@consilioweb/payload-support 0.16.0 → 1.0.0

package/src/endpoints/auth-2fa.ts

@@ -3,6 +3,7 @@ import type { CollectionSlugs } from '../utils/slugs'
 import crypto, { createHmac } from 'crypto'
 import { RateLimiter } from '../utils/rateLimiter'
 import { escapeHtml } from '../utils/emailTemplate'
+import { dbFind, dbUpdate } from '../utils/db'
 
 const sendLimiter = new RateLimiter(60 * 60 * 1000, 3) // 3 per hour
 const verifyLimiter = new RateLimiter(15 * 60 * 1000, 5) // 5 per 15 min
@@ -14,7 +15,11 @@ function generateSecureCode(): string {
 }
 
 function hashCode(code: string): string {
-  const secret = process.env.PAYLOAD_SECRET || 'payload-support-2fa'
+  const secret = process.env.PAYLOAD_SECRET
+  if (!secret) {
+    // Fail closed: never hash 2FA codes with an insecure, source-visible fallback.
+    throw new Error('[support][2fa] PAYLOAD_SECRET is not set — refusing to operate 2FA with an insecure fallback secret')
+  }
   return createHmac('sha256', secret).update(code).digest('hex')
 }
 
@@ -48,8 +53,7 @@ export function createAuth2faEndpoint(slugs: CollectionSlugs): Endpoint {
             return Response.json(genericSendResponse)
           }
 
-          const clients = await payload.find({
-            collection: slugs.supportClients as any,
+          const clients = await dbFind(payload, slugs.supportClients, {
             where: { email: { equals: email } },
             limit: 1,
             depth: 0,
@@ -65,8 +69,7 @@ export function createAuth2faEndpoint(slugs: CollectionSlugs): Endpoint {
           const twoFactorCode = hashCode(plainCode)
           const twoFactorExpiry = new Date(Date.now() + 10 * 60 * 1000).toISOString()
 
-          await payload.update({
-            collection: slugs.supportClients as any,
+          await dbUpdate(payload, slugs.supportClients, {
             id: client.id,
             data: { twoFactorCode, twoFactorExpiry },
             overrideAccess: true,
@@ -102,8 +105,7 @@ export function createAuth2faEndpoint(slugs: CollectionSlugs): Endpoint {
             )
           }
 
-          const clients = await payload.find({
-            collection: slugs.supportClients as any,
+          const clients = await dbFind(payload, slugs.supportClients, {
             where: { email: { equals: email } },
             limit: 1,
             depth: 0,
@@ -123,8 +125,7 @@ export function createAuth2faEndpoint(slugs: CollectionSlugs): Endpoint {
           }
 
           if (new Date() > new Date(storedExpiry)) {
-            await payload.update({
-              collection: slugs.supportClients as any,
+            await dbUpdate(payload, slugs.supportClients, {
               id: client.id,
               data: { twoFactorCode: '', twoFactorExpiry: '' },
               overrideAccess: true,
@@ -141,10 +142,9 @@ export function createAuth2faEndpoint(slugs: CollectionSlugs): Endpoint {
             return Response.json({ error: 'Code incorrect' }, { status: 400 })
           }
 
-          await payload.update({
-            collection: slugs.supportClients as any,
+          await dbUpdate(payload, slugs.supportClients, {
             id: client.id,
-            data: { twoFactorCode: '', twoFactorExpiry: '' },
+            data: { twoFactorCode: '', twoFactorExpiry: '', twoFactorVerifiedAt: new Date().toISOString() },
             overrideAccess: true,
           })
 

package/src/endpoints/auto-close.ts

@@ -2,6 +2,7 @@ import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { escapeHtml } from '../utils/emailTemplate'
 import { readSupportSettings } from '../utils/readSettings'
+import { dbFind, dbCreate, dbUpdate } from '../utils/db'
 
 /**
  * GET /api/support/auto-close
@@ -40,8 +41,7 @@ export function createAutoCloseEndpoint(slugs: CollectionSlugs): Endpoint {
         // Step 1: Find tickets needing a reminder
         const remindCutoff = new Date(now.getTime() - REMIND_AFTER_DAYS * 24 * 60 * 60 * 1000)
 
