@consilioweb/payload-support 0.16.0 → 1.1.0

package/src/endpoints/chat-stream.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind } from '../utils/db'
 
 /**
  * GET /api/support/chat-stream?session=xxx
@@ -30,8 +31,7 @@ export function createChatStreamEndpoint(slugs: CollectionSlugs): Endpoint {
       }
 
       // Verify session belongs to user
-      const existing = await req.payload.find({
-        collection: slugs.chatMessages as any,
+      const existing = await dbFind(req.payload, slugs.chatMessages, {
         where: {
           session: { equals: sessionId },
           client: { equals: userId },
@@ -57,8 +57,7 @@ export function createChatStreamEndpoint(slugs: CollectionSlugs): Endpoint {
           // Poll DB every 2 seconds for new messages
           const interval = setInterval(async () => {
             try {
-              const messages = await req.payload.find({
-                collection: slugs.chatMessages as any,
+              const messages = await dbFind(req.payload, slugs.chatMessages, {
                 where: {
                   session: { equals: sessionId },
                   createdAt: { greater_than: lastCheck },

package/src/endpoints/chat.ts

@@ -4,6 +4,7 @@ import type { CollectionSlugs } from '../utils/slugs'
 import crypto from 'crypto'
 import { RateLimiter } from '../utils/rateLimiter'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind, dbCreate } from '../utils/db'
 
 const chatSessionLimiter = new RateLimiter(3_600_000, 5) // 5 sessions per hour
 const chatMessageLimiter = new RateLimiter(60_000, 15) // 15 messages per minute
@@ -39,8 +40,7 @@ export function createChatGetEndpoint(slugs: CollectionSlugs): Endpoint {
           where.createdAt = { greater_than: after }
         }
 
-        const messages = await payload.find({
-          collection: slugs.chatMessages as any,
+        const messages = await dbFind(payload, slugs.chatMessages, {
           where,
           sort: 'createdAt',
           limit: 100,
@@ -95,8 +95,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
 
           const sessionId = `chat_${crypto.randomBytes(16).toString('hex')}`
 
-          const systemMsg = await payload.create({
-            collection: slugs.chatMessages as any,
+          const systemMsg = await dbCreate(payload, slugs.chatMessages, {
             data: {
               session: sessionId,
               client: req.user.id,
@@ -122,8 +121,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
           }
 
           // Verify session belongs to user
-          const existing = await payload.find({
-            collection: slugs.chatMessages as any,
+          const existing = await dbFind(payload, slugs.chatMessages, {
             where: { session: { equals: session }, client: { equals: req.user.id } },
             limit: 1,
             overrideAccess: true,
@@ -133,8 +131,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
             return Response.json({ error: 'Session invalide' }, { status: 403 })
           }
 
-          const newMsg = await payload.create({
-            collection: slugs.chatMessages as any,
+          const newMsg = await dbCreate(payload, slugs.chatMessages, {
             data: {
               session,
               client: req.user.id,
@@ -150,8 +147,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
 
         // Close session
         if (action === 'close' && session) {
-          const existing = await payload.find({
-            collection: slugs.chatMessages as any,
+          const existing = await dbFind(payload, slugs.chatMessages, {
             where: { session: { equals: session }, client: { equals: req.user.id } },
             limit: 1,
             overrideAccess: true,
@@ -161,8 +157,7 @@ export function createChatPostEndpoint(slugs: CollectionSlugs): Endpoint {
             return Response.json({ error: 'Session invalide' }, { status: 403 })
           }
 
-          await payload.create({
-            collection: slugs.chatMessages as any,
+          await dbCreate(payload, slugs.chatMessages, {
             data: {
               session,
               client: req.user.id,

package/src/endpoints/chatbot.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { RateLimiter } from '../utils/rateLimiter'
+import { dbFind } from '../utils/db'
 
 const chatbotLimiter = new RateLimiter(60_000, 10) // 10 requests per minute per IP
 
