@voltro/plugin-search 0.32.0 → 0.34.0

package/dist/index.js

@@ -1,9 +1,127 @@
-import { queryDescriptor as e, searchRpcClientImports as t } from "./rpc.js";
-import { Data as n, Effect as r } from "effect";
-import { definePlugin as i } from "@voltro/protocol";
-import { and as a, eq as o, id as s, integer as c, table as l, text as u, timestamp as d } from "@voltro/database";
-//#region src/backend.ts
-var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.isArray(e) ? e : [e], m = (e, t, n) => {
+import { a as e, i as t, n, r } from "./rpc-BQBNr0OU.js";
+import { Data as i, Duration as a, Effect as o, Schedule as s } from "effect";
+import { definePlugin as c, pluginInstanceName as l } from "@voltro/protocol";
+import { and as u, count as d, eq as f, id as p, integer as m, table as h, text as g, timestamp as _ } from "@voltro/database";
+//#region src/sanitize.ts
+var v = /^[A-Za-z_][A-Za-z0-9_.]*$/, y = (e) => v.test(e), ee = (e, t) => {
+	let n = t ? new Set(t) : void 0;
+	for (let [t, r] of e) {
+		if (!y(r)) return {
+			field: r,
+			where: t,
+			reason: "not-an-identifier"
+		};
+		if (n && !n.has(r)) return {
+			field: r,
+			where: t,
+			reason: "not-queryable"
+		};
+	}
+}, b = {
+	typesense: [
+		"per_page",
+		"page",
+		"offset",
+		"limit",
+		"sort_by",
+		"num_typos",
+		"typo_tokens_threshold",
+		"drop_tokens_threshold",
+		"prefix",
+		"prioritize_exact_match",
+		"highlight_start_tag",
+		"highlight_end_tag",
+		"highlight_affix_num_tokens",
+		"snippet_threshold",
+		"max_facet_values"
+	],
+	meilisearch: [
+		"limit",
+		"offset",
+		"page",
+		"hitsPerPage",
+		"sort",
+		"matchingStrategy",
+		"showRankingScore",
+		"rankingScoreThreshold",
+		"distinct",
+		"attributesToHighlight",
+		"highlightPreTag",
+		"highlightPostTag",
+		"attributesToCrop",
+		"cropLength",
+		"cropMarker",
+		"showMatchesPosition"
+	],
+	algolia: [
+		"hitsPerPage",
+		"page",
+		"offset",
+		"length",
+		"typoTolerance",
+		"minWordSizefor1Typo",
+		"minWordSizefor2Typos",
+		"ignorePlurals",
+		"removeStopWords",
+		"queryType",
+		"distinct",
+		"attributesToHighlight",
+		"attributesToSnippet",
+		"snippetEllipsisText",
+		"highlightPreTag",
+		"highlightPostTag"
+	]
+}, x = {
+	typesense: [
+		"filter_by",
+		"q",
+		"preset",
+		"pinned_hits",
+		"hidden_hits",
+		"enable_overrides",
+		"override_tags",
+		"include_fields",
+		"exclude_fields",
+		"vector_query"
+	],
+	meilisearch: [
+		"filter",
+		"q",
+		"attributesToSearchOn",
+		"attributesToRetrieve",
+		"hybrid",
+		"vector",
+		"federation"
+	],
+	algolia: [
+		"filters",
+		"facetFilters",
+		"numericFilters",
+		"tagFilters",
+		"optionalFilters",
+		"query",
+		"restrictSearchableAttributes",
+		"attributesToRetrieve",
+		"enableRules",
+		"ruleContexts",
+		"similarQuery",
+		"aroundLatLng",
+		"insideBoundingBox"
+	]
+}, S = (e, t, n) => {
+	if (!t) return {
+		params: {},
+		appAllowed: {},
+		dropped: []
+	};
+	let r = new Set(x[e]), i = new Set(b[e]), a = new Set(n ?? []), o = {}, s = {}, c = [];
+	for (let [e, n] of Object.entries(t)) r.has(e) ? c.push(e) : i.has(e) ? o[e] = n : a.has(e) ? s[e] = n : c.push(e);
+	return {
+		params: o,
+		appAllowed: s,
+		dropped: c
+	};
+}, C = (e) => b[e], w = class extends i.TaggedError("SearchBackendError") {}, T = (e) => Array.isArray(e) ? e : [e], E = (e, t, n) => {
 	if (Math.abs(e.length - t.length) > n) return !1;
 	if (e === t) return !0;
 	let r = t.length, i = Array.from({ length: r + 1 }, (e, t) => t);
@@ -19,7 +137,7 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		i = o;
 	}
 	return (i[r] ?? Infinity) <= n;
-}, h = (e) => e.length <= 4 ? 1 : 2, g = () => {
+}, D = (e) => e.length <= 4 ? 1 : 2, O = () => {
 	let e = /* @__PURE__ */ new Map(), t = (t) => {
 		let n = e.get(t);
 		return n || (n = /* @__PURE__ */ new Map(), e.set(t, n)), n;
@@ -28,13 +146,13 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		switch (t.op) {
 			case "eq": return String(n) === String(t.value);
 			case "neq": return String(n) !== String(t.value);
-			case "in": return p(t.value).some((e) => String(n) === String(e));
-			case "nin": return p(t.value).every((e) => String(n) !== String(e));
+			case "in": return T(t.value).some((e) => String(n) === String(e));
+			case "nin": return T(t.value).every((e) => String(n) !== String(e));
 			case "gt":
 			case "gte":
 			case "lt":
 			case "lte": {
-				let [e, r] = [_(n), _(t.value)];
+				let [e, r] = [k(n), k(t.value)];
 				return e === void 0 || r === void 0 ? !1 : t.op === "gt" ? e > r : t.op === "gte" ? e >= r : t.op === "lt" ? e < r : e <= r;
 			}
 		}
@@ -44,8 +162,8 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 			let e = r.toLowerCase();
 			if (e.includes(t)) return !0;
 			if (n !== void 0 && n !== 0) {
-				let r = n === "auto" ? h(t) : n;
-				for (let n of e.split(/\s+/)) if (m(n, t, r)) return !0;
+				let r = n === "auto" ? D(t) : n;
+				for (let n of e.split(/\s+/)) if (E(n, t, r)) return !0;
 			}
 		}
 		return !1;
@@ -56,6 +174,7 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		return s;
 	};
 	return {
+		engineKind: "memory",
 		upsert: async (e, n) => {
 			let r = t(e);
 			for (let e of n) r.set(e.id, e);
@@ -88,7 +207,7 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 			};
 		}
 	};
-}, _ = (e) => {
+}, k = (e) => {
 	if (typeof e == "number") return e;
 	if (typeof e == "boolean") return +!!e;
 	if (typeof e == "string") {
@@ -97,41 +216,58 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		let n = Date.parse(e);
 		return Number.isNaN(n) ? void 0 : n;
 	}
-}, v = async (e, t, n) => {
+}, A = async (e, t, n) => {
 	try {
 		return await n();
 	} catch {
-		throw new f({
+		throw new w({
 			engine: t,
 			op: "query",
 			message: `the '${t}' search backend requires the '${e}' optional dependency. Install it to enable it (e.g. \`npm i ${e}\`).`,
 			transient: !1
 		});
 	}
-}, y = (e) => {
