.length ? ` (failed: ${preview.join(', ')}${suffix})` : ''),\n    )\n    this.name = 'QueryIndexBatchWriteError'\n    this.entityType = entityType\n    this.attempted = result.attempted\n    this.written = result.written\n    this.failedRecordIds = result.failedRecordIds\n  }\n}\n\nexport function assertIndexBatchWritesLanded(entityType: string, result: UpsertIndexBatchResult): void {\n  if (result.written >= result.attempted && result.failedRecordIds.length === 0) return\n  throw new QueryIndexBatchWriteError(entityType, result)\n}\n\nexport function createEmptyUpsertIndexBatchResult(): UpsertIndexBatchResult {\n  return { attempted: 0, written: 0, failedRecordIds: [], searchTokenFailures: 0 }\n}\n\nexport function mergeUpsertIndexBatchResults(\n  target: UpsertIndexBatchResult,\n  addition: UpsertIndexBatchResult,\n): UpsertIndexBatchResult {\n  target.attempted += addition.attempted\n  target.written += addition.written\n  target.searchTokenFailures += addition.searchTokenFailures\n  target.failedRecordIds.push(...addition.failedRecordIds)\n  return target\n}\n\ntype CustomFieldRow = {\n  record_id: string\n  field_key: string\n  value_text: string | null\n  value_multiline: string | null\n  value_int: number | null\n  value_float: number | null\n  value_bool: boolean | null\n  organization_id: string | null\n  tenant_id: string | null\n}\n\nexport type IndexBatchOptions = {\n  deriveOrganizationId?: (row: AnyRow) => string | null | undefined\n  encryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n  decryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n}\n\nfunction normalizeId(value: unknown): string {\n  return String(value)\n}\n\nfunction normalizeScopedValue(value: unknown): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return String(value)\n}\n\ntype IndexRowPayload = {\n  entity_type: string\n  entity_id: string\n  organization_id: string | null\n  tenant_id: string | null\n  doc: Record<string, unknown>\n  tokenDoc: Record<string, unknown>\n  index_version: number\n}\n\nasync function updateIndexRow(db: Kysely<any>, payload: IndexRowPayload): Promise<number> {\n  let updateQuery = db\n    .updateTable('entity_indexes' as any)\n    .set({\n      doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n      index_version: payload.index_version,\n      organization_id: payload.organization_id ?? null,\n      tenant_id: payload.tenant_id ?? null,\n      updated_at: sql`now()`,\n      deleted_at: null,\n    } as any)\n    .where('entity_type' as any, '=', payload.entity_type)\n    .where('entity_id' as any, '=', payload.entity_id)\n  updateQuery = payload.organization_id == null\n    ? updateQuery.where('organization_id' as any, 'is', null as any)\n    : updateQuery.where('organization_id' as any, '=', payload.organization_id)\n  const result = await updateQuery.executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n  return Number(result?.numUpdatedRows ?? 0)\n}\n\nexport async function upsertIndexBatch(\n  db: Kysely<any>,\n  entityType: string,\n  rows: AnyRow[],\n  scope: ScopeOverrides,\n  options: IndexBatchOptions = {},\n): Promise<UpsertIndexBatchResult> {\n  if (!rows.length) return createEmptyUpsertIndexBatchResult()\n  const recordIds = rows.map((row) => normalizeId(row.id))\n\n  const failedRecordIds: string[] = []\n  let searchTokenFailures = 0\n  let recordedRowErrors = 0\n\n  const recordRowFailure = async (\n    recordId: string,\n    error: unknown,\n    handler: string,\n    rowScope: { organizationId: string | null; tenantId: string | null },\n  ): Promise<void> => {\n    failedRecordIds.push(recordId)\n    if (recordedRowErrors >= MAX_RECORDED_ROW_ERRORS_PER_BATCH) return\n    recordedRowErrors += 1\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler,\n        error,\n        entityType,\n        recordId,\n        tenantId: rowScope.tenantId,\n        organizationId: rowScope.organizationId,\n      },\n    ).catch(() => undefined)\n  }\n\n  const shouldMergeCustomerEntity =\n    entityType === 'customers:customer_person_profile' || entityType === 'customers:customer_company_profile'\n\n  let customerEntitiesById: Map<string, AnyRow> | null = null\n  if (shouldMergeCustomerEntity) {\n    const entityIds = Array.from(\n      new Set(\n        rows\n          .map((row) => (row as AnyRow).entity_id || (row as AnyRow).entityId)\n          .filter((value): value is string | number => value !== undefined && value !== null && `${value}` !== '')\n          .map((value) => normalizeId(value)),\n      ),\n    )\n    if (entityIds.length) {\n      const entityRows = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, 'in', entityIds)\n        .execute() as AnyRow[]\n      customerEntitiesById = new Map(entityRows.map((row) => [normalizeId(row.id), row]))\n    }\n  }\n\n  const customFieldRows = await db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'record_id' as any,\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n      'organization_id' as any,\n      'tenant_id' as any,\n    ])\n    .where('entity_id' as any, '=', entityType)\n    .where('record_id' as any, 'in', recordIds)\n    .execute() as CustomFieldRow[]\n\n  const customFieldMap = new Map<string, CustomFieldRow[]>()\n  for (const fieldRow of customFieldRows) {\n    const key = normalizeId(fieldRow.record_id)\n    const bucket = customFieldMap.get(key)\n    if (bucket) bucket.push(fieldRow)\n    else customFieldMap.set(key, [fieldRow])\n  }\n\n  const basePayloads: IndexRowPayload[] = []\n\n  const debugEnabled = isSearchDebugEnabled()\n  const searchConfig = resolveSearchConfig()\n\n  for (const row of rows) {\n    const recordId = normalizeId(row.id)\n    const baseOrg = normalizeScopedValue((row as AnyRow).organization_id)\n    const baseTenant = normalizeScopedValue((row as AnyRow).tenant_id)\n    const derivedOrg = options?.deriveOrganizationId\n      ? normalizeScopedValue(options.deriveOrganizationId(row))\n      : undefined\n    const scopeOrg =\n      scope.orgId !== undefined\n        ? scope.orgId\n        : derivedOrg !== undefined\n          ? derivedOrg\n          : baseOrg\n    const scopeTenant = scope.tenantId !== undefined ? scope.tenantId : baseTenant\n    const inputRows = customFieldMap.get(recordId) ?? []\n    const values: IndexCustomFieldValue[] = inputRows.map((fieldRow) => ({\n      key: fieldRow.field_key,\n      value:\n        fieldRow.value_bool ??\n        fieldRow.value_int ??\n        fieldRow.value_float ??\n        fieldRow.value_text ??\n        fieldRow.value_multiline ??\n        null,\n      organizationId: normalizeScopedValue(fieldRow.organization_id),\n      tenantId: normalizeScopedValue(fieldRow.tenant_id),\n    }))\n    const mergedRow = (() => {\n      if (!shouldMergeCustomerEntity || !customerEntitiesById) return row\n      const entityId = (row as AnyRow).entity_id || (row as AnyRow).entityId\n      if (!entityId) return row\n      const entityRow = customerEntitiesById.get(normalizeId(entityId))\n      if (!entityRow) return row\n      return { ...entityRow, ...row }\n    })()\n    let doc = buildIndexDocument(\n      mergedRow,\n      values,\n      {\n        organizationId: scopeOrg ?? null,\n        tenantId: scopeTenant ?? null,\n      },\n      { entityType, config: searchConfig },\n    )\n    let tokenDoc: Record<string, unknown> = doc\n    if (typeof options.encryptDoc === 'function') {\n      try {\n        const encrypted = await options.encryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (encrypted && typeof encrypted === 'object') {\n          doc = encrypted\n          tokenDoc = encrypted\n        }\n      } catch (encryptError) {\n        // Falling through would write the plaintext document into entity_indexes,\n        // which must stay encrypted at rest. Skip the row instead so the previously\n        // encrypted row survives, and let the caller fail the run.\n        await recordRowFailure(recordId, encryptError, 'query_index:reindex-batch:encrypt', {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        continue\n      }\n    }\n    if (typeof options.decryptDoc === 'function') {\n      try {\n        const decrypted = await options.decryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (decrypted && typeof decrypted === 'object') {\n          // Rebuilt on the decrypted copy: `search_text` is on no encryption map, so the\n          // aggregate composed at document-build time still concatenates the ciphertext\n          // values the row carries at rest and tokenizes into rows nothing matches (#5625).\n          // The copy keeps `doc` \u2014 the encrypted row written to `entity_indexes` \u2014 untouched.\n          // A caller that passes no `decryptDoc` keeps the build-time aggregate by design:\n          // without a decryption step there is no plaintext to recompose it from.\n          tokenDoc = rebuildAggregateSearchField(decrypted, { entityType, config: searchConfig })\n        }\n      } catch (decryptError) {\n        // Only affects the search tokens built below; the indexed document itself is\n        // unharmed, so the row still counts as written.\n        logger.warn('Failed to decrypt index document for search tokens', { entityType, recordId })\n        await recordIndexerError(\n          { db },\n          {\n            source: 'fulltext',\n            handler: 'query_index:reindex-batch:decrypt',\n            error: decryptError,\n            entityType,\n            recordId,\n            tenantId: scopeTenant ?? null,\n            organizationId: scopeOrg ?? null,\n          },\n        ).catch(() => undefined)\n      }\n    }\n    basePayloads.push({\n      entity_type: entityType,\n      entity_id: recordId,\n      organization_id: scopeOrg ?? null,\n      tenant_id: scopeTenant ?? null,\n      doc,\n      tokenDoc,\n      index_version: 1,\n    })\n    if (debugEnabled) {\n      const sample = {\n        display_name: (tokenDoc as any).display_name,\n        first_name: (tokenDoc as any).first_name,\n        last_name: (tokenDoc as any).last_name,\n        brand_name: (tokenDoc as any).brand_name,\n        legal_name: (tokenDoc as any).legal_name,\n      }\n      logger.debug('Reindex batch document', {\n        entityType,\n        recordId,\n        organizationId: scopeOrg ?? null,\n        tenantId: scopeTenant ?? null,\n        sample,\n      })\n    }\n  }\n\n  const insertRows = basePayloads.map((payload) => ({\n    entity_type: payload.entity_type,\n    entity_id: payload.entity_id,\n    organization_id: payload.organization_id,\n    tenant_id: payload.tenant_id,\n    doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n    index_version: payload.index_version,\n    created_at: sql`now()`,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }))\n\n  const tokenPayloads = basePayloads.map((payload) => ({\n    entityType: payload.entity_type,\n    recordId: payload.entity_id,\n    organizationId: payload.organization_id,\n    tenantId: payload.tenant_id,\n    doc: payload.tokenDoc,\n  }))\n\n  const writeSearchTokens = async (payloads = tokenPayloads): Promise<void> => {\n    if (!payloads.length) return\n    try {\n      await replaceSearchTokensForBatch(db, payloads)\n    } catch (searchTokenError) {\n      // Record instead of swallowing: a failed token write leaves fulltext search stale.\n      // Not counted as a write failure \u2014 replaceSearchTokensForBatch is transactional, so\n      // tokens end up stale rather than missing, and the record's next write rebuilds them.