[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","84db97ca-8c36-11f1-8953-1607ee4eb77e","name","fileType","http","content","/**\n * VAL TOWN — OMIE SOMENTE LEITURA — V2 PAGINADA\n *\n * Secret obrigatório: OMIE_COMPANIES_JSON\n *\n * Exemplo:\n * [\n * {\n * \"name\": \"Dryve Tecnologia Ltda\",\n * \"legalName\": \"DRYVE TECNOLOGIA LTDA\",\n * \"cnpj\": \"34.784.543/0001-69\",\n * \"appKey\": \"...\",\n * \"appSecret\": \"...\"\n * }\n * ]\n *\n * Rotas GET:\n * /?test=1\n * /?meta=1\n * /?resource=movements&company=0&page=1&pageSize=100&dateMode=payment&from=2026-07-01&to=2026-07-31\n * /?resource=clients&company=0&page=1&pageSize=100\n * /?resource=categories&company=0&page=1&pageSize=100\n * /?resource=accounts&company=0&page=1&pageSize=100\n *\n * A raiz sem parâmetros retorna instruções rapidamente e não inicia sincronização.\n * O endpoint aceita somente GET/OPTIONS e chama apenas métodos Listar*.\n */\n\ntype CompanyConfig = {\n name: string;\n legalName?: string;\n cnpj?: string;\n appKey: string;\n appSecret: string;\n};\n\ntype Json = Record;\ntype ResourceName = \"movements\" | \"clients\" | \"categories\" | \"accounts\";\ntype DateMode = \"emission\" | \"due\" | \"payment\";\n\nconst OMIE = {\n movements: \"https://app.omie.com.br/api/v1/financas/mf/\",\n payables: \"https://app.omie.com.br/api/v1/financas/contapagar/\",\n clients: \"https://app.omie.com.br/api/v1/geral/clientes/\",\n categories: \"https://app.omie.com.br/api/v1/geral/categorias/\",\n accounts: \"https://app.omie.com.br/api/v1/geral/contacorrente/\",\n};\n\nconst corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Accept\",\n \"Content-Type\": \"application/json; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n};\n\nfunction response(body: unknown, status = 200): Response {\n return new Response(JSON.stringify(body), { status, headers: corsHeaders });\n}\n\nfunction getCompanies(): CompanyConfig[] {\n const raw = Deno.env.get(\"OMIE_COMPANIES_JSON\");\n if (!raw) throw new Error(\"Secret OMIE_COMPANIES_JSON não configurado.\");\n\n let parsed: unknown;\n try {\n parsed = JSON.parse(raw);\n } catch {\n throw new Error(\"OMIE_COMPANIES_JSON contém JSON inválido.\");\n }\n\n if (!Array.isArray(parsed) || !parsed.length) {\n throw new Error(\"OMIE_COMPANIES_JSON deve conter uma lista de empresas.\");\n }\n\n for (const company of parsed) {\n if (!company?.name || !company?.appKey || !company?.appSecret) {\n throw new Error(\"Cada empresa precisa de name, appKey e appSecret.\");\n }\n }\n return parsed as CompanyConfig[];\n}\n\nfunction publicCompany(company: CompanyConfig, index: number) {\n return {\n index,\n name: company.name,\n legalName: company.legalName || company.name,\n cnpj: company.cnpj || \"\",\n };\n}\n\nasync function omieCall(\n company: CompanyConfig,\n endpoint: string,\n call: string,\n param: Json,\n): Promise {\n if (!/^Listar/.test(call)) {\n throw new Error(`Método não permitido no modo somente leitura: ${call}`);\n }\n\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 50000);\n try {\n const res = await fetch(endpoint, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n call,\n app_key: company.appKey,\n app_secret: company.appSecret,\n param: [param],\n }),\n signal: controller.signal,\n });\n\n const text = await res.text();\n let json: Json;\n try {\n json = JSON.parse(text);\n } catch {\n throw new Error(\n `Resposta inválida do Omie em ${call} (HTTP ${res.status}).