@greatapps/common 1.1.773 → 1.1.775

package/dist/components/account/sections/SecuritySection.mjs

@@ -7,6 +7,7 @@ import { useQueryClient } from "@tanstack/react-query";
 import { useAuth } from "../../../providers/auth.provider";
 import { useUnlinkGoogle } from "../../../modules/auth/hooks/unlink-google.hook";
 import { USER_QUERY_KEY } from "../../../modules/auth/hooks/useUserQuery";
+import { Button } from "../../ui/buttons/Button";
 import { Toast } from "../../ui/feedback/Toast";
 import { GoogleIcon } from "../../ui/data-display/GoogleIcon";
 function SecuritySection({
@@ -36,11 +37,12 @@ function SecuritySection({
         /* @__PURE__ */ jsx("span", { className: "paragraph-small-regular text-gray-600", children: translate("common.account.security.googleLinkedDescription") })
       ] }),
       /* @__PURE__ */ jsx(
-        "button",
+        Button,
         {
+          variant: "secondary",
+          className: "h-10! w-fit",
           type: "button",
           disabled: isUnlinking,
-          className: "paragraph-small-semibold text-zinc-700 bg-zinc-100 rounded-lg px-3 py-2 cursor-pointer hover:bg-zinc-200 transition-colors w-fit disabled:opacity-50 disabled:cursor-not-allowed",
           onClick: handleUnlinkGoogle,
           children: isUnlinking ? translate("common.account.security.unlinking") : translate("common.account.security.unlinkGoogle")
         }