-	let t = (e) => JSON.stringify(e);
+}, j = (e, t) => (n) => {
+	let { params: r, appAllowed: i, dropped: a } = S(e, n, t.allowEngineParams);
+	return a.length > 0 && t.onWarn?.("search dropped disallowed engineParams", {
+		engine: e,
+		keys: a
+	}), {
+		before: r,
+		after: i
+	};
+}, M = (e, t) => {
+	if (!y(t)) throw new w({
+		engine: e,
+		op: "query",
+		message: `filter field "${t}" is not a plain field path (^[A-Za-z_][A-Za-z0-9_.]*$)`,
+		transient: !1
+	});
+	return t;
+}, te = (e) => {
+	let t = (e) => JSON.stringify(e), n = M("typesense", e.field);
 	switch (e.op) {
-		case "eq": return `${e.field}:=${t(e.value)}`;
-		case "neq": return `${e.field}:!=${t(e.value)}`;
-		case "gt": return `${e.field}:>${t(e.value)}`;
-		case "gte": return `${e.field}:>=${t(e.value)}`;
-		case "lt": return `${e.field}:<${t(e.value)}`;
-		case "lte": return `${e.field}:<=${t(e.value)}`;
-		case "in": return `${e.field}:[${p(e.value).map(t).join(",")}]`;
-		case "nin": return `${e.field}:!=[${p(e.value).map(t).join(",")}]`;
+		case "eq": return `${n}:=${t(e.value)}`;
+		case "neq": return `${n}:!=${t(e.value)}`;
+		case "gt": return `${n}:>${t(e.value)}`;
+		case "gte": return `${n}:>=${t(e.value)}`;
+		case "lt": return `${n}:<${t(e.value)}`;
+		case "lte": return `${n}:<=${t(e.value)}`;
+		case "in": return `${n}:[${T(e.value).map(t).join(",")}]`;
+		case "nin": return `${n}:!=[${T(e.value).map(t).join(",")}]`;
 	}
-}, b = (e) => {
-	let t, n = async () => (t ||= v("typesense", "typesense", () => import("typesense")).then((t) => {
+}, ne = (e, t = {}) => {
+	let n = j("typesense", t), r, i = async () => (r ||= A("typesense", "typesense", () => import("typesense")).then((t) => {
 		let n = t.Client;
 		return new n({
 			nodes: [{ url: e.url ?? e.host ?? "http://localhost:8108" }],
 			apiKey: e.apiKey
 		});
-	}), t), r = (e) => e && e.length > 0 ? e.map(y).join(" && ") : void 0, i = async (e, t) => {
+	}), r), a = (e) => e && e.length > 0 ? e.map(te).join(" && ") : void 0, o = async (e, t) => {
 		try {
 			return await t();
 		} catch (t) {
-			throw t instanceof f ? t : new f({
+			throw t instanceof w ? t : new w({
 				engine: "typesense",
 				op: e,
 				message: String(t?.message ?? t),
@@ -140,32 +276,33 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		}
 	};
 	return {
-		upsert: (e, t) => i("upsert", async () => {
-			await (await n()).collections(e).documents().import(t, { action: "upsert" });
+		upsert: (e, t) => o("upsert", async () => {
+			await (await i()).collections(e).documents().import(t, { action: "upsert" });
 		}),
-		remove: (e, t) => i("remove", async () => {
-			await (await n()).collections(e).documents().delete({ filter_by: `id:[${t.map((e) => JSON.stringify(e)).join(",")}]` });
+		remove: (e, t) => o("remove", async () => {
+			await (await i()).collections(e).documents().delete({ filter_by: `id:[${t.map((e) => JSON.stringify(e)).join(",")}]` });
 		}),
-		query: (e, { q: t, limit: a, offset: o, filters: s, facets: c, highlight: l, fuzziness: u, engineParams: d }) => i("query", async () => {
-			let i = await n(), f = {
+		query: (e, { q: t, limit: r, offset: s, filters: c, facets: l, highlight: u, fuzziness: d, engineParams: f }) => o("query", async () => {
+			let o = await i(), p = n(f), m = {
+				...p.before,
 				q: t || "*",
 				query_by: "*",
-				per_page: a ?? 20,
-				...o ? { offset: o } : {},
-				...r(s) ? { filter_by: r(s) } : {},
-				...c && c.length > 0 ? { facet_by: c.join(",") } : {},
-				...l ? {
-					...l.fields && l.fields.length > 0 ? { highlight_fields: l.fields.join(",") } : { highlight_full_fields: "*" },
-					...l.preTag ? { highlight_start_tag: l.preTag } : {},
-					...l.postTag ? { highlight_end_tag: l.postTag } : {}
+				per_page: r ?? 20,
+				...s ? { offset: s } : {},
+				...a(c) ? { filter_by: a(c) } : {},
+				...l && l.length > 0 ? { facet_by: l.join(",") } : {},
+				...u ? {
+					...u.fields && u.fields.length > 0 ? { highlight_fields: u.fields.join(",") } : { highlight_full_fields: "*" },
+					...u.preTag ? { highlight_start_tag: u.preTag } : {},
+					...u.postTag ? { highlight_end_tag: u.postTag } : {}
 				} : {},
-				...u !== void 0 && u !== "auto" ? { num_typos: Math.min(2, Math.max(0, u)) } : {},
-				...d ?? {}
+				...d !== void 0 && d !== "auto" ? { num_typos: Math.min(2, Math.max(0, d)) } : {},
+				...p.after
 			};
-			return x(await i.collections(e).documents().search(f));
+			return re(await o.collections(e).documents().search(m));
 		})
 	};
-}, x = (e) => {
+}, re = (e) => {
 	let t = (e.hits ?? []).map((e) => {
 		let t = {};
 		for (let n of e.highlights ?? []) {
@@ -182,27 +319,27 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		hits: t,
 		facets: n
 	};
-}, S = (e) => {
-	let t = (e) => JSON.stringify(e);
+}, ie = (e) => {
+	let t = (e) => JSON.stringify(e), n = M("meilisearch", e.field);
 	switch (e.op) {
-		case "eq": return `${e.field} = ${t(e.value)}`;
-		case "neq": return `${e.field} != ${t(e.value)}`;
-		case "gt": return `${e.field} > ${t(e.value)}`;
-		case "gte": return `${e.field} >= ${t(e.value)}`;
-		case "lt": return `${e.field} < ${t(e.value)}`;
-		case "lte": return `${e.field} <= ${t(e.value)}`;
-		case "in": return `${e.field} IN [${p(e.value).map(t).join(", ")}]`;
-		case "nin": return `${e.field} NOT IN [${p(e.value).map(t).join(", ")}]`;
+		case "eq": return `${n} = ${t(e.value)}`;
+		case "neq": return `${n} != ${t(e.value)}`;
+		case "gt": return `${n} > ${t(e.value)}`;
+		case "gte": return `${n} >= ${t(e.value)}`;
+		case "lt": return `${n} < ${t(e.value)}`;
+		case "lte": return `${n} <= ${t(e.value)}`;
+		case "in": return `${n} IN [${T(e.value).map(t).join(", ")}]`;
+		case "nin": return `${n} NOT IN [${T(e.value).map(t).join(", ")}]`;
 	}
-}, C = (e) => {
-	let t, n = async () => (t ||= v("meilisearch", "meilisearch", () => import("meilisearch")).then((t) => new t.MeiliSearch({
