[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_159":160,"_161":162},"routes/_app.x.$handle.$name",{"_97":96,"_32":45,"_106":87,"_27":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":124,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",23,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":37,"_35":36,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","sclapp.ts","latestPath","fileId","66a6c506-5fd4-11f1-be93-1607ee4eb77e","name","fileType","script","content","// =========================================================================\n// SCL APP — Backend Val Town v4.0\n// Motor Financiero + IA Gemini + Mercado Pago + Auditoría SHA-256\n// =========================================================================\n\nconst SUPABASE_URL = \"https://fbncgwxdgdreuoxnphdd.supabase.co\";\nconst SUPABASE_KEY = Deno.env.get(\"SUPABASE_SERVICE_KEY\") ?? \"\";\nconst GEMINI_KEY = Deno.env.get(\"GEMINI_API_KEY\") ?? \"\";\nconst MP_TOKEN = Deno.env.get(\"MP_ACCESS_TOKEN\") ?? \"\";\nconst GEMINI_URL = \"https://generativelanguage.googleapis.com/v1beta/models/gemini-1.5-flash:generateContent\";\nconst MP_URL = \"https://api.mercadopago.com/checkout/preferences\";\n\n// ── Tipos ─────────────────────────────────────────────────────\ninterface TareaIA {\n nombre: string;\n codigo_sugerido: string;\n cantidad: number;\n precio_uf: number;\n precio_clp: number;\n fuente_precio: string;\n normativa?: string;\n}\n\ninterface PayloadEntrada {\n actor_id?: string;\n tipo_cliente: \"hogar\" | \"corporativo\";\n tareas?: { codigo: string; cantidad: number }[];\n descripcion_trabajo?: string;\n usar_tag?: boolean;\n origen_lat: number;\n origen_lng: number;\n destino_lat: number;\n destino_lng: number;\n tecnico_id?: string;\n vehiculo_id?: string;\n nombre_cliente?: string;\n telefono_cliente?: string;\n direccion_cliente?: string;\n generar_link_pago?: boolean;\n}\n\n// ── CORS ──────────────────────────────────────────────────────\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n};\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { ...CORS, \"Content-Type\": \"application/json\" },\n });\n}\n\n// ── Sanitización ──────────────────────────────────────────────\nfunction sanitizar(texto: any): string {\n if (typeof texto !== \"string\") return \"\";\n return texto\n .trim()\n .replace(/]*>([\\s\\S]*?)<\\/script>/gi, \"\")\n .replace(/<\\/?[^>]+(>|$)/g, \"\")\n .replace(/(--|;|UNION|SELECT|DROP|INSERT|DELETE|UPDATE)/gi, \"\")\n .substring(0, 500);\n}\n\n// ── Validar RUT chileno (Módulo 11) ───────────────────────────\nfunction validarRUT(rut: string): boolean {\n const limpio = rut.replace(/\\./g, \"\").replace(/-/g, \"\").toUpperCase();\n if (limpio.length < 2) return false;\n const cuerpo = limpio.slice(0, -1);\n const dv = limpio.slice(-1);\n let suma = 0, mul = 2;\n for (let i = cuerpo.length - 1; i >= 0; i--) {\n suma += parseInt(cuerpo[i]) * mul;\n mul = mul === 7 ? 2 : mul + 1;\n }\n const dvCalc = 11 - (suma % 11);\n const dvEsp = dvCalc === 11 ? \"0\" : dvCalc === 10 ? \"K\" : String(dvCalc);\n return dv === dvEsp;\n}\n\n// ── 1. UF desde Mindicador.cl ─────────────────────────────────\nasync function obtenerUF(): Promise {\n try {\n const res = await fetch(\"https://mindicador.cl/api/uf\");\n const data = await res.json();\n return data.serie[0].valor as number;\n } catch {\n return 34000; // Valor de respaldo\n }\n}\n\n// ── 2. Distancia OSRM ─────────────────────────────────────────\nasync function obtenerKm(oLat: number, oLng: number, dLat: number, dLng: number): Promise {\n try {\n const url = `https://router.project-osrm.org/route/v1/driving/${oLng},${oLat};${dLng},${dLat}?overview=false`;\n