@open-mercato/core 0.9.1-develop.7473.1.de5b22888f → 0.9.1-develop.7475.1.28ca93ed97

package/dist/modules/query_index/lib/batch.js

@@ -3,6 +3,7 @@ import { recordIndexerError } from "@open-mercato/shared/lib/indexers/error-log"
 import { isUniqueViolation } from "@open-mercato/shared/lib/db/pg-errors";
 import { buildIndexDocument, rebuildAggregateSearchField } from "./document.js";
 import { replaceSearchTokensForBatch, isSearchDebugEnabled } from "./search-tokens.js";
+import { applyIndexDocEnrichers } from "./doc-enrichers.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveSearchConfig } from "@open-mercato/shared/lib/search/config";
 const logger = createLogger("query_index").child({ component: "reindex-batch" });
@@ -112,6 +113,7 @@ async function upsertIndexBatch(db, entityType, rows, scope, options = {}) {
   const basePayloads = [];
   const debugEnabled = isSearchDebugEnabled();
   const searchConfig = resolveSearchConfig();
+  const builtDocs = [];
   for (const row of rows) {
     const recordId = normalizeId(row.id);
     const baseOrg = normalizeScopedValue(row.organization_id);
@@ -134,15 +136,27 @@ async function upsertIndexBatch(db, entityType, rows, scope, options = {}) {
       if (!entityRow) return row;
       return { ...entityRow, ...row };
     })();
-    let doc = buildIndexDocument(
-      mergedRow,
-      values,
-      {
-        organizationId: scopeOrg ?? null,
-        tenantId: scopeTenant ?? null
-      },
-      { entityType, config: searchConfig }
-    );
+    builtDocs.push({
+      recordId,
+      doc: buildIndexDocument(
+        mergedRow,
+        values,
+        {
+          organizationId: scopeOrg ?? null,
+          tenantId: scopeTenant ?? null
+        },
+        { entityType, config: searchConfig }
+      ),
+      tenantId: scopeTenant ?? null,
+      organizationId: scopeOrg ?? null
+    });
+  }
+  await applyIndexDocEnrichers(db, entityType, builtDocs);
+  for (const built of builtDocs) {
+    const recordId = built.recordId;
+    const scopeOrg = built.organizationId;
+    const scopeTenant = built.tenantId;
+    let doc = built.doc;
     let tokenDoc = doc;
     if (typeof options.encryptDoc === "function") {
       try {

package/dist/modules/query_index/lib/batch.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/batch.ts"],
-  "sourcesContent": ["import { type Kysely, sql } from 'kysely'\nimport { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { isUniqueViolation } from '@open-mercato/shared/lib/db/pg-errors'\nimport { buildIndexDocument, rebuildAggregateSearchField, type IndexCustomFieldValue } from './document'\nimport { replaceSearchTokensForBatch, isSearchDebugEnabled } from './search-tokens'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveSearchConfig } from '@open-mercato/shared/lib/search/config'\n\nconst logger = createLogger('query_index').child({ component: 'reindex-batch' })\n\n/**\n * Cap on how many per-row failures a single batch persists to `indexer_error_logs`.\n * Under a systemic failure (pool exhausted, disk full, KMS down) every row fails, and\n * writing one error row per record would hammer the database that is already failing.\n * The count of suppressed failures still reaches the caller via `failedRecordIds`.\n */\nconst MAX_RECORDED_ROW_ERRORS_PER_BATCH = 50\n\nexport type AnyRow = Record<string, any> & { id: string | number }\n\nexport type ScopeOverrides = {\n  orgId?: string\n  tenantId?: string\n}\n\n/**\n * What a batch actually wrote, as opposed to what it was asked to write. Callers MUST\n * reconcile `written` against `attempted` \u2014 a batch that loses rows and reports success\n * is how records go permanently missing from the index (issue GSM-266).\n */\nexport type UpsertIndexBatchResult = {\n  attempted: number\n  written: number\n  failedRecordIds: string[]\n  searchTokenFailures: number\n}\n\nexport class QueryIndexBatchWriteError extends Error {\n  readonly entityType: string\n  readonly attempted: number\n  readonly written: number\n  readonly failedRecordIds: string[]\n\n  constructor(entityType: string, result: UpsertIndexBatchResult) {\n    const preview = result.failedRecordIds.slice(0, 10)\n    const suffix = result.failedRecordIds.length > preview.length ? ', ...' : ''\n    super(\n      `[internal] Query index write incomplete for ${entityType}: wrote ${result.written} of ${result.attempted} records` +\n        (preview.length ? ` (failed: ${preview.join(', ')}${suffix})` : ''),\n    )\n    this.name = 'QueryIndexBatchWriteError'\n    this.entityType = entityType\n    this.attempted = result.attempted\n    this.written = result.written\n    this.failedRecordIds = result.failedRecordIds\n  }\n}\n\nexport function assertIndexBatchWritesLanded(entityType: string, result: UpsertIndexBatchResult): void {\n  if (result.written >= result.attempted && result.failedRecordIds.length === 0) return\n  throw new QueryIndexBatchWriteError(entityType, result)\n}\n\nexport function createEmptyUpsertIndexBatchResult(): UpsertIndexBatchResult {\n  return { attempted: 0, written: 0, failedRecordIds: [], searchTokenFailures: 0 }\n}\n\nexport function mergeUpsertIndexBatchResults(\n  target: UpsertIndexBatchResult,\n  addition: UpsertIndexBatchResult,\n): UpsertIndexBatchResult {\n  target.attempted += addition.attempted\n  target.written += addition.written\n  target.searchTokenFailures += addition.searchTokenFailures\n  target.failedRecordIds.push(...addition.failedRecordIds)\n  return target\n}\n\ntype CustomFieldRow = {\n  record_id: string\n  field_key: string\n  value_text: string | null\n  value_multiline: string | null\n  value_int: number | null\n  value_float: number | null\n  value_bool: boolean | null\n  organization_id: string | null\n  tenant_id: string | null\n}\n\nexport type IndexBatchOptions = {\n  deriveOrganizationId?: (row: AnyRow) => string | null | undefined\n  encryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n  decryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n}\n\nfunction normalizeId(value: unknown): string {\n  return String(value)\n}\n\nfunction normalizeScopedValue(value: unknown): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return String(value)\n}\n\ntype IndexRowPayload = {\n  entity_type: string\n  entity_id: string\n  organization_id: string | null\n  tenant_id: string | null\n  doc: Record<string, unknown>\n  tokenDoc: Record<string, unknown>\n  index_version: number\n}\n\nasync function updateIndexRow(db: Kysely<any>, payload: IndexRowPayload): Promise<number> {\n  let updateQuery = db\n    .updateTable('entity_indexes' as any)\n    .set({\n      doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n      index_version: payload.index_version,\n      organization_id: payload.organization_id ?? null,\n      tenant_id: payload.tenant_id ?? null,\n      updated_at: sql`now()`,\n      deleted_at: null,\n    } as any)\n    .where('entity_type' as any, '=', payload.entity_type)\n    .where('entity_id' as any, '=', payload.entity_id)\n  updateQuery = payload.organization_id == null\n    ? updateQuery.where('organization_id' as any, 'is', null as any)\n    : updateQuery.where('organization_id' as any, '=', payload.organization_id)\n  const result = await updateQuery.executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n  return Number(result?.numUpdatedRows ?? 0)\n}\n\nexport async function upsertIndexBatch(\n  db: Kysely<any>,\n  entityType: string,\n  rows: AnyRow[],\n  scope: ScopeOverrides,\n  options: IndexBatchOptions = {},\n): Promise<UpsertIndexBatchResult> {\n  if (!rows.length) return createEmptyUpsertIndexBatchResult()\n  const recordIds = rows.map((row) => normalizeId(row.id))\n\n  const failedRecordIds: string[] = []\n  let searchTokenFailures = 0\n  let recordedRowErrors = 0\n\n  const recordRowFailure = async (\n    recordId: string,\n    error: unknown,\n    handler: string,\n    rowScope: { organizationId: string | null; tenantId: string | null },\n  ): Promise<void> => {\n    failedRecordIds.push(recordId)\n    if (recordedRowErrors >= MAX_RECORDED_ROW_ERRORS_PER_BATCH) return\n    recordedRowErrors += 1\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler,\n        error,\n        entityType,\n        recordId,\n        tenantId: rowScope.tenantId,\n        organizationId: rowScope.organizationId,\n      },\n    ).catch(() => undefined)\n  }\n\n  const shouldMergeCustomerEntity =\n    entityType === 'customers:customer_person_profile' || entityType === 'customers:customer_company_profile'\n\n  let customerEntitiesById: Map<string, AnyRow> | null = null\n  if (shouldMergeCustomerEntity) {\n    const entityIds = Array.from(\n      new Set(\n        rows\n          .map((row) => (row as AnyRow).entity_id || (row as AnyRow).entityId)\n          .filter((value): value is string | number => value !== undefined && value !== null && `${value}` !== '')\n          .map((value) => normalizeId(value)),\n      ),\n    )\n    if (entityIds.length) {\n      const entityRows = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, 'in', entityIds)\n        .execute() as AnyRow[]\n      customerEntitiesById = new Map(entityRows.map((row) => [normalizeId(row.id), row]))\n    }\n  }\n\n  const customFieldRows = await db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'record_id' as any,\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n      'organization_id' as any,\n      'tenant_id' as any,\n    ])\n    .where('entity_id' as any, '=', entityType)\n    .where('record_id' as any, 'in', recordIds)\n    .execute() as CustomFieldRow[]\n\n  const customFieldMap = new Map<string, CustomFieldRow[]>()\n  for (const fieldRow of customFieldRows) {\n    const key = normalizeId(fieldRow.record_id)\n    const bucket = customFieldMap.get(key)\n    if (bucket) bucket.push(fieldRow)\n    else customFieldMap.set(key, [fieldRow])\n  }\n\n  const basePayloads: IndexRowPayload[] = []\n\n  const debugEnabled = isSearchDebugEnabled()\n  const searchConfig = resolveSearchConfig()\n\n  for (const row of rows) {\n    const recordId = normalizeId(row.id)\n    const baseOrg = normalizeScopedValue((row as AnyRow).organization_id)\n    const baseTenant = normalizeScopedValue((row as AnyRow).tenant_id)\n    const derivedOrg = options?.deriveOrganizationId\n      ? normalizeScopedValue(options.deriveOrganizationId(row))\n      : undefined\n    const scopeOrg =\n      scope.orgId !== undefined\n        ? scope.orgId\n        : derivedOrg !== undefined\n          ? derivedOrg\n          : baseOrg\n    const scopeTenant = scope.tenantId !== undefined ? scope.tenantId : baseTenant\n    const inputRows = customFieldMap.get(recordId) ?? []\n    const values: IndexCustomFieldValue[] = inputRows.map((fieldRow) => ({\n      key: fieldRow.field_key,\n      value:\n        fieldRow.value_bool ??\n        fieldRow.value_int ??\n        fieldRow.value_float ??\n        fieldRow.value_text ??\n        fieldRow.value_multiline ??\n        null,\n      organizationId: normalizeScopedValue(fieldRow.organization_id),\n      tenantId: normalizeScopedValue(fieldRow.tenant_id),\n    }))\n    const mergedRow = (() => {\n      if (!shouldMergeCustomerEntity || !customerEntitiesById) return row\n      const entityId = (row as AnyRow).entity_id || (row as AnyRow).entityId\n      if (!entityId) return row\n      const entityRow = customerEntitiesById.get(normalizeId(entityId))\n      if (!entityRow) return row\n      return { ...entityRow, ...row }\n    })()\n    let doc = buildIndexDocument(\n      mergedRow,\n      values,\n      {\n        organizationId: scopeOrg ?? null,\n        tenantId: scopeTenant ?? null,\n      },\n      { entityType, config: searchConfig },\n    )\n    let tokenDoc: Record<string, unknown> = doc\n    if (typeof options.encryptDoc === 'function') {\n      try {\n        const encrypted = await options.encryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (encrypted && typeof encrypted === 'object') {\n          doc = encrypted\n          tokenDoc = encrypted\n        }\n      } catch (encryptError) {\n        // Falling through would write the plaintext document into entity_indexes,\n        // which must stay encrypted at rest. Skip the row instead so the previously\n        // encrypted row survives, and let the caller fail the run.