@mohasinac/appkit 4.30.6 → 4.30.8

package/dist/constants/field-names.d.ts

@@ -184,6 +184,8 @@ export declare const PRODUCT_FIELDS: {
 };
 export declare const PRODUCT_STATUS_TRANSITIONS: Record<string, readonly string[]>;
 export declare const ORDER_FIELDS: {
+    /** Word-prefix search tokens. Derived on write by `buildSearchTxtFor`. */
+    readonly SEARCH_TXT: "searchTxt";
     readonly ID: "id";
     readonly PRODUCT_ID: "productId";
     readonly PRODUCT_TITLE: "productTitle";

package/dist/constants/field-names.js

@@ -210,6 +210,8 @@ export const PRODUCT_STATUS_TRANSITIONS = {
 // ORDER FIELDS
 // ============================================================================
 export const ORDER_FIELDS = {
+    /** Word-prefix search tokens. Derived on write by `buildSearchTxtFor`. */
+    SEARCH_TXT: "searchTxt",
     ID: "id",
     PRODUCT_ID: "productId",
     PRODUCT_TITLE: "productTitle",

package/dist/features/admin/components/AdminAddressesView.js

@@ -51,7 +51,7 @@ function buildAddressConfig(onAction) {
     return {
         portal: "admin",
         title: "Address Management",
-        searchPlaceholder: "Search by city or owner",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No addresses found",
         // URL-synced via filterKeys (2026-08-21). The ban-status chips used to
         // live outside this config in local useState, so the selection was not in

package/dist/features/admin/components/AdminAllEventEntriesView.js

@@ -32,7 +32,7 @@ export function AdminAllEventEntriesView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Event Entries",
-        searchPlaceholder: "Search by user name or event ID",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No entries found",
         filterKeys: ["status"],
         defaultSort: sortBy("submittedAt", "DESC"),

package/dist/features/admin/components/AdminBidsView.js

@@ -41,7 +41,7 @@ export function AdminBidsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Bids",
-        searchPlaceholder: "Search bids, products, or bidder IDs",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No bids found",
         filterKeys: ["status"],
         defaultSort: sortBy("bidDate", "DESC"),

package/dist/features/admin/components/AdminBlogView.js

@@ -21,7 +21,7 @@ export function AdminBlogView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Blog Posts",
-        searchPlaceholder: "Search articles, authors, or tags",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No blog posts found",
         filterKeys: ["status", "isFeatured"],
         defaultSort: sortBy("publishedAt", "DESC"),

package/dist/features/admin/components/AdminBrandsView.js

@@ -33,7 +33,7 @@ const COLUMNS = [
 const ADMIN_BRANDS_CONFIG = {
     portal: "admin",
     title: "Brands",
-    searchPlaceholder: "Search brands by name or slug",
+    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
     emptyLabel: "No brands found",
     filterKeys: ["isActive"],
     defaultSort: sortBy("order", "ASC"),

