@mohasinac/appkit 4.30.8 → 4.30.10

package/dist/_internal/server/jobs/core/listingProcessor.js

@@ -56,13 +56,21 @@ const LISTERS = {
             ? `${m.filters},categoryType==brand`
             : "categoryType==brand",
     }),
-    orders: (m) => orderRepository.listAll(m),
-    reviews: (m) => reviewRepository.listAll(m),
+    orders: (m, o) => orderRepository.listAll(m, { search: getStringOpt(o, "search") }),
+    reviews: (m, o) => reviewRepository.listAll(m, { search: getStringOpt(o, "search") }),
     coupons: (m) => couponsRepository.list(m),
     bids: (m) => bidRepository.list(m),
     payouts: (m) => payoutRepository.list(m),
-    blogPosts: (m) => blogRepository.listAll(m),
-    events: (m) => eventRepository.list(m),
+    blogPosts: (m, o) => blogRepository.listAll(m, { search: getStringOpt(o, "search") }),
+    events: (m, o) => eventRepository.list(m, { search: getStringOpt(o, "search") }),
+    // 🛑 EVERY lister whose repository accepts a `search` opt MUST forward it.
+    // `baseOpts.search` is how token search reaches the repository — Sieve cannot
+    // express array-contains, so it can never ride inside `filters`. A lister
+    // written `(m) => repo.list(m)` silently drops it and the Function returns an
+    // UNFILTERED page with a 200, while the same route's local fallback filters
+    // correctly — so it only reproduces in production, and only when the Function
+    // is reachable. That is how it survived here for orders, reviews, blogPosts,
+    // events and stores after their routes and repositories were both wired.
     // Forwards opts so `baseOpts.search` reaches the repository's token search.
     // This was `(m) => faqsRepository.list(m)` — the second argument was dropped,
     // which made FAQ token search structurally unreachable through the Function
@@ -82,7 +90,9 @@ const LISTERS = {
     productFeatures: (m) => productFeaturesRepository.list(m),
     homepageSections: (m) => homepageSectionsRepository.list(m),
     users: (m) => userRepository.list(m),
-    stores: (m, o) => storeRepository.listStores(m, getBoolOpt(o, "activeOnly", true)),
+    stores: (m, o) => storeRepository.listStores(m, getBoolOpt(o, "activeOnly", true), {
+        search: getStringOpt(o, "search"),
+    }),
     eventEntries: (m, o) => {
         const eventId = requireOpt(o, "eventId", "eventEntries");
         return eventEntryRepository.listForEvent(eventId, m);

package/dist/features/promotions/repository/coupons.repository.d.ts

@@ -1,3 +1,4 @@
+import type { JsonValue } from "../../../schemas/types";
 import type { ListingType } from "../../products/types";
 /**
  * Coupons Repository
@@ -175,6 +176,10 @@ export declare class CouponsRepository extends BaseRepository<CouponDocument> {
         message?: string;
     }>;
     static readonly SIEVE_FIELDS: {
+        searchTxt: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         id: {
             canFilter: boolean;
             canSort: boolean;
@@ -250,7 +255,11 @@ export declare class CouponsRepository extends BaseRepository<CouponDocument> {
    * });
    * ```
      */
-    list(model: SieveModel): Promise<FirebaseSieveResult<CouponDocument>>;
+    /** Derived on every write path via `applyWriteHooks`. */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
+    list(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<CouponDocument>>;
     /**
      * Cloud Functions: find active coupons whose validity period has expired.
      */

package/dist/features/promotions/repository/coupons.repository.js

@@ -1,3 +1,5 @@
+import { planSearchTxt, refineSearchTxt, emptySearchResult, } from "../../../utils/search-txt-query";
+import { buildCouponSearchTxt } from "../../../utils/search-txt-builders";
 import { normalizeError } from "../../../errors/normalize";
 import { serverLogger } from "../../../monitoring/server-logger";
 /**
@@ -481,11 +483,24 @@ export class CouponsRepository extends BaseRepository {
    * });
    * ```
      */
-    async list(model) {
-        return this.sieveQuery(model, CouponsRepository.SIEVE_FIELDS, {
+    /** Derived on every write path via `applyWriteHooks`. */
+    buildSearchTxtFor(data) {
+        return buildCouponSearchTxt(data);
+    }
+    async list(model, opts) {
+        const plan = planSearchTxt(opts?.search);
+        if (plan.empty)
+            return emptySearchResult();
+        let baseQuery = this.getCollection();
+        if (plan.head) {
+            baseQuery = baseQuery.where("searchTxt", "array-contains", plan.head);
+        }
+        const result = await this.sieveQuery(model, CouponsRepository.SIEVE_FIELDS, {
+            baseQuery,
             defaultPageSize: 50,
             maxPageSize: 200,
         });
+        return refineSearchTxt(result, plan.rest);
     }
     /**
      * Cloud Functions: find active coupons whose validity period has expired.
@@ -513,6 +528,7 @@ export class CouponsRepository extends BaseRepository {
 // Sieve-powered list query
 // ---------------------------------------------------------------------------
 CouponsRepository.SIEVE_FIELDS = {
+    searchTxt: { canFilter: true, canSort: false },
     id: { canFilter: true, canSort: false },
     code: { canFilter: true, canSort: true },
     name: { canFilter: true, canSort: true },

