@mohasinac/appkit 4.30.11 → 4.30.12

package/dist/features/admin/components/AdminBlogView.js

@@ -21,7 +21,9 @@ export function AdminBlogView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Blog Posts",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // buildBlogSearchTxt indexes title + excerpt + category + tags — NOT the post
+        // body, which is not tokenised.
+        searchPlaceholder: "Search by title, excerpt, category or tag…",
         emptyLabel: "No blog posts found",
         filterKeys: ["status", "isFeatured"],
         defaultSort: sortBy("publishedAt", "DESC"),

package/dist/features/admin/components/AdminCouponsView.js

@@ -52,7 +52,8 @@ export function AdminCouponsView({ children, onBulkArchive, onBulkDelete, ...pro
     const config = {
         portal: "admin",
         title: "Coupons",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // buildCouponSearchTxt indexes code + name + description — nothing else.
+        searchPlaceholder: "Search by code, name or description…",
         emptyLabel: "No coupons found",
         filterKeys: ["type", "showExpired"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminOffersView.js

@@ -103,7 +103,10 @@ export function AdminOffersView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Offers",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // buildOfferSearchTxt indexes productTitle + productSlug + storeName. It does
+        // NOT index buyerName or buyerEmail — those are PII, and the placeholder
+        // must not promise a match it will never make.
+        searchPlaceholder: "Search by product or store…",
         emptyLabel: "No offers found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/events/components/AdminEventsView.js

@@ -33,7 +33,8 @@ export function AdminEventsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Events",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // buildEventSearchTxt indexes title + description + type + tags.
+        searchPlaceholder: "Search by title, description, type or tag…",
         emptyLabel: "No events found",
         filterKeys: ["status", "type"],
         defaultSort: sortBy("startsAt", "DESC"),

package/dist/features/orders/repository/orders.repository.d.ts

@@ -151,7 +151,9 @@ declare class OrderRepository extends BaseRepository<OrderDocument> {
             canSort: boolean;
         };
     };
-    listForSeller(productIds: string[], model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
+    listForSeller(productIds: string[], model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<OrderDocument>>;
     listForUser(userId: string, model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
     static readonly ADMIN_SIEVE_FIELDS: {
         searchTxt: {

package/dist/features/orders/repository/orders.repository.js

@@ -260,7 +260,12 @@ class OrderRepository extends BaseRepository {
             throw new DatabaseError(`Failed to delete orders for user: ${userId}`, error);
         }
     }
-    async listForSeller(productIds, model) {
+    async listForSeller(productIds, model, opts) {
+        const plan = planSearchTxt(opts?.search);
+        // A search that yielded no usable term must return NOTHING, not the
+        // seller's whole order list.
+        if (plan.empty)
+            return emptySearchResult();
         if (productIds.length === 0) {
             const page = Math.max(1, Number(model.page ?? 1));
             const pageSize = Math.max(1, Number(model.pageSize ?? 20));
@@ -273,12 +278,22 @@ class OrderRepository extends BaseRepository {
                 hasMore: false,
             };
         }
-        const baseQuery = this.getCollection().where(ORDER_FIELDS.PRODUCT_ID, "in", productIds);
-        return this.sieveQuery(model, OrderRepository.SELLER_SIEVE_FIELDS, {
+        let baseQuery = this.getCollection().where(ORDER_FIELDS.PRODUCT_ID, "in", productIds);
+        if (plan.head) {
+            // `array-contains` alongside `in` is legal — Firestore's one-per-query
+            // limits are on `array-contains` and on the `in`/`not-in`/
+            // `array-contains-any` family separately, so one of each is fine.
+            // Verified against production data before this shipped, and the
+            // matching composite index is declared in firestore.indexes.json;
+            // the query happened to plan without one, which is not a guarantee.
+            baseQuery = baseQuery.where(ORDER_FIELDS.SEARCH_TXT, "array-contains", plan.head);
+        }
+        const result = await this.sieveQuery(model, OrderRepository.SELLER_SIEVE_FIELDS, {
             baseQuery,
             defaultPageSize: 20,
             maxPageSize: 100,
         });
+        return refineSearchTxt(result, plan.rest);
     }
     async listForUser(userId, model) {
         const baseQuery = this.getCollection().where(ORDER_FIELDS.USER_ID, "==", userId);

package/dist/features/seller/components/SellerCouponsView.js

@@ -49,7 +49,8 @@ export function SellerCouponsView({ onCreateClick, onEditClick, onToggle, onDele
     const config = {
         portal: "seller",
         title: "Coupons",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // buildCouponSearchTxt indexes code + name + description — nothing else.
+        searchPlaceholder: "Search by code, name or description…",
         emptyLabel: "No coupons found — create your first coupon",
         filterKeys: ["isActive"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerOffersView.js

@@ -22,7 +22,9 @@ export function SellerOffersView({ children, onAcceptOffer, onRejectOffer, onCou
     const config = {
         portal: "seller",
         title: "Offers",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // buildOfferSearchTxt indexes productTitle + productSlug + storeName — never
+        // the buyer's name or email.
+        searchPlaceholder: "Search by product or store…",
         emptyLabel: "No offers received",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerOrdersView.js

@@ -294,7 +294,10 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
     const config = {
         portal: "seller",
         title: "Orders",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // buildOrderSearchTxt indexes productTitle, storeName and trackingNumber.
+        // It does NOT index the buyer's name, email or address — those are PII,
+        // and the placeholder must not promise a match it will never make.
+        searchPlaceholder: "Search by product, store or tracking number…",
         emptyLabel: "No orders yet",
         filterKeys: ["status"],
         defaultSort: DEFAULT_SORT,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.30.11",
+  "version": "4.30.12",
   "license": "MIT",
   "publishConfig": {
     "access": "public"