\n      searchTokenFailures += 1\n      await recordIndexerError(\n        { db },\n        { source: 'fulltext', handler: 'query_index:reindex-batch', error: searchTokenError, entityType, tenantId: scope.tenantId ?? null, organizationId: scope.orgId ?? null },\n      ).catch(() => undefined)\n    }\n  }\n\n  const buildResult = (written: number): UpsertIndexBatchResult => ({\n    attempted: rows.length,\n    written,\n    failedRecordIds,\n    searchTokenFailures,\n  })\n\n  if (!basePayloads.length) return buildResult(0)\n\n  let bulkWriteFailed = false\n  try {\n    // One statement, so it is atomic on its own. Note the arbiter is\n    // (entity_type, entity_id, organization_id_coalesced): two payloads sharing a\n    // conflict key in the same batch would raise 21000 for the whole statement and\n    // fall through to the per-row path below.\n    await db\n      .insertInto('entity_indexes' as any)\n      .values(insertRows as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          doc: sql`excluded.doc`,\n          index_version: sql`excluded.index_version`,\n          organization_id: sql`excluded.organization_id`,\n          tenant_id: sql`excluded.tenant_id`,\n          deleted_at: sql`excluded.deleted_at`,\n          updated_at: sql`now()`,\n        } as any))\n      .execute()\n  } catch (bulkError) {\n    bulkWriteFailed = true\n    logger.warn('Bulk index upsert failed; falling back to per-row writes', {\n      entityType,\n      records: basePayloads.length,\n    })\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler: 'query_index:reindex-batch:bulk',\n        error: bulkError,\n        entityType,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.orgId ?? null,\n      },\n    ).catch(() => undefined)\n  }\n\n  if (!bulkWriteFailed) {\n    await writeSearchTokens()\n    if (debugEnabled) {\n      logger.debug('Reindex batch tokens', {\n        entityType,\n        records: basePayloads.length,\n        scopeOrg: scope.orgId ?? null,\n        scopeTenant: scope.tenantId ?? null,\n      })\n    }\n    return buildResult(basePayloads.length)\n  }\n\n  // Deliberately NOT wrapped in a transaction. In Postgres a single failing statement\n  // aborts the surrounding transaction, and COMMIT on an aborted transaction answers\n  // with a ROLLBACK tag instead of raising \u2014 so one bad row used to discard the entire\n  // batch while this function reported success (issue GSM-266). Each row here is an\n  // independent, idempotent upsert; they share no invariant worth a transaction.\n  let written = 0\n  for (const payload of basePayloads) {\n    try {\n      if (await updateIndexRow(db, payload) > 0) {\n        written += 1\n        continue\n      }\n      try {\n        await db\n          .insertInto('entity_indexes' as any)\n          .values({\n            entity_type: payload.entity_type,\n            entity_id: payload.entity_id,\n            organization_id: payload.organization_id,\n            tenant_id: payload.tenant_id,\n            doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n            index_version: payload.index_version,\n            created_at: sql`now()`,\n            updated_at: sql`now()`,\n            deleted_at: null,\n          } as any)\n          .execute()\n        written += 1\n      } catch (insertError) {\n        // A concurrent worker may have inserted the row between our UPDATE and INSERT.\n        // Only a successful retry of the UPDATE proves the row is actually there.\n        if (isUniqueViolation(insertError) && await updateIndexRow(db, payload) > 0) {\n          written += 1\n          continue\n        }\n        await recordRowFailure(payload.entity_id, insertError, 'query_index:reindex-batch:row', {\n          organizationId: payload.organization_id,\n          tenantId: payload.tenant_id,\n        })\n      }\n    } catch (rowError) {\n      await recordRowFailure(payload.entity_id, rowError, 'query_index:reindex-batch:row', {\n        organizationId: payload.organization_id,\n        tenantId: payload.tenant_id,\n      })\n    }\n  }\n\n  const failedRecordIdSet = new Set(failedRecordIds)\n  await writeSearchTokens(tokenPayloads.filter((payload) => !failedRecordIdSet.has(payload.recordId)))\n  return buildResult(written)\n}\n"],
+  "mappings": "AAAA,SAAsB,WAAW;AACjC,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB,mCAA+D;AAC5F,SAAS,6BAA6B,4BAA4B;AAClE,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAQ/E,MAAM,oCAAoC;AAqBnC,MAAM,kCAAkC,MAAM;AAAA,EAMnD,YAAY,YAAoB,QAAgC;AAC9D,UAAM,UAAU,OAAO,gBAAgB,MAAM,GAAG,EAAE;AAClD,UAAM,SAAS,OAAO,gBAAgB,SAAS,QAAQ,SAAS,UAAU;AAC1E;AAAA,MACE,+CAA+C,UAAU,WAAW,OAAO,OAAO,OAAO,OAAO,SAAS,cACtG,QAAQ,SAAS,aAAa,QAAQ,KAAK,IAAI,CAAC,GAAG,MAAM,MAAM;AAAA,IACpE;AACA,SAAK,OAAO;AACZ,SAAK,aAAa;AAClB,SAAK,YAAY,OAAO;AACxB,SAAK,UAAU,OAAO;AACtB,SAAK,kBAAkB,OAAO;AAAA,EAChC;AACF;AAEO,SAAS,6BAA6B,YAAoB,QAAsC;AACrG,MAAI,OAAO,WAAW,OAAO,aAAa,OAAO,gBAAgB,WAAW,EAAG;AAC/E,QAAM,IAAI,0BAA0B,YAAY,MAAM;AACxD;AAEO,SAAS,oCAA4D;AAC1E,SAAO,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAC,GAAG,qBAAqB,EAAE;AACjF;AAEO,SAAS,6BACd,QACA,UACwB;AACxB,SAAO,aAAa,SAAS;AAC7B,SAAO,WAAW,SAAS;AAC3B,SAAO,uBAAuB,SAAS;AACvC,SAAO,gBAAgB,KAAK,GAAG,SAAS,eAAe;AACvD,SAAO;AACT;AA4BA,SAAS,YAAY,OAAwB;AAC3C,SAAO,OAAO,KAAK;AACrB;AAEA,SAAS,qBAAqB,OAA+B;AAC3D,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO,OAAO,KAAK;AACrB;AAYA,eAAe,eAAe,IAAiB,SAA2C;AACxF,MAAI,cAAc,GACf,YAAY,gBAAuB,EACnC,IAAI;AAAA,IACH,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,WAAW,QAAQ,aAAa;AAAA,IAChC,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,CAAQ,EACP,MAAM,eAAsB,KAAK,QAAQ,WAAW,EACpD,MAAM,aAAoB,KAAK,QAAQ,SAAS;AACnD,gBAAc,QAAQ,mBAAmB,OACrC,YAAY,MAAM,mBAA0B,MAAM,IAAW,IAC7D,YAAY,MAAM,mBAA0B,KAAK,QAAQ,eAAe;AAC5E,QAAM,SAAS,MAAM,YAAY,iBAAiB;AAClD,SAAO,OAAO,QAAQ,kBAAkB,CAAC;AAC3C;AAEA,eAAsB,iBACpB,IACA,YACA,MACA,OACA,UAA6B,CAAC,GACG;AACjC,MAAI,CAAC,KAAK,OAAQ,QAAO,kCAAkC;AAC3D,QAAM,YAAY,KAAK,IAAI,CAAC,QAAQ,YAAY,IAAI,EAAE,CAAC;AAEvD,QAAM,kBAA4B,CAAC;AACnC,MAAI,sBAAsB;AAC1B,MAAI,oBAAoB;AAExB,QAAM,mBAAmB,OACvB,UACA,OACA,SACA,aACkB;AAClB,oBAAgB,KAAK,QAAQ;AAC7B,QAAI,qBAAqB,kCAAmC;AAC5D,yBAAqB;AACrB,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,QAAM,4BACJ,eAAe,uCAAuC,eAAe;AAEvE,MAAI,uBAAmD;AACvD,MAAI,2BAA2B;AAC7B,UAAM,YAAY,MAAM;AAAA,MACtB,IAAI;AAAA,QACF,KACG,IAAI,CAAC,QAAS,IAAe,aAAc,IAAe,QAAQ,EAClE,OAAO,CAAC,UAAoC,UAAU,UAAa,UAAU,QAAQ,GAAG,KAAK,OAAO,EAAE,EACtG,IAAI,CAAC,UAAU,YAAY,KAAK,CAAC;AAAA,MACtC;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,aAAa,MAAM,GACtB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,MAAM,SAAS,EAClC,QAAQ;AACX,6BAAuB,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;AAAA,IACpF;AAAA,EACF;AAEA,QAAM,kBAAkB,MAAM,GAC3B,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,UAAU,EACzC,MAAM,aAAoB,MAAM,SAAS,EACzC,QAAQ;AAEX,QAAM,iBAAiB,oBAAI,IAA8B;AACzD,aAAW,YAAY,iBAAiB;AACtC,UAAM,MAAM,YAAY,SAAS,SAAS;AAC1C,UAAM,SAAS,eAAe,IAAI,GAAG;AACrC,QAAI,OAAQ,QAAO,KAAK,QAAQ;AAAA,QAC3B,gBAAe,IAAI,KAAK,CAAC,QAAQ,CAAC;AAAA,EACzC;AAEA,QAAM,eAAkC,CAAC;AAEzC,QAAM,eAAe,qBAAqB;AAC1C,QAAM,eAAe,oBAAoB;AAEzC,aAAW,OAAO,MAAM;AACtB,UAAM,WAAW,YAAY,IAAI,EAAE;AACnC,UAAM,UAAU,qBAAsB,IAAe,eAAe;AACpE,UAAM,aAAa,qBAAsB,IAAe,SAAS;AACjE,UAAM,aAAa,SAAS,uBACxB,qBAAqB,QAAQ,qBAAqB,GAAG,CAAC,IACtD;AACJ,UAAM,WACJ,MAAM,UAAU,SACZ,MAAM,QACN,eAAe,SACb,aACA;AACR,UAAM,cAAc,MAAM,aAAa,SAAY,MAAM,WAAW;AACpE,UAAM,YAAY,eAAe,IAAI,QAAQ,KAAK,CAAC;AACnD,UAAM,SAAkC,UAAU,IAAI,CAAC,cAAc;AAAA,MACnE,KAAK,SAAS;AAAA,MACd,OACE,SAAS,cACT,SAAS,aACT,SAAS,eACT,SAAS,cACT,SAAS,mBACT;AAAA,MACF,gBAAgB,qBAAqB,SAAS,eAAe;AAAA,MAC7D,UAAU,qBAAqB,SAAS,SAAS;AAAA,IACnD,EAAE;AACF,UAAM,aAAa,MAAM;AACvB,UAAI,CAAC,6BAA6B,CAAC,qBAAsB,QAAO;AAChE,YAAM,WAAY,IAAe,aAAc,IAAe;AAC9D,UAAI,CAAC,SAAU,QAAO;AACtB,YAAM,YAAY,qBAAqB,IAAI,YAAY,QAAQ,CAAC;AAChE,UAAI,CAAC,UAAW,QAAO;AACvB,aAAO,EAAE,GAAG,WAAW,GAAG,IAAI;AAAA,IAChC,GAAG;AACH,QAAI,MAAM;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,QACE,gBAAgB,YAAY;AAAA,QAC5B,UAAU,eAAe;AAAA,MAC3B;AAAA,MACA,EAAE,YAAY,QAAQ,aAAa;AAAA,IACrC;AACA,QAAI,WAAoC;AACxC,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAC9C,gBAAM;AACN,qBAAW;AAAA,QACb;AAAA,MACF,SAAS,cAAc;AAIrB,cAAM,iBAAiB,UAAU,cAAc,qCAAqC;AAAA,UAClF,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAO9C,qBAAW,4BAA4B,WAAW,EAAE,YAAY,QAAQ,aAAa,CAAC;AAAA,QACxF;AAAA,MACF,SAAS,cAAc;AAGrB,eAAO,KAAK,sDAAsD,EAAE,YAAY,SAAS,CAAC;AAC1F,cAAM;AAAA,UACJ,EAAE,GAAG;AAAA,UACL;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,YACT,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA,UAAU,eAAe;AAAA,YACzB,gBAAgB,YAAY;AAAA,UAC9B;AAAA,QACF,EAAE,MAAM,MAAM,MAAS;AAAA,MACzB;AAAA,IACF;AACA,iBAAa,KAAK;AAAA,MAChB,aAAa;AAAA,MACb,WAAW;AAAA,MACX,iBAAiB,YAAY;AAAA,MAC7B,WAAW,eAAe;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,QAAI,cAAc;AAChB,YAAM,SAAS;AAAA,QACb,cAAe,SAAiB;AAAA,QAChC,YAAa,SAAiB;AAAA,QAC9B,WAAY,SAAiB;AAAA,QAC7B,YAAa,SAAiB;AAAA,QAC9B,YAAa,SAAiB;AAAA,MAChC;AACA,aAAO,MAAM,0BAA0B;AAAA,QACrC;AAAA,QACA;AAAA,QACA,gBAAgB,YAAY;AAAA,QAC5B,UAAU,eAAe;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,aAAa,aAAa,IAAI,CAAC,aAAa;AAAA,IAChD,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ;AAAA,IACzB,WAAW,QAAQ;AAAA,IACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,EAAE;AAEF,QAAM,gBAAgB,aAAa,IAAI,CAAC,aAAa;AAAA,IACnD,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,KAAK,QAAQ;AAAA,EACf,EAAE;AAEF,QAAM,oBAAoB,OAAO,WAAW,kBAAiC;AAC3E,QAAI,CAAC,SAAS,OAAQ;AACtB,QAAI;AACF,YAAM,4BAA4B,IAAI,QAAQ;AAAA,IAChD,SAAS,kBAAkB;AAIzB,6BAAuB;AACvB,YAAM;AAAA,QACJ,EAAE,GAAG;AAAA,QACL,EAAE,QAAQ,YAAY,SAAS,6BAA6B,OAAO,kBAAkB,YAAY,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,SAAS,KAAK;AAAA,MACzK,EAAE,MAAM,MAAM,MAAS;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,cAAc,CAACA,cAA6C;AAAA,IAChE,WAAW,KAAK;AAAA,IAChB,SAAAA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,aAAa,OAAQ,QAAO,YAAY,CAAC;AAE9C,MAAI,kBAAkB;AACtB,MAAI;AAKF,UAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,UAAiB,EACxB,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,KAAK;AAAA,MACL,eAAe;AAAA,MACf,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,SAAS,WAAW;AAClB,sBAAkB;AAClB,WAAO,KAAK,4DAA4D;AAAA,MACtE;AAAA,MACA,SAAS,aAAa;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,UAAU,MAAM,YAAY;AAAA,QAC5B,gBAAgB,MAAM,SAAS;AAAA,MACjC;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,kBAAkB;AACxB,QAAI,cAAc;AAChB,aAAO,MAAM,wBAAwB;AAAA,QACnC;AAAA,QACA,SAAS,aAAa;AAAA,QACtB,UAAU,MAAM,SAAS;AAAA,QACzB,aAAa,MAAM,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AACA,WAAO,YAAY,aAAa,MAAM;AAAA,EACxC;AAOA,MAAI,UAAU;AACd,aAAW,WAAW,cAAc;AAClC,QAAI;AACF,UAAI,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AACzC,mBAAW;AACX;AAAA,MACF;AACA,UAAI;AACF,cAAM,GACH,WAAW,gBAAuB,EAClC,OAAO;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,iBAAiB,QAAQ;AAAA,UACzB,WAAW,QAAQ;AAAA,UACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,UACtC,eAAe,QAAQ;AAAA,UACvB,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,YAAY;AAAA,QACd,CAAQ,EACP,QAAQ;AACX,mBAAW;AAAA,MACb,SAAS,aAAa;AAGpB,YAAI,kBAAkB,WAAW,KAAK,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AAC3E,qBAAW;AACX;AAAA,QACF;AACA,cAAM,iBAAiB,QAAQ,WAAW,aAAa,iCAAiC;AAAA,UACtF,gBAAgB,QAAQ;AAAA,UACxB,UAAU,QAAQ;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,SAAS,UAAU;AACjB,YAAM,iBAAiB,QAAQ,WAAW,UAAU,iCAAiC;AAAA,QACnF,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,oBAAoB,IAAI,IAAI,eAAe;AACjD,QAAM,kBAAkB,cAAc,OAAO,CAAC,YAAY,CAAC,kBAAkB,IAAI,QAAQ,QAAQ,CAAC,CAAC;AACnG,SAAO,YAAY,OAAO;AAC5B;",
   "names": ["written"]
 }

package/dist/modules/query_index/lib/document.js

@@ -49,6 +49,11 @@ function attachAggregateSearchField(doc, options = {}) {
   }
   return doc;
 }
+function rebuildAggregateSearchField(doc, options = {}) {
+  const copy = { ...doc };
+  if (AGGREGATE_SEARCH_FIELD in copy) copy[AGGREGATE_SEARCH_FIELD] = "";
+  return attachAggregateSearchField(copy, options);
