Escritório Virtual

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_184":185,"_186":187},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",121,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","32a164ae-8d02-11f1-92a9-1607ee4eb77e","name","fileType","http","content","/**\n * ESCRITÓRIO VIRTUAL — v4: escritório em mapa 2D top-down com avatares que andam\n * (estilo Gather), editor de planta baixa com biblioteca de móveis (arrastar e soltar),\n * móveis interativos abrem chamada de vídeo (Jitsi) por proximidade.\n * Visual e código originais — nenhum asset ou trecho copiado de terceiros.\n */\n\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./banco.ts\";\nimport * as S from \"./seguranca.ts\";\n\nconst app = new Hono();\n\n/* ============================== CONSTANTES DO MAPA ============================== */\n\nconst GRID_COLS = 16;\nconst GRID_ROWS = 10;\nconst TIPOS_MOVEL = [\n \"mesa\", \"cadeira\", \"sofa\", \"planta\", \"estante\", \"quadro\",\n \"tapete\", \"mesa_reuniao\", \"lampada\", \"cafe\",\n \"parede\", \"tapete_azul\", \"tapete_verde\", \"tapete_roxo\", \"tapete_amarelo\",\n] as const;\ntype TipoMovel = typeof TIPOS_MOVEL[number];\n\n/* ============================== AUTH & DOMÍNIO ============================== */\n\ninterface Usuario {\n id: string;\n nome: string;\n email: string;\n senhaHash: string;\n cargo: \"gestor\" | \"membro\";\n cor: string;\n criadoEm: number;\n x: number;\n y: number;\n direcao: \"baixo\" | \"cima\" | \"esquerda\" | \"direita\";\n status: \"disponivel\" | \"reuniao\" | \"foco\" | \"ausente\";\n emChamada: string | null;\n presencaEm: number;\n}\n\ninterface Sessao {\n id: string;\n usuarioId: string;\n expiraEm: number;\n}\n\ninterface Tarefa {\n id: string;\n titulo: string;\n descricao: string;\n status: \"pendente\" | \"andamento\" | \"concluida\";\n atribuidoA: string | null;\n criadoPor: string;\n criadoEm: number;\n prazo: string | null;\n}\n\ninterface MovelPlanta {\n id: string;\n tipo: TipoMovel;\n x: number;\n y: number;\n}\n\ninterface Planta {\n id: string;\n moveis: MovelPlanta[];\n atualizadoEm: number;\n}\n\nconst CORES = [\"#4F46E5\", \"#0EA5E9\", \"#10B981\", \"#F59E0B\", \"#EF4444\", \"#EC4899\", \"#7C3AED\", \"#14B8A6\"];\nconst SESSAO_MS = 7 * 24 * 60 * 60 * 1000;\nconst PRESENCA_TIMEOUT_MS = 5 * 60 * 1000;\n\nasync function usuarioPorEmail(email: string): Promise {\n const todos = await db.listar(\"usuarios\");\n return todos.find((u) => u.email === email) ?? null;\n}\n\nasync function usuarioAtual(c: any): Promise {\n const auth = c.req.header(\"authorization\") || \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (!token) return null;\n const hash = await S.hashToken(token);\n const sessao = await db.obter(\"sessoes\", hash);\n if (!sessao || sessao.expiraEm < Date.now()) return null;\n return await db.obter(\"usuarios\", sessao.usuarioId);\n}\n\nfunction usuarioPublico(u: Usuario) {\n const online = Date.now() - (u.presencaEm || 0) < PRESENCA_TIMEOUT_MS;\n return {\n id: u.id,\n nome: u.nome,\n email: u.email,\n cargo: u.cargo,\n cor: u.cor,\n criadoEm: u.criadoEm,\n x: online ? u.x : null,\n y: online ? u.y : null,\n direcao: online ? u.direcao : \"baixo\",\n status: online ? u.status : \"ausente\",\n emChamada: online ? u.emChamada : null,\n online,\n };\n}\n\nfunction celulaLivre(x: number, y: number): boolean {\n return x >= 0 && y >= 0 && x < GRID_COLS && y < GRID_ROWS;\n}\n\n/* ================================ API ROTAS ================================ */\n\napp.post(\"/api/registrar\", async (c) => {\n try {\n const body = await c.req.json();\n const nome = S.texto(body.nome, \"nome\", { min: 2, max: 80 });\n const email = S.email(body.email);\n const senha = S.senhaForte(body.senha);\n if (await usuarioPorEmail(email)) throw S.ERRO(\"Este e-mail já está cadastrado.\", 409);\n\n const existentes = await db.listar(\"usuarios\");\n const usuario: Usuario = {\n id: S.idAleatorio(\"usr\"),\n nome,\n email,\n senhaHash: await S.hashSenha(senha),\n cargo: existentes.length === 0 ? \"gestor\" : \"membro\",\n cor: CORES[existentes.length % CORES.length],\n criadoEm: Date.now(),\n x: 2 + (existentes.length % 5),\n y: 2 + Math.floor(existentes.length / 5),\n direcao: \"baixo\",\n status: \"disponivel\",\n emChamada: null,\n presencaEm: Date.now(),\n };\n await db.salvar(\"usuarios\", usuario);\n\n const token = S.novoToken();\n await db.salvar(\"sessoes\", { id: await S.hashToken(token), usuarioId: usuario.id, expiraEm: Date.now() + SESSAO_MS });\n return c.json({ token, usuario: usuarioPublico(usuario) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao registrar.