@mohasinac/appkit 4.30.12 → 4.30.15

package/dist/errors/degraded.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Degradation that the caller can SEE.
+ *
+ * Every bug this search/PII migration surfaced returned HTTP 200 with
+ * plausible-looking rows. A dropped Sieve clause, a swallowed
+ * FAILED_PRECONDITION, a retry with `q` deleted — none of them errored, and a
+ * reader had no way to tell a narrowed list from an unnarrowed one. A
+ * `serverLogger.warn` does not help: it goes to the operator, and the person
+ * being misled is the user.
+ *
+ * So when a handler cannot serve exactly what was asked for but chooses to
+ * serve something anyway, it must say so ON THE RESPONSE.
+ *
+ * This is not an error channel. A degraded response is a successful response
+ * whose shape is honest about a compromise the handler made deliberately —
+ * "I applied your filter but ignored your sort", not "something went wrong".
+ * A failure that has no defensible partial answer should still throw.
+ */
+/** One thing the handler could not honour, and why. */
+export interface DegradedNotice {
+    /** What was dropped, in the caller's vocabulary: "sorts", "filters.status". */
+    dropped: string;
+    /**
+     * Why, in one sentence a UI can show verbatim. Written for the user, not the
+     * operator — "Results are not sorted while searching" beats
+     * "FAILED_PRECONDITION: composite index required".
+     */
+    reason: string;
+}
+/**
+ * Attach notices to a response payload.
+ *
+ * Returns the payload UNCHANGED when nothing degraded, so the common path
+ * carries no `degraded: false` noise and a client can treat the field's mere
+ * presence as the signal.
+ */
+export declare function withDegraded<T extends object>(payload: T, notices: readonly DegradedNotice[]): T | (T & {
+    degraded: readonly DegradedNotice[];
+});
+/**
+ * The specific compromise three admin search endpoints make.
+ *
+ * `/api/admin/{users,reviews,payouts}` resolve `q` through an HMAC blind index
+ * (`emailIndex==<hash>`) or an exact name match. Firestore needs a composite
+ * index for each equality x sort x direction combination, and preserving the
+ * caller's sort across all three endpoints was measured at **14** additional
+ * indexes — to order a result set that an exact email match bounds at one row.
+ *
+ * Dropping the sort is therefore the right trade. Dropping it SILENTLY was not:
+ * the sort dropdown went on displaying "Oldest" over unsorted rows.
+ */
+export declare const SORT_DROPPED_FOR_EXACT_SEARCH: DegradedNotice;

package/dist/errors/degraded.js

@@ -0,0 +1,47 @@
+/**
+ * Degradation that the caller can SEE.
+ *
+ * Every bug this search/PII migration surfaced returned HTTP 200 with
+ * plausible-looking rows. A dropped Sieve clause, a swallowed
+ * FAILED_PRECONDITION, a retry with `q` deleted — none of them errored, and a
+ * reader had no way to tell a narrowed list from an unnarrowed one. A
+ * `serverLogger.warn` does not help: it goes to the operator, and the person
+ * being misled is the user.
+ *
+ * So when a handler cannot serve exactly what was asked for but chooses to
+ * serve something anyway, it must say so ON THE RESPONSE.
+ *
+ * This is not an error channel. A degraded response is a successful response
+ * whose shape is honest about a compromise the handler made deliberately —
+ * "I applied your filter but ignored your sort", not "something went wrong".
+ * A failure that has no defensible partial answer should still throw.
+ */
+/**
+ * Attach notices to a response payload.
+ *
+ * Returns the payload UNCHANGED when nothing degraded, so the common path
+ * carries no `degraded: false` noise and a client can treat the field's mere
+ * presence as the signal.
+ */
+export function withDegraded(payload, notices) {
+    if (notices.length === 0)
+        return payload;
+    return { ...payload, degraded: notices };
+}
+/**
+ * The specific compromise three admin search endpoints make.
+ *
+ * `/api/admin/{users,reviews,payouts}` resolve `q` through an HMAC blind index
+ * (`emailIndex==<hash>`) or an exact name match. Firestore needs a composite
+ * index for each equality x sort x direction combination, and preserving the
+ * caller's sort across all three endpoints was measured at **14** additional
+ * indexes — to order a result set that an exact email match bounds at one row.
+ *
+ * Dropping the sort is therefore the right trade. Dropping it SILENTLY was not:
+ * the sort dropdown went on displaying "Oldest" over unsorted rows.
+ */
+export const SORT_DROPPED_FOR_EXACT_SEARCH = {
+    dropped: "sorts",
+    reason: "Results are not sorted while searching — search matches an exact value, " +
+        "so ordering is unavailable for this query.",
+};