package/dist/components/account/sections/SecuritySection.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/components/account/sections/SecuritySection.tsx"],"sourcesContent":["'use client';\n\nimport { IconAlertTriangle } from '@tabler/icons-react';\nimport { useTranslations } from 'next-intl';\nimport { toast } from 'sonner';\nimport { useQueryClient } from '@tanstack/react-query';\nimport { useAuth } from '../../../providers/auth.provider';\nimport { AccountSectionType } from '../../../enums/AccountSectionType';\nimport { useUnlinkGoogle } from '../../../modules/auth/hooks/unlink-google.hook';\nimport { USER_QUERY_KEY } from '../../../modules/auth/hooks/useUserQuery';\nimport { Toast } from '../../ui/feedback/Toast';\nimport { GoogleIcon } from '../../ui/data-display/GoogleIcon';\n\ninterface SecuritySectionProps {\n  setActiveSection: (section: AccountSectionType) => void;\n  onClose: () => void;\n  onDeleteAccount?: () => void;\n}\n\nexport function SecuritySection({\n  onDeleteAccount,\n}: SecuritySectionProps) {\n  const translate = useTranslations();\n  const { user } = useAuth();\n  const queryClient = useQueryClient();\n  const { mutateAsync: unlinkGoogle, isPending: isUnlinking } = useUnlinkGoogle();\n  const hasGoogleLinked = !!user?.google_sub;\n\n  const handleUnlinkGoogle = async () => {\n    try {\n      const result = await unlinkGoogle();\n      toast.custom((t) => (\n        <Toast variant=\"success\" message={result.message} toastId={t} />\n      ));\n      queryClient.invalidateQueries({ queryKey: USER_QUERY_KEY });\n    } catch (error) {\n      const message =\n        error instanceof Error ? error.message : translate('common.account.security.unlinkError');\n      toast.custom((toastId) => <Toast variant=\"error\" message={message} toastId={toastId} />);\n    }\n  };\n\n  return (\n    <div className=\"h-full overflow-y-auto overscroll-contain px-4 pb-20 lg:p-5 lg:pt-5 flex flex-col gap-5 lg:gap-6 lg:pb-31 lg:overscroll-auto\">\n      <span className=\"paragraph-medium-semibold text-gray-950 hidden lg:block\">\n        {translate('common.account.security.title')}\n      </span>\n\n      {hasGoogleLinked && (\n        <div className=\"flex flex-col items-center lg:items-start gap-4\">\n          <div className=\"size-10 rounded-lg bg-gray-50 flex items-center justify-center\">\n            <GoogleIcon size={20} />\n          </div>\n\n          <div className=\"flex flex-col gap-2\">\n            <span className=\"paragraph-medium-semibold text-gray-950\">\n              {translate('common.account.security.googleLinkedTitle')}\n            </span>\n            <span className=\"paragraph-small-regular text-gray-600\">\n              {translate('common.account.security.googleLinkedDescription')}\n            </span>\n          </div>\n\n          <button\n            type=\"button\"\n            disabled={isUnlinking}\n            className=\"paragraph-small-semibold text-zinc-700 bg-zinc-100 rounded-lg px-3 py-2 cursor-pointer hover:bg-zinc-200 transition-colors w-fit disabled:opacity-50 disabled:cursor-not-allowed\"\n            onClick={handleUnlinkGoogle}\n          >\n            {isUnlinking\n              ? translate('common.account.security.unlinking')\n              : translate('common.account.security.unlinkGoogle')}\n          </button>\n        </div>\n      )}\n\n      <div className=\"flex flex-col items-center lg:items-start gap-4\">\n        <div className=\"size-10 rounded-lg bg-red-50 flex items-center justify-center\">\n          <IconAlertTriangle size={20} className=\"text-red-500\" />\n        </div>\n\n        <div className=\"flex flex-col gap-2\">\n          <span className=\"paragraph-medium-semibold text-gray-950\">\n            {translate('common.account.deleteAccount.title')}\n          </span>\n          <span className=\"paragraph-small-regular text-gray-600\">\n            {translate('common.account.security.deleteAccountDescription')}\n          </span>\n        </div>\n\n        {onDeleteAccount && (\n          <button\n            type=\"button\"\n            className=\"paragraph-small-semibold text-red-600 bg-red-50 rounded-lg px-3 py-2 cursor-pointer hover:bg-red-100 transition-colors w-fit\"\n            onClick={onDeleteAccount}\n          >\n            {translate('common.account.security.deleteMyAccount')}\n          </button>\n        )}\n      </div>\n    </div>\n  );\n}\n"],"mappings":";AAgCQ,cAsBE,YAtBF;AA9BR,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAChC,SAAS,aAAa;AACtB,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AAExB,SAAS,uBAAuB;AAChC,SAAS,sBAAsB;AAC/B,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAQpB,SAAS,gBAAgB;AAAA,EAC9B;AACF,GAAyB;AACvB,QAAM,YAAY,gBAAgB;AAClC,QAAM,EAAE,KAAK,IAAI,QAAQ;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,aAAa,cAAc,WAAW,YAAY,IAAI,gBAAgB;AAC9E,QAAM,kBAAkB,CAAC,CAAC,MAAM;AAEhC,QAAM,qBAAqB,YAAY;AACrC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAClC,YAAM,OAAO,CAAC,MACZ,oBAAC,SAAM,SAAQ,WAAU,SAAS,OAAO,SAAS,SAAS,GAAG,CAC/D;AACD,kBAAY,kBAAkB,EAAE,UAAU,eAAe,CAAC;AAAA,IAC5D,SAAS,OAAO;AACd,YAAM,UACJ,iBAAiB,QAAQ,MAAM,UAAU,UAAU,qCAAqC;AAC1F,YAAM,OAAO,CAAC,YAAY,oBAAC,SAAM,SAAQ,SAAQ,SAAkB,SAAkB,CAAE;AAAA,IACzF;AAAA,EACF;AAEA,SACE,qBAAC,SAAI,WAAU,gIACb;AAAA,wBAAC,UAAK,WAAU,2DACb,oBAAU,+BAA+B,GAC5C;AAAA,IAEC,mBACC,qBAAC,SAAI,WAAU,mDACb;AAAA,0BAAC,SAAI,WAAU,kEACb,8BAAC,cAAW,MAAM,IAAI,GACxB;AAAA,MAEA,qBAAC,SAAI,WAAU,uBACb;AAAA,4BAAC,UAAK,WAAU,2CACb,oBAAU,2CAA2C,GACxD;AAAA,QACA,oBAAC,UAAK,WAAU,yCACb,oBAAU,iDAAiD,GAC9D;AAAA,SACF;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU;AAAA,UACV,WAAU;AAAA,UACV,SAAS;AAAA,UAER,wBACG,UAAU,mCAAmC,IAC7C,UAAU,sCAAsC;AAAA;AAAA,MACtD;AAAA,OACF;AAAA,IAGF,qBAAC,SAAI,WAAU,mDACb;AAAA,0BAAC,SAAI,WAAU,iEACb,8BAAC,qBAAkB,MAAM,IAAI,WAAU,gBAAe,GACxD;AAAA,MAEA,qBAAC,SAAI,WAAU,uBACb;AAAA,4BAAC,UAAK,WAAU,2CACb,oBAAU,oCAAoC,GACjD;AAAA,QACA,oBAAC,UAAK,WAAU,yCACb,oBAAU,kDAAkD,GAC/D;AAAA,SACF;AAAA,MAEC,mBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAAS;AAAA,UAER,oBAAU,yCAAyC;AAAA;AAAA,MACtD;AAAA,OAEJ;AAAA,KACF;AAEJ;","names":[]}
+{"version":3,"sources":["../../../../src/components/account/sections/SecuritySection.tsx"],"sourcesContent":["'use client';\n\nimport { IconAlertTriangle } from '@tabler/icons-react';\nimport { useTranslations } from 'next-intl';\nimport { toast } from 'sonner';\nimport { useQueryClient } from '@tanstack/react-query';\nimport { useAuth } from '../../../providers/auth.provider';\nimport { AccountSectionType } from '../../../enums/AccountSectionType';\nimport { useUnlinkGoogle } from '../../../modules/auth/hooks/unlink-google.hook';\nimport { USER_QUERY_KEY } from '../../../modules/auth/hooks/useUserQuery';\nimport { Button } from '../../ui/buttons/Button';\nimport { Toast } from '../../ui/feedback/Toast';\nimport { GoogleIcon } from '../../ui/data-display/GoogleIcon';\n\ninterface SecuritySectionProps {\n  setActiveSection: (section: AccountSectionType) => void;\n  onClose: () => void;\n  onDeleteAccount?: () => void;\n}\n\nexport function SecuritySection({\n  onDeleteAccount,\n}: SecuritySectionProps) {\n  const translate = useTranslations();\n  const { user } = useAuth();\n  const queryClient = useQueryClient();\n  const { mutateAsync: unlinkGoogle, isPending: isUnlinking } = useUnlinkGoogle();\n  const hasGoogleLinked = !!user?.google_sub;\n\n  const handleUnlinkGoogle = async () => {\n    try {\n      const result = await unlinkGoogle();\n      toast.custom((t) => (\n        <Toast variant=\"success\" message={result.message} toastId={t} />\n      ));\n      queryClient.invalidateQueries({ queryKey: USER_QUERY_KEY });\n    } catch (error) {\n      const message =\n        error instanceof Error ? error.message : translate('common.account.security.unlinkError');\n      toast.custom((toastId) => <Toast variant=\"error\" message={message} toastId={toastId} />);\n    }\n  };\n\n  return (\n    <div className=\"h-full overflow-y-auto overscroll-contain px-4 pb-20 lg:p-5 lg:pt-5 flex flex-col gap-5 lg:gap-6 lg:pb-31 