feat: full-text search across pages (#30)

Co-authored-by: Ona <no-reply@ona.com>

Author: zacharias-ona

.agents/architecture.md

@@ -46,7 +46,8 @@ workspaces
         ├── parent_id → pages.id (nullable, enables nesting)
         ├── content: jsonb (Lexical editor state — NOT a separate blocks table)
         ├── position: integer (ordering among siblings)
-        └── created_by → profiles.id
+        ├── created_by → profiles.id
+        └── search_vector: tsvector (generated, title weight A + content text weight B, GIN indexed)
 
 Sign-up flow (atomic, via DB trigger):
   1. auth.users row created by Supabase Auth
@@ -70,7 +71,7 @@ Sign-up flow (atomic, via DB trigger):
 | Session management | Next.js 16 proxy (not middleware) | `src/proxy.ts` with `updateSession` — Next.js 16 convention replacing middleware |
 | Floating UI | `@floating-ui/react` | Positioning for slash command menu, floating toolbar, link editor (same as Lexical playground) |
 | Image storage | Supabase Storage | Bucket for uploaded images, public URL stored in ImageNode |
-| Full-text search | PostgreSQL `tsvector` + `tsquery` | Generated column or trigger on page title + extracted content text |
+| Full-text search | PostgreSQL `tsvector` + `tsquery` | Generated column on pages combining title (weight A) + extracted content text (weight B), GIN index, `search_pages` RPC |
 
 ## Lexical Editor — Implementation Plan
 
@@ -158,7 +159,8 @@ src/
 │   │       ├── page.tsx    # /[workspaceSlug] — workspace home (page list or empty state)
 │   │       └── [pageId]/page.tsx  # /[workspaceSlug]/[pageId] — page with title + editor placeholder
 │   └── api/
-│       └── health/route.ts # Health check endpoint (DB connectivity)
+│       ├── health/route.ts # Health check endpoint (DB connectivity)
+│       └── search/route.ts # Full-text search (GET ?q=&workspace_id=) → calls search_pages RPC
 ├── components/
 │   ├── auth/
 │   │   ├── oauth-buttons.tsx    # GitHub + Google buttons (disabled, "coming soon" tooltip)
@@ -169,6 +171,7 @@ src/
 │   │   ├── sidebar-context.tsx  # React context for sidebar open/close state + ⌘+\ shortcut
 │   │   ├── workspace-switcher.tsx # Dropdown listing all workspaces, create workspace trigger
 │   │   ├── create-workspace-dialog.tsx # Dialog for creating a new workspace
+│   │   ├── page-search.tsx      # Full-text search input + results dropdown (debounced, 300ms)
 │   │   ├── page-tree.tsx        # Hierarchical page tree with CRUD, drag-and-drop, nest/unnest
 │   │   └── user-menu.tsx        # User dropdown with settings link + sign-out
 │   ├── page-title.tsx           # Inline-editable page title (saves on blur/Enter)

.agents/conventions.md

@@ -404,6 +404,27 @@ await supabase.auth.signUp({
 });
 ```
 
+## Supabase RPC (database functions)
+
+When a query requires features not available through the Supabase query builder
+(e.g., `ts_rank`, `ts_headline`, complex joins with computed columns), create a
+PostgreSQL function and call it via `supabase.rpc()`.
+
+```typescript
+// Calling an RPC function from a route handler
+const { data, error } = await supabase.rpc("search_pages", {
+  query: "search term",
+  ws_id: workspaceId,
+  result_limit: 20,
+});
+```
+
+Rules:
+- Define the function in a migration with `security definer` and `set search_path = ''`.
+- Use `stable` for read-only functions, `volatile` for mutations.
+- Keep the function focused — one purpose per function.
+- Return a `table(...)` type for multi-row results so the client gets typed arrays.
+
 ## This file evolves
 
 When you discover a new pattern that should be replicated, or an anti-pattern that

src/app/api/search/route.ts

@@ -0,0 +1,61 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { createClient } from "@/lib/supabase/server";
+
+export async function GET(request: NextRequest) {
+  if (
+    !process.env.NEXT_PUBLIC_SUPABASE_URL ||
+    !process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY
+  ) {
+    return NextResponse.json(
+      { error: "Supabase not configured" },
+      { status: 503 }
+    );
+  }
+
+  const { searchParams } = request.nextUrl;
+  const query = searchParams.get("q")?.trim();
+  const workspaceId = searchParams.get("workspace_id");
+
+  if (!query || !workspaceId) {
+    return NextResponse.json(
+      { error: "Missing required parameters: q, workspace_id" },
+      { status: 400 }
+    );
+  }
+
+  if (query.length > 200) {
+    return NextResponse.json(
+      { error: "Query too long (max 200 characters)" },
+      { status: 400 }
+    );
+  }
+
+  try {
+    const supabase = await createClient();
+
+    const { data: user } = await supabase.auth.getUser();
+    if (!user.user) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+
+    const { data, error } = await supabase.rpc("search_pages", {
+      query,
+      ws_id: workspaceId,
+      result_limit: 20,
+    });
+
+    if (error) {
+      return NextResponse.json(
+        { error: "Search failed" },
+        { status: 500 }
+      );
+    }
+
+    return NextResponse.json({ results: data ?? [] });
+  } catch {
+    return NextResponse.json(
+      { error: "Internal server error" },
+      { status: 500 }
+    );
+  }
+}

src/components/sidebar/app-sidebar.tsx

@@ -10,6 +10,7 @@ import {
 } from "@/components/ui/sheet";
 import { useSidebar } from "@/components/sidebar/sidebar-context";
 import { WorkspaceSwitcher } from "@/components/sidebar/workspace-switcher";
+import { PageSearch } from "@/components/sidebar/page-search";
 import { PageTree } from "@/components/sidebar/page-tree";
 import { UserMenu } from "@/components/sidebar/user-menu";
 
@@ -28,6 +29,8 @@ function SidebarContent({
     <div className="flex h-full flex-col gap-2 p-2">
       <WorkspaceSwitcher userId={userId} />
       <Separator className="bg-white/[0.06]" />
+      <PageSearch />
+      <Separator className="bg-white/[0.06]" />
       <PageTree userId={userId} />
       <Separator className="bg-white/[0.06]" />
       <UserMenu displayName={displayName} email={email} />