package/dist/errors/index.d.ts

@@ -16,3 +16,4 @@ export { ERROR_DISPLAY_MAP, getErrorDisplay, type ErrorDisplayEntry, } from "./e
 export { safeRead, installDegradedReadReporter, type DegradedReadReport, } from "./safe-read";
 export { normalizeError, getErrorMessage, isAuthError, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./normalize";
 export type { NormalizedError, NormalizedApiError, NormalizedAppError, NormalizedFirebaseAuthError, NormalizedFirebaseFirestoreError, NormalizedFirebaseStorageError, NormalizedNativeError, NormalizedNetworkError, NormalizedUnknownThrownValue, NormalizedZodError, } from "./normalize";
+export * from "./degraded";

package/dist/errors/index.js

@@ -25,3 +25,4 @@ export { safeRead, installDegradedReadReporter, } from "./safe-read";
 // `isAuthError` here replaces the legacy keyword matcher at
 // `appkit/src/utils/auth-error.ts` (now a thin re-export shim).
 export { normalizeError, getErrorMessage, isAuthError, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./normalize";
+export * from "./degraded";

package/dist/features/admin/components/AdminBlogView.js

@@ -23,7 +23,14 @@ export function AdminBlogView({ children, ...props }) {
         title: "Blog Posts",
         // buildBlogSearchTxt indexes title + excerpt + category + tags — NOT the post
         // body, which is not tokenised.
-        searchPlaceholder: "Search by title, excerpt, category or tag…",
+        // buildBlogSearchTxt indexes title + excerpt + category + tags — NOT the
+        // post body, which is not tokenised.
+        search: {
+            placeholder: "Search by title, excerpt, category or tag…",
+            mode: "partial",
+            fields: ["title", "excerpt", "category", "tags"],
+            commit: "debounce",
+        },
         emptyLabel: "No blog posts found",
         filterKeys: ["status", "isFeatured"],
         defaultSort: sortBy("publishedAt", "DESC"),

package/dist/features/admin/components/AdminCouponsView.js

@@ -53,7 +53,14 @@ export function AdminCouponsView({ children, onBulkArchive, onBulkDelete, ...pro
         portal: "admin",
         title: "Coupons",
         // buildCouponSearchTxt indexes code + name + description — nothing else.
-        searchPlaceholder: "Search by code, name or description…",
+        // buildCouponSearchTxt indexes exactly these three. Partial prefix
+        // matching, so debounce is the right commit here.
+        search: {
+            placeholder: "Search by code, name or description…",
+            mode: "partial",
+            fields: ["code", "name", "description"],
+            commit: "debounce",
+        },
         emptyLabel: "No coupons found",
         filterKeys: ["type", "showExpired"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminOffersView.js

@@ -106,7 +106,15 @@ export function AdminOffersView({ children, ...props }) {
         // buildOfferSearchTxt indexes productTitle + productSlug + storeName. It does
         // NOT index buyerName or buyerEmail — those are PII, and the placeholder
         // must not promise a match it will never make.
-        searchPlaceholder: "Search by product or store…",
+        // buildOfferSearchTxt indexes productTitle + productSlug + storeName.
+        // NOT buyerName or buyerEmail — those are PII (D1), and a placeholder
+        // naming them would promise a match this corpus cannot make.
+        search: {
+            placeholder: "Search by product or store…",
+            mode: "partial",
+            fields: ["productTitle", "productSlug", "storeName"],
+            commit: "debounce",
+        },
         emptyLabel: "No offers found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminPayoutsView.js

