@adonis-agora/authkit-server 0.65.3 → 0.66.1

package/build/src/commands/expire_scan_command.js

@@ -29,6 +29,7 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
 };
 import { RuntimeSettings } from '../host/runtime_settings.js';
 import { resolveEffectiveAccountExpiration } from '../host/runtime_toggles.js';
+import { ADMIN_LIST_DEFAULT_SIZE, LIST_FIRST_PAGE } from '../pagination.js';
 import { resolveAuthkitConfig } from './resolve_config.js';
 // ---------------------------------------------------------------------------
 // Core logic (pura, testável sem Ace)
@@ -76,10 +77,10 @@ export async function runExpireScan(app, opts) {
     let warnedCount = 0;
     let dedupedCount = 0;
     let scanned = 0;
-    let page = 1;
-    const limit = 100;
+    let page = LIST_FIRST_PAGE;
+    const size = ADMIN_LIST_DEFAULT_SIZE;
     while (true) {
-        const batch = await accountStore.listAccounts({ page, limit });
+        const batch = await accountStore.listAccounts({ page, size });
         if (batch.data.length === 0)
             break;
         for (const account of batch.data) {
@@ -127,7 +128,7 @@ export async function runExpireScan(app, opts) {
                 }
             }
         }
-        if (batch.data.length < limit)
+        if (batch.data.length < size)
             break;
         page++;
     }
@@ -157,8 +158,8 @@ async function getLastLoginMs(audit, accountId) {
         const result = await audit.list({
             type: 'login.success',
             subject: accountId,
-            page: 1,
-            limit: 1,
+            page: LIST_FIRST_PAGE,
+            size: 1,
         });
         if (result.data.length === 0)
             return null;
@@ -181,8 +182,8 @@ async function wasWarnedRecently(audit, accountId, warnDays) {
         const result = await audit.list({
             type: 'account.expiration_warned',
             subject: accountId,
-            page: 1,
-            limit: 1,
+            page: LIST_FIRST_PAGE,
+            size: 1,
         });
         if (result.data.length === 0)
             return false;

package/build/src/host/account_export_service.js

@@ -1,7 +1,8 @@
 import { supportsOrganizations, supportsPasskeys, supportsProviderIdentity, } from '../accounts/account_store.js';
+import { LIST_FIRST_PAGE } from '../pagination.js';
 import { AdminSessionsService } from './admin_sessions_service.js';
 /** Limite de eventos de audit incluídos no export (evita payloads gigantes). */
-const AUDIT_EXPORT_LIMIT = 1000;
+const AUDIT_EXPORT_SIZE = 1000;
 /**
  * Monta o pacote de dados de uma conta para portabilidade (LGPD/GDPR). NUNCA
  * inclui segredos: hash de senha, segredo TOTP, recovery codes, chave pública de
@@ -102,8 +103,8 @@ export class AccountExportService {
             try {
                 const page = await cfg.audit.list({
                     subject: accountId,
-                    page: 1,
-                    limit: AUDIT_EXPORT_LIMIT,
+                    page: LIST_FIRST_PAGE,
+                    size: AUDIT_EXPORT_SIZE,
                 });
                 auditLog = page.data.map((e) => ({
                     type: e.type,

package/build/src/host/admin_api/admin_orgs_service.js

@@ -1,4 +1,5 @@
 import { supportsOrganizations } from '../../accounts/account_store.js';
+import { ADMIN_LIST_DEFAULT_SIZE, LIST_FIRST_PAGE } from '../../pagination.js';
 import { accountPath } from '../account_paths.js';
 import { sendOrgInvitationEmail } from '../default_mailer.js';
 import { isRoleInCatalog, resolveRoleCatalogList } from '../runtime_toggles.js';
@@ -50,14 +51,14 @@ export class AdminOrgsService {
         // O store não tem listAllOrgs — acumulamos via memberships de todas as contas.
         // Para admin, fazemos um listAccounts full e coletamos todas as orgs únicas.
         // Mais eficiente: usa a tabela de organizations diretamente pelo listOrgMembers
-        // mas o store não expõe listAllOrgs. Usamos hack: listAccounts com limit alto,
+        // mas o store não expõe listAllOrgs. Usamos hack: listAccounts com size alto,
         // coletamos orgs via listOrgsForAccount por conta.
         // Para evitar N+1 excessivo, usamos uma abordagem "seen" de IDs.
         const seen = new Map();
-        let page = 1;
-        const limit = 100;
+        let page = LIST_FIRST_PAGE;
+        const size = ADMIN_LIST_DEFAULT_SIZE;
         while (true) {
-            const result = await store.listAccounts({ page, limit });
+            const result = await store.listAccounts({ page, size });
             for (const account of result.data) {
                 const orgs = await store.listOrgsForAccount(account.id);
                 for (const org of orgs) {
@@ -68,7 +69,7 @@ export class AdminOrgsService {
                     }
                 }
             }
-            if (result.data.length < limit)
+            if (result.data.length < size)
                 break;
             page++;
         }

