fix: the page's centred blocks keep their full width in the column layout

Making the body a column to keep the footer at the bottom shrank every
block centred with auto margins (the account area, and two of the Site's
sections) to the width of its content. They take the full width again, up
to their max-width, exactly as before.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.env.example

@@ -37,6 +37,11 @@ TINY_ADAPTER=fake
 # TINY_PRODUCT_UV_FOLHA=...
 # TINY_PRODUCT_UV_AVULSA=...
 # TINY_ADAPTER=tiny      # only once connected and tested: creates real orders
+# Jadlog price quotes go in jadlog.env, not here (see app/jadlog_probe.py):
+# JADLOG_TOKEN=...
+# JADLOG_CNPJ=...          # the "Usuário" Jadlog issued, the CNPJ that contracts freight
+# JADLOG_CONTA=...         # conta corrente
+# JADLOG_CONTRATO=         # only if Jadlog issued a contract number
 WHATSAPP_ADAPTER=fake
 STORAGE_ADAPTER=s3-local
 MOCK_FREIGHT_CENTS=1500

.gitea/workflows/deploy.yml

@@ -86,13 +86,14 @@ jobs:
       # the generator's geometry. The provider suites use a fake transport: they
       # prove the documented contract, not the integration.
       - name: Print-file geometry and provider adapters
-        run: $COMPOSE exec -T api python -m unittest tests.test_printfile tests.test_mercadopago tests.test_tiny -v
+        run: $COMPOSE exec -T api python -m unittest tests.test_printfile tests.test_mercadopago tests.test_tiny tests.test_jadlog tests.test_quote_review tests.test_large_files tests.test_grade_check -v
 
       - name: Runtime and retention regressions
         run: |
           $COMPOSE exec -T api python -m tests.retention_test
           $COMPOSE exec -T api python -m tests.runtime_security_test
           $COMPOSE exec -T api python -m tests.tiny_oauth_test
+          $COMPOSE exec -T backup python -m tests.backup_test
 
       # Run Chrome on the Compose network. It must resolve the same storage:9000
       # hostname used in presigned URLs, and absence of Chrome must fail CI.
@@ -106,7 +107,7 @@ jobs:
         if: failure()
         run: |
           $COMPOSE ps || true
-          $COMPOSE logs --tail 200 api worker site kanban || true
+          $COMPOSE logs --tail 200 api worker backup site kanban || true
 
       - name: Tear down
         if: always()
@@ -206,24 +207,47 @@ jobs:
       - name: Image vulnerabilities
         run: |
           image="${TRIVY_IMAGE:-aquasec/trivy:0.58.1}"
-          failed=0
+          # One database download for the four scans, kept in a volume between
+          # runs and retried: a failed download from the mirror used to fail
+          # the gate as if a CRITICAL vulnerability had been found.
+          trivy() { docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
+            -v dtf-trivy-cache:/root/.cache/trivy "$image" "$@"; }
+          for attempt in 1 2 3; do
+            trivy image --download-db-only --no-progress && break
+            if [ "$attempt" -eq 3 ]; then
+              echo "::error::The vulnerability database could not be downloaded; the release images were not scanned."
+              exit 1
+            fi
+            echo "Database download failed (attempt $attempt); retrying in 30 s."
+            sleep 30
+          done
+          # Findings exit 5; any other failure means the scan did not run.
+          found=0; broken=0
           for target in \
               "gitea.blyzer.com.br/blyzer/dtf-api:${{ gitea.sha }}" \
               "gitea.blyzer.com.br/blyzer/dtf-web:${{ gitea.sha }}"; do
             echo "--- $target (HIGH, reported)"
-            docker run --rm -v /var/run/docker.sock:/var/run/docker.sock "$image" \
-              image --image-src docker --scanners vuln --severity HIGH --no-progress \
+            trivy image --skip-db-update --image-src docker --scanners vuln --severity HIGH --no-progress \
               --format table --exit-code 0 "$target" ||
               echo "::warning::Could not scan $target for HIGH findings"
             echo "--- $target (CRITICAL, blocking)"
-            docker run --rm -v /var/run/docker.sock:/var/run/docker.sock "$image" \
-              image --image-src docker --scanners vuln --severity CRITICAL --no-progress \
-              --format table --exit-code 1 "$target" || failed=1
+            set +e
+            trivy image --skip-db-update --image-src docker --scanners vuln --severity CRITICAL --no-progress \
+              --format table --exit-code 5 "$target"
+            verdict=$?
+            set -e
+            if [ "$verdict" -eq 5 ]; then found=1
+            elif [ "$verdict" -ne 0 ]; then broken=1; echo "::error::The CRITICAL scan of $target did not run (exit $verdict)."
+            fi
           done
-          if [ "$failed" -ne 0 ]; then
+          if [ "$found" -ne 0 ]; then
             echo "::error::A CRITICAL vulnerability was found in a release image."
             exit 1
           fi
+          if [ "$broken" -ne 0 ]; then
+            echo "::error::A release image could not be scanned; nothing is published unscanned."
+            exit 1
+          fi
 
       - name: Publish validated images
         run: |

app/adapters.py

@@ -17,9 +17,16 @@ def require_runtime():
     checkout until their audited implementations are added.
     """
     environment = os.environ.get('APP_ENV', 'local')
-    for name in ('FREIGHT', 'WHATSAPP'):
-        if os.environ.get(f'{name}_ADAPTER') != 'fake':
-            raise RuntimeError(f'{name} must use the currently supported fake adapter')
+    if os.environ.get('WHATSAPP_ADAPTER') != 'fake':
+        raise RuntimeError('WHATSAPP must use the currently supported fake adapter')
+    freight = os.environ.get('FREIGHT_ADAPTER')
+    if freight == 'jadlog':
+        from .jadlog import required_settings as jadlog_settings
+        for name in jadlog_settings():
+            if not os.environ.get(name):
+                raise RuntimeError(f'{name} is required for the Jadlog adapter')
+    elif freight != 'fake':
+        raise RuntimeError('FREIGHT must use the fake or jadlog adapter')
     tiny = os.environ.get('TINY_ADAPTER')
     if tiny == 'tiny':
         from .tiny import required_settings
@@ -106,6 +113,11 @@ class FakePayment:
 
     def create(self, quote_id: str, total_cents: int, customer: dict, method: dict | None = None) -> dict:
         kind = (method or {}).get('type', 'pix')
+        if kind == 'pix':
+            from datetime import datetime, timedelta, timezone
+            expires = (datetime.now(timezone.utc) + timedelta(minutes=30)).isoformat(timespec='milliseconds')
+            return {'provider': 'fake', 'id': f"local-{quote_id}-pix-{(method or {}).get('attempt', 1)}",
+                    'status': 'pending', 'total_cents': total_cents, 'expires_at': expires}
         return {'provider': 'fake', 'id': f'local-{quote_id}-{kind}',
                 'status': 'pending', 'total_cents': total_cents}
 
@@ -143,12 +155,12 @@ class FakePayment:
                 'status': 'paid', 'total_cents': total_cents}
 
 class FreightAdapter(Protocol):
-    def quote(self, service: str, postal_code: str) -> dict: ...
+    def quote(self, service: str, postal_code: str, metres=None, declared_cents: int = 0) -> dict: ...
 
 class FakeFreight:
     name = 'fake'
 
-    def quote(self, service: str, postal_code: str) -> dict:
+    def quote(self, service: str, postal_code: str, metres=None, declared_cents: int = 0) -> dict:
         if service == 'pickup':
             return {'provider': 'fake', 'service': 'pickup', 'total_cents': 0, 'postal_code': ''}
         if service != 'mock-standard' or len(postal_code) != 8 or not postal_code.isascii() or not postal_code.isdigit():

app/api/customer.py

@@ -2,7 +2,9 @@
 from datetime import datetime, timedelta, timezone
 from uuid import UUID, uuid4
 
-from fastapi import APIRouter, Depends, HTTPException, Request, Response
+from typing import Literal
+
+from fastapi import APIRouter, Depends, HTTPException, Query, Request, Response
 from psycopg.errors import UniqueViolation
 from psycopg.types.json import Jsonb
 
@@ -10,7 +12,7 @@ from ..core import db
 from ..artwork import submit_files
 from ..core.auth import (DUMMY_PASSWORD_HASH, audit, client_ip, new_session, owner,
                     login_failed, password_hash, password_matches, session_row, throttle, transfer_guest)
-from ..core.models import ArtworkSubmission, Login, Register
+from ..core.models import ArtworkSubmission, EmailChange, Login, PasswordChange, ProfileUpdate, Register
 from ..runtime import STATES, file_rows, owned_order, storage
 from ..scanning import require_clean
 
@@ -86,21 +88,124 @@ def me(identity=Depends(owner)):
         row = c.execute('SELECT profile FROM dtf_local.accounts WHERE id=%s', (identity,)).fetchone()
     return {'customer': row['profile'] if row else None}
 
-@router.get('/api/customer/orders')
-def orders(identity=Depends(owner)):
+def account_row(c, identity, lock=False):
+    row = c.execute('SELECT * FROM dtf_local.accounts WHERE id=%s' + (' FOR UPDATE' if lock else ''), (identity,)).fetchone()
+    if not row:
+        raise HTTPException(401, 'Entre na sua conta.')
+    return row
+
+@router.post('/api/account/profile')
+def update_profile(body: ProfileUpdate, identity=Depends(owner)):
+    """WhatsApp and the saved delivery address. The CNPJ is the account's and
+    does not change; the e-mail is the login and changes on its own route."""
     with db.connect() as c:
-        rows = c.execute('SELECT id,number,state,version,snapshot,created_at,updated_at FROM dtf_local.orders WHERE owner=%s ORDER BY created_at DESC', (identity,)).fetchall()
-        quotes = c.execute('''SELECT q.id,q.approved,q.approved_at,q.created_at FROM dtf_local.quotes q
-            LEFT JOIN dtf_local.orders o ON o.quote_id=q.id WHERE q.owner=%s AND o.id IS NULL ORDER BY q.created_at DESC''', (identity,)).fetchall()
-    return {'orders': rows, 'quotes': quotes, 'states': STATES}
+        row = account_row(c, identity, lock=True)
+        profile = {**row['profile'], 'zap': body.zap,
+                   'address': body.address.model_dump() if body.address else None}
+        c.execute('UPDATE dtf_local.accounts SET profile=%s WHERE id=%s', (Jsonb(profile), identity))
+    audit('account_profile_updated', account=str(identity))
+    return {'customer': profile}
+
+@router.post('/api/account/email')
+def change_email(body: EmailChange, request: Request, identity=Depends(owner)):
+    with db.connect() as c:
+        row = account_row(c, identity)
+    throttle(row['email'], request)
+    if not password_matches(body.password, row['password_hash']):
+        login_failed(row['email'])
+        raise HTTPException(401, 'Senha incorreta.')
+    profile = {**row['profile'], 'mail': body.email}
+    try:
+        with db.connect() as c:
+            c.execute('UPDATE dtf_local.accounts SET email=%s, profile=%s WHERE id=%s', (body.email, Jsonb(profile), identity))
+    except UniqueViolation:
+        raise HTTPException(409, 'Este e-mail já é de outra conta.')
+    audit('account_email_changed', account=str(identity))
+    return {'customer': profile}
+
+@router.post('/api/account/password')
+def change_password(body: PasswordChange, request: Request, identity=Depends(owner)):
+    with db.connect() as c:
+        row = account_row(c, identity)
+    throttle(row['email'], request)
+    if not password_matches(body.current, row['password_hash']):
+        login_failed(row['email'])
+        raise HTTPException(401, 'Senha atual incorreta.')
+    session = current(request)
+    with db.connect() as c:
+        c.execute('UPDATE dtf_local.accounts SET password_hash=%s WHERE id=%s', (password_hash(body.new), identity))
+        # Other devices signed in with the old password are signed out.
+        c.execute('DELETE FROM dtf_local.sessions WHERE owner=%s AND id<>%s', (identity, session['id']))
+    audit('account_password_changed', account=str(identity))
+    return {'ok': True}
+
+# The order list's groups, as the customer filters them.
+GROUPS = {'pay': 'Aguardando pagamento', 'prod': 'Em produção', 'cor': 'Correção', 'fin': 'Finalizados'}
+ENTRIES = '''WITH live_quote AS (
+    -- The cart waiting for payment: the newest unpaid quote whose files still
+    -- exist. An older one was replaced when the cart changed, and one whose
+    -- files are gone can no longer be paid.
+    SELECT q.id, q.created_at, q.approved FROM dtf_local.quotes q
+    LEFT JOIN dtf_local.orders o ON o.quote_id=q.id
+    WHERE q.owner=%(me)s AND o.id IS NULL
+      AND NOT EXISTS (SELECT 1 FROM jsonb_array_elements(q.draft->'items') i
+          CROSS JOIN LATERAL jsonb_array_elements_text(i->'uploads') u(uid)
+          JOIN dtf_local.uploads up ON up.id=u.uid::uuid
+          WHERE up.purged_at IS NOT NULL OR up.expires_at<=now())
+    ORDER BY q.created_at DESC LIMIT 1
+), entries AS (
+    SELECT 'order' AS kind, o.id, o.number, o.state,
+           CASE WHEN o.state='fin' THEN 'fin' WHEN o.state='cor' THEN 'cor' ELSE 'prod' END AS grp,
+           (o.snapshot->>'total_cents')::bigint AS total_cents, o.created_at, o.snapshot->'items' AS items
+    FROM dtf_local.orders o WHERE o.owner=%(me)s
+    UNION ALL
+    SELECT 'quote', q.id, NULL, CASE WHEN q.approved IS NULL THEN 'review' ELSE 'pay' END, 'pay',
+           (q.approved->>'total_cents')::bigint, q.created_at, COALESCE(q.approved->'items','[]'::jsonb)
+    FROM live_quote q
+)'''
+
+@router.get('/api/customer/orders')
+def orders(identity=Depends(owner), status: Literal['all','pay','prod','cor','fin'] = 'all',
+           number: int | None = Query(None, ge=1), days: int = Query(0, ge=0, le=3650),
+           page: int = Query(1, ge=1, le=10000), size: int = Query(10, ge=1, le=50)):
+    """The customer's orders and the cart waiting for payment, newest first,
+    filtered and a page at a time, with how many there are in each group."""
+    params = {'me': identity, 'grp': None if status == 'all' else status, 'number': number,
+              'since': datetime.now(timezone.utc) - timedelta(days=days) if days else None,
+              'size': size, 'offset': (page - 1) * size}
+    where = '''WHERE (%(grp)s::text IS NULL OR grp=%(grp)s) AND (%(number)s::int IS NULL OR number=%(number)s)
+               AND (%(since)s::timestamptz IS NULL OR created_at>=%(since)s)'''
+    with db.connect() as c:
+        counts = {r['grp']: r['n'] for r in c.execute(ENTRIES + ' SELECT grp, count(*) AS n FROM entries GROUP BY grp', params).fetchall()}
+        total = c.execute(ENTRIES + ' SELECT count(*) AS n FROM entries ' + where, params).fetchone()['n']
+        rows = c.execute(ENTRIES + ' SELECT * FROM entries ' + where +
+                         ' ORDER BY created_at DESC LIMIT %(size)s OFFSET %(offset)s', params).fetchall()
+        items = []
+        for r in rows:
+            entry = {'kind': r['kind'], 'id': r['id'], 'number': r['number'], 'state': r['state'],
+                     'group': r['grp'], 'total_cents': r['total_cents'], 'created_at': r['created_at'],
+                     'items': [{'mode': i['mode'], 'billed_metres': i.get('billed_metres')} for i in r['items']]}
+            if r['kind'] == 'quote':
+                # A PIX code still open is paid on its own page.
+                pix = c.execute('''SELECT 1 FROM dtf_local.payment_intents WHERE quote_id=%s AND method='pix'
+                    AND status='pending' AND COALESCE((response->>'expires_at')::timestamptz > now(), false)''',
+                                (r['id'],)).fetchone()
+                entry['pay_with'] = 'pix' if pix else 'page'
+            items.append(entry)
+    return {'items': items, 'total': total, 'page': page, 'size': size,
+            'counts': {g: counts.get(g, 0) for g in GROUPS}, 'groups': GROUPS, 'states': STATES}
 
 @router.get('/api/customer/orders/{oid}')
 def detail(oid: UUID, identity=Depends(owner)):
     with db.connect() as c:
         row = owned_order(c, oid, identity)
-        history = c.execute('SELECT from_state,to_state,reason,created_at FROM dtf_local.movements WHERE order_id=%s ORDER BY id', (oid,)).fetchall()
+        # A move back undoes an operator's mistake and its reason is internal;
+        # only a correction's reason is written for the customer.
+        history = c.execute('''SELECT from_state,to_state,CASE WHEN to_state='cor' THEN reason ELSE '' END AS reason,
+            created_at FROM dtf_local.movements WHERE order_id=%s AND NOT back ORDER BY id''', (oid,)).fetchall()
         return {'id': row['id'], 'number': row['number'], 'state': row['state'], 'version': row['version'],
-                'snapshot': row['snapshot'], 'history': history, 'files': file_rows(c,oid)}
+                'created_at': row['created_at'], 'snapshot': row['snapshot'], 'history': history,
+                'files': file_rows(c,oid)}
 
 @router.post('/api/customer/orders/{oid}/corrections')
 def correction(oid: UUID, body: ArtworkSubmission, identity=Depends(owner)):

app/api/health.py

@@ -1,12 +1,14 @@
-"""Health, session bootstrap and freight quoting."""
+"""Health, session bootstrap, freight quoting and the address of a CEP."""
 import os
+import re
 
+import httpx
 from fastapi import APIRouter, HTTPException, Request, Response
 
 from ..core import db
 from ..core.auth import client_ip, owner, new_session, rate_limit
 from ..core.limits import upload_limit_bytes
-from ..core.models import Freight
+from ..core.models import FreightEstimate
 from ..runtime import (ENVIRONMENT, GUEST_SESSION_LIMIT, PART_BYTES, freight, payment,
                        require_delivery_available, storage)
 
@@ -37,12 +39,34 @@ def session(request: Request, response: Response):
     return {'environment': ENVIRONMENT, 'cart_scope': str(session_id), 'part_bytes': PART_BYTES,
             'max_upload_bytes': upload_limit_bytes(), 'payment_provider': payment.name,
             # Public by design: Mercado Pago's card form needs it in the browser.
-            'payment_public_key': os.environ.get('MP_PUBLIC_KEY', '') if payment.name == 'mercadopago' else ''}
+            'payment_public_key': os.environ.get('MP_PUBLIC_KEY', '') if payment.name == 'mercadopago' else '',
+            # The delivery service the cart quotes, or none: pickup only.
+            'freight_service': 'jadlog' if freight.name == 'jadlog' else 'mock-standard' if ENVIRONMENT == 'local' else None}
 
 @router.post('/api/freight')
-def quote_freight(body: Freight):
+def quote_freight(body: FreightEstimate):
     require_delivery_available(body.service)
     try:
-        return freight.quote(body.service, body.postal_code)
+        return freight.quote(body.service, body.postal_code, body.metres, body.declared_cents)
     except ValueError as exc:
         raise HTTPException(422, str(exc))
+
+# The address of a CEP, so the cart fills it in. Looked up here rather than in
+# the browser, which keeps the Site's CSP to its own origin.
+VIACEP = 'https://viacep.com.br/ws/{}/json/'
+CEP_LIMIT = 120
+
+@router.get('/api/cep/{cep}')
+def cep_address(cep: str, request: Request):
+    if not re.fullmatch(r'[0-9]{8}', cep):
+        raise HTTPException(422, 'CEP must have eight digits')
+    rate_limit('cep-lookup', client_ip(request), CEP_LIMIT, 900)
+    try:
+        response = httpx.get(VIACEP.format(cep), timeout=5)
+        data = response.json() if response.status_code == 200 else {}
+    except (httpx.HTTPError, ValueError):
+        raise HTTPException(503, 'Consulta de CEP indisponível')
+    if not data or data.get('erro'):
+        raise HTTPException(404, 'CEP não encontrado')
+    return {'street': data.get('logradouro') or '', 'district': data.get('bairro') or '',
+            'city': data.get('localidade') or '', 'state': data.get('uf') or ''}

app/api/operator.py

@@ -8,17 +8,16 @@ from uuid import UUID
 
 from fastapi import APIRouter, Depends, HTTPException, Query, Request, Response
 from fastapi.responses import RedirectResponse
-from psycopg.types.json import Jsonb
 
 from ..core import db
 from ..core.auth import (COOKIE_SECURE, DUMMY_PASSWORD_HASH, audit, client_ip, operator,
                     login_failed, password_matches, throttle)
 from ..core.models import Move, OperatorLogin, Resolution, Review
-from ..core.pricing import price
 from ..printjobs import queue as queue_print_files
+from .. import payments, quote_review
 from .. import tiny
 from ..runtime import (BACK, BOARD_FINISHED_LIMIT, BOARD_QUOTE_LIMIT, ENVIRONMENT, STATES, TRANSITIONS, payment,
-                       enqueue, freight, quote_view, storage, upload_row)
+                       enqueue, freight, quote_view, storage)
 from ..scanning import require_clean
 
 router = APIRouter()
@@ -60,6 +59,24 @@ def operator_logout(request: Request, response: Response):
     audit('operator_logout')
     return {'ok': True}
 
+def freight_status():
+    """What delivery the Site offers, and the package rule it prices with."""
+    if freight.name != 'jadlog':
+        return {'provider': freight.name}
+    return {'provider': 'jadlog', 'base_kg': str(freight.base_kg), 'per_metre_kg': str(freight.per_metre_kg),
+            'production_days': freight.production_days}
+
+
+def backup_status(c):
+    """The latest database backup and the latest run, which may have failed."""
+    ok = c.execute('''SELECT finished_at,bytes FROM dtf_local.backups WHERE status='ok'
+        ORDER BY finished_at DESC LIMIT 1''').fetchone()
+    last = c.execute('SELECT finished_at,status,detail FROM dtf_local.backups ORDER BY finished_at DESC LIMIT 1').fetchone()
+    return {'last_ok': ok['finished_at'].isoformat() if ok else None, 'bytes': ok['bytes'] if ok else None,
+            'failed': last['detail'] if last and last['status'] == 'failed' else None,
+            'failed_at': last['finished_at'].isoformat() if last and last['status'] == 'failed' else None}
+
+
 @router.get('/api/operator/board')
 def board(user=Depends(operator)):
     with db.connect() as c:
@@ -90,9 +107,10 @@ def board(user=Depends(operator)):
         # Pagamentos tab pages through them until someone records a resolution.
         issues_total = c.execute('''SELECT count(*) AS n FROM dtf_local.payment_events
             WHERE (outcome LIKE 'refused%' OR outcome LIKE 'attention%') AND resolved_at IS NULL''').fetchone()['n']
+        backup = backup_status(c)
         return {'states': STATES, 'transitions': TRANSITIONS, 'back': BACK,
                 'orders': orders, 'payment_issues_total': issues_total, 'tiny': tiny_status(), 'operator': user,
-                'providers': {'payment': payment.name}, 'environment': ENVIRONMENT,
+                'providers': {'payment': payment.name, 'freight': freight_status(), 'backup': backup}, 'environment': ENVIRONMENT,
                 'finished_shown': len(finished), 'finished_total': finished_total,
                 'quotes': [quote_view(c, q) for q in pending + approved],
                 'pending_total': pending_total, 'approved_total': approved_total}
@@ -197,31 +215,25 @@ def approve(uid: UUID, body: Review, user=Depends(operator)):
         row = c.execute('SELECT * FROM dtf_local.quotes WHERE id=%s FOR UPDATE', (uid,)).fetchone()
         if not row:
             raise HTTPException(404, 'Quote not found')
-        if row['approved']:
-            raise HTTPException(409, 'Approved quotes are immutable; request a new quote')
-        draft = row['draft']
-        if any(item.get('production', {}).get('version') != 2 for item in draft['items']):
-            raise HTTPException(409, 'Quote uses an obsolete production layout; customer must request a new quote')
-        if len(body.items) != len(draft['items']):
-            raise HTTPException(422, 'Review must cover every item')
-        items = []
-        for item, original in zip(body.items, draft['items']):
-            if item.mode != original['mode'] or list(map(str,item.uploads)) != original['uploads']:
-                raise HTTPException(422, 'Product mode and attached files cannot change during review')
-            if item.production.model_dump(mode='json') != original['production'] or item.quality_status != original['quality_status'] or item.quality_acknowledged != original['quality_acknowledged']:
-                raise HTTPException(422, 'Production instructions and customer acknowledgement cannot change during commercial review')
-            for upload_id in item.uploads:
-                require_clean(upload_row(c, upload_id, row['owner']))
-            items.append({**price(item.mode, str(item.metres), item.grade),
-                          'uploads': original['uploads'], 'production': original['production'],
-                          'quality_status': original['quality_status'],
-                          'quality_acknowledged': original['quality_acknowledged']})
-        quoted_freight = freight.quote(**draft['freight'])
-        approved = {'customer': draft['customer'], 'items': items, 'freight': quoted_freight,
-                    'destination': draft.get('destination'),
-                    'total_cents': sum(i['total_cents'] for i in items)+quoted_freight['total_cents']}
-        c.execute('UPDATE dtf_local.quotes SET approved=%s, reviewed_by=%s, approved_at=now() WHERE id=%s', (Jsonb(approved),user,uid))
-    return approved
+        return quote_review.approve(c, row, body.items, user)
+
+@router.post('/api/operator/quotes/{uid}/test-order')
+def test_order(uid: UUID, user=Depends(operator)):
+    """An order for an approved quote without payment, to try the Kanban,
+    files and print flow in production. Marked TEST on the board, never sent
+    to Tiny or WhatsApp, and audited."""
+    with db.connect() as c:
+        try:
+            quote = payments.approved_quote(c, uid)
+        except payments.PaymentRefused as refusal:
+            raise HTTPException(404 if 'not found' in str(refusal) else 409, str(refusal))
+        receipt = {'provider': payments.TEST_PROVIDER, 'id': f'teste-{uid}', 'status': 'paid',
+                   'total_cents': quote['approved']['total_cents'], 'operator': user}
+        order, created = payments.create_order(c, quote, receipt)
+    if created:
+        audit('test_order_created', order=str(order['id']), operator=user)
+    return order
+
 
 @router.post('/api/operator/orders/{uid}/move')
 def move(uid: UUID, body: Move, user=Depends(operator)):
@@ -250,7 +262,7 @@ def move(uid: UUID, body: Move, user=Depends(operator)):
                   (uid,row['state'],body.state,user,body.reason,back))
         changed = c.execute('UPDATE dtf_local.orders SET state=%s, version=version+1, updated_at=now() WHERE id=%s RETURNING *', (body.state,uid)).fetchone()
         events = {'imp':'production_started','cor':'correction_needed','fin':'ready'}
-        if body.state in events and not back:
+        if body.state in events and not back and not payments.is_test(row):
             # "Production started" and "ready" reach the customer once per order,
             # even if a mistaken move is undone and made again. Each correction
             # is a new request, so it keeps one message per movement.
@@ -320,6 +332,27 @@ def tiny_test(user=Depends(operator)):
     audit('tiny_tested', operator=user, ok=all(v == 'ok' for v in results.values()))
     return {'ok': all(v == 'ok' for v in results.values()), 'results': results}
 
+@router.post('/api/operator/mercadopago/check')
+def mercadopago_check(user=Depends(operator)):
+    """The Mercado Pago account behind the configured token; reads only."""
+    if payment.name != 'mercadopago':
+        raise HTTPException(409, 'Mercado Pago não está configurado')
+    from ..mercadopago_probe import check
+    audit('mercadopago_check', operator=user)
+    result = check(payment.access_token)
+    # Whether Mercado Pago's notifications reach this server and pass the
+    # signature: every accepted one is recorded, a refused one is audited.
+    with db.connect() as c:
+        received = c.execute('''SELECT count(*) AS n, max(received_at) AS last FROM dtf_local.payment_events
+            WHERE provider='mercadopago' AND received_at > now()-interval '24 hours' ''').fetchone()
+        last = c.execute('''SELECT received_at,status,outcome FROM dtf_local.payment_events
+            WHERE provider='mercadopago' ORDER BY received_at DESC LIMIT 1''').fetchone()
+        refused = c.execute('''SELECT count(*) AS n FROM dtf_local.security_events
+            WHERE event='payment_webhook_rejected' AND created_at > now()-interval '24 hours' ''').fetchone()
+    result['webhooks'] = {'accepted_24h': received['n'], 'refused_24h': refused['n'], 'last': last}
+    return result
+
+
 @router.get('/api/operator/tiny/callback')
 def tiny_callback(code: str = Query('', max_length=4096), state: str = Query('', max_length=128),
                   error: str = Query('', max_length=128)):

app/api/payments.py

@@ -7,6 +7,7 @@ and an unverified delivery is recorded and refused rather than retried.
 """
 from uuid import uuid4
 
+import httpx
 from fastapi import APIRouter, Depends, HTTPException, Request
 from psycopg.types.json import Jsonb
 
@@ -21,6 +22,8 @@ router = APIRouter()
 # Generous: a provider legitimately retries, and a signature check is cheap.
 # This exists so an unsigned flood cannot keep the database busy.
 WEBHOOK_LIMIT = 600
+# How long a card waiting for the bank's confirmation holds off a new attempt.
+CHALLENGE_MINUTES = 10
 