const res = await fetch(url);\n const data = await res.json();\n return data.routes[0].distance / 1000;\n } catch {\n return 10; // Valor de respaldo\n }\n}\n\n// ── 3. Configuración desde Supabase ───────────────────────────\nasync function obtenerConfig(): Promise> {\n try {\n const res = await fetch(`${SUPABASE_URL}/rest/v1/configuracion?select=clave,valor`, {\n headers: { apikey: SUPABASE_KEY, Authorization: `Bearer ${SUPABASE_KEY}` },\n });\n const rows: { clave: string; valor: string }[] = await res.json();\n return rows.reduce((acc, r) => ({ ...acc, [r.clave]: r.valor }), {});\n } catch {\n return {};\n }\n}\n\n// ── 4. Tareas desde catálogo Supabase ─────────────────────────\nasync function obtenerTareasCatalogo(codigos: string[]): Promise {\n if (!codigos.length) return [];\n const filtro = codigos.map((c) => `codigo.eq.${c}`).join(\",\");\n const res = await fetch(`${SUPABASE_URL}/rest/v1/catalogo_tareas?or=(${filtro})`, {\n headers: { apikey: SUPABASE_KEY, Authorization: `Bearer ${SUPABASE_KEY}` },\n });\n return res.json();\n}\n\n// ── 5. IA Gemini: análisis completo ───────────────────────────\nasync function analizarConGemini(descripcion: string, uf: number): Promise<{\n tareas: TareaIA[];\n correccion: string;\n resumen: string;\n hoja_ruta: string;\n normativa: string;\n epp_requerido: string[];\n alertas_seguridad: string[];\n}> {\n const prompt = `Eres un experto en servicios técnicos chilenos con conocimiento de normativa SEC, RIDAA y DS 594.\n\nAnaliza esta descripción de trabajo técnico en Chile:\n\"${descripcion}\"\n\nResponde ÚNICAMENTE con este JSON sin texto adicional ni markdown:\n{\n \"correccion\": \"texto corregido con vocabulario técnico chileno profesional\",\n \"resumen\": \"resumen técnico de 1 línea para el presupuesto\",\n \"normativa\": \"RIC N°XX / RIDAA Art.XX / DS 594 (la que aplique)\",\n \"hoja_ruta\": \"pasos ordenados de ejecución según normativa chilena vigente\",\n \"epp_requerido\": [\"casco\", \"guantes\", \"zapatos_seguridad\", \"lentes\", \"arnes\", \"extintor\", \"kit_primeros_auxilios\"],\n \"alertas_seguridad\": [\"descripción de riesgo 1\", \"descripción de riesgo 2\"],\n \"tareas\": [\n {\n \"nombre\": \"nombre técnico chileno de la tarea\",\n \"codigo_sugerido\": \"CATEGORIA_SUBTIPO_001\",\n \"cantidad\": 1,\n \"precio_uf\": 0.00,\n \"precio_clp\": 0,\n \"fuente_precio\": \"Habitissimo/Sodimac/Easy/Media nacional\",\n \"normativa\": \"normativa específica de esta tarea\"\n }\n ]\n}\n\nPara precios usa la media nacional chilena 2024:\n- Mano de obra: Habitissimo Chile, 2x3.cl\n- Materiales: Sodimac, Easy, Dartel Chile\n- 1 UF = ${uf} CLP`;\n\n const res = await fetch(`${GEMINI_URL}?key=${GEMINI_KEY}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n contents: [{ parts: [{ text: prompt }] }],\n generationConfig: { temperature: 0.2, maxOutputTokens: 2048 },\n }),\n });\n\n const data = await res.json();\n const texto = data.candidates?.[0]?.content?.parts?.[0]?.text ?? \"{}\";\n\n try {\n return JSON.parse(texto.replace(/```json|```/g, \"\").trim());\n } catch {\n return {\n correccion: descripcion,\n resumen: \"Trabajo técnico general\",\n hoja_ruta: \"Ejecutar según normativa vigente\",\n normativa: \"DS 594\",\n epp_requerido: [\"guantes\", \"zapatos_seguridad\"],\n alertas_seguridad: [],\n tareas: [],\n };\n }\n}\n\n// ── 6. Guardar tarea nueva en catálogo ────────────────────────\nasync function guardarEnCatalogo(tarea: TareaIA): Promise {\n try {\n const existe = await fetch(\n `${SUPABASE_URL}/rest/v1/catalogo_tareas?codigo=eq.