lg:overscroll-auto\">\n      <span className=\"paragraph-medium-semibold text-gray-950 hidden lg:block\">\n        {translate('common.account.security.title')}\n      </span>\n\n      {hasGoogleLinked && (\n        <div className=\"flex flex-col items-center lg:items-start gap-4\">\n          <div className=\"size-10 rounded-lg bg-gray-50 flex items-center justify-center\">\n            <GoogleIcon size={20} />\n          </div>\n\n          <div className=\"flex flex-col gap-2\">\n            <span className=\"paragraph-medium-semibold text-gray-950\">\n              {translate('common.account.security.googleLinkedTitle')}\n            </span>\n            <span className=\"paragraph-small-regular text-gray-600\">\n              {translate('common.account.security.googleLinkedDescription')}\n            </span>\n          </div>\n\n          <Button\n            variant=\"secondary\"\n            className=\"h-10! w-fit\"\n            type=\"button\"\n            disabled={isUnlinking}\n            onClick={handleUnlinkGoogle}\n          >\n            {isUnlinking\n              ? translate('common.account.security.unlinking')\n              : translate('common.account.security.unlinkGoogle')}\n          </Button>\n        </div>\n      )}\n\n      <div className=\"flex flex-col items-center lg:items-start gap-4\">\n        <div className=\"size-10 rounded-lg bg-red-50 flex items-center justify-center\">\n          <IconAlertTriangle size={20} className=\"text-red-500\" />\n        </div>\n\n        <div className=\"flex flex-col gap-2\">\n          <span className=\"paragraph-medium-semibold text-gray-950\">\n            {translate('common.account.deleteAccount.title')}\n          </span>\n          <span className=\"paragraph-small-regular text-gray-600\">\n            {translate('common.account.security.deleteAccountDescription')}\n          </span>\n        </div>\n\n        {onDeleteAccount && (\n          <button\n            type=\"button\"\n            className=\"paragraph-small-semibold text-red-600 bg-red-50 rounded-lg px-3 py-2 cursor-pointer hover:bg-red-100 transition-colors w-fit\"\n            onClick={onDeleteAccount}\n          >\n            {translate('common.account.security.deleteMyAccount')}\n          </button>\n        )}\n      </div>\n    </div>\n  );\n}\n"],"mappings":";AAiCQ,cAsBE,YAtBF;AA/BR,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAChC,SAAS,aAAa;AACtB,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AAExB,SAAS,uBAAuB;AAChC,SAAS,sBAAsB;AAC/B,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAQpB,SAAS,gBAAgB;AAAA,EAC9B;AACF,GAAyB;AACvB,QAAM,YAAY,gBAAgB;AAClC,QAAM,EAAE,KAAK,IAAI,QAAQ;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,aAAa,cAAc,WAAW,YAAY,IAAI,gBAAgB;AAC9E,QAAM,kBAAkB,CAAC,CAAC,MAAM;AAEhC,QAAM,qBAAqB,YAAY;AACrC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAClC,YAAM,OAAO,CAAC,MACZ,oBAAC,SAAM,SAAQ,WAAU,SAAS,OAAO,SAAS,SAAS,GAAG,CAC/D;AACD,kBAAY,kBAAkB,EAAE,UAAU,eAAe,CAAC;AAAA,IAC5D,SAAS,OAAO;AACd,YAAM,UACJ,iBAAiB,QAAQ,MAAM,UAAU,UAAU,qCAAqC;AAC1F,YAAM,OAAO,CAAC,YAAY,oBAAC,SAAM,SAAQ,SAAQ,SAAkB,SAAkB,CAAE;AAAA,IACzF;AAAA,EACF;AAEA,SACE,qBAAC,SAAI,WAAU,gIACb;AAAA,wBAAC,UAAK,WAAU,2DACb,oBAAU,+BAA+B,GAC5C;AAAA,IAEC,mBACC,qBAAC,SAAI,WAAU,mDACb;AAAA,0BAAC,SAAI,WAAU,kEACb,8BAAC,cAAW,MAAM,IAAI,GACxB;AAAA,MAEA,qBAAC,SAAI,WAAU,uBACb;AAAA,4BAAC,UAAK,WAAU,2CACb,oBAAU,2CAA2C,GACxD;AAAA,QACA,oBAAC,UAAK,WAAU,yCACb,oBAAU,iDAAiD,GAC9D;AAAA,SACF;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,WAAU;AAAA,UACV,MAAK;AAAA,UACL,UAAU;AAAA,UACV,SAAS;AAAA,UAER,wBACG,UAAU,mCAAmC,IAC7C,UAAU,sCAAsC;AAAA;AAAA,MACtD;AAAA,OACF;AAAA,IAGF,qBAAC,SAAI,WAAU,mDACb;AAAA,0BAAC,SAAI,WAAU,iEACb,8BAAC,qBAAkB,MAAM,IAAI,WAAU,gBAAe,GACxD;AAAA,MAEA,qBAAC,SAAI,WAAU,uBACb;AAAA,4BAAC,UAAK,WAAU,2CACb,oBAAU,oCAAoC,GACjD;AAAA,QACA,oBAAC,UAAK,WAAU,yCACb,oBAAU,kDAAkD,GAC/D;AAAA,SACF;AAAA,MAEC,mBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAAS;AAAA,UAER,oBAAU,yCAAyC;AAAA;AAAA,MACtD;AAAA,OAEJ;AAAA,KACF;AAEJ;","names":[]}

