@infrab4a/connect 5.7.10-alpha.0 → 5.7.10-alpha.2

package/index.cjs.js

@@ -1933,62 +1933,153 @@ class AntifraudBankSlipService {
     }
 }
 
+const ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS = 60;
+/** Defaults personalizáveis via shopConfigs.antifraude; usados só como fallback. */
+const DEFAULT_ANTIFRAUD_VOLUME_LIMITS = {
+    enabled: true,
+    source: 'fallback',
+    day: {
+        subscriber: { cpf: 4, email: 4, phone: 4, card: 4, zip: 4 },
+        nonSubscriber: { cpf: 2, email: 2, phone: 2, card: 2, zip: 2 },
+    },
+    week: {
+        subscriber: { cpf: 12, email: 12, phone: 12, card: 12, zip: Infinity },
+        nonSubscriber: { cpf: 7, email: 7, phone: 7, card: 7, zip: Infinity },
+    },
+    blockedAttemptsDay: {
+        subscriber: 7,
+        nonSubscriber: 5,
+    },
+};
+function isPositiveInteger(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 1 && Number.isInteger(value);
+}
+function normalizeLimitOrders(raw, allowInfiniteZip) {
+    if (!raw)
+        return null;
+    const zip = allowInfiniteZip && (raw.zip === null || raw.zip === undefined || raw.zip === Infinity) ? Infinity : raw.zip;
+    const normalized = {
+        cpf: raw.cpf,
+        email: raw.email,
+        phone: raw.phone,
+        zip: zip,
+        card: raw.card,
+    };
+    for (const key of ['cpf', 'email', 'phone', 'zip', 'card']) {
+        if (key === 'zip' && normalized.zip === Infinity)
+            continue;
+        if (!isPositiveInteger(normalized[key]))
+            return null;
+    }
+    return normalized;
+}
+/** Expõe resolução para testes; config inválida → fallback (comportamento atual). */
+function resolveAntifraudVolumeLimits(antifraude) {
+    if (!antifraude || typeof antifraude.enabled !== 'boolean') {
+        return {
+            ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS,
+            day: {
+                subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.subscriber },
+                nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.nonSubscriber },
+            },
+            week: {
+                subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.subscriber },
+                nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.nonSubscriber },
+            },
+            blockedAttemptsDay: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.blockedAttemptsDay },
+            source: 'fallback',
+        };
+    }
+    const daySubscriber = normalizeLimitOrders(antifraude.day?.subscriber, false);
+    const dayNonSubscriber = normalizeLimitOrders(antifraude.day?.nonSubscriber, false);
+    const weekSubscriber = normalizeLimitOrders(antifraude.week?.subscriber, true);
+    const weekNonSubscriber = normalizeLimitOrders(antifraude.week?.nonSubscriber, true);
+    const blocked = antifraude.blockedAttemptsDay;
+    if (!daySubscriber ||
+        !dayNonSubscriber ||
+        !weekSubscriber ||
+        !weekNonSubscriber ||
+        !blocked ||
+        !isPositiveInteger(blocked.subscriber) ||
+        !isPositiveInteger(blocked.nonSubscriber)) {
+        // Kill-switch explícito prevalece mesmo com payload inválido (senão o fallback religaria o volume).
+        if (antifraude.enabled === false) {
+            const fallback = resolveAntifraudVolumeLimits(null);
+            return { ...fallback, enabled: false, source: 'fallback' };
+        }
+        return resolveAntifraudVolumeLimits(null);
+    }
+    return {
+        enabled: antifraude.enabled,
+        source: 'config',
+        day: { subscriber: daySubscriber, nonSubscriber: dayNonSubscriber },
+        week: { subscriber: weekSubscriber, nonSubscriber: weekNonSubscriber },
+        blockedAttemptsDay: {
+            subscriber: blocked.subscriber,
+            nonSubscriber: blocked.nonSubscriber,
+        },
+    };
+}
 class AntifraudCardService {
-    constructor(orderRepository, orderBlockedRepository) {
+    constructor(orderRepository, orderBlockedRepository, shopConfigsRepository) {
         this.orderRepository = orderRepository;
         this.orderBlockedRepository = orderBlockedRepository;
-        this.LIMIT_ORDERS_DAY = null;
-        this.LIMIT_ORDERS_WEEK = null;
+        this.shopConfigsRepository = shopConfigsRepository;
     }
     async validate(checkout, card) {
-        this.setLimitsByUserType(checkout.user.isSubscriber);
-        await this.validateBlockedOrderAttempts(checkout, card);
-        await this.validateDayAndWeekOrderLimits(checkout, card);
+        // Limites locais por request — evita race em provider Nest singleton entre awaits.
