Implementa o MVP do Adaptador de Planilhas no Elo Pro.

O módulo usa a identidade Supabase, isola cada workspace e registra storage, TTL, runner e biblioteca XLSX como decisões ainda abertas.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/app/api/auth/logout/route.ts

@@ -0,0 +1,24 @@
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+import { createServerClient } from "@supabase/ssr";
+
+export const runtime = "nodejs";
+
+export async function POST() {
+  const jar = await cookies();
+  jar.delete("adapter_dev_session");
+  const url = process.env.NEXT_PUBLIC_SUPABASE_URL;
+  const key = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+  if (url && key) {
+    const supabase = createServerClient(url, key, {
+      cookies: {
+        getAll: () => jar.getAll(),
+        setAll: (items) => {
+          for (const item of items) jar.set(item.name, item.value, item.options);
+        },
+      },
+    });
+    await supabase.auth.signOut();
+  }
+  return NextResponse.json({ ok: true });
+}

src/app/api/dev/session/route.ts

@@ -0,0 +1,29 @@
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+import { getDb } from "@/infra/db/client";
+import { ensureDevFixtures } from "@/dev/fixtures";
+import { devAuthEnabled, signDevSession } from "@/server/auth/dev-session";
+
+export const runtime = "nodejs";
+
+export async function POST(request: Request) {
+  if (!devAuthEnabled()) return NextResponse.json({ error: { code: "NOT_FOUND", message: "Indisponível." } }, { status: 404 });
+  const body = (await request.json()) as { userId?: string; workspaceId?: string };
+  if (!body.userId || !body.workspaceId) {
+    return NextResponse.json({ error: { code: "UNAUTHENTICATED", message: "Identidade incompleta." } }, { status: 400 });
+  }
+  const db = await getDb();
+  await ensureDevFixtures(db);
+  const members = await db.withService((query) =>
+    query.query(`select role from public.workspace_members where user_id = $1 and workspace_id = $2`, [body.userId, body.workspaceId]),
+  );
+  if (!members[0]) return NextResponse.json({ error: { code: "WORKSPACE_FORBIDDEN", message: "Vínculo não encontrado." } }, { status: 403 });
+  const jar = await cookies();
+  jar.set("adapter_dev_session", signDevSession(body.userId, body.workspaceId), {
+    httpOnly: true,
+    sameSite: "lax",
+    path: "/",
+    maxAge: 60 * 60 * 8,
+  });
+  return NextResponse.json({ ok: true });
+}

src/app/api/health/route.ts

@@ -0,0 +1,20 @@
+import { NextResponse } from "next/server";
+import { getDb } from "@/infra/db/client";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function GET() {
+  try {
+    const db = await getDb();
+    await db.withService((query) => query.query("select 1 as ok"));
+    return NextResponse.json({
+      ok: true,
+      module: "spreadsheet-adapter",
+      redis: process.env.REDIS_URL ? "configured" : "not_configured",
+      storage: process.env.SUPABASE_STORAGE_BUCKET ? "supabase" : "unconfigured",
+    });
+  } catch {
+    return NextResponse.json({ ok: false }, { status: 503 });
+  }
+}

src/app/api/spreadsheet-adapter/_lib.ts

@@ -0,0 +1,27 @@
+import { NextResponse } from "next/server";
+import { AdapterError, isAdapterError } from "@/domain/spreadsheet-adapter/errors";
+import type { RequestContext } from "@/domain/spreadsheet-adapter/types";
+import { resolveAuth } from "@/server/auth/context";
+import type { AppDeps } from "@/server/spreadsheet-adapter/deps";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export function errorResponse(error: unknown): NextResponse {
+  if (isAdapterError(error)) {
+    return NextResponse.json(
+      { error: { code: error.code, message: error.message, details: error.details ?? null } },
+      { status: error.status },
+    );
+  }
+  console.error("spreadsheet-adapter", error instanceof Error ? error.name : "error");
+  return NextResponse.json({ error: { code: "INTERNAL", message: "Erro interno." } }, { status: 500 });
+}
+
+export async function requireReady(): Promise<{ ctx: RequestContext; deps: AppDeps }> {
+  const auth = await resolveAuth();
+  if (auth.kind === "anonymous") throw new AdapterError("UNAUTHENTICATED", "Sessão Elo Pro necessária.", 401);
+  if (auth.kind !== "ok") throw new AdapterError("WORKSPACE_FORBIDDEN", "Workspace não autorizado.", 403);
+  const { runtimeDeps } = await import("@/server/spreadsheet-adapter/runtime");
+  return { ctx: auth.ctx, deps: await runtimeDeps() };
+}

