@voltro/plugin-search 0.33.0 → 0.35.0

package/dist/index.js

@@ -1,9 +1,127 @@
-import { queryDescriptor as e, searchRpcClientImports as t } from "./rpc.js";
-import { Data as n, Effect as r } from "effect";
-import { definePlugin as i } from "@voltro/protocol";
-import { and as a, eq as o, id as s, integer as c, table as l, text as u, timestamp as d } from "@voltro/database";
-//#region src/backend.ts
-var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.isArray(e) ? e : [e], m = (e, t, n) => {
+import { a as e, i as t, n, r } from "./rpc-DaYt-dP6.js";
+import { Cause as i, Chunk as a, Data as o, Duration as s, Effect as c, Exit as l, Option as u, Schedule as d, Stream as f } from "effect";
+import { and as p, count as m, eq as h, id as g, integer as _, streamTable as ee, table as v, text as y, timestamp as b } from "@voltro/database";
+import { definePlugin as te, pluginInstanceName as ne } from "@voltro/protocol";
+//#region src/sanitize.ts
+var x = /^[A-Za-z_][A-Za-z0-9_.]*$/, S = (e) => x.test(e), re = (e, t) => {
+	let n = t ? new Set(t) : void 0;
+	for (let [t, r] of e) {
+		if (!S(r)) return {
+			field: r,
+			where: t,
+			reason: "not-an-identifier"
+		};
+		if (n && !n.has(r)) return {
+			field: r,
+			where: t,
+			reason: "not-queryable"
+		};
+	}
+}, C = {
+	typesense: [
+		"per_page",
+		"page",
+		"offset",
+		"limit",
+		"sort_by",
+		"num_typos",
+		"typo_tokens_threshold",
+		"drop_tokens_threshold",
+		"prefix",
+		"prioritize_exact_match",
+		"highlight_start_tag",
+		"highlight_end_tag",
+		"highlight_affix_num_tokens",
+		"snippet_threshold",
+		"max_facet_values"
+	],
+	meilisearch: [
+		"limit",
+		"offset",
+		"page",
+		"hitsPerPage",
+		"sort",
+		"matchingStrategy",
+		"showRankingScore",
+		"rankingScoreThreshold",
+		"distinct",
+		"attributesToHighlight",
+		"highlightPreTag",
+		"highlightPostTag",
+		"attributesToCrop",
+		"cropLength",
+		"cropMarker",
+		"showMatchesPosition"
+	],
+	algolia: [
+		"hitsPerPage",
+		"page",
+		"offset",
+		"length",
+		"typoTolerance",
+		"minWordSizefor1Typo",
+		"minWordSizefor2Typos",
+		"ignorePlurals",
+		"removeStopWords",
+		"queryType",
+		"distinct",
+		"attributesToHighlight",
+		"attributesToSnippet",
+		"snippetEllipsisText",
+		"highlightPreTag",
+		"highlightPostTag"
+	]
+}, ie = {
+	typesense: [
+		"filter_by",
+		"q",
+		"preset",
+		"pinned_hits",
+		"hidden_hits",
+		"enable_overrides",
+		"override_tags",
+		"include_fields",
+		"exclude_fields",
+		"vector_query"
+	],
+	meilisearch: [
+		"filter",
+		"q",
+		"attributesToSearchOn",
+		"attributesToRetrieve",
+		"hybrid",
+		"vector",
+		"federation"
+	],
+	algolia: [
+		"filters",
+		"facetFilters",
+		"numericFilters",
+		"tagFilters",
+		"optionalFilters",
+		"query",
+		"restrictSearchableAttributes",
+		"attributesToRetrieve",
+		"enableRules",
+		"ruleContexts",
+		"similarQuery",
+		"aroundLatLng",
+		"insideBoundingBox"
+	]
+}, w = (e, t, n) => {
+	if (!t) return {
+		params: {},
+		appAllowed: {},
+		dropped: []
+	};
+	let r = new Set(ie[e]), i = new Set(C[e]), a = new Set(n ?? []), o = {}, s = {}, c = [];
+	for (let [e, n] of Object.entries(t)) r.has(e) ? c.push(e) : i.has(e) ? o[e] = n : a.has(e) ? s[e] = n : c.push(e);
+	return {
+		params: o,
+		appAllowed: s,
+		dropped: c
+	};
+}, T = (e) => C[e], E = class extends o.TaggedError("SearchBackendError") {}, D = (e) => Array.isArray(e) ? e : [e], O = (e, t, n) => {
 	if (Math.abs(e.length - t.length) > n) return !1;
 	if (e === t) return !0;
 	let r = t.length, i = Array.from({ length: r + 1 }, (e, t) => t);
@@ -19,7 +137,7 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		i = o;
 	}
 	return (i[r] ?? Infinity) <= n;
-}, h = (e) => e.length <= 4 ? 1 : 2, g = () => {
+}, k = (e) => e.length <= 4 ? 1 : 2, A = () => {
 	let e = /* @__PURE__ */ new Map(), t = (t) => {
 		let n = e.get(t);
 		return n || (n = /* @__PURE__ */ new Map(), e.set(t, n)), n;
@@ -28,13 +146,13 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		switch (t.op) {
 			case "eq": return String(n) === String(t.value);
 			case "neq": return String(n) !== String(t.value);
-			case "in": return p(t.value).some((e) => String(n) === String(e));
-			case "nin": return p(t.value).every((e) => String(n) !== String(e));
+			case "in": return D(t.value).some((e) => String(n) === String(e));
+			case "nin": return D(t.value).every((e) => String(n) !== String(e));
 			case "gt":
 			case "gte":
 			case "lt":
 			case "lte": {
-				let [e, r] = [_(n), _(t.value)];
+				let [e, r] = [j(n), j(t.value)];
 				return e === void 0 || r === void 0 ? !1 : t.op === "gt" ? e > r : t.op === "gte" ? e >= r : t.op === "lt" ? e < r : e <= r;
 			}
 		}
@@ -44,8 +162,8 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 			let e = r.toLowerCase();
 			if (e.includes(t)) return !0;
 			if (n !== void 0 && n !== 0) {
-				let r = n === "auto" ? h(t) : n;
-				for (let n of e.split(/\s+/)) if (m(n, t, r)) return !0;
+				let r = n === "auto" ? k(t) : n;
+				for (let n of e.split(/\s+/)) if (O(n, t, r)) return !0;
 			}
 		}
 		return !1;
@@ -56,6 +174,7 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		return s;
 	};
 	return {
+		engineKind: "memory",
 		upsert: async (e, n) => {
 			let r = t(e);
 			for (let e of n) r.set(e.id, e);
@@ -88,7 +207,7 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 			};
 		}
 	};
-}, _ = (e) => {
+}, j = (e) => {
 	if (typeof e == "number") return e;
 	if (typeof e == "boolean") return +!!e;
 	if (typeof e == "string") {
@@ -97,41 +216,58 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		let n = Date.parse(e);
 		return Number.isNaN(n) ? void 0 : n;
 	}
-}, v = async (e, t, n) => {
+}, M = async (e, t, n) => {
 	try {
 		return await n();
 	} catch {
-		throw new f({
+		throw new E({
 			engine: t,
 			op: "query",
 			message: `the '${t}' search backend requires the '${e}' optional dependency. Install it to enable it (e.g. \`npm i ${e}\`).`,
 			transient: !1
 		});
 	}
-}, y = (e) => {
-	let t = (e) => JSON.stringify(e);
+}, N = (e, t) => (n) => {
+	let { params: r, appAllowed: i, dropped: a } = w(e, n, t.allowEngineParams);
+	return a.length > 0 && t.onWarn?.("search dropped disallowed engineParams", {