@@ -81,7 +81,15 @@ export function AdminPayoutsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Payouts",
-        searchPlaceholder: "Search stores, payout IDs, or order groups",
+        // 🛑 This said "Search stores, payout IDs, or order groups". The route
+        // resolves `q` as `sellerEmailIndex == piiBlindIndex(q)` when it contains
+        // an "@", else `sellerName == q` — both EXACT, and neither is a store, a
+        // payout id or an order group. All three promised things were unmatchable.
+        search: {
+            placeholder: "Seller email or name (exact match)",
+            mode: "exact",
+            fields: ["sellerEmail", "sellerName"],
+        },
         emptyLabel: "No payouts found",
         filterKeys: ["status", "showAllPayouts"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminReviewsView.js

@@ -69,7 +69,20 @@ export function AdminReviewsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Reviews",
-        searchPlaceholder: "Search reviews, products, or seller names",
+        // 🛑 This said "Search reviews, products, or seller names". The route
+        // resolves `q` as `userNameIndex == piiBlindIndex(q)` — an EXACT match on
+        // the REVIEWER's name, and nothing else. It matched no review text, no
+        // product and no seller, so a partial name returned an empty list that was
+        // indistinguishable from "no such reviewer".
+        //
+        // `mode: "exact"` is not a limitation to apologise for: the field is
+        // encrypted and ciphertext has no usable prefix (D1). Say so in the
+        // placeholder instead of promising what the corpus cannot do.
+        search: {
+            placeholder: "Reviewer name (exact match)",
+            mode: "exact",
+            fields: ["userName"],
+        },
         emptyLabel: "No reviews found",
         filterKeys: ["status", "rating"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminScammersView.js

@@ -42,7 +42,21 @@ export function AdminScammersView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Scammers",
-        searchPlaceholder: "Search by name, phone, UPI ID",
+        // buildScammerSearchTxt indexes all four identity arrays plus scamType.
+        // They are stored PLAINTEXT on purpose — a victim googles a UPI id before
+        // paying, so SEO is the feature — which is why this collection can have a
+        // partial-match box where users/reviews/payouts cannot.
+        //
+        // The old box promised the same three fields but ran `displayNames@=q`,
+        // i.e. array-contains on a WHOLE element: "Vikram" matched nothing
+        // against ["Vikram M", "Vikram Mehta"], and phone/UPI were never
+        // searched at all.
+        search: {
+            placeholder: "Search by name, phone, UPI ID or email…",
+            mode: "partial",
+            fields: ["displayNames", "phones", "upiIds", "emails", "scamType"],
+            commit: "debounce",
+        },
         emptyLabel: "No scammer profiles found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/DataListingView.d.ts

@@ -105,8 +105,29 @@ export interface ListingViewConfig<TResponse, TRow extends {
         placeholder: string;
         /** `exact` for a field resolved through an HMAC blind index. */
         mode?: "partial" | "exact";
-        /** Fields the endpoint actually matches on. */
+        /**
+         * Fields the endpoint actually matches on.
+         *
+         * Not decoration: this is what lets the audit check that the placeholder
+         * does not promise a match the corpus cannot make. A box reading "search
+         * by buyer" over an index built from productTitle/storeName/trackingNumber
+         * is the same lie as a box the endpoint ignores entirely — just harder to
+         * notice, because it returns a plausible empty list instead of nothing.
+         */
         fields?: readonly string[];
+        /**
+         * When the term reaches the URL. Defaults to `"enter"`, which is the
+         * behaviour every existing box already had.
+         *
+         * 🛑 `"debounce"` is invalid with `mode: "exact"` and the audit blocks the
+         * pairing. An exact search resolves an HMAC blind index or a whole-value
+         * equality, so every keystroke before the last is a query GUARANTEED to
+         * match nothing — the user watches "no results" while typing a value that
+         * is in fact present, and each of those round trips is a billed read.
+         */
+        commit?: "enter" | "debounce";
+        /** Debounce delay in ms. Ignored unless `commit: "debounce"`. */
+        debounceMs?: number;
     };
     emptyLabel?: string;
     sortOptions: ListingSortOption[];

