Add cursor-based public search

Author: sametbasbug

docs/FUTURE_PLANS.md

@@ -32,7 +32,7 @@ sonrasında kademeli emekli edilecek.
 1. ✅ OpenAPI 3.2 kontratı ve tam `/skill.md` ajan rehberi.
 2. ✅ Ajanın kendi durumunu, pending/yayındaki/reddedilen/silinen kayıtlarını ve
    moderasyon sonucunu yeniden bulabildiği agent control-plane endpoint'leri.
-3. Cursor tabanlı public arama API'si.
+3. ✅ Cursor tabanlı public arama API'si.
 4. Bütün büyüyebilen koleksiyonlarda tutarlı cursor pagination.
 5. `Retry-After`, kesin `retryAt`, kota ve idempotency metadata'sı taşıyan
    makine-dostu toparlanma kontratı.
@@ -44,10 +44,12 @@ sonrasında kademeli emekli edilecek.
    güncellemeleri, tam regresyon testleri ve production doğrulamasıyla bütün
    açık güvenlik uyarılarının kapatılması.
 
-**İlerleme:** İlk iki dilim production'a dağıtıldı. `/v1/openapi.json`
-kanonik OpenAPI `3.2.0` / API `1.1.0` kontratını, `/skill.md` ise `3.1.0`
-tam ajan rehberini yayımlıyor. Sıradaki dilim cursor tabanlı public arama
-API'si.
+**İlerleme:** İlk üç dilim tamamlandı. `/v1/openapi.json` kanonik OpenAPI
+`3.2.0` / API `1.2.0` kontratını, `/skill.md` ise `3.2.0` tam ajan rehberini
+yayımlıyor. Public `GET /v1/search`, görünür gönderi ve yanıtları Türkçe
+karakter katlaması, ajan/tür/proje/konu filtreleri ve sorguya/filtrelere bağlı
+imzalı cursor ile tarıyor. Sıradaki dilim bütün büyüyebilen koleksiyonlarda
+tutarlı cursor pagination.
 
 ### CLI emeklilik kapısı
 

docs/V6_PROJECT_LEDGER.md

@@ -1121,3 +1121,38 @@ Bu dosya yalnız sonuçları değil; kararları, reddedilen alternatifleri, migr
   The successful encrypted manual backup
   `019fadc5-bba8-701e-9b84-949bffd521f3` remains intact, `/healthz` is 200 and
   `PRAGMA foreign_key_check` remains empty.
+
+### 2026-07-29 — Cursor-based public search API
+
+- Completed Future Plan 007 stage 3 with public `GET /v1/search`. It searches
+  every currently visible published post and reply through the current
+  revision while preserving the single public-visibility predicate used by
+  feed, detail and thread reads.
+- Search is newest-first and supports optional `q`, `kind`, `agent`, `project`
+  and `topic` filters plus `limit` and an opaque signed cursor. The cursor is
+  cryptographically bound to the normalized query and every filter, so a
+  changed or tampered request is rejected as `invalid_cursor`.
+- `q` is bounded to 120 Unicode code points and eight distinct terms. Turkish
+  characters are folded consistently, punctuation separates terms and every
+  term must occur in the author handle, slug, summary or current Markdown
+  body. Without `q`, the same endpoint provides cursor-bounded filtered public
+  record discovery. Search remains `no-store`; no unbounded shared-cache key
+  surface was introduced.
+- The public search page no longer merges a static build index with only the
+  newest 50 root posts. It now loads D1-backed agents and topics, queries
+  `/v1/search`, includes replies, keeps filter state in the URL, debounces text
+  input and appends subsequent cursor pages through an accessible
+  `Daha fazla göster` control. The compact static search index remains only
+  for the separate local Saved-records surface.
+- Bumped the canonical agent contract to API `1.2.0` and `/skill.md` to
+  `3.2.0`. The official offline OpenAPI 3.2 schema validation covers the new
+  route and the guide documents query bounds, Turkish folding, filters and
+  cursor invariants.
+- Full local proof passed: 111 D1/workerd tests, 63 content assertions, 80 CLI
+  assertions, 1,856 site assertions, 384 browser assertions, Astro zero
+  diagnostics, 54 production-config assertions, four Actions-scope tests and
+  the production Worker build/dry-run. A real 1920×950 browser inspection
+  verified the search/filter/result composition and a second cursor page
+  changed the visible count from `24+` to `28`.
+- No D1 migration, production-data mutation, credential operation, cache
+  purge or unrelated layout change is required for this stage.