 
 @router.post('/api/payments/webhook')
@@ -58,6 +61,17 @@ def event_provider():
     return payment.name
 
 
+def provider_reason(response):
+    """A short, loggable reason from a refused provider call."""
+    try:
+        data = response.json()
+    except ValueError:
+        return f'HTTP {response.status_code}'
+    causes = '; '.join(f"{c.get('code')}: {c.get('description')}" for c in data.get('cause') or []
+                       if isinstance(c, dict))
+    return (causes or data.get('message') or data.get('error') or f'HTTP {response.status_code}')[:300]
+
+
 @router.post('/api/payments/intent')
 def intent(body: PaymentIntent, session_id=Depends(owner)):
     """Start paying an approved quote: a PIX code, or a card token from the
@@ -71,23 +85,59 @@ def intent(body: PaymentIntent, session_id=Depends(owner)):
             raise HTTPException(404 if 'not found' in str(refusal) else 409, str(refusal))
         if c.execute('SELECT 1 FROM dtf_local.orders WHERE quote_id=%s', (body.quote_id,)).fetchone():
             raise HTTPException(409, 'Quote is already paid')
+        # Never charge for files that are gone: an unpaid cart's files are
+        # removed after a while. A payment under way keeps them a day longer,
+        # time enough for the provider's notice to become the order.
+        uploads = payments.quote_uploads(quote['approved'])
+        live = c.execute('''SELECT count(*) AS n FROM dtf_local.uploads WHERE id=ANY(%s)
+            AND purged_at IS NULL AND expires_at>now()''', (uploads,)).fetchone()['n']
+        if live != len(set(uploads)):
+            raise HTTPException(410, 'Os arquivos deste pedido expiraram porque ele não foi pago a tempo. '
+                                     'Monte o pedido de novo para pagar.')
+        payments.hold_uploads(c, uploads, '1 day')
         # Never a second charge: an approved payment is waiting for its
         # notification to become the order, and a card in review may still be.
+        # A card waiting for the bank's confirmation (3-D Secure) blocks only
+        # for CHALLENGE_MINUTES: a customer who gave up on it must still be able
+        # to pay, and an unanswered challenge is not charged.
         if c.execute('''SELECT 1 FROM dtf_local.payment_intents WHERE quote_id=%s
-            AND (status='approved' OR (method='card' AND status='pending'))''', (body.quote_id,)).fetchone():
+            AND (status='approved' OR (method='card' AND status='pending'
+                 AND NOT (jsonb_typeof(response->'challenge')='object'
+                          AND created_at < now() - make_interval(mins => %s))))''',
+                     (body.quote_id, CHALLENGE_MINUTES)).fetchone():
             raise HTTPException(409, 'A payment for this quote is already approved or in review')
+        method = body.method.model_dump()
         if body.method.type == 'pix':
-            existing = c.execute('''SELECT * FROM dtf_local.payment_intents WHERE quote_id=%s AND method='pix'
+            # One open PIX per quote: the same code until it expires, and a new
+            # one only after that, when the old code can no longer be paid.
+            # Serialised per quote, so two clicks never open two codes.
+            c.execute('SELECT pg_advisory_xact_lock(hashtext(%s))', ('pix:'+str(body.quote_id),))
+            existing = c.execute('''SELECT *, COALESCE((response->>'expires_at')::timestamptz <= now(), false) AS expired
+                FROM dtf_local.payment_intents WHERE quote_id=%s AND method='pix'
                 AND status='pending' ORDER BY created_at DESC LIMIT 1''', (body.quote_id,)).fetchone()
-            if existing:
+            if existing and not existing['expired']:
                 return existing['response']
+            if existing:
+                c.execute("UPDATE dtf_local.payment_intents SET status='expired', updated_at=now() WHERE id=%s",
+                          (existing['id'],))
+            method['attempt'] = c.execute('''SELECT count(*) AS n FROM dtf_local.payment_intents
+                WHERE quote_id=%s AND method='pix' ''', (body.quote_id,)).fetchone()['n'] + 1
         try:
             created = payment.create(str(body.quote_id), quote['approved']['total_cents'],
-                                     quote['approved']['customer'], body.method.model_dump())
+                                     quote['approved']['customer'], method)
         except ValueError as exc:
             raise HTTPException(422, str(exc))
-        except Exception:
-            audit('payment_intent_failed', quote=str(body.quote_id))
+        except httpx.HTTPStatusError as exc:
+            # Mercado Pago's own reason (status, message and cause codes) goes to
+            # the log; it never contains card data, only what was refused.
+            reason = provider_reason(exc.response)
+            audit('payment_intent_refused', quote=str(body.quote_id), method=body.method.type,
+                  status=exc.response.status_code, reason=reason)
+            if exc.response.status_code < 500:
+                raise HTTPException(422, f'O Mercado Pago recusou o pagamento: {reason}')
+            raise HTTPException(502, 'Payment provider unavailable; try again')
+        except Exception as exc:
+            audit('payment_intent_failed', quote=str(body.quote_id), error=type(exc).__name__)
             raise HTTPException(502, 'Payment provider unavailable; try again')
         c.execute('''INSERT INTO dtf_local.payment_intents(id,quote_id,provider,provider_payment_id,method,
               status,amount_cents,response) VALUES(%s,%s,%s,%s,%s,%s,%s,%s)

app/api/quotes.py

@@ -1,4 +1,4 @@
-"""Quotes: the customer's cart, and the operator-reviewed version of it."""
+"""Quotes: the customer's cart, approved at once when it can be (app/quote_review.py)."""
 import hashlib
 import json
 from decimal import Decimal
@@ -7,10 +7,14 @@ from uuid import UUID, uuid4
 from fastapi import APIRouter, Depends, HTTPException
 from psycopg.types.json import Jsonb
 
+from .. import payments
 from ..core import db
 from ..core.auth import owner
 from ..core.models import QuoteRequest
-from ..runtime import freight, quote_view, require_delivery_available, upload_row
+from ..core.pricing import price
+from .. import quote_review
+from ..grade_check import Files, mismatch
+from ..runtime import freight, quote_view, require_delivery_available, storage, upload_row
 from ..scanning import require_clean
 
 router = APIRouter()
@@ -23,24 +27,41 @@ def create_quote(body: QuoteRequest, session_id=Depends(owner)):
     require_delivery_available(body.freight.service)
     draft = body.model_dump(mode='json', exclude={'request_key'})
     digest = hashlib.sha256(json.dumps(draft, sort_keys=True).encode()).hexdigest()
-    try:
-        freight.quote(body.freight.service, body.freight.postal_code)
-    except ValueError as exc:
-        raise HTTPException(422, str(exc))
+    reason = quote_review.review_reason(draft)
+    if reason is not None:
+        # Waits for review: check the delivery now, priced at approval.
+        try:
+            priced = [price(item.mode, str(item.metres), item.grade) for item in body.items]
+            freight.quote(body.freight.service, body.freight.postal_code,
+                          sum(Decimal(i['billed_metres']) for i in priced), sum(i['total_cents'] for i in priced))
+        except ValueError as exc:
+            raise HTTPException(422, str(exc))
     with db.connect() as c:
+        rows = {}
         for item in body.items:
             for uid in item.uploads:
                 row = upload_row(c, uid, session_id)
                 if not row['complete']:
                     raise HTTPException(409, 'Complete every upload before requesting a quote')
                 require_clean(row)
+                rows[str(uid)] = row
+        # The grade sets the price and came from the browser: before a cart is
+        # approved at checkout, the server works it out from the files.
+        note = mismatch(Files(storage), draft['items'], rows) if reason is None else None
+        reason = reason or note
         uid = uuid4()
-        c.execute('INSERT INTO dtf_local.quotes(id,owner,request_key,request_hash,draft) VALUES(%s,%s,%s,%s,%s) ON CONFLICT(owner,request_key) DO NOTHING',
-                  (uid, session_id, body.request_key, digest, Jsonb(draft)))
-        row = c.execute('SELECT * FROM dtf_local.quotes WHERE owner=%s AND request_key=%s', (session_id, body.request_key)).fetchone()
+        c.execute('INSERT INTO dtf_local.quotes(id,owner,request_key,request_hash,draft,review_note) VALUES(%s,%s,%s,%s,%s,%s) ON CONFLICT(owner,request_key) DO NOTHING',
+                  (uid, session_id, body.request_key, digest, Jsonb(draft), note))
+        row = c.execute('SELECT * FROM dtf_local.quotes WHERE owner=%s AND request_key=%s FOR UPDATE', (session_id, body.request_key)).fetchone()
         if row['request_hash'] != digest:
             raise HTTPException(409, 'Request key already used for a different cart')
-    return {'id': row['id'], 'status': 'pending_review'}
+        if row['id'] == uid and reason is None:
+            quote_review.approve(c, row, body.items, quote_review.AUTO)
+            return {'id': row['id'], 'status': 'approved'}
+        if row['id'] == uid:
+            # An operator reviews it first; the files wait for that review.
+            payments.hold_uploads(c, payments.quote_uploads(draft), payments.REVIEW_HOLD)
+    return {'id': row['id'], 'status': 'approved' if row['approved'] else 'pending_review'}
 
 @router.get('/api/quotes/{uid}')
 def get_quote(uid: UUID, session_id=Depends(owner)):

app/api/uploads.py

@@ -14,6 +14,7 @@ from ..core import db
 from ..core.auth import audit, owner, rate_limit
 from ..core.limits import upload_limit_bytes
 from ..core.models import UploadStart
+from ..payments import UNPAID_HOLD
 from ..runtime import PART_BYTES, storage, upload_row
 
 router = APIRouter()
@@ -57,8 +58,11 @@ def upload_status(uid: UUID, session_id=Depends(owner)):
 def part_url(uid: UUID, part: int, session_id=Depends(owner)):
     with db.connect() as c:
         row = upload_row(c, uid, session_id)
-    if row['complete'] or not 1 <= part <= math.ceil(row['size'] / PART_BYTES):
-        raise HTTPException(409, 'Invalid part or completed upload')
+        if row['complete'] or not 1 <= part <= math.ceil(row['size'] / PART_BYTES):
+            raise HTTPException(409, 'Invalid part or completed upload')
+        # The reservation lease is an hour; a multi-GB upload on a slow line
+        # takes longer, so each part it asks for keeps it alive.
+        c.execute("UPDATE dtf_local.uploads SET expires_at=GREATEST(expires_at,now()+interval '1 hour') WHERE id=%s", (uid,))
     size = min(PART_BYTES, row['size']-(part-1)*PART_BYTES)
     return {'url': storage.part_url(row['object_key'], row['multipart_id'], part, size)}
 
@@ -84,7 +88,10 @@ def complete_upload(uid: UUID, session_id=Depends(owner)):
             existing_size = storage.size(row['object_key'])
         if existing_size != row['size']:
             raise HTTPException(409, 'Stored size differs from declared size')
-        c.execute("UPDATE dtf_local.uploads SET complete=true,expires_at=now()+interval '30 days' WHERE id=%s", (uid,))
+        # Held while the cart is unpaid: an abandoned cart's files go after
+        # UNPAID_HOLD; a paid order keeps them for its 30 days (app/payments.py).
+        c.execute('UPDATE dtf_local.uploads SET complete=true,expires_at=now()+%s::interval WHERE id=%s',
+                  (UNPAID_HOLD, uid))
     return {'id': uid, 'complete': True}
 
 @router.delete('/api/uploads/{uid}')

app/artwork.py

@@ -9,7 +9,6 @@ from uuid import UUID, uuid4
 
 from fastapi import HTTPException
 
-from .printjobs import generated_identity
 from .runtime import upload_row
 from .scanning import require_clean
 
@@ -30,7 +29,8 @@ def generated_owner(c, order, ref, kind):
     if c.execute("SELECT 1 FROM dtf_local.order_files WHERE order_id=%s AND kind='correction' LIMIT 1",
                  (order['id'],)).fetchone():
         raise HTTPException(409, 'A customer correction replaced the artwork this file was generated from')
-    return generated_identity(order['id'])
+    # A large sheet's print file is its original, owned by the customer.
+    return c.execute('SELECT owner FROM dtf_local.uploads WHERE id=%s', (ref.upload_id,)).fetchone()['owner']
 
 def submit_files(c, order, body, identity, kind, actor):
     if order['version'] != body.version:
@@ -67,9 +67,13 @@ def submit_files(c, order, body, identity, kind, actor):
     for ref in body.files:
         c.execute('INSERT INTO dtf_local.order_files(id,order_id,upload_id,item_index,kind,note,created_by) VALUES(%s,%s,%s,%s,%s,%s,%s)',
                   (uuid4(),order['id'],ref.upload_id,ref.item_index,kind,body.note,actor))
-        c.execute('UPDATE dtf_local.uploads SET expires_at=LEAST(expires_at,%s) WHERE id=%s', (expiry,ref.upload_id))
+        # The order's window, whatever the upload's own hold was.
+        c.execute('UPDATE dtf_local.uploads SET expires_at=%s WHERE id=%s', (expiry,ref.upload_id))
     c.execute('UPDATE dtf_local.orders SET version=version+1,updated_at=now() WHERE id=%s', (order['id'],))
     if kind == 'final':
         # Artwork approval, not commercial quote approval, starts original cleanup.
-        c.execute("UPDATE dtf_local.uploads SET expires_at=LEAST(expires_at,now()+interval '7 days') WHERE id=ANY(%s)", (original_ids,))
+        # An original approved as its own print file is kept as the final.
+        finals = [ref.upload_id for ref in body.files]
+        c.execute("UPDATE dtf_local.uploads SET expires_at=LEAST(expires_at,now()+interval '7 days') WHERE id=ANY(%s) AND NOT id=ANY(%s)",
+                  (original_ids, finals))
     return {'ok': True, 'version': order['version']+1, 'expires_at': expiry}

app/core/limits.py

@@ -1,13 +1,13 @@
 """Limits shared by upload admission and the malware scanner."""
 import os
 
-CLAMAV_STREAM_MAX_BYTES = 128 * 1024 * 1024  # infra/clamd.conf
+CLAMAV_STREAM_MAX_BYTES = 2000 * 1024 * 1024  # infra/clamd.conf StreamMaxLength
 
 
 def scan_limit_bytes():
-    return min(CLAMAV_STREAM_MAX_BYTES, int(os.environ.get('SCAN_MAX_BYTES', '134217728')))
+    """The largest file ClamAV scans; above it the format check releases it."""
+    return min(CLAMAV_STREAM_MAX_BYTES, int(os.environ.get('SCAN_MAX_BYTES', str(CLAMAV_STREAM_MAX_BYTES))))
 
 
 def upload_limit_bytes():
-    transport = int(os.environ.get('MAX_UPLOAD_BYTES', '5368709120'))
-    return min(transport, scan_limit_bytes())
+    return int(os.environ.get('MAX_UPLOAD_BYTES', '5368709120'))

app/core/models.py

@@ -41,9 +41,15 @@ class Customer(StrictModel):
         return value.strip()
 
 class Freight(StrictModel):
-    service: Literal['pickup','mock-standard'] = 'pickup'
+    service: Literal['pickup','mock-standard','jadlog'] = 'pickup'
     postal_code: str = Field(default='', max_length=8)
 
+class FreightEstimate(Freight):
+    """The cart's estimate. The charged freight is quoted again by the server
+    from the approved items, never from these numbers."""
+    metres: Decimal | None = Field(default=None, gt=0, le=12000)
+    declared_cents: int = Field(default=0, ge=0, le=100_000_000, strict=True)
+
 UF = Literal['AC','AL','AP','AM','BA','CE','DF','ES','GO','MA','MT','MS','MG','PA','PB',
              'PR','PE','PI','RJ','RN','RS','RO','RR','SC','SP','SE','TO']
 
@@ -186,6 +192,10 @@ class PaymentMethod(StrictModel):
     payment_method_id: str | None = Field(default=None, max_length=40, pattern=r'^[a-z_]+$')
     installments: int = Field(default=1, ge=1, le=12, strict=True)
     issuer_id: str | None = Field(default=None, max_length=40)
+    # The cardholder's document from the card form: for a card, the payer is
+    # the cardholder, not necessarily the company on the invoice.
+    payer_document_type: Literal['CPF', 'CNPJ'] | None = None
+    payer_document: str | None = Field(default=None, pattern=r'^[0-9]{11,14}$')
 
     @model_validator(mode='after')
     def card_needs_token(self):
@@ -209,6 +219,35 @@ class Register(StrictModel):
     customer: Customer
     password: str = Field(min_length=12, max_length=128)
 
+class ProfileUpdate(StrictModel):
+    """What a customer may change about their account; the CNPJ is not among it."""
+    zap: str
+    address: Destination | None = None
+
+    @field_validator('zap')
+    @classmethod
+    def phone_valid(cls, value):
+        digits = re.sub(r'\D', '', value)
+        if len(digits) not in (10,11) or not digits.isascii():
+            raise ValueError('Invalid phone')
+        return digits
+
+class EmailChange(StrictModel):
+    email: str = Field(max_length=254)
+    password: str = Field(min_length=1, max_length=128)
+
+    @field_validator('email')
+    @classmethod
+    def email_valid(cls, value):
+        value = value.strip().lower()
+        if not re.fullmatch(r'[^\s@]+@[^\s@]+\.[a-zA-Z]{2,}', value):
+            raise ValueError('Invalid email')
+        return value
+
+class PasswordChange(StrictModel):
+    current: str = Field(min_length=1, max_length=128)
+    new: str = Field(min_length=12, max_length=128)
+
 class Login(StrictModel):
     email: str = Field(min_length=3, max_length=254)
     password: str = Field(min_length=1, max_length=128)

app/grade_check.py

@@ -0,0 +1,189 @@
+"""The grade (the resolution discount) recomputed from the uploaded files.
+
+The Site grades the art in the customer's browser and sends the grade with the
+cart, and the price depends on it. A customer who edits the page could claim a
+better grade, so before a cart is approved at checkout the server reads the
+files it already has and works the grade out again, by the Site's own rules:
+
+- a finished sheet: its pixel width over the sheet width is its DPI, and the
+  item's grade comes from the worst sheet (web/site-quality.js);
+- artworks: each one's DPI along the width it is printed at, rotation
+  included; the item's grade is the average of the artworks' grades;
+- a PDF: the area-weighted DPI of the images drawn on its page, 300 when it
+  is only vectors (web/site-pdf.js, dpiDasImagens and resumoDpi).
+
+Images are measured from their first bytes, never decoded. A PDF is opened
+only up to PDF_MAX_BYTES, the size the Site itself analyses. A grade that
+cannot be recomputed is None; the caller decides what that means.
+"""
+import math
+import os
+import struct
+import tempfile
+
+DPI_IDEAL = 300
+# The Site analyses PDFs up to 150 MB (GRANDE_BYTES); above that it does not
+# grade them, so neither does this.
+PDF_MAX_BYTES = 150 * 1048576
+HEAD_BYTES = 1048576
+# Rounding in the browser and here can differ by a point on the same file.
+TOLERANCE = 2
+
+
+def js_round(value):
+    """Math.round, which rounds halves up; Python's round() does not."""
+    return math.floor(value + 0.5)
+
+
+def grade_of(dpi):
+    return max(6, min(100, js_round(dpi / DPI_IDEAL * 100)))
+
+
+def image_size(head):
+    """(width, height) in pixels from a PNG, JPEG or WebP's first bytes."""
+    if head[:8] == b'\x89PNG\r\n\x1a\n' and head[12:16] == b'IHDR':
+        return struct.unpack('>II', head[16:24])
+    if head[:2] == b'\xff\xd8':
+        i = 2
+        while i + 9 < len(head):
+            if head[i] != 0xFF:
+                i += 1
+                continue
+            marker = head[i + 1]
+            if marker in (0xD8, 0x01) or 0xD0 <= marker <= 0xD7 or marker == 0xFF:
+                i += 1 if marker == 0xFF else 2
+                continue
+            length = struct.unpack('>H', head[i + 2:i + 4])[0]
+            if 0xC0 <= marker <= 0xCF and marker not in (0xC4, 0xC8, 0xCC):
+                h, w = struct.unpack('>HH', head[i + 5:i + 9])
+                return w, h
+            i += 2 + length
+        return None
+    if head[:4] == b'RIFF' and head[8:12] == b'WEBP':
+        chunk = head[12:16]
+        if chunk == b'VP8X':
+            return (int.from_bytes(head[24:27], 'little') + 1, int.from_bytes(head[27:30], 'little') + 1)
+        if chunk == b'VP8L' and head[20] == 0x2F:
+            bits = int.from_bytes(head[21:25], 'little')
+            return (bits & 0x3FFF) + 1, ((bits >> 14) & 0x3FFF) + 1
+        if chunk == b'VP8 ' and head[23:26] == b'\x9d\x01\x2a':
+            w, h = struct.unpack('<HH', head[26:30])
+            return w & 0x3FFF, h & 0x3FFF
+    return None
+
+
+def _multiply(a, b):
+    return [a[0] * b[0] + a[2] * b[1], a[1] * b[0] + a[3] * b[1],
+            a[0] * b[2] + a[2] * b[3], a[1] * b[2] + a[3] * b[3],
+            a[0] * b[4] + a[2] * b[5] + a[4], a[1] * b[4] + a[3] * b[5] + a[5]]
+
+
+def pdf_dpi(path):
+    """The page's area-weighted image DPI, 300 for vectors only, None if the
+    file is not a one-page PDF this can read."""
+    import pikepdf
+    try:
+        with pikepdf.open(path) as pdf:
+            if len(pdf.pages) != 1:
+                return None
+            page = pdf.pages[0]
+            unit = float(page.obj.get('/UserUnit', 1))
+            found = []
+
+            def walk(resources, instructions, ctm, depth):
+                stack = []
+                xobjects = resources.get('/XObject', {}) if resources is not None else {}
+                for operands, operator in instructions:
+                    op = str(operator)
+                    if op == 'q':
+                        stack.append(ctm)
+                    elif op == 'Q':
+                        ctm = stack.pop() if stack else [1, 0, 0, 1, 0, 0]
+                    elif op == 'cm':
+                        ctm = _multiply(ctm, [float(v) for v in operands])
+                    elif op == 'Do' and operands:
+                        xobject = xobjects.get(str(operands[0]))
+                        if xobject is None:
+                            continue
+                        subtype = xobject.get('/Subtype')
+                        if subtype == '/Image':
+                            width_pt = math.hypot(ctm[0], ctm[1])
+                            if width_pt >= 1:
+                                found.append((int(xobject.get('/Width', 0)) / (width_pt * unit / 72),
+                                              abs(ctm[0] * ctm[3] - ctm[1] * ctm[2])))
+                        elif subtype == '/Form' and depth < 8:
+                            matrix = [float(v) for v in xobject.get('/Matrix', [1, 0, 0, 1, 0, 0])]
+                            walk(xobject.get('/Resources', resources),
+                                 pikepdf.parse_content_stream(xobject), _multiply(ctm, matrix), depth + 1)
+
+            walk(page.obj.get('/Resources'), pikepdf.parse_content_stream(page), [1, 0, 0, 1, 0, 0], 0)
+    except Exception:
+        return None
+    found = [(dpi, area) for dpi, area in found if dpi > 0]
+    if not found:
+        return DPI_IDEAL
+    total = sum(area for _, area in found) or 1
+    return js_round(sum(dpi * area for dpi, area in found) / total)
+
+
+class Files:
+    """The uploaded files, read from storage as little as needed."""
+
+    def __init__(self, storage):
+        self.storage = storage
+
+    def head(self, row):
+        return self.storage.client.get_object(Bucket=self.storage.bucket, Key=row['object_key'],
+                                              Range=f'bytes=0-{HEAD_BYTES - 1}')['Body'].read()
+
+    def pdf_dpi(self, row):
+        if row['size'] > PDF_MAX_BYTES:
+            return None
+        with tempfile.NamedTemporaryFile(suffix='.pdf') as handle:
+            self.storage.client.download_fileobj(self.storage.bucket, row['object_key'], handle)
+            handle.flush()
+            return pdf_dpi(handle.name)
+
+
+def source_dpi(files, row, source):
+    """One source's DPI across the width it is printed at, or None."""
+    name = row['name'].lower()
+    width_in = float(source['width_cm']) / 2.54
+    if name.endswith('.pdf'):
+        return files.pdf_dpi(row) if source['kind'] == 'sheet' else None
+    if not name.endswith(('.png', '.jpg', '.jpeg', '.webp')):
+        return None
+    size = image_size(files.head(row))
+    if not size or not all(size):
+        return None
+    across = size[1] if source['rotation_degrees'] in (90, 270) else size[0]
+    return across / width_in
+
+
+def item_grade(files, item, rows):
+    """The grade the Site gives this item, recomputed; None if it cannot be."""
+    sources = item['production']['sources']
+    dpis = []
+    for source in sources:
+        row = rows.get(str(source['upload_id']))
+        dpi = source_dpi(files, row, source) if row else None
+        if dpi is None:
+            return None
+        dpis.append(dpi)
+    if all(source['kind'] == 'sheet' for source in sources):
+        # A sheet's DPI is shown and compared as a whole number.
+        return grade_of(min(js_round(d) for d in dpis))
+    return js_round(sum(grade_of(d) for d in dpis) / len(dpis))
+
+
+def mismatch(files, items, rows):
+    """Why a cart's grades cannot be approved at checkout, or None."""
+    for item in items:
+        if item['grade'] == 0:
+            continue                      # full price: nothing to verify
+        verified = item_grade(files, item, rows)
+        if verified is None:
+            return 'Nota não conferida no servidor'
+        if item['grade'] > verified + TOLERANCE:
+            return f"Nota {item['grade']} maior que a do arquivo ({verified})"
+    return None

app/jadlog.py

@@ -0,0 +1,119 @@
+"""Jadlog freight quotes (Embarcador API, "Simulador de Frete").
+
+Written from Jadlog's API manual v2.3 (August 2025) and exercised only
+against a fake HTTP transport until app.jadlog_probe has run on the client's
+account. A quote is read-only: it creates no shipment and costs nothing, so
+unlike Tiny it can be tried on the real account as often as needed.
+
+The client's contract: origin CEP 14402-310, service .PACKAGE (modalidade 3),
+home delivery. Jadlog prices by weight in kg and expects the larger of the
+real and the cubed weight. The package weight comes from the client (a base
+plus a weight per billed metre) and has no default: FREIGHT_ADAPTER=jadlog
+refuses to start without it, so a guessed weight never prices a customer's
+freight.
+"""
+import os
+from decimal import ROUND_HALF_UP, Decimal
+
+import httpx
+
+QUOTE_URL = 'https://www.jadlog.com.br/embarcador/api/frete/valor'
+PACKAGE = 3
+ORIGIN = '14402310'
+SERVICE = 'jadlog'
+WEIGHT_SETTINGS = ('JADLOG_PESO_BASE_KG', 'JADLOG_PESO_POR_METRO_KG')
+
+
+class JadlogError(Exception):
+    pass
+
+
+def digits(value):
+    return ''.join(ch for ch in str(value or '') if ch.isdigit())
+
+
+class JadlogQuotes:
+    def __init__(self, token=None, cnpj=None, conta=None, contrato=None, origin=None,
+                 modalidade=None, transport=None):
+        self.token = (token or os.environ.get('JADLOG_TOKEN', '')).strip()
+        self.cnpj = digits(cnpj or os.environ.get('JADLOG_CNPJ'))
+        # Sent as configured: Jadlog issues it as 000000-0 and documents six
+        # characters, so which form it accepts is only known on the account.
+        self.conta = (conta if conta is not None else os.environ.get('JADLOG_CONTA', '')).strip()
+        # Only when Jadlog issued one; the manual says to send null otherwise.
+        self.contrato = (contrato if contrato is not None else os.environ.get('JADLOG_CONTRATO', '')).strip() or None
+        self.origin = digits(origin or os.environ.get('JADLOG_ORIGEM_CEP') or ORIGIN)
+        self.modalidade = int(modalidade or os.environ.get('JADLOG_MODALIDADE') or PACKAGE)
+        if not self.token or len(self.cnpj) != 14:
+            raise RuntimeError('Jadlog needs JADLOG_TOKEN and a 14-digit JADLOG_CNPJ')
+        self.http = httpx.Client(timeout=20, transport=transport)
+
+    def item(self, postal_code, weight_kg, declared_cents):
+        return {'cepori': self.origin, 'cepdes': digits(postal_code), 'frap': 'N',
+                'peso': float(weight_kg), 'cnpj': self.cnpj, 'conta': self.conta,
+                'contrato': self.contrato, 'modalidade': self.modalidade,
+                'tpentrega': 'D', 'tpseguro': 'N',
+                'vldeclarado': declared_cents / 100, 'vlcoleta': 0}
+
+    def quote(self, postal_code, weight_kg, declared_cents):
+        """Price in centavos and delivery days for one package to one CEP."""
+        response = self.http.post(QUOTE_URL, json={'frete': [self.item(postal_code, weight_kg, declared_cents)]},
+                                  headers={'Authorization': self.token})
+        if response.status_code == 401:
+            raise JadlogError('Jadlog refused the token (HTTP 401)')
+        try:
+            data = response.json()
+        except ValueError:
+            raise JadlogError(f'HTTP {response.status_code}: the response is not JSON') from None
+        items = data.get('frete') or []
+        # The manual names the group "erro" in its tables and "error" in its
+        # examples, at the top level and per item.
+        problem = data.get('error') or data.get('erro')
+        if not problem and items:
+            problem = items[0].get('erro') or items[0].get('error')
+        if problem:
+            raise JadlogError(problem.get('descricao') or str(problem) if isinstance(problem, dict) else str(problem))
+        if response.status_code >= 400 or not items or items[0].get('vltotal') is None:
+            raise JadlogError(f'HTTP {response.status_code}: no freight value in the response')
+        total = Decimal(str(items[0]['vltotal']))
+        return {'total_cents': int((total * 100).quantize(Decimal('1'), ROUND_HALF_UP)),
+                'days': items[0].get('prazo'), 'raw': items[0]}
+
+
+def required_settings():
+    return ('JADLOG_TOKEN', 'JADLOG_CNPJ') + WEIGHT_SETTINGS
+
+
+class JadlogFreight:
+    """The Site's delivery option: Jadlog's price for the order's package."""
+    name = 'jadlog'
+
+    def __init__(self, quotes=None):
+        self.quotes = quotes or JadlogQuotes()
+        self.base_kg = Decimal(os.environ['JADLOG_PESO_BASE_KG'])
+        self.per_metre_kg = Decimal(os.environ['JADLOG_PESO_POR_METRO_KG'])
+        # Jadlog's time counts from collection; the order is printed first.
+        self.production_days = int(os.environ.get('FREIGHT_PRODUCTION_DAYS') or 0)
+        if self.base_kg < 0 or self.per_metre_kg <= 0 or self.production_days < 0:
+            raise RuntimeError('Jadlog package weight and production days must be positive')
+
+    def weight_kg(self, metres):
+        return (self.base_kg + self.per_metre_kg * Decimal(str(metres))).quantize(Decimal('0.001'))
+
+    def quote(self, service, postal_code, metres=None, declared_cents=0):
+        if service == 'pickup':
+            return {'provider': self.name, 'service': 'pickup', 'total_cents': 0, 'postal_code': ''}
+        if service != SERVICE or len(postal_code) != 8 or not postal_code.isascii() or not postal_code.isdigit():
+            raise ValueError('Select pickup or Jadlog delivery with an eight-digit CEP')
+        if metres is None or Decimal(str(metres)) <= 0:
+            raise ValueError('The order length is required to quote freight')
+        weight = self.weight_kg(metres)
+        try:
+            result = self.quotes.quote(postal_code, weight, int(declared_cents))
+        except (JadlogError, httpx.HTTPError) as error:
+            raise ValueError(f'Não foi possível cotar o frete na Jadlog agora: {error}') from None
+        days = result['days']
+        return {'provider': self.name, 'service': SERVICE, 'postal_code': postal_code,
+                'total_cents': result['total_cents'], 'weight_kg': str(weight),
+                'days': None if days is None else int(days) + self.production_days,
+                'description': 'Jadlog .PACKAGE'}

