[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_228":229,"_230":231},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",57,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","747cc3ce-9be8-11f1-880b-1607ee4eb77e","name","fileType","http","content","// Central TC — Hub interno da equipe (Tiburcio Cavalcanti Advogados)\n// Val Town HTTP val. Login com Google (restrito ao domínio do escritório),\n// banco SQLite para os conteúdos e painel de admin.\n//\n// Variáveis de ambiente necessárias (Settings > Environment Variables):\n// GOOGLE_CLIENT_ID — Client ID do OAuth (Google Cloud Console)\n// GOOGLE_CLIENT_SECRET — Client Secret do OAuth\n// SESSION_SECRET — string aleatória longa (assina o cookie de sessão)\n// ALLOWED_DOMAINS — domínios liberados, separados por vírgula (padrão: tcadvs.com.br)\n// ADMIN_EMAILS — e-mails que podem editar, separados por vírgula (padrão: bruno@tcadvs.com.br)\n//\n// Fonte: /source\n\nimport { Hono } from \"npm:hono\";\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono/cookie\";\nimport * as arctic from \"npm:arctic\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\n\n// ---------------------------------------------------------------------------\n// Config\n// ---------------------------------------------------------------------------\nconst THIRTY_DAYS = 30 * 24 * 60 * 60; // segundos\nconst SESSION_SECRET = Deno.env.get(\"SESSION_SECRET\") ||\n \"troque-este-segredo-inseguro\";\n\nfunction allowedDomains(): string[] {\n return (Deno.env.get(\"ALLOWED_DOMAINS\") || \"tcadvs.com.br\")\n .split(\",\").map((s) => s.trim().toLowerCase()).filter(Boolean);\n}\nfunction adminEmails(): string[] {\n return (Deno.env.get(\"ADMIN_EMAILS\") || \"bruno@tcadvs.com.br\")\n .split(\",\").map((s) => s.trim().toLowerCase()).filter(Boolean);\n}\n\n// ---------------------------------------------------------------------------\n// Banco de dados\n// ---------------------------------------------------------------------------\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS categories (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n emoji TEXT DEFAULT '',\n color TEXT DEFAULT '#17362E',\n position INTEGER DEFAULT 0,\n created_at INTEGER\n)`);\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS resources (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n category_id INTEGER,\n kind TEXT DEFAULT 'link',\n title TEXT NOT NULL,\n description TEXT DEFAULT '',\n url TEXT DEFAULT '',\n tags TEXT DEFAULT '',\n position INTEGER DEFAULT 0,\n created_at INTEGER,\n updated_at INTEGER,\n created_by TEXT DEFAULT ''\n)`);\n\n// Áreas do escritório — a segunda dimensão: categoria diz O QUE é o recurso,\n// área diz DE QUAL MATÉRIA ele é. Cores canônicas do site institucional.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS areas (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n color TEXT DEFAULT '#004746',\n description TEXT DEFAULT '',\n position INTEGER DEFAULT 0,\n created_at INTEGER\n)`);\n\n// migração: bancos criados antes das áreas não têm a coluna. SQLite não tem\n// \"ADD COLUMN IF NOT EXISTS\", então tentamos e ignoramos o erro de duplicata.\ntry {\n await sqlite.execute(\"ALTER TABLE resources ADD COLUMN area_id INTEGER\");\n} catch {\n // coluna já existe\n}\n\n// Quem vê o quê. Dois eixos: a ÁREA diz de qual matéria o conteúdo é; o NÍVEL\n// diz que profundidade ele tem. O nível é por área — quem lidera Saúde não\n// enxerga o estratégico do Tributário só porque também atua lá.\n// aberto todo mundo do escritório\n// equipe quem tem a área (nível 1 ou 2)\n// lideranca quem tem a área em nível de liderança (nível 2)\n// confidencial quem tem a marca de confidencial do escritório (gestão)\ntry {\n await sqlite.execute(\n \"ALTER TABLE resources ADD COLUMN visibility TEXT DEFAULT 'aberto'\",\n );\n} catch {\n // coluna já existe\n}\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS people (\n email TEXT PRIMARY KEY,\n name TEXT DEFAULT '',\n confidencial INTEGER DEFAULT 0,\n created_at INTEGER\n)`);\n\n// nivel: 1 = equipe, 2 = liderança. Ausência da linha = sem acesso à área.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS people_areas (\n email TEXT NOT NULL,\n area_id INTEGER NOT NULL,\n nivel INTEGER DEFAULT 1,\n PRIMARY KEY (email, area_id)\n)`);\n\n// Seed inicial (só roda se ainda não houver categorias)\nasync function seedIfEmpty() {\n const count = (await sqlite.execute(\"SELECT COUNT(*) AS n FROM categories\"))\n .rows[0].n as number;\n if (count > 0) return;\n const now = Date.now();\n const cats: [string, string, string][] = [\n [\"Sistemas Jurídicos\", \"🏛️\", \"#17362E\"],\n [\"IA & Produtividade\", \"🤖\", \"#2F7D6D\"],\n [\"Modelos & Documentos\", \"📄\", \"#B08C4D\"],\n [\"Links Úteis\", \"🔗\", \"#2E6E5E\"],\n [\"Dicas Internas\", \"💡\", \"#A23B3B\"],\n ];\n for (let i = 0; i < cats.length; i++) {\n await sqlite.execute({\n sql:\n \"INSERT INTO categories (name, emoji, color, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [cats[i][0], cats[i][1], cats[i][2], i, now],\n });\n }\n const seedRes: [number, string, string, string, string, string][] = [\n // category_id, kind, title, description, url, tags\n [\n 1,\n \"system\",\n \"PJe — Processo Judicial Eletrônico\",\n \"Peticionamento e consulta processual na Justiça Federal e Trabalhista.\",\n \"https://www.pje.jus.br\",\n \"processo, tribunal\",\n ],\n [\n 1,\n \"system\",\n \"Projudi / e-SAJ\",\n \"Sistemas dos tribunais estaduais para acompanhamento de processos.\",\n \"https://esaj.tjsp.jus.br\",\n \"processo, estadual\",\n ],\n [\n 2,\n \"system\",\n \"Claude (Cowork)\",\n \"Assistente de IA do escritório para redação, análise e pesquisa.\",\n \"https://claude.ai\",\n \"ia, redação\",\n ],\n [\n 2,\n \"tip\",\n \"Como pedir uma peça para a IA\",\n \"Sempre forneça: fatos, documentos, tese e pedido. Quanto mais contexto, melhor a minuta.\",\n \"\",\n \"ia, boas-práticas\",\n ],\n [\n 3,\n \"doc\",\n \"Modelos de Petição (Drive)\",\n \"Pasta compartilhada com os modelos padronizados do escritório.\",\n \"\",\n \"modelos, petição\",\n ],\n [\n 4,\n \"link\",\n \"Diário Oficial / DJe\",\n \"Consulta de publicações e intimações.\",\n \"https://www.jusbrasil.com.br\",\n \"publicações\",\n ],\n [\n 5,\n \"tip\",\n \"Padrão de nomeação de arquivos\",\n \"Use: AAAA-MM-DD_Cliente_TipoDoc. Facilita busca e evita retrabalho.\",\n \"\",\n \"organização\",\n ],\n ];\n for (let i = 0; i < seedRes.length; i++) {\n const r = seedRes[i];\n await sqlite.execute({\n sql:\n `INSERT INTO resources (category_id, kind, title, description, url, tags, position, created_at, updated_at, created_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [r[0], r[1], r[2], r[3], r[4], r[5], i, now, now, \"seed\"],\n });\n }\n}\n// Seed das áreas (só roda se ainda não houver nenhuma). Ordem e cores vêm do\n// site institucional; o Imobiliário foi clareado para não repetir o Trabalhista.\nasync function seedAreasIfEmpty() {\n const count = (await sqlite.execute(\"SELECT COUNT(*) AS n FROM areas\"))\n .rows[0].n as number;\n if (count > 0) return;\n const now = Date.now();\n const areas: [string, string, string][] = [\n [\n \"Empresarial\",\n \"#002D2D\",\n \"Societário, contratos empresariais e reestruturações.\",\n ],\n [\n \"Tributário\",\n \"#004746\",\n \"Contencioso e consultivo fiscal, transações e planejamento.\",\n ],\n [\n \"Trabalhista\",\n \"#006B6B\",\n \"Contencioso trabalhista, compliance e relações de trabalho.\",\n ],\n [\n \"Administrativo\",\n \"#007979\",\n \"Licitações, contratos públicos e defesas administrativas.\",\n ],\n [\n \"Família e Sucessões\",\n \"#00908C\",\n \"Divórcio, inventários, holdings familiares e pactos.\",\n ],\n [\n \"Contratos e Estruturação de Negócios\",\n \"#747277\",\n \"Modelagem contratual e estruturação de operações.\",\n ],\n [\n \"Saúde e Médico\",\n \"#005F5F\",\n \"Planos de saúde, alto custo e direito médico.\",\n ],\n [\n \"Imobiliário\",\n \"#00A39D\",\n \"Compra e venda, incorporação, locação e vícios construtivos.\",\n ],\n ];\n for (let i = 0; i < areas.length; i++) {\n await sqlite.execute({\n sql:\n \"INSERT INTO areas (name, color, description, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [areas[i][0], areas[i][1], areas[i][2], i, now],\n });\n }\n}\n\nawait seedIfEmpty();\nawait seedAreasIfEmpty();\n\n// ---------------------------------------------------------------------------\n// Cripto de sessão (cookie assinado com HMAC-SHA256)\n// ---------------------------------------------------------------------------\nconst encoder = new TextEncoder();\n\nfunction b64urlEncode(bytes: Uint8Array): string {\n let bin = \"\";\n for (const b of bytes) bin += String.fromCharCode(b);\n return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\nfunction b64urlDecode(str: string): Uint8Array {\n str = str.replace(/-/g, \"+\").replace(/_/g, \"/\");\n while (str.length % 4) str += \"=\";\n const bin = atob(str);\n const bytes = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);\n return bytes;\n}\nasync function hmacKey() {\n return crypto.subtle.importKey(\n \"raw\",\n encoder.encode(SESSION_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\", \"verify\"],\n );\n}\nasync function signSession(payload: Record): Promise {\n const key = await hmacKey();\n const data = b64urlEncode(encoder.encode(JSON.stringify(payload)));\n const sig = new Uint8Array(\n await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data)),\n );\n return data + \".\" + b64urlEncode(sig);\n}\nasync function verifySession(\n token: string,\n): Promise | null> {\n const dot = token.indexOf(\".\");\n if (dot < 0) return null;\n const data = token.slice(0, dot);\n const sig = token.slice(dot + 1);\n const key = await hmacKey();\n let ok = false;\n try {\n ok = await crypto.subtle.verify(\n \"HMAC\",\n key,\n b64urlDecode(sig),\n encoder.encode(data),\n );\n } catch {\n return null;\n }\n if (!ok) return null;\n try {\n const payload = JSON.parse(new TextDecoder().decode(b64urlDecode(data)));\n if (payload.exp && Date.now() > payload.exp) return null;\n return payload;\n } catch {\n return null;\n }\n}\nfunction decodeIdToken(jwt: string): Record {\n const parts = jwt.split(\".\");\n return JSON.parse(new TextDecoder().decode(b64urlDecode(parts[1])));\n}\n\ntype User = { email: string; name: string; picture: string; isAdmin: boolean };\n\nasync function getUser(c: any): Promise {\n const token = getCookie(c, \"session\");\n if (!token) return null;\n const p = await verifySession(token);\n if (!p) return null;\n return {\n email: p.email,\n name: p.name || p.email,\n picture: p.picture || \"\",\n isAdmin: adminEmails().includes((p.email || \"\").toLowerCase()),\n };\n}\n\n// ---------------------------------------------------------------------------\n// App\n// ---------------------------------------------------------------------------\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nfunction getGoogle(c: any): arctic.Google {\n const origin = new URL(c.req.url).origin;\n return new arctic.Google(\n Deno.env.get(\"GOOGLE_CLIENT_ID\") || \"\",\n Deno.env.get(\"GOOGLE_CLIENT_SECRET\") || \"\",\n origin + \"/auth/callback\",\n );\n}\n\n// ---- Auth ----\napp.get(\"/auth/google\", (c) => {\n const google = getGoogle(c);\n const state = arctic.generateState();\n const codeVerifier = arctic.generateCodeVerifier();\n const url = google.createAuthorizationURL(state, codeVerifier, [\n \"openid\",\n \"profile\",\n \"email\",\n ]);\n // Sugere a tela de contas do Workspace do escritório\n const dom = allowedDomains()[0];\n if (dom) url.searchParams.set(\"hd\", dom);\n const opts = {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\" as const,\n path: \"/\",\n maxAge: 600,\n };\n setCookie(c, \"g_state\", state, opts);\n setCookie(c, \"g_verifier\", codeVerifier, opts);\n return c.redirect(url.toString());\n});\n\napp.get(\"/auth/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n const storedState = getCookie(c, \"g_state\");\n const verifier = getCookie(c, \"g_verifier\");\n if (!code || !state || !storedState || state !== storedState || !verifier) {\n return c.redirect(\"/login?error=state\");\n }\n let tokens: arctic.OAuth2Tokens;\n try {\n tokens = await getGoogle(c).validateAuthorizationCode(code, verifier);\n } catch {\n return c.redirect(\"/login?error=oauth\");\n }\n let claims: Record;\n try {\n claims = decodeIdToken(tokens.idToken());\n } catch {\n return c.redirect(\"/login?error=token\");\n }\n const email = String(claims.email || \"\").toLowerCase();\n const domain = email.split(\"@\")[1] || \"\";\n if (\n !email || claims.email_verified === false ||\n !allowedDomains().includes(domain)\n ) {\n return c.redirect(\"/login?error=domain\");\n }\n const session = {\n email,\n name: claims.name || email,\n picture: claims.picture || \"\",\n exp: Date.now() + THIRTY_DAYS * 1000,\n };\n deleteCookie(c, \"g_state\", { path: \"/\" });\n deleteCookie(c, \"g_verifier\", { path: \"/\" });\n setCookie(c, \"session\", await signSession(session), {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: THIRTY_DAYS,\n });\n return c.redirect(\"/\");\n});\n\napp.post(\"/logout\", (c) => {\n deleteCookie(c, \"session\", { path: \"/\" });\n return c.redirect(\"/login\");\n});\napp.get(\"/logout\", (c) => {\n deleteCookie(c, \"session\", { path: \"/\" });\n return c.redirect(\"/login\");\n});\n\n// ---- Páginas ----\napp.get(\"/login\", async (c) => {\n const user = await getUser(c);\n if (user) return c.redirect(\"/\");\n return serveFile(\"/frontend/login.html\");\n});\n\napp.get(\"/\", async (c) => {\n const user = await getUser(c);\n if (!user) return c.redirect(\"/login\");\n return serveFile(\"/frontend/index.html\");\n});\n\napp.get(\"/admin\", async (c) => {\n const user = await getUser(c);\n if (!user) return c.redirect(\"/login\");\n if (!user.isAdmin) return c.redirect(\"/?error=forbidden\");\n return serveFile(\"/frontend/admin.html\");\n});\n\n// Estáticos do frontend (css/js/imagens)\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path));\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---- API ----\nasync function requireUser(c: any): Promise {\n const user = await getUser(c);\n if (!user) {\n c.status(401);\n return null;\n }\n return user;\n}\nasync function requireAdmin(c: any): Promise {\n const user = await getUser(c);\n if (!user) {\n c.status(401);\n return null;\n }\n if (!user.isAdmin) {\n c.status(403);\n return null;\n }\n return user;\n}\n\n// ---------------------------------------------------------------------------\n// Permissões de leitura\n// ---------------------------------------------------------------------------\ntype Permissoes = { confidencial: boolean; areas: Record };\n\nasync function permissoesDe(email: string): Promise {\n const chave = (email || \"\").toLowerCase();\n const pes = (await sqlite.execute({\n sql: \"SELECT confidencial FROM people WHERE email = ?\",\n args: [chave],\n })).rows[0];\n const linhas = (await sqlite.execute({\n sql: \"SELECT area_id, nivel FROM people_areas WHERE email = ?\",\n args: [chave],\n })).rows;\n const areas: Record = {};\n for (const l of linhas) areas[Number(l.area_id)] = Number(l.nivel) || 1;\n return { confidencial: !!(pes && Number(pes.confidencial) === 1), areas };\n}\n\n// O admin enxerga tudo: é quem cadastra e precisa conferir o que publicou.\nfunction podeVer(r: any, user: User, p: Permissoes): boolean {\n if (user.isAdmin) return true;\n const v = r.visibility || \"aberto\";\n if (v === \"aberto\") return true;\n if (v === \"confidencial\") return p.confidencial;\n const nivel = p.areas[Number(r.area_id)] || 0;\n if (v === \"equipe\") return nivel >= 1;\n if (v === \"lideranca\") return nivel >= 2;\n return false;\n}\n\napp.get(\"/api/data\", async (c) => {\n const user = await requireUser(c);\n if (!user) return c.json({ error: \"não autenticado\" }, 401);\n const categories =\n (await sqlite.execute(\"SELECT * FROM categories ORDER BY position, id\"))\n .rows;\n const todasAreas =\n (await sqlite.execute(\"SELECT * FROM areas ORDER BY position, id\")).rows;\n const todos =\n (await sqlite.execute(\"SELECT * FROM resources ORDER BY position, id\"))\n .rows;\n\n // O filtro é aqui, no servidor: o que a pessoa não pode ver não sai daqui.\n // Esconder só na tela deixaria o conteúdo a um /api/data de distância.\n const perm = await permissoesDe(user.email);\n const resources = todos.filter((r) => podeVer(r, user, perm));\n\n // A lateral não mostra área vazia: fica a área que a pessoa tem no cadastro\n // ou a que sobrou com algum conteúdo visível para ela.\n const comConteudo = new Set(\n resources.map((r) => Number(r.area_id)).filter(Boolean),\n );\n const areas = user.isAdmin\n ? todasAreas\n : todasAreas.filter((a) =>\n perm.areas[Number(a.id)] || comConteudo.has(Number(a.id))\n );\n\n return c.json({\n me: { ...user, confidencial: perm.confidencial },\n categories,\n areas,\n resources,\n });\n});\n\n// ---- Categorias (admin) ----\napp.post(\"/api/categories\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n if (!b.name) return c.json({ error: \"nome obrigatório\" }, 400);\n const posRow =\n (await sqlite.execute(\n \"SELECT COALESCE(MAX(position), -1) + 1 AS p FROM categories\",\n )).rows[0];\n const r = await sqlite.execute({\n sql:\n \"INSERT INTO categories (name, emoji, color, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [\n b.name,\n b.emoji || \"\",\n b.color || \"#17362E\",\n b.position ?? posRow.p,\n Date.now(),\n ],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) });\n});\n\napp.put(\"/api/categories/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n await sqlite.execute({\n sql:\n \"UPDATE categories SET name = ?, emoji = ?, color = ?, position = ? WHERE id = ?