+        const resolved = await this.loadResolvedLimits();
+        const isSubscriber = !!checkout.user?.isSubscriber;
+        const dayLimits = isSubscriber ? resolved.day.subscriber : resolved.day.nonSubscriber;
+        const weekLimits = isSubscriber ? resolved.week.subscriber : resolved.week.nonSubscriber;
+        const blockedAttemptsDay = isSubscriber
+            ? resolved.blockedAttemptsDay.subscriber
+            : resolved.blockedAttemptsDay.nonSubscriber;
+        if (!resolved.enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_card_volume_skipped',
+                source: resolved.source,
+                enabled: false,
+                checkoutId: checkout.id,
+                isSubscriber,
+            }));
+            return true;
+        }
+        console.info(JSON.stringify({
+            msg: 'antifraud_card_volume_limits',
+            source: resolved.source,
+            enabled: true,
+            checkoutId: checkout.id,
+            isSubscriber,
+            blockedAttemptsDay,
+            day: dayLimits,
+            week: weekLimits,
+        }));
+        await this.validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
+        await this.validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits);
         return true;
     }
-    setLimitsByUserType(isSubscriber) {
-        this.LIMIT_ORDERS_DAY = {
-            subscriber: {
-                cpf: 4,
-                email: 4,
-                phone: 4,
-                card: 4,
-                zip: 4,
-            },
-            nonSubscriber: {
-                cpf: 2,
-                email: 2,
-                phone: 2,
-                card: 2,
-                zip: 2,
-            },
-        };
-        this.LIMIT_ORDERS_WEEK = {
-            subscriber: {
-                cpf: 12,
-                email: 12,
-                phone: 12,
-                card: 12,
-                zip: Infinity,
-            },
-            nonSubscriber: {
-                cpf: 7,
-                email: 7,
-                phone: 7,
-                card: 7,
-                zip: Infinity,
-            },
-        };
-        this.LIMIT_BLOCKED_ORDERS_DAY = isSubscriber ? 7 : 5;
-    }
-    getLimitsByUserType(type, isSubscriber) {
-        const limits = type === 'day' ? this.LIMIT_ORDERS_DAY : this.LIMIT_ORDERS_WEEK;
-        return isSubscriber ? limits['subscriber'] : limits['nonSubscriber'];
+    async loadResolvedLimits() {
+        if (!this.shopConfigsRepository) {
+            return resolveAntifraudVolumeLimits(null);
+        }
+        try {
+            const result = await this.shopConfigsRepository.find({}, { cache: { enabled: true, ttl: ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS } });
+            return resolveAntifraudVolumeLimits(result?.data?.at(0)?.antifraude);
+        }
+        catch (error) {
+            console.warn(JSON.stringify({
+                msg: 'antifraud_card_volume_config_load_failed',
+                source: 'fallback',
+                error: error instanceof Error ? error.message : String(error),
+            }));
+            return resolveAntifraudVolumeLimits(null);
+        }
     }
-    async validateBlockedOrderAttempts(checkout, card) {
-        const isValid = await this.verifyBlockedOrderAttempts(checkout, card);
+    async validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
+        const isValid = await this.verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
         if (!isValid) {
-            throw new FraudValidationError(`Cliente com mais de ${this.LIMIT_BLOCKED_ORDERS_DAY} compras negadas/bloqueadas no dia`, exports.ErrorsCode.fraudPreventionInternal, {
+            throw new FraudValidationError(`Cliente com mais de ${blockedAttemptsDay} compras negadas/bloqueadas no dia`, exports.ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
                 userEmail: checkout.user.email,
                 info: {
@@ -1999,8 +2090,8 @@ class AntifraudCardService {
             });
         }
     }
-    async validateDayAndWeekOrderLimits(checkout, card) {
-        const isValid = await this.verifyDayAndWeekOrders(checkout, card);
+    async validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits) {
+        const isValid = await this.verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits);
         if (!isValid) {
             throw new FraudValidationError('Cliente tentando comprar mais do que o permitido no dia/semana', exports.ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
@@ -2013,15 +2104,15 @@ class AntifraudCardService {
             });
         }
     }
-    async verifyBlockedOrderAttempts(checkout, card) {
+    async verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
         const dateRange = this.getTodayDateRange();
         const blockedOrders = await this.getBlockedOrdersByMultipleCriteria(checkout, dateRange);
         const totalBlockedAttempts = this.calculateUniqueBlockedAttempts(blockedOrders, checkout);
-        if (totalBlockedAttempts >= this.LIMIT_BLOCKED_ORDERS_DAY) {
+        if (totalBlockedAttempts >= blockedAttemptsDay) {
             await this.createBlockedOrderRecord({
                 checkout,
                 card,
-                reason: `More than ${this.LIMIT_BLOCKED_ORDERS_DAY} attempts have failed`,
+                reason: `More than ${blockedAttemptsDay} attempts have failed`,
                 key: 'Failed attempts',
                 period: 'day',
             });
