backend-manager 5.0.100 → 5.0.101

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "5.0.100",
+  "version": "5.0.101",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {

package/src/manager/cron/daily/data-requests.js

@@ -0,0 +1,57 @@
+/**
+ * Data requests cron job
+ *
+ * Processes data request status transitions:
+ * - pending → complete: 14 days after creation
+ * - complete → expired: 30 days after becoming complete (44 days after creation)
+ *
+ * Scans the entire collection (no index required) since data-requests is small.
+ */
+module.exports = async ({ Manager, assistant, context, libraries }) => {
+  const { admin } = libraries;
+  const nowUNIX = Math.round(Date.now() / 1000);
+
+  const FOURTEEN_DAYS = 14 * 24 * 60 * 60;
+  const FORTY_FOUR_DAYS = 44 * 24 * 60 * 60;
+
+  assistant.log('Starting...');
+
+  // Only fetch requests created within the last 45 days (single-field filter, no composite index needed)
+  const snapshot = await admin.firestore()
+    .collection('data-requests')
+    .where('metadata.created.timestampUNIX', '>', nowUNIX - FORTY_FOUR_DAYS - 86400)
+    .get();
+
+  assistant.log(`Found ${snapshot.size} total data requests`);
+
+  let completed = 0;
+  let expired = 0;
+
+  for (const doc of snapshot.docs) {
+    const data = doc.data();
+    const createdUNIX = data.metadata?.created?.timestampUNIX || 0;
+    const age = nowUNIX - createdUNIX;
+
+    if (data.status === 'pending' && age >= FOURTEEN_DAYS) {
+      await doc.ref.update({ status: 'complete' })
+        .then(() => {
+          completed++;
+          assistant.log(`Completed request ${doc.id} (age: ${Math.round(age / 86400)}d)`);
+        })
+        .catch((e) => {
+          assistant.error(`Failed to complete request ${doc.id}: ${e.message}`);
+        });
+    } else if (data.status === 'complete' && age >= FORTY_FOUR_DAYS) {
+      await doc.ref.update({ status: 'expired' })
+        .then(() => {
+          expired++;
+          assistant.log(`Expired request ${doc.id} (age: ${Math.round(age / 86400)}d)`);
+        })
+        .catch((e) => {
+          assistant.error(`Failed to expire request ${doc.id}: ${e.message}`);
+        });
+    }
+  }
+
+  assistant.log(`Completed! (${completed} completed, ${expired} expired)`);
+};

package/src/manager/routes/user/data-request/delete.js

@@ -32,8 +32,51 @@ module.exports = async ({ assistant, user, libraries }) => {
 
   assistant.log(`Data request cancelled: ${requestDoc.id} for user ${uid}`);
 
+  // Send cancellation email (fire-and-forget)
+  sendCancellationEmail(assistant, user, requestDoc.id);
+
   return assistant.respond({
     message: 'Your data request has been cancelled.',
     request: { id: requestDoc.id, ...request },
   });
 };
+
+/**
+ * Send data request cancellation email (fire-and-forget)
+ */
+function sendCancellationEmail(assistant, user, requestId) {
+  const Manager = assistant.Manager;
+  const mailer = Manager.Email(assistant);
+  const uid = user.auth.uid;
+
+  mailer.send({
+    to: user.auth.email,
+    categories: ['account/data-request-cancelled'],
+    subject: `Your data request has been cancelled #${requestId}`,
+    template: 'default',
+    group: 'account',
+    copy: true,
+    data: {
+      email: {
+        preview: `Your data export request #${requestId} has been cancelled.`,
+      },
+      body: {
+        title: 'Data Request Cancelled',
+        message: `Your data export request has been cancelled as requested.
+
+- **Request reference:** #${requestId}
+- **Account UID:** ${uid}
+
+You may submit a new data request at any time from your account page.
+
+If you did not cancel this request, please contact us immediately by replying to this email.`,
+      },
+    },
+  })
+    .then((result) => {
+      assistant.log(`sendCancellationEmail(): Success, status=${result.status}`);
+    })
+    .catch((e) => {
+      assistant.error(`sendCancellationEmail(): Failed: ${e.message}`);
+    });
+}

package/src/manager/routes/user/data-request/get.js

@@ -174,8 +174,54 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
 
   assistant.log(`Data request ${requestId} downloaded by user ${uid} (download #${downloads})`);
 