+		engine: e,
+		keys: a
+	}), {
+		before: r,
+		after: i
+	};
+}, P = (e, t) => {
+	if (!S(t)) throw new E({
+		engine: e,
+		op: "query",
+		message: `filter field "${t}" is not a plain field path (^[A-Za-z_][A-Za-z0-9_.]*$)`,
+		transient: !1
+	});
+	return t;
+}, ae = (e) => {
+	let t = (e) => JSON.stringify(e), n = P("typesense", e.field);
 	switch (e.op) {
-		case "eq": return `${e.field}:=${t(e.value)}`;
-		case "neq": return `${e.field}:!=${t(e.value)}`;
-		case "gt": return `${e.field}:>${t(e.value)}`;
-		case "gte": return `${e.field}:>=${t(e.value)}`;
-		case "lt": return `${e.field}:<${t(e.value)}`;
-		case "lte": return `${e.field}:<=${t(e.value)}`;
-		case "in": return `${e.field}:[${p(e.value).map(t).join(",")}]`;
-		case "nin": return `${e.field}:!=[${p(e.value).map(t).join(",")}]`;
+		case "eq": return `${n}:=${t(e.value)}`;
+		case "neq": return `${n}:!=${t(e.value)}`;
+		case "gt": return `${n}:>${t(e.value)}`;
+		case "gte": return `${n}:>=${t(e.value)}`;
+		case "lt": return `${n}:<${t(e.value)}`;
+		case "lte": return `${n}:<=${t(e.value)}`;
+		case "in": return `${n}:[${D(e.value).map(t).join(",")}]`;
+		case "nin": return `${n}:!=[${D(e.value).map(t).join(",")}]`;
 	}
-}, b = (e) => {
-	let t, n = async () => (t ||= v("typesense", "typesense", () => import("typesense")).then((t) => {
+}, oe = (e, t = {}) => {
+	let n = N("typesense", t), r, i = async () => (r ||= M("typesense", "typesense", () => import("typesense")).then((t) => {
 		let n = t.Client;
 		return new n({
 			nodes: [{ url: e.url ?? e.host ?? "http://localhost:8108" }],
 			apiKey: e.apiKey
 		});
-	}), t), r = (e) => e && e.length > 0 ? e.map(y).join(" && ") : void 0, i = async (e, t) => {
+	}), r), a = (e) => e && e.length > 0 ? e.map(ae).join(" && ") : void 0, o = async (e, t) => {
 		try {
 			return await t();
 		} catch (t) {
-			throw t instanceof f ? t : new f({
+			throw t instanceof E ? t : new E({
 				engine: "typesense",
 				op: e,
 				message: String(t?.message ?? t),
@@ -140,32 +276,33 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		}
 	};
 	return {
-		upsert: (e, t) => i("upsert", async () => {
-			await (await n()).collections(e).documents().import(t, { action: "upsert" });
+		upsert: (e, t) => o("upsert", async () => {
+			await (await i()).collections(e).documents().import(t, { action: "upsert" });
 		}),
-		remove: (e, t) => i("remove", async () => {
-			await (await n()).collections(e).documents().delete({ filter_by: `id:[${t.map((e) => JSON.stringify(e)).join(",")}]` });
+		remove: (e, t) => o("remove", async () => {
+			await (await i()).collections(e).documents().delete({ filter_by: `id:[${t.map((e) => JSON.stringify(e)).join(",")}]` });
 		}),
-		query: (e, { q: t, limit: a, offset: o, filters: s, facets: c, highlight: l, fuzziness: u, engineParams: d }) => i("query", async () => {
-			let i = await n(), f = {
+		query: (e, { q: t, limit: r, offset: s, filters: c, facets: l, highlight: u, fuzziness: d, engineParams: f }) => o("query", async () => {
+			let o = await i(), p = n(f), m = {
+				...p.before,
 				q: t || "*",
 				query_by: "*",
-				per_page: a ?? 20,
-				...o ? { offset: o } : {},
-				...r(s) ? { filter_by: r(s) } : {},
-				...c && c.length > 0 ? { facet_by: c.join(",") } : {},
-				...l ? {
-					...l.fields && l.fields.length > 0 ? { highlight_fields: l.fields.join(",") } : { highlight_full_fields: "*" },
-					...l.preTag ? { highlight_start_tag: l.preTag } : {},
-					...l.postTag ? { highlight_end_tag: l.postTag } : {}
+				per_page: r ?? 20,
+				...s ? { offset: s } : {},
+				...a(c) ? { filter_by: a(c) } : {},
+				...l && l.length > 0 ? { facet_by: l.join(",") } : {},
+				...u ? {
+					...u.fields && u.fields.length > 0 ? { highlight_fields: u.fields.join(",") } : { highlight_full_fields: "*" },
+					...u.preTag ? { highlight_start_tag: u.preTag } : {},
+					...u.postTag ? { highlight_end_tag: u.postTag } : {}
 				} : {},
-				...u !== void 0 && u !== "auto" ? { num_typos: Math.min(2, Math.max(0, u)) } : {},
-				...d ?? {}
+				...d !== void 0 && d !== "auto" ? { num_typos: Math.min(2, Math.max(0, d)) } : {},
+				...p.after
 			};
-			return x(await i.collections(e).documents().search(f));
+			return se(await o.collections(e).documents().search(m));
 		})
 	};
-}, x = (e) => {
+}, se = (e) => {
 	let t = (e.hits ?? []).map((e) => {
 		let t = {};
 		for (let n of e.highlights ?? []) {
@@ -182,27 +319,27 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		hits: t,
 		facets: n
 	};
-}, S = (e) => {
-	let t = (e) => JSON.stringify(e);
+}, ce = (e) => {
+	let t = (e) => JSON.stringify(e), n = P("meilisearch", e.field);
 	switch (e.op) {
-		case "eq": return `${e.field} = ${t(e.value)}`;
-		case "neq": return `${e.field} != ${t(e.value)}`;
-		case "gt": return `${e.field} > ${t(e.value)}`;
-		case "gte": return `${e.field} >= ${t(e.value)}`;
-		case "lt": return `${e.field} < ${t(e.value)}`;
-		case "lte": return `${e.field} <= ${t(e.value)}`;
-		case "in": return `${e.field} IN [${p(e.value).map(t).join(", ")}]`;
-		case "nin": return `${e.field} NOT IN [${p(e.value).map(t).join(", ")}]`;
+		case "eq": return `${n} = ${t(e.value)}`;
+		case "neq": return `${n} != ${t(e.value)}`;
+		case "gt": return `${n} > ${t(e.value)}`;
+		case "gte": return `${n} >= ${t(e.value)}`;
+		case "lt": return `${n} < ${t(e.value)}`;
+		case "lte": return `${n} <= ${t(e.value)}`;
+		case "in": return `${n} IN [${D(e.value).map(t).join(", ")}]`;
+		case "nin": return `${n} NOT IN [${D(e.value).map(t).join(", ")}]`;
 	}
-}, C = (e) => {
-	let t, n = async () => (t ||= v("meilisearch", "meilisearch", () => import("meilisearch")).then((t) => new t.MeiliSearch({
+}, F = (e, t = {}) => {
+	let n = N("meilisearch", t), r, i = async () => (r ||= M("meilisearch", "meilisearch", () => import("meilisearch")).then((t) => new t.MeiliSearch({
 		host: e.host ?? e.url ?? "http://localhost:7700",
 		apiKey: e.apiKey
-	})), t), r = (e) => e && e.length > 0 ? e.map(S) : void 0, i = async (e, t) => {
+	})), r), a = (e) => e && e.length > 0 ? e.map(ce) : void 0, o = async (e, t) => {
 		try {
 			return await t();
 		} catch (t) {
-			throw t instanceof f ? t : new f({
+			throw t instanceof E ? t : new E({