${tarea.codigo_sugerido}`,\n { headers: { apikey: SUPABASE_KEY, Authorization: `Bearer ${SUPABASE_KEY}` } }\n );\n const data = await existe.json();\n if (data.length > 0) return;\n\n await fetch(`${SUPABASE_URL}/rest/v1/catalogo_tareas`, {\n method: \"POST\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n codigo: tarea.codigo_sugerido,\n descripcion: tarea.nombre,\n precio_uf: tarea.precio_uf,\n precio_clp: tarea.precio_clp,\n fuente: \"IA\",\n normativa: tarea.normativa ?? null,\n }),\n });\n } catch { /* silencioso */ }\n}\n\n// ── 7. Motor de Cálculo Financiero ────────────────────────────\nfunction calcularPresupuesto(params: {\n tareas: TareaIA[];\n uf: number;\n km: number;\n tipo: \"hogar\" | \"corporativo\";\n config: Record;\n}) {\n const { tareas, uf, km, tipo, config } = params;\n\n const margen = parseFloat(config.margen_hogar ?? \"0.25\");\n const margenCorp = parseFloat(config.margen_corporativo ?? \"0.40\");\n const margenFinal = tipo === \"hogar\" ? margen : margenCorp;\n const viaticBase = parseInt(tipo === \"hogar\" ? (config.viatico_hogar ?? \"7500\") : (config.viatico_corporativo ?? \"15000\"));\n const costoPorKm = parseInt(config.costo_km ?? \"120\");\n const ivaRate = parseFloat(config.iva ?? \"0.19\");\n\n let manoObraNeta = 0;\n const detalleTareas: any[] = [];\n\n for (const tarea of tareas) {\n const subtotal = tarea.precio_clp * tarea.cantidad;\n manoObraNeta += subtotal;\n detalleTareas.push({\n codigo: tarea.codigo_sugerido,\n descripcion: tarea.nombre,\n cantidad: tarea.cantidad,\n precio_uf: tarea.precio_uf,\n precio_clp: Math.round(tarea.precio_clp),\n subtotal: Math.round(subtotal),\n fuente: tarea.fuente_precio,\n normativa: tarea.normativa ?? null,\n });\n }\n\n const costoRuta = km * costoPorKm;\n const excedente = costoRuta > viaticBase ? costoRuta - viaticBase : 0;\n const logisticaTotal = viaticBase + excedente;\n\n const manoObraConMargen = manoObraNeta * (1 + margenFinal);\n // Logística CAMUFLADA dentro de mano de obra (cara al cliente)\n const manoObraItem = manoObraConMargen + logisticaTotal;\n\n const materialesBase = manoObraNeta * 0.20;\n const materialesItem = materialesBase * 1.15;\n\n const subtotalNeto = manoObraItem + materialesItem;\n const iva = subtotalNeto * ivaRate;\n const totalConIVA = subtotalNeto + iva;\n\n const anticipo60 = totalConIVA * 0.60;\n const saldo40 = totalConIVA * 0.40;\n\n const ivaManObra = iva * (manoObraItem / subtotalNeto);\n const ivaMateriales = iva * (materialesItem / subtotalNeto);\n\n return {\n uf_utilizada: uf,\n km_ruta: Math.round(km * 10) / 10,\n tipo_cliente: tipo,\n margen_aplicado: `${margenFinal * 100}%`,\n detalle_tareas: detalleTareas,\n // Desglose INTERNO (solo admin ve esto)\n desglose_interno: {\n mano_obra_neta: Math.round(manoObraNeta),\n margen_utilidad: Math.round(manoObraConMargen - manoObraNeta),\n viatico_base: viaticBase,\n excedente_ruta: Math.round(excedente),\n logistica_total: Math.round(logisticaTotal),\n materiales_base: Math.round(materialesBase),\n corretaje_materiales: Math.round(materialesBase * 0.15),\n subtotal_neto: Math.round(subtotalNeto),\n iva_19: Math.round(iva),\n },\n // Presupuesto CLIENTE (logística camuflada en mano de obra)\n presupuesto_cliente: {\n item_mano_obra: Math.round(manoObraItem + ivaManObra),\n item_materiales: Math.round(materialesItem + ivaMateriales),\n total_con_iva: Math.round(totalConIVA),\n anticipo_60: Math.round(anticipo60),\n saldo_40: Math.round(saldo40),\n },\n };\n}\n\n// ── 8. Mercado Pago: crear link de pago ───────────────────────\nasync function crearLinkMP(params: {\n titulo: string;\n monto: number;\n proyecto_id: string;\n tipo: \"anticipo\" | \"saldo\";\n telefono?: string;\n email?: string;\n}): Promise<{ link: string; preference_id: string; expiry: string } | null> {\n if (!MP_TOKEN) return null;\n\n try {\n const expiry = new Date(Date.now() + 20 * 60 * 1000); // 20 minutos hard expiry\n\n const body = {\n items: [{\n title: params.titulo,\n quantity: 1,\n unit_price: params.monto,\n currency_id: \"CLP\",\n }],\n external_reference: `${params.proyecto_id}-${params.tipo}`,\n date_of_expiration: expiry.toISOString(),\n back_urls: {\n success: \"https://sclapp.val.run/pago/success\",\n failure: \"https://sclapp.val.run/pago/failure\",\n pending: \"https://sclapp.val.run/pago/pending\",\n },\n auto_return: \"approved\",\n notification_url: \"https://sclapp.val.run/webhook/mp\",\n ...(params.email && {\n payer: { email: params.email, phone: { number: params.telefono ?? \"\" } }\n }),\n };\n\n const res = await fetch(MP_URL, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${MP_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(body),\n });\n\n const data = await res.json();\n\n if (data.id) {\n return {\n link: data.init_point,\n preference_id: data.id,\n expiry: expiry.toISOString(),\n };\n }\n return null;\n } catch {\n return null;\n }\n}\n\n// ── 9. Webhook Mercado Pago ───────────────────────────────────\nasync function procesarWebhookMP(body: any, req: Request): Promise {\n try {\n const xSignature = req.headers.get(\"x-signature\") ?? \"\";\n const xRequestId = req.headers.get(\"x-request-id\") ?? \"\";\n const dataId = body?.data?.id ?? \"\";\n\n // Verificar firma HMAC-SHA256\n const secret = Deno.env.get(\"MP_WEBHOOK_SECRET\") ?? \"\";\n const mensaje = `id:${dataId};request-id:${xRequestId};ts:${xSignature.split(\",\")[0]?.replace(\"ts=\",\"\")}`;\n const keyData = new TextEncoder().encode(secret);\n const msgData = new TextEncoder().encode(mensaje);\n const key = await crypto.subtle.importKey(\"raw\", keyData, { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const firma = await crypto.subtle.sign(\"HMAC\", key, msgData);\n const firmaHex = Array.from(new Uint8Array(firma)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n // Consultar pago en MP\n const resPago = await fetch(`https://api.mercadopago.com/v1/payments/${dataId}`, {\n headers: { Authorization: `Bearer ${MP_TOKEN}` },\n });\n const pago = await resPago.json();\n\n if (pago.status === \"approved\") {\n const [proyecto_id, tipo] = (pago.external_reference ?? \"\").split(\"-\");\n const fechaPago = new Date(pago.date_approved);\n\n // Verificar si es extemporáneo (después del expiry)\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite\");\n const resExpiry = await sqlite.execute({\n sql: `SELECT mp_expiry_${tipo} FROM proyectos WHERE id = ? LIMIT 1`,\n args: [proyecto_id],\n }).catch(() => null);\n\n const expiry = resExpiry?.rows?.[0]?.[0];\n const esExtemporaneo = expiry ? fechaPago > new Date(expiry as string) : false;\n\n if (esExtemporaneo) {\n // Liberar agenda y encolar devolución\n await fetch(`${SUPABASE_URL}/rest/v1/agenda?proyecto_id=eq.${proyecto_id}`, {\n method: \"PATCH\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ estado: \"liberado\" }),\n });\n return jsonResponse({ ok: false, razon: \"pago_extemporaneo\", devolucion: \"encolada\" });\n }\n\n // Actualizar estado del proyecto\n const nuevoEstado = tipo === \"anticipo\" ? \"anticipo_pagado\" : \"completado\";\n await fetch(`${SUPABASE_URL}/rest/v1/proyectos?id=eq.