package/build/src/host/admin_api/admin_users_service.d.ts

@@ -121,12 +121,12 @@ export declare class AdminUsersService {
      * conta é contada no máximo uma vez via {@link hasAdminRole}).
      *
      * Terminadores honestos (sem número mágico): a paginação para quando
-     *   - a página veio incompleta (`data.length < pageSize`) → última página, OU
+     *   - a página veio incompleta (`data.length < size`) → última página, OU
      *   - a página veio vazia (`data.length === 0`) → sem mais dados, OU
-     *   - já cobrimos o total reportado (`page * pageSize >= total`).
+     *   - já cobrimos o total reportado (`page * size >= total`).
      * Uma página COMPLETA com `total` ainda maior continua paginando. Isto encerra
      * de forma garantida para qualquer store que devolva páginas finitas (a última
-     * página é, por definição, menor que `pageSize` ou vazia).
+     * página é, por definição, menor que `size` ou vazia).
      */
     private countAdminsByScan;
     /**

package/build/src/host/admin_api/admin_users_service.js

@@ -1,5 +1,6 @@
 import { randomBytes } from 'node:crypto';
 import { supportsAccountDeletion, supportsAccountStatus, supportsCountByGlobalRole, supportsProfile, } from '../../accounts/account_store.js';
+import { ADMIN_LIST_DEFAULT_SIZE, LIST_FIRST_PAGE } from '../../pagination.js';
 import { PasswordPolicyError } from '../../password/password_manager.js';
 import { AccountDeletionService } from '../account_deletion_service.js';
 import { sendPasswordResetEmail } from '../default_mailer.js';
@@ -179,28 +180,28 @@ export class AdminUsersService {
      * conta é contada no máximo uma vez via {@link hasAdminRole}).
      *
      * Terminadores honestos (sem número mágico): a paginação para quando
-     *   - a página veio incompleta (`data.length < pageSize`) → última página, OU
+     *   - a página veio incompleta (`data.length < size`) → última página, OU
      *   - a página veio vazia (`data.length === 0`) → sem mais dados, OU
-     *   - já cobrimos o total reportado (`page * pageSize >= total`).
+     *   - já cobrimos o total reportado (`page * size >= total`).
      * Uma página COMPLETA com `total` ainda maior continua paginando. Isto encerra
      * de forma garantida para qualquer store que devolva páginas finitas (a última
-     * página é, por definição, menor que `pageSize` ou vazia).
+     * página é, por definição, menor que `size` ou vazia).
      */
     async countAdminsByScan() {
         const store = this.cfg.accountStore;
-        const pageSize = 100;
-        let page = 1;
+        const size = ADMIN_LIST_DEFAULT_SIZE;
+        let page = LIST_FIRST_PAGE;
         let count = 0;
         while (true) {
             const { data, total } = await store.listAccounts({
                 page,
-                limit: pageSize,
+                size,
             });
             for (const acc of data) {
                 if (this.hasAdminRole(acc.globalRoles ?? []))
                     count++;
             }
-            if (data.length < pageSize || page * pageSize >= total)
+            if (data.length < size || page * size >= total)
                 break;
             page++;
         }

package/build/src/host/admin_api/api_misc_controller.d.ts

@@ -5,12 +5,14 @@ import type { HttpContext } from '@adonisjs/core/http';
  * introspecção genérica de token (`POST /tokens/verify`).
  */
 export default class ApiMiscController {
-    /** GET /audit — listagem paginada (501 JSON quando o sink não consulta). */
+    /** GET /audit — `{ meta: { page, size, total }, data }` (501 JSON quando o sink não consulta). */
     audit(ctx: HttpContext): Promise<void | {
+        meta: {
+            page: number;
+            size: number;
+            total: any;
+        };
         data: any;
-        total: any;
-        page: number;
-        limit: number;
     }>;
     /** GET /stats — métricas-resumo do IdP (totais + MAU + séries de 30 dias). */
     stats(ctx: HttpContext): Promise<import("../admin_stats_service.js").AdminStats>;