package/dist/features/admin/components/AdminCarouselView.js

@@ -145,5 +145,7 @@ export function AdminCarouselView({ children, onBulkDelete, ...props }) {
                 ] })),
         },
     ];
-    return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search slide titles", onSearchChange: setSearchInput, onSearchCommit: commitSearch, showTableView: true, view: view, onViewChange: (v) => setView(v), onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx(StickyToolbar, { offset: "header+pagination", tone: "translucent", border: true, padding: "toolbar", children: _jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) }) })), selection.selectedCount > 0 && bulkActions.length > 0 && (_jsx(BulkActionBar, { selectedCount: selection.selectedCount, actions: bulkActions, onClearSelection: selection.clearSelection })), _jsxs(Div, { paddingX: "x-sm-md", padding: "y-md", children: [errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), _jsx(DataTable, { rows: displayRows, columns: columns, isLoading: isLoading, emptyLabel: "No carousel slides \u2014 use 'New slide' to add one", rowHrefTemplate: "/admin/carousel/{id}/edit" })] }), _jsx(ListingFilterDrawer, { open: filterOpen, onClose: () => setFilterOpen(false), onApply: applyFilters, onClear: clearFilters, activeCount: activeFilterCount, children: _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { className: "tracking-widest", color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "Status" }), _jsx(Row, { wrap: true, gap: "sm", children: [{ label: "All", value: "" }, { label: "Active", value: "true" }, { label: "Inactive", value: "false" }].map((opt) => (_jsx(Button, { variant: "ghost", type: "button", onClick: () => setPendingFilters((p) => ({ ...p, active: opt.value })), className: `rounded-full px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium border transition-colors min-h-0 h-auto ${(pendingFilters.active || "") === opt.value ? "bg-primary text-white border-primary" : "border-[var(--appkit-color-border)] text-[var(--appkit-color-text-muted)] hover:bg-surface-hover"}`, children: opt.label }, opt.label))) })] }) }), deleteTargetId && (_jsx(ConfirmDeleteModal, { isOpen: true, title: "Delete Carousel Slide", message: "Delete this carousel slide? This cannot be undone.", onConfirm: () => { deleteMutation.mutate(deleteTargetId); setDeleteTargetId(null); }, onClose: () => setDeleteTargetId(null), isDeleting: deleteMutation.isPending }))] }));
+    return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, 
+                // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+                onSearchChange: setSearchInput, onSearchCommit: commitSearch, showTableView: true, view: view, onViewChange: (v) => setView(v), onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx(StickyToolbar, { offset: "header+pagination", tone: "translucent", border: true, padding: "toolbar", children: _jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) }) })), selection.selectedCount > 0 && bulkActions.length > 0 && (_jsx(BulkActionBar, { selectedCount: selection.selectedCount, actions: bulkActions, onClearSelection: selection.clearSelection })), _jsxs(Div, { paddingX: "x-sm-md", padding: "y-md", children: [errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), _jsx(DataTable, { rows: displayRows, columns: columns, isLoading: isLoading, emptyLabel: "No carousel slides \u2014 use 'New slide' to add one", rowHrefTemplate: "/admin/carousel/{id}/edit" })] }), _jsx(ListingFilterDrawer, { open: filterOpen, onClose: () => setFilterOpen(false), onApply: applyFilters, onClear: clearFilters, activeCount: activeFilterCount, children: _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { className: "tracking-widest", color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "Status" }), _jsx(Row, { wrap: true, gap: "sm", children: [{ label: "All", value: "" }, { label: "Active", value: "true" }, { label: "Inactive", value: "false" }].map((opt) => (_jsx(Button, { variant: "ghost", type: "button", onClick: () => setPendingFilters((p) => ({ ...p, active: opt.value })), className: `rounded-full px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium border transition-colors min-h-0 h-auto ${(pendingFilters.active || "") === opt.value ? "bg-primary text-white border-primary" : "border-[var(--appkit-color-border)] text-[var(--appkit-color-text-muted)] hover:bg-surface-hover"}`, children: opt.label }, opt.label))) })] }) }), deleteTargetId && (_jsx(ConfirmDeleteModal, { isOpen: true, title: "Delete Carousel Slide", message: "Delete this carousel slide? This cannot be undone.", onConfirm: () => { deleteMutation.mutate(deleteTargetId); setDeleteTargetId(null); }, onClose: () => setDeleteTargetId(null), isDeleting: deleteMutation.isPending }))] }));
 }

package/dist/features/admin/components/AdminCartsView.js

@@ -32,7 +32,7 @@ function toCartItemEntries(raw) {
 const ADMIN_CARTS_CONFIG = {
     portal: "admin",
     title: "Carts",
-    searchPlaceholder: "Search by user ID or session",
+    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
     emptyLabel: "No carts found",
     filterKeys: ["ownership"],
     defaultSort: sortBy("updatedAt", "DESC"),