`,\n );\n }\n\n if (!res.ok || json?.faultstring || json?.error) {\n throw new Error(\n json?.faultstring || json?.error || `Erro HTTP ${res.status}`,\n );\n }\n return json;\n } finally {\n clearTimeout(timer);\n }\n}\n\nfunction firstArray(json: Json, preferredKeys: string[] = []): any[] {\n for (const key of preferredKeys) {\n if (Array.isArray(json?.[key])) return json[key];\n }\n for (const value of Object.values(json || {})) {\n if (Array.isArray(value)) return value;\n }\n return [];\n}\n\nfunction pageInfo(json: Json) {\n const page = Number(json?.pagina ?? json?.nPagina ?? 1) || 1;\n const totalPages = Number(\n json?.total_de_paginas ?? json?.totalPaginas ?? json?.nTotPaginas ?? 1,\n ) || 1;\n const returned = Number(\n json?.registros ?? json?.nRegistros ?? firstArray(json).length,\n ) || 0;\n const totalRecords = Number(\n json?.total_de_registros ?? json?.totalRegistros ?? json?.nTotRegistros ??\n returned,\n ) || returned;\n return { page, totalPages, returned, totalRecords };\n}\n\nfunction ddmmyyyy(iso: string | null): string | undefined {\n if (!iso || !/^\\d{4}-\\d{2}-\\d{2}$/.test(iso)) return undefined;\n const [y, m, d] = iso.split(\"-\");\n return `${d}/${m}/${y}`;\n}\n\nfunction clampInt(\n value: string | null,\n fallback: number,\n min: number,\n max: number,\n): number {\n const parsed = Number(value);\n if (!Number.isInteger(parsed)) return fallback;\n return Math.min(max, Math.max(min, parsed));\n}\n\nfunction parseDateMode(value: string | null): DateMode {\n return value === \"due\" || value === \"payment\" ? value : \"emission\";\n}\n\nfunction resourceConfig(\n resource: ResourceName,\n page: number,\n pageSize: number,\n dateMode: DateMode,\n from: string | null,\n to: string | null,\n) {\n const fromBr = ddmmyyyy(from);\n const toBr = ddmmyyyy(to);\n\n if (resource === \"movements\") {\n const param: Json = {\n nPagina: page,\n nRegPorPagina: pageSize,\n cTpLancamento: \"CPCR\",\n lDadosCad: true,\n cExibirDepartamentos: \"N\",\n cOrdenarPor: \"CODIGO\",\n };\n if (dateMode === \"payment\") {\n if (fromBr) param.dDtPagtoDe = fromBr;\n if (toBr) param.dDtPagtoAte = toBr;\n } else if (dateMode === \"due\") {\n if (fromBr) param.dDtVencDe = fromBr;\n if (toBr) param.dDtVencAte = toBr;\n } else {\n if (fromBr) param.dDtEmisDe = fromBr;\n if (toBr) param.dDtEmisAte = toBr;\n }\n return {\n endpoint: OMIE.movements,\n call: \"ListarMovimentos\",\n param,\n preferredKeys: [\"movimentos\"],\n };\n }\n\n if (resource === \"clients\") {\n return {\n endpoint: OMIE.clients,\n call: \"ListarClientes\",\n param: {\n pagina: page,\n registros_por_pagina: pageSize,\n apenas_importado_api: \"N\",\n },\n preferredKeys: [\"clientes_cadastro\"],\n };\n }\n\n if (resource === \"categories\") {\n return {\n endpoint: OMIE.categories,\n call: \"ListarCategorias\",\n param: {\n pagina: page,\n registros_por_pagina: pageSize,\n filtrar_apenas_ativo: \"S\",\n },\n preferredKeys: [\"categoria_cadastro\"],\n };\n }\n\n return {\n endpoint: OMIE.accounts,\n call: \"ListarContasCorrentes\",\n param: {\n pagina: page,\n registros_por_pagina: pageSize,\n apenas_importado_api: \"N\",\n },\n preferredKeys: [\"conta_corrente_lista\", \"ListarContasCorrentes\"],\n };\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders });\n }\n if (req.method !== \"GET\") {\n return response({\n error: \"Método não permitido. Este endpoint aceita somente GET.\",\n }, 405);\n }\n\n try {\n const url = new URL(req.url);\n const companies = getCompanies();\n\n if (url.searchParams.get(\"test\") === \"1\") {\n await omieCall(companies[0], OMIE.payables, \"ListarContasPagar\", {\n pagina: 1,\n registros_por_pagina: 1,\n apenas_importado_api: \"N\",\n });\n return response({\n ok: true,\n mode: \"read-only\",\n companies: companies.map((c, index) => publicCompany(c, index)),\n message: \"Conexão Omie validada em modo somente leitura.