package/build/src/host/admin_api/api_misc_controller.js

@@ -1,4 +1,5 @@
 import '../augmentations.js';
+import { ADMIN_LIST_HTTP_DEFAULT_SIZE, parseListPage, parseListSize } from '../../pagination.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { computeAdminStats } from '../admin_stats_service.js';
 import { tokenVerifyValidator } from '../admin_validators.js';
@@ -9,7 +10,7 @@ import { TokenVerifyService } from './token_verify_service.js';
  * introspecção genérica de token (`POST /tokens/verify`).
  */
 export default class ApiMiscController {
-    /** GET /audit — listagem paginada (501 JSON quando o sink não consulta). */
+    /** GET /audit — `{ meta: { page, size, total }, data }` (501 JSON quando o sink não consulta). */
     async audit(ctx) {
         const service = await ctx.containerResolver.make('authkit.server');
         const cfg = service.config;
@@ -19,12 +20,12 @@ export default class ApiMiscController {
                 .status(501)
                 .send(apiError('not_implemented', 'O sink de auditoria configurado não suporta consulta.'));
         }
-        const page = Math.max(1, Number.parseInt(ctx.request.input('page', '1'), 10) || 1);
-        const limit = Math.max(1, Math.min(100, Number.parseInt(ctx.request.input('limit', '20'), 10) || 20));
+        const page = parseListPage(ctx.request.input('page'));
+        const size = parseListSize(ctx.request.input('size'), ADMIN_LIST_HTTP_DEFAULT_SIZE);
         const type = ctx.request.input('type')?.trim() || undefined;
         const subject = ctx.request.input('subject')?.trim() || undefined;
-        const result = await sink.list({ page, limit, type, subject });
-        return { data: result.data.map(auditDto), total: result.total, page, limit };
+        const result = await sink.list({ page, size, type, subject });
+        return { meta: { page, size, total: result.total }, data: result.data.map(auditDto) };
     }
     /** GET /stats — métricas-resumo do IdP (totais + MAU + séries de 30 dias). */
     async stats(ctx) {

package/build/src/host/admin_api/api_users_controller.d.ts

@@ -6,12 +6,14 @@ import type { HttpContext } from '@adonisjs/core/http';
  */
 export default class ApiUsersController {
     #private;
-    /** GET /users — listagem paginada com busca por e-mail. */
+    /** GET /users — `{ meta: { page, size, total }, data }`, com busca por e-mail. */
     index(ctx: HttpContext): Promise<{
+        meta: {
+            page: number;
+            size: number;
+            total: any;
+        };
         data: any[];
-        total: any;
-        page: number;
-        limit: number;
     }>;
     /** GET /users/:id */
     show(ctx: HttpContext): Promise<void | {

package/build/src/host/admin_api/api_users_controller.js

@@ -1,11 +1,11 @@
 import '../augmentations.js';
+import { ADMIN_LIST_HTTP_DEFAULT_SIZE, parseListPage, parseListSize } from '../../pagination.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { adminUserCreateValidator, adminUserUpdateValidator } from '../admin_validators.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { enrichSessionsWithContext } from '../session_context.js';
 import { AdminUsersService } from './admin_users_service.js';
 import { apiError, grantDto, sessionDto, userDto } from './dto.js';
-const PAGE_SIZE = 20;
 /**
  * Lê a config + monta o actor `admin-api` para auditoria. O `actorId` recebe o
  * id NÃO-SENSÍVEL da API key que autenticou (anexado pelo `adminApiGuard` em
@@ -27,16 +27,16 @@ async function ctxBits(ctx) {
  * envelope `{ error: { code, message } }`. Toda escrita audita com `actor: 'admin-api'`.
  */
 export default class ApiUsersController {
-    /** GET /users — listagem paginada com busca por e-mail. */
+    /** GET /users — `{ meta: { page, size, total }, data }`, com busca por e-mail. */
     async index(ctx) {
         const { cfg } = await ctxBits(ctx);
         const search = ctx.request.input('search', '').trim();
-        const page = Math.max(1, Number.parseInt(ctx.request.input('page', '1'), 10) || 1);
-        const limit = Math.max(1, Math.min(100, Number.parseInt(ctx.request.input('limit', String(PAGE_SIZE)), 10) || PAGE_SIZE));
-        const result = await cfg.accountStore.listAccounts({ search, page, limit });
+        const page = parseListPage(ctx.request.input('page'));
+        const size = parseListSize(ctx.request.input('size'), ADMIN_LIST_HTTP_DEFAULT_SIZE);
+        const result = await cfg.accountStore.listAccounts({ search, page, size });
         const users = new AdminUsersService(cfg);
         const data = await Promise.all(result.data.map(async (u) => userDto(u, await users.isDisabled(u.id))));
-        return { data, total: result.total, page, limit };
+        return { meta: { page, size, total: result.total }, data };
     }
     /** GET /users/:id */
     async show(ctx) {

