@consilioweb/payload-support 3.0.0 → 5.0.0

package/dist/utils/db.d.ts

@@ -0,0 +1,34 @@
+import type { Payload } from 'payload';
+/**
+ * Thin typed wrappers around Payload data operations.
+ *
+ * Collection slugs are user-overridable config (`string`), not Payload's literal
+ * `CollectionSlug` union — so every call site otherwise needs `collection: X as any`.
+ * These helpers isolate that single unavoidable cast in ONE place, removing the
+ * ~200 scattered `as any` while staying an EXACT behavioral pass-through of options.
+ *
+ * Returns default to `any` (callers consume docs loosely, as before). Pass a type
+ * argument to opt into stronger typing: `dbFind<TicketData>(payload, slug, { ... })`.
+ */
+interface PaginatedResult<T> {
+    docs: T[];
+    totalDocs: number;
+    totalPages: number;
+    page?: number;
+    limit: number;
+    hasNextPage: boolean;
+    hasPrevPage: boolean;
+    nextPage?: number | null;
+    prevPage?: number | null;
+}
+export declare function dbFind<T = any>(payload: Payload, slug: string, options?: Record<string, unknown>): Promise<PaginatedResult<T>>;
+export declare function dbFindByID<T = any>(payload: Payload, slug: string, options: {
+    id: number | string;
+} & Record<string, unknown>): Promise<T>;
+export declare function dbCreate<T = any>(payload: Payload, slug: string, options: Record<string, unknown>): Promise<T>;
+export declare function dbUpdate<T = any>(payload: Payload, slug: string, options: Record<string, unknown>): Promise<T>;
+export declare function dbCount(payload: Payload, slug: string, options?: Record<string, unknown>): Promise<{
+    totalDocs: number;
+}>;
+export declare function dbDelete<T = any>(payload: Payload, slug: string, options: Record<string, unknown>): Promise<T>;
+export {};

package/dist/utils/readSettings.d.ts

@@ -0,0 +1,90 @@
+import type { Payload } from 'payload';
+import { type TicketingFeatures } from './features.js';
+export declare const SUPPORT_SETTINGS_PREF_KEY = "support-settings";
+/**
+ * Key under which `plugin.ts` publishes the resolved staff collection slug on
+ * `config.custom`. It is the ONE source of truth shared by the read path (here)
+ * and the write path (`requireAdmin` → `slugs.users`).
+ */
+export declare const SUPPORT_STAFF_SLUG_CONFIG_KEY = "supportStaffCollection";
+/**
+ * Owner scope for every `payload-preferences` row this plugin reads back.
+ *
+ * `payload-preferences` is writable by ANY authenticated principal, whatever its
+ * auth collection: Payload's `POST /api/payload-preferences/:key` handler only
+ * checks `!!req.user` before upserting the row. Reading a plugin-wide row by key
+ * alone therefore lets a front-office user (or a support-client) plant their own
+ * row and have the whole plugin read it — replyTo addresses, SLA escalation
+ * address, AI provider, feature flags.
+ *
+ * Every read below is constrained to `user.relationTo = <staff collection>`, the
+ * same scope the WRITE path already uses (endpoints/settings.ts, signature.ts,
+ * user-prefs.ts all upsert with `req.user.collection`, and all three are guarded
+ * by `requireAdmin`, which compares against `slugs.users`).
+ *
+ * TWO SOURCES OF TRUTH WERE THE BUG: this used to resolve the scope from
+ * `config.admin.user`, which Payload defaults to the FIRST auth collection of
+ * the app when the integrator did not declare it (config/sanitize.js). On a host
+ * whose first auth collection is the front office and whose staff collection is
+ * declared through `collectionSlugs.users`, the read scope named the front
+ * office while the write scope named the staff — and the poisoning this scope
+ * was added to defeat was open again. So the plugin now PUBLISHES the resolved
+ * `slugs.users` on `config.custom` (see plugin.ts) and reads it back here.
+ * `config.admin.user` remains a last-resort fallback for callers using these
+ * helpers outside of a plugin-built config; there is no plugin deployment in
+ * which it is consulted.
+ */
+export declare function resolveStaffPrefSlug(payload: Payload, staffSlug?: string): string;
+export interface SupportSettings {
+    email: {
+        fromAddress: string;
+        fromName: string;
+        replyToAddress: string;
+    };
+    ai: {
+        provider: string;
+        model: string;
+        enableSentiment: boolean;
+        enableSynthesis: boolean;
+        enableSuggestion: boolean;
+        enableRewrite: boolean;
+    };
+    sla: {
+        firstResponseMinutes: number;
+        resolutionMinutes: number;
+        businessHoursOnly: boolean;
+        escalationEmail: string;
+    };
+    autoClose: {
+        enabled: boolean;
+        daysBeforeClose: number;
+        reminderDaysBefore: number;
+    };
+    /** Ticketing feature flags — server-authoritative since 2.1 (used to be per-browser localStorage). */
+    features: TicketingFeatures;
+}
+export interface UserPrefs {
+    locale: 'fr' | 'en';
+    signature: string;
+}
+export declare const DEFAULT_SETTINGS: SupportSettings;
+export declare const DEFAULT_USER_PREFS: UserPrefs;
+export interface SupportSettingsState {
+    settings: SupportSettings;
+    /**
+     * False when the preference row carries no `features` object yet — a
+     * pre-2.1 install, or a fresh one. Clients use it to decide whether their
+     * legacy `localStorage` flags should seed the server.
+     */
+    featuresConfigured: boolean;
+}
+/** Invalidate the settings cache — call right after writing support settings. */
+export declare function invalidateSupportSettingsCache(): void;
+/**
+ * Merge a stored preference value onto the defaults.
+ * Exported for the settings endpoint, which must not re-implement the merge.
+ */
+export declare function mergeSupportSettings(stored: Partial<SupportSettings> | undefined | null, base?: SupportSettings): SupportSettings;
+export declare function readSupportSettingsState(payload: Payload, staffSlug?: string): Promise<SupportSettingsState>;
+export declare function readSupportSettings(payload: Payload, staffSlug?: string): Promise<SupportSettings>;
+export declare function readUserPrefs(payload: Payload, userId: string | number, staffSlug?: string): Promise<UserPrefs>;