app/jadlog_probe.py

@@ -0,0 +1,80 @@
+"""Read-only price check against the client's real Jadlog account, run by hand.
+A quote creates no shipment and costs nothing.
+
+    python -m app.jadlog_probe [--cep 01310100 ...] [--peso 0.5 ...] [--valor 100]
+
+Without --cep and --peso it prices a few test weights to a few regions. It
+answers whether the token, CNPJ and account are accepted, whether a contract
+number is required (Jadlog names it in the error), and what the contract
+prices and delivery times are. The first failure stops the run: an account
+problem would repeat on every line.
+
+In production, from the worker's console (Portainer > Containers > worker >
+Console), with JADLOG_TOKEN, JADLOG_CNPJ and JADLOG_CONTA in the stack:
+
+    python -m app.jadlog_probe
+
+Locally, with the credentials in jadlog.env (ignored by git):
+
+    docker compose -f compose.local.yaml -f compose.providers.yaml run --rm --no-deps --build \\
+        --env-from-file jadlog.env worker python -m app.jadlog_probe
+"""
+import argparse
+import sys
+from decimal import Decimal
+
+from .core.secrets import load as load_secret_files
+from .jadlog import JadlogError, JadlogQuotes
+
+DESTINATIONS = {'14402310': 'Franca (origem)', '01310100': 'São Paulo', '20040002': 'Rio de Janeiro',
+                '80010000': 'Curitiba', '50030230': 'Recife', '69005010': 'Manaus'}
+WEIGHTS = ['0.3', '0.5', '1', '2', '5']
+
+
+def money(cents):
+    return f'R$ {cents / 100:.2f}'.replace('.', ',')
+
+
+def run(quotes, ceps, weights, declared_cents, out):
+    header = quotes.token
+    for weight in weights:
+        for cep in ceps:
+            try:
+                result = quotes.quote(cep, Decimal(weight), declared_cents)
+            except JadlogError as error:
+                # The manual shows the header as the bare token; some accounts
+                # are issued one that expects the Bearer scheme.
+                if '401' in str(error) and not header.lower().startswith('bearer '):
+                    quotes.token = 'Bearer ' + header
+                    header = quotes.token
+                    try:
+                        result = quotes.quote(cep, Decimal(weight), declared_cents)
+                    except JadlogError as retry:
+                        out(f'ERRO {cep} {weight} kg: {retry} (also with "Bearer ")')
+                        return 1
+                    out('Note: the token only works with the "Bearer " prefix.')
+                else:
+                    out(f'ERRO {cep} {weight} kg: {error}')
+                    return 1
+            days = result['days']
+            out(f"{weight} kg\t{cep}\t{DESTINATIONS.get(cep, '')}\t{money(result['total_cents'])}\t"
+                f"{days if days is not None else '?'} dia(s)")
+    return 0
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(prog='python -m app.jadlog_probe')
+    parser.add_argument('--cep', action='append', help='destination CEP (repeatable)')
+    parser.add_argument('--peso', action='append', help='weight in kg (repeatable)')
+    parser.add_argument('--valor', default='100', help='declared value in reais (default 100)')
+    args = parser.parse_args(argv)
+    load_secret_files()
+    quotes = JadlogQuotes()
+    declared = int(Decimal(args.valor) * 100)
+    print(f'Origem {quotes.origin}, modalidade {quotes.modalidade}, contrato {quotes.contrato or "-"}, '
+          f'valor declarado {money(declared)}')
+    return run(quotes, args.cep or list(DESTINATIONS), args.peso or WEIGHTS, declared, print)
+
+
+if __name__ == '__main__':
+    sys.exit(main())

app/mercadopago.py

@@ -21,6 +21,7 @@ import hmac
 import json
 import os
 import time
+from datetime import datetime, timedelta, timezone
 from decimal import Decimal, InvalidOperation
 from typing import Mapping
 
@@ -35,6 +36,9 @@ MAX_SIGNATURE_AGE = 30 * 60
 STATUSES = {'approved': 'approved', 'pending': 'pending', 'in_process': 'pending',
             'authorized': 'pending', 'in_mediation': 'pending', 'rejected': 'rejected',
             'cancelled': 'cancelled', 'refunded': 'refunded', 'charged_back': 'refunded'}
+# A PIX code stops working after this; Mercado Pago then cancels the payment.
+PIX_MINUTES = 30
+BRASILIA = timezone(timedelta(hours=-3))
 
 
 class MercadoPagoPayment:
@@ -70,31 +74,51 @@ class MercadoPagoPayment:
                           'identification': {'type': 'CNPJ', 'number': customer['cnpj']}}}
         if self.notification_url:
             body['notification_url'] = self.notification_url
+        expires_at = None
         if method['type'] == 'pix':
             body['payment_method_id'] = 'pix'
+            expires_at = (datetime.now(BRASILIA) + timedelta(minutes=PIX_MINUTES)).isoformat(timespec='milliseconds')
+            body['date_of_expiration'] = expires_at
         elif method['type'] == 'card':
             body.update(token=method['token'], payment_method_id=method['payment_method_id'],
                         installments=int(method.get('installments', 1)))
-            if method.get('issuer_id'):
-                body['issuer_id'] = method['issuer_id']
+            # 3-D Secure (the bank's confirmation) only for debit, which needs
+            # it; asking it of every card was refused as a rule (10113).
+            if method['payment_method_id'].startswith('deb'):
+                body['three_d_secure_mode'] = 'optional'
+            if method.get('payer_document_type') and method.get('payer_document'):
+                body['payer']['identification'] = {'type': method['payer_document_type'],
+                                                   'number': method['payer_document']}
+            # No issuer_id: Mercado Pago takes the issuer from the card number.
+            # The form's suggestion was refused for its own test cards
+            # (10111, "the issuer does not have the BIN configured").
         else:
             raise ValueError('Unsupported payment method')
-        # A PIX retry must return the same code. A card retry after a decline
-        # is a new attempt with a new token, so the token is part of the key;
-        # the intent route refuses new attempts once one is approved or in review.
-        key = f'dtf-quote-{quote_id}-pix' if method['type'] == 'pix' else \
+        # A PIX retry must return the same code; a new one, after the last
+        # expired, is the next attempt. A card retry after a decline is a new
+        # attempt with a new token, so the token is part of the key; the intent
+        # route refuses new attempts once one is approved or in review.
+        key = f"dtf-quote-{quote_id}-pix-{int(method.get('attempt', 1))}" if method['type'] == 'pix' else \
             f"dtf-quote-{quote_id}-card-{hashlib.sha256(method['token'].encode()).hexdigest()[:24]}"
         response = self.http.post('/v1/payments', json=body, headers={'X-Idempotency-Key': key})
         response.raise_for_status()
         payment = response.json()
         transaction = (payment.get('point_of_interaction') or {}).get('transaction_data') or {}
+        # A payment waiting for 3-D Secure carries the bank's challenge page,
+        # which the Site shows in a frame by posting `creq` to that address.
+        three_ds = payment.get('three_ds_info') or {}
+        challenge = ({'url': three_ds['external_resource_url'], 'creq': three_ds['creq']}
+                     if payment.get('status_detail') == 'pending_challenge'
+                     and three_ds.get('external_resource_url') and three_ds.get('creq') else None)
         return {'provider': self.name, 'id': str(payment['id']),
                 'status': STATUSES.get(payment.get('status'), 'pending'),
                 'status_detail': payment.get('status_detail'),
                 'total_cents': total_cents,
                 'pix_qr_code': transaction.get('qr_code'),
                 'pix_qr_code_base64': transaction.get('qr_code_base64'),
-                'ticket_url': transaction.get('ticket_url')}
+                'ticket_url': transaction.get('ticket_url'),
+                'expires_at': payment.get('date_of_expiration') or expires_at,
+                'challenge': challenge}
 
     def lookup(self, payment_id: str) -> dict:
         response = self.http.get(f'/v1/payments/{payment_id}')
@@ -134,7 +158,15 @@ class MercadoPagoPayment:
         payment_id = str((query or {}).get('data.id') or (data.get('data') or {}).get('id') or '')
         if not payment_id.isdigit():
             return None
-        payment = self.lookup(payment_id)
+        try:
+            payment = self.lookup(payment_id)
+        except httpx.HTTPStatusError as error:
+            # Signed by Mercado Pago but about no payment of ours, such as the
+            # panel's "Simular notificação". Anything else is raised so that a
+            # real notification is retried.
+            if error.response.status_code == 404:
+                return None
+            raise
         return event_from_payment(payment, notification_id=str(data.get('id', '')))
 
 

app/mercadopago_probe.py

@@ -0,0 +1,65 @@
+"""Read-only look at the Mercado Pago account behind MP_ACCESS_TOKEN.
+
+    python -m app.mercadopago_probe [--bin 503143] [--valor 50]
+
+Run from the api container's console (Portainer > Containers > api >
+Console), or with "Verificar conta" on the Kanban's Integrations tab. It creates nothing and charges nothing: it asks Mercado Pago which
+account the token belongs to, which card methods the account accepts, and how
+it classifies a card number's first digits (type, issuer, instalments). That
+is what payment errors such as 10111 (issuer) and 10113 (method excluded by a
+rule) depend on.
+"""
+import argparse
+import os
+import sys
+
+import httpx
+
+from .core.secrets import load as load_secret_files
+
+API = 'https://api.mercadopago.com'
+
+
+def check(token, bin_='548083', amount='50', transport=None):
+    """The account, its card methods and how a card's first digits are read."""
+    http = httpx.Client(base_url=API, timeout=15, transport=transport,
+                        headers={'Authorization': f'Bearer {token}'})
+    result = {'token': 'test' if token.startswith('TEST-') else 'production'}
+    me = http.get('/users/me')
+    if me.status_code == 200:
+        user = me.json()
+        tags = user.get('tags') or []
+        result['account'] = {'id': user.get('id'), 'nickname': user.get('nickname'),
+                             'site': user.get('site_id'), 'test_user': 'test_user' in tags, 'tags': tags}
+    else:
+        result['account'] = {'error': f'HTTP {me.status_code}'}
+    methods = http.get('/v1/payment_methods')
+    result['cards'] = ([{'id': m.get('id'), 'type': m.get('payment_type_id'), 'status': m.get('status')}
+                        for m in methods.json() if m.get('payment_type_id') in ('credit_card', 'debit_card')]
+                       if methods.status_code == 200 else {'error': f'HTTP {methods.status_code}'})
+    options = http.get('/v1/payment_methods/installments', params={'bin': bin_, 'amount': amount})
+    result['bin'] = ([{'method': o.get('payment_method_id'), 'type': o.get('payment_type_id'),
+                       'issuer': (o.get('issuer') or {}).get('name'),
+                       'installments': [c.get('installments') for c in o.get('payer_costs') or []]}
+                      for o in options.json()]
+                     if options.status_code == 200 else {'error': f'HTTP {options.status_code} {options.text[:200]}'})
+    return result
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(prog='python -m app.mercadopago_probe')
+    parser.add_argument('--bin', default='548083', help="the card's first six digits")
+    parser.add_argument('--valor', default='50', help='amount in reais for the instalment lookup')
+    args = parser.parse_args(argv)
+    load_secret_files()
+    token = os.environ.get('MP_ACCESS_TOKEN', '')
+    if not token:
+        print('MP_ACCESS_TOKEN is not set in this container.')
+        return 1
+    import json
+    print(json.dumps(check(token, args.bin, args.valor), indent=2, ensure_ascii=False))
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())

app/payments.py

@@ -41,6 +41,34 @@ def approved_quote(c, quote_id, owner=None):
     return row
 
 
+TEST_PROVIDER = 'teste'
+
+
+def is_test(order):
+    """An operator's test order: it goes through production and notifies no one."""
+    return (order.get('payment') or {}).get('provider') == TEST_PROVIDER
+
+
+# How long a file is kept while nothing has been paid for it. A cart's files
+# are uploaded before payment, so the price and the security check are done on
+# the file itself; a cart that is never paid must not keep them for 30 days.
+UNPAID_HOLD = '2 days'
+# A quote waiting for an operator's review keeps its files this long.
+REVIEW_HOLD = '7 days'
+# Once paid, the order keeps its originals for this long from the upload.
+ORDER_RETENTION = '30 days'
+
+
+def quote_uploads(quote_or_draft):
+    return [uid for item in quote_or_draft['items'] for uid in item['uploads']]
+
+
+def hold_uploads(c, upload_ids, interval):
+    """Keep these files at least `interval` from now; never shortens a hold."""
+    c.execute('''UPDATE dtf_local.uploads SET expires_at=GREATEST(expires_at, now()+%s::interval)
+        WHERE id=ANY(%s) AND purged_at IS NULL''', (interval, [str(u) for u in upload_ids]))
+
+
 def create_order(c, quote, payment):
     """Create the order for a reviewed quote, or return the one already there.
 
@@ -60,7 +88,12 @@ def create_order(c, quote, payment):
     order = c.execute(
         'INSERT INTO dtf_local.orders(id,quote_id,owner,snapshot,payment) VALUES(%s,%s,%s,%s,%s) RETURNING *',
         (uuid4(), quote['id'], quote['owner'], Jsonb(approved), Jsonb(payment))).fetchone()
+    # Paid: the files are kept for the order's retention, counted from upload.
+    c.execute('''UPDATE dtf_local.uploads SET expires_at=GREATEST(expires_at, created_at+%s::interval)
+        WHERE id=ANY(%s) AND purged_at IS NULL''', (ORDER_RETENTION, quote_uploads(approved)))
     queue_print_files(c, order['id'], len(approved['items']))
+    if is_test(order):
+        return order, True
     for provider in ('tiny', 'whatsapp'):
         enqueue(c, f"{order['id']}:paid:{provider}", provider,
                 {'order_id': str(order['id']), 'number': order['number'],

app/printjobs.py

@@ -9,6 +9,12 @@ The result is an ordinary upload row owned by an identity derived from the
 order, already marked clean: its only inputs are artwork that passed the
 malware scan, and the bytes are written here. The operator still decides
 whether it becomes the final file; generation never approves anything.
+
+Sheets of several GB are the normal order, and decoding one would take more
+memory than the worker has. A source above LARGE_SOURCE_BYTES is never
+opened: a finished sheet placed whole on the film is already its own print
+file, so the original becomes the print file; any other layout is prepared
+by hand from the original.
 """
 import logging
 import os
@@ -25,6 +31,9 @@ from .printfile import Unsupported, render
 
 CLAIM_TIMEOUT = timedelta(minutes=15)
 MAX_ATTEMPTS = 3
+LARGE_SOURCE_BYTES = int(os.environ.get('PRINT_DECODE_MAX_BYTES', str(300 * 1024 * 1024)))
+# Formats the operator can import as they are.
+PRINTABLE_ORIGINAL = ('.png', '.jpg', '.jpeg', '.tif', '.tiff', '.pdf')
 
 
 def generated_identity(order_id):
@@ -60,13 +69,26 @@ def render_one(storage):
         c.execute('''UPDATE dtf_local.print_files SET status='rendering', claimed_at=now(),
             attempts=attempts+1 WHERE id=%s''', (job['id'],))
         item = job['snapshot']['items'][job['item_index']]
-        uploads = c.execute('''SELECT id,name,object_key,scan_state,purged_at,expires_at,
+        uploads = c.execute('''SELECT id,name,size,object_key,scan_state,purged_at,expires_at,
             (expires_at<=now()) AS expired FROM dtf_local.uploads WHERE id=ANY(%s)''',
             ([UUID(u) for u in item['uploads']],)).fetchall()
         # Every generated file shares its order's artwork retention deadline.
         expiry = c.execute('SELECT min(created_at)+interval \'30 days\' AS e FROM dtf_local.uploads WHERE id=ANY(%s)',
                            ([UUID(u) for u in item['uploads']],)).fetchone()['e']
     by_id = {str(row['id']): row for row in uploads}
+    if any(row['size'] > LARGE_SOURCE_BYTES for row in uploads):
+        original = whole_sheet(item, by_id)
+        if original:
+            with connect() as c:
+                c.execute('''UPDATE dtf_local.print_files SET status='ready', upload_id=%s, detail=%s,
+                    finished_at=now(), claimed_at=NULL WHERE id=%s''',
+                          (original['id'], Jsonb({'source': 'original', 'name': original['name']}), job['id']))
+            audit('print_file_original', order=str(job['order_id']), item=job['item_index'])
+        else:
+            finish(job, 'manual', {'reason': f'arquivo acima de {LARGE_SOURCE_BYTES // 1048576} MB: '
+                                             'monte a folha a partir do original'})
+            audit('print_file_manual', order=str(job['order_id']), item=job['item_index'])
+        return True
     try:
         result = produce(storage, job, item, by_id)
     except Unsupported as reason:
@@ -96,6 +118,25 @@ def render_one(storage):
     return True
 
 
+def whole_sheet(item, uploads):
+    """The original, when the item is one finished sheet placed whole, once,
+    unrotated and unmirrored, across the film: then it is the print file."""
+    spec = item.get('production') or {}
+    sources, placements = spec.get('sources') or [], spec.get('placements') or []
+    if len(item['uploads']) != 1 or len(sources) != 1 or len(placements) != 1:
+        return None
+    source, place = sources[0], placements[0]
+    row = uploads.get(item['uploads'][0])
+    if (not row or row['scan_state'] != 'clean' or row['purged_at'] or row['expired']
+            or source.get('kind') != 'sheet' or int(source.get('copies', 1)) != 1
+            or not row['name'].lower().endswith(PRINTABLE_ORIGINAL)):
+        return None
+    if (float(place['x_cm']) != 0 or float(place['y_cm']) != 0 or int(place['rotation_degrees']) != 0
+            or place['mirrored'] or abs(float(source['width_cm']) - float(spec['film_width_cm'])) > 0.5):
+        return None
+    return row
+
+
 def produce(storage, job, item, uploads):
     """Fetch the item's artwork and render it. Returns (pdf path, name, size, evidence)."""
     for upload_id in item['uploads']:

app/quote_review.py

@@ -0,0 +1,89 @@
+"""Quote approval: automatic at checkout, by an operator for the exceptions.
+
+A quote the customer can pay is priced here from the server's own ladders,
+whether an operator approved it on the Kanban or the Site approved it the
+moment it was created. The Site is a shop: a customer who can price the order
+should be able to pay for it straight away, at any hour, so only orders a
+person must look at before charging wait for the Kanban (review_reason).
+
+The grade (and so the discount) is worked out in the customer's browser and
+checked against the files before an automatic approval (app/grade_check.py);
+a grade the files do not support waits for review. The layout is still the
+browser's (roadmap 3.9): the API checks its geometry. Operators see every
+order's grade and artwork at Arte recebida.
+"""
+import os
+from decimal import Decimal
+
+from fastapi import HTTPException
+from psycopg.types.json import Jsonb
+
+from . import payments
+from .core.pricing import price
+from .runtime import freight, upload_row
+from .scanning import require_clean
+
+AUTO = 'auto'
+
+
+def auto_approve_enabled():
+    return os.environ.get('QUOTE_AUTO_APPROVE', 'true').lower() == 'true'
+
+
+def max_auto_metres():
+    return Decimal(os.environ.get('QUOTE_AUTO_MAX_METRES', '50'))
+
+
+def review_reason(draft):
+    """Why this quote needs a person before it can be paid, or None."""
+    if not auto_approve_enabled():
+        return 'Aprovação automática desligada'
+    total = sum(Decimal(str(item['metres'])) for item in draft['items'])
+    if total > max_auto_metres():
+        return f'Pedido acima de {max_auto_metres():g} m'
+    for item in draft['items']:
+        if item.get('production', {}).get('version') != 2:
+            return 'Montagem antiga'
+        # The Site grades only the art it could analyse; anything else is
+        # priced at the full rate. A discount on it did not come from the Site.
+        if item['quality_status'] == 'unverified' and item['grade'] != 0:
+            return 'Nota informada sem análise da arte'
+    return None
+
+
+def approve(c, row, items, reviewer):
+    """Price the reviewed items and bind them to the quote; returns the approval.
+    `row` must be locked by the caller."""
+    draft = row['draft']
+    if row['approved']:
+        raise HTTPException(409, 'Approved quotes are immutable; request a new quote')
+    if any(item.get('production', {}).get('version') != 2 for item in draft['items']):
+        raise HTTPException(409, 'Quote uses an obsolete production layout; customer must request a new quote')
+    if len(items) != len(draft['items']):
+        raise HTTPException(422, 'Review must cover every item')
+    priced = []
+    for item, original in zip(items, draft['items']):
+        if item.mode != original['mode'] or list(map(str, item.uploads)) != original['uploads']:
+            raise HTTPException(422, 'Product mode and attached files cannot change during review')
+        if item.production.model_dump(mode='json') != original['production'] or item.quality_status != original['quality_status'] or item.quality_acknowledged != original['quality_acknowledged']:
+            raise HTTPException(422, 'Production instructions and customer acknowledgement cannot change during commercial review')
+        for upload_id in item.uploads:
+            require_clean(upload_row(c, upload_id, row['owner']))
+        priced.append({**price(item.mode, str(item.metres), item.grade),
+                       'uploads': original['uploads'], 'production': original['production'],
+                       'quality_status': original['quality_status'],
+                       'quality_acknowledged': original['quality_acknowledged']})
+    metres = sum(Decimal(i['billed_metres']) for i in priced)
+    try:
+        quoted_freight = freight.quote(draft['freight']['service'], draft['freight'].get('postal_code', ''),
+                                       metres, sum(i['total_cents'] for i in priced))
+    except ValueError as exc:
+        raise HTTPException(422, str(exc))
+    approved = {'customer': draft['customer'], 'items': priced, 'freight': quoted_freight,
+                'destination': draft.get('destination'),
+                'total_cents': sum(i['total_cents'] for i in priced) + quoted_freight['total_cents']}
+    c.execute('UPDATE dtf_local.quotes SET approved=%s, reviewed_by=%s, approved_at=now() WHERE id=%s',
+              (Jsonb(approved), reviewer, row['id']))
+    # Approved and payable now: the files wait for the payment, not for ever.
+    payments.hold_uploads(c, payments.quote_uploads(approved), payments.UNPAID_HOLD)
+    return approved

app/runtime.py

@@ -25,7 +25,11 @@ if os.environ.get('PAYMENT_ADAPTER') == 'mercadopago':
     payment = MercadoPagoPayment()
 else:
     payment = FakePayment()
-freight = FakeFreight()
+if os.environ.get('FREIGHT_ADAPTER') == 'jadlog':
+    from .jadlog import JadlogFreight
+    freight = JadlogFreight()
+else:
+    freight = FakeFreight()
 ENVIRONMENT = os.environ.get('APP_ENV', 'local')
 PUBLIC_ORIGIN = os.environ.get('PUBLIC_ORIGIN', 'http://localhost')
 ALLOWED_HOSTS = [host for host in os.environ.get('ALLOWED_HOSTS', 'localhost,127.0.0.1').split(',') if host]
@@ -70,11 +74,19 @@ def upload_row(c, upload_id, session_id, lock=False):
 
 
 def quote_view(c, row):
+    from .quote_review import review_reason  # it imports this module
     order = c.execute('SELECT id,number,state FROM dtf_local.orders WHERE quote_id=%s', (row['id'],)).fetchone()
+    # The latest payment attempt, so the payment page can tell a refused card
+    # (the notification updates it) from one still waiting.
+    attempt = c.execute('''SELECT method,status,response->>'status_detail' AS status_detail
+        FROM dtf_local.payment_intents WHERE quote_id=%s ORDER BY created_at DESC LIMIT 1''', (row['id'],)).fetchone()
     expired = row['approved_at'] and row['approved_at'] < datetime.now(timezone.utc)-timedelta(hours=24)
     return {'id': row['id'], 'created_at': row['created_at'],
             'draft': row['draft'], 'approved': row['approved'],
             'status': 'paid' if order else 'expired' if expired else 'approved' if row['approved'] else 'pending_review',
+            'auto_approved': row.get('reviewed_by') == 'auto',
+            'review_reason': None if row['approved'] else (row.get('review_note') or review_reason(row['draft'])),
+            'payment': attempt,
             'order': order}
 
 

app/scanning.py

@@ -1,4 +1,13 @@
-"""Local ClamAV boundary. Unknown/error/over-limit results NEVER release artwork."""
+"""Releasing artwork: ClamAV up to its size limit, a format check above it.
+
+Unknown or error results NEVER release artwork. ClamAV scans files up to
+scan_limit_bytes() (2 GB). Sheets of several GB are the normal order and
+ClamAV cannot take them, so a larger file is released only if its first bytes
+are those of the format its name claims (a PNG that really is a PNG, not a
+program renamed .png). That is the check the client chose for large files; it
+does not look for malware inside a valid file.
+"""
+import re
 import socket
 import struct
 import time
@@ -30,10 +39,9 @@ class ClamAV:
         return self.command(b'VERSION').decode('utf-8','replace')
 
     def scan(self, stream, size):
-        if size > scan_limit_bytes():
-            return 'rejected', 'File exceeds the malware scan limit'
         with socket.create_connection(('scanner',3310),timeout=10) as sock:
-            sock.settimeout(150)
+            # A 2 GB file takes minutes to stream and scan.
+            sock.settimeout(900)
             sock.sendall(b'zINSTREAM\0')
             sent=0
             for chunk in stream.iter_chunks(chunk_size=65536):
@@ -52,6 +60,37 @@ class ClamAV:
             if result.endswith(b' FOUND'):return 'rejected','Malware or unsafe scan condition detected'
             return 'error','Scanner could not verify this file'
 