 				engine: "meilisearch",
 				op: e,
 				message: String(t?.message ?? t),
@@ -211,33 +348,34 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		}
 	};
 	return {
-		upsert: (e, t) => i("upsert", async () => {
-			await (await n()).index(e).addDocuments(t);
+		upsert: (e, t) => o("upsert", async () => {
+			await (await i()).index(e).addDocuments(t);
 		}),
-		remove: (e, t) => i("remove", async () => {
-			await (await n()).index(e).deleteDocuments([...t]);
+		remove: (e, t) => o("remove", async () => {
+			await (await i()).index(e).deleteDocuments([...t]);
 		}),
-		query: (e, { q: t, limit: a, offset: o, filters: s, facets: c, highlight: l, fuzziness: u, engineParams: d }) => i("query", async () => {
-			let i = {
-				limit: a ?? 20,
-				...o ? { offset: o } : {},
-				...r(s) ? { filter: r(s) } : {},
-				...c && c.length > 0 ? { facets: [...c] } : {},
-				...l ? {
-					attributesToHighlight: l.fields && l.fields.length > 0 ? [...l.fields] : ["*"],
-					...l.preTag ? { highlightPreTag: l.preTag } : {},
-					...l.postTag ? { highlightPostTag: l.postTag } : {}
+		query: (e, { q: t, limit: r, offset: s, filters: c, facets: l, highlight: u, fuzziness: d, engineParams: f }) => o("query", async () => {
+			let o = n(f), p = {
+				...o.before,
+				limit: r ?? 20,
+				...s ? { offset: s } : {},
+				...a(c) ? { filter: a(c) } : {},
+				...l && l.length > 0 ? { facets: [...l] } : {},
+				...u ? {
+					attributesToHighlight: u.fields && u.fields.length > 0 ? [...u.fields] : ["*"],
+					...u.preTag ? { highlightPreTag: u.preTag } : {},
+					...u.postTag ? { highlightPostTag: u.postTag } : {}
 				} : {},
-				...u === 0 ? {
+				...d === 0 ? {
 					rankingScoreThreshold: void 0,
 					typoTolerance: { enabled: !1 }
 				} : {},
-				...d ?? {}
+				...o.after
 			};
-			return w(await (await n()).index(e).search(t, i), l);
+			return le(await (await i()).index(e).search(t, p), u);
 		})
 	};
-}, w = (e, t) => ({
+}, le = (e, t) => ({
 	hits: e.hits.map((e) => {
 		let { _formatted: n, ...r } = e;
 		if (t && n) {
@@ -251,44 +389,56 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		return { doc: r };
 	}),
 	facets: e.facetDistribution ?? {}
-}), T = (e) => {
+}), ue = (e) => String(e).replace(/^-/, "\\-"), de = (e, t) => {
+	let n = typeof t == "boolean" ? +!!t : Number(t);
+	if (!Number.isFinite(n)) throw new E({
+		engine: "algolia",
+		op: "query",
+		message: `range filter on "${e}" needs a numeric value (got ${JSON.stringify(t)})`,
+		transient: !1
+	});
+	return n;
+}, fe = (e) => {
 	let t = [], n = [];
-	for (let r of e ?? []) switch (r.op) {
-		case "eq":
-			t.push(`${r.field}:${r.value}`);
-			break;
-		case "neq":
-			t.push(`${r.field}:-${r.value}`);
-			break;
-		case "in":
-			t.push(p(r.value).map((e) => `${r.field}:${e}`));
-			break;
-		case "nin":
-			for (let e of p(r.value)) t.push(`${r.field}:-${e}`);
-			break;
-		case "gt":
-			n.push(`${r.field} > ${r.value}`);
-			break;
-		case "gte":
-			n.push(`${r.field} >= ${r.value}`);
-			break;
-		case "lt":
-			n.push(`${r.field} < ${r.value}`);
-			break;
-		case "lte":
-			n.push(`${r.field} <= ${r.value}`);
-			break;
+	for (let r of e ?? []) {
+		let e = P("algolia", r.field), i = (e) => ue(e), a = (t) => de(e, t);
+		switch (r.op) {
+			case "eq":
+				t.push(`${e}:${i(r.value)}`);
+				break;
+			case "neq":
+				t.push(`${e}:-${i(r.value)}`);
+				break;
+			case "in":
+				t.push(D(r.value).map((t) => `${e}:${i(t)}`));
+				break;
+			case "nin":
+				for (let n of D(r.value)) t.push(`${e}:-${i(n)}`);
+				break;
+			case "gt":
+				n.push(`${e} > ${a(r.value)}`);
+				break;
+			case "gte":
+				n.push(`${e} >= ${a(r.value)}`);
+				break;
+			case "lt":
+				n.push(`${e} < ${a(r.value)}`);
+				break;
+			case "lte":
+				n.push(`${e} <= ${a(r.value)}`);
+				break;
+		}
 	}
 	return {
 		facetFilters: t,
 		numericFilters: n
 	};
-}, E = (e) => {
-	let t, n = async () => (t ||= v("algoliasearch", "algolia", () => import("algoliasearch")).then((t) => t.algoliasearch(e.appId ?? "", e.apiKey)), t), r = async (e, t) => {
+}, I = (e, t = {}) => {
+	let n = N("algolia", t), r, i = async () => (r ||= M("algoliasearch", "algolia", () => import("algoliasearch")).then((t) => t.algoliasearch(e.appId ?? "", e.apiKey)), r), a = async (e, t) => {
 		try {
 			return await t();
 		} catch (t) {
-			throw t instanceof f ? t : new f({
+			throw t instanceof E ? t : new E({
 				engine: "algolia",
 				op: e,
 				message: String(t?.message ?? t),
@@ -297,8 +447,8 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		}
 	};
 	return {
-		upsert: (e, t) => r("upsert", async () => {
-			await (await n()).saveObjects({
+		upsert: (e, t) => a("upsert", async () => {
+			await (await i()).saveObjects({
 				indexName: e,
 				objects: t.map((e) => ({
 					...e,
@@ -306,37 +456,38 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 				}))
 			});
 		}),
-		remove: (e, t) => r("remove", async () => {
-			await (await n()).deleteObjects({
+		remove: (e, t) => a("remove", async () => {
+			await (await i()).deleteObjects({
 				indexName: e,
 				objectIDs: [...t]
 			});
 		}),
-		query: (e, { q: t, limit: i, offset: a, filters: o, facets: s, highlight: c, fuzziness: l, engineParams: u }) => r("query", async () => {
-			let { facetFilters: r, numericFilters: d } = T(o), f = {
+		query: (e, { q: t, limit: r, offset: o, filters: s, facets: c, highlight: l, fuzziness: u, engineParams: d }) => a("query", async () => {
+			let { facetFilters: a, numericFilters: f } = fe(s), p = o ? {
+				offset: o,
+				length: r ?? 20
+			} : { hitsPerPage: r ?? 20 }, m = n(d), h = {
+				...m.before,
 				query: t,
-				...a ? {
-					offset: a,
-					length: i ?? 20
-				} : { hitsPerPage: i ?? 20 },
-				...r.length > 0 ? { facetFilters: r } : {},
-				...d.length > 0 ? { numericFilters: d } : {},
-				...s && s.length > 0 ? { facets: [...s] } : {},
-				...c ? {
-					...c.fields && c.fields.length > 0 ? { attributesToHighlight: [...c.fields] } : {},
-					...c.preTag ? { highlightPreTag: c.preTag } : {},
-					...c.postTag ? { highlightPostTag: c.postTag } : {}
+				...p,
+				...a.length > 0 ? { facetFilters: a } : {},
