@infrab4a/connect 5.3.0-beta.31 → 5.3.0-beta.32

package/index.cjs.js

@@ -157,6 +157,123 @@ class PaymentProviderFactory {
     }
 }
 
+const ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS = 60;
+/**
+ * Lê `shopConfigs.antifraude.enabled`.
+ * - `false` explícito → antifraude desligado
+ * - ausente / erro / inválido → `true` (mantém comportamento histórico)
+ */
+async function isAntifraudEnabled(shopConfigsRepository) {
+    if (!shopConfigsRepository) {
+        return true;
+    }
+    try {
+        const result = await shopConfigsRepository.find({}, { cache: { enabled: true, ttl: ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS } });
+        const enabled = result?.data?.at(0)?.antifraude?.enabled;
+        if (typeof enabled === 'boolean') {
+            return enabled;
+        }
+        return true;
+    }
+    catch (error) {
+        console.warn(JSON.stringify({
+            msg: 'antifraud_enabled_config_load_failed',
+            enabled: true,
+            error: error instanceof Error ? error.message : String(error),
+        }));
+        return true;
+    }
+}
+
+/** Defaults de runtime (week.zip = Infinity). Usados só como fallback no checkout. */
+const DEFAULT_ANTIFRAUD_VOLUME_LIMITS = {
+    enabled: true,
+    source: 'fallback',
+    day: {
+        subscriber: { cpf: 4, email: 4, phone: 4, card: 4, zip: 4 },
+        nonSubscriber: { cpf: 2, email: 2, phone: 2, card: 2, zip: 2 },
+    },
+    week: {
+        subscriber: { cpf: 12, email: 12, phone: 12, card: 12, zip: Infinity },
+        nonSubscriber: { cpf: 7, email: 7, phone: 7, card: 7, zip: Infinity },
+    },
+    blockedAttemptsDay: {
+        subscriber: 7,
+        nonSubscriber: 5,
+    },
+};
+function isPositiveInteger(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 1 && Number.isInteger(value);
+}
+function normalizeLimitOrders(raw, allowInfiniteZip) {
+    if (!raw)
+        return null;
+    const zip = allowInfiniteZip && (raw.zip === null || raw.zip === undefined || raw.zip === Infinity) ? Infinity : raw.zip;
+    const normalized = {
+        cpf: raw.cpf,
+        email: raw.email,
+        phone: raw.phone,
+        zip: zip,
+        card: raw.card,
+    };
+    for (const key of ['cpf', 'email', 'phone', 'zip', 'card']) {
+        if (key === 'zip' && normalized.zip === Infinity)
+            continue;
+        if (!isPositiveInteger(normalized[key]))
+            return null;
+    }
+    return normalized;
+}
+function cloneFallbackLimits() {
+    return {
+        ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS,
+        day: {
+            subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.subscriber },
+            nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.nonSubscriber },
+        },
+        week: {
+            subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.subscriber },
+            nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.nonSubscriber },
+        },
+        blockedAttemptsDay: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.blockedAttemptsDay },
+        source: 'fallback',
+    };
+}
+/** Config inválida/ausente → fallback (comportamento histórico). */
+function resolveAntifraudVolumeLimits(antifraude) {
+    if (!antifraude || typeof antifraude.enabled !== 'boolean') {
+        return cloneFallbackLimits();
+    }
+    const daySubscriber = normalizeLimitOrders(antifraude.day?.subscriber, false);
+    const dayNonSubscriber = normalizeLimitOrders(antifraude.day?.nonSubscriber, false);
+    const weekSubscriber = normalizeLimitOrders(antifraude.week?.subscriber, true);
+    const weekNonSubscriber = normalizeLimitOrders(antifraude.week?.nonSubscriber, true);
+    const blocked = antifraude.blockedAttemptsDay;
+    if (!daySubscriber ||
+        !dayNonSubscriber ||
+        !weekSubscriber ||
+        !weekNonSubscriber ||
+        !blocked ||
+        !isPositiveInteger(blocked.subscriber) ||
+        !isPositiveInteger(blocked.nonSubscriber)) {
+        // Kill-switch explícito prevalece mesmo com payload inválido.
+        if (antifraude.enabled === false) {
+            return { ...cloneFallbackLimits(), enabled: false, source: 'fallback' };
+        }
+        return cloneFallbackLimits();
+    }
+    return {
+        enabled: antifraude.enabled,
+        source: 'config',
+        day: { subscriber: daySubscriber, nonSubscriber: dayNonSubscriber },
+        week: { subscriber: weekSubscriber, nonSubscriber: weekNonSubscriber },
+        blockedAttemptsDay: {
+            subscriber: blocked.subscriber,
+            nonSubscriber: blocked.nonSubscriber,
+        },
+    };
+}
+
 const registry = new Map();
 function registerClass(name, classConstructor) {
     registry.set(name, classConstructor);
@@ -1038,6 +1155,12 @@ class CampaignHashtag extends BaseModel {
     }
 }
 
+class CampaignHashtagPosts extends BaseModel {
+    static get identifiersFields() {
+        return ['id'];
+    }
+}
+
 class BeautyProfile extends BaseModel {
     toPlain() {
         const plain = super.toPlain();
@@ -1906,12 +2029,23 @@ class StockOutError extends BusinessError {
     }
 }
 
+/* eslint-disable no-console */
 class AntifraudBankSlipService {
-    constructor(orderBlockedRepository) {
+    constructor(orderBlockedRepository, shopConfigsRepository) {
         this.orderBlockedRepository = orderBlockedRepository;
+        this.shopConfigsRepository = shopConfigsRepository;
         this.MAX_ORDER_VALUE = 5000;
     }
     async validate(checkout) {
+        const enabled = await isAntifraudEnabled(this.shopConfigsRepository);
+        if (!enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_bankslip_skipped',
+                enabled: false,
+                checkoutId: checkout.id,
+            }));
+            return true;
+        }
         if (checkout.totalPrice && checkout.totalPrice > this.MAX_ORDER_VALUE && !checkout.user?.isSubscriber) {
             await this.orderBlockedRepository.createBlockedOrderOrPayment({
                 checkout,
@@ -1933,62 +2067,67 @@ class AntifraudBankSlipService {
     }
 }
 