+}
 function buildIndexDocument(baseRow, customFieldValues = [], scope = {}, options = {}) {
   const doc = {};
   for (const [key, value] of Object.entries(baseRow)) {
@@ -87,6 +92,7 @@ function buildIndexDocument(baseRow, customFieldValues = [], scope = {}, options
 export {
   AGGREGATE_SEARCH_FIELD,
   attachAggregateSearchField,
-  buildIndexDocument
+  buildIndexDocument,
+  rebuildAggregateSearchField
 };
 //# sourceMappingURL=document.js.map

package/dist/modules/query_index/lib/document.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/document.ts"],
-  "sourcesContent": ["import {\n  isSearchFieldBlocklisted,\n  resolveSearchConfig,\n  type SearchConfig,\n} from '@open-mercato/shared/lib/search/config'\n\nexport type IndexDocumentScope = {\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport type IndexCustomFieldValue = {\n  key: string\n  value: unknown\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport const AGGREGATE_SEARCH_FIELD = 'search_text'\n\n/**\n * Controls which fields may contribute text to the `search_text` aggregate.\n *\n * Both properties are optional so existing callers keep working unchanged: an\n * omitted `config` is resolved from the environment, and an omitted `entityType`\n * means only the global blocklist entries apply.\n */\nexport type AggregateSearchOptions = {\n  entityType?: string | null\n  config?: SearchConfig\n}\n\nfunction normalizeScopeValue(value: string | null | undefined): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return value\n}\n\nfunction isScopedValueVisible(\n  scopeValue: string | null,\n  fieldValue: string | null,\n): boolean {\n  if (scopeValue === null) return fieldValue === null\n  return fieldValue === null || fieldValue === scopeValue\n}\n\nfunction normalizeValue(value: unknown): unknown {\n  if (value === undefined) return null\n  return value\n}\n\nfunction collectAggregateSearchValues(\n  field: string,\n  value: unknown,\n  entityType: string | null,\n  config: SearchConfig,\n): string[] {\n  const lower = field.toLowerCase()\n  if (\n    lower === AGGREGATE_SEARCH_FIELD\n    || lower === 'id'\n    || lower.endsWith('_id')\n    || lower.endsWith('.id')\n    || lower.endsWith('_at')\n    || ['created_at', 'updated_at', 'deleted_at', 'tenant_id', 'organization_id'].includes(lower)\n  ) {\n    return []\n  }\n\n  if (isSearchFieldBlocklisted(field, entityType, config)) return []\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    return trimmed.length > 0 ? [trimmed] : []\n  }\n\n  if (Array.isArray(value)) {\n    return value\n      .filter((entry): entry is string => typeof entry === 'string')\n      .map((entry) => entry.trim())\n      .filter((entry) => entry.length > 0)\n  }\n\n  return []\n}\n\nexport function attachAggregateSearchField(\n  doc: Record<string, unknown>,\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const config = options.config ?? resolveSearchConfig()\n  const entityType = options.entityType ?? null\n  const parts: string[] = []\n  const seen = new Set<string>()\n\n  for (const [field, value] of Object.entries(doc)) {\n    const values = collectAggregateSearchValues(field, value, entityType, config)\n    for (const entry of values) {\n      const key = entry.toLowerCase()\n      if (seen.has(key)) continue\n      seen.add(key)\n      parts.push(entry)\n    }\n  }\n\n  if (parts.length > 0) {\n    doc[AGGREGATE_SEARCH_FIELD] = parts.join('\\n')\n  }\n\n  return doc\n}\n\nexport function buildIndexDocument(\n  baseRow: Record<string, unknown>,\n  customFieldValues: Iterable<IndexCustomFieldValue> = [],\n  scope: IndexDocumentScope = {},\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const doc: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(baseRow)) {\n    doc[key] = value\n  }\n\n  const scopeOrg = normalizeScopeValue(scope.organizationId ?? null)\n  const scopeTenant = normalizeScopeValue(scope.tenantId ?? null)\n\n  const grouped = new Map<string, unknown[]>()\n  for (const field of customFieldValues) {\n    const org = normalizeScopeValue(field.organizationId ?? null)\n    const tenant = normalizeScopeValue(field.tenantId ?? null)\n\n    if (!isScopedValueVisible(scopeOrg, org)) continue\n    if (!isScopedValueVisible(scopeTenant, tenant)) continue\n\n    const bucketKey = `cf:${field.key}`\n    let bucket = grouped.get(bucketKey)\n    if (!bucket) {\n      bucket = []\n      grouped.set(bucketKey, bucket)\n    }\n\n    const { value } = field\n    if (Array.isArray(value)) {\n      for (const entry of value) bucket.push(normalizeValue(entry))\n    } else {\n      bucket.push(normalizeValue(value))\n    }\n  }\n\n  for (const [key, values] of grouped.entries()) {\n    if (values.length === 1) {\n      doc[key] = values[0]\n    } else if (values.length > 1) {\n      doc[key] = values\n    }\n  }\n\n  return attachAggregateSearchField(doc, options)\n}\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAcA,MAAM,yBAAyB;AActC,SAAS,oBAAoB,OAAiD;AAC5E,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,qBACP,YACA,YACS;AACT,MAAI,eAAe,KAAM,QAAO,eAAe;AAC/C,SAAO,eAAe,QAAQ,eAAe;AAC/C;AAEA,SAAS,eAAe,OAAyB;AAC/C,MAAI,UAAU,OAAW,QAAO;AAChC,SAAO;AACT;AAEA,SAAS,6BACP,OACA,OACA,YACA,QACU;AACV,QAAM,QAAQ,MAAM,YAAY;AAChC,MACE,UAAU,0BACP,UAAU,QACV,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,CAAC,cAAc,cAAc,cAAc,aAAa,iBAAiB,EAAE,SAAS,KAAK,GAC5F;AACA,WAAO,CAAC;AAAA,EACV;AAEA,MAAI,yBAAyB,OAAO,YAAY,MAAM,EAAG,QAAO,CAAC;AAEjE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,WAAO,QAAQ,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,EAC3C;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MACJ,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,EAC5D,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EACvC;AAEA,SAAO,CAAC;AACV;AAEO,SAAS,2BACd,KACA,UAAkC,CAAC,GACV;AACzB,QAAM,SAAS,QAAQ,UAAU,oBAAoB;AACrD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,oBAAI,IAAY;AAE7B,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAChD,UAAM,SAAS,6BAA6B,OAAO,OAAO,YAAY,MAAM;AAC5E,eAAW,SAAS,QAAQ;AAC1B,YAAM,MAAM,MAAM,YAAY;AAC9B,UAAI,KAAK,IAAI,GAAG,EAAG;AACnB,WAAK,IAAI,GAAG;AACZ,YAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,sBAAsB,IAAI,MAAM,KAAK,IAAI;AAAA,EAC/C;AAEA,SAAO;AACT;AAEO,SAAS,mBACd,SACA,oBAAqD,CAAC,GACtD,QAA4B,CAAC,GAC7B,UAAkC,CAAC,GACV;AACzB,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,GAAG,IAAI;AAAA,EACb;AAEA,QAAM,WAAW,oBAAoB,MAAM,kBAAkB,IAAI;AACjE,QAAM,cAAc,oBAAoB,MAAM,YAAY,IAAI;AAE9D,QAAM,UAAU,oBAAI,IAAuB;AAC3C,aAAW,SAAS,mBAAmB;AACrC,UAAM,MAAM,oBAAoB,MAAM,kBAAkB,IAAI;AAC5D,UAAM,SAAS,oBAAoB,MAAM,YAAY,IAAI;AAEzD,QAAI,CAAC,qBAAqB,UAAU,GAAG,EAAG;AAC1C,QAAI,CAAC,qBAAqB,aAAa,MAAM,EAAG;AAEhD,UAAM,YAAY,MAAM,MAAM,GAAG;AACjC,QAAI,SAAS,QAAQ,IAAI,SAAS;AAClC,QAAI,CAAC,QAAQ;AACX,eAAS,CAAC;AACV,cAAQ,IAAI,WAAW,MAAM;AAAA,IAC/B;AAEA,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,iBAAW,SAAS,MAAO,QAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IAC9D,OAAO;AACL,aAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IACnC;AAAA,EACF;AAEA,aAAW,CAAC,KAAK,MAAM,KAAK,QAAQ,QAAQ,GAAG;AAC7C,QAAI,OAAO,WAAW,GAAG;AACvB,UAAI,GAAG,IAAI,OAAO,CAAC;AAAA,IACrB,WAAW,OAAO,SAAS,GAAG;AAC5B,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AAEA,SAAO,2BAA2B,KAAK,OAAO;AAChD;",
+  "sourcesContent": ["import {\n  isSearchFieldBlocklisted,\n  resolveSearchConfig,\n  type SearchConfig,\n} from '@open-mercato/shared/lib/search/config'\n\nexport type IndexDocumentScope = {\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport type IndexCustomFieldValue = {\n  key: string\n  value: unknown\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport const AGGREGATE_SEARCH_FIELD = 'search_text'\n\n/**\n * Controls which fields may contribute text to the `search_text` aggregate.\n *\n * Both properties are optional so existing callers keep working unchanged: an\n * omitted `config` is resolved from the environment, and an omitted `entityType`\n * means only the global blocklist entries apply.\n */\nexport type AggregateSearchOptions = {\n  entityType?: string | null\n  config?: SearchConfig\n}\n\nfunction normalizeScopeValue(value: string | null | undefined): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return value\n}\n\nfunction isScopedValueVisible(\n  scopeValue: string | null,\n  fieldValue: string | null,\n): boolean {\n  if (scopeValue === null) return fieldValue === null\n  return fieldValue === null || fieldValue === scopeValue\n}\n\nfunction normalizeValue(value: unknown): unknown {\n  if (value === undefined) return null\n  return value\n}\n\nfunction collectAggregateSearchValues(\n  field: string,\n  value: unknown,\n  entityType: string | null,\n  config: SearchConfig,\n): string[] {\n  const lower = field.toLowerCase()\n  if (\n    lower === AGGREGATE_SEARCH_FIELD\n    || lower === 'id'\n    || lower.endsWith('_id')\n    || lower.endsWith('.id')\n    || lower.endsWith('_at')\n    || ['created_at', 'updated_at', 'deleted_at', 'tenant_id', 'organization_id'].includes(lower)\n  ) {\n    return []\n  }\n\n  if (isSearchFieldBlocklisted(field, entityType, config)) return []\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    return trimmed.length > 0 ? [trimmed] : []\n  }\n\n  if (Array.isArray(value)) {\n    return value\n      .filter((entry): entry is string => typeof entry === 'string')\n      .map((entry) => entry.trim())\n      .filter((entry) => entry.length > 0)\n  }\n\n  return []\n}\n\nexport function attachAggregateSearchField(\n  doc: Record<string, unknown>,\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const config = options.config ?? resolveSearchConfig()\n  const entityType = options.entityType ?? null\n  const parts: string[] = []\n  const seen = new Set<string>()\n\n  for (const [field, value] of Object.entries(doc)) {\n    const values = collectAggregateSearchValues(field, value, entityType, config)\n    for (const entry of values) {\n      const key = entry.toLowerCase()\n      if (seen.has(key)) continue\n      seen.add(key)\n      parts.push(entry)\n    }\n  }\n\n  if (parts.length > 0) {\n    doc[AGGREGATE_SEARCH_FIELD] = parts.join('\\n')\n  }\n\n  return doc\n}\n\n/**\n * Recomputes the aggregate on a shallow copy of `doc`.\n *\n * Search tokens are built from the *decrypted* index document, while the document\n * persisted in `entity_indexes` stays encrypted at rest. The aggregate composed during\n * document build therefore concatenates ciphertext for every field an encryption map\n * covers, and `decryptIndexDocForSearch` cannot repair it because `search_text` is on no\n * map (#5625). Token writers call this on the decrypted document so the aggregate is\n * tokenized from the same plaintext a user actually searches for; the copy keeps the\n * caller's stored document untouched.\n *\n * A pre-existing aggregate is blanked before recomposition rather than deleted: an empty\n * string yields no tokens, but it keeps the key on the document, and\n * `replaceSearchTokensForRecord` scopes its DELETE to the document's own field names. A\n * deleted key would drop `search_text` out of that scope and strand the ciphertext-derived\n * rows with no writer left to remove them.\n */\nexport function rebuildAggregateSearchField(\n  doc: Record<string, unknown>,\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const copy = { ...doc }\n  // `collectAggregateSearchValues` skips the aggregate's own key, so this blank is\n  // overwritten whenever anything survives the blocklist and stays blank otherwise.