test: pin customer-name search to the name column

Search "JOHN SMITH" instead of "JOHN" so the regression test only matches
through the customer name column ("john" alone also matched the email),
ensuring case-insensitive name matching is verified on its own.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HUfxyr6EcRi4EYSX1wLoRh

apps/api/src/orders/order-repository.ts

@@ -37,11 +37,13 @@ function toOrderItemDetail(row: {
 export async function listOrderSummaries(context: DatabaseContext, query?: string) {
   const search = query?.trim();
 
+  // Support staff type search terms in any case. instr() is case-sensitive, so compare lowercased
+  // values; LIKE is avoided because it would treat % and _ in the search text as wildcards.
   const filters = search
     ? or(
-        sql`instr(${orders.orderNumber}, ${search}) > 0`,
+        sql`instr(lower(${orders.orderNumber}), lower(${search})) > 0`,
-        sql`instr(${users.name}, ${search}) > 0`,
+        sql`instr(lower(${users.name}), lower(${search})) > 0`,
-        sql`instr(${users.email}, ${search}) > 0`
+        sql`instr(lower(${users.email}), lower(${search})) > 0`
       )
     : undefined;
 

apps/api/src/orders/orders-routes.test.ts

@@ -44,6 +44,20 @@ describe("order routes", () => {
     expect(response.json()).toHaveLength(7);
   });
 
+  test("finds orders by customer name regardless of letter case", async () => {
+    const response = await app.inject({ method: "GET", url: "/api/orders?query=JOHN%20SMITH", headers: { cookie: employeeCookie } });
+
+    expect(response.statusCode).toBe(200);
+    expect(response.json().map((order: { orderNumber: string }) => order.orderNumber)).toEqual(["ORD-1001", "ORD-1003"]);
+  });
+
+  test("finds orders by order number regardless of letter case", async () => {
+    const response = await app.inject({ method: "GET", url: "/api/orders?query=ord-1001", headers: { cookie: employeeCookie } });
+
+    expect(response.statusCode).toBe(200);
+    expect(response.json().map((order: { orderNumber: string }) => order.orderNumber)).toEqual(["ORD-1001"]);
+  });
+
   test("returns order detail", async () => {
     const response = await app.inject({ method: "GET", url: "/api/orders/order_1", headers: { cookie: employeeCookie } });
     const order = response.json();