@mohasinac/appkit 4.30.18 → 4.31.0

package/dist/features/stores/components/StoreDetailLayoutView.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { sieveFilter, sieveAnd, SIEVE_OP } from "@mohasinac/appkit";
 import { cache } from "react";
 import { storeRepository, siteSettingsRepository, reviewRepository, couponsRepository } from "../../../repositories";
+import { safeRead } from "../../../errors/safe-read";
 import { ROUTES } from "../../../next";
 import { Container, Main, Section, Text } from "../../../ui";
 import { STORE_PAGE_TABS } from "../../products/constants/listing-tabs";
@@ -26,7 +27,10 @@ const STORE_LISTING_HREF = {
     // a real non-zero count and landed on a page with none of those items.
     art: (slug) => String(ROUTES.PUBLIC.STORE_ART(slug)),
 };
-export const getStoreBySlug = cache((slug) => storeRepository.findBySlug(slug).catch(() => undefined));
+// The store IS this layout's subject, and `findBySlug` already returns null for
+// "no such slug" — swallowing a read failure into the same value would render
+// the "Store not found." branch below for a live store during an outage.
+export const getStoreBySlug = cache((slug) => storeRepository.findBySlug(slug));
 function tabLabel(base, count) {
     if (!count)
         return base;
@@ -39,9 +43,14 @@ export async function StoreDetailLayoutView({ storeSlug, activeTab, children, sc
     }
     const storeId = store?.id;
     const [settings, trust] = await Promise.all([
-        siteSettingsRepository.findById("global").catch(() => null),
+        safeRead(() => siteSettingsRepository.findById("global"), {
+            route: "/stores/[slug]", key: "store.siteSettings", fallback: null,
+        }),
         scamRegistryEnabled && storeId
-            ? getSellerTrustStatus(storeId).catch(() => undefined)
+            // Fails open to "no trust verdict", which hides the badge entirely rather
+            // than asserting a seller is clear — but that has to be recorded, since a
+            // missing badge is exactly what a clean seller looks like.
+            ? safeRead(() => getSellerTrustStatus(storeId), { route: "/stores/[slug]", key: "store.sellerTrust", fallback: undefined })
             : Promise.resolve(undefined),
     ]);
     // One derived batch instead of nine copy-pasted per-type queries. The tabs

package/dist/features/support/repository/support.repository.d.ts

@@ -1,5 +1,6 @@
 import { BaseRepository } from "../../../providers/db-firebase";
 import type { FirebaseSieveFields, FirebaseSieveResult, SieveModel } from "../../../providers/db-firebase";
+import type { JsonValue } from "../../../schemas/types";
 import type { DocumentSnapshot } from "firebase-admin/firestore";
 import { type SupportTicketDocument, type SupportTicketCreateInput, type SupportTicketUpdateInput, type TicketMessage, type TicketStatus } from "../schemas/firestore";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
@@ -22,10 +23,30 @@ export declare class SupportRepository extends BaseRepository<SupportTicketDocum
      */
     protected piiFields: readonly ["userEmail", "userDisplayName", "assignedToName"];
     constructor();
+    /**
+     * Derived on every write path via `applyWriteHooks`.
+     *
+     * 🛑 `subject` only. `description` and every message body are PII-encrypted
+     * at rest, and a plaintext prefix index over an encrypted field gives back
+     * precisely what the encryption withheld — the same reason an email is an
+     * exact-match blind index rather than a searchable corpus.
+     */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
     /** Decrypt on read so callers see the shape they wrote. */
     protected mapDoc<D = SupportTicketDocument>(snap: DocumentSnapshot): D;
     createTicket(input: SupportTicketCreateInput): Promise<SupportTicketDocument>;
     getUserTickets(userId: string, page?: number, pageSize?: number): Promise<FirebaseSieveResult<SupportTicketDocument>>;
+    /**
+     * Every ticket ABOUT one store.
+     *
+     * Keyed on the top-level `storeId`, not `relatedParties.storeId` — the
+     * nested one is unindexed and unqueryable, which is the whole reason a
+     * seller had no way to see the tickets raised against their own store.
+     */
+    getStoreTickets(storeId: string, page?: number, pageSize?: number, opts?: {
+        search?: string;
+        status?: string;
+    }): Promise<FirebaseSieveResult<SupportTicketDocument>>;
     getTicketById(ticketId: string): Promise<SupportTicketDocument | null>;
     countActiveTickets(userId: string): Promise<number>;
     getActiveOrderTicket(userId: string, orderId: string): Promise<SupportTicketDocument | null>;

