@hed-hog/core 0.0.387 → 0.0.393

package/dist/utils/locale-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"locale-context.d.ts","sourceRoot":"","sources":["../../src/utils/locale-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,aAAa,kCAAyC,CAAC;AAEpE,wBAAgB,oBAAoB,IAAI,MAAM,CAG7C"}
+{"version":3,"file":"locale-context.d.ts","sourceRoot":"","sources":["../../src/utils/locale-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC"}

package/dist/utils/locale-context.js

@@ -1,11 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.localeStorage = void 0;
-exports.getLocaleFromContext = getLocaleFromContext;
-const async_hooks_1 = require("async_hooks");
-exports.localeStorage = new async_hooks_1.AsyncLocalStorage();
-function getLocaleFromContext() {
-    const context = exports.localeStorage.getStore();
-    return (context === null || context === void 0 ? void 0 : context.locale) || 'en';
-}
+exports.localeStorage = exports.isLocaleDetectedFromContext = exports.getLocaleFromContext = void 0;
+/**
+ * O contexto de locale mora em `@hed-hog/api-locale`, junto do middleware que o
+ * popula. Este arquivo continua existindo como reexport porque `@hed-hog/core`
+ * e a fachada que as outras libraries importam (`operations`, validators).
+ *
+ * Manter uma copia do `AsyncLocalStorage` aqui criaria DOIS storages: o
+ * middleware escreveria num e `getLocaleFromContext()` leria o outro, sempre
+ * vazio.
+ */
+var api_locale_1 = require("@hed-hog/api-locale");
+Object.defineProperty(exports, "getLocaleFromContext", { enumerable: true, get: function () { return api_locale_1.getLocaleFromContext; } });
+Object.defineProperty(exports, "isLocaleDetectedFromContext", { enumerable: true, get: function () { return api_locale_1.isLocaleDetectedFromContext; } });
+Object.defineProperty(exports, "localeStorage", { enumerable: true, get: function () { return api_locale_1.localeStorage; } });
 //# sourceMappingURL=locale-context.js.map

package/dist/utils/locale-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"locale-context.js","sourceRoot":"","sources":["../../src/utils/locale-context.ts"],"names":[],"mappings":";;;AAQA,oDAGC;AAXD,6CAAgD;AAMnC,QAAA,aAAa,GAAG,IAAI,+BAAiB,EAAiB,CAAC;AAEpE,SAAgB,oBAAoB;IAClC,MAAM,OAAO,GAAG,qBAAa,CAAC,QAAQ,EAAE,CAAC;IACzC,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,IAAI,CAAC;AACjC,CAAC"}
+{"version":3,"file":"locale-context.js","sourceRoot":"","sources":["../../src/utils/locale-context.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACH,kDAK6B;AAJ3B,kHAAA,oBAAoB,OAAA;AACpB,yHAAA,2BAA2B,OAAA;AAC3B,2GAAA,aAAa,OAAA"}

package/dist/utils/security-event-vars.d.ts

@@ -0,0 +1,56 @@
+export interface SecurityEventContext {
+    ipAddress?: string | null;
+    userAgent?: string | null;
+    /** Codigo da tabela `locale` ('pt' | 'en' | 'es'), como chega do LocaleMiddleware. */
+    locale?: string | null;
+    /** Momento do evento. Default: agora. */
+    at?: Date;
+    /** Fuso quando o geoip nao resolve. Default: DEFAULT_TIME_ZONE. */
+    fallbackTimeZone?: string;
+}
+/**
+ * Variaveis prontas para os templates de e-mail de seguranca
+ * (`auth-login-new-device`, `auth-change-password-notification`).
+ *
+ * Todo campo e string, nunca null: `sendTemplatedMail` recebe um
+ * Record<string, string> e os templates usam `{{#if}}` para esconder a linha
+ * do cartao — string vazia e o que faz a linha sumir.
+ */
+export interface SecurityEventVars {
+    ipAddress: string;
+    /** UA cru; o template so imprime quando nao conseguiu identificar navegador nem SO. */
+    userAgent: string;
+    /** "Chrome 151" */
+    browser: string;
+    /** "Windows 10" */
+    os: string;
+    /** "Sao Paulo, Brasil" */
+    location: string;
+    /** "🇧🇷" */
+    countryFlag: string;
+    /** "8 de agosto de 2026 as 12:04" */
+    datetime: string;
+}
+/**
+ * Par de regional indicators para um ISO 3166-1 alpha-2.
+ *
+ * Mesma conta do countryFlag() em apps/admin/src/components/browser-os-icon.tsx,
+ * reimplementada aqui porque aquele arquivo e 'use client' e vive no app.
+ *
+ * Emoji e a unica forma de bandeira que renderiza nos tres clientes que
+ * importam: o Gmail remove <svg> inline e bloqueia data: URI, e o Outlook
+ * desktop nao renderiza SVG de jeito nenhum.
+ */
+export declare function countryFlagEmoji(code?: string | null): string;
+export declare function formatEventDateTime(at: Date, locale?: string | null, timeZone?: string | null): string;
+/**
+ * Traduz IP + User-Agent crus nas variaveis que o template de seguranca
+ * imprime, resolvendo geolocalizacao e navegador/SO pelos utilitarios que o
+ * access-log ja usa.
+ *
+ * O que nao foi possivel resolver volta como string vazia, e nao como um
+ * "Unknown" literal: o template esconde a linha inteira em vez de anunciar
+ * que o sistema nao sabe.
+ */
+export declare function buildSecurityEventVars(ctx: SecurityEventContext): SecurityEventVars;
+//# sourceMappingURL=security-event-vars.d.ts.map