package/dist/modules/auth/utils/assert-management-permission.mjs

@@ -1,9 +1,10 @@
 import "server-only";
+import { cache } from "react";
 import { UserProfile } from "../../users/schema";
 import { findUserById } from "../../users/action/find-user-by-id.action";
 import { ApiError } from "../../../infra/api/types";
 import { assertManagementSubscription } from "./assert-management-subscription";
-async function getCurrentUserProfile() {
+const getCurrentUserProfile = cache(async () => {
   const result = await findUserById();
   if (!result.success || !result.data) {
     throw new ApiError(
@@ -13,7 +14,7 @@ async function getCurrentUserProfile() {
     );
   }
   return result.data.profile;
-}
+});
 async function assertManagementPermission(permission) {
   const profile = await getCurrentUserProfile();
   switch (permission) {

package/dist/modules/auth/utils/assert-management-permission.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-permission.ts"],"sourcesContent":["import 'server-only';\n\nimport { UserProfile } from '../../users/schema';\nimport { findUserById } from '../../users/action/find-user-by-id.action';\nimport { ApiError } from '../../../infra/api/types';\nimport { assertManagementSubscription } from './assert-management-subscription';\nimport type { ManagementPermission } from '../types/management-permission.type';\n\nasync function getCurrentUserProfile() {\n  const result = await findUserById();\n\n  if (!result.success || !result.data) {\n    throw new ApiError(\n      ('error' in result && result.error) || 'Não foi possível identificar o usuário autenticado',\n      'USER_CONTEXT_FAILED',\n      403\n    );\n  }\n\n  return result.data.profile;\n}\n\nexport async function assertManagementPermission(permission: ManagementPermission) {\n  const profile = await getCurrentUserProfile();\n\n  switch (permission) {\n    case 'manage_pages':\n    case 'manage_redirects':\n    case 'manage_domains':\n    case 'manage_ab_tests':\n    case 'restore_pages':\n    case 'create_pages':\n    case 'update_pages':\n    case 'delete_pages':\n      if (profile === UserProfile.viewer) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    case 'manage_projects':\n    case 'delete_leads':\n    case 'view_cards':\n    case 'manage_cards':\n    case 'manage_subscriptions':\n      if (profile !== UserProfile.owner && profile !== UserProfile.admin) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    default:\n      throw new ApiError('Permissão inválida', 'INVALID_PERMISSION', 500);\n  }\n\n  const skipSubscriptionCheck: ManagementPermission[] = ['manage_subscriptions', 'manage_cards', 'view_cards'];\n  if (!skipSubscriptionCheck.includes(permission)) {\n    await assertManagementSubscription();\n  }\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,oCAAoC;AAG7C,eAAe,wBAAwB;AACrC,QAAM,SAAS,MAAM,aAAa;AAElC,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM;AACnC,UAAM,IAAI;AAAA,MACP,WAAW,UAAU,OAAO,SAAU;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK;AACrB;AAEA,eAAsB,2BAA2B,YAAkC;AACjF,QAAM,UAAU,MAAM,sBAAsB;AAE5C,UAAQ,YAAY;AAAA,IAClB,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,QAAQ;AAClC,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,SAAS,YAAY,YAAY,OAAO;AAClE,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF;AACE,YAAM,IAAI,SAAS,4BAAsB,sBAAsB,GAAG;AAAA,EACtE;AAEA,QAAM,wBAAgD,CAAC,wBAAwB,gBAAgB,YAAY;AAC3G,MAAI,CAAC,sBAAsB,SAAS,UAAU,GAAG;AAC/C,UAAM,6BAA6B;AAAA,EACrC;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-permission.ts"],"sourcesContent":["import 