package/dist/features/support/repository/support.repository.js

@@ -3,6 +3,9 @@ import { BaseRepository, prepareForFirestore, parseSieveDateValue, } from "../..
 import { normalizeError } from "../../../errors/normalize";
 import { DatabaseError } from "../../../errors";
 import { SUPPORT_TICKET_FIELDS } from "../../../constants/field-names";
+import { buildSearchTxt } from "../../../utils/search-txt";
+import { planSearchTxt, emptySearchResult } from "../../../utils/search-txt-query";
+import { sieveAnd, sieveFilter, SIEVE_OP } from "../../../utils/sieve-builder";
 import { decryptPiiFields } from "../../../security/pii-encrypt";
 import { SUPPORT_TICKET_COLLECTION, SUPPORT_TICKET_PII_FIELDS, SUPPORT_TICKET_TRACKED_FIELDS, TicketStatusValues, ACTIVE_TICKET_STATUSES, } from "../schemas/firestore";
 import { withHistory } from "../../../_internal/shared/history/index";
@@ -19,6 +22,18 @@ export class SupportRepository extends BaseRepository {
          */
         this.piiFields = SUPPORT_TICKET_PII_FIELDS;
     }
+    /**
+     * Derived on every write path via `applyWriteHooks`.
+     *
+     * 🛑 `subject` only. `description` and every message body are PII-encrypted
+     * at rest, and a plaintext prefix index over an encrypted field gives back
+     * precisely what the encryption withheld — the same reason an email is an
+     * exact-match blind index rather than a searchable corpus.
+     */
+    buildSearchTxtFor(data) {
+        const subject = typeof data.subject === "string" ? data.subject : "";
+        return subject ? buildSearchTxt([subject]) : null;
+    }
     /** Decrypt on read so callers see the shape they wrote. */
     mapDoc(snap) {
         const raw = super.mapDoc(snap);
@@ -51,6 +66,49 @@ export class SupportRepository extends BaseRepository {
         };
         return this.sieveQuery(model, SupportRepository.SIEVE_FIELDS, { defaultPageSize: pageSize, maxPageSize: 50 });
     }
+    /**
+     * Every ticket ABOUT one store.
+     *
+     * Keyed on the top-level `storeId`, not `relatedParties.storeId` — the
+     * nested one is unindexed and unqueryable, which is the whole reason a
+     * seller had no way to see the tickets raised against their own store.
+     */
+    async getStoreTickets(storeId, page = 1, pageSize = 20, opts) {
+        /*
+         * The term is tokenised the same way the index was built, and only the
+         * FIRST token is pushed down — Firestore allows one `array-contains` per
+         * query. The rest are applied in memory by `sieveQuery`'s own pass, which
+         * is what keeps a two-word search from silently matching on the first word
+         * alone (the partial-pushdown trap in Root Cause #62).
+         */
+        const clauses = [
+            sieveFilter(SUPPORT_TICKET_FIELDS.STORE_ID, SIEVE_OP.EQ, storeId),
+            ...(opts?.status
+                ? [sieveFilter(SUPPORT_TICKET_FIELDS.STATUS, SIEVE_OP.EQ, opts.status)]
+                : []),
+        ];
+        const plan = planSearchTxt(opts?.search);
+        /*
+         * A search that narrowed to no usable term returns NOTHING, not every
+         * ticket about the store. The alternative — falling through to the
+         * unfiltered list — is the shape where a user types a real subject,
+         * sees every row, and concludes the search is broken rather than that
+         * their term was stripped.
+         */
+        if (plan.empty)
+            return emptySearchResult();
+        let baseQuery = this.getCollection().where(SUPPORT_TICKET_FIELDS.STORE_ID, "==", storeId);
+        if (plan.head) {
+            baseQuery = baseQuery.where(SUPPORT_TICKET_FIELDS.SEARCH_TXT, "array-contains", plan.head);
+        }
+        const model = {
+            filters: sieveAnd(...clauses.slice(1)),
+            sorts: "-createdAt",
+            page,
+            pageSize,
+        };
+        return this.sieveQuery(model, SupportRepository.SIEVE_FIELDS, { defaultPageSize: pageSize, maxPageSize: 50, baseQuery });
+    }
     async getTicketById(ticketId) {
         return this.findById(ticketId);
     }
@@ -185,6 +243,11 @@ export class SupportRepository extends BaseRepository {
 }
 SupportRepository.SIEVE_FIELDS = {
     userId: { canFilter: true, canSort: false },
+    // The store a ticket is ABOUT. Filterable so a seller can list their own —
+    // `relatedParties.storeId` is not in this map and never was, which is why
+    // no seller-scoped query was possible.
+    storeId: { canFilter: true, canSort: false },
+    searchTxt: { canFilter: true, canSort: false },
     status: { canFilter: true, canSort: false },
     category: { canFilter: true, canSort: false },
     priority: { canFilter: true, canSort: false },