package/dist/views/BillingView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { BillingClient } from './client.js';
 
 const BillingView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const BillingView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "BillingView", children: /* @__PURE__ */ jsx(BillingClient, {}) })
     }

package/dist/views/ChatView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { ChatViewClient } from './client.js';
 
 const ChatView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const ChatView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "ChatView", children: /* @__PURE__ */ jsx(ChatViewClient, {}) })
     }

package/dist/views/CrmView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { CrmClient } from './client.js';
 
 const CrmView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const CrmView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "CrmView", children: /* @__PURE__ */ jsx(CrmClient, {}) })
     }

package/dist/views/EmailTrackingView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { EmailTrackingClient } from './client.js';
 
 const EmailTrackingView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const EmailTrackingView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "EmailTrackingView", children: /* @__PURE__ */ jsx(EmailTrackingClient, {}) })
     }

package/dist/views/ImportConversationView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { ImportConversationClient } from './client.js';
 
 const ImportConversationView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const ImportConversationView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "ImportConversationView", children: /* @__PURE__ */ jsx(ImportConversationClient, {}) })
     }

package/dist/views/LogsView/index.js

@@ -1,12 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { LogsClient } from './client.js';
 
 const LogsView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) redirect("/admin/login");
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -16,7 +18,7 @@ const LogsView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "LogsView", children: /* @__PURE__ */ jsx(LogsClient, {}) })
     }

package/dist/views/NewTicketView/index.js

@@ -1,12 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { NewTicketClient } from './client.js';
 
 const NewTicketView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) redirect("/admin/login");
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -16,7 +18,7 @@ const NewTicketView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "NewTicketView", children: /* @__PURE__ */ jsx(NewTicketClient, {}) })
     }

package/dist/views/PendingEmailsView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { PendingEmailsClient } from './client.js';
 
 const PendingEmailsView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const PendingEmailsView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "PendingEmailsView", children: /* @__PURE__ */ jsx(PendingEmailsClient, {}) })
     }

