@mohasinac/appkit 4.30.7 → 4.30.8

package/dist/constants/field-names.d.ts

@@ -184,6 +184,8 @@ export declare const PRODUCT_FIELDS: {
 };
 export declare const PRODUCT_STATUS_TRANSITIONS: Record<string, readonly string[]>;
 export declare const ORDER_FIELDS: {
+    /** Word-prefix search tokens. Derived on write by `buildSearchTxtFor`. */
+    readonly SEARCH_TXT: "searchTxt";
     readonly ID: "id";
     readonly PRODUCT_ID: "productId";
     readonly PRODUCT_TITLE: "productTitle";

package/dist/constants/field-names.js

@@ -210,6 +210,8 @@ export const PRODUCT_STATUS_TRANSITIONS = {
 // ORDER FIELDS
 // ============================================================================
 export const ORDER_FIELDS = {
+    /** Word-prefix search tokens. Derived on write by `buildSearchTxtFor`. */
+    SEARCH_TXT: "searchTxt",
     ID: "id",
     PRODUCT_ID: "productId",
     PRODUCT_TITLE: "productTitle",

package/dist/features/admin/components/AdminOrdersView.js

@@ -85,7 +85,17 @@ export function AdminOrdersView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Orders",
-        // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+        // Restored: `orders` has searchTxt and `/api/admin/orders` reads `q`.
+        //
+        // Matches the product, the store and the tracking number — deliberately NOT
+        // the buyer's name or email. Those are ORDER_PII_FIELDS, encrypted at rest,
+        // and a searchTxt for a name IS that name re-encoded (D1). The placeholder
+        // says what it matches so it does not promise the buyer lookup it cannot do.
+        search: {
+            placeholder: "Product, store, or tracking number",
+            mode: "partial",
+            fields: ["productTitle", "storeName", "trackingNumber"],
+        },
         emptyLabel: "No orders found",
         filterKeys: ["status", "paymentReview"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/orders/repository/orders.repository.d.ts

@@ -1,3 +1,4 @@
+import type { JsonValue } from "../../../schemas/types";
 import type { DocumentReference, WriteBatch } from "firebase-admin/firestore";
 import type { FirebaseSieveResult, SieveModel } from "../../../providers/db-firebase";
 import { BaseRepository, parseSieveDateValue } from "../../../providers/db-firebase";
@@ -153,6 +154,10 @@ declare class OrderRepository extends BaseRepository<OrderDocument> {
     listForSeller(productIds: string[], model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
     listForUser(userId: string, model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
     static readonly ADMIN_SIEVE_FIELDS: {
+        searchTxt: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         id: {
             canFilter: boolean;
             canSort: boolean;
@@ -244,7 +249,16 @@ declare class OrderRepository extends BaseRepository<OrderDocument> {
             canSort: boolean;
         };
     };
-    listAll(model: SieveModel): Promise<FirebaseSieveResult<OrderDocument>>;
+    /**
+     * Derived on every write path via `applyWriteHooks`.
+     *
+     * Fed by product/store/tracking only — the three ORDER_PII_FIELDS and the
+     * shipping address are deliberately absent (see buildOrderSearchTxt).
+     */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
+    listAll(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<OrderDocument>>;
     /**
      * Append one refund event to the order and mark it non-contestable.
      * If `becomeRefunded` is true, also transitions the order status to "refunded".