-        const ticketsToRemind = await payload.find({
-          collection: slugs.tickets as any,
+        const ticketsToRemind = await dbFind(payload, slugs.tickets, {
           where: {
             and: [
               { status: { equals: 'waiting_client' } },
@@ -76,8 +76,7 @@ export function createAutoCloseEndpoint(slugs: CollectionSlugs): Endpoint {
               </div>`,
             })
 
-            await payload.update({
-              collection: slugs.tickets as any,
+            await dbUpdate(payload, slugs.tickets, {
               id: t.id,
               data: { autoCloseRemindedAt: now.toISOString() },
               overrideAccess: true,
@@ -99,8 +98,7 @@ export function createAutoCloseEndpoint(slugs: CollectionSlugs): Endpoint {
         //    the past means no reply was received.
         const closeCutoff = new Date(now.getTime() - CLOSE_AFTER_REMIND_DAYS * 24 * 60 * 60 * 1000)
 
-        const ticketsToClose = await payload.find({
-          collection: slugs.tickets as any,
+        const ticketsToClose = await dbFind(payload, slugs.tickets, {
           where: {
             and: [
               { status: { equals: 'waiting_client' } },
@@ -142,8 +140,7 @@ export function createAutoCloseEndpoint(slugs: CollectionSlugs): Endpoint {
               ? 'Ticket résolu automatiquement — relance manuelle restée sans réponse du client'
               : `Ticket résolu automatiquement — sans réponse client depuis ${closeTotalDays} jours`
 
-            await payload.create({
-              collection: slugs.ticketMessages as any,
+            await dbCreate(payload, slugs.ticketMessages, {
               data: {
                 ticket: t.id,
                 body: noteBody,
@@ -154,8 +151,7 @@ export function createAutoCloseEndpoint(slugs: CollectionSlugs): Endpoint {
               overrideAccess: true,
             })
 
-            await payload.update({
-              collection: slugs.tickets as any,
+            await dbUpdate(payload, slugs.tickets, {
               id: t.id,
               // Clear the armed deadline so a later manual reopen can't be
               // closed instantly by a stale timestamp.

package/src/endpoints/billing.ts

@@ -1,6 +1,7 @@
 import type { Endpoint, Where } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
+import { dbFind } from '../utils/db'
 
 const PAGE_SIZE = 500
 const MAX_PAGES = 50
@@ -75,13 +76,26 @@ export function createBillingEndpoint(slugs: CollectionSlugs): Endpoint {
         let ticketHasMore = true
 
         while (ticketHasMore && ticketPage <= MAX_PAGES) {
-          const batch = await payload.find({
-            collection: slugs.tickets as any,
+          const batch = await dbFind(payload, slugs.tickets, {
             where: ticketWhere,
             limit: PAGE_SIZE,
             page: ticketPage,
+            // depth 2 is required: we read ticket.project.client.company below.
             depth: 2,
             overrideAccess: true,
+            // Bound the payload to only the fields the report consumes (skips body,
+            // richText, SLA fields, etc.) while keeping project/client populated.
+            select: {
+              ticketNumber: true,
+              subject: true,
+              status: true,
+              billedAmount: true,
+              aiSummary: true,
+              aiSummaryGeneratedAt: true,
+              aiSummaryStatus: true,
+              project: true,
+              client: true,
+            },
           })
           allTickets.push(...batch.docs as any[])
           ticketHasMore = batch.hasNextPage ?? false
@@ -94,8 +108,7 @@ export function createBillingEndpoint(slugs: CollectionSlugs): Endpoint {
         let entryHasMore = true
 
         while (entryHasMore && entryPage <= MAX_PAGES) {
-          const batch = await payload.find({
-            collection: slugs.timeEntries as any,
+          const batch = await dbFind(payload, slugs.timeEntries, {
             where: {
               and: [
                 { date: { greater_than_equal: from } },

package/src/endpoints/bulk-action.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
+import { dbUpdate, dbDelete } from '../utils/db'
 
