[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_210":211,"_212":213},"routes/_app.x.$handle.$name",{"_99":98,"_31":44,"_108":89,"_26":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":24,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":24},"version",5,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","frontend/sw.js","latestPath","fileId","64f67d72-8546-11f1-bd49-1607ee4eb77e","name","sw.js","fileType","script","content","/* Service Worker — SINFRA Centro de Gestão de Engenharia\n Cacheia o app shell (HTML/ícones) para abrir rápido/offline; as chamadas de API\n (/api/...) NUNCA são cacheadas — sempre buscam dado fresco do servidor. */\n\nconst CACHE_VERSION = 'sinfra-eng-server-v1';\nconst APP_SHELL = [\n '/',\n '/manifest.json',\n '/frontend/icons/icon.svg',\n '/frontend/icons/icon-maskable.svg',\n];\n\nself.addEventListener('install', (event) => {\n event.waitUntil(\n caches.open(CACHE_VERSION).then((cache) => cache.addAll(APP_SHELL)).catch(() => {})\n );\n self.skipWaiting();\n});\n\nself.addEventListener('activate', (event) => {\n event.waitUntil(\n caches.keys().then((keys) =>\n Promise.all(keys.filter((k) => k !== CACHE_VERSION).map((k) => caches.delete(k)))\n )\n );\n self.clients.claim();\n});\n\nself.addEventListener('fetch', (event) => {\n const req = event.request;\n if (req.method !== 'GET') return;\n const url = new URL(req.url);\n if (url.pathname.startsWith('/api/')) return; // nunca cachear dados da API\n\n event.respondWith(\n caches.open(CACHE_VERSION).then(async (cache) => {\n const cached = await cache.match(req);\n const network = fetch(req)\n .then((res) => {\n if (res && res.status === 200) cache.put(req, res.clone());\n return res;\n })\n .catch(() => cached);\n return cached || network;\n })\n );\n});\n","createdAt",["D",1784667281318],"branchVersion","branchId","76e942b9-794e-4acc-ad2c-28b6d3b1b235","id","6a3c96bd-7519-494f-a982-07697dc6d610","sinfra-engenharia",["D",1784666910344],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","SINFRA/SEAGEC - Gestao de Engenharia","imageUrl","779cff7d-e571-4cc4-9762-23848b9bd8be","pinnedFileId","2e717522-8546-11f1-acd3-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8661-e505-7389-9ac0-5e186d7172de","tursoName","6a3c96bd7519494fa98207697dc6d610","tursoHostname","6a3c96bd7519494fa98207697dc6d610-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789560070146],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":24},"branch",{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",117,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","vininasc25","handle","displayName","Vinicius Costa Nascimento","avatar","https://lh3.googleusercontent.com/a/ACg8ocK2KMyaRKhjGR18fsaUR-TcRuUk6K_d0glrB2nmnmkbJum4XA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":205,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":206,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":207,"_83":208,"_85":209,"_87":24},"tree",[175,178,179,180],"files",[175,176,177,178,179,180],"counts",{"_165":62,"_166":147,"_167":62,"_168":169,"_170":171},"contents",[130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":158,"_31":159,"_29":160,"_136":-5,"_40":41,"_39":161,"_138":58,"_37":162,"_13":62,"_33":163,"_35":-5,"_23":24,"_142":-5,"_26":164},{"_42":151,"_31":152,"_29":153,"_136":-5,"_40":41,"_39":154,"_138":58,"_37":155,"_13":62,"_33":34,"_35":156,"_23":24,"_142":-5,"_26":157},{"_42":144,"_31":145,"_29":146,"_136":-5,"_40":41,"_39":147,"_138":24,"_37":148,"_13":62,"_33":34,"_35":149,"_23":24,"_142":-5,"_26":150},{"_42":134,"_31":135,"_29":56,"_136":-5,"_40":41,"_39":137,"_138":24,"_37":139,"_13":62,"_33":140,"_35":141,"_23":24,"_142":-5,"_26":143},"2b06c7ab-c071-4ebd-b415-b98d9f44bfd4","main.ts","parentId",3,"latest",["D",1784667189849],"http","/**\n * SINFRA · Centro de Gestão de Engenharia — servidor (Val Town HTTP val)\n * Backend com login individual por usuário, banco de dados SQLite e trilha de auditoria.