\",\n });\n }\n\n if (url.searchParams.get(\"meta\") === \"1\") {\n return response({\n ok: true,\n mode: \"read-only\",\n apiVersion: 2,\n pagination: true,\n companies: companies.map((c, index) => publicCompany(c, index)),\n resources: [\"movements\", \"clients\", \"categories\", \"accounts\"],\n dateModes: [\"emission\", \"due\", \"payment\"],\n });\n }\n\n const resourceValue = url.searchParams.get(\"resource\");\n if (!resourceValue) {\n return response({\n ok: true,\n mode: \"read-only\",\n apiVersion: 2,\n pagination: true,\n message:\n \"Endpoint ativo. Use ?test=1 para testar ou conecte o HTML para sincronização paginada.\",\n examples: {\n test: \"?test=1\",\n meta: \"?meta=1\",\n movements:\n \"?resource=movements&company=0&page=1&pageSize=100&dateMode=payment&from=2026-07-01&to=2026-07-31\",\n },\n });\n }\n\n if (\n ![\"movements\", \"clients\", \"categories\", \"accounts\"].includes(\n resourceValue,\n )\n ) {\n return response({ error: \"Resource inválido.\" }, 400);\n }\n\n const resource = resourceValue as ResourceName;\n const companyIndex = clampInt(\n url.searchParams.get(\"company\"),\n 0,\n 0,\n companies.length - 1,\n );\n const page = clampInt(url.searchParams.get(\"page\"), 1, 1, 100000);\n const pageSize = clampInt(url.searchParams.get(\"pageSize\"), 100, 1, 500);\n const dateMode = parseDateMode(url.searchParams.get(\"dateMode\"));\n const from = url.searchParams.get(\"from\");\n const to = url.searchParams.get(\"to\");\n const company = companies[companyIndex];\n\n const cfg = resourceConfig(resource, page, pageSize, dateMode, from, to);\n const json = await omieCall(company, cfg.endpoint, cfg.call, cfg.param);\n const data = firstArray(json, cfg.preferredKeys);\n const info = pageInfo(json);\n\n return response({\n ok: true,\n mode: \"read-only\",\n apiVersion: 2,\n resource,\n company: publicCompany(company, companyIndex),\n dateMode: resource === \"movements\" ? dateMode : undefined,\n from: resource === \"movements\" ? from : undefined,\n to: resource === \"movements\" ? to : undefined,\n ...info,\n data,\n });\n } catch (error) {\n const message = error instanceof Error\n ? (error.name === \"AbortError\"\n ? \"Tempo de resposta do Omie excedido nesta página.\"\n : error.message)\n : String(error);\n return response({ error: message, mode: \"read-only\" }, 500);\n }\n}","/**\n * VAL TOWN — OMIE SOMENTE LEITURA — V4 (paginada + período obrigatório + backup)\n *\n * Novidades da V4 (em relação à V2 paginada):\n * 1) Movimentos EXIGEM período: sem from+to válidos a rota retorna 400.\n * (brief seções 7.3 e 13.2 — nunca puxar a base toda sem data).\n * 2) dateMode aceita \"included\" e \"updated\" além de \"emission|due|payment\",\n * para o \"Atualizar hoje\" pegar lançamentos novos e editados do dia.\n * 3) Backup no servidor (Val Town Blob): salvar, listar, recuperar e apagar.\n * O Omie continua SOMENTE LEITURA — o backup grava apenas no Val Town.\n * 4) Proteção opcional por token do endpoint (API_TOKEN) e token dedicado\n * para as rotas de backup (BACKUP_TOKEN).\n *\n * CORS: permanece \"*\". A app roda como arquivo local (file://, Origin null),\n * então travar CORS por origem quebraria o uso. A proteção real é o token.