package/dist/utils/security-event-vars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-event-vars.d.ts","sourceRoot":"","sources":["../../src/utils/security-event-vars.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,yCAAyC;IACzC,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAO7D;AAwCD,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,IAAI,EACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAMR;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,oBAAoB,GACxB,iBAAiB,CA2BnB"}

package/dist/utils/security-event-vars.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.countryFlagEmoji = countryFlagEmoji;
+exports.formatEventDateTime = formatEventDateTime;
+exports.buildSecurityEventVars = buildSecurityEventVars;
+const geo_ip_1 = require("./geo-ip");
+const user_agent_1 = require("./user-agent");
+/**
+ * Fuso usado quando o geoip nao resolve (IP privado, base sem entrada). Sem
+ * ele o horario sairia em UTC, que e o pior dos mundos num alerta de seguranca:
+ * parece certo e esta tres horas errado.
+ */
+const DEFAULT_TIME_ZONE = 'America/Sao_Paulo';
+/**
+ * Par de regional indicators para um ISO 3166-1 alpha-2.
+ *
+ * Mesma conta do countryFlag() em apps/admin/src/components/browser-os-icon.tsx,
+ * reimplementada aqui porque aquele arquivo e 'use client' e vive no app.
+ *
+ * Emoji e a unica forma de bandeira que renderiza nos tres clientes que
+ * importam: o Gmail remove <svg> inline e bloqueia data: URI, e o Outlook
+ * desktop nao renderiza SVG de jeito nenhum.
+ */
+function countryFlagEmoji(code) {
+    const value = (code !== null && code !== void 0 ? code : '').trim().toUpperCase();
+    if (!/^[A-Z]{2}$/.test(value))
+        return '';
+    return [...value]
+        .map((c) => String.fromCodePoint(0x1f1e6 + c.charCodeAt(0) - 65))
+        .join('');
+}
+/**
+ * `Intl` lanca RangeError com tag malformada, e a tag vem da tabela `locale`,
+ * que nao tem allowlist. Valida uma vez aqui em vez de espalhar try/catch.
+ */
+function safeLocale(locale) {
+    const value = (locale !== null && locale !== void 0 ? locale : '').trim();
+    if (!value)
+        return 'en';
+    try {
+        new Intl.DateTimeFormat(value);
+        return value;
+    }
+    catch (_a) {
+        return 'en';
+    }
+}
+/** Idem para o fuso, que vem da base do geoip-lite. */
+function safeTimeZone(timeZone) {
+    const value = (timeZone !== null && timeZone !== void 0 ? timeZone : '').trim();
+    if (!value)
+        return DEFAULT_TIME_ZONE;
+    try {
+        new Intl.DateTimeFormat('en', { timeZone: value });
+        return value;
+    }
+    catch (_a) {
+        return DEFAULT_TIME_ZONE;
+    }
+}
+function countryName(code, locale) {
+    var _a;
+    try {
+        return (_a = new Intl.DisplayNames([locale], { type: 'region' }).of(code)) !== null && _a !== void 0 ? _a : code;
+    }
+    catch (_b) {
+        // Fica o ISO2, que ja e legivel o bastante para o destinatario.
+        return code;
+    }
+}
+function formatEventDateTime(at, locale, timeZone) {
+    return new Intl.DateTimeFormat(safeLocale(locale), {
+        dateStyle: 'long',
+        timeStyle: 'short',
+        timeZone: safeTimeZone(timeZone),
+    }).format(at);
+}
+/**
+ * Traduz IP + User-Agent crus nas variaveis que o template de seguranca
+ * imprime, resolvendo geolocalizacao e navegador/SO pelos utilitarios que o
+ * access-log ja usa.
+ *
+ * O que nao foi possivel resolver volta como string vazia, e nao como um
+ * "Unknown" literal: o template esconde a linha inteira em vez de anunciar
+ * que o sistema nao sabe.
+ */
+function buildSecurityEventVars(ctx) {
+    var _a, _b, _c, _d, _e;
+    const at = (_a = ctx.at) !== null && _a !== void 0 ? _a : new Date();
+    const locale = safeLocale(ctx.locale);
+    const geo = (0, geo_ip_1.lookupGeo)(ctx.ipAddress);
+    const ua = (0, user_agent_1.parseUserAgent)(ctx.userAgent);
+    const country = (geo === null || geo === void 0 ? void 0 : geo.country) ? countryName(geo.country, locale) : '';
+    // `region` fica de fora: o geoip devolve o codigo curto ('SP'), que nao
+    // localiza e so polui a linha.
+    const location = [geo === null || geo === void 0 ? void 0 : geo.city, country].filter(Boolean).join(', ');
+    // So o major: "151" em vez de "151.0.0.0".
+    const browserVersion = ((_b = ua === null || ua === void 0 ? void 0 : ua.browser_version) !== null && _b !== void 0 ? _b : '').split('.')[0];
+    return {
+        ipAddress: ((_c = ctx.ipAddress) !== null && _c !== void 0 ? _c : '').trim(),
+        userAgent: ((_d = ctx.userAgent) !== null && _d !== void 0 ? _d : '').trim(),
+        browser: [ua === null || ua === void 0 ? void 0 : ua.browser_name, browserVersion].filter(Boolean).join(' '),
+        os: [ua === null || ua === void 0 ? void 0 : ua.os_name, ua === null || ua === void 0 ? void 0 : ua.os_version].filter(Boolean).join(' '),
+        location,
+        countryFlag: countryFlagEmoji(geo === null || geo === void 0 ? void 0 : geo.country),
+        datetime: formatEventDateTime(at, locale, (_e = geo === null || geo === void 0 ? void 0 : geo.timezone) !== null && _e !== void 0 ? _e : ctx.fallbackTimeZone),
+    };
+}
+//# sourceMappingURL=security-event-vars.js.map