\n  if (AGGREGATE_SEARCH_FIELD in copy) copy[AGGREGATE_SEARCH_FIELD] = ''\n  return attachAggregateSearchField(copy, options)\n}\n\nexport function buildIndexDocument(\n  baseRow: Record<string, unknown>,\n  customFieldValues: Iterable<IndexCustomFieldValue> = [],\n  scope: IndexDocumentScope = {},\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const doc: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(baseRow)) {\n    doc[key] = value\n  }\n\n  const scopeOrg = normalizeScopeValue(scope.organizationId ?? null)\n  const scopeTenant = normalizeScopeValue(scope.tenantId ?? null)\n\n  const grouped = new Map<string, unknown[]>()\n  for (const field of customFieldValues) {\n    const org = normalizeScopeValue(field.organizationId ?? null)\n    const tenant = normalizeScopeValue(field.tenantId ?? null)\n\n    if (!isScopedValueVisible(scopeOrg, org)) continue\n    if (!isScopedValueVisible(scopeTenant, tenant)) continue\n\n    const bucketKey = `cf:${field.key}`\n    let bucket = grouped.get(bucketKey)\n    if (!bucket) {\n      bucket = []\n      grouped.set(bucketKey, bucket)\n    }\n\n    const { value } = field\n    if (Array.isArray(value)) {\n      for (const entry of value) bucket.push(normalizeValue(entry))\n    } else {\n      bucket.push(normalizeValue(value))\n    }\n  }\n\n  for (const [key, values] of grouped.entries()) {\n    if (values.length === 1) {\n      doc[key] = values[0]\n    } else if (values.length > 1) {\n      doc[key] = values\n    }\n  }\n\n  return attachAggregateSearchField(doc, options)\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAcA,MAAM,yBAAyB;AActC,SAAS,oBAAoB,OAAiD;AAC5E,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,qBACP,YACA,YACS;AACT,MAAI,eAAe,KAAM,QAAO,eAAe;AAC/C,SAAO,eAAe,QAAQ,eAAe;AAC/C;AAEA,SAAS,eAAe,OAAyB;AAC/C,MAAI,UAAU,OAAW,QAAO;AAChC,SAAO;AACT;AAEA,SAAS,6BACP,OACA,OACA,YACA,QACU;AACV,QAAM,QAAQ,MAAM,YAAY;AAChC,MACE,UAAU,0BACP,UAAU,QACV,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,CAAC,cAAc,cAAc,cAAc,aAAa,iBAAiB,EAAE,SAAS,KAAK,GAC5F;AACA,WAAO,CAAC;AAAA,EACV;AAEA,MAAI,yBAAyB,OAAO,YAAY,MAAM,EAAG,QAAO,CAAC;AAEjE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,WAAO,QAAQ,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,EAC3C;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MACJ,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,EAC5D,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EACvC;AAEA,SAAO,CAAC;AACV;AAEO,SAAS,2BACd,KACA,UAAkC,CAAC,GACV;AACzB,QAAM,SAAS,QAAQ,UAAU,oBAAoB;AACrD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,oBAAI,IAAY;AAE7B,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAChD,UAAM,SAAS,6BAA6B,OAAO,OAAO,YAAY,MAAM;AAC5E,eAAW,SAAS,QAAQ;AAC1B,YAAM,MAAM,MAAM,YAAY;AAC9B,UAAI,KAAK,IAAI,GAAG,EAAG;AACnB,WAAK,IAAI,GAAG;AACZ,YAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,sBAAsB,IAAI,MAAM,KAAK,IAAI;AAAA,EAC/C;AAEA,SAAO;AACT;AAmBO,SAAS,4BACd,KACA,UAAkC,CAAC,GACV;AACzB,QAAM,OAAO,EAAE,GAAG,IAAI;AAGtB,MAAI,0BAA0B,KAAM,MAAK,sBAAsB,IAAI;AACnE,SAAO,2BAA2B,MAAM,OAAO;AACjD;AAEO,SAAS,mBACd,SACA,oBAAqD,CAAC,GACtD,QAA4B,CAAC,GAC7B,UAAkC,CAAC,GACV;AACzB,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,GAAG,IAAI;AAAA,EACb;AAEA,QAAM,WAAW,oBAAoB,MAAM,kBAAkB,IAAI;AACjE,QAAM,cAAc,oBAAoB,MAAM,YAAY,IAAI;AAE9D,QAAM,UAAU,oBAAI,IAAuB;AAC3C,aAAW,SAAS,mBAAmB;AACrC,UAAM,MAAM,oBAAoB,MAAM,kBAAkB,IAAI;AAC5D,UAAM,SAAS,oBAAoB,MAAM,YAAY,IAAI;AAEzD,QAAI,CAAC,qBAAqB,UAAU,GAAG,EAAG;AAC1C,QAAI,CAAC,qBAAqB,aAAa,MAAM,EAAG;AAEhD,UAAM,YAAY,MAAM,MAAM,GAAG;AACjC,QAAI,SAAS,QAAQ,IAAI,SAAS;AAClC,QAAI,CAAC,QAAQ;AACX,eAAS,CAAC;AACV,cAAQ,IAAI,WAAW,MAAM;AAAA,IAC/B;AAEA,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,iBAAW,SAAS,MAAO,QAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IAC9D,OAAO;AACL,aAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IACnC;AAAA,EACF;AAEA,aAAW,CAAC,KAAK,MAAM,KAAK,QAAQ,QAAQ,GAAG;AAC7C,QAAI,OAAO,WAAW,GAAG;AACvB,UAAI,GAAG,IAAI,OAAO,CAAC;AAAA,IACrB,WAAW,OAAO,SAAS,GAAG;AAC5B,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AAEA,SAAO,2BAA2B,KAAK,OAAO;AAChD;",
   "names": []
 }

package/dist/modules/query_index/lib/indexer.js

@@ -8,8 +8,9 @@ import {
 } from "@open-mercato/shared/lib/crud/custom-field-definition-index";
 import { sql } from "kysely";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { resolveSearchConfig } from "@open-mercato/shared/lib/search/config";
 import { replaceSearchTokensForRecord, deleteSearchTokensForRecord } from "./search-tokens.js";
-import { attachAggregateSearchField } from "./document.js";
+import { attachAggregateSearchField, rebuildAggregateSearchField } from "./document.js";
 const logger = createLogger("query_index").child({ component: "indexer" });
 async function buildIndexDoc(em, params) {
   const db = em.getKysely();
@@ -270,12 +271,18 @@ async function reindexSearchTokensForRecord(em, args) {
       dekKeyCache
     );
   })();
+  const searchConfig = resolveSearchConfig();
+  const searchDoc = rebuildAggregateSearchField(await tokenDoc, {
+    entityType: args.entityType,
+    config: searchConfig
+  });
   await replaceSearchTokensForRecord(db, {
     entityType: args.entityType,
     recordId: args.recordId,
     organizationId: args.organizationId ?? null,
     tenantId: args.tenantId ?? null,
-    doc: await tokenDoc
+    doc: searchDoc,
+    config: searchConfig
   }, { trx: args.trx });
 }
 async function markDeleted(em, args) {

package/dist/modules/query_index/lib/indexer.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/indexer.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { decryptIndexDocForSearch, encryptIndexDocForStorage } from '@open-mercato/shared/lib/encryption/indexDoc'\nimport {\n  buildCustomFieldDefinitionIndexFromRows,\n  normalizeDefinitionKey,\n  selectDefinitionForRecord,\n  type CustomFieldDefinitionRow,\n} from '@open-mercato/shared/lib/crud/custom-field-definition-index'\nimport { type Kysely, type Transaction, sql } from 'kysely'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { replaceSearchTokensForRecord, deleteSearchTokensForRecord } from './search-tokens'\nimport { attachAggregateSearchField } from './document'\n\nconst logger = createLogger('query_index').child({ component: 'indexer' })\n\ntype QueryIndexExecutor = Kysely<any> | Transaction<any>\n\ntype BuildDocParams = {\n  entityType: string // '<module>:<entity>'\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport async function buildIndexDoc(em: EntityManager, params: BuildDocParams): Promise<Record<string, any> | null> {\n  const db = (em as any).getKysely()\n  const baseTable = resolveEntityTableName(em, params.entityType)\n\n  // Fetch base row\n  const baseRow = await db\n    .selectFrom(baseTable as any)\n    .selectAll()\n    .where('id' as any, '=', params.recordId)\n    .executeTakeFirst() as Record<string, any> | undefined\n  if (!baseRow) return null\n  const docSources: Array<Record<string, any>> = []\n\n  // Attach the core customer entity when indexing customer profiles so search tokens see the combined row\n  let parentEntityRow: Record<string, any> | null = null\n  if (params.entityType === 'customers:customer_person_profile' || params.entityType === 'customers:customer_company_profile') {\n    const entityId = (baseRow as any).entity_id ?? (baseRow as any).entityId\n    if (entityId) {\n      const entityRow = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, '=', entityId)\n        .executeTakeFirst() as Record<string, any> | undefined\n      if (entityRow) {\n        docSources.push(entityRow)\n        parentEntityRow = entityRow\n      }\n    }\n  }\n  void parentEntityRow\n\n  // Build base document (snake_case keys as in DB)\n  let doc: Record<string, any> = {}\n  docSources.push(baseRow)\n  for (const source of docSources) {\n    for (const [k, v] of Object.entries(source)) doc[k] = v\n  }\n\n  // Attach custom fields under flat keys 'cf:<key>'\n  let cfQuery = db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n    ])\n    .where('entity_id' as any, '=', params.entityType)\n    .where('record_id' as any, '=', String(params.recordId))\n\n  if (params.organizationId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('organization_id' as any, '=', params.organizationId),\n      eb('organization_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('organization_id' as any, 'is', null)\n  }\n\n  if (params.tenantId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('tenant_id' as any, '=', params.tenantId),\n      eb('tenant_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('tenant_id' as any, 'is', null)\n  }\n\n  const cfRows = await cfQuery.execute() as Array<Record<string, any>>\n\n  const cfMap: Record<string, any[]> = {}\n  for (const r of cfRows) {\n    const key = String(r.field_key)\n    const cfKey = `cf:${key}`\n    const val = r.value_bool ?? r.value_int ?? r.value_float ?? r.value_text ?? r.value_multiline ?? null\n    if (!cfMap[cfKey]) cfMap[cfKey] = []\n    cfMap[cfKey].push(val)\n  }\n\n  const multiKeys = new Set<string>()\n  const fieldKeys = Object.keys(cfMap).map((key) => key.slice(3))\n  if (fieldKeys.length > 0) {\n    let defQuery = db\n      .selectFrom('custom_field_defs' as any)\n      .select([\n        'key' as any,\n        'kind' as any,\n        'config_json' as any,\n        'organization_id' as any,\n        'tenant_id' as any,\n        'deleted_at' as any,\n        'updated_at' as any,\n      ])\n      .where('entity_id' as any, '=', params.entityType)\n      .where('key' as any, 'in', fieldKeys)\n      .where('is_active' as any, '=', true)\n      .where('deleted_at' as any, 'is', null)\n\n    if (params.organizationId != null) {\n      defQuery = defQuery.where((eb: any) => eb.or([\n        eb('organization_id' as any, '=', params.organizationId),\n        eb('organization_id' as any, 'is', null),\n      ]))\n    } else {\n      defQuery = defQuery.where('organization_id' as any, 'is', null)\n    }\n\n    if (params.tenantId != null) {\n      defQuery = defQuery.where((eb: any) => eb.or([\n        eb('tenant_id' as any, '=', params.tenantId),\n        eb('tenant_id' as any, 'is', null),\n      ]))\n    } else {\n      defQuery = defQuery.where('tenant_id' as any, 'is', null)\n    }\n\n    const defRows = await defQuery.execute() as Array<Record<string, any>>\n    const definitionIndex = buildCustomFieldDefinitionIndexFromRows(\n      defRows.map((row): CustomFieldDefinitionRow => ({\n        key: String(row.key ?? ''),\n        entityId: params.entityType,\n        kind: typeof row.kind === 'string' ? row.kind : null,\n        configJson: row.config_json,\n        organizationId: row.organization_id ?? null,\n        tenantId: row.tenant_id ?? null,\n        deletedAt: row.deleted_at ?? null,\n        updatedAt: row.updated_at ?? null,\n      })),\n      { organizationIds: params.organizationId ? [params.organizationId] : [] },\n    )\n    for (const key of fieldKeys) {\n      const definitions = definitionIndex.get(normalizeDefinitionKey(key)) ?? []\n      const definition = selectDefinitionForRecord(\n        definitions,\n        params.organizationId ?? null,\n        params.tenantId ?? null,\n      )\n      if (definition?.multi) multiKeys.add(key)\n    }\n  }\n\n  for (const [key, arr] of Object.entries(cfMap)) {\n    // Cardinality belongs to the field definition, not the current row count:\n    // a multi field containing one value must still hydrate as an array.\n    const fieldKey = key.slice(3)\n    doc[key] = multiKeys.has(fieldKey) || arr.length > 1 ? arr : arr[0]\n  }\n\n  // Attach translations under flat keys 'l10n:{locale}:{field}'\n  try {\n    const translationRow = await db\n      .selectFrom('entity_translations' as any)\n      .select(['translations' as any])\n      .where('entity_type' as any, '=', params.entityType)\n      .where('entity_id' as any, '=', String(params.recordId))\n      .where(sql`tenant_id is not distinct from ${params.tenantId ?? null}`)\n      .where(sql`organization_id is not distinct from ${params.organizationId ?? null}`)\n      .executeTakeFirst() as { translations: Record<string, Record<string, unknown>> | null } | undefined\n\n    if (translationRow?.translations && typeof translationRow.translations === 'object') {\n      for (const [locale, fields] of Object.entries(translationRow.translations)) {\n        if (!fields || typeof fields !