\n *\n * Secrets (Val Town → Environment Variables):\n * OMIE_COMPANIES_JSON (obrigatório) — lista de empresas\n * API_TOKEN (opcional) — se definido, exigido em TODAS as rotas\n * BACKUP_TOKEN (obrigatório só p/ backup) — protege salvar/ler backups\n *\n * Exemplo OMIE_COMPANIES_JSON:\n * [\n * { \"name\":\"Dryve Tecnologia Ltda\", \"legalName\":\"DRYVE TECNOLOGIA LTDA\",\n * \"cnpj\":\"34.784.543/0001-69\", \"appKey\":\"...\", \"appSecret\":\"...\" }\n * ]\n * Para ADICIONAR EMPRESAS: basta acrescentar mais objetos nessa lista (secret).\n * Nenhuma mudança de código é necessária — o servidor itera sobre todas.\n *\n * Rotas GET (leitura Omie):\n * /?test=1\n * /?meta=1\n * /?resource=movements&company=0&page=1&pageSize=100&dateMode=payment&from=2026-07-01&to=2026-07-31\n * /?resource=movements&...&dateMode=included (data de inclusão)\n * /?resource=movements&...&dateMode=updated (data de alteração)\n * /?resource=clients|categories|accounts&company=0&page=1&pageSize=100\n *\n * Rotas de BACKUP (exigem BACKUP_TOKEN via header \"X-Backup-Token\" ou ?token=):\n * POST /?resource=backup body = JSON do backup completo do app\n * GET /?resource=backups lista os backups salvos (metadados)\n * GET /?resource=backup&key=... recupera um backup específico\n * DELETE /?resource=backup&key=... remove um backup específico\n *\n * Se API_TOKEN estiver definido, envie também \"X-Api-Token\" (ou ?apiToken=)\n * em toda requisição, inclusive nas de backup.\n *\n * Segurança do Omie: só métodos Listar* são chamados; nenhuma escrita é possível.\n */\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\ntype CompanyConfig = {\n name: string;\n legalName?: string;\n cnpj?: string;\n appKey: string;\n appSecret: string;\n};\n\ntype Json = Record;\ntype ResourceName = \"movements\" | \"clients\" | \"categories\" | \"accounts\";\ntype DateMode = \"emission\" | \"due\" | \"payment\" | \"included\" | \"updated\";\n\nconst BACKUP_PREFIX = \"omiebkp/\";\nconst ISO_DATE = /^\\d{4}-\\d{2}-\\d{2}$/;\n\nconst OMIE = {\n movements: \"https://app.omie.com.br/api/v1/financas/mf/\",\n payables: \"https://app.omie.com.br/api/v1/financas/contapagar/\",\n clients: \"https://app.omie.com.br/api/v1/geral/clientes/\",\n categories: \"https://app.omie.com.br/api/v1/geral/categorias/\",\n accounts: \"https://app.omie.com.br/api/v1/geral/contacorrente/\",\n};\n\nconst corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\":\n \"Content-Type, Accept, X-Backup-Token, X-Api-Token\",\n \"Content-Type\": \"application/json; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n};\n\nfunction response(body: unknown, status = 200): Response {\n return new Response(JSON.stringify(body), { status, headers: corsHeaders });\n}\n\nfunction httpError(message: string, status: number): Error {\n const e: any = new Error(message);\n e.status = status;\n return e;\n}\n\nfunction requireApiToken(url: URL, req: Request) {\n const expected = Deno.env.get(\"API_TOKEN\");\n if (!expected) return; // proteção opcional: só ativa se o secret existir\n const provided = req.headers.get(\"X-Api-Token\") ||\n url.searchParams.get(\"apiToken\") || \"\";\n if (provided !== expected) {\n throw httpError(\"Token do endpoint inválido.\", 401);\n }\n}\n\nfunction requireBackupToken(url: URL, req: Request) {\n const expected = Deno.env.get(\"BACKUP_TOKEN\");\n if (!expected) {\n throw httpError(\n \"Backup indisponível: configure o secret BACKUP_TOKEN no Val Town.\",\n 503,\n );\n }\n const provided = req.headers.get(\"X-Backup-Token\") ||\n url.searchParams.get(\"token\") || \"\";\n if (provided !== expected) throw httpError(\"Token de backup inválido.