+/* eslint-disable max-params */
 class AntifraudCardService {
-    constructor(orderRepository, orderBlockedRepository) {
+    constructor(orderRepository, orderBlockedRepository, shopConfigsRepository) {
         this.orderRepository = orderRepository;
         this.orderBlockedRepository = orderBlockedRepository;
-        this.LIMIT_ORDERS_DAY = null;
-        this.LIMIT_ORDERS_WEEK = null;
+        this.shopConfigsRepository = shopConfigsRepository;
     }
     async validate(checkout, card) {
-        this.setLimitsByUserType(checkout.user.isSubscriber);
-        await this.validateBlockedOrderAttempts(checkout, card);
-        await this.validateDayAndWeekOrderLimits(checkout, card);
+        // Limites locais por request — evita race em provider Nest singleton entre awaits.
+        const resolved = await this.loadResolvedLimits();
+        const isSubscriber = !!checkout.user?.isSubscriber;
+        const dayLimits = isSubscriber ? resolved.day.subscriber : resolved.day.nonSubscriber;
+        const weekLimits = isSubscriber ? resolved.week.subscriber : resolved.week.nonSubscriber;
+        const blockedAttemptsDay = isSubscriber
+            ? resolved.blockedAttemptsDay.subscriber
+            : resolved.blockedAttemptsDay.nonSubscriber;
+        if (!resolved.enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_card_volume_skipped',
+                source: resolved.source,
+                enabled: false,
+                checkoutId: checkout.id,
+                isSubscriber,
+            }));
+            return true;
+        }
+        console.info(JSON.stringify({
+            msg: 'antifraud_card_volume_limits',
+            source: resolved.source,
+            enabled: true,
+            checkoutId: checkout.id,
+            isSubscriber,
+            blockedAttemptsDay,
+            day: dayLimits,
+            week: weekLimits,
+        }));
+        await this.validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
+        await this.validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits);
         return true;
     }
-    setLimitsByUserType(isSubscriber) {
-        this.LIMIT_ORDERS_DAY = {
-            subscriber: {
-                cpf: 4,
-                email: 4,
-                phone: 4,
-                card: 4,
-                zip: 4,
-            },
-            nonSubscriber: {
-                cpf: 2,
-                email: 2,
-                phone: 2,
-                card: 2,
-                zip: 2,
-            },
-        };
-        this.LIMIT_ORDERS_WEEK = {
-            subscriber: {
-                cpf: 12,
-                email: 12,
-                phone: 12,
-                card: 12,
-                zip: Infinity,
-            },
-            nonSubscriber: {
-                cpf: 7,
-                email: 7,
-                phone: 7,
-                card: 7,
-                zip: Infinity,
-            },
-        };
-        this.LIMIT_BLOCKED_ORDERS_DAY = isSubscriber ? 7 : 5;
-    }
-    getLimitsByUserType(type, isSubscriber) {
-        const limits = type === 'day' ? this.LIMIT_ORDERS_DAY : this.LIMIT_ORDERS_WEEK;
-        return isSubscriber ? limits['subscriber'] : limits['nonSubscriber'];
+    async loadResolvedLimits() {
+        if (!this.shopConfigsRepository) {
+            return resolveAntifraudVolumeLimits(null);
+        }
+        try {
+            const result = await this.shopConfigsRepository.find({}, { cache: { enabled: true, ttl: ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS } });
+            return resolveAntifraudVolumeLimits(result?.data?.at(0)?.antifraude);
+        }
+        catch (error) {
+            console.warn(JSON.stringify({
+                msg: 'antifraud_card_volume_config_load_failed',
+                source: 'fallback',
+                error: error instanceof Error ? error.message : String(error),
+            }));
+            return resolveAntifraudVolumeLimits(null);
+        }
     }
-    async validateBlockedOrderAttempts(checkout, card) {
-        const isValid = await this.verifyBlockedOrderAttempts(checkout, card);
+    async validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
+        const isValid = await this.verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
         if (!isValid) {
-            throw new FraudValidationError(`Cliente com mais de ${this.LIMIT_BLOCKED_ORDERS_DAY} compras negadas/bloqueadas no dia`, exports.ErrorsCode.fraudPreventionInternal, {
+            throw new FraudValidationError(`Cliente com mais de ${blockedAttemptsDay} compras negadas/bloqueadas no dia`, exports.ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
                 userEmail: checkout.user.email,
                 info: {
@@ -1999,8 +2138,8 @@ class AntifraudCardService {
             });
         }
     }
-    async validateDayAndWeekOrderLimits(checkout, card) {
-        const isValid = await this.verifyDayAndWeekOrders(checkout, card);
+    async validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits) {
+        const isValid = await this.verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits);
         if (!isValid) {
             throw new FraudValidationError('Cliente tentando comprar mais do que o permitido no dia/semana', exports.ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
@@ -2013,15 +2152,15 @@ class AntifraudCardService {
             });
         }
     }
-    async verifyBlockedOrderAttempts(checkout, card) {
+    async verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
         const dateRange = this.getTodayDateRange();
         const blockedOrders = await this.getBlockedOrdersByMultipleCriteria(checkout, dateRange);
         const totalBlockedAttempts = this.calculateUniqueBlockedAttempts(blockedOrders, checkout);
-        if (totalBlockedAttempts >= this.LIMIT_BLOCKED_ORDERS_DAY) {
+        if (totalBlockedAttempts >= blockedAttemptsDay) {
             await this.createBlockedOrderRecord({
                 checkout,
                 card,
-                reason: `More than ${this.LIMIT_BLOCKED_ORDERS_DAY} attempts have failed`,
+                reason: `More than ${blockedAttemptsDay} attempts have failed`,
                 key: 'Failed attempts',
                 period: 'day',
             });
@@ -2123,12 +2262,12 @@ class AntifraudCardService {
             card,
         });
     }
-    async verifyDayAndWeekOrders(checkout, card) {
+    async verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits) {
         const validationParams = this.buildValidationParams(checkout, card);
-        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams);
+        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams, dayLimits);
         if (!isDayLimitValid)
             return false;
-        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams);
+        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams, weekLimits);
         return isWeekLimitValid;
     }
     buildValidationParams(checkout, card) {
@@ -2140,9 +2279,8 @@ class AntifraudCardService {
             card,
         };
     }
-    async validateDayOrderLimits(checkout, params) {
+    async validateDayOrderLimits(checkout, params, limits) {
         const ordersPerDay = await this.validateOrdersByRange(params, this.getDateRange('day'));
-        const limits = this.getLimitsByUserType('day', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerDay,
@@ -2150,9 +2288,8 @@ class AntifraudCardService {
             period: 'day',
         });
     }
-    async validateWeekOrderLimits(checkout, params) {
+    async validateWeekOrderLimits(checkout, params, limits) {
         const ordersPerWeek = await this.validateOrdersByRange(params, this.getDateRange('week'));
-        const limits = this.getLimitsByUserType('week', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerWeek,
@@ -2229,15 +2366,35 @@ class AntifraudCardService {
 }
 
 class AntifraudGlampointsService {
-    constructor() { }
-    async validate(_checkout) {
+    constructor(shopConfigsRepository) {
+        this.shopConfigsRepository = shopConfigsRepository;
+    }
+    async validate(checkout) {
+        const enabled = await isAntifraudEnabled(this.shopConfigsRepository);
+        if (!enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_glampoints_skipped',
+                enabled: false,
+                checkoutId: checkout.id,
+            }));
+        }
         return true;
     }
 }
 
 class AntifraudPixService {
-    constructor() { }
-    async validate(_checkout) {
+    constructor(shopConfigsRepository) {
+        this.shopConfigsRepository = shopConfigsRepository;
+    }
+    async validate(checkout) {
+        const enabled = await isAntifraudEnabled(this.shopConfigsRepository);
+        if (!enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_pix_skipped',
+                enabled: false,
+                checkoutId: checkout.id,
+            }));
+        }
         return true;
     }
 }
@@ -2591,6 +2748,26 @@ class ShopSettings extends BaseModel {
     }
 }
 
+/**
+ * Defaults iguais ao hardcode histórico do checkout.
+ * `week.*.zip = null` → Infinity no runtime do volume de cartão.
+ */
+const DEFAULT_SHOP_ANTIFRAUD_CONFIG = {
+    enabled: true,
+    day: {
+        subscriber: { cpf: 4, email: 4, phone: 4, card: 4, zip: 4 },
+        nonSubscriber: { cpf: 2, email: 2, phone: 2, card: 2, zip: 2 },
+    },
+    week: {
+        subscriber: { cpf: 12, email: 12, phone: 12, card: 12, zip: null },
+        nonSubscriber: { cpf: 7, email: 7, phone: 7, card: 7, zip: null },
+    },
+    blockedAttemptsDay: {
+        subscriber: 7,
+        nonSubscriber: 5,
+    },
+};
+
 class AdyenBlockedOrderHelper {
     static async handleUnauthorizedPayment(params) {
         await params.orderBlockedRepository.createBlockedOrderOrPayment({
@@ -5474,7 +5651,7 @@ class CampaignHashtagFirestoreRepository extends withCrudFirestore(withHelpers(w
     constructor({ firestore, interceptors, cache, }) {
         super({
             firestore,
-            collectionName: 'hashtagCampaignsAuto',
+            collectionName: 'CampaignsHashtags',
             model: CampaignHashtag,
             interceptors,
             cache,
@@ -5482,6 +5659,18 @@ class CampaignHashtagFirestoreRepository extends withCrudFirestore(withHelpers(w
     }
 }
 