package/dist/features/admin/components/DataListingView.js

@@ -26,6 +26,13 @@ export function DataListingView({ config, }) {
     const listing = useAdminListing({
         ...config,
         initialView: effectiveInitialView,
+        // Mapped explicitly: `...config` cannot reach these, they live one level
+        // down under `search`. An exact-match search is never debounced — every
+        // keystroke before the last is a query guaranteed to match nothing — so
+        // the mode forces "enter" regardless of what the view asked for, and the
+        // audit blocks the pairing at author time rather than relying on this.
+        searchCommit: config.search?.mode === "exact" ? "enter" : config.search?.commit,
+        searchDebounceMs: config.search?.debounceMs,
     });
     const { view, setView, table, panel, searchInput, setSearchInput, commitSearch, filterOpen, setFilterOpen, openFilters, applyFilters, clearFilters, pendingFilters, setPendingFilters, activeFilterCount, hasActiveState, resetAll, rows, isLoading, errorMessage, currentPage, totalPages, selection, pageSize, setPageSize, } = listing;
     const selectionContext = {

package/dist/features/admin/hooks/useAdminListing.d.ts

@@ -20,6 +20,15 @@ export interface AdminListingConfig<TResponse, TRow extends {
      * a non-"All" filter state (e.g. hide inactive rows) on first load, while
      * "Clear filters" (which writes an explicit "") still shows everything. */
     filterDefaults?: Record<string, string>;
+    /**
+     * When a typed term reaches the URL. `"enter"` (the default) is what every
+     * box already did — commit on Enter or the button, never on keystroke.
+     *
+     * Passed down from `ListingViewConfig.search.commit`; see the 🛑 there for
+     * why `"debounce"` is invalid with `mode: "exact"`.
+     */
+    searchCommit?: "enter" | "debounce";
+    searchDebounceMs?: number;
 }
 export declare function useAdminListing<TResponse, TRow extends {
     id: string;

package/dist/features/admin/hooks/useAdminListing.js

@@ -1,12 +1,12 @@
 "use client";
-import { useState, useCallback } from "react";
+import { useState, useCallback, useEffect, useRef } from "react";
 import { useUrlTable } from "../../../react/hooks/useUrlTable";
 import { useBulkSelection } from "../../../react/hooks/useBulkSelection";
 import { usePanelUrlSync } from "../../../react/hooks/use-panel-url-sync";
 import { useDataViewMode } from "../../account/hooks/useDataViewMode";
 import { useAdminListingData } from "./useAdminListingData";
 export function useAdminListing(config) {
-    const { filterKeys, defaultSort, pageSize: defaultPageSize = 25, queryKey, endpoint, mapRows, getTotal, buildFilters, buildExtraParams, filterDefaults = {}, } = config;
+    const { filterKeys, defaultSort, pageSize: defaultPageSize = 25, queryKey, endpoint, mapRows, getTotal, buildFilters, buildExtraParams, filterDefaults = {}, searchCommit = "enter", searchDebounceMs = 350, } = config;
     // Persisted, viewport-aware view-mode: below 768px defaults to "list"
     // (AdminViewCards' one-full-width-card-per-row layout) unless the caller
     // explicitly pins hideTableView (grid-only views like coupons); the user's
@@ -53,6 +53,34 @@ export function useAdminListing(config) {
     const commitSearch = useCallback(() => {
         table.set("q", searchInput.trim());
     }, [searchInput, table]);
+    // Debounced commit, opt-in per view.
+    //
+    // Two things here are load-bearing:
+    //
+    // 1. It compares against what is ALREADY in the URL and skips a no-op.
+    //    `table.set` issues a router.replace, and replacing the URL with the
+    //    value it already holds re-runs the query for nothing — on mount, on
+    //    every unrelated re-render, and on the render caused by the previous
+    //    commit. That is the double-navigation shape of Root Cause #13.
+    //
+    // 2. The timer is cleared on every keystroke AND on unmount, so a term is
+    //    never committed by a view the user has already navigated away from.
+    const debounceRef = useRef(null);
+    const committed = table.get("q") ?? "";
+    useEffect(() => {
+        if (searchCommit !== "debounce")
+            return;
+        const next = searchInput.trim();
+        if (next === committed)
+            return;
+        if (debounceRef.current)
+            clearTimeout(debounceRef.current);
+        debounceRef.current = setTimeout(() => table.set("q", next), searchDebounceMs);
+        return () => {
+            if (debounceRef.current)
+                clearTimeout(debounceRef.current);
+        };
+    }, [searchInput, committed, searchCommit, searchDebounceMs, table]);
     const activeFilterCount = filterKeys.filter((k) => !!table.get(k)).length;
     const hasActiveState = !!table.get("q") || table.get("sort") !== defaultSort || activeFilterCount > 0;
     const currentFilterState = Object.fromEntries(filterKeys.map((k) => [k, table.get(k)]));

