Escritório Virtual

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_198":199,"_200":201},"routes/_app.x.$handle.$name",{"_98":97,"_32":43,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":47,"_122":123,"_124":25,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_32":43,"_36":44,"_45":-5,"_46":47,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":47},"version",105,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":35,"_36":37,"_38":14,"_39":40,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",true,"deletedHere","path","pagina-parte-3.txt","latestPath","fileId","e7ba9aec-8d05-11f1-b99e-1607ee4eb77e","name","fileType","content","cutive);\n const meta = STATE_META[p.state] || STATE_META.working;\n const roomName = ROOMS[p.roomId] ? ROOMS[p.roomId].name : p.roomId;\n box.innerHTML = `\n

${escapeHtml(p.name)}${executive?' ★':''}

${escapeHtml(cargo ? cargo.name : '—')} · ${escapeHtml(roomName)}

\n ${meta.label}\n

`;\n }\n\n function escapeHtml(s){ return s.replace(/[&<>\"']/g, m => ({'&':'&','<':'<','>':'>','\"':'"',\"'\":'''}[m])); }\n\n // ---------- UI: room tabs ----------\n function renderRoomTabs(){\n const wrap = document.getElementById('roomTabs');\n wrap.innerHTML = '';\n Object.keys(ROOMS).forEach(rid=>{\n const room = ROOMS[rid];\n const count = people.filter(p=>p.roomId===rid).length;\n const btn = document.createElement('button');\n btn.className = 'roomtab' + (player.roomId===rid ? ' active' : '');\n btn.innerHTML = `${room.icon} ${escapeHtml(room.name)} ${count}`;\n btn.addEventListener('click', ()=>{ goToRoom(rid); renderRoomTabs(); renderDecorPalette(); });\n wrap.appendChild(btn);\n });\n }\n\n // ---------- UI: theme / editor toggles ----------\n document.getElementById('zoomIn').addEventListener('click', ()=>{ camera.zoom=Math.min(2.4,camera.zoom+0.2); updateZoomLabel(); });\n document.getElementById('zoomOut').addEventListener('click', ()=>{ camera.zoom=Math.max(1,camera.zoom-0.2); updateZoomLabel(); });\n\n function renderDecorPalette(){\n const wrap = document.getElementById('decorPalette');\n wrap.innerHTML = '';\n DECOR_TYPES.forEach(t=>{\n const card = document.createElement('div');\n card.className = 'theme-card' + (selectedDecorType===t.id ? ' active' : '');\n card.tabIndex = 0;\n card.innerHTML = `

${t.emoji}

${escapeHtml(t.label)}

`;\n card.addEventListener('click', ()=>{ selectedDecorType = (selectedDecorType===t.id) ? null : t.id; renderDecorPalette(); });\n wrap.appendChild(card);\n });\n }\n\n document.getElementById('editToggle').addEventListener('click', ()=>{\n editMode = !editMode;\n const btn = document.getElementById('editToggle');\n btn.textContent = editMode ? '✅ Edição ativa — clique para sair' : 'Ativar edição (sala atual)';\n btn.classList.toggle('active', editMode);\n document.getElementById('decorPalette').style.display = editMode ? 'grid' : 'none';\n if(!editMode){\n selectedDecorType = null;\n // ao sair da edição, salva a decoração (servidor e/ou navegador)\n sincronizarDecoracao();\n salvarLocal();\n }\n renderDecorPalette();\n });\n\n // ---------- UI: cargos ----------\n function renderSwatchGroup(containerId, palette, getSelected, onSelect){\n const wrap = document.getElementById(containerId);\n wrap.innerHTML = '';\n const current = getSelected();\n palette.forEach(c=>{\n const s = document.createElement('div');\n s.className = 'swatch' + (c===current ? ' active' : '');\n s.style.background = c; s.tabIndex = 0;\n s.addEventListener('click', ()=>onSelect(c));\n wrap.appendChild(s);\n });\n }\n function populateSelect(id, options){\n const sel = document.getElementById(id);\n sel.innerHTML = '';\n options.forEach(o=>{\n const opt = document.createElement('option');\n opt.value = o.id; opt.textContent = o.label;\n sel.appendChild(opt);\n });\n }\n\n let chosenCargoColor = OUTFIT_COLORS[2];\n function renderCargoSwatches(){\n renderSwatchGroup('cargoSwatches', OUTFIT_COLORS, ()=>chosenCargoColor, c=>{ chosenCargoColor=c; renderCargoSwatches(); });\n }\n\n function renderCargoList(){\n const ul = document.getElementById('cargoList');\n ul.innerHTML = '';\n if(cargos.length===0){\n ul.className = 'roster-list empty-list';\n ul.innerHTML = '

Nenhum cargo ainda.

';\n } else {\n ul.className = 'roster-list';\n cargos.forEach(c=>{\n const count = people.filter(p=>p.cargoId===c.id).length;\n const li = document.createElement('li');\n li.innerHTML = `\n ${escapeHtml(c.name)}${c.executive?' ★':''}${count} agente${count===1?'':'s'}`;\n if(!c.executive){\n const btn = document.createElement('button');\n btn.className = 'rm-btn'; btn.textContent = 'remover';\n btn.addEventListener('click', ()=>removeCargo(c.id));\n li.appendChild(btn);\n }\n ul.appendChild(li);\n });\n }\n document.getElementById('cargoCount').textContent = cargos.length;\n }\n\n function renderCargoOptions(){\n const sel = document.getElementById('cargoSelect');\n const prev = sel.value;\n sel.innerHTML = '';\n cargos.forEach(c=>{\n const opt = document.createElement('option');\n opt.value = c.id; opt.textContent = c.name + (c.executive?' ★':'');\n sel.appendChild(opt);\n });\n if(prev && cargos.some(c=>String(c.id)===prev)) sel.value = prev;\n }\n\n document.getElementById('addCargoForm').addEventListener('submit', (e)=>{\n e.preventDefault();\n const input = document.getElementById('cargoNameInput');\n const name = input.value.trim();\n if(!name) return;\n if(cargos.some(c=>c.name.toLowerCase()===name.toLowerCase())){ alert('Já existe um cargo com esse nome.'); return; }\n const c = addCargo(name, chosenCargoColor, false);\n input.value = '';\n salvarLocal();\n if(modo === 'servidor'){\n api('POST', '/api/cargos', { nome:name, cor:chosenCargoColor, executivo:false })\n .then(r=>{ c.id = r.cargo.id; people.forEach(p=>{ if(p.cargoId===undefined) p.cargoId=c.id; });\n renderCargoOptions(); renderCargoList(); })\n .catch(e=>{ cargos = cargos.filter(x=>x!==c); computeCargoZones(); layoutAllDesks();\n renderCargoList(); renderCargoOptions(); alert('Não foi possível criar o cargo: '+e.message); });\n }\n });\n\n // ---------- UI: roster ----------\n function renderRoster(){\n const ul = document.getElementById('rosterList');\n ul.innerHTML = '';\n if(people.length===0){\n ul.className = 'roster-list empty-list';\n ul.innerHTML = '

Nenhum agente ainda.

';\n } else {\n ul.className = 'roster-list';\n people.forEach(p=>{\n const cargo = getCargo(p);\n const executive = !!(cargo && cargo.executive);\n const li = document.createElement('li');\n li.innerHTML = `\n ${escapeHtml(p.name)}${executive?' ★':''}${escapeHtml(cargo ? cargo.name : '—')}`;\n const btn = document.createElement('button');\n btn.className = 'rm-btn'; btn.textContent = 'remover';\n btn.addEventListener('click', ()=>removePerson(p.id));\n li.appendChild(btn);\n ul.appendChild(li);\n });\n }\n document.getElementById('teamCount').textContent = people.length;\n }\n\n // ---------- UI: manager panel (KPIs + presence + activity feed) ----------\n const ROOM_LABEL = { office:'Escritório', meeting:'Sala de Reunião', rooftop:'Terraço' };\n function renderManagerPanel(){\n const kpiRow = document.getElementById('kpiRow');\n if(kpiRow){\n const working = people.filter(p=>p.state==='working'||p.nextState==='working').length;\n const meeting = people.filter(p=>p.roomId==='meeting').length;\n const coffee = people.filter(p=>p.nextState==='coffee'||p.nextState==='lounge').length;\n kpiRow.innerHTML = `\n 👥 ${people.length} na equipe\n 💻 ${working} trabalhando\n 🤝 ${meeting} em reunião\n ☕ ${coffee} em pausa\n 🏢 ${cargos.length} cargos`;\n }\n const whoUl = document.getElementById('whoHereList');\n if(whoUl){\n whoUl.innerHTML = '';\n if(people.length===0){\n whoUl.className = 'roster-list empty-list';\n whoUl.innerHTML = '

Ninguém por aqui ainda.

';\n } else {\n whoUl.className = 'roster-list';\n people.forEach(p=>{\n const cargo = getCargo(p);\n const li = document.createElement('li');\n li.innerHTML = `\n ${escapeHtml(p.name)}${escapeHtml(ROOM_LABEL[p.roomId]||p.roomId)} · ${escapeHtml(cargo?cargo.name:'—')}`;\n whoUl.appendChild(li);\n });\n }\n }\n renderActivityFeed();\n }\n function renderActivityFeed(){\n const ul = document.getElementById('activityFeed');\n if(!ul) return;\n ul.innerHTML = '';\n if(activityLog.length===0){\n ul.className = 'roster-list empty-list';\n ul.innerHTML = '

Nenhuma atividade ainda.