package/dist/utils/security-event-vars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-event-vars.js","sourceRoot":"","sources":["../../src/utils/security-event-vars.ts"],"names":[],"mappings":";;AAuDA,4CAOC;AAwCD,kDAUC;AAWD,wDA6BC;AAxJD,qCAAqC;AACrC,6CAA8C;AAE9C;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAqC9C;;;;;;;;;GASG;AACH,SAAgB,gBAAgB,CAAC,IAAoB;IACnD,MAAM,KAAK,GAAG,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,OAAO,CAAC,GAAG,KAAK,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;SAChE,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAsB;IACxC,MAAM,KAAK,GAAG,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,YAAY,CAAC,QAAwB;IAC5C,MAAM,KAAK,GAAG,CAAC,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,iBAAiB,CAAC;IAErC,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,iBAAiB,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;;IAC/C,IAAI,CAAC;QACH,OAAO,MAAA,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;IAC9E,CAAC;IAAC,WAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CACjC,EAAQ,EACR,MAAsB,EACtB,QAAwB;IAExB,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACjD,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;KACjC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CACpC,GAAyB;;IAEzB,MAAM,EAAE,GAAG,MAAA,GAAG,CAAC,EAAE,mCAAI,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,IAAA,2BAAc,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEzC,MAAM,OAAO,GAAG,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,EAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjE,2CAA2C;IAC3C,MAAM,cAAc,GAAG,CAAC,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,eAAe,mCAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,OAAO;QACL,SAAS,EAAE,CAAC,MAAA,GAAG,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACvC,SAAS,EAAE,CAAC,MAAA,GAAG,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACvC,OAAO,EAAE,CAAC,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,YAAY,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACrE,EAAE,EAAE,CAAC,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,OAAO,EAAE,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3D,QAAQ;QACR,WAAW,EAAE,gBAAgB,CAAC,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,CAAC;QAC3C,QAAQ,EAAE,mBAAmB,CAC3B,EAAE,EACF,MAAM,EACN,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,QAAQ,mCAAI,GAAG,CAAC,gBAAgB,CACtC;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/user-agent.d.ts

@@ -0,0 +1,19 @@
+export interface UserAgentInfo {
+    browser_name: string | null;
+    browser_version: string | null;
+    os_name: string | null;
+    os_version: string | null;
+    /** `mobile` | `tablet` | `desktop`. */
+    device_type: string | null;
+}
+/**
+ * Parses a raw User-Agent into the same four fields the access log already
+ * exposes, so the admin's BrowserIcon/OsIcon components match by name without
+ * any translation layer.
+ *
+ * Returns null when there is nothing to parse or when neither the browser nor
+ * the OS could be identified — the caller then skips the row entirely instead
+ * of rendering a line full of dashes.
+ */
+export declare function parseUserAgent(userAgent?: string | null): UserAgentInfo | null;
+//# sourceMappingURL=user-agent.d.ts.map

package/dist/utils/user-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent.d.ts","sourceRoot":"","sources":["../../src/utils/user-agent.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uCAAuC;IACvC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAyB9E"}