\" }, 500);\n }\n});\n\napp.post(\"/api/login\", async (c) => {\n try {\n const body = await c.req.json();\n const email = S.email(body.email);\n const senha = S.texto(body.senha, \"senha\", { min: 1, max: 200 });\n\n const chaveBloqueio = \"login:\" + email;\n const bloqueado = await db.segundosBloqueado(chaveBloqueio);\n if (bloqueado > 0) throw S.ERRO(`Muitas tentativas. Tente novamente em ${bloqueado}s.`, 429);\n\n const usuario = await usuarioPorEmail(email);\n const ok = usuario ? await S.conferirSenha(senha, usuario.senhaHash) : false;\n if (!usuario || !ok) {\n await db.registrarFalha(chaveBloqueio);\n throw S.ERRO(\"E-mail ou senha inválidos.\", 401);\n }\n await db.limparTentativas(chaveBloqueio);\n await db.limparExpirados();\n\n const token = S.novoToken();\n await db.salvar(\"sessoes\", { id: await S.hashToken(token), usuarioId: usuario.id, expiraEm: Date.now() + SESSAO_MS });\n return c.json({ token, usuario: usuarioPublico(usuario) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao entrar.\" }, 500);\n }\n});\n\napp.post(\"/api/logout\", async (c) => {\n const auth = c.req.header(\"authorization\") || \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (token) await db.remover(\"sessoes\", await S.hashToken(token));\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n return c.json({ usuario: usuarioPublico(u) });\n});\n\napp.get(\"/api/usuarios\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const todos = await db.listar(\"usuarios\");\n return c.json({ usuarios: todos.map(usuarioPublico) });\n});\n\napp.post(\"/api/presenca\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const body = await c.req.json();\n\n if (body.x !== undefined && body.y !== undefined) {\n const x = Math.trunc(Number(body.x));\n const y = Math.trunc(Number(body.y));\n if (celulaLivre(x, y)) {\n u.x = x;\n u.y = y;\n }\n }\n if (body.direcao) {\n u.direcao = S.escolha(body.direcao, \"direcao\", [\"baixo\", \"cima\", \"esquerda\", \"direita\"], u.direcao);\n }\n if (body.status) {\n u.status = S.escolha(body.status, \"status\", [\"disponivel\", \"reuniao\", \"foco\", \"ausente\"], u.status);\n }\n if (body.emChamada !== undefined) {\n u.emChamada = body.emChamada ? S.texto(body.emChamada, \"emChamada\", { max: 60 }) : null;\n }\n u.presencaEm = Date.now();\n await db.salvar(\"usuarios\", u);\n return c.json({ usuario: usuarioPublico(u) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao atualizar presença.\" }, 500);\n }\n});\n\nfunction plantaPadrao(): MovelPlanta[] {\n const itens: MovelPlanta[] = [];\n let n = 0;\n const add = (tipo: TipoMovel, x: number, y: number) => itens.push({ id: \"seed_\" + (n++), tipo, x, y });\n\n // Zona 1 — Espaço aberto (mesas de trabalho), canto superior esquerdo\n for (let x = 1; x <= 6; x++) for (let y = 1; y <= 3; y++) add(\"tapete_azul\", x, y);\n add(\"mesa\", 2, 1); add(\"cadeira\", 2, 2);\n add(\"mesa\", 4, 1); add(\"cadeira\", 4, 2);\n add(\"mesa\", 6, 1); add(\"cadeira\", 6, 2);\n add(\"estante\", 1, 3); add(\"planta\", 6, 3);\n add(\"quadro\", 3, 0); add(\"quadro\", 5, 0);\n\n // Zona 2 — Sala de reunião, canto superior direito\n for (let x = 9; x <= 14; x++) for (let y = 1; y <= 3; y++) add(\"tapete_roxo\", x, y);\n add(\"mesa_reuniao\", 11, 2);\n add(\"cadeira\", 10, 2); add(\"cadeira\", 12, 2); add(\"cadeira\", 11, 1); add(\"cadeira\", 11, 3);\n add(\"quadro\", 11, 0);\n\n // Zona 3 — Lounge com sofás, canto inferior esquerdo\n for (let x = 1; x <= 6; x++) for (let y = 6; y <= 8; y++) add(\"tapete_verde\", x, y);\n add(\"sofa\", 2, 7); add(\"sofa\", 5, 7);\n add(\"planta\", 1, 6); add(\"planta\", 6, 6); add(\"planta\", 3, 8); add(\"estante\", 1, 8);\n\n // Zona 4 — Cantinho do café, canto inferior direito\n for (let x = 9; x <= 14; x++) for (let y = 6; y <= 8; y++) add(\"tapete_amarelo\", x, y);\n add(\"cafe\", 11, 7);\n add(\"mesa\", 9, 7); add(\"cadeira\", 9, 8);\n add(\"mesa\", 13, 7); add(\"cadeira\", 13, 8);\n add(\"planta\", 14, 6);\n\n // Corredor central com um pouco de decoração\n add(\"lampada\", 8, 4); add(\"planta\", 8, 5);\n\n // Paredes divisórias (com vãos no corredor central em cruz)\n for (const y of [0, 1, 2, 3, 6, 7, 8, 9]) add(\"parede\", 7, y);\n for (const x of [0, 1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 12, 13, 14, 15]) add(\"parede\", x, 4);\n\n return itens;\n}\n\napp.get(\"/api/mapa\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n let planta = await db.obter(\"config\", \"planta\");\n if (!planta) {\n planta = { id: \"planta\", moveis: plantaPadrao(), atualizadoEm: Date.now() };\n await db.salvar(\"config\", planta);\n }\n return c.json({ moveis: planta.moveis, cols: GRID_COLS, rows: GRID_ROWS });\n});\n\napp.post(\"/api/mapa\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n if (u.cargo !== \"gestor\") throw S.ERRO(\"Só o(a) gestor(a) pode editar a planta.\", 403);\n const body = await c.req.json();\n if (!Array.isArray(body.moveis)) throw S.ERRO(\"Lista de móveis inválida.