';\n return;\n }\n ul.className = 'roster-list';\n for(let i=activityLog.length-1; i>=Math.max(0,activityLog.length-25); i--){\n const ev = activityLog[i];\n const li = document.createElement('li');\n li.innerHTML = `${escapeHtml(ev.text)}${ev.time}`;\n ul.appendChild(li);\n }\n }\n\n // ---------- UI: avatar builders ----------\n const agentDraft = { color: OUTFIT_COLORS[0], skinTone: SKIN_TONES[1], hairColor: HAIR_COLORS[0], hairStyle:'short', accessory:'none' };\n\n function drawAvatarPreview(canvasEl, profile){\n const c = canvasEl.getContext('2d');\n c.imageSmoothingEnabled = false;\n c.clearRect(0,0,canvasEl.width, canvasEl.height);\n const x = canvasEl.width/2, y = canvasEl.height*0.68;\n c.fillStyle = 'rgba(0,0,0,0.25)';\n c.beginPath(); c.ellipse(x, y+16, 16, 6, 0, 0, Math.PI*2); c.fill();\n drawBody(c, x, y, profile, {scale:1.7, facing:1});\n }\n function updateAgentPreview(){ drawAvatarPreview(document.getElementById('agentPreview'), Object.assign({executive:false}, agentDraft)); }\n function refreshAgentSwatches(){\n renderSwatchGroup('swatches', OUTFIT_COLORS, ()=>agentDraft.color, c=>{ agentDraft.color=c; refreshAgentSwatches(); updateAgentPreview(); });\n renderSwatchGroup('skinSwatches', SKIN_TONES, ()=>agentDraft.skinTone, c=>{ agentDraft.skinTone=c; refreshAgentSwatches(); updateAgentPreview(); });\n renderSwatchGroup('hairSwatches', HAIR_COLORS, ()=>agentDraft.hairColor, c=>{ agentDraft.hairColor=c; refreshAgentSwatches(); updateAgentPreview(); });\n }\n function updatePlayerPreview(){ drawAvatarPreview(document.getElementById('playerPreview'), Object.assign({executive:false}, player)); }\n function refreshPlayerSwatches(){\n renderSwatchGroup('playerSkinSwatches', SKIN_TONES, ()=>player.skinTone, c=>{ player.skinTone=c; refreshPlayerSwatches(); updatePlayerPreview(); });\n renderSwatchGroup('playerOutfitSwatches', OUTFIT_COLORS, ()=>player.color, c=>{ player.color=c; refreshPlayerSwatches(); updatePlayerPreview(); });\n renderSwatchGroup('playerHairSwatches', HAIR_COLORS, ()=>player.hairColor, c=>{ player.hairColor=c; refreshPlayerSwatches(); updatePlayerPreview(); });\n }\n\n function renderEmoteRow(){\n const wrap = document.getElementById('emoteRow');\n wrap.innerHTML = '';\n EMOTES.forEach((e,i)=>{\n const b = document.createElement('button');\n b.type = 'button'; b.className = 'emote-btn'; b.textContent = e;\n b.addEventListener('click', ()=>triggerEmote(i));\n wrap.appendChild(b);\n });\n }\n\n document.getElementById('hairStyleSelect').addEventListener('change', e=>{ agentDraft.hairStyle=e.target.value; updateAgentPreview(); });\n document.getElementById('accessorySelect').addEventListener('change', e=>{ agentDraft.accessory=e.target.value; updateAgentPreview(); });\n document.getElementById('playerHairStyleSelect').addEventListener('change', e=>{ player.hairStyle=e.target.value; updatePlayerPreview(); });\n document.getElementById('playerAccessorySelect').addEventListener('change', e=>{ player.accessory=e.target.value; updatePlayerPreview(); });\n\n document.getElementById('addForm').addEventListener('submit', (e)=>{\n e.preventDefault();\n const name = document.getElementById('nameInput').value.trim();\n const cargoId = document.getElementById('cargoSelect').value;\n if(!name || !cargoId){ if(!cargoId) alert('Crie um cargo antes de adicionar um agente.'); return; }\n const deskItem = document.getElementById('deskItemSelect').value;\n const p = addPerson(name, cargoId, agentDraft.color, agentDraft.skinTone, agentDraft.hairColor, agentDraft.hairStyle, agentDraft.accessory, deskItem);\n if(!p) return;\n selectedId = p.id;\n document.getElementById('nameInput').value = '';\n renderSelected();\n sincronizarCriacaoPessoa(p, deskItem);\n salvarLocal();\n });\n\n document.getElementById('speed').addEventListener('input', (e)=>{ simSpeed = parseFloat(e.target.value); });\n\n // ---------- keyboard input ----------\n window.addEventListener('keydown', (e)=>{\n const active = document.activeElement;\n if(active && (active.tagName==='INPUT' || active.tagName==='SELECT' || active.tagName==='TEXTAREA')) return;\n const k = e.key.toLowerCase();\n if(['w','a','s','d','arrowup','arrowdown','arrowleft','arrowright'].includes(k)){\n keys[k] = true;\n if(k.indexOf('arrow')===0) e.preventDefault();\n }\n if(k==='e'){ tryInteract(); }\n if(k>='1' && k<='6'){ triggerEmote(parseInt(k,10)-1); }\n });\n window.addEventListener('keyup', (e)=>{ keys[e.key.toLowerCase()] = false; });\n\n // ---------- init ----------\n renderThemeCards();\n renderRoomTabs();\n renderCargoSwatches();\n renderDecorPalette();\n renderEmoteRow();\n /* =====================================================================\n Conta, modo de operação, tarefas e presença\n ===================================================================== */\n\n let modo = 'local'; // 'servidor' quando conectado à API\n let usuarioAtual = null; // {id, nome, email, papel}\n let usuariosServidor = []; // presença vinda do servidor\n let fluxoEventos = null; // EventSource (SSE)\n const CHAVE_LOCAL = 'escritorio-virtual-v1';\n\n const ehGestor = ()=> !usuarioAtual || usuarioAtual.papel === 'gestor';\n\n /* ---------- cliente de API ---------- */\n async function api(metodo, caminho, corpo){\n const opcoes = {\n method: metodo,\n credentials: 'same-origin',\n headers: { 'x-requisicao': 'escritorio' } // exigido pela proteção CSRF do servidor\n };\n if(corpo !== undefined){\n opcoes.headers['Content-Type'] = 'application/json';\n opcoes.body = JSON.stringify(corpo);\n }\n const resposta = await fetch(caminho, opcoes);\n let dados = null;\n try { dados = await resposta.json(); } catch(_){ dados = null; }\n if(!resposta.ok){\n const erro = new Error((dados && dados.erro) || ('Erro ' + resposta.status));\n erro.status = resposta.status;\n throw erro;\n }\n return dados;\n }\n\n /* ---------- persistência local (modo local e cache offline) ---------- */\n function pacoteDados(){\n return {\n versao: 1, salvoEm: new Date().toISOString(),\n cargos: cargos.map(c=>({id:c.id, name:c.name, color:c.color, executive:c.executive})),\n pessoas: people.map(p=>({\n id:p.id, name:p.name, cargoId:p.cargoId, color:p.color, skinTone:p.skinTone,\n hairColor:p.hairColor, hairStyle:p.hairStyle, accessory:p.accessory, deskItem:p.deskItem,\n usuarioId:p.usuarioId||null\n })),\n tarefas: tarefas,\n decoracao: decorations,\n mural: announcementText,\n tema: currentThemeKey,\n avatarJogador: {\n color:player.color, skinTone:player.skinTone, hairColor:player.hairColor,\n hairStyle:player.hairStyle, accessory:player.accessory\n }\n };\n }\n\n function salvarLocal(){\n if(modo === 'servidor') return; // no servidor a fonte da verdade é o banco\n try { localStorage.setItem(CHAVE_LOCAL, JSON.stringify(pacoteDados())); }\n catch(_){ /* modo privado do navegador pode bloquear; não é fatal */ }\n }\n\n function aplicarPacote(d){\n if(!d || typeof d !== 'object') return false;\n cargos = []; people = []; tarefas = [];\n (d.cargos||[]).forEach(c=> addCargo(c.name, c.color, c.executive, c.id));\n (d.pessoas||[]).forEach(p=> addPerson(p.name, p.cargoId, p.color, p.skinTone, p.hairColor,\n p.hairStyle, p.accessory, p.deskItem, p.id, p.usuarioId));\n tarefas = Array.isArray(d.tarefas) ? d.tarefas : [];\n if(Array.isArray(d.decoracao)) decorations = d.decoracao;\n if(typeof d.mural === 'string') announcementText = d.mural;\n if(d.tema && THEMES[d.tema]) setTheme(d.tema);\n if(d.avatarJogador){\n Object.assign(player, d.avatarJogador);\n refreshPlayerSwatches(); updatePlayerPreview();\n }\n computeCargoZones(); layoutAllDesks();\n renderCargoList(); renderCargoOptions(); renderRoster(); renderRoomTabs();\n renderManagerPanel(); renderKanban();\n return true;\n }\n\n function carregarLocal(){\n try {\n const bruto = localStorage.getItem(CHAVE_LOCAL);\n if(!bruto) return false;\n return aplicarPacote(JSON.parse(bruto));\n } catch(_){ return false; }\n }\n\n /* ---------- sincronização com o servidor ---------- */\n async function carregarDoServidor(){\n const estado = await api('GET', '/api/estado');\n usuariosServidor = estado.usuarios || [];\n cargos = []; people = [];\n (estado.cargos||[]).forEach(c=> addCargo(c.nome, c.cor, c.executivo, c.id));\n (estado.pessoas||[]).forEach(p=>{\n const a = p.avatar || {};\n addPerson(p.nome, p.cargoId, a.cor, a.pele, a.cabeloCor, a.cabelo, a.acessorio, a.itemMesa, p.id, p.usuarioId);\n });\n tarefas = (estado.tarefas||[]).map(normalizarTarefa);\n activityLog = (estado.eventos||[]).slice().reverse().map(e=>({\n time: new Date(e.em).toTimeString().slice(0,5), text: e.texto\n }));\n aplicarConfigServidor(estado.config);\n aplicarPosicoes();\n computeCargoZones(); layoutAllDesks();\n renderCargoList(); renderCargoOptions(); renderRoster(); renderRoomTabs();\n renderManagerPanel(); renderActivityFeed(); renderKanban(); renderPresenca();\n }\n\n function normalizarTarefa(t){\n return {\n id:t.id, titulo:t.titulo, descricao:t.descricao||'', coluna:t.coluna||'afazer',\n prioridade:t.prioridade||'media', prazo:t.prazo||null, pessoaId:t.pessoaId||null,\n criadoEm:t.criadoEm||Date.now(), atualizadoEm:t.atualizadoEm||Date.now()\n };\n }\n\n async function sincronizarCriacaoPessoa(p, itemMesa){\n if(modo !== 'servidor') return;\n try {\n const r = await api('POST', '/api/pessoas', {\n nome: p.name, cargoId: p.cargoId,\n avatar: { cor:p.color, pele:p.skinTone, cabeloCor:p.hairColor,\n cabelo:p.hairStyle, acessorio:p.accessory, itemMesa: itemMesa||'none' }\n });\n // troca o id local pelo id do servidor\n const antigo = p.id;\n p.id = r.pessoa.id;\n if(selectedId === antigo) selectedId = p.id;\n renderRoster(); renderKanban();\n } catch(e){ avisar('Não foi possível salvar o agente: ' + e.message); }\n }\n\n /* ---------- avisos ---------- */\n function avisar(texto){\n logEvent(texto);\n console.warn('[escritório]', texto);\n }\n\n /* ---------- configuração compartilhada (mural, tema, decoração) ----------\n No modo servidor essas três coisas eram só locais: recarregar a página (ou\n abrir em outro computador) perdia tudo. Agora o servidor guarda e todos\n recebem pela sondagem de estado. */\n function aplicarConfigServidor(cfg){\n if(!cfg) return;\n if(typeof cfg.mural === 'string' && cfg.mural) announcementText = cfg.mural;\n if(cfg.tema && THEMES[cfg.tema] && cfg.tema !== currentThemeKey) setTheme(cfg.tema, true);\n if(Array.isArray(cfg.decoracao) && !editMode){\n decorations = cfg.decoracao.map(d=>({id:decorSeq++, roomId:d.roomId, type:d.type, wx:d.wx, wy:d.wy}));\n }\n }\n function sincronizarConfig(parcial){\n if(modo !