package/dist/utils/user-agent.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseUserAgent = parseUserAgent;
+const ua_parser_js_1 = require("ua-parser-js");
+/**
+ * Parses a raw User-Agent into the same four fields the access log already
+ * exposes, so the admin's BrowserIcon/OsIcon components match by name without
+ * any translation layer.
+ *
+ * Returns null when there is nothing to parse or when neither the browser nor
+ * the OS could be identified — the caller then skips the row entirely instead
+ * of rendering a line full of dashes.
+ */
+function parseUserAgent(userAgent) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+    const value = (userAgent !== null && userAgent !== void 0 ? userAgent : '').trim();
+    if (!value)
+        return null;
+    const result = new ua_parser_js_1.UAParser(value).getResult();
+    const browserName = (_b = (_a = result.browser) === null || _a === void 0 ? void 0 : _a.name) !== null && _b !== void 0 ? _b : null;
+    const osName = (_d = (_c = result.os) === null || _c === void 0 ? void 0 : _c.name) !== null && _d !== void 0 ? _d : null;
+    // O ua-parser não devolve `device.type` para desktop — a ausência É o desktop.
+    // Mas isso só vale quando ele reconheceu *algo*: assumir "desktop" diante de
+    // um User-Agent que não identificou nada é o que fazia um app de celular
+    // aparecer como computador.
+    const deviceType = (_f = (_e = result.device) === null || _e === void 0 ? void 0 : _e.type) !== null && _f !== void 0 ? _f : (browserName || osName ? 'desktop' : null);
+    const info = {
+        browser_name: browserName,
+        browser_version: (_h = (_g = result.browser) === null || _g === void 0 ? void 0 : _g.version) !== null && _h !== void 0 ? _h : null,
+        os_name: osName,
+        os_version: (_k = (_j = result.os) === null || _j === void 0 ? void 0 : _j.version) !== null && _k !== void 0 ? _k : null,
+        device_type: deviceType,
+    };
+    return info.browser_name || info.os_name ? info : null;
+}
+//# sourceMappingURL=user-agent.js.map

package/dist/utils/user-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent.js","sourceRoot":"","sources":["../../src/utils/user-agent.ts"],"names":[],"mappings":";;AAoBA,wCAyBC;AA7CD,+CAAwC;AAWxC;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAAC,SAAyB;;IACtD,MAAM,KAAK,GAAG,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,MAAM,GAAG,IAAI,uBAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;IAE/C,MAAM,WAAW,GAAG,MAAA,MAAA,MAAM,CAAC,OAAO,0CAAE,IAAI,mCAAI,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,MAAA,MAAA,MAAM,CAAC,EAAE,0CAAE,IAAI,mCAAI,IAAI,CAAC;IAEvC,+EAA+E;IAC/E,6EAA6E;IAC7E,yEAAyE;IACzE,4BAA4B;IAC5B,MAAM,UAAU,GACd,MAAA,MAAA,MAAM,CAAC,MAAM,0CAAE,IAAI,mCAAI,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEpE,MAAM,IAAI,GAAkB;QAC1B,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,MAAA,MAAA,MAAM,CAAC,OAAO,0CAAE,OAAO,mCAAI,IAAI;QAChD,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,MAAA,MAAA,MAAM,CAAC,EAAE,0CAAE,OAAO,mCAAI,IAAI;QACtC,WAAW,EAAE,UAAU;KACxB,CAAC;IAEF,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC"}

package/dist/validators/is-strong-password-with-settings.validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"is-strong-password-with-settings.validator.d.ts","sourceRoot":"","sources":["../../src/validators/is-strong-password-with-settings.validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,mBAAmB,EACnB,iBAAiB,EAEjB,4BAA4B,EAC7B,MAAM,iBAAiB,CAAC;AAIzB,qBAEa,sCACX,YAAW,4BAA4B;IAEvC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAa;IAEvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAyD7E,cAAc,IAAI,MAAM;CAsCzB;AAED,wBAAgB,4BAA4B,CAC1C,iBAAiB,CAAC,EAAE,iBAAiB,IAEpB,QAAQ,MAAM,EAAE,cAAc,MAAM,UAStD"}
+{"version":3,"file":"is-strong-password-with-settings.validator.d.ts","sourceRoot":"","sources":["../../src/validators/is-strong-password-with-settings.validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,mBAAmB,EACnB,iBAAiB,EAEjB,4BAA4B,EAC7B,MAAM,iBAAiB,CAAC;AAIzB,qBAEa,sCACX,YAAW,4BAA4B;IAEvC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAa;IAEvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqE7E,cAAc,IAAI,MAAM;CAsCzB;AAED,wBAAgB,4BAA4B,CAC1C,iBAAiB,CAAC,EAAE,iBAAiB,IAEpB,QAAQ,MAAM,EAAE,cAAc,MAAM,UAStD"}