== 'object') continue\n        for (const [field, value] of Object.entries(fields as Record<string, unknown>)) {\n          if (typeof value === 'string' && value.length > 0) {\n            doc[`l10n:${locale}:${field}`] = value\n          }\n        }\n      }\n    }\n  } catch {}\n\n  // Kept outside the guard below: a failure while building the aggregate search field is a\n  // bug in the aggregation or its configuration, and must surface instead of being mistaken\n  // for an encryption failure and silently skipping encryption.\n  doc = attachAggregateSearchField(doc, { entityType: params.entityType })\n\n  try {\n    const encryption = resolveTenantEncryptionService(em as any)\n    doc = await encryptIndexDocForStorage(\n      params.entityType,\n      doc,\n      { tenantId: params.tenantId ?? null, organizationId: params.organizationId ?? null },\n      encryption,\n    )\n  } catch (error) {\n    // `encryptIndexDocForStorage` already returns the document untouched when encryption is\n    // absent or disabled, so a throw here is always a genuine encryption failure. Returning\n    // `doc` would hand the caller the plaintext document to write into `entity_indexes`,\n    // which must stay encrypted at rest; returning `null` would mean \"record gone\" and make\n    // `upsertIndexRow` delete a healthy index row. Fail loudly instead: the projection keeps\n    // its previous, correctly encrypted contents and the `query_index.upsert_one` subscriber\n    // persists the error via `recordIndexerError`.\n    logger.error('Index document encryption failed; refusing to return an unencrypted document', {\n      entityType: params.entityType,\n      recordId: params.recordId,\n      tenantId: params.tenantId ?? null,\n      organizationId: params.organizationId ?? null,\n      err: error,\n    })\n    throw error\n  }\n\n  return doc\n}\n\nexport type UpsertIndexResult = {\n  doc: Record<string, any> | null\n  existed: boolean\n  wasDeleted: boolean\n  created: boolean\n  revived: boolean\n}\n\nfunction scopeEntityIndexes<QB extends { where: (...args: any[]) => QB }>(\n  q: QB,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null },\n): QB {\n  let chain = q.where('entity_type' as any, '=', args.entityType)\n  chain = chain.where('entity_id' as any, '=', String(args.recordId))\n  chain = args.organizationId == null\n    ? chain.where('organization_id' as any, 'is', null as any)\n    : chain.where('organization_id' as any, '=', args.organizationId)\n  chain = chain.where(sql`tenant_id is not distinct from ${args.tenantId ?? null}`)\n  return chain\n}\n\nexport async function upsertIndexRow(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null; searchTokenDoc?: Record<string, unknown> | null; deferSearchTokens?: boolean; trx?: QueryIndexExecutor }\n): Promise<UpsertIndexResult> {\n  const db = (em as any).getKysely()\n  const executor = args.trx ?? db\n\n  const existing = await scopeEntityIndexes(\n    executor.selectFrom('entity_indexes' as any).select(['id' as any, 'deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { id: string; deleted_at: Date | null } | undefined\n\n  const existed = !!existing\n  const wasDeleted = !!existing && existing.deleted_at != null\n\n  const doc = await buildIndexDoc(em, args)\n  if (!doc) {\n    // When the caller defers token work it owns the matching token cleanup; the\n    // projection-row removal below stays synchronous so list reads converge immediately.\n    if (!args.deferSearchTokens) {\n      try {\n        await reindexSearchTokensForRecord(em, {\n          entityType: args.entityType,\n          recordId: args.recordId,\n          organizationId: args.organizationId ?? null,\n          tenantId: args.tenantId ?? null,\n          doc: null,\n          trx: args.trx,\n        })\n      } catch (error) {\n        if (args.trx) throw error\n      }\n    }\n    if (existed) {\n      await scopeEntityIndexes(\n        executor.deleteFrom('entity_indexes' as any) as any,\n        args,\n      ).execute()\n    }\n    return { doc: null, existed, wasDeleted, created: false, revived: false }\n  }\n\n  const payload = {\n    entity_type: args.entityType,\n    entity_id: String(args.recordId),\n    organization_id: args.organizationId ?? null,\n    tenant_id: args.tenantId ?? null,\n    doc: sql`${JSON.stringify(doc)}::jsonb`,\n    index_version: 1,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }\n\n  // Prefer modern upsert keyed by coalesced org id when available; fallback to update-then-insert\n  try {\n    await executor\n      .insertInto('entity_indexes' as any)\n      .values({ ...payload, created_at: sql`now()` } as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          tenant_id: args.tenantId ?? null,\n          doc: sql`${JSON.stringify(doc)}::jsonb`,\n          index_version: 1,\n          updated_at: sql`now()`,\n          deleted_at: null,\n        } as any))\n      .execute()\n  } catch {\n    // Fallback for schemas without organization_id_coalesced column/index\n    const updated = await scopeEntityIndexes(\n      executor.updateTable('entity_indexes' as any).set(payload as any) as any,\n      args,\n    ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n    if (!updated || Number(updated.numUpdatedRows ?? 0) === 0) {\n      try {\n        await executor\n          .insertInto('entity_indexes' as any)\n          .values({ ...payload, created_at: sql`now()` } as any)\n          .execute()\n      } catch (error) {\n        if (args.trx) throw error\n      }\n    }\n  }\n\n  const created = !existed\n  const revived = existed && wasDeleted\n  // The search-token rebuild (DELETE + chunked INSERT) is the heavy tail of indexing.\n  // Callers that defer it (the upsert subscriber) run `reindexSearchTokensForRecord`\n  // asynchronously after this projection update so write latency stays bounded.\n  if (!args.deferSearchTokens) {\n    try {\n      await reindexSearchTokensForRecord(em, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n        doc,\n        searchTokenDoc: args.searchTokenDoc ?? null,\n        trx: args.trx,\n      })\n    } catch (error) {\n      if (args.trx) throw error\n    }\n  }\n  return { doc, existed, wasDeleted, created, revived }\n}\n\n/**\n * Rebuilds (or clears, when `doc` is null) the search-token rows for a single record.\n * This is the asynchronous-friendly tail of `upsertIndexRow`: it does not touch the\n * `entity_indexes` projection that list endpoints read, so it can run out-of-band\n * without making query-index reads inconsistent.\n */\nexport async function reindexSearchTokensForRecord(\n  em: EntityManager,\n  args: {\n    entityType: string\n    recordId: string\n    organizationId?: string | null\n    tenantId?: string | null\n    doc: Record<string, any> | null\n    searchTokenDoc?: Record<string, unknown> | null\n    trx?: QueryIndexExecutor\n  },\n): Promise<void> {\n  const db = (em as any).getKysely()\n  if (!args.doc) {\n    await deleteSearchTokensForRecord(db, {\n      entityType: args.entityType,\n      recordId: args.recordId,\n      organizationId: args.organizationId ?? null,\n      tenantId: args.tenantId ?? null,\n    }, { trx: args.trx })\n    return\n  }\n  const tokenDoc = args.searchTokenDoc ?? (() => {\n    const encryption = resolveTenantEncryptionService(em as any)\n    const dekKeyCache = new Map<string | null, string | null>()\n    return decryptIndexDocForSearch(\n      args.entityType,\n      args.doc,\n      { tenantId: args.tenantId ?? null, organizationId: args.organizationId ?? null },\n      encryption,\n      dekKeyCache,\n    )\n  })()\n  await replaceSearchTokensForRecord(db, {\n    entityType: args.entityType,\n    recordId: args.recordId,\n    organizationId: args.organizationId ?? null,\n    tenantId: args.tenantId ?? null,\n    doc: await tokenDoc,\n  }, { trx: args.trx })\n}\n\nexport async function markDeleted(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null; trx?: QueryIndexExecutor }\n): Promise<{ wasActive: boolean }> {\n  const db = (em as any).getKysely()\n  const executor = args.trx ?? db\n  const existing = await scopeEntityIndexes(\n    executor.selectFrom('entity_indexes' as any).select(['deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { deleted_at: Date | null } | undefined\n\n  const wasActive = !!existing && existing.deleted_at == null\n\n  if (existing) {\n    try {\n      await deleteSearchTokensForRecord(db, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n      }, { trx: args.trx })\n    } catch (error) {\n      if (args.trx) throw error\n    }\n    await scopeEntityIndexes(\n      executor.deleteFrom('entity_indexes' as any) as any,\n      args,\n    ).execute()\n  }\n\n  return { wasActive }\n}\n"],
-  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B,iCAAiC;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAwC,WAAW;AACnD,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B,mCAAmC;AAC1E,SAAS,kCAAkC;AAE3C,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAWzE,eAAsB,cAAc,IAAmB,QAA6D;AAClH,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,YAAY,uBAAuB,IAAI,OAAO,UAAU;AAG9D,QAAM,UAAU,MAAM,GACnB,WAAW,SAAgB,EAC3B,UAAU,EACV,MAAM,MAAa,KAAK,OAAO,QAAQ,EACvC,iBAAiB;AACpB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAyC,CAAC;AAGhD,MAAI,kBAA8C;AAClD,MAAI,OAAO,eAAe,uCAAuC,OAAO,eAAe,sCAAsC;AAC3H,UAAM,WAAY,QAAgB,aAAc,QAAgB;AAChE,QAAI,UAAU;AACZ,YAAM,YAAY,MAAM,GACrB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AACpB,UAAI,WAAW;AACb,mBAAW,KAAK,SAAS;AACzB,0BAAkB;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AACA,OAAK;AAGL,MAAI,MAA2B,CAAC;AAChC,aAAW,KAAK,OAAO;AACvB,aAAW,UAAU,YAAY;AAC/B,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,EAAG,KAAI,CAAC,IAAI;AAAA,EACxD;AAGA,MAAI,UAAU,GACX,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,OAAO,UAAU,EAChD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC;AAEzD,MAAI,OAAO,kBAAkB,MAAM;AACjC,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,mBAA0B,KAAK,OAAO,cAAc;AAAA,MACvD,GAAG,mBAA0B,MAAM,IAAI;AAAA,IACzC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,mBAA0B,MAAM,IAAI;AAAA,EAC9D;AAEA,MAAI,OAAO,YAAY,MAAM;AAC3B,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,aAAoB,KAAK,OAAO,QAAQ;AAAA,MAC3C,GAAG,aAAoB,MAAM,IAAI;AAAA,IACnC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,aAAoB,MAAM,IAAI;AAAA,EACxD;AAEA,QAAM,SAAS,MAAM,QAAQ,QAAQ;AAErC,QAAM,QAA+B,CAAC;AACtC,aAAW,KAAK,QAAQ;AACtB,UAAM,MAAM,OAAO,EAAE,SAAS;AAC9B,UAAM,QAAQ,MAAM,GAAG;AACvB,UAAM,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB;AACjG,QAAI,CAAC,MAAM,KAAK,EAAG,OAAM,KAAK,IAAI,CAAC;AACnC,UAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACvB;AAEA,QAAM,YAAY,oBAAI,IAAY;AAClC,QAAM,YAAY,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;AAC9D,MAAI,UAAU,SAAS,GAAG;AACxB,QAAI,WAAW,GACZ,WAAW,mBAA0B,EACrC,OAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,EACA,MAAM,aAAoB,KAAK,OAAO,UAAU,EAChD,MAAM,OAAc,MAAM,SAAS,EACnC,MAAM,aAAoB,KAAK,IAAI,EACnC,MAAM,cAAqB,MAAM,IAAI;AAExC,QAAI,OAAO,kBAAkB,MAAM;AACjC,iBAAW,SAAS,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,QAC3C,GAAG,mBAA0B,KAAK,OAAO,cAAc;AAAA,QACvD,GAAG,mBAA0B,MAAM,IAAI;AAAA,MACzC,CAAC,CAAC;AAAA,IACJ,OAAO;AACL,iBAAW,SAAS,MAAM,mBAA0B,