\",\n args: [b.name, b.emoji || \"\", b.color || \"#17362E\", b.position ?? 0, id],\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/categories/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n await sqlite.batch([\n { sql: \"DELETE FROM resources WHERE category_id = ?\", args: [id] },\n { sql: \"DELETE FROM categories WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true });\n});\n\n// Visibilidade só aceita os quatro valores previstos. E \"equipe\"/\"lideranca\"\n// dependem de uma área: sem área ninguém teria a chave, e o conteúdo existiria\n// sem que pessoa nenhuma pudesse vê-lo.\nfunction visibilidade(b: any): string {\n const v = String(b.visibility || \"aberto\");\n if (![\"aberto\", \"equipe\", \"lideranca\", \"confidencial\"].includes(v)) {\n return \"aberto\";\n }\n if ((v === \"equipe\" || v === \"lideranca\") && !b.area_id) return \"aberto\";\n return v;\n}\n\n// ---- Áreas (admin) ----\napp.post(\"/api/areas\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n if (!b.name) return c.json({ error: \"nome obrigatório\" }, 400);\n const posRow =\n (await sqlite.execute(\n \"SELECT COALESCE(MAX(position), -1) + 1 AS p FROM areas\",\n )).rows[0];\n const r = await sqlite.execute({\n sql:\n \"INSERT INTO areas (name, color, description, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [\n b.name,\n b.color || \"#004746\",\n b.description || \"\",\n b.position ?? posRow.p,\n Date.now(),\n ],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) });\n});\n\napp.put(\"/api/areas/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n await sqlite.execute({\n sql:\n \"UPDATE areas SET name = ?, color = ?, description = ?, position = ? WHERE id = ?\",\n args: [\n b.name,\n b.color || \"#004746\",\n b.description || \"\",\n b.position ?? 0,\n id,\n ],\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/areas/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n // apagar a área NÃO apaga os recursos: eles voltam a ser transversais\n await sqlite.batch([\n {\n sql: \"UPDATE resources SET area_id = NULL WHERE area_id = ?\",\n args: [id],\n },\n { sql: \"DELETE FROM areas WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true });\n});\n\n// ---- Recursos (admin) ----\napp.post(\"/api/resources\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n if (!b.title) return c.json({ error: \"título obrigatório\" }, 400);\n const now = Date.now();\n const posRow = (await sqlite.execute({\n sql:\n \"SELECT COALESCE(MAX(position), -1) + 1 AS p FROM resources WHERE category_id = ?\",\n args: [b.category_id ?? null],\n })).rows[0];\n const r = await sqlite.execute({\n sql:\n `INSERT INTO resources (category_id, area_id, visibility, kind, title, description, url, tags, position, created_at, updated_at, created_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n b.category_id ?? null,\n b.area_id ?? null,\n visibilidade(b),\n b.kind || \"link\",\n b.title,\n b.description || \"\",\n b.url || \"\",\n b.tags || \"\",\n b.position ?? posRow.p,\n now,\n now,\n user.email,\n ],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) });\n});\n\napp.put(\"/api/resources/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n await sqlite.execute({\n sql:\n `UPDATE resources SET category_id = ?, area_id = ?, visibility = ?, kind = ?, title = ?, description = ?, url = ?, tags = ?, position = ?, updated_at = ?\n WHERE id = ?`,\n args: [\n b.category_id ?? null,\n b.area_id ?? null,\n visibilidade(b),\n b.kind || \"link\",\n b.title,\n b.description || \"\",\n b.url || \"\",\n b.tags || \"\",\n b.position ?? 0,\n Date.now(),\n id,\n ],\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/resources/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n await sqlite.execute({\n sql: \"DELETE FROM resources WHERE id = ?\",\n args: [id],\n });\n return c.json({ ok: true });\n});\n\n// ---- Pessoas e acessos (admin) ----\n// A lista de pessoas vive à parte do /api/data porque só o admin precisa dela\n// e ela carrega quem-vê-o-quê do escritório inteiro.\napp.get(\"/api/people\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const people =\n (await sqlite.execute(\"SELECT * FROM people ORDER BY name, email\")).rows;\n const acessos = (await sqlite.execute(\"SELECT * FROM people_areas\")).rows;\n return c.json({ people, acessos });\n});\n\n// Um POST só: grava a pessoa e o conjunto de acessos dela de uma vez, para não\n// existir estado pela metade (pessoa salva com os acessos antigos).\napp.post(\"/api/people\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n const email = String(b.email || \"\").trim().toLowerCase();\n if (!email.includes(\"@\")) {\n return c.json({ error: \"informe um e-mail válido\" }, 400);\n }\n\n const cmds: any[] = [\n {\n sql:\n `INSERT INTO people (email, name, confidencial, created_at) VALUES (?, ?, ?, ?)\n ON CONFLICT(email) DO UPDATE SET name = excluded.name, confidencial = excluded.confidencial`,\n args: [\n email,\n String(b.name || \"\").trim(),\n b.confidencial ? 1 : 0,\n Date.now(),\n ],\n },\n { sql: \"DELETE FROM people_areas WHERE email = ?\", args: [email] },\n ];\n for (const a of (b.areas || [])) {\n const nivel = Number(a.nivel);\n if (nivel !== 1 && nivel !== 2) continue; // 0 = sem acesso: não vira linha\n cmds.push({\n sql: \"INSERT INTO people_areas (email, area_id, nivel) VALUES (?, ?, ?)\",\n args: [email, Number(a.area_id), nivel],\n });\n }\n await sqlite.batch(cmds);\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/people/:email\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const email = decodeURIComponent(c.req.param(\"email\")).toLowerCase();\n await sqlite.batch([\n { sql: \"DELETE FROM people_areas WHERE email = ?\", args: [email] },\n { sql: \"DELETE FROM people WHERE email = ?\", args: [email] },\n ]);\n return c.json({ ok: true });\n});\n\nexport default app.fetch;","// Central TC — Hub interno da equipe (Tiburcio Cavalcanti Advogados)\n// Val Town HTTP val. Login com Google (restrito ao domínio do escritório),\n// banco SQLite para os conteúdos e painel de admin.\n//\n// Variáveis de ambiente necessárias (Settings > Environment Variables):\n// GOOGLE_CLIENT_ID — Client ID do OAuth (Google Cloud Console)\n// GOOGLE_CLIENT_SECRET — Client Secret do OAuth\n// SESSION_SECRET — string aleatória longa (assina o cookie de sessão)\n// ALLOWED_DOMAINS — domínios liberados, separados por vírgula (padrão: tcadvs.com.br)\n// ADMIN_EMAILS — e-mails que podem editar, separados por vírgula (padrão: bruno@tcadvs.com.br)\n//\n// Fonte: /source\n\nimport { Hono } from \"npm:hono\";\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono/cookie\";\nimport * as arctic from \"npm:arctic\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\n\n// ---------------------------------------------------------------------------\n// Config\n// ---------------------------------------------------------------------------\nconst THIRTY_DAYS = 30 * 24 * 60 * 60; // segundos\nconst SESSION_SECRET = Deno.env.get(\"SESSION_SECRET\") ||\n \"troque-este-segredo-inseguro\";\n\nfunction allowedDomains(): string[] {\n return (Deno.env.get(\"ALLOWED_DOMAINS\") || \"tcadvs.com.br\")\n .split(\",\").map((s) => s.trim().toLowerCase()).filter(Boolean);\n}\nfunction adminEmails(): string[] {\n return (Deno.env.get(\"ADMIN_EMAILS\") || \"bruno@tcadvs.com.br\")\n .split(\",\").map((s) => s.trim().toLowerCase()).filter(Boolean);\n}\n\n// ---------------------------------------------------------------------------\n// Banco de dados\n// ---------------------------------------------------------------------------\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS categories (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n emoji TEXT DEFAULT '',\n color TEXT DEFAULT '#17362E',\n position INTEGER DEFAULT 0,\n created_at INTEGER\n)`);\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS resources (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n category_id INTEGER,\n kind TEXT DEFAULT 'link',\n title TEXT NOT NULL,\n description TEXT DEFAULT '',\n url TEXT DEFAULT '',\n tags TEXT DEFAULT '',\n position INTEGER DEFAULT 0,\n created_at INTEGER,\n updated_at INTEGER,\n created_by TEXT DEFAULT ''\n)`);\n\n// Áreas do escritório — a segunda dimensão: categoria diz O QUE é o recurso,\n// área diz DE QUAL MATÉRIA ele é. Cores canônicas do site institucional.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS areas (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n color TEXT DEFAULT '#004746',\n description TEXT DEFAULT '',\n position INTEGER DEFAULT 0,\n created_at INTEGER\n)`);\n\n// migração: bancos criados antes das áreas não têm a coluna. SQLite não tem\n// \"ADD COLUMN IF NOT EXISTS\", então tentamos e ignoramos o erro de duplicata.\ntry {\n await sqlite.execute(\"ALTER TABLE resources ADD COLUMN area_id INTEGER\");\n} catch {\n // coluna já existe\n}\n\n// Quem vê o quê. Dois eixos: a ÁREA diz de qual matéria o conteúdo é; o NÍVEL\n// diz que profundidade ele tem. O nível é por área — quem lidera Saúde não\n// enxerga o estratégico do Tributário só porque também atua lá.\n// aberto todo mundo do escritório\n// equipe quem tem a área (nível 1 ou 2)\n// lideranca quem tem a área em nível de liderança (nível 2)\n// confidencial quem tem a marca de confidencial do escritório (gestão)\ntry {\n await sqlite.execute(\n \"ALTER TABLE resources ADD COLUMN visibility TEXT DEFAULT 'aberto'\",\n );\n} catch {\n // coluna já existe\n}\n\n// Produtos = os serviços que o escritório presta dentro de cada área. Terceira\n// camada de navegação: Área > Produto > conteúdo. A lista veio da página\n// \"O Que Fazemos\" do site, revisada pelo Bruno.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS products (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n area_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n description TEXT DEFAULT '',\n position INTEGER DEFAULT 0,\n created_at INTEGER\n)`);\n\ntry {\n await sqlite.execute(\"ALTER TABLE resources ADD COLUMN product_id INTEGER\");\n} catch {\n // coluna já existe\n}\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS people (\n email TEXT PRIMARY KEY,\n name TEXT DEFAULT '',\n confidencial INTEGER DEFAULT 0,\n created_at INTEGER\n)`);\n\n// nivel: 1 = equipe, 2 = liderança. Ausência da linha = sem acesso à área.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS people_areas (\n email TEXT NOT NULL,\n area_id INTEGER NOT NULL,\n nivel INTEGER DEFAULT 1,\n PRIMARY KEY (email, area_id)\n)`);\n\n// Seed inicial (só roda se ainda não houver categorias)\nasync function seedIfEmpty() {\n const count = (await sqlite.execute(\"SELECT COUNT(*) AS n FROM categories\"))\n .rows[0].n as number;\n if (count > 0) return;\n const now = Date.now();\n const cats: [string, string, string][] = [\n [\"Sistemas Jurídicos\", \"🏛️\", \"#17362E\"],\n [\"IA & Produtividade\", \"🤖\", \"#2F7D6D\"],\n [\"Modelos & Documentos\", \"📄\", \"#B08C4D\"],\n [\"Links Úteis\", \"🔗\", \"#2E6E5E\"],\n [\"Dicas Internas\", \"💡\", \"#A23B3B\"],\n ];\n for (let i = 0; i < cats.length; i++) {\n await sqlite.execute({\n sql:\n \"INSERT INTO categories (name, emoji, color, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [cats[i][0], cats[i][1], cats[i][2], i, now],\n });\n }\n const seedRes: [number, string, string, string, string, string][] = [\n // category_id, kind, title, description, url, tags\n [\n 1,\n \"system\",\n \"PJe — Processo Judicial Eletrônico\",\n \"Peticionamento e consulta processual na Justiça Federal e Trabalhista.\",\n \"https://www.pje.jus.br\",\n \"processo, tribunal\",\n ],\n [\n 1,\n \"system\",\n \"Projudi / e-SAJ\",\n \"Sistemas dos tribunais estaduais para acompanhamento de processos.\",\n \"https://esaj.tjsp.jus.br\",\n \"processo, estadual\",\n ],\n [\n 2,\n \"system\",\n \"Claude (Cowork)\",\n \"Assistente de IA do escritório para redação, análise e pesquisa.\",\n \"https://claude.ai\",\n \"ia, redação\",\n ],\n [\n 2,\n \"tip\",\n \"Como pedir uma peça para a IA\",\n \"Sempre forneça: fatos, documentos, tese e pedido. Quanto mais contexto, melhor a minuta.\",\n \"\",\n \"ia, boas-práticas\",\n ],\n [\n 3,\n \"doc\",\n \"Modelos de Petição (Drive)\",\n \"Pasta compartilhada com os modelos padronizados do escritório.\",\n \"\",\n \"modelos, petição\",\n ],\n [\n 4,\n \"link\",\n \"Diário Oficial / DJe\",\n \"Consulta de publicações e intimações.\",\n \"https://www.jusbrasil.com.br\",\n \"publicações\",\n ],\n [\n 5,\n \"tip\",\n \"Padrão de nomeação de arquivos\",\n \"Use: AAAA-MM-DD_Cliente_TipoDoc. Facilita busca e evita retrabalho.\",\n \"\",\n \"organização\",\n ],\n ];\n for (let i = 0; i < seedRes.length; i++) {\n const r = seedRes[i];\n await sqlite.execute({\n sql:\n `INSERT INTO resources (category_id, kind, title, description, url, tags, position, created_at, updated_at, created_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [r[0], r[1], r[2], r[3], r[4], r[5], i, now, now, \"seed\"],\n });\n }\n}\n// Seed das áreas (só roda se ainda não houver nenhuma). Ordem e cores vêm do\n// site institucional; o Imobiliário foi clareado para não repetir o Trabalhista.\nasync function seedAreasIfEmpty() {\n const count = (await sqlite.execute(\"SELECT COUNT(*) AS n FROM areas\"))\n .rows[0].n as number;\n if (count > 0) return;\n const now = Date.now();\n const areas: [string, string, string][] = [\n [\n \"Empresarial\",\n \"#002D2D\",\n \"Societário, contratos empresariais e reestruturações.\",\n ],\n [\n \"Tributário\",\n \"#004746\",\n \"Contencioso e consultivo fiscal, transações e planejamento.\",\n ],\n [\n \"Trabalhista\",\n \"#006B6B\",\n \"Contencioso trabalhista, compliance e relações de trabalho.\",\n ],\n [\n \"Administrativo\",\n \"#007979\",\n \"Licitações, contratos públicos e defesas administrativas.\",\n ],\n [\n \"Família e Sucessões\",\n \"#00908C\",\n \"Divórcio, inventários, holdings familiares e pactos.\",\n ],\n [\n \"Contratos e Estruturação de Negócios\",\n \"#747277\",\n \"Modelagem contratual e estruturação de operações.\",\n ],\n [\n \"Saúde e Médico\",\n \"#005F5F\",\n \"Planos de saúde, alto custo e direito médico.\",\n ],\n [\n \"Imobiliário\",\n \"#00A39D\",\n \"Compra e venda, incorporação, locação e vícios construtivos.\",\n ],\n ];\n for (let i = 0; i < areas.length; i++) {\n await sqlite.execute({\n sql:\n \"INSERT INTO areas (name, color, description, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [areas[i][0], areas[i][1], areas[i][2], i, now],\n });\n }\n}\n\n// Seed dos produtos (só roda com a tabela vazia). A área é buscada pelo nome,\n// não por id fixo, para o seed não errar de área se a ordem mudar.\nasync function seedProductsIfEmpty() {\n const count = (await sqlite.execute(\"SELECT COUNT(*) AS n FROM products\"))\n .rows[0].n as number;\n if (count > 0) return;\n const now = Date.now();\n const porArea: [string, string[]][] = [\n [\"Empresarial\", [\n \"Contencioso\",\n \"Propriedade Intelectual\",\n \"Societário\",\n \"Relações de Consumo\",\n \"Responsabilidade Civil\",\n ]],\n [\"Tributário\", [\n \"Consultoria e Parecer Técnico\",\n \"Contencioso administrativo e judicial\",\n \"Recuperação de Créditos\",\n \"Planejamento Tributário\",\n \"Revisão Fiscal\",\n \"Transação Tributária\",\n ]],\n [\"Trabalhista\", [\n \"Consultoria Preventiva\",\n \"Contencioso administrativo e judicial\",\n \"Direito Coletivo do Trabalho\",\n \"Acordos e Convenções Coletivas\",\n \"Compliance\",\n \"Gestão de Riscos e Passivos\",\n ]],\n [\"Administrativo\", [\n \"Licitações e Contratos Administrativos\",\n ]],\n [\"Família e Sucessões\", [\n \"Pacto Antenupcial\",\n \"Divórcio\",\n \"Inventário\",\n \"União Estável\",\n \"Partilha de Bens\",\n \"Curatela\",\n \"Planejamento Sucessório\",\n \"Holding\",\n \"Instrumento de Doação\",\n \"Alimentos\",\n \"Guarda\",\n \"Protetiva\",\n ]],\n [\"Contratos e Estruturação de Negócios\", [\n \"Due Diligence Empresarial\",\n \"Avaliação de Risco\",\n \"Fusões e Aquisições\",\n \"Mediação e Negociação\",\n \"Contratos e Negócios Imobiliários\",\n \"Parecer Consultivo\",\n ]],\n [\"Imobiliário\", [\n \"Due Diligence Imobiliária\",\n \"Assessoria Notarial e Registral\",\n \"Negócios Imobiliários\",\n \"Regularização Imobiliária\",\n \"Vícios Construtivos\",\n \"Créditos Propter Rem\",\n ]],\n ];\n for (const [nomeArea, produtos] of porArea) {\n const area = (await sqlite.execute({\n sql: \"SELECT id FROM areas WHERE name = ?\",\n args: [nomeArea],\n })).rows[0];\n if (!area) continue; // área renomeada ou removida: pula sem quebrar o boot\n for (let i = 0; i < produtos.length; i++) {\n await sqlite.execute({\n sql:\n \"INSERT INTO products (area_id, name, position, created_at) VALUES (?, ?, ?, ?)\",\n args: [area.id, produtos[i], i, now],\n });\n }\n }\n}\n\nawait seedIfEmpty();\nawait seedAreasIfEmpty();\nawait seedProductsIfEmpty();\n\n// ---------------------------------------------------------------------------\n// Cripto de sessão (cookie assinado com HMAC-SHA256)\n// ---------------------------------------------------------------------------\nconst encoder = new TextEncoder();\n\nfunction b64urlEncode(bytes: Uint8Array): string {\n let bin = \"\";\n for (const b of bytes) bin += String.fromCharCode(b);\n return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\nfunction b64urlDecode(str: string): Uint8Array {\n str = str.replace(/-/g, \"+\").replace(/_/g, \"/\");\n while (str.length % 4) str += \"=\";\n const bin = atob(str);\n const bytes = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);\n return bytes;\n}\nasync function hmacKey() {\n return crypto.subtle.importKey(\n \"raw\",\n encoder.encode(SESSION_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\", \"verify\"],\n );\n}\nasync function signSession(payload: Record): Promise {\n const key = await hmacKey();\n const data = b64urlEncode(encoder.encode(JSON.stringify(payload)));\n const sig = new Uint8Array(\n await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data)),\n );\n return data + \".