CST - Iron Club Fitness

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_203":204,"_205":206},"routes/_app.x.$handle.$name",{"_104":103,"_38":50,"_113":94,"_33":114,"_13":14,"_115":-5,"_11":116,"_117":118,"_119":120,"_121":122,"_123":124,"_26":-5,"_125":-5,"_126":-5,"_127":32,"_128":129,"_130":30,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_38":50,"_43":51,"_52":-5,"_53":32,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":30,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":32},"version",22,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","25a5f5bd-9370-4559-bce2-f9913326676b","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":32,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":32},"previous","deleted",true,"deletedHere",false,"path","test-asaas.ts","latestPath","fileId","1047ebbe-a416-11f1-9a9c-1607ee4eb77e","name","fileType","script","content","// Script de teste — verifica se a chave de API do Asaas está válida.\nconst key = Deno.env.get(\"ASAAS_API_KEY\");\n\n// Endpoints de teste: busca de conta (myaccount) ou lista de clientes\nfor (const url of [\"https://api.asaas.com/v3/myAccount\", \"https://api.asaas.com/v3/customers?limit=1\"]) {\n const res = await fetch(url, {\n headers: { Accept: \"application/json\", access_token: key },\n });\n const body = await res.json().catch(() => ({}));\n console.log(`GET ${url} => ${res.status}`);\n console.log(JSON.stringify(body).slice(0, 400));\n}\n","createdAt",["D",1788055009449],"branchVersion","branchId","1ebf3cc9-0401-40e4-8381-2a4eebfd4945","id","3139ae28-5995-4190-b400-5d49d1098f63","mp-checkout",["D",1787523580618],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Gera link de pagamento Mercado Pago","imageUrl","42102aac-9634-427c-8d17-5095e4a291bf","pinnedFileId","beb11926-9f40-11f1-a356-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a030b1-3fd9-73ae-ac3e-58e1bc366f62","tursoName","3139ae2859954190b4005d49d1098f63","tursoHostname","3139ae2859954190b4005d49d1098f63-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789533091345],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_112":108},"org",{"_104":103,"_105":106,"_107":108,"_19":60,"_109":110,"_111":32},"branch",{"_13":93,"_38":94,"_48":47,"_95":49,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":50,"_102":103},"isOwned",109,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","spfc","handle","displayName","Iron_club","avatar","https://lh3.googleusercontent.com/a/ACg8ocK_F5dyyxJKcR3Mqh8OgfRpEoiTVDBRmxuxcmafhbEOgEX8ss0w=s96-c","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_38":50,"_43":198,"_52":-5,"_53":32,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":30,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":199,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":200,"_88":201,"_90":202,"_92":32},"tree",[181,182,183,184],"files",[181,182,183,184],"counts",{"_169":67,"_170":171,"_172":67,"_173":174,"_175":176},"contents",[135,136,137,138],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":162,"_38":163,"_36":164,"_140":-5,"_46":47,"_45":165,"_141":30,"_43":166,"_13":67,"_39":167,"_41":-5,"_29":32,"_143":-5,"_33":168},{"_48":154,"_38":155,"_36":156,"_140":-5,"_46":47,"_45":157,"_141":32,"_43":158,"_13":159,"_39":26,"_41":160,"_29":32,"_143":-5,"_33":161},{"_48":145,"_38":146,"_36":62,"_140":-5,"_46":47,"_45":147,"_141":32,"_43":148,"_13":149,"_39":150,"_41":151,"_29":32,"_143":152,"_33":153},{"_48":139,"_38":34,"_36":37,"_140":-5,"_46":47,"_45":14,"_141":32,"_43":142,"_13":67,"_39":40,"_41":42,"_29":32,"_143":-5,"_33":144},"693fff14-e3e2-4a90-9b5c-3210ce1aaa36","parentId","latest",["D",1788055009449],"label",[34],"dfd786eb-8def-40f7-9ac4-66096e84eee5","main.ts",14,["D",1788053509902],8,"http","// Val