src/app/api/spreadsheet-adapter/jobs/[id]/download/route.ts

@@ -0,0 +1,31 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../../_lib";
+import { downloadOutput } from "@/server/spreadsheet-adapter/process-job";
+import type { OutputFormat } from "@/domain/spreadsheet-adapter/types";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function GET(request: Request, context: { params: Promise<{ id: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id } = await context.params;
+    const url = new URL(request.url);
+    const format = url.searchParams.get("format") as OutputFormat | null;
+    const sourceId = url.searchParams.get("sourceId");
+    if (!sourceId || (format !== "xlsx" && format !== "csv" && format !== "pdf")) {
+      return NextResponse.json({ error: { code: "INVALID_FORMAT", message: "Escolha XLSX, CSV ou PDF." } }, { status: 400 });
+    }
+    const file = await downloadOutput(deps, ctx, id, sourceId, format);
+    return new NextResponse(new Uint8Array(file.body), {
+      headers: {
+        "Content-Type": file.contentType,
+        "Content-Disposition": `attachment; filename="${file.filename}"`,
+        "Cache-Control": "no-store",
+        "X-Content-Type-Options": "nosniff",
+      },
+    });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/jobs/[id]/mappings/route.ts

@@ -0,0 +1,22 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../../_lib";
+import { rejectWorkspaceForgery, saveMappings } from "@/server/spreadsheet-adapter/service";
+import type { MappingInput } from "@/server/spreadsheet-adapter/dto";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function PUT(request: Request, context: { params: Promise<{ id: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id } = await context.params;
+    const body = (await request.json()) as { sourceId?: string; mappings?: MappingInput[]; workspace_id?: string };
+    await rejectWorkspaceForgery(deps, ctx, body.workspace_id);
+    if (!body.sourceId || !Array.isArray(body.mappings)) {
+      return NextResponse.json({ error: { code: "MAPPING_INCOMPLETE", message: "Informe o mapeamento." } }, { status: 400 });
+    }
+    return NextResponse.json({ job: await saveMappings(deps, ctx, id, body.sourceId, body.mappings) });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/jobs/[id]/preview/route.ts

@@ -0,0 +1,19 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../../_lib";
+import { previewSource, rejectWorkspaceForgery } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function POST(request: Request, context: { params: Promise<{ id: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id } = await context.params;
+    const body = (await request.json()) as { sourceId?: string; workspace_id?: string };
+    await rejectWorkspaceForgery(deps, ctx, body.workspace_id);
+    if (!body.sourceId) return NextResponse.json({ error: { code: "NOT_FOUND", message: "Informe a fonte." } }, { status: 400 });
+    return NextResponse.json(await previewSource(deps, ctx, id, body.sourceId));
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/jobs/[id]/process/route.ts

@@ -0,0 +1,22 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../../_lib";
+import { rejectWorkspaceForgery, startProcess } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function POST(request: Request, context: { params: Promise<{ id: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id } = await context.params;
+    const body = (await request.json()) as { sourceId?: string; idempotencyKey?: string; workspace_id?: string };
+    await rejectWorkspaceForgery(deps, ctx, body.workspace_id);
+    if (!body.sourceId || !body.idempotencyKey) {
+      return NextResponse.json({ error: { code: "IDEMPOTENCY_REQUIRED", message: "Informe a fonte e a chave de idempotência." } }, { status: 400 });
+    }
+    const job = await startProcess(deps, ctx, id, body.sourceId, body.idempotencyKey);
+    return NextResponse.json({ job });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/jobs/[id]/route.ts

@@ -0,0 +1,16 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../_lib";
+import { getJob } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function GET(_request: Request, context: { params: Promise<{ id: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id } = await context.params;
+    return NextResponse.json({ job: await getJob(deps, ctx, id) });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/jobs/[id]/sources/[sourceId]/route.ts

@@ -0,0 +1,31 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../../../_lib";
+import { rejectWorkspaceForgery, removeSource, updateSource } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function PATCH(request: Request, context: { params: Promise<{ id: string; sourceId: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id, sourceId } = await context.params;
+    const body = (await request.json()) as { sheet?: string | null; headerRow?: number; workspace_id?: string };
+    await rejectWorkspaceForgery(deps, ctx, body.workspace_id);
+    const result = await updateSource(deps, ctx, id, sourceId, { sheet: body.sheet, headerRow: body.headerRow });
+    return NextResponse.json(result, { status: result.httpStatus });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}
+
+export async function DELETE(request: Request, context: { params: Promise<{ id: string; sourceId: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id, sourceId } = await context.params;
+    const body = await request.json().catch(() => ({}));
+    await rejectWorkspaceForgery(deps, ctx, (body as { workspace_id?: string }).workspace_id);
+    return NextResponse.json({ job: await removeSource(deps, ctx, id, sourceId) });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/jobs/route.ts