package/dist/features/events/components/AdminEventsView.js

@@ -34,7 +34,13 @@ export function AdminEventsView({ children, ...props }) {
         portal: "admin",
         title: "Events",
         // buildEventSearchTxt indexes title + description + type + tags.
-        searchPlaceholder: "Search by title, description, type or tag…",
+        // buildEventSearchTxt indexes title + description + type + tags.
+        search: {
+            placeholder: "Search by title, description, type or tag…",
+            mode: "partial",
+            fields: ["title", "description", "type", "tags"],
+            commit: "debounce",
+        },
         emptyLabel: "No events found",
         filterKeys: ["status", "type"],
         defaultSort: sortBy("startsAt", "DESC"),

package/dist/features/events/server.d.ts

@@ -6,5 +6,4 @@
 export * from "./actions";
 export { EventRepository, EventsRepository, eventRepository, } from "./repository/events.repository";
 export { EventEntryRepository, EventEntriesRepository, eventEntryRepository, } from "./repository/event-entry.repository";
-export { GET as eventsGET, GET } from "./api/route";
 export { GET as eventIdGET } from "./api/[id]/route";

package/dist/features/events/server.js

@@ -6,5 +6,4 @@
 export * from "./actions";
 export { EventRepository, EventsRepository, eventRepository, } from "./repository/events.repository";
 export { EventEntryRepository, EventEntriesRepository, eventEntryRepository, } from "./repository/event-entry.repository";
-export { GET as eventsGET, GET } from "./api/route";
 export { GET as eventIdGET } from "./api/[id]/route";

package/dist/features/faq/index.d.ts

@@ -1,5 +1,4 @@
 export * from "./types";
-export * from "./hooks/useFAQs";
 export * from "./hooks/useFaqList";
 export * from "./hooks/useFaqVote";
 export * from "./components";

package/dist/features/faq/index.js

@@ -1,5 +1,4 @@
 export * from "./types";
-export * from "./hooks/useFAQs";
 export * from "./hooks/useFaqList";
 export * from "./hooks/useFaqVote";
 export * from "./components";

package/dist/features/faq/server.d.ts

@@ -5,4 +5,3 @@
  */
 export * from "./actions";
 export { FAQsRepository, FirebaseFAQsRepository, faqsRepository, } from "./repository/faqs.repository";
-export { GET as faqGET, GET } from "./api/route";

package/dist/features/faq/server.js

@@ -5,4 +5,3 @@
  */
 export * from "./actions";
 export { FAQsRepository, FirebaseFAQsRepository, faqsRepository, } from "./repository/faqs.repository";
-export { GET as faqGET, GET } from "./api/route";

package/dist/features/reviews/server.d.ts

@@ -5,5 +5,4 @@
  */
 export * from "./actions";
 export { ReviewRepository, reviewRepository, } from "./repository/reviews.repository";
-export { GET as reviewsGET, GET, POST } from "./api/route";
 export { reviewItemGET, reviewItemPATCH, reviewItemDELETE, } from "./api/[id]/route";