\", 400);\n if (body.moveis.length > 300) throw S.ERRO(\"Muitos móveis (máximo 300).\", 400);\n\n const moveis: MovelPlanta[] = body.moveis.map((m: any) => {\n const tipo = S.escolha(m.tipo, \"tipo\", TIPOS_MOVEL as unknown as string[], \"mesa\") as TipoMovel;\n const x = Math.trunc(Number(m.x));\n const y = Math.trunc(Number(m.y));\n if (!celulaLivre(x, y)) throw S.ERRO(\"Posição de móvel fora do mapa.\", 400);\n const id = m.id && typeof m.id === \"string\" ? m.id.slice(0, 40) : S.idAleatorio(\"mv\");\n return { id, tipo, x, y };\n });\n\n const planta: Planta = { id: \"planta\", moveis, atualizadoEm: Date.now() };\n await db.salvar(\"config\", planta);\n return c.json({ moveis: planta.moveis });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao salvar planta.\" }, 500);\n }\n});\n\napp.get(\"/api/tarefas\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const tarefas = await db.listar(\"tarefas\");\n tarefas.sort((a, b) => b.criadoEm - a.criadoEm);\n return c.json({ tarefas });\n});\n\napp.post(\"/api/tarefas\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const body = await c.req.json();\n const titulo = S.texto(body.titulo, \"titulo\", { min: 2, max: 140 });\n const descricao = S.texto(body.descricao, \"descricao\", { min: 0, max: 2000, obrigatorio: false });\n const prazo = body.prazo ? S.texto(body.prazo, \"prazo\", { max: 40 }) : null;\n const atribuidoA = body.atribuidoA ? S.texto(body.atribuidoA, \"atribuidoA\", { max: 60 }) : null;\n const tarefa: Tarefa = {\n id: S.idAleatorio(\"tsk\"),\n titulo,\n descricao,\n status: \"pendente\",\n atribuidoA,\n criadoPor: u.id,\n criadoEm: Date.now(),\n prazo,\n };\n await db.salvar(\"tarefas\", tarefa);\n return c.json({ tarefa });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao criar tarefa.\" }, 500);\n }\n});\n\napp.patch(\"/api/tarefas/:id\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const id = c.req.param(\"id\");\n const tarefa = await db.obter(\"tarefas\", id);\n if (!tarefa) return c.json({ erro: \"Tarefa não encontrada.\" }, 404);\n const body = await c.req.json();\n if (body.status) tarefa.status = S.escolha(body.status, \"status\", [\"pendente\", \"andamento\", \"concluida\"], tarefa.status);\n if (body.titulo) tarefa.titulo = S.texto(body.titulo, \"titulo\", { min: 2, max: 140 });\n if (body.descricao !== undefined) tarefa.descricao = S.texto(body.descricao, \"descricao\", { max: 2000, obrigatorio: false });\n if (body.atribuidoA !== undefined) tarefa.atribuidoA = body.atribuidoA || null;\n if (body.prazo !== undefined) tarefa.prazo = body.prazo || null;\n await db.salvar(\"tarefas\", tarefa);\n return c.json({ tarefa });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao atualizar tarefa.\" }, 500);\n }\n});\n\napp.delete(\"/api/tarefas/:id\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n await db.remover(\"tarefas\", c.req.param(\"id\"));\n return c.json({ ok: true });\n});\n\n/* ================================ PWA ================================ */\n\nconst ICON_192 = \"data:image/png;base64,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\";\nconst ICON_180 = \"data:image/png;base64,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\";\nconst ICON_32 = \"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgBAMAAACBVGfHAAAAMFBMVEVmQeplP+llP+llQelZQ+dsPutlQOlzPOxfQei8qPb39f78+//Ow/mTdvByUuuijPKT51vbAAAABHRSTlMFa880rRmNXQAAAAlwSFlzAAALEwAACxMBAJqcGAAAAQRJREFUKM9VkTFKRDEQhv8FsV4WsV8QT/KK1MJsukWLFywsXEHmAosE0e1fofbZG7heQLG1sNpKW0+w4mQS30umm4/vT2YSAJNGy3jvp5A6SP1S+nN3BoyaQbhxboy9UnDu9D+RBckcVYI7QS3MCLXQZjAICRRCAubz/Xe13X23lCLmIoTQdd0DZcO/hbB+EfJBCpb3IqyfBTwmYO4EbDavMUMWcsVtCD8KnsgKMCUgRuN9EbEMGbI4lBlx6P5am0E/GCuQLWT0+Xb3ZROIazqKxSkSt2xlcWuTocJMBVagAkXhWsFxL2h/hcNe0MQC+5XAlxhVAo8hmfhyWVjE758MwhT4A4D13JspStHAAAAAAElFTkSuQmCC\";\n\napp.get(\"/manifest.json\", (c) => {\n return c.json({\n name: \"Escritório Virtual\",\n short_name: \"Escritório\",\n start_url: \"/\",\n display: \"standalone\",\n background_color: \"#0B0B0F\",\n theme_color: \"#4F46E5\",\n orientation: \"portrait-primary\",\n icons: [\n { src: ICON_192, sizes: \"192x192\", type: \"image/png\", purpose: \"any\" },\n { src: ICON_192, sizes: \"192x192\", type: \"image/png\", purpose: \"maskable\" },\n ],\n });\n});\n\napp.get(\"/sw.js\", (c) => {\n c.header(\"Content-Type\", \"application/javascript\");\n return c.body(\n \"self.addEventListener('install', function(e){ self.skipWaiting(); });\" +\n \"self.addEventListener('activate', function(e){ self.clients.claim(); });\" +\n \"self.addEventListener('fetch', function(e){ /* passthrough — dados mudam o tempo todo */ });\"\n );\n});\n\n/* ================================ FRONTEND ================================ */\n\nconst HTML = `\n\n\n\n\nEscritório Virtual\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Carregando seu escritório…