+}, ae = (e, t = {}) => {
+	let n = j("meilisearch", t), r, i = async () => (r ||= A("meilisearch", "meilisearch", () => import("meilisearch")).then((t) => new t.MeiliSearch({
 		host: e.host ?? e.url ?? "http://localhost:7700",
 		apiKey: e.apiKey
-	})), t), r = (e) => e && e.length > 0 ? e.map(S) : void 0, i = async (e, t) => {
+	})), r), a = (e) => e && e.length > 0 ? e.map(ie) : void 0, o = async (e, t) => {
 		try {
 			return await t();
 		} catch (t) {
-			throw t instanceof f ? t : new f({
+			throw t instanceof w ? t : new w({
 				engine: "meilisearch",
 				op: e,
 				message: String(t?.message ?? t),
@@ -211,33 +348,34 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		}
 	};
 	return {
-		upsert: (e, t) => i("upsert", async () => {
-			await (await n()).index(e).addDocuments(t);
+		upsert: (e, t) => o("upsert", async () => {
+			await (await i()).index(e).addDocuments(t);
 		}),
-		remove: (e, t) => i("remove", async () => {
-			await (await n()).index(e).deleteDocuments([...t]);
+		remove: (e, t) => o("remove", async () => {
+			await (await i()).index(e).deleteDocuments([...t]);
 		}),
-		query: (e, { q: t, limit: a, offset: o, filters: s, facets: c, highlight: l, fuzziness: u, engineParams: d }) => i("query", async () => {
-			let i = {
-				limit: a ?? 20,
-				...o ? { offset: o } : {},
-				...r(s) ? { filter: r(s) } : {},
-				...c && c.length > 0 ? { facets: [...c] } : {},
-				...l ? {
-					attributesToHighlight: l.fields && l.fields.length > 0 ? [...l.fields] : ["*"],
-					...l.preTag ? { highlightPreTag: l.preTag } : {},
-					...l.postTag ? { highlightPostTag: l.postTag } : {}
+		query: (e, { q: t, limit: r, offset: s, filters: c, facets: l, highlight: u, fuzziness: d, engineParams: f }) => o("query", async () => {
+			let o = n(f), p = {
+				...o.before,
+				limit: r ?? 20,
+				...s ? { offset: s } : {},
+				...a(c) ? { filter: a(c) } : {},
+				...l && l.length > 0 ? { facets: [...l] } : {},
+				...u ? {
+					attributesToHighlight: u.fields && u.fields.length > 0 ? [...u.fields] : ["*"],
+					...u.preTag ? { highlightPreTag: u.preTag } : {},
+					...u.postTag ? { highlightPostTag: u.postTag } : {}
 				} : {},
-				...u === 0 ? {
+				...d === 0 ? {
 					rankingScoreThreshold: void 0,
 					typoTolerance: { enabled: !1 }
 				} : {},
-				...d ?? {}
+				...o.after
 			};
-			return w(await (await n()).index(e).search(t, i), l);
+			return oe(await (await i()).index(e).search(t, p), u);
 		})
 	};
-}, w = (e, t) => ({
+}, oe = (e, t) => ({
 	hits: e.hits.map((e) => {
 		let { _formatted: n, ...r } = e;
 		if (t && n) {
@@ -251,44 +389,56 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		return { doc: r };
 	}),
 	facets: e.facetDistribution ?? {}
-}), T = (e) => {
+}), se = (e) => String(e).replace(/^-/, "\\-"), ce = (e, t) => {
+	let n = typeof t == "boolean" ? +!!t : Number(t);
+	if (!Number.isFinite(n)) throw new w({
+		engine: "algolia",
+		op: "query",
+		message: `range filter on "${e}" needs a numeric value (got ${JSON.stringify(t)})`,
+		transient: !1
+	});
+	return n;
+}, le = (e) => {
 	let t = [], n = [];
-	for (let r of e ?? []) switch (r.op) {
-		case "eq":
-			t.push(`${r.field}:${r.value}`);
-			break;
-		case "neq":
-			t.push(`${r.field}:-${r.value}`);
-			break;
-		case "in":
-			t.push(p(r.value).map((e) => `${r.field}:${e}`));
-			break;
-		case "nin":
-			for (let e of p(r.value)) t.push(`${r.field}:-${e}`);
-			break;
-		case "gt":
-			n.push(`${r.field} > ${r.value}`);
-			break;
-		case "gte":
-			n.push(`${r.field} >= ${r.value}`);
-			break;
-		case "lt":
-			n.push(`${r.field} < ${r.value}`);
-			break;
-		case "lte":
-			n.push(`${r.field} <= ${r.value}`);
-			break;
+	for (let r of e ?? []) {
+		let e = M("algolia", r.field), i = (e) => se(e), a = (t) => ce(e, t);
+		switch (r.op) {
+			case "eq":
+				t.push(`${e}:${i(r.value)}`);
+				break;
+			case "neq":
+				t.push(`${e}:-${i(r.value)}`);
+				break;
+			case "in":
+				t.push(T(r.value).map((t) => `${e}:${i(t)}`));
+				break;
+			case "nin":
+				for (let n of T(r.value)) t.push(`${e}:-${i(n)}`);
+				break;
+			case "gt":
+				n.push(`${e} > ${a(r.value)}`);
+				break;
+			case "gte":
+				n.push(`${e} >= ${a(r.value)}`);
+				break;
+			case "lt":
+				n.push(`${e} < ${a(r.value)}`);
+				break;
+			case "lte":
+				n.push(`${e} <= ${a(r.value)}`);
+				break;
+		}
 	}
 	return {
 		facetFilters: t,
 		numericFilters: n
 	};
-}, E = (e) => {
-	let t, n = async () => (t ||= v("algoliasearch", "algolia", () => import("algoliasearch")).then((t) => t.algoliasearch(e.appId ?? "", e.apiKey)), t), r = async (e, t) => {
+}, N = (e, t = {}) => {
+	let n = j("algolia", t), r, i = async () => (r ||= A("algoliasearch", "algolia", () => import("algoliasearch")).then((t) => t.algoliasearch(e.appId ?? "", e.apiKey)), r), a = async (e, t) => {
 		try {
 			return await t();
 		} catch (t) {
-			throw t instanceof f ? t : new f({
+			throw t instanceof w ? t : new w({
 				engine: "algolia",
 				op: e,
 				message: String(t?.message ?? t),
@@ -297,8 +447,8 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		}
 	};
 	return {
-		upsert: (e, t) => r("upsert", async () => {
-			await (await n()).saveObjects({
+		upsert: (e, t) => a("upsert", async () => {
+			await (await i()).saveObjects({
 				indexName: e,
 				objects: t.map((e) => ({
 					...e,
@@ -306,37 +456,38 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 				}))
 			});
 		}),
-		remove: (e, t) => r("remove", async () => {
-			await (await n()).deleteObjects({
+		remove: (e, t) => a("remove", async () => {
+			await (await i()).deleteObjects({
 				indexName: e,
 				objectIDs: [...t]
 			});
 		}),
-		query: (e, { q: t, limit: i, offset: a, filters: o, facets: s, highlight: c, fuzziness: l, engineParams: u }) => r("query", async () => {
-			let { facetFilters: r, numericFilters: d } = T(o), f = {