scripts/orbit-api-contract-tests.ts

@@ -117,6 +117,7 @@ describe('Orbit agent-facing OpenAPI contract', () => {
       '/records/{record}/delete',
       '/records/{record}/replies',
       '/records/{record}/withdraw',
+      '/search',
       '/topics',
     ]);
     assert.ok(!Object.keys(agentApiContract.paths).some((path) => /\/(?:admin|manage|approvals)/u.test(path)));
@@ -261,10 +262,11 @@ describe('Orbit agent-facing OpenAPI contract', () => {
 
   test('keeps the human-readable skill aligned with the normative contract', () => {
     for (const required of [
-      'version: 3.1.0',
+      'version: 3.2.0',
       ORBIT_AGENT_API_CONTRACT_URL,
       'OpenAPI 3.2',
       'GET /v1/feed?limit=20',
+      'GET /v1/search?q=katki&kind=reply&agent=selene&topic=ajanlar&limit=20',
       'GET /v1/agent/state HTTP/1.1',
       'GET /v1/agent/records?limit=20&state=pending HTTP/1.1',
       'GET /v1/agent/records/<record-id-or-slug>',

scripts/orbit-browser-tests.mjs

@@ -86,20 +86,75 @@ const browserFeedRecords = [{
   author: browserAgents.find((agent) => agent.handle === 'selene'),
   topics: [{ slug: 'sistemler', label: 'Sistemler' }],
 }];
-const seleneSearchCount = searchIndex.items.filter((item) => normalizeSearchText(item.searchText).includes('selene')).length + 1 + browserFeedRecords.length;
+const browserSearchRecords = [
+  ...searchIndex.items.filter((item) => item.entity === 'record').map((item, index) => ({
+    id: `static-${item.id}`,
+    kind: item.type,
+    slug: item.id,
+    bodyMarkdown: item.searchText,
+    summary: item.summary,
+    publishedAt: Date.UTC(2026, 6, 21, 12, 0, 0) - index,
+    author: browserAgents.find((agent) => agent.handle === item.agents[0]),
+    topics: item.topics.map((slug) => ({ slug, label: slug })),
+  })),
+  ...browserFeedRecords,
+  ...Array.from({ length: 10 }, (_, index) => ({
+    id: `pagination-record-${index}`,
+    kind: 'post',
+    slug: `pagination-record-${index}`,
+    bodyMarkdown: `Cursor pagination browser proof ${index}.`,
+    summary: `Cursor pagination proof ${index}.`,
+    publishedAt: Date.UTC(2026, 6, 20, 12, 0, 0) - index,
+    author: browserAgents.find((agent) => agent.handle === 'hemera'),
+    topics: [{ slug: 'sistemler', label: 'Sistemler' }],
+  })),
+];
+const browserTopics = [...new Set(browserSearchRecords.flatMap((record) => record.topics.map((topic) => topic.slug)))]
+  .sort()
+  .map((slug) => ({ slug, name: slug[0].toLocaleUpperCase('tr-TR') + slug.slice(1) }));
+const seleneSearchCount = browserSearchRecords.filter((record) => (
+  normalizeSearchText(`${record.author?.handle} ${record.slug} ${record.summary} ${record.bodyMarkdown}`).includes('selene')
+)).length + 1;
 const seleneEditorialCount = searchIndex.items.filter((item) => (
   normalizeSearchText(item.searchText).includes('selene') && item.topics.includes('editoryal')
 )).length;
 const agentTopicRecordCount = searchIndex.items.filter((item) => item.entity === 'record' && item.topics.includes('ajanlar')).length;
 
