@greatapps/common 1.1.541 → 1.1.543

package/src/modules/auth/utils/require-valid-session.ts

@@ -0,0 +1,35 @@
+import 'server-only';
+
+import { cache } from 'react';
+
+import { ApiError } from '../../../infra/api/types';
+import { getClientInfoFromRequest } from '../../../infra/utils/client-info';
+import { authService } from '../services/auth.service';
+
+/**
+ * Valida a sessão do usuário chamando POST /auth/keep no backend.
+ *
+ * Garante que o cookie `greatapps`:
+ *   1. Existe.
+ *   2. Corresponde a uma sessão registrada no banco (não foi forjado).
+ *   3. Ainda é considerada válida pelo backend (não foi revogada/expirada).
+ *
+ * Deduplicada por request via React.cache — múltiplas chamadas dentro do
+ * mesmo server action resultam em 1 round-trip ao backend, não N.
+ *
+ * Use em server actions sensíveis (mutações, billing, destrutivas).
+ * Prefira o wrapper `safeMutationAction` que já envelopa isto junto com
+ * o `safeServerAction` padrão.
+ *
+ * Em caso de erro de rede/backend, falha fechada (SESSION_INVALID 401).
+ */
+export const requireValidSession = cache(async (): Promise<void> => {
+  if (process.env.DUMMY_AUTH_TOKEN) return;
+
+  const clientInfo = await getClientInfoFromRequest();
+  const isValid = await authService.validateSession(clientInfo);
+
+  if (!isValid) {
+    throw new ApiError('Sessão inválida ou expirada', 'SESSION_INVALID', 401);
+  }
+});

package/src/modules/cards/actions/create-card.action.ts

@@ -1,9 +1,9 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { cardsService } from '../services/cards.service';
 import { CreateCardRequest } from '../types';
 
 export async function createCardAction(data: CreateCardRequest) {
-  return safeServerAction(() => cardsService.createCard(data));
+  return safeMutationAction(() => cardsService.createCard(data));
 }

package/src/modules/cards/actions/delete-card.action.ts

@@ -1,8 +1,8 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { cardsService } from '../services/cards.service';
 
 export async function deleteCardAction(id: string) {
-  return safeServerAction(() => cardsService.deleteCard(id));
+  return safeMutationAction(() => cardsService.deleteCard(id));
 }

package/src/modules/cards/actions/set-default-card.action.ts

@@ -1,8 +1,8 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { cardsService } from '../services/cards.service';
 
 export async function setDefaultCardAction(cardId: string) {
-  return safeServerAction(() => cardsService.setDefaultCard(cardId));
+  return safeMutationAction(() => cardsService.setDefaultCard(cardId));
 }

package/src/modules/pages/actions/count-pages.action.ts

@@ -0,0 +1,10 @@
+'use server';
+
+import { safeServerAction } from '../../../utils/safeServerAction';
+import { pagesService } from '../services/pages.service';
+
+export async function countPagesAction() {
+  return safeServerAction(async () => ({
+    total: await pagesService.countPages(),
+  }));
+}

package/src/modules/pages/constants/query-keys.constants.ts

@@ -0,0 +1 @@
+export const PAGES_QUERY_KEY = ['pages'] as const;

package/src/modules/pages/hooks/count-pages.hook.ts

@@ -0,0 +1,22 @@
+'use client';
+
+import { useQuery } from '@tanstack/react-query';
+import { countPagesAction } from '../actions/count-pages.action';
+import { PAGES_QUERY_KEY } from '../constants/query-keys.constants';
+import { withAction } from '../../../utils/withAction';
+import { useAuthQueryKey } from '../../../hooks/useAuthQueryKey';
+
+export const COUNT_PAGES_QUERY_KEY = [...PAGES_QUERY_KEY, 'count'] as const;
+
+export function useCountPages() {
+  const queryKey = useAuthQueryKey([...COUNT_PAGES_QUERY_KEY]);
+
+  return useQuery({
+    queryKey,
+    queryFn: async () => {
+      const result = await withAction(countPagesAction)();
+      return result.total;
+    },
+    staleTime: 30_000,
+  });
+}