package/dist/validators/is-strong-password-with-settings.validator.js

@@ -59,6 +59,17 @@ let IsStrongPasswordWithSettingsConstraint = class IsStrongPasswordWithSettingsC
                 this.failedRule = 'password.minSymbols';
                 return false;
             }
+            // Senha vazada por ultimo: e a checagem mais cara (bate no banco) e nao faz
+            // sentido pagar por ela se a senha ja falhou na politica. Aqui a senha em
+            // claro passa pelo servidor de qualquer forma; a do cofre nunca passa, e por
+            // isso o cofre usa o bloom filter no cliente em vez deste caminho.
+            if (this.settings.setting['password-block-leaked'] !== false) {
+                const leakedService = service_locator_1.ValidatorServiceLocator.getLeakedPasswordService();
+                if (leakedService && (await leakedService.isLeaked(password))) {
+                    this.failedRule = 'password.leaked';
+                    return false;
+                }
+            }
             return true;
         }
         catch (error) {

package/dist/validators/is-strong-password-with-settings.validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"is-strong-password-with-settings.validator.js","sourceRoot":"","sources":["../../src/validators/is-strong-password-with-settings.validator.ts"],"names":[],"mappings":";;;;;;;;;AAqHA,oEAYC;AAjID,oDAAoD;AACpD,2CAA4C;AAC5C,qDAMyB;AACzB,4DAA+D;AAC/D,uDAA4D;AAIrD,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;IAA5C;QAGG,eAAU,GAAkB,IAAI,CAAC;QACjC,aAAQ,GAAQ,IAAI,CAAC;IAiG/B,CAAC;IA/FC,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,IAAyB;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,yCAAuB,CAAC,iBAAiB,EAAE,CAAC;YACnE,IAAI,CAAC,QAAQ,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAEtE,kBAAkB;YAClB,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,UAAU,GAAG,oBAAoB,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,wBAAwB;YACxB,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1D,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1D,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACxD,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAE/D,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,GAAG,qBAAqB,CAAC;gBACxC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,GAAG,qBAAqB,CAAC;gBACxC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,wEAAwE,EAAE,KAAK,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC,CAAC,oCAAoC;QACnD,CAAC;IACH,CAAC;IAED,cAAc;QACZ,MAAM,MAAM,GAAG,IAAA,qCAAoB,GAAE,CAAC;QAEtC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAEtE,MAAM,YAAY,GAA2B;gBAC3C,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC;gBAChC,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC;gBACtC,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC;gBACtC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC;gBAClC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC;aACnC,CAAC;YAEF,IAAI,OAAO,GAAG,IAAA,0BAAa,EACzB,IAAI,CAAC,UAAU,EACf,MAAM,EACN,mDAAmD,CACpD,CAAC;YAEF,uBAAuB;YACvB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC5D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,IAAA,0BAAa,EAClB,uBAAuB,EACvB,MAAM,EACN,8EAA8E,CAC/E,CAAC;IACJ,CAAC;CACF,CAAA;AArGY,wFAAsC;iDAAtC,sCAAsC;IAFlD,IAAA,qCAAmB,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,mBAAU,GAAE;GACA,sCAAsC,CAqGlD;AAED,SAAgB,4BAA4B,CAC1C,iBAAqC;IAErC,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,sCAAsC;SAClD,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"is-strong-password-with-settings.validator.js","sourceRoot":"","sources":["../../src/validators/is-strong-password-with-settings.validator.ts"],"names":[],"mappings":";;;;;;;;;AAiIA,oEAYC;AA7ID,oDAAoD;AACpD,2CAA4C;AAC5C,qDAMyB;AACzB,4DAA+D;AAC/D,uDAA4D;AAIrD,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;IAA5C;QAGG,eAAU,GAAkB,IAAI,CAAC;QACjC,aAAQ,GAAQ,IAAI,CAAC;IA6G/B,CAAC;IA3GC,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,IAAyB;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,yCAAuB,CAAC,iBAAiB,EAAE,CAAC;YACnE,IAAI,CAAC,QAAQ,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAEtE,kBAAkB;YAClB,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,UAAU,GAAG,oBAAoB,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,wBAAwB;YACxB,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1D,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1D,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACxD,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAE/D,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,GAAG,qBAAqB,CAAC;gBACxC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,GAAG,qBAAqB,CAAC;gBACxC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,4EAA4E;YAC5E,0EAA0E;YAC1E,6EAA6E;YAC7E,mEAAmE;YACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC7D,MAAM,aAAa,GAAG,yCAAuB,CAAC,wBAAwB,EAAE,CAAC;gBACzE,IAAI,aAAa,IAAI,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;oBAC9D,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC;oBACpC,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,wEAAwE,EAAE,KAAK,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC,CAAC,oCAAoC;QACnD,CAAC;IACH,CAAC;IAED,cAAc;QACZ,MAAM,MAAM,GAAG,IAAA,qCAAoB,GAAE,CAAC;QAEtC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAEtE,MAAM,YAAY,GAA2B;gBAC3C,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC;gBAChC,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC;gBACtC,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC;gBACtC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC;gBAClC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC;aACnC,CAAC;YAEF,IAAI,OAAO,GAAG,IAAA,0BAAa,EACzB,IAAI,CAAC,UAAU,EACf,MAAM,EACN,mDAAmD,CACpD,CAAC;YAEF,uBAAuB;YACvB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC5D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,IAAA,0BAAa,EAClB,uBAAuB,EACvB,MAAM,EACN,8EAA8E,CAC/E,CAAC;IACJ,CAAC;CACF,CAAA;AAjHY,wFAAsC;iDAAtC,sCAAsC;IAFlD,IAAA,qCAAmB,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,mBAAU,GAAE;GACA,sCAAsC,CAiHlD;AAED,SAAgB,4BAA4B,CAC1C,iBAAqC;IAErC,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,sCAAsC;SAClD,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/validators/service-locator.d.ts

