@mohasinac/appkit 4.30.13 → 4.30.15

package/dist/features/admin/components/AdminBlogView.js

@@ -23,7 +23,14 @@ export function AdminBlogView({ children, ...props }) {
         title: "Blog Posts",
         // buildBlogSearchTxt indexes title + excerpt + category + tags — NOT the post
         // body, which is not tokenised.
-        searchPlaceholder: "Search by title, excerpt, category or tag…",
+        // buildBlogSearchTxt indexes title + excerpt + category + tags — NOT the
+        // post body, which is not tokenised.
+        search: {
+            placeholder: "Search by title, excerpt, category or tag…",
+            mode: "partial",
+            fields: ["title", "excerpt", "category", "tags"],
+            commit: "debounce",
+        },
         emptyLabel: "No blog posts found",
         filterKeys: ["status", "isFeatured"],
         defaultSort: sortBy("publishedAt", "DESC"),

package/dist/features/admin/components/AdminCouponsView.js

@@ -53,7 +53,14 @@ export function AdminCouponsView({ children, onBulkArchive, onBulkDelete, ...pro
         portal: "admin",
         title: "Coupons",
         // buildCouponSearchTxt indexes code + name + description — nothing else.
-        searchPlaceholder: "Search by code, name or description…",
+        // buildCouponSearchTxt indexes exactly these three. Partial prefix
+        // matching, so debounce is the right commit here.
+        search: {
+            placeholder: "Search by code, name or description…",
+            mode: "partial",
+            fields: ["code", "name", "description"],
+            commit: "debounce",
+        },
         emptyLabel: "No coupons found",
         filterKeys: ["type", "showExpired"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminOffersView.js

@@ -106,7 +106,15 @@ export function AdminOffersView({ children, ...props }) {
         // buildOfferSearchTxt indexes productTitle + productSlug + storeName. It does
         // NOT index buyerName or buyerEmail — those are PII, and the placeholder
         // must not promise a match it will never make.
-        searchPlaceholder: "Search by product or store…",
+        // buildOfferSearchTxt indexes productTitle + productSlug + storeName.
+        // NOT buyerName or buyerEmail — those are PII (D1), and a placeholder
+        // naming them would promise a match this corpus cannot make.
+        search: {
+            placeholder: "Search by product or store…",
+            mode: "partial",
+            fields: ["productTitle", "productSlug", "storeName"],
+            commit: "debounce",
+        },
         emptyLabel: "No offers found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminPayoutsView.js

@@ -81,7 +81,15 @@ export function AdminPayoutsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Payouts",
-        searchPlaceholder: "Search stores, payout IDs, or order groups",
+        // 🛑 This said "Search stores, payout IDs, or order groups". The route
+        // resolves `q` as `sellerEmailIndex == piiBlindIndex(q)` when it contains
+        // an "@", else `sellerName == q` — both EXACT, and neither is a store, a
+        // payout id or an order group. All three promised things were unmatchable.
+        search: {
+            placeholder: "Seller email or name (exact match)",
+            mode: "exact",
+            fields: ["sellerEmail", "sellerName"],
+        },
         emptyLabel: "No payouts found",
         filterKeys: ["status", "showAllPayouts"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminReviewsView.js

@@ -69,7 +69,20 @@ export function AdminReviewsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Reviews",
-        searchPlaceholder: "Search reviews, products, or seller names",
+        // 🛑 This said "Search reviews, products, or seller names". The route
+        // resolves `q` as `userNameIndex == piiBlindIndex(q)` — an EXACT match on
+        // the REVIEWER's name, and nothing else. It matched no review text, no
+        // product and no seller, so a partial name returned an empty list that was
+        // indistinguishable from "no such reviewer".
+        //
+        // `mode: "exact"` is not a limitation to apologise for: the field is
+        // encrypted and ciphertext has no usable prefix (D1). Say so in the
+        // placeholder instead of promising what the corpus cannot do.
+        search: {
+            placeholder: "Reviewer name (exact match)",
+            mode: "exact",
+            fields: ["userName"],
+        },
         emptyLabel: "No reviews found",
         filterKeys: ["status", "rating"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminScammersView.js