@@ -2123,12 +2214,12 @@ class AntifraudCardService {
             card,
         });
     }
-    async verifyDayAndWeekOrders(checkout, card) {
+    async verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits) {
         const validationParams = this.buildValidationParams(checkout, card);
-        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams);
+        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams, dayLimits);
         if (!isDayLimitValid)
             return false;
-        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams);
+        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams, weekLimits);
         return isWeekLimitValid;
     }
     buildValidationParams(checkout, card) {
@@ -2140,9 +2231,8 @@ class AntifraudCardService {
             card,
         };
     }
-    async validateDayOrderLimits(checkout, params) {
+    async validateDayOrderLimits(checkout, params, limits) {
         const ordersPerDay = await this.validateOrdersByRange(params, this.getDateRange('day'));
-        const limits = this.getLimitsByUserType('day', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerDay,
@@ -2150,9 +2240,8 @@ class AntifraudCardService {
             period: 'day',
         });
     }
-    async validateWeekOrderLimits(checkout, params) {
+    async validateWeekOrderLimits(checkout, params, limits) {
         const ordersPerWeek = await this.validateOrdersByRange(params, this.getDateRange('week'));
-        const limits = this.getLimitsByUserType('week', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerWeek,
@@ -11762,6 +11851,7 @@ exports.ConnectDocumentService = ConnectDocumentService;
 exports.ConnectFirestoreService = ConnectFirestoreService;
 exports.Coupon = Coupon;
 exports.CouponFirestoreRepository = CouponFirestoreRepository;
+exports.DEFAULT_ANTIFRAUD_VOLUME_LIMITS = DEFAULT_ANTIFRAUD_VOLUME_LIMITS;
 exports.Debug = Debug;
 exports.DebugDecoratorHelper = DebugDecoratorHelper;
 exports.DebugHelper = DebugHelper;
@@ -11902,6 +11992,7 @@ exports.isDebuggable = isDebuggable;
 exports.isUUID = isUUID;
 exports.parseDateTime = parseDateTime;
 exports.registerClass = registerClass;
+exports.resolveAntifraudVolumeLimits = resolveAntifraudVolumeLimits;
 exports.resolveCacheConfig = resolveCacheConfig;
 exports.resolveClass = resolveClass;
 exports.serialize = serialize;

package/index.esm.js

@@ -1927,62 +1927,153 @@ class AntifraudBankSlipService {
     }
 }
 
+const ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS = 60;
+/** Defaults personalizáveis via shopConfigs.antifraude; usados só como fallback. */
+const DEFAULT_ANTIFRAUD_VOLUME_LIMITS = {
+    enabled: true,
+    source: 'fallback',
+    day: {
+        subscriber: { cpf: 4, email: 4, phone: 4, card: 4, zip: 4 },
+        nonSubscriber: { cpf: 2, email: 2, phone: 2, card: 2, zip: 2 },
+    },
+    week: {
+        subscriber: { cpf: 12, email: 12, phone: 12, card: 12, zip: Infinity },
+        nonSubscriber: { cpf: 7, email: 7, phone: 7, card: 7, zip: Infinity },
+    },
+    blockedAttemptsDay: {
+        subscriber: 7,
+        nonSubscriber: 5,
+    },
+};
+function isPositiveInteger(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 1 && Number.isInteger(value);
+}
+function normalizeLimitOrders(raw, allowInfiniteZip) {
+    if (!raw)
+        return null;
+    const zip = allowInfiniteZip && (raw.zip === null || raw.zip === undefined || raw.zip === Infinity) ? Infinity : raw.zip;
+    const normalized = {
+        cpf: raw.cpf,
+        email: raw.email,
+        phone: raw.phone,
+        zip: zip,
+        card: raw.card,
+    };
+    for (const key of ['cpf', 'email', 'phone', 'zip', 'card']) {
+        if (key === 'zip' && normalized.zip === Infinity)
+            continue;
+        if (!isPositiveInteger(normalized[key]))
+            return null;
+    }
+    return normalized;
+}
+/** Expõe resolução para testes; config inválida → fallback (comportamento atual). */
+function resolveAntifraudVolumeLimits(antifraude) {
+    if (!antifraude || typeof antifraude.enabled !== 'boolean') {
+        return {
+            ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS,
+            day: {
+                subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.subscriber },
+                nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.day.nonSubscriber },
+            },
+            week: {
+                subscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.subscriber },
+                nonSubscriber: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.week.nonSubscriber },
+            },
+            blockedAttemptsDay: { ...DEFAULT_ANTIFRAUD_VOLUME_LIMITS.blockedAttemptsDay },
+            source: 'fallback',
+        };
+    }
+    const daySubscriber = normalizeLimitOrders(antifraude.day?.subscriber, false);
+    const dayNonSubscriber = normalizeLimitOrders(antifraude.day?.nonSubscriber, false);
+    const weekSubscriber = normalizeLimitOrders(antifraude.week?.subscriber, true);
+    const weekNonSubscriber = normalizeLimitOrders(antifraude.week?.nonSubscriber, true);
+    const blocked = antifraude.blockedAttemptsDay;
+    if (!daySubscriber ||
+        !dayNonSubscriber ||
+        !weekSubscriber ||
+        !weekNonSubscriber ||
+        !blocked ||
+        !isPositiveInteger(blocked.subscriber) ||
+        !isPositiveInteger(blocked.nonSubscriber)) {
+        // Kill-switch explícito prevalece mesmo com payload inválido (senão o fallback religaria o volume).