@@ -0,0 +1,19 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../_lib";
+import { createJob, rejectWorkspaceForgery } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function POST(request: Request) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const body = (await request.json()) as { modelId?: string; idempotencyKey?: string; workspace_id?: string };
+    await rejectWorkspaceForgery(deps, ctx, body.workspace_id);
+    if (!body.modelId) return NextResponse.json({ error: { code: "NOT_FOUND", message: "Selecione um modelo." } }, { status: 400 });
+    const job = await createJob(deps, ctx, body.modelId, body.idempotencyKey);
+    return NextResponse.json({ job }, { status: 201 });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/models/[id]/route.ts

@@ -0,0 +1,19 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../_lib";
+import { deleteModel, rejectWorkspaceForgery } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function DELETE(request: Request, context: { params: Promise<{ id: string }> }) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const { id } = await context.params;
+    const body = await request.json().catch(() => ({}));
+    await rejectWorkspaceForgery(deps, ctx, (body as { workspace_id?: string }).workspace_id);
+    await deleteModel(deps, ctx, id);
+    return NextResponse.json({ ok: true });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/models/route.ts

@@ -0,0 +1,40 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../_lib";
+import { createModel, listModels, rejectWorkspaceForgery } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function GET() {
+  try {
+    const { ctx, deps } = await requireReady();
+    return NextResponse.json({ models: await listModels(deps, ctx) });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}
+
+export async function POST(request: Request) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const form = await request.formData();
+    await rejectWorkspaceForgery(deps, ctx, form.get("workspace_id"));
+    const file = form.get("file");
+    if (!(file instanceof File)) return errorResponse(new Error("arquivo"));
+    const requiredRaw = form.get("requiredColumns");
+    const model = await createModel(deps, ctx, {
+      name: String(form.get("name") ?? ""),
+      filename: file.name,
+      bytes: Buffer.from(await file.arrayBuffer()),
+      sheet: form.get("sheet") ? String(form.get("sheet")) : null,
+      headerRow: Number(form.get("headerRow") ?? 1),
+      requiredColumns: requiredRaw ? (JSON.parse(String(requiredRaw)) as string[]) : undefined,
+    });
+    return NextResponse.json({ model }, { status: 201 });
+  } catch (error) {
+    if (error instanceof Error && error.message === "arquivo") {
+      return NextResponse.json({ error: { code: "EMPTY_FILE", message: "Selecione um arquivo." } }, { status: 400 });
+    }
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/settings/route.ts

@@ -0,0 +1,30 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../_lib";
+import { getSettings, rejectWorkspaceForgery, updateSettings } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function GET() {
+  try {
+    const { ctx, deps } = await requireReady();
+    return NextResponse.json(await getSettings(deps, ctx));
+  } catch (error) {
+    return errorResponse(error);
+  }
+}
+
+export async function PATCH(request: Request) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const body = (await request.json()) as { allowNonAdminModelUpload?: boolean; workspace_id?: string };
+    await rejectWorkspaceForgery(deps, ctx, body.workspace_id);
+    if (typeof body.allowNonAdminModelUpload !== "boolean") {
+      return NextResponse.json({ error: { code: "INVALID_SETTING", message: "Informe o valor da configuração." } }, { status: 400 });
+    }
+    await updateSettings(deps, ctx, body.allowNonAdminModelUpload);
+    return NextResponse.json(await getSettings(deps, ctx));
+  } catch (error) {
+    return errorResponse(error);
+  }
+}

src/app/api/spreadsheet-adapter/sources/validate/route.ts

@@ -0,0 +1,30 @@
+import { NextResponse } from "next/server";
+import { errorResponse, requireReady } from "../../_lib";
+import { addSource, rejectWorkspaceForgery } from "@/server/spreadsheet-adapter/service";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function POST(request: Request) {
+  try {
+    const { ctx, deps } = await requireReady();
+    const form = await request.formData();
+    await rejectWorkspaceForgery(deps, ctx, form.get("workspace_id"));
+    const file = form.get("file");
+    const jobId = String(form.get("jobId") ?? "");
+    if (!(file instanceof File) || !jobId) {
+      return NextResponse.json({ error: { code: "EMPTY_FILE", message: "Envie o arquivo e a operação." } }, { status: 400 });
+    }
+    const result = await addSource(
+      deps,
+      ctx,
+      jobId,
+      { filename: file.name, bytes: Buffer.from(await file.arrayBuffer()) },
+      form.get("sheet") ? String(form.get("sheet")) : null,
+      Number(form.get("headerRow") ?? 1),
+    );
+    return NextResponse.json(result, { status: result.httpStatus });
+  } catch (error) {
+    return errorResponse(error);
+  }
+}