\n\n

Escritório Virtual

Entrar na sua conta

Um escritório em mapa para a sua equipe

\n \n

Ainda não tem conta? Criar conta

\n\n

Escritório Virtual

Criar sua conta

O primeiro usuário cadastrado vira gestor da equipe

\n \n

Já tem conta? Entrar

\n\n

\n \n\n

\n \n

\n\n \n

\n\n

\n \n \n \n \n

\n\n\n\n\n\n

\n \n

\n\n

\n\n\n\n`;\n\napp.get(\"/\", (c) => c.html(HTML));\n\nexport default app.fetch;\n","/**\n * ESCRITÓRIO VIRTUAL — v4: escritório em mapa 2D top-down com avatares que andam\n * (estilo Gather), editor de planta baixa com biblioteca de móveis (arrastar e soltar),\n * móveis interativos abrem chamada de vídeo (Jitsi) por proximidade.\n * Visual e código originais — nenhum asset ou trecho copiado de terceiros.\n */\n\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./banco.ts\";\nimport * as S from \"./seguranca.ts\";\n\nconst app = new Hono();\n\n/* ============================== CONSTANTES DO MAPA ============================== */\n\nconst GRID_COLS = 16;\nconst GRID_ROWS = 10;\nconst TIPOS_MOVEL = [\n \"mesa\", \"cadeira\", \"sofa\", \"planta\", \"estante\", \"quadro\",\n \"tapete\", \"mesa_reuniao\", \"lampada\", \"cafe\",\n \"parede\", \"tapete_azul\", \"tapete_verde\", \"tapete_roxo\", \"tapete_amarelo\",\n] as const;\ntype TipoMovel = typeof TIPOS_MOVEL[number];\n\n/* ============================== AUTH & DOMÍNIO ============================== */\n\ninterface Usuario {\n id: string;\n nome: string;\n email: string;\n senhaHash: string;\n cargo: \"gestor\" | \"membro\";\n cor: string;\n criadoEm: number;\n x: number;\n y: number;\n direcao: \"baixo\" | \"cima\" | \"esquerda\" | \"direita\";\n status: \"disponivel\" | \"reuniao\" | \"foco\" | \"ausente\";\n emChamada: string | null;\n presencaEm: number;\n}\n\ninterface Sessao {\n id: string;\n usuarioId: string;\n expiraEm: number;\n}\n\ninterface Tarefa {\n id: string;\n titulo: string;\n descricao: string;\n status: \"pendente\" | \"andamento\" | \"concluida\";\n atribuidoA: string | null;\n criadoPor: string;\n criadoEm: number;\n prazo: string | null;\n}\n\ninterface MovelPlanta {\n id: string;\n tipo: TipoMovel;\n x: number;\n y: number;\n}\n\ninterface Planta {\n id: string;\n moveis: MovelPlanta[];\n atualizadoEm: number;\n}\n\nconst CORES = [\"#4F46E5\", \"#0EA5E9\", \"#10B981\", \"#F59E0B\", \"#EF4444\", \"#EC4899\", \"#7C3AED\", \"#14B8A6\"];\nconst SESSAO_MS = 7 * 24 * 60 * 60 * 1000;\nconst PRESENCA_TIMEOUT_MS = 5 * 60 * 1000;\n\nasync function usuarioPorEmail(email: string): Promise {\n const todos = await db.listar(\"usuarios\");\n return todos.find((u) => u.email === email) ?? null;\n}\n\nasync function usuarioAtual(c: any): Promise {\n const auth = c.req.header(\"authorization\") || \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (!token) return null;\n const hash = await S.hashToken(token);\n const sessao = await db.obter(\"sessoes\", hash);\n if (!sessao || sessao.expiraEm < Date.now()) return null;\n return await db.obter(\"usuarios\", sessao.usuarioId);\n}\n\nfunction usuarioPublico(u: Usuario) {\n const online = Date.now() - (u.presencaEm || 0) < PRESENCA_TIMEOUT_MS;\n return {\n id: u.id,\n nome: u.nome,\n email: u.email,\n cargo: u.cargo,\n cor: u.cor,\n criadoEm: u.criadoEm,\n x: online ? u.x : null,\n y: online ? u.y : null,\n direcao: online ? u.direcao : \"baixo\",\n status: online ? u.status : \"ausente\",\n emChamada: online ? u.emChamada : null,\n online,\n };\n}\n\nfunction celulaLivre(x: number, y: number): boolean {\n return x >= 0 && y >= 0 && x < GRID_COLS && y < GRID_ROWS;\n}\n\n/* ================================ API ROTAS ================================ */\n\napp.post(\"/api/registrar\", async (c) => {\n try {\n const body = await c.req.json();\n const nome = S.texto(body.nome, \"nome\", { min: 2, max: 80 });\n const email = S.email(body.email);\n const senha = S.senhaForte(body.senha);\n if (await usuarioPorEmail(email)) throw S.ERRO(\"Este e-mail já está cadastrado.\", 409);\n\n const existentes = await db.listar(\"usuarios\");\n const usuario: Usuario = {\n id: S.idAleatorio(\"usr\"),\n nome,\n email,\n senhaHash: await S.hashSenha(senha),\n cargo: existentes.length === 0 ? \"gestor\" : \"membro\",\n cor: CORES[existentes.length % CORES.length],\n criadoEm: Date.now(),\n x: 2 + (existentes.length % 5),\n y: 2 + Math.floor(existentes.length / 5),\n direcao: \"baixo\",\n status: \"disponivel\",\n emChamada: null,\n presencaEm: Date.now(),\n };\n await db.salvar(\"usuarios\", usuario);\n\n const token = S.novoToken();\n await db.salvar(\"sessoes\", { id: await S.hashToken(token), usuarioId: usuario.id, expiraEm: Date.now() + SESSAO_MS });\n return c.json({ token, usuario: usuarioPublico(usuario) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao registrar.