\" + b64urlEncode(sig);\n}\nasync function verifySession(\n token: string,\n): Promise | null> {\n const dot = token.indexOf(\".\");\n if (dot < 0) return null;\n const data = token.slice(0, dot);\n const sig = token.slice(dot + 1);\n const key = await hmacKey();\n let ok = false;\n try {\n ok = await crypto.subtle.verify(\n \"HMAC\",\n key,\n b64urlDecode(sig),\n encoder.encode(data),\n );\n } catch {\n return null;\n }\n if (!ok) return null;\n try {\n const payload = JSON.parse(new TextDecoder().decode(b64urlDecode(data)));\n if (payload.exp && Date.now() > payload.exp) return null;\n return payload;\n } catch {\n return null;\n }\n}\nfunction decodeIdToken(jwt: string): Record {\n const parts = jwt.split(\".\");\n return JSON.parse(new TextDecoder().decode(b64urlDecode(parts[1])));\n}\n\ntype User = { email: string; name: string; picture: string; isAdmin: boolean };\n\nasync function getUser(c: any): Promise {\n const token = getCookie(c, \"session\");\n if (!token) return null;\n const p = await verifySession(token);\n if (!p) return null;\n return {\n email: p.email,\n name: p.name || p.email,\n picture: p.picture || \"\",\n isAdmin: adminEmails().includes((p.email || \"\").toLowerCase()),\n };\n}\n\n// ---------------------------------------------------------------------------\n// App\n// ---------------------------------------------------------------------------\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nfunction getGoogle(c: any): arctic.Google {\n const origin = new URL(c.req.url).origin;\n return new arctic.Google(\n Deno.env.get(\"GOOGLE_CLIENT_ID\") || \"\",\n Deno.env.get(\"GOOGLE_CLIENT_SECRET\") || \"\",\n origin + \"/auth/callback\",\n );\n}\n\n// ---- Auth ----\napp.get(\"/auth/google\", (c) => {\n const google = getGoogle(c);\n const state = arctic.generateState();\n const codeVerifier = arctic.generateCodeVerifier();\n const url = google.createAuthorizationURL(state, codeVerifier, [\n \"openid\",\n \"profile\",\n \"email\",\n ]);\n // Sugere a tela de contas do Workspace do escritório\n const dom = allowedDomains()[0];\n if (dom) url.searchParams.set(\"hd\", dom);\n const opts = {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\" as const,\n path: \"/\",\n maxAge: 600,\n };\n setCookie(c, \"g_state\", state, opts);\n setCookie(c, \"g_verifier\", codeVerifier, opts);\n return c.redirect(url.toString());\n});\n\napp.get(\"/auth/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n const storedState = getCookie(c, \"g_state\");\n const verifier = getCookie(c, \"g_verifier\");\n if (!code || !state || !storedState || state !== storedState || !verifier) {\n return c.redirect(\"/login?error=state\");\n }\n let tokens: arctic.OAuth2Tokens;\n try {\n tokens = await getGoogle(c).validateAuthorizationCode(code, verifier);\n } catch {\n return c.redirect(\"/login?error=oauth\");\n }\n let claims: Record;\n try {\n claims = decodeIdToken(tokens.idToken());\n } catch {\n return c.redirect(\"/login?error=token\");\n }\n const email = String(claims.email || \"\").toLowerCase();\n const domain = email.split(\"@\")[1] || \"\";\n if (\n !email || claims.email_verified === false ||\n !allowedDomains().includes(domain)\n ) {\n return c.redirect(\"/login?error=domain\");\n }\n const session = {\n email,\n name: claims.name || email,\n picture: claims.picture || \"\",\n exp: Date.now() + THIRTY_DAYS * 1000,\n };\n deleteCookie(c, \"g_state\", { path: \"/\" });\n deleteCookie(c, \"g_verifier\", { path: \"/\" });\n setCookie(c, \"session\", await signSession(session), {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: THIRTY_DAYS,\n });\n return c.redirect(\"/\");\n});\n\napp.post(\"/logout\", (c) => {\n deleteCookie(c, \"session\", { path: \"/\" });\n return c.redirect(\"/login\");\n});\napp.get(\"/logout\", (c) => {\n deleteCookie(c, \"session\", { path: \"/\" });\n return c.redirect(\"/login\");\n});\n\n// ---- Páginas ----\napp.get(\"/login\", async (c) => {\n const user = await getUser(c);\n if (user) return c.redirect(\"/\");\n return serveFile(\"/frontend/login.html\");\n});\n\napp.get(\"/\", async (c) => {\n const user = await getUser(c);\n if (!user) return c.redirect(\"/login\");\n return serveFile(\"/frontend/index.html\");\n});\n\napp.get(\"/admin\", async (c) => {\n const user = await getUser(c);\n if (!user) return c.redirect(\"/login\");\n if (!user.isAdmin) return c.redirect(\"/?error=forbidden\");\n return serveFile(\"/frontend/admin.html\");\n});\n\n// Estáticos do frontend (css/js/imagens)\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path));\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---- API ----\nasync function requireUser(c: any): Promise {\n const user = await getUser(c);\n if (!user) {\n c.status(401);\n return null;\n }\n return user;\n}\nasync function requireAdmin(c: any): Promise {\n const user = await getUser(c);\n if (!user) {\n c.status(401);\n return null;\n }\n if (!user.isAdmin) {\n c.status(403);\n return null;\n }\n return user;\n}\n\n// ---------------------------------------------------------------------------\n// Permissões de leitura\n// ---------------------------------------------------------------------------\ntype Permissoes = { confidencial: boolean; areas: Record };\n\nasync function permissoesDe(email: string): Promise {\n const chave = (email || \"\").toLowerCase();\n const pes = (await sqlite.execute({\n sql: \"SELECT confidencial FROM people WHERE email = ?\",\n args: [chave],\n })).rows[0];\n const linhas = (await sqlite.execute({\n sql: \"SELECT area_id, nivel FROM people_areas WHERE email = ?\",\n args: [chave],\n })).rows;\n const areas: Record = {};\n for (const l of linhas) areas[Number(l.area_id)] = Number(l.nivel) || 1;\n return { confidencial: !!(pes && Number(pes.confidencial) === 1), areas };\n}\n\n// O admin enxerga tudo: é quem cadastra e precisa conferir o que publicou.\nfunction podeVer(r: any, user: User, p: Permissoes): boolean {\n if (user.isAdmin) return true;\n const v = r.visibility || \"aberto\";\n if (v === \"aberto\") return true;\n if (v === \"confidencial\") return p.confidencial;\n const nivel = p.areas[Number(r.area_id)] || 0;\n if (v === \"equipe\") return nivel >= 1;\n if (v === \"lideranca\") return nivel >= 2;\n return false;\n}\n\napp.get(\"/api/data\", async (c) => {\n const user = await requireUser(c);\n if (!user) return c.json({ error: \"não autenticado\" }, 401);\n const categories =\n (await sqlite.execute(\"SELECT * FROM categories ORDER BY position, id\"))\n .rows;\n const todasAreas =\n (await sqlite.execute(\"SELECT * FROM areas ORDER BY position, id\")).rows;\n const todos =\n (await sqlite.execute(\"SELECT * FROM resources ORDER BY position, id\"))\n .rows;\n\n // O filtro é aqui, no servidor: o que a pessoa não pode ver não sai daqui.\n // Esconder só na tela deixaria o conteúdo a um /api/data de distância.\n const perm = await permissoesDe(user.email);\n const resources = todos.filter((r) => podeVer(r, user, perm));\n\n // A lateral não mostra área vazia: fica a área que a pessoa tem no cadastro\n // ou a que sobrou com algum conteúdo visível para ela.\n const comConteudo = new Set(\n resources.map((r) => Number(r.area_id)).filter(Boolean),\n );\n const areas = user.isAdmin\n ? todasAreas\n : todasAreas.filter((a) =>\n perm.areas[Number(a.id)] || comConteudo.has(Number(a.id))\n );\n\n // produto só faz sentido junto com a área dele: some quando a área some\n const idsArea = new Set(areas.map((a) => Number(a.id)));\n const products =\n (await sqlite.execute(\n \"SELECT * FROM products ORDER BY area_id, position, id\",\n ))\n .rows.filter((p) => idsArea.has(Number(p.area_id)));\n\n return c.json({\n me: { ...user, confidencial: perm.confidencial },\n categories,\n areas,\n products,\n resources,\n });\n});\n\n// ---- Categorias (admin) ----\napp.post(\"/api/categories\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n if (!b.name) return c.json({ error: \"nome obrigatório\" }, 400);\n const posRow =\n (await sqlite.execute(\n \"SELECT COALESCE(MAX(position), -1) + 1 AS p FROM categories\",\n )).rows[0];\n const r = await sqlite.execute({\n sql:\n \"INSERT INTO categories (name, emoji, color, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [\n b.name,\n b.emoji || \"\",\n b.color || \"#17362E\",\n b.position ?? posRow.p,\n Date.now(),\n ],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) });\n});\n\napp.put(\"/api/categories/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n await sqlite.execute({\n sql:\n \"UPDATE categories SET name = ?, emoji = ?, color = ?, position = ? WHERE id = ?\",\n args: [b.name, b.emoji || \"\", b.color || \"#17362E\", b.position ?? 0, id],\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/categories/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n await sqlite.batch([\n { sql: \"DELETE FROM resources WHERE category_id = ?\", args: [id] },\n { sql: \"DELETE FROM categories WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true });\n});\n\n// Visibilidade só aceita os quatro valores previstos. E \"equipe\"/\"lideranca\"\n// dependem de uma área: sem área ninguém teria a chave, e o conteúdo existiria\n// sem que pessoa nenhuma pudesse vê-lo.\nfunction visibilidade(b: any): string {\n const v = String(b.visibility || \"aberto\");\n if (![\"aberto\", \"equipe\", \"lideranca\", \"confidencial\"].includes(v)) {\n return \"aberto\";\n }\n if ((v === \"equipe\" || v === \"lideranca\") && !b.area_id) return \"aberto\";\n return v;\n}\n\n// O produto tem que pertencer à área escolhida. Se não pertencer (troquei a área\n// e esqueci o produto), o vínculo cai em vez de ficar apontando para outra área.\nfunction produtoDe(b: any): number | null {\n if (!b.product_id || !b.area_id) return null;\n return Number(b.product_id);\n}\n\n// ---- Produtos (admin) ----\napp.post(\"/api/products\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n if (!b.name) return c.json({ error: \"nome obrigatório\" }, 400);\n if (!b.area_id) return c.json({ error: \"escolha a área\" }, 400);\n const posRow = (await sqlite.execute({\n sql:\n \"SELECT COALESCE(MAX(position), -1) + 1 AS p FROM products WHERE area_id = ?\",\n args: [Number(b.area_id)],\n })).rows[0];\n const r = await sqlite.execute({\n sql:\n \"INSERT INTO products (area_id, name, description, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [\n Number(b.area_id),\n b.name,\n b.description || \"\",\n b.position ?? posRow.p,\n Date.now(),\n ],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) });\n});\n\napp.put(\"/api/products/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n await sqlite.execute({\n sql:\n \"UPDATE products SET area_id = ?, name = ?, description = ?, position = ? WHERE id = ?\",\n args: [Number(b.area_id), b.name, b.description || \"\", b.position ?? 0, id],\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/products/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n // apagar o produto NÃO apaga o conteúdo: ele volta para a raiz da área\n await sqlite.batch([\n {\n sql: \"UPDATE resources SET product_id = NULL WHERE product_id = ?\",\n args: [id],\n },\n { sql: \"DELETE FROM products WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true });\n});\n\n// ---- Áreas (admin) ----\napp.post(\"/api/areas\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n if (!b.name) return c.json({ error: \"nome obrigatório\" }, 400);\n const posRow =\n (await sqlite.execute(\n \"SELECT COALESCE(MAX(position), -1) + 1 AS p FROM areas\",\n )).rows[0];\n const r = await sqlite.execute({\n sql:\n \"INSERT INTO areas (name, color, description, position, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [\n b.name,\n b.color || \"#004746\",\n b.description || \"\",\n b.position ?? posRow.p,\n Date.now(),\n ],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) });\n});\n\napp.put(\"/api/areas/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n await sqlite.execute({\n sql:\n \"UPDATE areas SET name = ?, color = ?, description = ?, position = ? WHERE id = ?\",\n args: [\n b.name,\n b.color || \"#004746\",\n b.description || \"\",\n b.position ?? 0,\n id,\n ],\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/areas/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n // apagar a área NÃO apaga os recursos: eles voltam a ser transversais\n await sqlite.batch([\n {\n sql:\n \"UPDATE resources SET area_id = NULL, product_id = NULL WHERE area_id = ?\",\n args: [id],\n },\n { sql: \"DELETE FROM products WHERE area_id = ?\", args: [id] },\n { sql: \"DELETE FROM areas WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true });\n});\n\n// ---- Recursos (admin) ----\napp.post(\"/api/resources\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n if (!b.title) return c.json({ error: \"título obrigatório\" }, 400);\n const now = Date.now();\n const posRow = (await sqlite.execute({\n sql:\n \"SELECT COALESCE(MAX(position), -1) + 1 AS p FROM resources WHERE category_id = ?\",\n args: [b.category_id ?? null],\n })).rows[0];\n const r = await sqlite.execute({\n sql:\n `INSERT INTO resources (category_id, area_id, product_id, visibility, kind, title, description, url, tags, position, created_at, updated_at, created_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n b.category_id ?? null,\n b.area_id ?? null,\n produtoDe(b),\n visibilidade(b),\n b.kind || \"link\",\n b.title,\n b.description || \"\",\n b.url || \"\",\n b.tags || \"\",\n b.position ?? posRow.p,\n now,\n now,\n user.email,\n ],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) });\n});\n\napp.put(\"/api/resources/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n await sqlite.execute({\n sql:\n `UPDATE resources SET category_id = ?, area_id = ?, product_id = ?, visibility = ?, kind = ?, title = ?, description = ?, url = ?, tags = ?, position = ?, updated_at = ?\n WHERE id = ?`,\n args: [\n b.category_id ?? null,\n b.area_id ?? null,\n produtoDe(b),\n visibilidade(b),\n b.kind || \"link\",\n b.title,\n b.description || \"\",\n b.url || \"\",\n b.tags || \"\",\n b.position ?? 0,\n Date.now(),\n id,\n ],\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/resources/:id\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const id = Number(c.req.param(\"id\"));\n await sqlite.execute({\n sql: \"DELETE FROM resources WHERE id = ?\",\n args: [id],\n });\n return c.json({ ok: true });\n});\n\n// ---- Pessoas e acessos (admin) ----\n// A lista de pessoas vive à parte do /api/data porque só o admin precisa dela\n// e ela carrega quem-vê-o-quê do escritório inteiro.\napp.get(\"/api/people\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const people =\n (await sqlite.execute(\"SELECT * FROM people ORDER BY name, email\")).rows;\n const acessos = (await sqlite.execute(\"SELECT * FROM people_areas\")).rows;\n return c.json({ people, acessos });\n});\n\n// Um POST só: grava a pessoa e o conjunto de acessos dela de uma vez, para não\n// existir estado pela metade (pessoa salva com os acessos antigos).\napp.post(\"/api/people\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const b = await c.req.json();\n const email = String(b.email || \"\").trim().toLowerCase();\n if (!email.includes(\"@\")) {\n return c.json({ error: \"informe um e-mail válido\" }, 400);\n }\n\n const cmds: any[] = [\n {\n sql:\n `INSERT INTO people (email, name, confidencial, created_at) VALUES (?, ?, ?, ?)\n ON CONFLICT(email) DO UPDATE SET name = excluded.name, confidencial = excluded.confidencial`,\n args: [\n email,\n String(b.name || \"\").trim(),\n b.confidencial ? 1 : 0,\n Date.now(),\n ],\n },\n { sql: \"DELETE FROM people_areas WHERE email = ?\", args: [email] },\n ];\n for (const a of (b.areas || [])) {\n const nivel = Number(a.nivel);\n if (nivel !== 1 && nivel !== 2) continue; // 0 = sem acesso: não vira linha\n cmds.push({\n sql: \"INSERT INTO people_areas (email, area_id, nivel) VALUES (?, ?, ?)\",\n args: [email, Number(a.area_id), nivel],\n });\n }\n await sqlite.batch(cmds);\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/people/:email\", async (c) => {\n const user = await requireAdmin(c);\n if (!user) return c.json({ error: \"sem permissão\" }, 403);\n const email = decodeURIComponent(c.req.param(\"email\")).toLowerCase();\n await sqlite.batch([\n { sql: \"DELETE FROM people_areas WHERE email = ?\", args: [email] },\n { sql: \"DELETE FROM people WHERE email = ?