\n */\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { initDb, logAudit } from \"./database.ts\";\nimport {\n hashPassword, verifyPassword, createSession, destroySession, getUserBySession,\n parseCookie, sessionCookieHeader, clearSessionCookieHeader, SessionUser,\n} from \"./auth.ts\";\n\nconst ADMIN_SEED_EMAIL = \"vininasc25@gmail.com\";\nconst ADMIN_SEED_PASSWORD = \"#Conet21\";\nconst ADMIN_SEED_NAME = \"Vinicius Costa\";\n\nlet readyPromise: Promise | null = null;\nasync function ensureReady() {\n if (!readyPromise) {\n readyPromise = (async () => {\n await initDb();\n const count = await sqlite.execute(\"SELECT COUNT(*) as n FROM users\");\n const n = Number((count.rows[0] as any)?.n ?? 0);\n if (n === 0) {\n const { hash, salt } = await hashPassword(ADMIN_SEED_PASSWORD);\n await sqlite.execute({\n sql: \"INSERT INTO users (name, email, password_hash, password_salt, role) VALUES (?, ?, ?, ?, 'admin')\",\n args: [ADMIN_SEED_NAME, ADMIN_SEED_EMAIL, hash, salt],\n });\n await logAudit(null, \"bootstrap_admin_created\", ADMIN_SEED_EMAIL);\n }\n })();\n }\n return readyPromise;\n}\n\nconst app = new Hono();\n\napp.use(\"*\", async (c, next) => {\n await ensureReady();\n await next();\n});\n\nfunction clientIp(req: Request): string | null {\n return req.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ?? null;\n}\n\nasync function getCurrentUser(c: any): Promise {\n const token = parseCookie(c.req.raw, \"sinfra_session\");\n return getUserBySession(token);\n}\n\n// ── AUTENTICAÇÃO ──────────────────────────────────────────────\napp.post(\"/api/auth/login\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const email = String(body.email || \"\").trim().toLowerCase();\n const password = String(body.password || \"\");\n const ip = clientIp(c.req.raw);\n if (!email || !password) return c.json({ error: \"Informe e-mail e senha.\" }, 400);\n\n const res = await sqlite.execute({ sql: \"SELECT * FROM users WHERE email = ?\", args: [email] });\n const user = res.rows[0] as any;\n if (!user || !user.active) {\n await logAudit(email, \"login_failed\", \"usuário não encontrado ou inativo\", ip);\n return c.json({ error: \"E-mail ou senha incorretos.\" }, 401);\n }\n const ok = await verifyPassword(password, user.password_hash, user.password_salt);\n if (!ok) {\n await logAudit(email, \"login_failed\", \"senha incorreta\", ip);\n return c.json({ error: \"E-mail ou senha incorretos.\" }, 401);\n }\n const token = await createSession(user.id);\n await sqlite.execute({ sql: \"UPDATE users SET last_login_at = datetime('now') WHERE id = ?\", args: [user.id] });\n await logAudit(email, \"login_success\", null, ip);\n c.header(\"Set-Cookie\", sessionCookieHeader(token));\n return c.json({ user: { id: user.id, name: user.name, email: user.email, role: user.role } });\n});\n\napp.post(\"/api/auth/logout\", async (c) => {\n const token = parseCookie(c.req.raw, \"sinfra_session\");\n if (token) await destroySession(token);\n c.header(\"Set-Cookie\", clearSessionCookieHeader());\n return c.json({ ok: true });\n});\n\napp.get(\"/api/auth/me\", async (c) => {\n const user = await getCurrentUser(c);\n if (!user) return c.json({ user: null, error: \"not_authenticated\" }, 401);\n return c.json({ user });\n});\n\n// ── MIDDLEWARE DE PROTEÇÃO ───────────────────────────────────\nasync function requireAuth(c: any): Promise {\n const user = await getCurrentUser(c);\n if (!user) return c.json({ error: \"Não autenticado.