'server-only';\n\nimport { cache } from 'react';\n\nimport { UserProfile } from '../../users/schema';\nimport { findUserById } from '../../users/action/find-user-by-id.action';\nimport { ApiError } from '../../../infra/api/types';\nimport { assertManagementSubscription } from './assert-management-subscription';\nimport type { ManagementPermission } from '../types/management-permission.type';\n\n/**\n * Perfil do usuário autenticado, deduplicado por request via React.cache — mesma razão\n * do `requireValidSession`.\n *\n * Este gate abre TODA leitura e escrita gateada, e o perfil não depende da permissão que\n * está sendo checada: uma request que toca N services pagava N round-trips ao backend para\n * reler a mesma linha. Medido em produção (26/08, carregamento da aba de assinatura de uma\n * conta): ~30 GETs de `/accounts/{id}/users/{id}` em 20 s, 200–880 ms cada, competindo pelo\n * mesmo worker de banco que as chamadas de verdade.\n */\nconst getCurrentUserProfile = cache(async () => {\n  const result = await findUserById();\n\n  if (!result.success || !result.data) {\n    throw new ApiError(\n      ('error' in result && result.error) || 'Não foi possível identificar o usuário autenticado',\n      'USER_CONTEXT_FAILED',\n      403\n    );\n  }\n\n  return result.data.profile;\n});\n\nexport async function assertManagementPermission(permission: ManagementPermission) {\n  const profile = await getCurrentUserProfile();\n\n  switch (permission) {\n    case 'manage_pages':\n    case 'manage_redirects':\n    case 'manage_domains':\n    case 'manage_ab_tests':\n    case 'restore_pages':\n    case 'create_pages':\n    case 'update_pages':\n    case 'delete_pages':\n      if (profile === UserProfile.viewer) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    case 'manage_projects':\n    case 'delete_leads':\n    case 'view_cards':\n    case 'manage_cards':\n    case 'manage_subscriptions':\n      if (profile !== UserProfile.owner && profile !== UserProfile.admin) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    default:\n      throw new ApiError('Permissão inválida', 'INVALID_PERMISSION', 500);\n  }\n\n  const skipSubscriptionCheck: ManagementPermission[] = ['manage_subscriptions', 'manage_cards', 'view_cards'];\n  if (!skipSubscriptionCheck.includes(permission)) {\n    await assertManagementSubscription();\n  }\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAEtB,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,oCAAoC;AAa7C,MAAM,wBAAwB,MAAM,YAAY;AAC9C,QAAM,SAAS,MAAM,aAAa;AAElC,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM;AACnC,UAAM,IAAI;AAAA,MACP,WAAW,UAAU,OAAO,SAAU;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK;AACrB,CAAC;AAED,eAAsB,2BAA2B,YAAkC;AACjF,QAAM,UAAU,MAAM,sBAAsB;AAE5C,UAAQ,YAAY;AAAA,IAClB,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,QAAQ;AAClC,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,SAAS,YAAY,YAAY,OAAO;AAClE,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF;AACE,YAAM,IAAI,SAAS,4BAAsB,sBAAsB,GAAG;AAAA,EACtE;AAEA,QAAM,wBAAgD,CAAC,wBAAwB,gBAAgB,YAAY;AAC3G,MAAI,CAAC,sBAAsB,SAAS,UAAU,GAAG;AAC/C,UAAM,6BAA6B;AAAA,EACrC;AACF;","names":[]}