package/dist/features/support/schemas/firestore.d.ts

@@ -84,6 +84,21 @@ export interface SupportTicketDocument extends BaseDocument {
     description: string;
     /** Linked order ID — required when category === "order_issue". */
     orderId?: string;
+    /**
+     * The store this ticket is ABOUT, when it is about one.
+     *
+     * 🛑 Top-level and indexed, unlike `relatedParties.storeId`. That field
+     * exists and cannot serve a query: it is not in
+     * `SUPPORT_TICKET_INDEXED_FIELDS`, not in the repository's `SIEVE_FIELDS`,
+     * and has no composite index — so "every ticket about my store" was
+     * unanswerable, which is why no seller support surface existed.
+     *
+     * `relatedParties.storeId` stays as what it always was: the admin's
+     * after-the-fact linkage, set through the ST-6 panel. This one is set at
+     * creation, by the seller-facing route, and is what the seller's own list
+     * queries on.
+     */
+    storeId?: string;
     /**
      * ST-6 — subjects of the ticket. Admin/support assignable. `orderId` is
      * mirrored here for consistency when set via the linked-parties panel.
@@ -102,6 +117,16 @@ export interface SupportTicketDocument extends BaseDocument {
     internalNotes?: string;
     /** Threaded conversation. Ordered by createdAt asc. */
     messages: TicketMessage[];
+    /**
+     * Word-prefix search tokens. Derived on write by `buildSearchTxtFor`.
+     *
+     * 🛑 Built from `subject` ONLY — not `description`, and not the message
+     * bodies. Those are PII-encrypted at rest (`SUPPORT_TICKET_PII_FIELDS`), and
+     * a plaintext token index over an encrypted field hands back exactly what
+     * the encryption was there to withhold. The subject is what an admin scans a
+     * list by, and it is not encrypted.
+     */
+    searchTxt?: string[];
     /**
      * Stamped by the repository the first time `status` becomes `resolved` /
      * `closed`. Both were declared, given `SUPPORT_TICKET_FIELDS` constants and
@@ -141,11 +166,11 @@ export declare const SUPPORT_TICKET_TRACKED_FIELDS: readonly ["status", "priorit
  * (`assignedTo`) and never the name.
  */
 export declare const SUPPORT_TICKET_PII_FIELDS: readonly ["userEmail", "userDisplayName", "assignedToName"];
-export type SupportTicketCreateInput = Pick<SupportTicketDocument, "userId" | "userEmail" | "userDisplayName" | "category" | "subject" | "description" | "orderId">;
+export type SupportTicketCreateInput = Pick<SupportTicketDocument, "userId" | "userEmail" | "userDisplayName" | "category" | "subject" | "description" | "orderId" | "storeId">;
 export type SupportTicketUpdateInput = Partial<Pick<SupportTicketDocument, "status" | "priority" | "assignedTo" | "assignedToName" | "internalNotes" | "relatedParties">>;
 export declare const SUPPORT_TICKET_COLLECTION: "supportTickets";
 export declare const SUPPORT_TICKET_ID_PREFIX: "ticket-";
-export declare const SUPPORT_TICKET_INDEXED_FIELDS: readonly ["userId", "status", "category", "priority", "assignedTo", "orderId", "createdAt", "updatedAt"];
+export declare const SUPPORT_TICKET_INDEXED_FIELDS: readonly ["userId", "storeId", "searchTxt", "status", "category", "priority", "assignedTo", "orderId", "createdAt", "updatedAt"];
 export declare const DEFAULT_SUPPORT_TICKET_DATA: Partial<SupportTicketDocument>;
 export declare const SUPPORT_TICKET_FIELDS: {
     readonly ID: "id";