${proyecto_id}`, {\n method: \"PATCH\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n estado: nuevoEstado,\n [`mp_pagado_${tipo}`]: true,\n updated_at: new Date().toISOString(),\n }),\n });\n\n // Registrar pago en tabla pagos\n await fetch(`${SUPABASE_URL}/rest/v1/pagos`, {\n method: \"POST\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n proyecto_id,\n tipo,\n monto_clp: pago.transaction_amount,\n mp_payment_id: String(dataId),\n mp_status: \"approved\",\n fecha_pago: fechaPago.toISOString(),\n extemporaneo: false,\n webhook_hash: firmaHex,\n }),\n });\n }\n\n return jsonResponse({ ok: true });\n } catch (e: any) {\n return jsonResponse({ ok: false, error: e.message }, 500);\n }\n}\n\n// ── 10. Guardar proyecto en Supabase ──────────────────────────\nasync function guardarProyecto(presupuesto: any, payload: PayloadEntrada, ia: any): Promise {\n const proyecto = {\n tecnico_id: payload.tecnico_id ?? null,\n vehiculo_id: payload.vehiculo_id ?? null,\n tipo_cliente: payload.tipo_cliente,\n origen_lat: payload.origen_lat,\n origen_lng: payload.origen_lng,\n destino_lat: payload.destino_lat,\n destino_lng: payload.destino_lng,\n km_ruta: presupuesto.km_ruta,\n usar_tag: payload.usar_tag ?? false,\n uf_utilizada: presupuesto.uf_utilizada,\n total_con_iva: presupuesto.presupuesto_cliente.total_con_iva,\n anticipo_60: presupuesto.presupuesto_cliente.anticipo_60,\n saldo_40: presupuesto.presupuesto_cliente.saldo_40,\n margen_aplicado: presupuesto.margen_aplicado,\n descripcion_original: payload.descripcion_trabajo ?? \"\",\n descripcion_corregida: ia.correccion ?? \"\",\n descripcion_ia: ia.resumen ?? \"\",\n resumen_ia: ia.resumen ?? \"\",\n hoja_ruta_ia: ia.hoja_ruta ?? \"\",\n normativa_aplicable: ia.normativa ?? \"\",\n detalle_json: presupuesto,\n estado: \"presupuestado\",\n nombre_cliente: payload.nombre_cliente ?? null,\n telefono_cliente: payload.telefono_cliente ?? null,\n direccion_cliente: payload.direccion_cliente ?? null,\n created_at: new Date().toISOString(),\n updated_at: new Date().toISOString(),\n };\n\n const res = await fetch(`${SUPABASE_URL}/rest/v1/proyectos`, {\n method: \"POST\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n Prefer: \"return=representation\",\n },\n body: JSON.stringify(proyecto),\n });\n\n const data = await res.json();\n return data[0]?.id ?? \"sin-id\";\n}\n\n// ── 11. Guardar ítems de faena ────────────────────────────────\nasync function guardarItems(proyecto_id: string, tareas: TareaIA[]): Promise {\n if (!tareas.length) return;\n const items = tareas.map(t => ({\n proyecto_id,\n codigo_tarea: t.codigo_sugerido,\n descripcion: t.nombre,\n cantidad: t.cantidad,\n precio_uf: t.precio_uf,\n precio_clp: Math.round(t.precio_clp),\n subtotal_clp: Math.round(t.precio_clp * t.cantidad),\n fuente_precio: t.fuente_precio,\n }));\n\n await fetch(`${SUPABASE_URL}/rest/v1/faena_items`, {\n method: \"POST\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(items),\n });\n}\n\n// ── 12. Guardar checklist EPP ─────────────────────────────────\nasync function guardarEPP(proyecto_id: string, tecnico_id: string | undefined, epp: string[]): Promise {\n const eppData: Record = {\n casco: epp.includes(\"casco\"),\n guantes: epp.includes(\"guantes\"),\n zapatos_seguridad: epp.includes(\"zapatos_seguridad\"),\n lentes: epp.includes(\"lentes\"),\n arnes: epp.includes(\"arnes\"),\n extintor: epp.includes(\"extintor\"),\n kit_primeros_auxilios: epp.includes(\"kit_primeros_auxilios\"),\n };\n\n const contenido = JSON.stringify({ proyecto_id, tecnico_id, ...eppData, ts: new Date().toISOString() });\n const buffer = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(contenido));\n const hash = Array.from(new Uint8Array(buffer)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n await fetch(`${SUPABASE_URL}/rest/v1/checklist_epp`, {\n method: \"POST\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n proyecto_id,\n tecnico_id: tecnico_id ?? null,\n ...eppData,\n confirmado_at: new