\n        await recordRowFailure(recordId, encryptError, 'query_index:reindex-batch:encrypt', {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        continue\n      }\n    }\n    if (typeof options.decryptDoc === 'function') {\n      try {\n        const decrypted = await options.decryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (decrypted && typeof decrypted === 'object') {\n          // Rebuilt on the decrypted copy: `search_text` is on no encryption map, so the\n          // aggregate composed at document-build time still concatenates the ciphertext\n          // values the row carries at rest and tokenizes into rows nothing matches (#5625).\n          // The copy keeps `doc` \u2014 the encrypted row written to `entity_indexes` \u2014 untouched.\n          // A caller that passes no `decryptDoc` keeps the build-time aggregate by design:\n          // without a decryption step there is no plaintext to recompose it from.\n          tokenDoc = rebuildAggregateSearchField(decrypted, { entityType, config: searchConfig })\n        }\n      } catch (decryptError) {\n        // Only affects the search tokens built below; the indexed document itself is\n        // unharmed, so the row still counts as written.\n        logger.warn('Failed to decrypt index document for search tokens', { entityType, recordId })\n        await recordIndexerError(\n          { db },\n          {\n            source: 'fulltext',\n            handler: 'query_index:reindex-batch:decrypt',\n            error: decryptError,\n            entityType,\n            recordId,\n            tenantId: scopeTenant ?? null,\n            organizationId: scopeOrg ?? null,\n          },\n        ).catch(() => undefined)\n      }\n    }\n    basePayloads.push({\n      entity_type: entityType,\n      entity_id: recordId,\n      organization_id: scopeOrg ?? null,\n      tenant_id: scopeTenant ?? null,\n      doc,\n      tokenDoc,\n      index_version: 1,\n    })\n    if (debugEnabled) {\n      const sample = {\n        display_name: (tokenDoc as any).display_name,\n        first_name: (tokenDoc as any).first_name,\n        last_name: (tokenDoc as any).last_name,\n        brand_name: (tokenDoc as any).brand_name,\n        legal_name: (tokenDoc as any).legal_name,\n      }\n      logger.debug('Reindex batch document', {\n        entityType,\n        recordId,\n        organizationId: scopeOrg ?? null,\n        tenantId: scopeTenant ?? null,\n        sample,\n      })\n    }\n  }\n\n  const insertRows = basePayloads.map((payload) => ({\n    entity_type: payload.entity_type,\n    entity_id: payload.entity_id,\n    organization_id: payload.organization_id,\n    tenant_id: payload.tenant_id,\n    doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n    index_version: payload.index_version,\n    created_at: sql`now()`,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }))\n\n  const tokenPayloads = basePayloads.map((payload) => ({\n    entityType: payload.entity_type,\n    recordId: payload.entity_id,\n    organizationId: payload.organization_id,\n    tenantId: payload.tenant_id,\n    doc: payload.tokenDoc,\n  }))\n\n  const writeSearchTokens = async (payloads = tokenPayloads): Promise<void> => {\n    if (!payloads.length) return\n    try {\n      await replaceSearchTokensForBatch(db, payloads)\n    } catch (searchTokenError) {\n      // Record instead of swallowing: a failed token write leaves fulltext search stale.\n      // Not counted as a write failure \u2014 replaceSearchTokensForBatch is transactional, so\n      // tokens end up stale rather than missing, and the record's next write rebuilds them.\n      searchTokenFailures += 1\n      await recordIndexerError(\n        { db },\n        { source: 'fulltext', handler: 'query_index:reindex-batch', error: searchTokenError, entityType, tenantId: scope.tenantId ?? null, organizationId: scope.orgId ?? null },\n      ).catch(() => undefined)\n    }\n  }\n\n  const buildResult = (written: number): UpsertIndexBatchResult => ({\n    attempted: rows.length,\n    written,\n    failedRecordIds,\n    searchTokenFailures,\n  })\n\n  if (!basePayloads.length) return buildResult(0)\n\n  let bulkWriteFailed = false\n  try {\n    // One statement, so it is atomic on its own. Note the arbiter is\n    // (entity_type, entity_id, organization_id_coalesced): two payloads sharing a\n    // conflict key in the same batch would raise 21000 for the whole statement and\n    // fall through to the per-row path below.\n    await db\n      .insertInto('entity_indexes' as any)\n      .values(insertRows as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          doc: sql`excluded.doc`,\n          index_version: sql`excluded.index_version`,\n          organization_id: sql`excluded.organization_id`,\n          tenant_id: sql`excluded.tenant_id`,\n          deleted_at: sql`excluded.deleted_at`,\n          updated_at: sql`now()`,\n        } as any))\n      .execute()\n  } catch (bulkError) {\n    bulkWriteFailed = true\n    logger.warn('Bulk index upsert failed; falling back to per-row writes', {\n      entityType,\n      records: basePayloads.length,\n    })\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler: 'query_index:reindex-batch:bulk',\n        error: bulkError,\n        entityType,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.orgId ?? null,\n      },\n    ).catch(() => undefined)\n  }\n\n  if (!bulkWriteFailed) {\n    await writeSearchTokens()\n    if (debugEnabled) {\n      logger.debug('Reindex batch tokens', {\n        entityType,\n        records: basePayloads.length,\n        scopeOrg: scope.orgId ?? null,\n        scopeTenant: scope.tenantId ?? null,\n      })\n    }\n    return buildResult(basePayloads.length)\n  }\n\n  // Deliberately NOT wrapped in a transaction. In Postgres a single failing statement\n  // aborts the surrounding transaction, and COMMIT on an aborted transaction answers\n  // with a ROLLBACK tag instead of raising \u2014 so one bad row used to discard the entire\n  // batch while this function reported success (issue GSM-266). Each row here is an\n  // independent, idempotent upsert; they share no invariant worth a transaction.\n  let written = 0\n  for (const payload of basePayloads) {\n    try {\n      if (await updateIndexRow(db, payload) > 0) {\n        written += 1\n        continue\n      }\n      try {\n        await db\n          .insertInto('entity_indexes' as any)\n          .values({\n            entity_type: payload.entity_type,\n            entity_id: payload.entity_id,\n            organization_id: payload.organization_id,\n            tenant_id: payload.tenant_id,\n            doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n            index_version: payload.index_version,\n            created_at: sql`now()`,\n            updated_at: sql`now()`,\n            deleted_at: null,\n          } as any)\n          .execute()\n        written += 1\n      } catch (insertError) {\n        // A concurrent worker may have inserted the row between our UPDATE and INSERT.\n        // Only a successful retry of the UPDATE proves the row is actually there.\n        if (isUniqueViolation(insertError) && await updateIndexRow(db, payload) > 0) {\n          written += 1\n          continue\n        }\n        await recordRowFailure(payload.entity_id, insertError, 'query_index:reindex-batch:row', {\n          organizationId: payload.organization_id,\n          tenantId: payload.tenant_id,\n        })\n      }\n    } catch (rowError) {\n      await recordRowFailure(payload.entity_id, rowError, 'query_index:reindex-batch:row', {\n        organizationId: payload.organization_id,\n        tenantId: payload.tenant_id,\n      })\n    }\n  }\n\n  const failedRecordIdSet = new Set(failedRecordIds)\n  await writeSearchTokens(tokenPayloads.filter((payload) => !failedRecordIdSet.has(payload.recordId)))\n  return buildResult(written)\n}\n"],
-  "mappings": "AAAA,SAAsB,WAAW;AACjC,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB,mCAA+D;AAC5F,SAAS,6BAA6B,4BAA4B;AAClE,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAQ/E,MAAM,oCAAoC;AAqBnC,MAAM,kCAAkC,MAAM;AAAA,EAMnD,YAAY,YAAoB,QAAgC;AAC9D,UAAM,UAAU,OAAO,gBAAgB,MAAM,GAAG,EAAE;AAClD,UAAM,SAAS,OAAO,gBAAgB,SAAS,QAAQ,SAAS,UAAU;AAC1E;AAAA,MACE,+CAA+C,UAAU,WAAW,OAAO,OAAO,OAAO,OAAO,SAAS,cACtG,QAAQ,SAAS,aAAa,QAAQ,KAAK,IAAI,CAAC,GAAG,MAAM,MAAM;AAAA,IACpE;AACA,SAAK,OAAO;AACZ,SAAK,aAAa;AAClB,SAAK,YAAY,OAAO;AACxB,SAAK,UAAU,OAAO;AACtB,SAAK,kBAAkB,OAAO;AAAA,EAChC;AACF;AAEO,SAAS,6BAA6B,YAAoB,QAAsC;AACrG,MAAI,OAAO,WAAW,OAAO,aAAa,OAAO,gBAAgB,WAAW,EAAG;AAC/E,QAAM,IAAI,0BAA0B,YAAY,MAAM;AACxD;AAEO,SAAS,oCAA4D;AAC1E,SAAO,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAC,GAAG,qBAAqB,EAAE;AACjF;AAEO,SAAS,6BACd,QACA,UACwB;AACxB,SAAO,aAAa,SAAS;AAC7B,SAAO,WAAW,SAAS;AAC3B,SAAO,uBAAuB,SAAS;AACvC,SAAO,gBAAgB,KAAK,GAAG,SAAS,eAAe;AACvD,SAAO;AACT;AA4BA,SAAS,YAAY,OAAwB;AAC3C,SAAO,OAAO,KAAK;AACrB;AAEA,SAAS,qBAAqB,OAA+B;AAC3D,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO,OAAO,KAAK;AACrB;AAYA,eAAe,eAAe,IAAiB,SAA2C;AACxF,MAAI,cAAc,GACf,YAAY,gBAAuB,EACnC,IAAI;AAAA,IACH,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,WAAW,QAAQ,aAAa;AAAA,IAChC,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,CAAQ,EACP,MAAM,eAAsB,KAAK,QAAQ,WAAW,EACpD,MAAM,aAAoB,KAAK,QAAQ,SAAS;AACnD,gBAAc,QAAQ,mBAAmB,OACrC,YAAY,MAAM,mBAA0B,MAAM,IAAW,IAC7D,YAAY,MAAM,mBAA0B,KAAK,QAAQ,eAAe;AAC5E,QAAM,SAAS,MAAM,YAAY,iBAAiB;AAClD,SAAO,OAAO,QAAQ,kBAAkB,CAAC;AAC3C;AAEA,eAAsB,iBACpB,IACA,YACA,MACA,OACA,UAA6B,CAAC,GACG;AACjC,MAAI,CAAC,KAAK,OAAQ,QAAO,kCAAkC;AAC3D,QAAM,YAAY,KAAK,IAAI,CAAC,QAAQ,YAAY,IAAI,EAAE,CAAC;AAEvD,QAAM,kBAA4B,CAAC;AACnC,MAAI,sBAAsB;AAC1B,MAAI,oBAAoB;AAExB,QAAM,mBAAmB,OACvB,UACA,OACA,SACA,aACkB;AAClB,oBAAgB,KAAK,QAAQ;AAC7B,QAAI,qBAAqB,kCAAmC;AAC5D,yBAAqB;AACrB,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,QAAM,4BACJ,eAAe,uCAAuC,eAAe;AAEvE,MAAI,uBAAmD;AACvD,MAAI,2BAA2B;AAC7B,UAAM,YAAY,MAAM;AAAA,MACtB,IAAI;AAAA,QACF,KACG,IAAI,CAAC,QAAS,IAAe,aAAc,IAAe,QAAQ,EAClE,OAAO,CAAC,UAAoC,UAAU,UAAa,UAAU,QAAQ,GAAG,KAAK,OAAO,EAAE,EACtG,IAAI,CAAC,UAAU,YAAY,KAAK,CAAC;AAAA,MACtC;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,aAAa,MAAM,GACtB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,MAAM,SAAS,EAClC,QAAQ;AACX,6BAAuB,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;AAAA,IACpF;AAAA,EACF;AAEA,QAAM,kBAAkB,MAAM,GAC3B,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,UAAU,EACzC,MAAM,aAAoB,MAAM,SAAS,EACzC,QAAQ;AAEX,QAAM,iBAAiB,oBAAI,IAA8B;AACzD,aAAW,YAAY,iBAAiB;AACtC,UAAM,MAAM,YAAY,SAAS,SAAS;AAC1C,UAAM,SAAS,eAAe,IAAI,GAAG;AACrC,QAAI,OAAQ,QAAO,KAAK,QAAQ;AAAA,QAC3B,gBAAe,IAAI,KAAK,CAAC,QAAQ,CAAC;AAAA,EACzC;AAEA,QAAM,eAAkC,CAAC;AAEzC,QAAM,eAAe,qBAAqB;AAC1C,QAAM,eAAe,oBAAoB;AAEzC,aAAW,OAAO,MAAM;AACtB,UAAM,WAAW,YAAY,IAAI,EAAE;AACnC,UAAM,UAAU,qBAAsB,IAAe,eAAe;AACpE,UAAM,aAAa,qBAAsB,IAAe,SAAS;AACjE,UAAM,aAAa,SAAS,uBACxB,qBAAqB,QAAQ,qBAAqB,GAAG,CAAC,IACtD;AACJ,UAAM,WACJ,MAAM,UAAU,SACZ,MAAM,QACN,eAAe,SACb,aACA;AACR,UAAM,cAAc,MAAM,aAAa,SAAY,MAAM,WAAW;AACpE,UAAM,YAAY,eAAe,IAAI,QAAQ,KAAK,CAAC;AACnD,UAAM,SAAkC,UAAU,IAAI,CAAC,cAAc;AAAA,MACnE,KAAK,SAAS;AAAA,MACd,OACE,SAAS,cACT,SAAS,aACT,SAAS,eACT,SAAS,cACT,SAAS,mBACT;AAAA,MACF,gBAAgB,qBAAqB,SAAS,eAAe;AAAA,MAC7D,UAAU,qBAAqB,SAAS,SAAS;AAAA,IACnD,EAAE;AACF,UAAM,aAAa,MAAM;AACvB,UAAI,CAAC,6BAA6B,CAAC,qBAAsB,QAAO;AAChE,YAAM,WAAY,IAAe,aAAc,IAAe;AAC9D,UAAI,CAAC,SAAU,QAAO;AACtB,YAAM,YAAY,qBAAqB,IAAI,YAAY,QAAQ,CAAC;AAChE,UAAI,CAAC,UAAW,QAAO;AACvB,aAAO,EAAE,GAAG,WAAW,GAAG,IAAI;AAAA,IAChC,GAAG;AACH,QAAI,MAAM;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,QACE,gBAAgB,YAAY;AAAA,QAC5B,UAAU,eAAe;AAAA,MAC3B;AAAA,MACA,EAAE,YAAY,QAAQ,aAAa;AAAA,IACrC;AACA,QAAI,WAAoC;AACxC,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAC9C,gBAAM;AACN,qBAAW;AAAA,QACb;AAAA,MACF,SAAS,cAAc;AAIrB,cAAM,iBAAiB,UAAU,cAAc,qCAAqC;AAAA,UAClF,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAO9C,qBAAW,4BAA4B,WAAW,EAAE,YAAY,QAAQ,aAAa,CAAC;AAAA,QACxF;AAAA,MACF,SAAS,cAAc;AAGrB,eAAO,KAAK,sDAAsD,EAAE,YAAY,SAAS,CAAC;AAC1F,cAAM;AAAA,UACJ,EAAE,GAAG;AAAA,UACL;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,YACT,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA,UAAU,eAAe;AAAA,YACzB,