package/dist/views/SupportDashboardView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { SupportDashboardClient } from './client.js';
 
 const SupportDashboardView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const SupportDashboardView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "SupportDashboardView", children: /* @__PURE__ */ jsx(SupportDashboardClient, {}) })
     }

package/dist/views/TicketDetailView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { TicketDetailClient } from './client.js';
 
 const TicketDetailView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const TicketDetailView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "TicketDetailView", children: /* @__PURE__ */ jsx(TicketDetailClient, {}) })
     }

package/dist/views/TicketInboxView/index.js

@@ -1,12 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { TicketInboxClient } from './client.js';
 
 const TicketInboxView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) redirect("/admin/login");
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -16,7 +18,7 @@ const TicketInboxView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "TicketInboxView", children: /* @__PURE__ */ jsx(TicketInboxClient, {}) })
     }

package/dist/views/TicketingSettingsView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { TicketingSettingsClient } from './client.js';
 
 const TicketingSettingsView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const TicketingSettingsView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "TicketingSettingsView", children: /* @__PURE__ */ jsx(TicketingSettingsClient, {}) })
     }

package/dist/views/TimeDashboardView/index.js

@@ -1,14 +1,14 @@
 import { jsx } from 'react/jsx-runtime';
 import { DefaultTemplate } from '@payloadcms/next/templates';
 import { redirect } from 'next/navigation';
+import { supportViewRedirectTarget } from '../shared/viewAccess.js';
 import { AdminErrorBoundary } from '../shared/ErrorBoundary.js';
 import { TimeDashboardClient } from './client.js';
 
 const TimeDashboardView = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult;
-  if (!req.user) {
-    redirect("/admin/login");
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult);
+  if (redirectTo) redirect(redirectTo);
   return /* @__PURE__ */ jsx(
     DefaultTemplate,
     {
@@ -18,7 +18,7 @@ const TimeDashboardView = ({ initPageResult }) => {
       payload: req.payload,
       permissions: initPageResult.permissions,
       searchParams: {},
-      user: req.user,
+      user: req.user ?? void 0,
       visibleEntities,
       children: /* @__PURE__ */ jsx(AdminErrorBoundary, { viewName: "TimeDashboardView", children: /* @__PURE__ */ jsx(TimeDashboardClient, {}) })
     }

package/dist/views/shared/viewAccess.d.ts

@@ -0,0 +1,29 @@
+import type { AdminViewServerProps } from 'payload';
+/**
+ * Where a custom admin view must send a caller it refuses, or `null` to render.
+ *
+ * Payload does NOT gate custom admin views. `RootPage` skips its own
+ * `canAccessAdmin` redirect as soon as `isCustomAdminView()` matches, and that
+ * helper only compares the request path against the registered `view.path` —
+ * it reads no visibility flag, despite what its docblock claims. Authorising a
+ * custom view is therefore the view's own job, and every view registered by
+ * this plugin sits at a custom path (`/support/inbox`, `/support/ticket`, …).
+ *
+ * `!req.user` alone is not that check. A single `payload-token` cookie serves
+ * every auth collection of the host app, so an ordinary front-office account —
+ * a `customers`, `members` or `subscribers` signup — carries one on `/admin`
+ * routes too. Such a caller reached `DefaultTemplate` and received the admin
+ * chrome together with the client config Payload builds for any authenticated
+ * request: the field schema of every collection and global, `admin.hidden`
+ * ones included, plus an unfiltered `visibleEntities`.
+ *
+ * The ticket data itself never travelled — the client components fetch through
+ * `/api/support/*`, which `requireAdmin` has guarded all along — but the shape
+ * of the whole CMS did.
+ *
+ * The gate mirrors `requireAdmin` (utils/auth.ts): membership of the staff
+ * collection. It additionally honours `canAccessAdmin`, so an account the host
+ * disabled through its own `access.admin` is refused here too, and it fails
+ * closed on anything it cannot resolve.
+ */
+export declare function supportViewRedirectTarget(initPageResult: AdminViewServerProps['initPageResult']): string | null;

