@mohasinac/appkit 4.32.0 → 4.32.1

package/dist/features/account/components/UserBidsView.js

@@ -31,7 +31,12 @@ export function UserBidsView() {
     const config = {
         portal: "user",
         title: "My Bids",
-        searchPlaceholder: "Search by auction title…",
+        search: {
+            placeholder: "Search by auction title…",
+            // `/api/user/bids` filters in memory: `(b.productTitle ?? "").includes(q)`.
+            // The bid document carries no other text.
+            fields: ["productTitle"],
+        },
         emptyLabel: "You haven't placed any bids yet.",
         filterKeys: ["status"],
         defaultSort: sortBy("bidDate", "DESC"),

package/dist/features/account/components/UserOrdersView.js

@@ -48,7 +48,14 @@ export function UserOrdersView({ onOrderClick }) {
     const config = {
         portal: "user",
         title: "My Orders",
-        searchPlaceholder: "Search by order id…",
+        search: {
+            placeholder: "Search by order id…",
+            // `/api/user/orders` filters in memory on `o.id` and nothing else — not
+            // the product titles the rows display, which is what a buyer would try
+            // first. Saying "order id" is the honest promise until the route can
+            // match more.
+            fields: ["id"],
+        },
         emptyLabel: "You haven't placed any orders yet.",
         filterKeys: ["status", "orderType"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/account/components/UserReturnsView.js

@@ -21,7 +21,12 @@ export function UserReturnsView({ onOrderClick }) {
     const config = {
         portal: "user",
         title: "Returns & Refunds",
-        searchPlaceholder: "Search by order id…",
+        search: {
+            placeholder: "Search by order id…",
+            // Same route as /user/orders, scoped to returned statuses — so the same
+            // single in-memory match on `o.id`.
+            fields: ["id"],
+        },
         emptyLabel: "You have no return or refund requests.",
         filterKeys: [],
         defaultSort: sortBy("updatedAt", "DESC"),

package/dist/features/admin/components/AdminAuditLogView.js

@@ -50,7 +50,18 @@ export function AdminAuditLogView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Audit Log",
-        searchPlaceholder: "Search by actor uid",
+        search: {
+            placeholder: "Search by actor uid (exact)",
+            /*
+             * `/api/admin/audit-log` builds `actorUid==${q}` — an EQUALITY, stated in
+             * that route's own comment because `@=` is prefix-only against Firestore
+             * anyway. A partial uid matches nothing, so the box commits on Enter and
+             * says "exact" rather than letting someone type half a uid and watch an
+             * empty list.
+             */
+            mode: "exact",
+            fields: ["actorUid"],
+        },
         emptyLabel: "No audit log entries found",
         filterKeys: ["action", "actorUid"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminBundlesView.js

@@ -62,7 +62,11 @@ export function AdminBundlesView({ editHrefTemplate, newHref }) {
     const config = {
         portal: "admin",
         title: "Bundles",
-        searchPlaceholder: "Search bundles by name or slug…",
+        search: {
+            placeholder: "Search bundles by name or slug…",
+            // `/api/admin/bundles` filters in memory on `b.name` and `b.slug`.
+            fields: ["name", "slug"],
+        },
         emptyLabel: BUNDLE_COPY.adminList.empty,
         filterKeys: ["isActive", "bundleStockStatus"],
         defaultSort: sortBy("name", "ASC"),

package/dist/features/admin/components/AdminFaqsView.js

@@ -33,7 +33,16 @@ export function AdminFaqsView({ children, onBulkArchive, onBulkDelete, ...props
     const config = useMemo(() => ({
         portal: "admin",
         title: "FAQs",
-        searchPlaceholder: "Search questions, categories, or tokens",
+        search: {
+            placeholder: "Search questions, answers, categories or tags",
+            /*
+             * `buildFaqSearchTxt` indexes the question, the category, every tag AND
+             * the answer body, all prefix-expanded. The old placeholder said
+             * "tokens" — the name of the implementation — and omitted the answer,
+             * which is the largest thing it searches.
+             */
+            fields: ["question", "answer", "category", "tags"],
+        },
         emptyLabel: "No FAQs found",
         filterKeys: ["isActive"],
         defaultSort: sortBy("priority", "ASC"),

package/dist/features/admin/components/AdminNotificationsView.js

@@ -81,7 +81,13 @@ export function AdminNotificationsView({ children, ...props }) {
         // Title search is not expressible here — `title` is not in the repository's
         // SIEVE_FIELDS and Sieve→Firestore cannot OR across two fields. The route
         // treats `q` as an exact userId lookup, so the placeholder says exactly that.
-        searchPlaceholder: "Search by user ID",
+        search: {
+            placeholder: "Search by user ID (exact)",
+            // `/api/admin/notifications` builds `userId==${q}`. An equality, so a
+            // partial id matches nothing and the box commits on Enter.
+            mode: "exact",
+            fields: ["userId"],
+        },
         emptyLabel: "No notifications found",
         filterKeys: ["type", "readState"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminPrizeDrawsView.js