\", 401);\n}\n\nfunction getCompanies(): CompanyConfig[] {\n const raw = Deno.env.get(\"OMIE_COMPANIES_JSON\");\n if (!raw) throw new Error(\"Secret OMIE_COMPANIES_JSON não configurado.\");\n\n let parsed: unknown;\n try {\n parsed = JSON.parse(raw);\n } catch {\n throw new Error(\"OMIE_COMPANIES_JSON contém JSON inválido.\");\n }\n\n if (!Array.isArray(parsed) || !parsed.length) {\n throw new Error(\"OMIE_COMPANIES_JSON deve conter uma lista de empresas.\");\n }\n\n for (const company of parsed) {\n if (!company?.name || !company?.appKey || !company?.appSecret) {\n throw new Error(\"Cada empresa precisa de name, appKey e appSecret.\");\n }\n }\n return parsed as CompanyConfig[];\n}\n\nfunction publicCompany(company: CompanyConfig, index: number) {\n return {\n index,\n name: company.name,\n legalName: company.legalName || company.name,\n cnpj: company.cnpj || \"\",\n };\n}\n\nasync function omieCall(\n company: CompanyConfig,\n endpoint: string,\n call: string,\n param: Json,\n): Promise {\n if (!/^Listar/.test(call)) {\n throw new Error(`Método não permitido no modo somente leitura: ${call}`);\n }\n\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 50000);\n try {\n const res = await fetch(endpoint, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n call,\n app_key: company.appKey,\n app_secret: company.appSecret,\n param: [param],\n }),\n signal: controller.signal,\n });\n\n const text = await res.text();\n let json: Json;\n try {\n json = JSON.parse(text);\n } catch {\n throw new Error(\n `Resposta inválida do Omie em ${call} (HTTP ${res.status}).`,\n );\n }\n\n if (!res.ok || json?.faultstring || json?.error) {\n throw new Error(\n json?.faultstring || json?.error || `Erro HTTP ${res.status}`,\n );\n }\n return json;\n } finally {\n clearTimeout(timer);\n }\n}\n\nfunction firstArray(json: Json, preferredKeys: string[] = []): any[] {\n for (const key of preferredKeys) {\n if (Array.isArray(json?.[key])) return json[key];\n }\n for (const value of Object.values(json || {})) {\n if (Array.isArray(value)) return value;\n }\n return [];\n}\n\nfunction pageInfo(json: Json) {\n const page = Number(json?.pagina ?? json?.nPagina ?? 1) || 1;\n const totalPages = Number(\n json?.total_de_paginas ?? json?.totalPaginas ?? json?.nTotPaginas ?? 1,\n ) || 1;\n const returned = Number(\n json?.registros ?? json?.nRegistros ?? firstArray(json).length,\n ) || 0;\n const totalRecords = Number(\n json?.total_de_registros ?? json?.totalRegistros ?? json?.nTotRegistros ??\n returned,\n ) || returned;\n return { page, totalPages, returned, totalRecords };\n}\n\nfunction ddmmyyyy(iso: string | null): string | undefined {\n if (!iso || !ISO_DATE.test(iso)) return undefined;\n const [y, m, d] = iso.split(\"-\");\n return `${d}/${m}/${y}`;\n}\n\nfunction clampInt(\n value: string | null,\n fallback: number,\n min: number,\n max: number,\n): number {\n const parsed = Number(value);\n if (!Number.isInteger(parsed)) return fallback;\n return Math.min(max, Math.max(min, parsed));\n}\n\nfunction parseDateMode(value: string | null): DateMode {\n return value === \"due\" || value === \"payment\" || value === \"included\" ||\n value === \"updated\"\n ? value\n : \"emission\";\n}\n\nfunction resourceConfig(\n resource: ResourceName,\n page: number,\n pageSize: number,\n dateMode: DateMode,\n from: string | null,\n to: string | null,\n) {\n const fromBr = ddmmyyyy(from);\n const toBr = ddmmyyyy(to);\n\n if (resource === \"movements\") {\n const param: Json = {\n nPagina: page,\n nRegPorPagina: pageSize,\n cTpLancamento: \"CPCR\",\n lDadosCad: true,\n cExibirDepartamentos: \"N\",\n cOrdenarPor: \"CODIGO\",\n };\n // Mapeia o período para o filtro correspondente do Omie MF.