package/src/modules/pages/services/pages.service.ts

@@ -0,0 +1,27 @@
+import 'server-only';
+
+import { api } from '../../../infra/api/client';
+import { ApiError, ApiPaginatedActionResult } from '../../../infra/api/types';
+import { getUserContext } from '../../auth/utils/get-user-context';
+
+class PagesService {
+  async countPages(): Promise<number> {
+    const { id_account } = await getUserContext();
+
+    const url = `/account/${id_account}/pages?limit=1`;
+
+    const response = await api.pages.get<ApiPaginatedActionResult<unknown>>(url);
+
+    if (response.status === 0) {
+      throw new ApiError(
+        response.message || 'Erro ao contar páginas',
+        'COUNT_PAGES_FAILED',
+        400,
+      );
+    }
+
+    return response.total;
+  }
+}
+
+export const pagesService = new PagesService();

package/src/modules/projects/actions/add-project-user.action.ts

@@ -1,9 +1,9 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { projectUsersService } from '../services/project-users.service';
 import type { AddRemoveProjectUsersParams } from '../types';
 
 export async function addProjectUserAction(params: AddRemoveProjectUsersParams) {
-  return safeServerAction(() => projectUsersService.addToProject(params));
+  return safeMutationAction(() => projectUsersService.addToProject(params));
 }

package/src/modules/projects/actions/create-project.action.ts

@@ -1,9 +1,9 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { projectsService } from '../services/projects.service';
 import type { CreateProjectRequest } from '../types';
 
 export async function createProjectAction(data: CreateProjectRequest) {
-  return safeServerAction(() => projectsService.create(data));
+  return safeMutationAction(() => projectsService.create(data));
 }

package/src/modules/projects/actions/delete-project.action.ts

@@ -1,8 +1,8 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { projectsService } from '../services/projects.service';
 
 export async function deleteProjectAction(projectId: number, moveToProjectId: number) {
-  return safeServerAction(() => projectsService.delete(projectId, moveToProjectId));
+  return safeMutationAction(() => projectsService.delete(projectId, moveToProjectId));
 }

package/src/modules/projects/actions/remove-project-user.action.ts

@@ -1,9 +1,9 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { projectUsersService } from '../services/project-users.service';
 import type { AddRemoveProjectUsersParams } from '../types';
 
 export async function removeProjectUserAction(params: AddRemoveProjectUsersParams) {
-  return safeServerAction(() => projectUsersService.removeFromProject(params));
+  return safeMutationAction(() => projectUsersService.removeFromProject(params));
 }

package/src/modules/projects/actions/update-project.action.ts

@@ -1,9 +1,9 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { projectsService } from '../services/projects.service';
 import type { UpdateProjectRequest } from '../types';
 
 export async function updateProjectAction(projectId: number, data: UpdateProjectRequest) {
-  return safeServerAction(() => projectsService.update(projectId, data));
+  return safeMutationAction(() => projectsService.update(projectId, data));
 }

package/src/modules/subscriptions/actions/update-subscription-plan.action.ts

@@ -1,6 +1,6 @@
 "use server";
 
-import { safeServerAction } from "../../../utils/safeServerAction";
+import { safeMutationAction } from "../../../utils/safeMutationAction";
 import type { UpdateSubscriptionPlanRequest } from "../types/calculate-subscription.type";
 import { subscriptionsService } from "../services/subscriptions.service";
 
@@ -8,7 +8,7 @@ export async function updateSubscriptionPlanAction(
   subscriptionId: number | string,
   data: UpdateSubscriptionPlanRequest,
 ) {
-  return safeServerAction(async () => {
+  return safeMutationAction(async () => {
     return subscriptionsService.updateSubscriptionPlan(subscriptionId, data);
   });
 }

package/src/modules/users/action/mark-all-messages-as-read.action.ts

@@ -1,8 +1,8 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { messagesService } from '../services/messages.service';
 
 export async function markAllMessagesAsReadAction() {
-  return safeServerAction(() => messagesService.markAllAsRead());
+  return safeMutationAction(() => messagesService.markAllAsRead());
 }

package/src/modules/users/action/mark-message-as-read.action.ts

@@ -1,8 +1,8 @@
 'use server';
 
