[J2TeamNNL]

Summary

• New registry plugin QdrantDriverPlugin over Qdrant's REST API, with its wire code in the PluginKit-free product TableProQdrantCore.
• Connection: host, port 6333, an API key sent as api-key, SSH tunnel, and SSL modes. Verify CA checks the chain to the chosen CA and that the certificate is a server's; Verify Identity also checks the hostname, against the system trust store when no CA is chosen (Qdrant Cloud). A client certificate and key are sent for mutual TLS.
• Collections in the sidebar, points as rows: id first and read-only, payload fields, then one column per vector (vector, vector.<name>), typed vector(<size>), multivector or sparse_vector. Nested index paths such as metadata.source are listed as indexes, not columns.
• A cell is typed by what points store, widened by each page. A column holding mixed types is json, and its text shows quoted, so a value saves back as the type it had.
• Pages come from the Query API in id order with the offset applied by Qdrant (1.10+); an older node walks ids from the start. No cursor is cached, so a page is right after another client's changes.
• Sorting by one payload field with a range index: ordered points, then points without a value by id, so every point is reachable and the count matches. id descending, vectors, several sort columns, a field without a range index and a field holding lists are refused with a message. The app's default sort is suppressed.
• Filters quote keys and match every type a value spells: 42 finds "42", 42 and 42.0. IS NULL is is_empty, IS EMPTY adds "", CONTAINS is match.text on any field.
• Edits go through generateRowWrites, typed by the column types the grid read:
  • Payload cells: set-payload.
  • Vector cells: update vectors, or delete one when set to NULL.
  • Inserts: an update_filter that matches no point, plus a lookup that refuses a taken id and a check after the write. Qdrant 1.15 or later is required, since older nodes overwrite.
  • A value that does not fit its column refuses the save instead of being written as text.
• The REST editor takes a body on the request line, under it, or both. A point list renders as a grid with score.
• QueryClassifier uses the core's parser and route table, so the gate and the driver read the same request. /collections/{name}/facet is a read, snapshot routes are matched by position, and a payload overwrite, the cluster route and the aliases route rank as destructive, since they delete through the body.
• Fixed beside it:
  • typesenseRequestLine split on a space only, so DELETE<tab>/v1/schema/X ranked as a write on Weaviate.
  • The Weaviate gate read the inline body while the driver sent the lines below.
  • Trino's Verify CA accepted a client-only certificate.
  • A row lookup that expects no row now says the key is taken.
• Probe apple/scripts/probes/check-qdrant.sh runs the core against a live node.

Docs: TableProApp/docs#151

Test plan

• swift test --filter TableProQdrantCoreTests: 55 cases. TableProTLSClientIdentityTests and TableProTrinoCoreTests pass.
• Hosted: QueryClassifierNonSqlTests (Qdrant tiers, facet, tab and split-body cases for Qdrant and Weaviate), DataWriteExecutorLookupTests (taken key), ExternalStatementGatePrivateRequestTests and the parameterized suites that list Qdrant: 118 cases pass.
• apple/scripts/probes/check-qdrant.sh against qdrant/qdrant 1.20.0: 50 checks pass, including an insert that loses a race, paging after another client's delete, and a datetime sort. update_filter measured on 1.13.6, 1.14.1, 1.15.5, 1.16.3 and 1.20.0.
• QdrantDriverPlugin, TrinoDriverPlugin and WeaviateDriverPlugin schemes build.

Fixes #3600