+		query: (e, { q: t, limit: r, offset: o, filters: s, facets: c, highlight: l, fuzziness: u, engineParams: d }) => a("query", async () => {
+			let { facetFilters: a, numericFilters: f } = le(s), p = o ? {
+				offset: o,
+				length: r ?? 20
+			} : { hitsPerPage: r ?? 20 }, m = n(d), h = {
+				...m.before,
 				query: t,
-				...a ? {
-					offset: a,
-					length: i ?? 20
-				} : { hitsPerPage: i ?? 20 },
-				...r.length > 0 ? { facetFilters: r } : {},
-				...d.length > 0 ? { numericFilters: d } : {},
-				...s && s.length > 0 ? { facets: [...s] } : {},
-				...c ? {
-					...c.fields && c.fields.length > 0 ? { attributesToHighlight: [...c.fields] } : {},
-					...c.preTag ? { highlightPreTag: c.preTag } : {},
-					...c.postTag ? { highlightPostTag: c.postTag } : {}
+				...p,
+				...a.length > 0 ? { facetFilters: a } : {},
+				...f.length > 0 ? { numericFilters: f } : {},
+				...c && c.length > 0 ? { facets: [...c] } : {},
+				...l ? {
+					...l.fields && l.fields.length > 0 ? { attributesToHighlight: [...l.fields] } : {},
+					...l.preTag ? { highlightPreTag: l.preTag } : {},
+					...l.postTag ? { highlightPostTag: l.postTag } : {}
 				} : {},
-				...l === 0 ? { typoTolerance: !1 } : {},
-				...u ?? {}
+				...u === 0 ? { typoTolerance: !1 } : {},
+				...m.after
 			};
-			return D(await (await n()).searchSingleIndex({
+			return ue(await (await i()).searchSingleIndex({
 				indexName: e,
-				searchParams: f
-			}), c);
+				searchParams: h
+			}), l);
 		})
 	};
-}, D = (e, t) => ({
+}, ue = (e, t) => ({
 	hits: e.hits.map((e) => {
 		let { _highlightResult: n, ...r } = e;
 		if (t && n) {
@@ -350,31 +501,37 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		return { doc: r };
 	}),
 	facets: e.facets ?? {}
-}), O = "_voltro_search_stats", k = () => ({
+}), P = "_voltro_search_stats", F = () => ({
 	synced: 0,
 	removed: 0,
+	dropped: 0,
 	lastReindexAt: null,
 	lastReindexCount: 0
-}), A = l(O, {
-	id: s({ prefix: "sstat" }),
-	indexName: u().maxLength(191),
-	replicaId: u().maxLength(191),
-	synced: c().default(0),
-	removed: c().default(0),
-	lastReindexAt: d().nullable(),
-	lastReindexCount: c().default(0),
-	updatedAt: d()
-}).unique("bySearchStatsIndexReplica", ["indexName", "replicaId"]).index("bySearchStatsIndex", ["indexName"]), j = () => [A], M = () => {
-	let e = /* @__PURE__ */ new Map(), t = (t) => e.get(t) ?? k();
+}), I = h(P, {
+	id: p({ prefix: "sstat" }),
+	indexName: g().maxLength(191),
+	replicaId: g().maxLength(191),
+	synced: m().default(0),
+	removed: m().default(0),
+	dropped: m().default(0),
+	scope: g().maxLength(8).default("local"),
+	lastReindexAt: _().nullable(),
+	lastReindexCount: m().default(0),
+	updatedAt: _()
+}).unique("bySearchStatsIndexReplica", ["indexName", "replicaId"]).index("bySearchStatsIndex", ["indexName"]), L = () => [I], R = () => {
+	let e = /* @__PURE__ */ new Map(), t = (t) => e.get(t) ?? F();
 	return {
 		bump: async (n, r) => {
 			let i = t(n);
 			e.set(n, r === "synced" ? {
 				...i,
 				synced: i.synced + 1
-			} : {
+			} : r === "removed" ? {
 				...i,
 				removed: i.removed + 1
+			} : {
+				...i,
+				dropped: i.dropped + 1
 			});
 		},
 		recordReindex: async (n, r, i) => {
@@ -388,65 +545,69 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		},
 		get: async (e) => t(e)
 	};
-}, N = (e) => ({
-	table: O,
+}, z = (e) => ({
+	table: P,
 	predicate: e,
 	order: [],
 	take: void 0,
 	skip: void 0,
 	projection: void 0
-}), P = () => `sstat_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, F = () => process.env.VOLTRO_REPLICA_ID ?? process.env.HOSTNAME ?? process.env.POD_NAME ?? `pid_${process.pid}_${Math.random().toString(36).slice(2, 8)}`, I = 32, L = (e, t = F()) => {
-	let n = async (n) => (await e.query(N(a(o("indexName", n), o("replicaId", t)))))[0] ?? null, r = async (e) => {
+}), de = () => `sstat_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, fe = () => process.env.VOLTRO_REPLICA_ID ?? process.env.HOSTNAME ?? process.env.POD_NAME ?? `pid_${process.pid}_${Math.random().toString(36).slice(2, 8)}`, B = 32, V = (e, t = fe()) => {
+	let n = async (n) => (await e.query(z(u(f("indexName", n), f("replicaId", t)))))[0] ?? null, r = async (e) => {
 		try {
 			return await e();
 		} catch (e) {
-			throw e instanceof f ? e : new f({
+			throw e instanceof w ? e : new w({
 				engine: "stats",
 				op: "upsert",
 				message: String(e?.message ?? e),
 				transient: !0
 			});
 		}
-	}, i = (i, s, c) => r(async () => {
-		for (let r = 0; r < I; r++) {
+	}, i = (i, a, o, s) => r(async () => {
+		for (let r = 0; r < B; r++) {
 			r > 0 && await new Promise((e) => setTimeout(e, r));
-			let l = await n(i);
-			if (l) {
-				let t = Number(l.synced ?? 0), n = Number(l.removed ?? 0), r = {
+			let c = await n(i);
+			if (c) {
+				let t = Number(c.synced ?? 0), n = Number(c.removed ?? 0), r = Number(c.dropped ?? 0), i = {
 					synced: t,
 					removed: n,
-					lastReindexAt: l.lastReindexAt ? new Date(l.lastReindexAt).toISOString() : null,
-					lastReindexCount: Number(l.lastReindexCount ?? 0)
+					dropped: r,
+					lastReindexAt: c.lastReindexAt ? new Date(c.lastReindexAt).toISOString() : null,
+					lastReindexCount: Number(c.lastReindexCount ?? 0)
 				};
 				if (await e.updateMany("_voltro_search_stats", {
-					...s(r),
+					...o(i),
+					...a ? { scope: a } : {},
 					updatedAt: /* @__PURE__ */ new Date()
-				}, { where: a(o("id", String(l.id)), o("synced", t), o("removed", n)) }) === 1) return;
+				}, { where: u(f("id", String(c.id)), f("synced", t), f("removed", n), f("dropped", r)) }) === 1) return;
 			} else {
-				let n = P(), r = await e.insertIgnore(O, {
+				let n = de(), r = await e.insertIgnore(P, {
 					id: n,
 					indexName: i,
 					replicaId: t,
 					synced: 0,
 					removed: 0,
+					dropped: 0,
+					scope: a ?? "local",
 					lastReindexAt: null,
 					lastReindexCount: 0,
 					updatedAt: /* @__PURE__ */ new Date(),