\" }, 401);\n return user;\n}\nasync function requireAdmin(c: any): Promise {\n const user = await requireAuth(c);\n if (user instanceof Response) return user;\n if (user.role !== \"admin\") return c.json({ error: \"Apenas administradores.\" }, 403);\n return user;\n}\nasync function requireEditorOrAdmin(c: any): Promise {\n const user = await requireAuth(c);\n if (user instanceof Response) return user;\n if (user.role !== \"admin\" && user.role !== \"editor\") return c.json({ error: \"Sem permissão para editar dados.\" }, 403);\n return user;\n}\n\n// ── USUÁRIOS (admin) ─────────────────────────────────────────\napp.get(\"/api/users\", async (c) => {\n const user = await requireAdmin(c);\n if (user instanceof Response) return user;\n const res = await sqlite.execute(\"SELECT id, name, email, role, active, created_at, last_login_at FROM users ORDER BY created_at ASC\");\n return c.json({ users: res.rows });\n});\n\napp.post(\"/api/users\", async (c) => {\n const admin = await requireAdmin(c);\n if (admin instanceof Response) return admin;\n const body = await c.req.json().catch(() => ({}));\n const name = String(body.name || \"\").trim();\n const email = String(body.email || \"\").trim().toLowerCase();\n const password = String(body.password || \"\");\n const role = [\"admin\", \"editor\", \"viewer\"].includes(body.role) ? body.role : \"viewer\";\n if (!name || !email || password.length < 6) {\n return c.json({ error: \"Nome, e-mail e senha (mín. 6 caracteres) são obrigatórios.\" }, 400);\n }\n const { hash, salt } = await hashPassword(password);\n try {\n await sqlite.execute({\n sql: \"INSERT INTO users (name, email, password_hash, password_salt, role) VALUES (?, ?, ?, ?, ?)\",\n args: [name, email, hash, salt, role],\n });\n } catch (e: any) {\n return c.json({ error: \"Já existe um usuário com esse e-mail.\" }, 409);\n }\n await logAudit(admin.email, \"user_create\", email, clientIp(c.req.raw));\n return c.json({ ok: true });\n});\n\napp.patch(\"/api/users/:id\", async (c) => {\n const admin = await requireAdmin(c);\n if (admin instanceof Response) return admin;\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({}));\n const fields: string[] = [];\n const args: any[] = [];\n if (typeof body.active === \"boolean\") { fields.push(\"active = ?\"); args.push(body.active ? 1 : 0); }\n if ([\"admin\", \"editor\", \"viewer\"].includes(body.role)) { fields.push(\"role = ?\"); args.push(body.role); }\n if (typeof body.name === \"string\" && body.name.trim()) { fields.push(\"name = ?\"); args.push(body.name.trim()); }\n if (typeof body.password === \"string\" && body.password.length >= 6) {\n const { hash, salt } = await hashPassword(body.password);\n fields.push(\"password_hash = ?\", \"password_salt = ?\");\n args.push(hash, salt);\n }\n if (!fields.length) return c.json({ error: \"Nada para atualizar.\" }, 400);\n args.push(id);\n await sqlite.execute({ sql: `UPDATE users SET ${fields.join(\", \")} WHERE id = ?