+class CampaignHashtagPostsFirestoreRepository extends withCrudFirestore(withHelpers(withFirestore(Base))) {
+    constructor({ firestore, interceptors, cache, }) {
+        super({
+            firestore,
+            collectionName: 'CampaignsHashtagsPosts',
+            model: CampaignHashtagPosts,
+            interceptors,
+            cache,
+        });
+    }
+}
+
 class CheckoutFirestoreRepository extends withCrudFirestore(withHelpers(withFirestore(Base))) {
     constructor({ firestore, interceptors, cache, }) {
         super({
@@ -11715,6 +11904,7 @@ Object.defineProperty(exports, 'unset', {
   enumerable: true,
   get: function () { return lodash.unset; }
 });
+exports.ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS = ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS;
 exports.Address = Address;
 exports.AdyenCardAxiosAdapter = AdyenCardAxiosAdapter;
 exports.AdyenPaymentMethodFactory = AdyenPaymentMethodFactory;
@@ -11741,6 +11931,8 @@ exports.CampaignDashboard = CampaignDashboard;
 exports.CampaignDashboardFirestoreRepository = CampaignDashboardFirestoreRepository;
 exports.CampaignHashtag = CampaignHashtag;
 exports.CampaignHashtagFirestoreRepository = CampaignHashtagFirestoreRepository;
+exports.CampaignHashtagPosts = CampaignHashtagPosts;
+exports.CampaignHashtagPostsFirestoreRepository = CampaignHashtagPostsFirestoreRepository;
 exports.Category = Category;
 exports.CategoryCollectionChildren = CategoryCollectionChildren;
 exports.CategoryCollectionChildrenHasuraGraphQLRepository = CategoryCollectionChildrenHasuraGraphQLRepository;
@@ -11762,6 +11954,8 @@ exports.ConnectDocumentService = ConnectDocumentService;
 exports.ConnectFirestoreService = ConnectFirestoreService;
 exports.Coupon = Coupon;
 exports.CouponFirestoreRepository = CouponFirestoreRepository;
+exports.DEFAULT_ANTIFRAUD_VOLUME_LIMITS = DEFAULT_ANTIFRAUD_VOLUME_LIMITS;
+exports.DEFAULT_SHOP_ANTIFRAUD_CONFIG = DEFAULT_SHOP_ANTIFRAUD_CONFIG;
 exports.Debug = Debug;
 exports.DebugDecoratorHelper = DebugDecoratorHelper;
 exports.DebugHelper = DebugHelper;
@@ -11898,10 +12092,12 @@ exports.WishlistHasuraGraphQLRepository = WishlistHasuraGraphQLRepository;
 exports.deserialize = deserialize;
 exports.getClass = getClass;
 exports.is = is;
+exports.isAntifraudEnabled = isAntifraudEnabled;
 exports.isDebuggable = isDebuggable;
 exports.isUUID = isUUID;
 exports.parseDateTime = parseDateTime;
 exports.registerClass = registerClass;
+exports.resolveAntifraudVolumeLimits = resolveAntifraudVolumeLimits;
 exports.resolveCacheConfig = resolveCacheConfig;
 exports.resolveClass = resolveClass;
 exports.serialize = serialize;

package/index.esm.js

@@ -151,6 +151,123 @@ class PaymentProviderFactory {
     }
 }
 
+const ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS = 60;
+/**
+ * Lê `shopConfigs.antifraude.enabled`.
+ * - `false` explícito → antifraude desligado
+ * - ausente / erro / inválido → `true` (mantém comportamento histórico)
+ */
+async function isAntifraudEnabled(shopConfigsRepository) {
+    if (!shopConfigsRepository) {
+        return true;
+    }
+    try {
+        const result = await shopConfigsRepository.find({}, { cache: { enabled: true, ttl: ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS } });
+        const enabled = result?.data?.at(0)?.antifraude?.enabled;
+        if (typeof enabled === 'boolean') {
+            return enabled;
+        }
+        return true;
+    }
+    catch (error) {
+        console.warn(JSON.stringify({
+            msg: 'antifraud_enabled_config_load_failed',
+            enabled: true,
+            error: error instanceof Error ? error.message : String(error),
+        }));
+        return true;
+    }
+}
+
+/** Defaults de runtime (week.zip = Infinity). Usados só como fallback no checkout. */
+const DEFAULT_ANTIFRAUD_VOLUME_LIMITS = {
+    enabled: true,
+    source: 'fallback',
+    day: {
+        subscriber: { cpf: 4, email: 4, phone: 4, card: 4, zip: 4 },
+        nonSubscriber: { cpf: 2, email: 2, phone: 2, card: 2, zip: 2 },
+    },
+    week: {
+        subscriber: { cpf: 12, email: 12, phone: 12, card: 12, zip: Infinity },
+        nonSubscriber: { cpf: 7, email: 7, phone: 7, card: 7, zip: Infinity },
+    },
+    blockedAttemptsDay: {
+        subscriber: 7,
+        nonSubscriber: 5,
+    },
+};
+function isPositiveInteger(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 1 && Number.isInteger(value);
+}
+function normalizeLimitOrders(raw, allowInfiniteZip) {
+    if (!raw)
+        return null;
+    const zip = allowInfiniteZip && (raw.zip === null || raw.zip === undefined || raw.zip === Infinity) ? Infinity : raw.zip;
+    const normalized = {
+        cpf: raw.cpf,
+        email: raw.email,
+        phone: raw.phone,
+        zip: zip,
+        card: raw.card,
+    };
+    for (const key of ['cpf', 'email', 'phone', 'zip', 'card']) {
+        if (key === 'zip' && normalized.zip === Infinity)
+            continue;
+        if (!isPositiveInteger(normalized[key]))
+            return null;
+    }
+    return normalized;
+}
+function cloneFallbackLimits() {
+    return {
+        ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS,
+        day: {
+            subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.subscriber },
+            nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.nonSubscriber },
+        },
+        week: {
+            subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.subscriber },
+            nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.nonSubscriber },
+        },
+        blockedAttemptsDay: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.blockedAttemptsDay },
+        source: 'fallback',
+    };
+}
+/** Config inválida/ausente → fallback (comportamento histórico). */
+function resolveAntifraudVolumeLimits(antifraude) {
+    if (!antifraude || typeof antifraude.enabled !== 'boolean') {
+        return cloneFallbackLimits();
+    }
+    const daySubscriber = normalizeLimitOrders(antifraude.day?.subscriber, false);
+    const dayNonSubscriber = normalizeLimitOrders(antifraude.day?.nonSubscriber, false);
+    const weekSubscriber = normalizeLimitOrders(antifraude.week?.subscriber, true);
+    const weekNonSubscriber = normalizeLimitOrders(antifraude.week?.nonSubscriber, true);
+    const blocked = antifraude.blockedAttemptsDay;
+    if (!daySubscriber ||
+        !dayNonSubscriber ||
+        !weekSubscriber ||
+        !weekNonSubscriber ||
+        !blocked ||
+        !isPositiveInteger(blocked.subscriber) ||
+        !isPositiveInteger(blocked.nonSubscriber)) {
+        // Kill-switch explícito prevalece mesmo com payload inválido.
+        if (antifraude.enabled === false) {
+            return { ...cloneFallbackLimits(), enabled: false, source: 'fallback' };
+        }
+        return cloneFallbackLimits();
+    }
+    return {
+        enabled: antifraude.enabled,
+        source: 'config',
+        day: { subscriber: daySubscriber, nonSubscriber: dayNonSubscriber },
+        week: { subscriber: weekSubscriber, nonSubscriber: weekNonSubscriber },
+        blockedAttemptsDay: {
+            subscriber: blocked.subscriber,
+            nonSubscriber: blocked.nonSubscriber,
+        },
+    };
+}
+
 const registry = new Map();
 function registerClass(name, classConstructor) {
     registry.set(name, classConstructor);
@@ -1032,6 +1149,12 @@ class CampaignHashtag extends BaseModel {
     }
 }
 
+class CampaignHashtagPosts extends BaseModel {
+    static get identifiersFields() {
+        return ['id'];
+    }
+}
+
 class BeautyProfile extends BaseModel {
     toPlain() {
         const plain = super.toPlain();
@@ -1900,12 +2023,23 @@ class StockOutError extends BusinessError {
     }
 }
 
+/* eslint-disable no-console */
 class AntifraudBankSlipService {
-    constructor(orderBlockedRepository) {
+    constructor(orderBlockedRepository, shopConfigsRepository) {
         this.orderBlockedRepository = orderBlockedRepository;
+        this.shopConfigsRepository = shopConfigsRepository;
         this.MAX_ORDER_VALUE = 5000;
     }
     async validate(checkout) {
+        const enabled = await isAntifraudEnabled(this.shopConfigsRepository);
+        if (!enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_bankslip_skipped',
+                enabled: false,
+                checkoutId: checkout.id,
+            }));
+            return true;
+        }
         if (checkout.totalPrice && checkout.totalPrice > this.MAX_ORDER_VALUE && !checkout.user?.isSubscriber) {
             await this.orderBlockedRepository.createBlockedOrderOrPayment({
                 checkout,
@@ -1927,62 +2061,67 @@ class AntifraudBankSlipService {
     }
 }
 