-					...c
+					...s
 				}, { conflictColumns: ["indexName", "replicaId"] });
 				if (String(r.id) === n) return;
 			}
 		}
-		throw new f({
+		throw new w({
 			engine: "stats",
 			op: "upsert",
-			message: `search stats: contention on (${i}, ${t}) exceeded ${I} attempts`,
+			message: `search stats: contention on (${i}, ${t}) exceeded ${B} attempts`,
 			transient: !0
 		});
 	});
 	return {
-		bump: (e, t) => i(e, (e) => t === "synced" ? { synced: e.synced + 1 } : { removed: e.removed + 1 }, t === "synced" ? { synced: 1 } : { removed: 1 }),
-		recordReindex: (e, t, n) => i(e, (e) => ({
+		bump: (e, t, n) => i(e, n, (e) => t === "synced" ? { synced: e.synced + 1 } : t === "removed" ? { removed: e.removed + 1 } : { dropped: e.dropped + 1 }, t === "synced" ? { synced: 1 } : t === "removed" ? { removed: 1 } : { dropped: 1 }),
+		recordReindex: (e, t, n) => i(e, void 0, (e) => ({
 			synced: e.synced + t,
 			lastReindexAt: new Date(n),
 			lastReindexCount: t
@@ -456,37 +617,211 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 			lastReindexCount: t
 		}),
 		get: (t) => r(async () => {
-			let n = await e.query(N(o("indexName", t))), r = k(), i = 0, a = 0, s = null, c = 0;
+			let n = await e.query(z(f("indexName", t))), r = n.some((e) => e.scope === "fleet"), i = (e) => {
+				let t = 0;
+				for (let i of n) {
+					let n = Number(i[e] ?? 0);
+					t = r ? Math.max(t, n) : t + n;
+				}
+				return t;
+			}, a = null, o = 0;
 			for (let e of n) {
-				i += Number(e.synced ?? 0), a += Number(e.removed ?? 0);
 				let t = e.lastReindexAt ? new Date(e.lastReindexAt).toISOString() : null;
-				t && (s === null || t > s) && (s = t, c = Number(e.lastReindexCount ?? 0));
+				t && (a === null || t > a) && (a = t, o = Number(e.lastReindexCount ?? 0));
 			}
 			return {
-				...r,
-				synced: i,
-				removed: a,
-				lastReindexAt: s,
-				lastReindexCount: c
+				...F(),
+				synced: i("synced"),
+				removed: i("removed"),
+				dropped: i("dropped"),
+				lastReindexAt: a,
+				lastReindexCount: o
 			};
 		})
 	};
-}, R = (e) => {
-	if (e === void 0 || e === "memory") return g();
+}, H = (e) => e === void 0 || e === "memory" ? "memory" : typeof e.query == "function" ? e.engineKind === "memory" ? "memory" : "custom" : "vendor", U = class extends Error {
+	_tag = "SearchBackendNotDurable";
+	constructor(e) {
+		super(e), this.name = "SearchBackendNotDurable";
+	}
+}, pe = [
+	"plugin-search refuses to boot in production on the in-memory backend.",
+	"",
+	"The memory index lives in THIS process's heap. Two consequences, both silent:",
+	"  • every replica holds a different index, so a result depends on which replica served you;",
+	"  • the index starts EMPTY after every restart/deploy, and nothing re-seeds it automatically.",
+	"",
+	"Configure a durable engine in app.config.ts:",
+	"  searchPlugin({ backend: { engine: 'typesense',    url: …, apiKey: … }, indexes })",
+	"  searchPlugin({ backend: { engine: 'meilisearch',  url: …, apiKey: … }, indexes })",
+	"  searchPlugin({ backend: { engine: 'algolia',      appId: …, apiKey: … }, indexes })",
+	"or pass your own `SearchBackend` implementation.",
+	"",
+	"If this deployment really is ONE process that re-seeds its index at startup",
+	"(a `*.startup.tsx` calling `backfillIndex`), say so explicitly:",
+	"  searchPlugin({ singleProcessMemoryIndex: true, indexes })",
+	"That is a claim about your topology, not a mute switch: if a second replica",
+	"ever announces itself, the plugin logs that the claim was contradicted."
+].join("\n"), me = [
+	"plugin-search is running the in-memory backend in production under",
+	"`singleProcessMemoryIndex: true`. Holding you to the two conditions that makes true:",
+	"exactly ONE process serves search, and it re-seeds every index at startup",
+	"(`backfillIndex`) — the index is empty after each restart until it does."
+].join(" "), W = (e) => e.backendKind !== "memory" || !e.production ? { level: "quiet" } : e.singleProcessDeclared ? {
+	level: "note",
+	message: me
+} : {
+	level: "refuse",
+	message: pe
+}, G = (e, t) => t ? `search: replica "${e}" joined, but this app declared \`singleProcessMemoryIndex: true\`. That declaration is now false: each replica has its own in-memory index, so search results depend on which one serves the request. Configure a durable backend (typesense / meilisearch / algolia) or run one process.` : `search: replica "${e}" joined while search is served from an in-memory index. Each replica indexes only its OWN writes, so results depend on which replica answers. Configure a durable backend (typesense / meilisearch / algolia) before relying on these results.`, K = "_voltro_search_drift", q = h(K, {
+	id: p({ prefix: "sdrft" }),
+	indexName: g().maxLength(191),
+	sourceTable: g().maxLength(191),
+	rowId: g().maxLength(191),
+	docId: g().maxLength(191),
+	op: g().maxLength(16),
+	attempts: m().default(0),
+	lastError: g().maxLength(1e3),
+	firstFailedAt: _(),
+	lastFailedAt: _()
+}).unique("bySearchDriftIndexRow", ["indexName", "rowId"]).index("bySearchDriftIndex", ["indexName"]), J = (e, t) => ({
+	table: e,
+	predicate: f("id", t),
+	order: [],
+	take: 1,
+	skip: void 0,
+	projection: void 0
+}), Y = (e) => e ? new Date(e).toISOString() : (/* @__PURE__ */ new Date(0)).toISOString(), he = (e) => ({
+	indexName: String(e.indexName),
+	sourceTable: String(e.sourceTable),
+	rowId: String(e.rowId),
+	docId: String(e.docId),
+	op: e.op === "remove" ? "remove" : "upsert",
+	attempts: Number(e.attempts ?? 0),
+	lastError: String(e.lastError ?? ""),
+	firstFailedAt: Y(e.firstFailedAt),
+	lastFailedAt: Y(e.lastFailedAt)
+}), ge = () => {
+	let e = /* @__PURE__ */ new Map(), t = (e, t) => `${e}\u0000${t}`;
+	return {
+		record: async (n) => {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = e.get(t(n.indexName, n.rowId));
+			e.set(t(n.indexName, n.rowId), {
+				indexName: n.indexName,