+# What each accepted extension must start with. AI files are PDF or PostScript;
+# CDR and WebP are RIFF containers with their own form type.
+TIFF = (b'II*\x00', b'MM\x00*', b'II+\x00', b'MM\x00+')
+SIGNATURES = {
+    'png': (b'\x89PNG\r\n\x1a\n',),
+    'jpg': (b'\xff\xd8\xff',), 'jpeg': (b'\xff\xd8\xff',),
+    'tif': TIFF, 'tiff': TIFF,
+    'pdf': (b'%PDF-',), 'ai': (b'%PDF-', b'%!PS'),
+    'psd': (b'8BPS',), 'psb': (b'8BPS',),
+}
+RIFF_FORMS = {'cdr': re.compile(rb'^RIFF....CDR', re.S), 'webp': re.compile(rb'^RIFF....WEBP', re.S)}
+HEAD_BYTES = 64
+
+
+def format_matches(name, head):
+    """Whether a file's first bytes are those of the format its name claims."""
+    ext = name.rsplit('.', 1)[-1].lower() if '.' in name else ''
+    if ext in RIFF_FORMS:
+        return bool(RIFF_FORMS[ext].match(head))
+    return any(head.startswith(sig) for sig in SIGNATURES.get(ext, ()))
+
+
+def check_large(storage, row):
+    """Release decision for a file above the antivirus limit."""
+    head = storage.client.get_object(Bucket=storage.bucket, Key=row['object_key'],
+                                     Range=f'bytes=0-{HEAD_BYTES - 1}')['Body'].read()
+    if format_matches(row['name'], head):
+        return 'clean', 'Acima do limite do antivírus; formato do arquivo conferido'
+    return 'rejected', 'O conteúdo do arquivo não corresponde ao formato do nome'
+
+
 def scan_one(storage, scanner=None):
     scanner=scanner or ClamAV()
     with connect() as c:
@@ -60,9 +99,12 @@ def scan_one(storage, scanner=None):
             ORDER BY created_at FOR UPDATE SKIP LOCKED LIMIT 1''').fetchone()
         if not row:return False
         try:
-            stream=storage.client.get_object(Bucket=storage.bucket,Key=row['object_key'])['Body']
-            try:state,reason=scanner.scan(stream,row['size'])
-            finally:stream.close()
+            if row['size'] > scan_limit_bytes():
+                state,reason=check_large(storage,row)
+            else:
+                stream=storage.client.get_object(Bucket=storage.bucket,Key=row['object_key'])['Body']
+                try:state,reason=scanner.scan(stream,row['size'])
+                finally:stream.close()
         except Exception:
             state,reason='error','Malware scanner unavailable; file remains blocked'
         c.execute("""UPDATE dtf_local.uploads SET scan_state=%s,scan_reason=%s,scanned_at=now(),

app/schema.sql

@@ -134,6 +134,18 @@ CREATE TABLE IF NOT EXISTS dtf_local.print_files (
  UNIQUE(order_id,item_index)
 );
 
+-- Each run of the off-server database backup (ops/db_backup.py), which the
+-- Kanban shows so a backup that stopped working does not go unnoticed.
+CREATE TABLE IF NOT EXISTS dtf_local.backups (
+ id uuid PRIMARY KEY, started_at timestamptz NOT NULL, finished_at timestamptz NOT NULL,
+ status text NOT NULL CHECK(status IN ('ok','failed')), object_key text, bytes bigint, detail text
+);
+CREATE INDEX IF NOT EXISTS backups_finished ON dtf_local.backups(finished_at DESC);
+
+-- Why a quote waits for review, when the reason came from its files (the grade
+-- the server recomputed) and cannot be worked out again from the draft alone.
+ALTER TABLE dtf_local.quotes ADD COLUMN IF NOT EXISTS review_note text;
+
 CREATE INDEX IF NOT EXISTS uploads_owner ON dtf_local.uploads(owner);
 
 -- Indexes follow the queries the application actually issues. Only these; every

compose.local.yaml

@@ -36,7 +36,17 @@ x-app: &app
     MP_WEBHOOK_SECRET: ${MP_WEBHOOK_SECRET:-}
     MP_NOTIFICATION_URL: ${MP_NOTIFICATION_URL:-}
     MP_PUBLIC_KEY: ${MP_PUBLIC_KEY:-}
-    FREIGHT_ADAPTER: fake
+    FREIGHT_ADAPTER: ${FREIGHT_ADAPTER:-fake}
+    JADLOG_TOKEN: ${JADLOG_TOKEN:-}
+    JADLOG_CNPJ: ${JADLOG_CNPJ:-}
+    JADLOG_CONTA: ${JADLOG_CONTA:-}
+    JADLOG_CONTRATO: ${JADLOG_CONTRATO:-}
+    JADLOG_PESO_BASE_KG: ${JADLOG_PESO_BASE_KG:-}
+    JADLOG_PESO_POR_METRO_KG: ${JADLOG_PESO_POR_METRO_KG:-}
+    FREIGHT_PRODUCTION_DAYS: ${FREIGHT_PRODUCTION_DAYS:-0}
+    # Carts the Site priced are approved at checkout; larger ones wait for review.
+    QUOTE_AUTO_APPROVE: ${QUOTE_AUTO_APPROVE:-true}
+    QUOTE_AUTO_MAX_METRES: ${QUOTE_AUTO_MAX_METRES:-50}
     TINY_ADAPTER: ${TINY_ADAPTER:-fake}
     TINY_CLIENT_ID: ${TINY_CLIENT_ID:-}
     TINY_CLIENT_SECRET: ${TINY_CLIENT_SECRET:-}
@@ -54,7 +64,7 @@ x-app: &app
     STORAGE_QUOTA_BYTES: ${STORAGE_QUOTA_BYTES:-53687091200}
     OWNER_UPLOAD_QUOTA_BYTES: ${OWNER_UPLOAD_QUOTA_BYTES:-10737418240}
     MAX_PENDING_UPLOADS: ${MAX_PENDING_UPLOADS:-10}
-    SCAN_MAX_BYTES: ${SCAN_MAX_BYTES:-134217728}
+    SCAN_MAX_BYTES: ${SCAN_MAX_BYTES:-2097152000}
   networks: [local]
   init: true
   security_opt: [no-new-privileges:true]
@@ -138,6 +148,9 @@ services:
       S3_APP_USER: ${S3_APP_USER:-dtf_app}
       S3_APP_PASSWORD: ${S3_APP_PASSWORD:-local-app-storage-only}
       S3_BUCKET: ${S3_BUCKET:-dtf-local-artwork}
+      S3_BACKUP_BUCKET: dtf-local-backups
+      S3_BACKUP_USER: dtf_backup
+      S3_BACKUP_PASSWORD: local-backup-storage-only
     networks: [local]
     depends_on:
       storage: {condition: service_healthy}
@@ -187,6 +200,28 @@ services:
       timeout: 3s
       retries: 12
 
+  # The daily database backup, against the local backup bucket. Idle until
+  # BACKUP_AGE_RECIPIENT is set; tests/backup_test.py runs it with a throwaway key.
+  backup:
+    build:
+      context: .
+      dockerfile: infra/Dockerfile
+    command: python -m ops.db_backup serve
+    environment:
+      DATABASE_ADMIN_URL: postgresql://${POSTGRES_USER:-dtf_local}:${POSTGRES_PASSWORD:-local-database-only}@db:5432/${POSTGRES_DB:-dtf_local}
+      BACKUP_S3_ENDPOINT: http://storage:9000
+      BACKUP_BUCKET: dtf-local-backups
+      BACKUP_ACCESS_KEY_ID: dtf_backup
+      BACKUP_SECRET_ACCESS_KEY: local-backup-storage-only
+      BACKUP_REGION: us-east-1
+      BACKUP_AGE_RECIPIENT: ${BACKUP_AGE_RECIPIENT:-}
+    networks: [local]
+    read_only: true
+    tmpfs: [/tmp]
+    depends_on:
+      db-init: {condition: service_completed_successfully}
+      storage-init: {condition: service_completed_successfully}
+
   site:
     build:
       context: .
@@ -195,6 +230,7 @@ services:
       S3_PUBLIC_ENDPOINT: ${S3_PUBLIC_ENDPOINT:-http://localhost:${STORAGE_PORT:-9000}}
       # Empty unless testing Mercado Pago's card form; see docs/LOCAL_SETUP.md.
       PAYMENT_CSP_SOURCES: ${PAYMENT_CSP_SOURCES:-}
+      PAYMENT_CHALLENGE_SOURCES: ${PAYMENT_CHALLENGE_SOURCES:-}
     ports:
       # Published ports are host-wide even bound to loopback, so on a shared
       # machine any of them can collide with something unrelated. CI overrides
@@ -219,6 +255,7 @@ services:
       WEB_INDEX: kanban.html
       S3_PUBLIC_ENDPOINT: ${S3_PUBLIC_ENDPOINT:-http://localhost:${STORAGE_PORT:-9000}}
       PAYMENT_CSP_SOURCES: ""
+      PAYMENT_CHALLENGE_SOURCES: ""
     ports: ["127.0.0.1:${KANBAN_PORT:-8081}:80"]
     networks: [local, edge]
     depends_on:

deploy/Dockerfile.api

@@ -13,8 +13,11 @@ LABEL org.opencontainers.image.title="DTF Portal/API" \
 # The base is pinned, so its OS packages are frozen at the digest's build date.
 # Upgrade them here or the image ships known-fixed Debian vulnerabilities, which
 # is what the production image was doing while the local one already did this.
+# pg_dump and age are for the database backup (ops/db_backup.py). Debian 13
+# ships PostgreSQL 17, the server's major version, which pg_dump must match.
 RUN apt-get update \
     && apt-get upgrade -y \
+    && apt-get install -y --no-install-recommends postgresql-client-17 age \
     && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app

deploy/Dockerfile.web

@@ -22,7 +22,8 @@ LABEL org.opencontainers.image.title="DTF Site and Kanban" \
       org.opencontainers.image.source="DTF System repository"
 ENV WEB_INDEX=index.html PUBLIC_HOST=invalid.example S3_PUBLIC_ENDPOINT=https://invalid.example
 COPY --from=policy /build/default.conf.template /etc/nginx/templates/default.conf.template
-COPY web/ /usr/share/nginx/html/
+# The HTML from the policy stage, with every asset address versioned.
+COPY --from=policy /build/web/ /usr/share/nginx/html/
 
 # The official entrypoint renders the server configuration at startup and Nginx
 # writes its PID/cache files.  Keep the service non-root while granting it

deploy/nginx.conf.template

@@ -27,7 +27,7 @@ server {
     add_header Referrer-Policy no-referrer always;
     add_header X-Frame-Options DENY always;
     add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
-    add_header Content-Security-Policy "default-src 'self'; script-src 'self' @SCRIPT_HASHES@ ${PAYMENT_CSP_SOURCES}; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; connect-src 'self' ${S3_PUBLIC_ENDPOINT} https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; frame-src 'self' ${PAYMENT_CSP_SOURCES}; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' @SCRIPT_HASHES@ ${PAYMENT_CSP_SOURCES}; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; connect-src 'self' ${S3_PUBLIC_ENDPOINT} https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; frame-src 'self' ${PAYMENT_CSP_SOURCES} ${PAYMENT_CHALLENGE_SOURCES}; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self' ${PAYMENT_CHALLENGE_SOURCES}" always;
 
     location = /health { access_log off; return 200 'ok'; }
     location /api/ {
@@ -49,10 +49,15 @@ server {
     # Always revalidate HTML/JS/CSS after a deployment. Without this, a browser
     # can pair a new Kanban page with a cached older script after a rollout.
     # The Site's product pages and cart are addresses of the same page (web/site-pages.js).
-    location ~ ^/(arquivo-por-metro|artes-avulsas|uv-arquivo-por-metro|uv-artes-avulsas|carrinho)/?$ {
+    location ~ ^/(arquivo-por-metro|artes-avulsas|uv-arquivo-por-metro|uv-artes-avulsas|carrinho|pagamento|pagamento/pix)/?$ {
         expires -1;
         try_files /index.html =404;
     }
+    # The customer's area: one page, which shows the right part for each address.
+    location ~ ^/conta(/(entrar|pedidos|dados))?/?$ {
+        expires -1;
+        try_files /portal.html =404;
+    }
     location / {
         expires -1;
         try_files $uri $uri/ =404;

deploy/portainer.env.example

@@ -27,6 +27,10 @@ POSTGRES_VOLUME=TBD
 OPERATOR_EMAIL=TBD
 
 PAYMENT_ADAPTER=TBD
+# With PAYMENT_ADAPTER=mercadopago. MP_ACCESS_TOKEN and MP_WEBHOOK_SECRET are
+# secrets: enter them in Portainer only, never in this file.
+MP_NOTIFICATION_URL=https://<SITE_DOMAIN>/api/payments/webhook
+MP_PUBLIC_KEY=
 FREIGHT_ADAPTER=TBD
 TINY_ADAPTER=TBD
 # Tiny API v3 application (Configurações > Geral > Aplicativos in Tiny). The
@@ -47,6 +51,13 @@ MAX_PENDING_UPLOADS=10
 MAX_UPLOAD_BYTES=5368709120
 UPLOAD_PART_BYTES=8388608
 SCAN_MAX_BYTES=134217728
+# Daily encrypted database backup to its own bucket (docs/BACKUP.md).
+BACKUP_S3_ENDPOINT=https://<account>.r2.cloudflarestorage.com
+BACKUP_BUCKET=dtf-backups
+BACKUP_ACCESS_KEY_ID=TBD
+BACKUP_SECRET_ACCESS_KEY=TBD
+BACKUP_AGE_RECIPIENT=age1...
+BACKUP_HOUR=3
 
 # Names of external Portainer/Docker Swarm secrets, never their values.
 DATABASE_URL_SECRET=TBD

docker-compose.yml

@@ -19,12 +19,41 @@ x-app-environment: &app-environment
   # this value is configured.
   OPERATOR_EMAIL: ${OPERATOR_EMAIL:-}
   OPERATOR_PASSWORD: ${OPERATOR_PASSWORD:?set OPERATOR_PASSWORD}
-  PAYMENT_ADAPTER: fake
-  # Optional: without it the webhook verifies nothing and therefore accepts
-  # nothing, which is the correct state until a provider is connected. Set it
-  # when the provider is configured, never to a value anyone could guess.
+  # fake until Mercado Pago is configured; mercadopago requires MP_ACCESS_TOKEN
+  # and MP_WEBHOOK_SECRET or the API and worker refuse to start. Test
+  # credentials (TEST-...) until the sandbox flows have passed. The card form
+  # appears only with MP_PUBLIC_KEY, and then needs PAYMENT_CSP_SOURCES too.
+  PAYMENT_ADAPTER: ${PAYMENT_ADAPTER:-fake}
+  MP_ACCESS_TOKEN: ${MP_ACCESS_TOKEN:-}
+  # The "assinatura secreta" from the webhook settings in Mercado Pago.
+  MP_WEBHOOK_SECRET: ${MP_WEBHOOK_SECRET:-}
+  # https://<SITE_DOMAIN>/api/payments/webhook, sent with every payment.
+  MP_NOTIFICATION_URL: ${MP_NOTIFICATION_URL:-}
+  MP_PUBLIC_KEY: ${MP_PUBLIC_KEY:-}
+  # The fake adapter's secret. Optional: without it the webhook verifies
+  # nothing and therefore accepts nothing, which is the correct state until a
+  # provider is connected. Never set it to a value anyone could guess.
   PAYMENT_WEBHOOK_SECRET: ${PAYMENT_WEBHOOK_SECRET:-}
-  FREIGHT_ADAPTER: fake
+  # fake offers pickup only. jadlog prices delivery with Jadlog and needs the
+  # credentials below and the package weight from the client; it refuses to
+  # start without them. The credentials alone are enough for the console
+  # check, python -m app.jadlog_probe, on the worker.
+  FREIGHT_ADAPTER: ${FREIGHT_ADAPTER:-fake}
+  JADLOG_TOKEN: ${JADLOG_TOKEN:-}
+  # The "Usuário" Jadlog issued: the CNPJ that contracts the freight.
+  JADLOG_CNPJ: ${JADLOG_CNPJ:-}
+  JADLOG_CONTA: ${JADLOG_CONTA:-}
+  JADLOG_CONTRATO: ${JADLOG_CONTRATO:-}
+  # Package weight in kg: a base plus each billed metre of film.
+  JADLOG_PESO_BASE_KG: ${JADLOG_PESO_BASE_KG:-}
+  JADLOG_PESO_POR_METRO_KG: ${JADLOG_PESO_POR_METRO_KG:-}
+  # Working days of production added to Jadlog's delivery time.
+  FREIGHT_PRODUCTION_DAYS: ${FREIGHT_PRODUCTION_DAYS:-0}
+  # A cart the Site priced is approved at checkout and can be paid at once;
+  # orders above QUOTE_AUTO_MAX_METRES, or with a grade the Site did not
+  # compute, wait for an operator on the Kanban (app/quote_review.py).
+  QUOTE_AUTO_APPROVE: ${QUOTE_AUTO_APPROVE:-true}
+  QUOTE_AUTO_MAX_METRES: ${QUOTE_AUTO_MAX_METRES:-50}
   # Order creation in Tiny stays off until it has been tested against the
   # client's account (Tiny has no sandbox). The application credentials can be
   # set now: they let an operator connect Tiny from the Kanban, and the worker
@@ -53,10 +82,13 @@ x-app-environment: &app-environment
   COOKIE_SECURE: "true"
   MAX_UPLOAD_BYTES: "5368709120"
   UPLOAD_PART_BYTES: "8388608"
-  STORAGE_QUOTA_BYTES: "53687091200"
-  OWNER_UPLOAD_QUOTA_BYTES: "10737418240"
+  # Sheets of several GB are the normal order, so room for many of them.
+  STORAGE_QUOTA_BYTES: "${STORAGE_QUOTA_BYTES:-536870912000}"
+  OWNER_UPLOAD_QUOTA_BYTES: "${OWNER_UPLOAD_QUOTA_BYTES:-53687091200}"
   MAX_PENDING_UPLOADS: "10"
-  SCAN_MAX_BYTES: "134217728"
+  # ClamAV scans up to this; larger files (up to MAX_UPLOAD_BYTES) are released
+  # after a file-format check instead (app/scanning.py).
+  SCAN_MAX_BYTES: "2097152000"
 
 services:
   db:
@@ -102,7 +134,7 @@ services:
     image: clamav/clamav@sha256:9cb27d7660bdf66e9878c832cb433dd8aa152cfbe16f3c2c0084c80b04ae22b4
     entrypoint: [clamd, --foreground=true, --config-file=/etc/clamav/clamd.conf]
     configs:
-      - source: clamd_config
+      - source: clamd_config_2gb
         target: /etc/clamav/clamd.conf
         mode: 0444
     networks: [backend]
@@ -151,6 +183,34 @@ services:
       replicas: 1
       restart_policy: {condition: on-failure, delay: 5s}
 
+  # Daily encrypted copy of the database to a bucket of its own, off this
+  # server (ops/db_backup.py). Idle until the BACKUP_* settings are set. The
+  # bucket's lifecycle rule removes old copies; this credential never deletes.
+  backup:
+    image: ${API_IMAGE:-gitea.blyzer.com.br/blyzer/dtf-api}:${IMAGE_TAG:-latest}
+    command: python -m ops.db_backup serve
+    environment:
+      DATABASE_ADMIN_HOST: db
+      DATABASE_ADMIN_NAME: dtf
+      DATABASE_ADMIN_USER: dtf_admin
+      DATABASE_ADMIN_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}
+      # The R2 account endpoint (the same as R2_ENDPOINT) and a bucket and API
+      # token for backups only, never the artwork bucket's.
+      BACKUP_S3_ENDPOINT: ${BACKUP_S3_ENDPOINT:-}
+      BACKUP_BUCKET: ${BACKUP_BUCKET:-}
+      BACKUP_ACCESS_KEY_ID: ${BACKUP_ACCESS_KEY_ID:-}
+      BACKUP_SECRET_ACCESS_KEY: ${BACKUP_SECRET_ACCESS_KEY:-}
+      # The public key (age1...). Its private key stays off this server.
+      BACKUP_AGE_RECIPIENT: ${BACKUP_AGE_RECIPIENT:-}
+      # Hour of day in Brasília.
+      BACKUP_HOUR: ${BACKUP_HOUR:-3}
+    networks: [backend, egress]
+    read_only: true
+    tmpfs: [/tmp]
+    deploy:
+      replicas: 1
+      restart_policy: {condition: on-failure, delay: 30s}
+
   site:
     image: ${WEB_IMAGE:-gitea.blyzer.com.br/blyzer/dtf-web}:${IMAGE_TAG:-latest}
     environment:
@@ -160,6 +220,10 @@ services:
       # Mercado Pago's card form loads from these origins; empty keeps the
       # Site at script-src 'self'. Set together with the Mercado Pago adapter.
       PAYMENT_CSP_SOURCES: ${PAYMENT_CSP_SOURCES:-}
+      # The bank's confirmation page for debit and other 3-D Secure cards is
+      # on the issuer's own domain, so it cannot be listed: "https:" lets
+      # frames and form posts reach it (never scripts). Empty turns it off.
+      PAYMENT_CHALLENGE_SOURCES: ${PAYMENT_CHALLENGE_SOURCES:-}
     networks: [backend]
     ports:
       - target: 8080
@@ -183,6 +247,7 @@ services:
       PUBLIC_HOST: ${KANBAN_DOMAIN:?set KANBAN_DOMAIN}
       S3_PUBLIC_ENDPOINT: ${R2_ENDPOINT:?set R2_ENDPOINT}
       PAYMENT_CSP_SOURCES: ""
+      PAYMENT_CHALLENGE_SOURCES: ""
     networks: [backend]
     ports:
       - target: 8080
@@ -200,7 +265,9 @@ services:
       restart_policy: {condition: on-failure, delay: 5s}
 
 configs:
-  clamd_config:
+  # Renamed whenever infra/clamd.conf changes: Swarm cannot update a deployed
+  # config in place, and a redeploy with new content under the old name fails.
+  clamd_config_2gb:
     file: ./infra/clamd.conf
 
 volumes:

docs/BACKUP.md

@@ -0,0 +1,87 @@
+# Database backup
+
+The `backup` service copies the database off the server once a day
+(`ops/db_backup.py`). It runs `pg_dump`, checks the archive, encrypts it with
+[age](https://age-encryption.org) and uploads it to an R2 bucket used for
+nothing else. Each run is recorded, and the Kanban shows the latest one under
+Integrações → "Backup do banco" ("Em dia", "Verificar" or "Não configurado").
+
+The artwork is not backed up. Originals and print files are temporary (7 to 30
+days) and already stored on R2. The database holds what cannot be recreated:
+orders, customers, quotes, payments, the Tiny connection and the operators.
+
+## Why the backup cannot be read or deleted from the server
+
+- **The server only encrypts.** It holds the public key (`age1…`). The private
+  key, which is the only way to open a backup, stays with the owner.
+- **Its own bucket and token.** The backup token reaches the backup bucket
+  only, and the artwork token cannot reach it.
+- **Nothing is deleted by the job.** The bucket's lifecycle rule removes old
+  copies. The bucket lock keeps anyone, including someone holding the token,
+  from deleting or overwriting a copy before its time.
+
+## Setup (once)
+
+1. **Key pair.** Generate it on your own computer, not on the server:
+
+   ```bash
+   docker run --rm gitea.blyzer.com.br/blyzer/dtf-api:latest age-keygen
+   ```
+
+   Or, with age installed (`sudo pacman -S age`, `apt install age`), just
+   run `age-keygen`.
+
+   Save the whole output (the `AGE-SECRET-KEY-1…` line is the private key) in
+   the password manager. Only the `public key: age1…` value goes to Portainer.
+   Without the private key, no backup can ever be restored.
+2. **Cloudflare R2 → Create bucket.** Use a name such as `dtf-backups`.
+3. **Settings on that bucket:**
+   - Object lifecycle rules: delete objects after 35 days.
+   - Bucket lock rules: retain for 30 days, prefix `db/`.
+4. **R2 → Manage API tokens → Create API token.**
+   - Permission: Object Read & Write.
+   - Scope: the `dtf-backups` bucket only.
+5. **Portainer.** Add these to the stack's environment, then redeploy:
+
+   | Variable | Value |
+   |---|---|
+   | `BACKUP_S3_ENDPOINT` | same as `R2_ENDPOINT` |
+   | `BACKUP_BUCKET` | `dtf-backups` |
+   | `BACKUP_ACCESS_KEY_ID` | the new token's Access Key ID |
+   | `BACKUP_SECRET_ACCESS_KEY` | the new token's Secret Access Key |
+   | `BACKUP_AGE_RECIPIENT` | the public key, `age1…` |
+   | `BACKUP_HOUR` | optional, default `3` (03:00 Brasília) |
+
+The first backup runs as soon as the service starts. After that it runs daily,
+and a failed run is retried an hour later.
+
+## Restore test
+
+Do this after setup, and then once a month. Open the console of the `backup`
+container in Portainer (Containers → `…_backup…` → Console) and run:
+
+```bash
+python -m ops.db_backup list
+python -m ops.db_backup verify --identity -
+```
+
+`--identity -` asks for the private key to be pasted. It is kept only in the
+container's memory while the command runs. `verify` restores the latest backup
+into a scratch database, prints its row counts and drops it. The live database
+is not touched.
+
+## Restoring for real
+
+From the `backup` container's console:
+
+```bash
+python -m ops.db_backup restore db/2026/10/dtf-20261001T060000Z.dump.age --into dtf_restored --identity -
+```
+
+This restores into a new database (or an empty one), never over the running
+one. Then do one of these:
+
+- **Check the restored data**, then point the stack at it.
+- **On a new server**, deploy only the `db` service first. Restore into `dtf`
+  while it is still empty, then deploy the rest. `db-init` then applies the
+  schema and grants on top.