package/dist/features/admin/components/AdminCategoriesView.js

@@ -32,7 +32,7 @@ const COLUMNS = [
 const ADMIN_CATEGORIES_CONFIG = {
     portal: "admin",
     title: "Categories",
-    searchPlaceholder: "Search categories, slugs, or parent category",
+    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
     emptyLabel: "No categories found",
     filterKeys: ["isActive", "isFeatured"],
     defaultSort: sortBy("name", "ASC"),

package/dist/features/admin/components/AdminContactView.js

@@ -49,7 +49,7 @@ export function AdminContactView({ children, onBulkMarkRead, onBulkArchive, onBu
     const config = {
         portal: "admin",
         title: "Contact Submissions",
-        searchPlaceholder: "Search by subject, name, or email",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No contact submissions found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminCouponsView.js

@@ -52,7 +52,7 @@ export function AdminCouponsView({ children, onBulkArchive, onBulkDelete, ...pro
     const config = {
         portal: "admin",
         title: "Coupons",
-        searchPlaceholder: "Search codes, campaigns, or seller scopes",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No coupons found",
         filterKeys: ["type", "showExpired"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminFeaturesView.js

@@ -41,7 +41,7 @@ export function AdminFeaturesView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Features",
-        searchPlaceholder: "Search features by label",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No features found",
         filterKeys: [],
         defaultSort: sortBy("displayOrder", "ASC"),

package/dist/features/admin/components/AdminGroupedListingsView.js

@@ -52,7 +52,7 @@ export function AdminGroupedListingsView({ children, ...props }) {
     const config = React.useMemo(() => ({
         portal: "admin",
         title: "Grouped Listings",
-        searchPlaceholder: "Search grouped listings by title or seller",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No grouped listings",
         filterKeys: [],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminHistoryView.js

@@ -15,7 +15,7 @@ import { DataListingView } from "./DataListingView";
 const ADMIN_HISTORY_CONFIG = {
     portal: "admin",
     title: "History",
-    searchPlaceholder: "Search by user ID",
+    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
     emptyLabel: "No user history records found",
     filterKeys: [],
     defaultSort: sortBy("updatedAt", "DESC"),

package/dist/features/admin/components/AdminNewsletterView.js

@@ -87,7 +87,7 @@ export function AdminNewsletterView({ children, onBulkUnsubscribe, ...props }) {
     const config = {
         portal: "admin",
         title: "Newsletter",
-        searchPlaceholder: "Search by email or source",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No subscribers found",
         filterKeys: ["status"],
         defaultSort: sortBy("subscribedAt", "DESC"),

package/dist/features/admin/components/AdminOffersView.js

@@ -103,7 +103,7 @@ export function AdminOffersView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Offers",
-        searchPlaceholder: "Search offers by product, buyer, or store",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No offers found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminOrdersView.js

@@ -85,7 +85,17 @@ export function AdminOrdersView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Orders",
-        searchPlaceholder: "Search orders, buyers, or tracking IDs",
+        // Restored: `orders` has searchTxt and `/api/admin/orders` reads `q`.
+        //
+        // Matches the product, the store and the tracking number — deliberately NOT
+        // the buyer's name or email. Those are ORDER_PII_FIELDS, encrypted at rest,
+        // and a searchTxt for a name IS that name re-encoded (D1). The placeholder
+        // says what it matches so it does not promise the buyer lookup it cannot do.
+        search: {
+            placeholder: "Product, store, or tracking number",
+            mode: "partial",
+            fields: ["productTitle", "storeName", "trackingNumber"],
+        },
         emptyLabel: "No orders found",
         filterKeys: ["status", "paymentReview"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminPaymentMethodsView.js

@@ -52,7 +52,7 @@ onOpen) {
     return {
         portal: "admin",
         title: "Payment Methods",
-        searchPlaceholder: "Search by type or owner",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No payment methods found",
         // URL-synced via filterKeys (2026-08-21) — see the matching note in
         // AdminAddressesView. banStatus is a query param, not a Sieve clause,

package/dist/features/admin/components/AdminReturnRequestsView.js

@@ -46,7 +46,7 @@ export function AdminReturnRequestsView(_props) {
     const config = {
         portal: "admin",
         title: "Return Requests",
-        searchPlaceholder: "Search by order ID or buyer",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No return requests",
         filterKeys: [],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminSessionsView.js