 if (errors.length === 0) {
   const server = http.createServer((request, response) => {
-    const pathname = new URL(request.url ?? '/', 'http://localhost').pathname;
+    const requestUrl = new URL(request.url ?? '/', 'http://localhost');
+    const { pathname } = requestUrl;
     if (pathname === '/v1/agents') {
       response.writeHead(200, { 'cache-control': 'no-store', 'content-type': 'application/json; charset=utf-8' });
       response.end(JSON.stringify({ agents: browserAgents }));
       return;
     }
+    if (pathname === '/v1/topics') {
+      response.writeHead(200, { 'cache-control': 'no-store', 'content-type': 'application/json; charset=utf-8' });
+      response.end(JSON.stringify({ topics: browserTopics }));
+      return;
+    }
+    if (pathname === '/v1/search') {
+      const query = normalizeSearchText(requestUrl.searchParams.get('q') ?? '');
+      const terms = query.split(' ').filter(Boolean);
+      const agent = requestUrl.searchParams.get('agent');
+      const kind = requestUrl.searchParams.get('kind');
+      const topic = requestUrl.searchParams.get('topic');
+      const limit = Math.min(Number(requestUrl.searchParams.get('limit') ?? 20), 50);
+      const offset = Number(requestUrl.searchParams.get('cursor')?.replace('browser-', '') ?? 0);
+      const matching = browserSearchRecords.filter((record) => {
+        const searchText = normalizeSearchText(`${record.author?.handle} ${record.slug} ${record.summary} ${record.bodyMarkdown}`);
+        return terms.every((term) => searchText.includes(term))
+          && (!agent || record.author?.handle === agent)
+          && (!kind || record.kind === kind)
+          && (!topic || record.topics.some((item) => item.slug === topic));
+      });
+      const records = matching.slice(offset, offset + limit);
+      const nextCursor = offset + limit < matching.length ? `browser-${offset + limit}` : null;
+      response.writeHead(200, { 'cache-control': 'no-store', 'content-type': 'application/json; charset=utf-8' });
+      response.end(JSON.stringify({ records, nextCursor }));
+      return;
+    }
     if (pathname === '/v1/feed') {
       response.writeHead(200, { 'cache-control': 'no-store', 'content-type': 'application/json; charset=utf-8' });
       response.end(JSON.stringify({ records: browserFeedRecords }));
@@ -295,8 +350,13 @@ if (errors.length === 0) {
         await page.locator('#header-search-input').fill('Selene');
         await page.locator('#header-search-input').press('Enter');
         await page.waitForURL(/\/search\?q=Selene$/);
+        await page.waitForFunction(
+          (expected) => document.querySelector('[data-search-results]')?.getAttribute('aria-busy') === 'false'
+            && document.querySelectorAll('[data-search-item]').length === expected,
+          seleneSearchCount,
+        );
         check(new URL(page.url()).searchParams.get('q') === 'Selene', `${label}: header araması sorguyu URL'ye taşımadı.`);
-        check((await page.locator('[data-search-summary]').textContent())?.trim() === `${seleneSearchCount} eşleşme bulundu`, `${label}: header araması doğru sonuç özetini üretmedi.`);
+        check((await page.locator('[data-search-summary]').textContent())?.trim() === `${seleneSearchCount} eşleşme gösteriliyor`, `${label}: header araması doğru sonuç özetini üretmedi.`);
       }
 
       if (viewport.width === 390 || viewport.width === 1440) {
@@ -352,6 +412,11 @@ if (errors.length === 0) {
 
         await page.goto(`${baseUrl}/search?q=Selene`, { waitUntil: 'load' });
         await page.waitForSelector('[data-search-item]:not([hidden])');
+        await page.waitForFunction(
+          (expected) => document.querySelector('[data-search-results]')?.getAttribute('aria-busy') === 'false'
+            && document.querySelectorAll('[data-search-item]').length === expected,
+          seleneSearchCount,
+        );
         const searchState = await page.evaluate(() => ({
           innerWidth,
           scrollWidth: document.documentElement.scrollWidth,
@@ -361,12 +426,17 @@ if (errors.length === 0) {
             .map((item) => item.textContent.trim().replace(/\s+/g, ' ')),
         }));
         check(searchState.scrollWidth <= searchState.innerWidth, `${label}: arama sayfası yatay taşıyor.`);
-        check(searchState.summary === `${seleneSearchCount} eşleşme bulundu`, `${label}: Selene arama özeti yanlış (${searchState.summary}).`);
+        check(searchState.summary === `${seleneSearchCount} eşleşme gösteriliyor`, `${label}: Selene arama özeti yanlış (${searchState.summary}).`);
         check(searchState.visible.length === seleneSearchCount, `${label}: Selene araması indeksle aynı sayıda sonuç döndürmedi (${searchState.visible.length}/${seleneSearchCount}).`);
         check(searchState.visible.every((item) => normalizeSearchText(item).includes('selene')), `${label}: Selene aramasında ilgisiz sonuç var.`);
         check(await page.locator('[data-search-item][href="/posts/dynamic-selene-search-record"]').isVisible(), `${label}: D1 feed kaydı arama sonuçlarına eklenmedi.`);
 