+/* eslint-disable max-params */
 class AntifraudCardService {
-    constructor(orderRepository, orderBlockedRepository) {
+    constructor(orderRepository, orderBlockedRepository, shopConfigsRepository) {
         this.orderRepository = orderRepository;
         this.orderBlockedRepository = orderBlockedRepository;
-        this.LIMIT_ORDERS_DAY = null;
-        this.LIMIT_ORDERS_WEEK = null;
+        this.shopConfigsRepository = shopConfigsRepository;
     }
     async validate(checkout, card) {
-        this.setLimitsByUserType(checkout.user.isSubscriber);
-        await this.validateBlockedOrderAttempts(checkout, card);
-        await this.validateDayAndWeekOrderLimits(checkout, card);
+        // Limites locais por request — evita race em provider Nest singleton entre awaits.
+        const resolved = await this.loadResolvedLimits();
+        const isSubscriber = !!checkout.user?.isSubscriber;
+        const dayLimits = isSubscriber ? resolved.day.subscriber : resolved.day.nonSubscriber;
+        const weekLimits = isSubscriber ? resolved.week.subscriber : resolved.week.nonSubscriber;
+        const blockedAttemptsDay = isSubscriber
+            ? resolved.blockedAttemptsDay.subscriber
+            : resolved.blockedAttemptsDay.nonSubscriber;
+        if (!resolved.enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_card_volume_skipped',
+                source: resolved.source,
+                enabled: false,
+                checkoutId: checkout.id,
+                isSubscriber,
+            }));
+            return true;
+        }
+        console.info(JSON.stringify({
+            msg: 'antifraud_card_volume_limits',
+            source: resolved.source,
+            enabled: true,
+            checkoutId: checkout.id,
+            isSubscriber,
+            blockedAttemptsDay,
+            day: dayLimits,
+            week: weekLimits,
+        }));
+        await this.validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
+        await this.validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits);
         return true;
     }
-    setLimitsByUserType(isSubscriber) {
-        this.LIMIT_ORDERS_DAY = {
-            subscriber: {
-                cpf: 4,
-                email: 4,
-                phone: 4,
-                card: 4,
-                zip: 4,
-            },
-            nonSubscriber: {
-                cpf: 2,
-                email: 2,
-                phone: 2,
-                card: 2,
-                zip: 2,
-            },
-        };
-        this.LIMIT_ORDERS_WEEK = {
-            subscriber: {
-                cpf: 12,
-                email: 12,
-                phone: 12,
-                card: 12,
-                zip: Infinity,
-            },
-            nonSubscriber: {
-                cpf: 7,
-                email: 7,
-                phone: 7,
-                card: 7,
-                zip: Infinity,
-            },
-        };
-        this.LIMIT_BLOCKED_ORDERS_DAY = isSubscriber ? 7 : 5;
-    }
-    getLimitsByUserType(type, isSubscriber) {
-        const limits = type === 'day' ? this.LIMIT_ORDERS_DAY : this.LIMIT_ORDERS_WEEK;
-        return isSubscriber ? limits['subscriber'] : limits['nonSubscriber'];
+    async loadResolvedLimits() {
+        if (!this.shopConfigsRepository) {
+            return resolveAntifraudVolumeLimits(null);
+        }
+        try {
+            const result = await this.shopConfigsRepository.find({}, { cache: { enabled: true, ttl: ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS } });
+            return resolveAntifraudVolumeLimits(result?.data?.at(0)?.antifraude);
+        }
+        catch (error) {
+            console.warn(JSON.stringify({
+                msg: 'antifraud_card_volume_config_load_failed',
+                source: 'fallback',
+                error: error instanceof Error ? error.message : String(error),
+            }));
+            return resolveAntifraudVolumeLimits(null);
+        }
     }
-    async validateBlockedOrderAttempts(checkout, card) {
-        const isValid = await this.verifyBlockedOrderAttempts(checkout, card);
+    async validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
+        const isValid = await this.verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
         if (!isValid) {
-            throw new FraudValidationError(`Cliente com mais de ${this.LIMIT_BLOCKED_ORDERS_DAY} compras negadas/bloqueadas no dia`, ErrorsCode.fraudPreventionInternal, {
+            throw new FraudValidationError(`Cliente com mais de ${blockedAttemptsDay} compras negadas/bloqueadas no dia`, ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
                 userEmail: checkout.user.email,
                 info: {
@@ -1993,8 +2132,8 @@ class AntifraudCardService {
             });
         }
     }
-    async validateDayAndWeekOrderLimits(checkout, card) {
-        const isValid = await this.verifyDayAndWeekOrders(checkout, card);
+    async validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits) {
+        const isValid = await this.verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits);
         if (!isValid) {
             throw new FraudValidationError('Cliente tentando comprar mais do que o permitido no dia/semana', ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
@@ -2007,15 +2146,15 @@ class AntifraudCardService {
             });
         }
     }
-    async verifyBlockedOrderAttempts(checkout, card) {
+    async verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
         const dateRange = this.getTodayDateRange();
         const blockedOrders = await this.getBlockedOrdersByMultipleCriteria(checkout, dateRange);
         const totalBlockedAttempts = this.calculateUniqueBlockedAttempts(blockedOrders, checkout);
-        if (totalBlockedAttempts >= this.LIMIT_BLOCKED_ORDERS_DAY) {
+        if (totalBlockedAttempts >= blockedAttemptsDay) {
             await this.createBlockedOrderRecord({
                 checkout,
                 card,
-                reason: `More than ${this.LIMIT_BLOCKED_ORDERS_DAY} attempts have failed`,
+                reason: `More than ${blockedAttemptsDay} attempts have failed`,
                 key: 'Failed attempts',
                 period: 'day',
             });
@@ -2117,12 +2256,12 @@ class AntifraudCardService {
             card,
         });
     }
-    async verifyDayAndWeekOrders(checkout, card) {
+    async verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits) {
         const validationParams = this.buildValidationParams(checkout, card);
-        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams);
+        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams, dayLimits);
         if (!isDayLimitValid)
             return false;
-        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams);
+        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams, weekLimits);
         return isWeekLimitValid;
     }
     buildValidationParams(checkout, card) {
@@ -2134,9 +2273,8 @@ class AntifraudCardService {
             card,
         };
     }
-    async validateDayOrderLimits(checkout, params) {
+    async validateDayOrderLimits(checkout, params, limits) {
         const ordersPerDay = await this.validateOrdersByRange(params, this.getDateRange('day'));
-        const limits = this.getLimitsByUserType('day', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerDay,
@@ -2144,9 +2282,8 @@ class AntifraudCardService {
             period: 'day',
         });
     }
-    async validateWeekOrderLimits(checkout, params) {
+    async validateWeekOrderLimits(checkout, params, limits) {
         const ordersPerWeek = await this.validateOrdersByRange(params, this.getDateRange('week'));
-        const limits = this.getLimitsByUserType('week', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerWeek,
@@ -2223,15 +2360,35 @@ class AntifraudCardService {
 }
 
 class AntifraudGlampointsService {
-    constructor() { }
-    async validate(_checkout) {
+    constructor(shopConfigsRepository) {
+        this.shopConfigsRepository = shopConfigsRepository;
+    }
+    async validate(checkout) {
+        const enabled = await isAntifraudEnabled(this.shopConfigsRepository);
+        if (!enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_glampoints_skipped',
+                enabled: false,
+                checkoutId: checkout.id,
+            }));
+        }
         return true;
     }
 }
 
 class AntifraudPixService {
-    constructor() { }
-    async validate(_checkout) {
+    constructor(shopConfigsRepository) {
+        this.shopConfigsRepository = shopConfigsRepository;
+    }
+    async validate(checkout) {
+        const enabled = await isAntifraudEnabled(this.shopConfigsRepository);
+        if (!enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_pix_skipped',
+                enabled: false,
+                checkoutId: checkout.id,
+            }));
+        }
         return true;
     }
 }
@@ -2585,6 +2742,26 @@ class ShopSettings extends BaseModel {
     }
 }
 
