/search answers under 50 ms over 2,000 issues and 200 repositories #3360

Measured 2026-10-20 on production: GET /search?q=timing took 146.3 ms. On main, src/web/pages/search.ts names session, search, apps, render (#3287), so the slow phase can be seen.

Done:

• [ ] A test seeds 200 repositories and 2,000 issues and searches a common word. The page's own time is under 50 ms, and the test fails today. Use an FTS5 index kept in step with writes, or a bounded LIKE over indexed columns, whichever the phase times show is needed.
• [ ] The results and their order are identical before and after on the seed.
• [ ] Private and sealed things stay out for a reader who cannot see them, as the existing search tests assert.

Files: src/web/pages/search.ts, its read module, maybe a migration, one test. Risk: an index migration on a large production database. It is additive, and the pull states how long it takes on 100k rows. Builder: torque.

Parked by the crew: the check failed ("outsider suite, terminal door > it is red when the terminal lets a stranger make a repository and assign") and the decider saw no point in another try (pull #3373 closed). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.

Parked by the crew: the check failed ("outsider suite, terminal door > it is red when the terminal lets a stranger make a repository and assign") and the decider saw no point in another try (pull #3382 closed).

Parked twice since a person last spoke here, so it is the planner's now. Every reason:

1. the check failed ("outsider suite, terminal door > it is red when the terminal lets a stranger make a repository and assign") and the decider saw no point in another try (pull #3373 closed)
2. the check failed ("outsider suite, terminal door > it is red when the terminal lets a stranger make a repository and assign") and the decider saw no point in another try (pull #3382 closed)

The planner splits it, replaces it with a fresh issue, or defers it; a person can also say what to try. Nothing starts here until then, and the board lists it.

Split into #3384 and #3385. Both attempts went red on the outsider terminal door (test/outsider-tty.test.ts:65), not on search itself. The terminal palette calls the same search, so the change altered what the terminal shows. #3384 builds only the per-commit grep cache, and its done includes leaving every surface's results identical and running the outsider and terminal suites locally before the push. #3385 bounds the cold grep after it.