@@ -34,8 +35,7 @@ export function createChatbotEndpoint(slugs: CollectionSlugs): Endpoint {
 
         const payload = req.payload
 
-        const articles = await payload.find({
-          collection: slugs.knowledgeBase as any,
+        const articles = await dbFind(payload, slugs.knowledgeBase, {
           where: { published: { equals: true } },
           limit: 100,
           depth: 0,

package/src/endpoints/client-intelligence.ts

@@ -1,4 +1,4 @@
-import type { Endpoint } from 'payload'
+import type { Endpoint, PayloadRequest } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
 import { readSupportSettings, type SupportSettings } from '../utils/readSettings'
@@ -26,7 +26,7 @@ const CACHE_TTL_MS = 24 * 60 * 60 * 1000 // 24 hours
  * Force-refreshes the summary.
  */
 export function createClientIntelligenceEndpoint(slugs: CollectionSlugs): Endpoint[] {
-  const getHandler = async (req: any) => {
+  const getHandler = async (req: PayloadRequest) => {
     try {
       requireAdmin(req, slugs)
       const payload = req.payload
@@ -61,7 +61,7 @@ export function createClientIntelligenceEndpoint(slugs: CollectionSlugs): Endpoi
     }
   }
 
-  const postHandler = async (req: any) => {
+  const postHandler = async (req: PayloadRequest) => {
     try {
       requireAdmin(req, slugs)
       const payload = req.payload
@@ -97,7 +97,7 @@ async function generateSummary(
   payload: any,
   clientId: string,
   slugs: CollectionSlugs,
-  existingId?: number,
+  existingId?: number | string,
 ) {
   const aiSettings = (await readSupportSettings(payload)).ai
   if (!aiSettings.enableSynthesis) {

package/src/endpoints/delete-account.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind, dbDelete } from '../utils/db'
 
 /**
  * POST /api/support/delete-account
@@ -44,8 +45,7 @@ export function createDeleteAccountEndpoint(slugs: CollectionSlugs): Endpoint {
         const clientId = req.user.id
 
         // 1. Find all ticket IDs for this client
-        const tickets = await payload.find({
-          collection: slugs.tickets as any,
+        const tickets = await dbFind(payload, slugs.tickets, {
           where: { client: { equals: clientId } },
           limit: 10000,
           depth: 0,
@@ -57,49 +57,42 @@ export function createDeleteAccountEndpoint(slugs: CollectionSlugs): Endpoint {
 
         // 2. Batch delete related data using where clauses
         if (ticketIds.length > 0) {
-          await payload.delete({
-            collection: slugs.ticketMessages as any,
+          await dbDelete(payload, slugs.ticketMessages, {
             where: { ticket: { in: ticketIds } },
             overrideAccess: true,
           })
 
-          await payload.delete({
-            collection: slugs.ticketActivityLog as any,
+          await dbDelete(payload, slugs.ticketActivityLog, {
             where: { ticket: { in: ticketIds } },
             overrideAccess: true,
           })
 
-          await payload.delete({
-            collection: slugs.timeEntries as any,
+          await dbDelete(payload, slugs.timeEntries, {
             where: { ticket: { in: ticketIds } },
             overrideAccess: true,
           })
 
           // Delete all tickets
-          await payload.delete({
-            collection: slugs.tickets as any,
+          await dbDelete(payload, slugs.tickets, {
             where: { client: { equals: clientId } },
             overrideAccess: true,
           })
         }
 
         // 3. Batch delete satisfaction surveys
-        await payload.delete({
-          collection: slugs.satisfactionSurveys as any,
+        await dbDelete(payload, slugs.satisfactionSurveys, {
           where: { client: { equals: clientId } },
           overrideAccess: true,
         })
 
         // 4. Batch delete chat messages
-        await payload.delete({
-          collection: slugs.chatMessages as any,
+        await dbDelete(payload, slugs.chatMessages, {
           where: { client: { equals: clientId } },
           overrideAccess: true,
         })
 
         // 5. Delete the client account
-        await payload.delete({
-          collection: slugs.supportClients as any,
+        await dbDelete(payload, slugs.supportClients, {
           id: clientId,
           overrideAccess: true,
         })

package/src/endpoints/email-stats.ts

@@ -1,5 +1,6 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
+import { dbFind } from '../utils/db'
 
