iios/packages/iios-service/src/search/search.controller.ts

import { BadRequestException, Body, Controller, Headers, Post } from '@nestjs/common';
import { SessionVerifier } from '../platform/session.verifier';
import { ActorResolver, type MessagePrincipal } from '../identity/actor.resolver';
import { SearchService } from './search.service';

interface SearchDto { query?: string; limit?: number }

/** Message search (session-auth). Results are permission-scoped inside the service to the caller's
 *  own scope + threads. Reindex backfills the caller's scope (idempotent). */
@Controller('v1/search')
export class SearchController {
  constructor(
    private readonly search: SearchService,
    private readonly session: SessionVerifier,
    private readonly actors: ActorResolver,
  ) {}

  @Post()
  async run(@Body() body: SearchDto, @Headers('authorization') authorization?: string) {
    const principal = this.principal(authorization);
    return this.search.search(principal, { query: body.query ?? '', ...(body.limit != null ? { limit: body.limit } : {}) });
  }

  @Post('reindex')
  async reindex(@Headers('authorization') authorization?: string) {
    const principal = this.principal(authorization);
    const scope = await this.actors.findScope(principal);
    return { indexed: await this.search.reindexAll(scope?.id) };
  }

  private principal(authorization?: string): MessagePrincipal {
    const token = (authorization ?? '').replace(/^Bearer\s+/i, '');
    if (!token) throw new BadRequestException('Authorization bearer token is required');
    return this.session.verify(token);
  }
}