package/dist/features/support/schemas/firestore.js

@@ -104,6 +104,8 @@ export const SUPPORT_TICKET_COLLECTION = "supportTickets";
 export const SUPPORT_TICKET_ID_PREFIX = "ticket-";
 export const SUPPORT_TICKET_INDEXED_FIELDS = [
     "userId",
+    "storeId",
+    "searchTxt",
     "status",
     "category",
     "priority",

package/dist/features/support/schemas/ticket-create-form.js

@@ -64,6 +64,13 @@ export const supportTicketCreateSchema = z
         order: 4,
         row: "pair",
         help: "Required when the category is an order issue.",
+        /*
+         * Only meaningful for an order complaint, and paired with `visibleValues`
+         * at the payload so an id typed before switching category is not sent
+         * with a ticket that has nothing to do with an order. The `superRefine`
+         * below makes it required in the one case where it shows.
+         */
+        when: (v) => v.category === TicketCategoryValues.ORDER_ISSUE,
     }),
 })
     .superRefine((v, ctx) => {

package/dist/features/tester/schemas/checklist-item-form.d.ts

@@ -0,0 +1,43 @@
+import { z } from "zod";
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export declare const checklistItemFormSchema: z.ZodObject<{
+    label: z.ZodString;
+    description: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    href: z.ZodUnion<[z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>, z.ZodLiteral<"">]>;
+    groupLabel: z.ZodString;
+    groupKey: z.ZodString;
+    pageLabel: z.ZodString;
+    pageKey: z.ZodString;
+    order: z.ZodNumber;
+    phase: z.ZodNumber;
+    isActive: z.ZodBoolean;
+    adminOnly: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    isActive: boolean;
+    order: number;
+    groupKey: string;
+    pageKey: string;
+    phase: number;
+    groupLabel: string;
+    pageLabel: string;
+    adminOnly: boolean;
+    href?: string | undefined;
+    description?: string | undefined;
+}, {
+    label: string;
+    isActive: boolean;
+    order: number;
+    groupKey: string;
+    pageKey: string;
+    phase: number;
+    groupLabel: string;
+    pageLabel: string;
+    adminOnly: boolean;
+    href?: string | undefined;
+    description?: string | undefined;
+}>;
+export type ChecklistItemFormValues = z.infer<typeof checklistItemFormSchema>;