\" }, 500);\n }\n});\n\napp.post(\"/api/login\", async (c) => {\n try {\n const body = await c.req.json();\n const email = S.email(body.email);\n const senha = S.texto(body.senha, \"senha\", { min: 1, max: 200 });\n\n const chaveBloqueio = \"login:\" + email;\n const bloqueado = await db.segundosBloqueado(chaveBloqueio);\n if (bloqueado > 0) throw S.ERRO(`Muitas tentativas. Tente novamente em ${bloqueado}s.`, 429);\n\n const usuario = await usuarioPorEmail(email);\n const ok = usuario ? await S.conferirSenha(senha, usuario.senhaHash) : false;\n if (!usuario || !ok) {\n await db.registrarFalha(chaveBloqueio);\n throw S.ERRO(\"E-mail ou senha inválidos.\", 401);\n }\n await db.limparTentativas(chaveBloqueio);\n await db.limparExpirados();\n\n const token = S.novoToken();\n await db.salvar(\"sessoes\", { id: await S.hashToken(token), usuarioId: usuario.id, expiraEm: Date.now() + SESSAO_MS });\n return c.json({ token, usuario: usuarioPublico(usuario) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao entrar.\" }, 500);\n }\n});\n\napp.post(\"/api/logout\", async (c) => {\n const auth = c.req.header(\"authorization\") || \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (token) await db.remover(\"sessoes\", await S.hashToken(token));\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n return c.json({ usuario: usuarioPublico(u) });\n});\n\napp.get(\"/api/usuarios\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const todos = await db.listar(\"usuarios\");\n return c.json({ usuarios: todos.map(usuarioPublico) });\n});\n\napp.post(\"/api/presenca\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const body = await c.req.json();\n\n if (body.x !== undefined && body.y !== undefined) {\n const x = Math.trunc(Number(body.x));\n const y = Math.trunc(Number(body.y));\n if (celulaLivre(x, y)) {\n u.x = x;\n u.y = y;\n }\n }\n if (body.direcao) {\n u.direcao = S.escolha(body.direcao, \"direcao\", [\"baixo\", \"cima\", \"esquerda\", \"direita\"], u.direcao);\n }\n if (body.status) {\n u.status = S.escolha(body.status, \"status\", [\"disponivel\", \"reuniao\", \"foco\", \"ausente\"], u.status);\n }\n if (body.emChamada !== undefined) {\n u.emChamada = body.emChamada ? S.texto(body.emChamada, \"emChamada\", { max: 60 }) : null;\n }\n u.presencaEm = Date.now();\n await db.salvar(\"usuarios\", u);\n return c.json({ usuario: usuarioPublico(u) });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao atualizar presença.\" }, 500);\n }\n});\n\nfunction plantaPadrao(): MovelPlanta[] {\n const itens: MovelPlanta[] = [];\n let n = 0;\n const add = (tipo: TipoMovel, x: number, y: number) => itens.push({ id: \"seed_\" + (n++), tipo, x, y });\n\n // Zona 1 — Espaço aberto (mesas de trabalho), canto superior esquerdo\n for (let x = 1; x <= 6; x++) for (let y = 1; y <= 3; y++) add(\"tapete_azul\", x, y);\n add(\"mesa\", 2, 1); add(\"cadeira\", 2, 2);\n add(\"mesa\", 4, 1); add(\"cadeira\", 4, 2);\n add(\"mesa\", 6, 1); add(\"cadeira\", 6, 2);\n add(\"estante\", 1, 3); add(\"planta\", 6, 3);\n add(\"quadro\", 3, 0); add(\"quadro\", 5, 0);\n\n // Zona 2 — Sala de reunião, canto superior direito\n for (let x = 9; x <= 14; x++) for (let y = 1; y <= 3; y++) add(\"tapete_roxo\", x, y);\n add(\"mesa_reuniao\", 11, 2);\n add(\"cadeira\", 10, 2); add(\"cadeira\", 12, 2); add(\"cadeira\", 11, 1); add(\"cadeira\", 11, 3);\n add(\"quadro\", 11, 0);\n\n // Zona 3 — Lounge com sofás, canto inferior esquerdo\n for (let x = 1; x <= 6; x++) for (let y = 6; y <= 8; y++) add(\"tapete_verde\", x, y);\n add(\"sofa\", 2, 7); add(\"sofa\", 5, 7);\n add(\"planta\", 1, 6); add(\"planta\", 6, 6); add(\"planta\", 3, 8); add(\"estante\", 1, 8);\n\n // Zona 4 — Cantinho do café, canto inferior direito\n for (let x = 9; x <= 14; x++) for (let y = 6; y <= 8; y++) add(\"tapete_amarelo\", x, y);\n add(\"cafe\", 11, 7);\n add(\"mesa\", 9, 7); add(\"cadeira\", 9, 8);\n add(\"mesa\", 13, 7); add(\"cadeira\", 13, 8);\n add(\"planta\", 14, 6);\n\n // Corredor central com um pouco de decoração\n add(\"lampada\", 8, 4); add(\"planta\", 8, 5);\n\n // Paredes divisórias (com vãos no corredor central em cruz)\n for (const y of [0, 1, 2, 3, 6, 7, 8, 9]) add(\"parede\", 7, y);\n for (const x of [0, 1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 12, 13, 14, 15]) add(\"parede\", x, 4);\n\n return itens;\n}\n\napp.get(\"/api/mapa\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n let planta = await db.obter(\"config\", \"planta\");\n if (!planta) {\n planta = { id: \"planta\", moveis: plantaPadrao(), atualizadoEm: Date.now() };\n await db.salvar(\"config\", planta);\n }\n return c.json({ moveis: planta.moveis, cols: GRID_COLS, rows: GRID_ROWS });\n});\n\napp.post(\"/api/mapa\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n if (u.cargo !