@@ -42,7 +42,21 @@ export function AdminScammersView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Scammers",
-        searchPlaceholder: "Search by name, phone, UPI ID",
+        // buildScammerSearchTxt indexes all four identity arrays plus scamType.
+        // They are stored PLAINTEXT on purpose — a victim googles a UPI id before
+        // paying, so SEO is the feature — which is why this collection can have a
+        // partial-match box where users/reviews/payouts cannot.
+        //
+        // The old box promised the same three fields but ran `displayNames@=q`,
+        // i.e. array-contains on a WHOLE element: "Vikram" matched nothing
+        // against ["Vikram M", "Vikram Mehta"], and phone/UPI were never
+        // searched at all.
+        search: {
+            placeholder: "Search by name, phone, UPI ID or email…",
+            mode: "partial",
+            fields: ["displayNames", "phones", "upiIds", "emails", "scamType"],
+            commit: "debounce",
+        },
         emptyLabel: "No scammer profiles found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/DataListingView.d.ts

@@ -105,8 +105,29 @@ export interface ListingViewConfig<TResponse, TRow extends {
         placeholder: string;
         /** `exact` for a field resolved through an HMAC blind index. */
         mode?: "partial" | "exact";
-        /** Fields the endpoint actually matches on. */
+        /**
+         * Fields the endpoint actually matches on.
+         *
+         * Not decoration: this is what lets the audit check that the placeholder
+         * does not promise a match the corpus cannot make. A box reading "search
+         * by buyer" over an index built from productTitle/storeName/trackingNumber
+         * is the same lie as a box the endpoint ignores entirely — just harder to
+         * notice, because it returns a plausible empty list instead of nothing.
+         */
         fields?: readonly string[];
+        /**
+         * When the term reaches the URL. Defaults to `"enter"`, which is the
+         * behaviour every existing box already had.
+         *
+         * 🛑 `"debounce"` is invalid with `mode: "exact"` and the audit blocks the
+         * pairing. An exact search resolves an HMAC blind index or a whole-value
+         * equality, so every keystroke before the last is a query GUARANTEED to
+         * match nothing — the user watches "no results" while typing a value that
+         * is in fact present, and each of those round trips is a billed read.
+         */
+        commit?: "enter" | "debounce";
+        /** Debounce delay in ms. Ignored unless `commit: "debounce"`. */
+        debounceMs?: number;
     };
     emptyLabel?: string;
     sortOptions: ListingSortOption[];

package/dist/features/admin/components/DataListingView.js

@@ -26,6 +26,13 @@ export function DataListingView({ config, }) {
     const listing = useAdminListing({
         ...config,
         initialView: effectiveInitialView,
+        // Mapped explicitly: `...config` cannot reach these, they live one level
+        // down under `search`. An exact-match search is never debounced — every
+        // keystroke before the last is a query guaranteed to match nothing — so
+        // the mode forces "enter" regardless of what the view asked for, and the
+        // audit blocks the pairing at author time rather than relying on this.
+        searchCommit: config.search?.mode === "exact" ? "enter" : config.search?.commit,
+        searchDebounceMs: config.search?.debounceMs,
     });
     const { view, setView, table, panel, searchInput, setSearchInput, commitSearch, filterOpen, setFilterOpen, openFilters, applyFilters, clearFilters, pendingFilters, setPendingFilters, activeFilterCount, hasActiveState, resetAll, rows, isLoading, errorMessage, currentPage, totalPages, selection, pageSize, setPageSize, } = listing;
     const selectionContext = {

package/dist/features/admin/hooks/useAdminListing.d.ts

@@ -20,6 +20,15 @@ export interface AdminListingConfig<TResponse, TRow extends {
      * a non-"All" filter state (e.g. hide inactive rows) on first load, while
      * "Clear filters" (which writes an explicit "") still shows everything. */
     filterDefaults?: Record<string, string>;
+    /**
+     * When a typed term reaches the URL. `"enter"` (the default) is what every
+     * box already did — commit on Enter or the button, never on keystroke.
+     *
+     * Passed down from `ListingViewConfig.search.commit`; see the 🛑 there for
+     * why `"debounce"` is invalid with `mode: "exact"`.
+     */
+    searchCommit?: "enter" | "debounce";
+    searchDebounceMs?: number;
 }
 export declare function useAdminListing<TResponse, TRow extends {
     id: string;