Town — mp-checkout (com login/cadastro de cliente + geração de link de pagamento)\n//\n// Rotas (todas no mesmo endereço, mudando o caminho no final da URL):\n// POST /cadastro { cpf_cnpj, email, senha } -> cria conta\n// POST /login { identificador, senha } -> entra na conta (identificador = e-mail ou CPF/CNPJ)\n// POST /verificar-sessao { token } -> confere se o login ainda é válido\n// POST /logout { token } -> sai da conta\n// POST / (raiz) { valor, descricao, cliente, referencia } -> gera link de pagamento (Mercado Pago)\n//\n// Variável de ambiente necessária: MP_ACCESS_TOKEN (já configurada)\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\n\n\n// ---------- Configuração inicial do banco de dados (roda sempre, é seguro repetir) ----------\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS usuarios (\n id TEXT PRIMARY KEY,\n cpf_cnpj TEXT UNIQUE NOT NULL,\n email TEXT UNIQUE NOT NULL,\n senha_hash TEXT NOT NULL,\n senha_salt TEXT NOT NULL,\n criado_em TEXT NOT NULL\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessoes (\n token TEXT PRIMARY KEY,\n usuario_id TEXT NOT NULL,\n criado_em TEXT NOT NULL,\n expira_em TEXT NOT NULL\n )\n`);\n\n// ---------- Funções auxiliares de senha (hash seguro com PBKDF2) ----------\nfunction bufferToHex(buf: ArrayBuffer): string {\n return Array.from(new Uint8Array(buf)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction randomHex(bytes = 16): string {\n const arr = new Uint8Array(bytes);\n crypto.getRandomValues(arr);\n return bufferToHex(arr.buffer);\n}\n\nasync function hashSenha(senha: string, saltHex?: string): Promise<{ hash: string; salt: string }> {\n const salt = saltHex || randomHex(16);\n const encoder = new TextEncoder();\n const keyMaterial = await crypto.subtle.importKey(\n \"raw\", encoder.encode(senha), \"PBKDF2\", false, [\"deriveBits\"]\n );\n const derived = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt: encoder.encode(salt), iterations: 100000, hash: \"SHA-256\" },\n keyMaterial, 256\n );\n return { hash: bufferToHex(derived), salt };\n}\n\nfunction limparDoc(doc: string): string {\n return (doc || \"\").replace(/\\D/g, \"\");\n}\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", \"Access-Control-Allow-Origin\": \"*\" },\n });\n}\n\n// ---------- Rotas ----------\n\nasync function rotaCadastro(req: Request): Promise {\n const body = await req.json().catch(() => ({}));\n const cpf_cnpj = limparDoc(body.cpf_cnpj);\n const email = (body.email || \"\").trim().toLowerCase();\n const senha = body.senha || \"\";\n\n if (!cpf_cnpj || cpf_cnpj.length < 11) {\n return jsonResponse({ error: \"CPF ou CNPJ inválido.\" }, 400);\n }\n if (!email || !email.includes(\"@\")) {\n return jsonResponse({ error: \"E-mail inválido.\" }, 400);\n }\n if (!senha || senha.length < 6) {\n return jsonResponse({ error: \"A senha precisa ter pelo menos 6 caracteres.\" }, 400);\n }\n\n const existente = await sqlite.execute(\n `SELECT id FROM usuarios WHERE cpf_cnpj = ? OR email = ?`, [cpf_cnpj, email]\n );\n if (existente.rows.length > 0) {\n return jsonResponse({ error: \"Já existe uma conta com esse CPF/CNPJ ou e-mail.\" }, 409);\n }\n\n const { hash, salt } = await hashSenha(senha);\n const id = crypto.randomUUID();\n const agora = new Date().toISOString();\n\n await sqlite.execute(\n `INSERT INTO usuarios (id, cpf_cnpj, email, senha_hash, senha_salt, criado_em) VALUES (?, ?, ?, ?, ?, ?)