== 'servidor') return;\n api('PATCH', '/api/config', parcial)\n .catch(e=>avisar('Não foi possível salvar a configuração: '+e.message));\n }\n function sincronizarTema(chave){\n if(modo === 'servidor' && ehGestor()) sincronizarConfig({ tema: chave });\n }\n function sincronizarDecoracao(){\n if(modo === 'servidor' && ehGestor()){\n sincronizarConfig({ decoracao: decorations.map(d=>({roomId:d.roomId, type:d.type, wx:d.wx, wy:d.wy})) });\n }\n }\n\n /* ---------- presença em tempo real (posição dos avatares) ----------\n Meu navegador envia onde estou; os agentes vinculados a colegas online\n passam a ser controlados pela posição real deles em vez da simulação. */\n const POSICAO_VALIDA_MS = 60000;\n let _ultimaPosEnviada = null;\n\n function enviarPosicao(forcar){\n if(modo !== 'servidor') return;\n const atual = { sala: player.roomId, x: +player.wx.toFixed(2), y: +player.wy.toFixed(2) };\n if(!forcar && _ultimaPosEnviada &&\n _ultimaPosEnviada.sala === atual.sala &&\n Math.abs(_ultimaPosEnviada.x - atual.x) < 0.15 &&\n Math.abs(_ultimaPosEnviada.y - atual.y) < 0.15) return; // parado: não gasta requisição\n _ultimaPosEnviada = atual;\n api('POST', '/api/posicao', atual).catch(_=>{});\n }\n\n function aplicarPosicoes(){\n people.forEach(p=>{\n if(!p.usuarioId){ p.remoto = false; return; }\n // o próprio jogador já aparece como \"Você\"; o agente dele fica na simulação\n if(usuarioAtual && p.usuarioId === usuarioAtual.id){ p.remoto = false; return; }\n const u = usuariosServidor.find(x=>x.id===p.usuarioId);\n const pos = (u && u.online && u.posicao && (Date.now() - u.posicao.em < POSICAO_VALIDA_MS))\n ? u.posicao : null;\n if(pos){\n p.remoto = true;\n p.remotoSala = pos.sala;\n p.remotoX = pos.x;\n p.remotoY = pos.y;\n } else {\n p.remoto = false; // volta para a simulação normal\n }\n });\n }\n\n setInterval(()=>{ if(modo === 'servidor' && !document.hidden) enviarPosicao(false); }, 3000);\n\n /* =========================== TAREFAS (Kanban) ======================== */\n const COLUNAS_UI = [\n {id:'afazer', lista:'colAfazer', conta:'contaAfazer'},\n {id:'fazendo', lista:'colFazendo', conta:'contaFazendo'},\n {id:'concluido', lista:'colConcluido', conta:'contaConcluido'}\n ];\n const ROTULO_COLUNA = { afazer:'A fazer', fazendo:'Fazendo', concluido:'Concluído' };\n\n function tarefaAtrasada(t){\n if(!t.prazo || t.coluna === 'concluido') return false;\n return new Date(t.prazo + 'T23:59:59') < new Date();\n }\n function nomeDoResponsavel(t){\n const p = people.find(x=>x.id===t.pessoaId);\n return p ? p.name : null;\n }\n // Tarefa mostrada acima do agente no mapa: a que está \"fazendo\", senão a mais urgente\n function tarefaAtualDe(pessoaId){\n const minhas = tarefas.filter(t=>t.pessoaId===pessoaId && t.coluna!=='concluido');\n if(!minhas.length) return null;\n const fazendo = minhas.find(t=>t.coluna==='fazendo');\n if(fazendo) return fazendo;\n const ordem = {alta:0, media:1, baixa:2};\n return minhas.slice().sort((a,b)=>(ordem[a.prioridade]||1)-(ordem[b.prioridade]||1))[0];\n }\n\n function renderKanban(){\n const gestor = ehGestor();\n COLUNAS_UI.forEach(col=>{\n const alvo = document.getElementById(col.lista);\n const conta = document.getElementById(col.conta);\n if(!alvo) return;\n const daColuna = tarefas.filter(t=>t.coluna===col.id);\n if(conta) conta.textContent = daColuna.length;\n alvo.innerHTML = '';\n if(!daColuna.length){\n const vazio = document.createElement('div');\n vazio.className = 'vazio-coluna';\n vazio.textContent = 'Nenhuma tarefa aqui.';\n alvo.appendChild(vazio);\n return;\n }\n daColuna.forEach(t=> alvo.appendChild(montarCartao(t, gestor)));\n });\n const badge = document.getElementById('badgeTarefas');\n if(badge) badge.textContent = tarefas.filter(t=>t.coluna!=='concluido').length;\n atualizarSelecaoResponsavel();\n renderCarga();\n }\n\n function montarCartao(t, gestor){\n const cartao = document.createElement('div');\n cartao.className = 'cartao ' + (t.prioridade||'media');\n cartao.draggable = true;\n cartao.dataset.id = t.id;\n\n const titulo = document.createElement('div');\n titulo.className = 'cartao-titulo';\n titulo.textContent = t.titulo; // textContent = imune a XSS\n cartao.appendChild(titulo);\n\n if(t.descricao){\n const d = document.createElement('div');\n d.className = 'cartao-desc';\n d.textContent = t.descricao;\n cartao.appendChild(d);\n }\n\n const meta = document.createElement('div');\n meta.className = 'cartao-meta';\n const prio = document.createElement('span');\n prio.className = 'tag-prio ' + (t.prioridade||'media');\n prio.textContent = t.prioridade || 'media';\n meta.appendChild(prio);\n\n const resp = nomeDoResponsavel(t);\n if(resp){\n const r = document.createElement('span');\n r.textContent = '👤 ' + resp;\n meta.appendChild(r);\n }\n if(t.prazo){\n const pz = document.createElement('span');\n pz.className = 'tag-prazo' + (tarefaAtrasada(t) ? ' atrasada' : '');\n const [a,m,dia] = t.prazo.split('-');\n pz.textContent = (tarefaAtrasada(t) ? '⚠️ ' : '📅 ') + `${dia}/${m}`;\n meta.appendChild(pz);\n }\n cartao.appendChild(meta);\n\n const acoes = document.createElement('div');\n acoes.className = 'cartao-acoes';\n // Funcionário só move as próprias tarefas (regra também aplicada no servidor);\n // esconder os botões evita mostrar uma ação que vai ser rejeitada.\n const donoLigado = (()=>{\n if(!t.pessoaId) return null;\n const p = people.find(x=>x.id===t.pessoaId);\n return p && p.usuarioId ? p.usuarioId : null;\n })();\n const podeMover = gestor || modo !== 'servidor' || !donoLigado ||\n (usuarioAtual && donoLigado === usuarioAtual.id);\n if(podeMover) COLUNAS_UI.forEach(col=>{\n if(col.id === t.coluna) return;\n const b = document.createElement('button');\n b.type = 'button'; b.className = 'mini-btn';\n b.textContent = '→ ' + ROTULO_COLUNA[col.id];\n b.addEventListener('click', ()=> moverTarefa(t.id, col.id));\n acoes.appendChild(b);\n });\n if(gestor){\n const del = document.createElement('button');\n del.type = 'button'; del.className = 'mini-btn perigo';\n del.textContent = 'excluir';\n del.addEventListener('click', ()=> excluirTarefa(t.id));\n acoes.appendChild(del);\n }\n cartao.appendChild(acoes);\n\n cartao.addEventListener('dragstart', (e)=>{\n e.dataTransfer.setData('text/plain', t.id);\n e.dataTransfer.effectAllowed = 'move';\n cartao.classList.add('arrastando');\n });\n cartao.addEventListener('dragend', ()=> cartao.classList.remove('arrastando'));\n return cartao;\n }\n\n async function moverTarefa(id, coluna){\n const t = tarefas.find(x=>x.id===id);\n if(!t || t.coluna === coluna) return;\n const anterior = t.coluna;\n t.coluna = coluna; t.atualizadoEm = Date.now();\n renderKanban(); salvarLocal();\n const quem = nomeDoResponsavel(t);\n logEvent((quem ? quem + ': ' : '') + '\"' + t.titulo + '\" → ' + ROTULO_COLUNA[coluna]);\n if(modo === 'servidor'){\n try { await api('PATCH', '/api/tarefas/' + encodeURIComponent(id), { coluna }); }\n catch(e){ t.coluna = anterior; renderKanban(); avisar('Não foi possível mover: ' + e.message); }\n }\n }\n\n async function excluirTarefa(id){\n const t = tarefas.find(x=>x.id===id);\n if(!t) return;\n if(!confirm('Excluir a tarefa \"' + t.titulo + '\"?')) return;\n tarefas = tarefas.filter(x=>x.id!==id);\n renderKanban(); salvarLocal();\n if(modo === 'servidor'){\n try { await api('DELETE', '/api/tarefas/' + encodeURIComponent(id)); }\n catch(e){ avisar('Não foi possível excluir: ' + e.message); }\n }\n }\n\n function atualizarSelecaoResponsavel(){\n const sel = document.getElementById('tarefaPessoa');\n if(!sel) return;\n const anterior = sel.value;\n sel.innerHTML = '';\n const nenhum = document.createElement('option');\n nenhum.value = ''; nenhum.textContent = '— sem responsável —';\n sel.appendChild(nenhum);\n people.forEach(p=>{\n const o = document.createElement('option');\n o.value = p.id; o.textContent = p.name;\n sel.appendChild(o);\n });\n if(anterior && people.some(p=>p.id===anterior)) sel.value = anterior;\n }\n\n function inserirTarefa(t){\n // guarda contra duplicata: o mesmo id pode chegar pela resposta do POST e\n // pelo evento SSE quase ao mesmo tempo\n const i = tarefas.findIndex(x=>x.id===t.id);\n if(i >= 0) tarefas[i] = t; else tarefas.unshift(t);\n }\n\n const formTarefa = document.getElementById('formTarefa');\n if(formTarefa) formTarefa.addEventListener('submit', async (e)=>{\n e.preventDefault();\n const titulo = document.getElementById('tarefaTitulo').value.trim();\n if(!titulo) return;\n const dados = {\n titulo,\n descricao: document.getElementById('tarefaDescricao').value.trim(),\n coluna: 'afazer',\n prioridade: document.getElementById('tarefaPrioridade').value,\n prazo: document.getElementById('tarefaPrazo').value || null,\n pessoaId: document.getElementById('tarefaPessoa').value || null\n };\n const botao = formTarefa.querySelector('button[type=submit]');\n\n if(modo === 'servidor'){\n // No modo servidor NÃO inserimos otimisticamente: quem cria a tarefa é o\n // servidor (é ele que gera o id). Inserir antes duplicaria o cartão quando\n // o evento em tempo real chegasse com o id definitivo.\n if(botao){ botao.disabled = true; botao.textContent = 'Criando...'; }\n try {\n const r = await api('POST', '/api/tarefas', dados);\n inserirTarefa(normalizarTarefa(r.tarefa));\n } catch(err){\n alert('Não foi possível criar a tarefa: ' + err.message);\n if(botao){ botao.disabled = false; botao.textContent = '+ Criar tarefa'; }\n return;\n }\n if(botao){ botao.disabled = false; botao.textContent = '+ Criar tarefa'; }\n } else {\n inserirTarefa(Object.assign({ id: novoId('t'), criadoEm: Date.now(), atualizadoEm: Date.now() }, dados));\n logEvent('Nova tarefa: ' + titulo);\n }\n\n renderKanban(); salvarLocal();\n document.getElementById('tarefaTitulo').value = '';\n document.getElementById('tarefaDescricao').value = '';\n });\n\n // arrastar e soltar entre colunas\n document.querySelectorAll('.coluna-kanban').forEach(col=>{\n col.addEventListener('dragover', (e)=>{ e.preventDefault(); col.classList.add('alvo'); });\n col.addEventListener('dragleave', ()=> col.classList.remove('alvo'));\n col.addEventListener('drop', (e)=>{\n e.preventDefault(); col.classList.remove('alvo');\n const id = e.dataTransfer.getData('text/plain');\n if(id) moverTarefa(id, col.dataset.coluna);\n });\n });\n\n /* ============================ CARGA / GRÁFICO ======================== */\n function renderCarga(){\n const alvo = document.getElementById('graficoCarga');\n if(!alvo) return;\n alvo.innerHTML = '';\n if(!people.length){\n alvo.innerHTML = '