+  // Send download confirmation email (fire-and-forget)
+  sendDownloadEmail(assistant, user, requestId, downloads);
+
   return assistant.respond({
     request: { id: requestId, ...request, downloads: downloads },
     data: data,
   });
 };
+
+/**
+ * Send data download confirmation email (fire-and-forget)
+ */
+function sendDownloadEmail(assistant, user, requestId, downloads) {
+  const Manager = assistant.Manager;
+  const mailer = Manager.Email(assistant);
+  const uid = user.auth.uid;
+  const downloadDate = assistant.meta.startTime.timestamp;
+
+  mailer.send({
+    to: user.auth.email,
+    categories: ['account/data-request-download'],
+    subject: `Your data has been downloaded #${requestId}`,
+    template: 'default',
+    group: 'account',
+    copy: true,
+    data: {
+      email: {
+        preview: `Your personal data export was downloaded on ${downloadDate}.`,
+      },
+      body: {
+        title: 'Data Download Confirmation',
+        message: `Your personal data export has been successfully downloaded.
+
+**Download details:**
+
+- **Date:** ${downloadDate}
+- **Download #:** ${downloads}
+- **Request reference:** #${requestId}
+- **Account UID:** ${uid}
+
+If you did not initiate this download, please secure your account immediately and contact us by replying to this email.`,
+      },
+    },
+  })
+    .then((result) => {
+      assistant.log(`sendDownloadEmail(): Success, status=${result.status}`);
+    })
+    .catch((e) => {
+      assistant.error(`sendDownloadEmail(): Failed: ${e.message}`);
+    });
+}

package/src/manager/routes/user/data-request/post.js

@@ -77,7 +77,7 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
   assistant.log(`Data request created: ${requestId} for user ${uid}`);
 
   // Send confirmation email (fire-and-forget)
-  sendConfirmationEmail(assistant, user.auth.email, requestId, reason);
+  sendConfirmationEmail(assistant, user, requestId, reason);
 
   return assistant.respond({
     request: { id: requestId, ...docData },
@@ -87,16 +87,16 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
 /**
  * Send data request confirmation email (fire-and-forget)
  */
-function sendConfirmationEmail(assistant, email, requestId, reason) {
+function sendConfirmationEmail(assistant, user, requestId, reason) {
   const Manager = assistant.Manager;
-  const brandName = Manager.config.brand.name;
   const mailer = Manager.Email(assistant);
+  const uid = user.auth.uid;
   const reasonLine = reason
     ? `\n\n**Reason provided:** ${reason}`
     : '';
 
   mailer.send({
-    to: email,
+    to: user.auth.email,
     categories: ['account/data-request'],
     subject: `Your data request has been received #${requestId}`,
     template: 'default',
@@ -120,7 +120,8 @@ function sendConfirmationEmail(assistant, email, requestId, reason) {
 
 If you did not make this request, please contact us immediately by replying to this email.
 
-Reference: **#${requestId}**`,
+- **Reference:** #${requestId}
+- **Account UID:** ${uid}`,
       },
     },
   })

package/src/manager/routes/user/delete.js

@@ -12,8 +12,9 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
     return assistant.respond('Authentication required', { code: 401 });
   }
 
-  // Get target UID
+  // Get target UID and reason
   const uid = settings.uid;
+  const reason = (settings.reason || '').replace(/<[^>]*>/g, '').trim().substring(0, 500);
 
   // Require admin to delete other users
   if (uid !== user.auth.uid && !user.roles.admin) {
@@ -75,9 +76,11 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
     return assistant.respond(`Failed to delete user: ${e}`, { code: 500 });
   }
 
+  assistant.log(`Account deleted: ${uid}${reason ? `, reason: ${reason}` : ''}`);
+
   // Send confirmation email (fire-and-forget)
   if (email) {
-    sendConfirmationEmail(assistant, email);
+    sendConfirmationEmail(assistant, email, reason);
   }
 
   return assistant.respond({ success: true });
@@ -86,10 +89,13 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
 /**
  * Send account deletion confirmation email (fire-and-forget)
  */
-function sendConfirmationEmail(assistant, email) {
+function sendConfirmationEmail(assistant, email, reason) {
   const Manager = assistant.Manager;
   const brandName = Manager.config.brand.name;
   const mailer = Manager.Email(assistant);
+  const reasonLine = reason
+    ? `\n\n**Reason provided:** ${reason}`
+    : '';
 
   mailer.send({
     to: email,
@@ -97,13 +103,14 @@ function sendConfirmationEmail(assistant, email) {
     subject: `Your ${brandName} account has been deleted`,
     template: 'default',
     group: 'account',
+    copy: true,
     data: {
       email: {
         preview: `Your ${brandName} account has been permanently deleted. All associated data has been removed.`,
       },
       body: {
         title: 'Account Deleted',
-        message: `Your **${brandName}** account and all associated personal data have been permanently deleted from our systems. This action is irreversible.
+        message: `Your **${brandName}** account and all associated personal data have been permanently deleted from our systems. This action is irreversible.${reasonLine}
 
 **What this means:**
 

package/src/manager/schemas/user/delete.js

@@ -4,4 +4,9 @@ module.exports = ({ user }) => ({
     default: user?.auth?.uid,
     required: false,
   },
+  reason: {
+    types: ['string'],
+    default: '',
+    max: 500,
+  },
 });