package/dist/modules/auth/utils/assert-management-subscription.mjs

@@ -1,8 +1,9 @@
 import "server-only";
+import { cache } from "react";
 import { ApiError } from "../../../infra/api/types";
 import { listSubscriptionsAction } from "../../subscriptions/actions/list-subscriptions.action";
 import { getSubscriptionExpiryDate } from "../../subscriptions/utils/get-subscription-expiry-date";
-async function assertManagementSubscription() {
+const assertManagementSubscription = cache(async () => {
   const result = await listSubscriptionsAction({ active: true });
   if (!result.success) {
     throw new ApiError(
@@ -28,7 +29,7 @@ async function assertManagementSubscription() {
       403
     );
   }
-}
+});
 export {
   assertManagementSubscription
 };

package/dist/modules/auth/utils/assert-management-subscription.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-subscription.ts"],"sourcesContent":["import \"server-only\";\n\nimport { ApiError } from \"../../../infra/api/types\";\nimport { listSubscriptionsAction } from \"../../subscriptions/actions/list-subscriptions.action\";\nimport { getSubscriptionExpiryDate } from \"../../subscriptions/utils/get-subscription-expiry-date\";\n\nexport async function assertManagementSubscription() {\n  const result = await listSubscriptionsAction({ active: true });\n\n  if (!result.success) {\n    throw new ApiError(\n      result.error || \"Não foi possível validar a assinatura atual\",\n      \"SUBSCRIPTION_CONTEXT_FAILED\",\n      403,\n    );\n  }\n\n  const subscription = result.data?.data?.[0];\n\n  if (!subscription) {\n    throw new ApiError(\n      \"Nenhuma assinatura ativa encontrada. Assine um plano para continuar.\",\n      \"SUBSCRIPTION_NOT_FOUND\",\n      403,\n    );\n  }\n\n  const expiryDate = getSubscriptionExpiryDate(subscription);\n  const isExpired = !!expiryDate && Date.now() >= expiryDate.getTime();\n\n  if (isExpired) {\n    throw new ApiError(\n      \"Sua assinatura está vencida. Assine um novo plano para continuar.\",\n      \"SUBSCRIPTION_EXPIRED\",\n      403,\n    );\n  }\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,iCAAiC;AAE1C,eAAsB,+BAA+B;AACnD,QAAM,SAAS,MAAM,wBAAwB,EAAE,QAAQ,KAAK,CAAC;AAE7D,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR,OAAO,SAAS;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,OAAO,MAAM,OAAO,CAAC;AAE1C,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,0BAA0B,YAAY;AACzD,QAAM,YAAY,CAAC,CAAC,cAAc,KAAK,IAAI,KAAK,WAAW,QAAQ;AAEnE,MAAI,WAAW;AACb,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-subscription.ts"],"sourcesContent":["import \"server-only\";\n\nimport { cache } from \"react\";\n\nimport { ApiError } from \"../../../infra/api/types\";\nimport { listSubscriptionsAction } from \"../../subscriptions/actions/list-subscriptions.action\";\nimport { getSubscriptionExpiryDate } from \"../../subscriptions/utils/get-subscription-expiry-date\";\n\n/**\n * Deduplicado por request via React.cache, como `getCurrentUserProfile` e `requireValidSession`.\n *\n * A leitura por trás é `/accounts/{id}/subscriptions?limit=1`, e ela é MAIS cara que o gate de\n * perfil: para conta Stripe a listagem consulta a API do gateway ao vivo. Em produção (26/08) o\n * mesmo carregamento disparou quatro dessas em paralelo — 727 ms, 4,2 s, 5,0 s e 7,0 s, contra um\n * p50 de 528 ms para o endpoint. Elas se atrasam entre si: são cópias da mesma pergunta disputando\n * a mesma fila.\n */\nexport const assertManagementSubscription = cache(async () => {\n  const result = await listSubscriptionsAction({ active: true });\n\n  if (!result.success) {\n    throw new ApiError(\n      result.error || \"Não foi possível validar a assinatura atual\",\n      \"SUBSCRIPTION_CONTEXT_FAILED\",\n      403,\n    );\n  }\n\n  const subscription = result.data?.data?.[0];\n\n  if (!subscription) {\n    throw new ApiError(\n      \"Nenhuma assinatura ativa encontrada. Assine um plano para continuar.\",\n      \"SUBSCRIPTION_NOT_FOUND\",\n      403,\n    );\n  }\n\n  const expiryDate = getSubscriptionExpiryDate(subscription);\n  const isExpired = !!expiryDate && Date.now() >= expiryDate.getTime();\n\n  if (isExpired) {\n    throw new ApiError(\n      \"Sua assinatura está vencida. Assine um novo plano para continuar.\",\n      \"SUBSCRIPTION_EXPIRED\",\n      403,\n    );\n  }\n});\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAEtB,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,iCAAiC;AAWnC,MAAM,+BAA+B,MAAM,YAAY;AAC5D,QAAM,SAAS,MAAM,wBAAwB,EAAE,QAAQ,KAAK,CAAC;AAE7D,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR,OAAO,SAAS;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,OAAO,MAAM,OAAO,CAAC;AAE1C,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,0BAA0B,YAAY;AACzD,QAAM,YAAY,CAAC,CAAC,cAAc,KAAK,IAAI,KAAK,WAAW,QAAQ;AAEnE,MAAI,WAAW;AACb,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF,CAAC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.773",
+  "version": "1.1.775",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",
@@ -46,6 +46,12 @@
     "dist",
     "src"
   ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
   "keywords": [],
   "author": "",
   "license": "ISC",
@@ -131,10 +137,5 @@
     "@faker-js/faker": {
       "optional": true
     }
-  },
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "typecheck": "tsc --noEmit"
   }
-}
+}