Date().toISOString(),\n hash_confirmacion: hash,\n }),\n });\n\n return hash;\n}\n\n// ── 13. Auditoría SHA-256 encadenada ──────────────────────────\nasync function registrarAuditoria(actorId: string, accion: string, estado: string, datos: object): Promise {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite\");\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS scl_audit_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id TEXT NOT NULL UNIQUE,\n timestamp TEXT NOT NULL,\n actor_id TEXT NOT NULL,\n action TEXT NOT NULL,\n status TEXT NOT NULL,\n payload TEXT NOT NULL,\n hash_verificacion TEXT NOT NULL\n );\n `);\n\n const event_id = crypto.randomUUID();\n const timestamp = new Date().toISOString();\n const payloadStr = JSON.stringify(datos);\n\n const ultimo = await sqlite.execute(\n `SELECT hash_verificacion FROM scl_audit_logs ORDER BY id DESC LIMIT 1`\n );\n const hashAnterior = ultimo.rows?.length > 0\n ? String(ultimo.rows[0][0])\n : \"BLOCK_GENESIS_SCL_V4\";\n\n const datos_hash = `${event_id}-${timestamp}-${actorId}-${accion}-${estado}-${payloadStr}-${hashAnterior}`;\n const buffer = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(datos_hash));\n const hash = Array.from(new Uint8Array(buffer)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n await sqlite.execute({\n sql: `INSERT INTO scl_audit_logs (event_id, timestamp, actor_id, action, status, payload, hash_verificacion) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [event_id, timestamp, actorId, accion, estado, payloadStr, hash],\n });\n\n return hash;\n}\n\n// ── HANDLER PRINCIPAL ─────────────────────────────────────────\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"OPTIONS\") return new Response(null, { headers: CORS });\n\n // ── Webhook Mercado Pago ─────────────────────────────────────\n if (req.method === \"POST\" && url.pathname === \"/webhook/mp\") {\n const body = await req.json().catch(() => ({}));\n return procesarWebhookMP(body, req);\n }\n\n // ── Validar RUT ──────────────────────────────────────────────\n if (req.method === \"GET\" && url.pathname === \"/validar-rut\") {\n const rut = url.searchParams.get(\"rut\") ?? \"\";\n return jsonResponse({ rut, valido: validarRUT(rut) });\n }\n\n // ── GET → últimos proyectos + integridad de auditoría ────────\n if (req.method === \"GET\") {\n try {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite\");\n const [resProyectos, resConfig, todosLogs] = await Promise.all([\n fetch(`${SUPABASE_URL}/rest/v1/proyectos?order=created_at.desc&limit=20&select=*`, {\n headers: { apikey: SUPABASE_KEY, Authorization: `Bearer ${SUPABASE_KEY}` },\n }),\n fetch(`${SUPABASE_URL}/rest/v1/configuracion?select=clave,valor`, {\n headers: { apikey: SUPABASE_KEY, Authorization: `Bearer ${SUPABASE_KEY}` },\n }),\n sqlite.execute(`SELECT * FROM scl_audit_logs ORDER BY id ASC`).catch(() => ({ rows: [] })),\n ]);\n\n const proyectos = await resProyectos.json();\n const configRows = await resConfig.json();\n const config = configRows.reduce((a: any, r: any) => ({ ...a, [r.clave]: r.valor }), {});\n const logs = todosLogs.rows ?? [];\n\n // Verificar integridad de cadena SHA-256\n let cadenaIntegra = true;\n let hashAnteriorEsperado = \"BLOCK_GENESIS_SCL_V4\";\n const bloquesCorruptos: number[] = [];\n\n for (const log of logs) {\n const [id, event_id, timestamp, actor_id, action, status, payload, hash_verificacion] = log;\n const datos = `${event_id}-${timestamp}-${actor_id}-${action}-${status}-${payload}-${hashAnteriorEsperado}`;\n const buffer = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(datos));\n const hashCalculado = Array.from(new Uint8Array(buffer)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n if (hashCalculado !