feat(app): search sessions by title from the home list

[f-liva]

What

Search sessions by title from the home list. A search icon sits next to New session in the sidebar (and beside + in the phone/web header); it toggles a text box that filters the list live. Opening the search also pages in every session older than the 150 the app boots with, so the filter covers the whole account, not just the last week.

Why

The web app had no way to find a session other than scrolling. With a few hundred sessions the list is unusable as a lookup, and the boot fetch's 150-row cap (GET /v1/sessions, take: 150) hides anything older entirely: on one real account 685 of 835 sessions were unreachable from the UI.

Search has to be client-side: session metadata (where the title lives) is end-to-end encrypted — the CLI encrypts it before update-metadata, the server stores an opaque blob — so the server cannot index or match titles. The filter runs over rows the client has already decrypted.

Change

• useVisibleSessionListViewData(searchQuery?) — case-insensitive substring match on the row title (session.name: agent summary or bot name) with the working path as fallback, because untitled sessions all render as "New chat" and only the path tells them apart. Applies to flat rows, project cards, bots and the active-sessions group; the existing archive rule still applies; emptied headers and cards drop out.
• SessionSearchInput + sessionSearchStore (zustand) — the box, and open/query state shared between the icon and the list without a prop chain (same pattern as homeDockFocus). Closing clears the query so the list never stays filtered behind a hidden input. The archive toggle hides while a query is active (its click cannot bring anything back under a filter).
• SessionsListWrapper owns the box across every list state (populated, empty account, no results). SessionsList accepts the query as a controlled prop and falls back to the store for direct mounts (MainView phone layout).
• sync.loadAllSessionsForSearch() — on first open, pages /v2/sessions (cursor, 200/page) to the end and ingests only ids not already in the store; once per app run; a failed page lets the next open retry. The decrypt+apply path is extracted from fetchSessions into ingestSessions so both callers share it. The boot fetch is unchanged. A spinner sits in the box while history pages in.
• i18n: sessionsFilter.searchPlaceholder / noResultsPlaceholder in all 10 locales.

Three commits: filter + box, header icon, on-demand history. pnpm typecheck clean.

Verified

• 15 unit tests on the filter (useVisibleSessionListViewData.test.ts: title/path match, project cards, bots, headers, archive interaction) and 4 on the history loader (sync.searchHistory.test.ts: cursor to the end, skipping known ids, single run, retry after a failed page).
• Built and deployed to a self-hosted web instance: icon placement, live filtering, no-results state, close-clears-query, and history load (server cap temporarily lowered to 1 to exercise the loader) all checked in the browser.

Note

Message content search is out of scope for the same E2EE reason and would require decrypting every session's history client-side. Rebases cleanly on top of #1772 (chunked ingest) if that lands first: ingestSessions is the natural seam.

🤖 Generated with Claude Code