package/dist/features/promotions/schemas/firestore.d.ts

@@ -44,6 +44,8 @@ export interface CouponStats {
     totalDiscount: number;
 }
 export interface CouponDocument extends BaseDocument {
+    /** Word-prefix search tokens. Derived on write; never fed by a PII field. */
+    searchTxt?: string[];
     code: string;
     name: string;
     description: string;
@@ -103,7 +105,7 @@ export declare const CLAIMED_COUPONS_INDEXED_FIELDS: readonly ["userId", "coupon
 export declare function createClaimedCouponId(userId: string, couponCode: string): string;
 export declare const COUPONS_COLLECTION: "coupons";
 export declare const COUPON_USAGE_SUBCOLLECTION: "couponUsage";
-export declare const COUPONS_INDEXED_FIELDS: readonly ["code", "validity.isActive", "validity.startDate", "validity.endDate", "type", "createdBy"];
+export declare const COUPONS_INDEXED_FIELDS: readonly ["searchTxt", "code", "validity.isActive", "validity.startDate", "validity.endDate", "type", "createdBy"];
 export declare const COUPON_FIELDS: {
     readonly CODE: "code";
     readonly TYPE: "type";

package/dist/features/promotions/schemas/firestore.js

@@ -18,6 +18,7 @@ export function createClaimedCouponId(userId, couponCode) {
 export const COUPONS_COLLECTION = "coupons";
 export const COUPON_USAGE_SUBCOLLECTION = "couponUsage";
 export const COUPONS_INDEXED_FIELDS = [
+    "searchTxt",
     "code",
     "validity.isActive",
     "validity.startDate",

package/dist/features/seller/repository/offer.repository.d.ts

@@ -4,6 +4,7 @@
  * Data access layer for the `offers` Firestore collection.
  * Handles buyer make-an-offer, seller counter/accept/decline lifecycle.
  */
+import type { JsonValue } from "../../../schemas/types";
 import { BaseRepository, parseSieveDateValue } from "../../../providers/db-firebase";
 import type { SieveModel, FirebaseSieveResult } from "../../../providers/db-firebase";
 import type { OfferDocument, OfferCreateInput, OfferUpdateInput } from "../schemas";
@@ -36,6 +37,10 @@ declare class OfferRepository extends BaseRepository<OfferDocument> {
      * name does not have, so the audit cannot flag it for you.
      */
     static readonly SIEVE_FIELDS: {
+        searchTxt: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         id: {
             canFilter: boolean;
             canSort: boolean;
@@ -100,7 +105,11 @@ declare class OfferRepository extends BaseRepository<OfferDocument> {
      * mandatory ownership filters; this one is deliberately unscoped and is only
      * reachable behind `admin:offers:read`.
      */
-    list(model: SieveModel): Promise<FirebaseSieveResult<OfferDocument>>;
+    /** Derived on every write path via `applyWriteHooks`. */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
+    list(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<OfferDocument>>;
     create(input: OfferCreateInput): Promise<OfferDocument>;
     findByBuyer(buyerUid: string, model?: SieveModel): Promise<FirebaseSieveResult<OfferDocument>>;
     findByStore(storeId: string, model?: SieveModel): Promise<FirebaseSieveResult<OfferDocument>>;