+/**
+ * Defaults iguais ao hardcode histórico do checkout.
+ * `week.*.zip = null` → Infinity no runtime do volume de cartão.
+ */
+const DEFAULT_SHOP_ANTIFRAUD_CONFIG = {
+    enabled: true,
+    day: {
+        subscriber: { cpf: 4, email: 4, phone: 4, card: 4, zip: 4 },
+        nonSubscriber: { cpf: 2, email: 2, phone: 2, card: 2, zip: 2 },
+    },
+    week: {
+        subscriber: { cpf: 12, email: 12, phone: 12, card: 12, zip: null },
+        nonSubscriber: { cpf: 7, email: 7, phone: 7, card: 7, zip: null },
+    },
+    blockedAttemptsDay: {
+        subscriber: 7,
+        nonSubscriber: 5,
+    },
+};
+
 class AdyenBlockedOrderHelper {
     static async handleUnauthorizedPayment(params) {
         await params.orderBlockedRepository.createBlockedOrderOrPayment({
@@ -5468,7 +5645,7 @@ class CampaignHashtagFirestoreRepository extends withCrudFirestore(withHelpers(w
     constructor({ firestore, interceptors, cache, }) {
         super({
             firestore,
-            collectionName: 'hashtagCampaignsAuto',
+            collectionName: 'CampaignsHashtags',
             model: CampaignHashtag,
             interceptors,
             cache,
@@ -5476,6 +5653,18 @@ class CampaignHashtagFirestoreRepository extends withCrudFirestore(withHelpers(w
     }
 }
 
+class CampaignHashtagPostsFirestoreRepository extends withCrudFirestore(withHelpers(withFirestore(Base))) {
+    constructor({ firestore, interceptors, cache, }) {
+        super({
+            firestore,
+            collectionName: 'CampaignsHashtagsPosts',
+            model: CampaignHashtagPosts,
+            interceptors,
+            cache,
+        });
+    }
+}
+
 class CheckoutFirestoreRepository extends withCrudFirestore(withHelpers(withFirestore(Base))) {
     constructor({ firestore, interceptors, cache, }) {
         super({
@@ -11581,4 +11770,4 @@ class ProductsVertexSearch {
     }
 }
 