+				...f.length > 0 ? { numericFilters: f } : {},
+				...c && c.length > 0 ? { facets: [...c] } : {},
+				...l ? {
+					...l.fields && l.fields.length > 0 ? { attributesToHighlight: [...l.fields] } : {},
+					...l.preTag ? { highlightPreTag: l.preTag } : {},
+					...l.postTag ? { highlightPostTag: l.postTag } : {}
 				} : {},
-				...l === 0 ? { typoTolerance: !1 } : {},
-				...u ?? {}
+				...u === 0 ? { typoTolerance: !1 } : {},
+				...m.after
 			};
-			return D(await (await n()).searchSingleIndex({
+			return pe(await (await i()).searchSingleIndex({
 				indexName: e,
-				searchParams: f
-			}), c);
+				searchParams: h
+			}), l);
 		})
 	};
-}, D = (e, t) => ({
+}, pe = (e, t) => ({
 	hits: e.hits.map((e) => {
 		let { _highlightResult: n, ...r } = e;
 		if (t && n) {
@@ -350,31 +501,46 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		return { doc: r };
 	}),
 	facets: e.facets ?? {}
-}), O = "_voltro_search_stats", k = () => ({
+}), L = "_voltro_search_stats", R = () => ({
 	synced: 0,
 	removed: 0,
+	dropped: 0,
 	lastReindexAt: null,
 	lastReindexCount: 0
-}), A = l(O, {
-	id: s({ prefix: "sstat" }),
-	indexName: u().maxLength(191),
-	replicaId: u().maxLength(191),
-	synced: c().default(0),
-	removed: c().default(0),
-	lastReindexAt: d().nullable(),
-	lastReindexCount: c().default(0),
-	updatedAt: d()
-}).unique("bySearchStatsIndexReplica", ["indexName", "replicaId"]).index("bySearchStatsIndex", ["indexName"]), j = () => [A], M = () => {
-	let e = /* @__PURE__ */ new Map(), t = (t) => e.get(t) ?? k();
+}), z = v(L, {
+	id: g({ prefix: "sstat" }),
+	indexName: y().maxLength(191),
+	replicaId: y().maxLength(191),
+	synced: _().default(0),
+	removed: _().default(0),
+	dropped: _().default(0),
+	scope: y().maxLength(8).default("local"),
+	lastReindexAt: b().nullable(),
+	lastReindexCount: _().default(0),
+	updatedAt: b()
+}).unique("bySearchStatsIndexReplica", ["indexName", "replicaId"]).index("bySearchStatsIndex", ["indexName"]), B = () => [z], V = () => {
+	let e = /* @__PURE__ */ new Map(), t = (t) => e.get(t) ?? R();
 	return {
 		bump: async (n, r) => {
 			let i = t(n);
 			e.set(n, r === "synced" ? {
 				...i,
 				synced: i.synced + 1
-			} : {
+			} : r === "removed" ? {
 				...i,
 				removed: i.removed + 1
+			} : {
+				...i,
+				dropped: i.dropped + 1
+			});
+		},
+		add: async (n, r) => {
+			let i = t(n);
+			e.set(n, {
+				...i,
+				synced: i.synced + r.synced,
+				removed: i.removed + r.removed,
+				dropped: i.dropped + r.dropped
 			});
 		},
 		recordReindex: async (n, r, i) => {
@@ -388,65 +554,78 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 		},
 		get: async (e) => t(e)
 	};
-}, N = (e) => ({
-	table: O,
+}, H = (e) => ({
+	table: L,
 	predicate: e,
 	order: [],
 	take: void 0,
 	skip: void 0,
 	projection: void 0
-}), P = () => `sstat_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, F = () => process.env.VOLTRO_REPLICA_ID ?? process.env.HOSTNAME ?? process.env.POD_NAME ?? `pid_${process.pid}_${Math.random().toString(36).slice(2, 8)}`, I = 32, L = (e, t = F()) => {
-	let n = async (n) => (await e.query(N(a(o("indexName", n), o("replicaId", t)))))[0] ?? null, r = async (e) => {
+}), me = () => `sstat_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, he = () => process.env.VOLTRO_REPLICA_ID ?? process.env.HOSTNAME ?? process.env.POD_NAME ?? `pid_${process.pid}_${Math.random().toString(36).slice(2, 8)}`, U = 32, W = (e, t = he()) => {
+	let n = async (n) => (await e.query(H(p(h("indexName", n), h("replicaId", t)))))[0] ?? null, r = async (e) => {
 		try {
 			return await e();
 		} catch (e) {
-			throw e instanceof f ? e : new f({
+			throw e instanceof E ? e : new E({
 				engine: "stats",
 				op: "upsert",
 				message: String(e?.message ?? e),
 				transient: !0
 			});
 		}
-	}, i = (i, s, c) => r(async () => {
-		for (let r = 0; r < I; r++) {
+	}, i = (i, a, o, s) => r(async () => {
+		for (let r = 0; r < U; r++) {
 			r > 0 && await new Promise((e) => setTimeout(e, r));
-			let l = await n(i);
-			if (l) {
-				let t = Number(l.synced ?? 0), n = Number(l.removed ?? 0), r = {
+			let c = await n(i);
+			if (c) {
+				let t = Number(c.synced ?? 0), n = Number(c.removed ?? 0), r = Number(c.dropped ?? 0), i = {
 					synced: t,
 					removed: n,
-					lastReindexAt: l.lastReindexAt ? new Date(l.lastReindexAt).toISOString() : null,
-					lastReindexCount: Number(l.lastReindexCount ?? 0)
+					dropped: r,
+					lastReindexAt: c.lastReindexAt ? new Date(c.lastReindexAt).toISOString() : null,
+					lastReindexCount: Number(c.lastReindexCount ?? 0)
 				};
 				if (await e.updateMany("_voltro_search_stats", {
-					...s(r),
+					...o(i),
+					...a ? { scope: a } : {},
 					updatedAt: /* @__PURE__ */ new Date()
-				}, { where: a(o("id", String(l.id)), o("synced", t), o("removed", n)) }) === 1) return;
+				}, { where: p(h("id", String(c.id)), h("synced", t), h("removed", n), h("dropped", r)) }) === 1) return;
 			} else {
-				let n = P(), r = await e.insertIgnore(O, {
+				let n = me(), r = await e.insertIgnore(L, {
 					id: n,
 					indexName: i,
 					replicaId: t,
 					synced: 0,
 					removed: 0,
+					dropped: 0,
+					scope: a ?? "local",
 					lastReindexAt: null,
 					lastReindexCount: 0,
 					updatedAt: /* @__PURE__ */ new Date(),
-					...c
+					...s
 				}, { conflictColumns: ["indexName", "replicaId"] });
 				if (String(r.id) === n) return;
 			}
 		}
-		throw new f({
+		throw new E({
 			engine: "stats",
 			op: "upsert",
-			message: `search stats: contention on (${i}, ${t}) exceeded ${I} attempts`,
+			message: `search stats: contention on (${i}, ${t}) exceeded ${U} attempts`,
 			transient: !0
 		});
 	});
 	return {
-		bump: (e, t) => i(e, (e) => t === "synced" ? { synced: e.synced + 1 } : { removed: e.removed + 1 }, t === "synced" ? { synced: 1 } : { removed: 1 }),
-		recordReindex: (e, t, n) => i(e, (e) => ({
+		bump: (e, t, n) => i(e, n, (e) => t === "synced" ? { synced: e.synced + 1 } : t === "removed" ? { removed: e.removed + 1 } : { dropped: e.dropped + 1 }, t === "synced" ? { synced: 1 } : t === "removed" ? { removed: 1 } : { dropped: 1 }),
+		add: (e, t, n) => i(e, n, (e) => ({
+			synced: e.synced + t.synced,