+        if (antifraude.enabled === false) {
+            const fallback = resolveAntifraudVolumeLimits(null);
+            return { ...fallback, enabled: false, source: 'fallback' };
+        }
+        return resolveAntifraudVolumeLimits(null);
+    }
+    return {
+        enabled: antifraude.enabled,
+        source: 'config',
+        day: { subscriber: daySubscriber, nonSubscriber: dayNonSubscriber },
+        week: { subscriber: weekSubscriber, nonSubscriber: weekNonSubscriber },
+        blockedAttemptsDay: {
+            subscriber: blocked.subscriber,
+            nonSubscriber: blocked.nonSubscriber,
+        },
+    };
+}
 class AntifraudCardService {
-    constructor(orderRepository, orderBlockedRepository) {
+    constructor(orderRepository, orderBlockedRepository, shopConfigsRepository) {
         this.orderRepository = orderRepository;
         this.orderBlockedRepository = orderBlockedRepository;
-        this.LIMIT_ORDERS_DAY = null;
-        this.LIMIT_ORDERS_WEEK = null;
+        this.shopConfigsRepository = shopConfigsRepository;
     }
     async validate(checkout, card) {
-        this.setLimitsByUserType(checkout.user.isSubscriber);
-        await this.validateBlockedOrderAttempts(checkout, card);
-        await this.validateDayAndWeekOrderLimits(checkout, card);
+        // Limites locais por request — evita race em provider Nest singleton entre awaits.
+        const resolved = await this.loadResolvedLimits();
+        const isSubscriber = !!checkout.user?.isSubscriber;
+        const dayLimits = isSubscriber ? resolved.day.subscriber : resolved.day.nonSubscriber;
+        const weekLimits = isSubscriber ? resolved.week.subscriber : resolved.week.nonSubscriber;
+        const blockedAttemptsDay = isSubscriber
+            ? resolved.blockedAttemptsDay.subscriber
+            : resolved.blockedAttemptsDay.nonSubscriber;
+        if (!resolved.enabled) {
+            console.info(JSON.stringify({
+                msg: 'antifraud_card_volume_skipped',
+                source: resolved.source,
+                enabled: false,
+                checkoutId: checkout.id,
+                isSubscriber,
+            }));
+            return true;
+        }
+        console.info(JSON.stringify({
+            msg: 'antifraud_card_volume_limits',
+            source: resolved.source,
+            enabled: true,
+            checkoutId: checkout.id,
+            isSubscriber,
+            blockedAttemptsDay,
+            day: dayLimits,
+            week: weekLimits,
+        }));
+        await this.validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
+        await this.validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits);
         return true;
     }
-    setLimitsByUserType(isSubscriber) {
-        this.LIMIT_ORDERS_DAY = {
-            subscriber: {
-                cpf: 4,
-                email: 4,
-                phone: 4,
-                card: 4,
-                zip: 4,
-            },
-            nonSubscriber: {
-                cpf: 2,
-                email: 2,
-                phone: 2,
-                card: 2,
-                zip: 2,
-            },
-        };
-        this.LIMIT_ORDERS_WEEK = {
-            subscriber: {
-                cpf: 12,
-                email: 12,
-                phone: 12,
-                card: 12,
-                zip: Infinity,
-            },
-            nonSubscriber: {
-                cpf: 7,
-                email: 7,
-                phone: 7,
-                card: 7,
-                zip: Infinity,
-            },
-        };
-        this.LIMIT_BLOCKED_ORDERS_DAY = isSubscriber ? 7 : 5;
-    }
-    getLimitsByUserType(type, isSubscriber) {
-        const limits = type === 'day' ? this.LIMIT_ORDERS_DAY : this.LIMIT_ORDERS_WEEK;
-        return isSubscriber ? limits['subscriber'] : limits['nonSubscriber'];
+    async loadResolvedLimits() {
+        if (!this.shopConfigsRepository) {
+            return resolveAntifraudVolumeLimits(null);
+        }
+        try {
+            const result = await this.shopConfigsRepository.find({}, { cache: { enabled: true, ttl: ANTIFRAUD_CONFIG_CACHE_TTL_SECONDS } });
+            return resolveAntifraudVolumeLimits(result?.data?.at(0)?.antifraude);
+        }
+        catch (error) {
+            console.warn(JSON.stringify({
+                msg: 'antifraud_card_volume_config_load_failed',
+                source: 'fallback',
+                error: error instanceof Error ? error.message : String(error),
+            }));
+            return resolveAntifraudVolumeLimits(null);
+        }
     }
-    async validateBlockedOrderAttempts(checkout, card) {
-        const isValid = await this.verifyBlockedOrderAttempts(checkout, card);