`,\n [id, cpf_cnpj, email, hash, salt, agora]\n );\n\n const token = randomHex(24);\n const expira = new Date(Date.now() + 1000 * 60 * 60 * 24 * 90).toISOString(); // 90 dias\n await sqlite.execute(\n `INSERT INTO sessoes (token, usuario_id, criado_em, expira_em) VALUES (?, ?, ?, ?)`,\n [token, id, agora, expira]\n );\n\n return jsonResponse({ token, usuario: { cpf_cnpj, email } }, 201);\n}\n\nasync function rotaLogin(req: Request): Promise {\n const body = await req.json().catch(() => ({}));\n const identificadorBruto = (body.identificador || \"\").trim();\n const senha = body.senha || \"\";\n\n if (!identificadorBruto || !senha) {\n return jsonResponse({ error: \"Preencha CPF/CNPJ ou e-mail, e a senha.\" }, 400);\n }\n\n const identificadorDoc = limparDoc(identificadorBruto);\n const identificadorEmail = identificadorBruto.toLowerCase();\n\n const result = await sqlite.execute(\n `SELECT * FROM usuarios WHERE cpf_cnpj = ? OR email = ? LIMIT 1`,\n [identificadorDoc, identificadorEmail]\n );\n\n if (result.rows.length === 0) {\n return jsonResponse({ error: \"Conta não encontrada.\" }, 404);\n }\n\n const usuario = result.rows[0] as any;\n const { hash } = await hashSenha(senha, usuario.senha_salt);\n\n if (hash !== usuario.senha_hash) {\n return jsonResponse({ error: \"Senha incorreta.\" }, 401);\n }\n\n const token = randomHex(24);\n const agora = new Date().toISOString();\n const expira = new Date(Date.now() + 1000 * 60 * 60 * 24 * 90).toISOString();\n await sqlite.execute(\n `INSERT INTO sessoes (token, usuario_id, criado_em, expira_em) VALUES (?, ?, ?, ?)`,\n [token, usuario.id, agora, expira]\n );\n\n return jsonResponse({ token, usuario: { cpf_cnpj: usuario.cpf_cnpj, email: usuario.email } });\n}\n\nasync function rotaVerificarSessao(req: Request): Promise {\n const body = await req.json().catch(() => ({}));\n const token = body.token || \"\";\n\n if (!token) return jsonResponse({ valido: false });\n\n const result = await sqlite.execute(\n `SELECT s.expira_em, u.cpf_cnpj, u.email FROM sessoes s JOIN usuarios u ON u.id = s.usuario_id WHERE s.token = ? LIMIT 1`,\n [token]\n );\n\n if (result.rows.length === 0) return jsonResponse({ valido: false });\n\n const sessao = result.rows[0] as any;\n if (new Date(sessao.expira_em) < new Date()) {\n return jsonResponse({ valido: false });\n }\n\n return jsonResponse({ valido: true, usuario: { cpf_cnpj: sessao.cpf_cnpj, email: sessao.email } });\n}\n\nasync function rotaLogout(req: Request): Promise {\n const body = await req.json().catch(() => ({}));\n const token = body.token || \"\";\n if (token) {\n await sqlite.execute(`DELETE FROM sessoes WHERE token = ?`, [token]);\n }\n return jsonResponse({ ok: true });\n}\n\nasync function rotaCriarLinkPagamento(req: Request): Promise {\n const accessToken = Deno.env.get(\"MP_ACCESS_TOKEN\");\n if (!accessToken) {\n return jsonResponse({ error: \"MP_ACCESS_TOKEN não configurado.\" }, 500);\n }\n\n try {\n const body = await req.json();\n const { valor, descricao, cliente, referencia } = body || {};\n\n const valorNumerico = Number(valor);\n if (!valorNumerico || valorNumerico <= 0) {\n return jsonResponse({ error: \"Valor inválido.