package/dist/features/admin/hooks/useAdminListing.js

@@ -1,12 +1,12 @@
 "use client";
-import { useState, useCallback } from "react";
+import { useState, useCallback, useEffect, useRef } from "react";
 import { useUrlTable } from "../../../react/hooks/useUrlTable";
 import { useBulkSelection } from "../../../react/hooks/useBulkSelection";
 import { usePanelUrlSync } from "../../../react/hooks/use-panel-url-sync";
 import { useDataViewMode } from "../../account/hooks/useDataViewMode";
 import { useAdminListingData } from "./useAdminListingData";
 export function useAdminListing(config) {
-    const { filterKeys, defaultSort, pageSize: defaultPageSize = 25, queryKey, endpoint, mapRows, getTotal, buildFilters, buildExtraParams, filterDefaults = {}, } = config;
+    const { filterKeys, defaultSort, pageSize: defaultPageSize = 25, queryKey, endpoint, mapRows, getTotal, buildFilters, buildExtraParams, filterDefaults = {}, searchCommit = "enter", searchDebounceMs = 350, } = config;
     // Persisted, viewport-aware view-mode: below 768px defaults to "list"
     // (AdminViewCards' one-full-width-card-per-row layout) unless the caller
     // explicitly pins hideTableView (grid-only views like coupons); the user's
@@ -53,6 +53,34 @@ export function useAdminListing(config) {
     const commitSearch = useCallback(() => {
         table.set("q", searchInput.trim());
     }, [searchInput, table]);
+    // Debounced commit, opt-in per view.
+    //
+    // Two things here are load-bearing:
+    //
+    // 1. It compares against what is ALREADY in the URL and skips a no-op.
+    //    `table.set` issues a router.replace, and replacing the URL with the
+    //    value it already holds re-runs the query for nothing — on mount, on
+    //    every unrelated re-render, and on the render caused by the previous
+    //    commit. That is the double-navigation shape of Root Cause #13.
+    //
+    // 2. The timer is cleared on every keystroke AND on unmount, so a term is
+    //    never committed by a view the user has already navigated away from.
+    const debounceRef = useRef(null);
+    const committed = table.get("q") ?? "";
+    useEffect(() => {
+        if (searchCommit !== "debounce")
+            return;
+        const next = searchInput.trim();
+        if (next === committed)
+            return;
+        if (debounceRef.current)
+            clearTimeout(debounceRef.current);
+        debounceRef.current = setTimeout(() => table.set("q", next), searchDebounceMs);
+        return () => {
+            if (debounceRef.current)
+                clearTimeout(debounceRef.current);
+        };
+    }, [searchInput, committed, searchCommit, searchDebounceMs, table]);
     const activeFilterCount = filterKeys.filter((k) => !!table.get(k)).length;
     const hasActiveState = !!table.get("q") || table.get("sort") !== defaultSort || activeFilterCount > 0;
     const currentFilterState = Object.fromEntries(filterKeys.map((k) => [k, table.get(k)]));

package/dist/features/events/components/AdminEventsView.js

@@ -34,7 +34,13 @@ export function AdminEventsView({ children, ...props }) {
         portal: "admin",
         title: "Events",
         // buildEventSearchTxt indexes title + description + type + tags.
-        searchPlaceholder: "Search by title, description, type or tag…",
+        // buildEventSearchTxt indexes title + description + type + tags.
+        search: {
+            placeholder: "Search by title, description, type or tag…",
+            mode: "partial",
+            fields: ["title", "description", "type", "tags"],
+            commit: "debounce",
+        },
         emptyLabel: "No events found",
         filterKeys: ["status", "type"],
         defaultSort: sortBy("startsAt", "DESC"),

package/dist/features/scams/repository/scammer.repository.d.ts

@@ -1,5 +1,6 @@
 import { BaseRepository, parseSieveDateValue, type FirebaseSieveResult, type SieveModel } from "../../../providers/db-firebase";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
+import type { JsonValue } from "../../../schemas/types";
 /** Who/why for a scammer write that lands in `statusHistory`. */
 export interface ScammerWriteContext {
     actor?: HistoryActor;
@@ -11,6 +12,10 @@ import { type ScammerDocument, type ScammerIncidentDocument, type ScammerComment
 declare class ScammerRepository extends BaseRepository<ScammerDocument> {
     constructor();
     static readonly SIEVE_FIELDS: {
+        searchTxt: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         id: {
             canFilter: boolean;
             canSort: boolean;
@@ -58,7 +63,11 @@ declare class ScammerRepository extends BaseRepository<ScammerDocument> {
         };
     };
     listVerified(model: SieveModel): Promise<FirebaseSieveResult<ScammerDocument>>;
-    listAll(model: SieveModel): Promise<FirebaseSieveResult<ScammerDocument>>;
+    /** Derived on every write path via `applyWriteHooks`. */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
+    listAll(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<ScammerDocument>>;
     findBySeoSlug(seoSlug: string): Promise<ScammerDocument | null>;
     create(input: ScammerCreateInput): Promise<ScammerDocument>;
     /**