Nenhum agente cadastrado ainda.

';\n return;\n }\n const contagens = people.map(p=>{\n const abertas = tarefas.filter(t=>t.pessoaId===p.id && t.coluna!=='concluido');\n return { nome:p.name, total:abertas.length, atrasadas:abertas.filter(tarefaAtrasada).length };\n });\n const maximo = Math.max(1, ...contagens.map(c=>c.total));\n contagens.forEach(c=>{\n const linha = document.createElement('div');\n linha.className = 'barra-linha';\n const nome = document.createElement('span');\n nome.className = 'barra-nome'; nome.textContent = c.nome;\n const trilho = document.createElement('span');\n trilho.className = 'barra-trilho';\n const preenche = document.createElement('span');\n preenche.className = 'barra-preenche' + (c.atrasadas ? ' atrasado' : '');\n preenche.style.width = Math.round((c.total/maximo)*100) + '%';\n trilho.appendChild(preenche);\n const valor = document.createElement('span');\n valor.className = 'barra-valor'; valor.textContent = c.total;\n linha.append(nome, trilho, valor);\n alvo.appendChild(linha);\n });\n }\n\n /* ============================== PRESENÇA ============================= */\n function renderPresenca(){\n const ul = document.getElementById('listaPresenca');\n const badge = document.getElementById('badgeOnline');\n if(!ul) return;\n ul.innerHTML = '';\n const lista = modo === 'servidor'\n ? usuariosServidor\n : [{ id:'local', nome:(usuarioAtual&&usuarioAtual.nome)||'Você', papel:'gestor', online:true }];\n const online = lista.filter(u=>u.online).length;\n if(badge) badge.textContent = online;\n const meuPonto = document.getElementById('pontoMeuStatus');\n if(meuPonto) meuPonto.className = 'ponto-online';\n\n if(!lista.length){\n ul.className = 'roster-list empty-list lista-alta';\n ul.innerHTML = '

Ninguém cadastrado ainda.

';\n return;\n }\n ul.className = 'roster-list lista-alta';\n lista.slice().sort((a,b)=> (b.online?1:0)-(a.online?1:0)).forEach(u=>{\n const li = document.createElement('li');\n const ponto = document.createElement('span');\n ponto.className = 'ponto-online' + (u.online ? '' : ' off');\n const nome = document.createElement('span');\n nome.className = 'roster-name';\n nome.textContent = u.nome + (usuarioAtual && u.id===usuarioAtual.id ? ' (você)' : '');\n const sub = document.createElement('small');\n sub.textContent = (u.papel === 'gestor' ? 'Gestor' : 'Funcionário') + ' · ' +\n (u.online ? 'online agora' : (u.ultimoPing ? 'visto ' + tempoRelativo(u.ultimoPing) : 'nunca entrou'));\n nome.appendChild(sub);\n li.append(ponto, nome);\n ul.appendChild(li);\n });\n renderListaUsuarios();\n }\n\n function tempoRelativo(ts){\n const s = Math.floor((Date.now()-ts)/1000);\n if(s < 60) return 'agora há pouco';\n if(s < 3600) return 'há ' + Math.floor(s/60) + ' min';\n if(s < 86400) return 'há ' + Math.floor(s/3600) + ' h';\n return 'há ' + Math.floor(s/86400) + ' dia(s)';\n }\n\n function renderListaUsuarios(){\n const ul = document.getElementById('listaUsuarios');\n if(!ul) return;\n ul.innerHTML = '';\n if(modo !== 'servidor'){\n ul.className = 'roster-list empty-list lista-alta';\n ul.innerHTML = '

Disponível apenas no modo com servidor.