package/build/src/host/admin_console/console_audit_controller.d.ts

@@ -3,15 +3,17 @@ import type { HttpContext } from '@adonisjs/core/http';
 /**
  * Endpoints JSON do log de auditoria do console admin React.
  *
- * GET {prefix}/api/audit?type=&page=&limit=  → listagem paginada
+ * GET {prefix}/api/audit?type=&page=&size=  → `{ meta: { page, size, total }, data }`
  *
  * 404 honesto (`capability_unsupported`) quando o sink não suporta consulta.
  */
 export default class ConsoleAuditController {
     index(ctx: HttpContext): Promise<void | {
+        meta: {
+            page: number;
+            size: number;
+            total: any;
+        };
         data: any;
-        total: any;
-        page: number;
-        limit: number;
     }>;
 }

package/build/src/host/admin_console/console_audit_controller.js

@@ -1,9 +1,10 @@
 import '../augmentations.js';
+import { ADMIN_LIST_HTTP_DEFAULT_SIZE, parseListPage, parseListSize } from '../../pagination.js';
 import { apiError, auditDto } from '../admin_api/dto.js';
 /**
  * Endpoints JSON do log de auditoria do console admin React.
  *
- * GET {prefix}/api/audit?type=&page=&limit=  → listagem paginada
+ * GET {prefix}/api/audit?type=&page=&size=  → `{ meta: { page, size, total }, data }`
  *
  * 404 honesto (`capability_unsupported`) quando o sink não suporta consulta.
  */
@@ -15,11 +16,11 @@ export default class ConsoleAuditController {
         if (!sink || typeof sink.list !== 'function') {
             return ctx.response.notFound(apiError('capability_unsupported', 'O sink de auditoria configurado não suporta consulta.'));
         }
-        const page = Math.max(1, Number.parseInt(ctx.request.input('page', '1'), 10) || 1);
-        const limit = Math.max(1, Math.min(100, Number.parseInt(ctx.request.input('limit', '20'), 10) || 20));
+        const page = parseListPage(ctx.request.input('page'));
+        const size = parseListSize(ctx.request.input('size'), ADMIN_LIST_HTTP_DEFAULT_SIZE);
         const type = ctx.request.input('type')?.trim() || undefined;
         const subject = ctx.request.input('subject')?.trim() || undefined;
-        const result = await sink.list({ page, limit, type, subject });
-        return { data: result.data.map(auditDto), total: result.total, page, limit };
+        const result = await sink.list({ page, size, type, subject });
+        return { meta: { page, size, total: result.total }, data: result.data.map(auditDto) };
     }
 }

package/build/src/host/admin_console/console_overview_controller.js

@@ -1,4 +1,5 @@
 import '../augmentations.js';
+import { LIST_FIRST_PAGE } from '../../pagination.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { computeAdminStats } from '../admin_stats_service.js';
 /**
@@ -17,7 +18,9 @@ export default class ConsoleOverviewController {
         const sessions = new AdminSessionsService(service);
         const stats = await computeAdminStats(cfg, sessions);
         const clientsCount = cfg.clients.length;
-        const recentResult = typeof cfg.audit?.list === 'function' ? await cfg.audit.list({ page: 1, limit: 5 }) : null;
+        const recentResult = typeof cfg.audit?.list === 'function'
+            ? await cfg.audit.list({ page: LIST_FIRST_PAGE, size: 5 })
+            : null;
         return {
             usersTotal: stats.totalUsers,
             activeSessions: stats.activeSessions,