@@ -41,7 +41,7 @@ export function AdminSessionsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Sessions",
-        searchPlaceholder: "Search by user or device",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No sessions found",
         filterKeys: ["isActive"],
         defaultSort: sortBy("lastActivity", "DESC"),

package/dist/features/admin/components/AdminStoreAddressesView.js

@@ -9,7 +9,7 @@ import { RecordDetailModal } from "../../../ui";
 const ADMIN_STORE_ADDRESSES_CONFIG = {
     portal: "admin",
     title: "Store Addresses",
-    searchPlaceholder: "Search by label, city, or store ID",
+    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
     emptyLabel: "No store addresses found",
     filterKeys: [],
     defaultSort: sortBy("storeId", "ASC"),

package/dist/features/admin/components/AdminSublistingCategoriesView.js

@@ -11,7 +11,7 @@ export function AdminSublistingCategoriesView({ onBulkDelete, }) {
     const config = {
         portal: "admin",
         title: "Sub-listing Categories",
-        searchPlaceholder: "Search sub-listing categories…",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No sub-listing categories found",
         filterKeys: [],
         defaultSort: sortBy("name", "ASC"),

package/dist/features/admin/components/AdminWishlistsView.js

@@ -11,7 +11,7 @@ import { DataListingView } from "./DataListingView";
 const ADMIN_WISHLISTS_CONFIG = {
     portal: "admin",
     title: "Wishlists",
-    searchPlaceholder: "Search by user ID",
+    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
     emptyLabel: "No user wishlists found",
     filterKeys: [],
     defaultSort: sortBy("updatedAt", "DESC"),

package/dist/features/catalogue/components/AdminCatalogueApprovalsView.js

@@ -41,7 +41,7 @@ export function AdminCatalogueApprovalsView() {
     const config = {
         portal: "admin",
         title: "Catalogue Approvals",
-        searchPlaceholder: "Search by title",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No pending catalogue requests",
         filterKeys: [],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/events/components/AdminEventsView.js

@@ -33,7 +33,7 @@ export function AdminEventsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Events",
-        searchPlaceholder: "Search events by title or type",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No events found",
         filterKeys: ["status", "type"],
         defaultSort: sortBy("startsAt", "DESC"),

package/dist/features/orders/repository/orders.repository.d.ts

@@ -1,3 +1,4 @@
+import type { JsonValue } from "../../../schemas/types";
 import type { DocumentReference, WriteBatch } from "firebase-admin/firestore";
 import type { FirebaseSieveResult, SieveModel } from "../../../providers/db-firebase";
 import { BaseRepository, parseSieveDateValue } from "../../../providers/db-firebase";
@@ -153,6 +154,10 @@ declare class OrderRepository extends BaseRepository<OrderDocument> {
     listForSeller(productIds: string[], model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
     listForUser(userId: string, model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
     static readonly ADMIN_SIEVE_FIELDS: {
+        searchTxt: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         id: {
             canFilter: boolean;
             canSort: boolean;
@@ -244,7 +249,16 @@ declare class OrderRepository extends BaseRepository<OrderDocument> {
             canSort: boolean;
         };
     };
-    listAll(model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
+    /**
+     * Derived on every write path via `applyWriteHooks`.
+     *
+     * Fed by product/store/tracking only — the three ORDER_PII_FIELDS and the
+     * shipping address are deliberately absent (see buildOrderSearchTxt).
+     */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
+    listAll(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<OrderDocument>>;
     /**
      * Append one refund event to the order and mark it non-contestable.
      * If `becomeRefunded` is true, also transitions the order status to "refunded".