';\n return;\n }\n ul.className = 'roster-list lista-alta';\n usuariosServidor.forEach(u=>{\n const li = document.createElement('li');\n const nome = document.createElement('span');\n nome.className = 'roster-name';\n nome.textContent = u.nome;\n const sub = document.createElement('small');\n sub.textContent = u.email || '';\n nome.appendChild(sub);\n const tag = document.createElement('span');\n tag.className = 'papel-tag' + (u.papel==='gestor' ? ' gestor' : '');\n tag.textContent = u.papel === 'gestor' ? 'gestor' : 'funcionário';\n li.append(nome, tag);\n\n // Vínculo conta ↔ agente do mapa: é isso que liga a presença em tempo\n // real (o avatar do colega passa a andar onde ele realmente está).\n const sel = document.createElement('select');\n sel.style.maxWidth = '110px';\n sel.title = 'Agente do mapa controlado por esta conta';\n const semAgente = document.createElement('option');\n semAgente.value = ''; semAgente.textContent = '— sem agente —';\n sel.appendChild(semAgente);\n people.forEach(p=>{\n const o = document.createElement('option');\n o.value = p.id; o.textContent = p.name;\n if(p.usuarioId === u.id) o.selected = true;\n sel.appendChild(o);\n });\n sel.addEventListener('change', async ()=>{\n try {\n const anterior = people.find(p=>p.usuarioId===u.id);\n if(sel.value){\n await api('PATCH', '/api/pessoas/' + encodeURIComponent(sel.value), { usuarioId: u.id });\n } else if(anterior){\n await api('PATCH', '/api/pessoas/' + encodeURIComponent(anterior.id), { usuarioId: null });\n }\n await carregarDoServidor();\n } catch(e){ alert(e.message); }\n });\n li.appendChild(sel);\n\n if(usuarioAtual && u.id !== usuarioAtual.id){\n const btn = document.createElement('button');\n btn.className = 'rm-btn';\n btn.textContent = u.papel === 'gestor' ? 'rebaixar' : 'promover';\n btn.addEventListener('click', async ()=>{\n try {\n await api('PATCH', '/api/usuarios/' + encodeURIComponent(u.id),\n { papel: u.papel === 'gestor' ? 'funcionario' : 'gestor' });\n await atualizarPresenca();\n } catch(e){ alert(e.message); }\n });\n li.appendChild(btn);\n const rem = document.createElement('button');\n rem.className = 'rm-btn';\n rem.textContent = 'remover';\n rem.addEventListener('click', async ()=>{\n if(!confirm('Remover a conta de ' + u.nome + '? A pessoa perde o acesso na hora.')) return;\n try {\n await api('DELETE', '/api/usuarios/' + encodeURIComponent(u.id));\n await atualizarPresenca();\n } catch(e){ alert(e.message); }\n });\n li.appendChild(rem);\n }\n ul.appendChild(li);\n });\n }\n\n async function atualizarPresenca(){\n if(modo !== 'servidor') { renderPresenca(); return; }\n try {\n await api('POST', '/api/presenca');\n const r = await api('GET', '/api/presenca');\n usuariosServidor = r.usuarios || [];\n // marca o agente do mapa como online se estiver ligado a um usuário online\n people.forEach(p=>{\n const u = usuariosServidor.find(x=>x.id===p.usuarioId);\n p.online = !!(u && u.online);\n });\n aplicarPosicoes();\n renderPresenca();\n } catch(e){\n if(e.status === 401) encerrarSessaoLocal();\n }\n }\n\n /* Nem todo servidor consegue manter conexão aberta (hospedagem serverless\n como o Val Town encerra o isolado entre requisições). Quando o fluxo SSE\n não conecta, caímos para uma sondagem periódica — mais lenta, mas funciona\n em qualquer lugar. */\n let temporizadorSondagem = null;\n function ligarSondagem(){\n if(temporizadorSondagem) return;\n temporizadorSondagem = setInterval(async ()=>{\n if(modo !== 'servidor') return;\n if(document.hidden) return; // não gasta requisição com a aba em segundo plano\n try {\n const estado = await api('GET', '/api/estado');\n usuariosServidor = estado.usuarios || [];\n people.forEach(p=>{\n const u = usuariosServidor.find(x=>x.id===p.usuarioId);\n p.online = !!(u && u.online);\n });\n aplicarPosicoes();\n tarefas = (estado.tarefas||[]).map(normalizarTarefa);\n activityLog = (estado.eventos||[]).slice().reverse().map(e=>({\n time:new Date(e.em).toTimeString().slice(0,5), text:e.texto\n }));\n aplicarConfigServidor(estado.config);\n renderKanban(); renderPresenca(); renderActivityFeed();\n } catch(e){ if(e.status === 401) encerrarSessaoLocal(); }\n }, 12000);\n }\n\n function ligarFluxoEventos(){\n if(modo !== 'servidor') return;\n if(typeof EventSource === 'undefined'){ ligarSondagem(); return; }\n try {\n fluxoEventos = new EventSource('/api/eventos');\n fluxoEventos.onerror = ()=>{\n // servidor sem suporte a SSE: fecha e passa a sondar\n try { fluxoEventos.close(); } catch(_){}\n fluxoEventos = null;\n ligarSondagem();\n };\n fluxoEventos.addEventListener('presenca', ()=> atualizarPresenca());\n fluxoEventos.addEventListener('estado', ()=> carregarDoServidor().catch(()=>{}));\n fluxoEventos.addEventListener('tarefa', (ev)=>{\n try {\n const d = JSON.parse(ev.data);\n if(d.acao === 'remover') tarefas = tarefas.filter(t=>t.id!==d.tarefa.id);\n else inserirTarefa(normalizarTarefa(d.tarefa));\n renderKanban();\n } catch(_){}\n });\n fluxoEventos.addEventListener('evento', (ev)=>{\n try {\n const d = JSON.parse(ev.data);\n activityLog.push({ time:new Date(d.em).toTimeString().slice(0,5), text:d.texto });\n if(activityLog.length > 60) activityLog.shift();\n renderActivityFeed();\n } catch(_){}\n });\n } catch(_){}\n }\n\n /* ============================ NAVEGAÇÃO ============================== */\n const TELAS = { escritorio:'telaEscritorio', tarefas:'telaTarefas', equipe:'telaEquipe' };\n function irPara(nome){\n Object.entries(TELAS).forEach(([chave, id])=>{\n const el = document.getElementById(id);\n if(el) el.classList.toggle('oculto', chave !== nome);\n });\n document.querySelectorAll('.item-menu').forEach(b=>\n b.classList.toggle('ativo', b.dataset.tela === nome));\n if(nome === 'tarefas') renderKanban();\n if(nome === 'equipe'){ renderPresenca(); renderCarga(); }\n }\n document.querySelectorAll('.item-menu').forEach(b=>\n b.addEventListener('click', ()=> irPara(b.dataset.tela)));\n\n function aplicarPermissoes(){\n const gestor = ehGestor();\n document.querySelectorAll('.so-gestor').forEach(el=> el.classList.toggle('oculto', !gestor));\n const tag = document.getElementById('papelUsuario');\n if(tag){\n tag.textContent = gestor ? 'gestor' : 'funcionário';\n tag.classList.toggle('gestor', gestor);\n }\n const nome = document.getElementById('nomeUsuario');\n if(nome) nome.textContent = usuarioAtual ? usuarioAtual.nome : 'Modo local';\n const pill = document.getElementById('pillModo');\n if(pill){\n pill.textContent = modo === 'servidor' ? 'servidor' : 'local';\n pill.classList.toggle('servidor', modo === 'servidor');\n }\n }\n\n /* ============================ EXPORTAR/IMPORTAR ====================== */\n const btnExportar = document.getElementById('btnExportar');\n if(btnExportar) btnExportar.addEventListener('click', ()=>{\n const blob = new Blob([JSON.stringify(pacoteDados(), null, 2)], {type:'application/json'});\n const url = URL.createObjectURL(blob);\n const a = document.createElement('a');\n a.href = url;\n a.download = 'escritorio-virtual-' + new Date().toISOString().slice(0,10) + '.json';\n document.body.appendChild(a); a.click(); a.remove();\n setTimeout(()=>URL.revokeObjectURL(url), 2000);\n });\n const btnImportar = document.getElementById('btnImportar');\n const arquivoImportar = document.getElementById('arquivoImportar');\n if(btnImportar && arquivoImportar){\n btnImportar.addEventListener('click', ()=> arquivoImportar.click());\n arquivoImportar.addEventListener('change', ()=>{\n const arquivo = arquivoImportar.files && arquivoImportar.files[0];\n if(!arquivo) return;\n if(arquivo.size > 5*1024*1024){ alert('Arquivo grande demais (máx. 5 MB).'); return; }\n const leitor = new FileReader();\n leitor.onload = ()=>{\n try {\n const d = JSON.parse(String(leitor.result));\n if(!confirm('Isso vai substituir os dados atuais desta tela. Continuar?')) return;\n aplicarPacote(d); salvarLocal();\n logEvent('Dados importados do arquivo');\n irPara('escritorio');\n } catch(_){ alert('Arquivo inválido: não é um JSON do Escritório Virtual.'); }\n };\n leitor.readAsText(arquivo);\n arquivoImportar.value = '';\n });\n }\n\n /* ============================== LOGIN =============================== */\n const telaLogin = document.getElementById('telaLogin');\n const appEl = document.getElementById('app');\n const erroLogin = document.getElementById('erroLogin');\n\n function mostrarErroLogin(msg){\n erroLogin.textContent = msg;\n erroLogin.classList.remove('oculto');\n }\n function limparErroLogin(){ erroLogin.classList.add('oculto'); }\n\n document.querySelectorAll('.aba-login').forEach(b=>{\n b.addEventListener('click', ()=>{\n document.querySelectorAll('.aba-login').forEach(x=>x.classList.toggle('ativa', x===b));\n document.getElementById('formEntrar').classList.toggle('oculto', b.dataset.aba !== 'entrar');\n document.getElementById('formCriar').classList.toggle('oculto', b.dataset.aba !== 'criar');\n limparErroLogin();\n });\n });\n\n document.getElementById('formEntrar').addEventListener('submit', async (e)=>{\n e.preventDefault(); limparErroLogin();\n try {\n const r = await api('POST', '/api/auth/entrar', {\n email: document.getElementById('loginEmail').value.trim(),\n senha: document.getElementById('loginSenha').value\n });\n document.getElementById('loginSenha').value = '';\n await entrarNoApp(r.usuario, 'servidor');\n } catch(err){ mostrarErroLogin(err.message || 'Não foi possível entrar.'); }\n });\n\n document.getElementById('formCriar').addEventListener('submit', async (e)=>{\n e.preventDefault(); limparErroLogin();\n try {\n const r = await api('POST', '/api/auth/registrar', {\n nome: document.getElementById('novoNome').value.trim(),\n email: document.getElementById('novoEmail').value.trim(),\n senha: document.getElementById('novaSenha').value\n });\n document.getElementById('novaSenha').value = '';\n await entrarNoApp(r.usuario, 'servidor');\n } catch(err){ mostrarErroLogin(err.message || 'Não foi possível criar a conta.'); }\n });\n\n document.getElementById('btnModoLocal').addEventListener('click', ()=> entrarNoApp(null, 'local'));\n\n document.getElementById('btnSair').addEventListener('click', async ()=>{\n if(modo === 'servidor'){ try { await api('POST', '/api/auth/sair'); } catch(_){} }\n encerrarSessaoLocal();\n });\n\n function encerrarSessaoLocal(){\n if(fluxoEventos){ try{ fluxoEventos.close(); }catch(_){} fluxoEventos = null; }\n usuarioAtual = null; modo = 'local';\n appEl.classList.add('oculto');\n telaLogin.classList.remove('oculto');\n }\n\n const formSenha = document.getElementById('formSenha');\n if(formSenha) formSenha.addEventListener('submit', async (e)=>{\n e.preventDefault();\n const msg = document.getElementById('msgSenha');\n if(modo !== 'servidor'){ msg.textContent = 'Disponível apenas no modo com servidor.'; return; }\n try {\n await api('POST', '/api/auth/senha', {\n senhaAtual: document.getElementById('senhaAtual').value,\n novaSenha: document.getElementById('senhaNova').value\n });\n msg.textContent = 'Senha alterada. As outras sessões foram encerradas.';\n document.getElementById('senhaAtual').value = '';\n document.getElementById('senhaNova').value = '';\n } catch(err){ msg.textContent = 'Erro: ' + err.message; }\n });\n\n /* ============================ INICIALIZAÇÃO ========================== */\n let jogoIniciado = false;\n function iniciarMotor(){\n if(jogoIniciado) return;\n jogoIniciado = true;\n renderThemeCards();\n renderCargoSwatches();\n renderDecorPalette();\n renderEmoteRow();\n populateSelect('hairStyleSelect', HAIR_STYLES);\n populateSelect('accessorySelect', ACCESSORIES);\n populateSelect('playerHairStyleSelect', HAIR_STYLES);\n populateSelect('playerAccessorySelect', ACCESSORIES);\n populateSelect('deskItemSelect', DESK_ITEMS);\n document.getElementById('playerHairStyleSelect').value = player.hairStyle;\n document.getElementById('playerAccessorySelect').value = player.accessory;\n refreshAgentSwatches();\n refreshPlayerSwatches();\n updateAgentPreview();\n updatePlayerPreview();\n updateZoomLabel();\n requestAnimationFrame(frame);\n }\n\n async function entrarNoApp(usuario, novoModo){\n usuarioAtual = usuario;\n modo = novoModo;\n telaLogin.classList.add('oculto');\n appEl.classList.remove('oculto');\n aplicarPermissoes();\n iniciarMotor();\n\n if(modo === 'servidor'){\n try { await carregarDoServidor(); }\n catch(e){ avisar('Falha ao carregar dados: ' + e.message); }\n // Espaço novo começa vazio de gente (sem bonecos de demonstração),\n // mas mobiliado: se o gestor ainda não decorou, entra o padrão.