@@ -1,3 +1,4 @@
+import { LeakedPasswordService } from '../leaked-password/leaked-password.service';
 import { SettingService } from '../setting/setting.service';
 /**
  * Service locator for validators that can't use dependency injection
@@ -5,7 +6,15 @@ import { SettingService } from '../setting/setting.service';
  */
 export declare class ValidatorServiceLocator {
     private static settingService;
+    private static leakedPasswordService;
     static setSettingService(service: SettingService): void;
     static getSettingService(): SettingService;
+    static setLeakedPasswordService(service: LeakedPasswordService): void;
+    /**
+     * Diferente do SettingService, devolve null em vez de lançar: a checagem de
+     * senha vazada é uma camada extra, e um bootstrap sem ela deve deixar a
+     * validação de política seguir funcionando.
+     */
+    static getLeakedPasswordService(): LeakedPasswordService | null;
 }
 //# sourceMappingURL=service-locator.d.ts.map

package/dist/validators/service-locator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-locator.d.ts","sourceRoot":"","sources":["../../src/validators/service-locator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D;;;GAGG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAiB;IAE9C,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAIvD,MAAM,CAAC,iBAAiB,IAAI,cAAc;CAM3C"}
+{"version":3,"file":"service-locator.d.ts","sourceRoot":"","sources":["../../src/validators/service-locator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D;;;GAGG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAiB;IAC9C,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAwB;IAE5D,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAIvD,MAAM,CAAC,iBAAiB,IAAI,cAAc;IAO1C,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAIrE;;;;OAIG;IACH,MAAM,CAAC,wBAAwB,IAAI,qBAAqB,GAAG,IAAI;CAGhE"}

package/dist/validators/service-locator.js

@@ -15,6 +15,18 @@ class ValidatorServiceLocator {
         }
         return this.settingService;
     }
+    static setLeakedPasswordService(service) {
+        this.leakedPasswordService = service;
+    }
+    /**
+     * Diferente do SettingService, devolve null em vez de lançar: a checagem de
+     * senha vazada é uma camada extra, e um bootstrap sem ela deve deixar a
+     * validação de política seguir funcionando.
+     */
+    static getLeakedPasswordService() {
+        var _a;
+        return (_a = this.leakedPasswordService) !== null && _a !== void 0 ? _a : null;
+    }
 }
 exports.ValidatorServiceLocator = ValidatorServiceLocator;
 //# sourceMappingURL=service-locator.js.map

package/dist/validators/service-locator.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-locator.js","sourceRoot":"","sources":["../../src/validators/service-locator.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACH,MAAa,uBAAuB;IAGlC,MAAM,CAAC,iBAAiB,CAAC,OAAuB;QAC9C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,iBAAiB;QACtB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AAbD,0DAaC"}
+{"version":3,"file":"service-locator.js","sourceRoot":"","sources":["../../src/validators/service-locator.ts"],"names":[],"mappings":";;;AAGA;;;GAGG;AACH,MAAa,uBAAuB;IAIlC,MAAM,CAAC,iBAAiB,CAAC,OAAuB;QAC9C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,iBAAiB;QACtB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,wBAAwB,CAAC,OAA8B;QAC5D,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,wBAAwB;;QAC7B,OAAO,MAAA,IAAI,CAAC,qBAAqB,mCAAI,IAAI,CAAC;IAC5C,CAAC;CACF;AA3BD,0DA2BC"}

package/dist/webhook-integration/webhook-integration.service.d.ts

@@ -108,6 +108,11 @@ export declare class WebhookIntegrationService {
      * o adaptador faz a própria autenticação (a Meta, por exemplo, assina com HMAC).
      */
     executeProtocol(uuid: string, method: 'GET' | 'POST', body: any, query: any, headers: any, req: Request): Promise<WebhookProtocolResponse | null>;
+    /**
+     * O log e observabilidade: falhar ao grava-lo nao pode derrubar a entrega, ou
+     * um problema de escrita viraria retentativa infinita no provedor.
+     */
+    private safeCreateCallLog;
     executePublic(uuid: string, body: any, headers: any, req: Request): Promise<{
         success: boolean;
         actions: any[];