@@ -75,7 +75,17 @@ export function AdminPrizeDrawsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Prize Draws",
-        searchPlaceholder: "Search prize draws by name or store…",
+        search: {
+            placeholder: "Search prize draws by name, brand or tag…",
+            /*
+             * 🛑 "or store" was a promise the corpus cannot keep.
+             * `buildProductSearchTxt` indexes title, description, brand, brandSlug,
+             * category names, tags, features, condition and card/grading details —
+             * and NO store name or id. Typing a seller's name returned an empty list
+             * that reads as "this seller runs no prize draws".
+             */
+            fields: ["title", "description", "brand", "categoryNames", "tags", "features"],
+        },
         emptyLabel: "No prize draws found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminStoresView.js

@@ -43,7 +43,19 @@ export function AdminStoresView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Stores",
-        searchPlaceholder: "Search stores, slugs, or owner names",
+        search: {
+            placeholder: "Search stores by name, description or category",
+            /*
+             * 🛑 "slugs, or owner names" was a promise nothing could keep — neither
+             * is in `buildStoreSearchTxt`, and the owner's name lives on another
+             * collection entirely.
+             *
+             * The route now searches `searchTxt` rather than `storeName_=`, so this
+             * is genuinely partial across all three fields; it used to be a
+             * STARTS-WITH match on the name alone.
+             */
+            fields: ["storeName", "storeDescription", "storeCategory"],
+        },
         emptyLabel: "No stores found",
         filterKeys: ["status"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminSupportTicketsView.js

@@ -57,7 +57,17 @@ export function AdminSupportTicketsView({ children, ...props }) {
     const config = {
         portal: "admin",
         title: "Support Tickets",
-        searchPlaceholder: "Search by subject",
+        search: {
+            placeholder: "Search by subject (starts with)",
+            /*
+             * `/api/admin/support-tickets` builds `subject@=${q}`, and `@=` is
+             * PREFIX-only against Firestore. `searchTxt` on this collection is built
+             * from the subject alone on purpose — the description and every message
+             * body are PII-encrypted, and indexing them in plaintext would hand back
+             * exactly what the encryption withholds.
+             */
+            fields: ["subject"],
+        },
         emptyLabel: "No support tickets found",
         filterKeys: ["status", "priority", "showResolved"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminTeamView.js

@@ -57,7 +57,17 @@ export function AdminTeamView({ children, onBulkRemove, ...props }) {
     const config = {
         portal: "admin",
         title: "Team",
-        searchPlaceholder: "Search by name or email",
+        search: {
+            placeholder: "Search by name or email",
+            /*
+             * Genuinely partial, and that is worth stating: `/api/admin/team`
+             * filters AFTER `mapDoc` has decrypted, with
+             * `(u.email ?? "").toLowerCase().includes(q)`. Most PII search in this
+             * codebase resolves an HMAC blind index and matches exactly; this one
+             * does not, which is why `mode` stays partial here.
+             */
+            fields: ["displayName", "email"],
+        },
         emptyLabel: "No employees found",
         filterKeys: ["group"],
         defaultSort: sortBy("createdAt", "DESC"),

package/dist/features/admin/components/AdminTesterChecklistView.js

@@ -54,7 +54,12 @@ export function AdminTesterChecklistView({ children, onBulkDelete, ...props }) {
     const config = useMemo(() => ({
         portal: "admin",
         title: "Tester Checklist",
-        searchPlaceholder: "Search test cases, groups, or pages",
+        search: {
+            placeholder: "Search test cases, descriptions, groups or pages",
+            // `TesterChecklistItemRepository` builds `searchTxt` from label,
+            // description, groupLabel and pageLabel.
+            fields: ["label", "description", "groupLabel", "pageLabel"],
+        },
         emptyLabel: "No checklist items found",
         filterKeys: ["isActive", "bugConfirmed"],
         // Bug-confirmed (and reopened-away) cases are always isActive:false —

package/dist/features/admin/components/analytics/AdminPageViewsReportView.js

@@ -33,7 +33,12 @@ export function AdminPageViewsReportView() {
     const config = {
         portal: "admin",
         title: "Page Views",
-        searchPlaceholder: "Search by entity or URL",
+        search: {
+            placeholder: "Search by entity or URL",
+            // `/api/admin/analytics/pageviews` filters in memory on `row.entityId`
+            // and `row.url`.
+            fields: ["entityId", "url"],
+        },
         emptyLabel: "No page views recorded for this range.",
         filterKeys: ["entityType"],
         defaultSort: sortBy("count", "DESC"),

package/dist/features/seller/components/SellerBundlesView.js

@@ -41,7 +41,11 @@ export function SellerBundlesView({ editHrefTemplate, newHref }) {
     const config = {
         portal: "seller",
         title: "Bundles",
-        searchPlaceholder: "Search bundles by name or slug…",
+        search: {
+            placeholder: "Search bundles by name or slug…",
+            // `/api/store/bundles` filters in memory on `b.name` and `b.slug`.
+            fields: ["name", "slug"],
+        },
         emptyLabel: "No bundles yet — create a bundle to group multiple of your products together",
         filterKeys: ["isActive", "bundleStockStatus"],
         defaultSort: sortBy("name", "ASC"),