package/dist/features/reviews/server.js

@@ -5,5 +5,4 @@
  */
 export * from "./actions";
 export { ReviewRepository, reviewRepository, } from "./repository/reviews.repository";
-export { GET as reviewsGET, GET, POST } from "./api/route";
 export { reviewItemGET, reviewItemPATCH, reviewItemDELETE, } from "./api/[id]/route";

package/dist/features/scams/repository/scammer.repository.d.ts

@@ -1,5 +1,6 @@
 import { BaseRepository, parseSieveDateValue, type FirebaseSieveResult, type SieveModel } from "../../../providers/db-firebase";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
+import type { JsonValue } from "../../../schemas/types";
 /** Who/why for a scammer write that lands in `statusHistory`. */
 export interface ScammerWriteContext {
     actor?: HistoryActor;
@@ -11,6 +12,10 @@ import { type ScammerDocument, type ScammerIncidentDocument, type ScammerComment
 declare class ScammerRepository extends BaseRepository<ScammerDocument> {
     constructor();
     static readonly SIEVE_FIELDS: {
+        searchTxt: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         id: {
             canFilter: boolean;
             canSort: boolean;
@@ -58,7 +63,11 @@ declare class ScammerRepository extends BaseRepository<ScammerDocument> {
         };
     };
     listVerified(model: SieveModel): Promise<FirebaseSieveResult<ScammerDocument>>;
-    listAll(model: SieveModel): Promise<FirebaseSieveResult<ScammerDocument>>;
+    /** Derived on every write path via `applyWriteHooks`. */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
+    listAll(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<ScammerDocument>>;
     findBySeoSlug(seoSlug: string): Promise<ScammerDocument | null>;
     create(input: ScammerCreateInput): Promise<ScammerDocument>;
     /**

package/dist/features/scams/repository/scammer.repository.js

@@ -5,6 +5,8 @@ import { serverLogger } from "../../../monitoring/server-logger";
 import { increment } from "../../../contracts/field-ops";
 import { withHistory } from "../../../_internal/shared/history/index";
 import { SCAMMER_TRACKED_FIELDS, SCAMMER_HISTORY_PII_FIELDS } from "../schemas/firestore";
+import { buildScammerSearchTxt } from "../../../utils/search-txt-builders";
+import { planSearchTxt, refineSearchTxt, emptySearchResult, } from "../../../utils/search-txt-query";
 import { SCAMMER_COLLECTION, SCAMMER_FIELDS, SCAMMER_INCIDENTS_SUBCOLLECTION, SCAMMER_COMMENTS_SUBCOLLECTION, DEFAULT_SCAMMER_DATA, } from "../schemas/firestore";
 class ScammerRepository extends BaseRepository {
     constructor() {
@@ -18,11 +20,26 @@ class ScammerRepository extends BaseRepository {
             maxPageSize: 50,
         });
     }
-    async listAll(model) {
-        return this.sieveQuery(model, ScammerRepository.SIEVE_FIELDS, {
+    /** Derived on every write path via `applyWriteHooks`. */
+    buildSearchTxtFor(data) {
+        return buildScammerSearchTxt(data);
+    }
+    async listAll(model, opts) {
+        const plan = planSearchTxt(opts?.search);
+        // A search that narrowed to no usable term must return NOTHING, not the
+        // entire scam registry.
+        if (plan.empty)
+            return emptySearchResult();
+        let baseQuery = this.getCollection();
+        if (plan.head) {
+            baseQuery = baseQuery.where(SCAMMER_FIELDS.SEARCH_TXT, "array-contains", plan.head);
+        }
+        const result = await this.sieveQuery(model, ScammerRepository.SIEVE_FIELDS, {
+            baseQuery,
             defaultPageSize: 50,
             maxPageSize: 200,
         });
+        return refineSearchTxt(result, plan.rest);
     }
     async findBySeoSlug(seoSlug) {
         try {
@@ -203,6 +220,7 @@ class ScammerRepository extends BaseRepository {
     }
 }
 ScammerRepository.SIEVE_FIELDS = {
+    searchTxt: { canFilter: true, canSort: false },
     id: { canFilter: true, canSort: false },
     status: { canFilter: true, canSort: true },
     scamType: { canFilter: true, canSort: true },