package/dist/features/orders/repository/orders.repository.js

@@ -1,3 +1,5 @@
+import { buildOrderSearchTxt } from "../../../utils/search-txt-builders";
+import { planSearchTxt, refineSearchTxt, emptySearchResult, } from "../../../utils/search-txt-query";
 import { normalizeError } from "../../../errors/normalize";
 import { DatabaseError, NotFoundError } from "../../../errors";
 import { BaseRepository, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase";
@@ -286,11 +288,30 @@ class OrderRepository extends BaseRepository {
             maxPageSize: 200,
         });
     }
-    async listAll(model) {
-        return this.sieveQuery(model, OrderRepository.ADMIN_SIEVE_FIELDS, {
+    /**
+     * Derived on every write path via `applyWriteHooks`.
+     *
+     * Fed by product/store/tracking only — the three ORDER_PII_FIELDS and the
+     * shipping address are deliberately absent (see buildOrderSearchTxt).
+     */
+    buildSearchTxtFor(data) {
+        return buildOrderSearchTxt(data);
+    }
+    async listAll(model, opts) {
+        const plan = planSearchTxt(opts?.search);
+        // A search that yielded no usable term must return NOTHING, not everything.
+        if (plan.empty)
+            return emptySearchResult();
+        let baseQuery = this.getCollection();
+        if (plan.head) {
+            baseQuery = baseQuery.where(ORDER_FIELDS.SEARCH_TXT, "array-contains", plan.head);
+        }
+        const result = await this.sieveQuery(model, OrderRepository.ADMIN_SIEVE_FIELDS, {
+            baseQuery,
             defaultPageSize: 50,
             maxPageSize: 200,
         });
+        return refineSearchTxt(result, plan.rest);
     }
     /**
      * Append one refund event to the order and mark it non-contestable.
@@ -604,6 +625,7 @@ OrderRepository.SELLER_SIEVE_FIELDS = {
     couponCode: { canFilter: true, canSort: false },
 };
 OrderRepository.ADMIN_SIEVE_FIELDS = {
+    searchTxt: { canFilter: true, canSort: false },
     id: { canFilter: true, canSort: false },
     userId: { canFilter: true, canSort: false },
     userName: { canFilter: true, canSort: true },

package/dist/features/orders/schemas/firestore.d.ts

@@ -240,6 +240,8 @@ export interface AppliedOrderDiscount {
     storeId?: string;
 }
 export interface OrderDocument extends BaseDocument {
+    /** Word-prefix search tokens. Derived on write; never fed by a PII field. */
+    searchTxt?: string[];
     productId: string;
     productTitle: string;
     userId: string;
@@ -522,7 +524,7 @@ export interface OrderPaymentRecord {
     };
 }
 export declare const ORDER_COLLECTION: "orders";
-export declare const ORDER_INDEXED_FIELDS: readonly ["userId", "productId", "storeId", "status", "paymentStatus", "payoutStatus", "shippingMethod", "orderDate", "createdAt", "assignedWorkerId", "pickedAt", "packedAt"];
+export declare const ORDER_INDEXED_FIELDS: readonly ["searchTxt", "userId", "productId", "storeId", "status", "paymentStatus", "payoutStatus", "shippingMethod", "orderDate", "createdAt", "assignedWorkerId", "pickedAt", "packedAt"];
 export declare const DEFAULT_ORDER_DATA: Partial<OrderDocument>;
 export declare const ORDER_PUBLIC_FIELDS: readonly ["id", "productId", "productTitle", "quantity", "unitPrice", "totalPrice", "currency", "status", "paymentStatus", "shippingAddress", "trackingNumber", "notes", "orderDate", "shippingDate", "deliveryDate", "createdAt"];
 export declare const ORDER_UPDATABLE_FIELDS: readonly ["notes", "shippingAddress"];

package/dist/features/orders/schemas/firestore.js

@@ -51,6 +51,7 @@ export const RefundStatusValues = {
 };
 export const ORDER_COLLECTION = "orders";
 export const ORDER_INDEXED_FIELDS = [
+    "searchTxt",
     "userId",
     "productId",
     "storeId",

package/dist/features/seller/components/SellerCouponsView.js

@@ -49,7 +49,7 @@ export function SellerCouponsView({ onCreateClick, onEditClick, onToggle, onDele
     const config = {
         portal: "seller",
         title: "Coupons",
-        searchPlaceholder: "Search by coupon code",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No coupons found — create your first coupon",
         filterKeys: ["isActive"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerGroupedListingsView.js