+			removed: e.removed + t.removed,
+			dropped: e.dropped + t.dropped
+		}), {
+			synced: t.synced,
+			removed: t.removed,
+			dropped: t.dropped
+		}),
+		recordReindex: (e, t, n) => i(e, void 0, (e) => ({
 			synced: e.synced + t,
 			lastReindexAt: new Date(n),
 			lastReindexCount: t
@@ -456,37 +635,249 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 			lastReindexCount: t
 		}),
 		get: (t) => r(async () => {
-			let n = await e.query(N(o("indexName", t))), r = k(), i = 0, a = 0, s = null, c = 0;
+			let n = await e.query(H(h("indexName", t))), r = n.some((e) => e.scope === "fleet"), i = (e) => {
+				let t = 0;
+				for (let i of n) {
+					let n = Number(i[e] ?? 0);
+					t = r ? Math.max(t, n) : t + n;
+				}
+				return t;
+			}, a = null, o = 0;
 			for (let e of n) {
-				i += Number(e.synced ?? 0), a += Number(e.removed ?? 0);
 				let t = e.lastReindexAt ? new Date(e.lastReindexAt).toISOString() : null;
-				t && (s === null || t > s) && (s = t, c = Number(e.lastReindexCount ?? 0));
+				t && (a === null || t > a) && (a = t, o = Number(e.lastReindexCount ?? 0));
 			}
 			return {
-				...r,
-				synced: i,
-				removed: a,
-				lastReindexAt: s,
-				lastReindexCount: c
+				...R(),
+				synced: i("synced"),
+				removed: i("removed"),
+				dropped: i("dropped"),
+				lastReindexAt: a,
+				lastReindexCount: o
 			};
 		})
 	};
-}, R = (e) => {
-	if (e === void 0 || e === "memory") return g();
+}, G = (e) => {
+	let t = /* @__PURE__ */ new Map(), n = 0, r = !1, i = async () => {
+		if (t.size === 0) return;
+		let r = t;
+		t = /* @__PURE__ */ new Map(), n = 0;
+		for (let [t, n] of r) try {
+			await e.flush(t, {
+				synced: n.synced,
+				removed: n.removed,
+				dropped: n.dropped
+			}, n.scope);
+		} catch {}
+	}, a = setInterval(() => {
+		i();
+	}, Math.max(1, e.intervalMs));
+	return a.unref?.(), {
+		bump: (a, o, s) => {
+			if (r) return;
+			let c = t.get(a);
+			c === void 0 ? t.set(a, {
+				synced: +(o === "synced"),
+				removed: +(o === "removed"),
+				dropped: +(o === "dropped"),
+				scope: s
+			}) : (o === "synced" ? c.synced += 1 : o === "removed" ? c.removed += 1 : c.dropped += 1, c.scope = s), n += 1, n >= e.maxBuffered && i();
+		},
+		flushNow: i,
+		shutdown: async () => {
+			r || (r = !0, clearInterval(a), await i());
+		},
+		pending: () => n
+	};
+}, K = (e) => (t, n, r) => e().add(t, n, r), q = (e) => e === void 0 || e === "memory" ? "memory" : typeof e.query == "function" ? e.engineKind === "memory" ? "memory" : "custom" : "vendor", ge = class extends Error {
+	_tag = "SearchBackendNotDurable";
+	constructor(e) {
+		super(e), this.name = "SearchBackendNotDurable";
+	}
+}, _e = [
+	"plugin-search refuses to boot in production on the in-memory backend.",
+	"",
+	"The memory index lives in THIS process's heap. Two consequences, both silent:",
+	"  • every replica holds a different index, so a result depends on which replica served you;",
+	"  • the index starts EMPTY after every restart/deploy, and nothing re-seeds it automatically.",
+	"",
+	"Configure a durable engine in app.config.ts:",
+	"  searchPlugin({ backend: { engine: 'typesense',    url: …, apiKey: … }, indexes })",
+	"  searchPlugin({ backend: { engine: 'meilisearch',  url: …, apiKey: … }, indexes })",
+	"  searchPlugin({ backend: { engine: 'algolia',      appId: …, apiKey: … }, indexes })",
+	"or pass your own `SearchBackend` implementation.",
+	"",
+	"If this deployment really is ONE process that re-seeds its index at startup",
+	"(a `*.startup.tsx` calling `backfillIndex`), say so explicitly:",
+	"  searchPlugin({ singleProcessMemoryIndex: true, indexes })",
+	"That is a claim about your topology, not a mute switch: if a second replica",
+	"ever announces itself, the plugin logs that the claim was contradicted."
+].join("\n"), ve = [
+	"plugin-search is running the in-memory backend in production under",
+	"`singleProcessMemoryIndex: true`. Holding you to the two conditions that makes true:",
+	"exactly ONE process serves search, and it re-seeds every index at startup",
+	"(`backfillIndex`) — the index is empty after each restart until it does."
+].join(" "), ye = (e) => e.backendKind !== "memory" || !e.production ? { level: "quiet" } : e.singleProcessDeclared ? {
+	level: "note",
+	message: ve
+} : {
+	level: "refuse",
+	message: _e
+}, be = (e, t) => t ? `search: replica "${e}" joined, but this app declared \`singleProcessMemoryIndex: true\`. That declaration is now false: each replica has its own in-memory index, so search results depend on which one serves the request. Configure a durable backend (typesense / meilisearch / algolia) or run one process.` : `search: replica "${e}" joined while search is served from an in-memory index. Each replica indexes only its OWN writes, so results depend on which replica answers. Configure a durable backend (typesense / meilisearch / algolia) before relying on these results.`, J = "_voltro_search_drift", xe = v(J, {
+	id: g({ prefix: "sdrft" }),
+	indexName: y().maxLength(191),
+	sourceTable: y().maxLength(191),
+	rowId: y().maxLength(191),
+	docId: y().maxLength(191),
+	op: y().maxLength(16),
+	attempts: _().default(0),
+	lastError: y().maxLength(1e3),
+	firstFailedAt: b(),
+	lastFailedAt: b()
+}).unique("bySearchDriftIndexRow", ["indexName", "rowId"]).index("bySearchDriftIndex", ["indexName"]), Se = (e, t) => ({
+	table: e,
+	predicate: h("id", t),
+	order: [],
+	take: 1,
+	skip: void 0,
+	projection: void 0
+}), Y = (e) => e ? new Date(e).toISOString() : (/* @__PURE__ */ new Date(0)).toISOString(), Ce = (e) => ({
+	indexName: String(e.indexName),
+	sourceTable: String(e.sourceTable),
+	rowId: String(e.rowId),
+	docId: String(e.docId),
+	op: e.op === "remove" ? "remove" : "upsert",
+	attempts: Number(e.attempts ?? 0),
+	lastError: String(e.lastError ?? ""),
+	firstFailedAt: Y(e.firstFailedAt),
+	lastFailedAt: Y(e.lastFailedAt)
+}), we = () => {
+	let e = /* @__PURE__ */ new Map(), t = (e, t) => `${e}\u0000${t}`;
+	return {
+		record: async (n) => {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = e.get(t(n.indexName, n.rowId));
+			e.set(t(n.indexName, n.rowId), {
+				indexName: n.indexName,
+				sourceTable: n.sourceTable,
+				rowId: n.rowId,
+				docId: n.docId,