gBAAgB,YAAY;AAAA,UAC9B;AAAA,QACF,EAAE,MAAM,MAAM,MAAS;AAAA,MACzB;AAAA,IACF;AACA,iBAAa,KAAK;AAAA,MAChB,aAAa;AAAA,MACb,WAAW;AAAA,MACX,iBAAiB,YAAY;AAAA,MAC7B,WAAW,eAAe;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,QAAI,cAAc;AAChB,YAAM,SAAS;AAAA,QACb,cAAe,SAAiB;AAAA,QAChC,YAAa,SAAiB;AAAA,QAC9B,WAAY,SAAiB;AAAA,QAC7B,YAAa,SAAiB;AAAA,QAC9B,YAAa,SAAiB;AAAA,MAChC;AACA,aAAO,MAAM,0BAA0B;AAAA,QACrC;AAAA,QACA;AAAA,QACA,gBAAgB,YAAY;AAAA,QAC5B,UAAU,eAAe;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,aAAa,aAAa,IAAI,CAAC,aAAa;AAAA,IAChD,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ;AAAA,IACzB,WAAW,QAAQ;AAAA,IACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,EAAE;AAEF,QAAM,gBAAgB,aAAa,IAAI,CAAC,aAAa;AAAA,IACnD,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,KAAK,QAAQ;AAAA,EACf,EAAE;AAEF,QAAM,oBAAoB,OAAO,WAAW,kBAAiC;AAC3E,QAAI,CAAC,SAAS,OAAQ;AACtB,QAAI;AACF,YAAM,4BAA4B,IAAI,QAAQ;AAAA,IAChD,SAAS,kBAAkB;AAIzB,6BAAuB;AACvB,YAAM;AAAA,QACJ,EAAE,GAAG;AAAA,QACL,EAAE,QAAQ,YAAY,SAAS,6BAA6B,OAAO,kBAAkB,YAAY,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,SAAS,KAAK;AAAA,MACzK,EAAE,MAAM,MAAM,MAAS;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,cAAc,CAACA,cAA6C;AAAA,IAChE,WAAW,KAAK;AAAA,IAChB,SAAAA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,aAAa,OAAQ,QAAO,YAAY,CAAC;AAE9C,MAAI,kBAAkB;AACtB,MAAI;AAKF,UAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,UAAiB,EACxB,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,KAAK;AAAA,MACL,eAAe;AAAA,MACf,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,SAAS,WAAW;AAClB,sBAAkB;AAClB,WAAO,KAAK,4DAA4D;AAAA,MACtE;AAAA,MACA,SAAS,aAAa;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,UAAU,MAAM,YAAY;AAAA,QAC5B,gBAAgB,MAAM,SAAS;AAAA,MACjC;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,kBAAkB;AACxB,QAAI,cAAc;AAChB,aAAO,MAAM,wBAAwB;AAAA,QACnC;AAAA,QACA,SAAS,aAAa;AAAA,QACtB,UAAU,MAAM,SAAS;AAAA,QACzB,aAAa,MAAM,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AACA,WAAO,YAAY,aAAa,MAAM;AAAA,EACxC;AAOA,MAAI,UAAU;AACd,aAAW,WAAW,cAAc;AAClC,QAAI;AACF,UAAI,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AACzC,mBAAW;AACX;AAAA,MACF;AACA,UAAI;AACF,cAAM,GACH,WAAW,gBAAuB,EAClC,OAAO;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,iBAAiB,QAAQ;AAAA,UACzB,WAAW,QAAQ;AAAA,UACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,UACtC,eAAe,QAAQ;AAAA,UACvB,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,YAAY;AAAA,QACd,CAAQ,EACP,QAAQ;AACX,mBAAW;AAAA,MACb,SAAS,aAAa;AAGpB,YAAI,kBAAkB,WAAW,KAAK,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AAC3E,qBAAW;AACX;AAAA,QACF;AACA,cAAM,iBAAiB,QAAQ,WAAW,aAAa,iCAAiC;AAAA,UACtF,gBAAgB,QAAQ;AAAA,UACxB,UAAU,QAAQ;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,SAAS,UAAU;AACjB,YAAM,iBAAiB,QAAQ,WAAW,UAAU,iCAAiC;AAAA,QACnF,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,oBAAoB,IAAI,IAAI,eAAe;AACjD,QAAM,kBAAkB,cAAc,OAAO,CAAC,YAAY,CAAC,kBAAkB,IAAI,QAAQ,QAAQ,CAAC,CAAC;AACnG,SAAO,YAAY,OAAO;AAC5B;",
+  "sourcesContent": ["import { type Kysely, sql } from 'kysely'\nimport { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { isUniqueViolation } from '@open-mercato/shared/lib/db/pg-errors'\nimport { buildIndexDocument, rebuildAggregateSearchField, type IndexCustomFieldValue } from './document'\nimport { replaceSearchTokensForBatch, isSearchDebugEnabled } from './search-tokens'\nimport { applyIndexDocEnrichers, type IndexDocEnrichmentTarget } from './doc-enrichers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveSearchConfig } from '@open-mercato/shared/lib/search/config'\n\nconst logger = createLogger('query_index').child({ component: 'reindex-batch' })\n\n/**\n * Cap on how many per-row failures a single batch persists to `indexer_error_logs`.\n * Under a systemic failure (pool exhausted, disk full, KMS down) every row fails, and\n * writing one error row per record would hammer the database that is already failing.\n * The count of suppressed failures still reaches the caller via `failedRecordIds`.\n */\nconst MAX_RECORDED_ROW_ERRORS_PER_BATCH = 50\n\nexport type AnyRow = Record<string, any> & { id: string | number }\n\nexport type ScopeOverrides = {\n  orgId?: string\n  tenantId?: string\n}\n\n/**\n * What a batch actually wrote, as opposed to what it was asked to write. Callers MUST\n * reconcile `written` against `attempted` \u2014 a batch that loses rows and reports success\n * is how records go permanently missing from the index (issue GSM-266).\n */\nexport type UpsertIndexBatchResult = {\n  attempted: number\n  written: number\n  failedRecordIds: string[]\n  searchTokenFailures: number\n}\n\nexport class QueryIndexBatchWriteError extends Error {\n  readonly entityType: string\n  readonly attempted: number\n  readonly written: number\n  readonly failedRecordIds: string[]\n\n  constructor(entityType: string, result: UpsertIndexBatchResult) {\n    const preview = result.failedRecordIds.slice(0, 10)\n    const suffix = result.failedRecordIds.length > preview.length ? ', ...' : ''\n    super(\n      `[internal] Query index write incomplete for ${entityType}: wrote ${result.written} of ${result.attempted} records` +\n        (preview.length ? ` (failed: ${preview.join(', ')}${suffix})` : ''),\n    )\n    this.name = 'QueryIndexBatchWriteError'\n    this.entityType = entityType\n    this.attempted = result.attempted\n    this.written = result.written\n    this.failedRecordIds = result.failedRecordIds\n  }\n}\n\nexport function assertIndexBatchWritesLanded(entityType: string, result: UpsertIndexBatchResult): void {\n  if (result.written >= result.attempted && result.failedRecordIds.length === 0) return\n  throw new QueryIndexBatchWriteError(entityType, result)\n}\n\nexport function createEmptyUpsertIndexBatchResult(): UpsertIndexBatchResult {\n  return { attempted: 0, written: 0, failedRecordIds: [], searchTokenFailures: 0 }\n}\n\nexport function mergeUpsertIndexBatchResults(\n  target: UpsertIndexBatchResult,\n  addition: UpsertIndexBatchResult,\n): UpsertIndexBatchResult {\n  target.attempted += addition.attempted\n  target.written += addition.written\n  target.searchTokenFailures += addition.searchTokenFailures\n  target.failedRecordIds.push(...addition.failedRecordIds)\n  return target\n}\n\ntype CustomFieldRow = {\n  record_id: string\n  field_key: string\n  value_text: string | null\n  value_multiline: string | null\n  value_int: number | null\n  value_float: number | null\n  value_bool: boolean | null\n  organization_id: string | null\n  tenant_id: string | null\n}\n\nexport type IndexBatchOptions = {\n  deriveOrganizationId?: (row: AnyRow) => string | null | undefined\n  encryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n  decryptDoc?: (\n    entityType: string,\n    doc: Record<string, unknown>,\n    scope: { organizationId: string | null; tenantId: string | null },\n  ) => Promise<Record<string, unknown> | null | undefined>\n}\n\nfunction normalizeId(value: unknown): string {\n  return String(value)\n}\n\nfunction normalizeScopedValue(value: unknown): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return String(value)\n}\n\ntype IndexRowPayload = {\n  entity_type: string\n  entity_id: string\n  organization_id: string | null\n  tenant_id: string | null\n  doc: Record<string, unknown>\n  tokenDoc: Record<string, unknown>\n  index_version: number\n}\n\nasync function updateIndexRow(db: Kysely<any>, payload: IndexRowPayload): Promise<number> {\n  let updateQuery = db\n    .updateTable('entity_indexes' as any)\n    .set({\n      doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n      index_version: payload.index_version,\n      organization_id: payload.organization_id ?? null,\n      tenant_id: payload.tenant_id ?? null,\n      updated_at: sql`now()`,\n      deleted_at: null,\n    } as any)\n    .where('entity_type' as any, '=', payload.entity_type)\n    .where('entity_id' as any, '=', payload.entity_id)\n  updateQuery = payload.organization_id == null\n    ? updateQuery.where('organization_id' as any, 'is', null as any)\n    : updateQuery.where('organization_id' as any, '=', payload.organization_id)\n  const result = await updateQuery.executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n  return Number(result?.numUpdatedRows ?? 0)\n}\n\nexport async function upsertIndexBatch(\n  db: Kysely<any>,\n  entityType: string,\n  rows: AnyRow[],\n  scope: ScopeOverrides,\n  options: IndexBatchOptions = {},\n): Promise<UpsertIndexBatchResult> {\n  if (!rows.length) return createEmptyUpsertIndexBatchResult()\n  const recordIds = rows.map((row) => normalizeId(row.id))\n\n  const failedRecordIds: string[] = []\n  let searchTokenFailures = 0\n  let recordedRowErrors = 0\n\n  const recordRowFailure = async (\n    recordId: string,\n    error: unknown,\n    handler: string,\n    rowScope: { organizationId: string | null; tenantId: string | null },\n  ): Promise<void> => {\n    failedRecordIds.push(recordId)\n    if (recordedRowErrors >= MAX_RECORDED_ROW_ERRORS_PER_BATCH) return\n    recordedRowErrors += 1\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler,\n        error,\n        entityType,\n        recordId,\n        tenantId: rowScope.tenantId,\n        organizationId: rowScope.organizationId,\n      },\n    ).catch(() => undefined)\n  }\n\n  const shouldMergeCustomerEntity =\n    entityType === 'customers:customer_person_profile' || entityType === 'customers:customer_company_profile'\n\n  let customerEntitiesById: Map<string, AnyRow> | null = null\n  if (shouldMergeCustomerEntity) {\n    const entityIds = Array.from(\n      new Set(\n        rows\n          .map((row) => (row as AnyRow).entity_id || (row as AnyRow).entityId)\n          .filter((value): value is string | number => value !== undefined && value !== null && `${value}` !== '')\n          .map((value) => normalizeId(value)),\n      ),\n    )\n    if (entityIds.length) {\n      const entityRows = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, 'in', entityIds)\n        .execute() as AnyRow[]\n      customerEntitiesById = new Map(entityRows.map((row) => [normalizeId(row.id), row]))\n    }\n  }\n\n  const customFieldRows = await db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'record_id' as any,\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n      'organization_id' as any,\n      'tenant_id' as any,\n    ])\n    .where('entity_id' as any, '=', entityType)\n    .where('record_id' as any, 'in', recordIds)\n    .execute() as CustomFieldRow[]\n\n  const customFieldMap = new Map<string, CustomFieldRow[]>()\n  for (const fieldRow of customFieldRows) {\n    const key = normalizeId(fieldRow.record_id)\n    const bucket = customFieldMap.get(key)\n    if (bucket) bucket.push(fieldRow)\n    else customFieldMap.set(key, [fieldRow])\n  }\n\n  const basePayloads: IndexRowPayload[] = []\n\n  const debugEnabled = isSearchDebugEnabled()\n  const searchConfig = resolveSearchConfig()\n\n  const builtDocs: IndexDocEnrichmentTarget[] = []\n  for (const row of rows) {\n    const recordId = normalizeId(row.id)\n    const baseOrg = normalizeScopedValue((row as AnyRow).organization_id)\n    const baseTenant = normalizeScopedValue((row as AnyRow).tenant_id)\n    const derivedOrg = options?.deriveOrganizationId\n      ? normalizeScopedValue(options.deriveOrganizationId(row))\n      : undefined\n    const scopeOrg =\n      scope.orgId !== undefined\n        ? scope.orgId\n        : derivedOrg !== undefined\n          ? derivedOrg\n          : baseOrg\n    const scopeTenant = scope.tenantId !== undefined ? scope.tenantId : baseTenant\n    const inputRows = customFieldMap.get(recordId) ?? []\n    const values: IndexCustomFieldValue[] = inputRows.map((fieldRow) => ({\n      key: fieldRow.field_key,\n      value:\n        fieldRow.value_bool ??\n        fieldRow.value_int ??\n        fieldRow.value_float ??\n        fieldRow.value_text ??\n        fieldRow.value_multiline ??