+    async validateBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
+        const isValid = await this.verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay);
         if (!isValid) {
-            throw new FraudValidationError(`Cliente com mais de ${this.LIMIT_BLOCKED_ORDERS_DAY} compras negadas/bloqueadas no dia`, ErrorsCode.fraudPreventionInternal, {
+            throw new FraudValidationError(`Cliente com mais de ${blockedAttemptsDay} compras negadas/bloqueadas no dia`, ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
                 userEmail: checkout.user.email,
                 info: {
@@ -1993,8 +2084,8 @@ class AntifraudCardService {
             });
         }
     }
-    async validateDayAndWeekOrderLimits(checkout, card) {
-        const isValid = await this.verifyDayAndWeekOrders(checkout, card);
+    async validateDayAndWeekOrderLimits(checkout, card, dayLimits, weekLimits) {
+        const isValid = await this.verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits);
         if (!isValid) {
             throw new FraudValidationError('Cliente tentando comprar mais do que o permitido no dia/semana', ErrorsCode.fraudPreventionInternal, {
                 checkoutId: checkout.id,
@@ -2007,15 +2098,15 @@ class AntifraudCardService {
             });
         }
     }
-    async verifyBlockedOrderAttempts(checkout, card) {
+    async verifyBlockedOrderAttempts(checkout, card, blockedAttemptsDay) {
         const dateRange = this.getTodayDateRange();
         const blockedOrders = await this.getBlockedOrdersByMultipleCriteria(checkout, dateRange);
         const totalBlockedAttempts = this.calculateUniqueBlockedAttempts(blockedOrders, checkout);
-        if (totalBlockedAttempts >= this.LIMIT_BLOCKED_ORDERS_DAY) {
+        if (totalBlockedAttempts >= blockedAttemptsDay) {
             await this.createBlockedOrderRecord({
                 checkout,
                 card,
-                reason: `More than ${this.LIMIT_BLOCKED_ORDERS_DAY} attempts have failed`,
+                reason: `More than ${blockedAttemptsDay} attempts have failed`,
                 key: 'Failed attempts',
                 period: 'day',
             });
@@ -2117,12 +2208,12 @@ class AntifraudCardService {
             card,
         });
     }
-    async verifyDayAndWeekOrders(checkout, card) {
+    async verifyDayAndWeekOrders(checkout, card, dayLimits, weekLimits) {
         const validationParams = this.buildValidationParams(checkout, card);
-        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams);
+        const isDayLimitValid = await this.validateDayOrderLimits(checkout, validationParams, dayLimits);
         if (!isDayLimitValid)
             return false;
-        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams);
+        const isWeekLimitValid = await this.validateWeekOrderLimits(checkout, validationParams, weekLimits);
         return isWeekLimitValid;
     }
     buildValidationParams(checkout, card) {
@@ -2134,9 +2225,8 @@ class AntifraudCardService {
             card,
         };
     }
-    async validateDayOrderLimits(checkout, params) {
+    async validateDayOrderLimits(checkout, params, limits) {
         const ordersPerDay = await this.validateOrdersByRange(params, this.getDateRange('day'));
-        const limits = this.getLimitsByUserType('day', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerDay,
@@ -2144,9 +2234,8 @@ class AntifraudCardService {
             period: 'day',
         });
     }
-    async validateWeekOrderLimits(checkout, params) {
+    async validateWeekOrderLimits(checkout, params, limits) {
         const ordersPerWeek = await this.validateOrdersByRange(params, this.getDateRange('week'));
-        const limits = this.getLimitsByUserType('week', checkout.user.isSubscriber);
         return this.checkOrderLimitsAndBlock({
             checkout,
             orderCounts: ordersPerWeek,
@@ -11581,4 +11670,4 @@ class ProductsVertexSearch {
     }
 }
 
-export { AccessoryImportances, Address, AdyenCardAxiosAdapter, AdyenPaymentMethodFactory, AntifraudBankSlipService, AntifraudCardService, AntifraudGlampointsService, AntifraudPixService, AntifraudProviderFactory, AntifraudProviders, Area, Authentication, AuthenticationFirebaseAuthService, AxiosAdapter, Base, BaseModel, BeardProblems, BeardSizes, BeautyProductImportances, BeautyProfile, BeautyQuestionsHelper, BillingStatus, BodyProblems, BodyShapes, BodyTattoos, BrandCategory, BrandCategoryFirestoreRepository, BrandEquityOptions, BusinessError, BusinessUnitEnum, Buy2Win, Buy2WinFirestoreRepository, Campaign, CampaignBanner, CampaignDashboard, CampaignDashboardFirestoreRepository, CampaignHashtag, CampaignHashtagFirestoreRepository, Category