@@ -54,7 +54,7 @@ export function SellerGroupedListingsView({ onCreateClick, onEditClick, onDelete
     const config = {
         portal: "seller",
         title: "Grouped Listings",
-        searchPlaceholder: "Search grouped listings",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No grouped listings yet",
         filterKeys: [],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerOffersView.js

@@ -22,7 +22,7 @@ export function SellerOffersView({ children, onAcceptOffer, onRejectOffer, onCou
     const config = {
         portal: "seller",
         title: "Offers",
-        searchPlaceholder: "Search offers by product or buyer name",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No offers received",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerOrdersView.js

@@ -294,7 +294,7 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
     const config = {
         portal: "seller",
         title: "Orders",
-        searchPlaceholder: "Search by order ID or buyer name",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No orders yet",
         filterKeys: ["status"],
         defaultSort: DEFAULT_SORT,

package/dist/features/seller/components/SellerPayoutsView.js

@@ -95,7 +95,7 @@ export function SellerPayoutsView({ children, ...props }) {
     const config = {
         portal: "seller",
         title: "Payouts",
-        searchPlaceholder: "Search payouts by payout # or amount",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No payouts found",
         filterKeys: ["status", "showAllPayouts"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/seller/components/SellerStoreCategoriesView.js

@@ -64,7 +64,7 @@ export function SellerStoreCategoriesView({ onCreateClick, onEditClick, onDelete
     const config = {
         portal: "seller",
         title: "Store Categories",
-        searchPlaceholder: "Search categories by label...",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No categories yet — add your first storefront category",
         filterKeys: [],
         defaultSort: DEFAULT_SORT,

package/dist/features/shipments/components/AdminShipmentsView.js

@@ -28,7 +28,7 @@ export function AdminShipmentsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Procurement Shipments",
-        searchPlaceholder: "Search by shipment number or supplier",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No shipments found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/tester/components/AdminTesterFeedbackListView.js

@@ -60,7 +60,7 @@ export function AdminTesterFeedbackListView(_props) {
     const config = {
         portal: "admin",
         title: "All Submissions",
-        searchPlaceholder: "Search tester, comment, or case",
+        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
         emptyLabel: "No feedback submitted yet",
         filterKeys: ["answer", "status"],
         defaultSort: sortBy(TESTER_CHECKLIST_RESPONSE_FIELDS.CREATED_AT, "DESC"),

package/dist/seed/_helpers/search-txt-wrappers.d.ts

@@ -2,7 +2,9 @@ import type { StoreDocument } from "../../features/stores/schemas/firestore";
 import type { EventDocument } from "../../features/events/schemas/firestore";
 import type { BlogPostDocument } from "../../features/blog/schemas/firestore";
 import type { ReviewDocument } from "../../features/reviews/schemas/firestore";
+import type { OrderDocument } from "../../features/orders/schemas/firestore";
 export declare function withStoreSearchTxt<T extends Partial<StoreDocument>>(p: T): T;
 export declare function withEventSearchTxt<T extends Partial<EventDocument>>(p: T): T;
 export declare function withBlogSearchTxt<T extends Partial<BlogPostDocument>>(p: T): T;
 export declare function withReviewSearchTxt<T extends Partial<ReviewDocument>>(p: T): T;
+export declare function withOrderSearchTxt<T extends Partial<OrderDocument>>(p: T): T;