package/build/src/host/admin_console/console_users_controller.d.ts

@@ -3,7 +3,7 @@ import type { HttpContext } from '@adonisjs/core/http';
 /**
  * Endpoints JSON de usuários do console admin React.
  *
- * GET  {prefix}/api/users?search=&page=&perPage=  → lista paginada + roles
+ * GET  {prefix}/api/users?search=&page=&size=  → `{ meta: { page, size, total }, data }`
  * GET  {prefix}/api/users/:id                     → detalhe + sessões + identidades + MFA status
  * POST {prefix}/api/users                         → criar usuário
  * PATCH {prefix}/api/users/:id/roles              → substituir roles globais
@@ -20,10 +20,12 @@ export default class ConsoleUsersController {
     #private;
     /** GET {prefix}/api/users */
     index(ctx: HttpContext): Promise<{
+        meta: {
+            page: number;
+            size: number;
+            total: any;
+        };
         data: any[];
-        total: any;
-        page: number;
-        perPage: number;
     }>;
     /** GET {prefix}/api/users/:id */
     show(ctx: HttpContext): Promise<void | {

package/build/src/host/admin_console/console_users_controller.js

@@ -1,5 +1,6 @@
 import '../augmentations.js';
 import { supportsAccountDeletion, supportsAccountStatus } from '../../accounts/account_store.js';
+import { ADMIN_LIST_HTTP_DEFAULT_SIZE, parseListPage, parseListSize } from '../../pagination.js';
 import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { AdminUsersService } from '../admin_api/admin_users_service.js';
 import { apiError, grantDto, sessionDto, userDto } from '../admin_api/dto.js';
@@ -9,7 +10,6 @@ import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { resolveEffectiveRolesCatalog } from '../runtime_toggles.js';
 import { enrichSessionsWithContext } from '../session_context.js';
 import { requireSudo } from '../sudo_mode.js';
-const PAGE_SIZE = 20;
 /**
  * Gate de sudo (M9) para ações destrutivas do console (delete user, disable,
  * reset-password): exige confirmação de identidade RECENTE do próprio admin
@@ -34,7 +34,7 @@ async function gateSudo(ctx) {
 /**
  * Endpoints JSON de usuários do console admin React.
  *
- * GET  {prefix}/api/users?search=&page=&perPage=  → lista paginada + roles
+ * GET  {prefix}/api/users?search=&page=&size=  → `{ meta: { page, size, total }, data }`
  * GET  {prefix}/api/users/:id                     → detalhe + sessões + identidades + MFA status
  * POST {prefix}/api/users                         → criar usuário
  * PATCH {prefix}/api/users/:id/roles              → substituir roles globais
@@ -53,16 +53,16 @@ export default class ConsoleUsersController {
         const service = await ctx.containerResolver.make('authkit.server');
         const cfg = service.config;
         const search = ctx.request.input('search', '').trim();
-        const page = Math.max(1, Number.parseInt(ctx.request.input('page', '1'), 10) || 1);
-        const perPage = Math.max(1, Math.min(100, Number.parseInt(ctx.request.input('perPage', String(PAGE_SIZE)), 10) || PAGE_SIZE));
+        const page = parseListPage(ctx.request.input('page'));
+        const size = parseListSize(ctx.request.input('size'), ADMIN_LIST_HTTP_DEFAULT_SIZE);
         const result = await cfg.accountStore.listAccounts({
             search,
             page,
-            limit: perPage,
+            size,
         });
         const users = new AdminUsersService(cfg);
         const data = await Promise.all(result.data.map(async (u) => userDto(u, await users.isDisabled(u.id))));
-        return { data, total: result.total, page, perPage };
+        return { meta: { page, size, total: result.total }, data };
     }
     /** GET {prefix}/api/users/:id */
     async show(ctx) {

package/build/src/host/admin_stats_service.js

@@ -1,3 +1,4 @@
+import { ADMIN_LIST_MAX_SIZE, LIST_FIRST_PAGE } from '../pagination.js';
 /** Janela de agregação (dias). */
 const WINDOW_DAYS = 30;
 /**
@@ -19,7 +20,8 @@ const MAX_EVENTS = 10000;
  * nativa e expor um `stats()` próprio no futuro.
  */
 export async function computeAdminStats(cfg, sessionsService) {
-    const totalUsers = (await cfg.accountStore.listAccounts({ page: 1, limit: 1 })).total;
+    const totalUsers = (await cfg.accountStore.listAccounts({ page: LIST_FIRST_PAGE, size: 1 }))
+        .total;
     const activeSessions = sessionsService.canList
         ? await sessionsService.countActiveSessions()
         : null;
@@ -65,10 +67,10 @@ export async function computeAdminStats(cfg, sessionsService) {
  */
 async function loadEventsInWindow(audit, type, windowStartMs) {
     const out = [];
-    const limit = 200;
-    let page = 1;
+    const size = ADMIN_LIST_MAX_SIZE;
+    let page = LIST_FIRST_PAGE;
     while (out.length < MAX_EVENTS) {
-        const result = await audit.list({ type, page, limit });
+        const result = await audit.list({ type, page, size });
         if (result.data.length === 0)
             break;
         let allBelowWindow = true;
@@ -86,7 +88,7 @@ async function loadEventsInWindow(audit, type, windowStartMs) {
         // Página inteira anterior à janela → não há mais nada relevante (ordem desc).
         if (allBelowWindow)
             break;
-        if (result.data.length < limit)
+        if (result.data.length < size)
             break;
         page += 1;
     }