+				sourceTable: n.sourceTable,
+				rowId: n.rowId,
+				docId: n.docId,
+				op: n.op,
+				attempts: (i?.attempts ?? 0) + 1,
+				lastError: n.error,
+				firstFailedAt: i?.firstFailedAt ?? r,
+				lastFailedAt: r
+			});
+		},
+		list: async (t) => [...e.values()].sort((e, t) => e.firstFailedAt.localeCompare(t.firstFailedAt)).slice(0, t),
+		summary: async (t) => {
+			let n = [...e.values()].filter((e) => e.indexName === t), r = null;
+			for (let e of n) (r === null || e.lastFailedAt > r) && (r = e.lastFailedAt);
+			return {
+				pending: n.length,
+				lastFailedAt: r
+			};
+		},
+		clear: async (n, r) => {
+			e.delete(t(n, r));
+		}
+	};
+}, _e = () => `sdrft_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, X = (e, t) => ({
+	table: K,
+	predicate: e,
+	order: [{
+		column: "firstFailedAt",
+		direction: "asc"
+	}],
+	take: t,
+	skip: void 0,
+	projection: void 0
+}), ve = (e) => ({
+	record: async (t) => {
+		let n = /* @__PURE__ */ new Date(), r = _e(), i = await e.insertIgnore(K, {
+			id: r,
+			indexName: t.indexName,
+			sourceTable: t.sourceTable,
+			rowId: t.rowId,
+			docId: t.docId,
+			op: t.op,
+			attempts: 1,
+			lastError: t.error.slice(0, 1e3),
+			firstFailedAt: n,
+			lastFailedAt: n
+		}, { conflictColumns: ["indexName", "rowId"] });
+		String(i.id) !== r && await e.updateMany(K, {
+			attempts: Number(i.attempts ?? 0) + 1,
+			op: t.op,
+			docId: t.docId,
+			lastError: t.error.slice(0, 1e3),
+			lastFailedAt: n
+		}, { where: f("id", String(i.id)) });
+	},
+	list: async (t) => (await e.query(X(void 0, t))).map(he),
+	summary: async (t) => {
+		let n = (await e.query({
+			...X(f("indexName", t), void 0),
+			order: [],
+			aggregations: [d("n")]
+		}))[0], r = Number(n?.n ?? n?.count ?? 0);
+		if (r === 0) return {
+			pending: 0,
+			lastFailedAt: null
+		};
+		let i = await e.query({
+			...X(f("indexName", t), 1),
+			order: [{
+				column: "lastFailedAt",
+				direction: "desc"
+			}]
+		});
+		return {
+			pending: r,
+			lastFailedAt: i[0] ? Y(i[0].lastFailedAt) : null
+		};
+	},
+	clear: async (t, n) => {
+		await e.deleteMany(K, { where: u(f("indexName", t), f("rowId", n)) });
+	}
+}), ye = () => [q], be = (e, t) => {
+	if (e === void 0 || e === "memory") return O();
 	if (typeof e.query == "function") return e;
-	let t = e;
-	return t.engine === "typesense" ? b(t) : t.engine === "meilisearch" ? C(t) : t.engine === "algolia" ? E(t) : g();
-}, z = async (e, t, n) => {
+	let n = e;
+	return n.engine === "typesense" ? ne(n, t) : n.engine === "meilisearch" ? ae(n, t) : n.engine === "algolia" ? N(n, t) : O();
+}, xe = async (e, t, n) => {
 	let r = n.map((e) => t.map(e));
 	return r.length > 0 && await e.upsert(t.index, r), r.length;
-}, B = async (e, t, n) => {
+}, Se = async (e, t, n) => {
 	if (n.op === "delete") {
 		let r = n.old?.id;
 		typeof r == "string" && await e.remove(t.index, [r]);
 		return;
 	}
 	n.new && await e.upsert(t.index, [t.map(n.new)]);
-}, V = (e) => {
+}, Z = {
+	retries: 5,
+	retryBaseDelayMs: 200,
+	retryMaxDelayMs: 1e4,
+	resyncIntervalMs: 6e4,
+	resyncBatchSize: 200
+}, Ce = (e) => ({
+	retries: Math.max(0, e?.retries ?? Z.retries),
+	retryBaseDelayMs: Math.max(1, e?.retryBaseDelayMs ?? Z.retryBaseDelayMs),
+	retryMaxDelayMs: Math.max(1, e?.retryMaxDelayMs ?? Z.retryMaxDelayMs),
+	resyncIntervalMs: Math.max(0, e?.resyncIntervalMs ?? Z.resyncIntervalMs),
+	resyncBatchSize: Math.max(1, e?.resyncBatchSize ?? Z.resyncBatchSize)
+}), we = (e) => e instanceof w ? e : new w({
+	engine: "unknown",
+	op: "upsert",
+	message: String(e?.message ?? e),
+	transient: !1
+}), Q = (e) => s.exponential(a.millis(e.retryBaseDelayMs), 2).pipe(s.either(s.spaced(a.millis(e.retryMaxDelayMs))), s.intersect(s.recurs(e.retries)), s.whileInput((e) => e.transient)), Te = (e) => {
 	if (!e || e === "memory" || typeof e.query == "function") return;
 	let t = e;
 	try {
@@ -494,131 +829,282 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 	} catch {
 		return;
 	}
-}, H = (e, t, n) => {
+}, Ee = (e, t, n) => {
 	let r = n ?? [];
 	return e ? t == null ? null : [...r, {
 		field: e,
 		op: "eq",
 		value: t
 	}] : r;
-}, U = (n) => {
-	let a = n.name ? `@voltro/plugin-search#${n.name}` : "@voltro/plugin-search", o = R(n.backend), s = /* @__PURE__ */ new Map();
-	for (let e of Object.values(n.indexes)) s.set(e.index, e);
-	let c = {
-		...e,
+}, De = (e) => [
+	...(e.filters ?? []).map((e) => ["filter", e.field]),
+	...(e.facets ?? []).map((e) => ["facet", e]),
+	...(e.highlight?.fields ?? []).map((e) => ["highlight", e])
+], $ = "@voltro/plugin-search", Oe = (i) => {
+	let a = l({
+		base: $,
+		alias: i.alias,
+		instance: i.name
+	}), s = () => void 0, u = () => void 0, d = Ce(i.sync), f = Q(d), p = be(i.backend, {
+		...i.allowedEngineParams ? { allowEngineParams: i.allowedEngineParams } : {},
+		onWarn: (e, t) => s(e, t)
+	}), m = /* @__PURE__ */ new Map();
+	for (let e of Object.values(i.indexes)) m.set(e.index, e);
+	let h = H(i.backend), g = i.singleProcessMemoryIndex === !0, _ = !1, v, y = {
+		...n,
 		description: "Full-text search an index (facets/highlight/fuzzy/filters), auto-scoped to the caller tenant.",
-		execute: (e, t) => r.promise(async () => {
-			let { index: n, q: r, limit: i, offset: a, filters: c, facets: l, highlight: u, fuzziness: d, engineParams: f } = e, p = s.get(n), m = t.request.subject.tenantId ?? null, h = H(p?.tenantField, m, c);
-			if (h === null) return {
+		execute: (n, r) => {
+			let { index: i, q: a, limit: s, offset: c, filters: l, facets: u, highlight: d, fuzziness: f, engineParams: h } = n, g = m.get(i);
+			if (!g) return o.fail(new e({ index: i }));
+			let _ = ee(De({
+				...l ? { filters: l } : {},
+				...u ? { facets: u } : {},
+				...d ? { highlight: d } : {}
+			}), g.queryableFields);
+			if (_) return o.fail(new t(_));
+			let v = r.request.subject.tenantId ?? null, y = Ee(g.tenantField, v, l);