+				op: n.op,
+				attempts: (i?.attempts ?? 0) + 1,
+				lastError: n.error,
+				firstFailedAt: i?.firstFailedAt ?? r,
+				lastFailedAt: r
+			});
+		},
+		list: async (t) => [...e.values()].sort((e, t) => e.firstFailedAt.localeCompare(t.firstFailedAt)).slice(0, t),
+		summary: async (t) => {
+			let n = [...e.values()].filter((e) => e.indexName === t), r = null;
+			for (let e of n) (r === null || e.lastFailedAt > r) && (r = e.lastFailedAt);
+			return {
+				pending: n.length,
+				lastFailedAt: r
+			};
+		},
+		clear: async (n, r) => {
+			e.delete(t(n, r));
+		}
+	};
+}, Te = () => `sdrft_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, X = (e, t) => ({
+	table: J,
+	predicate: e,
+	order: [{
+		column: "firstFailedAt",
+		direction: "asc"
+	}],
+	take: t,
+	skip: void 0,
+	projection: void 0
+}), Ee = (e) => ({
+	record: async (t) => {
+		let n = /* @__PURE__ */ new Date(), r = Te(), i = await e.insertIgnore(J, {
+			id: r,
+			indexName: t.indexName,
+			sourceTable: t.sourceTable,
+			rowId: t.rowId,
+			docId: t.docId,
+			op: t.op,
+			attempts: 1,
+			lastError: t.error.slice(0, 1e3),
+			firstFailedAt: n,
+			lastFailedAt: n
+		}, { conflictColumns: ["indexName", "rowId"] });
+		String(i.id) !== r && await e.updateMany(J, {
+			attempts: Number(i.attempts ?? 0) + 1,
+			op: t.op,
+			docId: t.docId,
+			lastError: t.error.slice(0, 1e3),
+			lastFailedAt: n
+		}, { where: h("id", String(i.id)) });
+	},
+	list: async (t) => (await e.query(X(void 0, t))).map(Ce),
+	summary: async (t) => {
+		let n = (await e.query({
+			...X(h("indexName", t), void 0),
+			order: [],
+			aggregations: [m("n")]
+		}))[0], r = Number(n?.n ?? n?.count ?? 0);
+		if (r === 0) return {
+			pending: 0,
+			lastFailedAt: null
+		};
+		let i = await e.query({
+			...X(h("indexName", t), 1),
+			order: [{
+				column: "lastFailedAt",
+				direction: "desc"
+			}]
+		});
+		return {
+			pending: r,
+			lastFailedAt: i[0] ? Y(i[0].lastFailedAt) : null
+		};
+	},
+	clear: async (t, n) => {
+		await e.deleteMany(J, { where: p(h("indexName", t), h("rowId", n)) });
+	}
+}), De = () => [xe], Oe = (e, t) => {
+	if (e === void 0 || e === "memory") return A();
 	if (typeof e.query == "function") return e;
-	let t = e;
-	return t.engine === "typesense" ? b(t) : t.engine === "meilisearch" ? C(t) : t.engine === "algolia" ? E(t) : g();
-}, z = async (e, t, n) => {
+	let n = e;
+	return n.engine === "typesense" ? oe(n, t) : n.engine === "meilisearch" ? F(n, t) : n.engine === "algolia" ? I(n, t) : A();
+}, ke = async (e, t, n) => {
 	let r = n.map((e) => t.map(e));
 	return r.length > 0 && await e.upsert(t.index, r), r.length;
-}, B = async (e, t, n) => {
+}, Z = async (e, t, n) => {
 	if (n.op === "delete") {
 		let r = n.old?.id;
 		typeof r == "string" && await e.remove(t.index, [r]);
 		return;
 	}
 	n.new && await e.upsert(t.index, [t.map(n.new)]);
-}, V = (e) => {
+}, Q = {
+	retries: 5,
+	retryBaseDelayMs: 200,
+	retryMaxDelayMs: 1e4,
+	resyncIntervalMs: 6e4,
+	resyncBatchSize: 200,
+	reindexBatchSize: 1e3,
+	statsFlushIntervalMs: 5e3,
+	statsFlushMaxBuffered: 1e3
+}, Ae = (e) => ({
+	retries: Math.max(0, e?.retries ?? Q.retries),
+	retryBaseDelayMs: Math.max(1, e?.retryBaseDelayMs ?? Q.retryBaseDelayMs),
+	retryMaxDelayMs: Math.max(1, e?.retryMaxDelayMs ?? Q.retryMaxDelayMs),
+	resyncIntervalMs: Math.max(0, e?.resyncIntervalMs ?? Q.resyncIntervalMs),
+	resyncBatchSize: Math.max(1, e?.resyncBatchSize ?? Q.resyncBatchSize),
+	reindexBatchSize: Math.max(1, e?.reindexBatchSize ?? Q.reindexBatchSize),
+	statsFlushIntervalMs: Math.max(0, e?.statsFlushIntervalMs ?? Q.statsFlushIntervalMs),
+	statsFlushMaxBuffered: Math.max(1, e?.statsFlushMaxBuffered ?? Q.statsFlushMaxBuffered)
+}), je = (e) => e instanceof E ? e : new E({
+	engine: "unknown",
+	op: "upsert",
+	message: String(e?.message ?? e),
+	transient: !1
+}), Me = (e) => d.exponential(s.millis(e.retryBaseDelayMs), 2).pipe(d.either(d.spaced(s.millis(e.retryMaxDelayMs))), d.intersect(d.recurs(e.retries)), d.whileInput((e) => e.transient)), Ne = (e) => {
 	if (!e || e === "memory" || typeof e.query == "function") return;
 	let t = e;
 	try {
@@ -494,131 +885,292 @@ var f = class extends n.TaggedError("SearchBackendError") {}, p = (e) => Array.i
 	} catch {
 		return;
 	}
-}, H = (e, t, n) => {
+}, Pe = (e, t, n) => {
 	let r = n ?? [];
 	return e ? t == null ? null : [...r, {
 		field: e,
 		op: "eq",
 		value: t
 	}] : r;
-}, U = (n) => {
-	let a = n.name ? `@voltro/plugin-search#${n.name}` : "@voltro/plugin-search", o = R(n.backend), s = /* @__PURE__ */ new Map();
-	for (let e of Object.values(n.indexes)) s.set(e.index, e);
-	let c = {
-		...e,
+}, Fe = (e) => [
+	...(e.filters ?? []).map((e) => ["filter", e.field]),
+	...(e.facets ?? []).map((e) => ["facet", e]),
+	...(e.highlight?.fields ?? []).map((e) => ["highlight", e])
+], $ = "@voltro/plugin-search", Ie = (o) => {
+	let s = ne({
+		base: $,
+		alias: o.alias,
+		instance: o.name
+	}), d = () => void 0, p = () => void 0, m = Ae(o.sync), h = Me(m), g = Oe(o.backend, {
+		...o.allowedEngineParams ? { allowEngineParams: o.allowedEngineParams } : {},
+		onWarn: (e, t) => d(e, t)
+	}), _ = /* @__PURE__ */ new Map();
+	for (let e of Object.values(o.indexes)) _.set(e.index, e);
+	let v = q(o.backend), y = o.singleProcessMemoryIndex === !0, b = !1, x, S = {
+		...n,
 		description: "Full-text search an index (facets/highlight/fuzzy/filters), auto-scoped to the caller tenant.",
-		execute: (e, t) => r.promise(async () => {
-			let { index: n, q: r, limit: i, offset: a, filters: c, facets: l, highlight: u, fuzziness: d, engineParams: f } = e, p = s.get(n), m = t.request.subject.tenantId ?? null, h = H(p?.tenantField, m, c);
-			if (h === null) return {
+		execute: (n, r) => {
+			let { index: i, q: a, limit: o, offset: s, filters: l, facets: u, highlight: d, fuzziness: f, engineParams: p } = n, m = _.get(i);
+			if (!m) return c.fail(new e({ index: i }));
+			let h = re(Fe({
+				...l ? { filters: l } : {},
+				...u ? { facets: u } : {},
+				...d ? { highlight: d } : {}
+			}), m.queryableFields);
+			if (h) return c.fail(new t(h));
+			let ee = r.request.subject.tenantId ?? null, v = Pe(m.tenantField, ee, l);