package/dist/seed/_helpers/search-txt-wrappers.js

@@ -1,4 +1,4 @@
-import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, } from "../../utils/search-txt-builders";
+import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, buildOrderSearchTxt, } from "../../utils/search-txt-builders";
 export function withStoreSearchTxt(p) {
     return { ...p, searchTxt: buildStoreSearchTxt(p) };
 }
@@ -11,3 +11,6 @@ export function withBlogSearchTxt(p) {
 export function withReviewSearchTxt(p) {
     return { ...p, searchTxt: buildReviewSearchTxt(p) };
 }
+export function withOrderSearchTxt(p) {
+    return { ...p, searchTxt: buildOrderSearchTxt(p) };
+}

package/dist/seed/orders-seed-data.js

@@ -36,6 +36,7 @@
  * @tag consumers:seed/index.ts,seed/runner.ts
  * @tag sideEffects:none
  */
+import { withOrderSearchTxt } from "./_helpers/search-txt-wrappers";
 import { seedExtMedia } from "./_helpers/media";
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
@@ -723,4 +724,6 @@ export const ordersSeedData = [
     // it used to be 48 for the two manual-payment orders, and now also absorbs
     // the six acquisition-path orders.
     ...[..._rawOrdersSeedData, ...expandedOrders].slice(0, 42),
-].map(withOrderImages);
+    // Derived through the wrapper, never written per record — an inline literal
+    // is how five product seed files shipped their last fixture with no tokens.
+].map(withOrderImages).map(withOrderSearchTxt);

package/dist/utils/search-txt-builders.d.ts

@@ -3,6 +3,7 @@ import type { StoreDocument } from "../features/stores/schemas/firestore";
 import type { EventDocument } from "../features/events/schemas/firestore";
 import type { BlogPostDocument } from "../features/blog/schemas/firestore";
 import type { ReviewDocument } from "../features/reviews/schemas/firestore";
+import type { OrderDocument } from "../features/orders/schemas/firestore";
 /** products — title, description, brand, taxonomy, condition, card/grading, specs. */
 export declare function buildProductSearchTxt(p: Partial<ProductDocument>): string[];
 /** stores — name, description, category. No payout details, no contact. */
@@ -21,3 +22,13 @@ export declare function buildEventSearchTxt(e: Partial<EventDocument>): string[]
 export declare function buildBlogSearchTxt(b: Partial<BlogPostDocument>): string[];
 /** reviews — title, comment, productTitle. `userName` is PII and excluded. */
 export declare function buildReviewSearchTxt(r: Partial<ReviewDocument>): string[];
+/**
+ * orders — what an admin or seller actually looks an order up BY: the product,
+ * the store, the tracking number.
+ *
+ * 🛑 `userName`, `userEmail` and `sellerEmail` are ORDER_PII_FIELDS and are
+ * absent. `shippingAddress` is absent too — it is not in that registry, but it
+ * is an address, and a searchTxt for an address IS that address re-encoded.
+ * Indexing any of them would undo the encryption they are stored under (D1).
+ */
+export declare function buildOrderSearchTxt(o: Partial<OrderDocument>): string[];

package/dist/utils/search-txt-builders.js

@@ -84,3 +84,20 @@ export function buildBlogSearchTxt(b) {
 export function buildReviewSearchTxt(r) {
     return buildSearchTxt([r.title, stripHtml(r.comment), r.productTitle]);
 }
+/**
+ * orders — what an admin or seller actually looks an order up BY: the product,
+ * the store, the tracking number.
+ *
+ * 🛑 `userName`, `userEmail` and `sellerEmail` are ORDER_PII_FIELDS and are
+ * absent. `shippingAddress` is absent too — it is not in that registry, but it
+ * is an address, and a searchTxt for an address IS that address re-encoded.
+ * Indexing any of them would undo the encryption they are stored under (D1).
+ */
+export function buildOrderSearchTxt(o) {
+    return buildSearchTxt([
+        o.productTitle,
+        o.storeName,
+        o.trackingNumber,
+        (o.items ?? []).map((i) => i.productTitle),
+    ]);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.30.6",
+  "version": "4.30.8",
   "license": "MIT",
   "publishConfig": {
     "access": "public"