package/build/src/host/assets/webauthn.js

@@ -1,2 +1,2 @@
-function l(e){let t=new Uint8Array(e),r="";for(let n of t)r+=String.fromCharCode(n);return btoa(r).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function h(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=(4-t.length%4)%4,i=t.padEnd(t.length+r,"="),n=atob(i),c=new ArrayBuffer(n.length),f=new Uint8Array(c);for(let a=0;a<n.length;a++)f[a]=n.charCodeAt(a);return c}function p(){return C.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var C={stubThis:e=>e};function R(e){let{id:t}=e;return{...e,id:h(t),transports:e.transports}}function w(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var o=class extends Error{constructor({message:t,code:r,cause:i,name:n}){super(t,{cause:i}),Object.defineProperty(this,"code",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.name=n??i.name,this.code=r}};function I({error:e,options:t}){let{publicKey:r}=t;if(!r)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new o({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(r.authenticatorSelection?.requireResidentKey===!0)return new o({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&r.authenticatorSelection?.userVerification==="required")return new o({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(r.authenticatorSelection?.userVerification==="required")return new o({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else{if(e.name==="InvalidStateError")return new o({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new o({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return r.pubKeyCredParams.filter(n=>n.type==="public-key").length===0?new o({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new o({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(w(i)){if(r.rp.id!==i)return new o({message:`The RP ID "${r.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new o({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(r.user.id.byteLength<1||r.user.id.byteLength>64)return new o({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new o({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var S=class{constructor(){Object.defineProperty(this,"controller",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}createNewAbortSignal(){if(this.controller){let r=new Error("Cancelling existing WebAuthn API call for new one");r.name="AbortError",this.controller.abort(r)}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0}}},A=new S;var x=["cross-platform","platform"];function E(e){if(e&&!(x.indexOf(e)<0))return e}async function N(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:r=!1}=e;if(!p())throw new Error("WebAuthn is not supported in this browser");let i={...t,challenge:h(t.challenge),user:{...t.user,id:h(t.user.id)},excludeCredentials:t.excludeCredentials?.map(R)},n={};r&&(n.mediation="conditional"),n.publicKey=i,n.signal=A.createNewAbortSignal();let c;try{c=await navigator.credentials.create(n)}catch(u){throw I({error:u,options:n})}if(!c)throw new Error("Registration was not completed");let{id:f,rawId:a,response:s,type:y}=c,d;typeof s.getTransports=="function"&&(d=s.getTransports());let g;if(typeof s.getPublicKeyAlgorithm=="function")try{g=s.getPublicKeyAlgorithm()}catch(u){O("getPublicKeyAlgorithm()",u)}let b;if(typeof s.getPublicKey=="function")try{let u=s.getPublicKey();u!==null&&(b=l(u))}catch(u){O("getPublicKey()",u)}let m;if(typeof s.getAuthenticatorData=="function")try{m=l(s.getAuthenticatorData())}catch(u){O("getAuthenticatorData()",u)}return{id:f,rawId:l(a),response:{attestationObject:l(s.attestationObject),clientDataJSON:l(s.clientDataJSON),transports:d,publicKeyAlgorithm:g,publicKey:b,authenticatorData:m},type:y,clientExtensionResults:c.getClientExtensionResults(),authenticatorAttachment:E(c.authenticatorAttachment)}}function O(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
-`,t)}function _(){if(!p())return T.stubThis(new Promise(t=>t(!1)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?T.stubThis(new Promise(t=>t(!1))):T.stubThis(e.isConditionalMediationAvailable())}var T={stubThis:e=>e};function P({error:e,options:t}){let{publicKey:r}=t;if(!r)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new o({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else{if(e.name==="NotAllowedError")return new o({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(w(i)){if(r.rpId!==i)return new o({message:`The RP ID "${r.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new o({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new o({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function D(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:r=!1,verifyBrowserAutofillInput:i=!0}=e;if(!p())throw new Error("WebAuthn is not supported in this browser");let n;t.allowCredentials?.length!==0&&(n=t.allowCredentials?.map(R));let c={...t,challenge:h(t.challenge),allowCredentials:n},f={};if(r){if(!await _())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&i)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');f.mediation="conditional",c.allowCredentials=[]}f.publicKey=c,f.signal=A.createNewAbortSignal();let a;try{a=await navigator.credentials.get(f)}catch(m){throw P({error:m,options:f})}if(!a)throw new Error("Authentication was not completed");let{id:s,rawId:y,response:d,type:g}=a,b;return d.userHandle&&(b=l(d.userHandle)),{id:s,rawId:l(y),response:{authenticatorData:l(d.authenticatorData),clientDataJSON:l(d.clientDataJSON),signature:l(d.signature),userHandle:b},type:g,clientExtensionResults:a.getClientExtensionResults(),authenticatorAttachment:E(a.authenticatorAttachment)}}function v(){return p()?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():new Promise(e=>e(!1))}export{A as WebAuthnAbortService,o as WebAuthnError,p as browserSupportsWebAuthn,_ as browserSupportsWebAuthnAutofill,v as platformAuthenticatorIsAvailable,D as startAuthentication,N as startRegistration};