package/src/components/account/sections/SecuritySection.tsx

@@ -8,6 +8,7 @@ import { useAuth } from '../../../providers/auth.provider';
 import { AccountSectionType } from '../../../enums/AccountSectionType';
 import { useUnlinkGoogle } from '../../../modules/auth/hooks/unlink-google.hook';
 import { USER_QUERY_KEY } from '../../../modules/auth/hooks/useUserQuery';
+import { Button } from '../../ui/buttons/Button';
 import { Toast } from '../../ui/feedback/Toast';
 import { GoogleIcon } from '../../ui/data-display/GoogleIcon';
 
@@ -61,16 +62,17 @@ export function SecuritySection({
             </span>
           </div>
 
-          <button
+          <Button
+            variant="secondary"
+            className="h-10! w-fit"
             type="button"
             disabled={isUnlinking}
-            className="paragraph-small-semibold text-zinc-700 bg-zinc-100 rounded-lg px-3 py-2 cursor-pointer hover:bg-zinc-200 transition-colors w-fit disabled:opacity-50 disabled:cursor-not-allowed"
             onClick={handleUnlinkGoogle}
           >
             {isUnlinking
               ? translate('common.account.security.unlinking')
               : translate('common.account.security.unlinkGoogle')}
-          </button>
+          </Button>
         </div>
       )}
 

package/src/modules/auth/utils/assert-management-permission.ts

@@ -1,12 +1,24 @@
 import 'server-only';
 
+import { cache } from 'react';
+
 import { UserProfile } from '../../users/schema';
 import { findUserById } from '../../users/action/find-user-by-id.action';
 import { ApiError } from '../../../infra/api/types';
 import { assertManagementSubscription } from './assert-management-subscription';
 import type { ManagementPermission } from '../types/management-permission.type';
 
-async function getCurrentUserProfile() {
+/**
+ * Perfil do usuário autenticado, deduplicado por request via React.cache — mesma razão
+ * do `requireValidSession`.
+ *
+ * Este gate abre TODA leitura e escrita gateada, e o perfil não depende da permissão que
+ * está sendo checada: uma request que toca N services pagava N round-trips ao backend para
+ * reler a mesma linha. Medido em produção (26/08, carregamento da aba de assinatura de uma
+ * conta): ~30 GETs de `/accounts/{id}/users/{id}` em 20 s, 200–880 ms cada, competindo pelo
+ * mesmo worker de banco que as chamadas de verdade.
+ */
+const getCurrentUserProfile = cache(async () => {
   const result = await findUserById();
 
   if (!result.success || !result.data) {
@@ -18,7 +30,7 @@ async function getCurrentUserProfile() {
   }
 
   return result.data.profile;
-}
+});
 
 export async function assertManagementPermission(permission: ManagementPermission) {
   const profile = await getCurrentUserProfile();

package/src/modules/auth/utils/assert-management-subscription.ts

@@ -1,10 +1,21 @@
 import "server-only";
 
+import { cache } from "react";
+
 import { ApiError } from "../../../infra/api/types";
 import { listSubscriptionsAction } from "../../subscriptions/actions/list-subscriptions.action";
 import { getSubscriptionExpiryDate } from "../../subscriptions/utils/get-subscription-expiry-date";
 
-export async function assertManagementSubscription() {
+/**
+ * Deduplicado por request via React.cache, como `getCurrentUserProfile` e `requireValidSession`.
+ *
+ * A leitura por trás é `/accounts/{id}/subscriptions?limit=1`, e ela é MAIS cara que o gate de
+ * perfil: para conta Stripe a listagem consulta a API do gateway ao vivo. Em produção (26/08) o
+ * mesmo carregamento disparou quatro dessas em paralelo — 727 ms, 4,2 s, 5,0 s e 7,0 s, contra um
+ * p50 de 528 ms para o endpoint. Elas se atrasam entre si: são cópias da mesma pergunta disputando
+ * a mesma fila.
+ */
+export const assertManagementSubscription = cache(async () => {
   const result = await listSubscriptionsAction({ active: true });
 
   if (!result.success) {
@@ -35,4 +46,4 @@ export async function assertManagementSubscription() {
       403,
     );
   }
-}
+});