fix(dogfood): auth the search proof via apiAs; strengthen multi-field evidence; flip ADR-0061 to Accepted

- showcase-search proof: use signIn token + apiAs (stack.api is unauthed);
  prove the industry hit positively via searchFields:['industry'] instead of
  assuming no account name contains 'retail' (the seed has 'acme retail' —
  now used as the cross-field OR control).
- ADR-0061 -> Accepted (Tier 1): its own conformance bar is now met (ledger +
  HTTP dogfood proof, 6 tests green).

Author: claude

docs/adr/0061-record-search-architecture.md

@@ -1,6 +1,6 @@
 # ADR-0061: Record Search Architecture — metadata-driven `$search` resolution
 
-**Status**: Proposed — recommended for acceptance (2026-06-21). **Tier 1 (`$search` + `object.searchableFields`) has since been implemented & is live; Tier 2 (FTS/relevance) deferred.** Verified 2026-07-16: Tier 1 claim TRUE (`objectql/src/search-filter.ts` + engine wiring + unit tests, incl. `$searchFields` narrowing and select label-mapping) — but this ADR's own acceptance bar (a `search-conformance` ledger entry + dogfood multi-field HTTP proof, per ADR-0060 closure) is still unmet, so the header stays Proposed until that lands.
+**Status**: Accepted (2026-06-21; Tier 1) — implemented and conformance-closed per this ADR's own bar: server-resolved `$search` executor (`objectql/src/search-filter.ts` + engine wiring), `object.searchableFields` + `$searchFields` narrowing, select label→value mapping; **`search-conformance` ledger** (`dogfood/test/search-conformance.ledger.ts`, ADR-0060 `checkLedger`, proof-required) + **dogfood multi-field HTTP proof** (`showcase-search.dogfood.test.ts`: "retail"→Northwind via `industry`, label mapping, narrowing, terms-AND). Tier 2 (FTS / relevance / external engines) remains deferred — add its ledger row with a proof when a driver ships `fullTextSearch: true`.
 **Deciders**: ObjectStack Protocol Architects
 **Builds on**: ADR-0045 (additive materialization & visibility gate — search must be visibility-aware), ADR-0049 (enforce-or-remove / no unenforced declaration), ADR-0054 (runtime proof per enforced surface), ADR-0060 (conformance ledger as a platform pattern)
 **Consumers**: spec, objectql, driver-sql, driver-memory, driver-mongodb, rest, objectui (`fields`, `plugin-list`, `app-shell`), verify, dogfood

packages/dogfood/test/showcase-search.dogfood.test.ts

@@ -15,33 +15,36 @@ import { bootStack, type VerifyStack } from '@objectstack/verify';
 
 describe('showcase: $search over the HTTP API (ADR-0061 conformance proof)', () => {
   let stack: VerifyStack;
+  let token: string;
 
   const query = async (body: Record<string, unknown>) => {
-    const res = await stack.api('/data/showcase_account/query', {
-      method: 'POST',
-      headers: { 'content-type': 'application/json' },
-      body: JSON.stringify(body),
-    });
+    const res = await stack.apiAs(token, 'POST', '/data/showcase_account/query', body);
     expect(res.status).toBe(200);
     const data = await res.json();
     return (data?.data?.records ?? data?.records ?? []) as Array<Record<string, unknown>>;
   };
 
   beforeAll(async () => {
     stack = await bootStack(showcaseStack);
-    await stack.signIn();
+    token = await stack.signIn();
   }, 60_000);
   afterAll(async () => { await stack?.stop(); });
 
   it('multi-field match: "retail" returns Northwind via industry, not name', async () => {
     const records = await query({ search: 'retail' });
-    const names = records.map((r) => r.name);
+    const names = records.map((r) => String(r.name));
     expect(names).toContain('Northwind');
-    // Guard the premise that makes this a MULTI-FIELD proof: no account is
-    // NAMED *retail* — the hit can only have come from the industry field.
-    for (const n of names) {
-      expect(String(n).toLowerCase()).not.toContain('retail');
-    }
+    // Guard the premise: Northwind's NAME does not contain "retail", so its
+    // presence in the result can only come from a non-name field…
+    expect(names.find((n) => n === 'Northwind')!.toLowerCase()).not.toContain('retail');
+    // …and prove it positively: restricting the same search to `industry`
+    // alone still returns Northwind — the hit IS the industry field.
+    const viaIndustry = await query({ search: 'retail', searchFields: ['industry'] });
+    expect(viaIndustry.map((r) => r.name)).toContain('Northwind');
+    // (The seed also has an account literally NAMED "acme retail" — a useful
+    // control: the unrestricted search returns it via `name`, proving the
+    // cross-field OR spans both fields in one query.)
+    expect(names.some((n) => n.toLowerCase().includes('retail'))).toBe(true);
   });
 
   it('select label→value mapping: the capitalized label "Retail" also matches', async () => {