 /**
  * GET /api/support/email-stats?days=7
@@ -32,8 +33,7 @@ export function createEmailStatsEndpoint(slugs: CollectionSlugs): Endpoint {
         let hasMore = true
 
         while (hasMore && page <= MAX_PAGES) {
-          const result = await payload.find({
-            collection: slugs.emailLogs as any,
+          const result = await dbFind(payload, slugs.emailLogs, {
             where: { createdAt: { greater_than: cutoff } },
             sort: '-createdAt',
             limit: 500,

package/src/endpoints/escalate.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
+import { dbUpdate } from '../utils/db'
 
 /**
  * POST /api/support/tickets/:id/escalate
@@ -25,8 +26,7 @@ export function createEscalateEndpoint(slugs: CollectionSlugs): Endpoint {
           return Response.json({ error: 'invalid-id' }, { status: 400 })
         }
 
-        const ticket = await req.payload.update({
-          collection: slugs.tickets as any,
+        const ticket = await dbUpdate(req.payload, slugs.tickets, {
           id: ticketId,
           data: { status: 'escalated' },
           overrideAccess: true,

package/src/endpoints/export-csv.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireAdmin, handleAuthError } from '../utils/auth'
+import { dbFind } from '../utils/db'
 
 /**
  * GET /api/support/export-csv
@@ -22,8 +23,7 @@ export function createExportCsvEndpoint(slugs: CollectionSlugs): Endpoint {
         const allDocs: Array<Record<string, unknown>> = []
 
         while (hasMore) {
-          const batch = await payload.find({
-            collection: slugs.tickets as any,
+          const batch = await dbFind(payload, slugs.tickets, {
             limit: PAGE_SIZE,
             page,
             depth: 1,

package/src/endpoints/export-data.ts

@@ -1,6 +1,7 @@
 import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { requireClient, handleAuthError } from '../utils/auth'
+import { dbFind, dbFindByID } from '../utils/db'
 
 /**
  * GET /api/support/export-data
@@ -17,21 +18,18 @@ export function createExportDataEndpoint(slugs: CollectionSlugs): Endpoint {
         requireClient(req, slugs)
 
         const [clientData, ticketsResult, messagesResult, surveysResult] = await Promise.all([
-          payload.findByID({
-            collection: slugs.supportClients as any,
+          dbFindByID(payload, slugs.supportClients, {
             id: req.user.id,
             depth: 0,
             overrideAccess: true,
           }),
-          payload.find({
-            collection: slugs.tickets as any,
+          dbFind(payload, slugs.tickets, {
             where: { client: { equals: req.user.id } },
             limit: 1000,
             depth: 0,
             overrideAccess: true,
           }),
-          payload.find({
-            collection: slugs.ticketMessages as any,
+          dbFind(payload, slugs.ticketMessages, {
             where: {
               'ticket.client': { equals: req.user.id },
               authorType: { equals: 'client' },
@@ -40,8 +38,7 @@ export function createExportDataEndpoint(slugs: CollectionSlugs): Endpoint {
             depth: 0,
             overrideAccess: true,
           }),
-          payload.find({
-            collection: slugs.satisfactionSurveys as any,
+          dbFind(payload, slugs.satisfactionSurveys, {
             where: { client: { equals: req.user.id } },
             limit: 500,
             depth: 0,

package/src/endpoints/import-conversation.ts

@@ -2,6 +2,7 @@ import type { Endpoint } from 'payload'
 import type { CollectionSlugs } from '../utils/slugs'
 import { RateLimiter } from '../utils/rateLimiter'
 import { readSupportSettings } from '../utils/readSettings'
+import { dbFind, dbCreate } from '../utils/db'
 import crypto from 'crypto'
 
 interface ParsedConversation {
@@ -215,8 +216,7 @@ export function createImportConversationEndpoint(slugs: CollectionSlugs): Endpoi
         }
 
         // Find or create support client
-        const clientResult = await payload.find({
-          collection: slugs.supportClients as any,
+        const clientResult = await dbFind(payload, slugs.supportClients, {
           where: { email: { equals: conversation.client.email } },
           limit: 1,
           depth: 0,
@@ -230,8 +230,7 @@ export function createImportConversationEndpoint(slugs: CollectionSlugs): Endpoi
           const nameParts = conversation.client.name.split(' ')
           const randomPassword = crypto.randomBytes(48).toString('base64url')
 