 /**
  * POST /api/support/bulk-action
@@ -32,16 +33,14 @@ export function createBulkActionEndpoint(slugs: CollectionSlugs): Endpoint {
           try {
             switch (action) {
               case 'close':
-                await payload.update({
-                  collection: slugs.tickets as any,
+                await dbUpdate(payload, slugs.tickets, {
                   id: ticketId,
                   data: { status: 'resolved', resolvedAt: new Date().toISOString() },
                   overrideAccess: true,
                 })
                 break
               case 'reopen':
-                await payload.update({
-                  collection: slugs.tickets as any,
+                await dbUpdate(payload, slugs.tickets, {
                   id: ticketId,
                   data: { status: 'open' },
                   overrideAccess: true,
@@ -49,8 +48,7 @@ export function createBulkActionEndpoint(slugs: CollectionSlugs): Endpoint {
                 break
               case 'assign':
                 if (value) {
-                  await payload.update({
-                    collection: slugs.tickets as any,
+                  await dbUpdate(payload, slugs.tickets, {
                     id: ticketId,
                     data: { assignedTo: Number(value) },
                     overrideAccess: true,
@@ -59,8 +57,7 @@ export function createBulkActionEndpoint(slugs: CollectionSlugs): Endpoint {
                 break
               case 'set_priority':
                 if (value) {
-                  await payload.update({
-                    collection: slugs.tickets as any,
+                  await dbUpdate(payload, slugs.tickets, {
                     id: ticketId,
                     data: { priority: String(value) },
                     overrideAccess: true,
@@ -69,8 +66,7 @@ export function createBulkActionEndpoint(slugs: CollectionSlugs): Endpoint {
                 break
               case 'set_category':
                 if (value) {
-                  await payload.update({
-                    collection: slugs.tickets as any,
+                  await dbUpdate(payload, slugs.tickets, {
                     id: ticketId,
                     data: { category: String(value) },
                     overrideAccess: true,
@@ -78,8 +74,7 @@ export function createBulkActionEndpoint(slugs: CollectionSlugs): Endpoint {
                 }
                 break
               case 'delete':
-                await payload.delete({
-                  collection: slugs.tickets as any,
+                await dbDelete(payload, slugs.tickets, {
                   id: ticketId,
                   overrideAccess: true,
                 })

package/src/endpoints/channels.ts

@@ -0,0 +1,89 @@
+import type { Endpoint } from 'payload'
+import type { CollectionSlugs } from '../utils/slugs'
+import { dbFind, dbCreate } from '../utils/db'
+import { randomBytes } from 'crypto'
+
+const PROVIDERS = ['whatsapp', 'messenger'] as const
+type Provider = (typeof PROVIDERS)[number]
+
+/**
+ * POST /api/support/channels/webhook
+ *
+ * Inbound social-channel webhook (WhatsApp / Messenger). Accepts a NORMALIZED
+ * payload `{ provider, from, name?, text }` — a thin adapter maps the provider's
+ * raw webhook (Meta X-Hub-Signature-256 etc.) to this shape at the edge. Creates
+ * or appends the client's open ticket for that channel.
+ *
+ * Protected by the `x-channel-secret` header (`CHANNELS_WEBHOOK_SECRET`).
+ */
+export function createChannelsWebhookEndpoint(slugs: CollectionSlugs): Endpoint {
+  return {
+    path: '/support/channels/webhook',
+    method: 'post',
+    handler: async (req) => {
+      const secret = req.headers.get('x-channel-secret')
+      if (!process.env.CHANNELS_WEBHOOK_SECRET || secret !== process.env.CHANNELS_WEBHOOK_SECRET) {
+        return Response.json({ error: 'Non autorisé' }, { status: 401 })
+      }
+
+      let body: { provider?: string; from?: string; name?: string; text?: string }
+      try {
+        body = (await req.json!()) as typeof body
+      } catch {
+        return Response.json({ error: 'Invalid JSON body' }, { status: 400 })
+      }
+
+      const provider = body.provider as Provider
+      const from = (body.from || '').trim()
+      const text = (body.text || '').trim()
+      if (!PROVIDERS.includes(provider) || !from || !text) {
+        return Response.json({ error: 'provider, from et text requis.' }, { status: 400 })
+      }
+
+      try {
+        const payload = req.payload
+        // Resolve (or create) the channel client by a synthetic, stable identity.
+        const email = `${from}@${provider}.channel`
+        const existing = await dbFind(payload, slugs.supportClients, { where: { email: { equals: email } }, limit: 1, depth: 0, overrideAccess: true })
+        let clientId: number | string
+        if (existing.docs.length > 0) {
+          clientId = (existing.docs[0] as { id: number | string }).id
+        } else {
+          const created = await dbCreate(payload, slugs.supportClients, {
+            data: { email, firstName: body.name || provider, lastName: from.slice(0, 40), company: provider, password: randomBytes(16).toString('hex') },
+            overrideAccess: true,
+          })
+          clientId = (created as { id: number | string }).id
+        }
+
+        // Find an open ticket for this client + channel, else open a new one.
+        const open = await dbFind(payload, slugs.tickets, {
+          where: { and: [{ client: { equals: clientId } }, { source: { equals: provider } }, { status: { in: ['open', 'waiting_client'] } }] },
+          sort: '-createdAt', limit: 1, depth: 0, overrideAccess: true,
+        })
+        let ticketId: number | string
+        let createdTicket = false
+        if (open.docs.length > 0) {
+          ticketId = (open.docs[0] as { id: number | string }).id
+        } else {
+          const t = await dbCreate(payload, slugs.tickets, {
+            data: { subject: text.slice(0, 80), client: clientId, status: 'open', priority: 'normal', source: provider },
+            overrideAccess: true,
+          })
+          ticketId = (t as { id: number | string }).id
+          createdTicket = true
+        }
+
+        const msg = await dbCreate(payload, slugs.ticketMessages, {
+          data: { ticket: ticketId, body: text, authorType: 'client', authorClient: clientId },
+          overrideAccess: true,
+        })
+
+        return Response.json({ ok: true, ticketId, createdTicket, messageId: (msg as { id: number | string }).id })
+      } catch (err) {
+        console.error('[channels] Error:', err)
+        return Response.json({ error: 'Erreur interne' }, { status: 500 })
+      }
+    },
+  }
+}