package/dist/webhook-integration/webhook-integration.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-integration.service.d.ts","sourceRoot":"","sources":["../../src/webhook-integration/webhook-integration.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAS5C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAO5C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACH,sBAAsB,EACtB,sBAAsB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EACH,uBAAuB,EAEvB,uBAAuB,EAC1B,MAAM,6BAA6B,CAAC;AA2BrC,KAAK,oBAAoB,GACrB,sBAAsB,GACtB,sBAAsB,GACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5B,qBACa,yBAAyB;IAyClC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAhDnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8C;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAmCzB;gBAGQ,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,iBAAiB,EAC7B,IAAI,EAAE,WAAW,EACjB,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,WAAW,EAC5B,cAAc,EAAE,cAAc,EAC9B,eAAe,EAAE,kBAAkB,EACnC,gBAAgB,EAAE,gBAAgB,EAClC,gBAAgB,EAAE,uBAAuB;IAG5D,OAAO,KAAK,YAAY,GAEvB;IAED,OAAO,KAAK,OAAO,GAElB;IAED,OAAO,KAAK,IAAI,GAEf;IAED,OAAO,KAAK,UAAU,GAErB;IAEK,IAAI,CAAC,gBAAgB,EAAE,aAAa;;;;;;;;;IAyBpC,GAAG,CAAC,EAAE,EAAE,MAAM;IAoBd,MAAM,CAAC,IAAI,EAAE,GAAG;IAsBhB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;IA0B5B,MAAM,CAAC,IAAI,EAAE,SAAS;IAYtB,cAAc,CAAC,EAAE,EAAE,MAAM;IAUzB,eAAe,CAAC,EAAE,EAAE,MAAM;IAiB1B,SAAS,CAAC,EAAE,EAAE,MAAM;YAgEZ,kBAAkB;YAYlB,qBAAqB;YASrB,aAAa;YAab,cAAc;IAatB,WAAW,CAAC,aAAa,EAAE,MAAM;IAQjC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB;IAa9D,YAAY,CAChB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,oBAAoB;IAetB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS;IAgBpD,iBAAiB,CAAC,MAAM,EAAE,MAAM;IAchC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;;;;IAI/C,kBAAkB;IAelB,eAAe;;;;;;IASf,QAAQ,CACZ,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,aAAa,EAC/B,IAAI,GAAE,KAAK,GAAG,MAAe;;;;;;;;;IAgE/B,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ;IAqB/C;;;;;;;;OAQG;IACG,wBAAwB,CAAC,KAAK,EAAE;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB;IAgCD,oEAAoE;YACtD,mBAAmB;IAYjC;;;;;;;;;OASG;IACG,eAAe,CACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,KAAK,GAAG,MAAM,EACtB,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,GAAG,EACZ,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAgDpC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO;;;;IAmEvE;;;;OAIG;YACW,gBAAgB;IAkJ9B;;;;;OAKG;IACG,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;;YA4CtC,aAAa;YAkCb,kBAAkB;YAyElB,qBAAqB;YA2ErB,wBAAwB;YA+ExB,wBAAwB;YAmExB,uBAAuB;IAwDrC,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,2BAA2B;IA4EnC,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,kBAAkB;IAmD1B,OAAO,CAAC,qBAAqB;YA0Bf,aAAa;YAmCb,gBAAgB;IAsB9B,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,yBAAyB;IAQjC,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,WAAW;YASL,YAAY;YAiBZ,mBAAmB;IAajC,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,eAAe;IA+DvB,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,cAAc;CAYvB"}
+{"version":3,"file":"webhook-integration.service.d.ts","sourceRoot":"","sources":["../../src/webhook-integration/webhook-integration.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAS5C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAO5C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACH,sBAAsB,EACtB,sBAAsB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EACH,uBAAuB,EAEvB,uBAAuB,EAC1B,MAAM,6BAA6B,CAAC;AA2BrC,KAAK,oBAAoB,GACrB,sBAAsB,GACtB,sBAAsB,GACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5B,qBACa,yBAAyB;IAyClC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAhDnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8C;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAmCzB;gBAGQ,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,iBAAiB,EAC7B,IAAI,EAAE,WAAW,EACjB,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,WAAW,EAC5B,cAAc,EAAE,cAAc,EAC9B,eAAe,EAAE,kBAAkB,EACnC,gBAAgB,EAAE,gBAAgB,EAClC,gBAAgB,EAAE,uBAAuB;IAG5D,OAAO,KAAK,YAAY,GAEvB;IAED,OAAO,KAAK,OAAO,GAElB;IAED,OAAO,KAAK,IAAI,GAEf;IAED,OAAO,KAAK,UAAU,GAErB;IAEK,IAAI,CAAC,gBAAgB,EAAE,aAAa;;;;;;;;;IAyBpC,GAAG,CAAC,EAAE,EAAE,MAAM;IAoBd,MAAM,CAAC,IAAI,EAAE,GAAG;IAsBhB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;IA0B5B,MAAM,CAAC,IAAI,EAAE,SAAS;IAYtB,cAAc,CAAC,EAAE,EAAE,MAAM;IAUzB,eAAe,CAAC,EAAE,EAAE,MAAM;IAiB1B,SAAS,CAAC,EAAE,EAAE,MAAM;YAgEZ,kBAAkB;YAYlB,qBAAqB;YASrB,aAAa;YAab,cAAc;IAatB,WAAW,CAAC,aAAa,EAAE,MAAM;IAQjC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB;IAa9D,YAAY,CAChB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,oBAAoB;IAetB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS;IAgBpD,iBAAiB,CAAC,MAAM,EAAE,MAAM;IAchC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;;;;IAI/C,kBAAkB;IAelB,eAAe;;;;;;IASf,QAAQ,CACZ,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,aAAa,EAC/B,IAAI,GAAE,KAAK,GAAG,MAAe;;;;;;;;;IAgE/B,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ;IAqB/C;;;;;;;;OAQG;IACG,wBAAwB,CAAC,KAAK,EAAE;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB;IAgCD,oEAAoE;YACtD,mBAAmB;IAYjC;;;;;;;;;OASG;IACG,eAAe,CACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,KAAK,GAAG,MAAM,EACtB,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,GAAG,EACZ,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAmF1C;;;OAGG;YACW,iBAAiB;IAezB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO;;;;IAmEvE;;;;OAIG;YACW,gBAAgB;IAkJ9B;;;;;OAKG;IACG,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;;YA4CtC,aAAa;YAkCb,kBAAkB;YAyElB,qBAAqB;YA2ErB,wBAAwB;YA+ExB,wBAAwB;YAmExB,uBAAuB;IAwDrC,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,2BAA2B;IA4EnC,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,kBAAkB;IAmD1B,OAAO,CAAC,qBAAqB;YA0Bf,aAAa;YAmCb,gBAAgB;IAsB9B,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,yBAAyB;IAQjC,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,WAAW;YASL,YAAY;YAiBZ,mBAAmB;IAajC,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,eAAe;IA+DvB,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,cAAc;CAYvB"}