package/dist/views/shared/viewAccess.js

@@ -0,0 +1,24 @@
+import { formatAdminURL } from 'payload/shared';
+import { SUPPORT_STAFF_SLUG_CONFIG_KEY } from '../../utils/readSettings.js';
+
+function supportViewRedirectTarget(initPageResult) {
+  const req = initPageResult?.req;
+  const config = req?.payload?.config;
+  const adminRoute = config?.routes?.admin ?? "/admin";
+  const routes = config?.admin?.routes;
+  const to = (route, fallback) => formatAdminURL({ adminRoute, path: route ?? fallback });
+  if (!req?.user) return to(routes?.login, "/login");
+  if (initPageResult?.permissions?.canAccessAdmin === false) {
+    return to(routes?.unauthorized, "/unauthorized");
+  }
+  const custom = config?.custom;
+  const registered = custom?.[SUPPORT_STAFF_SLUG_CONFIG_KEY];
+  const staffSlug = typeof registered === "string" && registered || config?.admin?.user || null;
+  const collection = req.user.collection;
+  if (!staffSlug || !collection || collection !== staffSlug) {
+    return to(routes?.unauthorized, "/unauthorized");
+  }
+  return null;
+}
+
+export { supportViewRedirectTarget };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consilioweb/payload-support",
-  "version": "3.0.0",
+  "version": "5.0.0",
   "description": "Payload CMS plugin — professional support & ticketing system with AI, SLA, time tracking, live chat, and more",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -85,12 +85,13 @@
   "author": "ConsilioWEB <contact@consilioweb.fr> (https://consilioweb.fr)",
   "license": "MIT",
   "peerDependencies": {
-    "@payloadcms/next": "^3.37.0",
+    "@payloadcms/next": "^3.79.1",
     "lucide-react": ">=0.300.0",
     "next": "^15.2.9 || ^16.0.0",
-    "payload": "^3.37.0",
+    "payload": "^3.79.1",
     "react": "^19.0.0",
-    "react-dom": "^19.0.0"
+    "react-dom": "^19.0.0",
+    "@payloadcms/richtext-lexical": "^3.79.1"
   },
   "engines": {
     "node": ">=20.9.0"
@@ -100,32 +101,37 @@
     "provenance": true
   },
   "devDependencies": {
-    "@payloadcms/db-sqlite": "^3.86.0",
-    "@payloadcms/graphql": "^3.86.0",
-    "@payloadcms/next": "^3.86.0",
-    "@payloadcms/richtext-lexical": "^3.86.0",
-    "@payloadcms/translations": "^3.86.0",
-    "@payloadcms/ui": "^3.86.0",
-    "@playwright/test": "^1.49.0",
+    "@payloadcms/db-sqlite": "^3.88.0",
+    "@payloadcms/graphql": "^3.88.0",
+    "@payloadcms/next": "^3.88.0",
+    "@payloadcms/richtext-lexical": "^3.88.0",
+    "@payloadcms/translations": "^3.88.0",
+    "@payloadcms/ui": "^3.88.0",
+    "@playwright/test": "^1.63.0",
     "@types/pdfkit": "^0.17.6",
-    "@types/react": "^19.0.0",
+    "@types/react": "^19.2.18",
     "@types/sanitize-html": "^2.16.1",
     "@types/web-push": "^3.6.4",
     "esbuild-sass-plugin": "^3.7.0",
-    "next": "^16.2.9",
-    "payload": "^3.86.0",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
+    "next": "^16.3.4",
+    "payload": "^3.88.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
     "sharp": "0.34.5",
-    "tsup": "^8.0.0",
-    "typescript": "^5.5.0",
-    "vitest": "^4.1.9"
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.11"
   },
   "dependencies": {
     "pdfkit": "^0.19.1",
-    "sanitize-html": "^2.17.5",
+    "sanitize-html": "^2.17.7",
     "web-push": "^3.6.7"
   },
+  "peerDependenciesMeta": {
+    "@payloadcms/richtext-lexical": {
+      "optional": true
+    }
+  },
   "scripts": {
     "build": "tsup && tsc -p tsconfig.types.json && node scripts/copy-subpath-types.mjs",
     "typecheck": "tsc --noEmit",