\", args: [email] },\n ]);\n return c.json({ ok: true });\n});\n\nexport default app.fetch;","createdAt",["D",1787341180359],"branchVersion","branchId","009a213a-5d13-4852-b42f-8e801dff5e7d","id","9ab084f2-bc0d-4157-8309-5ffdce2fc176","central-tc",["D",1787155811387],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Hub interno da equipe - Tiburcio Cavalcanti Advogados","imageUrl","958c1536-145c-4a08-bd54-1d0012b1c50b","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a01ac2-1aeb-74af-851f-8c20bc82d00f","tursoName","9ab084f2bc0d415783095ffdce2fc176","tursoHostname","9ab084f2bc0d415783095ffdce2fc176-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501878689],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",186,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","brunotiburcio","handle","displayName","Bruno Tiburcio","avatar","https://lh3.googleusercontent.com/a/ACg8ocIU3oVPHph0ljs_B1i19GaloM5eTa0UsGleNTsPnsusIfzPjg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":223,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":224,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":225,"_83":226,"_85":227,"_87":25},"tree",[157,164],"files",[157,158,159,160,161,162,163,164],"counts",{"_147":62,"_148":144,"_149":62,"_150":151,"_152":153},"contents",[130,131],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":139,"_32":140,"_30":141,"_133":-5,"_41":42,"_40":142,"_134":58,"_38":143,"_13":144,"_33":145,"_35":-5,"_24":25,"_137":-5,"_27":146},{"_43":132,"_32":28,"_30":31,"_133":-5,"_41":42,"_40":14,"_134":25,"_38":135,"_13":136,"_33":34,"_35":37,"_24":25,"_137":-5,"_27":138},"03412579-0fd1-41fd-987a-53dd376caed6","parentId","latest",["D",1787341180359],5,"label",[28],"15b6cd7c-1b0d-47dd-8863-d3560cfb4f09","frontend","a7603784-9be9-11f1-b2eb-1607ee4eb77e",6,["D",1787156352547],1,"directory",[140],"pulls","branches","forks","envVars",{"_154":142,"_156":62},"connections",{"_154":62,"_155":62},"count","unfilledCount","emptyCount",{"_43":139,"_32":140,"_30":141,"_133":-5,"_41":42,"_40":142,"_134":58,"_38":220,"_13":144,"_33":145,"_35":-5,"_24":25,"_137":-5,"_166":221,"_27":222},{"_43":212,"_32":213,"_30":214,"_133":141,"_41":42,"_40":215,"_134":25,"_38":216,"_13":142,"_33":20,"_35":217,"_24":25,"_137":-5,"_166":218,"_27":219},{"_43":204,"_32":205,"_30":206,"_133":141,"_41":42,"_40":207,"_134":25,"_38":208,"_13":136,"_33":200,"_35":209,"_24":25,"_137":-5,"_166":210,"_27":211},{"_43":195,"_32":196,"_30":197,"_133":141,"_41":42,"_40":198,"_134":25,"_38":199,"_13":191,"_33":200,"_35":201,"_24":25,"_137":-5,"_166":202,"_27":203},{"_43":186,"_32":187,"_30":188,"_133":141,"_41":42,"_40":189,"_134":25,"_38":190,"_13":191,"_33":20,"_35":192,"_24":25,"_137":-5,"_166":193,"_27":194},{"_43":178,"_32":179,"_30":180,"_133":141,"_41":42,"_40":181,"_134":25,"_38":182,"_13":136,"_33":20,"_35":183,"_24":25,"_137":-5,"_166":184,"_27":185},{"_43":169,"_32":170,"_30":171,"_133":141,"_41":42,"_40":172,"_134":25,"_38":173,"_13":174,"_33":20,"_35":175,"_24":25,"_137":-5,"_166":176,"_27":177},{"_43":132,"_32":28,"_30":31,"_133":-5,"_41":42,"_40":14,"_134":25,"_38":165,"_13":136,"_33":34,"_35":37,"_24":25,"_137":-5,"_166":167,"_27":168},["D",1787341180359],"children",[],[28],"aa267132-fd2f-4c17-91b9-251051947f1b","styles.css","320cc3fc-9bea-11f1-953d-1607ee4eb77e",55,["D",1787338254285],11,"/* ═══════════════════════════════════════════════════════════════════\n CENTRAL TC — pele neutra da família Julia (decisão de 19/08/2026).\n\n A interface dos apps internos do escritório é cinza, preto e branco;\n a cor sobrevive apenas onde carrega significado (o dot de categoria).\n A identidade verde/dourada do TC vive nos documentos e no site — a\n ferramenta é instrumento de trabalho.\n\n Tokens portados de lexflow/app/src/estilos.css (Julia v2).\n ═══════════════════════════════════════════════════════════════════ */\n\n:root {\n --fundo: #fafafa;\n --superficie: #ffffff;\n --superficie-2: #f4f4f5;\n --linha: #e4e4e7;\n --linha-forte: #d4d4d8;\n --tinta: #0f0f10;\n --tinta-2: #52525b;\n --tinta-3: #9a9aa2;\n\n --acento: #18181b;\n --acento-hover: #27272a;\n --acento-suave: #f4f4f5;\n --acento-tinta: #ffffff; /* cor que sempre contrasta com --acento */\n\n --ok: #15803d;\n --alerta: #a16207;\n --perigo: #b42318;\n\n --sans: \"Helvetica Neue\", Helvetica, Arial, system-ui, sans-serif;\n --mono: ui-monospace, \"SF Mono\", \"Geist Mono\", Menlo, monospace;\n\n --t-rotulo: 10.5px;\n --t-nav: 13.5px;\n --t-acao: 15px;\n --t-corpo: 16px;\n --t-barra: 18px;\n --ls-rotulo: 0.13em;\n --alt-acao: 41px;\n --raio-pill: 21px;\n\n --elev-1: 0 1px 2px rgba(9, 9, 11, 0.05), 0 1px 1px rgba(9, 9, 11, 0.03);\n --elev-2:\n 0 2px 4px rgba(9, 9, 11, 0.05), 0 8px 20px -6px rgba(9, 9, 11, 0.10);\n --transicao: 180ms cubic-bezier(0.2, 0.7, 0.3, 1);\n}\n\n@media (prefers-color-scheme: dark) {\n :root:not([data-theme=\"light\"]) {\n --fundo: #0a0a0b;\n --superficie: #121214;\n --superficie-2: #1a1a1d;\n --linha: #26262a;\n --linha-forte: #35353a;\n --tinta: #f4f4f5;\n --tinta-2: #a1a1aa;\n --tinta-3: #6b6b73;\n --acento: #fafafa;\n --acento-hover: #ffffff;\n --acento-suave: #1f1f23;\n --acento-tinta: #0f0f10;\n --ok: #4ade80;\n --alerta: #fbbf24;\n --perigo: #f87171;\n }\n}\n:root[data-theme=\"dark\"] {\n --fundo: #0a0a0b;\n --superficie: #121214;\n --superficie-2: #1a1a1d;\n --linha: #26262a;\n --linha-forte: #35353a;\n --tinta: #f4f4f5;\n --tinta-2: #a1a1aa;\n --tinta-3: #6b6b73;\n --acento: #fafafa;\n --acento-hover: #ffffff;\n --acento-suave: #1f1f23;\n --acento-tinta: #0f0f10;\n --ok: #4ade80;\n --alerta: #fbbf24;\n --perigo: #f87171;\n}\n\n* {\n box-sizing: border-box;\n}\nhtml, body {\n height: 100%;\n margin: 0;\n padding: 0;\n}\nbody {\n background: var(--fundo);\n color: var(--tinta);\n font: 13.5px/1.5 var(--sans);\n -webkit-font-smoothing: antialiased;\n}\na {\n color: inherit;\n text-decoration: none;\n}\nbutton {\n font-family: inherit;\n cursor: pointer;\n}\n\n.app {\n display: flex;\n height: 100vh;\n}\n\n/* ═══ LATERAL — clara, texto-primeiro, hairline ═════════════════════ */\n.lateral {\n width: 232px;\n flex: none;\n display: flex;\n flex-direction: column;\n background: var(--superficie);\n border-right: 1px solid var(--linha);\n}\n.lat-marca {\n display: flex;\n align-items: center;\n gap: 11px;\n height: 68px;\n flex: none;\n padding: 0 16px 0 20px;\n border-bottom: 1px solid var(--linha);\n}\n.logo-chip {\n width: 30px;\n height: 30px;\n border-radius: 9px;\n flex: none;\n display: grid;\n place-items: center;\n font: 600 13px Georgia, serif;\n color: var(--acento-tinta);\n background: var(--acento);\n}\n.lat-marca b {\n display: block;\n font: 600 15px var(--sans);\n letter-spacing: -0.02em;\n}\n.lat-marca span {\n display: block;\n font-size: var(--t-rotulo);\n color: var(--tinta-3);\n letter-spacing: 0.01em;\n}\n\n.lat-rolagem {\n flex: 1;\n overflow-y: auto;\n padding: 16px 12px 18px;\n scrollbar-width: thin;\n scrollbar-color: var(--linha-forte) transparent;\n}\n.lat-grupo + .lat-grupo {\n margin-top: 22px;\n}\n.lat-grupo-rotulo {\n font: 500 var(--t-rotulo) var(--sans);\n letter-spacing: var(--ls-rotulo);\n text-transform: uppercase;\n color: var(--tinta-3);\n margin: 6px 0 8px 6px;\n}\n.lat-item {\n display: flex;\n align-items: center;\n gap: 12px;\n width: 100%;\n height: 38px;\n padding: 0 10px;\n margin: 0;\n border: none;\n border-radius: 9px;\n background: none;\n color: var(--tinta-2);\n font: 500 var(--t-nav)/1.65 var(--sans);\n letter-spacing: -0.006em;\n text-align: left;\n}\n.lat-item:hover {\n background: var(--superficie-2);\n color: var(--tinta);\n}\n.lat-item.ativo {\n background: var(--acento);\n color: var(--acento-tinta);\n font-weight: 600;\n}\n.lat-item-nome {\n flex: 1;\n min-width: 0;\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n.lat-conta {\n flex: none;\n padding: 0 8px;\n border-radius: 20px;\n background: var(--superficie-2);\n color: var(--tinta-3);\n font: 500 var(--t-rotulo)/20px var(--sans);\n}\n.lat-item.ativo .lat-conta {\n background: color-mix(in srgb, var(--acento-tinta) 18%, transparent);\n color: var(--acento-tinta);\n}\n.dot {\n width: 7px;\n height: 7px;\n border-radius: 50%;\n flex: none;\n}\n.dot-inicio {\n background: var(--tinta-3);\n}\n\n/* o ícone da Home ocupa a mesma calha dos marcadores (7px) para o texto de\n todos os itens da lateral continuar alinhado na mesma coluna */\n.lat-ico {\n display: flex;\n flex: none;\n width: 7px;\n justify-content: center;\n color: var(--tinta-3);\n}\n.lat-ico svg {\n width: 15px;\n height: 15px;\n margin: 0 -4px;\n}\n.lat-item:hover .lat-ico {\n color: var(--tinta-2);\n}\n.lat-item.ativo .lat-ico {\n color: #fff;\n}\n\n.lat-rodape {\n border-top: 1px solid var(--linha);\n padding: 12px 16px 14px;\n display: flex;\n flex-direction: column;\n gap: 2px;\n}\n.lat-rodape-link {\n display: flex;\n align-items: center;\n gap: 9px;\n width: 100%;\n padding: 7px 9px;\n border: none;\n border-radius: 8px;\n background: none;\n text-align: left;\n color: var(--tinta-2);\n font: 500 var(--t-nav) var(--sans);\n}\n.lat-rodape-link:hover {\n background: var(--superficie-2);\n color: var(--tinta);\n}\n.lat-user-btn {\n display: flex;\n align-items: center;\n gap: 9px;\n width: 100%;\n padding: 7px 9px;\n margin-top: 3px;\n border: none;\n border-radius: 8px;\n background: none;\n text-align: left;\n}\n.lat-avatar {\n width: 22px;\n height: 22px;\n border-radius: 50%;\n flex: none;\n display: grid;\n place-items: center;\n font: 600 var(--t-rotulo) var(--sans);\n color: var(--acento-tinta);\n background: var(--acento);\n overflow: hidden;\n}\n.lat-avatar img {\n width: 100%;\n height: 100%;\n object-fit: cover;\n}\n.lat-user-nome {\n font-size: var(--t-nav);\n color: var(--tinta-2);\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n\n/* ═══ PRINCIPAL ═════════════════════════════════════════════════════ */\n.principal {\n flex: 1;\n display: flex;\n flex-direction: column;\n min-width: 0;\n}\n\n.topo {\n display: flex;\n align-items: center;\n gap: 16px;\n flex: none;\n height: 68px;\n padding: 0 22px;\n border-bottom: 1px solid var(--linha);\n background: var(--superficie);\n}\n.topo-busca {\n position: relative;\n width: min(540px, 46vw);\n}\n.topo-busca input {\n width: 100%;\n height: 40px;\n padding: 0 14px 0 38px;\n border-radius: 11px;\n border: 1px solid var(--linha);\n background: var(--fundo);\n color: var(--tinta);\n font: 13.5px var(--sans);\n}\n.topo-busca input::placeholder {\n color: var(--tinta-3);\n}\n.topo-busca input:focus {\n outline: none;\n border-color: var(--linha-forte);\n background: var(--superficie);\n}\n.topo-busca-ico {\n position: absolute;\n left: 13px;\n top: 50%;\n transform: translateY(-50%);\n color: var(--tinta-3);\n pointer-events: none;\n display: grid;\n}\n.topo-atalho {\n position: absolute;\n right: 10px;\n top: 50%;\n transform: translateY(-50%);\n padding: 2px 7px;\n border: 1px solid var(--linha);\n border-radius: 6px;\n background: var(--superficie);\n color: var(--tinta-3);\n font: 400 var(--t-rotulo) var(--mono);\n pointer-events: none;\n}\n.topo-dir {\n display: flex;\n align-items: center;\n gap: 10px;\n margin-left: auto;\n}\n\n.pill-acao {\n display: inline-flex;\n align-items: center;\n gap: 7px;\n height: 36px;\n padding: 0 16px;\n border: 1px solid var(--linha);\n border-radius: var(--raio-pill);\n background: var(--superficie);\n color: var(--tinta-2);\n font: 500 var(--t-nav) var(--sans);\n}\n.pill-acao:hover {\n border-color: var(--linha-forte);\n color: var(--tinta);\n}\n.pill-acao-forte {\n background: var(--acento);\n border-color: var(--acento);\n color: var(--acento-tinta);\n font-weight: 600;\n}\n.pill-acao-forte:hover {\n background: var(--acento-hover);\n border-color: var(--acento-hover);\n color: var(--acento-tinta);\n}\n\n/* ═══ CONTEÚDO — hub ════════════════════════════════════════════════ */\n.conteudo {\n flex: 1;\n min-height: 0;\n overflow-y: auto;\n padding: 30px 28px 60px;\n}\n\n/* hero no molde do app.viverdeia.ai/tools: kicker mono + título 46px com\n a palavra de destaque em itálico */\n.pagina-cab {\n margin: 6px 0 30px;\n}\n.pagina-kicker {\n font: 400 var(--t-rotulo) var(--mono);\n letter-spacing: 0.08em;\n text-transform: uppercase;\n color: var(--tinta-3);\n margin-bottom: 10px;\n}\n.pagina-cab h1 {\n margin: 0;\n font: 600 clamp(28px, 3.2vw, 46px)/1.05 var(--sans);\n letter-spacing: -0.03em;\n color: var(--tinta);\n}\n.pagina-cab h1 em {\n font-style: italic;\n}\n.pagina-cab p {\n margin: 12px 0 0;\n color: var(--tinta-2);\n font-size: var(--t-nav);\n max-width: 60ch;\n}\n\n.cat-section {\n margin-bottom: 34px;\n}\n.cat-title {\n display: flex;\n align-items: center;\n gap: 9px;\n margin: 0 0 12px;\n font: 500 var(--t-rotulo) var(--sans);\n letter-spacing: var(--ls-rotulo);\n text-transform: uppercase;\n color: var(--tinta-3);\n}\n.cat-title .count {\n color: var(--tinta-3);\n font-weight: 500;\n}\n\n/* cartão no molde do /tools: tile de ícone 46px, rótulo de categoria em\n mono, descrição com clamp de 2 linhas e chips mono no rodapé */\n.grid {\n display: grid;\n grid-template-columns: repeat(auto-fill, minmax(300px, 1fr));\n gap: 14px;\n}\n.card {\n position: relative;\n border: 1px solid var(--linha);\n border-radius: 12px;\n background: linear-gradient(\n 180deg,\n var(--superficie) 0%,\n color-mix(in srgb, var(--superficie) 72%, var(--fundo)) 100%\n );\n padding: 15px 16px 13px;\n box-shadow: var(--elev-1);\n transition:\n border-color var(--transicao),\n box-shadow var(--transicao),\n transform var(--transicao);\n display: flex;\n flex-direction: column;\n gap: 10px;\n min-height: 148px;\n}\n.card.linkable {\n cursor: pointer;\n}\n.card.linkable:hover {\n border-color: var(--linha-forte);\n box-shadow: var(--elev-2);\n transform: translateY(-1px);\n}\n.card-cab {\n display: flex;\n align-items: center;\n gap: 12px;\n min-width: 0;\n}\n.tile {\n width: 46px;\n height: 46px;\n border-radius: 12px;\n flex: none;\n border: 1px solid var(--linha);\n background: var(--superficie);\n display: grid;\n place-items: center;\n overflow: hidden;\n}\n.tile img {\n width: 28px;\n height: 28px;\n object-fit: contain;\n}\n.tile-letra {\n font: 600 18px var(--sans);\n color: var(--tinta-2);\n background: var(--superficie-2);\n width: 100%;\n height: 100%;\n display: grid;\n place-items: center;\n}\n.card h3 {\n margin: 0;\n font: 600 15px/1.3 var(--sans);\n letter-spacing: -0.012em;\n color: var(--tinta);\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n.card-cat {\n margin-top: 3px;\n font: 400 var(--t-rotulo) var(--mono);\n letter-spacing: 0.08em;\n text-transform: uppercase;\n color: var(--tinta-3);\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n.card p {\n margin: 0;\n font-size: 12.5px;\n line-height: 1.5;\n color: var(--tinta-2);\n display: -webkit-box;\n -webkit-line-clamp: 2;\n -webkit-box-orient: vertical;\n overflow: hidden;\n}\n.card .foot {\n margin-top: auto;\n display: flex;\n align-items: center;\n gap: 6px;\n min-width: 0;\n}\n.tag {\n flex: none;\n font: 400 10.5px var(--mono);\n color: var(--tinta-2);\n border: 1px solid var(--linha);\n background: var(--superficie);\n padding: 2px 8px;\n border-radius: 6px;\n white-space: nowrap;\n}\n.card .go {\n margin-left: auto;\n flex: none;\n color: var(--tinta-3);\n display: grid;\n}\n.card.linkable:hover .go {\n color: var(--tinta);\n}\n\n.empty {\n text-align: center;\n color: var(--tinta-3);\n padding: 70px 20px;\n font-size: var(--t-corpo);\n}\n\n.demo-banner {\n background: var(--superficie-2);\n color: var(--tinta-2);\n text-align: center;\n font: 500 var(--t-rotulo) var(--sans);\n letter-spacing: 0.06em;\n text-transform: uppercase;\n padding: 7px;\n border-bottom: 1px solid var(--linha);\n}\n\n/* ═══ LOGIN ═════════════════════════════════════════════════════════ */\n.login-fundo {\n min-height: 100vh;\n display: grid;\n place-items: center;\n background: var(--fundo);\n padding: 24px;\n}\n.login-caixa {\n width: min(380px, 100%);\n display: flex;\n flex-direction: column;\n gap: 10px;\n background: var(--superficie);\n border: 1px solid var(--linha);\n border-radius: 16px;\n box-shadow: var(--elev-2);\n padding: 36px 32px 30px;\n text-align: center;\n}\n.login-marca {\n display: flex;\n flex-direction: column;\n align-items: center;\n gap: 10px;\n margin-bottom: 4px;\n}\n.login-marca .logo-chip {\n width: 44px;\n height: 44px;\n border-radius: 13px;\n font-size: 20px;\n}\n.login-caixa h1 {\n margin: 0;\n font: 600 22px var(--sans);\n letter-spacing: -0.022em;\n}\n.login-kicker {\n font: 600 var(--t-rotulo) var(--sans);\n letter-spacing: 0.22em;\n text-transform: uppercase;\n color: var(--tinta-3);\n}\n.login-lead {\n margin: 6px 0 16px;\n color: var(--tinta-2);\n font: var(--t-nav)/1.6 var(--sans);\n}\n.google-btn {\n display: inline-flex;\n align-items: center;\n justify-content: center;\n gap: 10px;\n width: 100%;\n height: var(--alt-acao);\n border: 1px solid var(--linha);\n border-radius: var(--raio-pill);\n background: var(--superficie);\n color: var(--tinta);\n font: 500 var(--t-acao) var(--sans);\n transition: border-color var(--transicao);\n}\n.google-btn:hover {\n border-color: var(--linha-forte);\n text-decoration: none;\n}\n.login-note {\n margin-top: 14px;\n font-size: var(--t-rotulo);\n color: var(--tinta-3);\n letter-spacing: 0.02em;\n}\n.login-error {\n background: color-mix(in srgb, var(--perigo) 8%, transparent);\n color: var(--perigo);\n border: 1px solid color-mix(in srgb, var(--perigo) 25%, transparent);\n border-radius: 9px;\n padding: 9px 12px;\n font-size: var(--t-nav);\n margin-bottom: 6px;\n text-align: left;\n}\n\n/* ═══ ADMIN ═════════════════════════════════════════════════════════ */\n.section-tabs {\n display: flex;\n gap: 6px;\n margin: 0 0 20px;\n}\n.tab {\n border: 1px solid var(--linha);\n background: var(--superficie);\n height: 36px;\n padding: 0 16px;\n border-radius: var(--raio-pill);\n font: 500 var(--t-nav) var(--sans);\n color: var(--tinta-2);\n}\n.tab:hover {\n border-color: var(--linha-forte);\n color: var(--tinta);\n}\n.tab.active {\n background: var(--acento);\n color: var(--acento-tinta);\n border-color: var(--acento);\n font-weight: 600;\n}\n\n.admin-grid {\n display: grid;\n grid-template-columns: 320px 1fr;\n gap: 16px;\n align-items: start;\n}\n#tab-people.admin-grid {\n grid-template-columns: 430px 1fr;\n}\n.panel {\n background: var(--superficie);\n border: 1px solid var(--linha);\n border-radius: 14px;\n box-shadow: var(--elev-1);\n overflow: hidden;\n}\n.panel h2 {\n font: 600 var(--t-nav) var(--sans);\n color: var(--tinta);\n margin: 0;\n padding: 13px 16px;\n border-bottom: 1px solid var(--linha);\n}\n.panel-body {\n padding: 14px 16px 16px;\n}\n.field {\n margin-bottom: 12px;\n}\n.field label {\n display: block;\n font: 600 var(--t-rotulo) var(--sans);\n text-transform: uppercase;\n letter-spacing: 0.1em;\n color: var(--tinta-3);\n margin-bottom: 5px;\n}\n.field input, .field select, .field textarea {\n width: 100%;\n font: var(--t-nav) var(--sans);\n color: var(--tinta);\n border: 1px solid var(--linha);\n border-radius: 9px;\n padding: 8px 11px;\n background: var(--fundo);\n}\n.field textarea {\n resize: vertical;\n min-height: 64px;\n}\n.field input:focus, .field select:focus, .field textarea:focus {\n outline: none;\n border-color: var(--linha-forte);\n background: var(--superficie);\n}\n.field-row {\n display: flex;\n gap: 10px;\n}\n.field-row .field {\n flex: 1;\n}\n\n.btn {\n display: inline-flex;\n align-items: center;\n justify-content: center;\n gap: 7px;\n height: 36px;\n padding: 0 16px;\n border: 1px solid var(--linha);\n border-radius: var(--raio-pill);\n background: var(--superficie);\n color: var(--tinta-2);\n font: 500 var(--t-nav) var(--sans);\n}\n.btn:hover {\n border-color: var(--linha-forte);\n color: var(--tinta);\n}\n.btn-solid {\n background: var(--acento);\n border-color: var(--acento);\n color: var(--acento-tinta);\n font-weight: 600;\n}\n.btn-solid:hover {\n background: var(--acento-hover);\n border-color: var(--acento-hover);\n color: var(--acento-tinta);\n}\n\n.admin-list {\n list-style: none;\n margin: 0;\n padding: 0;\n}\n.admin-item {\n display: flex;\n align-items: center;\n gap: 12px;\n padding: 11px 16px;\n border-bottom: 1px solid var(--linha);\n}\n.admin-item:last-child {\n border-bottom: none;\n}\n.admin-item .meta {\n flex: 1;\n min-width: 0;\n}\n.admin-item .meta strong {\n color: var(--tinta);\n font: 600 var(--t-nav) var(--sans);\n display: block;\n}\n.admin-item .meta span {\n color: var(--tinta-3);\n font-size: 12px;\n display: block;\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n.admin-item .actions {\n display: flex;\n gap: 6px;\n flex: none;\n}\n.icon-btn {\n border: 1px solid var(--linha);\n background: var(--superficie);\n border-radius: 8px;\n padding: 5px 10px;\n font: 500 12px var(--sans);\n color: var(--tinta-2);\n}\n.icon-btn:hover {\n border-color: var(--linha-forte);\n color: var(--tinta);\n}\n.icon-btn.danger:hover {\n border-color: var(--perigo);\n color: var(--perigo);\n}\n\n.cat-pill {\n display: inline-flex;\n align-items: center;\n gap: 6px;\n font-size: 12px;\n color: var(--tinta-3);\n}\n\n/* toast */\n.toast {\n position: fixed;\n bottom: 24px;\n left: 50%;\n transform: translateX(-50%);\n background: var(--acento);\n color: var(--acento-tinta);\n padding: 10px 18px;\n border-radius: 10px;\n font: 500 var(--t-nav) var(--sans);\n box-shadow: var(--elev-2);\n z-index: 50;\n opacity: 0;\n pointer-events: none;\n transition: opacity 0.2s ease, transform 0.2s ease;\n}\n.toast.show {\n opacity: 1;\n transform: translateX(-50%) translateY(-4px);\n}\n\n/* ═══ RESPONSIVO ════════════════════════════════════════════════════ */\n@media (max-width: 820px) {\n .app {\n flex-direction: column;\n height: auto;\n min-height: 100vh;\n }\n .lateral {\n width: 100%;\n border-right: none;\n border-bottom: 1px solid var(--linha);\n }\n .lat-marca {\n height: 56px;\n }\n .lat-rolagem {\n display: flex;\n gap: 4px;\n overflow-x: auto;\n padding: 8px 12px;\n }\n .lat-grupo {\n display: flex;\n gap: 4px;\n }\n .lat-grupo + .lat-grupo {\n margin: 0;\n }\n .lat-grupo-rotulo {\n display: none;\n }\n .lat-item {\n width: auto;\n white-space: nowrap;\n height: 34px;\n }\n .lat-conta {\n display: none;\n }\n .lat-rodape {\n flex-direction: row;\n align-items: center;\n padding: 8px 12px;\n }\n .lat-user-btn {\n width: auto;\n margin: 0;\n }\n .topo {\n height: 56px;\n padding: 0 14px;\n }\n .topo-busca {\n width: 100%;\n }\n .conteudo {\n padding: 18px 14px 50px;\n }\n .admin-grid {\n grid-template-columns: 1fr;\n }\n}\n\n/* ═══ CAMADA PREMIUM — texturas, relevo e degradês auditados no\n app.viverdeia.ai (a mesma receita da Julia, lexflow estilos.css).\n Fica no fim do arquivo de propósito: o cascade sobrescreve a base. ═══ */\n\n:root {\n --dur: 0.22s;\n --dur-cartao: 0.26s;\n --dur-brilho: 0.28s;\n --ease: cubic-bezier(0.32, 0.08, 0.24, 1);\n --ease-snap: cubic-bezier(0.2, 0.7, 0.2, 1);\n\n /* sombra tingida da marca em vez de cinza */\n --marca-40: rgba(9, 9, 11, 0.34);\n --marca-30: rgba(9, 9, 11, 0.24);\n --marca-18: rgba(9, 9, 11, 0.16);\n --marca-14: rgba(9, 9, 11, 0.12);\n --marca-12: rgba(9, 9, 11, 0.10);\n --marca-10: rgba(9, 9, 11, 0.09);\n --marca-08: rgba(9, 9, 11, 0.075);\n --marca-05: rgba(9, 9, 11, 0.05);\n --marca-04: rgba(9, 9, 11, 0.035);\n\n /* fio de luz: a aresta de cima acende, simulando iluminação */\n --fio-luz: rgba(255, 255, 255, 0.95);\n --fio-luz-2: rgba(255, 255, 255, 0.7);\n\n --elev-campo:\n inset 0 1px 0 var(--fio-luz-2), 0 0 0 0.5px var(--marca-08), 0 1px 2px -1px\n var(--marca-08);\n --elev-campo-foco:\n inset 0 1px 0 var(--fio-luz-2), 0 0 0 1px var(--marca-18), 0 4px 12px -6px\n var(--marca-12);\n --elev-controle:\n inset 0 1px 0 var(--fio-luz), 0 0 0 0.5px var(--marca-10), 0 4px 10px -4px\n var(--marca-12);\n --elev-controle-hover:\n inset 0 1px 0 #fff, 0 0 0 0.5px var(--marca-18), 0 12px 24px -8px var(\n --marca-18\n );\n --elev-controle-ativo:\n inset 0 1px 3px var(--marca-12), 0 0 0 0.5px var(--marca-14);\n --elev-cartao:\n inset 0 1px 0 var(--fio-luz-2), 0 4px 16px -6px var(--marca-10), 0 16px 40px\n -12px var(--marca-08);\n --elev-cartao-hover:\n inset 0 1px 0 #fff, 0 8px 22px -8px var(--marca-14), 0 24px 56px -14px var(\n --marca-12\n );\n\n /* superfície de cartão não é branco chapado: degradê de 3 paradas */\n --vidro-cartao: linear-gradient(\n 180deg,\n rgba(255, 255, 255, 0.96) 0%,\n rgba(255, 255, 255, 0.84) 10%,\n rgba(247, 248, 250, 0.58) 100%\n );\n --grad-marca: linear-gradient(180deg, #43434d 0%, #24242a 48%, #0c0c0f 100%);\n --grad-marca-hover: linear-gradient(\n 180deg,\n #4e4e5a 0%,\n #2c2c34 48%,\n #131317 100%\n );\n --pill-clara: linear-gradient(180deg, #fff 0%, #eaedf3 100%);\n}\n\n@media (prefers-color-scheme: dark) {\n :root:not([data-theme=\"light\"]) {\n --fio-luz: rgba(255, 255, 255, 0.07);\n --fio-luz-2: rgba(255, 255, 255, 0.05);\n --vidro-cartao: linear-gradient(\n 180deg,\n rgba(255, 255, 255, 0.04) 0%,\n rgba(255, 255, 255, 0.015) 100%\n );\n --marca-08: rgba(0, 0, 0, 0.5);\n --marca-10: rgba(0, 0, 0, 0.55);\n --marca-12: rgba(0, 0, 0, 0.6);\n --marca-18: rgba(0, 0, 0, 0.7);\n --pill-clara: var(--superficie);\n }\n}\n:root[data-theme=\"dark\"] {\n --fio-luz: rgba(255, 255, 255, 0.07);\n --fio-luz-2: rgba(255, 255, 255, 0.05);\n --vidro-cartao: linear-gradient(\n 180deg,\n rgba(255, 255, 255, 0.04) 0%,\n rgba(255, 255, 255, 0.015) 100%\n );\n --marca-08: rgba(0, 0, 0, 0.5);\n --marca-10: rgba(0, 0, 0, 0.55);\n --marca-12: rgba(0, 0, 0, 0.6);\n --marca-18: rgba(0, 0, 0, 0.7);\n --pill-clara: var(--superficie);\n}\n\n/* cartão: vidro + fio de luz + sombras presas + brilho radial no hover */\n.card {\n isolation: isolate;\n overflow: hidden;\n border-color: var(--marca-05);\n background: var(--vidro-cartao);\n box-shadow: var(--elev-cartao);\n transition:\n transform var(--dur-cartao) var(--ease-snap),\n box-shadow var(--dur-cartao) ease,\n border-color var(--dur-cartao) ease;\n}\n.card::before {\n content: \"\";\n position: absolute;\n inset: 0;\n z-index: -1;\n pointer-events: none;\n background: radial-gradient(\n 540px 240px at 0% 0%,\n var(--marca-04),\n transparent 60%\n );\n opacity: 0.6;\n transition: opacity var(--dur-cartao) ease;\n}\n.card.linkable:hover {\n transform: translateY(-2px);\n border-color: var(--marca-10);\n box-shadow: var(--elev-cartao-hover);\n}\n.card.linkable:hover::before {\n opacity: 1;\n}\n\n/* entrada dos cartões: surgem em cascata, como na referência */\n@keyframes surgir {\n from {\n opacity: 0;\n transform: translateY(10px);\n }\n}\n.card {\n animation: surgir 0.5s var(--ease) backwards;\n animation-delay: calc(var(--i, 0) * 45ms);\n}\n@media (prefers-reduced-motion: reduce) {\n .card {\n animation: none;\n }\n}\n\n/* tile de ícone com o mesmo relevo dos controles */\n.tile {\n box-shadow: inset 0 1px 0 var(--fio-luz-2), 0 1px 2px -1px var(--marca-08);\n}\n\n/* campo de busca: anel de foco medido no VIA */\n.topo-busca input {\n box-shadow: var(--elev-campo);\n transition: box-shadow var(--dur) ease, border-color var(--dur) ease;\n}\n.topo-busca input:focus {\n box-shadow: var(--elev-campo-foco);\n}\n\n/* pílulas claras: degradê sutil, sobem 1px no hover, afundam no clique */\n.pill-acao:not(.pill-acao-forte),\n.btn:not(.btn-solid),\n.tab:not(.active),\n.icon-btn,\n.google-btn {\n background: var(--pill-clara);\n box-shadow: var(--elev-controle);\n transition:\n border-color var(--dur) ease,\n box-shadow var(--dur) ease,\n transform 0.2s var(--ease-snap),\n color var(--dur) ease;\n}\n.pill-acao:not(.pill-acao-forte):hover,\n.btn:not(.btn-solid):hover,\n.tab:not(.active):hover,\n.icon-btn:hover,\n.google-btn:hover {\n transform: translateY(-1px);\n box-shadow: var(--elev-controle-hover);\n}\n.pill-acao:not(.pill-acao-forte):active,\n.btn:not(.btn-solid):active,\n.tab:not(.active):active,\n.icon-btn:active,\n.google-btn:active {\n transform: translateY(0);\n box-shadow: var(--elev-controle-ativo);\n}\n\n/* botão forte: degradê da marca, espessura por sombras internas e reflexo\n que atravessa no hover */\n.btn-solid, .pill-acao-forte, .tab.active {\n position: relative;\n overflow: hidden;\n isolation: isolate;\n background: var(--grad-marca);\n border-color: transparent;\n color: #fff;\n box-shadow:\n inset 0 1px rgba(255, 255, 255, 0.18),\n inset 0 -1px rgba(0, 0, 0, 0.10),\n 0 8px 18px -6px var(--marca-40);\n transition:\n box-shadow var(--dur) ease,\n transform 0.2s var(--ease-snap),\n filter 0.2s ease;\n}\n.btn-solid:hover, .pill-acao-forte:hover {\n transform: translateY(-1px);\n filter: brightness(1.06);\n background: var(--grad-marca-hover);\n color: #fff;\n box-shadow:\n inset 0 1px rgba(255, 255, 255, 0.22),\n inset 0 -1px rgba(0, 0, 0, 0.10),\n 0 14px 28px -8px rgba(9, 9, 11, 0.48),\n 0 4px 12px -4px var(--marca-30);\n}\n.btn-solid:active, .pill-acao-forte:active {\n transform: translateY(0);\n filter: none;\n box-shadow:\n inset 0 2px 6px -2px var(--marca-40),\n 0 4px 10px -6px var(--marca-40);\n}\n.btn-solid::after, .pill-acao-forte::after {\n content: \"\";\n position: absolute;\n inset: 0 auto 0 0;\n width: 65%;\n background: linear-gradient(\n 100deg,\n transparent 0%,\n rgba(255, 255, 255, 0.22) 45%,\n rgba(255, 255, 255, 0.06) 60%,\n transparent 100%\n );\n transform: translateX(-185%);\n pointer-events: none;\n transition: transform var(--dur-brilho) var(--ease-snap);\n}\n.btn-solid:hover::after, .pill-acao-forte:hover::after {\n transform: translateX(185%);\n}\n@media (prefers-reduced-motion: reduce) {\n .btn-solid::after, .pill-acao-forte::after {\n display: none;\n }\n}\n\n/* item ativo da lateral: mesma receita do botão forte, sem o reflexo */\n.lat-item {\n transition: background var(--dur) ease, color var(--dur) ease;\n}\n.lat-item.ativo {\n background: var(--grad-marca);\n color: #fff;\n box-shadow:\n inset 0 1px rgba(255, 255, 255, 0.16),\n 0 6px 14px -8px var(--marca-40);\n}\n.lat-item.ativo .lat-conta {\n background: rgba(255, 255, 255, 0.18);\n color: #fff;\n}\n.logo-chip, .lat-avatar {\n background: var(--grad-marca);\n color: #fff;\n box-shadow:\n inset 0 1px rgba(255, 255, 255, 0.18),\n 0 2px 6px -2px var(--marca-30);\n}\n\n/* selo \"novo\": conteúdo cadastrado nos últimos 7 dias, como o da lateral do VIA */\n.tag-novo {\n background: var(--acento-suave);\n border-color: transparent;\n color: var(--tinta);\n font-weight: 500;\n text-transform: lowercase;\n}\n\n/* ═══ ÁREAS DO ESCRITÓRIO ═════════════════════════════════════════════\n A segunda dimensão da Central. A cor da área é a canônica do site\n institucional e entra como FILETE (3px), nunca como bloco chapado: é o\n que dá identidade sem quebrar o clean da família. */\n\n.faixa-rotulo {\n font: 500 var(--t-rotulo) var(--sans);\n letter-spacing: var(--ls-rotulo);\n text-transform: uppercase;\n color: var(--tinta-3);\n margin: 0 0 12px;\n}\n.areas-faixa {\n display: grid;\n grid-template-columns: repeat(auto-fill, minmax(196px, 1fr));\n gap: 10px;\n margin-bottom: 38px;\n}\n.area-tile {\n position: relative;\n isolation: isolate;\n overflow: hidden;\n text-align: left;\n display: flex;\n flex-direction: column;\n gap: 3px;\n padding: 15px 16px 13px;\n border: 1px solid var(--marca-05);\n border-radius: 12px;\n background: var(--vidro-cartao);\n box-shadow: var(--elev-cartao);\n transition:\n transform var(--dur-cartao) var(--ease-snap),\n box-shadow var(--dur-cartao) ease,\n border-color var(--dur-cartao) ease;\n}\n/* o filete: a assinatura da área */\n.area-tile::before {\n content: \"\";\n position: absolute;\n inset: 0 0 auto 0;\n height: 3px;\n background: var(--cor-area);\n z-index: 1;\n}\n.area-tile:hover {\n transform: translateY(-2px);\n border-color: var(--marca-10);\n box-shadow: var(--elev-cartao-hover);\n}\n.area-tile b {\n font: 600 14px/1.35 var(--sans);\n letter-spacing: -0.012em;\n color: var(--tinta);\n display: block;\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n.area-tile span {\n font: 400 10.5px var(--mono);\n color: var(--tinta-3);\n letter-spacing: 0.04em;\n}\n\n/* cabeçalho do espaço da área: mesmo filete, na vertical */\n.area-cab {\n position: relative;\n padding-left: 17px;\n}\n.area-cab::before {\n content: \"\";\n position: absolute;\n left: 0;\n top: 3px;\n bottom: 3px;\n width: 3px;\n border-radius: 2px;\n background: var(--cor-area);\n}\n\n/* selo da área dentro do cartão (fora do espaço da própria área) */\n.tag-area {\n display: inline-flex;\n align-items: center;\n gap: 5px;\n max-width: 46%;\n overflow: hidden;\n}\n.tag-area .dot {\n width: 6px;\n height: 6px;\n}\n\n/* No tema escuro o petróleo do site (#002D2D) desaparece sobre o fundo\n preto — clareamos o marcador sem tocar no dado guardado no banco. */\n@media (prefers-color-scheme: dark) {\n :root:not([data-theme=\"light\"]) .dot-area,\n :root:not([data-theme=\"light\"]) .area-tile::before,\n :root:not([data-theme=\"light\"]) .area-cab::before {\n filter: brightness(2.4) saturate(0.85);\n }\n}\n:root[data-theme=\"dark\"] .dot-area,\n:root[data-theme=\"dark\"] .area-tile::before,\n:root[data-theme=\"dark\"] .area-cab::before {\n filter: brightness(2.4) saturate(0.85);\n}\n\n@media (max-width: 820px) {\n .areas-faixa {\n grid-template-columns: repeat(auto-fill, minmax(150px, 1fr));\n gap: 8px;\n }\n}\n\n/* dica curta abaixo de um campo do formulário */\n.field .dica {\n display: block;\n margin-top: 5px;\n font: 400 var(--t-rotulo)/1.5 var(--sans);\n color: var(--tinta-3);\n letter-spacing: 0.01em;\n}\n\n/* A regra genérica `.admin-item .meta span` (usada para truncar a linha de\n metadados) vencia o display do pill por especificidade e empilhava marcador\n e nome em linhas separadas. Devolvemos o inline-flex explicitamente. */\n.admin-item .meta .cat-pill {\n display: inline-flex;\n align-items: center;\n gap: 5px;\n}\n.admin-item .meta .cat-pill .dot {\n display: block;\n flex: none;\n}\n\n/* ═══ ACESSO: QUEM VÊ O QUÊ ═══════════════════════════════════════════\n A matriz pessoa × área, apresentada uma pessoa por vez. Três estados no\n lugar da caixinha, porque \"sem acesso / equipe / liderança\" não é sim-ou-não. */\n\n.acesso-lista {\n display: flex;\n flex-direction: column;\n gap: 2px;\n border: 1px solid var(--linha);\n border-radius: 10px;\n padding: 6px;\n background: var(--superficie-2);\n max-height: 300px;\n overflow-y: auto;\n}\n.acesso-linha {\n display: flex;\n align-items: center;\n justify-content: space-between;\n gap: 12px;\n padding: 5px 7px;\n border-radius: 7px;\n}\n.acesso-linha:hover {\n background: var(--superficie);\n}\n.acesso-nome {\n display: flex;\n align-items: center;\n gap: 7px;\n min-width: 0;\n font: 400 12.5px var(--sans);\n color: var(--tinta-2);\n line-height: 1.3;\n}\n/* o nome da área tem que caber inteiro: \"Contratos e Estruturação de Negócios\"\n truncado vira adivinhação na hora de conceder acesso */\n.acesso-nome b {\n font-weight: 400;\n}\n.acesso-nome .dot {\n flex: none;\n}\n.acesso-niveis {\n display: flex;\n flex: none;\n gap: 2px;\n padding: 2px;\n border-radius: 7px;\n background: var(--superficie-2);\n}\n.niv {\n border: 1px solid transparent;\n background: transparent;\n cursor: pointer;\n padding: 3px 7px;\n border-radius: 5px;\n color: var(--tinta-3);\n white-space: nowrap;\n font: 400 10.5px var(--mono);\n letter-spacing: 0.03em;\n transition: background 0.12s ease, color 0.12s ease;\n}\n.niv:hover {\n color: var(--tinta-2);\n}\n.niv.ativo {\n background: var(--superficie);\n border-color: var(--linha);\n color: var(--tinta);\n box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05);\n}\n\n.field label.caixa-linha {\n display: flex;\n align-items: flex-start;\n gap: 9px;\n cursor: pointer;\n margin: 0;\n text-transform: none;\n letter-spacing: normal;\n}\n.caixa-linha input[type=\"checkbox\"] {\n width: 15px;\n height: 15px;\n flex: none;\n margin: 1px 0 0;\n accent-color: var(--acento);\n}\n.caixa-linha span {\n font: 400 13px/1.5 var(--sans);\n color: var(--tinta-2);\n text-transform: none;\n}\n.caixa-linha small {\n color: var(--tinta-3);\n font-size: 12px;\n}\n\n.vazio-dica {\n display: block;\n padding: 8px;\n font: 400 12.5px var(--sans);\n color: var(--tinta-3);\n}\n\n/* marca do que é restrito — discreta na lista do admin, discreta no cartão */\n.admin-item .meta .restrito {\n color: var(--tinta-2);\n font-weight: 500;\n}\n.tag-restrito {\n border-color: var(--linha-forte);\n color: var(--tinta-2);\n font-variant: small-caps;\n letter-spacing: 0.04em;\n}\n\n@media (max-width: 1100px) {\n #tab-people.admin-grid {\n grid-template-columns: 1fr;\n }\n}",[],[140,170],"4cc7e6eb-212d-49c6-b544-6559c66cd7d2","login.html","bdfcb1e8-9be9-11f1-a933-1607ee4eb77e",32,["D",1787170445286],"\n\n \n \n \n Central TC — Entrar\n \n \n \n \n