\n // OBS: confirme os nomes dDtInc*/dDtAlt* na doc do seu Omie caso o filtro\n // por inclusão/alteração não retorne o esperado.\n if (dateMode === \"payment\") {\n if (fromBr) param.dDtPagtoDe = fromBr;\n if (toBr) param.dDtPagtoAte = toBr;\n } else if (dateMode === \"due\") {\n if (fromBr) param.dDtVencDe = fromBr;\n if (toBr) param.dDtVencAte = toBr;\n } else if (dateMode === \"included\") {\n if (fromBr) param.dDtIncDe = fromBr;\n if (toBr) param.dDtIncAte = toBr;\n } else if (dateMode === \"updated\") {\n if (fromBr) param.dDtAltDe = fromBr;\n if (toBr) param.dDtAltAte = toBr;\n } else {\n if (fromBr) param.dDtEmisDe = fromBr;\n if (toBr) param.dDtEmisAte = toBr;\n }\n return {\n endpoint: OMIE.movements,\n call: \"ListarMovimentos\",\n param,\n preferredKeys: [\"movimentos\"],\n };\n }\n\n if (resource === \"clients\") {\n return {\n endpoint: OMIE.clients,\n call: \"ListarClientes\",\n param: {\n pagina: page,\n registros_por_pagina: pageSize,\n apenas_importado_api: \"N\",\n },\n preferredKeys: [\"clientes_cadastro\"],\n };\n }\n\n if (resource === \"categories\") {\n return {\n endpoint: OMIE.categories,\n call: \"ListarCategorias\",\n param: {\n pagina: page,\n registros_por_pagina: pageSize,\n filtrar_apenas_ativo: \"S\",\n },\n preferredKeys: [\"categoria_cadastro\"],\n };\n }\n\n return {\n endpoint: OMIE.accounts,\n call: \"ListarContasCorrentes\",\n param: {\n pagina: page,\n registros_por_pagina: pageSize,\n apenas_importado_api: \"N\",\n },\n preferredKeys: [\"conta_corrente_lista\", \"ListarContasCorrentes\"],\n };\n}\n\n/* ------------------------ BACKUP (Val Town Blob) ------------------------ */\n\nfunction safeKey(key: string): string {\n if (!key.startsWith(BACKUP_PREFIX)) {\n throw httpError(\"Chave de backup inválida.\", 400);\n }\n if (key.includes(\"..\") || /[^A-Za-z0-9_/\\-.]/.test(key)) {\n throw httpError(\"Chave de backup inválida.\", 400);\n }\n return key;\n}\n\nasync function handleBackupSave(req: Request): Promise {\n let body: Json;\n try {\n body = await req.json();\n } catch {\n return response({ error: \"Corpo não é JSON válido.\" }, 400);\n }\n if (\n !body || body.app !== \"Controle Financeiro Omie\" ||\n !Array.isArray(body.data)\n ) {\n return response(\n { error: \"Backup não reconhecido (app/data ausentes).\" },\n 400,\n );\n }\n const createdAt = new Date().toISOString();\n const stamp = createdAt.replace(/[:.]/g, \"-\");\n const key = `${BACKUP_PREFIX}${stamp}.json`;\n const record = {\n savedAt: createdAt,\n records: body.data.length,\n sessions: Array.isArray(body.sessions) ? body.sessions.length : 0,\n source: body.source ?? null,\n payload: body,\n };\n await blob.setJSON(key, record);\n await blob.setJSON(`${BACKUP_PREFIX}latest.json`, {\n key,\n savedAt: createdAt,\n });\n return response({\n ok: true,\n key,\n savedAt: createdAt,\n records: record.records,\n message: \"Backup salvo no servidor.\",\n });\n}\n\nasync function handleBackupList(): Promise {\n const items = await blob.list(BACKUP_PREFIX);\n const backups: Json[] = [];\n for (const it of items) {\n if (it.key === `${BACKUP_PREFIX}latest.json`) continue;\n let meta: Json = {};\n try {\n const j = await blob.getJSON(it.key);\n meta = {\n savedAt: j?.savedAt,\n records: j?.records,\n sessions: j?.sessions,\n source: j?.source,\n };\n } catch { /* ignora entradas ilegíveis */ }\n backups.push({ key: it.key, size: it.size, ...meta });\n }\n backups.sort((a, b) =>\n String(b.savedAt || b.key).localeCompare(String(a.savedAt || a.key))\n );\n return response({ ok: true, count: backups.length, backups });\n}\n\nasync function handleBackupGet(key: string): Promise {\n const wanted = safeKey(key);\n const j = await blob.getJSON(wanted);\n if (!j) return response({ error: \"Backup não encontrado.