\n        null,\n      organizationId: normalizeScopedValue(fieldRow.organization_id),\n      tenantId: normalizeScopedValue(fieldRow.tenant_id),\n    }))\n    const mergedRow = (() => {\n      if (!shouldMergeCustomerEntity || !customerEntitiesById) return row\n      const entityId = (row as AnyRow).entity_id || (row as AnyRow).entityId\n      if (!entityId) return row\n      const entityRow = customerEntitiesById.get(normalizeId(entityId))\n      if (!entityRow) return row\n      return { ...entityRow, ...row }\n    })()\n    builtDocs.push({\n      recordId,\n      doc: buildIndexDocument(\n        mergedRow,\n        values,\n        {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        },\n        { entityType, config: searchConfig },\n      ),\n      tenantId: scopeTenant ?? null,\n      organizationId: scopeOrg ?? null,\n    })\n  }\n\n  await applyIndexDocEnrichers(db, entityType, builtDocs)\n\n  for (const built of builtDocs) {\n    const recordId = built.recordId\n    const scopeOrg = built.organizationId\n    const scopeTenant = built.tenantId\n    let doc = built.doc\n    let tokenDoc: Record<string, unknown> = doc\n    if (typeof options.encryptDoc === 'function') {\n      try {\n        const encrypted = await options.encryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (encrypted && typeof encrypted === 'object') {\n          doc = encrypted\n          tokenDoc = encrypted\n        }\n      } catch (encryptError) {\n        // Falling through would write the plaintext document into entity_indexes,\n        // which must stay encrypted at rest. Skip the row instead so the previously\n        // encrypted row survives, and let the caller fail the run.\n        await recordRowFailure(recordId, encryptError, 'query_index:reindex-batch:encrypt', {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        continue\n      }\n    }\n    if (typeof options.decryptDoc === 'function') {\n      try {\n        const decrypted = await options.decryptDoc(entityType, doc, {\n          organizationId: scopeOrg ?? null,\n          tenantId: scopeTenant ?? null,\n        })\n        if (decrypted && typeof decrypted === 'object') {\n          // Rebuilt on the decrypted copy: `search_text` is on no encryption map, so the\n          // aggregate composed at document-build time still concatenates the ciphertext\n          // values the row carries at rest and tokenizes into rows nothing matches (#5625).\n          // The copy keeps `doc` \u2014 the encrypted row written to `entity_indexes` \u2014 untouched.\n          // A caller that passes no `decryptDoc` keeps the build-time aggregate by design:\n          // without a decryption step there is no plaintext to recompose it from.\n          tokenDoc = rebuildAggregateSearchField(decrypted, { entityType, config: searchConfig })\n        }\n      } catch (decryptError) {\n        // Only affects the search tokens built below; the indexed document itself is\n        // unharmed, so the row still counts as written.\n        logger.warn('Failed to decrypt index document for search tokens', { entityType, recordId })\n        await recordIndexerError(\n          { db },\n          {\n            source: 'fulltext',\n            handler: 'query_index:reindex-batch:decrypt',\n            error: decryptError,\n            entityType,\n            recordId,\n            tenantId: scopeTenant ?? null,\n            organizationId: scopeOrg ?? null,\n          },\n        ).catch(() => undefined)\n      }\n    }\n    basePayloads.push({\n      entity_type: entityType,\n      entity_id: recordId,\n      organization_id: scopeOrg ?? null,\n      tenant_id: scopeTenant ?? null,\n      doc,\n      tokenDoc,\n      index_version: 1,\n    })\n    if (debugEnabled) {\n      const sample = {\n        display_name: (tokenDoc as any).display_name,\n        first_name: (tokenDoc as any).first_name,\n        last_name: (tokenDoc as any).last_name,\n        brand_name: (tokenDoc as any).brand_name,\n        legal_name: (tokenDoc as any).legal_name,\n      }\n      logger.debug('Reindex batch document', {\n        entityType,\n        recordId,\n        organizationId: scopeOrg ?? null,\n        tenantId: scopeTenant ?? null,\n        sample,\n      })\n    }\n  }\n\n  const insertRows = basePayloads.map((payload) => ({\n    entity_type: payload.entity_type,\n    entity_id: payload.entity_id,\n    organization_id: payload.organization_id,\n    tenant_id: payload.tenant_id,\n    doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n    index_version: payload.index_version,\n    created_at: sql`now()`,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }))\n\n  const tokenPayloads = basePayloads.map((payload) => ({\n    entityType: payload.entity_type,\n    recordId: payload.entity_id,\n    organizationId: payload.organization_id,\n    tenantId: payload.tenant_id,\n    doc: payload.tokenDoc,\n  }))\n\n  const writeSearchTokens = async (payloads = tokenPayloads): Promise<void> => {\n    if (!payloads.length) return\n    try {\n      await replaceSearchTokensForBatch(db, payloads)\n    } catch (searchTokenError) {\n      // Record instead of swallowing: a failed token write leaves fulltext search stale.\n      // Not counted as a write failure \u2014 replaceSearchTokensForBatch is transactional, so\n      // tokens end up stale rather than missing, and the record's next write rebuilds them.\n      searchTokenFailures += 1\n      await recordIndexerError(\n        { db },\n        { source: 'fulltext', handler: 'query_index:reindex-batch', error: searchTokenError, entityType, tenantId: scope.tenantId ?? null, organizationId: scope.orgId ?? null },\n      ).catch(() => undefined)\n    }\n  }\n\n  const buildResult = (written: number): UpsertIndexBatchResult => ({\n    attempted: rows.length,\n    written,\n    failedRecordIds,\n    searchTokenFailures,\n  })\n\n  if (!basePayloads.length) return buildResult(0)\n\n  let bulkWriteFailed = false\n  try {\n    // One statement, so it is atomic on its own. Note the arbiter is\n    // (entity_type, entity_id, organization_id_coalesced): two payloads sharing a\n    // conflict key in the same batch would raise 21000 for the whole statement and\n    // fall through to the per-row path below.\n    await db\n      .insertInto('entity_indexes' as any)\n      .values(insertRows as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          doc: sql`excluded.doc`,\n          index_version: sql`excluded.index_version`,\n          organization_id: sql`excluded.organization_id`,\n          tenant_id: sql`excluded.tenant_id`,\n          deleted_at: sql`excluded.deleted_at`,\n          updated_at: sql`now()`,\n        } as any))\n      .execute()\n  } catch (bulkError) {\n    bulkWriteFailed = true\n    logger.warn('Bulk index upsert failed; falling back to per-row writes', {\n      entityType,\n      records: basePayloads.length,\n    })\n    await recordIndexerError(\n      { db },\n      {\n        source: 'query_index',\n        handler: 'query_index:reindex-batch:bulk',\n        error: bulkError,\n        entityType,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.orgId ?? null,\n      },\n    ).catch(() => undefined)\n  }\n\n  if (!bulkWriteFailed) {\n    await writeSearchTokens()\n    if (debugEnabled) {\n      logger.debug('Reindex batch tokens', {\n        entityType,\n        records: basePayloads.length,\n        scopeOrg: scope.orgId ?? null,\n        scopeTenant: scope.tenantId ?? null,\n      })\n    }\n    return buildResult(basePayloads.length)\n  }\n\n  // Deliberately NOT wrapped in a transaction. In Postgres a single failing statement\n  // aborts the surrounding transaction, and COMMIT on an aborted transaction answers\n  // with a ROLLBACK tag instead of raising \u2014 so one bad row used to discard the entire\n  // batch while this function reported success (issue GSM-266). Each row here is an\n  // independent, idempotent upsert; they share no invariant worth a transaction.\n  let written = 0\n  for (const payload of basePayloads) {\n    try {\n      if (await updateIndexRow(db, payload) > 0) {\n        written += 1\n        continue\n      }\n      try {\n        await db\n          .insertInto('entity_indexes' as any)\n          .values({\n            entity_type: payload.entity_type,\n            entity_id: payload.entity_id,\n            organization_id: payload.organization_id,\n            tenant_id: payload.tenant_id,\n            doc: sql`${JSON.stringify(payload.doc)}::jsonb`,\n            index_version: payload.index_version,\n            created_at: sql`now()`,\n            updated_at: sql`now()`,\n            deleted_at: null,\n          } as any)\n          .execute()\n        written += 1\n      } catch (insertError) {\n        // A concurrent worker may have inserted the row between our UPDATE and INSERT.\n        // Only a successful retry of the UPDATE proves the row is actually there.\n        if (isUniqueViolation(insertError) && await updateIndexRow(db, payload) > 0) {\n          written += 1\n          continue\n        }\n        await recordRowFailure(payload.entity_id, insertError, 'query_index:reindex-batch:row', {\n          organizationId: payload.organization_id,\n          tenantId: payload.tenant_id,\n        })\n      }\n    } catch (rowError) {\n      await recordRowFailure(payload.entity_id, rowError, 'query_index:reindex-batch:row', {\n        organizationId: payload.organization_id,\n        tenantId: payload.tenant_id,\n      })\n    }\n  }\n\n  const failedRecordIdSet = new Set(failedRecordIds)\n  await writeSearchTokens(tokenPayloads.filter((payload) => !failedRecordIdSet.has(payload.recordId)))\n  return buildResult(written)\n}\n"],
+  "mappings": "AAAA,SAAsB,WAAW;AACjC,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB,mCAA+D;AAC5F,SAAS,6BAA6B,4BAA4B;AAClE,SAAS,8BAA6D;AACtE,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAQ/E,MAAM,oCAAoC;AAqBnC,MAAM,kCAAkC,MAAM;AAAA,EAMnD,YAAY,YAAoB,QAAgC;AAC9D,UAAM,UAAU,OAAO,gBAAgB,MAAM,GAAG,EAAE;AAClD,UAAM,SAAS,OAAO,gBAAgB,SAAS,QAAQ,SAAS,UAAU;AAC1E;AAAA,MACE,+CAA+C,UAAU,WAAW,OAAO,OAAO,OAAO,OAAO,SAAS,cACtG,QAAQ,SAAS,aAAa,QAAQ,KAAK,IAAI,CAAC,GAAG,MAAM,MAAM;AAAA,IACpE;AACA,SAAK,OAAO;AACZ,SAAK,aAAa;AAClB,SAAK,YAAY,OAAO;AACxB,SAAK,UAAU,OAAO;AACtB,SAAK,kBAAkB,OAAO;AAAA,EAChC;AACF;AAEO,SAAS,6BAA6B,YAAoB,QAAsC;AACrG,MAAI,OAAO,WAAW,OAAO,aAAa,OAAO,gBAAgB,WAAW,EAAG;AAC/E,QAAM,IAAI,0BAA0B,YAAY,MAAM;AACxD;AAEO,SAAS,oCAA4D;AAC1E,SAAO,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAC,GAAG,qBAAqB,EAAE;AACjF;AAEO,SAAS,6BACd,QACA,UACwB;AACxB,SAAO,aAAa,SAAS;AAC7B,SAAO,WAAW,SAAS;AAC3B,SAAO,uBAAuB,SAAS;AACvC,SAAO,gBAAgB,KAAK,GAAG,SAAS,eAAe;AACvD,SAAO;AACT;AA4BA,SAAS,YAAY,OAAwB;AAC3C,SAAO,OAAO,KAAK;AACrB;AAEA,SAAS,qBAAqB,OAA+B;AAC3D,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO,OAAO,KAAK;AACrB;AAYA,eAAe,eAAe,IAAiB,SAA2C;AACxF,MAAI,cAAc,GACf,YAAY,gBAAuB,EACnC,IAAI;AAAA,IACH,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,WAAW,QAAQ,aAAa;AAAA,IAChC,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,CAAQ,EACP,MAAM,eAAsB,KAAK,QAAQ,WAAW,EACpD,MAAM,aAAoB,KAAK,QAAQ,SAAS;AACnD,gBAAc,QAAQ,mBAAmB,OACrC,YAAY,MAAM,mBAA0B,MAAM,IAAW,IAC7D,YAAY,MAAM,mBAA0B,KAAK,QAAQ,eAAe;AAC5E,QAAM,SAAS,MAAM,YAAY,iBAAiB;AAClD,SAAO,OAAO,QAAQ,kBAAkB,CAAC;AAC3C;AAEA,eAAsB,iBACpB,IACA,YACA,MACA,OACA,UAA6B,CAAC,GACG;AACjC,MAAI,CAAC,KAAK,OAAQ,QAAO,kCAAkC;AAC3D,QAAM,YAAY,KAAK,IAAI,CAAC,QAAQ,YAAY,IAAI,EAAE,CAAC;AAEvD,QAAM,kBAA4B,CAAC;AACnC,MAAI,sBAAsB;AAC1B,MAAI,oBAAoB;AAExB,QAAM,mBAAmB,OACvB,UACA,OACA,SACA,aACkB;AAClB,oBAAgB,KAAK,QAAQ;AAC7B,QAAI,qBAAqB,kCAAmC;AAC5D,yBAAqB;AACrB,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,QAAM,4BACJ,eAAe,uCAAuC,eAAe;AAEvE,MAAI,uBAAmD;AACvD,MAAI,2BAA2B;AAC7B,UAAM,YAAY,MAAM;AAAA,MACtB,IAAI;AAAA,QACF,KACG,IAAI,CAAC,QAAS,IAAe,aAAc,IAAe,QAAQ,EAClE,OAAO,CAAC,UAAoC,UAAU,UAAa,UAAU,QAAQ,GAAG,KAAK,OAAO,EAAE,EACtG,IAAI,CAAC,UAAU,YAAY,KAAK,CAAC;AAAA,MACtC;AAAA,IACF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,aAAa,MAAM,GACtB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,MAAM,SAAS,EAClC,QAAQ;AACX,6BAAuB,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;AAAA,IACpF;AAAA,EACF;AAEA,QAAM,kBAAkB,MAAM,GAC3B,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,UAAU,EACzC,MAAM,aAAoB,MAAM,SAAS,EACzC,QAAQ;AAEX,QAAM,iBAAiB,oBAAI,IAA8B;AACzD,aAAW,YAAY,iBAAiB;AACtC,UAAM,MAAM,YAAY,SAAS,SAAS;AAC1C,UAAM,SAAS,eAAe,IAAI,GAAG;AACrC,QAAI,OAAQ,QAAO,KAAK,QAAQ;AAAA,QAC3B,gBAAe,IAAI,KAAK,CAAC,QAAQ,CAAC;AAAA,EACzC;AAEA,QAAM,eAAkC,CAAC;AAEzC,QAAM,eAAe,qBAAqB;AAC1C,QAAM,eAAe,oBAAoB;AAEzC,QAAM,YAAwC,CAAC;AAC/C,aAAW,OAAO,MAAM;AACtB,UAAM,WAAW,YAAY,IAAI,EAAE;AACnC,UAAM,UAAU,qBAAsB,IAAe,eAAe;AACpE,UAAM,aAAa,qBAAsB,IAAe,SAAS;AACjE,UAAM,aAAa,SAAS,uBACxB,qBAAqB,QAAQ,qBAAqB,GAAG,CAAC,IACtD;AACJ,UAAM,WACJ,MAAM,UAAU,SACZ,MAAM,QACN,eAAe,SACb,aACA;AACR,UAAM,cAAc,MAAM,aAAa,SAAY,MAAM,WAAW;AACpE,UAAM,YAAY,eAAe,IAAI,QAAQ,KAAK,CAAC;AACnD,UAAM,SAAkC,UAAU,IAAI,CAAC,cAAc;AAAA,MACnE,KAAK,SAAS;AAAA,MACd,OACE,SAAS,cACT,SAAS,aACT,SAAS,eACT,SAAS,cACT,SAAS,mBACT;AAAA,MACF,gBAAgB,qBAAqB,SAAS,eAAe;AAAA,MAC7D,UAAU,qBAAqB,SAAS,SAAS;AAAA,IACnD,EAAE;AACF,UAAM,aAAa,MAAM;AACvB,UAAI,CAAC,6BAA6B,CAAC,qBAAsB,QAAO;AAChE,YAAM,WAAY,IAAe,aAAc,IAAe;AAC9D,UAAI,CAAC,SAAU,QAAO;AACtB,YAAM,YAAY,qBAAqB,IAAI,YAAY,QAAQ,CAAC;AAChE,UAAI,CAAC,UAAW,QAAO;AACvB,aAAO,EAAE,GAAG,WAAW,GAAG,IAAI;AAAA,IAChC,GAAG;AACH,cAAU,KAAK;AAAA,MACb;AAAA,MACA,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA;AAAA,UACE,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B;AAAA,QACA,EAAE,YAAY,QAAQ,aAAa;AAAA,MACrC;AAAA,MACA,UAAU,eAAe;AAAA,MACzB,gBAAgB,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AAEA,QAAM,uBAAuB,IAAI,YAAY,SAAS;AAEtD,aAAW,SAAS,WAAW;AAC7B,UAAM,WAAW,MAAM;AACvB,UAAM,WAAW,MAAM;AACvB,UAAM,cAAc,MAAM;AAC1B,QAAI,MAAM,MAAM;AAChB,QAAI,WAAoC;AACxC,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAC9C,gBAAM;AACN,qBAAW;AAAA,QACb;AAAA,MACF,SAAS,cAAc;AAIrB,cAAM,iBAAiB,UAAU,cAAc,qCAAqC;AAAA,UAClF,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,QAAQ,eAAe,YAAY;AAC5C,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,WAAW,YAAY,KAAK;AAAA,UAC1D,gBAAgB,YAAY;AAAA,UAC5B,UAAU,eAAe;AAAA,QAC3B,CAAC;AACD,YAAI,aAAa,OAAO,cAAc,UAAU;AAO9C,qBAAW,4BAA4B,WAAW,EAAE,YAAY,QAAQ,aAAa,CAAC;AAAA,QACxF;AAAA,MACF,SAAS,cAAc;AAGrB,eAAO,KAAK,sDAAsD,EAAE,YAAY,SAAS,CAAC;AAC1F,cAAM;AAAA,UACJ,EAAE,GAAG;AAAA,UACL;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,YACT,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA,UAAU,eAAe;AAAA,YACzB,gBAAgB,YAAY;AAAA,UAC9B;AAAA,QACF,EAAE,MAAM,MAAM,MAAS;AAAA,MACzB;AAAA,IACF;AACA,iBAAa,KAAK;AAAA,MAChB,aAAa;AAAA,MACb,WAAW;AAAA,MACX,iBAAiB,YAAY;AAAA,MAC7B,WAAW,eAAe;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,CAAC;AACD,QAAI,cAAc;AAChB,YAAM,SAAS;AAAA,QACb,cAAe,SAAiB;AAAA,QAChC,YAAa,SAAiB;AAAA,QAC9B,WAAY,SAAiB;AAAA,QAC7B,YAAa,SAAiB;AAAA,QAC9B,YAAa,SAAiB;AAAA,MAChC;AACA,aAAO,MAAM,0BAA0B;AAAA,QACrC;AAAA,QACA;AAAA,QACA,gBAAgB,YAAY;AAAA,QAC5B,UAAU,eAAe;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,aAAa,aAAa,IAAI,CAAC,aAAa;AAAA,IAChD,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ;AAAA,IACzB,WAAW,QAAQ;AAAA,IACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,IACtC,eAAe,QAAQ;AAAA,IACvB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,EAAE;AAEF,QAAM,gBAAgB,aAAa,IAAI,CAAC,aAAa;AAAA,IACnD,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB,KAAK,QAAQ;AAAA,EACf,EAAE;AAEF,QAAM,oBAAoB,OAAO,WAAW,kBAAiC;AAC3E,QAAI,CAAC,SAAS,OAAQ;AACtB,QAAI;AACF,YAAM,4BAA4B,IAAI,QAAQ;AAAA,IAChD,SAAS,kBAAkB;AAIzB,6BAAuB;AACvB,YAAM;AAAA,QACJ,EAAE,GAAG;AAAA,QACL,EAAE,QAAQ,YAAY,SAAS,6BAA6B,OAAO,kBAAkB,YAAY,UAAU,MAAM,YAAY,MAAM,gBAAgB,MAAM,SAAS,KAAK;AAAA,MACzK,EAAE,MAAM,MAAM,MAAS;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,cAAc,CAACA,cAA6C;AAAA,IAChE,WAAW,KAAK;AAAA,IAChB,SAAAA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,aAAa,OAAQ,QAAO,YAAY,CAAC;AAE9C,MAAI,kBAAkB;AACtB,MAAI;AAKF,UAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,UAAiB,EACxB,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,KAAK;AAAA,MACL,eAAe;AAAA,MACf,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,SAAS,WAAW;AAClB,sBAAkB;AAClB,WAAO,KAAK,4DAA4D;AAAA,MACtE;AAAA,MACA,SAAS,aAAa;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,EAAE,GAAG;AAAA,MACL;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,UAAU,MAAM,YAAY;AAAA,QAC5B,gBAAgB,MAAM,SAAS;AAAA,MACjC;AAAA,IACF,EAAE,MAAM,MAAM,MAAS;AAAA,EACzB;AAEA,MAAI,CAAC,iBAAiB;AACpB,UAAM,kBAAkB;AACxB,QAAI,cAAc;AAChB,aAAO,MAAM,wBAAwB;AAAA,QACnC;AAAA,QACA,SAAS,aAAa;AAAA,QACtB,UAAU,MAAM,SAAS;AAAA,QACzB,aAAa,MAAM,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AACA,WAAO,YAAY,aAAa,MAAM;AAAA,EACxC;AAOA,MAAI,UAAU;AACd,aAAW,WAAW,cAAc;AAClC,QAAI;AACF,UAAI,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AACzC,mBAAW;AACX;AAAA,MACF;AACA,UAAI;AACF,cAAM,GACH,WAAW,gBAAuB,EAClC,OAAO;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,iBAAiB,QAAQ;AAAA,UACzB,WAAW,QAAQ;AAAA,UACnB,KAAK,MAAM,KAAK,UAAU,QAAQ,GAAG,CAAC;AAAA,UACtC,eAAe,QAAQ;AAAA,UACvB,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,YAAY;AAAA,QACd,CAAQ,EACP,QAAQ;AACX,mBAAW;AAAA,MACb,SAAS,aAAa;AAGpB,YAAI,kBAAkB,WAAW,KAAK,MAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AAC3E,qBAAW;AACX;AAAA,QACF;AACA,cAAM,iBAAiB,QAAQ,WAAW,aAAa,iCAAiC;AAAA,UACtF,gBAAgB,QAAQ;AAAA,UACxB,UAAU,QAAQ;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,SAAS,UAAU;AACjB,YAAM,iBAAiB,QAAQ,WAAW,UAAU,iCAAiC;AAAA,QACnF,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,oBAAoB,IAAI,IAAI,eAAe;AACjD,QAAM,kBAAkB,cAAc,OAAO,CAAC,YAAY,CAAC,kBAAkB,IAAI,QAAQ,QAAQ,CAAC,CAAC;AACnG,SAAO,YAAY,OAAO;AAC5B;",
   "names": ["written"]
 }

package/dist/modules/query_index/lib/doc-enrichers.js

@@ -0,0 +1,212 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { recordIndexerError } from "@open-mercato/shared/lib/indexers/error-log";
+import { getTelemetryRuntime } from "@open-mercato/shared/lib/telemetry/runtime";
+const logger = createLogger("query_index").child({ component: "doc-enrichers" });
+const INDEX_DOC_ENRICHER_KEY_PATTERN = /^[a-z][a-z0-9_]*$/;
+const RESERVED_INDEX_DOC_KEYS = /* @__PURE__ */ new Set([
+  "id",
+  "tenant_id",
+  "organization_id",
+  "created_at",
+  "updated_at",
+  "deleted_at",
+  "search_text"
+]);
+const GLOBAL_ENRICHER_REGISTRY_KEY = "__openMercatoQueryIndexDocEnrichers__";
+function getRegistryState() {
+  const globalRegistry = globalThis;
+  if (!globalRegistry[GLOBAL_ENRICHER_REGISTRY_KEY]) {
+    globalRegistry[GLOBAL_ENRICHER_REGISTRY_KEY] = { byEntityType: /* @__PURE__ */ new Map() };
+  }
+  return globalRegistry[GLOBAL_ENRICHER_REGISTRY_KEY];
+}
+function validateEnricher(enricher, existing) {
+  if (typeof enricher.id !== "string" || !enricher.id.trim()) {
+    throw new Error("[internal] Index doc enricher requires a non-empty id");
+  }
+  if (typeof enricher.entityType !== "string" || !enricher.entityType.includes(":")) {
+    throw new Error(`[internal] Index doc enricher "${enricher.id}" requires an entityType in '<module>:<entity>' form`);
+  }
+  if (typeof enricher.enrich !== "function") {
+    throw new Error(`[internal] Index doc enricher "${enricher.id}" requires an enrich function`);
+  }
+  const keys = Array.from(new Set(enricher.keys ?? []));
+  if (!keys.length) {
+    throw new Error(`[internal] Index doc enricher "${enricher.id}" must declare at least one key`);
+  }
+  for (const key of keys) {
+    if (!INDEX_DOC_ENRICHER_KEY_PATTERN.test(key)) {
+      throw new Error(`[internal] Index doc enricher "${enricher.id}" key "${key}" must match ${INDEX_DOC_ENRICHER_KEY_PATTERN}`);
+    }
+    if (RESERVED_INDEX_DOC_KEYS.has(key)) {
+      throw new Error(`[internal] Index doc enricher "${enricher.id}" key "${key}" is reserved`);
+    }
+    const owner = existing.find((entry) => entry.id !== enricher.id && entry.keys.includes(key));
+    if (owner) {
+      throw new Error(`[internal] Index doc enricher "${enricher.id}" key "${key}" is already contributed by "${owner.id}" for ${enricher.entityType}`);
+    }
+  }
+  return keys;
+}
+function registerIndexDocEnricher(enricher) {
+  const state = getRegistryState();
+  const existing = state.byEntityType.get(enricher.entityType) ?? [];
+  const keys = validateEnricher(enricher, existing);
+  const registered = { ...enricher, keys };
+  const next = existing.filter((entry) => entry.id !== enricher.id);
+  next.push(registered);
+  state.byEntityType.set(enricher.entityType, next);
+  return () => {
+    const current = state.byEntityType.get(enricher.entityType) ?? [];
+    const remaining = current.filter((entry) => entry !== registered);
+    if (remaining.length) state.byEntityType.set(enricher.entityType, remaining);
+    else state.byEntityType.delete(enricher.entityType);
+  };
+}
+function getIndexDocEnrichers(entityType) {
+  return getRegistryState().byEntityType.get(entityType) ?? [];
+}
+function hasIndexDocEnrichers(entityType) {
+  return (getRegistryState().byEntityType.get(entityType)?.length ?? 0) > 0;
+}
+function isIndexDocEnrichedKey(entityType, field) {
+  if (!entityType) return false;
+  const enrichers = getRegistryState().byEntityType.get(entityType);
+  if (!enrichers) return false;
+  return enrichers.some((entry) => entry.keys.includes(field));
+}
+function resetIndexDocEnrichers() {
+  getRegistryState().byEntityType.clear();
+}
+function scopeGroupKey(target) {
+  return `${target.tenantId ?? ""}|${target.organizationId ?? ""}`;
+}
+async function reportEnricherFailure(db, input) {
+  logger.error("Index doc enricher failed; contributed keys written as null", {
+    enricherId: input.enricher.id,
+    entityType: input.entityType,
+    tenantId: input.tenantId,
+    organizationId: input.organizationId,
+    recordId: input.recordId ?? null,
+    ...input.details,
+    err: input.error
+  });
+  getTelemetryRuntime()?.reportError(input.error, {
+    module: "query_index",
+    code: "query_index.doc_enricher_failed"
+  });
+  await recordIndexerError(
+    { db },
+    {
+      source: "query_index",
+      handler: input.handler,
+      error: input.error,
+      entityType: input.entityType,
+      recordId: input.recordId ?? null,
+      tenantId: input.tenantId,
+      organizationId: input.organizationId,
+      payload: { enricherId: input.enricher.id, ...input.details }
+    }
+  ).catch(() => void 0);
+}
+const COLLISION_SAMPLE_SIZE = 10;
+function nullOut(targets, keys, baseKeys) {
+  for (const target of targets) {
+    const ownKeys = baseKeys.get(target.recordId);
+    for (const key of keys) {
+      if (ownKeys?.has(key)) continue;
+      target.doc[key] = null;
+    }
+  }
+}
+async function applyIndexDocEnrichers(db, entityType, targets) {
+  const enrichers = getRegistryState().byEntityType.get(entityType);
+  if (!enrichers?.length || !targets.length) return;
+  const baseKeys = /* @__PURE__ */ new Map();
+  for (const target of targets) baseKeys.set(target.recordId, new Set(Object.keys(target.doc)));
+  const groups = /* @__PURE__ */ new Map();
+  for (const target of targets) {
+    const key = scopeGroupKey(target);
+    const bucket = groups.get(key);
+    if (bucket) bucket.push(target);
+    else groups.set(key, [target]);
+  }
+  for (const enricher of [...enrichers]) {
+    for (const group of groups.values()) {
+      const { tenantId, organizationId } = group[0];
+      let result;
+      try {
+        const records = group.map((target) => ({ recordId: target.recordId, doc: target.doc }));
+        const returned = await enricher.enrich(records, { db, entityType, tenantId, organizationId });
+        if (!(returned instanceof Map)) {
+          throw new Error(`[internal] Index doc enricher "${enricher.id}" must return a Map keyed by record id`);
+        }
+        result = returned;
+      } catch (error) {
+        nullOut(group, enricher.keys, baseKeys);
+        await reportEnricherFailure(db, {
+          enricher,
+          entityType,
+          tenantId,
+          organizationId,
+          error,
+          handler: "query_index:doc-enricher"
+        });
+        continue;
+      }
+      const collidingRecordIdsByKey = /* @__PURE__ */ new Map();
+      for (const target of group) {
+        const contribution = result.get(target.recordId);
+        const ownKeys = baseKeys.get(target.recordId);
+        for (const key of enricher.keys) {
+          if (ownKeys?.has(key)) {
+            const colliding = collidingRecordIdsByKey.get(key);
+            if (colliding) colliding.push(target.recordId);
+            else collidingRecordIdsByKey.set(key, [target.recordId]);
+            continue;
+          }
+          const value = contribution && Object.prototype.hasOwnProperty.call(contribution, key) ? contribution[key] : null;
+          target.doc[key] = value === void 0 ? null : value;
+        }
+        if (contribution) {