+			if (v === null) return c.succeed({
 				hits: [],
 				facets: {}
+			});
+			let y = {
+				q: a,
+				...o === void 0 ? {} : { limit: o },
+				...s === void 0 ? {} : { offset: s },
+				...v.length > 0 ? { filters: v } : {},
+				...u && u.length > 0 ? { facets: u } : {},
+				...d ? { highlight: d } : {},
+				...f === void 0 ? {} : { fuzziness: f },
+				...p ? { engineParams: p } : {}
 			};
-			let g = {
-				q: r,
-				...i === void 0 ? {} : { limit: i },
-				...a === void 0 ? {} : { offset: a },
-				...h.length > 0 ? { filters: h } : {},
-				...l && l.length > 0 ? { facets: l } : {},
-				...u ? { highlight: u } : {},
-				...d === void 0 ? {} : { fuzziness: d },
-				...f ? { engineParams: f } : {}
-			};
-			return o.query(n, g);
-		})
-	}, l = V(n.backend), u = [
+			return c.promise(() => g.query(i, y));
+		}
+	}, C = Ne(o.backend), ie = [
 		"store:changes:read",
 		"store:write",
 		"inspect:read",
 		"inspect:write",
-		...l ? [`network:outbound:${l}`] : []
-	], d = () => void 0, f = M(), p, m = (e) => ({
+		...C ? [`network:outbound:${C}`] : []
+	], w = V(), T = we(), E, D, O, k, A = (e, t, n) => k === void 0 ? c.tryPromise(() => w.bump(e, t, n)).pipe(c.catchAll((n) => c.sync(() => d("search stats bump failed", {
+		index: e,
+		kind: t,
+		error: String(n)
+	})))) : c.sync(() => k.bump(e, t, n)), j = async (e) => {
+		let t = await T.list(e), n = 0, r = 0;
+		for (let e of t) {
+			let t = _.get(e.indexName);
+			if (!t) {
+				await T.clear(e.indexName, e.rowId);
+				continue;
+			}
+			try {
+				if (!D) throw Error("data store not bound");
+				let r = (await D.query(Se(e.sourceTable, e.rowId)))[0];
+				r ? await g.upsert(t.index, [t.map(r)]) : await g.remove(t.index, [e.docId]), await T.clear(e.indexName, e.rowId), n++;
+			} catch (t) {
+				r++, await T.record({
+					...e,
+					error: String(t?.message ?? t)
+				}).catch(() => void 0);
+			}
+		}
+		return {
+			scanned: t.length,
+			repaired: n,
+			failed: r
+		};
+	}, M = (e) => ({
 		kind: "json",
 		data: e
-	}), h = (e, t) => ({
+	}), N = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
 	});
-	return i({
-		name: a,
+	return te({
+		name: s,
+		baseName: $,
 		description: "External search index sync (Typesense/Meilisearch/Algolia/memory) via the ChangeEvent tap + a tenant-scoped query route.",
-		permissions: u,
-		routes: [c],
-		rpcClientDescriptors: t,
-		inspectEndpoints: [{
-			method: "GET",
-			path: "/indexes",
-			description: "Configured indexes + durable, cross-replica sync stats.",
-			handler: () => r.promise(async () => {
-				let e = await Promise.all(Object.entries(n.indexes).map(async ([e, t]) => {
-					let n = await f.get(t.index);
-					return {
-						table: e,
-						index: t.index,
-						tenantField: t.tenantField ?? null,
-						...n
-					};
-				}));
-				return m({
-					indexes: e,
-					backend: typeof n.backend == "string" ? n.backend : n.backend ? "custom/vendor" : "memory"
-				});
-			})
-		}, {
-			method: "POST",
-			path: "/reindex",
-			description: "Re-seed an index from the table's current rows.",
-			handler: (e) => r.promise(async () => {
-				let t;
-				try {
-					t = JSON.parse(e.body || "{}");
-				} catch {
-					return h(400, "invalid JSON body");
-				}
-				let r = t.table ? n.indexes[t.table] : void 0;
-				if (!t.table || !r) return h(404, `no index configured for table "${t.table ?? ""}"`);
-				if (!p) return h(503, "data store not bound yet");
-				try {
-					let e = await p.query({
-						table: t.table,
-						predicate: void 0,
-						order: [],
-						take: void 0,
-						skip: void 0,
-						projection: void 0
-					}), n = await z(o, r, e);
-					return await f.recordReindex(r.index, n, (/* @__PURE__ */ new Date()).toISOString()), m({
+		permissions: ie,
+		routes: [S],
+		rpcClientDescriptors: r,
+		inspectEndpoints: [
+			{
+				method: "GET",
+				path: "/indexes",
+				description: "Configured indexes + durable, cross-replica sync stats + current index drift.",
+				handler: () => c.promise(async () => {
+					await k?.flushNow();
+					let e = await Promise.all(Object.entries(o.indexes).map(async ([e, t]) => {
+						let n = await w.get(t.index), r = await T.summary(t.index);
+						return {
+							table: e,
+							index: t.index,
+							tenantField: t.tenantField ?? null,
+							...n,
+							pendingDrift: r.pending,
+							lastDriftAt: r.lastFailedAt,
+							drifted: r.pending > 0
+						};
+					}));
+					return M({
+						indexes: e,
+						backend: typeof o.backend == "string" ? o.backend : o.backend ? "custom/vendor" : "memory",
+						durable: v !== "memory",
+						singleProcessMemoryIndex: y,
+						pendingDrift: e.reduce((e, t) => e + t.pendingDrift, 0),
+						sync: {
+							...m,
+							resyncArmed: E !== void 0
+						}
+					});
+				})
+			},
+			{
+				method: "GET",
+				path: "/drift",
+				description: "The changes that did NOT reach the engine, oldest first (the repair queue).",
+				handler: (e) => c.promise(async () => {
+					let t = Number(new URL(e.url, "http://localhost").searchParams.get("limit") ?? 100), n = await T.list(Number.isFinite(t) && t > 0 ? Math.min(t, 1e3) : 100);
+					return M({ entries: n });
+				})
+			},
+			{
+				method: "POST",
+				path: "/resync",
+				description: "Repair drifted rows now — re-reads each from the DB and re-applies it.",
+				handler: (e) => c.promise(async () => {
+					let t;
+					try {
+						t = JSON.parse(e.body || "{}");
+					} catch {
+						return N(400, "invalid JSON body");
+					}
+					if (!D) return N(503, "data store not bound yet");
+					try {
+						let e = await j(Math.min(Math.max(1, t.limit ?? m.resyncBatchSize), 1e3));
+						return M({
+							ok: !0,
+							...e
+						});
+					} catch (e) {
+						return N(500, e.message);
+					}
+				})
+			},
+			{
+				method: "POST",
+				path: "/reindex",
+				description: "Re-seed an index from the table's current rows (streamed in bounded batches).",
+				handler: (e) => c.promise(async () => {
+					let t;
+					try {
+						t = JSON.parse(e.body || "{}");
+					} catch {
+						return N(400, "invalid JSON body");
+					}
+					let n = t.table, r = n ? o.indexes[n] : void 0;