-export { AccessoryImportances, Address, AdyenCardAxiosAdapter, AdyenPaymentMethodFactory, AntifraudBankSlipService, AntifraudCardService, AntifraudGlampointsService, AntifraudPixService, AntifraudProviderFactory, AntifraudProviders, Area, Authentication, AuthenticationFirebaseAuthService, AxiosAdapter, Base, BaseModel, BeardProblems, BeardSizes, BeautyProductImportances, BeautyProfile, BeautyQuestionsHelper, BillingStatus, BodyProblems, BodyShapes, BodyTattoos, BrandCategory, BrandCategoryFirestoreRepository, BrandEquityOptions, BusinessError, BusinessUnitEnum, Buy2Win, Buy2WinFirestoreRepository, Campaign, CampaignBanner, CampaignDashboard, CampaignDashboardFirestoreRepository, CampaignHashtag, CampaignHashtagFirestoreRepository, Category, CategoryCollectionChildren, CategoryCollectionChildrenHasuraGraphQLRepository, CategoryFilter, CategoryFilterHasuraGraphQLRepository, CategoryFirestoreRepository, CategoryHasuraGraphQL, CategoryHasuraGraphQLRepository, CategoryProduct, CategoryProductHasuraGraphQLRepository, Checkout, CheckoutFirestoreRepository, CheckoutSubscription, CheckoutSubscriptionFirestoreRepository, CheckoutTypes, ClassNameHelper, ConnectBaseDocumentSnapshot, ConnectCollectionService, ConnectDocumentService, ConnectFirestoreService, Coupon, CouponCategories, CouponCategory, CouponChannels, CouponFirestoreRepository, CouponOldCategories, CouponSubtypes, CouponTypes, Debug, DebugDecoratorHelper, DebugHelper, DebugNamespaces, DuplicatedResultsError, Edition, EditionStatus, ErrorsCode, Exclusivities, FaceSkinOilinesses, FaceSkinProblems, FaceSkinTones, FamilyIncomes, Filter, FilterHasuraGraphQLRepository, FilterOption, FilterOptionHasuraGraphQLRepository, FilterType, FirebaseFileUploaderService, FragranceImportances, FraudValidationError, GenderDestination, GlampointsPaymentMethodFactory, GlampointsPaymentService, Group, GroupFirestoreRepository, HairColors, HairProblems, HairStrands, HairTypes, Home, HomeFirestoreRepository, InvalidArgumentError, InvalidCheckoutError, KitProduct, KitProductHasuraGraphQL, Lead, LeadFirestoreRepository, LegacyOrderFirestoreRepository, LineItem, Log, LogDocument, LogFirestoreRepository, Logger, MercadoPagoBankSlipAxiosAdapter, MercadoPagoCardAxiosAdapter, MercadoPagoErrorHelper, MercadoPagoPaymentMethodFactory, MercadoPagoPixAxiosAdapter, MercadoPagoRequestHelper, MercadoPagoResponseHelper, MercadoPagoStatusDetailEnum, MercadoPagoStatusEnum, NotFoundError, ObsEmitter, OfficePosition, Order, OrderBlocked, OrderBlockedFirestoreRepository, OrderBlockedType, OrderFirestoreRepository, OrderPaymentStatus, OrderStatus, PagarMeV5OrderStatus, PagarMeV5PaymentStatus, PagarmeBankSlipAxiosAdapter, PagarmeCardAxiosAdapter, PagarmePaymentMethodFactory, PagarmePaymentStatus, PagarmePixAxiosAdapter, PagarmeV5BankSlipAxiosAdapter, PagarmeV5BaseAxiosAdapter, PagarmeV5CardAxiosAdapter, PagarmeV5PixAxiosAdapter, Payment, PaymentError, PaymentFirestoreRepository, PaymentMethods, PaymentProviderFactory, PaymentProviders, PaymentTransaction, PaymentType, PersonTypes, Plans, Product, ProductCatalogHasuraGraphQL, ProductCatalogHasuraGraphQLRepository, ProductErrors, ProductErrorsHasuraGraphQL, ProductErrorsHasuraGraphQLRepository, ProductFirestoreRepository, ProductGroup, ProductGroupHasuraGraphQLRepository, ProductHasuraGraphQL, ProductHasuraGraphQLRepository, ProductLabelEnum, ProductPriceLog, ProductPriceLogHasuraGraphQLRepository, ProductReview, ProductReviewHasuraGraphQLRepository, ProductSpents, ProductStockEntry, ProductStockEntryHasuraGraphQL, ProductStockEntryHasuraGraphQLRepository, ProductStockNotification, ProductStockNotificationHasuraGraphQLRepository, ProductVariantFirestoreRepository, ProductsIndex, ProductsVertexSearch, QuestionsFilters, RecoveryPassword, ReflectHelper, Register, RegisterFirebaseAuthService, RequiredArgumentError, RestCacheAdapter, RoundProductPricesHelper, Sequence, SequenceFirestoreRepository, ShippingMethod, ShopConfigs, ShopConfigsFirestoreRepository, ShopMenu, ShopMenuFirestoreRepository, ShopPageName, ShopSettings, ShopSettingsFirestoreRepository, ShoppingRecurrence, ShoppingRecurrenceCycle, ShoppingRecurrenceEdition, ShoppingRecurrenceEditionFirestoreRepository, ShoppingRecurrenceEditionStatus, ShoppingRecurrenceErrorLog, ShoppingRecurrenceErrorLogFirestoreRepository, ShoppingRecurrenceFirestoreRepository, ShoppingRecurrenceStatus, Shops, SignInMethods, SignOut, Status, StockLimitError, StockOutError, Subscription, SubscriptionEditionFirestoreRepository, SubscriptionFirestoreRepository, SubscriptionMaterialization, SubscriptionMaterializationFirestoreRepository, SubscriptionPayment, SubscriptionPaymentFirestoreRepository, SubscriptionPlan, SubscriptionPlanFirestoreRepository, SubscriptionProductFirestoreRepository, SubscriptionSummary, SubscriptionSummaryFirestoreRepository, Trace, TransactionPaymentMethods, UnauthorizedError, UpdateOptionActions, UpdateUserImage, User, UserAddress, UserAddressFirestoreRepository, UserAlreadyRegisteredError, UserBeautyProfileFirestoreRepository, UserFirestoreRepository, UserPaymentMethod, UserPaymentMethodFirestoreRepository, UserType, Variant, VariantHasuraGraphQL, VariantHasuraGraphQLRepository, VertexAxiosAdapter, WeakPasswordError, Where, Wishlist, WishlistHasuraGraphQLRepository, WishlistLogType, deserialize, getClass, is, isDebuggable, isUUID, parseDateTime, registerClass, resolveCacheConfig, resolveClass, serialize, toCents, withCreateFirestore, withCreateHasuraGraphQL, withCrudFirestore, withCrudHasuraGraphQL, withDeleteFirestore, withDeleteHasuraGraphQL, withFindFirestore, withFindHasuraGraphQL, withFirestore, withGetFirestore, withGetHasuraGraphQL, withHasuraGraphQL, withHelpers, withSubCollection, withUpdateFirestore, withUpdateHasuraGraphQL };
+export { ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS, AccessoryImportances, Address, AdyenCardAxiosAdapter, AdyenPaymentMethodFactory, AntifraudBankSlipService, AntifraudCardService, AntifraudGlampointsService, AntifraudPixService, AntifraudProviderFactory, AntifraudProviders, Area, Authentication, AuthenticationFirebaseAuthService, AxiosAdapter, Base, BaseModel, BeardProblems, BeardSizes, BeautyProductImportances, BeautyProfile, BeautyQuestionsHelper, BillingStatus, BodyProblems, BodyShapes, BodyTattoos, BrandCategory, BrandCategoryFirestoreRepository, BrandEquityOptions, BusinessError, BusinessUnitEnum, Buy2Win, Buy2WinFirestoreRepository, Campaign, CampaignBanner, CampaignDashboard, CampaignDashboardFirestoreRepository, CampaignHashtag, CampaignHashtagFirestoreRepository, CampaignHashtagPosts, CampaignHashtagPostsFirestoreRepository, Category, CategoryCollectionChildren, CategoryCollectionChildrenHasuraGraphQLRepository, CategoryFilter, CategoryFilterHasuraGraphQLRepository, CategoryFirestoreRepository, CategoryHasuraGraphQL, CategoryHasuraGraphQLRepository, CategoryProduct, CategoryProductHasuraGraphQLRepository, Checkout, CheckoutFirestoreRepository, CheckoutSubscription, CheckoutSubscriptionFirestoreRepository, CheckoutTypes, ClassNameHelper, ConnectBaseDocumentSnapshot, ConnectCollectionService, ConnectDocumentService, ConnectFirestoreService, Coupon, CouponCategories, CouponCategory, CouponChannels, CouponFirestoreRepository, CouponOldCategories, CouponSubtypes, CouponTypes, DEFAULT_ANTIFRAUD_VOLUME_LIMITS, DEFAULT_SHOP_ANTIFRAUD_CONFIG, Debug, DebugDecoratorHelper, DebugHelper, DebugNamespaces, DuplicatedResultsError, Edition, EditionStatus, ErrorsCode, Exclusivities, FaceSkinOilinesses, FaceSkinProblems, FaceSkinTones, FamilyIncomes, Filter, FilterHasuraGraphQLRepository, FilterOption, FilterOptionHasuraGraphQLRepository, FilterType, FirebaseFileUploaderService, FragranceImportances, FraudValidationError, GenderDestination, GlampointsPaymentMethodFactory, GlampointsPaymentService, Group, GroupFirestoreRepository, HairColors, HairProblems, HairStrands, HairTypes, Home, HomeFirestoreRepository, InvalidArgumentError, InvalidCheckoutError, KitProduct, KitProductHasuraGraphQL, Lead, LeadFirestoreRepository, LegacyOrderFirestoreRepository, LineItem, Log, LogDocument, LogFirestoreRepository, Logger, MercadoPagoBankSlipAxiosAdapter, MercadoPagoCardAxiosAdapter, MercadoPagoErrorHelper, MercadoPagoPaymentMethodFactory, MercadoPagoPixAxiosAdapter, MercadoPagoRequestHelper, MercadoPagoResponseHelper, MercadoPagoStatusDetailEnum, MercadoPagoStatusEnum, NotFoundError, ObsEmitter, OfficePosition, Order, OrderBlocked, OrderBlockedFirestoreRepository, OrderBlockedType, OrderFirestoreRepository, OrderPaymentStatus, OrderStatus, PagarMeV5OrderStatus, PagarMeV5PaymentStatus, PagarmeBankSlipAxiosAdapter, PagarmeCardAxiosAdapter, PagarmePaymentMethodFactory, PagarmePaymentStatus, PagarmePixAxiosAdapter, PagarmeV5BankSlipAxiosAdapter, PagarmeV5BaseAxiosAdapter, PagarmeV5CardAxiosAdapter, PagarmeV5PixAxiosAdapter, Payment, PaymentError, PaymentFirestoreRepository, PaymentMethods, PaymentProviderFactory, PaymentProviders, PaymentTransaction, PaymentType, PersonTypes, Plans, Product, ProductCatalogHasuraGraphQL, ProductCatalogHasuraGraphQLRepository, ProductErrors, ProductErrorsHasuraGraphQL, ProductErrorsHasuraGraphQLRepository, ProductFirestoreRepository, ProductGroup, ProductGroupHasuraGraphQLRepository, ProductHasuraGraphQL, ProductHasuraGraphQLRepository, ProductLabelEnum, ProductPriceLog, ProductPriceLogHasuraGraphQLRepository, ProductReview, ProductReviewHasuraGraphQLRepository, ProductSpents, ProductStockEntry, ProductStockEntryHasuraGraphQL, ProductStockEntryHasuraGraphQLRepository, ProductStockNotification, ProductStockNotificationHasuraGraphQLRepository, ProductVariantFirestoreRepository, ProductsIndex, ProductsVertexSearch, QuestionsFilters, RecoveryPassword, ReflectHelper, Register, RegisterFirebaseAuthService, RequiredArgumentError, RestCacheAdapter, RoundProductPricesHelper, Sequence, SequenceFirestoreRepository, ShippingMethod, ShopConfigs, ShopConfigsFirestoreRepository, ShopMenu, ShopMenuFirestoreRepository, ShopPageName, ShopSettings, ShopSettingsFirestoreRepository, ShoppingRecurrence, ShoppingRecurrenceCycle, ShoppingRecurrenceEdition, ShoppingRecurrenceEditionFirestoreRepository, ShoppingRecurrenceEditionStatus, ShoppingRecurrenceErrorLog, ShoppingRecurrenceErrorLogFirestoreRepository, ShoppingRecurrenceFirestoreRepository, ShoppingRecurrenceStatus, Shops, SignInMethods, SignOut, Status, StockLimitError, StockOutError, Subscription, SubscriptionEditionFirestoreRepository, SubscriptionFirestoreRepository, SubscriptionMaterialization, SubscriptionMaterializationFirestoreRepository, SubscriptionPayment, SubscriptionPaymentFirestoreRepository, SubscriptionPlan, SubscriptionPlanFirestoreRepository, SubscriptionProductFirestoreRepository, SubscriptionSummary, SubscriptionSummaryFirestoreRepository, Trace, TransactionPaymentMethods, UnauthorizedError, UpdateOptionActions, UpdateUserImage, User, UserAddress, UserAddressFirestoreRepository, UserAlreadyRegisteredError, UserBeautyProfileFirestoreRepository, UserFirestoreRepository, UserPaymentMethod, UserPaymentMethodFirestoreRepository, UserType, Variant, VariantHasuraGraphQL, VariantHasuraGraphQLRepository, VertexAxiosAdapter, WeakPasswordError, Where, Wishlist, WishlistHasuraGraphQLRepository, WishlistLogType, deserialize, getClass, is, isAntifraudEnabled, isDebuggable, isUUID, parseDateTime, registerClass, resolveAntifraudVolumeLimits, resolveCacheConfig, resolveClass, serialize, toCents, withCreateFirestore, withCreateHasuraGraphQL, withCrudFirestore, withCrudHasuraGraphQL, withDeleteFirestore, withDeleteHasuraGraphQL, withFindFirestore, withFindHasuraGraphQL, withFirestore, withGetFirestore, withGetHasuraGraphQL, withHasuraGraphQL, withHelpers, withSubCollection, withUpdateFirestore, withUpdateHasuraGraphQL };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@infrab4a/connect",
-  "version": "5.3.0-beta.31",
+  "version": "5.3.0-beta.32",
   "publishConfig": {
     "registry": "https://registry.npmjs.org"
   },