+          const undeclared = Object.keys(contribution).filter((key) => !enricher.keys.includes(key));
+          if (undeclared.length) {
+            logger.warn("Index doc enricher returned undeclared keys; ignored", {
+              enricherId: enricher.id,
+              entityType,
+              recordId: target.recordId,
+              keys: undeclared
+            });
+          }
+        }
+      }
+      for (const [key, recordIds] of collidingRecordIdsByKey) {
+        await reportEnricherFailure(db, {
+          enricher,
+          entityType,
+          tenantId,
+          organizationId,
+          recordId: recordIds.length === 1 ? recordIds[0] : void 0,
+          error: new Error(`[internal] Index doc enricher "${enricher.id}" key "${key}" collides with a base document key of ${entityType} on ${recordIds.length} record(s)`),
+          handler: "query_index:doc-enricher:collision",
+          details: {
+            collidingKey: key,
+            collidingRecordCount: recordIds.length,
+            sampleRecordIds: recordIds.slice(0, COLLISION_SAMPLE_SIZE)
+          }
+        });
+      }
+    }
+  }
+}
+export {
+  INDEX_DOC_ENRICHER_KEY_PATTERN,
+  RESERVED_INDEX_DOC_KEYS,
+  applyIndexDocEnrichers,
+  getIndexDocEnrichers,
+  hasIndexDocEnrichers,
+  isIndexDocEnrichedKey,
+  registerIndexDocEnricher,
+  resetIndexDocEnrichers
+};
+//# sourceMappingURL=doc-enrichers.js.map

package/dist/modules/query_index/lib/doc-enrichers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/query_index/lib/doc-enrichers.ts"],
+  "sourcesContent": ["import type { Kysely } from 'kysely'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { recordIndexerError } from '@open-mercato/shared/lib/indexers/error-log'\nimport { getTelemetryRuntime } from '@open-mercato/shared/lib/telemetry/runtime'\n\nconst logger = createLogger('query_index').child({ component: 'doc-enrichers' })\n\n/**\n * Index-document enrichment \u2014 lets the module that owns an entity contribute computed keys to\n * that entity's `entity_indexes.doc` at index time (Storefront Public API \u00A73.3, decision D9).\n *\n * Registration is programmatic (call `registerIndexDocEnricher` from the owning module's `di.ts`);\n * there is no auto-discovered module file for it.\n *\n * Key namespace: every enricher declares the exact keys it writes. A key MUST be a lowercase\n * snake_case identifier (`^[a-z][a-z0-9_]*$`), so it can never collide with `cf:*` custom-field\n * keys or `l10n:*` translation keys, MUST NOT be one of the reserved document keys, and MUST NOT be\n * declared by another enricher of the same entity type. A key that turns out to be a base column\n * of the indexed row is a collision detected at index time: the base value is kept, the\n * contribution is discarded and the error is recorded.\n *\n * Failure semantics (fail closed, detectable): when an enricher throws, or returns nothing for a\n * record, every key it declares is written as JSON `null` on the affected documents. Consumers\n * MUST treat `null` (and an absent key) as \"not indexed\" \u2014 never as \"empty\". Indexing itself\n * never fails because of an enricher.\n *\n * Enriched keys are filter/projection data: they are excluded from the `search_text` aggregate\n * and from `search_tokens`.\n */\nexport type IndexDocEnricherContext = {\n  db: Kysely<any>\n  entityType: string\n  tenantId: string | null\n  organizationId: string | null\n}\n\nexport type IndexDocEnricherRecord = {\n  recordId: string\n  doc: Readonly<Record<string, unknown>>\n}\n\nexport type IndexDocEnrichment = Record<string, unknown>\n\nexport type IndexDocEnricher = {\n  id: string\n  entityType: string\n  keys: readonly string[]\n  enrich: (\n    records: readonly IndexDocEnricherRecord[],\n    ctx: IndexDocEnricherContext,\n  ) => Promise<Map<string, IndexDocEnrichment>>\n}\n\nexport type IndexDocEnrichmentTarget = {\n  recordId: string\n  doc: Record<string, unknown>\n  tenantId: string | null\n  organizationId: string | null\n}\n\nexport const INDEX_DOC_ENRICHER_KEY_PATTERN = /^[a-z][a-z0-9_]*$/\n\nexport const RESERVED_INDEX_DOC_KEYS: ReadonlySet<string> = new Set([\n  'id',\n  'tenant_id',\n  'organization_id',\n  'created_at',\n  'updated_at',\n  'deleted_at',\n  'search_text',\n])\n\ntype RegisteredEnricher = IndexDocEnricher & { keys: string[] }\n\ntype EnricherRegistryState = {\n  byEntityType: Map<string, RegisteredEnricher[]>\n}\n\nconst GLOBAL_ENRICHER_REGISTRY_KEY = '__openMercatoQueryIndexDocEnrichers__' as const\n\ntype GlobalEnricherRegistry = typeof globalThis & {\n  [GLOBAL_ENRICHER_REGISTRY_KEY]?: EnricherRegistryState\n}\n\nfunction getRegistryState(): EnricherRegistryState {\n  const globalRegistry = globalThis as GlobalEnricherRegistry\n  if (!globalRegistry[GLOBAL_ENRICHER_REGISTRY_KEY]) {\n    globalRegistry[GLOBAL_ENRICHER_REGISTRY_KEY] = { byEntityType: new Map() }\n  }\n  return globalRegistry[GLOBAL_ENRICHER_REGISTRY_KEY]\n}\n\nfunction validateEnricher(enricher: IndexDocEnricher, existing: readonly RegisteredEnricher[]): string[] {\n  if (typeof enricher.id !== 'string' || !enricher.id.trim()) {\n    throw new Error('[internal] Index doc enricher requires a non-empty id')\n  }\n  if (typeof enricher.entityType !== 'string' || !enricher.entityType.includes(':')) {\n    throw new Error(`[internal] Index doc enricher \"${enricher.id}\" requires an entityType in '<module>:<entity>' form`)\n  }\n  if (typeof enricher.enrich !== 'function') {\n    throw new Error(`[internal] Index doc enricher \"${enricher.id}\" requires an enrich function`)\n  }\n  const keys = Array.from(new Set(enricher.keys ?? []))\n  if (!keys.length) {\n    throw new Error(`[internal] Index doc enricher \"${enricher.id}\" must declare at least one key`)\n  }\n  for (const key of keys) {\n    if (!INDEX_DOC_ENRICHER_KEY_PATTERN.test(key)) {\n      throw new Error(`[internal] Index doc enricher \"${enricher.id}\" key \"${key}\" must match ${INDEX_DOC_ENRICHER_KEY_PATTERN}`)\n    }\n    if (RESERVED_INDEX_DOC_KEYS.has(key)) {\n      throw new Error(`[internal] Index doc enricher \"${enricher.id}\" key \"${key}\" is reserved`)\n    }\n    const owner = existing.find((entry) => entry.id !== enricher.id && entry.keys.includes(key))\n    if (owner) {\n      throw new Error(`[internal] Index doc enricher \"${enricher.id}\" key \"${key}\" is already contributed by \"${owner.id}\" for ${enricher.entityType}`)\n    }\n  }\n  return keys\n}\n\n/**\n * Registers an enricher. Re-registering the same `id` for the same entity type replaces the\n * previous registration (HMR-safe). Throws on an invalid or colliding key declaration.\n * Returns a function that removes the registration.\n */\nexport function registerIndexDocEnricher(enricher: IndexDocEnricher): () => void {\n  const state = getRegistryState()\n  const existing = state.byEntityType.get(enricher.entityType) ?? []\n  const keys = validateEnricher(enricher, existing)\n  const registered: RegisteredEnricher = { ...enricher, keys }\n  const next = existing.filter((entry) => entry.id !== enricher.id)\n  next.push(registered)\n  state.byEntityType.set(enricher.entityType, next)\n  return () => {\n    const current = state.byEntityType.get(enricher.entityType) ?? []\n    const remaining = current.filter((entry) => entry !== registered)\n    if (remaining.length) state.byEntityType.set(enricher.entityType, remaining)\n    else state.byEntityType.delete(enricher.entityType)\n  }\n}\n\nexport function getIndexDocEnrichers(entityType: string): readonly IndexDocEnricher[] {\n  return getRegistryState().byEntityType.get(entityType) ?? []\n}\n\nexport function hasIndexDocEnrichers(entityType: string): boolean {\n  return (getRegistryState().byEntityType.get(entityType)?.length ?? 0) > 0\n}\n\nexport function isIndexDocEnrichedKey(entityType: string | null | undefined, field: string): boolean {\n  if (!entityType) return false\n  const enrichers = getRegistryState().byEntityType.get(entityType)\n  if (!enrichers) return false\n  return enrichers.some((entry) => entry.keys.includes(field))\n}\n\nexport function resetIndexDocEnrichers(): void {\n  getRegistryState().byEntityType.clear()\n}\n\nfunction scopeGroupKey(target: IndexDocEnrichmentTarget): string {\n  return `${target.tenantId ?? ''}|${target.organizationId ?? ''}`\n}\n\nasync function reportEnricherFailure(\n  db: Kysely<any>,\n  input: {\n    enricher: RegisteredEnricher\n    entityType: string\n    tenantId: string | null\n    organizationId: string | null\n    recordId?: string\n    error: unknown\n    handler: string\n    details?: Record<string, unknown>\n  },\n): Promise<void> {\n  logger.error('Index doc enricher failed; contributed keys written as null', {\n    enricherId: input.enricher.id,\n    entityType: input.entityType,\n    tenantId: input.tenantId,\n    organizationId: input.organizationId,\n    recordId: input.recordId ?? null,\n    ...input.details,\n    err: input.error,\n  })\n  getTelemetryRuntime()?.reportError(input.error, {\n    module: 'query_index',\n    code: 'query_index.doc_enricher_failed',\n  })\n  await recordIndexerError(\n    { db },\n    {\n      source: 'query_index',\n      handler: input.handler,\n      error: input.error,\n      entityType: input.entityType,\n      recordId: input.recordId ?? null,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      payload: { enricherId: input.enricher.id, ...input.details },\n    },\n  ).catch(() => undefined)\n}\n\nconst COLLISION_SAMPLE_SIZE = 10\n\nfunction nullOut(targets: readonly IndexDocEnrichmentTarget[], keys: readonly string[], baseKeys: Map<string, Set<string>>): void {\n  for (const target of targets) {\n    const ownKeys = baseKeys.get(target.recordId)\n    for (const key of keys) {\n      if (ownKeys?.has(key)) continue\n      target.doc[key] = null\n    }\n  }\n}\n\n/**\n * Runs every enricher registered for `entityType` over a batch of freshly built documents and\n * merges the contributed keys into them in place. One `enrich` call per enricher per\n * tenant/organization scope present in the batch \u2014 never per record.\n */\nexport async function applyIndexDocEnrichers(\n  db: Kysely<any>,\n  entityType: string,\n  targets: readonly IndexDocEnrichmentTarget[],\n): Promise<void> {\n  const enrichers = getRegistryState().byEntityType.get(entityType)\n  if (!enrichers?.length || !targets.length) return\n\n  const baseKeys = new Map<string, Set<string>>()\n  for (const target of targets) baseKeys.set(target.recordId, new Set(Object.keys(target.doc)))\n\n  const groups = new Map<string, IndexDocEnrichmentTarget[]>()\n  for (const target of targets) {\n    const key = scopeGroupKey(target)\n    const bucket = groups.get(key)\n    if (bucket) bucket.push(target)\n    else groups.set(key, [target])\n  }\n\n  for (const enricher of [...enrichers]) {\n    for (const group of groups.values()) {\n      const { tenantId, organizationId } = group[0]\n      let result: Map<string, IndexDocEnrichment>\n      try {\n        const records = group.map((target) => ({ recordId: target.recordId, doc: target.doc }))\n        const returned = await enricher.enrich(records, { db, entityType, tenantId, organizationId })\n        if (!