feat(cli): search across groups

search dials every group through the pool and matches each index here, on
the Search page's fields (name, folder, title, artist, album), every word
required. A group left out of Search by its operator (search_listed in the
sealed ack) is skipped before its index is asked for. A file several groups
hold is one result, keyed by its content hash, printed from the reader's own
node first, as a path get takes. A group that cannot be searched is named
and the others go on; one waiting for this machine's approval names its code
instead of holding everything up.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

3 files changed, 83 insertions, 1 deletions

diff --git a/packages/meshbay-cli/tests/fake_node.py b/packages/meshbay-cli/tests/fake_node.py
index 46ad68e..73d6f72 100644
--- a/packages/meshbay-cli/tests/fake_node.py
+++ b/packages/meshbay-cli/tests/fake_node.py
@@ -59,6 +59,7 @@ class FakeNode:
                          "pinned_via": "code"}]
         self.requests: list[dict] = []
         self.role = ""                       # "operator": this key was paired here
+        self.ack: dict = {}                  # the sealed configuration, opened
         self.admin_ops: dict[str, dict] = {}
 
     def add(self, path: str, name: str, data: bytes, uploader_id: str = "") -> dict:
@@ -74,7 +75,7 @@ class FakeNode:
 
     def session(self) -> GroupSession:
         return GroupSession(None, FakeChannel(self), GROUP_ID, "node-1", NODE_PK, self.gek,
-                            {}, self.identity, self.nonce, self.role)
+                            dict(self.ack), self.identity, self.nonce, self.role)
 
     def request_device(self, code: str) -> Identity:
         """Another machine files a request with `code`, as it would before its proof."""
diff --git a/packages/meshbay-cli/tests/test_cli_actions.py b/packages/meshbay-cli/tests/test_cli_actions.py
index e0b5518..e06fb9c 100644
--- a/packages/meshbay-cli/tests/test_cli_actions.py
+++ b/packages/meshbay-cli/tests/test_cli_actions.py
@@ -457,6 +457,59 @@ def test_rm_deletes_only_what_this_account_may_and_asks_first(node, monkeypatch,
     assert not node.files
 
 
+def test_search_finds_across_groups_once_per_file(hub, monkeypatch, capsys):
+    from fake_node import FakeNode
+    from meshbay_cli.client.session import DeviceLinkPending
+    family, club, hidden = FakeNode(), FakeNode(), FakeNode()
+    hub.groups += [{**CLUB, "id": "g2"}, {**CLUB, "id": "g3", "name": "Album"},
+                   {**CLUB, "id": "g4", "name": "Away"}, {**CLUB, "id": "g5", "name": "New"}]
+    nodes = {"g1": family, "g2": club, "g3": hidden}
+    hidden.ack["search_listed"] = False
+    club.ack["is_node_admin"] = True
+
+    async def open_group(account, group):
+        if group["id"] == "g4":
+            from meshbay_cli.errors import NODE, CliError
+            raise CliError(NODE, "No node serving it is online.")
+        if group["id"] == "g5":
+            raise DeviceLinkPending("ABCD-EFGH", 0)
+        return nodes[group["id"]].session()
+    monkeypatch.setattr(pool, "open_group", open_group)
+    _signed_in(hub, capsys)
+
+    family.add("share/Holidays 2024", "Beach.JPG", b"same bytes")
+    club.add("share/Holidays 2024", "Beach.JPG", b"same bytes")     # the same file
+    track = family.add("share/music", "track.flac", b"other")
+    track.update(type="audio", artist="The Holiday Band")
+    family.add("share", "notes 100%.txt", b"n")
+    hidden.add("share", "holiday-secret.jpg", b"s")
+
+    assert main("search", "HOLIDAY") == 4               # two groups not searched
+    out = capsys.readouterr()
+    # The beach photo once, from the reader's own node first; the track by its tag.
+    assert out.out.splitlines() == [
+        "Club%2FPhotos@bob-test/share/Holidays 2024/Beach.JPG",
+        f"Family@{USERNAME}/share/music/track.flac"]
+    assert "holiday-secret" not in out.out
+    assert "not searched: Away@bob-test" in out.err
+    assert "ABCD-EFGH" in out.err
+
+    assert main("--json", "search", "beach", "2024") == 4
+    [hit] = json.loads(capsys.readouterr().out)
+    assert hit["also"] == [f"Family@{USERNAME}/share/Holidays 2024/Beach.JPG"]
+
+    assert main("search", "-l", "-t", "audio", "holiday") == 4
+    line = capsys.readouterr().out.strip()
+    assert line.startswith("audio") and line.endswith("track.flac")
+    assert main("search", "100%") == 4
+    assert capsys.readouterr().out.strip() == f"Family@{USERNAME}/share/notes 100%25.txt"
+    assert main("search", "nothing-like-this") == 4
+
+    hub.groups = [g for g in hub.groups if g["id"] in ("g1", "g2")]
+    assert main("search", "nothing-like-this") == 3
+    assert main("search", "beach") == 0
+
+
 def test_every_action_is_run_here():
     """Runs last in this module: every action the parser knows was run above."""
     assert RUN == set(cli.ACTIONS), f"never run: {set(cli.ACTIONS) - RUN}"
diff --git a/packages/meshbay-cli/tests/test_e2e_local.py b/packages/meshbay-cli/tests/test_e2e_local.py
index 988fb38..8ce3ebc 100644
--- a/packages/meshbay-cli/tests/test_e2e_local.py
+++ b/packages/meshbay-cli/tests/test_e2e_local.py
@@ -888,3 +888,31 @@ def test_a_member_joins_links_devices_shares_with_browsers_and_leaves(world):
     assert bob(world, "bob1", "ls", f"{group}/share").returncode == 0
     for home in ("bob1", "bob2", "bob3"):
         assert bob(world, home, "logout").returncode == 0
+
+
+def test_search_finds_a_file_and_get_takes_its_path(world, tmp_path):
+    """The path `search` prints is the one `get` takes, accents, spaces, an
+    apostrophe and a group name holding a / and an @ included."""
+    deadline = time.monotonic() + 90
+    while True:
+        r = cli(world, "--hub", world["hub_url"], "-u", USERNAME, "login",
+                "--password-file", "-", stdin=PASSPHRASE + "\n", home="cli-search")
+        if r.returncode == 0:
+            break
+        assert "Too many attempts" in r.stderr and time.monotonic() < deadline, r.stderr
+        time.sleep(5)
+    r = cli(world, "search", "PLAGE", "ouest", home="cli-search")
+    # After a test that withdrew the node's copy, this machine is a new device:
+    # search names the group and its code instead of waiting (exit 4).
+    if r.returncode == 4 and "waits to be approved" in r.stderr:
+        code = re.search(r"\(([0-9A-Z]{4}-[0-9A-Z]{4})\)", r.stderr).group(1)
+        asyncio.run(world["app"].approve(code))
+        r = cli(world, "search", "PLAGE", "ouest", home="cli-search")
+    assert r.returncode == 0, r.stderr
+    [path] = r.stdout.splitlines()
+    assert path == f"{_handle()}/share/2024/été à la mer/plage de l'ouest.jpg"
+    r = cli(world, "get", path, "-o", str(tmp_path) + "/", home="cli-search")
+    assert r.returncode == 0, r.stderr
+    assert (tmp_path / "plage de l'ouest.jpg").stat().st_size == 3000
+    r = cli(world, "search", "no-such-thing-anywhere", home="cli-search")
+    assert r.returncode == 3 and "Nothing found" in r.stderr