package/dist/features/seller/components/SellerProductsView.js

@@ -212,7 +212,16 @@ export function SellerProductsView({ onDeleteProduct, onCreateClick, }) {
     const config = {
         portal: "seller",
         title: "Products",
-        searchPlaceholder: "Search products by name…",
+        search: {
+            placeholder: "Search by name, description, brand or tag…",
+            /*
+             * The box understated itself: `/api/store/products` routes `q` through
+             * `buildProductSearchTxt`, which indexes far more than the title. A
+             * seller searching a brand or a tag got results and had no reason to
+             * expect them.
+             */
+            fields: ["title", "description", "brand", "categoryNames", "tags", "features"],
+        },
         emptyLabel: listingKind !== "all" ? `No ${listingKind} listings found` : "No products listed yet",
         filterKeys: FILTER_KEYS,
         defaultSort: DEFAULT_SORT,

package/dist/features/stores/actions/store-query-actions.js

@@ -19,13 +19,15 @@ import { PRODUCT_FIELDS } from "../../../constants/field-names";
 export async function listStores(params = {}, viewer) {
     const { filters, sorts = "-createdAt", page = 1, pageSize = 24, q } = params;
     const model = { filters, sorts, page, pageSize };
+    // The same fix as the admin route: `q` travels as the searchTxt term, not as
+    // `storeName_=`, which was a prefix match on the name alone.
     const filtersArr = [];
-    if (q)
-        filtersArr.push(`storeName_=${q}`);
     if (filters)
         filtersArr.push(filters);
     model.filters = filtersArr.join(",") || undefined;
-    const result = await storeRepository.listStores(model);
+    const result = await storeRepository.listStores(model, true, {
+        search: q || undefined,
+    });
     return { ...result, items: filterTestDataForViewer(result.items, viewer) };
 }
 /**

package/dist/features/stores/repository/store.repository.d.ts

@@ -98,7 +98,9 @@ export declare class StoreRepository extends BaseRepository<StoreDocument> {
     /**
      * Admin: list all stores regardless of status.
      */
-    listAllStores(model: SieveModel): Promise<FirebaseSieveResult<StoreDocument>>;
+    listAllStores(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<StoreDocument>>;
     /**
      * Cloud Functions: atomically increment `stats.totalProducts` counter.
      */

package/dist/features/stores/repository/store.repository.js

@@ -230,8 +230,12 @@ export class StoreRepository extends BaseRepository {
     /**
      * Admin: list all stores regardless of status.
      */
-    async listAllStores(model) {
-        return this.listStores(model, false);
+    async listAllStores(model, opts) {
+        // 🛑 `opts` is forwarded. It was not, so the admin store list had no way to
+        // reach the `searchTxt` path `listStores` already implements — and both its
+        // caller and the public one fell back to `storeName_=`, a PREFIX match on
+        // the name alone. "Beyblade Arena" was unfindable by "arena".
+        return this.listStores(model, false, opts);
     }
     /**
      * Cloud Functions: atomically increment `stats.totalProducts` counter.

package/dist/features/tester/seed-data/tester-checklist-seed-data.js

@@ -2077,6 +2077,18 @@ const rawTesterChecklistItems = [
                     description: "/store/print-center is now a redirect, and it is deep-linked from the orders and products lists as ?type=order&ids=…&autoprint=1. Select two orders on /store/orders, use the print action, and confirm the Print Centre tab opens with those two orders loaded. Arriving at an EMPTY Print Centre is the failure — it looks like a normal empty state, which is why this case names the before.",
                     href: "/store/orders",
                 },
+                {
+                    key: "search-box-promises-match-corpus",
+                    label: "Every dashboard search box matches what its placeholder promises",
+                    description: "BEFORE: four boxes promised a match the data could not make. /admin/prize-draws, /admin/deals and /admin/featured each read \"or seller\" while the product search index carries no store name at all, and /admin/stores read \"slugs, or owner names\" while the route ran a STARTS-WITH match on the store name alone. Each returned an empty list that reads as \"there are none\", not as \"this box cannot search that\". AFTER: type a seller's name into /admin/prize-draws — the placeholder no longer offers it. On /admin/stores type a word from the MIDDLE of a store's name (\"arena\", for Beyblade Arena) and a word from its description: both must now return it.",
+                    href: "/admin/stores",
+                },
+                {
+                    key: "exact-search-boxes-commit-on-enter",
+                    label: "The two exact-match boxes say so and do not search while you type",
+                    description: "/admin/audit-log matches `actorUid` and /admin/notifications matches `userId`, both by EQUALITY — a partial id matches nothing. Both placeholders now say \"(exact)\". Type half a uid: the list must not churn per keystroke, and must not show \"no results\" until you press Enter. Each intermediate query would be a billed read that cannot match.",
+                    href: "/admin/audit-log",
+                },
                 {
                     key: "consolidated-tabs-command-palette",
                     label: "The absorbed surfaces are still findable by name in search",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.32.0",
+  "version": "4.32.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public"