== hash_verificacion) {\n cadenaIntegra = false;\n bloquesCorruptos.push(id as number);\n }\n hashAnteriorEsperado = hash_verificacion as string;\n }\n\n return jsonResponse({\n sistema: \"SCL APP v4.0\",\n slogan: \"La evolución del control operativo.\",\n proyectos,\n configuracion: config,\n auditoria: {\n total_registros: logs.length,\n estado_integridad: cadenaIntegra ? \"COMPLETAMENTE_SEGURO\" : \"SISTEMA_COMPROMETIDO\",\n verificado_en: new Date().toISOString(),\n bloques_afectados: bloquesCorruptos,\n },\n });\n } catch (error: any) {\n return jsonResponse({ success: false, error: error.message }, 500);\n }\n }\n\n // ── POST → IA + cálculo + Mercado Pago + auditoría ───────────\n if (req.method === \"POST\") {\n try {\n const body = await req.json() as PayloadEntrada;\n const actorId = sanitizar(body.actor_id || \"USR_MOVIL\");\n const descripcion = sanitizar(body.descripcion_trabajo || \"\");\n\n if (!body.tipo_cliente) {\n return jsonResponse({ error: \"Falta tipo_cliente\" }, 400);\n }\n if (!body.origen_lat || !body.destino_lat) {\n return jsonResponse({ error: \"Faltan coordenadas de origen o destino\" }, 400);\n }\n\n // Llamadas paralelas: UF + km + config\n const [uf, km, config] = await Promise.all([\n obtenerUF(),\n obtenerKm(body.origen_lat, body.origen_lng, body.destino_lat, body.destino_lng),\n obtenerConfig(),\n ]);\n\n let tareasFinales: TareaIA[] = [];\n let iaResultado: any = { correccion: descripcion, resumen: \"Trabajo técnico\", hoja_ruta: \"\", normativa: \"\", epp_requerido: [], alertas_seguridad: [] };\n\n // Análisis IA Gemini\n if (descripcion.length > 5) {\n iaResultado = await analizarConGemini(descripcion, uf);\n tareasFinales = iaResultado.tareas ?? [];\n for (const tarea of tareasFinales) {\n await guardarEnCatalogo(tarea);\n }\n }\n\n // Fallback: tareas manuales del catálogo\n if (tareasFinales.length === 0 && body.tareas?.length) {\n const catalogo = await obtenerTareasCatalogo(body.tareas.map(t => t.codigo));\n tareasFinales = body.tareas.map(t => {\n const cat = catalogo.find(c => c.codigo === t.codigo);\n return {\n nombre: cat?.descripcion ?? t.codigo,\n codigo_sugerido: t.codigo,\n cantidad: t.cantidad,\n precio_uf: cat?.precio_uf ?? 0,\n precio_clp: (cat?.precio_uf ?? 0) * uf,\n fuente_precio: \"Catálogo interno\",\n };\n });\n }\n\n const presupuesto = calcularPresupuesto({ tareas: tareasFinales, uf, km, tipo: body.tipo_cliente, config });\n\n // Guardar proyecto y sus ítems\n const proyecto_id = await guardarProyecto(presupuesto, body, iaResultado);\n await guardarItems(proyecto_id, tareasFinales);\n\n // Guardar checklist EPP\n let hashEPP = \"\";\n if (iaResultado.epp_requerido?.length > 0) {\n hashEPP = await guardarEPP(proyecto_id, body.tecnico_id, iaResultado.epp_requerido);\n }\n\n // Generar links Mercado Pago (si está configurado y se solicita)\n let pagoAnticipo = null;\n let pagoSaldo = null;\n\n if (MP_TOKEN && body.generar_link_pago) {\n [pagoAnticipo, pagoSaldo] = await Promise.all([\n crearLinkMP({\n titulo: `SCL APP — Anticipo 60% · ${iaResultado.resumen}`,\n monto: presupuesto.presupuesto_cliente.anticipo_60,\n proyecto_id,\n tipo: \"anticipo\",\n telefono: body.telefono_cliente,\n }),\n crearLinkMP({\n titulo: `SCL APP — Saldo 40% · ${iaResultado.resumen}`,\n monto: presupuesto.presupuesto_cliente.saldo_40,\n proyecto_id,\n tipo: \"saldo\",\n telefono: body.telefono_cliente,\n }),\n ]);\n\n // Actualizar proyecto con links MP\n if (pagoAnticipo || pagoSaldo) {\n await fetch(`${SUPABASE_URL}/rest/v1/proyectos?id=eq.