`, args });\n await logAudit(admin.email, \"user_update\", `id=${id}`, clientIp(c.req.raw));\n return c.json({ ok: true });\n});\n\n// ── OBRAS (dados do planner / educação) ──────────────────────\napp.get(\"/api/obras\", async (c) => {\n const user = await requireAuth(c);\n if (user instanceof Response) return user;\n const eixo = c.req.query(\"eixo\") || \"geral\";\n const res = await sqlite.execute({ sql: \"SELECT * FROM obras WHERE eixo = ? ORDER BY id ASC\", args: [eixo] });\n const rows = res.rows.map((r: any) => ({\n item: r.item, municipio: r.municipio, empresa: r.empresa, objeto: r.objeto, status: r.status,\n fiscal: r.fiscal, contratado: r.contratado, medido: r.medido, saldo: r.saldo, pctReal: r.pct_real, fonte: r.fonte,\n }));\n return c.json({ rows, updatedAt: res.rows[0] ? (res.rows[res.rows.length - 1] as any).updated_at : null });\n});\n\napp.post(\"/api/obras/import\", async (c) => {\n const user = await requireEditorOrAdmin(c);\n if (user instanceof Response) return user;\n const body = await c.req.json().catch(() => ({}));\n const eixo = String(body.eixo || \"geral\");\n const rows = Array.isArray(body.rows) ? body.rows : [];\n if (!rows.length) return c.json({ error: \"Nenhuma linha para importar.\" }, 400);\n\n await sqlite.execute({ sql: \"DELETE FROM obras WHERE eixo = ?\", args: [eixo] });\n const statements = rows.map((r: any) => ({\n sql: `INSERT INTO obras (eixo, item, municipio, empresa, objeto, status, fiscal, contratado, medido, saldo, pct_real, fonte, updated_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n eixo, r.item ?? null, r.municipio ?? null, r.empresa ?? null, r.objeto ?? null, r.status ?? null,\n r.fiscal ?? null, r.contratado ?? null, r.medido ?? null, r.saldo ?? null, r.pctReal ?? null, r.fonte ?? null,\n user.email,\n ],\n }));\n const CHUNK = 300;\n for (let i = 0; i < statements.length; i += CHUNK) {\n await sqlite.batch(statements.slice(i, i + CHUNK));\n }\n await logAudit(user.email, \"import\", `eixo=${eixo} linhas=${rows.length}`, clientIp(c.req.raw));\n return c.json({ ok: true, count: rows.length });\n});\n\napp.delete(\"/api/obras\", async (c) => {\n const user = await requireEditorOrAdmin(c);\n if (user instanceof Response) return user;\n const eixo = c.req.query(\"eixo\") || \"geral\";\n await sqlite.execute({ sql: \"DELETE FROM obras WHERE eixo = ?\", args: [eixo] });\n await logAudit(user.email, \"clear_data\", `eixo=${eixo}`, clientIp(c.req.raw));\n return c.json({ ok: true });\n});\n\n// ── AUDITORIA (admin) ────────────────────────────────────────\napp.get(\"/api/audit\", async (c) => {\n const user = await requireAdmin(c);\n if (user instanceof Response) return user;\n const res = await sqlite.execute(\"SELECT * FROM audit_log ORDER BY id DESC LIMIT 200\");\n return c.json({ entries: res.rows });\n});\n\n// ── FRONTEND ──────────────────────────────────────────────────\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/manifest.json\", (c) => serveFile(\"/frontend/manifest.json\", import.meta.url));\napp.get(\"/sw.js\", (c) => serveFile(\"/frontend/sw.js\", import.meta.url));\napp.get(\"/\", (c) => serveFile(\"/frontend/index.html\", import.meta.url));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","label",[135],"e0cf8045-696b-4109-b597-676c00377071","database.ts","09f6d782-8546-11f1-805b-1607ee4eb77e",1,["D",1784667128554],"/**\n * SINFRA · Centro de Gestão de Engenharia — camada de banco de dados (Val Town SQLite)\n *\n * Tabelas:\n * - users login individual por pessoa (nunca senha em texto puro — PBKDF2 com salt)\n * - sessions tokens de sessão (cookie httpOnly), com expiração\n * - obras dados de obras importados da planilha (eixo 'geral' ou 'educacao')\n * - audit_log trilha de auditoria: quem fez o quê e quando\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n email TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n password_salt TEXT NOT NULL,\n role TEXT NOT NULL DEFAULT 'viewer',\n active INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n last_login_at TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS obras (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n eixo TEXT NOT NULL DEFAULT 'geral',\n item TEXT,\n municipio TEXT,\n empresa TEXT,\n objeto TEXT,\n status TEXT,\n fiscal TEXT,\n contratado REAL,\n medido REAL,\n saldo REAL,\n pct_real REAL,\n fonte TEXT,\n updated_at TEXT NOT NULL DEFAULT (datetime('now')),\n updated_by TEXT\n )`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_obras_eixo ON obras(eixo)`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS audit_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_email TEXT,\n action TEXT NOT NULL,\n detail TEXT,\n ip TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`);\n}\n\nexport async function logAudit(userEmail: string | null, action: string, detail?: string, ip?: string | null) {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO audit_log (user_email, action, detail, ip) VALUES (?, ?, ?, ?)\",\n args: [userEmail, action, detail ?? null, ip ?? null],\n });\n } catch (_e) {\n // auditoria nunca deve derrubar a requisição principal\n }\n}\n",[145],"9d0b0d4d-17c2-4bd0-84aa-879430f77f5d","auth.ts","163f9c18-8546-11f1-beac-1607ee4eb77e",2,["D",1784667149253],"/**\n * SINFRA · Autenticação — hash de senha (PBKDF2 + salt, via Web Crypto) e sessões por cookie.\n * Nenhuma senha é armazenada ou transmitida em texto puro; o hash usa 100.000 iterações (SHA-256).\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst PBKDF2_ITERATIONS = 100_000;\nconst SESSION_DAYS = 30;\n\nfunction bytesToHex(bytes: Uint8Array): string {\n return Array.from(bytes).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction hexToBytes(hex: string): Uint8Array {\n const out = new Uint8Array(hex.length / 2);\n for (let i = 0; i < out.length; i++) out[i] = parseInt(hex.substr(i * 2, 2), 16);\n return out;\n}\n\nexport async function hashPassword(password: string, saltHex?: string): Promise<{ hash: string; salt: string }> {\n const salt = saltHex ? hexToBytes(saltHex) : crypto.getRandomValues(new Uint8Array(16));\n const keyMaterial = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const bits = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt, iterations: PBKDF2_ITERATIONS, hash: \"SHA-256\" },\n keyMaterial,\n 256,\n );\n return { hash: bytesToHex(new Uint8Array(bits)), salt: bytesToHex(salt) };\n}\n\nexport async function verifyPassword(password: string, hash: string, salt: string): Promise {\n const check = await hashPassword(password, salt);\n if (check.hash.length !== hash.length) return false;\n let diff = 0;\n for (let i = 0; i < hash.length; i++) diff |= check.hash.charCodeAt(i) ^ hash.charCodeAt(i);\n return diff === 0;\n}\n\nexport interface SessionUser {\n id: number;\n name: string;\n email: string;\n role: string;\n}\n\nexport async function createSession(userId: number): Promise {\n const token = bytesToHex(crypto.getRandomValues(new Uint8Array(32)));\n const expires = new Date(Date.now() + SESSION_DAYS * 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\",\n args: [token, userId, expires],\n });\n return token;\n}\n\nexport async function destroySession(token: string) {\n await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n}\n\nexport async function getUserBySession(token: string | undefined | null): Promise {\n if (!token) return null;\n const res = await