PDQ/bin/messages_list.php

<?php
require_once __DIR__ . '/../lib/identity.php';
require_once __DIR__ . '/../lib/render.php';

[$actor, $vendor_id] = resolve_request_actor();

// ICG callers can request any vendor's thread via ?vendor=<slug>; vendor
// callers are pinned to their own thread by resolve_request_actor().
if ($actor === 'ICG') {
    $slug = $_GET['vendor'] ?? '';
    $v = find_vendor_by_slug($slug);
    if (!$v) { http_response_code(400); echo 'Bad vendor'; exit; }
    $vendor_id = (int) $v['id'];
}

$since = isset($_GET['since']) ? (int) $_GET['since'] : null;

header('Content-Type: text/html; charset=utf-8');
header('X-Max-Id: ' . max_message_id($vendor_id));
echo render_messages($vendor_id, $since);