package/dist/features/seller/repository/offer.repository.js

@@ -4,6 +4,8 @@
  * Data access layer for the `offers` Firestore collection.
  * Handles buyer make-an-offer, seller counter/accept/decline lifecycle.
  */
+import { planSearchTxt, refineSearchTxt, emptySearchResult, } from "../../../utils/search-txt-query";
+import { buildOfferSearchTxt } from "../../../utils/search-txt-builders";
 import { BaseRepository, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase";
 import { OFFER_COLLECTION, OFFER_FIELDS, OFFER_TRACKED_FIELDS, createOfferId } from "../schemas";
 import { withHistory } from "../../../_internal/shared/history/index";
@@ -29,11 +31,24 @@ class OfferRepository extends BaseRepository {
      * mandatory ownership filters; this one is deliberately unscoped and is only
      * reachable behind `admin:offers:read`.
      */
-    async list(model) {
-        return this.sieveQuery(model, OfferRepository.SIEVE_FIELDS, {
+    /** Derived on every write path via `applyWriteHooks`. */
+    buildSearchTxtFor(data) {
+        return buildOfferSearchTxt(data);
+    }
+    async list(model, opts) {
+        const plan = planSearchTxt(opts?.search);
+        if (plan.empty)
+            return emptySearchResult();
+        let baseQuery = this.getCollection();
+        if (plan.head) {
+            baseQuery = baseQuery.where("searchTxt", "array-contains", plan.head);
+        }
+        const result = await this.sieveQuery(model, OfferRepository.SIEVE_FIELDS, {
+            baseQuery,
             defaultPageSize: 50,
             maxPageSize: 200,
         });
+        return refineSearchTxt(result, plan.rest);
     }
     // --- Create --------------------------------------------------------------
     async create(input) {
@@ -367,6 +382,7 @@ class OfferRepository extends BaseRepository {
  * name does not have, so the audit cannot flag it for you.
  */
 OfferRepository.SIEVE_FIELDS = {
+    searchTxt: { canFilter: true, canSort: false },
     id: { canFilter: true, canSort: false },
     status: { canFilter: true, canSort: true },
     productId: { canFilter: true, canSort: false },

package/dist/features/seller/schemas/firestore.d.ts

@@ -16,6 +16,8 @@ export declare const OfferStatusValues: {
     readonly PAID: "paid";
 };
 export interface OfferDocument extends BaseDocument {
+    /** Word-prefix search tokens. Derived on write; never fed by a PII field. */
+    searchTxt?: string[];
     productId: string;
     productTitle: string;
     productSlug?: string;
@@ -87,7 +89,7 @@ export interface OfferDocument extends BaseDocument {
  */
 export declare const OFFER_TRACKED_FIELDS: readonly ["status", "offerAmount", "counterAmount", "lockedPrice", "checkoutDeadline", "paidOrderId", "supersededByOfferId", "previousOfferId"];
 export declare const OFFER_COLLECTION: "offers";
-export declare const OFFER_INDEXED_FIELDS: readonly ["buyerUid", "storeId", "productId", "status", "createdAt", "expiresAt", "checkoutDeadline"];
+export declare const OFFER_INDEXED_FIELDS: readonly ["searchTxt", "buyerUid", "storeId", "productId", "status", "createdAt", "expiresAt", "checkoutDeadline"];
 export declare const OFFER_FIELDS: {
     readonly ID: "id";
     readonly PRODUCT_ID: "productId";

package/dist/features/seller/schemas/firestore.js

@@ -32,6 +32,7 @@ export const OFFER_TRACKED_FIELDS = [
 ];
 export const OFFER_COLLECTION = "offers";
 export const OFFER_INDEXED_FIELDS = [
+    "searchTxt",
     "buyerUid",
     "storeId",
     "productId",

package/dist/seed/_helpers/search-txt-wrappers.d.ts

@@ -3,8 +3,12 @@ import type { EventDocument } from "../../features/events/schemas/firestore";
 import type { BlogPostDocument } from "../../features/blog/schemas/firestore";
 import type { ReviewDocument } from "../../features/reviews/schemas/firestore";
 import type { OrderDocument } from "../../features/orders/schemas/firestore";
+import type { CouponDocument } from "../../features/promotions/schemas/firestore";
+import type { OfferDocument } from "../../features/seller/schemas/firestore";
 export declare function withStoreSearchTxt<T extends Partial<StoreDocument>>(p: T): T;
 export declare function withEventSearchTxt<T extends Partial<EventDocument>>(p: T): T;
 export declare function withBlogSearchTxt<T extends Partial<BlogPostDocument>>(p: T): T;
 export declare function withReviewSearchTxt<T extends Partial<ReviewDocument>>(p: T): T;
 export declare function withOrderSearchTxt<T extends Partial<OrderDocument>>(p: T): T;
+export declare function withCouponSearchTxt<T extends Partial<CouponDocument>>(p: T): T;
+export declare function withOfferSearchTxt<T extends Partial<OfferDocument>>(p: T): T;