== \"gestor\") throw S.ERRO(\"Só o(a) gestor(a) pode editar a planta.\", 403);\n const body = await c.req.json();\n if (!Array.isArray(body.moveis)) throw S.ERRO(\"Lista de móveis inválida.\", 400);\n if (body.moveis.length > 300) throw S.ERRO(\"Muitos móveis (máximo 300).\", 400);\n\n const moveis: MovelPlanta[] = body.moveis.map((m: any) => {\n const tipo = S.escolha(m.tipo, \"tipo\", TIPOS_MOVEL as unknown as string[], \"mesa\") as TipoMovel;\n const x = Math.trunc(Number(m.x));\n const y = Math.trunc(Number(m.y));\n if (!celulaLivre(x, y)) throw S.ERRO(\"Posição de móvel fora do mapa.\", 400);\n const id = m.id && typeof m.id === \"string\" ? m.id.slice(0, 40) : S.idAleatorio(\"mv\");\n return { id, tipo, x, y };\n });\n\n const planta: Planta = { id: \"planta\", moveis, atualizadoEm: Date.now() };\n await db.salvar(\"config\", planta);\n return c.json({ moveis: planta.moveis });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao salvar planta.\" }, 500);\n }\n});\n\napp.get(\"/api/tarefas\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const tarefas = await db.listar(\"tarefas\");\n tarefas.sort((a, b) => b.criadoEm - a.criadoEm);\n return c.json({ tarefas });\n});\n\napp.post(\"/api/tarefas\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const body = await c.req.json();\n const titulo = S.texto(body.titulo, \"titulo\", { min: 2, max: 140 });\n const descricao = S.texto(body.descricao, \"descricao\", { min: 0, max: 2000, obrigatorio: false });\n const prazo = body.prazo ? S.texto(body.prazo, \"prazo\", { max: 40 }) : null;\n const atribuidoA = body.atribuidoA ? S.texto(body.atribuidoA, \"atribuidoA\", { max: 60 }) : null;\n const tarefa: Tarefa = {\n id: S.idAleatorio(\"tsk\"),\n titulo,\n descricao,\n status: \"pendente\",\n atribuidoA,\n criadoPor: u.id,\n criadoEm: Date.now(),\n prazo,\n };\n await db.salvar(\"tarefas\", tarefa);\n return c.json({ tarefa });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao criar tarefa.\" }, 500);\n }\n});\n\napp.patch(\"/api/tarefas/:id\", async (c) => {\n try {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n const id = c.req.param(\"id\");\n const tarefa = await db.obter(\"tarefas\", id);\n if (!tarefa) return c.json({ erro: \"Tarefa não encontrada.\" }, 404);\n const body = await c.req.json();\n if (body.status) tarefa.status = S.escolha(body.status, \"status\", [\"pendente\", \"andamento\", \"concluida\"], tarefa.status);\n if (body.titulo) tarefa.titulo = S.texto(body.titulo, \"titulo\", { min: 2, max: 140 });\n if (body.descricao !== undefined) tarefa.descricao = S.texto(body.descricao, \"descricao\", { max: 2000, obrigatorio: false });\n if (body.atribuidoA !== undefined) tarefa.atribuidoA = body.atribuidoA || null;\n if (body.prazo !== undefined) tarefa.prazo = body.prazo || null;\n await db.salvar(\"tarefas\", tarefa);\n return c.json({ tarefa });\n } catch (err) {\n if (err instanceof S.ErroPublico) return c.json({ erro: err.message }, err.status as any);\n return c.json({ erro: \"Erro ao atualizar tarefa.\" }, 500);\n }\n});\n\napp.delete(\"/api/tarefas/:id\", async (c) => {\n const u = await usuarioAtual(c);\n if (!u) return c.json({ erro: \"Não autenticado.\" }, 401);\n await db.remover(\"tarefas\", c.req.param(\"id\"));\n return c.json({ ok: true });\n});\n\n/* ================================ PWA ================================ */\n\nconst ICON_192 = \"data:image/png;base64,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\";\nconst ICON_180 = \"data:image/png;base64,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\";\nconst ICON_32 = \"data:image/png;base64,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\";\n\napp.get(\"/manifest.json\", (c) => {\n return c.json({\n name: \"Escritório Virtual\",\n short_name: \"Escritório\",\n start_url: \"/\",\n display: \"standalone\",\n background_color: \"#0B0B0F\",\n theme_color: \"#4F46E5\",\n orientation: \"portrait-primary\",\n icons: [\n { src: ICON_192, sizes: \"192x192\", type: \"image/png\", purpose: \"any\" },\n { src: ICON_192, sizes: \"192x192\", type: \"image/png\", purpose: \"maskable\" },\n ],\n });\n});\n\napp.get(\"/sw.js\", (c) => {\n c.header(\"Content-Type\", \"application/javascript\");\n return c.body(\n \"self.addEventListener('install', function(e){ self.skipWaiting(); });\" +\n \"self.addEventListener('activate', function(e){ self.clients.claim(); });\" +\n \"self.addEventListener('fetch', function(e){ /* passthrough — dados mudam o tempo todo */ });\"\n );\n});\n\n/* ================================ FRONTEND ================================ */\n\nconst HTML = `\n\n\n\n\nEscritório Virtual\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Carregando seu escritório…