MAAM,IAAI;AAAA,IAChE;AAEA,QAAI,OAAO,YAAY,MAAM;AAC3B,iBAAW,SAAS,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,QAC3C,GAAG,aAAoB,KAAK,OAAO,QAAQ;AAAA,QAC3C,GAAG,aAAoB,MAAM,IAAI;AAAA,MACnC,CAAC,CAAC;AAAA,IACJ,OAAO;AACL,iBAAW,SAAS,MAAM,aAAoB,MAAM,IAAI;AAAA,IAC1D;AAEA,UAAM,UAAU,MAAM,SAAS,QAAQ;AACvC,UAAM,kBAAkB;AAAA,MACtB,QAAQ,IAAI,CAAC,SAAmC;AAAA,QAC9C,KAAK,OAAO,IAAI,OAAO,EAAE;AAAA,QACzB,UAAU,OAAO;AAAA,QACjB,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAAA,QAChD,YAAY,IAAI;AAAA,QAChB,gBAAgB,IAAI,mBAAmB;AAAA,QACvC,UAAU,IAAI,aAAa;AAAA,QAC3B,WAAW,IAAI,cAAc;AAAA,QAC7B,WAAW,IAAI,cAAc;AAAA,MAC/B,EAAE;AAAA,MACF,EAAE,iBAAiB,OAAO,iBAAiB,CAAC,OAAO,cAAc,IAAI,CAAC,EAAE;AAAA,IAC1E;AACA,eAAW,OAAO,WAAW;AAC3B,YAAM,cAAc,gBAAgB,IAAI,uBAAuB,GAAG,CAAC,KAAK,CAAC;AACzE,YAAM,aAAa;AAAA,QACjB;AAAA,QACA,OAAO,kBAAkB;AAAA,QACzB,OAAO,YAAY;AAAA,MACrB;AACA,UAAI,YAAY,MAAO,WAAU,IAAI,GAAG;AAAA,IAC1C;AAAA,EACF;AAEA,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAG9C,UAAM,WAAW,IAAI,MAAM,CAAC;AAC5B,QAAI,GAAG,IAAI,UAAU,IAAI,QAAQ,KAAK,IAAI,SAAS,IAAI,MAAM,IAAI,CAAC;AAAA,EACpE;AAGA,MAAI;AACF,UAAM,iBAAiB,MAAM,GAC1B,WAAW,qBAA4B,EACvC,OAAO,CAAC,cAAqB,CAAC,EAC9B,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC,EACtD,MAAM,qCAAqC,OAAO,YAAY,IAAI,EAAE,EACpE,MAAM,2CAA2C,OAAO,kBAAkB,IAAI,EAAE,EAChF,iBAAiB;AAEpB,QAAI,gBAAgB,gBAAgB,OAAO,eAAe,iBAAiB,UAAU;AACnF,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,eAAe,YAAY,GAAG;AAC1E,YAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,mBAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC9E,cAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,gBAAI,QAAQ,MAAM,IAAI,KAAK,EAAE,IAAI;AAAA,UACnC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAC;AAKT,QAAM,2BAA2B,KAAK,EAAE,YAAY,OAAO,WAAW,CAAC;AAEvE,MAAI;AACF,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,MAAM;AAAA,MACV,OAAO;AAAA,MACP;AAAA,MACA,EAAE,UAAU,OAAO,YAAY,MAAM,gBAAgB,OAAO,kBAAkB,KAAK;AAAA,MACnF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AAQd,WAAO,MAAM,gFAAgF;AAAA,MAC3F,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,KAAK;AAAA,IACP,CAAC;AACD,UAAM;AAAA,EACR;AAEA,SAAO;AACT;AAUA,SAAS,mBACP,GACA,MACI;AACJ,MAAI,QAAQ,EAAE,MAAM,eAAsB,KAAK,KAAK,UAAU;AAC9D,UAAQ,MAAM,MAAM,aAAoB,KAAK,OAAO,KAAK,QAAQ,CAAC;AAClE,UAAQ,KAAK,kBAAkB,OAC3B,MAAM,MAAM,mBAA0B,MAAM,IAAW,IACvD,MAAM,MAAM,mBAA0B,KAAK,KAAK,cAAc;AAClE,UAAQ,MAAM,MAAM,qCAAqC,KAAK,YAAY,IAAI,EAAE;AAChF,SAAO;AACT;AAEA,eAAsB,eACpB,IACA,MAC4B;AAC5B,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,WAAW,KAAK,OAAO;AAE7B,QAAM,WAAW,MAAM;AAAA,IACrB,SAAS,WAAW,gBAAuB,EAAE,OAAO,CAAC,MAAa,YAAmB,CAAC;AAAA,IACtF;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,UAAU,CAAC,CAAC;AAClB,QAAM,aAAa,CAAC,CAAC,YAAY,SAAS,cAAc;AAExD,QAAM,MAAM,MAAM,cAAc,IAAI,IAAI;AACxC,MAAI,CAAC,KAAK;AAGR,QAAI,CAAC,KAAK,mBAAmB;AAC3B,UAAI;AACF,cAAM,6BAA6B,IAAI;AAAA,UACrC,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK,kBAAkB;AAAA,UACvC,UAAU,KAAK,YAAY;AAAA,UAC3B,KAAK;AAAA,UACL,KAAK,KAAK;AAAA,QACZ,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,KAAK,IAAK,OAAM;AAAA,MACtB;AAAA,IACF;AACA,QAAI,SAAS;AACX,YAAM;AAAA,QACJ,SAAS,WAAW,gBAAuB;AAAA,QAC3C;AAAA,MACF,EAAE,QAAQ;AAAA,IACZ;AACA,WAAO,EAAE,KAAK,MAAM,SAAS,YAAY,SAAS,OAAO,SAAS,MAAM;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,aAAa,KAAK;AAAA,IAClB,WAAW,OAAO,KAAK,QAAQ;AAAA,IAC/B,iBAAiB,KAAK,kBAAkB;AAAA,IACxC,WAAW,KAAK,YAAY;AAAA,IAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,IAC9B,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,YAAY;AAAA,EACd;AAGA,MAAI;AACF,UAAM,SACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,WAAW,KAAK,YAAY;AAAA,MAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,MAC9B,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,QAAQ;AAEN,UAAM,UAAU,MAAM;AAAA,MACpB,SAAS,YAAY,gBAAuB,EAAE,IAAI,OAAc;AAAA,MAChE;AAAA,IACF,EAAE,iBAAiB;AACnB,QAAI,CAAC,WAAW,OAAO,QAAQ,kBAAkB,CAAC,MAAM,GAAG;AACzD,UAAI;AACF,cAAM,SACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,QAAQ;AAAA,MACb,SAAS,OAAO;AACd,YAAI,KAAK,IAAK,OAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,CAAC;AACjB,QAAM,UAAU,WAAW;AAI3B,MAAI,CAAC,KAAK,mBAAmB;AAC3B,QAAI;AACF,YAAM,6BAA6B,IAAI;AAAA,QACrC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,QAC3B;AAAA,QACA,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,KAAK,KAAK;AAAA,MACZ,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,KAAK,IAAK,OAAM;AAAA,IACtB;AAAA,EACF;AACA,SAAO,EAAE,KAAK,SAAS,YAAY,SAAS,QAAQ;AACtD;AAQA,eAAsB,6BACpB,IACA,MASe;AACf,QAAM,KAAM,GAAW,UAAU;AACjC,MAAI,CAAC,KAAK,KAAK;AACb,UAAM,4BAA4B,IAAI;AAAA,MACpC,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,UAAU,KAAK,YAAY;AAAA,IAC7B,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;AACpB;AAAA,EACF;AACA,QAAM,WAAW,KAAK,mBAAmB,MAAM;AAC7C,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,cAAc,oBAAI,IAAkC;AAC1D,WAAO;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,kBAAkB,KAAK;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAAA,EACF,GAAG;AACH,QAAM,6BAA6B,IAAI;AAAA,IACrC,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,kBAAkB;AAAA,IACvC,UAAU,KAAK,YAAY;AAAA,IAC3B,KAAK,MAAM;AAAA,EACb,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;AACtB;AAEA,eAAsB,YACpB,IACA,MACiC;AACjC,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,WAAW,KAAK,OAAO;AAC7B,QAAM,WAAW,MAAM;AAAA,IACrB,SAAS,WAAW,gBAAuB,EAAE,OAAO,CAAC,YAAmB,CAAC;AAAA,IACzE;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,YAAY,CAAC,CAAC,YAAY,SAAS,cAAc;AAEvD,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,4BAA4B,IAAI;AAAA,QACpC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,MAC7B,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,IACtB,SAAS,OAAO;AACd,UAAI,KAAK,IAAK,OAAM;AAAA,IACtB;AACA,UAAM;AAAA,MACJ,SAAS,WAAW,gBAAuB;AAAA,MAC3C;AAAA,IACF,EAAE,QAAQ;AAAA,EACZ;AAEA,SAAO,EAAE,UAAU;AACrB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { decryptIndexDocForSearch, encryptIndexDocForStorage } from '@open-mercato/shared/lib/encryption/indexDoc'\nimport {\n  buildCustomFieldDefinitionIndexFromRows,\n  normalizeDefinitionKey,\n  selectDefinitionForRecord,\n  type CustomFieldDefinitionRow,\n} from '@open-mercato/shared/lib/crud/custom-field-definition-index'\nimport { type Kysely, type Transaction, sql } from 'kysely'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveSearchConfig } from '@open-mercato/shared/lib/search/config'\nimport { replaceSearchTokensForRecord, deleteSearchTokensForRecord } from './search-tokens'\nimport { attachAggregateSearchField, rebuildAggregateSearchField } from './document'\n\nconst logger = createLogger('query_index').child({ component: 'indexer' })\n\ntype QueryIndexExecutor = Kysely<any> | Transaction<any>\n\ntype BuildDocParams = {\n  entityType: string // '<module>:<entity>'\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport async function buildIndexDoc(em: EntityManager, params: BuildDocParams): Promise<Record<string, any> | null> {\n  const db = (em as any).getKysely()\n  const baseTable = resolveEntityTableName(em, params.entityType)\n\n  // Fetch base row\n  const baseRow = await db\n    .selectFrom(baseTable as any)\n    .selectAll()\n    .where('id' as any, '=', params.recordId)\n    .executeTakeFirst() as Record<string, any> | undefined\n  if (!baseRow) return null\n  const docSources: Array<Record<string, any>> = []\n\n  // Attach the core customer entity when indexing customer profiles so search tokens see the combined row\n  let parentEntityRow: Record<string, any> | null = null\n  if (params.entityType === 'customers:customer_person_profile' || params.entityType === 'customers:customer_company_profile') {\n    const entityId = (baseRow as any).entity_id ?? (baseRow as any).entityId\n    if (entityId) {\n      const entityRow = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, '=', entityId)\n        .executeTakeFirst() as Record<string, any> | undefined\n      if (entityRow) {\n        docSources.push(entityRow)\n        parentEntityRow = entityRow\n      }\n    }\n  }\n  void parentEntityRow\n\n  // Build base document (snake_case keys as in DB)\n  let doc: Record<string, any> = {}\n  docSources.push(baseRow)\n  for (const source of docSources) {\n    for (const [k, v] of Object.entries(source)) doc[k] = v\n  }\n\n  // Attach custom fields under flat keys 'cf:<key>'\n  let cfQuery = db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n    ])\n    .where('entity_id' as any, '=', params.entityType)\n    .where('record_id' as any, '=', String(params.recordId))\n\n  if (params.organizationId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('organization_id' as any, '=', params.organizationId),\n      eb('organization_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('organization_id' as any, 'is', null)\n  }\n\n  if (params.tenantId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('tenant_id' as any, '=', params.tenantId),\n      eb('tenant_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('tenant_id' as any, 'is', null)\n  }\n\n  const cfRows = await cfQuery.execute() as Array<Record<string, any>>\n\n  const cfMap: Record<string, any[]> = {}\n  for (const r of cfRows) {\n    const key = String(r.field_key)\n    const cfKey = `cf:${key}`\n    const val = r.value_bool ?? r.value_int ?? r.value_float ?? r.value_text ?? r.value_multiline ?? null\n    if (!cfMap[cfKey]) cfMap[cfKey] = []\n    cfMap[cfKey].push(val)\n  }\n\n  const multiKeys = new Set<string>()\n  const fieldKeys = Object.keys(cfMap).map((key) => key.slice(3))\n  if (fieldKeys.length > 0) {\n    let defQuery = db\n      .selectFrom('custom_field_defs' as any)\n      .select([\n        'key' as any,\n        'kind' as any,\n        'config_json' as any,\n        'organization_id' as any,\n        'tenant_id' as any,\n        'deleted_at' as any,\n        'updated_at' as any,\n      ])\n      .where('entity_id' as any, '=', params.entityType)\n      .where('key' as any, 'in', fieldKeys)\n      .where('is_active' as any, '=', true)\n      .where('deleted_at' as any, 'is', null)\n\n    if (params.organizationId != null) {\n      defQuery = defQuery.where((eb: any) => eb.or([\n        eb('organization_id' as any, '=', params.organizationId),\n        eb('organization_id' as any, 'is', null),\n      ]))\n    } else {\n      defQuery = defQuery.where('organization_id' as any, 'is', null)\n    }\n\n    if (params.tenantId != null) {\n      defQuery = defQuery.where((eb: any) => eb.or([\n        eb('tenant_id' as any, '=', params.tenantId),\n        eb('tenant_id' as any, 'is', null),\n      ]))\n    } else {\n      defQuery = defQuery.where('tenant_id' as any, 'is', null)\n    }\n\n    const defRows = await defQuery.execute() as Array<Record<string, any>>\n    const definitionIndex = buildCustomFieldDefinitionIndexFromRows(\n      defRows.map((row): CustomFieldDefinitionRow => ({\n        key: String(row.key ?? ''),\n        entityId: params.entityType,\n        kind: typeof row.kind === 'string' ? row.kind : null,\n        configJson: row.config_json,\n        organizationId: row.organization_id ?? null,\n        tenantId: row.tenant_id ?? null,\n        deletedAt: row.deleted_at ?? null,\n        updatedAt: row.updated_at ?? null,\n      })),\n      { organizationIds: params.organizationId ? [params.organizationId] : [] },\n    )\n    for (const key of fieldKeys) {\n      const definitions = definitionIndex.get(normalizeDefinitionKey(key)) ?? []\n      const definition = selectDefinitionForRecord(\n        definitions,\n        params.organizationId ?? null,\n        params.tenantId ?? null,\n      )\n      if (definition?.multi) multiKeys.add(key)\n    }\n  }\n\n  for (const [key, arr] of Object.entries(cfMap)) {\n    // Cardinality belongs to the field definition, not the current row count:\n    // a multi field containing one value must still hydrate as an array.