feat(admin): add member search endpoint

- Add search action to Admin::MembersController
- Search by name or email with ILIKE query
- Return JSON with id, name, surname, email, full_name
- Limit results to 50
- Require minimum 3 characters for search
- Remove @members = Member.all from index (loaded dynamically)

Author: mroderick

app/controllers/admin/members_controller.rb

@@ -2,7 +2,25 @@ class Admin::MembersController < Admin::ApplicationController
   before_action :set_member, only: %i[events update_subscriptions send_attendance_email send_eligibility_email]
 
   def index
-    @members = Member.all
+    # @members = Member.all removed - members loaded dynamically via search
+  end
+
+  def search
+    query = params[:q].to_s.strip
+
+    members = if query.length >= 3
+      Member.where(
+        "CONCAT(name, ' ', surname) ILIKE :q OR email ILIKE :q",
+        q: "%#{query}%"
+      ).select(:id, :name, :surname, :email, :pronouns).limit(50)
+    else
+      []
+    end
+
+    render json: members.as_json(
+      only: %i[id name surname email],
+      methods: [:full_name]
+    )
   end
 
   def show

spec/controllers/admin/members_controller_spec.rb

@@ -0,0 +1,70 @@
+require 'rails_helper'
+
+RSpec.describe Admin::MembersController, type: :controller do
+  describe 'GET #search' do
+    let(:admin) { Fabricate(:member) }
+    let!(:member_jane) { Fabricate(:member, name: 'Jane', surname: 'Doe', email: 'jane@example.com', pronouns: nil) }
+    let!(:member_john) { Fabricate(:member, name: 'John', surname: 'Smith', email: 'john@test.com') }
+
+    before do
+      admin.add_role(:admin)
+      login_as_admin(admin)
+    end
+
+    context 'with query less than 3 characters' do
+      it 'returns empty array' do
+        get :search, params: { q: 'ab' }, format: :json
+
+        expect(response).to have_http_status(:ok)
+        expect(JSON.parse(response.body)).to eq([])
+      end
+    end
+
+    context 'with query 3 or more characters' do
+      it 'returns matching members by name' do
+        get :search, params: { q: 'Jan' }, format: :json
+
+        expect(response).to have_http_status(:ok)
+        results = JSON.parse(response.body)
+        expect(results.length).to eq(1)
+        expect(results.first['id']).to eq(member_jane.id)
+        expect(results.first['full_name']).to eq('Jane Doe')
+      end
+
+      it 'returns matching members by email' do
+        get :search, params: { q: 'john@tes' }, format: :json
+
+        expect(response).to have_http_status(:ok)
+        results = JSON.parse(response.body)
+        expect(results.length).to eq(1)
+        expect(results.first['id']).to eq(member_john.id)
+      end
+
+      it 'returns JSON with correct shape' do
+        get :search, params: { q: 'Jan' }, format: :json
+
+        results = JSON.parse(response.body)
+        expect(results.first.keys).to contain_exactly('id', 'name', 'surname', 'email', 'full_name')
+      end
+
+      it 'limits results to 50' do
+        51.times { |i| Fabricate(:member, name: "Test#{i}", surname: 'User', email: "test#{i}@example.com") }
+
+        get :search, params: { q: 'Test' }, format: :json
+
+        results = JSON.parse(response.body)
+        expect(results.length).to be <= 50
+      end
+    end
+
+    context 'when not authenticated' do
+      before { login(Fabricate(:member)) }
+
+      it 'redirects to login' do
+        get :search, params: { q: 'test' }, format: :json
+
+        expect(response).to have_http_status(:found)
+      end
+    end
+  end
+end