, CategoryCollectionChildren, CategoryCollectionChildrenHasuraGraphQLRepository, CategoryFilter, CategoryFilterHasuraGraphQLRepository, CategoryFirestoreRepository, CategoryHasuraGraphQL, CategoryHasuraGraphQLRepository, CategoryProduct, CategoryProductHasuraGraphQLRepository, Checkout, CheckoutFirestoreRepository, CheckoutSubscription, CheckoutSubscriptionFirestoreRepository, CheckoutTypes, ClassNameHelper, ConnectBaseDocumentSnapshot, ConnectCollectionService, ConnectDocumentService, ConnectFirestoreService, Coupon, CouponCategories, CouponCategory, CouponChannels, CouponFirestoreRepository, CouponOldCategories, CouponSubtypes, CouponTypes, Debug, DebugDecoratorHelper, DebugHelper, DebugNamespaces, DuplicatedResultsError, Edition, EditionStatus, ErrorsCode, Exclusivities, FaceSkinOilinesses, FaceSkinProblems, FaceSkinTones, FamilyIncomes, Filter, FilterHasuraGraphQLRepository, FilterOption, FilterOptionHasuraGraphQLRepository, FilterType, FirebaseFileUploaderService, FragranceImportances, FraudValidationError, GenderDestination, GlampointsPaymentMethodFactory, GlampointsPaymentService, Group, GroupFirestoreRepository, HairColors, HairProblems, HairStrands, HairTypes, Home, HomeFirestoreRepository, InvalidArgumentError, InvalidCheckoutError, KitProduct, KitProductHasuraGraphQL, Lead, LeadFirestoreRepository, LegacyOrderFirestoreRepository, LineItem, Log, LogDocument, LogFirestoreRepository, Logger, MercadoPagoBankSlipAxiosAdapter, MercadoPagoCardAxiosAdapter, MercadoPagoErrorHelper, MercadoPagoPaymentMethodFactory, MercadoPagoPixAxiosAdapter, MercadoPagoRequestHelper, MercadoPagoResponseHelper, MercadoPagoStatusDetailEnum, MercadoPagoStatusEnum, NotFoundError, ObsEmitter, OfficePosition, Order, OrderBlocked, OrderBlockedFirestoreRepository, OrderBlockedType, OrderFirestoreRepository, OrderPaymentStatus, OrderStatus, PagarMeV5OrderStatus, PagarMeV5PaymentStatus, PagarmeBankSlipAxiosAdapter, PagarmeCardAxiosAdapter, PagarmePaymentMethodFactory, PagarmePaymentStatus, PagarmePixAxiosAdapter, PagarmeV5BankSlipAxiosAdapter, PagarmeV5BaseAxiosAdapter, PagarmeV5CardAxiosAdapter, PagarmeV5PixAxiosAdapter, Payment, PaymentError, PaymentFirestoreRepository, PaymentMethods, PaymentProviderFactory, PaymentProviders, PaymentTransaction, PaymentType, PersonTypes, Plans, Product, ProductCatalogHasuraGraphQL, ProductCatalogHasuraGraphQLRepository, ProductErrors, ProductErrorsHasuraGraphQL, ProductErrorsHasuraGraphQLRepository, ProductFirestoreRepository, ProductGroup, ProductGroupHasuraGraphQLRepository, ProductHasuraGraphQL, ProductHasuraGraphQLRepository, ProductLabelEnum, ProductPriceLog, ProductPriceLogHasuraGraphQLRepository, ProductReview, ProductReviewHasuraGraphQLRepository, ProductSpents, ProductStockEntry, ProductStockEntryHasuraGraphQL, ProductStockEntryHasuraGraphQLRepository, ProductStockNotification, ProductStockNotificationHasuraGraphQLRepository, ProductVariantFirestoreRepository, ProductsIndex, ProductsVertexSearch, QuestionsFilters, RecoveryPassword, ReflectHelper, Register, RegisterFirebaseAuthService, RequiredArgumentError, RestCacheAdapter, RoundProductPricesHelper, Sequence, SequenceFirestoreRepository, ShippingMethod, ShopConfigs, ShopConfigsFirestoreRepository, ShopMenu, ShopMenuFirestoreRepository, ShopPageName, ShopSettings, ShopSettingsFirestoreRepository, ShoppingRecurrence, ShoppingRecurrenceCycle, ShoppingRecurrenceEdition, ShoppingRecurrenceEditionFirestoreRepository, ShoppingRecurrenceEditionStatus, ShoppingRecurrenceErrorLog, ShoppingRecurrenceErrorLogFirestoreRepository, ShoppingRecurrenceFirestoreRepository, ShoppingRecurrenceStatus, Shops, SignInMethods, SignOut, Status, StockLimitError, StockOutError, Subscription, SubscriptionEditionFirestoreRepository, SubscriptionFirestoreRepository, SubscriptionMaterialization, SubscriptionMaterializationFirestoreRepository, SubscriptionPayment, SubscriptionPaymentFirestoreRepository, SubscriptionPlan, SubscriptionPlanFirestoreRepository, SubscriptionProductFirestoreRepository, SubscriptionSummary, SubscriptionSummaryFirestoreRepository, Trace, TransactionPaymentMethods, UnauthorizedError, UpdateOptionActions, UpdateUserImage, User, UserAddress, UserAddressFirestoreRepository, UserAlreadyRegisteredError, UserBeautyProfileFirestoreRepository, UserFirestoreRepository, UserPaymentMethod, UserPaymentMethodFirestoreRepository, UserType, Variant, VariantHasuraGraphQL, VariantHasuraGraphQLRepository, VertexAxiosAdapter, WeakPasswordError, Where, Wishlist, WishlistHasuraGraphQLRepository, WishlistLogType, deserialize, getClass, is, isDebuggable, isUUID, parseDateTime, registerClass, resolveCacheConfig, resolveClass, serialize, toCents, withCreateFirestore, withCreateHasuraGraphQL, withCrudFirestore, withCrudHasuraGraphQL, withDeleteFirestore, withDeleteHasuraGraphQL, withFindFirestore, withFindHasuraGraphQL, withFirestore, withGetFirestore, withGetHasuraGraphQL, withHasuraGraphQL, withHelpers, withSubCollection, withUpdateFirestore, withUpdateHasuraGraphQL };
