indiekit-endpoint-activitypub/lib/mastodon/routes/search.js

/**
 * Search endpoint for Mastodon Client API.
 *
 * GET /api/v2/search — search accounts, statuses, and hashtags
 */
import express from "express";
import { serializeStatus } from "../entities/status.js";
import { serializeAccount } from "../entities/account.js";
import { parseLimit } from "../helpers/pagination.js";
import { resolveRemoteAccount } from "../helpers/resolve-account.js";
import { tokenRequired } from "../middleware/token-required.js";
import { scopeRequired } from "../middleware/scope-required.js";

const router = express.Router(); // eslint-disable-line new-cap

// ─── GET /api/v2/search ─────────────────────────────────────────────────────

router.get("/api/v2/search", tokenRequired, scopeRequired("read", "read:search"), async (req, res, next) => {
  try {
    const collections = req.app.locals.mastodonCollections;
    const baseUrl = `${req.protocol}://${req.get("host")}`;
    const query = (req.query.q || "").trim();
    const type = req.query.type; // "accounts", "statuses", "hashtags", or undefined (all)
    const limit = parseLimit(req.query.limit);
    const offset = Math.max(0, Number.parseInt(req.query.offset, 10) || 0);

    const resolve = req.query.resolve === "true";
    const pluginOptions = req.app.locals.mastodonPluginOptions || {};

    if (!query) {
      return res.json({ accounts: [], statuses: [], hashtags: [] });
    }

    const results = { accounts: [], statuses: [], hashtags: [] };

    // ─── Account search ──────────────────────────────────────────────────
    if (!type || type === "accounts") {
      const escapedQuery = query.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
      const nameRegex = new RegExp(escapedQuery, "i");

      // Search followers and following by display name or handle
      const accountDocs = [];

      if (collections.ap_followers) {
        const followers = await collections.ap_followers
          .find({
            $or: [
              { name: nameRegex },
              { preferredUsername: nameRegex },
              { url: nameRegex },
            ],
          })
          .limit(limit)
          .toArray();
        accountDocs.push(...followers);
      }

      if (collections.ap_following) {
        const following = await collections.ap_following
          .find({
            $or: [
              { name: nameRegex },
              { preferredUsername: nameRegex },
              { url: nameRegex },
            ],
          })
          .limit(limit)
          .toArray();
        accountDocs.push(...following);
      }

      // Deduplicate by URL
      const seen = new Set();
      for (const doc of accountDocs) {
        const url = doc.url || doc.id;
        if (url && !seen.has(url)) {
          seen.add(url);
          results.accounts.push(
            serializeAccount(doc, { baseUrl, isRemote: true }),
          );
        }
        if (results.accounts.length >= limit) break;
      }

      // If no local results and resolve=true, try remote lookup
      if (results.accounts.length === 0 && resolve && (query.includes("@") || query.startsWith("http"))) {
        const resolved = await resolveRemoteAccount(query, pluginOptions, baseUrl, collections);
        if (resolved) {
          results.accounts.push(resolved);
        }
      }
    }

    // ─── Status search ───────────────────────────────────────────────────
    if (!type || type === "statuses") {
      const escapedQuery = query.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
      const contentRegex = new RegExp(escapedQuery, "i");

      const items = await collections.ap_timeline
        .find({
          isContext: { $ne: true },
          $or: [
            { "content.text": contentRegex },
            { "content.html": contentRegex },
          ],
        })
        .sort({ _id: -1 })
        .skip(offset)
        .limit(limit)
        .toArray();

      // URL resolve: find post by AP URL before content search.
      if (resolve && query.startsWith("http")) {
        const resolvedItem = await collections.ap_timeline.findOne({
          isContext: { $ne: true },
          $or: [{ uid: query }, { url: query }],
        });
        if (resolvedItem) {
          results.statuses.push(serializeStatus(resolvedItem, {
            baseUrl, favouritedIds: new Set(), rebloggedIds: new Set(),
            bookmarkedIds: new Set(), pinnedIds: new Set(),
          }));
        } else if (pluginOptions.federation) {
          try {
            const { lookupWithSecurity } = await import("../../lookup-helpers.js");
            const { extractObjectData } = await import("../../timeline-store.js");
            const { addTimelineItem } = await import("../../storage/timeline.js");
            const _rCtx = pluginOptions.federation.createContext(new URL(pluginOptions.publicationUrl), { handle: pluginOptions.handle, publicationUrl: pluginOptions.publicationUrl });
            const _rDl = await _rCtx.getDocumentLoader({ identifier: pluginOptions.handle });
            const _rObj = await lookupWithSecurity(_rCtx, new URL(query), { documentLoader: _rDl });
            if (_rObj) {
              const _rData = await extractObjectData(_rObj, { documentLoader: _rDl });
              if (!_rData?.uid) throw new Error("remote AP object has no uid");
              const _rStored = await addTimelineItem(collections, _rData);
              if (_rStored) {
                results.statuses.push(serializeStatus(_rStored, {
                  baseUrl, favouritedIds: new Set(), rebloggedIds: new Set(),
                  bookmarkedIds: new Set(), pinnedIds: new Set(),
                }));
              }
            }
          } catch (_rErr) {
            console.warn(`[Mastodon API] search resolve remote fetch failed for ${query}: ${_rErr.message}`);
          }
        }
      }
      results.statuses.push(...items.map((item) =>
        serializeStatus(item, {
          baseUrl,
          favouritedIds: new Set(),
          rebloggedIds: new Set(),
          bookmarkedIds: new Set(),
          pinnedIds: new Set(),
        }),
      ));
    }

    // ─── Hashtag search ──────────────────────────────────────────────────
    if (!type || type === "hashtags") {
      const escapedQuery = query
        .replace(/^#/, "")
        .replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
      const tagRegex = new RegExp(escapedQuery, "i");

      // Find distinct category values matching the query
      const allCategories = await collections.ap_timeline.distinct("category", {
        category: tagRegex,
      });

      // Flatten and deduplicate (category can be string or array)
      const tagSet = new Set();
      for (const cat of allCategories) {
        if (Array.isArray(cat)) {
          for (const c of cat) {
            if (typeof c === "string" && tagRegex.test(c)) tagSet.add(c);
          }
        } else if (typeof cat === "string" && tagRegex.test(cat)) {
          tagSet.add(cat);
        }
      }

      results.hashtags = [...tagSet].slice(0, limit).map((name) => ({
        name,
        url: `${baseUrl}/tags/${encodeURIComponent(name)}`,
        history: [],
      }));
    }

    res.json(results);
  } catch (error) {
    next(error);
  }
});

export default router;