-          client = await payload.create({
-            collection: slugs.supportClients as any,
+          client = await dbCreate(payload, slugs.supportClients, {
             data: {
               email: conversation.client.email,
               password: randomPassword,
@@ -245,8 +244,7 @@ export function createImportConversationEndpoint(slugs: CollectionSlugs): Endpoi
         }
 
         // Find admin user for authorAdmin
-        const adminUsers = await payload.find({
-          collection: slugs.users as any,
+        const adminUsers = await dbFind(payload, slugs.users, {
           limit: 1,
           depth: 0,
           overrideAccess: true,
@@ -254,8 +252,7 @@ export function createImportConversationEndpoint(slugs: CollectionSlugs): Endpoi
         const adminUserId = adminUsers.docs[0]?.id
 
         // Create ticket
-        const ticket = await payload.create({
-          collection: slugs.tickets as any,
+        const ticket = await dbCreate(payload, slugs.tickets, {
           data: {
             subject: conversation.subject,
             client: client.id,
@@ -271,8 +268,7 @@ export function createImportConversationEndpoint(slugs: CollectionSlugs): Endpoi
         for (const msg of conversation.messages) {
           const isAdmin = msg.from === 'admin'
 
-          await payload.create({
-            collection: slugs.ticketMessages as any,
+          await dbCreate(payload, slugs.ticketMessages, {
             data: {
               ticket: ticket.id,
               body: msg.content,

package/src/endpoints/index.ts

@@ -3,6 +3,7 @@ import type { CollectionSlugs } from '../utils/slugs'
 import type { SupportFeatures } from '../types'
 
 import { createAiEndpoint } from './ai'
+import { createAiAgentEndpoint } from './ai-agent'
 import { createClientIntelligenceEndpoint } from './client-intelligence'
 import { createSearchEndpoint } from './search'
 import { createKbSearchEndpoint } from './kb-search'
@@ -27,6 +28,7 @@ import { createAdminChatGetEndpoint, createAdminChatPostEndpoint } from './admin
 import { createAdminChatStreamEndpoint } from './admin-chat-stream'
 import { createAdminStatsEndpoint } from './admin-stats'
 import { createBillingEndpoint } from './billing'
+import { createInvoiceEndpoint } from './invoice'
 import { createTicketSynthesisEndpoint } from './ticket-synthesis'
 import { createEmailStatsEndpoint } from './email-stats'
 import { createSatisfactionEndpoint } from './satisfaction'
@@ -43,6 +45,10 @@ import { createDeleteAccountEndpoint } from './delete-account'
 import { createMergeClientsEndpoint } from './merge-clients'
 import { createImportConversationEndpoint } from './import-conversation'
 import { createProcessScheduledEndpoint } from './process-scheduled'
+import { createProcessSnoozeEndpoint } from './process-snooze'
+import { createProcessDigestsEndpoint } from './process-digests'
+import { createChannelsWebhookEndpoint } from './channels'
+import { createVapidKeyEndpoint, createPushSubscribeEndpoint } from './push'
 import { createUserPrefsGetEndpoint, createUserPrefsPostEndpoint } from './user-prefs'
 import { createEscalateEndpoint } from './escalate'
 import { createTicketFeedbackEndpoint } from './ticket-feedback'
@@ -51,6 +57,7 @@ import { createInviteCollaboratorEndpoint } from './invite-collaborator'
 
