tcursor: support buffer-tree range search