1.5.1

dist/plugin.js

@@ -68,8 +68,14 @@ import { buildSeoPlugin, injectAutoFillMeta, injectSeoTabs } from './modules/seo
                 // node_modules). Avoids TS2307 without @ts-expect-error; the module
                 // exists at runtime in projects that installed it.
                 const pkg = '@clocklimited/payload-2fa';
-                const { totpPlugin } = await import(pkg);
-                config = await totpPlugin({
+                const mod = await import(pkg);
+                // The package exports `payloadTotp`; older/other builds may use
+                // `totpPlugin`. Accept either so a rename doesn't break us.
+                const totp = mod.payloadTotp ?? mod.totpPlugin;
+                if (typeof totp !== 'function') {
+                    throw new Error('expected export payloadTotp (or totpPlugin) to be a function — ' + 'check the installed @clocklimited/payload-2fa version');
+                }
+                config = await totp({
                     collection: tf.collectionSlug ?? 'users',
                     forceSetup: true,
                     totp: {

docs/security.md

@@ -253,8 +253,11 @@ sprawdzane przed dostępem do DANYCH, nie tylko UI panelu).
 ### Zależność
 
 ```bash
-pnpm add @clocklimited/payload-2fa
+pnpm add @clocklimited/payload-2fa@3.0.0-beta.7
 ```
+Uwaga: pakiet nie ma jeszcze stabilnego 3.0.0 — użyj konkretnej wersji beta
+(albo `^3.0.0-0`, żeby dopuścić prereleasy). Sam `^3.0.0` da błąd
+ERR_PNPM_NO_MATCHING_VERSION.
 To PEER dependency — ipal-kit importuje ją dynamicznie tylko gdy 2FA włączone
 (domyślnie). Bez niej i z włączonym 2FA plugin rzuci jasny błąd.
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intecion/ipal-kit",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Intecion Payload Advanced Library — a Payload CMS 3 plugin: i18n, SEO, forms, consent, analytics, blog/archives.",
   "license": "MIT",
   "repository": {

src/plugin.ts

@@ -77,10 +77,20 @@ export const ipalKit = (options: IpalOptions): Plugin => {
         // node_modules). Avoids TS2307 without @ts-expect-error; the module
         // exists at runtime in projects that installed it.
         const pkg = '@clocklimited/payload-2fa'
-        const { totpPlugin } = (await import(pkg)) as {
-          totpPlugin: (opts: Record<string, unknown>) => Plugin
+        const mod = (await import(pkg)) as {
+          payloadTotp?: (opts: Record<string, unknown>) => Plugin
+          totpPlugin?: (opts: Record<string, unknown>) => Plugin
         }
-        config = await totpPlugin({
+        // The package exports `payloadTotp`; older/other builds may use
+        // `totpPlugin`. Accept either so a rename doesn't break us.
+        const totp = mod.payloadTotp ?? mod.totpPlugin
+        if (typeof totp !== 'function') {
+          throw new Error(
+            'expected export payloadTotp (or totpPlugin) to be a function — ' +
+              'check the installed @clocklimited/payload-2fa version',
+          )
+        }
+        config = await totp({
           collection: tf.collectionSlug ?? 'users',
           forceSetup: true, // ENFORCED — every user must set up TOTP; no opt-out
           totp: { issuer: tf.issuer },