docs/LOCAL_SETUP.md

@@ -328,8 +328,14 @@ PAYMENT_CSP_SOURCES=https://sdk.mercadopago.com https://*.mercadopago.com https:
 ```
 
 `PAYMENT_CSP_SOURCES` is empty by default, which keeps the Site at
-`script-src 'self'`. Once a payment for a quote is approved, or a card payment
-is in review, the API refuses any further attempt for that quote. The order is created only by the signed
+`script-src 'self'`. The payment page offers credit card (the default), debit
+card and PIX. Card payments ask for 3-D Secure when the issuer requires it,
+which debit cards usually do: the bank's confirmation page opens in a frame on
+the issuer's own domain, so it needs `PAYMENT_CHALLENGE_SOURCES=https:` (frames
+and form posts only, never scripts; empty by default). Once a payment for a
+quote is approved, or a card payment is in review, the API refuses any further
+attempt for that quote; a card left waiting for the bank's confirmation stops
+blocking after ten minutes. The order is created only by the signed
 notification, after the payment is fetched from the Mercado Pago API and its
 BRL amount matches the approved total. Mercado Pago must be able to reach the
 webhook, so a local run needs a public HTTPS tunnel to the Site port. A paid

docs/PORTAINER.md

@@ -93,6 +93,24 @@ as `dtf_prod_database_url_v1`, then place only those names in the corresponding
 Credential values must never be entered into Git, `portainer.env`, or Gitea
 workflow variables.
 
+**R2 CORS.** The Site uploads artwork straight from the browser to the bucket
+with presigned `PUT` requests, so the bucket must allow the Site's origin.
+Without it the preflight is refused (403) and the Site shows "NetworkError
+when attempting to fetch resource" at checkout (found 2026-09-28). In the
+Cloudflare dashboard, R2 → the bucket → Settings → CORS policy:
+
+```json
+[
+  {
+    "AllowedOrigins": ["https://<SITE_DOMAIN>", "https://<KANBAN_DOMAIN>"],
+    "AllowedMethods": ["PUT", "GET", "HEAD"],
+    "AllowedHeaders": ["content-type"],
+    "ExposeHeaders": ["ETag"],
+    "MaxAgeSeconds": 3600
+  }
+]
+```
+
 ## 3. Create the stack once
 
 In Portainer select **Stacks → Add stack → Git repository**:

docs/ROADMAP.md

@@ -247,9 +247,33 @@ From the report already sent. These are dated promises, not backlog.
   quote cannot be charged twice. The Site CSP gains the Mercado Pago origins
   only through `PAYMENT_CSP_SOURCES`, empty by default. Not yet rendered
   against a real public key; sandbox run and refund policy remain.
+  **Account setup (2026-09-28):** the client's application is Checkout
+  Transparente on the Payments API, webhook event "Pagamentos (legacy)" only,
+  URL `https://dtf.agenciacompor.com.br/api/payments/webhook`. The production
+  compose now takes `PAYMENT_ADAPTER` and `MP_*` from Portainer (it hard-coded
+  the fake adapter), so the sandbox runs on production with test credentials;
+  the Site has no real customers yet. A verified notification whose payment
+  does not exist (the panel's "Simular notificação") is acknowledged instead
+  of answering 500, which would have made Mercado Pago retry it.
 - `[ ]` 1.2 — Real freight quotation. **Blocked on client inputs** (see
   `PRODUCTION_INPUTS.md`): source platform, credentials, origin CEP, services,
   packaging weight/dimensions per length, subsidy policy.
+  **Received (2026-09-25):** Jadlog, API access (user/CNPJ, client code,
+  token, account), origin CEP 14402-310, service .PACKAGE (modalidade 3),
+  home delivery, billed by contract. Still missing: packaging weight and
+  dimensions per length and how freight is charged to the customer (asked
+  2026-09-28). `app/jadlog.py` prices one package from the manual (v2.3);
+  `python -m app.jadlog_probe` prices test weights to six regions, read-only,
+  to confirm token, account and contract on the client's account. Not yet run.
+  **Adapter (2026-09-29):** `FREIGHT_ADAPTER=jadlog` prices "Receber em casa"
+  with Jadlog from the order's billed metres (`JADLOG_PESO_BASE_KG` plus
+  `JADLOG_PESO_POR_METRO_KG` per metre) and value, adds
+  `FREIGHT_PRODUCTION_DAYS` to Jadlog's time, re-quotes the cart when it
+  changes, and quotes again at approval from the priced items. It refuses to
+  start without the credentials and the weights, which have no default. The
+  production stack now takes the Jadlog settings, so the probe runs from the
+  worker's console. Cubed weight is not computed: the client's box sizes will
+  tell whether it is needed.
 - `[~]` 1.3 — Idempotent Tiny/Olist order creation with order-number traceability.
   Confirm endpoints, tag behaviour and rate limits first.
   **Groundwork (2026-09-24), API v3 by decision:** OAuth2 against Tiny's
@@ -564,7 +588,19 @@ The production topology has not been verified by the repository review.
 
 ## Block 3 · Architecture — needs a decision before code
 
-### `[?]` 3.1 — Manual quote approval contradicts the 24h business case `(F16)`
+### `[~]` 3.1 — Manual quote approval contradicts the 24h business case `(F16)`
+
+**Decided 2026-09-28 (the user: "we are an e-commerce"):** a cart the Site
+priced is approved when the quote is created and can be paid at once
+(`app/quote_review.py`, the same pricing the operator's approval uses). A
+person reviews only orders above `QUOTE_AUTO_MAX_METRES` (50 m) and items
+that claim a grade the Site could not have computed (unanalysed art with a
+discount). The Kanban lists automatic approvals and the reason for each
+manual one. **Still open:** the grade and layout are the browser's (3.2,
+3.9), so a customer who edits the page can claim a better grade, up to the
+top tier's discount; the server must compute the grade before this closes.
+
+Previously:
 
 Payment requires `quotes.approved`, set only by an authenticated operator. The
 meeting's premise was that the 17h30 order waiting until 5am is what costs the
@@ -591,7 +627,14 @@ the site already did.
 generator, with the browser as preview only. This is the single largest gap between
 what was promised in the meeting and what exists.
 
-### `[?]` 3.3 — The 5 GB problem is unsolved `(F19)`
+**2026-09-30:** the grade (the resolution discount) is no longer taken on trust.
+Before an automatic approval the API recomputes it from the uploaded files by the
+Site's rules (`app/grade_check.py`): image headers for PNG/JPG/WebP, the placed
+images of a PDF up to 150 MB. A claim more than 2 points above the file's grade,
+or a discount on a file the server cannot grade, waits for review with the reason
+on the Kanban. The metres (the packing) are still the browser's.
+
+### `[~]` 3.3 — The 5 GB problem is unsolved `(F19)`
 
 Transport accepts 5 GiB; `SCAN_MAX_BYTES` / ClamAV `StreamMaxLength` release only
 ≤ 128 MiB. As of 2026-09-23, customer selection and API reservation reject files
@@ -602,6 +645,23 @@ This is exactly the risk Jorge raised in the meeting.
 **Decide:** raise the scan ceiling with a resource/timeout design, or define an
 explicit large-file path (staged scan, sampled scan, operator override with audit).
 
+**Built 2026-09-29 (sheets of several GB are the normal order, not the
+exception):** files up to 5 GB. ClamAV scans up to 2 GB (`StreamMaxLength
+2000M`); above that a file is released only when its first bytes match the
+format its name claims (option A, the user's choice). The Site grades a sheet
+over 150 MB from the pixel size in the PNG/JPEG/WebP header without decoding
+it, and measures large PDFs through ranged reads; the worker never opens a
+source over 300 MB: a single finished sheet placed whole becomes its own print
+file, anything else goes to hand preparation. Uploads start as items enter the
+cart and the lease renews with each part. Verified on the local stack: 386 MB
+(ClamAV 78 s), 1.8 GB (ClamAV 6 min 18 s, scanner under 430 MB of memory, the
+original as print file), 2.3 GB PNG released by the format check and a
+disguised 2.3 GB file refused, and the header grade of a 200 MB file in 0.5 s.
+**Open:** large PDFs get no automatic grade (the DPI of images inside is not
+read without rendering); the scanner takes one file at a time, so several
+multi-GB uploads queue; pieces, residue and background of a large sheet are
+not checked automatically.
+
 ### `[ ]` 3.4 — Upload throughput `(F20)`
 
 8 MiB parts, strictly sequential in `local/static/upload.js:21`, one presign
@@ -811,6 +871,12 @@ print-file evidence still need correction before this item can close.
 - `[ ]` 5.13 — Define production recovery: scheduled encrypted offsite database
   and object backups, a consistent snapshot boundary, Swarm data placement and
   a restore rehearsal that opens every required live order file.
+  **2026-09-29:** database part built. The `backup` service dumps daily,
+  encrypts with age (the server holds only the public key) and uploads to a
+  bucket of its own, whose lifecycle rule expires copies and whose lock keeps
+  them from being deleted early. The Kanban shows the latest run, and
+  `tests/backup_test.py` restores a copy in CI. Setup and restore:
+  docs/BACKUP.md. Artwork is not copied: it is temporary and already on R2.
 - `[ ]` 5.14 — Promote and verify one immutable release. **2026-09-24:** green
   pushes to `main` now publish images and Portainer's pull-and-redeploy is the
   release gate; the source preflight is advisory unless enforced by variable,
@@ -934,7 +1000,25 @@ print-file evidence still need correction before this item can close.
   and fictional orders. The payment step has no screenshot until Mercado Pago
   is configured, and the guides name the provisional Kanban domain; regenerate
   them when either changes. Early work toward Week 3's "orientação à operação".
-- `[ ]` Week-2 client report, due end of day 2026-09-25.
+- `[x]` Operator guide rebuilt from a committed source (2026-09-25):
+  `docs/guias/operador/` (HTML and the original screenshots, cropped as
+  before), printed by `docs/guias/imprimir.sh`. The source of the 09-24 PDF
+  was never committed. Corrected: stage moves do not update Tiny (only
+  "Aprovada" and, for pickup, "Pronto para envio", once enabled); WhatsApp
+  notices go through the client's Tiny -> n8n flow; the correction notice is
+  not automatic, the reason is in Minha conta; the Tiny card's renewal,
+  "Verificar" and "Testar conexão" checks. Found while writing it: the
+  customer's order history showed operators' internal reasons for moving an
+  order back; it now omits back moves and shows reasons only for corrections.
+  The Site guide's source is also not in the repository.
+- `[x]` Week-2 client report (`Relatorio-Semana-2-DTF.docx`), written 2026-09-25,
+  sent 2026-09-28. Before sending, the FlexiPRINT import was taken out of
+  "O que falta" (it is done this week) and the print-file paragraph no longer
+  names PSD, AI, CDR or multi-page PDFs as hand-preparation cases. **Reversed
+  2026-09-29:** those formats stay as built: no automatic check, the full rate
+  per metre, and the operator prepares them by hand. Automatic generation is
+  not planned; the sent report omits them from its list of exceptions. Freight is reported as Jadlog data received,
+  waiting on packaging weight and dimensions and the charging policy.
 - `[x]` Week-1 client report (`Relatorio-Semana-1-DTF.docx`), corrected 2026-09-18 to
   remove the inaccurate "Arquivo por metro permanece separado, com seleção explícita"
   claim and the internal commit reference.

docs/guias/imprimir.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+# Print the guide sources in docs/guias/ to the PDFs in docs/ with headless
+# Chrome (A4, no browser header or footer). Needs Chrome and the DejaVu fonts.
+set -eu
+cd "$(dirname "$0")"
+CHROME=${CHROME:-$(command -v google-chrome-stable || command -v google-chrome || command -v chromium)}
+"$CHROME" --headless --disable-gpu --no-pdf-header-footer --run-all-compositor-stages-before-draw \
+  --print-to-pdf="$PWD/../guia-operador-kanban.pdf" "file://$PWD/operador/guia-operador-kanban.html"

docs/guias/operador/guia-operador-kanban.html

@@ -0,0 +1,320 @@
+<!DOCTYPE html>
+<!-- Source of docs/guia-operador-kanban.pdf. Print with docs/guias/imprimir.sh.
+     Screenshots in img/ come from a throwaway stack with fictional orders. -->
+<html lang="pt-BR">
+<head>
+<meta charset="utf-8">
+<title>Kanban DTF · Guia do operador</title>
+<style>
+  @page { size: A4; margin: 0; }
+  :root {
+    --navy: #0B1320; --orange: #F08A24; --ink: #1B2331; --muted: #6B7280;
+    --line: #D6DCE4; --head: #EAF0F8; --note: #FFF5E8; --note-line: #F4C58E;
+  }
+  * { box-sizing: border-box; }
+  html, body { margin: 0; padding: 0; }
+  body { font-family: 'DejaVu Sans', sans-serif; color: var(--ink); font-size: 9.7pt; line-height: 1.55;
+         -webkit-print-color-adjust: exact; print-color-adjust: exact; }
+  .page { width: 210mm; height: 297mm; position: relative; padding: 26mm 18mm 20mm; overflow: hidden;
+          page-break-after: always; break-after: page; }
+  .page:last-child { page-break-after: auto; break-after: auto; }
+  .running { position: absolute; top: 9mm; left: 18mm; right: 18mm; font-size: 7.4pt; color: var(--muted);
+             border-bottom: 0.6pt solid #E3E7ED; padding-bottom: 2.4mm; }
+  .folio { position: absolute; bottom: 9mm; right: 18mm; font-size: 7.4pt; color: var(--muted); }
+  .kicker { color: var(--orange); font-weight: bold; font-size: 7.6pt; letter-spacing: 0.04em; margin: 0 0 1mm; }
+  h1 { font-size: 20.5pt; line-height: 1.2; margin: 0 0 2mm; color: #101826; }
+  h1::after { content: ""; display: block; width: 18mm; height: 1.4mm; background: var(--orange); margin-top: 3mm; }
+  h2 { font-size: 11.5pt; margin: 7mm 0 2.5mm; color: #101826; }
+  p { margin: 0 0 2.6mm; }
+  b { font-weight: bold; }
+  table { width: 100%; border-collapse: collapse; margin: 2mm 0 3mm; font-size: 8.6pt; line-height: 1.45; }
+  th, td { border: 0.6pt solid var(--line); padding: 2mm 2.4mm; vertical-align: top; text-align: left; }
+  th { background: var(--head); font-weight: bold; }
+  td.n { color: var(--orange); font-weight: bold; font-size: 11pt; width: 7mm; text-align: center; }
+  td.k { font-weight: bold; }
+  .note { background: var(--note); border: 0.6pt solid var(--note-line); border-radius: 2mm; padding: 3mm 3.6mm;
+          font-size: 8.6pt; margin: 3mm 0; }
+  ul { margin: 0 0 3mm; padding-left: 4.5mm; }
+  ul li { margin-bottom: 1.1mm; }
+  ul li::marker { color: var(--orange); }
+  ol { margin: 0 0 3mm; padding-left: 5mm; }
+  ol li { margin-bottom: 1.3mm; }
+  ol li::marker { color: var(--orange); font-weight: bold; }
+  .chip { display: inline-block; border: 0.6pt solid #C9D0DA; background: #F4F6F9; border-radius: 1.2mm;
+          padding: 0 1.6mm; font-size: 7.6pt; line-height: 1.6; white-space: nowrap; }
+  .shot { display: block; width: 100%; border-radius: 1.6mm; margin: 2mm 0 1mm; }
+  .caption { font-size: 7.2pt; color: var(--muted); margin: 0 0 3mm; }
+  .split { display: flex; gap: 6mm; align-items: flex-start; }
+  .split > div { flex: 1; }
+  .split > .side { flex: 0 0 79.5mm; }
+  .quote { font-style: normal; }
+
+  /* Cover */
+  .cover { background: var(--navy); color: #F3F5F8; padding: 0 18mm; }
+  .cover .block { position: absolute; left: 18mm; right: 18mm; top: 158mm; }
+  .cover .kicker { margin-bottom: 4mm; }
+  .cover .title { font-size: 27pt; font-weight: bold; line-height: 1.25; margin: 0 0 4mm; color: #fff; }
+  .cover .lead { font-size: 9.6pt; color: #C8CFDA; margin: 0 0 8mm; }
+  .cover table { font-size: 8pt; margin: 0 0 8mm; }
+  .cover th, .cover td { border-color: #2A3547; background: transparent; color: #E6EAF0; padding: 3mm 3.6mm; }
+  .cover th { color: var(--orange); }
+  .cover .version { font-size: 8pt; color: #A9B2C0; }
+</style>
+</head>
+<body>
+
+<!-- 1 · Capa -->
+<section class="page cover">
+  <div class="block">
+    <p class="kicker">GUIA DE OPERAÇÃO</p>
+    <p class="title">Kanban DTF<br>Guia do operador</p>
+    <p class="lead">Como conferir, produzir e entregar os pedidos que chegam pelo Site DTF.</p>
+    <table>
+      <tr><th style="width:50%">Acesso</th><th>Quem usa</th></tr>
+      <tr><td>dtf.kanban.agenciacompor.com.br<br>e-mail e senha do operador</td>
+          <td>Equipe da sala de DTF e atendimento</td></tr>
+    </table>
+    <p class="version">Versão de 25 de setembro de 2026</p>
+  </div>
+</section>
+
+<!-- 2 · Visão geral -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">VISÃO GERAL</p>
+  <h1>O caminho de um pedido</h1>
+  <p>O cliente monta a folha e envia as artes pelo Site DTF. Daí em diante, tudo acontece no Kanban: a equipe
+    confere a cotação, o cliente paga, e o pedido percorre as etapas de produção até ficar pronto para retirada.</p>
+  <table>
+    <tr><td class="n">1</td><td class="k" style="width:31mm">Cliente envia</td>
+        <td>Monta a folha no Site, vê a nota e o preço e envia o pedido para conferência.</td></tr>
+    <tr><td class="n">2</td><td class="k">Equipe confere a cotação</td>
+        <td>Na aba <b>Cotações</b>: confere arquivos, metragem e nota e aprova.</td></tr>
+    <tr><td class="n">3</td><td class="k">Cliente paga</td>
+        <td>O total aprovado aparece no Site. O pagamento é pelo Mercado Pago (PIX ou cartão).</td></tr>
+    <tr><td class="n">4</td><td class="k">Pedido entra na produção</td>
+        <td>Com o pagamento aprovado, o pedido aparece em <b>Arte recebida</b>, com o PDF de impressão já gerado.</td></tr>
+    <tr><td class="n">5</td><td class="k">Equipe produz</td>
+        <td>Aprova o arquivo final, baixa, importa no FlexiPRINT e move o card a cada etapa.</td></tr>
+    <tr><td class="n">6</td><td class="k">Pedido pronto</td>
+        <td>Em <b>Finalizado</b>, o pedido fica pronto para retirada e o cliente é avisado (página 7).</td></tr>
+  </table>
+  <h2>As quatro abas</h2>
+  <table>
+    <tr><th style="width:31mm">Aba</th><th>Para que serve</th></tr>
+    <tr><td class="k">Produção</td><td>O quadro com os pedidos pagos, uma coluna por etapa.</td></tr>
+    <tr><td class="k">Cotações</td><td>Pedidos enviados pelo Site esperando conferência. O número ao lado indica quantos faltam revisar.</td></tr>
+    <tr><td class="k">Pagamentos</td><td>Pagamentos que o sistema não conseguiu ligar a um pedido. Normalmente fica vazia.</td></tr>
+    <tr><td class="k">Integrações</td><td>Situação do Tiny, Mercado Pago, frete e WhatsApp, e o registro de tudo o que foi enviado a eles.</td></tr>
+  </table>
+  <div class="note">O quadro não se atualiza sozinho. Clique em <b>Atualizar</b>, no canto superior direito, para ver pedidos e cotações novos.</div>
+  <div class="folio">Página 2</div>
+</section>
+
+<!-- 3 · Entrar e ler o quadro -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">PRODUÇÃO</p>
+  <h1>Entrar e ler o quadro</h1>
+  <div class="split">
+    <div>
+      <p>Acesse <b>dtf.kanban.agenciacompor.com.br</b> e entre com seu e-mail e senha. Cada operador tem o próprio
+        acesso: é o nome dele que fica registrado em cada movimento do pedido.</p>
+      <p>Depois de várias senhas erradas seguidas, o acesso fica bloqueado por 15 minutos.</p>
+    </div>
+    <div class="side"><img class="shot" src="img/login.png" alt="Tela de entrada do Kanban"></div>
+  </div>
+  <img class="shot" src="img/quadro.png" alt="Quadro de produção">
+  <p class="caption">Quadro de produção com três pedidos em etapas diferentes.</p>
+  <h2>O que cada card mostra</h2>
+  <ul>
+    <li><b>#número</b> do pedido e há quanto tempo ele está parado na etapa.</li>
+    <li>E-mail do cliente, produto e metragem cobrada (ex.: <span class="chip">Têxtil avulsa · 1,00 m</span>).</li>
+    <li>Situação do arquivo: <span class="chip">PDF pronto</span> (gerado, falta aprovar), <span class="chip">Final aprovado</span>
+      (pode ir para a fila) ou <span class="chip">Preparar à mão</span> (o sistema não conseguiu gerar; veja a página 6).</li>
+    <li><span class="chip">Retirada</span> ou <span class="chip">Entrega · UF</span>.</li>
+    <li>Um aviso <b>Parado há mais de 4 h</b> aparece quando o pedido não anda.</li>
+  </ul>
+  <p>Os filtros <b>Têxtil</b>, <b>UV</b> e <b>Preparar à mão</b> mostram só esses pedidos. A busca encontra pedido, cliente ou CNPJ.</p>
+  <div class="folio">Página 3</div>
+</section>
+
+<!-- 4 · Cotações -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">COTAÇÕES</p>
+  <h1>Conferir e aprovar uma cotação</h1>
+  <img class="shot" src="img/cotacoes.png" alt="Aba Cotações">
+  <p class="caption">À esquerda, as cotações a revisar; à direita, a cotação selecionada.</p>
+  <ol>
+    <li>Abra a aba <b>Cotações</b> e clique na cotação em <b>A revisar</b>.</li>
+    <li>Confira a montagem na miniatura. Se precisar, abra os arquivos em <b>Original</b> ou a lista de peças em <b>Manifesto</b>.</li>
+    <li>Confira <b>Metros conferidos</b> e <b>Nota conferida</b>. Os valores do cliente já vêm preenchidos; mude só se
+      estiverem errados. A nota define o preço do metro.</li>
+    <li>Marque <b>Arquivos, metragem e nota conferidos</b> e clique em <b>Aprovar cotação</b>.</li>
+  </ol>
+  <p>O cliente vê o total aprovado no Site e tem <b>24 horas</b> para pagar. As aprovadas ficam em
+    <b>Aprovadas, aguardando pagamento</b> até o pagamento chegar.</p>
+  <div class="note"><b>Ressalva de resolução aceita pelo cliente</b>: alguma arte tem menos de 300 DPI e o cliente confirmou
+    que quer imprimir assim. <b>Montagem antiga</b>: a cotação foi feita numa versão anterior do Site; peça ao cliente
+    para enviar de novo.</div>
+  <div class="folio">Página 4</div>
+</section>
+
+<!-- 5 · Abrir um pedido -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">PRODUÇÃO</p>
+  <h1>Abrir um pedido</h1>
+  <img class="shot" src="img/painel.png" alt="Painel do pedido">
+  <p class="caption">Clique em qualquer card para abrir o painel do pedido.</p>
+  <table>
+    <tr><th style="width:36mm">Parte do painel</th><th>O que tem</th></tr>
+    <tr><td class="k">Topo</td><td>Número, etapa atual, data do pagamento e os botões para mover o pedido.</td></tr>
+    <tr><td class="k">Cliente e Entrega</td><td>E-mail, CNPJ e WhatsApp do cliente; endereço ou <b>Retirada em Franca</b>.</td></tr>
+    <tr><td class="k">Itens e arquivos de impressão</td><td>Montagem de cada item, peças, tamanho da folha e nota. <b>Baixar PDF</b>
+      baixa o arquivo pronto para o FlexiPRINT; <b>Original</b> baixa o arquivo que o cliente enviou; <b>Manifesto</b>
+      lista as peças e suas posições.</td></tr>
+    <tr><td class="k">Arquivos finais</td><td>O arquivo que vai ser impresso, aprovado por um operador (próxima página).</td></tr>
+    <tr><td class="k">Histórico</td><td>Cada movimento do pedido, com hora, operador e motivo.</td></tr>
+  </table>
+  <div class="folio">Página 5</div>
+</section>
+
+<!-- 6 · Arquivo final -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">PRODUÇÃO</p>
+  <h1>Aprovar o arquivo final</h1>
+  <div class="split">
+    <div>
+      <p>Antes de ir para a <b>Fila de impressão</b>, todo item precisa de um arquivo final aprovado. O sistema já gera
+        um PDF com a montagem que o cliente viu e pagou.</p>
+      <ol>
+        <li>Baixe o PDF em <b>Baixar PDF</b> e confira.</li>
+        <li>Deixe marcado <b>Usar o PDF gerado</b>. Se preferir usar outro arquivo, desmarque e envie o seu.</li>
+        <li>Escreva uma <b>Nota da revisão</b> (ex.: “Conferido, pronto para imprimir”).</li>
+        <li>Marque <b>Arquivos conferidos</b> e clique em <b>Aprovar arquivos finais</b>.</li>
+      </ol>
+      <p>O card passa a mostrar <span class="chip">Final aprovado</span>.</p>
+    </div>
+    <div class="side"><img class="shot" src="img/arquivo-final.png" alt="Aprovação do arquivo final"></div>
+  </div>
+  <h2>Quando o PDF não é gerado</h2>
+  <table>
+    <tr><th style="width:40mm">No card ou no item</th><th>O que fazer</th></tr>
+    <tr><td><span class="chip">Na fila para gerar</span></td><td>Aguarde alguns segundos e clique em <b>Atualizar</b>.</td></tr>
+    <tr><td><span class="chip">Preparar à mão</span></td><td>O cliente enviou um formato que o gerador não lê (CDR, AI, PSD, TIFF)
+      ou pediu correção. Baixe o <b>Original</b>, prepare o arquivo no seu programa e envie-o em <b>Arquivos finais</b>.</td></tr>
+    <tr><td><span class="chip">Falhou ao gerar</span></td><td>Clique em <b>Gerar novamente</b>. Se falhar de novo, prepare à mão.</td></tr>
+  </table>
+  <div class="folio">Página 6</div>
+</section>
+
+<!-- 7 · Mover pelas etapas -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">PRODUÇÃO</p>
+  <h1>Mover o pedido pelas etapas</h1>
+  <p>Use o botão laranja <b>Mover para…</b> no topo do painel ou arraste o card para a coluna seguinte. Ao arrastar,
+    só as colunas permitidas ficam destacadas.</p>
+  <table>
+    <tr><th style="width:27mm">Etapa</th><th>Significa</th><th style="width:43mm">Aviso ao cliente</th></tr>
+    <tr><td class="k">Arte recebida</td><td>Pedido pago, arquivo gerado. Ainda não conferido.</td><td>Pedido aprovado (automático)</td></tr>
+    <tr><td class="k">Arte tratada</td><td>Arquivo conferido e ajustado, se preciso.</td><td>—</td></tr>
+    <tr><td class="k">Fila de impressão</td><td>Pronto para imprimir. Exige o arquivo final aprovado.</td><td>—</td></tr>
+    <tr><td class="k">Imprimindo</td><td>Na máquina.</td><td>—</td></tr>
+    <tr><td class="k">Finalizado</td><td>Impresso e pronto para retirada ou envio.</td><td>Pedido pronto para retirada</td></tr>
+    <tr><td class="k">Correção</td><td>Algo no arquivo precisa ser resolvido pelo cliente.</td><td>O motivo aparece em Minha conta, no Site (página 8)</td></tr>
+  </table>
+  <div class="note">Os avisos por WhatsApp saem pelo número e pelas mensagens que a Dropstar já usa, a partir da situação
+    do pedido no Tiny: o pedido pago fica <b>Aprovado</b> e, em <b>Finalizado</b>, o pedido de retirada fica
+    <b>Pronto para envio</b>. Cada aviso sai <b>uma vez só</b>, mesmo que o pedido volte uma etapa e avance de novo.
+    As outras etapas não mudam o pedido no Tiny. Enquanto essa integração não estiver ativa, avise o cliente como hoje.</div>
+  <h2>Moveu errado? Volte uma etapa</h2>
+  <img class="shot" src="img/voltar-etapa.png" alt="Botão Voltar para">
+  <p class="caption">Botão <b>Voltar para…</b>: pede um motivo interno e não avisa o cliente.</p>
+  <p>Clique em <b>Voltar para [etapa anterior]</b>, escreva o motivo (ex.: “movi por engano”) e confirme. O retorno fica
+    no histórico como <b>Voltou para…</b>. O cliente não vê esse retorno nem o motivo.</p>
+  <div class="folio">Página 7</div>
+</section>
+
+<!-- 8 · Correção -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">PRODUÇÃO</p>
+  <h1>Pedir correção ao cliente</h1>
+  <img class="shot" src="img/pedir-correcao.png" alt="Botão Pedir correção" style="width:78%">
+  <p class="caption">Botão <b>Pedir correção</b>: o motivo vai para o cliente.</p>
+  <ol>
+    <li>No painel do pedido, clique em <b>Pedir correção</b>.</li>
+    <li>Escreva o motivo de forma clara para o cliente (ex.: “A arte escudo.png está com fundo branco. Envie com fundo transparente.”).</li>
+    <li>Clique em <b>Enviar para correção</b>. O pedido vai para a coluna <b>Correção</b>.</li>
+  </ol>
+  <p>O cliente vê o motivo em <b>Minha conta</b>, no Site, e envia por lá o arquivo corrigido. Esse aviso ainda não sai
+    pelo WhatsApp: avise o cliente de que há uma correção pendente. O arquivo corrigido aparece em <b>Arquivos finais</b>
+    como <b>Correção do cliente</b>. Confira, mova o pedido para <b>Arte recebida</b> ou <b>Arte tratada</b> e siga o fluxo normal.</p>
+  <div class="note">Correção é para problemas que só o cliente resolve (resolução, fundo, arte errada). Ajustes que a equipe
+    faz sozinha não precisam de correção: trate o arquivo em <b>Arte tratada</b>.</div>
+  <h2>Histórico</h2>
+  <img class="shot" src="img/historico.png" alt="Histórico do pedido" style="width:78%">
+  <p class="caption">Cada movimento fica registrado com data, hora e operador.</p>
+  <div class="folio">Página 8</div>
+</section>
+
+<!-- 9 · Pagamentos e integrações -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">PAGAMENTOS E INTEGRAÇÕES</p>
+  <h1>Pagamentos com problema e integrações</h1>
+  <p>A aba <b>Pagamentos</b> lista os pagamentos que chegaram mas não puderam virar pedido sozinhos. Exemplos:</p>
+  <ul>
+    <li>valor pago diferente do total da cotação;</li>
+    <li>cotação vencida antes do pagamento (passou das 24 h);</li>
+    <li>pagamento estornado ou cancelado depois que o pedido já existia.</li>
