Design permission-aware search over design files

Organizations hold teams, nested folders and design files, with access granted by organization and team roles, folder grants and per-file overrides. A member types a short query, optionally filtered by team, folder, owner, file type or date, and gets ranked file results. An existing ranking service scores candidates; you own everything around it.

Cover:

• Indexing file content, metadata and the permission hierarchy, and keeping them fresh as files and memberships change.
• Retrieving candidates and filtering them so no one ever sees a file they can't read, including right after access is revoked or a folder moves.
• Calling the ranker within a latency budget, with a deterministic fallback order when it is slow or down, and stable pagination.
• Detecting and repairing a stale index or permission view.