\n \n \n

\n \n \n \n \n \n \n \n Entrar com Google\n \n \n

\n \n \n",[],[140,179],"8a0574f4-fb55-4a69-a64a-beb078b81e9f","index.html","057094cc-9bea-11f1-a46b-1607ee4eb77e",56,["D",1787338314617],7,"\n\n \n \n \n Central TC — Hub da Equipe\n \n \n \n \n \n

\n \n\n

\n \n \n \n \n \n \n \n /\n

\n\n

\n\n \n \n",[],[140,187],"feef9d0a-0361-4e7e-ae27-18fbd37651c9","app.js","bdceaa72-9bea-11f1-9b55-1607ee4eb77e",50,["D",1787261997230],"script","// Central TC — lógica do hub (página inicial)\n// Dois eixos de navegação: ÁREA (de qual matéria) e CATEGORIA (que tipo de coisa).\n// Busca /api/data. Se a API não responder (ex.: preview estático), entra em\n// \"modo demo\" com dados de exemplo, para visualizar a interface.\n\nconst KIND_LABELS = {\n system: \"Sistema\",\n link: \"Link\",\n tip: \"Dica\",\n doc: \"Documento\",\n};\n\nconst SAMPLE = {\n me: {\n name: \"Bruno Tiburcio\",\n email: \"bruno@tcadvs.com.br\",\n picture: \"\",\n isAdmin: true,\n },\n areas: [\n {\n id: 1,\n name: \"Empresarial\",\n color: \"#002D2D\",\n description: \"Societário, contratos empresariais e reestruturações.\",\n position: 0,\n },\n {\n id: 2,\n name: \"Tributário\",\n color: \"#004746\",\n description:\n \"Contencioso e consultivo fiscal, transações e planejamento.\",\n position: 1,\n },\n {\n id: 3,\n name: \"Trabalhista\",\n color: \"#006B6B\",\n description:\n \"Contencioso trabalhista, compliance e relações de trabalho.\",\n position: 2,\n },\n {\n id: 4,\n name: \"Administrativo\",\n color: \"#007979\",\n description: \"Licitações, contratos públicos e defesas administrativas.\",\n position: 3,\n },\n {\n id: 5,\n name: \"Família e Sucessões\",\n color: \"#00908C\",\n description: \"Divórcio, inventários, holdings familiares e pactos.\",\n position: 4,\n },\n {\n id: 6,\n name: \"Contratos e Estruturação de Negócios\",\n color: \"#747277\",\n description: \"Modelagem contratual e estruturação de operações.\",\n position: 5,\n },\n {\n id: 7,\n name: \"Saúde e Médico\",\n color: \"#005F5F\",\n description: \"Planos de saúde, alto custo e direito médico.\",\n position: 6,\n },\n {\n id: 8,\n name: \"Imobiliário\",\n color: \"#00A39D\",\n description:\n \"Compra e venda, incorporação, locação e vícios construtivos.\",\n position: 7,\n },\n ],\n categories: [\n {\n id: 1,\n name: \"Sistemas Jurídicos\",\n emoji: \"\",\n color: \"#52525B\",\n position: 0,\n },\n {\n id: 2,\n name: \"IA & Produtividade\",\n emoji: \"\",\n color: \"#71717A\",\n position: 1,\n },\n {\n id: 3,\n name: \"Modelos & Documentos\",\n emoji: \"\",\n color: \"#A1A1AA\",\n position: 2,\n },\n { id: 4, name: \"Links Úteis\", emoji: \"\", color: \"#3F3F46\", position: 3 },\n { id: 5, name: \"Dicas Internas\", emoji: \"\", color: \"#B42318\", position: 4 },\n ],\n resources: [\n {\n id: 1,\n category_id: 1,\n area_id: null,\n kind: \"system\",\n title: \"PJe — Processo Judicial Eletrônico\",\n description:\n \"Peticionamento e consulta processual na Justiça Federal e Trabalhista.\",\n url: \"https://www.pje.jus.br\",\n tags: \"processo, tribunal\",\n },\n {\n id: 2,\n category_id: 1,\n area_id: 3,\n kind: \"system\",\n title: \"e-SAJ (TJSP)\",\n description:\n \"Sistema do tribunal estadual para acompanhamento de processos.\",\n url: \"https://esaj.tjsp.jus.br\",\n tags: \"processo, estadual\",\n },\n {\n id: 3,\n category_id: 2,\n area_id: null,\n kind: \"system\",\n title: \"Claude (Cowork)\",\n description:\n \"Assistente de IA do escritório para redação, análise e pesquisa.\",\n url: \"https://claude.ai\",\n tags: \"ia, redação\",\n },\n {\n id: 4,\n category_id: 2,\n area_id: null,\n kind: \"tip\",\n title: \"Como pedir uma peça para a IA\",\n description:\n \"Sempre forneça: fatos, documentos, tese e pedido. Quanto mais contexto, melhor a minuta.\",\n url: \"\",\n tags: \"ia, boas-práticas\",\n },\n {\n id: 5,\n category_id: 3,\n area_id: 8,\n kind: \"doc\",\n title: \"Modelos de Petição (Drive)\",\n description:\n \"Pasta compartilhada com os modelos padronizados do escritório.\",\n url: \"\",\n tags: \"modelos, petição\",\n },\n {\n id: 6,\n category_id: 4,\n area_id: 2,\n kind: \"link\",\n title: \"Diário Oficial / DJe\",\n description: \"Consulta de publicações e intimações.\",\n url: \"https://www.jusbrasil.com.br\",\n tags: \"publicações\",\n },\n {\n id: 7,\n category_id: 5,\n area_id: null,\n kind: \"tip\",\n title: \"Padrão de nomeação de arquivos\",\n description:\n \"Use: AAAA-MM-DD_Cliente_TipoDoc. Facilita a busca e evita retrabalho.\",\n url: \"\",\n tags: \"organização\",\n },\n {\n id: 8,\n category_id: 3,\n area_id: 3,\n visibility: \"equipe\",\n kind: \"doc\",\n title: \"Modelo de contestação trabalhista\",\n description: \"Peça-base da área, com as teses que costumam prevalecer.\",\n url: \"\",\n tags: \"modelos\",\n },\n {\n id: 9,\n category_id: 5,\n area_id: 3,\n visibility: \"lideranca\",\n kind: \"tip\",\n title: \"Leitura estratégica — Trabalhista\",\n description:\n \"Onde estamos ganhando, onde perdemos e o que não se fala com o cliente.\",\n url: \"\",\n tags: \"estratégia\",\n },\n {\n id: 10,\n category_id: 5,\n area_id: null,\n visibility: \"confidencial\",\n kind: \"tip\",\n title: \"Política de honorários\",\n description: \"Faixas, descontos autorizados e quem aprova exceção.\",\n url: \"\",\n tags: \"gestão\",\n },\n ],\n};\n\nlet DATA = { me: null, areas: [], categories: [], resources: [] };\n// vista.tipo: \"home\" | \"area\" | \"cat\"\nlet vista = { tipo: \"home\", id: null };\nlet query = \"\";\n\nfunction esc(s) {\n return String(s == null ? \"\" : s).replace(\n /[&<>\"']/g,\n (\n m,\n ) => ({\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n '\"': \""\",\n \"'\": \"'\",\n }[m]),\n );\n}\nfunction initials(name) {\n return (name || \"?\").trim().split(/\\s+/).slice(0, 2).map((w) => w[0]).join(\"\")\n .toUpperCase();\n}\nfunction areaDe(id) {\n return DATA.areas.find((a) => a.id == id);\n}\nfunction catDe(id) {\n return DATA.categories.find((c) => c.id == id);\n}\nfunction corArea(id) {\n const a = areaDe(id);\n return a ? (a.color || \"#9A9AA2\") : \"#9A9AA2\";\n}\n\nasync function load() {\n try {\n const res = await fetch(\"/api/data\", {\n headers: { accept: \"application/json\" },\n });\n if (!res.ok) throw new Error(\"api\");\n DATA = await res.json();\n DATA.areas = DATA.areas || [];\n } catch {\n DATA = SAMPLE;\n document.getElementById(\"demo-banner\").innerHTML =\n '';\n }\n renderUser();\n renderNav();\n render();\n}\n\nfunction renderUser() {\n const me = DATA.me || {};\n const avatar = document.getElementById(\"user-avatar\");\n avatar.innerHTML = me.picture\n ? ` $\"\"$ `\n : esc(initials(me.name));\n document.getElementById(\"user-nome\").textContent = me.name || me.email || \"\";\n if (me.isAdmin) document.getElementById(\"admin-link\").style.display = \"\";\n}\n\nfunction contaArea(id) {\n return DATA.resources.filter((r) => r.area_id == id).length;\n}\nfunction contaCat(id) {\n return DATA.resources.filter((r) => r.category_id == id).length;\n}\n\nfunction renderNav() {\n document.getElementById(\"conta-tudo\").textContent = DATA.resources.length ||\n \"\";\n\n // ÁREAS: marcador na cor canônica da área\n document.getElementById(\"nav-areas\").innerHTML = DATA.areas.map((a) => `\n `).join(\"\");\n\n // ACERVO: marcador cinza, para o olho separar os dois eixos\n document.getElementById(\"nav-cats\").innerHTML = DATA.categories.map((c) => `\n `).join(\"\");\n\n document.querySelector(\"#nav-inicio .lat-item\").classList.toggle(\n \"ativo\",\n vista.tipo === \"home\",\n );\n\n document.querySelectorAll(\n \".lat-item[data-ir], .lat-item[data-area], .lat-item[data-cat]\",\n ).forEach((b) => {\n b.onclick = () => {\n if (b.dataset.ir === \"home\") vista = { tipo: \"home\", id: null };\n else if (b.dataset.area) {\n vista = { tipo: \"area\", id: Number(b.dataset.area) };\n } else vista = { tipo: \"cat\", id: Number(b.dataset.cat) };\n renderNav();\n render();\n document.querySelector(\".conteudo\").scrollTo({\n top: 0,\n behavior: \"smooth\",\n });\n };\n });\n}\n\nfunction matches(r) {\n if (!query) return true;\n const hay = (r.title + \" \" + r.description + \" \" + r.tags).toLowerCase();\n return query.toLowerCase().split(/\\s+/).every((t) => hay.includes(t));\n}\n\nfunction tileHTML(r) {\n // favicon real do sistema quando há URL; sem URL, a inicial do título\n if (r.url) {\n try {\n const host = new URL(r.url).hostname;\n return ` $\"\"$ ${\n esc((r.title || \"?\")[0].toUpperCase())\n }'\" />`;\n } catch { /* URL inválida cai no tile de letra */ }\n }\n return `${\n esc((r.title || \"?\")[0].toUpperCase())\n }`;\n}\n\nfunction cardHTML(r, rotulo) {\n const kind = r.kind || \"link\";\n const clickable = r.url ? \"linkable\" : \"\";\n const novo = r.created_at && (Date.now() - r.created_at) < 7 * 864e5\n ? `novo`\n : \"\";\n const area = areaDe(r.area_id);\n // selo da área no cartão: só aparece fora do espaço da própria área\n // quem enxerga um item restrito precisa saber que ele é restrito, para não\n // repassar por e-mail o que a Central estava guardando\n const VIS = {\n equipe: \"equipe\",\n lideranca: \"liderança\",\n confidencial: \"confidencial\",\n };\n const seloRestrito = VIS[r.visibility]\n ? `${\n VIS[r.visibility]\n }`\n : \"\";\n const seloArea = area && vista.tipo !== \"area\"\n ? `${esc(area.name)}`\n : \"\";\n const tags = (r.tags || \"\").split(\",\").map((t) => t.trim()).filter(Boolean)\n .slice(0, seloArea ? 1 : 2)\n .map((t) => `${esc(t)}`).join(\"\");\n const go = r.url\n ? ``\n : \"\";\n const attr = r.url ? `data-url=\"${esc(r.url)}\"` : \"\";\n return `

\n ${tileHTML(r)}\n

${esc(r.title)}

${esc(rotulo || KIND_LABELS[kind] || kind)}

\n ${r.description ? `

${esc(r.description)}

` : \"\"}\n

${novo}${seloRestrito}${seloArea}${\n esc(KIND_LABELS[kind] || kind)\n }${tags}${go}

`;\n}\n\nfunction secaoHTML(titulo, cor, itens, rotulo) {\n if (!itens.length) return \"\";\n return `

${esc(titulo)} · ${itens.length}

${\n itens.map((r) => cardHTML(r, rotulo || titulo)).join(\"\")\n }

`;\n}\n\n// ── cabeçalho: muda conforme onde estamos ─────────────────────────────\nfunction renderCab() {\n const cab = document.getElementById(\"pagina-cab\");\n if (vista.tipo === \"area\") {\n const a = areaDe(vista.id) || {};\n cab.className = \"pagina-cab area-cab\";\n cab.style.setProperty(\"--cor-area\", a.color || \"#9A9AA2\");\n cab.innerHTML = `\n

Área do escritório

${esc(a.name || \"\")}

\n ${a.description ? `

${esc(a.description)}

` : \"\"}`;\n return;\n }\n if (vista.tipo === \"cat\") {\n const c = catDe(vista.id) || {};\n cab.className = \"pagina-cab\";\n cab.innerHTML = `\n

Acervo

${esc(c.name || \"\")}

Todo o material deste tipo, de todas as áreas.