sqlite.execute({\n sql: `SELECT u.id, u.name, u.email, u.role, u.active FROM sessions s\n JOIN users u ON u.id = s.user_id\n WHERE s.token = ? AND s.expires_at > datetime('now')`,\n args: [token],\n });\n const row = res.rows[0] as any;\n if (!row || !row.active) return null;\n return { id: row.id, name: row.name, email: row.email, role: row.role };\n}\n\nexport function parseCookie(req: Request, name: string): string | undefined {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const match = cookie.match(new RegExp(`(?:^|;\\\\s*)${name}=([^;]+)`));\n return match ? decodeURIComponent(match[1]) : undefined;\n}\n\nexport function sessionCookieHeader(token: string): string {\n const maxAge = SESSION_DAYS * 24 * 60 * 60;\n return `sinfra_session=${token}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=${maxAge}`;\n}\n\nexport function clearSessionCookieHeader(): string {\n return `sinfra_session=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0`;\n}\n",[152],"1f887468-e38b-408c-83aa-21314c86c0a8","frontend","dd2b701a-8dba-487e-8d92-c4d544aa5741",4,["D",1784667265194],"directory",[159],"pulls","branches","forks","envVars",{"_172":62,"_174":62},"connections",{"_172":62,"_173":62},"count","unfilledCount","emptyCount",{"_42":158,"_31":159,"_29":160,"_136":-5,"_40":41,"_39":161,"_138":58,"_37":202,"_13":62,"_33":163,"_35":-5,"_23":24,"_142":-5,"_182":203,"_26":204},{"_42":195,"_31":196,"_29":197,"_136":160,"_40":41,"_39":161,"_138":58,"_37":198,"_13":62,"_33":20,"_35":199,"_23":24,"_142":-5,"_182":200,"_26":201},{"_42":191,"_31":32,"_29":30,"_136":160,"_40":41,"_39":14,"_138":24,"_37":192,"_13":62,"_33":34,"_35":36,"_23":24,"_142":-5,"_182":193,"_26":194},{"_42":151,"_31":152,"_29":153,"_136":-5,"_40":41,"_39":154,"_138":58,"_37":188,"_13":62,"_33":34,"_35":156,"_23":24,"_142":-5,"_182":189,"_26":190},{"_42":144,"_31":145,"_29":146,"_136":-5,"_40":41,"_39":147,"_138":24,"_37":185,"_13":62,"_33":34,"_35":149,"_23":24,"_142":-5,"_182":186,"_26":187},{"_42":134,"_31":135,"_29":56,"_136":-5,"_40":41,"_39":137,"_138":24,"_37":181,"_13":62,"_33":140,"_35":141,"_23":24,"_142":-5,"_182":183,"_26":184},["D",1784667189849],"children",[],[135],["D",1784667128554],[],[145],["D",1784667149253],[],[152],"8139c132-695c-421a-a5c4-4107ccd998bf",["D",1784667281318],[],[159,32],"05201d2d-dd93-440f-b0e7-43f78f735d9c","manifest.json","5b5d1f78-8546-11f1-b83e-1607ee4eb77e",["D",1784667265194],"{\n \"name\": \"SINFRA · Centro de Gestão de Engenharia\",\n \"short_name\": \"SINFRA Eng.\",\n \"description\": \"Centro de Gestão de Engenharia — obras públicas do Maranhão (SINFRA/SEAGEC)\",\n \"start_url\": \"/\",\n \"scope\": \"/\",\n \"display\": \"standalone\",\n \"orientation\": \"any\",\n \"background_color\": \"#080d1a\",\n \"theme_color\": \"#0b1220\",\n \"lang\": \"pt-BR\",\n \"icons\": [\n { \"src\": \"/frontend/icons/icon.svg\", \"sizes\": \"any\", \"type\": \"image/svg+xml\", \"purpose\": \"any\" },\n { \"src\": \"/frontend/icons/icon-maskable.svg\", \"sizes\": \"any\", \"type\": \"image/svg+xml\", \"purpose\": \"maskable\" }\n ]\n}\n",[],[159,196],["D",1784667265194],[176,177],[159],["D",1784666910344],["D",1789560070146],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":24},{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_127":243,"_244":245,"_246":247,"_248":24,"_249":24,"_250":24,"_251":58,"_252":-5,"_253":-7,"_254":-7,"_255":62,"_256":24,"_257":24,"_258":-5,"_259":24,"_260":24,"_261":24,"_262":-5},"ENV",{"_214":215,"_216":217,"_218":89,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5