\" }, 404);\n return response({\n ok: true,\n key: wanted,\n savedAt: j.savedAt,\n backup: j.payload,\n });\n}\n\nasync function handleBackupDelete(key: string): Promise {\n const wanted = safeKey(key);\n await blob.delete(wanted);\n return response({ ok: true, key: wanted, message: \"Backup removido.\" });\n}\n\n/* ------------------------------- HANDLER -------------------------------- */\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders });\n }\n\n try {\n const url = new URL(req.url);\n requireApiToken(url, req); // opcional; só bloqueia se API_TOKEN existir\n const resourceValue = url.searchParams.get(\"resource\");\n\n /* ---- Rotas de BACKUP (POST/GET/DELETE, exigem BACKUP_TOKEN) ---- */\n if (resourceValue === \"backup\" || resourceValue === \"backups\") {\n requireBackupToken(url, req);\n\n if (req.method === \"POST\" && resourceValue === \"backup\") {\n return await handleBackupSave(req);\n }\n if (req.method === \"GET\" && resourceValue === \"backups\") {\n return await handleBackupList();\n }\n if (req.method === \"GET\" && resourceValue === \"backup\") {\n const key = url.searchParams.get(\"key\");\n if (!key) return response({ error: \"Informe ?key= do backup.\" }, 400);\n return await handleBackupGet(key);\n }\n if (req.method === \"DELETE\" && resourceValue === \"backup\") {\n const key = url.searchParams.get(\"key\");\n if (!key) return response({ error: \"Informe ?key= do backup.\" }, 400);\n return await handleBackupDelete(key);\n }\n return response(\n { error: \"Rota de backup inválida para este método.\" },\n 405,\n );\n }\n\n /* ---- Daqui pra baixo é tudo SOMENTE LEITURA do Omie: só GET ---- */\n if (req.method !== \"GET\") {\n return response(\n { error: \"Método não permitido. Leitura do Omie aceita somente GET.\" },\n 405,\n );\n }\n\n const companies = getCompanies();\n\n if (url.searchParams.get(\"test\") === \"1\") {\n await omieCall(companies[0], OMIE.payables, \"ListarContasPagar\", {\n pagina: 1,\n registros_por_pagina: 1,\n apenas_importado_api: \"N\",\n });\n return response({\n ok: true,\n mode: \"read-only\",\n apiVersion: 4,\n companies: companies.map((c, index) => publicCompany(c, index)),\n message: \"Conexão Omie validada em modo somente leitura.\",\n });\n }\n\n if (url.searchParams.get(\"meta\") === \"1\") {\n return response({\n ok: true,\n mode: \"read-only\",\n apiVersion: 4,\n pagination: true,\n dateRangeRequiredForMovements: true,\n backup: Boolean(Deno.env.get(\"BACKUP_TOKEN\")),\n tokenProtected: Boolean(Deno.env.get(\"API_TOKEN\")),\n companies: companies.map((c, index) => publicCompany(c, index)),\n resources: [\"movements\", \"clients\", \"categories\", \"accounts\"],\n dateModes: [\"emission\", \"due\", \"payment\", \"included\", \"updated\"],\n });\n }\n\n if (!resourceValue) {\n return response({\n ok: true,\n mode: \"read-only\",\n apiVersion: 4,\n pagination: true,\n dateRangeRequiredForMovements: true,\n message:\n \"Endpoint ativo. Use ?test=1 para testar ou conecte o HTML para sincronização paginada.