sprint2+3: remaining services visibility filter + search provider permission-aware + dashboard route

app/plugins/builtins/unified_search/providers/contact_provider.py

@@ -9,71 +9,124 @@ from typing import Any
 from sqlalchemy import text
 from sqlalchemy.ext.asyncio import AsyncSession
 
+from app.plugins.builtins.unified_search.base_provider import BaseSearchProvider
+
 logger = logging.getLogger(__name__)
 
 
-class ContactSearchProvider:
+class ContactSearchProvider(BaseSearchProvider):
     """Search provider for Contact entities (all types)."""
 
     entity_type = "contact"
 
-    async def search_fts(
+    async def _search_fts_filtered(
         self,
         db: AsyncSession,
         tsquery: str,
         tenant_id: uuid.UUID,
         limit: int,
+        visible_ids: set[uuid.UUID] | None,
     ) -> list[dict[str, Any]]:
-        """Full-text search on contacts.search_tsv."""
-        sql = text(
-            """
-            SELECT c.*, ts_rank(c.search_tsv, to_tsquery('pg_catalog.german', :q)) AS rank
-            FROM contacts c
-            WHERE c.tenant_id = :tid
-              AND c.deleted_at IS NULL
-              AND c.search_tsv @@ to_tsquery('pg_catalog.german', :q)
-            ORDER BY rank DESC
-            LIMIT :lim
-            """
-        )
-        result = await db.execute(
-            sql,
-            {"q": tsquery, "tid": tenant_id, "lim": limit},
-        )
+        """Full-text search on contacts.search_tsv, filtered by visible_ids.
+
+        If visible_ids is None, no visibility filter is applied (system admin).
+        """
+        if visible_ids is not None:
+            sql = text(
+                """
+                SELECT c.*, ts_rank(c.search_tsv, to_tsquery('pg_catalog.german', :q)) AS rank
+                FROM contacts c
+                WHERE c.tenant_id = :tid
+                  AND c.deleted_at IS NULL
+                  AND c.search_tsv @@ to_tsquery('pg_catalog.german', :q)
+                  AND c.id = ANY(:visible_ids)
+                ORDER BY rank DESC
+                LIMIT :lim
+                """
+            )
+            result = await db.execute(
+                sql,
+                {
+                    "q": tsquery,
+                    "tid": tenant_id,
+                    "lim": limit,
+                    "visible_ids": list(visible_ids),
+                },
+            )
+        else:
+            sql = text(
+                """
+                SELECT c.*, ts_rank(c.search_tsv, to_tsquery('pg_catalog.german', :q)) AS rank
+                FROM contacts c
+                WHERE c.tenant_id = :tid
+                  AND c.deleted_at IS NULL
+                  AND c.search_tsv @@ to_tsquery('pg_catalog.german', :q)
+                ORDER BY rank DESC
+                LIMIT :lim
+                """
+            )
+            result = await db.execute(
+                sql,
+                {"q": tsquery, "tid": tenant_id, "lim": limit},
+            )
         rows = result.mappings().all()
         return [dict(r) for r in rows]
 
-    async def search_vector(
+    async def _search_vector_filtered(
         self,
         db: AsyncSession,
         embedding: list[float],
         tenant_id: uuid.UUID,
         limit: int,
+        visible_ids: set[uuid.UUID] | None,
     ) -> list[dict[str, Any]]:
-        """Semantic search on contacts.embedding."""
-        sql = text(
-            """
-            SELECT c.*, 1 - (c.embedding <=> cast(:emb AS vector)) AS score
-            FROM contacts c
-            WHERE c.tenant_id = :tid
-              AND c.deleted_at IS NULL
-              AND c.embedding IS NOT NULL
-            ORDER BY c.embedding <=> cast(:emb AS vector)
-            LIMIT :lim
-            """
-        )
-        result = await db.execute(
-            sql,
-            {"emb": str(embedding), "tid": tenant_id, "lim": limit},
-        )
+        """Semantic search on contacts.embedding, filtered by visible_ids.
+
+        If visible_ids is None, no visibility filter is applied (system admin).
+        """
+        if visible_ids is not None:
+            sql = text(
+                """
+                SELECT c.*, 1 - (c.embedding <=> cast(:emb AS vector)) AS score
+                FROM contacts c
+                WHERE c.tenant_id = :tid
+                  AND c.deleted_at IS NULL
+                  AND c.embedding IS NOT NULL
+                  AND c.id = ANY(:visible_ids)
+                ORDER BY c.embedding <=> cast(:emb AS vector)
+                LIMIT :lim
+                """
+            )
+            result = await db.execute(
+                sql,
+                {
+                    "emb": str(embedding),
+                    "tid": tenant_id,
+                    "lim": limit,
+                    "visible_ids": list(visible_ids),
+                },
+            )
+        else:
+            sql = text(
+                """
+                SELECT c.*, 1 - (c.embedding <=> cast(:emb AS vector)) AS score
+                FROM contacts c
+                WHERE c.tenant_id = :tid
+                  AND c.deleted_at IS NULL
+                  AND c.embedding IS NOT NULL
+                ORDER BY c.embedding <=> cast(:emb AS vector)
+                LIMIT :lim
+                """
+            )
+            result = await db.execute(
+                sql,
+                {"emb": str(embedding), "tid": tenant_id, "lim": limit},
+            )
         rows = result.mappings().all()
         return [dict(r) for r in rows]
 
     async def get_embedding_text(
-        self,
-        db: AsyncSession,
-        entity_id: uuid.UUID,
-        tenant_id: uuid.UUID,
+        self, db: AsyncSession, entity_id: uuid.UUID, tenant_id: uuid.UUID
     ) -> str:
         """Get text for embedding generation."""
         sql = text(