+function l(e){let t=new Uint8Array(e),r="";for(let i of t)r+=String.fromCharCode(i);return btoa(r).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function b(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=(4-t.length%4)%4,o=t.padEnd(t.length+r,"="),i=atob(o),u=new ArrayBuffer(i.length),f=new Uint8Array(u);for(let a=0;a<i.length;a++)f[a]=i.charCodeAt(a);return u}function d(){return O.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var O={stubThis:e=>e};function y(e){let{id:t}=e;return{...e,id:b(t),transports:e.transports,type:e.type}}function g(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var n=class extends Error{constructor({message:t,code:r,cause:o,name:i}){super(t,{cause:o}),Object.defineProperty(this,"code",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.name=i??o.name,this.code=r}};function P({error:e,options:t}){let{publicKey:r}=t;if(!r)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new n({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(r.authenticatorSelection?.requireResidentKey===!0)return new n({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&r.authenticatorSelection?.userVerification==="required")return new n({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(r.authenticatorSelection?.userVerification==="required")return new n({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else{if(e.name==="InvalidStateError")return new n({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new n({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return r.pubKeyCredParams.filter(i=>i.type==="public-key").length===0?new n({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new n({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(g(o)){if(r.rp.id!==o)return new n({message:`The RP ID "${r.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new n({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(r.user.id.byteLength<1||r.user.id.byteLength>64)return new n({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new n({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var C=class{constructor(){Object.defineProperty(this,"controller",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}createNewAbortSignal(){if(this.controller){let r=new Error("Cancelling existing WebAuthn API call for new one");r.name="AbortError",this.controller.abort(r)}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0}}},A=new C;var D=["cross-platform","platform"];function R(e){if(e&&!(D.indexOf(e)<0))return e}async function N(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:r=!1}=e;if(!d())throw new Error("WebAuthn is not supported in this browser");let o={...t,challenge:b(t.challenge),user:{...t.user,id:b(t.user.id)},excludeCredentials:t.excludeCredentials?.map(y)},i={};r&&(i.mediation="conditional"),i.publicKey=o,i.signal=A.createNewAbortSignal();let u;try{u=await navigator.credentials.create(i)}catch(c){throw P({error:c,options:i})}if(!u)throw new Error("Registration was not completed");let{id:f,rawId:a,response:s,type:E}=u,p;typeof s.getTransports=="function"&&(p=s.getTransports());let w;if(typeof s.getPublicKeyAlgorithm=="function")try{w=s.getPublicKeyAlgorithm()}catch(c){I("getPublicKeyAlgorithm()",c)}let m;if(typeof s.getPublicKey=="function")try{let c=s.getPublicKey();c!==null&&(m=l(c))}catch(c){I("getPublicKey()",c)}let h;if(typeof s.getAuthenticatorData=="function")try{h=l(s.getAuthenticatorData())}catch(c){I("getAuthenticatorData()",c)}return{id:f,rawId:l(a),response:{attestationObject:l(s.attestationObject),clientDataJSON:l(s.clientDataJSON),transports:p,publicKeyAlgorithm:w,publicKey:m,authenticatorData:h},type:E,clientExtensionResults:u.getClientExtensionResults(),authenticatorAttachment:R(u.authenticatorAttachment)}}function I(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
+`,t)}function T(){if(!d())return S.stubThis(new Promise(t=>t(!1)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?S.stubThis(new Promise(t=>t(!1))):S.stubThis(e.isConditionalMediationAvailable())}var S={stubThis:e=>e};function _({error:e,options:t}){let{publicKey:r}=t;if(!r)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new n({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else{if(e.name==="NotAllowedError")return new n({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(g(o)){if(r.rpId!==o)return new n({message:`The RP ID "${r.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new n({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new n({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function U(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:r=!1,verifyBrowserAutofillInput:o=!0}=e;if(!d())throw new Error("WebAuthn is not supported in this browser");let i;t.allowCredentials?.length!==0&&(i=t.allowCredentials?.map(y));let u={...t,challenge:b(t.challenge),allowCredentials:i},f={};if(r){if(!await T())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&o)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');f.mediation="conditional",u.allowCredentials=[]}f.publicKey=u,f.signal=A.createNewAbortSignal();let a;try{a=await navigator.credentials.get(f)}catch(h){throw _({error:h,options:f})}if(!a)throw new Error("Authentication was not completed");let{id:s,rawId:E,response:p,type:w}=a,m;return p.userHandle&&(m=l(p.userHandle)),{id:s,rawId:l(E),response:{authenticatorData:l(p.authenticatorData),clientDataJSON:l(p.clientDataJSON),signature:l(p.signature),userHandle:m},type:w,clientExtensionResults:a.getClientExtensionResults(),authenticatorAttachment:R(a.authenticatorAttachment)}}function x(){return d()?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():new Promise(e=>e(!1))}export{A as WebAuthnAbortService,n as WebAuthnError,d as browserSupportsWebAuthn,T as browserSupportsWebAuthnAutofill,x as platformAuthenticatorIsAvailable,U as startAuthentication,N as startRegistration};