\n if(decorations.length === 0) seedDecorations();\n await atualizarPresenca();\n ligarFluxoEventos();\n } else {\n if(!carregarLocal()){ seedDecorations(); seedDefaults(); semearTarefasExemplo(); }\n renderKanban(); renderPresenca(); salvarLocal();\n }\n renderRoomTabs(); renderManagerPanel();\n irPara('escritorio');\n }\n\n async function semearNoServidor(){\n const modelo = [\n ['Diretoria', OUTFIT_COLORS[1], true, 'Vinicius', SKIN_TONES[2], HAIR_COLORS[0], 'short', 'none', 'trophy'],\n ['Fiscal de Obras', OUTFIT_COLORS[2], false, 'Marcos', SKIN_TONES[1], HAIR_COLORS[1], 'bald', 'glasses', 'mug'],\n ['TI & Sistemas', OUTFIT_COLORS[3], false, 'Ana', SKIN_TONES[0], HAIR_COLORS[4], 'long', 'none', 'plant'],\n ['Produção de Eventos', OUTFIT_COLORS[0], false, 'Rafael', SKIN_TONES[3], HAIR_COLORS[2], 'curly', 'none', 'photo'],\n ['Gestão de Locação', OUTFIT_COLORS[4], false, 'Juliana', SKIN_TONES[1], HAIR_COLORS[5], 'long', 'hat', 'toy']\n ];\n try {\n for(const [nomeCargo, cor, exec, nomePessoa, pele, cabeloCor, cabelo, acessorio, item] of modelo){\n const rc = await api('POST', '/api/cargos', { nome:nomeCargo, cor, executivo:exec });\n await api('POST', '/api/pessoas', {\n nome: nomePessoa, cargoId: rc.cargo.id,\n avatar: { cor, pele, cabeloCor, cabelo, acessorio, itemMesa:item }\n });\n }\n await carregarDoServidor();\n } catch(e){ avisar('Não foi possível montar o escritório inicial: ' + e.message); }\n }\n\n function semearTarefasExemplo(){\n const porNome = (n)=> (people.find(p=>p.name===n)||{}).id || null;\n const hoje = new Date();\n const emDias = (d)=>{ const x=new Date(hoje); x.setDate(x.getDate()+d); return x.toISOString().slice(0,10); };\n tarefas = [\n {id:novoId('t'), titulo:'Vistoria da obra do bloco B', descricao:'Levar checklist e fotos.', coluna:'fazendo', prioridade:'alta', prazo:emDias(1), pessoaId:porNome('Marcos'), criadoEm:Date.now(), atualizadoEm:Date.now()},\n {id:novoId('t'), titulo:'Backup dos servidores', descricao:'Rotina semanal.', coluna:'afazer', prioridade:'media', prazo:emDias(3), pessoaId:porNome('Ana'), criadoEm:Date.now(), atualizadoEm:Date.now()},\n {id:novoId('t'), titulo:'Fechar contrato do evento de agosto', coluna:'afazer', prioridade:'alta', prazo:emDias(-1), pessoaId:porNome('Rafael'), criadoEm:Date.now(), atualizadoEm:Date.now()},\n {id:novoId('t'), titulo:'Renovar 3 contratos de locação', coluna:'fazendo', prioridade:'media', prazo:emDias(5), pessoaId:porNome('Juliana'), criadoEm:Date.now(), atualizadoEm:Date.now()},\n {id:novoId('t'), titulo:'Aprovar orçamento do trimestre', coluna:'concluido', prioridade:'baixa', prazo:emDias(-3), pessoaId:porNome('Vinicius'), criadoEm:Date.now(), atualizadoEm:Date.now()}\n ];\n }\n\n // Heartbeat de presença\n setInterval(()=>{ if(modo === 'servidor') atualizarPresenca(); }, 20000);\n setInterval(()=>{ if(modo === 'local') salvarLocal(); }, 10000);\n window.addEventListener('beforeunload', ()=>{ if(modo==='local') salvarLocal(); });\n\n // Descobre se existe servidor: se houver sessão válida, entra direto.\n (async function inicioAutomatico(){\n const aviso = document.getElementById('avisoServidor');\n try {\n const r = await api('GET', '/api/eu');\n if(r && r.usuario){ await entrarNoApp(r.usuario, 'servidor'); return; }\n aviso.textContent = 'Servidor conectado. Entre com sua conta ou crie a primeira (vira gestor).';\n } catch(e){\n aviso.textContent = 'Servidor indisponível no momento — você ainda pode usar o modo local.';\n }\n })();\n\n})();\n\n\n","createdAt",["D",1786478136839],"branchVersion","branchId","1babfc65-45cf-4fe5-80e1-b6a58708764e","id","3598e464-33ff-46d8-9a0d-a0cbf68518a5","escritorio-virtual",["D",1785517600367],"deletedAt","legacyEnvVars",false,"privacy","public","httpPrivacy","description","Escritorio virtual para equipes em home office","imageUrl","779cff7d-e571-4cc4-9762-23848b9bd8be","pinnedFileId","32a164ae-8d02-11f1-92a9-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8661-e505-7389-9ac0-5e186d7172de","tursoName","3598e46433ff46d89a0da0cbf68518a5","tursoHostname","3598e46433ff46d89a0da0cbf68518a5-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":47},"branch",{"_13":87,"_32":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",194,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","vininasc25","handle","displayName","Vinicius Costa Nascimento","avatar","https://lh3.googleusercontent.com/a/ACg8ocK2KMyaRKhjGR18fsaUR-TcRuUk6K_d0glrB2nmnmkbJum4XA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_32":43,"_36":193,"_45":-5,"_46":47,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":194,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":195,"_82":196,"_84":197,"_86":47},"tree",[176,177,178,179],"files",[176,177,178,179],"counts",{"_166":61,"_167":157,"_168":61,"_169":170,"_171":172},"contents",[129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":159,"_32":160,"_30":161,"_136":-5,"_39":40,"_38":162,"_138":25,"_36":163,"_13":137,"_33":140,"_34":164,"_24":47,"_142":-5,"_27":165},{"_41":152,"_32":153,"_30":154,"_136":-5,"_39":40,"_38":155,"_138":47,"_36":156,"_13":157,"_33":140,"_34":108,"_24":47,"_142":-5,"_27":158},{"_41":144,"_32":145,"_30":56,"_136":-5,"_39":40,"_38":146,"_138":47,"_36":147,"_13":148,"_33":149,"_34":150,"_24":47,"_142":-5,"_27":151},{"_41":133,"_32":134,"_30":135,"_136":-5,"_39":40,"_38":137,"_138":25,"_36":139,"_13":61,"_33":140,"_34":141,"_24":47,"_142":-5,"_27":143},"bf356e97-f734-41d1-85bb-061f1a51f378","seguranca.ts","7f988058-8d02-11f1-bafd-1607ee4eb77e","parentId",2,"latest",["D",1785517729524],"script","/**\n * Primitivas de seguranca para o Escritorio Virtual no Val Town.\n *\n * Diferenca em relacao a versao Node: o hash de senha usa PBKDF2-SHA256 pela\n * Web Crypto API, nao scrypt. Motivo: a Web Crypto e nativa do Deno e roda\n * igual em qualquer isolado, enquanto scrypt depende da camada de compat com\n * Node. 600.000 iteracoes e a recomendacao atual da OWASP para PBKDF2-SHA256.\n */\n\nconst ITERACOES = 600000;\nconst TAM_CHAVE = 32; // bytes\n\nconst enc = new TextEncoder();\n\nfunction paraBase64(bytes: Uint8Array): string {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s);\n}\nfunction deBase64(txt: string): Uint8Array {\n const bin = atob(txt);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nasync function derivar(senha: string, sal: Uint8Array, iteracoes: number, tam: number) {\n const chave = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(senha.normalize(\"NFKC\")),\n \"PBKDF2\",\n false,\n [\"deriveBits\"],\n );\n const bits = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt: sal, iterations: iteracoes, hash: \"SHA-256\" },\n chave,\n tam * 8,\n );\n return new Uint8Array(bits);\n}\n\nexport async function hashSenha(senha: string): Promise {\n const sal = crypto.getRandomValues(new Uint8Array(16));\n const derivada = await derivar(senha, sal, ITERACOES, TAM_CHAVE);\n return \"pbkdf2$\" + ITERACOES + \"$\" + paraBase64(sal) + \"$\" + paraBase64(derivada);\n}\n\nexport async function conferirSenha(senha: string, guardado: string): Promise {\n try {\n const partes = String(guardado).split(\"$\");\n if (partes.length !== 4 || partes[0] !== \"pbkdf2\") return false;\n const iteracoes = Number(partes[1]);\n const sal = deBase64(partes[2]);\n const esperado = deBase64(partes[3]);\n const derivada = await derivar(String(senha), sal, iteracoes, esperado.length);\n // comparacao em tempo constante: nao sai mais cedo ao achar diferenca\n if (derivada.length !== esperado.length) return false;\n let diferenca = 0;\n for (let i = 0; i < derivada.length; i++) diferenca |= derivada[i] ^ esperado[i];\n return diferenca === 0;\n } catch {\n return false;\n }\n}\n\n/* ---------------------------- tokens e ids -------------------------------- */\n\nfunction urlSafe(b: Uint8Array): string {\n return paraBase64(b).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nexport function novoToken(): string {\n return urlSafe(crypto.getRandomValues(new Uint8Array(32)));\n}\n\n/** O banco guarda so o hash do token: se o banco vazar, os tokens nao servem. */\nexport async function hashToken(token: string): Promise {\n const bits = await crypto.subtle.digest(\"SHA-256\", enc.encode(String(token)));\n return Array.from(new Uint8Array(bits)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function idAleatorio(prefixo: string): string {\n return prefixo + \"_\" + urlSafe(crypto.getRandomValues(new Uint8Array(9)));\n}\n\n/* ------------------------------ validacao --------------------------------- */\n\nexport class ErroPublico extends Error {\n status: number;\n publico = true;\n constructor(msg: string, status = 400) {\n super(msg);\n this.status = status;\n }\n}\n\nexport const ERRO = (msg: string, status = 400) => new ErroPublico(msg, status);\n\n// remove caracteres de controle (0x00-0x1f e 0x7f) que quebrariam logs e telas\nconst CONTROLE = new RegExp(\"[\\\\u0000-\\\\u001f\\\\u007f]\", \"g\");\n\nexport function texto(\n valor: unknown,\n campo: string,\n opcoes: { min?: number; max?: number; obrigatorio?: boolean } = {},\n): string {\n const min = opcoes.min ?? 1;\n const max = opcoes.max ?? 200;\n const obrigatorio = opcoes.obrigatorio ?? true;\n if (valor === undefined || valor === null || valor === \"\") {\n if (obrigatorio) throw ERRO('Campo \"' + campo + '\" e obrigatorio.');\n return \"\";\n }\n if (typeof valor !== \"string\") throw ERRO('Campo \"' + campo + '\" deve ser texto.');\n const limpo = valor.replace(CONTROLE, \"\").trim();\n if (limpo.length < min) throw ERRO('Campo \"' + campo + '\" precisa de pelo menos ' + min + \" caractere(s).\");\n if (limpo.length > max) throw ERRO('Campo \"' + campo + '\" excede ' + max + \" caracteres.\");\n return limpo;\n}\n\nexport function email(valor: unknown): string {\n const v = texto(valor, \"email\", { max: 160 }).toLowerCase();\n if (!/^[^\\s@]{1,64}@[^\\s@]{1,120}\\.[a-z]{2,}$/i.test(v)) throw ERRO(\"E-mail invalido.\");\n return v;\n}\n\nexport function senhaForte(valor: unknown): string {\n if (typeof valor !== \"string\") throw ERRO(\"Senha invalida.\");\n if (valor.length < 8) throw ERRO(\"A senha precisa ter pelo menos 8 caracteres.\");\n if (valor.length > 200) throw ERRO(\"Senha longa demais.\");\n if (!/[a-zA-Z]/.test(valor) || !/[0-9]/.test(valor)) throw ERRO(\"A senha precisa ter letras e numeros.\");\n return valor;\n}\n\nexport function escolha(valor: unknown, campo: string, permitidos: T[], padrao: T): T {\n if (valor === undefined || valor === null || valor === \"\") return padrao;\n if (!permitidos.includes(valor as T)) throw ERRO('Valor invalido para \"' + campo + '\".');\n return valor as T;\n}\n\nexport function corHex(valor: unknown, padrao: string): string {\n if (!valor) return padrao;\n if (typeof valor !== \"string\" || !/^#[0-9a-fA-F]{6}$/.test(valor)) throw ERRO(\"Cor invalida.\");\n return valor.toLowerCase();\n}\n","label",[134],"d324ce91-1994-4638-b166-aa45879eaa50","main.tsx",102,["D",1786137770006],35,"http","/**\n * ESCRITÓRIO VIRTUAL — v4: escritório em mapa 2D top-down com avatares que andam\n * (estilo Gather), editor de planta baixa com biblioteca de móveis (arrastar e soltar),\n * móveis interativos abrem chamada de vídeo (Jitsi) por proximidade.\n * Visual e código originais — nenhum asset ou trecho copiado de terceiros.