package/src/domain/shop-settings/models/shop-configs.d.ts

@@ -1,18 +1,9 @@
 import { BaseModel, GenericIdentifier } from '../../generic/model';
-import { LimitOrders, ShopErrorMessages, ShopSameDayNotAvailable } from './types';
+import { ShopAntifraudConfig, ShopErrorMessages, ShopSameDayNotAvailable } from './types';
 export declare class ShopConfigs extends BaseModel<ShopConfigs> {
+    id: string;
     errors?: ShopErrorMessages[];
-    antifraude?: {
-        enabled: boolean;
-        week: {
-            subscriber: LimitOrders;
-            nonSubscriber: LimitOrders;
-        };
-        day: {
-            subscriber: LimitOrders;
-            nonSubscriber: LimitOrders;
-        };
-    };
+    antifraude?: ShopAntifraudConfig;
     sameDayNotAvaliable?: ShopSameDayNotAvailable;
     static get identifiersFields(): GenericIdentifier[];
 }

package/src/domain/shop-settings/models/types/antifraud-config.type.d.ts

@@ -0,0 +1,21 @@
+import { LimitOrders } from './limit-orders.type';
+export type AntifraudBlockedAttemptsDay = {
+    subscriber: number;
+    nonSubscriber: number;
+};
+export type AntifraudPeriodLimits = {
+    subscriber: LimitOrders;
+    nonSubscriber: LimitOrders;
+};
+/** Shape persistido em Firestore `shopConfigs.antifraude`. */
+export type ShopAntifraudConfig = {
+    enabled: boolean;
+    day: AntifraudPeriodLimits;
+    week: AntifraudPeriodLimits;
+    blockedAttemptsDay: AntifraudBlockedAttemptsDay;
+};
+/**
+ * Defaults iguais ao hardcode histórico do checkout.
+ * `week.*.zip = null` → Infinity no runtime do volume de cartão.
+ */
+export declare const DEFAULT_SHOP_ANTIFRAUD_CONFIG: ShopAntifraudConfig;

package/src/domain/shop-settings/models/types/index.d.ts

@@ -1,3 +1,4 @@
+export * from './antifraud-config.type';
 export * from './banner.type';
 export * from './benefit.type';
 export * from './brands-carousel.type';

package/src/domain/shop-settings/models/types/limit-orders.type.d.ts

@@ -2,6 +2,7 @@ export type LimitOrders = {
     cpf: number;
     email: number;
     phone: number;
-    zip: number;
-    card?: number;
+    /** Na semana, `null` no Firestore vira Infinity no runtime do antifraude. */
+    zip: number | null;
+    card: number;
 };

package/src/domain/shopping/helpers/antifraud-enabled.helper.d.ts

@@ -0,0 +1,8 @@
+import { ShopConfigsRepository } from '../../shop-settings';
+export declare const ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS = 60;
+/**
+ * Lê `shopConfigs.antifraude.enabled`.
+ * - `false` explícito → antifraude desligado
+ * - ausente / erro / inválido → `true` (mantém comportamento histórico)
+ */
+export declare function isAntifraudEnabled(shopConfigsRepository?: ShopConfigsRepository): Promise<boolean>;

package/src/domain/shopping/helpers/antifraud-volume-limits.helper.d.ts

@@ -0,0 +1,6 @@
+import { ShopAntifraudConfig } from '../../shop-settings/models/types';
+import { ResolvedAntifraudVolumeLimits } from '../types/antifraud-volume-limits.type';
+/** Defaults de runtime (week.zip = Infinity). Usados só como fallback no checkout. */
+export declare const DEFAULT_ANTIFRAUD_VOLUME_LIMITS: ResolvedAntifraudVolumeLimits;
+/** Config inválida/ausente → fallback (comportamento histórico). */
+export declare function resolveAntifraudVolumeLimits(antifraude: ShopAntifraudConfig | undefined | null): ResolvedAntifraudVolumeLimits;

package/src/domain/shopping/helpers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './antifraud-enabled.helper';
+export * from './antifraud-volume-limits.helper';

package/src/domain/shopping/index.d.ts

@@ -1,5 +1,6 @@
 export * from './enums';
 export * from './factories';
+export * from './helpers';
 export * from './interfaces';
 export * from './models';
 export * from './repositories';

package/src/domain/shopping/models/campaign-hashtag-posts.d.ts

@@ -0,0 +1,23 @@
+import { BaseModel, GenericIdentifier } from '../../generic';
+export declare class CampaignHashtagPosts extends BaseModel<CampaignHashtagPosts> {
+    id: string;
+    campaignId: string;
+    postUrl: string;
+    status: string;
+    approved: boolean;
+    rating: number;
+    personId: number;
+    personAccount: string;
+    postAnalysis: string;
+    postEvaluationDate?: Date;
+    consent?: boolean;
+    consentDate?: Date;
+    metadata: {
+        IPAddress: string;
+        UserAgent: string;
+        Platform: string;
+    };
+    createdAt?: Date;
+    updatedAt?: Date;
+    static get identifiersFields(): GenericIdentifier[];
+}

package/src/domain/shopping/models/campaign-hashtag.d.ts

@@ -1,18 +1,20 @@
 import { BaseModel, GenericIdentifier } from '../../generic';
 export declare class CampaignHashtag extends BaseModel<CampaignHashtag> {
     id: string;
-    status?: string;
-    updatedAt?: string;
-    environment: string;
-    campaignName?: string;
-    campaignImage?: string;
-    campaignMinGlampoints?: number;
-    campaignMaxGlampoints?: number;
-    campaignReferCode?: string;
-    campaignDescription?: string;
+    active: boolean;
+    title: string;
+    hashtagCode: string;
+    image?: string;
+    minimumGlampoints: number;
+    maximumGlampoints: number;
+    description?: string;
     startDate?: Date;
     endDate?: Date;
-    campaignSubscribed: boolean;
+    steps?: string[];
     rules?: string[];
+    postsToShowInHome?: number;
+    topPosts?: string[];
+    createdAt?: Date;
+    updatedAt?: Date;
     static get identifiersFields(): GenericIdentifier[];
 }

package/src/domain/shopping/models/coupons/coupon.d.ts

@@ -55,6 +55,7 @@ export declare class Coupon extends BaseModel<Coupon> {
     personEmail?: string;
     influencerEmail?: string;
     plan?: ClubeDaMensPlan;
+    freeShipping?: boolean;
     productsCategories: string[];
     minSubTotalValue?: number;
     active?: Boolean;

package/src/domain/shopping/models/index.d.ts

@@ -1,6 +1,7 @@
 export * from './buy-2-win';
 export * from './campaign-dashboard';
 export * from './campaign-hashtag';
+export * from './campaign-hashtag-posts';
 export * from './checkout';
 export * from './coupons';
 export * from './enums';

package/src/domain/shopping/models/shipping-method.d.ts

@@ -9,6 +9,7 @@ export declare class ShippingMethod extends BaseModel<ShippingMethod> {
     ShippingCompanyId?: number;
     ShippingCompanyName: string;
     ShippingPrice: number;
+    ShippingOriginalPrice?: number;
     State?: string;
     ZipEnd?: number;
     ZipStart?: number;

package/src/domain/shopping/repositories/campaign-hashtag-posts.repository.d.ts

@@ -0,0 +1,4 @@
+import { CrudRepository } from '../../generic/repository/crud.repository';
+import { CampaignHashtagPosts } from '../models/campaign-hashtag-posts';
+export interface CampaignHashtagPostsRepository extends CrudRepository<CampaignHashtagPosts> {
+}