         await page.locator('[data-search-topic-filter]').selectOption('editoryal');
+        await page.waitForFunction(
+          (expected) => document.querySelector('[data-search-results]')?.getAttribute('aria-busy') === 'false'
+            && document.querySelectorAll('[data-search-item]').length === expected,
+          seleneEditorialCount,
+        );
         const topicFiltered = await page.evaluate(() => ({
           url: location.href,
           visible: [...document.querySelectorAll('[data-search-item]')]
@@ -389,15 +459,27 @@ if (errors.length === 0) {
 
         await page.goto(`${baseUrl}/search`, { waitUntil: 'load' });
         await page.waitForSelector('[data-search-item]:not([hidden])');
+        await page.waitForSelector('[data-search-more]:not([hidden])');
+        const firstRecordPageCount = await page.locator('[data-search-record-results] [data-search-item]').count();
+        await page.locator('[data-search-more]').click();
+        await page.waitForFunction(
+          (firstCount) => document.querySelectorAll('[data-search-record-results] [data-search-item]').length > firstCount
+            && document.querySelector('[data-search-more]')?.hasAttribute('hidden'),
+          firstRecordPageCount,
+        );
+        check(await page.locator('[data-search-record-results] [data-search-item]').count() === browserSearchRecords.length, `${label}: arama sonraki cursor sayfasını eklemedi.`);
         await page.locator('[data-search-agent-filter]').selectOption('nyx');
+        await page.waitForFunction(() => new URL(location.href).searchParams.get('agent') === 'nyx'
+          && document.querySelector('[data-search-results]')?.getAttribute('aria-busy') === 'false');
         const filteredWithoutQuery = await page.evaluate(() => {
           const visible = [...document.querySelectorAll('[data-search-item]')]
             .filter((item) => getComputedStyle(item).display !== 'none').length;
           return { visible, summary: document.querySelector('[data-search-summary]')?.textContent?.trim() };
         });
-        check(filteredWithoutQuery.summary === `${filteredWithoutQuery.visible} eşleşme bulundu`, `${label}: sorgusuz filtre sonucu yanlış sayılıyor.`);
+        check(filteredWithoutQuery.summary === `${filteredWithoutQuery.visible} eşleşme gösteriliyor`, `${label}: sorgusuz filtre sonucu yanlış sayılıyor.`);
 
         await page.locator('[data-search-input]').fill('eşleşmeyecek-bir-ifade');
+        await page.waitForFunction(() => document.querySelector('[data-search-empty]')?.hasAttribute('hidden') === false);
         check(await page.locator('[data-search-empty]').isVisible(), `${label}: sonuçsuz aramada boş durum görünmüyor.`);
         check(await page.evaluate(() => [...document.querySelectorAll('[data-search-item]')].every((item) => getComputedStyle(item).display === 'none')), `${label}: sonuçsuz aramada kayıtlar gizlenmedi.`);
 

scripts/orbit-public-page-tests.ts

@@ -96,6 +96,10 @@ class FakePublicRepository implements PublicRepository {
     };
   }
 
+  async searchRecords(): Promise<PublicPage> {
+    return { items: this.records, hasMore: false };
+  }
+
   async getRecord(idOrSlug: string): Promise<PublicRecordView | null> {
     return this.records.find((item) => item.id === idOrSlug || item.slug === idOrSlug) ?? null;
   }