+			if (y === null) return o.succeed({
 				hits: [],
 				facets: {}
+			});
+			let b = {
+				q: a,
+				...s === void 0 ? {} : { limit: s },
+				...c === void 0 ? {} : { offset: c },
+				...y.length > 0 ? { filters: y } : {},
+				...u && u.length > 0 ? { facets: u } : {},
+				...d ? { highlight: d } : {},
+				...f === void 0 ? {} : { fuzziness: f },
+				...h ? { engineParams: h } : {}
 			};
-			let g = {
-				q: r,
-				...i === void 0 ? {} : { limit: i },
-				...a === void 0 ? {} : { offset: a },
-				...h.length > 0 ? { filters: h } : {},
-				...l && l.length > 0 ? { facets: l } : {},
-				...u ? { highlight: u } : {},
-				...d === void 0 ? {} : { fuzziness: d },
-				...f ? { engineParams: f } : {}
-			};
-			return o.query(n, g);
-		})
-	}, l = V(n.backend), u = [
+			return o.promise(() => p.query(i, b));
+		}
+	}, b = Te(i.backend), x = [
 		"store:changes:read",
 		"store:write",
 		"inspect:read",
 		"inspect:write",
-		...l ? [`network:outbound:${l}`] : []
-	], d = () => void 0, f = M(), p, m = (e) => ({
+		...b ? [`network:outbound:${b}`] : []
+	], S = R(), C = ge(), w, T, E = (e, t, n) => o.tryPromise(() => S.bump(e, t, n)).pipe(o.catchAll((n) => o.sync(() => s("search stats bump failed", {
+		index: e,
+		kind: t,
+		error: String(n)
+	})))), D = async (e) => {
+		let t = await C.list(e), n = 0, r = 0;
+		for (let e of t) {
+			let t = m.get(e.indexName);
+			if (!t) {
+				await C.clear(e.indexName, e.rowId);
+				continue;
+			}
+			try {
+				if (!T) throw Error("data store not bound");
+				let r = (await T.query(J(e.sourceTable, e.rowId)))[0];
+				r ? await p.upsert(t.index, [t.map(r)]) : await p.remove(t.index, [e.docId]), await C.clear(e.indexName, e.rowId), n++;
+			} catch (t) {
+				r++, await C.record({
+					...e,
+					error: String(t?.message ?? t)
+				}).catch(() => void 0);
+			}
+		}
+		return {
+			scanned: t.length,
+			repaired: n,
+			failed: r
+		};
+	}, O = (e) => ({
 		kind: "json",
 		data: e
-	}), h = (e, t) => ({
+	}), k = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
 	});
-	return i({
+	return c({
 		name: a,
+		baseName: $,
 		description: "External search index sync (Typesense/Meilisearch/Algolia/memory) via the ChangeEvent tap + a tenant-scoped query route.",
-		permissions: u,
-		routes: [c],
-		rpcClientDescriptors: t,
-		inspectEndpoints: [{
-			method: "GET",
-			path: "/indexes",
-			description: "Configured indexes + durable, cross-replica sync stats.",
-			handler: () => r.promise(async () => {
-				let e = await Promise.all(Object.entries(n.indexes).map(async ([e, t]) => {
-					let n = await f.get(t.index);
-					return {
-						table: e,
-						index: t.index,
-						tenantField: t.tenantField ?? null,
-						...n
-					};
+		permissions: x,
+		routes: [y],
+		rpcClientDescriptors: r,
+		inspectEndpoints: [
+			{
+				method: "GET",
+				path: "/indexes",
+				description: "Configured indexes + durable, cross-replica sync stats + current index drift.",
+				handler: () => o.promise(async () => {
+					let e = await Promise.all(Object.entries(i.indexes).map(async ([e, t]) => {
+						let n = await S.get(t.index), r = await C.summary(t.index);
+						return {
+							table: e,
+							index: t.index,
+							tenantField: t.tenantField ?? null,
+							...n,
+							pendingDrift: r.pending,
+							lastDriftAt: r.lastFailedAt,
+							drifted: r.pending > 0
+						};
+					}));
+					return O({
+						indexes: e,
+						backend: typeof i.backend == "string" ? i.backend : i.backend ? "custom/vendor" : "memory",
+						durable: h !== "memory",
+						singleProcessMemoryIndex: g,
+						pendingDrift: e.reduce((e, t) => e + t.pendingDrift, 0),
+						sync: {
+							...d,
+							resyncArmed: w !== void 0
+						}
+					});
+				})
+			},
+			{
+				method: "GET",
+				path: "/drift",
+				description: "The changes that did NOT reach the engine, oldest first (the repair queue).",
+				handler: (e) => o.promise(async () => {
+					let t = Number(new URL(e.url, "http://localhost").searchParams.get("limit") ?? 100), n = await C.list(Number.isFinite(t) && t > 0 ? Math.min(t, 1e3) : 100);
+					return O({ entries: n });
+				})
+			},
+			{
+				method: "POST",
+				path: "/resync",
+				description: "Repair drifted rows now — re-reads each from the DB and re-applies it.",
+				handler: (e) => o.promise(async () => {
+					let t;
+					try {
+						t = JSON.parse(e.body || "{}");
+					} catch {
+						return k(400, "invalid JSON body");
+					}
+					if (!T) return k(503, "data store not bound yet");
+					try {
+						let e = await D(Math.min(Math.max(1, t.limit ?? d.resyncBatchSize), 1e3));
+						return O({
+							ok: !0,
+							...e
+						});
+					} catch (e) {
+						return k(500, e.message);
+					}
+				})
+			},
+			{
+				method: "POST",
+				path: "/reindex",
+				description: "Re-seed an index from the table's current rows.",
+				handler: (e) => o.promise(async () => {
+					let t;
+					try {
+						t = JSON.parse(e.body || "{}");
+					} catch {
+						return k(400, "invalid JSON body");
+					}
+					let n = t.table ? i.indexes[t.table] : void 0;
+					if (!t.table || !n) return k(404, `no index configured for table "${t.table ?? ""}"`);
+					if (!T) return k(503, "data store not bound yet");
+					try {
+						let e = await T.query({
+							table: t.table,
+							predicate: void 0,
+							order: [],
+							take: void 0,
+							skip: void 0,
+							projection: void 0
+						}), r = await xe(p, n, e);
+						return await S.recordReindex(n.index, r, (/* @__PURE__ */ new Date()).toISOString()), O({
+							ok: !0,
+							table: t.table,
+							index: n.index,
+							count: r
+						});
+					} catch (e) {
+						return k(500, e.message);
+					}
+				})
+			}
+		],
+		extendSchema: { tables: [...L(), ...ye()] },
+		bindDataStore: (e, t) => {
+			T = e, S = V(e), C = ve(e), h === "memory" && t?.membership !== void 0 && (v = t.membership.onChange((e) => {