+  </ul>
+  <p>Resolva com o cliente ou no Mercado Pago e clique em <b>Registrar resolução</b>, descrevendo o que foi feito.
+    O item passa para <b>Resolvidos</b>.</p>
+  <img class="shot" src="img/pagamentos.png" alt="Aba Pagamentos">
+  <h2>Integrações</h2>
+  <img class="shot" src="img/integracoes.png" alt="Aba Integrações">
+  <p class="caption">Imagem de um ambiente sem integrações ativas. Em produção, cada cartão mostra se a integração está conectada.</p>
+  <ul>
+    <li><b>Tiny</b>: o cartão mostra quem conectou, quando a conexão foi renovada e até quando vale; o sistema renova
+      sozinho. Se aparecer <b>Não conectado</b> ou <b>Verificar</b>, clique em <b>Conectar Tiny</b> ou <b>Reconectar</b> e
+      entre com o usuário do Tiny indicado pela Dropstar. <b>Testar conexão</b> confere pedidos, contatos, os produtos
+      e a forma de envio de retirada, sem criar nada.</li>
+    <li><b>Registro de envios</b>: tudo o que o sistema mandou ao Tiny e ao WhatsApp, com filtros por destino, situação,
+      evento e pedido. <b>Com erro</b> indica um envio que falhou; o sistema tenta de novo sozinho, mas o erro precisa de atenção.</li>
+  </ul>
+  <div class="folio">Página 9</div>
+</section>
+
+<!-- 10 · Dúvidas -->
+<section class="page">
+  <div class="running">DTF Dropstar - guia do operador</div>
+  <p class="kicker">DÚVIDAS FREQUENTES</p>
+  <h1>Mensagens e o que fazer</h1>
+  <table>
+    <tr><th style="width:62mm">Mensagem ou situação</th><th>O que fazer</th></tr>
+    <tr><td>“O pedido mudou. Clique em Atualizar.”</td><td>Outra pessoa mexeu no pedido ao mesmo tempo. Clique em <b>Atualizar</b> e repita a ação.</td></tr>
+    <tr><td>“Aprove os arquivos finais de todos os itens antes de colocar na fila.”</td><td>Aprove o arquivo final de cada item (página 6) e tente de novo.</td></tr>
+    <tr><td>“Informe o motivo da correção.” / “Informe por que o pedido está voltando de etapa.”</td><td>Preencha o motivo antes de confirmar.</td></tr>
+    <tr><td>Cotação com <b>Montagem antiga</b></td><td>Peça ao cliente para enviar o pedido de novo pelo Site.</td></tr>
+    <tr><td>Card com <b>Parado há mais de 4 h</b></td><td>Veja se o pedido está esperando alguém ou se esqueceram de movê-lo.</td></tr>
+    <tr><td>Arquivo aparece como <b>expirado</b></td><td>Os arquivos ficam guardados por 30 dias. Depois disso, o cliente precisa enviar de novo.</td></tr>
+    <tr><td>No topo, <b>Tiny: verificar conexão</b> ou <b>Tiny não conectado</b></td><td>Abra <b>Integrações</b> e siga a mensagem do cartão do Tiny. Se pedir, clique em <b>Reconectar</b>.</td></tr>
+    <tr><td>A internet da fábrica caiu</td><td>O Site continua recebendo pedidos e pagamentos. Quando a conexão voltar, clique em <b>Atualizar</b>.</td></tr>
+  </table>
+  <h2>Boas práticas</h2>
+  <ul>
+    <li>Mova o card assim que a etapa mudar: é o que avisa o cliente e mede o tempo de produção.</li>
+    <li>Escreva motivos que outra pessoa entenda sem perguntar.</li>
+    <li>Use sempre o seu acesso: o histórico mostra quem fez cada movimento.</li>
+    <li>Clique em <b>Sair</b> ao deixar o computador.</li>
+  </ul>
+  <div class="folio">Página 10</div>
+</section>
+
+</body>
+</html>

infra/Dockerfile

@@ -1,8 +1,11 @@
 # Same pinned base as deploy/Dockerfile.api, so the integration suite exercises
 # the image that ships rather than a different one.
 FROM python:3.12-slim@sha256:2f17fc044b579bab302c2e8054d3a686e2cb9a83de48e70534b94cd8ebbe06a9
+# pg_dump and age are for the database backup (ops/db_backup.py). Debian 13
+# ships PostgreSQL 17, the server's major version, which pg_dump must match.
 RUN apt-get update \
     && apt-get upgrade -y \
+    && apt-get install -y --no-install-recommends postgresql-client-17 age \
     && rm -rf /var/lib/apt/lists/*
 WORKDIR /app
 COPY infra/requirements.txt infra/requirements.lock /app/infra/

infra/Dockerfile.web

@@ -10,5 +10,6 @@ RUN apk upgrade --no-cache
 ENV WEB_INDEX=index.html
 COPY --from=policy /build/default.conf.template /etc/nginx/templates/default.conf.template
 ENV S3_PUBLIC_ENDPOINT=http://localhost:9000
-COPY web/ /usr/share/nginx/html/
+# The HTML from the policy stage, with every asset address versioned.
+COPY --from=policy /build/web/ /usr/share/nginx/html/
 

infra/clamd.conf

@@ -5,10 +5,12 @@ TCPSocket 3310
 TCPAddr 0.0.0.0
 MaxThreads 2
 MaxQueue 8
-StreamMaxLength 128M
-MaxFileSize 128M
-MaxScanSize 256M
-MaxScanTime 120000
+StreamMaxLength 2000M
+MaxFileSize 2000M
+MaxScanSize 4000M
+MaxScanTime 900000
+ReadTimeout 900
+CommandReadTimeout 900
 AlertExceedsMax yes
 AlertEncrypted yes
 ScanPDF yes

infra/compile_web.py

@@ -1,4 +1,7 @@
-"""Compile the gateway configuration: hash any trusted inline script for the CSP.
+"""Compile the gateway configuration and version the Site's assets.
+
+Inline scripts are hashed for the CSP; local scripts and stylesheets get a
+content hash in their address.
 
 The Site's behaviour now lives in separate files, so normally there is nothing to
 hash and the policy is simply script-src 'self' — no allowlist to get wrong. The
@@ -12,6 +15,20 @@ from pathlib import Path
 import re
 
 root = Path('/build')
+
+# Every local script and stylesheet is addressed by its content, so a release
+# can never pair new HTML with an old cached file: the proxy in front of the
+# stack caches assets for hours, and a new index.html calling an old script
+# broke the Site (2026-09-28). The HTML itself is served no-cache.
+def versioned(match):
+    attribute, path = match.group(1), match.group(2)
+    digest = hashlib.sha256((root / 'web' / path.lstrip('/')).read_bytes()).hexdigest()[:12]
+    return f'{attribute}="{path}?v={digest}"'
+
+for html in (root / 'web').glob('*.html'):
+    text = re.sub(r'\b(src|href)="(/[\w./-]+\.(?:js|css))(?:\?[^"]*)?"', versioned, html.read_text())
+    html.write_text(text)
+
 hashes = []
 for html in (root / 'web').glob('*.html'):
     for attributes, script in re.findall(r'<script\b([^>]*)>(.*?)</script>', html.read_text(), re.S | re.I):

infra/nginx.conf.template

@@ -9,7 +9,7 @@ server {
     add_header Referrer-Policy no-referrer always;
     add_header X-Frame-Options DENY always;
     add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
-    add_header Content-Security-Policy "default-src 'self'; script-src 'self' @SCRIPT_HASHES@ ${PAYMENT_CSP_SOURCES}; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; connect-src 'self' ${S3_PUBLIC_ENDPOINT} https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; frame-src 'self' ${PAYMENT_CSP_SOURCES}; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' @SCRIPT_HASHES@ ${PAYMENT_CSP_SOURCES}; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; connect-src 'self' ${S3_PUBLIC_ENDPOINT} https://cdn.vnda.com.br ${PAYMENT_CSP_SOURCES}; frame-src 'self' ${PAYMENT_CSP_SOURCES} ${PAYMENT_CHALLENGE_SOURCES}; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self' ${PAYMENT_CHALLENGE_SOURCES}" always;
     location = /health { access_log off; return 200 'ok'; }
     location /api/ {
         limit_req zone=api_limit burst=100 nodelay;
@@ -20,9 +20,13 @@ server {
         client_max_body_size 2m;
     }
     # The Site's product pages and cart are addresses of the same page (web/site-pages.js).
-    location ~ ^/(arquivo-por-metro|artes-avulsas|uv-arquivo-por-metro|uv-artes-avulsas|carrinho)/?$ {
+    location ~ ^/(arquivo-por-metro|artes-avulsas|uv-arquivo-por-metro|uv-artes-avulsas|carrinho|pagamento|pagamento/pix)/?$ {
         try_files /index.html =404;
     }
+    # The customer's area: one page, which shows the right part for each address.
+    location ~ ^/conta(/(entrar|pedidos|dados))?/?$ {
+        try_files /portal.html =404;
+    }
     location / { try_files $uri $uri/ =404; }
 }
 server {

infra/storage-init.sh

@@ -21,4 +21,13 @@ printf '%s' "$policy" > /tmp/policy.json
 mc admin policy create local dtf-artwork /tmp/policy.json >/dev/null
 mc admin policy attach local dtf-artwork --user "$S3_APP_USER" >/dev/null
 mc ilm import "local/$S3_BUCKET" < /lifecycle.json
+# The backup bucket and its own account, which can write and read backups but
+# not delete them: the same separation as the backup token on R2.
+case "$S3_BACKUP_BUCKET" in *[!a-z0-9.-]*|'') echo 'Invalid local backup bucket name' >&2; exit 1;; esac
+mc mb --ignore-existing "local/$S3_BACKUP_BUCKET" >/dev/null
+mc anonymous set none "local/$S3_BACKUP_BUCKET" >/dev/null
+mc admin user add local "$S3_BACKUP_USER" "$S3_BACKUP_PASSWORD" >/dev/null
+printf '%s' '{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Action":["s3:ListBucket","s3:GetBucketLocation"],"Resource":["arn:aws:s3:::'"$S3_BACKUP_BUCKET"'"]},{"Effect":"Allow","Action":["s3:GetObject","s3:PutObject","s3:AbortMultipartUpload","s3:ListMultipartUploadParts"],"Resource":["arn:aws:s3:::'"$S3_BACKUP_BUCKET"'/*"]}]}' > /tmp/backup-policy.json
+mc admin policy create local dtf-backup /tmp/backup-policy.json >/dev/null
+mc admin policy attach local dtf-backup --user "$S3_BACKUP_USER" >/dev/null
 echo 'Local storage runtime account provisioned.'

ops/db_backup.py

@@ -0,0 +1,289 @@
+"""Daily off-server backup of the database to its own bucket.
+
+    python -m ops.db_backup serve                 # the stack's backup service
+    python -m ops.db_backup once                  # one backup now
+    python -m ops.db_backup list                  # what the bucket holds
+    python -m ops.db_backup verify  --identity F  # restore the latest into a scratch database, then drop it
+    python -m ops.db_backup restore KEY --identity F --into NAME
+
+Each backup is `pg_dump --format=custom`, checked with `pg_restore --list`,
+encrypted with age to BACKUP_AGE_RECIPIENT (a public key) and uploaded to
+BACKUP_BUCKET with credentials of its own. The server holds only the public
+key: it can write backups but not read them. The private key (the identity)
+stays with the owner, off the server, and is needed only to restore.
+
+Old backups are removed by the bucket's lifecycle rule, not by this job, so
+its credential never needs to delete; a bucket lock keeps a stolen one from
+deleting either. Every run is recorded in dtf_local.backups, which the Kanban
+shows on its Integrations tab.
+"""
+import argparse
+import hashlib
+import os
+import subprocess
+import sys
+import tempfile
+import time
+from datetime import datetime, timedelta, timezone
+from pathlib import Path
+from uuid import uuid4
+
+import boto3
+import psycopg
+from botocore.config import Config
+from psycopg import sql
+from psycopg.conninfo import conninfo_to_dict
+
+from app.bootstrap import admin_connect
+from app.core.secrets import load as load_secret_files
+
+BRASILIA = timezone(timedelta(hours=-3))
+PREFIX = 'db/'
+# After a failure the next attempt comes this much later, not a day later.
+RETRY = timedelta(hours=1)
+# A backup older than this means the daily run has stopped working.
+STALE = timedelta(hours=26)
+TABLES = ('orders', 'quotes', 'uploads', 'accounts', 'movements', 'payment_intents')
+
+
+def configured():
+    return all(os.environ.get(k) for k in
+               ('BACKUP_S3_ENDPOINT', 'BACKUP_BUCKET', 'BACKUP_ACCESS_KEY_ID',
+                'BACKUP_SECRET_ACCESS_KEY', 'BACKUP_AGE_RECIPIENT'))
+
+
+def bucket():
+    client = boto3.client('s3', endpoint_url=os.environ['BACKUP_S3_ENDPOINT'],
+                          aws_access_key_id=os.environ['BACKUP_ACCESS_KEY_ID'],
+                          aws_secret_access_key=os.environ['BACKUP_SECRET_ACCESS_KEY'],
+                          region_name=os.environ.get('BACKUP_REGION', 'auto'),
+                          config=Config(signature_version='s3v4', s3={'addressing_style': 'path'},
+                                        retries={'max_attempts': 5, 'mode': 'standard'}))
+    return client, os.environ['BACKUP_BUCKET']
+
+
+def admin_params(database=None):
+    """The administrator's connection, optionally to another database."""
+    if os.environ.get('DATABASE_ADMIN_HOST'):
+        params = {'host': os.environ['DATABASE_ADMIN_HOST'], 'user': os.environ['DATABASE_ADMIN_USER'],
+                  'password': os.environ['DATABASE_ADMIN_PASSWORD'], 'dbname': os.environ['DATABASE_ADMIN_NAME']}
+    else:
+        params = conninfo_to_dict(os.environ['DATABASE_ADMIN_URL'])
+    if database:
+        params['dbname'] = database
+    return params
+
+
+def libpq_env(database=None):
+    """pg_dump and pg_restore read the credentials from the environment, so the
+    password never appears in a process list."""
+    names = {'host': 'PGHOST', 'port': 'PGPORT', 'user': 'PGUSER', 'password': 'PGPASSWORD', 'dbname': 'PGDATABASE'}
+    return {**os.environ, **{names[k]: str(v) for k, v in admin_params(database).items() if k in names}}
+
+
+def run(command, **kwargs):
+    result = subprocess.run(command, capture_output=True, **kwargs)
+    if result.returncode:
+        detail = result.stderr.decode(errors='replace').strip().splitlines()
+        raise RuntimeError(f'{command[0]} failed: ' + (detail[-1] if detail else f'exit {result.returncode}'))
+    return result
+
+
+def sha256(path):
+    digest = hashlib.sha256()
+    with open(path, 'rb') as stream:
+        for block in iter(lambda: stream.read(1 << 20), b''):
+            digest.update(block)
+    return digest.hexdigest()
+
+
+def record(started, status, key=None, size=None, detail=None):
+    with admin_connect() as c:
+        c.execute('''INSERT INTO dtf_local.backups(id,started_at,finished_at,status,object_key,bytes,detail)
+                     VALUES(%s,%s,now(),%s,%s,%s,%s)''',
+                  (uuid4(), started, status, key, size, detail))
+
+
+def run_once():
+    """Dump, check, encrypt and upload one backup. Returns its object key."""
+    started = datetime.now(timezone.utc)
+    key = PREFIX + started.strftime('%Y/%m/dtf-%Y%m%dT%H%M%SZ') + '.dump.age'
+    try:
+        client, name = bucket()
+        with tempfile.TemporaryDirectory(dir=os.environ.get('BACKUP_TMP')) as work:
+            dump, sealed = Path(work, 'dtf.dump'), Path(work, 'dtf.dump.age')
+            run(['pg_dump', '--format=custom', '--compress=6', '--file', str(dump)], env=libpq_env())
+            # A truncated or damaged archive fails here, before it is kept.
+            run(['pg_restore', '--list', str(dump)])
+            run(['age', '--encrypt', '--recipient', os.environ['BACKUP_AGE_RECIPIENT'],
+                 '--output', str(sealed), str(dump)])
+            size = sealed.stat().st_size
+            client.upload_file(str(sealed), name, key, ExtraArgs={'Metadata': {
+                'sha256': sha256(sealed), 'dump-sha256': sha256(dump), 'format': 'pg-custom+age'}})
+        record(started, 'ok', key, size)
+        print(f'Backup {key} uploaded ({size} bytes).', flush=True)
+        return key
+    except Exception as error:
+        # The message names a command or a provider error, never a credential.
+        detail = str(error)[:500]
+        try:
+            record(started, 'failed', key, None, detail)
+        finally:
+            print(f'Backup failed: {detail}', file=sys.stderr, flush=True)
+        raise
+
+
+def last_ok():
+    with admin_connect() as c:
+        row = c.execute("SELECT max(finished_at) FROM dtf_local.backups WHERE status='ok'").fetchone()
+    return row[0]
+
+
+def next_run(now, hour):
+    """The next `hour` o'clock in Brasília after `now`."""
+    local = now.astimezone(BRASILIA)
+    at = local.replace(hour=hour, minute=0, second=0, microsecond=0)
+    if at <= local:
+        at += timedelta(days=1)
+    return at.astimezone(timezone.utc)
+
+
+def serve():
+    if not configured():
+        print('Backup not configured: set BACKUP_S3_ENDPOINT, BACKUP_BUCKET, BACKUP_ACCESS_KEY_ID, '
+              'BACKUP_SECRET_ACCESS_KEY and BACKUP_AGE_RECIPIENT. Idle.', flush=True)
+        while True:
+            time.sleep(3600)
+    hour = int(os.environ.get('BACKUP_HOUR', '3'))
+    # Wait for the schema (db-init) before the first query.
+    for _ in range(60):
+        try:
+            previous = last_ok()
+            break
+        except psycopg.Error:
+            time.sleep(10)
+    else:
+        previous = last_ok()
+    now = datetime.now(timezone.utc)
+    # A fresh deployment, or one that missed a day, backs up straight away.
+    due = now if previous is None or now - previous > STALE else next_run(now, hour)
+    while True:
+        time.sleep(max(0, (due - datetime.now(timezone.utc)).total_seconds()))
+        try:
+            run_once()
+            due = next_run(datetime.now(timezone.utc), hour)
+        except Exception:
+            due = datetime.now(timezone.utc) + RETRY
+
+
+def listing():
+    client, name = bucket()
+    keys = []
+    for page in client.get_paginator('list_objects_v2').paginate(Bucket=name, Prefix=PREFIX):
+        keys += [(o['Key'], o['Size'], o['LastModified']) for o in page.get('Contents', [])]
+    return sorted(keys)
+
+
+def counts(database):
+    with psycopg.connect(**admin_params(database)) as c:
+        return {t: c.execute(sql.SQL('SELECT count(*) FROM dtf_local.{}').format(sql.Identifier(t))).fetchone()[0]
+                for t in TABLES}
+
+
+def restore(key, identity, into):
+    """Restore one backup into a database that is new or holds no DTF data."""
+    client, name = bucket()
+    with admin_connect() as c:
+        c.autocommit = True
+        if into == c.execute('SELECT current_database()').fetchone()[0]:
+            raise SystemExit('Refusing to restore over the database the stack is using.')
+        exists = c.execute('SELECT 1 FROM pg_database WHERE datname=%s', (into,)).fetchone()
+        if not exists:
+            c.execute(sql.SQL('CREATE DATABASE {}').format(sql.Identifier(into)))
+    if exists:
+        with psycopg.connect(**admin_params(into)) as c:
+            if c.execute("SELECT 1 FROM pg_namespace WHERE nspname='dtf_local'").fetchone():
+                raise SystemExit(f'{into} already holds DTF data; choose an empty or new database.')
+    with tempfile.TemporaryDirectory(dir=os.environ.get('BACKUP_TMP')) as work:
+        sealed, dump = Path(work, 'dtf.dump.age'), Path(work, 'dtf.dump')
+        client.download_file(name, key, str(sealed))
+        expected = client.head_object(Bucket=name, Key=key)['Metadata'].get('sha256')
+        if expected and sha256(sealed) != expected:
+            raise SystemExit('The downloaded backup does not match its checksum.')
+        run(['age', '--decrypt', '--identity', identity, '--output', str(dump), str(sealed)])
+        run(['pg_restore', '--exit-on-error', '--no-owner', '--no-privileges', '--dbname', into, str(dump)],
+            env=libpq_env(into))
+    return counts(into)
+
+
+def drop(database):
+    with admin_connect() as c:
+        c.autocommit = True
+        c.execute(sql.SQL('DROP DATABASE IF EXISTS {} WITH (FORCE)').format(sql.Identifier(database)))
+
+
+def verify(identity, key=None):
+    """The restore test: the latest backup into a scratch database, counted, dropped."""
+    key = key or listing()[-1][0]
+    scratch = 'dtf_verify_' + uuid4().hex[:12]
+    try:
+        restored = restore(key, identity, scratch)
+    finally:
+        drop(scratch)
+    print(f'PASS: {key} decrypted and restored into a scratch database (now dropped). Rows: ' +
+          ', '.join(f'{t} {n}' for t, n in restored.items()))
+    return restored
+
+
+def identity_file(value):
+    """The identity as a path, or '-' to paste it: nothing is written to disk
+    except a private temporary file removed when the command ends."""
+    if value != '-':
+        return value, None
+    print('Paste the private key (AGE-SECRET-KEY-...) and press Enter:', file=sys.stderr)
+    line = sys.stdin.readline().strip()
+    handle = tempfile.NamedTemporaryFile('w', prefix='identity-', dir=os.environ.get('BACKUP_TMP'), delete=False)
+    os.chmod(handle.name, 0o600)
+    handle.write(line + '\n')
+    handle.close()
+    return handle.name, handle.name
+
+
+def main(argv=None):
+    load_secret_files()
+    parser = argparse.ArgumentParser(prog='python -m ops.db_backup')
+    sub = parser.add_subparsers(dest='command', required=True)
+    sub.add_parser('serve')
+    sub.add_parser('once')
+    sub.add_parser('list')
+    for name in ('verify', 'restore'):
+        p = sub.add_parser(name)
+        if name == 'restore':
+            p.add_argument('key')
+            p.add_argument('--into', required=True, help='a new or empty database')
+        else:
+            p.add_argument('key', nargs='?', help='default: the latest backup')
+        p.add_argument('--identity', required=True, help="the private key file, or '-' to paste it")
+    args = parser.parse_args(argv)
+    if args.command == 'serve':
+        serve()
+    elif args.command == 'once':
+        run_once()
+    elif args.command == 'list':
+        for key, size, modified in listing():
+            print(f'{modified:%Y-%m-%d %H:%M} UTC  {size:>12}  {key}')
+    else:
+        path, temporary = identity_file(args.identity)
+        try:
+            if args.command == 'verify':
+                verify(path, args.key)
+            else:
+                rows = restore(args.key, path, args.into)
+                print(f'Restored {args.key} into {args.into}. Rows: ' + ', '.join(f'{t} {n}' for t, n in rows.items()))
+        finally:
+            if temporary:
+                os.unlink(temporary)
+
+
+if __name__ == '__main__':
+    main()

tests/artwork_browser_test.mjs

@@ -115,7 +115,7 @@ try{
   await call('Runtime.enable');await call('Page.enable');
   await call('Emulation.setDeviceMetricsOverride',{width:1440,height:1100,deviceScaleFactor:1,mobile:false});
   await call('Page.navigate',{url:`http://127.0.0.1:${server.address().port}/`});
-  await waitFor(()=>evaluate(`typeof sel==='function' && typeof AUTO!=='undefined'`),'Site scripts');
+  await waitFor(()=>evaluate(`typeof sel==='function' && typeof pintaEntrega==='function'`),'Site scripts');
   // Observe the actual engine, without replacing its placement or rendering.
   await evaluate(`(()=>{
     const original=encaixar;
@@ -149,15 +149,38 @@ try{
   // Navigation links must reach the chooser, never preselect a product.
   assert.equal(await evaluate(`document.querySelectorAll('[data-modo-cta]').length`),0);
   await click('[data-modo="file"]');
+  // Opening a product paints on the next frame; on a busy runner the check
+  // must wait for it rather than race it.
+  await waitFor(()=>evaluate(`!$('tipoEnvio').hidden`),'by-metre product open');
   // By-metre opens declaring a mounted sheet; switching is explicit and priced.
   assert.deepEqual(await evaluate(`({shown:!$('tipoEnvio').hidden,
     on:[...document.querySelectorAll('#tipoEnvio .cam.on')].map(b=>b.dataset.tipo)})`),
     {shown:true,on:['folha']});
-  await evaluate(`(()=>{const f=new File(['x'],'oversize.cdr');Object.defineProperty(f,'size',{value:128*1048576+1});sel([f]);})()`);
-  assert.equal(await evaluate(`folhas.length===0 && $('recusa').textContent.includes('128 MB')`),true,
-    'files beyond the scanner limit are rejected before browser analysis');
+  await evaluate(`(()=>{const f=new File(['x'],'oversize.cdr');Object.defineProperty(f,'size',{value:5*1073741824+1});sel([f]);})()`);
+  assert.equal(await evaluate(`folhas.length===0 && $('recusa').textContent.includes('5 GB')`),true,
+    'files beyond the 5 GB upload limit are rejected before browser analysis');
+  // A multi-GB sheet is the normal order: graded from the pixel size in its
+  // header, never decoded. 6732 x 35433 px across 57 cm is 3 m at 300 DPI.
+  await evaluate(`(()=>{const h=new Uint8Array(33);h.set([0x89,0x50,0x4E,0x47,0x0D,0x0A,0x1A,0x0A,0,0,0,13,0x49,0x48,0x44,0x52]);
+    const v=new DataView(h.buffer);v.setUint32(16,6732);v.setUint32(20,35433);h.set([8,6,0,0,0],24);
+    const f=new File([h],'folha-grande.png');Object.defineProperty(f,'size',{value:3*1073741824});sel([f]);})()`);
+  await waitFor(()=>evaluate(`folhas.length===1 && !!folhas[0].an`),'large sheet graded from its header');
+  assert.deepEqual(await evaluate(`({grande:folhas[0].an.grande,dpi:folhas[0].an.dpi,alt:folhas[0].med.alt,preview:!!folhas[0].previewSrc})`),
+    {grande:true,dpi:300,alt:300,preview:false});
+  await evaluate(`folhas=[];pintaFolha()`);
   await evaluate(`pickTipo('avulsa')`);
   assert.equal(await evaluate('modo'),'avulsa');
+  // A large JPG artwork cannot be read in parts: it is measured from its
+  // header and placed as a full box, with the discount, instead of refused.
+  await evaluate(`(()=>{const h=new Uint8Array(20);h.set([0xFF,0xD8,0xFF,0xC0,0,17,8,0x09,0x3A,0x09,0x3A,3]);
+    const f=new File([h],'arte-grande.jpg');Object.defineProperty(f,'size',{value:400*1048576});sel([f]);})()`);
+  await waitFor(()=>evaluate(`artes.length===1 && artes[0].semPrevia===true`),'large JPG artwork measured from its header');
+  await fill('[data-cm]',20);
+  await waitFor(()=>evaluate(`!!itemAtual?.production?.sources?.length`),'large JPG artwork packed');
+  assert.deepEqual(await evaluate(`({dpi:Math.round(dpiDe(artes[0])),src:!!artes[0].src,
+    measurement:itemAtual.production.sources[0].measurement,note:$('lista').textContent.includes('Sem prévia')})`),
+    {dpi:300,src:false,measurement:'file',note:true});
+  await evaluate(`artes=[];pintaArtes()`);
   await evaluate('sendImage()');
   await waitFor(()=>evaluate(`artes.length===1 && !!artes[0].src`),'JPG artwork model');
   assert.deepEqual(await evaluate(`({mode:modo,sheets:folhas.length,width:artes[0].cm,quantity:artes[0].q})`),{mode:'avulsa',sheets:0,width:0,quantity:1});
@@ -284,13 +307,14 @@ try{
     await fill('[data-cm]',10);await fill('[data-q]',4);await packed(4);
   }
   // An older image load must not overwrite a newer edit, even before debounce.
-  await evaluate(`(()=>{window.realLoad=carregarImagem;window.delayed=[];
-    carregarImagem=f=>new Promise(resolve=>delayed.push(()=>realLoad(f).then(resolve)));
+  // The packing loads each artwork's image through imagemDaArte.
+  await evaluate(`(()=>{window.realLoad=imagemDaArte;window.delayed=[];
+    imagemDaArte=a=>new Promise(resolve=>delayed.push(()=>realLoad(a).then(resolve)));
   })()`);
   await fill('[data-q]',5);
   await waitFor(()=>evaluate('delayed.length===1'),'delayed preview');
   await fill('[data-q]',7);
-  await evaluate(`carregarImagem=realLoad;delayed[0]()`);
+  await evaluate(`imagemDaArte=realLoad;delayed[0]()`);
   await packed(7);
   const timeoutCleanup=await evaluate(`(async()=>{
     const realLoader=carregarPdfJs, realTimer=setTimeout, realWorker=temWorker;

tests/backup_test.py

@@ -0,0 +1,79 @@
+"""The database backup against the local stack: dump, encrypt, upload, restore.
+
+    docker compose -f compose.local.yaml exec -T backup python -m tests.backup_test
+
+Uses a throwaway age key made here, so nothing secret is kept in the repository.
+"""
+import os
+import subprocess
+import tempfile
+from datetime import datetime, timezone
+from pathlib import Path
+
+from botocore.exceptions import ClientError
+
+from app.bootstrap import admin_connect
+from ops import db_backup
+
+
+def check(condition, message):
+    if not condition:
+        raise AssertionError(message)
+    print('PASS:', message)
+
+
+def main():
+    with tempfile.TemporaryDirectory() as work:
+        identity = Path(work, 'identity.txt')
+        subprocess.run(['age-keygen', '-o', str(identity)], check=True, capture_output=True)
+        public = next(line.split(': ', 1)[1] for line in identity.read_text().splitlines()
+                      if line.startswith('# public key: '))
+        os.environ['BACKUP_AGE_RECIPIENT'] = public
+        check(db_backup.configured(), 'the local backup service is configured once a recipient is set')
+
+        live = db_backup.counts(None)
+        key = db_backup.run_once()
+        with admin_connect() as c:
+            row = c.execute('SELECT status,bytes FROM dtf_local.backups WHERE object_key=%s', (key,)).fetchone()
+        check(row is not None and row[0] == 'ok' and row[1] > 0, 'the run is recorded for the Kanban')
+
+        client, bucket = db_backup.bucket()
+        head = client.get_object(Bucket=bucket, Key=key, Range='bytes=0-20')['Body'].read()
+        check(head.startswith(b'age-encryption.org/v1'), 'what leaves the server is encrypted')
+        check(key in [k for k, _, _ in db_backup.listing()], 'the backup is listed in its bucket')
+        try:
+            client.delete_object(Bucket=bucket, Key=key)
+            deleted = True