package/dist/webhook-integration/webhook-integration.service.js

@@ -482,7 +482,7 @@ let WebhookIntegrationService = WebhookIntegrationService_1 = class WebhookInteg
      * o adaptador faz a própria autenticação (a Meta, por exemplo, assina com HMAC).
      */
     async executeProtocol(uuid, method, body, query, headers, req) {
-        var _a;
+        var _a, _b;
         const integration = await this.integrations.findUnique({
             where: { public_uuid: uuid },
             select: {
@@ -519,9 +519,55 @@ let WebhookIntegrationService = WebhookIntegrationService_1 = class WebhookInteg
             remoteIp: this.getRemoteIp(req),
             req,
         };
-        return method === 'GET'
-            ? adapter.verify(request)
-            : adapter.handle(request);
+        // Sem isto, webhook de protocolo nao deixa rastro nenhum: o adaptador se
+        // autentica sozinho e devolve 403 mudo, entao uma integracao configurada
+        // errado fica indistinguivel de provedor que nunca chamou. A aba de Logs
+        // existe justamente para responder essa pergunta.
+        const startedAt = Date.now();
+        let result;
+        try {
+            result =
+                method === 'GET' ? await adapter.verify(request) : await adapter.handle(request);
+        }
+        catch (error) {
+            await this.safeCreateCallLog({
+                integration,
+                uuid,
+                status: 'failed',
+                remoteIp: request.remoteIp,
+                durationMs: Date.now() - startedAt,
+                payload: body,
+                error,
+            });
+            throw error;
+        }
+        const failed = result.status >= 400;
+        await this.safeCreateCallLog({
+            integration,
+            uuid,
+            status: failed ? 'failed' : 'success',
+            remoteIp: request.remoteIp,
+            durationMs: Date.now() - startedAt,
+            payload: body,
+            response: { status: result.status, protocol: integration.protocol },
+            error: failed
+                ? ((_b = result.logReason) !== null && _b !== void 0 ? _b : `Protocol adapter returned ${result.status}.`)
+                : undefined,
+        });
+        return result;
+    }
+    /**
+     * O log e observabilidade: falhar ao grava-lo nao pode derrubar a entrega, ou
+     * um problema de escrita viraria retentativa infinita no provedor.
+     */
+    async safeCreateCallLog(input) {
+        try {
+            return await this.createCallLog(input);
+        }
+        catch (error) {
+            this.logger.error(`Could not record webhook call log for ${input.uuid}: ${error === null || error === void 0 ? void 0 : error.message}`);
+            return null;
+        }
     }
     async executePublic(uuid, body, headers, req) {
         const startedAt = Date.now();