(returned instanceof Map)) {\n          throw new Error(`[internal] Index doc enricher \"${enricher.id}\" must return a Map keyed by record id`)\n        }\n        result = returned\n      } catch (error) {\n        nullOut(group, enricher.keys, baseKeys)\n        await reportEnricherFailure(db, {\n          enricher, entityType, tenantId, organizationId, error,\n          handler: 'query_index:doc-enricher',\n        })\n        continue\n      }\n\n      const collidingRecordIdsByKey = new Map<string, string[]>()\n      for (const target of group) {\n        const contribution = result.get(target.recordId)\n        const ownKeys = baseKeys.get(target.recordId)\n        for (const key of enricher.keys) {\n          if (ownKeys?.has(key)) {\n            const colliding = collidingRecordIdsByKey.get(key)\n            if (colliding) colliding.push(target.recordId)\n            else collidingRecordIdsByKey.set(key, [target.recordId])\n            continue\n          }\n          const value = contribution && Object.prototype.hasOwnProperty.call(contribution, key)\n            ? contribution[key]\n            : null\n          target.doc[key] = value === undefined ? null : value\n        }\n        if (contribution) {\n          const undeclared = Object.keys(contribution).filter((key) => !enricher.keys.includes(key))\n          if (undeclared.length) {\n            logger.warn('Index doc enricher returned undeclared keys; ignored', {\n              enricherId: enricher.id,\n              entityType,\n              recordId: target.recordId,\n              keys: undeclared,\n            })\n          }\n        }\n      }\n      for (const [key, recordIds] of collidingRecordIdsByKey) {\n        await reportEnricherFailure(db, {\n          enricher, entityType, tenantId, organizationId,\n          recordId: recordIds.length === 1 ? recordIds[0] : undefined,\n          error: new Error(`[internal] Index doc enricher \"${enricher.id}\" key \"${key}\" collides with a base document key of ${entityType} on ${recordIds.length} record(s)`),\n          handler: 'query_index:doc-enricher:collision',\n          details: {\n            collidingKey: key,\n            collidingRecordCount: recordIds.length,\n            sampleRecordIds: recordIds.slice(0, COLLISION_SAMPLE_SIZE),\n          },\n        })\n      }\n    }\n  }\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AAEpC,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAuDxE,MAAM,iCAAiC;AAEvC,MAAM,0BAA+C,oBAAI,IAAI;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQD,MAAM,+BAA+B;AAMrC,SAAS,mBAA0C;AACjD,QAAM,iBAAiB;AACvB,MAAI,CAAC,eAAe,4BAA4B,GAAG;AACjD,mBAAe,4BAA4B,IAAI,EAAE,cAAc,oBAAI,IAAI,EAAE;AAAA,EAC3E;AACA,SAAO,eAAe,4BAA4B;AACpD;AAEA,SAAS,iBAAiB,UAA4B,UAAmD;AACvG,MAAI,OAAO,SAAS,OAAO,YAAY,CAAC,SAAS,GAAG,KAAK,GAAG;AAC1D,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,MAAI,OAAO,SAAS,eAAe,YAAY,CAAC,SAAS,WAAW,SAAS,GAAG,GAAG;AACjF,UAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,sDAAsD;AAAA,EACrH;AACA,MAAI,OAAO,SAAS,WAAW,YAAY;AACzC,UAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,+BAA+B;AAAA,EAC9F;AACA,QAAM,OAAO,MAAM,KAAK,IAAI,IAAI,SAAS,QAAQ,CAAC,CAAC,CAAC;AACpD,MAAI,CAAC,KAAK,QAAQ;AAChB,UAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,iCAAiC;AAAA,EAChG;AACA,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,+BAA+B,KAAK,GAAG,GAAG;AAC7C,YAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,UAAU,GAAG,gBAAgB,8BAA8B,EAAE;AAAA,IAC5H;AACA,QAAI,wBAAwB,IAAI,GAAG,GAAG;AACpC,YAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,UAAU,GAAG,eAAe;AAAA,IAC3F;AACA,UAAM,QAAQ,SAAS,KAAK,CAAC,UAAU,MAAM,OAAO,SAAS,MAAM,MAAM,KAAK,SAAS,GAAG,CAAC;AAC3F,QAAI,OAAO;AACT,YAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,UAAU,GAAG,gCAAgC,MAAM,EAAE,SAAS,SAAS,UAAU,EAAE;AAAA,IAClJ;AAAA,EACF;AACA,SAAO;AACT;AAOO,SAAS,yBAAyB,UAAwC;AAC/E,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,WAAW,MAAM,aAAa,IAAI,SAAS,UAAU,KAAK,CAAC;AACjE,QAAM,OAAO,iBAAiB,UAAU,QAAQ;AAChD,QAAM,aAAiC,EAAE,GAAG,UAAU,KAAK;AAC3D,QAAM,OAAO,SAAS,OAAO,CAAC,UAAU,MAAM,OAAO,SAAS,EAAE;AAChE,OAAK,KAAK,UAAU;AACpB,QAAM,aAAa,IAAI,SAAS,YAAY,IAAI;AAChD,SAAO,MAAM;AACX,UAAM,UAAU,MAAM,aAAa,IAAI,SAAS,UAAU,KAAK,CAAC;AAChE,UAAM,YAAY,QAAQ,OAAO,CAAC,UAAU,UAAU,UAAU;AAChE,QAAI,UAAU,OAAQ,OAAM,aAAa,IAAI,SAAS,YAAY,SAAS;AAAA,QACtE,OAAM,aAAa,OAAO,SAAS,UAAU;AAAA,EACpD;AACF;AAEO,SAAS,qBAAqB,YAAiD;AACpF,SAAO,iBAAiB,EAAE,aAAa,IAAI,UAAU,KAAK,CAAC;AAC7D;AAEO,SAAS,qBAAqB,YAA6B;AAChE,UAAQ,iBAAiB,EAAE,aAAa,IAAI,UAAU,GAAG,UAAU,KAAK;AAC1E;AAEO,SAAS,sBAAsB,YAAuC,OAAwB;AACnG,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,YAAY,iBAAiB,EAAE,aAAa,IAAI,UAAU;AAChE,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,UAAU,KAAK,CAAC,UAAU,MAAM,KAAK,SAAS,KAAK,CAAC;AAC7D;AAEO,SAAS,yBAA+B;AAC7C,mBAAiB,EAAE,aAAa,MAAM;AACxC;AAEA,SAAS,cAAc,QAA0C;AAC/D,SAAO,GAAG,OAAO,YAAY,EAAE,IAAI,OAAO,kBAAkB,EAAE;AAChE;AAEA,eAAe,sBACb,IACA,OAUe;AACf,SAAO,MAAM,+DAA+D;AAAA,IAC1E,YAAY,MAAM,SAAS;AAAA,IAC3B,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,UAAU,MAAM,YAAY;AAAA,IAC5B,GAAG,MAAM;AAAA,IACT,KAAK,MAAM;AAAA,EACb,CAAC;AACD,sBAAoB,GAAG,YAAY,MAAM,OAAO;AAAA,IAC9C,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACD,QAAM;AAAA,IACJ,EAAE,GAAG;AAAA,IACL;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,MACb,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM,YAAY;AAAA,MAC5B,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,SAAS,EAAE,YAAY,MAAM,SAAS,IAAI,GAAG,MAAM,QAAQ;AAAA,IAC7D;AAAA,EACF,EAAE,MAAM,MAAM,MAAS;AACzB;AAEA,MAAM,wBAAwB;AAE9B,SAAS,QAAQ,SAA8C,MAAyB,UAA0C;AAChI,aAAW,UAAU,SAAS;AAC5B,UAAM,UAAU,SAAS,IAAI,OAAO,QAAQ;AAC5C,eAAW,OAAO,MAAM;AACtB,UAAI,SAAS,IAAI,GAAG,EAAG;AACvB,aAAO,IAAI,GAAG,IAAI;AAAA,IACpB;AAAA,EACF;AACF;AAOA,eAAsB,uBACpB,IACA,YACA,SACe;AACf,QAAM,YAAY,iBAAiB,EAAE,aAAa,IAAI,UAAU;AAChE,MAAI,CAAC,WAAW,UAAU,CAAC,QAAQ,OAAQ;AAE3C,QAAM,WAAW,oBAAI,IAAyB;AAC9C,aAAW,UAAU,QAAS,UAAS,IAAI,OAAO,UAAU,IAAI,IAAI,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC;AAE5F,QAAM,SAAS,oBAAI,IAAwC;AAC3D,aAAW,UAAU,SAAS;AAC5B,UAAM,MAAM,cAAc,MAAM;AAChC,UAAM,SAAS,OAAO,IAAI,GAAG;AAC7B,QAAI,OAAQ,QAAO,KAAK,MAAM;AAAA,QACzB,QAAO,IAAI,KAAK,CAAC,MAAM,CAAC;AAAA,EAC/B;AAEA,aAAW,YAAY,CAAC,GAAG,SAAS,GAAG;AACrC,eAAW,SAAS,OAAO,OAAO,GAAG;AACnC,YAAM,EAAE,UAAU,eAAe,IAAI,MAAM,CAAC;AAC5C,UAAI;AACJ,UAAI;AACF,cAAM,UAAU,MAAM,IAAI,CAAC,YAAY,EAAE,UAAU,OAAO,UAAU,KAAK,OAAO,IAAI,EAAE;AACtF,cAAM,WAAW,MAAM,SAAS,OAAO,SAAS,EAAE,IAAI,YAAY,UAAU,eAAe,CAAC;AAC5F,YAAI,EAAE,oBAAoB,MAAM;AAC9B,gBAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,wCAAwC;AAAA,QACvG;AACA,iBAAS;AAAA,MACX,SAAS,OAAO;AACd,gBAAQ,OAAO,SAAS,MAAM,QAAQ;AACtC,cAAM,sBAAsB,IAAI;AAAA,UAC9B;AAAA,UAAU;AAAA,UAAY;AAAA,UAAU;AAAA,UAAgB;AAAA,UAChD,SAAS;AAAA,QACX,CAAC;AACD;AAAA,MACF;AAEA,YAAM,0BAA0B,oBAAI,IAAsB;AAC1D,iBAAW,UAAU,OAAO;AAC1B,cAAM,eAAe,OAAO,IAAI,OAAO,QAAQ;AAC/C,cAAM,UAAU,SAAS,IAAI,OAAO,QAAQ;AAC5C,mBAAW,OAAO,SAAS,MAAM;AAC/B,cAAI,SAAS,IAAI,GAAG,GAAG;AACrB,kBAAM,YAAY,wBAAwB,IAAI,GAAG;AACjD,gBAAI,UAAW,WAAU,KAAK,OAAO,QAAQ;AAAA,gBACxC,yBAAwB,IAAI,KAAK,CAAC,OAAO,QAAQ,CAAC;AACvD;AAAA,UACF;AACA,gBAAM,QAAQ,gBAAgB,OAAO,UAAU,eAAe,KAAK,cAAc,GAAG,IAChF,aAAa,GAAG,IAChB;AACJ,iBAAO,IAAI,GAAG,IAAI,UAAU,SAAY,OAAO;AAAA,QACjD;AACA,YAAI,cAAc;AAChB,gBAAM,aAAa,OAAO,KAAK,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,GAAG,CAAC;AACzF,cAAI,WAAW,QAAQ;AACrB,mBAAO,KAAK,wDAAwD;AAAA,cAClE,YAAY,SAAS;AAAA,cACrB;AAAA,cACA,UAAU,OAAO;AAAA,cACjB,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF;AACA,iBAAW,CAAC,KAAK,SAAS,KAAK,yBAAyB;AACtD,cAAM,sBAAsB,IAAI;AAAA,UAC9B;AAAA,UAAU;AAAA,UAAY;AAAA,UAAU;AAAA,UAChC,UAAU,UAAU,WAAW,IAAI,UAAU,CAAC,IAAI;AAAA,UAClD,OAAO,IAAI,MAAM,kCAAkC,SAAS,EAAE,UAAU,GAAG,0CAA0C,UAAU,OAAO,UAAU,MAAM,YAAY;AAAA,UAClK,SAAS;AAAA,UACT,SAAS;AAAA,YACP,cAAc;AAAA,YACd,sBAAsB,UAAU;AAAA,YAChC,iBAAiB,UAAU,MAAM,GAAG,qBAAqB;AAAA,UAC3D;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/query_index/lib/document.js

@@ -2,6 +2,7 @@ import {
   isSearchFieldBlocklisted,
   resolveSearchConfig
 } from "@open-mercato/shared/lib/search/config";
+import { isIndexDocEnrichedKey } from "./doc-enrichers.js";
 const AGGREGATE_SEARCH_FIELD = "search_text";
 function normalizeScopeValue(value) {
   if (value === void 0 || value === null || value === "") return null;
@@ -21,6 +22,7 @@ function collectAggregateSearchValues(field, value, entityType, config) {
     return [];
   }
   if (isSearchFieldBlocklisted(field, entityType, config)) return [];
+  if (isIndexDocEnrichedKey(entityType, field)) return [];
   if (typeof value === "string") {
     const trimmed = value.trim();
     return trimmed.length > 0 ? [trimmed] : [];

package/dist/modules/query_index/lib/document.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/document.ts"],
-  "sourcesContent": ["import {\n  isSearchFieldBlocklisted,\n  resolveSearchConfig,\n  type SearchConfig,\n} from '@open-mercato/shared/lib/search/config'\n\nexport type IndexDocumentScope = {\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport type IndexCustomFieldValue = {\n  key: string\n  value: unknown\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport const AGGREGATE_SEARCH_FIELD = 'search_text'\n\n/**\n * Controls which fields may contribute text to the `search_text` aggregate.\n *\n * Both properties are optional so existing callers keep working unchanged: an\n * omitted `config` is resolved from the environment, and an omitted `entityType`\n * means only the global blocklist entries apply.\n */\nexport type AggregateSearchOptions = {\n  entityType?: string | null\n  config?: SearchConfig\n}\n\nfunction normalizeScopeValue(value: string | null | undefined): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return value\n}\n\nfunction isScopedValueVisible(\n  scopeValue: string | null,\n  fieldValue: string | null,\n): boolean {\n  if (scopeValue === null) return fieldValue === null\n  return fieldValue === null || fieldValue === scopeValue\n}\n\nfunction normalizeValue(value: unknown): unknown {\n  if (value === undefined) return null\n  return value\n}\n\nfunction collectAggregateSearchValues(\n  field: string,\n  value: unknown,\n  entityType: string | null,\n  config: SearchConfig,\n): string[] {\n  const lower = field.toLowerCase()\n  if (\n    lower === AGGREGATE_SEARCH_FIELD\n    || lower === 'id'\n    || lower.endsWith('_id')\n    || lower.endsWith('.id')\n    || lower.endsWith('_at')\n    || ['created_at', 'updated_at', 'deleted_at', 'tenant_id', 'organization_id'].includes(lower)\n  ) {\n    return []\n  }\n\n  if (isSearchFieldBlocklisted(field, entityType, config)) return []\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    return trimmed.length > 0 ? [trimmed] : []\n  }\n\n  if (Array.isArray(value)) {\n    return value\n      .filter((entry): entry is string => typeof entry === 'string')\n      .map((entry) => entry.trim())\n      .filter((entry) => entry.length > 0)\n  }\n\n  return []\n}\n\nexport function attachAggregateSearchField(\n  doc: Record<string, unknown>,\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const config = options.config ?? resolveSearchConfig()\n  const entityType = options.entityType ?? null\n  const parts: string[] = []\n  const seen = new Set<string>()\n\n  for (const [field, value] of Object.entries(doc)) {\n    const values = collectAggregateSearchValues(field, value, entityType, config)\n    for (const entry of values) {\n      const key = entry.toLowerCase()\n      if (seen.has(key)) continue\n      seen.add(key)\n      parts.push(entry)\n    }\n  }\n\n  if (parts.length > 0) {\n    doc[AGGREGATE_SEARCH_FIELD] = parts.join('\\n')\n  }\n\n  return doc\n}\n\n/**\n * Recomputes the aggregate on a shallow copy of `doc`.\n *\n * Search tokens are built from the *decrypted* index document, while the document\n * persisted in `entity_indexes` stays encrypted at rest. The aggregate composed during\n * document build therefore concatenates ciphertext for every field an encryption map\n * covers, and `decryptIndexDocForSearch` cannot repair it because `search_text` is on no\n * map (#5625). Token writers call this on the decrypted document so the aggregate is\n * tokenized from the same plaintext a user actually searches for; the copy keeps the\n * caller's stored document untouched.\n *\n * A pre-existing aggregate is blanked before recomposition rather than deleted: an empty\n * string yields no tokens, but it keeps the key on the document, and\n * `replaceSearchTokensForRecord` scopes its DELETE to the document's own field names. A\n * deleted key would drop `search_text` out of that scope and strand the ciphertext-derived\n * rows with no writer left to remove them.\n */\nexport function rebuildAggregateSearchField(\n  doc: Record<string, unknown>,\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const copy = { ...doc }\n  // `collectAggregateSearchValues` skips the aggregate's own key, so this blank is\n  // overwritten whenever anything survives the blocklist and stays blank otherwise.