+				e.kind === "left" || _ || t.instanceId !== void 0 && e.instanceId === t.instanceId || (_ = !0, s(G(e.instanceId, g), {
+					instanceId: t.instanceId ?? null,
+					peer: e.instanceId,
+					indexes: Object.keys(i.indexes)
 				}));
-				return m({
-					indexes: e,
-					backend: typeof n.backend == "string" ? n.backend : n.backend ? "custom/vendor" : "memory"
-				});
-			})
-		}, {
-			method: "POST",
-			path: "/reindex",
-			description: "Re-seed an index from the table's current rows.",
-			handler: (e) => r.promise(async () => {
-				let t;
+			})), !(d.resyncIntervalMs <= 0 || t?.scheduleCoordinated === void 0) && (w = t.scheduleCoordinated("search.resync", d.resyncIntervalMs, async () => {
 				try {
-					t = JSON.parse(e.body || "{}");
-				} catch {
-					return h(400, "invalid JSON body");
-				}
-				let r = t.table ? n.indexes[t.table] : void 0;
-				if (!t.table || !r) return h(404, `no index configured for table "${t.table ?? ""}"`);
-				if (!p) return h(503, "data store not bound yet");
-				try {
-					let e = await p.query({
-						table: t.table,
-						predicate: void 0,
-						order: [],
-						take: void 0,
-						skip: void 0,
-						projection: void 0
-					}), n = await z(o, r, e);
-					return await f.recordReindex(r.index, n, (/* @__PURE__ */ new Date()).toISOString()), m({
-						ok: !0,
-						table: t.table,
-						index: r.index,
-						count: n
-					});
+					let e = await D(d.resyncBatchSize);
+					return (e.repaired > 0 || e.failed > 0) && u("search: drift repair pass", e), { idle: e.scanned === 0 };
 				} catch (e) {
-					return h(500, e.message);
+					return s("search: drift repair pass failed", { error: String(e?.message ?? e) }), { idle: !1 };
 				}
-			})
-		}],
-		extendSchema: { tables: [...j()] },
-		bindDataStore: (e) => {
-			p = e, f = L(e);
+			}));
 		},
 		onChangeEvent: (e) => {
-			let t = n.indexes[e.table];
-			if (!t) return r.void;
-			let i = r.tryPromise(() => f.bump(t.index, e.op === "delete" ? "removed" : "synced")).pipe(r.catchAll((t) => r.sync(() => d("search stats bump failed", {
-				table: e.table,
-				op: e.op,
-				error: String(t)
-			})))), a = r.tryPromise(() => B(o, t, e));
-			return r.zipRight(i, a);
+			let t = i.indexes[e.table];
+			if (!t) return o.void;
+			let n = e.changeScope, r = e.changeScope === "fleet" || e.origin !== "injected", a = e.op === "delete" ? e.old : e.new, c = typeof a?.id == "string" ? a.id : "", l = e.op === "delete" ? "remove" : "upsert", u = () => {
+				if (e.op === "delete" || !e.new) return c;
+				try {
+					return String(t.map(e.new).id ?? c);
+				} catch {
+					return c;
+				}
+			};
+			return o.tryPromise({
+				try: () => Se(p, t, e),
+				catch: we
+			}).pipe(o.retry(f)).pipe(o.matchEffect({
+				onSuccess: () => r ? E(t.index, e.op === "delete" ? "removed" : "synced", n) : o.void,
+				onFailure: (r) => {
+					let i = {
+						table: e.table,
+						index: t.index,
+						op: e.op,
+						rowId: c,
+						transient: r.transient,
+						error: r.message
+					};
+					return c === "" ? o.sync(() => s("search: change not indexed and NOT recoverable (row has no id)", i)).pipe(o.zipRight(o.fail(r))) : o.tryPromise(() => C.record({
+						indexName: t.index,
+						sourceTable: e.table,
+						rowId: c,
+						docId: u(),
+						op: l,
+						error: r.message
+					})).pipe(o.matchEffect({
+						onSuccess: () => E(t.index, "dropped", n).pipe(o.zipRight(o.sync(() => s("search: index drift recorded — will be repaired from the database", i)))),
+						onFailure: (e) => o.sync(() => s("search: change LOST — engine failed and the drift ledger could not record it", {
+							...i,
+							ledgerError: String(e)
+						})).pipe(o.zipRight(o.fail(r)))
+					}));
+				}
+			}));
 		},
-		onActivate: (e) => r.sync(() => {
-			d = (t, n) => e.logger.warn(t, n), e.logger.info("search active", {
-				indexes: Object.keys(n.indexes),
-				backend: typeof n.backend == "string" ? n.backend : "custom/vendor"
+		onActivate: (e) => o.suspend(() => {
+			s = (t, n) => e.logger.warn(t, n), u = (t, n) => e.logger.info(t, n);
+			let t = W({
+				backendKind: h,
+				production: (e.env?.NODE_ENV ?? process.env.NODE_ENV) === "production",
+				singleProcessDeclared: g
 			});
+			return t.level === "refuse" ? o.fail(new U(t.message)) : (t.level === "note" && e.logger.info(t.message, { indexes: Object.keys(i.indexes) }), o.sync(() => {
+				e.logger.info("search active", {
+					indexes: Object.keys(i.indexes),
+					backend: typeof i.backend == "string" ? i.backend : "custom/vendor",
+					durable: h !== "memory",
+					sync: d
+				});
+			}));
+		}),
+		onDeactivate: () => o.sync(() => {
+			w?.stop(), w = void 0, v?.(), v = void 0, _ = !1;
 		})
 	});
 };
 //#endregion
-export { O as SEARCH_STATS_TABLE, f as SearchBackendError, E as algoliaBackend, B as applyChange, z as backfillIndex, L as dataStoreStatsStore, C as meilisearchBackend, g as memoryBackend, M as memoryStatsStore, H as scopeSearchFilters, U as searchPlugin, A as searchStatsTable, j as searchTables, b as typesenseBackend };
+export { v as FIELD_NAME_PATTERN, K as SEARCH_DRIFT_TABLE, P as SEARCH_STATS_TABLE, Z as SYNC_DEFAULTS, w as SearchBackendError, U as SearchBackendNotDurable, t as SearchFieldRejected, e as SearchIndexNotFound, N as algoliaBackend, C as allowedEngineParams, Se as applyChange, we as asBackendError, W as auditMemoryBackend, H as backendKindOf, xe as backfillIndex, ve as dataStoreDriftLedger, V as dataStoreStatsStore, J as driftSourceQuery, ye as driftTables, y as isSafeFieldName, ae as meilisearchBackend, O as memoryBackend, ge as memoryDriftLedger, R as memoryStatsStore, G as peerObservedWarning, Ce as resolveSyncOptions, S as sanitizeEngineParams, Ee as scopeSearchFilters, q as searchDriftTable, Oe as searchPlugin, I as searchStatsTable, L as searchTables, Q as syncRetrySchedule, ne as typesenseBackend };