`;\n return;\n }\n cab.className = \"pagina-cab\";\n cab.innerHTML = `\n

Central TC

Ferramentas do escritório

Sistemas, links, modelos e dicas da equipe, num só lugar. Use a busca ou navegue por área.

`;\n}\n\n// ── faixa das áreas: o mapa do escritório, só na home ─────────────────\nfunction renderFaixa() {\n const faixa = document.getElementById(\"areas-faixa\");\n if (vista.tipo !== \"home\" || query || !DATA.areas.length) {\n faixa.innerHTML = \"\";\n return;\n }\n faixa.innerHTML = `\n

Áreas do escritório

\n ${\n DATA.areas.map((a) => `\n `).join(\"\")\n }\n

`;\n faixa.querySelectorAll(\".area-tile\").forEach((b) => {\n b.onclick = () => {\n vista = { tipo: \"area\", id: Number(b.dataset.area) };\n renderNav();\n render();\n document.querySelector(\".conteudo\").scrollTo({\n top: 0,\n behavior: \"smooth\",\n });\n };\n });\n}\n\nfunction render() {\n renderCab();\n renderFaixa();\n const content = document.getElementById(\"content\");\n let html = \"\";\n let total = 0;\n\n if (vista.tipo === \"area\") {\n // espaço da área: só o que é dela, agrupado por tipo de material\n const daArea = DATA.resources.filter((r) =>\n r.area_id == vista.id && matches(r)\n );\n total = daArea.length;\n for (const c of DATA.categories) {\n html += secaoHTML(\n c.name,\n c.color || \"#9A9AA2\",\n daArea.filter((r) => r.category_id == c.id),\n );\n }\n const semCat = daArea.filter((r) =>\n !DATA.categories.some((c) => c.id == r.category_id)\n );\n html += secaoHTML(\"Outros\", \"#9A9AA2\", semCat);\n if (!total) {\n const a = areaDe(vista.id) || {};\n html = `

Nada cadastrado em ${\n esc(a.name || \"\")\n } ainda.
\n Em Gerenciar conteúdo, escolha esta área ao cadastrar ou editar um recurso.

`;\n }\n } else if (vista.tipo === \"cat\") {\n const daCat = DATA.resources.filter((r) =>\n r.category_id == vista.id && matches(r)\n );\n total = daCat.length;\n html = total\n ? `

${\n daCat.map((r) =>\n cardHTML(r, catDe(vista.id) ? catDe(vista.id).name : \"\")\n ).join(\"\")\n }

`\n : \"\";\n } else {\n for (const c of DATA.categories) {\n const itens = DATA.resources.filter((r) =>\n r.category_id == c.id && matches(r)\n );\n total += itens.length;\n html += secaoHTML(c.name, c.color || \"#9A9AA2\", itens);\n }\n const orfaos = DATA.resources.filter((r) =>\n !DATA.categories.some((c) => c.id == r.category_id) && matches(r)\n );\n total += orfaos.length;\n html += secaoHTML(\"Outros\", \"#9A9AA2\", orfaos);\n }\n\n if (!total && !html) {\n html = `

Nada encontrado${\n query ? ` para \"${esc(query)}\"` : \"\"\n }.

`;\n }\n content.innerHTML = html;\n\n content.querySelectorAll(\".card.linkable\").forEach((el) => {\n el.addEventListener(\n \"click\",\n () => window.open(el.dataset.url, \"_blank\", \"noopener\"),\n );\n });\n // entrada em cascata: cada cartão surge 45ms depois do anterior\n content.querySelectorAll(\".card\").forEach((el, i) =>\n el.style.setProperty(\"--i\", i)\n );\n}\n\ndocument.getElementById(\"q\").addEventListener(\"input\", (e) => {\n query = e.target.value.trim();\n render();\n});\n\n// atalho \"/\" foca a busca, como o ⌘K da referência\ndocument.addEventListener(\"keydown\", (e) => {\n if (\n e.key === \"/\" &&\n !/INPUT|TEXTAREA|SELECT/.test(document.activeElement.tagName)\n ) {\n e.preventDefault();\n document.getElementById(\"q\").focus();\n }\n});\n\nload();",[],[140,196],"2495d4b2-33f1-4573-bb8d-220cbfa1dd05","admin.js","7f817da2-9beb-11f1-bc1c-1607ee4eb77e",49,["D",1787261941346],"// Central TC — painel de administração\n// Em modo demo (sem API), as alterações ficam só na memória do navegador,\n// para você experimentar a interface. No ar, tudo é salvo no banco.\n\nconst KIND_LABELS = {\n system: \"Sistema\",\n link: \"Link\",\n tip: \"Dica\",\n doc: \"Documento\",\n};\nlet DATA = { me: null, areas: [], categories: [], resources: [] };\nlet DEMO = false;\nlet PESSOAS = { people: [], acessos: [] };\nconst VIS_LABEL = {\n aberto: \"Todo o escritório\",\n equipe: \"Equipe da área\",\n lideranca: \"Liderança da área\",\n confidencial: \"Confidencial\",\n};\nconst VIS_DICA = {\n aberto: \"Visível para qualquer pessoa que entrar na Central.\",\n equipe: \"Só quem tem essa área no cadastro. Escolha uma área acima.\",\n lideranca: \"Só quem tem essa área em nível de liderança.\",\n confidencial: \"Só quem tem a marca de confidencial do escritório.\",\n};\nlet demoSeq = 1000;\n\nfunction esc(s) {\n return String(s == null ? \"\" : s).replace(\n /[&<>\"']/g,\n (\n m,\n ) => ({\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n '\"': \""\",\n \"'\": \"'\",\n }[m]),\n );\n}\nfunction initials(name) {\n return (name || \"?\").trim().split(/\\s+/).slice(0, 2).map((w) => w[0]).join(\"\")\n .toUpperCase();\n}\nfunction toast(msg) {\n const t = document.getElementById(\"toast\");\n t.textContent = msg;\n t.classList.add(\"show\");\n setTimeout(() => t.classList.remove(\"show\"), 2200);\n}\n\nconst SAMPLE = {\n me: {\n name: \"Bruno Tiburcio\",\n email: \"bruno@tcadvs.com.br\",\n picture: \"\",\n isAdmin: true,\n },\n areas: [\n {\n id: 1,\n name: \"Empresarial\",\n color: \"#002D2D\",\n description: \"Societário e reestruturações.\",\n position: 0,\n },\n {\n id: 2,\n name: \"Tributário\",\n color: \"#004746\",\n description: \"Contencioso e consultivo fiscal.\",\n position: 1,\n },\n {\n id: 3,\n name: \"Trabalhista\",\n color: \"#006B6B\",\n description: \"Contencioso e compliance trabalhista.\",\n position: 2,\n },\n {\n id: 8,\n name: \"Imobiliário\",\n color: \"#00A39D\",\n description: \"Compra e venda, locação e vícios construtivos.\",\n position: 3,\n },\n ],\n categories: [\n {\n id: 1,\n name: \"Sistemas Jurídicos\",\n emoji: \"\",\n color: \"#52525B\",\n position: 0,\n },\n {\n id: 2,\n name: \"IA & Produtividade\",\n emoji: \"\",\n color: \"#71717A\",\n position: 1,\n },\n {\n id: 3,\n name: \"Modelos & Documentos\",\n emoji: \"\",\n color: \"#A1A1AA\",\n position: 2,\n },\n { id: 4, name: \"Links Úteis\", emoji: \"\", color: \"#3F3F46\", position: 3 },\n { id: 5, name: \"Dicas Internas\", emoji: \"\", color: \"#B42318\", position: 4 },\n ],\n resources: [\n {\n id: 1,\n category_id: 1,\n area_id: null,\n kind: \"system\",\n title: \"PJe — Processo Judicial Eletrônico\",\n description: \"Peticionamento e consulta processual.\",\n url: \"https://www.pje.jus.br\",\n tags: \"processo, tribunal\",\n },\n {\n id: 2,\n category_id: 2,\n area_id: 3,\n visibility: \"equipe\",\n kind: \"system\",\n title: \"Claude (Cowork)\",\n description: \"Assistente de IA do escritório.\",\n url: \"https://claude.ai\",\n tags: \"ia\",\n },\n {\n id: 3,\n category_id: 5,\n area_id: null,\n kind: \"tip\",\n title: \"Padrão de nomeação de arquivos\",\n description: \"AAAA-MM-DD_Cliente_TipoDoc.\",\n url: \"\",\n tags: \"organização\",\n },\n {\n id: 4,\n category_id: 3,\n area_id: 3,\n visibility: \"lideranca\",\n kind: \"doc\",\n title: \"Leitura estratégica — Trabalhista\",\n description: \"Onde estamos ganhando e o que não se fala com o cliente.\",\n url: \"\",\n tags: \"estratégia\",\n },\n {\n id: 5,\n category_id: 5,\n area_id: null,\n visibility: \"confidencial\",\n kind: \"tip\",\n title: \"Política de honorários\",\n description: \"Faixas, descontos autorizados e quem aprova exceção.\",\n url: \"\",\n tags: \"gestão\",\n },\n ],\n};\n\nasync function api(method, path, body) {\n if (DEMO) return demoApi(method, path, body);\n const res = await fetch(path, {\n method,\n headers: { \"content-type\": \"application/json\" },\n body: body ? JSON.stringify(body) : undefined,\n });\n if (!res.ok) {\n const e = await res.json().catch(() => ({}));\n throw new Error(e.error || \"Erro ao salvar\");\n }\n return res.json();\n}\n\nfunction demoApi(method, path, body) {\n if (path === \"/api/people\" && method === \"POST\") {\n const i = PESSOAS.people.findIndex((p) => p.email === body.email);\n const pes = {\n email: body.email,\n name: body.name,\n confidencial: body.confidencial ? 1 : 0,\n };\n if (i >= 0) PESSOAS.people[i] = pes;\n else PESSOAS.people.push(pes);\n PESSOAS.acessos = PESSOAS.acessos.filter((a) => a.email !== body.email)\n .concat(\n (body.areas || []).map((a) => ({\n email: body.email,\n area_id: a.area_id,\n nivel: a.nivel,\n })),\n );\n return { ok: true };\n }\n const mPes = path.match(/^\\/api\\/people\\/(.+)$/);\n if (mPes && method === \"DELETE\") {\n const email = decodeURIComponent(mPes[1]);\n PESSOAS.people = PESSOAS.people.filter((p) => p.email !== email);\n PESSOAS.acessos = PESSOAS.acessos.filter((a) => a.email !== email);\n return { ok: true };\n }\n const mArea = path.match(/^\\/api\\/areas\\/(\\d+)$/);\n if (path === \"/api/areas\" && method === \"POST\") {\n const id = ++demoSeq;\n DATA.areas.push({ id, position: DATA.areas.length, ...body });\n return { ok: true, id };\n }\n if (mArea && method === \"PUT\") {\n Object.assign(DATA.areas.find((a) => a.id == mArea[1]), body);\n return { ok: true };\n }\n if (mArea && method === \"DELETE\") {\n DATA.areas = DATA.areas.filter((a) => a.id != mArea[1]);\n DATA.resources.forEach((r) => {\n if (r.area_id == mArea[1]) r.area_id = null;\n });\n PESSOAS.acessos = PESSOAS.acessos.filter((a) => a.area_id != mArea[1]);\n return { ok: true };\n }\n const mCat = path.match(/^\\/api\\/categories\\/(\\d+)$/);\n const mRes = path.match(/^\\/api\\/resources\\/(\\d+)$/);\n if (path === \"/api/categories\" && method === \"POST\") {\n const id = ++demoSeq;\n DATA.categories.push({ id, position: DATA.categories.length, ...body });\n return { ok: true, id };\n }\n if (mCat && method === \"PUT\") {\n Object.assign(DATA.categories.find((c) => c.id == mCat[1]), body);\n return { ok: true };\n }\n if (mCat && method === \"DELETE\") {\n DATA.categories = DATA.categories.filter((c) => c.id != mCat[1]);\n DATA.resources = DATA.resources.filter((r) => r.category_id != mCat[1]);\n return { ok: true };\n }\n if (path === \"/api/resources\" && method === \"POST\") {\n const id = ++demoSeq;\n DATA.resources.push({ id, ...body });\n return { ok: true, id };\n }\n if (mRes && method === \"PUT\") {\n Object.assign(DATA.resources.find((r) => r.id == mRes[1]), body);\n return { ok: true };\n }\n if (mRes && method === \"DELETE\") {\n DATA.resources = DATA.resources.filter((r) => r.id != mRes[1]);\n return { ok: true };\n }\n return { ok: true };\n}\n\nasync function load() {\n try {\n const res = await fetch(\"/api/data\", {\n headers: { accept: \"application/json\" },\n });\n if (!res.ok) throw new Error(\"api\");\n DATA = await res.json();\n } catch {\n DEMO = true;\n DATA = JSON.parse(JSON.stringify(SAMPLE));\n DATA.areas = DATA.areas || [];\n document.getElementById(\"demo-banner\").innerHTML =\n '';\n }\n renderUser();\n await carregarPessoas();\n renderAll();\n}\n\nfunction renderUser() {\n const me = DATA.me || {};\n const avatar = document.getElementById(\"user-avatar\");\n avatar.innerHTML = me.picture\n ? ` $\"\"$ `\n : esc(initials(me.name));\n document.getElementById(\"user-nome\").textContent = me.name || me.email || \"\";\n}\n\nfunction catName(id) {\n const c = DATA.categories.find((x) => x.id == id);\n return c ? c.name : \"Sem categoria\";\n}\nfunction catColor(id) {\n const c = DATA.categories.find((x) => x.id == id);\n return c ? (c.color || \"#9A9AA2\") : \"#9A9AA2\";\n}\n\nfunction areaNome(id) {\n const a = (DATA.areas || []).find((x) => x.id == id);\n return a ? a.name : \"Todas as áreas\";\n}\nfunction areaCor(id) {\n const a = (DATA.areas || []).find((x) => x.id == id);\n return a ? (a.color || \"#9A9AA2\") : \"#D4D4D8\";\n}\n\nasync function carregarPessoas() {\n if (DEMO) return;\n try {\n const res = await fetch(\"/api/people\", {\n headers: { accept: \"application/json\" },\n });\n if (res.ok) PESSOAS = await res.json();\n } catch { /* sem API: o painel de pessoas fica vazio */ }\n}\n\nfunction renderAll() {\n renderCatSelect();\n renderAreaSelect();\n renderResList();\n renderAreaList();\n renderCatList();\n renderPesAreas();\n renderPesList();\n}\n// Após qualquer gravação: no ar recarrega do servidor; em demo re-renderiza local.\nasync function refresh() {\n if (DEMO) renderAll();\n else await load();\n}\n\nfunction renderCatSelect() {\n const sel = document.getElementById(\"res-cat\");\n sel.innerHTML = DATA.categories.map((c) =>\n ``\n ).join(\"\");\n}\n\nfunction renderAreaSelect() {\n const sel = document.getElementById(\"res-area\");\n const atual = sel.value;\n sel.innerHTML = `` +\n (DATA.areas || []).map((a) =>\n ``\n ).join(\"\");\n sel.value = atual;\n}\n\nfunction renderAreaList() {\n const list = document.getElementById(\"area-list\");\n if (!(DATA.areas || []).length) {\n list.innerHTML =\n `

Nenhuma área cadastrada.

`;\n return;\n }\n list.innerHTML = DATA.areas.map((a) => {\n const n = DATA.resources.filter((r) => r.area_id == a.id).length;\n return `

\n ${esc(a.name)}\n ${n} recurso(s)${\n a.description ? \" · \" + esc(a.description) : \"\"\n }\n

\n \n \n

`;\n }).join(\"\");\n list.querySelectorAll(\"[data-edit]\").forEach((b) =>\n b.addEventListener(\"click\", () => editArea(Number(b.dataset.edit)))\n );\n list.querySelectorAll(\"[data-del]\").forEach((b) =>\n b.addEventListener(\"click\", () => delArea(Number(b.dataset.del)))\n );\n}\n\nfunction renderResList() {\n const list = document.getElementById(\"res-list\");\n if (!DATA.resources.length) {\n list.innerHTML =\n `

Nenhum recurso ainda.