+        except ClientError:
+            deleted = False
+        check(not deleted and key in [k for k, _, _ in db_backup.listing()],
+              'the backup credential cannot delete backups')
+
+        restored = db_backup.verify(str(identity), key)
+        check(restored == live, f'the restore has the same rows as the live database ({restored})')
+
+        live_name = db_backup.admin_params()['dbname']
+        try:
+            db_backup.restore(key, str(identity), live_name)
+            refused = False
+        except SystemExit:
+            refused = True
+        check(refused, 'a restore over the live database is refused')
+
+        other = Path(work, 'other.txt')
+        subprocess.run(['age-keygen', '-o', str(other)], check=True, capture_output=True)
+        try:
+            db_backup.verify(str(other), key)
+            opened = True
+        except RuntimeError:
+            opened = False
+        check(not opened, 'another key cannot open the backup')
+
+    brt = lambda h, m=0: datetime(2026, 9, 29, h + 3, m, tzinfo=timezone.utc)
+    check(db_backup.next_run(brt(2), 3) == brt(3), 'before 03:00 in Brasília the run is that day')
+    check(db_backup.next_run(brt(3), 3) == datetime(2026, 9, 30, 6, tzinfo=timezone.utc),
+          'at or after 03:00 the run is the next day')
+
+
+if __name__ == '__main__':
+    main()

tests/browser_test.mjs

@@ -62,12 +62,13 @@ try{
   await site.call('Page.setBypassCSP',{enabled:false});
   await site.call('Page.reload');
   await waitFor(()=>site.eval('typeof window.dtfCheckout === "function"'),'reload after security probe');
+  // The check above can still pass on the page being replaced; wait for the new one's cards.
+  await waitFor(()=>site.eval(`!!document.querySelector('[data-modo="file"]') && document.readyState==='complete'`),'product cards after reload');
   await site.click('[data-modo="file"]');
   // Each product has its own page; the home's parts are not on it.
   assert.deepEqual(await site.eval(`({path:location.pathname,page:document.documentElement.dataset.rota,
     cards:getComputedStyle($('cards')).display,cart:getComputedStyle($('carr')).display})`),
     {path:'/arquivo-por-metro',page:'produto',cards:'none',cart:'none'});
-  await site.click('[data-cam="tabela"]');
   const root=await site.call('DOM.getDocument');
   const input=await site.call('DOM.querySelector',{nodeId:root.root.nodeId,selector:'#inp'});
   await site.call('DOM.setFileInputFiles',{nodeId:input.nodeId,files:[resolve('tests/fixtures/local-test.cdr')]});
@@ -78,7 +79,12 @@ try{
   await site.fill('#fCnpj','11222333000181');
   await site.fill('#fZap','11999999999');
   await site.fill('#fMail','local-browser@example.test');
-  await pause(800);
+  // Reload only once the cart is in the browser's storage: the save waits for
+  // typing to stop and writes the files, so a fixed pause raced it.
+  await waitFor(()=>site.eval(`new Promise(done=>{const open=indexedDB.open('dtf-local-cart',1);
+    open.onerror=()=>done(false);
+    open.onsuccess=()=>{const all=open.result.transaction('cart').objectStore('cart').getAll();
+      all.onsuccess=()=>done(all.result.some(v=>v.items?.length===1));all.onerror=()=>done(false);};})`),'cart saved in the browser');
   await site.call('Page.reload');
   await waitFor(()=>site.eval('typeof pedido!=="undefined" && pedido.length===1'),'persistent cart recovery');
   // Reloading a product page reopens that product; the cart is its own page.
@@ -92,12 +98,29 @@ try{
   assert.deepEqual(await site.eval(`({items:pedido.length,empty:!$('carrVazio').hidden||document.documentElement.hasAttribute('data-sem-itens'),undo:!$('desfazer').hidden})`),{items:0,empty:true,undo:true});
   await site.click('#desfazerBtn');
   assert.equal(await site.eval('pedido.length===1 && pedido[0].total===21.89 && $("desfazer").hidden'),true);
+  // The items come back after a reload; the customer's details do not.
+  assert.deepEqual(await site.eval(`['fCnpj','fZap','fMail'].map(id=>$(id).value)`),['','','']);
+  assert.equal(await site.eval('document.getElementById("bPagar").disabled'),true);
+  await site.fill('#fCnpj','11222333000181');
+  await site.fill('#fZap','11999999999');
+  await site.fill('#fMail','local-browser@example.test');
   assert.equal(await site.eval('pedido[0].localFiles[0].name'),'local-test.cdr');
+  // An unchecked item stays in the cart but is not paid for now.
+  await site.click('[data-sel="0"]');
+  assert.deepEqual(await site.eval(`({marcado:pedido[0].marcado,pagar:itensAPagar().length,zero:$('carrTot').textContent.includes('0,00'),row:document.querySelector('.item').classList.contains('fora')})`),
+    {marcado:false,pagar:0,zero:true,row:true});
+  await site.click('[data-sel="0"]');
+  assert.equal(await site.eval('pedido[0].marcado===true && itensAPagar().length===1'),true);
   assert.equal(await site.eval('pedido[0].total'),21.89);
   assert.equal(await site.eval('document.getElementById("bPagar").disabled'),false);
   await site.click('#bPagar');
   try{
-    await waitFor(async()=> (await site.text()).includes('Arquivos enviados.'),'browser upload and quote',45000);
+    // A cart the Site can price is approved at once: the customer pays now.
+    await waitFor(async()=> (await site.text()).includes('Total validado no servidor:'),'browser upload and automatic approval',45000);
+    // Payment is its own page: the cart form is gone and the order summary is shown.
+    assert.equal(await site.eval('location.pathname'),'/pagamento');
+    assert.equal(await site.eval('getComputedStyle(document.getElementById("carr")).display'),'none');
+    assert.equal(await site.eval('!document.getElementById("pagResumo").hidden && document.getElementById("pagResumo").textContent.includes("Total")'),true);
   }catch(error){
     console.error('Checkout status:',await site.eval('document.getElementById("checkoutStatus")?.textContent'));
     throw error;
@@ -107,16 +130,15 @@ try{
   await kanban.fill('#email',process.env.OPERATOR_EMAIL||'operator@example.test');
   await kanban.fill('#password',process.env.OPERATOR_PASSWORD||'local-operator-only');
   await kanban.eval('document.getElementById("login").requestSubmit()');
-  // Quotes live in their own tab; the review pane shows the one picked.
+  // Quotes live in their own tab; an automatic approval is listed as such.
   await waitFor(()=>kanban.eval('!document.getElementById("app").hidden'),'Kanban sign-in');
-  await kanban.click('[data-tab="quotes"]');
-  await waitFor(()=>kanban.eval(`!!document.querySelector('[data-quote-pick="${qid}"]')`),'quote listed on Kanban');
-  await kanban.click(`[data-quote-pick="${qid}"]`);
-  await waitFor(async()=> (await kanban.text()).includes(qid.slice(0,8)),'quote on Kanban');
   assert.equal(await kanban.eval('sessionStorage.getItem("dtf-operator")'),null);
   assert.equal(await kanban.eval('document.getElementById("password").value'),'');
-  await kanban.eval(`(()=>{const card=[...document.querySelectorAll('.review')].find(x=>x.textContent.includes(${JSON.stringify(qid.slice(0,8))}));card.querySelector('[type=checkbox]').click();card.querySelector('form').requestSubmit();})()`);
-  await waitFor(async()=> (await kanban.text()).includes('Aprovada:'),'quote approval');
+  await kanban.click('[data-tab="quotes"]');
+  await waitFor(()=>kanban.eval('document.querySelectorAll("#quote-filters button").length===2'),'quote filters');
+  await kanban.eval('document.querySelectorAll("#quote-filters button")[1].click()');
+  await waitFor(()=>kanban.eval(`!!document.querySelector('[data-quote-pick="${qid}"]')`),'approved quote listed on Kanban');
+  assert.equal(await kanban.eval(`document.querySelector('[data-quote-pick="${qid}"]').textContent.includes('Aprovada automaticamente')`),true);
   assert.equal(await site.eval('pedido[0].production.sources[0].copies'),1);
   await site.eval('pedido[0].production.sources[0].copies=2;pintaPedido()');
   await waitFor(async()=> (await site.text()).includes('O carrinho mudou'),'same-price production edit invalidates quote');
@@ -170,14 +192,20 @@ try{
   await waitFor(()=>site.eval('window.scrollY===0'),'screenshot scroll position');
   await site.screenshot('output/local/site.png');
   await kanban.screenshot('output/local/kanban.png');
-  const portal=await page(siteOrigin+'/portal.html?order='+oid);
+  // A guest sees the order paid in this browser; creating an account keeps it.
+  const portal=await page(siteOrigin+'/conta/pedidos?order='+oid);
   await waitFor(async()=> (await portal.text()).includes('Finalizado'),'customer order tracking');
+  await waitFor(()=>portal.eval('document.querySelector("#order-'+oid+' .detalhe")?.hidden===false'),'order from the link opened');
+  await portal.click('#navEntrar');
+  await waitFor(()=>portal.eval('location.pathname==="/conta/entrar" && !document.getElementById("auth").hidden'),'sign-in page');
   await portal.fill('#cnpj','11222333000181');await portal.fill('#phone','11999999999');
   await portal.fill('#register-email','browser-'+Date.now()+'@example.test');
   await portal.fill('#register-password','local-browser-password-123');
   await portal.eval('document.getElementById("register").requestSubmit()');
-  await waitFor(()=>portal.eval('document.getElementById("auth").hidden'),'customer registration');
-  assert.ok((await portal.text()).includes('Finalizado'));
+  await waitFor(()=>portal.eval('document.getElementById("auth").hidden && location.pathname==="/conta"'),'customer registration');
+  await waitFor(async()=> (await portal.text()).includes('Finalizado'),'overview shows the last order');
+  await portal.click('[data-view="dados"]');
+  await waitFor(()=>portal.eval('location.pathname==="/conta/dados" && document.getElementById("dCnpj").value==="11.222.333/0001-81"'),'account details');
   await portal.screenshot('output/local/portal.png');
   // A logout must clear draft file blobs and metadata, including other open Site tabs.
   await portal.eval(`(async()=>{const db=await new Promise((resolve,reject)=>{const r=indexedDB.open('dtf-local-cart',1);r.onsuccess=()=>resolve(r.result);r.onerror=reject;});await new Promise((resolve,reject)=>{const tx=db.transaction('cart','readwrite');tx.objectStore('cart').put({items:[new File(['private'],'private.cdr')],expires:Date.now()+86400000},'security-fixture');tx.oncomplete=resolve;tx.onerror=reject;});db.close();})()`);
@@ -188,7 +216,7 @@ try{
   assert.equal(stored,0);
   assert.deepEqual(portal.errors,[]);
   assert.deepEqual(site.errors,[]);assert.deepEqual(kanban.errors,[]);
-  console.log('PASS: browser Site upload → operator quote → local paid order → all main Kanban states → reload persistence. Order '+oid);
+  console.log('PASS: browser Site upload → automatic approval → local paid order → all main Kanban states → reload persistence. Order '+oid);
   console.log('Screenshots: output/local/site.png and output/local/kanban.png');
   console.log('PASS: filename XSS escaping with CSP bypassed, no stored operator password, logout clears browser file blobs.');
 }catch(error){console.error(error);if(stderr)console.error(stderr.slice(-1500));process.exitCode=1;}

tests/payment_test.py

@@ -12,7 +12,8 @@ from urllib.error import HTTPError
 from urllib.request import Request, urlopen
 from uuid import uuid4
 
-from tests.smoke_test import BASE, Client, upload_bytes, item_spec, with_host
+from app.core import db
+from tests.smoke_test import BASE, Client, approved_quote, upload_bytes, item_spec, with_host
 
 SECRET = os.environ.get('PAYMENT_WEBHOOK_SECRET', 'local-webhook-secret').encode()
 
@@ -42,8 +43,7 @@ def reviewed_quote():
                'mail': 'payment-' + uuid4().hex[:8] + '@example.test'}
     quote = customer.call('/quotes', {'request_key': str(uuid4()), 'customer': profile,
                                       'items': [item], 'freight': {'service': 'pickup'}})
-    approved = customer.call('/operator/quotes/' + quote['id'] + '/approve',
-                             {'items': [item]}, operator=True)
+    approved = approved_quote(customer, quote, [item])
     return customer, quote['id'], approved['total_cents']
 
 
@@ -61,7 +61,22 @@ def run():
     # Starting a PIX twice returns the same one. A card in review blocks every
     # further attempt, so one quote can never be charged twice.
     pix = customer.call('/payments/intent', {'quote_id': quote_id, 'method': {'type': 'pix'}})
+    assert pix['expires_at']
     assert customer.call('/payments/intent', {'quote_id': quote_id, 'method': {'type': 'pix'}})['id'] == pix['id']
+    # Once the code has expired, asking again opens a new one, and only one.
+    with db.connect() as c:
+        c.execute('''UPDATE dtf_local.payment_intents
+            SET response=jsonb_set(response,'{expires_at}',to_jsonb((now()-interval '1 minute')::text))
+            WHERE provider_payment_id=%s''', (pix['id'],))
+    renewed = customer.call('/payments/intent', {'quote_id': quote_id, 'method': {'type': 'pix'}})
+    assert renewed['id'] != pix['id'], 'an expired PIX was offered again'
+    assert customer.call('/payments/intent', {'quote_id': quote_id, 'method': {'type': 'pix'}})['id'] == renewed['id']
+    with db.connect() as c:
+        statuses = {r['provider_payment_id']: r['status'] for r in c.execute(
+            "SELECT provider_payment_id,status FROM dtf_local.payment_intents WHERE quote_id=%s AND method='pix'",
+            (quote_id,)).fetchall()}
+    assert statuses == {pix['id']: 'expired', renewed['id']: 'pending'}, statuses
+    print('PASS: a PIX code expires after 30 minutes and is replaced by exactly one new code')
     customer.call('/payments/intent', {'quote_id': quote_id, 'method': {'type': 'card'}}, expected=422)
     card = {'type': 'card', 'token': 'tok-1', 'payment_method_id': 'visa', 'installments': 1}
     customer.call('/payments/intent', {'quote_id': quote_id, 'method': card})
@@ -125,6 +140,45 @@ def run():
              'status': 'pending', 'amount_cents': total})
     print('PASS: unknown references and non-approved statuses are recorded without acting')
 
+    # An operator's test order runs the production flow and notifies no one.
+    tester, test_quote, _ = reviewed_quote()
+    order = tester.call('/operator/quotes/' + test_quote + '/test-order', {}, operator=True)
+    assert order['payment']['provider'] == 'teste' and order['state'] == 'rec', order
+    assert tester.call('/operator/quotes/' + test_quote + '/test-order', {}, operator=True)['id'] == order['id']
+    version = order['version']
+    for state in ('tra',):
+        moved = tester.call('/operator/orders/' + order['id'] + '/move', {'state': state, 'version': version}, operator=True)
+        version = moved['version']
+    with db.connect() as c:
+        queued = c.execute("SELECT count(*) AS n FROM dtf_local.outbox WHERE event_key LIKE %s", (order['id'] + ':%',)).fetchone()['n']
+        jobs = c.execute('SELECT count(*) AS n FROM dtf_local.print_files WHERE order_id=%s', (order['id'],)).fetchone()['n']
+    assert queued == 0 and jobs == 1, (queued, jobs)
+    print('PASS: an operator test order reaches the board and the print queue, never Tiny or WhatsApp')
+
+    # Files are uploaded before payment. An unpaid cart keeps them briefly; a
+    # paid order keeps them for its 30 days; a payment never starts for files
+    # that are gone.
+    def files_of(qid):
+        with db.connect() as c:
+            q = c.execute('SELECT approved,draft FROM dtf_local.quotes WHERE id=%s', (qid,)).fetchone()
+        return [u for item in (q['approved'] or q['draft'])['items'] for u in item['uploads']]
+
+    def days(ids, since='now()'):
+        with db.connect() as c:
+            return [float(r['d']) for r in c.execute(
+                f'SELECT extract(epoch FROM expires_at-{since})/86400 AS d FROM dtf_local.uploads WHERE id=ANY(%s)',
+                (ids,)).fetchall()]
+    fresh = upload_bytes(customer, b'UNPAID HOLD TEST')
+    assert all(1.99 < d <= 2.0 for d in days([fresh])), days([fresh])
+    assert all(abs(d - 30) < 0.01 for d in days(files_of(quote_id), 'created_at')), days(files_of(quote_id), 'created_at')
+    late, late_quote, _ = reviewed_quote()
+    assert all(d > 1.99 for d in days(files_of(late_quote))), days(files_of(late_quote))
+    with db.connect() as c:
+        c.execute("UPDATE dtf_local.uploads SET expires_at=now()-interval '1 second' WHERE id=ANY(%s)",
+                  (files_of(late_quote),))
+    late.call('/payments/intent', {'quote_id': late_quote, 'method': {'type': 'pix'}}, expected=410)
+    print('PASS: unpaid files are held 2 days, paid ones 30 days, and expired files are never charged for')
+
 
 if __name__ == '__main__':
     run()

tests/print_file_test.py

@@ -17,7 +17,7 @@ from uuid import uuid4
 from PIL import Image
 
 from tests.payment_test import deliver
-from tests.smoke_test import Client, upload_bytes
+from tests.smoke_test import Client, approved_quote as approval, upload_bytes
 
 PT_PER_CM = 72 / 2.54
 CUSTOMER = {'cnpj': '11222333000181', 'zap': '11999999999', 'mail': 'print-test@example.test'}
@@ -53,7 +53,7 @@ def loose_item(uid, copies=2):
 def approved_quote(client, item):
     quote = client.call('/quotes', {'request_key': str(uuid4()), 'customer': CUSTOMER,
                                     'items': [item], 'freight': {'service': 'pickup'}})
-    approved = client.call('/operator/quotes/' + quote['id'] + '/approve', {'items': [item]}, operator=True)
+    approved = approval(client, quote, [item])
     return quote['id'], approved['total_cents']
 
 

tests/runtime_security_test.py

@@ -5,7 +5,7 @@ from botocore.exceptions import ClientError
 from app.core.db import connect
 from app.adapters import LocalS3Storage
 from app.core.auth import client_ip, password_hash, password_matches
-from app.scanning import ClamAV, require_clean
+from app.scanning import ClamAV, format_matches, require_clean
 from fastapi import HTTPException
 
 class FakeRequest:
@@ -78,7 +78,13 @@ def run():
         except HTTPException as error:assert error.status_code==409
     require_clean({'complete':True,'scan_state':'clean'})
     assert ClamAV().ping() and ClamAV().version().startswith('ClamAV ')
-    assert ClamAV().scan(None,134217729)[0]=='rejected'
+    # Above the antivirus limit only a file whose bytes match its name is released.
+    for name,head,ok in (('folha.png',b'\x89PNG\r\n\x1a\n\x00',True),('folha.png',b'MZ\x90\x00',False),
+                         ('folha.jpg',b'\xff\xd8\xff\xe0',True),('folha.pdf',b'%PDF-1.7',True),
+                         ('folha.pdf',b'#!/bin/sh',False),('folha.tif',b'II*\x00',True),('folha.psd',b'8BPS',True),
+                         ('folha.ai',b'%!PS-Adobe',True),('folha.cdr',b'RIFF\x10\x00\x00\x00CDRv',True),
+                         ('folha.cdr',b'RIFF\x10\x00\x00\x00WEBP',False),('folha.exe',b'MZ',False)):
+        assert format_matches(name,head)==ok,(name,head)
     with patch('app.scanning.socket.create_connection',side_effect=OSError('offline')):
         try:ClamAV().scan(None,1);raise AssertionError('Offline scanner returned success')
         except OSError:pass

tests/smoke_test.py

@@ -94,11 +94,18 @@ def item_spec(mode, metres, grade, uid):
             'quality_status':'unverified' if grade==0 else 'ok',
             'quality_acknowledged':False}
 
+def approved_quote(client, quote, items):
+    """The approval a customer pays against: automatic, or by the operator."""
+    if quote['status']=='approved':
+        return client.call('/quotes/'+quote['id'])['approved']
+    return client.call('/operator/quotes/'+quote['id']+'/approve',{'items':items},operator=True)
+
 def run():
     client=Client();other=Client()
     config=client.call('/session');other.call('/session')
     assert client.call('/health')['integrations']=='fake'
-    assert 0 < config['max_upload_bytes'] <= 128 * 1024 * 1024
+    # Sheets of several GB are the normal order: 5 GB per file.
+    assert config['max_upload_bytes'] == 5 * 1024 ** 3
     client.call('/uploads',{'name':'too-large.cdr',
                             'size':config['max_upload_bytes']+1},expected=413)
     cancelled=client.call('/uploads',{'name':'CANCELLED-PART.cdr','size':3})['id']
@@ -127,7 +134,8 @@ def run():
     except HTTPError as exc:assert exc.code==403
     print('PASS: multipart resume, incomplete rejection, immutable completion, ownership, private/downloaded bytes')
 
-    items=[item_spec(m,'2.75',90,uid) for m in ('file','avulsa','uvfile','uv')]
+    # Above QUOTE_AUTO_MAX_METRES (50 m by default), so a person reviews it.
+    items=[item_spec(m,'13',90,uid) for m in ('file','avulsa','uvfile','uv')]
     draft={'request_key':str(uuid4()),'customer':{'cnpj':'11222333000181','zap':'11999999999','mail':'local-smoke@example.test'},
            'items':items,'freight':{'service':'mock-standard','postal_code':'14400000'},
            'destination':{'recipient':'Local Smoke Ltda','street':'Rua de Teste','number':'100',
@@ -146,6 +154,8 @@ def run():
     client.call('/quotes',{**draft,'items':[{**items[0],'metres':'1.00'}]},expected=422)
     client.call('/quotes',{**draft,'customer':{**draft['customer'],'cnpj':'11111111111111'}},expected=422)
     quote=client.call('/quotes',draft)
+    assert quote['status']=='pending_review'
+    assert client.call('/quotes/'+quote['id'])['review_reason']=='Pedido acima de 50 m'
     assert client.call('/quotes',draft)['id']==quote['id']
     client.call('/quotes',{**draft,'freight':{'service':'pickup'},'destination':None},expected=409)
     qid=quote['id']
@@ -159,9 +169,36 @@ def run():
     corrected=[{**items[0],'metres':'1.01','grade':0},*items[1:]]
     approved=client.call('/operator/quotes/'+qid+'/approve',{'items':corrected},operator=True)
     assert approved['items'][0]['total_cents']==2189
-    assert approved['total_cents']==2189+6972+19572+23492+int(os.environ.get('MOCK_FREIGHT_CENTS','1500'))
+    assert approved['total_cents']==2189+32370+90870+109070+int(os.environ.get('MOCK_FREIGHT_CENTS','1500'))
     assert approved['destination']=={**draft['destination'],'complement':''}
     client.call('/operator/quotes/'+qid+'/approve',{'items':items},operator=True,expected=409)
+    assert not client.call('/quotes/'+qid)['auto_approved']
+    # A cart the Site priced is approved at once and can be paid straight away,
+    # at the server's own prices; no operator can then change it.
+    # The server works the grade out from the file: this PNG is 6059 px across
+    # 57 cm, 270 DPI, which is grade 90.
+    png=b'\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR'+(6059).to_bytes(4,'big')+(2000).to_bytes(4,'big')+b'\x08\x06\x00\x00\x00'+b'\x00'*4
+    graded=upload_bytes(client,png,name='arte-270dpi.png')
+    small={**draft,'request_key':str(uuid4()),'items':[item_spec('avulsa','2.75',90,graded)]}
+    auto=client.call('/quotes',small)
+    assert auto['status']=='approved'
+    seen=client.call('/quotes/'+auto['id'])
+    assert seen['auto_approved'] and seen['review_reason'] is None
+    assert seen['approved']['total_cents']==6972+int(os.environ.get('MOCK_FREIGHT_CENTS','1500'))
+    assert client.call('/quotes',small)['status']=='approved'
+    client.call('/operator/quotes/'+auto['id']+'/approve',{'items':small['items']},operator=True,expected=409)
+    # The Site grades only art it analysed; a discount on unanalysed art waits for a person.
+    claimed={**item_spec('avulsa','2.75',0,uid),'grade':90}
+    held=client.call('/quotes',{**small,'request_key':str(uuid4()),'items':[claimed]})
+    assert held['status']=='pending_review'
+    assert client.call('/quotes/'+held['id'])['review_reason']=='Nota informada sem análise da arte'
+    # A better grade than the file supports, or one the server cannot check, waits too.
+    inflated=client.call('/quotes',{**small,'request_key':str(uuid4()),'items':[item_spec('avulsa','2.75',100,graded)]})
+    assert inflated['status']=='pending_review'
+    assert client.call('/quotes/'+inflated['id'])['review_reason']=='Nota 100 maior que a do arquivo (90)'
+    unchecked=client.call('/quotes',{**small,'request_key':str(uuid4()),'items':[item_spec('avulsa','2.75',90,uid)]})
+    assert client.call('/quotes/'+unchecked['id'])['review_reason']=='Nota não conferida no servidor'
+    print('PASS: priced carts are approved at checkout; large or inconsistent ones wait for review')
     client.call('/orders/dev-paid',{'quote_id':qid,'total_cents':1},expected=422)
     other.call('/orders/dev-paid',{'quote_id':qid},expected=404)
     # Concurrent retries must produce precisely one payment/order/outbox pair.
@@ -195,6 +232,11 @@ def run():
     client.call('/operator/orders/'+oid+'/move',{'state':'fin','version':version},operator=True);version+=1
     history=client.call('/operator/orders/'+oid+'/history',operator=True)
     assert len(history)==8 and history[-2]['back'] and history[-2]['reason']=='Movido por engano' and not history[-1]['back']
+    # The customer sees the stages and the correction's reason, never the
+    # internal reason for going back.
+    seen=client.call('/customer/orders/'+oid)['history']
+    assert len(seen)==7 and all(h['reason']=='' or h['to_state']=='cor' for h in seen)
+    assert any(h['to_state']=='cor' and h['reason']=='Local test correction' for h in seen)
     print('PASS: a mistaken move is undone one stage back with a reason, without messaging the customer again')
     print('PASS: all modes, authoritative review/prices/freight, tamper rejection, concurrent payment idempotency, transitions and history')
     deadline=time.monotonic()+30

tests/test_grade_check.py

@@ -0,0 +1,86 @@
+"""The server's grade against real image and PDF files.
+
+Runs where Pillow and pikepdf are installed (the API image).
+"""
+import io
+import tempfile
+import unittest
+
+import pikepdf
+from PIL import Image
+
+from app import grade_check
+
+
+class FakeFiles:
+    def __init__(self, blobs):
+        self.blobs = blobs
+
+    def head(self, row):
+        return self.blobs[row['name']][:grade_check.HEAD_BYTES]
+
+    def pdf_dpi(self, row):
+        with tempfile.NamedTemporaryFile(suffix='.pdf') as handle:
+            handle.write(self.blobs[row['name']])
+            handle.flush()
+            return grade_check.pdf_dpi(handle.name)
+
+
+def encoded(fmt, size, **options):
+    out = io.BytesIO()
+    Image.new('RGBA' if fmt in ('PNG', 'WEBP') else 'RGB', size, (200, 30, 30)).save(out, fmt, **options)
+    return out.getvalue()
+
+
+def item(kind, grade, sources):
+    return {'grade': grade, 'production': {'sources': [
+        {'upload_id': name, 'kind': kind, 'width_cm': width, 'rotation_degrees': rotation}
+        for name, width, rotation in sources]}}
+
+
+class GradeCheckTests(unittest.TestCase):
+    def test_image_sizes_from_the_first_bytes(self):
+        for fmt, options in (('PNG', {}), ('JPEG', {'quality': 80}), ('JPEG', {'progressive': True}),
+                             ('WEBP', {'lossless': True}), ('WEBP', {'quality': 80})):
+            self.assertEqual(grade_check.image_size(encoded(fmt, (1234, 567), **options)), (1234, 567), (fmt, options))
+        # A JPEG with a large metadata block before the frame header.
+        exif = Image.Exif()
+        exif[0x010E] = 'x' * 60000
+        self.assertEqual(grade_check.image_size(encoded('JPEG', (800, 600), exif=exif)), (800, 600))
+        self.assertIsNone(grade_check.image_size(b'not an image at all'))
+
+    def test_pdf_dpi_is_the_images_area_weighted(self):
+        out = io.BytesIO()
+        Image.new('RGB', (1500, 750), 'white').save(out, 'PDF', resolution=150)
+        with tempfile.NamedTemporaryFile(suffix='.pdf') as handle:
+            handle.write(out.getvalue()); handle.flush()
+            self.assertEqual(grade_check.pdf_dpi(handle.name), 150)
+        vector = pikepdf.new()
+        vector.add_blank_page(page_size=(1615, 850))
+        with tempfile.NamedTemporaryFile(suffix='.pdf') as handle:
+            vector.save(handle.name)
+            self.assertEqual(grade_check.pdf_dpi(handle.name), 300)
+
+    def test_grades_follow_the_site(self):
+        # 57 cm is 22.44 in: 6059 px is 270 DPI, grade 90; 3366 px is 150 DPI, grade 50.
+        files = FakeFiles({'a.png': encoded('PNG', (6059, 100)), 'b.jpg': encoded('JPEG', (3366, 100)),
+                           'tall.png': encoded('PNG', (100, 2362)), 'x.cdr': b'CDR'})
+        rows = {n: {'name': n, 'size': 1} for n in files.blobs}
+        # A sheet takes the worst sheet's grade.