package/dist/features/scams/repository/scammer.repository.js

@@ -5,6 +5,8 @@ import { serverLogger } from "../../../monitoring/server-logger";
 import { increment } from "../../../contracts/field-ops";
 import { withHistory } from "../../../_internal/shared/history/index";
 import { SCAMMER_TRACKED_FIELDS, SCAMMER_HISTORY_PII_FIELDS } from "../schemas/firestore";
+import { buildScammerSearchTxt } from "../../../utils/search-txt-builders";
+import { planSearchTxt, refineSearchTxt, emptySearchResult, } from "../../../utils/search-txt-query";
 import { SCAMMER_COLLECTION, SCAMMER_FIELDS, SCAMMER_INCIDENTS_SUBCOLLECTION, SCAMMER_COMMENTS_SUBCOLLECTION, DEFAULT_SCAMMER_DATA, } from "../schemas/firestore";
 class ScammerRepository extends BaseRepository {
     constructor() {
@@ -18,11 +20,26 @@ class ScammerRepository extends BaseRepository {
             maxPageSize: 50,
         });
     }
-    async listAll(model) {
-        return this.sieveQuery(model, ScammerRepository.SIEVE_FIELDS, {
+    /** Derived on every write path via `applyWriteHooks`. */
+    buildSearchTxtFor(data) {
+        return buildScammerSearchTxt(data);
+    }
+    async listAll(model, opts) {
+        const plan = planSearchTxt(opts?.search);
+        // A search that narrowed to no usable term must return NOTHING, not the
+        // entire scam registry.
+        if (plan.empty)
+            return emptySearchResult();
+        let baseQuery = this.getCollection();
+        if (plan.head) {
+            baseQuery = baseQuery.where(SCAMMER_FIELDS.SEARCH_TXT, "array-contains", plan.head);
+        }
+        const result = await this.sieveQuery(model, ScammerRepository.SIEVE_FIELDS, {
+            baseQuery,
             defaultPageSize: 50,
             maxPageSize: 200,
         });
+        return refineSearchTxt(result, plan.rest);
     }
     async findBySeoSlug(seoSlug) {
         try {
@@ -203,6 +220,7 @@ class ScammerRepository extends BaseRepository {
     }
 }
 ScammerRepository.SIEVE_FIELDS = {
+    searchTxt: { canFilter: true, canSort: false },
     id: { canFilter: true, canSort: false },
     status: { canFilter: true, canSort: true },
     scamType: { canFilter: true, canSort: true },

package/dist/features/scams/schemas/firestore.d.ts

@@ -105,6 +105,15 @@ export interface ScammerDocument extends BaseDocument {
     upiIds: string[];
     /** Email addresses used by the scammer. Stored plaintext for SEO. */
     emails: string[];
+    /**
+     * Word-prefix n-grams over the identity fields, for `array-contains`
+     * search. Derived by `buildScammerSearchTxt` on every write.
+     *
+     * Optional because documents written before this field existed do not have
+     * it. Never filter with an inequality on it — that would exclude exactly
+     * those rows, which is the whole pre-existing registry.
+     */
+    searchTxt?: string[];
     /** Social media profiles where the scammer operated. */
     socialMedia: ScammerSocialMedia[];
     /** Primary scam type for this profile (most common across incidents). */
@@ -338,6 +347,7 @@ export type ScammerAdminUpdateInput = Partial<Pick<ScammerDocument, "status" | "
 export declare const SCAMMER_FIELDS: {
     readonly ID: "id";
     readonly SEO_SLUG: "seoSlug";
+    readonly SEARCH_TXT: "searchTxt";
     readonly DISPLAY_NAMES: "displayNames";
     readonly PHONES: "phones";
     readonly UPI_IDS: "upiIds";

package/dist/features/scams/schemas/firestore.js

@@ -170,6 +170,7 @@ export const MAX_PENDING_SCAMMER_REPORTS_PER_USER = 5;
 export const SCAMMER_FIELDS = {
     ID: "id",
     SEO_SLUG: "seoSlug",
+    SEARCH_TXT: "searchTxt",
     DISPLAY_NAMES: "displayNames",
     PHONES: "phones",
     UPI_IDS: "upiIds",