\n\n

Escritório Virtual

Entrar na sua conta

Um escritório em mapa para a sua equipe

\n \n

Ainda não tem conta? Criar conta

\n\n

Escritório Virtual

Criar sua conta

O primeiro usuário cadastrado vira gestor da equipe

\n \n

Já tem conta? Entrar

\n\n

\n \n\n

\n \n

\n\n \n

\n\n

\n \n \n \n \n

\n\n\n\n\n\n

\n \n

\n\n

\n\n\n\n`;\n\napp.get(\"/\", (c) => c.html(HTML));\n\nexport default app.fetch;\n","createdAt",["D",1786478207253],"branchVersion","branchId","1babfc65-45cf-4fe5-80e1-b6a58708764e","id","3598e464-33ff-46d8-9a0d-a0cbf68518a5","escritorio-virtual",["D",1785517600367],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Escritorio virtual para equipes em home office","imageUrl","779cff7d-e571-4cc4-9762-23848b9bd8be","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8661-e505-7389-9ac0-5e186d7172de","tursoName","3598e46433ff46d89a0da0cbf68518a5","tursoHostname","3598e46433ff46d89a0da0cbf68518a5-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",194,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","vininasc25","handle","displayName","Vinicius Costa Nascimento","avatar","https://lh3.googleusercontent.com/a/ACg8ocK2KMyaRKhjGR18fsaUR-TcRuUk6K_d0glrB2nmnmkbJum4XA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":179,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":180,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":181,"_83":182,"_85":183,"_87":25},"tree",[166,167,168],"files",[166,167,168],"counts",{"_155":62,"_156":157,"_158":62,"_159":160,"_161":162},"contents",[130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":148,"_32":149,"_30":150,"_136":-5,"_41":42,"_40":151,"_138":58,"_38":152,"_13":137,"_33":140,"_35":153,"_24":25,"_142":-5,"_27":154},{"_43":144,"_32":28,"_30":31,"_136":-5,"_41":42,"_40":14,"_138":25,"_38":145,"_13":146,"_33":34,"_35":37,"_24":25,"_142":-5,"_27":147},{"_43":133,"_32":134,"_30":135,"_136":-5,"_41":42,"_40":137,"_138":58,"_38":139,"_13":62,"_33":140,"_35":141,"_24":25,"_142":-5,"_27":143},"bf356e97-f734-41d1-85bb-061f1a51f378","seguranca.ts","7f988058-8d02-11f1-bafd-1607ee4eb77e","parentId",2,"latest",["D",1785517729524],"script","/**\n * Primitivas de seguranca para o Escritorio Virtual no Val Town.\n *\n * Diferenca em relacao a versao Node: o hash de senha usa PBKDF2-SHA256 pela\n * Web Crypto API, nao scrypt. Motivo: a Web Crypto e nativa do Deno e roda\n * igual em qualquer isolado, enquanto scrypt depende da camada de compat com\n * Node. 600.000 iteracoes e a recomendacao atual da OWASP para PBKDF2-SHA256.\n */\n\nconst ITERACOES = 600000;\nconst TAM_CHAVE = 32; // bytes\n\nconst enc = new TextEncoder();\n\nfunction paraBase64(bytes: Uint8Array): string {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s);\n}\nfunction deBase64(txt: string): Uint8Array {\n const bin = atob(txt);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nasync function derivar(senha: string, sal: Uint8Array, iteracoes: number, tam: number) {\n const chave = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(senha.normalize(\"NFKC\")),\n \"PBKDF2\",\n false,\n [\"deriveBits\"],\n );\n const bits = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt: sal, iterations: iteracoes, hash: \"SHA-256\" },\n chave,\n tam * 8,\n );\n return new Uint8Array(bits);\n}\n\nexport async function hashSenha(senha: string): Promise {\n const sal = crypto.getRandomValues(new Uint8Array(16));\n const derivada = await derivar(senha, sal, ITERACOES, TAM_CHAVE);\n return \"pbkdf2$\" + ITERACOES + \"$\" + paraBase64(sal) + \"$\" + paraBase64(derivada);\n}\n\nexport async function conferirSenha(senha: string, guardado: string): Promise {\n try {\n const partes = String(guardado).split(\"$\");\n if (partes.length !== 4 || partes[0] !== \"pbkdf2\") return false;\n const iteracoes = Number(partes[1]);\n const sal = deBase64(partes[2]);\n const esperado = deBase64(partes[3]);\n const derivada = await derivar(String(senha), sal, iteracoes, esperado.length);\n // comparacao em tempo constante: nao sai mais cedo ao achar diferenca\n if (derivada.length !== esperado.length) return false;\n let diferenca = 0;\n for (let i = 0; i < derivada.length; i++) diferenca |= derivada[i] ^ esperado[i];\n return diferenca === 0;\n } catch {\n return false;\n }\n}\n\n/* ---------------------------- tokens e ids -------------------------------- */\n\nfunction urlSafe(b: Uint8Array): string {\n return paraBase64(b).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nexport function novoToken(): string {\n return urlSafe(crypto.getRandomValues(new Uint8Array(32)));\n}\n\n/** O banco guarda so o hash do token: se o banco vazar, os tokens nao servem. */\nexport async function hashToken(token: string): Promise {\n const bits = await crypto.subtle.digest(\"SHA-256\", enc.encode(String(token)));\n return Array.from(new Uint8Array(bits)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function idAleatorio(prefixo: string): string {\n return prefixo + \"_\" + urlSafe(crypto.getRandomValues(new Uint8Array(9)));\n}\n\n/* ------------------------------ validacao --------------------------------- */\n\nexport class ErroPublico extends Error {\n status: number;\n publico = true;\n constructor(msg: string, status = 400) {\n super(msg);\n this.status = status;\n }\n}\n\nexport const ERRO = (msg: string, status = 400) => new ErroPublico(msg, status);\n\n// remove caracteres de controle (0x00-0x1f e 0x7f) que quebrariam logs e telas\nconst CONTROLE = new RegExp(\"[\\\\u0000-\\\\u001f\\\\u007f]\", \"g\");\n\nexport function texto(\n valor: unknown,\n campo: string,\n opcoes: { min?: number; max?: number; obrigatorio?: boolean } = {},\n): string {\n const min = opcoes.min ?? 1;\n const max = opcoes.max ?? 200;\n const obrigatorio = opcoes.obrigatorio ?? true;\n if (valor === undefined || valor === null || valor === \"\") {\n if (obrigatorio) throw ERRO('Campo \"' + campo + '\" e obrigatorio.');\n return \"\";\n }\n if (typeof valor !== \"string\") throw ERRO('Campo \"' + campo + '\" deve ser texto.');\n const limpo = valor.replace(CONTROLE, \"\").trim();\n if (limpo.length < min) throw ERRO('Campo \"' + campo + '\" precisa de pelo menos ' + min + \" caractere(s).