package/src/domain/shopping/repositories/index.d.ts

@@ -1,6 +1,7 @@
 export * from './buy-2-win.repository';
 export * from './campaign-dashboard.repository';
 export * from './campaign-hashtag.repository';
+export * from './campaign-hashtag-posts.repository';
 export * from './checkout.repository';
 export * from './coupon.repository';
 export * from './legacy-order.repository';

package/src/domain/shopping/services/antifraud-bankslip.service.d.ts

@@ -1,9 +1,11 @@
+import { ShopConfigsRepository } from '../../shop-settings';
 import { AntifraudProvider } from '../interfaces';
 import { Checkout } from '../models';
 import { OrderBlockedRepository } from '../repositories';
 export declare class AntifraudBankSlipService implements AntifraudProvider {
     private orderBlockedRepository;
+    private readonly shopConfigsRepository?;
     private MAX_ORDER_VALUE;
-    constructor(orderBlockedRepository: OrderBlockedRepository);
+    constructor(orderBlockedRepository: OrderBlockedRepository, shopConfigsRepository?: ShopConfigsRepository);
     validate(checkout: Checkout): Promise<Boolean>;
 }

package/src/domain/shopping/services/antifraud-card.service.d.ts

@@ -1,17 +1,17 @@
+import { ShopConfigsRepository } from '../../shop-settings';
+import { DEFAULT_ANTIFRAUD_VOLUME_LIMITS, resolveAntifraudVolumeLimits } from '../helpers';
 import { AntifraudProvider } from '../interfaces';
 import { Checkout } from '../models';
 import { OrderBlockedRepository, OrderRepository } from '../repositories';
 import { PaymentCardInfo } from '../types';
+export { DEFAULT_ANTIFRAUD_VOLUME_LIMITS, resolveAntifraudVolumeLimits };
 export declare class AntifraudCardService implements AntifraudProvider {
     private readonly orderRepository;
     private readonly orderBlockedRepository;
-    private LIMIT_ORDERS_DAY;
-    private LIMIT_ORDERS_WEEK;
-    private LIMIT_BLOCKED_ORDERS_DAY;
-    constructor(orderRepository: OrderRepository, orderBlockedRepository: OrderBlockedRepository);
+    private readonly shopConfigsRepository?;
+    constructor(orderRepository: OrderRepository, orderBlockedRepository: OrderBlockedRepository, shopConfigsRepository?: ShopConfigsRepository);
     validate(checkout: Checkout, card: PaymentCardInfo): Promise<Boolean>;
-    private setLimitsByUserType;
-    private getLimitsByUserType;
+    private loadResolvedLimits;
     private validateBlockedOrderAttempts;
     private validateDayAndWeekOrderLimits;
     private verifyBlockedOrderAttempts;

package/src/domain/shopping/services/antifraud-glampoints.service.d.ts

@@ -1,6 +1,8 @@
+import { ShopConfigsRepository } from '../../shop-settings';
 import { AntifraudProvider } from '../interfaces';
 import { Checkout } from '../models';
 export declare class AntifraudGlampointsService implements AntifraudProvider {
-    constructor();
-    validate(_checkout: Checkout): Promise<Boolean>;
+    private readonly shopConfigsRepository?;
+    constructor(shopConfigsRepository?: ShopConfigsRepository);
+    validate(checkout: Checkout): Promise<Boolean>;
 }

package/src/domain/shopping/services/antifraud-pix.service.d.ts

@@ -1,6 +1,8 @@
+import { ShopConfigsRepository } from '../../shop-settings';
 import { AntifraudProvider } from '../interfaces';
 import { Checkout } from '../models';
 export declare class AntifraudPixService implements AntifraudProvider {
-    constructor();
-    validate(_checkout: Checkout): Promise<boolean>;
+    private readonly shopConfigsRepository?;
+    constructor(shopConfigsRepository?: ShopConfigsRepository);
+    validate(checkout: Checkout): Promise<boolean>;
 }

package/src/domain/shopping/types/antifraud-card-validation.type.d.ts

@@ -0,0 +1,40 @@
+import { Checkout } from '../models';
+import { PaymentCardInfo } from './payment-card-info.type';
+import { AntifraudRuntimeLimitOrders } from './antifraud-volume-limits.type';
+export type AntifraudValidationParams = {
+    cpf: string;
+    email: string;
+    phone: string;
+    zip: string;
+    card: PaymentCardInfo;
+};
+export type AntifraudDateRange = {
+    firstDate: number;
+    lastDate: number;
+};
+export type AntifraudOrderCounts = {
+    cpf: number;
+    email: number;
+    phone: number;
+    zip: number;
+    card?: number;
+};
+export type AntifraudBlockedOrderRecordParams = {
+    checkout: Checkout;
+    card: PaymentCardInfo | null;
+    reason: string;
+    key: string;
+    period: string;
+};
+export type AntifraudOrderLimitCheckParams = {
+    checkout: Checkout;
+    orderCounts: AntifraudOrderCounts;
+    limit: AntifraudRuntimeLimitOrders;
+    period: string;
+};
+export type AntifraudOrderFieldQueryParams = {
+    property: string;
+    field: string;
+    value: unknown;
+    range: AntifraudDateRange;
+};

package/src/domain/shopping/types/antifraud-volume-limits.type.d.ts

@@ -0,0 +1,24 @@
+/** Limites resolvidos em runtime (zip semanal pode ser Infinity). */
+export type AntifraudRuntimeLimitOrders = {
+    cpf: number;
+    email: number;
+    phone: number;
+    zip: number;
+    card: number;
+};
+export type ResolvedAntifraudVolumeLimits = {
+    enabled: boolean;
+    source: 'config' | 'fallback';
+    day: {
+        subscriber: AntifraudRuntimeLimitOrders;
+        nonSubscriber: AntifraudRuntimeLimitOrders;
+    };
+    week: {
+        subscriber: AntifraudRuntimeLimitOrders;
+        nonSubscriber: AntifraudRuntimeLimitOrders;
+    };
+    blockedAttemptsDay: {
+        subscriber: number;
+        nonSubscriber: number;
+    };
+};

package/src/domain/shopping/types/index.d.ts

@@ -1,6 +1,8 @@
 export * from './adyen-card.type';
 export * from './adyen-credentials.type';
+export * from './antifraud-card-validation.type';
 export * from './antifraud-provider.type';
+export * from './antifraud-volume-limits.type';
 export * from './card-info.type';
 export * from './checkout-paylod-request.type';
 export * from './checkout-response.type';

package/src/infra/firebase/firestore/repositories/shopping/campaign-hashtag-posts-firestore.repository.d.ts

@@ -0,0 +1,8 @@
+import { CampaignHashtagPosts } from '../../../../../domain/shopping/models/campaign-hashtag-posts';
+import { CampaignHashtagPostsRepository } from '../../../../../domain/shopping/repositories/campaign-hashtag-posts.repository';
+import { FirestoreConstructorParams } from '../../mixins';
+declare const CampaignHashtagPostsFirestoreRepository_base: import("../../../../../utils").MixinCtor<import("../..").FirestoreRepository<CampaignHashtagPosts> & import("../../../../..").CrudRepository<CampaignHashtagPosts, import("../../../../..").CrudParams<CampaignHashtagPosts>> & import("../..").FirestoreHelpers, [FirestoreConstructorParams<CampaignHashtagPosts>, ...any[]]>;
+export declare class CampaignHashtagPostsFirestoreRepository extends CampaignHashtagPostsFirestoreRepository_base implements CampaignHashtagPostsRepository {
+    constructor({ firestore, interceptors, cache, }: Pick<FirestoreConstructorParams<CampaignHashtagPosts>, 'firestore' | 'interceptors' | 'cache'>);
+}
+export {};

package/src/infra/firebase/firestore/repositories/shopping/index.d.ts

@@ -1,6 +1,7 @@
 export * from './buy-2-win-firestore.repository';
 export * from './campaign-dashboard-firestore.repository';
 export * from './campaign-hashtag-firestore.repository';
+export * from './campaign-hashtag-posts-firestore.repository';
 export * from './checkout-firestore.repository';
 export * from './checkout-subscription-firestore.repository';
 export * from './coupon-firestore.repository';