package/src/endpoints/chat-stream.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind } from '../utils/db'
 
 /**
  * GET /api/support/chat-stream?session=xxx
@@ -30,8 +31,7 @@ export function createChatStreamEndpoint(slugs: CollectionSlugs): Endpoint {
       }
 
       // Verify session belongs to user
-      const existing = await req.payload.find({
-        collection: slugs.chatMessages as any,
+      const existing = await dbFind(req.payload, slugs.chatMessages, {
         where: {
           session: { equals: sessionId },
           client: { equals: userId },
@@ -57,8 +57,7 @@ export function createChatStreamEndpoint(slugs: CollectionSlugs): Endpoint {
           // Poll DB every 2 seconds for new messages
           const interval = setInterval(async () => {
             try {
-              const messages = await req.payload.find({
-                collection: slugs.chatMessages as any,
+              const messages = await dbFind(req.payload, slugs.chatMessages, {
                 where: {
                   session: { equals: sessionId },
                   createdAt: { greater_than: lastCheck },

package/src/endpoints/chat.ts

@@ -4,6 +4,7 @@ import type { CollectionSlugs } from '../utils/slugs'
 import crypto from 'crypto'
 import { RateLimiter } from '../utils/rateLimiter'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind, dbCreate } from '../utils/db'
 
 const chatSessionLimiter = new RateLimiter(3_600_000, 5) // 5 sessions per hour
 const chatMessageLimiter = new RateLimiter(60_000, 15) // 15 messages per minute
@@ -39,8 +40,7 @@ export function createChatGetEndpoint(slugs: CollectionSlugs): Endpoint {
           where.createdAt = { greater_than: after }
         }
 
-        const messages = await payload.find({
-          collection: slugs.chatMessages as any,
+        const messages = await dbFind(payload, slugs.chatMessages, {
           where,
           sort: 'createdAt',
           limit: 100,
@@ -95,8 +95,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
 
           const sessionId = `chat_${crypto.randomBytes(16).toString('hex')}`
 
-          const systemMsg = await payload.create({
-            collection: slugs.chatMessages as any,
+          const systemMsg = await dbCreate(payload, slugs.chatMessages, {
             data: {
               session: sessionId,
               client: req.user.id,
@@ -122,8 +121,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
           }
 
           // Verify session belongs to user
-          const existing = await payload.find({
-            collection: slugs.chatMessages as any,
+          const existing = await dbFind(payload, slugs.chatMessages, {
             where: { session: { equals: session }, client: { equals: req.user.id } },
             limit: 1,
             overrideAccess: true,
@@ -133,8 +131,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
             return Response.json({ error: 'Session invalide' }, { status: 403 })
           }
 