 // Re-export all individual endpoint creators
 export { createAiEndpoint } from './ai'
+export { createAiAgentEndpoint } from './ai-agent'
 export { createSearchEndpoint } from './search'
 export { createKbSearchEndpoint } from './kb-search'
 export { createBulkActionEndpoint } from './bulk-action'
@@ -74,6 +81,7 @@ export { createAdminChatGetEndpoint, createAdminChatPostEndpoint } from './admin
 export { createAdminChatStreamEndpoint } from './admin-chat-stream'
 export { createAdminStatsEndpoint } from './admin-stats'
 export { createBillingEndpoint } from './billing'
+export { createInvoiceEndpoint } from './invoice'
 export { createTicketSynthesisEndpoint } from './ticket-synthesis'
 export { createEmailStatsEndpoint } from './email-stats'
 export { createSatisfactionEndpoint } from './satisfaction'
@@ -90,6 +98,10 @@ export { createDeleteAccountEndpoint } from './delete-account'
 export { createMergeClientsEndpoint } from './merge-clients'
 export { createImportConversationEndpoint } from './import-conversation'
 export { createProcessScheduledEndpoint } from './process-scheduled'
+export { createProcessSnoozeEndpoint } from './process-snooze'
+export { createProcessDigestsEndpoint } from './process-digests'
+export { createChannelsWebhookEndpoint } from './channels'
+export { createVapidKeyEndpoint, createPushSubscribeEndpoint } from './push'
 export { createUserPrefsGetEndpoint, createUserPrefsPostEndpoint } from './user-prefs'
 export type { UserPrefs } from './user-prefs'
 export { createEscalateEndpoint } from './escalate'
@@ -139,6 +151,7 @@ export function createSupportEndpoints(slugs: CollectionSlugs, options?: Support
   // Conditional endpoints based on feature flags
   if (!f || f.ai !== false) {
     endpoints.push(createAiEndpoint(slugs))
+    endpoints.push(createAiAgentEndpoint(slugs))
     endpoints.push(...createClientIntelligenceEndpoint(slugs))
     endpoints.push(createTicketSynthesisEndpoint(slugs))
   }
@@ -169,13 +182,21 @@ export function createSupportEndpoints(slugs: CollectionSlugs, options?: Support
     endpoints.push(createAdminChatGetEndpoint(slugs), createAdminChatPostEndpoint(slugs))
     endpoints.push(createAdminChatStreamEndpoint(slugs))
   }
-  if (!f || f.timeTracking !== false) endpoints.push(createBillingEndpoint(slugs))
+  if (!f || f.timeTracking !== false) {
+    endpoints.push(createBillingEndpoint(slugs))
+    endpoints.push(createInvoiceEndpoint(slugs))
+  }
   if (!f || f.satisfaction !== false) endpoints.push(createSatisfactionEndpoint(slugs))
   if (!f || f.emailTracking !== false) {
     endpoints.push(createEmailStatsEndpoint(slugs), createTrackOpenEndpoint(slugs))
   }
   if (!f || f.pendingEmails !== false) endpoints.push(createPendingEmailsProcessEndpoint(slugs))
   if (!f || f.scheduledReplies !== false) endpoints.push(createProcessScheduledEndpoint(slugs))
+  if (!f || f.snooze !== false) endpoints.push(createProcessSnoozeEndpoint(slugs))
+  endpoints.push(createProcessDigestsEndpoint(slugs))
+  endpoints.push(createChannelsWebhookEndpoint(slugs))
+  endpoints.push(createVapidKeyEndpoint())
+  endpoints.push(createPushSubscribeEndpoint(slugs))
 
   return endpoints
 }

package/src/endpoints/invite-collaborator.ts

@@ -4,9 +4,16 @@ import { handleAuthError, AuthError } from '../utils/auth'
 import { escapeHtml, emailWrapper, emailButton, emailParagraph } from '../utils/emailTemplate'
 import { readSupportSettings } from '../utils/readSettings'
 import { randomBytes } from 'crypto'
+import { RateLimiter } from '../utils/rateLimiter'
+import { dbFindByID, dbFind, dbCreate, dbUpdate, dbCount } from '../utils/db'
 
 const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
 
+// Anti-abuse limits: an invite can create a placeholder account AND send an
+// email, so cap both the volume per user and the collaborators per ticket.
+const MAX_COLLABORATORS_PER_TICKET = 20
+const inviteLimiter = new RateLimiter(60 * 60 * 1000, 10)
+
 /**
  * POST /api/support/tickets/:id/invite
  *
@@ -52,12 +59,11 @@ export function createInviteCollaboratorEndpoint(slugs: CollectionSlugs): Endpoi
 