\n */\n\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./banco.ts\";\nimport * as S from \"./seguranca.ts\";\n\nconst app = new Hono();\n\n/* ============================== CONSTANTES DO MAPA ============================== */\n\nconst GRID_COLS = 16;\nconst GRID_ROWS = 10;\nconst TIPOS_MOVEL = [\n \"mesa\", \"cadeira\", \"sofa\", \"planta\", \"estante\", \"quadro\",\n \"tapete\", \"mesa_reuniao\", \"lampada\", \"cafe\",\n \"parede\", \"tapete_azul\", \"tapete_verde\", \"tapete_roxo\", \"tapete_amarelo\",\n] as const;\ntype TipoMovel = typeof TIPOS_MOVEL[number];\n\n/* ============================== AUTH & DOMÍNIO ============================== */\n\ninterface Usuario {\n id: string;\n nome: string;\n email: string;\n senhaHash: string;\n cargo: \"gestor\" | \"membro\";\n cor: string;\n criadoEm: number;\n x: number;\n y: number;\n direcao: \"baixo\" | \"cima\" | \"esquerda\" | \"direita\";\n status: \"disponivel\" | \"reuniao\" | \"foco\" | \"ausente\";\n emChamada: string | null;\n presencaEm: number;\n}\n\ninterface Sessao {\n id: string;\n usuarioId: string;\n expiraEm: number;\n}\n\ninterface Tarefa {\n id: string;\n titulo: string;\n descricao: string;\n status: \"pendente\" | \"andamento\" | \"concluida\";\n atribuidoA: string | null;\n criadoPor: string;\n criadoEm: number;\n prazo: string | null;\n}\n\ninterface MovelPlanta {\n id: string;\n tipo: TipoMovel;\n x: number;\n y: number;\n}\n\ninterface Planta {\n id: string;\n moveis: MovelPlanta[];\n atualizadoEm: number;\n}\n\nconst CORES = [\"#4F46E5\", \"#0EA5E9\", \"#10B981\", \"#F59E0B\", \"#EF4444\", \"#EC4899\", \"#7C3AED\", \"#14B8A6\"];\nconst SESSAO_MS = 7 * 24 * 60 * 60 * 1000;\nconst PRESENCA_TIMEOUT_MS = 5 * 60 * 1000;\n\nasync function usuarioPorEmail(email: string): Promise {\n const todos = await db.listar(\"usuarios\");\n return todos.find((u) => u.email === email) ?? null;\n}\n\nasync function usuarioAtual(c: any): Promise {\n const auth = c.req.header(\"authorization\") || \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (!token) return null;\n const hash = await S.hashToken(token);\n const sessao = await db.obter(\"sessoes\", hash);\n if (!sessao || sessao.expiraEm < Date.now()) return null;\n return await db.obter(\"usuarios\", sessao.usuarioId);\n}\n\nfunction usuarioPublico(u: Usuario) {\n const online = Date.now() - (u.presencaEm || 0) < PRESENCA_TIMEOUT_MS;\n return {\n id: u.id,\n nome: u.nome,\n email: u.email,\n cargo: u.cargo,\n cor: u.cor,\n criadoEm: u.criadoEm,\n x: online ? u.x : null,\n y: online ? u.y : null,\n direcao: online ? u.direcao : \"baixo\",\n status: online ? u.status : \"ausente\",\n emChamada: online ? u.emChamada : null,\n online,\n };\n}\n\nfunction celulaLivre(x: number, y: number): boolean {\n return x >= 0 && y >= 0 && x < GRID_COLS && y < GRID_ROWS;\n}\n\n/* ================================ API ROTAS ================================ */\n\napp.post(\"/api/registrar\", async (c) => {\n try {\n const body = await c.req.json();\n const nome = S.texto(body.nome, \"nome\", { min: 2, max: 80 });\n const email = S.email(body.email);\n const senha = S.senhaForte(body.senha);\n if (await usuarioPorEmail(email)) throw S.ERRO(\"Este e-mail já está cadastrado.\", 409);\n\n const existentes = await db.listar(\"usuarios\");\n const usuario: Usuario = {\n id: S.idAleatorio(\"usr\"),\n nome,\n email,\n senhaHash: await S.hashSenha(senha),\n cargo: existentes.length === 0 ? \"gestor\" : \"membro\",\n cor: CORES[existentes.length % CORES.length],\n criadoEm: Date.now(),\n x: 2 + (existentes.length % 5),\n y: 2 + Math.floor(existentes.length / 5),\n direcao: \"baixo\",\n status: \"disponivel\",\n emChamada: null,\n presencaEm: Date.now(),\n };\n await db.salvar(\"usuarios\", usuario);\n\n const token = S.novoToken();\n await db.salvar(\"sessoes\", { id: await S.hashToken(token), usuarioId: usuario.id, expiraEm: Date.now() + SESSAO_MS });\n return c.json({ token, usuario: usuarioPublico(usuario) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao registrar.\" }, 500);\n }\n});\n\napp.post(\"/api/login\", async (c) => {\n try {\n const body = await c.req.json();\n const email = S.email(body.email);\n const senha = S.texto(body.senha, \"senha\", { min: 1, max: 200 });\n\n const chaveBloqueio = \"login:\" + email;\n const bloqueado = await db.segundosBloqueado(chaveBloqueio);\n if (bloqueado > 0) throw S.ERRO(`Muitas tentativas. Tente novamente em ${bloqueado}s.`, 429);\n\n const usuario = await usuarioPorEmail(email);\n const ok = usuario ? await S.conferirSenha(senha, usuario.senhaHash) : false;\n if (!usuario || !ok) {\n await db.registrarFalha(chaveBloqueio);\n throw S.ERRO(\"E-mail ou senha inválidos.\", 401);\n }\n await db.limparTentativas(chaveBloqueio);\n await db.limparExpirados();\n\n const token = S.novoToken();\n await db.salvar(\"sessoes\", { id: await S.hashToken(token), usuarioId: usuario.id, expiraEm: Date.now() + SESSAO_MS });\n return c.json({ token, usuario: usuarioPublico(usuario) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao entrar.\" }, 500);\n }\n});\n\napp.post(\"/api/logout\", async (c) => {\n const auth = c.req.header(\"authorization\") || \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (token) await db.remover(\"sessoes\", await S.hashToken(token));\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n return c.json({ usuario: usuarioPublico(u) });\n});\n\napp.get(\"/api/usuarios\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const todos = await db.listar(\"usuarios\");\n return c.json({ usuarios: todos.map(usuarioPublico) });\n});\n\napp.post(\"/api/presenca\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const body = await c.req.json();\n\n if (body.x !== undefined && body.y !== undefined) {\n const x = Math.trunc(Number(body.x));\n const y = Math.trunc(Number(body.y));\n if (celulaLivre(x, y)) {\n u.x = x;\n u.y = y;\n }\n }\n if (body.direcao) {\n u.direcao = S.escolha(body.direcao, \"direcao\", [\"baixo\", \"cima\", \"esquerda\", \"direita\"], u.direcao);\n }\n if (body.status) {\n u.status = S.escolha(body.status, \"status\", [\"disponivel\", \"reuniao\", \"foco\", \"ausente\"], u.status);\n }\n if (body.emChamada !== undefined) {\n u.emChamada = body.emChamada ? S.texto(body.emChamada, \"emChamada\", { max: 60 }) : null;\n }\n u.presencaEm = Date.now();\n await db.salvar(\"usuarios\", u);\n return c.json({ usuario: usuarioPublico(u) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao atualizar presença.\" }, 500);\n }\n});\n\nfunction plantaPadrao(): MovelPlanta[] {\n const itens: MovelPlanta[] = [];\n let n = 0;\n const add = (tipo: TipoMovel, x: number, y: number) => itens.push({ id: \"seed_\" + (n++), tipo, x, y });\n\n // Zona 1 — Espaço aberto (mesas de trabalho), canto superior esquerdo\n for (let x = 1; x <= 6; x++) for (let y = 1; y <= 3; y++) add(\"tapete_azul\", x, y);\n add(\"mesa\", 2, 1); add(\"cadeira\", 2, 2);\n add(\"mesa\", 4, 1); add(\"cadeira\", 4, 2);\n add(\"mesa\", 6, 1); add(\"cadeira\", 6, 2);\n add(\"estante\", 1, 3); add(\"planta\", 6, 3);\n add(\"quadro\", 3, 0); add(\"quadro\", 5, 0);\n\n // Zona 2 — Sala de reunião, canto superior direito\n for (let x = 9; x <= 14; x++) for (let y = 1; y <= 3; y++) add(\"tapete_roxo\", x, y);\n add(\"mesa_reuniao\", 11, 2);\n add(\"cadeira\", 10, 2); add(\"cadeira\", 12, 2); add(\"cadeira\", 11, 1); add(\"cadeira\", 11, 3);\n add(\"quadro\", 11, 0);\n\n // Zona 3 — Lounge com sofás, canto inferior esquerdo\n for (let x = 1; x <= 6; x++) for (let y = 6; y <= 8; y++) add(\"tapete_verde\", x, y);\n add(\"sofa\", 2, 7); add(\"sofa\", 5, 7);\n add(\"planta\", 1, 6); add(\"planta\", 6, 6); add(\"planta\", 3, 8); add(\"estante\", 1, 8);\n\n // Zona 4 — Cantinho do café, canto inferior direito\n for (let x = 9; x <= 14; x++) for (let y = 6; y <= 8; y++) add(\"tapete_amarelo\", x, y);\n add(\"cafe\", 11, 7);\n add(\"mesa\", 9, 7); add(\"cadeira\", 9, 8);\n add(\"mesa\", 13, 7); add(\"cadeira\", 13, 8);\n add(\"planta\", 14, 6);\n\n // Corredor central com um pouco de decoração\n add(\"lampada\", 8, 4); add(\"planta\", 8, 5);\n\n // Paredes divisórias (com vãos no corredor central em cruz)\n for (const y of [0, 1, 2, 3, 6, 7, 8, 9]) add(\"parede\", 7, y);\n for (const x of [0, 1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 12, 13, 14, 15]) add(\"parede\", x, 4);\n\n return itens;\n}\n\napp.get(\"/api/mapa\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n let planta = await db.obter(\"config\", \"planta\");\n if (!planta) {\n planta = { id: \"planta\", moveis: plantaPadrao(), atualizadoEm: Date.now() };\n await db.salvar(\"config\", planta);\n }\n return c.json({ moveis: planta.moveis, cols: GRID_COLS, rows: GRID_ROWS });\n});\n\napp.post(\"/api/mapa\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n if (u.cargo !== \"gestor\") throw S.ERRO(\"Só o(a) gestor(a) pode editar a planta.\", 403);\n const body = await c.req.json();\n if (!Array.isArray(body.moveis)) throw S.ERRO(\"Lista de móveis inválida.\", 400);\n if (body.moveis.length > 300) throw S.ERRO(\"Muitos móveis (máximo 300).\", 400);\n\n const moveis: MovelPlanta[] = body.moveis.map((m: any) => {\n const tipo = S.escolha(m.tipo, \"tipo\", TIPOS_MOVEL as unknown as string[], \"mesa\") as TipoMovel;\n const x = Math.trunc(Number(m.x));\n const y = Math.trunc(Number(m.y));\n if (!celulaLivre(x, y)) throw S.ERRO(\"Posição de móvel fora do mapa.\", 400);\n const id = m.id && typeof m.id === \"string\" ? m.id.slice(0, 40) : S.idAleatorio(\"mv\");\n return { id, tipo, x, y };\n });\n\n const planta: Planta = { id: \"planta\", moveis, atualizadoEm: Date.now() };\n await db.salvar(\"config\", planta);\n return c.json({ moveis: planta.moveis });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao salvar planta.\" }, 500);\n }\n});\n\napp.get(\"/api/tarefas\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const tarefas = await db.listar(\"tarefas\");\n tarefas.sort((a, b) => b.criadoEm - a.criadoEm);\n return c.json({ tarefas });\n});\n\napp.post(\"/api/tarefas\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const body = await c.req.json();\n const titulo = S.texto(body.titulo, \"titulo\", { min: 2, max: 140 });\n const descricao = S.texto(body.descricao, \"descricao\", { min: 0, max: 2000, obrigatorio: false });\n const prazo = body.prazo ? S.texto(body.prazo, \"prazo\", { max: 40 }) : null;\n const atribuidoA = body.atribuidoA ? S.texto(body.atribuidoA, \"atribuidoA\", { max: 60 }) : null;\n const tarefa: Tarefa = {\n id: S.idAleatorio(\"tsk\"),\n titulo,\n descricao,\n status: \"pendente\",\n atribuidoA,\n criadoPor: u.id,\n criadoEm: Date.now(),\n prazo,\n };\n await db.salvar(\"tarefas\", tarefa);\n return c.json({ tarefa });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao criar tarefa.\" }, 500);\n }\n});\n\napp.patch(\"/api/tarefas/:id\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const id = c.req.param(\"id\");\n const tarefa = await db.obter(\"tarefas\", id);\n if (!tarefa) return c.json({ erro: \"Tarefa não encontrada.\" }, 404);\n const body = await c.req.json();\n if (body.status) tarefa.status = S.escolha(body.status, \"status\", [\"pendente\", \"andamento\", \"concluida\"], tarefa.status);\n if (body.titulo) tarefa.titulo = S.texto(body.titulo, \"titulo\", { min: 2, max: 140 });\n if (body.descricao !== undefined) tarefa.descricao = S.texto(body.descricao, \"descricao\", { max: 2000, obrigatorio: false });\n if (body.atribuidoA !== undefined) tarefa.atribuidoA = body.atribuidoA || null;\n if (body.prazo !== undefined) tarefa.prazo = body.prazo || null;\n await db.salvar(\"tarefas\", tarefa);\n return c.json({ tarefa });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao atualizar tarefa.\" }, 500);\n }\n});\n\napp.delete(\"/api/tarefas/:id\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n await db.remover(\"tarefas\", c.req.param(\"id\"));\n return c.json({ ok: true });\n});\n\n/* ================================ PWA ================================ */\n\nconst ICON_192 = \"data:image/png;base64,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\";\nconst ICON_180 = \"data:image/png;base64,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\";\nconst ICON_32 = \"data:image/png;base64,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\";\n\napp.get(\"/manifest.json\", (c) => {\n return c.json({\n name: \"Escritório Virtual\",\n short_name: \"Escritório\",\n start_url: \"/\",\n display: \"standalone\",\n background_color: \"#0B0B0F\",\n theme_color: \"#4F46E5\",\n orientation: \"portrait-primary\",\n icons: [\n { src: ICON_192, sizes: \"192x192\", type: \"image/png\", purpose: \"any\" },\n { src: ICON_192, sizes: \"192x192\", type: \"image/png\", purpose: \"maskable\" },\n ],\n });\n});\n\napp.get(\"/sw.js\", (c) => {\n c.header(\"Content-Type\", \"application/javascript\");\n return c.body(\n \"self.addEventListener('install', function(e){ self.skipWaiting(); });\" +\n \"self.addEventListener('activate', function(e){ self.clients.claim(); });\" +\n \"self.addEventListener('fetch', function(e){ /* passthrough — dados mudam o tempo todo */ });\"\n );\n});\n\n/* ================================ FRONTEND ================================ */\n\nconst HTML = `\n\n\n\n\nEscritório Virtual\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Escritório Virtual