package/dist/features/orders/repository/orders.repository.js

@@ -1,3 +1,5 @@
+import { buildOrderSearchTxt } from "../../../utils/search-txt-builders";
+import { planSearchTxt, refineSearchTxt, emptySearchResult, } from "../../../utils/search-txt-query";
 import { normalizeError } from "../../../errors/normalize";
 import { DatabaseError, NotFoundError } from "../../../errors";
 import { BaseRepository, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase";
@@ -286,11 +288,30 @@ class OrderRepository extends BaseRepository {
             maxPageSize: 200,
         });
     }
-    async listAll(model) {
-        return this.sieveQuery(model, OrderRepository.ADMIN_SIEVE_FIELDS, {
+    /**
+     * Derived on every write path via `applyWriteHooks`.
+     *
+     * Fed by product/store/tracking only — the three ORDER_PII_FIELDS and the
+     * shipping address are deliberately absent (see buildOrderSearchTxt).
+     */
+    buildSearchTxtFor(data) {
+        return buildOrderSearchTxt(data);
+    }
+    async listAll(model, opts) {
+        const plan = planSearchTxt(opts?.search);
+        // A search that yielded no usable term must return NOTHING, not everything.
+        if (plan.empty)
+            return emptySearchResult();
+        let baseQuery = this.getCollection();
+        if (plan.head) {
+            baseQuery = baseQuery.where(ORDER_FIELDS.SEARCH_TXT, "array-contains", plan.head);
+        }
+        const result = await this.sieveQuery(model, OrderRepository.ADMIN_SIEVE_FIELDS, {
+            baseQuery,
             defaultPageSize: 50,
             maxPageSize: 200,
         });
+        return refineSearchTxt(result, plan.rest);
     }
     /**
      * Append one refund event to the order and mark it non-contestable.
@@ -604,6 +625,7 @@ OrderRepository.SELLER_SIEVE_FIELDS = {
     couponCode: { canFilter: true, canSort: false },
 };
 OrderRepository.ADMIN_SIEVE_FIELDS = {
+    searchTxt: { canFilter: true, canSort: false },
     id: { canFilter: true, canSort: false },
     userId: { canFilter: true, canSort: false },
     userName: { canFilter: true, canSort: true },

package/dist/features/orders/schemas/firestore.d.ts

@@ -240,6 +240,8 @@ export interface AppliedOrderDiscount {
     storeId?: string;
 }
 export interface OrderDocument extends BaseDocument {
+    /** Word-prefix search tokens. Derived on write; never fed by a PII field. */
+    searchTxt?: string[];
     productId: string;
     productTitle: string;
     userId: string;
@@ -522,7 +524,7 @@ export interface OrderPaymentRecord {
     };
 }
 export declare const ORDER_COLLECTION: "orders";
-export declare const ORDER_INDEXED_FIELDS: readonly ["userId", "productId", "storeId", "status", "paymentStatus", "payoutStatus", "shippingMethod", "orderDate", "createdAt", "assignedWorkerId", "pickedAt", "packedAt"];
+export declare const ORDER_INDEXED_FIELDS: readonly ["searchTxt", "userId", "productId", "storeId", "status", "paymentStatus", "payoutStatus", "shippingMethod", "orderDate", "createdAt", "assignedWorkerId", "pickedAt", "packedAt"];
 export declare const DEFAULT_ORDER_DATA: Partial<OrderDocument>;
 export declare const ORDER_PUBLIC_FIELDS: readonly ["id", "productId", "productTitle", "quantity", "unitPrice", "totalPrice", "currency", "status", "paymentStatus", "shippingAddress", "trackingNumber", "notes", "orderDate", "shippingDate", "deliveryDate", "createdAt"];
 export declare const ORDER_UPDATABLE_FIELDS: readonly ["notes", "shippingAddress"];

package/dist/features/orders/schemas/firestore.js

@@ -51,6 +51,7 @@ export const RefundStatusValues = {
 };
 export const ORDER_COLLECTION = "orders";
 export const ORDER_INDEXED_FIELDS = [
+    "searchTxt",
     "userId",
     "productId",
     "storeId",

package/dist/seed/_helpers/search-txt-wrappers.d.ts

@@ -2,7 +2,9 @@ import type { StoreDocument } from "../../features/stores/schemas/firestore";
 import type { EventDocument } from "../../features/events/schemas/firestore";
 import type { BlogPostDocument } from "../../features/blog/schemas/firestore";
 import type { ReviewDocument } from "../../features/reviews/schemas/firestore";
+import type { OrderDocument } from "../../features/orders/schemas/firestore";
 export declare function withStoreSearchTxt<T extends Partial<StoreDocument>>(p: T): T;
 export declare function withEventSearchTxt<T extends Partial<EventDocument>>(p: T): T;
 export declare function withBlogSearchTxt<T extends Partial<BlogPostDocument>>(p: T): T;
 export declare function withReviewSearchTxt<T extends Partial<ReviewDocument>>(p: T): T;
+export declare function withOrderSearchTxt<T extends Partial<OrderDocument>>(p: T): T;