-          const newMsg = await payload.create({
-            collection: slugs.chatMessages as any,
+          const newMsg = await dbCreate(payload, slugs.chatMessages, {
             data: {
               session,
               client: req.user.id,
@@ -150,8 +147,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
 
         // Close session
         if (action === 'close' && session) {
-          const existing = await payload.find({
-            collection: slugs.chatMessages as any,
+          const existing = await dbFind(payload, slugs.chatMessages, {
             where: { session: { equals: session }, client: { equals: req.user.id } },
             limit: 1,
             overrideAccess: true,
@@ -161,8 +157,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
             return Response.json({ error: 'Session invalide' }, { status: 403 })
           }
 
-          await payload.create({
-            collection: slugs.chatMessages as any,
+          await dbCreate(payload, slugs.chatMessages, {
             data: {
               session,
               client: req.user.id,

package/src/endpoints/chatbot.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { RateLimiter } from '../utils/rateLimiter'
+import { dbFind } from '../utils/db'
 
 const chatbotLimiter = new RateLimiter(60_000, 10) // 10 requests per minute per IP
 
@@ -34,8 +35,7 @@ export function createChatbotEndpoint(slugs: CollectionSlugs): Endpoint {
 
         const payload = req.payload
 
-        const articles = await payload.find({
-          collection: slugs.knowledgeBase as any,
+        const articles = await dbFind(payload, slugs.knowledgeBase, {
           where: { published: { equals: true } },
           limit: 100,
           depth: 0,

package/src/endpoints/client-intelligence.ts

@@ -1,4 +1,4 @@
-import type { Endpoint } from 'payload'
+import type { Endpoint, PayloadRequest } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
 import { readSupportSettings, type SupportSettings } from '../utils/readSettings'
@@ -26,7 +26,7 @@ const CACHE_TTL_MS = 24 * 60 * 60 * 1000 // 24 hours
  * Force-refreshes the summary.
  */
 export function createClientIntelligenceEndpoint(slugs: CollectionSlugs): Endpoint[] {
-  const getHandler = async (req: any) => {
+  const getHandler = async (req: PayloadRequest) => {
     try {
       requireAdmin(req, slugs)
       const payload = req.payload
@@ -61,7 +61,7 @@ export function createClientIntelligenceEndpoint(slugs: CollectionSlugs): Endpoi
     }
   }
 
-  const postHandler = async (req: any) => {
+  const postHandler = async (req: PayloadRequest) => {
     try {
       requireAdmin(req, slugs)
       const payload = req.payload
@@ -97,7 +97,7 @@ async function generateSummary(
   payload: any,
   clientId: string,
   slugs: CollectionSlugs,
-  existingId?: number,
+  existingId?: number | string,
 ) {
   const aiSettings = (await readSupportSettings(payload)).ai
   if (!aiSettings.enableSynthesis) {

package/src/endpoints/delete-account.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind, dbDelete } from '../utils/db'
 
 /**
  * POST /api/support/delete-account
@@ -44,8 +45,7 @@ export function createDeleteAccountEndpoint(slugs: CollectionSlugs): Endpoint {
         const clientId = req.user.id
 
         // 1. Find all ticket IDs for this client
-        const tickets = await payload.find({
-          collection: slugs.tickets as any,
+        const tickets = await dbFind(payload, slugs.tickets, {
           where: { client: { equals: clientId } },
           limit: 10000,
           depth: 0,
@@ -57,49 +57,42 @@ export function createDeleteAccountEndpoint(slugs: CollectionSlugs): Endpoint {
 
         // 2. Batch delete related data using where clauses
         if (ticketIds.length > 0) {
-          await payload.delete({
-            collection: slugs.ticketMessages as any,
+          await dbDelete(payload, slugs.ticketMessages, {
             where: { ticket: { in: ticketIds } },
             overrideAccess: true,
           })
 
-          await payload.delete({
-            collection: slugs.ticketActivityLog as any,
+          await dbDelete(payload, slugs.ticketActivityLog, {
             where: { ticket: { in: ticketIds } },
             overrideAccess: true,
           })
 
-          await payload.delete({
-            collection: slugs.timeEntries as any,
+          await dbDelete(payload, slugs.timeEntries, {
             where: { ticket: { in: ticketIds } },
             overrideAccess: true,
           })
 