+export { AccessoryImportances, Address, AdyenCardAxiosAdapter, AdyenPaymentMethodFactory, AntifraudBankSlipService, AntifraudCardService, AntifraudGlampointsService, AntifraudPixService, AntifraudProviderFactory, AntifraudProviders, Area, Authentication, AuthenticationFirebaseAuthService, AxiosAdapter, Base, BaseModel, BeardProblems, BeardSizes, BeautyProductImportances, BeautyProfile, BeautyQuestionsHelper, BillingStatus, BodyProblems, BodyShapes, BodyTattoos, BrandCategory, BrandCategoryFirestoreRepository, BrandEquityOptions, BusinessError, BusinessUnitEnum, Buy2Win, Buy2WinFirestoreRepository, Campaign, CampaignBanner, CampaignDashboard, CampaignDashboardFirestoreRepository, CampaignHashtag, CampaignHashtagFirestoreRepository, Category, CategoryCollectionChildren, CategoryCollectionChildrenHasuraGraphQLRepository, CategoryFilter, CategoryFilterHasuraGraphQLRepository, CategoryFirestoreRepository, CategoryHasuraGraphQL, CategoryHasuraGraphQLRepository, CategoryProduct, CategoryProductHasuraGraphQLRepository, Checkout, CheckoutFirestoreRepository, CheckoutSubscription, CheckoutSubscriptionFirestoreRepository, CheckoutTypes, ClassNameHelper, ConnectBaseDocumentSnapshot, ConnectCollectionService, ConnectDocumentService, ConnectFirestoreService, Coupon, CouponCategories, CouponCategory, CouponChannels, CouponFirestoreRepository, CouponOldCategories, CouponSubtypes, CouponTypes, DEFAULT_ANTIFRAUD_VOLUME_LIMITS, Debug, DebugDecoratorHelper, DebugHelper, DebugNamespaces, DuplicatedResultsError, Edition, EditionStatus, ErrorsCode, Exclusivities, FaceSkinOilinesses, FaceSkinProblems, FaceSkinTones, FamilyIncomes, Filter, FilterHasuraGraphQLRepository, FilterOption, FilterOptionHasuraGraphQLRepository, FilterType, FirebaseFileUploaderService, FragranceImportances, FraudValidationError, GenderDestination, GlampointsPaymentMethodFactory, GlampointsPaymentService, Group, GroupFirestoreRepository, HairColors, HairProblems, HairStrands, HairTypes, Home, HomeFirestoreRepository, InvalidArgumentError, InvalidCheckoutError, KitProduct, KitProductHasuraGraphQL, Lead, LeadFirestoreRepository, LegacyOrderFirestoreRepository, LineItem, Log, LogDocument, LogFirestoreRepository, Logger, MercadoPagoBankSlipAxiosAdapter, MercadoPagoCardAxiosAdapter, MercadoPagoErrorHelper, MercadoPagoPaymentMethodFactory, MercadoPagoPixAxiosAdapter, MercadoPagoRequestHelper, MercadoPagoResponseHelper, MercadoPagoStatusDetailEnum, MercadoPagoStatusEnum, NotFoundError, ObsEmitter, OfficePosition, Order, OrderBlocked, OrderBlockedFirestoreRepository, OrderBlockedType, OrderFirestoreRepository, OrderPaymentStatus, OrderStatus, PagarMeV5OrderStatus, PagarMeV5PaymentStatus, PagarmeBankSlipAxiosAdapter, PagarmeCardAxiosAdapter, PagarmePaymentMethodFactory, PagarmePaymentStatus, PagarmePixAxiosAdapter, PagarmeV5BankSlipAxiosAdapter, PagarmeV5BaseAxiosAdapter, PagarmeV5CardAxiosAdapter, PagarmeV5PixAxiosAdapter, Payment, PaymentError, PaymentFirestoreRepository, PaymentMethods, PaymentProviderFactory, PaymentProviders, PaymentTransaction, PaymentType, PersonTypes, Plans, Product, ProductCatalogHasuraGraphQL, ProductCatalogHasuraGraphQLRepository, ProductErrors, ProductErrorsHasuraGraphQL, ProductErrorsHasuraGraphQLRepository, ProductFirestoreRepository, ProductGroup, ProductGroupHasuraGraphQLRepository, ProductHasuraGraphQL, ProductHasuraGraphQLRepository, ProductLabelEnum, ProductPriceLog, ProductPriceLogHasuraGraphQLRepository, ProductReview, ProductReviewHasuraGraphQLRepository, ProductSpents, ProductStockEntry, ProductStockEntryHasuraGraphQL, ProductStockEntryHasuraGraphQLRepository, ProductStockNotification, ProductStockNotificationHasuraGraphQLRepository, ProductVariantFirestoreRepository, ProductsIndex, ProductsVertexSearch, QuestionsFilters, RecoveryPassword, ReflectHelper, Register, RegisterFirebaseAuthService, RequiredArgumentError, RestCacheAdapter, RoundProductPricesHelper, Sequence, SequenceFirestoreRepository, ShippingMethod, ShopConfigs, ShopConfigsFirestoreRepository, ShopMenu, ShopMenuFirestoreRepository, ShopPageName, ShopSettings, ShopSettingsFirestoreRepository, ShoppingRecurrence, ShoppingRecurrenceCycle, ShoppingRecurrenceEdition, ShoppingRecurrenceEditionFirestoreRepository, ShoppingRecurrenceEditionStatus, ShoppingRecurrenceErrorLog, ShoppingRecurrenceErrorLogFirestoreRepository, ShoppingRecurrenceFirestoreRepository, ShoppingRecurrenceStatus, Shops, SignInMethods, SignOut, Status, StockLimitError, StockOutError, Subscription, SubscriptionEditionFirestoreRepository, SubscriptionFirestoreRepository, SubscriptionMaterialization, SubscriptionMaterializationFirestoreRepository, SubscriptionPayment, SubscriptionPaymentFirestoreRepository, SubscriptionPlan, SubscriptionPlanFirestoreRepository, SubscriptionProductFirestoreRepository, SubscriptionSummary, SubscriptionSummaryFirestoreRepository, Trace, TransactionPaymentMethods, UnauthorizedError, UpdateOptionActions, UpdateUserImage, User, UserAddress, UserAddressFirestoreRepository, UserAlreadyRegisteredError, UserBeautyProfileFirestoreRepository, UserFirestoreRepository, UserPaymentMethod, UserPaymentMethodFirestoreRepository, UserType, Variant, VariantHasuraGraphQL, VariantHasuraGraphQLRepository, VertexAxiosAdapter, WeakPasswordError, Where, Wishlist, WishlistHasuraGraphQLRepository, WishlistLogType, deserialize, getClass, is, isDebuggable, isUUID, parseDateTime, registerClass, resolveAntifraudVolumeLimits, resolveCacheConfig, resolveClass, serialize, toCents, withCreateFirestore, withCreateHasuraGraphQL, withCrudFirestore, withCrudHasuraGraphQL, withDeleteFirestore, withDeleteHasuraGraphQL, withFindFirestore, withFindHasuraGraphQL, withFirestore, withGetFirestore, withGetHasuraGraphQL, withHasuraGraphQL, withHelpers, withSubCollection, withUpdateFirestore, withUpdateHasuraGraphQL };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@infrab4a/connect",
-  "version": "5.7.10-alpha.0",
+  "version": "5.7.10-alpha.2",
   "publishConfig": {
     "registry": "https://registry.npmjs.org"
   },

package/src/domain/shop-settings/models/shop-configs.d.ts

@@ -12,6 +12,11 @@ export declare class ShopConfigs extends BaseModel<ShopConfigs> {
             subscriber: LimitOrders;
             nonSubscriber: LimitOrders;
         };
+        /** Falhas/bloqueios internos por dia (além de compras dia/semana). */
+        blockedAttemptsDay: {
+            subscriber: number;
+            nonSubscriber: number;
+        };
     };
     sameDayNotAvaliable?: ShopSameDayNotAvailable;
     static get identifiersFields(): GenericIdentifier[];

package/src/domain/shop-settings/models/types/limit-orders.type.d.ts

@@ -2,6 +2,7 @@ export type LimitOrders = {
     cpf: number;
     email: number;
     phone: number;
-    zip: number;
-    card?: number;
+    /** Na semana, `null` no Firestore vira Infinity no runtime do antifraude. */
+    zip: number | null;
+    card: number;
 };

package/src/domain/shopping/services/antifraud-card.service.d.ts

@@ -1,17 +1,42 @@
+import { ShopConfigs, ShopConfigsRepository } from '../../shop-settings';
 import { AntifraudProvider } from '../interfaces';
 import { Checkout } from '../models';
 import { OrderBlockedRepository, OrderRepository } from '../repositories';
 import { PaymentCardInfo } from '../types';
+type LimitOrders = {
+    cpf: number;
+    email: number;
+    phone: number;
+    zip: number;
+    card?: number;
+};
+type ResolvedAntifraudVolumeLimits = {
+    enabled: boolean;
+    source: 'config' | 'fallback';
+    day: {
+        subscriber: LimitOrders;
+        nonSubscriber: LimitOrders;
+    };
+    week: {
+        subscriber: LimitOrders;
+        nonSubscriber: LimitOrders;
+    };
+    blockedAttemptsDay: {
+        subscriber: number;
+        nonSubscriber: number;
+    };
+};
+/** Defaults personalizáveis via shopConfigs.antifraude; usados só como fallback. */
+export declare const DEFAULT_ANTIFRAUD_VOLUME_LIMITS: ResolvedAntifraudVolumeLimits;
+/** Expõe resolução para testes; config inválida → fallback (comportamento atual). */
+export declare function resolveAntifraudVolumeLimits(antifraude: ShopConfigs['antifraude'] | undefined | null): ResolvedAntifraudVolumeLimits;
 export declare class AntifraudCardService implements AntifraudProvider {
     private readonly orderRepository;
     private readonly orderBlockedRepository;
-    private LIMIT_ORDERS_DAY;
-    private LIMIT_ORDERS_WEEK;
-    private LIMIT_BLOCKED_ORDERS_DAY;
-    constructor(orderRepository: OrderRepository, orderBlockedRepository: OrderBlockedRepository);
+    private readonly shopConfigsRepository?;
+    constructor(orderRepository: OrderRepository, orderBlockedRepository: OrderBlockedRepository, shopConfigsRepository?: ShopConfigsRepository);
     validate(checkout: Checkout, card: PaymentCardInfo): Promise<Boolean>;
-    private setLimitsByUserType;
-    private getLimitsByUserType;
+    private loadResolvedLimits;
     private validateBlockedOrderAttempts;
     private validateDayAndWeekOrderLimits;
     private verifyBlockedOrderAttempts;
@@ -35,3 +60,4 @@ export declare class AntifraudCardService implements AntifraudProvider {
     private countOrdersByField;
     private getDateRange;
 }
+export {};