package/dist/features/tester/schemas/checklist-item-form.js

@@ -0,0 +1,109 @@
+/*
+ * WHY: `AdminTesterChecklistItemEditorView` declared a five-field
+ *      `.passthrough()` schema inside the component against eleven controls,
+ *      passed it to `<Form schema>`, and validated with one `if` on `label`.
+ *      Two of the five — `groupKey` and `pageKey` — were rendered as raw
+ *      `<Input>` with no `name`, so even had the schema run, `applyZodIssues`
+ *      would have had nowhere to put their errors. The six fields it did not
+ *      declare included `href`, which the tester hub turns into a "Go test
+ *      this →" link and which `audit-tester-checklist-hrefs` enforces on the
+ *      SEED data while the admin editor accepted anything at all.
+ * WHAT: The checklist-item editor's schema — every rendered field, annotated
+ *       for `buildSectionsFromSchema`.
+ *
+ * ## `href` is checked here as well as in the audit
+ *
+ * The audit only sees `tester-checklist-seed-data.ts`. An admin authoring a
+ * case through the UI bypasses it entirely, and a bad link is invisible until
+ * a tester clicks it and lands on a 404 — the same dead-deeplink shape as
+ * Root Cause #32. A leading-slash rule cannot prove the route exists, but it
+ * does reject the two things actually typed by hand: a bare page name, and a
+ * full URL to another origin.
+ *
+ * EXPORTS:
+ *   checklistItemFormSchema, type ChecklistItemFormValues
+ *
+ * @tag domain:tester
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminTesterChecklistItemEditorView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export const checklistItemFormSchema = z.object({
+    label: annotate(z
+        .string()
+        .min(3, "The test case needs at least 3 characters.")
+        .max(500, "Keep the test case under 500 characters."), {
+        section: "basics", sectionLabel: "Test case", sectionRequired: true,
+        quick: true, order: 1, row: "full", label: "Test case (Yes/No question)",
+        help: "Write it as a before → after, not as \"check X works\" — most defects here return a plausible-looking 200.",
+    }),
+    description: annotate(z.string().max(1000).optional().or(z.literal("")), {
+        section: "basics", order: 2, row: "full", kind: "textarea",
+        label: "Description", help: "Extra context for the tester.",
+    }),
+    /*
+     * Optional, and validated when present. `.url()` would reject the relative
+     * path this field is FOR; a leading slash is what makes it a route on this
+     * origin rather than someone else's.
+     */
+    href: annotate(z
+        .string()
+        .refine((v) => v === "" || v.startsWith("/"), {
+        message: "Start the link with / — it is a route on this site, not a full URL.",
+    })
+        .optional()
+        .or(z.literal("")), {
+        section: "basics", order: 3, row: "full", label: "Deep link",
+        help: "Jumps the tester straight to the feature being tested, e.g. /cart.",
+    }),
+    groupLabel: annotate(z.string().min(1, "A group is required.").max(200), {
+        section: "members", sectionLabel: "Where it appears", sectionRequired: true,
+        order: 1, row: "pair", label: "Group",
+        help: "Top-level accordion section on the Tester Hub.",
+    }),
+    groupKey: annotate(z
+        .string()
+        .min(1, "A group key is required.")
+        .max(100)
+        .regex(/^[a-z0-9-]+$/, "Lowercase letters, numbers and hyphens only."), {
+        section: "members", order: 2, row: "pair", label: "Group key",
+        help: "Auto-generated from the group name.",
+    }),
+    pageLabel: annotate(z.string().min(1, "A page is required.").max(200), {
+        section: "members", order: 3, row: "pair", label: "Page",
+        help: "Sub-accordion within the group.",
+    }),
+    pageKey: annotate(z
+        .string()
+        .min(1, "A page key is required.")
+        .max(100)
+        .regex(/^[a-z0-9-]+$/, "Lowercase letters, numbers and hyphens only."), {
+        section: "members", order: 4, row: "pair", label: "Page key",
+        help: "Auto-generated from the page name.",
+    }),
+    order: annotate(z.number().int().min(0, "Order cannot be negative."), {
+        section: "limits", sectionLabel: "Ordering", order: 1, row: "pair",
+        kind: "number", label: "Display order",
+        help: "Lower is shown first within the page.",
+    }),
+    phase: annotate(z.number().int().min(1, "Phases are numbered from 1."), {
+        section: "limits", order: 2, row: "pair", kind: "number", label: "Phase",
+        help: "Test batch this case belongs to — testers work through one phase at a time.",
+    }),
+    isActive: annotate(z.boolean(), {
+        section: "visibility", sectionLabel: "Visibility", order: 1, row: "full",
+        label: "Active (visible to testers)",
+    }),
+    adminOnly: annotate(z.boolean(), {
+        section: "visibility", order: 2, row: "full",
+        label: "Admin-only (requires canTestAdmin)",
+    }),
+});

package/dist/features/tester/seed-data/blog-tester-seed-data.js

@@ -13,7 +13,7 @@
  * @tag consumers:seed/index.ts,seed-cli.mjs
  * @tag sideEffects:none
  */
-import { seedExtMedia } from "../../../seed/_helpers/media";
+import { seedPhoto } from "../../../seed/_helpers/media";
 import { testDataExpiresAt } from "./tester-ttl";
 export const blogTesterSeedData = [
     {
@@ -22,7 +22,7 @@ export const blogTesterSeedData = [
         slug: "tester-sandbox-post",
         excerpt: "A disposable test blog post for the tester QA program — check that images, formatting, and reading flow work correctly.",
         content: `<h2>This is a test post</h2><p>It exists only for the tester QA program and will be deleted automatically after 7 days.</p><p>Check: does this render correctly? Are images loading? Is the layout readable?</p>`,
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/blog-cover-tester-sandbox-post-20260101/1200/600"), alt: "Test cover image" },
+        coverImage: { type: "image", url: seedPhoto("blog-cover-tester-sandbox-post-20260101", 1200, 600), alt: "Test cover image" },
         category: "guides",
         tags: ["test"],
         isFeatured: false,