\n    const fieldKey = key.slice(3)\n    doc[key] = multiKeys.has(fieldKey) || arr.length > 1 ? arr : arr[0]\n  }\n\n  // Attach translations under flat keys 'l10n:{locale}:{field}'\n  try {\n    const translationRow = await db\n      .selectFrom('entity_translations' as any)\n      .select(['translations' as any])\n      .where('entity_type' as any, '=', params.entityType)\n      .where('entity_id' as any, '=', String(params.recordId))\n      .where(sql`tenant_id is not distinct from ${params.tenantId ?? null}`)\n      .where(sql`organization_id is not distinct from ${params.organizationId ?? null}`)\n      .executeTakeFirst() as { translations: Record<string, Record<string, unknown>> | null } | undefined\n\n    if (translationRow?.translations && typeof translationRow.translations === 'object') {\n      for (const [locale, fields] of Object.entries(translationRow.translations)) {\n        if (!fields || typeof fields !== 'object') continue\n        for (const [field, value] of Object.entries(fields as Record<string, unknown>)) {\n          if (typeof value === 'string' && value.length > 0) {\n            doc[`l10n:${locale}:${field}`] = value\n          }\n        }\n      }\n    }\n  } catch {}\n\n  // Kept outside the guard below: a failure while building the aggregate search field is a\n  // bug in the aggregation or its configuration, and must surface instead of being mistaken\n  // for an encryption failure and silently skipping encryption.\n  doc = attachAggregateSearchField(doc, { entityType: params.entityType })\n\n  try {\n    const encryption = resolveTenantEncryptionService(em as any)\n    doc = await encryptIndexDocForStorage(\n      params.entityType,\n      doc,\n      { tenantId: params.tenantId ?? null, organizationId: params.organizationId ?? null },\n      encryption,\n    )\n  } catch (error) {\n    // `encryptIndexDocForStorage` already returns the document untouched when encryption is\n    // absent or disabled, so a throw here is always a genuine encryption failure. Returning\n    // `doc` would hand the caller the plaintext document to write into `entity_indexes`,\n    // which must stay encrypted at rest; returning `null` would mean \"record gone\" and make\n    // `upsertIndexRow` delete a healthy index row. Fail loudly instead: the projection keeps\n    // its previous, correctly encrypted contents and the `query_index.upsert_one` subscriber\n    // persists the error via `recordIndexerError`.\n    logger.error('Index document encryption failed; refusing to return an unencrypted document', {\n      entityType: params.entityType,\n      recordId: params.recordId,\n      tenantId: params.tenantId ?? null,\n      organizationId: params.organizationId ?? null,\n      err: error,\n    })\n    throw error\n  }\n\n  return doc\n}\n\nexport type UpsertIndexResult = {\n  doc: Record<string, any> | null\n  existed: boolean\n  wasDeleted: boolean\n  created: boolean\n  revived: boolean\n}\n\nfunction scopeEntityIndexes<QB extends { where: (...args: any[]) => QB }>(\n  q: QB,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null },\n): QB {\n  let chain = q.where('entity_type' as any, '=', args.entityType)\n  chain = chain.where('entity_id' as any, '=', String(args.recordId))\n  chain = args.organizationId == null\n    ? chain.where('organization_id' as any, 'is', null as any)\n    : chain.where('organization_id' as any, '=', args.organizationId)\n  chain = chain.where(sql`tenant_id is not distinct from ${args.tenantId ?? null}`)\n  return chain\n}\n\nexport async function upsertIndexRow(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null; searchTokenDoc?: Record<string, unknown> | null; deferSearchTokens?: boolean; trx?: QueryIndexExecutor }\n): Promise<UpsertIndexResult> {\n  const db = (em as any).getKysely()\n  const executor = args.trx ?? db\n\n  const existing = await scopeEntityIndexes(\n    executor.selectFrom('entity_indexes' as any).select(['id' as any, 'deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { id: string; deleted_at: Date | null } | undefined\n\n  const existed = !!existing\n  const wasDeleted = !!existing && existing.deleted_at != null\n\n  const doc = await buildIndexDoc(em, args)\n  if (!doc) {\n    // When the caller defers token work it owns the matching token cleanup; the\n    // projection-row removal below stays synchronous so list reads converge immediately.\n    if (!args.deferSearchTokens) {\n      try {\n        await reindexSearchTokensForRecord(em, {\n          entityType: args.entityType,\n          recordId: args.recordId,\n          organizationId: args.organizationId ?? null,\n          tenantId: args.tenantId ?? null,\n          doc: null,\n          trx: args.trx,\n        })\n      } catch (error) {\n        if (args.trx) throw error\n      }\n    }\n    if (existed) {\n      await scopeEntityIndexes(\n        executor.deleteFrom('entity_indexes' as any) as any,\n        args,\n      ).execute()\n    }\n    return { doc: null, existed, wasDeleted, created: false, revived: false }\n  }\n\n  const payload = {\n    entity_type: args.entityType,\n    entity_id: String(args.recordId),\n    organization_id: args.organizationId ?? null,\n    tenant_id: args.tenantId ?? null,\n    doc: sql`${JSON.stringify(doc)}::jsonb`,\n    index_version: 1,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }\n\n  // Prefer modern upsert keyed by coalesced org id when available; fallback to update-then-insert\n  try {\n    await executor\n      .insertInto('entity_indexes' as any)\n      .values({ ...payload, created_at: sql`now()` } as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          tenant_id: args.tenantId ?? null,\n          doc: sql`${JSON.stringify(doc)}::jsonb`,\n          index_version: 1,\n          updated_at: sql`now()`,\n          deleted_at: null,\n        } as any))\n      .execute()\n  } catch {\n    // Fallback for schemas without organization_id_coalesced column/index\n    const updated = await scopeEntityIndexes(\n      executor.updateTable('entity_indexes' as any).set(payload as any) as any,\n      args,\n    ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n    if (!updated || Number(updated.numUpdatedRows ?? 0) === 0) {\n      try {\n        await executor\n          .insertInto('entity_indexes' as any)\n          .values({ ...payload, created_at: sql`now()` } as any)\n          .execute()\n      } catch (error) {\n        if (args.trx) throw error\n      }\n    }\n  }\n\n  const created = !existed\n  const revived = existed && wasDeleted\n  // The search-token rebuild (DELETE + chunked INSERT) is the heavy tail of indexing.\n  // Callers that defer it (the upsert subscriber) run `reindexSearchTokensForRecord`\n  // asynchronously after this projection update so write latency stays bounded.\n  if (!args.deferSearchTokens) {\n    try {\n      await reindexSearchTokensForRecord(em, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n        doc,\n        searchTokenDoc: args.searchTokenDoc ?? null,\n        trx: args.trx,\n      })\n    } catch (error) {\n      if (args.trx) throw error\n    }\n  }\n  return { doc, existed, wasDeleted, created, revived }\n}\n\n/**\n * Rebuilds (or clears, when `doc` is null) the search-token rows for a single record.\n * This is the asynchronous-friendly tail of `upsertIndexRow`: it does not touch the\n * `entity_indexes` projection that list endpoints read, so it can run out-of-band\n * without making query-index reads inconsistent.\n */\nexport async function reindexSearchTokensForRecord(\n  em: EntityManager,\n  args: {\n    entityType: string\n    recordId: string\n    organizationId?: string | null\n    tenantId?: string | null\n    doc: Record<string, any> | null\n    searchTokenDoc?: Record<string, unknown> | null\n    trx?: QueryIndexExecutor\n  },\n): Promise<void> {\n  const db = (em as any).getKysely()\n  if (!args.doc) {\n    await deleteSearchTokensForRecord(db, {\n      entityType: args.entityType,\n      recordId: args.recordId,\n      organizationId: args.organizationId ?? null,\n      tenantId: args.tenantId ?? null,\n    }, { trx: args.trx })\n    return\n  }\n  const tokenDoc = args.searchTokenDoc ?? (() => {\n    const encryption = resolveTenantEncryptionService(em as any)\n    const dekKeyCache = new Map<string | null, string | null>()\n    return decryptIndexDocForSearch(\n      args.entityType,\n      args.doc,\n      { tenantId: args.tenantId ?? null, organizationId: args.organizationId ?? null },\n      encryption,\n      dekKeyCache,\n    )\n  })()\n  // Rebuilt on the decrypted document: the aggregate stored in `entity_indexes` was\n  // composed from the row as it sits at rest, so for every encryption-mapped field it\n  // holds ciphertext no user query can ever match (#5625). `resolveSearchConfig` re-parses\n  // the environment on every call, so it is resolved once and threaded into both the\n  // rebuild and the token writer \u2014 that also makes the aggregate's blocklist filter and\n  // the per-field one provably read the same snapshot, as the batch path already does.\n  const searchConfig = resolveSearchConfig()\n  const searchDoc = rebuildAggregateSearchField(await tokenDoc, {\n    entityType: args.entityType,\n    config: searchConfig,\n  })\n  await replaceSearchTokensForRecord(db, {\n    entityType: args.entityType,\n    recordId: args.recordId,\n    organizationId: args.organizationId ?? null,\n    tenantId: args.tenantId ?? null,\n    doc: searchDoc,\n    config: searchConfig,\n  }, { trx: args.trx })\n}\n\nexport async function markDeleted(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null; trx?: QueryIndexExecutor }\n): Promise<{ wasActive: boolean }> {\n  const db = (em as any).getKysely()\n  const executor = args.trx ?? db\n  const existing = await scopeEntityIndexes(\n    executor.selectFrom('entity_indexes' as any).select(['deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { deleted_at: Date | null } | undefined\n\n  const wasActive = !!existing && existing.deleted_at == null\n\n  if (existing) {\n    try {\n      await deleteSearchTokensForRecord(db, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n      }, { trx: args.trx })\n    } catch (error) {\n      if (args.trx) throw error\n    }\n    await scopeEntityIndexes(\n      executor.deleteFrom('entity_indexes' as any) as any,\n      args,\n    ).execute()\n  }\n\n  return { wasActive }\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B,iCAAiC;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAwC,WAAW;AACnD,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,8BAA8B,mCAAmC;AAC1E,SAAS,4BAA4B,mCAAmC;AAExE,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAWzE,eAAsB,cAAc,IAAmB,QAA6D;AAClH,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,YAAY,uBAAuB,IAAI,OAAO,UAAU;AAG9D,QAAM,UAAU,MAAM,GACnB,WAAW,SAAgB,EAC3B,UAAU,EACV,MAAM,MAAa,KAAK,OAAO,QAAQ,EACvC,iBAAiB;AACpB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAyC,CAAC;AAGhD,MAAI,kBAA8C;AAClD,MAAI,OAAO,eAAe,uCAAuC,OAAO,eAAe,sCAAsC;AAC3H,UAAM,WAAY,QAAgB,aAAc,QAAgB;AAChE,QAAI,UAAU;AACZ,YAAM,YAAY,MAAM,GACrB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AACpB,UAAI,WAAW;AACb,mBAAW,KAAK,SAAS;AACzB,0BAAkB;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AACA,OAAK;AAGL,MAAI,MAA2B,CAAC;AAChC,aAAW,KAAK,OAAO;AACvB,aAAW,UAAU,YAAY;AAC/B,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,EAAG,KAAI,CAAC,IAAI;AAAA,EACxD;AAGA,MAAI,UAAU,GACX,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,OAAO,UAAU,EAChD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC;AAEzD,MAAI,OAAO,kBAAkB,MAAM;AACjC,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,mBAA0B,KAAK,OAAO,cAAc;AAAA,MACvD,GAAG,mBAA0B,MAAM,IAAI;AAAA,IACzC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,mBAA0B,MAAM,IAAI;AAAA,EAC9D;AAEA,MAAI,OAAO,YAAY,MAAM;AAC3B,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,aAAoB,KAAK,OAAO,QAAQ;AAAA,MAC3C,GAAG,aAAoB,MAAM,IAAI;AAAA,IACnC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,aAAoB,MAAM,IAAI;AAAA,EACxD;AAEA,QAAM,SAAS,MAAM,QAAQ,QAAQ;AAErC,QAAM,QAA+B,CAAC;AACtC,aAAW,KAAK,QAAQ;AACtB,UAAM,MAAM,OAAO,EAAE,SAAS;AAC9B,UAAM,QAAQ,MAAM,GAAG;AACvB,UAAM,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB;AACjG,QAAI,CAAC,MAAM,KAAK,EAAG,OAAM,KAAK,IAAI,CAAC;AACnC,UAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACvB;AAEA,QAAM,YAAY,oBAAI,IAAY;AAClC,QAAM,YAAY,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;AAC9D,MAAI,UAAU,SAAS,GAAG;AACxB,QAAI,WAAW,GACZ,WAAW,mBAA0B,EACrC,OAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,EACA,MAAM,aAAoB,KAAK,OAAO,UAAU,EAChD,MAAM,OAAc,MAAM,SAAS,EACnC,MAAM,aAAoB,KAAK,IAAI,EACnC,MAAM,cAAqB,MAAM,IAAI;AAExC,QAAI,OAAO,kBAAkB,MAAM;AACjC,iBAAW,SAAS,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,QAC3C,GAAG,mBAA0B,KAAK,OAAO,cAAc;AAAA,QACvD,GAAG,mBAA0B,MAAM,IAAI;AAAA,MACzC,CAAC,CAAC;AAAA,IACJ,OAAO;AACL,iBAAW,SAAS,MAAM,mBAA0B,MAAM,IAAI;AAAA,IAChE;AAEA,QAAI,OAAO,YAAY,MAAM;AAC3B,iBAAW,SAAS,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,QAC3C,GAAG,aAAoB,KAAK,OAAO,QAAQ;AAAA,QAC3C,GAAG,aAAoB,MAAM,IAAI;AAAA,MACnC,CAAC,CAAC;AAAA,IACJ,OAAO;AACL,iBAAW,SAAS,MAAM,aAAoB,MAAM,IAAI;AAAA,IAC1D;AAEA,UAAM,UAAU,MAAM,SAAS,QAAQ;AACvC,UAAM,kBAAkB;AAAA,MACtB,QAAQ,IAAI,CAAC,SAAmC;AAAA,QAC9C,KAAK,OAAO,IAAI,OAAO,EAAE;AAAA,QACzB,UAAU,OAAO;AAAA,QACjB,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAAA,QAChD,YAAY,IAAI;AAAA,QAChB,gBAAgB,IAAI,mBAAmB;AAAA,QACvC,UAAU,IAAI,aAAa;AAAA,QAC3B,WAAW,IAAI,cAAc;AAAA,QAC7B,WAAW,IAAI,cAAc;AAAA,MAC/B,EAAE;AAAA,MACF,EAAE,iBAAiB,OAAO,iBAAiB,CAAC,OAAO,cAAc,IAAI,CAAC,EAAE;AAAA,IAC1E;AACA,eAAW,OAAO,WAAW;AAC3B,YAAM,cAAc,gBAAgB,IAAI,uBAAuB,GAAG,CAAC,KAAK,CAAC;AACzE,YAAM,aAAa;AAAA,QACjB;AAAA,QACA,OAAO,kBAAkB;AAAA,QACzB,OAAO,YAAY;AAAA,MACrB;AACA,UAAI,YAAY,MAAO,WAAU,IAAI,GAAG;AAAA,IAC1C;AAAA,EACF;AAEA,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAG9C,UAAM,WAAW,IAAI,MAAM,CAAC;AAC5B,QAAI,GAAG,IAAI,UAAU,IAAI,QAAQ,KAAK,IAAI,SAAS,IAAI,MAAM,IAAI,CAAC;AAAA,EACpE;AAGA,MAAI;AACF,UAAM,iBAAiB,MAAM,GAC1B,WAAW,qBAA4B,EACvC,OAAO,CAAC,cAAqB,CAAC,EAC9B,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC,EACtD,MAAM,qCAAqC,OAAO,YAAY,IAAI,EAAE,EACpE,MAAM,2CAA2C,OAAO,kBAAkB,IAAI,EAAE,EAChF,iBAAiB;AAEpB,QAAI,gBAAgB,gBAAgB,OAAO,eAAe,iBAAiB,UAAU;AACnF,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,eAAe,YAAY,GAAG;AAC1E,YAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,mBAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC9E,cAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,gBAAI,QAAQ,MAAM,IAAI,KAAK,EAAE,IAAI;AAAA,UACnC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAC;AAKT,QAAM,2BAA2B,KAAK,EAAE,YAAY,OAAO,WAAW,CAAC;AAEvE,MAAI;AACF,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,MAAM;AAAA,MACV,OAAO;AAAA,MACP;AAAA,MACA,EAAE,UAAU,OAAO,YAAY,MAAM,gBAAgB,OAAO,kBAAkB,KAAK;AAAA,MACnF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AAQd,WAAO,MAAM,gFAAgF;AAAA,MAC3F,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,KAAK;AAAA,IACP,CAAC;AACD,UAAM;AAAA,EACR;AAEA,SAAO;AACT;AAUA,SAAS,mBACP,GACA,MACI;AACJ,MAAI,QAAQ,EAAE,MAAM,eAAsB,KAAK,KAAK,UAAU;AAC9D,UAAQ,MAAM,MAAM,aAAoB,KAAK,OAAO,KAAK,QAAQ,CAAC;AAClE,UAAQ,KAAK,kBAAkB,OAC3B,MAAM,MAAM,mBAA0B,MAAM,IAAW,IACvD,MAAM,MAAM,mBAA0B,KAAK,KAAK,cAAc;AAClE,UAAQ,MAAM,MAAM,qCAAqC,KAAK,YAAY,IAAI,EAAE;AAChF,SAAO;AACT;AAEA,eAAsB,eACpB,IACA,MAC4B;AAC5B,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,WAAW,KAAK,OAAO;AAE7B,QAAM,WAAW,MAAM;AAAA,IACrB,SAAS,WAAW,gBAAuB,EAAE,OAAO,CAAC,MAAa,YAAmB,CAAC;AAAA,IACtF;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,UAAU,CAAC,CAAC;AAClB,QAAM,aAAa,CAAC,CAAC,YAAY,SAAS,cAAc;AAExD,QAAM,MAAM,MAAM,cAAc,IAAI,IAAI;AACxC,MAAI,CAAC,KAAK;AAGR,QAAI,CAAC,KAAK,mBAAmB;AAC3B,UAAI;AACF,cAAM,6BAA6B,IAAI;AAAA,UACrC,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK,kBAAkB;AAAA,UACvC,UAAU,KAAK,YAAY;AAAA,UAC3B,KAAK;AAAA,UACL,KAAK,KAAK;AAAA,QACZ,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,KAAK,IAAK,OAAM;AAAA,MACtB;AAAA,IACF;AACA,QAAI,SAAS;AACX,YAAM;AAAA,QACJ,SAAS,WAAW,gBAAuB;AAAA,QAC3C;AAAA,MACF,EAAE,QAAQ;AAAA,IACZ;AACA,WAAO,EAAE,KAAK,MAAM,SAAS,YAAY,SAAS,OAAO,SAAS,MAAM;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,aAAa,KAAK;AAAA,IAClB,WAAW,OAAO,KAAK,QAAQ;AAAA,IAC/B,iBAAiB,KAAK,kBAAkB;AAAA,IACxC,WAAW,KAAK,YAAY;AAAA,IAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,IAC9B,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,YAAY;AAAA,EACd;AAGA,MAAI;AACF,UAAM,SACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,WAAW,KAAK,YAAY;AAAA,MAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,MAC9B,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,QAAQ;AAEN,UAAM,UAAU,MAAM;AAAA,MACpB,SAAS,YAAY,gBAAuB,EAAE,IAAI,OAAc;AAAA,MAChE;AAAA,IACF,EAAE,iBAAiB;AACnB,QAAI,CAAC,WAAW,OAAO,QAAQ,kBAAkB,CAAC,MAAM,GAAG;AACzD,UAAI;AACF,cAAM,SACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,QAAQ;AAAA,MACb,SAAS,OAAO;AACd,YAAI,KAAK,IAAK,OAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,CAAC;AACjB,QAAM,UAAU,WAAW;AAI3B,MAAI,CAAC,KAAK,mBAAmB;AAC3B,QAAI;AACF,YAAM,6BAA6B,IAAI;AAAA,QACrC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,QAC3B;AAAA,QACA,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,KAAK,KAAK;AAAA,MACZ,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,KAAK,IAAK,OAAM;AAAA,IACtB;AAAA,EACF;AACA,SAAO,EAAE,KAAK,SAAS,YAAY,SAAS,QAAQ;AACtD;AAQA,eAAsB,6BACpB,IACA,MASe;AACf,QAAM,KAAM,GAAW,UAAU;AACjC,MAAI,CAAC,KAAK,KAAK;AACb,UAAM,4BAA4B,IAAI;AAAA,MACpC,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,UAAU,KAAK,YAAY;AAAA,IAC7B,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;AACpB;AAAA,EACF;AACA,QAAM,WAAW,KAAK,mBAAmB,MAAM;AAC7C,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,cAAc,oBAAI,IAAkC;AAC1D,WAAO;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,kBAAkB,KAAK;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAAA,EACF,GAAG;AAOH,QAAM,eAAe,oBAAoB;AACzC,QAAM,YAAY,4BAA4B,MAAM,UAAU;AAAA,IAC5D,YAAY,KAAK;AAAA,IACjB,QAAQ;AAAA,EACV,CAAC;AACD,QAAM,6BAA6B,IAAI;AAAA,IACrC,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,kBAAkB;AAAA,IACvC,UAAU,KAAK,YAAY;AAAA,IAC3B,KAAK;AAAA,IACL,QAAQ;AAAA,EACV,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;AACtB;AAEA,eAAsB,YACpB,IACA,MACiC;AACjC,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,WAAW,KAAK,OAAO;AAC7B,QAAM,WAAW,MAAM;AAAA,IACrB,SAAS,WAAW,gBAAuB,EAAE,OAAO,CAAC,YAAmB,CAAC;AAAA,IACzE;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,YAAY,CAAC,CAAC,YAAY,SAAS,cAAc;AAEvD,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,4BAA4B,IAAI;AAAA,QACpC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,MAC7B,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,IACtB,SAAS,OAAO;AACd,UAAI,KAAK,IAAK,OAAM;AAAA,IACtB;AACA,UAAM;AAAA,MACJ,SAAS,WAAW,gBAAuB;AAAA,MAC3C;AAAA,IACF,EAAE,QAAQ;AAAA,EACZ;AAEA,SAAO,EAAE,UAAU;AACrB;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.8.1-develop.7215.1.60786cf836",
+  "version": "0.8.1-develop.7219.1.f96cb57e70",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -253,16 +253,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.8.1-develop.7215.1.60786cf836",
-    "@open-mercato/shared": "0.8.1-develop.7215.1.60786cf836",
-    "@open-mercato/ui": "0.8.1-develop.7215.1.60786cf836",
+    "@open-mercato/ai-assistant": "0.8.1-develop.7219.1.f96cb57e70",
+    "@open-mercato/shared": "0.8.1-develop.7219.1.f96cb57e70",
+    "@open-mercato/ui": "0.8.1-develop.7219.1.f96cb57e70",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.8.1-develop.7215.1.60786cf836",
-    "@open-mercato/shared": "0.8.1-develop.7215.1.60786cf836",
-    "@open-mercato/ui": "0.8.1-develop.7215.1.60786cf836",
+    "@open-mercato/ai-assistant": "0.8.1-develop.7219.1.f96cb57e70",
+    "@open-mercato/shared": "0.8.1-develop.7219.1.f96cb57e70",
+    "@open-mercato/ui": "0.8.1-develop.7219.1.f96cb57e70",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^7.0.1",
     "@testing-library/react": "^16.3.3",

package/src/modules/customers/components/calendar/CalendarEventEditor.tsx

@@ -3,7 +3,7 @@
 import * as React from 'react'
 import { Calendar, X } from 'lucide-react'
 import { VisuallyHidden } from '@radix-ui/react-visually-hidden'
-import { useLocale, useT } from '@open-mercato/shared/lib/i18n/context'
+import { useT } from '@open-mercato/shared/lib/i18n/context'
 import { apiCallOrThrow } from '@open-mercato/ui/backend/utils/apiCall'
 import { extractOptimisticLockConflict } from '@open-mercato/ui/backend/utils/optimisticLock'
 import { surfaceRecordConflict } from '@open-mercato/ui/backend/conflicts'
@@ -113,7 +113,6 @@ function EditorBody({
   staffEnabled,
 }: EditorBodyProps) {
   const t = useT()
-  const locale = useLocale()
   const { setValue, errors } = ctx
   const form = formStateOfValues(ctx.values)
   const config = KIND_CONFIG[form.kind]
@@ -223,7 +222,6 @@ function EditorBody({
         startTime={form.startTime}
         endDate={form.endDate}
         endTime={form.endTime}
-        locale={locale}
         endsError={errors.ends}
         onAllDayChange={(allDay) => update({ allDay })}
         onDateChange={(date) => {
@@ -246,7 +244,6 @@ function EditorBody({
           endType={form.repeatEndType}
           count={form.repeatCount}
           untilDate={form.repeatUntilDate}
-          locale={locale}
           onFreqChange={(repeatFreq) =>
             update(
               repeatFreq === 'weekly'

package/src/modules/customers/components/calendar/CalendarToolbar.tsx

@@ -17,6 +17,7 @@ import {
   SelectTrigger,
   SelectValue,
 } from '@open-mercato/ui/primitives/select'
+import { resolveDateFnsLocale } from '@open-mercato/ui/primitives/date-locale'
 import { useLocale, useT } from '@open-mercato/shared/lib/i18n/context'
 import { formatDateRangeLabel } from '../../lib/calendar/format'
 import type {
@@ -51,6 +52,7 @@ export function CalendarToolbar(props: CalendarToolbarProps) {
   } = props
   const t = useT()
   const locale = useLocale()
+  const dateFnsLocale = resolveDateFnsLocale(locale)
   const [rangeOpen, setRangeOpen] = React.useState(false)
   const [filtersOpen, setFiltersOpen] = React.useState(false)
   const [pendingFilters, setPendingFilters] = React.useState<CalendarFiltersValue>(filters)
@@ -133,6 +135,7 @@ export function CalendarToolbar(props: CalendarToolbarProps) {
                 mode="single"
                 selected={anchor}
                 defaultMonth={anchor}
+                locale={dateFnsLocale}
                 onSelect={(date) => {
                   if (!date) return
                   onAnchorChange(date)

package/src/modules/customers/components/calendar/editor/RepeatField.tsx

@@ -26,7 +26,6 @@ export function RepeatField({
   endType,
   count,
   untilDate,
-  locale,
   onFreqChange,
   onToggleDay,
   onEndTypeChange,
@@ -38,7 +37,6 @@ export function RepeatField({
   endType: EditorRepeatEndType
   count: number
   untilDate: string
-  locale: string
   onFreqChange(next: EditorRepeatFreq): void
   onToggleDay(index: number): void
   onEndTypeChange(next: EditorRepeatEndType): void
@@ -105,7 +103,6 @@ export function RepeatField({
               value={untilDate || ''}
               onChange={onUntilDateChange}
               ariaLabel={t('customers.calendar.editor.repeat.onDate', 'On date')}
-              locale={locale}
             />
           ) : null}
           {endType === 'count' ? (