\",\n examples: {\n test: \"?test=1\",\n meta: \"?meta=1\",\n movements:\n \"?resource=movements&company=0&page=1&pageSize=100&dateMode=payment&from=2026-07-01&to=2026-07-31\",\n backupSave: \"POST ?resource=backup (header X-Backup-Token)\",\n backupList: \"?resource=backups (header X-Backup-Token)\",\n },\n });\n }\n\n if (\n ![\"movements\", \"clients\", \"categories\", \"accounts\"].includes(\n resourceValue,\n )\n ) {\n return response({ error: \"Resource inválido.\" }, 400);\n }\n\n const resource = resourceValue as ResourceName;\n const companyIndex = clampInt(\n url.searchParams.get(\"company\"),\n 0,\n 0,\n companies.length - 1,\n );\n const page = clampInt(url.searchParams.get(\"page\"), 1, 1, 100000);\n const pageSize = clampInt(url.searchParams.get(\"pageSize\"), 100, 1, 500);\n const dateMode = parseDateMode(url.searchParams.get(\"dateMode\"));\n const from = url.searchParams.get(\"from\");\n const to = url.searchParams.get(\"to\");\n\n // >>> Período OBRIGATÓRIO para movimentos (brief 7.3 / 13.2) <<<\n if (resource === \"movements\") {\n if (!from || !to || !ISO_DATE.test(from) || !ISO_DATE.test(to)) {\n return response({\n error:\n \"Consulta de movimentos exige 'from' e 'to' no formato AAAA-MM-DD.\",\n }, 400);\n }\n if (from > to) {\n return response({ error: \"'from' não pode ser maior que 'to'.\" }, 400);\n }\n }\n\n const company = companies[companyIndex];\n const cfg = resourceConfig(resource, page, pageSize, dateMode, from, to);\n const json = await omieCall(company, cfg.endpoint, cfg.call, cfg.param);\n const data = firstArray(json, cfg.preferredKeys);\n const info = pageInfo(json);\n\n return response({\n ok: true,\n mode: \"read-only\",\n apiVersion: 4,\n resource,\n company: publicCompany(company, companyIndex),\n dateMode: resource === \"movements\" ? dateMode : undefined,\n from: resource === \"movements\" ? from : undefined,\n to: resource === \"movements\" ? to : undefined,\n ...info,\n data,\n });\n } catch (error) {\n const status = (error as any)?.status ?? 500;\n const message = error instanceof Error\n ? (error.name === \"AbortError\"\n ? \"Tempo de resposta do Omie excedido nesta página.\"\n : error.message)\n : String(error);\n return response({ error: message, mode: \"read-only\" }, status);\n }\n}","createdAt",["D",1785442708339],"branchVersion","branchId","451fa1fe-1d5f-4d26-af93-574642e8a2f1","id","84f620b2-f5d3-48b2-9e0f-7122609976cf","BASEOMIE",["D",1785430121008],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","b6cb00f2-3fad-4699-a03a-e0e430f69dd5","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019faa2d-a13d-705a-b623-f22f372371e8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",8,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","otavio2404","handle","displayName","Otavio Martins","avatar","https://lh3.googleusercontent.com/a/ACg8ocLYMUOct65Fi4wwERA14BKyNAD3lsJXr5sJtIz10SwUaPtEHw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":152,"_80":153,"_82":154,"_84":25},"tree",[146],"files",[146],"counts",{"_134":62,"_135":136,"_137":62,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"4eafe474-2eb1-457a-aebd-6e84b0fbbd6f","parentId","latest",["D",1785442708339],5,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":144,"_145":62},"connections",{"_142":62,"_143":62},"count","unfilledCount",2,"emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":147,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_148":149,"_27":150},["D",1785442708339],"children",[],[28],["D",1785430121008],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":58,"_197":-5,"_198":-7,"_199":-7,"_200":62,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":86,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6