package/dist/features/tester/seed-data/categories-tester-seed-data.js

@@ -18,7 +18,7 @@
  * @tag sideEffects:none
  */
 import { CATEGORY_FIELDS } from "../../../constants/field-names";
-import { seedExtMedia } from "../../../seed/_helpers/media";
+import { seedPhoto } from "../../../seed/_helpers/media";
 import { testDataExpiresAt } from "./tester-ttl";
 const emptyMetrics = {
     productCount: 0,
@@ -50,7 +50,7 @@ export const categoriesTesterSeedData = [
         isFeatured: false,
         isBrand: false,
         seo: { title: "Tester Sandbox", description: "Disposable test category.", keywords: ["test"] },
-        display: { icon: "🧪", coverImage: seedExtMedia("https://picsum.photos/seed/category-image-tester-sandbox-20260101/1200/600"), color: "#64748b", showInMenu: false, showInFooter: false },
+        display: { icon: "🧪", coverImage: seedPhoto("category-image-tester-sandbox-20260101", 1200, 600), color: "#64748b", showInMenu: false, showInFooter: false },
         isActive: true,
         isSearchable: true,
         showOnHomepage: false,

package/dist/features/tester/seed-data/events-tester-seed-data.js

@@ -15,7 +15,7 @@
  * @tag sideEffects:none
  */
 import { EVENT_FIELDS } from "../../../constants/field-names";
-import { seedExtMedia } from "../../../seed/_helpers/media";
+import { seedPhoto } from "../../../seed/_helpers/media";
 import { testDataExpiresAt } from "./tester-ttl";
 const TEST_EVENT_COVER_ALT = "Test event cover";
 const TEST_RAFFLE_PRIZE = "Test prize — not a real reward";
@@ -29,7 +29,7 @@ export const eventsTesterSeedData = [
         status: EVENT_FIELDS.STATUS_VALUES.ACTIVE,
         startsAt: new Date(),
         endsAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000),
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/event-cover-tester-sandbox-spin-20260101/1200/600"), alt: TEST_EVENT_COVER_ALT },
+        coverImage: { type: "image", url: seedPhoto("event-cover-tester-sandbox-spin-20260101", 1200, 600), alt: TEST_EVENT_COVER_ALT },
         tags: ["test"],
         hasRaffle: true,
         raffleType: "open_raffle",
@@ -58,7 +58,7 @@ export const eventsTesterSeedData = [
         status: EVENT_FIELDS.STATUS_VALUES.ACTIVE,
         startsAt: new Date(),
         endsAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000),
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/event-cover-tester-sandbox-top-scorers-20260101/1200/600"), alt: TEST_EVENT_COVER_ALT },
+        coverImage: { type: "image", url: seedPhoto("event-cover-tester-sandbox-top-scorers-20260101", 1200, 600), alt: TEST_EVENT_COVER_ALT },
         tags: ["test"],
         hasRaffle: true,
         raffleType: "top_n_scorers",
@@ -81,7 +81,7 @@ export const eventsTesterSeedData = [
         status: EVENT_FIELDS.STATUS_VALUES.ACTIVE,
         startsAt: new Date(),
         endsAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000),
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/event-cover-tester-sandbox-top-participants-20260101/1200/600"), alt: TEST_EVENT_COVER_ALT },
+        coverImage: { type: "image", url: seedPhoto("event-cover-tester-sandbox-top-participants-20260101", 1200, 600), alt: TEST_EVENT_COVER_ALT },
         tags: ["test"],
         hasRaffle: true,
         raffleType: "top_n_participants",
@@ -104,7 +104,7 @@ export const eventsTesterSeedData = [
         status: EVENT_FIELDS.STATUS_VALUES.ACTIVE,
         startsAt: new Date(),
         endsAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000),
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/event-cover-tester-sandbox-offer-20260101/1200/600"), alt: TEST_EVENT_COVER_ALT },
+        coverImage: { type: "image", url: seedPhoto("event-cover-tester-sandbox-offer-20260101", 1200, 600), alt: TEST_EVENT_COVER_ALT },
         tags: ["test"],
         offerConfig: {
             couponId: "coupon-rehan10",

package/dist/features/tester/seed-data/orders-tester-seed-data.js

@@ -27,14 +27,14 @@
  * @tag consumers:seed/index.ts,seed-cli.mjs
  * @tag sideEffects:none
  */
-import { seedExtMedia } from "../../../seed/_helpers/media";
+import { seedPhoto } from "../../../seed/_helpers/media";
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
 // Deterministic per-product thumbnail — see the identical helper's comment
 // in appkit/src/seed/orders-seed-data.ts for why this doesn't need to match
 // the real product's own seeded image.
 function orderItemImage(productId) {
-    return seedExtMedia(`https://picsum.photos/seed/order-item-${productId}/300/300`);
+    return seedPhoto(`order-item-${productId}`, 300, 300);
 }
 const BUYER_ID = "user-tester-qa";
 const BUYER_NAME = "QA Tester";