package/dist/features/scams/schemas/index.d.ts

@@ -10,11 +10,11 @@ export declare const scammerSocialMediaSchema: z.ZodObject<{
     handle: z.ZodString;
     url: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
     handle: string;
     url?: string | undefined;
 }, {
-    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+    platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
     handle: string;
     url?: string | undefined;
 }>;
@@ -44,11 +44,11 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
         handle: z.ZodString;
         url: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }, {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }>, "many">;
@@ -93,7 +93,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     scamType: string;
     reportedBy: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     phones: string[];
     upiIds: string[];
@@ -102,7 +102,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     incidentCount: number;
     seoSlug: string;
     socialMedia: {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }[];
@@ -133,7 +133,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     scamType: string;
     reportedBy: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     phones: string[];
     upiIds: string[];
@@ -142,7 +142,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     incidentCount: number;
     seoSlug: string;
     socialMedia: {
-        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+        platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }[];
@@ -201,7 +201,7 @@ export declare const scammerIncidentFirestoreSchema: z.ZodObject<{
     reportedBy: string;
     scammerId: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     verifiedBy?: string | undefined;
     amountLost?: number | undefined;
@@ -224,7 +224,7 @@ export declare const scammerIncidentFirestoreSchema: z.ZodObject<{
     reportedBy: string;
     scammerId: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     verifiedBy?: string | undefined;
     amountLost?: number | undefined;

package/dist/features/seller/components/SellerCouponsView.js

@@ -50,7 +50,13 @@ export function SellerCouponsView({ onCreateClick, onEditClick, onToggle, onDele
         portal: "seller",
         title: "Coupons",
         // buildCouponSearchTxt indexes code + name + description — nothing else.
-        searchPlaceholder: "Search by code, name or description…",
+        // buildCouponSearchTxt indexes exactly these three.
+        search: {
+            placeholder: "Search by code, name or description…",
+            mode: "partial",
+            fields: ["code", "name", "description"],
+            commit: "debounce",
+        },
         emptyLabel: "No coupons found — create your first coupon",
         filterKeys: ["isActive"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerOffersView.js

@@ -24,7 +24,14 @@ export function SellerOffersView({ children, onAcceptOffer, onRejectOffer, onCou
         title: "Offers",
         // buildOfferSearchTxt indexes productTitle + productSlug + storeName — never
         // the buyer's name or email.
-        searchPlaceholder: "Search by product or store…",
+        // buildOfferSearchTxt indexes productTitle + productSlug + storeName —
+        // never the buyer's name or email.
+        search: {
+            placeholder: "Search by product or store…",
+            mode: "partial",
+            fields: ["productTitle", "productSlug", "storeName"],
+            commit: "debounce",
+        },
         emptyLabel: "No offers received",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerOrdersView.js

@@ -297,7 +297,14 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
         // buildOrderSearchTxt indexes productTitle, storeName and trackingNumber.
         // It does NOT index the buyer's name, email or address — those are PII,
         // and the placeholder must not promise a match it will never make.
-        searchPlaceholder: "Search by product, store or tracking number…",
+        // buildOrderSearchTxt indexes productTitle, storeName and trackingNumber.
+        // NOT the buyer's name, email or address — those are PII (D1).
+        search: {
+            placeholder: "Search by product, store or tracking number…",
+            mode: "partial",
+            fields: ["productTitle", "storeName", "trackingNumber"],
+            commit: "debounce",
+        },
         emptyLabel: "No orders yet",
         filterKeys: ["status"],
         defaultSort: DEFAULT_SORT,