package/build/src/host/login_attempt.js

@@ -1,4 +1,5 @@
 import { supportsAccountStatus, supportsEmailVerificationStatus, supportsPasswordExpiration, } from '../accounts/account_store.js';
+import { LIST_FIRST_PAGE } from '../pagination.js';
 import { createAccountLockout } from './account_lockout.js';
 import { resolveEffectiveAccountExpiration, resolveEffectiveLockout, resolveEffectivePasswordExpiration, resolveEffectiveRequireVerifiedEmail, resolveEffectiveRequireVerifiedEmailFull, } from './runtime_toggles.js';
 /**
@@ -100,8 +101,8 @@ export async function isAccountExpired(audit, accountId, settings, logger) {
         const result = await audit.list({
             type: 'login.success',
             subject: accountId,
-            page: 1,
-            limit: 1,
+            page: LIST_FIRST_PAGE,
+            size: 1,
         });
         if (result.data.length === 0) {
             // Nunca logou → considera ativa (conta nova, não inativa).

package/build/src/host/login_notify.js

@@ -1,3 +1,4 @@
+import { ADMIN_LIST_MAX_SIZE, LIST_FIRST_PAGE } from '../pagination.js';
 import { sendNewDeviceLoginEmail, sendNewLoginEmail } from './default_mailer.js';
 import { isTrustedDeviceValid, TRUSTED_DEVICE_COOKIE } from './trusted_device.js';
 /**
@@ -124,8 +125,8 @@ async function maybeNotifyNewLogin(ctx, cfg, data) {
     const page = await cfg.audit.list({
         type: 'login.success',
         subject: accountId,
-        page: 1,
-        limit: 200,
+        page: LIST_FIRST_PAGE,
+        size: ADMIN_LIST_MAX_SIZE,
     });
     const sameIpCount = page.data.filter((e) => e.ip === ip).length;
     // > 1 significa que já havia um login.success deste IP antes do atual → não é novo.

package/build/src/host/session_context.js

@@ -1,3 +1,4 @@
+import { ADMIN_LIST_MAX_SIZE, LIST_FIRST_PAGE } from '../pagination.js';
 import { resolveGeoSafe } from './geo.js';
 import { parseUserAgent } from './user_agent.js';
 /**
@@ -30,8 +31,8 @@ export async function enrichSessionsWithContext(cfg, accountId, sessions) {
     const page = await cfg.audit.list({
         type: 'login.success',
         subject: accountId,
-        page: 1,
-        limit: 200,
+        page: LIST_FIRST_PAGE,
+        size: ADMIN_LIST_MAX_SIZE,
     });
     const events = page.data.map((e) => ({
         ts: toEpochSeconds(e.createdAt),