         const payload = req.payload
 
-        const ticket = await payload.findByID({
-          collection: slugs.tickets as any,
+        const ticket = await dbFindByID(payload, slugs.tickets, {
           id: ticketId,
           depth: 1,
           overrideAccess: true,
-        }) as any
+        })
         if (!ticket) return Response.json({ error: 'Ticket introuvable' }, { status: 404 })
 
         const isAdmin = req.user.collection === slugs.users
@@ -68,6 +74,21 @@ export function createInviteCollaboratorEndpoint(slugs: CollectionSlugs): Endpoi
           return Response.json({ error: 'Forbidden' }, { status: 403 })
         }
 
+        // Anti-abuse: cap invite volume per user (in-memory, fail-closed).
+        if (inviteLimiter.check(String(req.user.id))) {
+          return Response.json({ error: 'Trop d\'invitations. Réessayez plus tard.' }, { status: 429 })
+        }
+
+        // Cap collaborators per ticket to prevent mass placeholder-account creation.
+        const collabCount = await dbCount(payload, 'ticket-collaborators', { where: { ticket: { equals: ticketId } }, overrideAccess: true })
+          .catch(() => ({ totalDocs: 0 }))
+        if (collabCount.totalDocs >= MAX_COLLABORATORS_PER_TICKET) {
+          return Response.json(
+            { error: `Limite de ${MAX_COLLABORATORS_PER_TICKET} collaborateurs atteinte sur ce ticket` },
+            { status: 429 },
+          )
+        }
+
         // Prevent inviting the primary owner (no-op)
         const ownerEmail =
           typeof ticket.client === 'object' ? (ticket.client?.email as string | undefined) : undefined
@@ -77,8 +98,7 @@ export function createInviteCollaboratorEndpoint(slugs: CollectionSlugs): Endpoi
 
         // Find-or-create the invited support-client
         let inviteeId: number | string | null = null
-        const existing = await payload.find({
-          collection: slugs.supportClients as any,
+        const existing = await dbFind(payload, slugs.supportClients, {
           where: { email: { equals: email } },
           limit: 1,
           depth: 0,
@@ -90,8 +110,7 @@ export function createInviteCollaboratorEndpoint(slugs: CollectionSlugs): Endpoi
           // Create a placeholder client; password is random — the invitee will reset
           // via the forgotPassword flow triggered by the SupportClients afterChange hook.
           const tempPassword = randomBytes(16).toString('hex')
-          const created = await payload.create({
-            collection: slugs.supportClients as any,
+          const created = await dbCreate(payload, slugs.supportClients, {
             data: {
               email,
               firstName: 'Invité',
@@ -111,8 +130,7 @@ export function createInviteCollaboratorEndpoint(slugs: CollectionSlugs): Endpoi
         }
 
         // Upsert ticket-collaborator row (one per (ticket, client))
-        const dupe = await payload.find({
-          collection: 'ticket-collaborators' as any,
+        const dupe = await dbFind(payload, 'ticket-collaborators', {
           where: {
             and: [
               { ticket: { equals: ticketId } },
@@ -127,15 +145,13 @@ export function createInviteCollaboratorEndpoint(slugs: CollectionSlugs): Endpoi
         const invitationToken = randomBytes(24).toString('hex')
 
         if (dupe.docs.length > 0) {
-          await payload.update({
-            collection: 'ticket-collaborators' as any,
+          await dbUpdate(payload, 'ticket-collaborators', {
             id: (dupe.docs[0] as any).id,
             data: { role, invitationToken },
             overrideAccess: true,
           })
         } else {
-          await payload.create({
-            collection: 'ticket-collaborators' as any,
+          await dbCreate(payload, 'ticket-collaborators', {
             data: {
               ticket: ticketId,
               client: inviteeId,
@@ -187,8 +203,7 @@ export function createInviteCollaboratorEndpoint(slugs: CollectionSlugs): Endpoi
 
         // Best-effort email log
         try {
-          await payload.create({
-            collection: slugs.emailLogs as any,
+          await dbCreate(payload, slugs.emailLogs, {
             data: {
               status: 'success',
               action: 'invite',