@blamejs/blamejs-shop 0.3.38 → 0.3.39

package/CHANGELOG.md

@@ -8,6 +8,8 @@ upgrading across more than a few patches at a time.
 
 ## v0.3.x
 
+- v0.3.39 (2026-05-31) — **Paginated lists no longer show an empty extra page at exact page boundaries.** Several paginated lists offered a next page even when the current page was the last one, if the list's length happened to be an exact multiple of the page size — following that next link landed on an empty page. This affected a customer's order history, loyalty history, and store-credit history, and the admin customer list. Each now checks whether a further item actually exists before offering a next page, so the next link appears only when there is genuinely more to show. **Fixed:** *No phantom next page on exactly-full lists* — A customer's order history, loyalty history, and store-credit history, and the admin customer list, offered a next page whenever the current page was full — so a list whose total was an exact multiple of the page size showed a next link that led to an empty page. These lists now look one item past the page before offering a next link, so it appears only when a further item exists. This matches the fix already in place for collection pages.
+
 - v0.3.38 (2026-05-31) — **Pre-order campaigns — reserve a product before it is released.** Products that are not yet released could not be sold or reserved. Operators can now run a pre-order campaign for a product from the admin console — setting its release date, price, and an optional reservation cap. While the campaign is open, the product page shows a Pre-order control with the release date and how many reservations remain, and a signed-in customer can reserve their quantity without paying upfront. Customers see and can cancel their reservations from their account, and when the operator launches the campaign on its release date, each reservation is turned into a pending order the customer pays for through normal checkout. **Added:** *Pre-order campaigns* — A Pre-orders screen in the admin console runs a campaign for a product's SKU — release date, price, an optional deposit, and a reservation cap — with launch and close controls (launch is available once the release date arrives). While a campaign is open, the product page shows a Pre-order control with the release date and remaining availability instead of the usual add-to-cart, and a signed-in customer can reserve their quantity (no charge at reservation time; reserving past the cap or on a closed campaign is refused). Customers manage their reservations under Pre-orders in their account and can cancel one, which frees that capacity. Launching the campaign converts each open reservation into a pending order the customer completes through normal checkout. A customer can only see and cancel their own reservations.
 
 - v0.3.37 (2026-05-31) — **Gift registries — create one, share it, and let people mark gifts as bought.** A customer can now create a gift registry for an occasion — a wedding, baby, or birthday — add the products they want with the quantity desired, and share a public link. Anyone with the link can open the registry without an account, see what is still needed, add an item to their own cart to buy it through normal checkout, or mark an item as already purchased so it stops showing as needed. Registries can be public, unlisted, or private, and a private registry is not viewable from its link. The shared page never reveals who owns the registry or who bought what, and is not indexed by search engines. **Added:** *Gift registries* — A new Registry section in the account area lets a customer create a registry (title, occasion, event date, and a public/unlisted/private visibility), add and remove the items they want with a desired quantity, edit its details, and close it. Each registry has a shareable public page at its own link where anyone — no account needed — can see the items and how many of each are still needed, add an item to their cart to buy it through the normal checkout, or mark an item as already purchased so the registry's progress updates. A private registry is not viewable from its link, the public page shows only the items (never the owner's identity, address, or who purchased what), and registry pages are excluded from search indexing.

package/lib/asset-manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.3.38",
+  "version": "0.3.39",
   "assets": {
     "css/admin.css": {
       "integrity": "sha384-1SIn6oAf1DjECbRfKENZasdKHJiywGdXR58wn0hsFGcdVHzUmvfgMkEz5ANIAZJ3",

package/lib/customers.js

@@ -255,20 +255,27 @@ function create(opts) {
         }
       }
       var sql, params;
+      // Fetch one row beyond the page so the next cursor is emitted ONLY
+      // when a customer past this page actually exists. Keying the cursor
+      // off a full page alone (rows.length === limit) advertises a
+      // phantom next page when the roster size is an exact multiple of
+      // the limit — the console's "Next page" link then lands empty.
       if (cursorVals) {
         sql = "SELECT id, email_hash, display_name, created_at, updated_at FROM customers " +
               "WHERE (created_at < ?1 OR (created_at = ?1 AND id < ?2)) " +
               "ORDER BY created_at DESC, id DESC LIMIT ?3";
-        params = [cursorVals[0], cursorVals[1], limit];
+        params = [cursorVals[0], cursorVals[1], limit + 1];
       } else {
         sql = "SELECT id, email_hash, display_name, created_at, updated_at FROM customers " +
               "ORDER BY created_at DESC, id DESC LIMIT ?1";
-        params = [limit];
+        params = [limit + 1];
       }
-      var rows = (await query(sql, params)).rows;
+      var fetched = (await query(sql, params)).rows;
+      var hasMore = fetched.length > limit;
+      var rows    = hasMore ? fetched.slice(0, limit) : fetched;
       var last = rows[rows.length - 1];
       var next = null;
-      if (last && rows.length === limit) {
+      if (last && hasMore) {
         next = b.pagination.encodeCursor({
           orderKey: CUSTOMERS_ORDER_KEY,
           vals:     [last.created_at, last.id],