package/dist/seed/_helpers/search-txt-wrappers.js

@@ -1,4 +1,4 @@
-import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, buildOrderSearchTxt, } from "../../utils/search-txt-builders";
+import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, buildOrderSearchTxt, buildCouponSearchTxt, buildOfferSearchTxt, } from "../../utils/search-txt-builders";
 export function withStoreSearchTxt(p) {
     return { ...p, searchTxt: buildStoreSearchTxt(p) };
 }
@@ -14,3 +14,9 @@ export function withReviewSearchTxt(p) {
 export function withOrderSearchTxt(p) {
     return { ...p, searchTxt: buildOrderSearchTxt(p) };
 }
+export function withCouponSearchTxt(p) {
+    return { ...p, searchTxt: buildCouponSearchTxt(p) };
+}
+export function withOfferSearchTxt(p) {
+    return { ...p, searchTxt: buildOfferSearchTxt(p) };
+}

package/dist/seed/coupons-seed-data.js

@@ -12,6 +12,7 @@
  * @tag consumers:seed/index.ts,seed/runner.ts
  * @tag sideEffects:none
  */
+import { withCouponSearchTxt } from "./_helpers/search-txt-wrappers";
 import { COUPON_FIELDS } from "../constants/field-names";
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
@@ -220,4 +221,6 @@ export const couponsSeedData = [
         updatedAt: daysAgo(2),
         stats: { totalUses: 41, totalRevenue: 205000, totalDiscount: 20500 },
     },
-];
+    // Derived through the wrapper, never per record — an inline literal is how
+    // five product seed files shipped their last fixture with no tokens.
+].map(withCouponSearchTxt);

package/dist/seed/offers-seed-data.js

@@ -35,6 +35,7 @@
  * @tag consumers:seed/index.ts,seed/runner.ts
  * @tag sideEffects:none
  */
+import { withOfferSearchTxt } from "./_helpers/search-txt-wrappers";
 import { OfferStatusValues } from "../features/seller/schemas/firestore";
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
@@ -392,4 +393,6 @@ export const offersSeedData = [
             }, { actorUid: BUYER_ADMIN, note: "Interested in this piece. Would you accept ₹950?" }),
         ],
     },
-];
+    // Derived through the wrapper, never per record — an inline literal is how
+    // five product seed files shipped their last fixture with no tokens.
+].map(withOfferSearchTxt);

package/dist/utils/search-txt-builders.d.ts

@@ -4,6 +4,8 @@ import type { EventDocument } from "../features/events/schemas/firestore";
 import type { BlogPostDocument } from "../features/blog/schemas/firestore";
 import type { ReviewDocument } from "../features/reviews/schemas/firestore";
 import type { OrderDocument } from "../features/orders/schemas/firestore";
+import type { CouponDocument } from "../features/promotions/schemas/firestore";
+import type { OfferDocument } from "../features/seller/schemas/firestore";
 /** products — title, description, brand, taxonomy, condition, card/grading, specs. */
 export declare function buildProductSearchTxt(p: Partial<ProductDocument>): string[];
 /** stores — name, description, category. No payout details, no contact. */
@@ -32,3 +34,14 @@ export declare function buildReviewSearchTxt(r: Partial<ReviewDocument>): string
  * Indexing any of them would undo the encryption they are stored under (D1).
  */
 export declare function buildOrderSearchTxt(o: Partial<OrderDocument>): string[];
+/** coupons — code, name, description. Nothing here is PII. */
+export declare function buildCouponSearchTxt(c: Partial<CouponDocument>): string[];
+/**
+ * offers — the product and the store the negotiation is about.
+ *
+ * 🛑 `buyerName`, `buyerEmail` and `sellerName` are OFFER_PII_FIELDS and are
+ * absent. `sellerNote` is free text a seller wrote to one buyer; it is not in
+ * the PII registry, but it is private correspondence and has no business being
+ * findable by substring from an admin list.
+ */
+export declare function buildOfferSearchTxt(o: Partial<OfferDocument>): string[];

package/dist/utils/search-txt-builders.js

@@ -101,3 +101,18 @@ export function buildOrderSearchTxt(o) {
         (o.items ?? []).map((i) => i.productTitle),
     ]);
 }
+/** coupons — code, name, description. Nothing here is PII. */
+export function buildCouponSearchTxt(c) {
+    return buildSearchTxt([c.code, c.name, c.description]);
+}
+/**
+ * offers — the product and the store the negotiation is about.
+ *
+ * 🛑 `buyerName`, `buyerEmail` and `sellerName` are OFFER_PII_FIELDS and are
+ * absent. `sellerNote` is free text a seller wrote to one buyer; it is not in
+ * the PII registry, but it is private correspondence and has no business being
+ * findable by substring from an admin list.
+ */
+export function buildOfferSearchTxt(o) {
+    return buildSearchTxt([o.productTitle, o.productSlug, o.storeName]);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.30.8",
+  "version": "4.30.10",
   "license": "MIT",
   "publishConfig": {
     "access": "public"