${proyecto_id}`, {\n method: \"PATCH\",\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n mp_link_anticipo: pagoAnticipo?.link ?? null,\n mp_preference_anticipo: pagoAnticipo?.preference_id ?? null,\n mp_expiry_anticipo: pagoAnticipo?.expiry ?? null,\n mp_link_saldo: pagoSaldo?.link ?? null,\n mp_preference_saldo: pagoSaldo?.preference_id ?? null,\n mp_expiry_saldo: pagoSaldo?.expiry ?? null,\n }),\n });\n }\n }\n\n // Auditoría\n const firma = await registrarAuditoria(actorId, \"PRESUPUESTO_IA_GENERADO\", \"SUCCESS\", {\n proyecto_id,\n tipo_cliente: body.tipo_cliente,\n total: presupuesto.presupuesto_cliente.total_con_iva,\n km_ruta: presupuesto.km_ruta,\n tareas_detectadas: tareasFinales.length,\n normativa: iaResultado.normativa,\n epp_items: iaResultado.epp_requerido?.length ?? 0,\n });\n\n return jsonResponse({\n success: true,\n app: \"SCL APP v4.0 — La evolución del control operativo.\",\n proyecto_id,\n ia: {\n descripcion_corregida: iaResultado.correccion,\n resumen: iaResultado.resumen,\n hoja_ruta: iaResultado.hoja_ruta,\n normativa: iaResultado.normativa,\n epp_requerido: iaResultado.epp_requerido ?? [],\n alertas_seguridad: iaResultado.alertas_seguridad ?? [],\n tareas_detectadas: tareasFinales.length,\n },\n presupuesto,\n pagos: {\n anticipo: pagoAnticipo,\n saldo: pagoSaldo,\n },\n seguridad: {\n firma_sha256: firma,\n hash_epp: hashEPP,\n },\n });\n\n } catch (error: any) {\n return jsonResponse({ success: false, error: error.message }, 500);\n }\n }\n\n return jsonResponse({ error: \"Método no soportado\" }, 405);\n}","http","createdAt",["D",1780628571925],"branchVersion","branchId","8b736e0a-5f09-11f1-bb44-1607ee4eb77e","id","8b72b816-5f09-11f1-bb44-1607ee4eb77e","sclapp",["D",1780463002408],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","252f39d8-1a44-4452-bef4-c367dba55140","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e867b-0566-7166-a580-b82955e18fb1","tursoName","8b72b8165f0911f1bb441607ee4eb77e","tursoHostname","8b72b8165f0911f1bb441607ee4eb77e-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515657103],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":54,"_102":103,"_104":25},"branch",{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"isOwned",35,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","wilbercastellanos","handle","displayName","Wilber Castellanos","avatar","https://lh3.googleusercontent.com/a/ACg8ocJNbGBNmTaeXMcPaEpFusUbcLMTCJLP_rbU8-Ui29pgYJoqyi6z=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":154,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":155,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":156,"_81":157,"_83":158,"_85":25},"tree",[149],"files",[149],"counts",{"_137":60,"_138":139,"_140":60,"_141":142,"_143":144},"contents",[129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":37,"_35":36,"_24":25,"_135":-5,"_27":136},"b99b8a21-ff76-4311-b4c6-7208749c7e93","parentId","latest",["D",1780628571925],8,"label",[28],"pulls","branches",1,"forks","envVars",{"_145":147,"_148":60},"connections",{"_145":60,"_146":60},"count","unfilledCount",2,"emptyCount",{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":150,"_13":134,"_33":37,"_35":36,"_24":25,"_135":-5,"_151":152,"_27":153},["D",1780628571925],"children",[],[28],["D",1780463002408],["D",1789515657103],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":54,"_102":103,"_104":25},{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"ctx",{"_79":-5,"_126":192,"_193":194,"_195":196,"_197":25,"_198":25,"_199":25,"_200":124,"_201":-5,"_202":-7,"_203":-7,"_204":60,"_205":25,"_206":25,"_207":-5,"_208":25,"_209":25,"_210":25,"_211":-5},"ENV",{"_163":164,"_165":166,"_167":87,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v23