`;\n return;\n }\n list.innerHTML = DATA.resources.map((r) => `\n

\n ${esc(r.title)}\n ${\n esc(catName(r.category_id))\n } · ${esc(areaNome(r.area_id))} · ${\n esc(KIND_LABELS[r.kind] || r.kind)\n }${\n (r.visibility && r.visibility !== \"aberto\")\n ? ` · ${\n esc(VIS_LABEL[r.visibility] || r.visibility)\n }`\n : \"\"\n }${r.url ? \" · \" + esc(r.url) : \"\"}\n

\n \n \n

`).join(\"\");\n list.querySelectorAll(\"[data-edit]\").forEach((b) =>\n b.addEventListener(\"click\", () => editRes(Number(b.dataset.edit)))\n );\n list.querySelectorAll(\"[data-del]\").forEach((b) =>\n b.addEventListener(\"click\", () => delRes(Number(b.dataset.del)))\n );\n}\n\nfunction renderCatList() {\n const list = document.getElementById(\"cat-list\");\n if (!DATA.categories.length) {\n list.innerHTML =\n `

Nenhuma categoria.

`;\n return;\n }\n list.innerHTML = DATA.categories.map((c) => {\n const n = DATA.resources.filter((r) => r.category_id == c.id).length;\n return `

\n ${esc(c.emoji ? c.emoji + \" \" : \"\")}${esc(c.name)}\n ${n} recurso(s)\n

\n \n \n

`;\n }).join(\"\");\n list.querySelectorAll(\"[data-edit]\").forEach((b) =>\n b.addEventListener(\"click\", () => editCat(Number(b.dataset.edit)))\n );\n list.querySelectorAll(\"[data-del]\").forEach((b) =>\n b.addEventListener(\"click\", () => delCat(Number(b.dataset.del)))\n );\n}\n\n// ---- Formulário de recurso ----\nconst resForm = document.getElementById(\"res-form\");\nfunction resetResForm() {\n resForm.reset();\n document.getElementById(\"res-id\").value = \"\";\n document.getElementById(\"res-area\").value = \"\";\n document.getElementById(\"res-vis\").value = \"aberto\";\n document.getElementById(\"res-vis-dica\").textContent = VIS_DICA.aberto;\n document.getElementById(\"res-form-title\").textContent = \"Novo recurso\";\n document.getElementById(\"res-submit\").textContent = \"Adicionar\";\n document.getElementById(\"res-cancel\").style.display = \"none\";\n}\nfunction editRes(id) {\n const r = DATA.resources.find((x) => x.id == id);\n if (!r) return;\n document.getElementById(\"res-id\").value = r.id;\n document.getElementById(\"res-title\").value = r.title || \"\";\n document.getElementById(\"res-kind\").value = r.kind || \"link\";\n document.getElementById(\"res-cat\").value = r.category_id || \"\";\n document.getElementById(\"res-area\").value = r.area_id || \"\";\n document.getElementById(\"res-vis\").value = r.visibility || \"aberto\";\n document.getElementById(\"res-vis-dica\").textContent =\n VIS_DICA[r.visibility || \"aberto\"];\n document.getElementById(\"res-url\").value = r.url || \"\";\n document.getElementById(\"res-desc\").value = r.description || \"\";\n document.getElementById(\"res-tags\").value = r.tags || \"\";\n document.getElementById(\"res-form-title\").textContent = \"Editar recurso\";\n document.getElementById(\"res-submit\").textContent = \"Salvar\";\n document.getElementById(\"res-cancel\").style.display = \"\";\n window.scrollTo({ top: 0, behavior: \"smooth\" });\n}\nasync function delRes(id) {\n const r = DATA.resources.find((x) => x.id == id);\n if (!confirm(`Excluir \"${r ? r.title : \"recurso\"}\"?`)) return;\n try {\n await api(\"DELETE\", `/api/resources/${id}`);\n await refresh();\n toast(\"Recurso excluído\");\n } catch (e) {\n toast(e.message);\n }\n}\nresForm.addEventListener(\"submit\", async (e) => {\n e.preventDefault();\n const id = document.getElementById(\"res-id\").value;\n const body = {\n title: document.getElementById(\"res-title\").value.trim(),\n kind: document.getElementById(\"res-kind\").value,\n category_id: Number(document.getElementById(\"res-cat\").value) || null,\n area_id: Number(document.getElementById(\"res-area\").value) || null,\n visibility: document.getElementById(\"res-vis\").value,\n url: document.getElementById(\"res-url\").value.trim(),\n description: document.getElementById(\"res-desc\").value.trim(),\n tags: document.getElementById(\"res-tags\").value.trim(),\n };\n if (!body.title) return toast(\"Informe um título\");\n try {\n if (id) {\n await api(\"PUT\", `/api/resources/${id}`, body);\n toast(\"Recurso atualizado\");\n } else {\n await api(\"POST\", \"/api/resources\", body);\n toast(\"Recurso adicionado\");\n }\n await refresh();\n resetResForm();\n } catch (err) {\n toast(err.message);\n }\n});\ndocument.getElementById(\"res-cancel\").addEventListener(\"click\", resetResForm);\n\n// ---- Formulário de área ----\nconst areaForm = document.getElementById(\"area-form\");\nfunction resetAreaForm() {\n areaForm.reset();\n document.getElementById(\"area-id\").value = \"\";\n document.getElementById(\"area-color\").value = \"#004746\";\n document.getElementById(\"area-form-title\").textContent = \"Nova área\";\n document.getElementById(\"area-submit\").textContent = \"Adicionar\";\n document.getElementById(\"area-cancel\").style.display = \"none\";\n}\nfunction editArea(id) {\n const a = DATA.areas.find((x) => x.id == id);\n if (!a) return;\n document.getElementById(\"area-id\").value = a.id;\n document.getElementById(\"area-name\").value = a.name || \"\";\n document.getElementById(\"area-desc\").value = a.description || \"\";\n document.getElementById(\"area-color\").value = a.color || \"#004746\";\n document.getElementById(\"area-form-title\").textContent = \"Editar área\";\n document.getElementById(\"area-submit\").textContent = \"Salvar\";\n document.getElementById(\"area-cancel\").style.display = \"\";\n window.scrollTo({ top: 0, behavior: \"smooth\" });\n}\nasync function delArea(id) {\n const a = DATA.areas.find((x) => x.id == id);\n const n = DATA.resources.filter((r) => r.area_id == id).length;\n if (\n !confirm(\n `Excluir a área \"${a ? a.name : \"\"}\"?${\n n ? ` ${n} recurso(s) voltam a ser transversais (nada é apagado).` : \"\"\n }`,\n )\n ) return;\n try {\n await api(\"DELETE\", `/api/areas/${id}`);\n await refresh();\n toast(\"Área excluída\");\n } catch (e) {\n toast(e.message);\n }\n}\nareaForm.addEventListener(\"submit\", async (e) => {\n e.preventDefault();\n const id = document.getElementById(\"area-id\").value;\n const body = {\n name: document.getElementById(\"area-name\").value.trim(),\n description: document.getElementById(\"area-desc\").value.trim(),\n color: document.getElementById(\"area-color\").value,\n };\n if (!body.name) return toast(\"Informe um nome\");\n try {\n if (id) {\n await api(\"PUT\", `/api/areas/${id}`, body);\n toast(\"Área atualizada\");\n } else {\n await api(\"POST\", \"/api/areas\", body);\n toast(\"Área adicionada\");\n }\n await refresh();\n resetAreaForm();\n } catch (err) {\n toast(err.message);\n }\n});\ndocument.getElementById(\"area-cancel\").addEventListener(\"click\", resetAreaForm);\n\n// ---- Formulário de categoria ----\nconst catForm = document.getElementById(\"cat-form\");\nfunction resetCatForm() {\n catForm.reset();\n document.getElementById(\"cat-id\").value = \"\";\n document.getElementById(\"cat-color\").value = \"#52525B\";\n document.getElementById(\"cat-form-title\").textContent = \"Nova categoria\";\n document.getElementById(\"cat-submit\").textContent = \"Adicionar\";\n document.getElementById(\"cat-cancel\").style.display = \"none\";\n}\nfunction editCat(id) {\n const c = DATA.categories.find((x) => x.id == id);\n if (!c) return;\n document.getElementById(\"cat-id\").value = c.id;\n document.getElementById(\"cat-name\").value = c.name || \"\";\n document.getElementById(\"cat-emoji\").value = c.emoji || \"\";\n document.getElementById(\"cat-color\").value = c.color || \"#52525B\";\n document.getElementById(\"cat-form-title\").textContent = \"Editar categoria\";\n document.getElementById(\"cat-submit\").textContent = \"Salvar\";\n document.getElementById(\"cat-cancel\").style.display = \"\";\n window.scrollTo({ top: 0, behavior: \"smooth\" });\n}\nasync function delCat(id) {\n const c = DATA.categories.find((x) => x.id == id);\n const n = DATA.resources.filter((r) => r.category_id == id).length;\n if (\n !confirm(\n `Excluir a categoria \"${c ? c.name : \"\"}\"?${\n n ? ` Isso também remove ${n} recurso(s).` : \"\"\n }`,\n )\n ) return;\n try {\n await api(\"DELETE\", `/api/categories/${id}`);\n await refresh();\n toast(\"Categoria excluída\");\n } catch (e) {\n toast(e.message);\n }\n}\ncatForm.addEventListener(\"submit\", async (e) => {\n e.preventDefault();\n const id = document.getElementById(\"cat-id\").value;\n const body = {\n name: document.getElementById(\"cat-name\").value.trim(),\n emoji: document.getElementById(\"cat-emoji\").value.trim(),\n color: document.getElementById(\"cat-color\").value,\n };\n if (!body.name) return toast(\"Informe um nome\");\n try {\n if (id) {\n await api(\"PUT\", `/api/categories/${id}`, body);\n toast(\"Categoria atualizada\");\n } else {\n await api(\"POST\", \"/api/categories\", body);\n toast(\"Categoria adicionada\");\n }\n await refresh();\n resetCatForm();\n } catch (err) {\n toast(err.message);\n }\n});\ndocument.getElementById(\"cat-cancel\").addEventListener(\"click\", resetCatForm);\n\n// ---- Pessoas e acessos ----\n// A tela é a matriz \"pessoa x área\", mas apresentada uma pessoa por vez: cada\n// área com três estados (sem acesso / equipe / liderança) em vez de caixinha.\nfunction renderPesAreas() {\n const box = document.getElementById(\"pes-areas\");\n if (!box) return;\n const areas = DATA.areas || [];\n if (!areas.length) {\n box.innerHTML =\n 'Cadastre as áreas primeiro.';\n return;\n }\n box.innerHTML = areas.map((a) => `\n

\n ${esc(a.name)}\n

\n \n \n \n

`).join(\"\");\n box.querySelectorAll(\".niv\").forEach((b) => {\n b.addEventListener(\"click\", () => {\n b.parentElement.querySelectorAll(\".niv\").forEach((x) =>\n x.classList.remove(\"ativo\")\n );\n b.classList.add(\"ativo\");\n });\n });\n}\n\nfunction lerPesAreas() {\n return [...document.querySelectorAll(\"#pes-areas .acesso-niveis\")].map((\n g,\n ) => ({\n area_id: Number(g.dataset.area),\n nivel: Number(g.querySelector(\".niv.ativo\")?.dataset.nivel || 0),\n })).filter((a) => a.nivel > 0);\n}\n\nfunction marcarPesAreas(email) {\n const meus = (PESSOAS.acessos || []).filter((a) => a.email === email);\n document.querySelectorAll(\"#pes-areas .acesso-niveis\").forEach((g) => {\n const achado = meus.find((a) =>\n Number(a.area_id) === Number(g.dataset.area)\n );\n const nivel = achado ? Number(achado.nivel) : 0;\n g.querySelectorAll(\".niv\").forEach((b) =>\n b.classList.toggle(\"ativo\", Number(b.dataset.nivel) === nivel)\n );\n });\n}\n\nfunction resumoAcesso(email) {\n const meus = (PESSOAS.acessos || []).filter((a) => a.email === email);\n if (!meus.length) return \"só o que é aberto\";\n return meus.map((a) => {\n const area = (DATA.areas || []).find((x) => x.id == a.area_id);\n return (area ? area.name : \"área \" + a.area_id) +\n (Number(a.nivel) === 2 ? \" (liderança)\" : \"\");\n }).join(\" · \");\n}\n\nfunction renderPesList() {\n const list = document.getElementById(\"pes-list\");\n if (!list) return;\n const people = PESSOAS.people || [];\n if (!people.length) {\n list.innerHTML =\n `

Ninguém cadastrado ainda. Quem não estiver aqui vê só o conteúdo aberto.

`;\n return;\n }\n list.innerHTML = people.map((p) => `\n

\n ${esc(p.name || p.email)}\n ${esc(p.email)} · ${esc(resumoAcesso(p.email))}${\n Number(p.confidencial) === 1 ? \" · confidencial\" : \"\"\n }\n

\n \n \n

`).join(\"\");\n list.querySelectorAll(\"[data-edit]\").forEach((b) =>\n b.addEventListener(\"click\", () => editPes(b.dataset.edit))\n );\n list.querySelectorAll(\"[data-del]\").forEach((b) =>\n b.addEventListener(\"click\", () => delPes(b.dataset.del))\n );\n}\n\nconst pesForm = document.getElementById(\"pes-form\");\nfunction resetPesForm() {\n pesForm.reset();\n document.getElementById(\"pes-email\").readOnly = false;\n document.getElementById(\"pes-form-title\").textContent = \"Nova pessoa\";\n document.getElementById(\"pes-submit\").textContent = \"Adicionar\";\n document.getElementById(\"pes-cancel\").style.display = \"none\";\n document.querySelectorAll(\"#pes-areas .acesso-niveis\").forEach((g) => {\n g.querySelectorAll(\".niv\").forEach((b) =>\n b.classList.toggle(\"ativo\", b.dataset.nivel === \"0\")\n );\n });\n}\nfunction editPes(email) {\n const p = (PESSOAS.people || []).find((x) => x.email === email);\n if (!p) return;\n document.getElementById(\"pes-email\").value = p.email;\n document.getElementById(\"pes-email\").readOnly = true; // o e-mail é a chave\n document.getElementById(\"pes-nome\").value = p.name || \"\";\n document.getElementById(\"pes-confidencial\").checked =\n Number(p.confidencial) === 1;\n marcarPesAreas(email);\n document.getElementById(\"pes-form-title\").textContent = \"Editar acesso\";\n document.getElementById(\"pes-submit\").textContent = \"Salvar\";\n document.getElementById(\"pes-cancel\").style.display = \"\";\n window.scrollTo({ top: 0, behavior: \"smooth\" });\n}\nasync function delPes(email) {\n if (\n !confirm(\n `Tirar \"${email}\" da lista? A pessoa continua entrando na Central, mas passa a ver só o conteúdo aberto.`,\n )\n ) return;\n try {\n await api(\"DELETE\", `/api/people/${encodeURIComponent(email)}`);\n await carregarPessoas();\n renderPesList();\n toast(\"Acesso removido\");\n } catch (e) {\n toast(e.message);\n }\n}\npesForm.addEventListener(\"submit\", async (e) => {\n e.preventDefault();\n const body = {\n email: document.getElementById(\"pes-email\").value.trim().toLowerCase(),\n name: document.getElementById(\"pes-nome\").value.trim(),\n confidencial: document.getElementById(\"pes-confidencial\").checked,\n areas: lerPesAreas(),\n };\n if (!body.email.includes(\"@\")) return toast(\"Informe um e-mail válido\");\n try {\n await api(\"POST\", \"/api/people\", body);\n await carregarPessoas();\n renderPesList();\n resetPesForm();\n toast(\"Acesso salvo\");\n } catch (err) {\n toast(err.message);\n }\n});\ndocument.getElementById(\"pes-cancel\").addEventListener(\"click\", resetPesForm);\n\n// a dica embaixo do campo muda junto com a escolha, para o cadastro não virar adivinhação\ndocument.getElementById(\"res-vis\").addEventListener(\"change\", (e) => {\n document.getElementById(\"res-vis-dica\").textContent =\n VIS_DICA[e.target.value] || \"\";\n});\n\n// ---- Abas ----\ndocument.querySelectorAll(\".tab\").forEach((t) => {\n t.addEventListener(\"click\", () => {\n document.querySelectorAll(\".tab\").forEach((x) =>\n x.classList.remove(\"active\")\n );\n t.classList.add(\"active\");\n const tab = t.dataset.tab;\n document.getElementById(\"tab-resources\").style.display = tab === \"resources\"\n ? \"\"\n : \"none\";\n document.getElementById(\"tab-areas\").style.display = tab === \"areas\"\n ? \"\"\n : \"none\";\n document.getElementById(\"tab-people\").style.display = tab === \"people\"\n ? \"\"\n : \"none\";\n document.getElementById(\"tab-categories\").style.display =\n tab === \"categories\" ? \"\" : \"none\";\n });\n});\n\nload();",[],[140,205],"8e58231f-5d2e-4fea-8dbd-d5eec7ed9cea","admin.html","31feadfc-9beb-11f1-a9c3-1607ee4eb77e",48,["D",1787261683194],"\n\n \n \n \n Central TC — Gerenciar\n \n \n \n \n \n

\n \n\n

Gerenciar conteúdo

\n Ver o hub\n

\n\n

\n Adicione, edite ou remova recursos e categorias. As mudanças\n aparecem para toda a equipe.\n

\n\n

\n \n \n \n \n

\n\n \n

Novo recurso

\n \n

\n Título *\n \n

\n Tipo\n \n

\n Categoria\n \n

\n Área do escritório\n \n Deixe em \"Todas as áreas\" para material\n transversal.\n

\n Quem vê\n \n Visível para qualquer pessoa que entrar na Central.\n

\n Link (URL)\n \n

\n Descrição\n \n

\n Tags (separadas por vírgula)\n \n

\n \n \n Cancelar\n \n

Recursos cadastrados

\n\n \n

Nova área

\n \n

Áreas do escritório

\n\n \n

Nova pessoa

\n E-mail do escritório *\n \n O mesmo e-mail com que a pessoa entra na Central.\n

\n Nome\n \n

\n Acesso por área\n

\n Liderança vê também o que é estratégico daquela\n área.\n

\n \n \n Vê o confidencial do escritório (honorários,\n metas, gestão)\n \n

\n \n \n Cancelar\n \n

Quem vê o quê

\n\n \n

Nova categoria

\n \n

Categorias

\n\n

\n \n \n",[],[140,213],["D",1787156352547],[158,159,160,161,162,163],[140],["D",1787155811387],["D",1789501878689],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_127":261,"_262":263,"_264":265,"_266":25,"_267":25,"_268":25,"_269":58,"_270":-5,"_271":-7,"_272":-7,"_273":62,"_274":25,"_275":25,"_276":-5,"_277":25,"_278":25,"_279":25,"_280":-5},"ENV",{"_232":233,"_234":235,"_236":89,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v57