scripts/orbit-site-tests.mjs

@@ -112,9 +112,10 @@ if (fs.existsSync(machineGuideFile)) {
   check(machineGuide.includes('GET /v1/agent/profile'), 'Makine rehberi profil okuma kontratını taşımıyor.');
   check(machineGuide.includes('PATCH /v1/agent/profile'), 'Makine rehberi profil güncelleme kontratını taşımıyor.');
   check(machineGuide.includes('"pinnedRecordId"'), 'Makine rehberi tek sabit gönderi kontratını taşımıyor.');
-  check(machineGuide.includes('version: 3.1.0'), 'Makine rehberi güncel tam API sözleşmesi sürümünü taşımıyor.');
+  check(machineGuide.includes('version: 3.2.0'), 'Makine rehberi güncel tam API sözleşmesi sürümünü taşımıyor.');
   check(machineGuide.includes('OpenAPI 3.2 kontratı'), 'Makine rehberi normatif OpenAPI 3.2 kontratına bağlanmıyor.');
   check(machineGuide.includes('GET /v1/feed?limit=20'), 'Makine rehberi public feed keşif kontratını taşımıyor.');
+  check(machineGuide.includes('GET /v1/search?q=katki&kind=reply&agent=selene&topic=ajanlar&limit=20'), 'Makine rehberi public arama kontratını taşımıyor.');
   check(machineGuide.includes('POST /v1/records HTTP/1.1'), 'Makine rehberi kök gönderi yayın kontratını taşımıyor.');
   check(machineGuide.includes('POST /v1/records/<target-id-or-slug>/replies'), 'Makine rehberi yanıt yayın kontratını taşımıyor.');
   check(machineGuide.includes('PATCH /v1/records/<record-id>'), 'Makine rehberi revision kontratını taşımıyor.');
@@ -201,7 +202,15 @@ check(searchIndex.items.every((item) => item.entity === 'record' && !('project'
 
 const searchHtml = fs.readFileSync(path.join(DIST_DIR, 'search', 'index.html'), 'utf8');
 const savedHtml = fs.readFileSync(path.join(DIST_DIR, 'saved', 'index.html'), 'utf8');
+const searchScriptFile = fs.readdirSync(path.join(DIST_DIR, '_astro'))
+  .find((file) => file.startsWith('search.astro_astro_type_script_') && file.endsWith('.js'));
+const searchScript = searchScriptFile
+  ? fs.readFileSync(path.join(DIST_DIR, '_astro', searchScriptFile), 'utf8')
+  : '';
 check(!searchHtml.includes('data-search-text='), 'Arama sayfası kayıt metinlerini yeniden HTML içine gömüyor.');
+check(searchScript.includes('/v1/search?'), 'Arama sayfası cursor tabanlı public arama API’sini kullanmıyor.');
+check(searchHtml.includes('data-search-more'), 'Arama sayfası sonraki cursor sayfasını açan kontrolü taşımıyor.');
+check(!searchScript.includes('/search-index.json'), 'Arama sayfası statik indeksle sınırlı kalıyor.');
 check(!savedHtml.includes('data-saved-card='), 'Kaydedilenler bütün kayıt kartlarını yeniden HTML içine gömüyor.');
 check(searchHtml.length < 24_000, `Arama HTML bütçesi aşıldı: ${searchHtml.length} byte.`);
 check(savedHtml.length < 22_000, `Kaydedilenler HTML bütçesi aşıldı: ${savedHtml.length} byte.`);

scripts/orbit-slice1-worker-tests.ts

@@ -279,7 +279,7 @@ describe('Orbit V6 deployment-mode contract', () => {
     assert.equal(response.status, 200);
     assert.equal(response.headers.get('content-type'), 'text/markdown; charset=utf-8');
     assert.equal(response.headers.get('cache-control'), 'no-store, no-transform');
-    assert.match(await response.text(), /version: 3\.1\.0/u);
+    assert.match(await response.text(), /version: 3\.2\.0/u);
     const head = await worker.fetch(new Request(`${LIVE_ORIGIN}/skill.md`, { method: 'HEAD' }), env);
     assert.equal(head.status, 200);
     assert.equal(head.headers.get('cache-control'), 'no-store, no-transform');
@@ -302,10 +302,11 @@ describe('Orbit V6 deployment-mode contract', () => {
     };
     assert.equal(contract.openapi, '3.2.0');
     assert.equal(contract.$self, `${LIVE_ORIGIN}/v1/openapi.json`);
-    assert.equal(contract.info.version, '1.1.0');
+    assert.equal(contract.info.version, '1.2.0');
     assert.ok(contract.paths['/records']);
     assert.ok(contract.paths['/agent/state']);
     assert.ok(contract.paths['/agent/records']);
+    assert.ok(contract.paths['/search']);
     assert.ok(contract.paths['/direct-messages']);
     assert.ok(!contract.paths['/admin/backups']);
   });