package/dist/schemas/registry.d.ts

@@ -3281,11 +3281,11 @@ export declare const SCHEMAS: {
                 handle: import("zod").ZodString;
                 url: import("zod").ZodOptional<import("zod").ZodString>;
             }, "strip", import("zod").ZodTypeAny, {
-                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
                 handle: string;
                 url?: string | undefined;
             }, {
-                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
                 handle: string;
                 url?: string | undefined;
             }>, "many">;
@@ -3330,7 +3330,7 @@ export declare const SCHEMAS: {
             scamType: string;
             reportedBy: string;
             reportedByAnon: boolean;
-            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
             evidence: string[];
             phones: string[];
             upiIds: string[];
@@ -3339,7 +3339,7 @@ export declare const SCHEMAS: {
             incidentCount: number;
             seoSlug: string;
             socialMedia: {
-                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
                 handle: string;
                 url?: string | undefined;
             }[];
@@ -3370,7 +3370,7 @@ export declare const SCHEMAS: {
             scamType: string;
             reportedBy: string;
             reportedByAnon: boolean;
-            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
             evidence: string[];
             phones: string[];
             upiIds: string[];
@@ -3379,7 +3379,7 @@ export declare const SCHEMAS: {
             incidentCount: number;
             seoSlug: string;
             socialMedia: {
-                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "twitter" | "linkedin" | "telegram" | "olx";
+                platform: "other" | "whatsapp" | "youtube" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
                 handle: string;
                 url?: string | undefined;
             }[];
@@ -3438,7 +3438,7 @@ export declare const SCHEMAS: {
             reportedBy: string;
             scammerId: string;
             reportedByAnon: boolean;
-            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
             evidence: string[];
             verifiedBy?: string | undefined;
             amountLost?: number | undefined;
@@ -3461,7 +3461,7 @@ export declare const SCHEMAS: {
             reportedBy: string;
             scammerId: string;
             reportedByAnon: boolean;
-            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "twitter" | "telegram" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+            scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
             evidence: string[];
             verifiedBy?: string | undefined;
             amountLost?: number | undefined;

package/dist/seed/_helpers/search-txt-wrappers.d.ts

@@ -1,4 +1,5 @@
 import type { StoreDocument } from "../../features/stores/schemas/firestore";
+import type { ScammerDocument } from "../../features/scams/schemas/firestore";
 import type { EventDocument } from "../../features/events/schemas/firestore";
 import type { BlogPostDocument } from "../../features/blog/schemas/firestore";
 import type { ReviewDocument } from "../../features/reviews/schemas/firestore";
@@ -12,3 +13,4 @@ export declare function withReviewSearchTxt<T extends Partial<ReviewDocument>>(p
 export declare function withOrderSearchTxt<T extends Partial<OrderDocument>>(p: T): T;
 export declare function withCouponSearchTxt<T extends Partial<CouponDocument>>(p: T): T;
 export declare function withOfferSearchTxt<T extends Partial<OfferDocument>>(p: T): T;
+export declare function withScammerSearchTxt<T extends Partial<ScammerDocument>>(p: T): T;

package/dist/seed/_helpers/search-txt-wrappers.js

@@ -1,4 +1,4 @@
-import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, buildOrderSearchTxt, buildCouponSearchTxt, buildOfferSearchTxt, } from "../../utils/search-txt-builders";
+import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, buildOrderSearchTxt, buildCouponSearchTxt, buildOfferSearchTxt, buildScammerSearchTxt, } from "../../utils/search-txt-builders";
 export function withStoreSearchTxt(p) {
     return { ...p, searchTxt: buildStoreSearchTxt(p) };
 }
@@ -20,3 +20,6 @@ export function withCouponSearchTxt(p) {
 export function withOfferSearchTxt(p) {
     return { ...p, searchTxt: buildOfferSearchTxt(p) };
 }
+export function withScammerSearchTxt(p) {
+    return { ...p, searchTxt: buildScammerSearchTxt(p) };
+}

package/dist/seed/scammers-seed-data.js

@@ -17,6 +17,7 @@
  * @tag consumers:seed/index.ts,seed/runner.ts
  * @tag sideEffects:none
  */
+import { withScammerSearchTxt } from "./_helpers/search-txt-wrappers";
 import { SCAMMER_FIELDS } from "../constants/field-names";
 import { seedExtMedia } from "./_helpers/media";
 const NOW = new Date("2026-05-10T00:00:00.000Z");
@@ -32,7 +33,12 @@ const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
 function entry(at, actorRole, trigger, changes, extra) {
     return { at, actorRole, trigger, changes, ...extra };
 }
-export const scammersSeedData = [
+// Annotated HERE, not on the export, so the literal is contextually typed as
+// Partial<ScammerDocument> before `.map` sees it. Without this TS infers a
+// union of the individual object shapes and rejects the wrapper's generic —
+// and the error points at the map call rather than at the field that actually
+// diverged.
+const scammerRows = [
     // ── 1. Verified — advance payment ghost ──────────────────────────────────────
     {
         id: "scammer-fake-lob-seller",
@@ -224,3 +230,6 @@ export const scammersSeedData = [
         updatedAt: daysAgo(9),
     },
 ];
+// Derived through the wrapper, never per record — an inline literal is how
+// five product seed files shipped their last fixture with no tokens.
+export const scammersSeedData = scammerRows.map(withScammerSearchTxt);