\n  if (AGGREGATE_SEARCH_FIELD in copy) copy[AGGREGATE_SEARCH_FIELD] = ''\n  return attachAggregateSearchField(copy, options)\n}\n\nexport function buildIndexDocument(\n  baseRow: Record<string, unknown>,\n  customFieldValues: Iterable<IndexCustomFieldValue> = [],\n  scope: IndexDocumentScope = {},\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const doc: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(baseRow)) {\n    doc[key] = value\n  }\n\n  const scopeOrg = normalizeScopeValue(scope.organizationId ?? null)\n  const scopeTenant = normalizeScopeValue(scope.tenantId ?? null)\n\n  const grouped = new Map<string, unknown[]>()\n  for (const field of customFieldValues) {\n    const org = normalizeScopeValue(field.organizationId ?? null)\n    const tenant = normalizeScopeValue(field.tenantId ?? null)\n\n    if (!isScopedValueVisible(scopeOrg, org)) continue\n    if (!isScopedValueVisible(scopeTenant, tenant)) continue\n\n    const bucketKey = `cf:${field.key}`\n    let bucket = grouped.get(bucketKey)\n    if (!bucket) {\n      bucket = []\n      grouped.set(bucketKey, bucket)\n    }\n\n    const { value } = field\n    if (Array.isArray(value)) {\n      for (const entry of value) bucket.push(normalizeValue(entry))\n    } else {\n      bucket.push(normalizeValue(value))\n    }\n  }\n\n  for (const [key, values] of grouped.entries()) {\n    if (values.length === 1) {\n      doc[key] = values[0]\n    } else if (values.length > 1) {\n      doc[key] = values\n    }\n  }\n\n  return attachAggregateSearchField(doc, options)\n}\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAcA,MAAM,yBAAyB;AActC,SAAS,oBAAoB,OAAiD;AAC5E,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,qBACP,YACA,YACS;AACT,MAAI,eAAe,KAAM,QAAO,eAAe;AAC/C,SAAO,eAAe,QAAQ,eAAe;AAC/C;AAEA,SAAS,eAAe,OAAyB;AAC/C,MAAI,UAAU,OAAW,QAAO;AAChC,SAAO;AACT;AAEA,SAAS,6BACP,OACA,OACA,YACA,QACU;AACV,QAAM,QAAQ,MAAM,YAAY;AAChC,MACE,UAAU,0BACP,UAAU,QACV,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,CAAC,cAAc,cAAc,cAAc,aAAa,iBAAiB,EAAE,SAAS,KAAK,GAC5F;AACA,WAAO,CAAC;AAAA,EACV;AAEA,MAAI,yBAAyB,OAAO,YAAY,MAAM,EAAG,QAAO,CAAC;AAEjE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,WAAO,QAAQ,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,EAC3C;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MACJ,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,EAC5D,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EACvC;AAEA,SAAO,CAAC;AACV;AAEO,SAAS,2BACd,KACA,UAAkC,CAAC,GACV;AACzB,QAAM,SAAS,QAAQ,UAAU,oBAAoB;AACrD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,oBAAI,IAAY;AAE7B,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAChD,UAAM,SAAS,6BAA6B,OAAO,OAAO,YAAY,MAAM;AAC5E,eAAW,SAAS,QAAQ;AAC1B,YAAM,MAAM,MAAM,YAAY;AAC9B,UAAI,KAAK,IAAI,GAAG,EAAG;AACnB,WAAK,IAAI,GAAG;AACZ,YAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,sBAAsB,IAAI,MAAM,KAAK,IAAI;AAAA,EAC/C;AAEA,SAAO;AACT;AAmBO,SAAS,4BACd,KACA,UAAkC,CAAC,GACV;AACzB,QAAM,OAAO,EAAE,GAAG,IAAI;AAGtB,MAAI,0BAA0B,KAAM,MAAK,sBAAsB,IAAI;AACnE,SAAO,2BAA2B,MAAM,OAAO;AACjD;AAEO,SAAS,mBACd,SACA,oBAAqD,CAAC,GACtD,QAA4B,CAAC,GAC7B,UAAkC,CAAC,GACV;AACzB,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,GAAG,IAAI;AAAA,EACb;AAEA,QAAM,WAAW,oBAAoB,MAAM,kBAAkB,IAAI;AACjE,QAAM,cAAc,oBAAoB,MAAM,YAAY,IAAI;AAE9D,QAAM,UAAU,oBAAI,IAAuB;AAC3C,aAAW,SAAS,mBAAmB;AACrC,UAAM,MAAM,oBAAoB,MAAM,kBAAkB,IAAI;AAC5D,UAAM,SAAS,oBAAoB,MAAM,YAAY,IAAI;AAEzD,QAAI,CAAC,qBAAqB,UAAU,GAAG,EAAG;AAC1C,QAAI,CAAC,qBAAqB,aAAa,MAAM,EAAG;AAEhD,UAAM,YAAY,MAAM,MAAM,GAAG;AACjC,QAAI,SAAS,QAAQ,IAAI,SAAS;AAClC,QAAI,CAAC,QAAQ;AACX,eAAS,CAAC;AACV,cAAQ,IAAI,WAAW,MAAM;AAAA,IAC/B;AAEA,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,iBAAW,SAAS,MAAO,QAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IAC9D,OAAO;AACL,aAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IACnC;AAAA,EACF;AAEA,aAAW,CAAC,KAAK,MAAM,KAAK,QAAQ,QAAQ,GAAG;AAC7C,QAAI,OAAO,WAAW,GAAG;AACvB,UAAI,GAAG,IAAI,OAAO,CAAC;AAAA,IACrB,WAAW,OAAO,SAAS,GAAG;AAC5B,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AAEA,SAAO,2BAA2B,KAAK,OAAO;AAChD;",
+  "sourcesContent": ["import {\n  isSearchFieldBlocklisted,\n  resolveSearchConfig,\n  type SearchConfig,\n} from '@open-mercato/shared/lib/search/config'\nimport { isIndexDocEnrichedKey } from './doc-enrichers'\n\nexport type IndexDocumentScope = {\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport type IndexCustomFieldValue = {\n  key: string\n  value: unknown\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport const AGGREGATE_SEARCH_FIELD = 'search_text'\n\n/**\n * Controls which fields may contribute text to the `search_text` aggregate.\n *\n * Both properties are optional so existing callers keep working unchanged: an\n * omitted `config` is resolved from the environment, and an omitted `entityType`\n * means only the global blocklist entries apply.\n */\nexport type AggregateSearchOptions = {\n  entityType?: string | null\n  config?: SearchConfig\n}\n\nfunction normalizeScopeValue(value: string | null | undefined): string | null {\n  if (value === undefined || value === null || value === '') return null\n  return value\n}\n\nfunction isScopedValueVisible(\n  scopeValue: string | null,\n  fieldValue: string | null,\n): boolean {\n  if (scopeValue === null) return fieldValue === null\n  return fieldValue === null || fieldValue === scopeValue\n}\n\nfunction normalizeValue(value: unknown): unknown {\n  if (value === undefined) return null\n  return value\n}\n\nfunction collectAggregateSearchValues(\n  field: string,\n  value: unknown,\n  entityType: string | null,\n  config: SearchConfig,\n): string[] {\n  const lower = field.toLowerCase()\n  if (\n    lower === AGGREGATE_SEARCH_FIELD\n    || lower === 'id'\n    || lower.endsWith('_id')\n    || lower.endsWith('.id')\n    || lower.endsWith('_at')\n    || ['created_at', 'updated_at', 'deleted_at', 'tenant_id', 'organization_id'].includes(lower)\n  ) {\n    return []\n  }\n\n  if (isSearchFieldBlocklisted(field, entityType, config)) return []\n  if (isIndexDocEnrichedKey(entityType, field)) return []\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim()\n    return trimmed.length > 0 ? [trimmed] : []\n  }\n\n  if (Array.isArray(value)) {\n    return value\n      .filter((entry): entry is string => typeof entry === 'string')\n      .map((entry) => entry.trim())\n      .filter((entry) => entry.length > 0)\n  }\n\n  return []\n}\n\nexport function attachAggregateSearchField(\n  doc: Record<string, unknown>,\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const config = options.config ?? resolveSearchConfig()\n  const entityType = options.entityType ?? null\n  const parts: string[] = []\n  const seen = new Set<string>()\n\n  for (const [field, value] of Object.entries(doc)) {\n    const values = collectAggregateSearchValues(field, value, entityType, config)\n    for (const entry of values) {\n      const key = entry.toLowerCase()\n      if (seen.has(key)) continue\n      seen.add(key)\n      parts.push(entry)\n    }\n  }\n\n  if (parts.length > 0) {\n    doc[AGGREGATE_SEARCH_FIELD] = parts.join('\\n')\n  }\n\n  return doc\n}\n\n/**\n * Recomputes the aggregate on a shallow copy of `doc`.\n *\n * Search tokens are built from the *decrypted* index document, while the document\n * persisted in `entity_indexes` stays encrypted at rest. The aggregate composed during\n * document build therefore concatenates ciphertext for every field an encryption map\n * covers, and `decryptIndexDocForSearch` cannot repair it because `search_text` is on no\n * map (#5625). Token writers call this on the decrypted document so the aggregate is\n * tokenized from the same plaintext a user actually searches for; the copy keeps the\n * caller's stored document untouched.\n *\n * A pre-existing aggregate is blanked before recomposition rather than deleted: an empty\n * string yields no tokens, but it keeps the key on the document, and\n * `replaceSearchTokensForRecord` scopes its DELETE to the document's own field names. A\n * deleted key would drop `search_text` out of that scope and strand the ciphertext-derived\n * rows with no writer left to remove them.\n */\nexport function rebuildAggregateSearchField(\n  doc: Record<string, unknown>,\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const copy = { ...doc }\n  // `collectAggregateSearchValues` skips the aggregate's own key, so this blank is\n  // overwritten whenever anything survives the blocklist and stays blank otherwise.\n  if (AGGREGATE_SEARCH_FIELD in copy) copy[AGGREGATE_SEARCH_FIELD] = ''\n  return attachAggregateSearchField(copy, options)\n}\n\nexport function buildIndexDocument(\n  baseRow: Record<string, unknown>,\n  customFieldValues: Iterable<IndexCustomFieldValue> = [],\n  scope: IndexDocumentScope = {},\n  options: AggregateSearchOptions = {},\n): Record<string, unknown> {\n  const doc: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(baseRow)) {\n    doc[key] = value\n  }\n\n  const scopeOrg = normalizeScopeValue(scope.organizationId ?? null)\n  const scopeTenant = normalizeScopeValue(scope.tenantId ?? null)\n\n  const grouped = new Map<string, unknown[]>()\n  for (const field of customFieldValues) {\n    const org = normalizeScopeValue(field.organizationId ?? null)\n    const tenant = normalizeScopeValue(field.tenantId ?? null)\n\n    if (!isScopedValueVisible(scopeOrg, org)) continue\n    if (!isScopedValueVisible(scopeTenant, tenant)) continue\n\n    const bucketKey = `cf:${field.key}`\n    let bucket = grouped.get(bucketKey)\n    if (!bucket) {\n      bucket = []\n      grouped.set(bucketKey, bucket)\n    }\n\n    const { value } = field\n    if (Array.isArray(value)) {\n      for (const entry of value) bucket.push(normalizeValue(entry))\n    } else {\n      bucket.push(normalizeValue(value))\n    }\n  }\n\n  for (const [key, values] of grouped.entries()) {\n    if (values.length === 1) {\n      doc[key] = values[0]\n    } else if (values.length > 1) {\n      doc[key] = values\n    }\n  }\n\n  return attachAggregateSearchField(doc, options)\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,6BAA6B;AAc/B,MAAM,yBAAyB;AActC,SAAS,oBAAoB,OAAiD;AAC5E,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,qBACP,YACA,YACS;AACT,MAAI,eAAe,KAAM,QAAO,eAAe;AAC/C,SAAO,eAAe,QAAQ,eAAe;AAC/C;AAEA,SAAS,eAAe,OAAyB;AAC/C,MAAI,UAAU,OAAW,QAAO;AAChC,SAAO;AACT;AAEA,SAAS,6BACP,OACA,OACA,YACA,QACU;AACV,QAAM,QAAQ,MAAM,YAAY;AAChC,MACE,UAAU,0BACP,UAAU,QACV,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,KAAK,KACpB,CAAC,cAAc,cAAc,cAAc,aAAa,iBAAiB,EAAE,SAAS,KAAK,GAC5F;AACA,WAAO,CAAC;AAAA,EACV;AAEA,MAAI,yBAAyB,OAAO,YAAY,MAAM,EAAG,QAAO,CAAC;AACjE,MAAI,sBAAsB,YAAY,KAAK,EAAG,QAAO,CAAC;AAEtD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,WAAO,QAAQ,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,EAC3C;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MACJ,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,EAC5D,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EACvC;AAEA,SAAO,CAAC;AACV;AAEO,SAAS,2BACd,KACA,UAAkC,CAAC,GACV;AACzB,QAAM,SAAS,QAAQ,UAAU,oBAAoB;AACrD,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,oBAAI,IAAY;AAE7B,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAChD,UAAM,SAAS,6BAA6B,OAAO,OAAO,YAAY,MAAM;AAC5E,eAAW,SAAS,QAAQ;AAC1B,YAAM,MAAM,MAAM,YAAY;AAC9B,UAAI,KAAK,IAAI,GAAG,EAAG;AACnB,WAAK,IAAI,GAAG;AACZ,YAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,sBAAsB,IAAI,MAAM,KAAK,IAAI;AAAA,EAC/C;AAEA,SAAO;AACT;AAmBO,SAAS,4BACd,KACA,UAAkC,CAAC,GACV;AACzB,QAAM,OAAO,EAAE,GAAG,IAAI;AAGtB,MAAI,0BAA0B,KAAM,MAAK,sBAAsB,IAAI;AACnE,SAAO,2BAA2B,MAAM,OAAO;AACjD;AAEO,SAAS,mBACd,SACA,oBAAqD,CAAC,GACtD,QAA4B,CAAC,GAC7B,UAAkC,CAAC,GACV;AACzB,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,GAAG,IAAI;AAAA,EACb;AAEA,QAAM,WAAW,oBAAoB,MAAM,kBAAkB,IAAI;AACjE,QAAM,cAAc,oBAAoB,MAAM,YAAY,IAAI;AAE9D,QAAM,UAAU,oBAAI,IAAuB;AAC3C,aAAW,SAAS,mBAAmB;AACrC,UAAM,MAAM,oBAAoB,MAAM,kBAAkB,IAAI;AAC5D,UAAM,SAAS,oBAAoB,MAAM,YAAY,IAAI;AAEzD,QAAI,CAAC,qBAAqB,UAAU,GAAG,EAAG;AAC1C,QAAI,CAAC,qBAAqB,aAAa,MAAM,EAAG;AAEhD,UAAM,YAAY,MAAM,MAAM,GAAG;AACjC,QAAI,SAAS,QAAQ,IAAI,SAAS;AAClC,QAAI,CAAC,QAAQ;AACX,eAAS,CAAC;AACV,cAAQ,IAAI,WAAW,MAAM;AAAA,IAC/B;AAEA,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,iBAAW,SAAS,MAAO,QAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IAC9D,OAAO;AACL,aAAO,KAAK,eAAe,KAAK,CAAC;AAAA,IACnC;AAAA,EACF;AAEA,aAAW,CAAC,KAAK,MAAM,KAAK,QAAQ,QAAQ,GAAG;AAC7C,QAAI,OAAO,WAAW,GAAG;AACvB,UAAI,GAAG,IAAI,OAAO,CAAC;AAAA,IACrB,WAAW,OAAO,SAAS,GAAG;AAC5B,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AAEA,SAAO,2BAA2B,KAAK,OAAO;AAChD;",
   "names": []
 }