           // Delete all tickets
-          await payload.delete({
-            collection: slugs.tickets as any,
+          await dbDelete(payload, slugs.tickets, {
             where: { client: { equals: clientId } },
             overrideAccess: true,
           })
         }
 
         // 3. Batch delete satisfaction surveys
-        await payload.delete({
-          collection: slugs.satisfactionSurveys as any,
+        await dbDelete(payload, slugs.satisfactionSurveys, {
           where: { client: { equals: clientId } },
           overrideAccess: true,
         })
 
         // 4. Batch delete chat messages
-        await payload.delete({
-          collection: slugs.chatMessages as any,
+        await dbDelete(payload, slugs.chatMessages, {
           where: { client: { equals: clientId } },
           overrideAccess: true,
         })
 
         // 5. Delete the client account
-        await payload.delete({
-          collection: slugs.supportClients as any,
+        await dbDelete(payload, slugs.supportClients, {
           id: clientId,
           overrideAccess: true,
         })

package/src/endpoints/email-stats.ts

@@ -1,5 +1,6 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
+import { dbFind } from '../utils/db'
 
 /**
  * GET /api/support/email-stats?days=7
@@ -32,8 +33,7 @@ export function createEmailStatsEndpoint(slugs: CollectionSlugs): Endpoint {
         let hasMore = true
 
         while (hasMore && page <= MAX_PAGES) {
-          const result = await payload.find({
-            collection: slugs.emailLogs as any,
+          const result = await dbFind(payload, slugs.emailLogs, {
             where: { createdAt: { greater_than: cutoff } },
             sort: '-createdAt',
             limit: 500,

package/src/endpoints/escalate.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
+import { dbUpdate } from '../utils/db'
 
 /**
  * POST /api/support/tickets/:id/escalate
@@ -25,8 +26,7 @@ export function createEscalateEndpoint(slugs: CollectionSlugs): Endpoint {
           return Response.json({ error: 'invalid-id' }, { status: 400 })
         }
 
-        const ticket = await req.payload.update({
-          collection: slugs.tickets as any,
+        const ticket = await dbUpdate(req.payload, slugs.tickets, {
           id: ticketId,
           data: { status: 'escalated' },
           overrideAccess: true,

package/src/endpoints/export-csv.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
+import { dbFind } from '../utils/db'
 
 /**
  * GET /api/support/export-csv
@@ -22,8 +23,7 @@ export function createExportCsvEndpoint(slugs: CollectionSlugs): Endpoint {
         const allDocs: Array<Record<string, unknown>> = []
 
         while (hasMore) {
-          const batch = await payload.find({
-            collection: slugs.tickets as any,
+          const batch = await dbFind(payload, slugs.tickets, {
             limit: PAGE_SIZE,
             page,
             depth: 1,

package/src/endpoints/export-data.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind, dbFindByID } from '../utils/db'
 
 /**
  * GET /api/support/export-data
@@ -17,21 +18,18 @@ export function createExportDataEndpoint(slugs: CollectionSlugs): Endpoint {
         requireClient(req, slugs)
 
         const [clientData, ticketsResult, messagesResult, surveysResult] = await Promise.all([
-          payload.findByID({
-            collection: slugs.supportClients as any,
+          dbFindByID(payload, slugs.supportClients, {
             id: req.user.id,
             depth: 0,
             overrideAccess: true,
           }),
-          payload.find({
-            collection: slugs.tickets as any,
+          dbFind(payload, slugs.tickets, {
             where: { client: { equals: req.user.id } },
             limit: 1000,
             depth: 0,
             overrideAccess: true,
           }),
-          payload.find({
-            collection: slugs.ticketMessages as any,
+          dbFind(payload, slugs.ticketMessages, {
             where: {
               'ticket.client': { equals: req.user.id },
               authorType: { equals: 'client' },
@@ -40,8 +38,7 @@ export function createExportDataEndpoint(slugs: CollectionSlugs): Endpoint {
             depth: 0,
             overrideAccess: true,
           }),
-          payload.find({
-            collection: slugs.satisfactionSurveys as any,
+          dbFind(payload, slugs.satisfactionSurveys, {
             where: { client: { equals: req.user.id } },
             limit: 500,
             depth: 0,