+					if (!n || !r) return N(404, `no index configured for table "${t.table ?? ""}"`);
+					if (!O) return N(503, "data store not bound yet");
+					let s = 0, d = await c.runPromiseExit(ee(O, {
+						table: n,
+						chunkSize: m.reindexBatchSize
+					}).pipe(f.chunks, f.runForEach((e) => c.tryPromise(async () => {
+						s += await ke(g, r, a.toReadonlyArray(e));
+					}))));
+					if (l.isFailure(d)) {
+						let e = i.failureOption(d.cause), t = u.isSome(e) ? e.value : d.cause, n = t.cause ?? t.error ?? t;
+						return N(500, String(n?.message ?? n));
+					}
+					try {
+						await w.recordReindex(r.index, s, (/* @__PURE__ */ new Date()).toISOString());
+					} catch (e) {
+						return N(500, e.message);
+					}
+					return M({
 						ok: !0,
-						table: t.table,
+						table: n,
 						index: r.index,
-						count: n
+						count: s
 					});
+				})
+			}
+		],
+		extendSchema: { tables: [...B(), ...De()] },
+		bindDataStore: (e, t) => {
+			D = e, O = e, w = W(e), T = Ee(e), v === "memory" && t?.membership !== void 0 && (x = t.membership.onChange((e) => {
+				e.kind === "left" || b || t.instanceId !== void 0 && e.instanceId === t.instanceId || (b = !0, d(be(e.instanceId, y), {
+					instanceId: t.instanceId ?? null,
+					peer: e.instanceId,
+					indexes: Object.keys(o.indexes)
+				}));
+			})), !(m.resyncIntervalMs <= 0 || t?.scheduleCoordinated === void 0) && (E = t.scheduleCoordinated("search.resync", m.resyncIntervalMs, async () => {
+				try {
+					let e = await j(m.resyncBatchSize);
+					return (e.repaired > 0 || e.failed > 0) && p("search: drift repair pass", e), { idle: e.scanned === 0 };
 				} catch (e) {
-					return h(500, e.message);
+					return d("search: drift repair pass failed", { error: String(e?.message ?? e) }), { idle: !1 };
 				}
-			})
-		}],
-		extendSchema: { tables: [...j()] },
-		bindDataStore: (e) => {
-			p = e, f = L(e);
+			}));
 		},
 		onChangeEvent: (e) => {
-			let t = n.indexes[e.table];
-			if (!t) return r.void;
-			let i = r.tryPromise(() => f.bump(t.index, e.op === "delete" ? "removed" : "synced")).pipe(r.catchAll((t) => r.sync(() => d("search stats bump failed", {
-				table: e.table,
-				op: e.op,
-				error: String(t)
-			})))), a = r.tryPromise(() => B(o, t, e));
-			return r.zipRight(i, a);
+			let t = o.indexes[e.table];
+			if (!t) return c.void;
+			let n = e.changeScope, r = e.changeScope === "fleet" || e.origin !== "injected", i = e.op === "delete" ? e.old : e.new, a = typeof i?.id == "string" ? i.id : "", s = e.op === "delete" ? "remove" : "upsert", l = () => {
+				if (e.op === "delete" || !e.new) return a;
+				try {
+					return String(t.map(e.new).id ?? a);
+				} catch {
+					return a;
+				}
+			};
+			return c.tryPromise({
+				try: () => Z(g, t, e),
+				catch: je
+			}).pipe(c.retry(h)).pipe(c.matchEffect({
+				onSuccess: () => r ? A(t.index, e.op === "delete" ? "removed" : "synced", n) : c.void,
+				onFailure: (r) => {
+					let i = {
+						table: e.table,
+						index: t.index,
+						op: e.op,
+						rowId: a,
+						transient: r.transient,
+						error: r.message
+					};
+					return a === "" ? c.sync(() => d("search: change not indexed and NOT recoverable (row has no id)", i)).pipe(c.zipRight(c.fail(r))) : c.tryPromise(() => T.record({
+						indexName: t.index,
+						sourceTable: e.table,
+						rowId: a,
+						docId: l(),
+						op: s,
+						error: r.message
+					})).pipe(c.matchEffect({
+						onSuccess: () => A(t.index, "dropped", n).pipe(c.zipRight(c.sync(() => d("search: index drift recorded — will be repaired from the database", i)))),
+						onFailure: (e) => c.sync(() => d("search: change LOST — engine failed and the drift ledger could not record it", {
+							...i,
+							ledgerError: String(e)
+						})).pipe(c.zipRight(c.fail(r)))
+					}));
+				}
+			}));
 		},
-		onActivate: (e) => r.sync(() => {
-			d = (t, n) => e.logger.warn(t, n), e.logger.info("search active", {
-				indexes: Object.keys(n.indexes),
-				backend: typeof n.backend == "string" ? n.backend : "custom/vendor"
+		onActivate: (e) => c.suspend(() => {
+			d = (t, n) => e.logger.warn(t, n), p = (t, n) => e.logger.info(t, n);
+			let t = ye({
+				backendKind: v,
+				production: (e.env?.NODE_ENV ?? process.env.NODE_ENV) === "production",
+				singleProcessDeclared: y
 			});
+			return t.level === "refuse" ? c.fail(new ge(t.message)) : (t.level === "note" && e.logger.info(t.message, { indexes: Object.keys(o.indexes) }), m.statsFlushIntervalMs > 0 && k === void 0 && (k = G({
+				flush: K(() => w),
+				intervalMs: m.statsFlushIntervalMs,
+				maxBuffered: m.statsFlushMaxBuffered
+			})), c.sync(() => {
+				e.logger.info("search active", {
+					indexes: Object.keys(o.indexes),
+					backend: typeof o.backend == "string" ? o.backend : "custom/vendor",
+					durable: v !== "memory",
+					sync: m
+				});
+			}));
+		}),
+		onDeactivate: () => c.promise(async () => {
+			E?.stop(), E = void 0, x?.(), x = void 0, b = !1;
+			let e = k;
+			k = void 0, await e?.shutdown();
 		})
 	});
 };
 //#endregion
-export { O as SEARCH_STATS_TABLE, f as SearchBackendError, E as algoliaBackend, B as applyChange, z as backfillIndex, L as dataStoreStatsStore, C as meilisearchBackend, g as memoryBackend, M as memoryStatsStore, H as scopeSearchFilters, U as searchPlugin, A as searchStatsTable, j as searchTables, b as typesenseBackend };
+export { x as FIELD_NAME_PATTERN, J as SEARCH_DRIFT_TABLE, L as SEARCH_STATS_TABLE, Q as SYNC_DEFAULTS, E as SearchBackendError, ge as SearchBackendNotDurable, t as SearchFieldRejected, e as SearchIndexNotFound, I as algoliaBackend, T as allowedEngineParams, Z as applyChange, je as asBackendError, ye as auditMemoryBackend, q as backendKindOf, ke as backfillIndex, Ee as dataStoreDriftLedger, W as dataStoreStatsStore, Se as driftSourceQuery, De as driftTables, S as isSafeFieldName, G as makeSearchStatsBuffer, F as meilisearchBackend, A as memoryBackend, we as memoryDriftLedger, V as memoryStatsStore, be as peerObservedWarning, Ae as resolveSyncOptions, w as sanitizeEngineParams, Pe as scopeSearchFilters, xe as searchDriftTable, Ie as searchPlugin, z as searchStatsTable, B as searchTables, K as statsStoreFlush, Me as syncRetrySchedule, oe as typesenseBackend };