-import { safeServerAction } from '../../../utils/safeServerAction';
+import { safeMutationAction } from '../../../utils/safeMutationAction';
 import { messagesService } from '../services/messages.service';
 
 export async function markMessageAsReadAction(messageId: string) {
-  return safeServerAction(() => messagesService.markAsRead(messageId));
+  return safeMutationAction(() => messagesService.markAsRead(messageId));
 }

package/src/server.ts

@@ -32,6 +32,7 @@ export { createCardAction } from './modules/cards/actions/create-card.action';
 export { resolvePlanExtrasPrices } from './modules/subscriptions/utils/resolve-plan-extras-prices';
 export { hasSubscriptionExpired } from './modules/subscriptions/utils/has-subscription-expired';
 export { listIaCreditsAction } from './modules/ia-credits/actions/list-ia-credits.action';
+export { countPagesAction } from './modules/pages/actions/count-pages.action';
 
 // Project Services & Actions (server-only)
 export { projectsService } from './modules/projects/services/projects.service';
@@ -72,8 +73,10 @@ export {
 // Server Utils
 export { getClientInfoFromRequest } from './infra/utils/client-info';
 export { getUserContext } from './modules/auth/utils/get-user-context';
+export { requireValidSession } from './modules/auth/utils/require-valid-session';
 export { buildWlOverride, buildWlOverrideFromJwt } from './modules/auth/utils/build-wl-override';
 export { safeServerAction } from './utils/safeServerAction';
+export { safeMutationAction } from './utils/safeMutationAction';
 
 // Image Processing (server-side)
 export { processImageAction } from './modules/images/actions/process-image.action';

package/src/store/useAccountModals.ts

@@ -17,15 +17,14 @@ interface AccountModalsState {
   activeModal: AccountModalType | null;
   config: AccountModalsConfig;
   initialSection?: AccountSectionType;
-  pagesCount: number;
 
   /** Called by <AccountModals> to keep app-level config in sync */
   updateConfig: (config: AccountModalsConfig) => void;
 
   openConfigurations: (initialSection?: AccountSectionType) => void;
-  openDeleteAccount: (pagesCount?: number) => void;
+  openDeleteAccount: () => void;
   openIsntPossibleDelete: () => void;
-  openConfirmDelete: (pagesCount?: number) => void;
+  openConfirmDelete: () => void;
   close: () => void;
 }
 
@@ -33,21 +32,20 @@ export const useAccountModals = create<AccountModalsState>((set) => ({
   activeModal: null,
   config: {},
   initialSection: undefined,
-  pagesCount: 0,
 
   updateConfig: (config) => set({ config }),
 
   openConfigurations: (initialSection) =>
     set({ activeModal: 'configurations', initialSection }),
 
-  openDeleteAccount: (pagesCount = 0) =>
-    set({ activeModal: 'deleteAccount', pagesCount }),
+  openDeleteAccount: () =>
+    set({ activeModal: 'deleteAccount' }),
 
   openIsntPossibleDelete: () =>
     set({ activeModal: 'isntPossibleDelete' }),
 
-  openConfirmDelete: (pagesCount = 0) =>
-    set({ activeModal: 'confirmDelete', pagesCount }),
+  openConfirmDelete: () =>
+    set({ activeModal: 'confirmDelete' }),
 
   close: () =>
     set({ activeModal: null, initialSection: undefined }),

package/src/utils/safeMutationAction.ts

@@ -0,0 +1,30 @@
+import 'server-only';
+
+import type { ActionResult } from '../infra/api/types';
+import { requireValidSession } from '../modules/auth/utils/require-valid-session';
+import { safeServerAction } from './safeServerAction';
+
+/**
+ * Wrapper para server actions que mutam estado (delete/update/create/publish/
+ * billing/etc.). Faz validação de sessão contra o backend (`POST /auth/keep`)
+ * antes de executar a ação e roteia erros via `safeServerAction`.
+ *
+ * A validação é deduplicada por request — múltiplas actions sensíveis que
+ * rodem dentro de uma mesma request pagam 1 round-trip ao backend, não N.
+ *
+ * Motivação (resumo): o backend confia no par `(whitelabel-token, id_account
+ * no path)` nos endpoints de CRUD; o Next.js deriva `id_account` de
+ * `atob(cookie)` sem verificar assinatura. Chamar `requireValidSession`
+ * aqui garante que o cookie corresponde a uma sessão real no banco antes
+ * de qualquer mutação.
+ *
+ * Para reads não-sensíveis, continue usando `safeServerAction` direto.
+ */
+export async function safeMutationAction<T>(
+  fn: () => Promise<T>
+): Promise<ActionResult<T>> {
+  return safeServerAction(async () => {
+    await requireValidSession();
+    return fn();
+  });
+}