\");\n if (limpo.length > max) throw ERRO('Campo \"' + campo + '\" excede ' + max + \" caracteres.\");\n return limpo;\n}\n\nexport function email(valor: unknown): string {\n const v = texto(valor, \"email\", { max: 160 }).toLowerCase();\n if (!/^[^\\s@]{1,64}@[^\\s@]{1,120}\\.[a-z]{2,}$/i.test(v)) throw ERRO(\"E-mail invalido.\");\n return v;\n}\n\nexport function senhaForte(valor: unknown): string {\n if (typeof valor !== \"string\") throw ERRO(\"Senha invalida.\");\n if (valor.length < 8) throw ERRO(\"A senha precisa ter pelo menos 8 caracteres.\");\n if (valor.length > 200) throw ERRO(\"Senha longa demais.\");\n if (!/[a-zA-Z]/.test(valor) || !/[0-9]/.test(valor)) throw ERRO(\"A senha precisa ter letras e numeros.\");\n return valor;\n}\n\nexport function escolha(valor: unknown, campo: string, permitidos: T[], padrao: T): T {\n if (valor === undefined || valor === null || valor === \"\") return padrao;\n if (!permitidos.includes(valor as T)) throw ERRO('Valor invalido para \"' + campo + '\".');\n return valor as T;\n}\n\nexport function corHex(valor: unknown, padrao: string): string {\n if (!valor) return padrao;\n if (typeof valor !== \"string\" || !/^#[0-9a-fA-F]{6}$/.test(valor)) throw ERRO(\"Cor invalida.\");\n return valor.toLowerCase();\n}\n","label",[134],"892bab82-604e-4bea-844f-aa47d95b7942",["D",1786478207253],50,[28],"c2733ced-0c89-441b-990b-c0d0309a3123","banco.ts","8bed9f0a-8d02-11f1-bf54-1607ee4eb77e",16,["D",1785878137533],"/**\n * Persistencia no SQLite do Val Town.\n *\n * Uma tabela chave/documento por colecao: evita migracao de schema toda vez que\n * um campo novo aparece no produto, e o volume aqui e pequeno (uma equipe).\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABELAS = [\"usuarios\", \"cargos\", \"pessoas\", \"tarefas\", \"sessoes\", \"eventos\", \"tentativas\", \"config\"];\n\nlet pronto: Promise | null = null;\n\nexport function prepararBanco(): Promise {\n if (!pronto) {\n pronto = (async () => {\n for (const t of TABELAS) {\n await sqlite.execute(\n \"CREATE TABLE IF NOT EXISTS \" + t + \" (id TEXT PRIMARY KEY, doc TEXT NOT NULL)\",\n );\n }\n })();\n }\n return pronto;\n}\n\nexport async function salvar(tabela: string, doc: T): Promise {\n await prepararBanco();\n await sqlite.execute({\n sql: \"INSERT INTO \" + tabela +\n \" (id, doc) VALUES (?, ?) ON CONFLICT(id) DO UPDATE SET doc = excluded.doc\",\n args: [String(doc.id), JSON.stringify(doc)],\n });\n return doc;\n}\n\nexport async function obter(tabela: string, id: string): Promise {\n await prepararBanco();\n const r = await sqlite.execute({\n sql: \"SELECT doc FROM \" + tabela + \" WHERE id = ?\",\n args: [String(id)],\n });\n if (!r.rows.length) return null;\n return JSON.parse(String(r.rows[0].doc)) as T;\n}\n\nexport async function listar(tabela: string): Promise {\n await prepararBanco();\n const r = await sqlite.execute(\"SELECT doc FROM \" + tabela);\n return r.rows.map((linha) => JSON.parse(String(linha.doc)) as T);\n}\n\nexport async function remover(tabela: string, id: string): Promise {\n await prepararBanco();\n await sqlite.execute({\n sql: \"DELETE FROM \" + tabela + \" WHERE id = ?\",\n args: [String(id)],\n });\n}\n\n/* -------------------------- limite de tentativas --------------------------\n * Em hospedagem serverless cada requisicao pode cair num isolado diferente,\n * entao um contador em memoria nao serve de nada: o atacante so precisa\n * insistir ate pegar um isolado novo. Por isso o contador vive no banco.\n */\n\ninterface Tentativa {\n id: string;\n falhas: number;\n inicio: number;\n bloqueadoAte: number;\n}\n\nconst JANELA_MS = 15 * 60 * 1000;\nconst BLOQUEIO_MS = 15 * 60 * 1000;\nconst MAX_FALHAS = 5;\n\nexport async function segundosBloqueado(chave: string): Promise {\n const r = await obter(\"tentativas\", chave);\n if (!r) return 0;\n const agora = Date.now();\n if (r.bloqueadoAte > agora) return Math.ceil((r.bloqueadoAte - agora) / 1000);\n return 0;\n}\n\nexport async function registrarFalha(chave: string): Promise {\n const agora = Date.now();\n let r = await obter(\"tentativas\", chave);\n if (!r || agora - r.inicio > JANELA_MS) {\n r = { id: chave, falhas: 0, inicio: agora, bloqueadoAte: 0 };\n }\n r.falhas += 1;\n if (r.falhas >= MAX_FALHAS) r.bloqueadoAte = agora + BLOQUEIO_MS;\n await salvar(\"tentativas\", r);\n}\n\nexport async function limparTentativas(chave: string): Promise {\n await remover(\"tentativas\", chave);\n}\n\n/**\n * Limpeza oportunista: sessoes vencidas e contadores de tentativa antigos\n * nunca seriam apagados sozinhos (so eram removidos ao serem consultados).\n * Chamada a cada login bem-sucedido — barata, pois o volume e pequeno.\n */\nexport async function limparExpirados(): Promise {\n const agora = Date.now();\n for (const s of await listar<{ id: string; expiraEm: number }>(\"sessoes\")) {\n if (s.expiraEm && s.expiraEm < agora) await remover(\"sessoes\", s.id);\n }\n for (const t of await listar(\"tentativas\")) {\n if (t.bloqueadoAte < agora && agora - t.inicio > JANELA_MS) await remover(\"tentativas\", t.id);\n }\n}\n",[149],"pulls","branches",1,"forks","envVars",{"_163":62,"_165":62},"connections",{"_163":62,"_164":62},"count","unfilledCount","emptyCount",{"_43":148,"_32":149,"_30":150,"_136":-5,"_41":42,"_40":151,"_138":58,"_38":176,"_13":137,"_33":140,"_35":153,"_24":25,"_142":-5,"_170":177,"_27":178},{"_43":144,"_32":28,"_30":31,"_136":-5,"_41":42,"_40":14,"_138":25,"_38":173,"_13":146,"_33":34,"_35":37,"_24":25,"_142":-5,"_170":174,"_27":175},{"_43":133,"_32":134,"_30":135,"_136":-5,"_41":42,"_40":137,"_138":58,"_38":169,"_13":62,"_33":140,"_35":141,"_24":25,"_142":-5,"_170":171,"_27":172},["D",1785517729524],"children",[],[134],["D",1786478207253],[],[28],["D",1785878137533],[],[149],["D",1785517600367],["D",1789516253896],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_127":217,"_218":219,"_220":221,"_222":25,"_223":25,"_224":25,"_225":58,"_226":-5,"_227":-7,"_228":-7,"_229":62,"_230":25,"_231":25,"_232":-5,"_233":25,"_234":25,"_235":25,"_236":-5},"ENV",{"_188":189,"_190":191,"_192":89,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Escritório

Nova tarefa

Escritório

Nova tarefa

Diff · v121