Add support for tags_all parameter with AND logic

Implemented a new tags_all query parameter that works alongside the
existing tags parameter to support both OR and AND tag filtering logic:

- tags: Filters with OR logic (matches resources with ANY of the tags)
- tags_all: Filters with AND logic (matches resources with ALL of the tags)
- Both parameters can be used together in a single query

Changes:
- Updated API design to include tags_all parameter
- Modified OpenSearch template to handle tags_all in must clause
- Updated mock implementation with two-pass filtering
- Added TagsAll field to SearchCriteria domain model
- Updated all converter functions to map tags_all from payload
- Added comprehensive test coverage for both parameters
- Regenerated Goa API code

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Signed-off-by: Andres Tobon <[email protected]>

Author: andrest50

cmd/service/converters.go

@@ -22,6 +22,7 @@ func (s *querySvcsrvc) payloadToCriteria(ctx context.Context, p *querysvc.QueryR
 		Parent:       p.Parent,
 		ResourceType: p.Type,
 		Tags:         p.Tags,
+		TagsAll:      p.TagsAll,
 		SortBy:       p.Sort,
 		PageToken:    p.PageToken,
 		PageSize:     constants.DefaultPageSize,
@@ -91,6 +92,7 @@ func (s *querySvcsrvc) payloadToCountPublicCriteria(payload *querysvc.QueryResou
 
 	// Set the criteria from the payload
 	criteria.Tags = payload.Tags
+	criteria.TagsAll = payload.TagsAll
 	if payload.Name != nil {
 		criteria.Name = payload.Name
 	}
@@ -119,6 +121,7 @@ func (s *querySvcsrvc) payloadToCountAggregationCriteria(payload *querysvc.Query
 
 	// Set the criteria from the payload
 	criteria.Tags = payload.Tags
+	criteria.TagsAll = payload.TagsAll
 	if payload.Name != nil {
 		criteria.Name = payload.Name
 	}

design/query-svc.go

@@ -50,8 +50,11 @@ var _ = dsl.Service("query-svc", func() {
 			dsl.Attribute("type", dsl.String, "Resource type to search", func() {
 				dsl.Example("committee")
 			})
-			dsl.Attribute("tags", dsl.ArrayOf(dsl.String), "Tags to search (varies by object type)", func() {
-				dsl.Example([]string{"active"})
+			dsl.Attribute("tags", dsl.ArrayOf(dsl.String), "Tags to search with OR logic - matches resources with any of these tags", func() {
+				dsl.Example([]string{"active", "public"})
+			})
+			dsl.Attribute("tags_all", dsl.ArrayOf(dsl.String), "Tags to search with AND logic - matches resources that have all of these tags", func() {
+				dsl.Example([]string{"governance", "security"})
 			})
 			dsl.Required("bearer_token", "version")
 		})
@@ -74,6 +77,7 @@ var _ = dsl.Service("query-svc", func() {
 			dsl.Param("parent")
 			dsl.Param("type")
 			dsl.Param("tags")
+			dsl.Param("tags_all")
 			dsl.Param("sort")
 			dsl.Param("page_token")
 			dsl.Header("bearer_token:Authorization")
@@ -110,8 +114,11 @@ var _ = dsl.Service("query-svc", func() {
 			dsl.Attribute("type", dsl.String, "Resource type to search", func() {
 				dsl.Example("committee")
 			})
-			dsl.Attribute("tags", dsl.ArrayOf(dsl.String), "Tags to search (varies by object type)", func() {
-				dsl.Example([]string{"active"})
+			dsl.Attribute("tags", dsl.ArrayOf(dsl.String), "Tags to search with OR logic - matches resources with any of these tags", func() {
+				dsl.Example([]string{"active", "public"})
+			})
+			dsl.Attribute("tags_all", dsl.ArrayOf(dsl.String), "Tags to search with AND logic - matches resources that have all of these tags", func() {
+				dsl.Example([]string{"governance", "security"})
 			})
 			dsl.Required("bearer_token", "version")
 		})
@@ -138,6 +145,7 @@ var _ = dsl.Service("query-svc", func() {
 			dsl.Param("parent")
 			dsl.Param("type")
 			dsl.Param("tags")
+			dsl.Param("tags_all")
 			dsl.Header("bearer_token:Authorization")
 			dsl.Response(dsl.StatusOK, func() {
 				dsl.Header("cache_control:Cache-Control")