package/dist/features/scams/schemas/firestore.d.ts

@@ -105,6 +105,15 @@ export interface ScammerDocument extends BaseDocument {
     upiIds: string[];
     /** Email addresses used by the scammer. Stored plaintext for SEO. */
     emails: string[];
+    /**
+     * Word-prefix n-grams over the identity fields, for `array-contains`
+     * search. Derived by `buildScammerSearchTxt` on every write.
+     *
+     * Optional because documents written before this field existed do not have
+     * it. Never filter with an inequality on it — that would exclude exactly
+     * those rows, which is the whole pre-existing registry.
+     */
+    searchTxt?: string[];
     /** Social media profiles where the scammer operated. */
     socialMedia: ScammerSocialMedia[];
     /** Primary scam type for this profile (most common across incidents). */
@@ -338,6 +347,7 @@ export type ScammerAdminUpdateInput = Partial<Pick<ScammerDocument, "status" | "
 export declare const SCAMMER_FIELDS: {
     readonly ID: "id";
     readonly SEO_SLUG: "seoSlug";
+    readonly SEARCH_TXT: "searchTxt";
     readonly DISPLAY_NAMES: "displayNames";
     readonly PHONES: "phones";
     readonly UPI_IDS: "upiIds";

package/dist/features/scams/schemas/firestore.js

@@ -170,6 +170,7 @@ export const MAX_PENDING_SCAMMER_REPORTS_PER_USER = 5;
 export const SCAMMER_FIELDS = {
     ID: "id",
     SEO_SLUG: "seoSlug",
+    SEARCH_TXT: "searchTxt",
     DISPLAY_NAMES: "displayNames",
     PHONES: "phones",
     UPI_IDS: "upiIds",

package/dist/features/scams/schemas/index.d.ts

@@ -10,11 +10,11 @@ export declare const scammerSocialMediaSchema: z.ZodObject<{
     handle: z.ZodString;
     url: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
     handle: string;
     url?: string | undefined;
 }, {
-    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
     handle: string;
     url?: string | undefined;
 }>;
@@ -44,11 +44,11 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
         handle: z.ZodString;
         url: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }, {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }>, "many">;
@@ -93,7 +93,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     scamType: string;
     reportedBy: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     phones: string[];
     upiIds: string[];
@@ -102,7 +102,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     incidentCount: number;
     seoSlug: string;
     socialMedia: {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }[];
@@ -133,7 +133,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     scamType: string;
     reportedBy: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     phones: string[];
     upiIds: string[];
@@ -142,7 +142,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     incidentCount: number;
     seoSlug: string;
     socialMedia: {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }[];
@@ -201,7 +201,7 @@ export declare const scammerIncidentFirestoreSchema: z.ZodObject<{
     reportedBy: string;
     scammerId: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     verifiedBy?: string | undefined;
     amountLost?: number | undefined;
@@ -224,7 +224,7 @@ export declare const scammerIncidentFirestoreSchema: z.ZodObject<{
     reportedBy: string;
     scammerId: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     verifiedBy?: string | undefined;
     amountLost?: number | undefined;

package/dist/features/seller/components/SellerCouponsView.js

@@ -50,7 +50,13 @@ export function SellerCouponsView({ onCreateClick, onEditClick, onToggle, onDele
         portal: "seller",
         title: "Coupons",
         // buildCouponSearchTxt indexes code + name + description — nothing else.
-        searchPlaceholder: "Search by code, name or description…",
+        // buildCouponSearchTxt indexes exactly these three.
+        search: {
+            placeholder: "Search by code, name or description…",
+            mode: "partial",
+            fields: ["code", "name", "description"],
+            commit: "debounce",
+        },
         emptyLabel: "No coupons found — create your first coupon",
         filterKeys: ["isActive"],
         defaultSort: sortBy("createdAt", "DESC"),