Entrar na sua conta

Um escritório em mapa para a sua equipe

\n \n

Ainda não tem conta? Criar conta

\n\n\n\n

\n \n\n

\n \n

\n\n \n

\n\n

\n \n \n \n \n

\n\n\n\n\n\n

\n \n

\n\n

\n\n\n\n`;\n\napp.get(\"/\", (c) => c.html(HTML));\n\nexport default app.fetch;\n",[145],"ddb7efe8-dc84-4e0b-ade3-553af60b43b6","escritorio-melhorado.tsxnew-file-4730.ts","b3b7f924-926e-11f1-8659-1607ee4eb77e",70,["D",1786114028708],1,[153],"c2733ced-0c89-441b-990b-c0d0309a3123","banco.ts","8bed9f0a-8d02-11f1-bf54-1607ee4eb77e",16,["D",1785878137533],"/**\n * Persistencia no SQLite do Val Town.\n *\n * Uma tabela chave/documento por colecao: evita migracao de schema toda vez que\n * um campo novo aparece no produto, e o volume aqui e pequeno (uma equipe).\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABELAS = [\"usuarios\", \"cargos\", \"pessoas\", \"tarefas\", \"sessoes\", \"eventos\", \"tentativas\", \"config\"];\n\nlet pronto: Promise | null = null;\n\nexport function prepararBanco(): Promise {\n if (!pronto) {\n pronto = (async () => {\n for (const t of TABELAS) {\n await sqlite.execute(\n \"CREATE TABLE IF NOT EXISTS \" + t + \" (id TEXT PRIMARY KEY, doc TEXT NOT NULL)\",\n );\n }\n })();\n }\n return pronto;\n}\n\nexport async function salvar(tabela: string, doc: T): Promise {\n await prepararBanco();\n await sqlite.execute({\n sql: \"INSERT INTO \" + tabela +\n \" (id, doc) VALUES (?, ?) ON CONFLICT(id) DO UPDATE SET doc = excluded.doc\",\n args: [String(doc.id), JSON.stringify(doc)],\n });\n return doc;\n}\n\nexport async function obter(tabela: string, id: string): Promise {\n await prepararBanco();\n const r = await sqlite.execute({\n sql: \"SELECT doc FROM \" + tabela + \" WHERE id = ?\",\n args: [String(id)],\n });\n if (!r.rows.length) return null;\n return JSON.parse(String(r.rows[0].doc)) as T;\n}\n\nexport async function listar(tabela: string): Promise {\n await prepararBanco();\n const r = await sqlite.execute(\"SELECT doc FROM \" + tabela);\n return r.rows.map((linha) => JSON.parse(String(linha.doc)) as T);\n}\n\nexport async function remover(tabela: string, id: string): Promise {\n await prepararBanco();\n await sqlite.execute({\n sql: \"DELETE FROM \" + tabela + \" WHERE id = ?\",\n args: [String(id)],\n });\n}\n\n/* -------------------------- limite de tentativas --------------------------\n * Em hospedagem serverless cada requisicao pode cair num isolado diferente,\n * entao um contador em memoria nao serve de nada: o atacante so precisa\n * insistir ate pegar um isolado novo. Por isso o contador vive no banco.\n */\n\ninterface Tentativa {\n id: string;\n falhas: number;\n inicio: number;\n bloqueadoAte: number;\n}\n\nconst JANELA_MS = 15 * 60 * 1000;\nconst BLOQUEIO_MS = 15 * 60 * 1000;\nconst MAX_FALHAS = 5;\n\nexport async function segundosBloqueado(chave: string): Promise {\n const r = await obter(\"tentativas\", chave);\n if (!r) return 0;\n const agora = Date.now();\n if (r.bloqueadoAte > agora) return Math.ceil((r.bloqueadoAte - agora) / 1000);\n return 0;\n}\n\nexport async function registrarFalha(chave: string): Promise {\n const agora = Date.now();\n let r = await obter(\"tentativas\", chave);\n if (!r || agora - r.inicio > JANELA_MS) {\n r = { id: chave, falhas: 0, inicio: agora, bloqueadoAte: 0 };\n }\n r.falhas += 1;\n if (r.falhas >= MAX_FALHAS) r.bloqueadoAte = agora + BLOQUEIO_MS;\n await salvar(\"tentativas\", r);\n}\n\nexport async function limparTentativas(chave: string): Promise {\n await remover(\"tentativas\", chave);\n}\n\n/**\n * Limpeza oportunista: sessoes vencidas e contadores de tentativa antigos\n * nunca seriam apagados sozinhos (so eram removidos ao serem consultados).\n * Chamada a cada login bem-sucedido — barata, pois o volume e pequeno.\n */\nexport async function limparExpirados(): Promise {\n const agora = Date.now();\n for (const s of await listar<{ id: string; expiraEm: number }>(\"sessoes\")) {\n if (s.expiraEm && s.expiraEm < agora) await remover(\"sessoes\", s.id);\n }\n for (const t of await listar(\"tentativas\")) {\n if (t.bloqueadoAte < agora && agora - t.inicio > JANELA_MS) await remover(\"tentativas\", t.id);\n }\n}\n",[160],"pulls","branches","forks","envVars",{"_173":61,"_175":61},"connections",{"_173":61,"_174":61},"count","unfilledCount","emptyCount",{"_41":159,"_32":160,"_30":161,"_136":-5,"_39":40,"_38":162,"_138":25,"_36":190,"_13":137,"_33":140,"_34":164,"_24":47,"_142":-5,"_181":191,"_27":192},{"_41":152,"_32":153,"_30":154,"_136":-5,"_39":40,"_38":155,"_138":47,"_36":187,"_13":157,"_33":140,"_34":108,"_24":47,"_142":-5,"_181":188,"_27":189},{"_41":144,"_32":145,"_30":56,"_136":-5,"_39":40,"_38":146,"_138":47,"_36":184,"_13":148,"_33":149,"_34":150,"_24":47,"_142":-5,"_181":185,"_27":186},{"_41":133,"_32":134,"_30":135,"_136":-5,"_39":40,"_38":137,"_138":25,"_36":180,"_13":61,"_33":140,"_34":141,"_24":47,"_142":-5,"_181":182,"_27":183},["D",1785517729524],"children",[],[134],["D",1786137770006],[],[145],["D",1786114028708],[],[153],["D",1785878137533],[],[160],["D",1785517600367],["D",1789516253896],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":47},{"_13":87,"_32":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_126":231,"_232":233,"_234":235,"_236":47,"_237":47,"_238":47,"_239":25,"_240":-5,"_241":-7,"_242":-7,"_243":61,"_244":47,"_245":47,"_246":-5,"_247":47,"_248":47,"_249":47,"_250":-5},"ENV",{"_202":203,"_204":205,"_206":88,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v105