package/dist/seed/_helpers/search-txt-wrappers.js

@@ -1,4 +1,4 @@
-import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, } from "../../utils/search-txt-builders";
+import { buildStoreSearchTxt, buildEventSearchTxt, buildBlogSearchTxt, buildReviewSearchTxt, buildOrderSearchTxt, } from "../../utils/search-txt-builders";
 export function withStoreSearchTxt(p) {
     return { ...p, searchTxt: buildStoreSearchTxt(p) };
 }
@@ -11,3 +11,6 @@ export function withBlogSearchTxt(p) {
 export function withReviewSearchTxt(p) {
     return { ...p, searchTxt: buildReviewSearchTxt(p) };
 }
+export function withOrderSearchTxt(p) {
+    return { ...p, searchTxt: buildOrderSearchTxt(p) };
+}

package/dist/seed/orders-seed-data.js

@@ -36,6 +36,7 @@
  * @tag consumers:seed/index.ts,seed/runner.ts
  * @tag sideEffects:none
  */
+import { withOrderSearchTxt } from "./_helpers/search-txt-wrappers";
 import { seedExtMedia } from "./_helpers/media";
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
@@ -723,4 +724,6 @@ export const ordersSeedData = [
     // it used to be 48 for the two manual-payment orders, and now also absorbs
     // the six acquisition-path orders.
     ...[..._rawOrdersSeedData, ...expandedOrders].slice(0, 42),
-].map(withOrderImages);
+    // Derived through the wrapper, never written per record — an inline literal
+    // is how five product seed files shipped their last fixture with no tokens.
+].map(withOrderImages).map(withOrderSearchTxt);

package/dist/utils/search-txt-builders.d.ts

@@ -3,6 +3,7 @@ import type { StoreDocument } from "../features/stores/schemas/firestore";
 import type { EventDocument } from "../features/events/schemas/firestore";
 import type { BlogPostDocument } from "../features/blog/schemas/firestore";
 import type { ReviewDocument } from "../features/reviews/schemas/firestore";
+import type { OrderDocument } from "../features/orders/schemas/firestore";
 /** products — title, description, brand, taxonomy, condition, card/grading, specs. */
 export declare function buildProductSearchTxt(p: Partial<ProductDocument>): string[];
 /** stores — name, description, category. No payout details, no contact. */
@@ -21,3 +22,13 @@ export declare function buildEventSearchTxt(e: Partial<EventDocument>): string[]
 export declare function buildBlogSearchTxt(b: Partial<BlogPostDocument>): string[];
 /** reviews — title, comment, productTitle. `userName` is PII and excluded. */
 export declare function buildReviewSearchTxt(r: Partial<ReviewDocument>): string[];
+/**
+ * orders — what an admin or seller actually looks an order up BY: the product,
+ * the store, the tracking number.
+ *
+ * 🛑 `userName`, `userEmail` and `sellerEmail` are ORDER_PII_FIELDS and are
+ * absent. `shippingAddress` is absent too — it is not in that registry, but it
+ * is an address, and a searchTxt for an address IS that address re-encoded.
+ * Indexing any of them would undo the encryption they are stored under (D1).
+ */
+export declare function buildOrderSearchTxt(o: Partial<OrderDocument>): string[];

package/dist/utils/search-txt-builders.js

@@ -84,3 +84,20 @@ export function buildBlogSearchTxt(b) {
 export function buildReviewSearchTxt(r) {
     return buildSearchTxt([r.title, stripHtml(r.comment), r.productTitle]);
 }
+/**
+ * orders — what an admin or seller actually looks an order up BY: the product,
+ * the store, the tracking number.
+ *
+ * 🛑 `userName`, `userEmail` and `sellerEmail` are ORDER_PII_FIELDS and are
+ * absent. `shippingAddress` is absent too — it is not in that registry, but it
+ * is an address, and a searchTxt for an address IS that address re-encoded.
+ * Indexing any of them would undo the encryption they are stored under (D1).
+ */
+export function buildOrderSearchTxt(o) {
+    return buildSearchTxt([
+        o.productTitle,
+        o.storeName,
+        o.trackingNumber,
+        (o.items ?? []).map((i) => i.productTitle),
+    ]);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.30.7",
+  "version": "4.30.8",
   "license": "MIT",
   "publishConfig": {
     "access": "public"