OpenVibe.Search

OpenVibe.Search provides "permission-aware discovery for the network": a canonical index document, event-fed indexing, an ACL-filtered query API, and deletion and visibility propagation. Its README gives the status as alpha (roadmap Wave 14): it "runs and is tested; not deployed, and no product indexes into it yet". The README names search.openvibe.network as its domain, which is "still a placeholder on OpenVibe.Sites".

Purpose

Publication products and other services with discoverable content describe their resources to Search with one contract, the proposed search.index-document@1, and Search answers queries without ever returning a document the caller may not see. The owning service stays the source of truth; Search keeps a revision-ordered copy that can be reconciled against it.

How it works

• Owners write documents with a Network service token holding search.document.write, or, as the README prefers, by publishing index-document events through OpenVibe.Events.
• Anonymous callers see only public, published, indexable documents; signed-in users and delegating services can also see restricted documents whose ACL matches them.
• Drafts, unpublished, retracted and deleted documents are returned to nobody.
• A change that lowers a document's exposure emits search.document.removed, so caches and sitemaps can purge it.

What it owns and does not own

Search owns the index document contract, its SQLite index tables, the query API and its ACL filtering. It does not own any product's content, publication state or indexability decision, which belong to the owners and the publishing packages (OpenVibe.Publishing). It also does not own sitemaps, feeds, page caches, identity, groups or entitlements.

Dependencies and gaps

Search depends on OpenVibe.Contracts, OpenVibe.Network and OpenVibe.Events. The README states that an end-to-end run with a real product publishing through a deployed Events has not been demonstrated, and that OpenVibe.Sources' sources/item documents are the first producer. There is no HTML search page yet, only the JSON API and a text index at /. STATUS.json gives the runtime as Node 22, Express and better-sqlite3 (FTS5) on port 4710. The license is AGPL-3.0.