\" }, 400);\n }\n\n const preferenceBody = {\n items: [\n {\n title: descricao || \"Pedido CST / Commander Brasil\",\n quantity: 1,\n unit_price: Math.round(valorNumerico * 100) / 100,\n currency_id: \"BRL\",\n },\n ],\n payer: cliente && cliente.nome ? { name: cliente.nome, email: cliente.email || undefined } : undefined,\n external_reference: referencia || `pedido-${Date.now()}`,\n back_urls: {\n success: \"https://chinasourcetrade.com/pagamento-sucesso\",\n pending: \"https://chinasourcetrade.com/pagamento-pendente\",\n failure: \"https://chinasourcetrade.com/pagamento-erro\",\n },\n auto_return: \"approved\",\n };\n\n const mpResponse = await fetch(\"https://api.mercadopago.com/checkout/preferences\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${accessToken}`,\n \"X-Idempotency-Key\": `${referencia || \"pedido\"}-${Date.now()}`,\n },\n body: JSON.stringify(preferenceBody),\n });\n\n const data = await mpResponse.json();\n\n if (!mpResponse.ok) {\n return jsonResponse({ error: \"Erro no Mercado Pago\", detalhe: data }, mpResponse.status);\n }\n\n return jsonResponse({\n link: data.init_point,\n link_teste: data.sandbox_init_point,\n preference_id: data.id,\n }, 201);\n } catch (err) {\n return jsonResponse({ error: \"Erro inesperado\", detalhe: String(err) }, 500);\n }\n}\n\n// ---------- Roteador principal ----------\nexport default async function handler(req: Request): Promise {\n const { pathname } = new URL(req.url);\n\n // Serve o formulário no GET da raiz\n if (req.method === \"GET\" && (pathname === \"/\" || pathname === \"/app\")) {\n return serveFile(\"index.html\", import.meta.url);\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ error: \"Método não permitido. Use POST.\" }, 405);\n }\n\n if (pathname === \"/cadastro\") return rotaCadastro(req);\n if (pathname === \"/login\") return rotaLogin(req);\n if (pathname === \"/verificar-sessao\") return rotaVerificarSessao(req);\n if (pathname === \"/logout\") return rotaLogout(req);\n\n // Qualquer outro caminho (incluindo a raiz \"/\") continua sendo a geração de link de pagamento,\n // pra não quebrar o que já estava funcionando.\n return rotaCriarLinkPagamento(req);\n}\n","cadastro-iron-club",[146],"31b50ecf-c673-45e1-b66e-a7926f6bc575","index.html","7ac90b34-a412-11f1-8b23-1607ee4eb77e",21,["D",1788054323784],9,"\n\n\n\n\nCST - Iron Club Fitness\n\n\n\n\n \n

CST

\n \n \n

\n\n \n\n \n

\n\n \n \n\n\n\n\n",[155],"5b0d0ebc-2b08-4af9-b032-6ec4ecca558f","frontend","8858c1fd-e08e-46e9-8bce-1fdfdd2f7d75",3,["D",1788053395816],"directory",[163],"pulls","branches",1,"forks","envVars",{"_177":179,"_180":67},"connections",{"_177":67,"_178":67},"count","unfilledCount",2,"emptyCount",{"_48":162,"_38":163,"_36":164,"_140":-5,"_46":47,"_45":165,"_141":30,"_43":195,"_13":67,"_39":167,"_41":-5,"_29":32,"_143":-5,"_186":196,"_33":197},{"_48":154,"_38":155,"_36":156,"_140":-5,"_46":47,"_45":157,"_141":32,"_43":192,"_13":159,"_39":26,"_41":160,"_29":32,"_143":-5,"_186":193,"_33":194},{"_48":145,"_38":146,"_36":62,"_140":-5,"_46":47,"_45":147,"_141":32,"_43":189,"_13":149,"_39":150,"_41":151,"_29":32,"_143":152,"_186":190,"_33":191},{"_48":139,"_38":34,"_36":37,"_140":-5,"_46":47,"_45":14,"_141":32,"_43":185,"_13":67,"_39":40,"_41":42,"_29":32,"_143":-5,"_186":187,"_33":188},["D",1788055009449],"children",[],[34],["D",1788053509902],[],[146],["D",1788054323784],[],[155],["D",1788053395816],[],[163],["D",1787523580618],["D",1789533091345],{"_104":103,"_112":108},{"_104":103,"_105":106,"_107":108,"_19":60,"_109":110,"_111":32},{"_13":93,"_38":94,"_48":47,"_95":49,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":50,"_102":103},"ctx",{"_86":-5,"_132":236,"_237":238,"_239":240,"_241":32,"_242":32,"_243":32,"_244":30,"_245":-5,"_246":-7,"_247":-7,"_248":67,"_249":32,"_250":32,"_251":-5,"_252":32,"_253":32,"_254":32,"_255":-5},"ENV",{"_207":208,"_209":210,"_211":94,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v22