package/lib/loyalty.js

@@ -450,11 +450,17 @@ function create(opts) {
         sql += " AND occurred_at < ?2";
         params.push(cursor);
       }
+      // Fetch one row beyond the page so the next cursor is emitted ONLY
+      // when an older transaction actually exists. Keying the cursor off
+      // a full page alone (rows.length === limit) advertises a phantom
+      // next page when the history length is an exact multiple of the
+      // limit — the "Older activity" link then lands on an empty page.
       sql += " ORDER BY occurred_at DESC LIMIT ?" + (params.length + 1);
-      params.push(limit);
+      params.push(limit + 1);
       var r = await query(sql, params);
-      var rows = r.rows;
-      var nextCursor = rows.length === limit ? rows[rows.length - 1].occurred_at : null;
+      var hasMore = r.rows.length > limit;
+      var rows = hasMore ? r.rows.slice(0, limit) : r.rows;
+      var nextCursor = hasMore ? rows[rows.length - 1].occurred_at : null;
       return { rows: rows, next_cursor: nextCursor };
     },
 

package/lib/order.js

@@ -412,19 +412,28 @@ function create(opts) {
         }
       }
       var sql, params;
+      // Fetch one row beyond the page so the next cursor is emitted ONLY
+      // when an order past this page actually exists. Keying the cursor
+      // off a full page alone (rows.length === limit) advertises a
+      // phantom next page when the customer's order count is an exact
+      // multiple of the limit — the "Load more" link then lands on an
+      // empty page.
       if (cursorVals) {
         sql = "SELECT * FROM orders WHERE customer_id = ?1 AND " +
               "(updated_at < ?2 OR (updated_at = ?2 AND id < ?3)) " +
               "ORDER BY updated_at DESC, id DESC LIMIT ?4";
-        params = [customerId, cursorVals[0], cursorVals[1], limit];
+        params = [customerId, cursorVals[0], cursorVals[1], limit + 1];
       } else {
         sql = "SELECT * FROM orders WHERE customer_id = ?1 " +
               "ORDER BY updated_at DESC, id DESC LIMIT ?2";
-        params = [customerId, limit];
+        params = [customerId, limit + 1];
       }
-      var rows = (await query(sql, params)).rows;
+      var fetched = (await query(sql, params)).rows;
+      var hasMore = fetched.length > limit;
+      var rows    = hasMore ? fetched.slice(0, limit) : fetched;
       // Hydrate ship_to_json + lines on each row so the renderer
-      // doesn't need a separate trip per order.
+      // doesn't need a separate trip per order. The peeked row is sliced
+      // off first so it never costs a hydration trip.
       for (var i = 0; i < rows.length; i += 1) {
         rows[i].ship_to = JSON.parse(rows[i].ship_to_json);
         rows[i].lines   = (await query(
@@ -434,7 +443,7 @@ function create(opts) {
       }
       var last = rows[rows.length - 1];
       var next = null;
-      if (last && rows.length === limit) {
+      if (last && hasMore) {
         next = b.pagination.encodeCursor({
           orderKey: ORDER_ORDER_KEY,
           vals:     [last.updated_at, last.id],

package/lib/store-credit.js

@@ -331,11 +331,17 @@ function create(opts) {
         sql += " AND occurred_at < ?2";
         params.push(cursor);
       }
+      // Fetch one row beyond the page so the next cursor is emitted ONLY
+      // when an older ledger entry actually exists. Keying the cursor off
+      // a full page alone (rows.length === limit) advertises a phantom
+      // next page when the ledger length is an exact multiple of the
+      // limit — the "Older activity" link then lands on an empty page.
       sql += " ORDER BY occurred_at DESC, id DESC LIMIT ?" + (params.length + 1);
-      params.push(limit);
+      params.push(limit + 1);
       var r = await query(sql, params);
-      var rows = r.rows;
-      var nextCursor = rows.length === limit ? rows[rows.length - 1].occurred_at : null;
+      var hasMore = r.rows.length > limit;
+      var rows = hasMore ? r.rows.slice(0, limit) : r.rows;
+      var nextCursor = hasMore ? rows[rows.length - 1].occurred_at : null;
       return { rows: rows, next_cursor: nextCursor };
     },
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/blamejs-shop",
-  "version": "0.3.38",
+  "version": "0.3.39",
   "description": "Open-source framework built on blamejs. Vendored stack, zero npm runtime deps, PQC-first crypto, security-on by default.",
   "main": "lib/index.js",
   "scripts": {