+        self.assertEqual(grade_check.item_grade(files, item('sheet', 0, [('a.png', 57, 0)]), rows), 90)
+        self.assertEqual(grade_check.item_grade(files, item('sheet', 0, [('a.png', 57, 0), ('b.jpg', 57, 0)]), rows), 50)
+        # Artworks average; a rotated one is measured along its height.
+        self.assertEqual(grade_check.item_grade(files, item('artwork', 0, [('a.png', 57, 0), ('b.jpg', 57, 0)]), rows), 70)
+        self.assertEqual(grade_check.item_grade(files, item('artwork', 0, [('tall.png', 20, 90)]), rows), 100)
+        self.assertIsNone(grade_check.item_grade(files, item('sheet', 0, [('x.cdr', 57, 0)]), rows))
+        # What the cart claims is checked, with a point or two of rounding.
+        claim = lambda g, src: grade_check.mismatch(files, [item('sheet', g, src)], rows)
+        self.assertIsNone(claim(90, [('a.png', 57, 0)]))
+        self.assertIsNone(claim(92, [('a.png', 57, 0)]))
+        self.assertEqual(claim(100, [('a.png', 57, 0)]), 'Nota 100 maior que a do arquivo (90)')
+        self.assertEqual(claim(40, [('x.cdr', 57, 0)]), 'Nota não conferida no servidor')
+        self.assertIsNone(claim(0, [('x.cdr', 57, 0)]))
+
+
+if __name__ == '__main__':
+    unittest.main()

tests/test_jadlog.py

@@ -0,0 +1,147 @@
+"""The Jadlog quote client against a fake HTTP transport: payload and errors.
+
+This proves the manual's contract only; app.jadlog_probe must still confirm
+it on the client's account. Runs where httpx is installed.
+"""
+import json
+import os
+import unittest
+from unittest import mock
+
+import httpx
+
+from app.jadlog import QUOTE_URL, JadlogError, JadlogFreight, JadlogQuotes
+from app.jadlog_probe import run
+
+CNPJ = '11.222.333/0001-81'
+
+
+def client(handler, **settings):
+    return JadlogQuotes(token=settings.pop('token', 'tok-1'), cnpj=CNPJ, conta='123456',
+                        transport=httpx.MockTransport(handler), **settings)
+
+
+class JadlogQuoteTest(unittest.TestCase):
+    def test_payload_follows_the_manual_and_price_becomes_centavos(self):
+        seen = []
+
+        def handler(request):
+            seen.append(request)
+            item = json.loads(request.content)['frete'][0]
+            return httpx.Response(200, json={'frete': [{**item, 'vltotal': 23.455, 'prazo': 4}]})
+
+        result = client(handler).quote('01310-100', 1.5, 12990)
+        request = seen[0]
+        self.assertEqual(str(request.url), QUOTE_URL)
+        self.assertEqual(request.headers['authorization'], 'tok-1')
+        item = json.loads(request.content)['frete'][0]
+        self.assertEqual(item, {'cepori': '14402310', 'cepdes': '01310100', 'frap': 'N', 'peso': 1.5,
+                                'cnpj': '11222333000181', 'conta': '123456', 'contrato': None,
+                                'modalidade': 3, 'tpentrega': 'D', 'tpseguro': 'N',
+                                'vldeclarado': 129.9, 'vlcoleta': 0})
+        self.assertEqual((result['total_cents'], result['days']), (2346, 4))
+
+    def test_contract_is_sent_only_when_configured(self):
+        def handler(request):
+            item = json.loads(request.content)['frete'][0]
+            self.assertEqual(item['contrato'], '042')
+            return httpx.Response(200, json={'frete': [{'vltotal': 10, 'prazo': 2}]})
+
+        client(handler, contrato='042').quote('01310100', 1, 100)
+
+    def test_account_is_sent_as_configured(self):
+        def handler(request):
+            self.assertEqual(json.loads(request.content)['frete'][0]['conta'], '123456-7')
+            return httpx.Response(200, json={'frete': [{'vltotal': 10, 'prazo': 2}]})
+
+        JadlogQuotes(token='tok', cnpj=CNPJ, conta=' 123456-7 ', transport=httpx.MockTransport(handler)).quote('01310100', 1, 100)
+
+    def test_account_and_item_errors_are_raised_with_jadlog_text(self):
+        replies = [
+            httpx.Response(200, json={'frete': [{}], 'error': {'id': -1, 'descricao': 'frete[0].contrato Numero de contrato invalido'}}),
+            httpx.Response(200, json={'frete': [{'erro': {'id': 2, 'descricao': 'CEP destino invalido'}}]}),
+            httpx.Response(200, json={'frete': [{'prazo': 3}]}),
+            httpx.Response(502, text='<html>bad gateway</html>'),
+        ]
+        messages = ['contrato invalido', 'CEP destino invalido', 'no freight value', 'not JSON']
+        for reply, message in zip(replies, messages):
+            with self.subTest(message=message), self.assertRaisesRegex(JadlogError, message):
+                client(lambda request, reply=reply: reply).quote('01310100', 1, 100)
+
+    def test_missing_credentials_refuse_to_start(self):
+        with self.assertRaises(RuntimeError):
+            JadlogQuotes(token='', cnpj=CNPJ)
+        with self.assertRaises(RuntimeError):
+            JadlogQuotes(token='tok', cnpj='123')
+
+
+class JadlogFreightTest(unittest.TestCase):
+    WEIGHTS = {'JADLOG_PESO_BASE_KG': '0.2', 'JADLOG_PESO_POR_METRO_KG': '0.15', 'FREIGHT_PRODUCTION_DAYS': '2'}
+
+    def freight(self, handler, **env):
+        with mock.patch.dict(os.environ, {**self.WEIGHTS, **env}):
+            return JadlogFreight(client(handler))
+
+    def test_package_weight_value_and_days(self):
+        seen = []
+
+        def handler(request):
+            seen.append(json.loads(request.content)['frete'][0])
+            return httpx.Response(200, json={'frete': [{'vltotal': 18.4, 'prazo': 3}]})
+
+        quote = self.freight(handler).quote('jadlog', '01310100', '2.8', 6972)
+        # 0.2 kg of packaging plus 0.15 kg for each of the 2.8 billed metres.
+        self.assertEqual((seen[0]['peso'], seen[0]['vldeclarado'], seen[0]['cepdes']), (0.62, 69.72, '01310100'))
+        self.assertEqual((quote['total_cents'], quote['days'], quote['service']), (1840, 5, 'jadlog'))
+
+    def test_pickup_is_free_and_bad_requests_are_refused(self):
+        freight = self.freight(lambda request: httpx.Response(500))
+        self.assertEqual(freight.quote('pickup', '')['total_cents'], 0)
+        for args in (('mock-standard', '01310100', '1'), ('jadlog', '0131', '1'), ('jadlog', '01310100', None)):
+            with self.subTest(args=args), self.assertRaises(ValueError):
+                freight.quote(*args)
+
+    def test_a_jadlog_failure_is_a_clear_refusal(self):
+        freight = self.freight(lambda request: httpx.Response(200, json={'frete': [{}], 'error': {'id': -1, 'descricao': 'CEP destino invalido'}}))
+        with self.assertRaisesRegex(ValueError, 'CEP destino invalido'):
+            freight.quote('jadlog', '01310100', '1', 100)
+
+    def test_the_weight_has_no_default(self):
+        with mock.patch.dict(os.environ, {}, clear=True), self.assertRaises(KeyError):
+            JadlogFreight(client(lambda request: httpx.Response(200)))
+        with self.assertRaises(RuntimeError):
+            self.freight(lambda request: httpx.Response(200), JADLOG_PESO_POR_METRO_KG='0')
+
+
+class JadlogProbeTest(unittest.TestCase):
+    def test_bearer_is_tried_once_after_a_401_and_kept(self):
+        headers = []
+
+        def handler(request):
+            headers.append(request.headers['authorization'])
+            if not request.headers['authorization'].startswith('Bearer '):
+                return httpx.Response(401, json={'descricao': 'TOKEN INVALIDO', 'id': 1})
+            return httpx.Response(200, json={'frete': [{'vltotal': 12.5, 'prazo': 3}]})
+
+        lines = []
+        status = run(client(handler), ['01310100', '20040002'], ['1'], 10000, lines.append)
+        self.assertEqual(status, 0)
+        self.assertEqual(headers, ['tok-1', 'Bearer tok-1', 'Bearer tok-1'])
+        self.assertIn('Bearer', lines[0])
+        self.assertIn('R$ 12,50', lines[1])
+
+    def test_first_failure_stops_the_run(self):
+        calls = []
+
+        def handler(request):
+            calls.append(request)
+            return httpx.Response(200, json={'frete': [{}], 'error': {'id': -1, 'descricao': 'CNPJ invalido'}})
+
+        lines = []
+        self.assertEqual(run(client(handler), ['01310100', '20040002'], ['1', '2'], 10000, lines.append), 1)
+        self.assertEqual(len(calls), 1)
+        self.assertIn('CNPJ invalido', lines[0])
+
+
+if __name__ == '__main__':
+    unittest.main()

tests/test_large_files.py

@@ -0,0 +1,42 @@
+"""Large sheets: when the original is its own print file, and the format check."""
+import unittest
+
+from app.printjobs import whole_sheet
+from app.scanning import format_matches
+
+ROW = {'id': 'u1', 'name': 'folha.png', 'size': 3 * 1024 ** 3, 'scan_state': 'clean',
+       'purged_at': None, 'expired': False}
+
+
+def sheet(**changes):
+    source = {'kind': 'sheet', 'width_cm': 57, 'length_cm': 500, 'copies': 1}
+    place = {'x_cm': 0, 'y_cm': 0, 'rotation_degrees': 0, 'mirrored': False}
+    for key, value in changes.items():
+        (source if key in source else place)[key] = value
+    return {'uploads': ['u1'], 'production': {'film_width_cm': 57, 'sources': [source], 'placements': [place]}}
+
+
+class WholeSheetTest(unittest.TestCase):
+    def test_a_finished_sheet_placed_whole_is_its_own_print_file(self):
+        self.assertIs(whole_sheet(sheet(), {'u1': ROW}), ROW)
+
+    def test_anything_else_is_prepared_by_hand(self):
+        for changes in ({'copies': 2}, {'kind': 'artwork'}, {'rotation_degrees': 90}, {'mirrored': True},
+                        {'x_cm': 1}, {'width_cm': 50}):
+            with self.subTest(changes=changes):
+                self.assertIsNone(whole_sheet(sheet(**changes), {'u1': ROW}))
+        self.assertIsNone(whole_sheet(sheet(), {'u1': {**ROW, 'name': 'folha.cdr'}}))
+        self.assertIsNone(whole_sheet(sheet(), {'u1': {**ROW, 'scan_state': 'pending'}}))
+        self.assertIsNone(whole_sheet(sheet(), {'u1': {**ROW, 'expired': True}}))
+
+
+class FormatTest(unittest.TestCase):
+    def test_bytes_must_match_the_name(self):
+        self.assertTrue(format_matches('A.PNG', b'\x89PNG\r\n\x1a\n'))
+        self.assertTrue(format_matches('a.tiff', b'MM\x00*'))
+        self.assertFalse(format_matches('a.png', b'%PDF-1.4'))
+        self.assertFalse(format_matches('semextensao', b'\x89PNG\r\n\x1a\n'))
+
+
+if __name__ == '__main__':
+    unittest.main()

tests/test_mercadopago.py

@@ -8,6 +8,7 @@ import hashlib
 import hmac
 import json
 import unittest
+from datetime import datetime, timezone
 
 import httpx
 
@@ -36,6 +37,10 @@ class MercadoPagoTests(unittest.TestCase):
             self.requests.append(request)
             if request.method == 'GET':
                 payment_id = request.url.path.rsplit('/', 1)[-1]
+                if payment_id == '500':
+                    return httpx.Response(500, json={'message': 'internal_error'})
+                if payment_id not in self.payments:
+                    return httpx.Response(404, json={'message': 'Payment not found'})
                 return httpx.Response(200, json=self.payments[payment_id])
             body = json.loads(request.content)
             payment = {'id': 555, 'status': 'pending', 'status_detail': 'pending_waiting_transfer',
@@ -78,6 +83,15 @@ class MercadoPagoTests(unittest.TestCase):
         self.assertEqual(self.requests[-1].headers['authorization'], 'Bearer TEST-token')
         self.assertIsNone(self.mp.parse(json.dumps({'type': 'merchant_order', 'data': {'id': '1'}}).encode()))
 
+    def test_notification_for_an_unknown_payment_is_acknowledged(self):
+        # The panel's "Simular notificação" sends a payment id that does not
+        # exist. Raising would answer 500 and Mercado Pago would retry for ever.
+        body = json.dumps({'id': 43, 'type': 'payment', 'data': {'id': '123456'}}).encode()
+        self.assertIsNone(self.mp.parse(body, {'data.id': '123456', 'type': 'payment'}))
+        # Any other failure still raises, so a real notification is retried.
+        with self.assertRaises(httpx.HTTPStatusError):
+            self.mp.parse(json.dumps({'type': 'payment', 'data': {'id': '500'}}).encode(), {'data.id': '500'})
+
     def test_amounts_outside_brl_centavos_are_not_trusted(self):
         for payment in ({'currency_id': 'USD', 'transaction_amount': 10},
                         {'currency_id': 'BRL', 'transaction_amount': 10.001},
@@ -97,11 +111,20 @@ class MercadoPagoTests(unittest.TestCase):
         request = self.requests[-1]
         body = json.loads(request.content)
         self.assertEqual(request.headers['x-idempotency-key'],
-                         'dtf-quote-11111111-2222-3333-4444-555555555555-pix')
+                         'dtf-quote-11111111-2222-3333-4444-555555555555-pix-1')
         self.assertEqual((body['payment_method_id'], body['transaction_amount']), ('pix', 123.45))
         self.assertEqual(body['external_reference'], '11111111-2222-3333-4444-555555555555')
         self.assertEqual(body['notification_url'], 'https://dtf.example/api/payments/webhook')
         self.assertEqual((created['pix_qr_code'], created['status']), ('000201PIX', 'pending'))
+        # The code expires in 30 minutes, in the format Mercado Pago documents.
+        expires = datetime.fromisoformat(body['date_of_expiration'])
+        self.assertRegex(body['date_of_expiration'], r'^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}-03:00$')
+        self.assertAlmostEqual((expires - datetime.now(timezone.utc)).total_seconds(), 1800, delta=60)
+        self.assertEqual(created['expires_at'], body['date_of_expiration'])
+        # A new code after the last expired is the next attempt, not the same payment.
+        self.mp.create('11111111-2222-3333-4444-555555555555', 12345,
+                       {'mail': 'a@example.test', 'cnpj': '11222333000181'}, {'type': 'pix', 'attempt': 2})
+        self.assertTrue(self.requests[-1].headers['x-idempotency-key'].endswith('-pix-2'))
 
     def test_card_payment_uses_the_browser_token_only(self):
         self.mp.create('q', 1000, {'mail': 'a@example.test', 'cnpj': '11222333000181'},
@@ -116,6 +139,31 @@ class MercadoPagoTests(unittest.TestCase):
                        {'type': 'card', 'token': 'tok_def', 'payment_method_id': 'visa'})
         self.assertNotEqual(self.requests[-1].headers['x-idempotency-key'], first_key)
         self.assertTrue(first_key.startswith('dtf-quote-q-card-'))
+        # 3-D Secure is asked of debit only; the cardholder is the payer.
+        self.assertNotIn('three_d_secure_mode', body)
+        self.mp.create('q', 1000, {'mail': 'a@example.test', 'cnpj': '11222333000181'},
+                       {'type': 'card', 'token': 'tok_deb', 'payment_method_id': 'debmaster',
+                        'payer_document_type': 'CPF', 'payer_document': '12345678909'})
+        debit = json.loads(self.requests[-1].content)
+        self.assertEqual(debit['three_d_secure_mode'], 'optional')
+        self.assertEqual(debit['payer']['identification'], {'type': 'CPF', 'number': '12345678909'})
+        self.assertEqual(body['payer']['identification'], {'type': 'CNPJ', 'number': '11222333000181'})
+        self.mp.create('q', 1000, {'mail': 'a@example.test', 'cnpj': '11222333000181'},
+                       {'type': 'card', 'token': 'tok_iss', 'payment_method_id': 'master', 'issuer_id': '24'})
+        self.assertNotIn('issuer_id', json.loads(self.requests[-1].content))
+        self.assertIsNone(self.mp.create('q', 1000, {'mail': 'a@example.test', 'cnpj': '11222333000181'},
+                                         {'type': 'card', 'token': 'tok_ghi', 'payment_method_id': 'visa'})['challenge'])
+
+    def test_a_card_the_bank_must_confirm_returns_its_challenge(self):
+        def handler(request):
+            return httpx.Response(201, json={'id': 777, 'status': 'pending', 'status_detail': 'pending_challenge',
+                                             'three_ds_info': {'external_resource_url': 'https://acs.bank.example/challenge',
+                                                               'creq': 'eyJjcmVxIjoiMSJ9'}})
+        mp = MercadoPagoPayment('TEST-token', SECRET, transport=httpx.MockTransport(handler), clock=lambda: NOW)
+        created = mp.create('q', 1000, {'mail': 'a@example.test', 'cnpj': '11222333000181'},
+                            {'type': 'card', 'token': 'tok_debit', 'payment_method_id': 'debvisa'})
+        self.assertEqual((created['status'], created['status_detail']), ('pending', 'pending_challenge'))
+        self.assertEqual(created['challenge'], {'url': 'https://acs.bank.example/challenge', 'creq': 'eyJjcmVxIjoiMSJ9'})
 
 
 if __name__ == '__main__':

tests/test_quote_review.py

@@ -0,0 +1,38 @@
+"""Which quotes the Site approves at checkout and which wait for a person."""
+import os
+import unittest
+from unittest import mock
+
+from app.quote_review import review_reason
+
+
+def item(mode='avulsa', metres='2', grade=90, quality='ok', version=2):
+    return {'mode': mode, 'metres': metres, 'grade': grade, 'quality_status': quality,
+            'quality_acknowledged': quality == 'warning', 'production': {'version': version}}
+
+
+class ReviewReasonTest(unittest.TestCase):
+    def reason(self, *items, **env):
+        with mock.patch.dict(os.environ, env):
+            return review_reason({'items': list(items)})
+
+    def test_a_priced_cart_is_approved(self):
+        self.assertIsNone(self.reason(item()))
+        # Accepted resolution warnings and unanalysed art at the full rate too.
+        self.assertIsNone(self.reason(item(quality='warning'), item(grade=0, quality='unverified')))
+
+    def test_large_orders_wait_for_review(self):
+        self.assertIsNone(self.reason(item(metres='30'), item(metres='20')))
+        self.assertEqual(self.reason(item(metres='30'), item(metres='20.1')), 'Pedido acima de 50 m')
+        self.assertEqual(self.reason(item(metres='6'), QUOTE_AUTO_MAX_METRES='5'), 'Pedido acima de 5 m')
+
+    def test_a_discount_the_site_could_not_have_given_waits(self):
+        self.assertEqual(self.reason(item(grade=90, quality='unverified')), 'Nota informada sem análise da arte')
+
+    def test_old_layouts_and_switching_it_off(self):
+        self.assertEqual(self.reason(item(version=1)), 'Montagem antiga')
+        self.assertEqual(self.reason(item(), QUOTE_AUTO_APPROVE='false'), 'Aprovação automática desligada')
+
+
+if __name__ == '__main__':
+    unittest.main()

tests/workflow_test.py

@@ -1,7 +1,7 @@
 """Customer identity, correction and final-file trust boundaries against local stack."""
 from uuid import uuid4
 from urllib.request import urlopen
-from tests.smoke_test import Client, upload_bytes, item_spec
+from tests.smoke_test import Client, approved_quote, upload_bytes, item_spec
 
 def run():
     customer=Client();other=Client();customer.call('/session');other.call('/session')
@@ -9,13 +9,29 @@ def run():
     item=item_spec('file','1.01',0,uid)
     profile={'cnpj':'11222333000181','zap':'11999999999','mail':'workflow-'+uuid4().hex[:8]+'@example.test'}
     q=customer.call('/quotes',{'request_key':str(uuid4()),'customer':profile,'items':[item],'freight':{'service':'pickup'}})
-    customer.call('/operator/quotes/'+q['id']+'/approve',{'items':[item]},operator=True)
+    approved_quote(customer,q,[item])
     order=customer.call('/orders/dev-paid',{'quote_id':q['id']});oid=order['id']
     before=list(customer.jar)[0].value
     password='local-test-password-'+uuid4().hex
     customer.call('/account/register',{'customer':profile,'password':password})
     assert customer.call('/account/me')['customer']['mail']==profile['mail']
-    assert customer.call('/customer/orders')['orders'][0]['id']==oid
+    assert [e['id'] for e in customer.call('/customer/orders')['items'] if e['kind']=='order'][0]==oid
+    # The list filters, pages and counts by group.
+    listing=customer.call('/customer/orders?status=prod&page=1&size=1')
+    assert listing['counts']['prod']>=1 and listing['total']==listing['counts']['prod'] and len(listing['items'])==1, listing
+    assert customer.call('/customer/orders?status=fin')['items']==[]
+    assert customer.call('/customer/orders?number='+str(order['number']))['items'][0]['id']==oid
+    # The account's details change; the CNPJ does not, and e-mail and password need the password.
+    address={'recipient':'Workflow Ltda','street':'Rua de Teste','number':'10','complement':'',
+             'district':'Centro','city':'Franca','state':'SP','postal_code':'14400000'}
+    saved=customer.call('/account/profile',{'zap':'(16) 98888-7777','address':address})['customer']
+    assert saved['zap']=='16988887777' and saved['cnpj']==profile['cnpj'] and saved['address']['city']=='Franca'
+    assert customer.call('/account/me')['customer']['address']['postal_code']=='14400000'
+    customer.call('/account/profile',{'zap':'16988887777','cnpj':'00000000000000'},expected=422)
+    customer.call('/account/email',{'email':'x-'+profile['mail'],'password':'wrong-password'},expected=401)
+    customer.call('/account/password',{'current':'wrong-password','new':'another-password-123'},expected=401)
+    other.call('/account/profile',{'zap':'16988887777'},expected=401)
+    print('PASS: customer order list filters and pages; account details change, CNPJ does not')
     # Email/CNPJ do not grant ownership; only current guest session is migrated.
     other.call('/customer/orders/'+oid,expected=404)
     other.call('/account/login',{'email':profile['mail'],'password':'wrong-password'},expected=401)
@@ -72,7 +88,7 @@ def run():
     old_cookie=list(other.jar)[0].value
     other.call('/account/logout',{})
     cookie.value=old_cookie;revoked.jar.set_cookie(cookie);revoked.call('/customer/orders',expected=401)
-    other.call('/session');assert other.call('/customer/orders')['orders']==[]
+    other.call('/session');assert other.call('/customer/orders')['items']==[]
     print('PASS: logout revokes server session and signed-out visitors cannot see account orders')
 
 if __name__=='__main__':run()

web/cart.js

@@ -1,5 +1,11 @@
-/* Browser-local cart recovery. Files are stored only for an unfinished cart, for 24h. */
+/* Browser-local cart recovery. Files are stored only for an unfinished cart, for 24h.
+   Only the items are kept: the customer's details and address are typed again
+   after a reload or a closed tab, so nothing personal stays in the browser. */
 (() => {
+  // A browser may put back what was typed before the reload without telling
+  // the page, which then shows values it does not know and cannot pay with.
+  const CAMPOS=['fCnpj','fZap','fMail','cepIn','eNome','eRua','eNum','eComp','eBairro','eCidade','eUf'];
+  for(const id of CAMPOS)if($(id))$(id).value='';
   let database,scope,timer,restoring=true;
   let signedOut=false;
   window.addEventListener('dtf-private-data-cleared',()=>{signedOut=true;clearTimeout(timer);pedido=[];itemAtual=null;folhas=[];artes=[];});
@@ -11,8 +17,8 @@
     const items=[...pedido,...(itemAtual?[itemAtual]:[])];
     try{
       if(!items.length){await transaction('readwrite',store=>store.delete(scope));return;}
-      await transaction('readwrite',store=>store.put({items,customer:{...cliente},delivery:{...entrega},expires:Date.now()+86400000},scope));
-      notice.textContent='Carrinho salvo neste navegador por 24 horas. Você pode remover itens e adicionar outros após recarregar.';
+      await transaction('readwrite',store=>store.put({items,expires:Date.now()+86400000},scope));
+      notice.textContent='';
     }catch(error){notice.textContent='Não foi possível salvar o carrinho neste navegador. Mantenha esta página aberta até enviar o pedido.';}
   }
   window.dtfClearCart=async()=>{clearTimeout(timer);if(database&&scope)await transaction('readwrite',store=>store.delete(scope));notice.textContent='';};
@@ -30,19 +36,26 @@
       for(const key of records){const value=await transaction('readonly',store=>store.get(key));if(value.expires<Date.now())await transaction('readwrite',store=>store.delete(key));}
       const saved=await transaction('readonly',store=>store.get(scope));
       if(saved && !pedido.length && !itemAtual){
-        pedido=saved.items;cliente=saved.customer;entrega=saved.delivery;
-        // Freight must be quoted again; restored browser values are never final.
-        if(entrega.tipo==='frete'){entrega.cotado=false;entrega.valor=0;}
-        for(const [id,key] of [['fCnpj','cnpj'],['fZap','zap'],['fMail','mail']])$(id).value=cliente[key];
-        $('cepIn').value=entrega.cep;
-        entrega.end=entrega.end||{};
-        for(const [id,key] of [['eNome','nome'],['eRua','rua'],['eNum','num'],['eComp','comp'],
-                               ['eBairro','bairro'],['eCidade','cidade'],['eUf','uf']])$(id).value=entrega.end[key]||'';
+        pedido=saved.items;
         $('atual').style.display='none';pintaEntrega();
         notice.textContent='Carrinho recuperado. Remova e adicione novamente um item se precisar alterar sua montagem.';
-      }else{
-        const account=await window.dtfApi('/account/me');
-        if(account.customer && !cliente.mail){cliente={...account.customer};for(const [id,key] of [['fCnpj','cnpj'],['fZap','zap'],['fMail','mail']])$(id).value=cliente[key];pintaEntrega();}
+      }
+      // A signed-in customer's details come from the account, with the saved
+      // delivery address, whether or not a cart was recovered.
+      const account=await window.dtfApi('/account/me');
+      const c=account.customer;
+      if(c && !cliente.mail){
+        cliente={cnpj:c.cnpj,zap:c.zap,mail:c.mail};
+        // The fields' own input handlers format them, as if typed.
+        for(const [id,key] of [['fCnpj','cnpj'],['fZap','zap'],['fMail','mail']]){$(id).value=cliente[key];$(id).dispatchEvent(new Event('input'));}
+        const a=c.address;
+        if(a && !entrega.cep){
+          entrega.cep=a.postal_code;
+          entrega.end={nome:a.recipient,rua:a.street,num:a.number,comp:a.complement||'',bairro:a.district,cidade:a.city,uf:a.state};
+          $('cepIn').value=a.postal_code.replace(/^(\d{5})(\d{3})$/,'$1-$2');
+          for(const [id,key] of [['eNome','nome'],['eRua','rua'],['eNum','num'],['eComp','comp'],['eBairro','bairro'],['eCidade','cidade'],['eUf','uf']])$(id).value=entrega.end[key];
+        }
+        pintaEntrega();
       }
     }catch(error){notice.textContent='Recuperação de carrinho indisponível; o pedido ainda pode ser feito nesta sessão.';}
     finally{restoring=false;}

web/checkout.js

@@ -1,7 +1,13 @@
-/* Checkout bridge only: approved commercial functions in web/index.html stay intact. */
+/* Checkout bridge only: approved commercial functions in web/index.html stay intact.
+   The cart sends the order; the quote is paid on its own page (/pagamento). */
 (() => {
   const status = document.getElementById('checkoutStatus');
   const actions = document.getElementById('checkoutActions');
+  const resumo = document.getElementById('pagResumo');
+  const naPagina = () => ['pagamento','pix'].includes(document.documentElement.dataset.rota);
+  const naPix = () => document.documentElement.dataset.rota === 'pix';
+  let shownCart = null;
+  let pixClock = null;
   let busy = false;
   let draftId = localStorage.getItem('dtf-quote');
   let requestKey = localStorage.getItem('dtf-request-key');
@@ -9,7 +15,7 @@
   let quotedCart = localStorage.getItem('dtf-quote-cart');
   let refreshVersion = 0;
   function cartSnapshot() {
-    const items=[...pedido,...(itemAtual?[itemAtual]:[])];
+    const items=itensAPagar();
     return JSON.stringify({customer:cliente,delivery:entrega,items:items.map(item=>({
       mode:item.modo,metres:item.metros,grade:item.nota,production:item.production,
       quality:item.qualityStatus,
@@ -39,43 +45,214 @@
   ready.then(session=>{
     window.dtfUploadMaxBytes=session.max_upload_bytes;
     const limit=document.getElementById('zLimite');
-    if(limit)limit.textContent='Até '+(session.max_upload_bytes/1048576).toFixed(0)+
-      ' MB por arquivo enquanto a verificação de segurança para arquivos grandes é preparada.';
+    if(limit)limit.textContent='Até '+(session.max_upload_bytes/1073741824).toFixed(0)+' GB por arquivo.';
   }).catch(()=>{});
   window.dtfSessionReady=ready;
   window.dtfApi=api;
   ready.catch(error => { status.textContent = error.message; });
   function message(text) { status.textContent = text; }
-  function button(label, handler) {
+  function button(label, handler, into = actions, className = 'pagBtn') {
     const el = document.createElement('button');
+    el.type = 'button';
+    el.className = className;
     el.textContent = label;
-    el.style.cssText = 'margin:8px 8px 0 0;padding:8px 14px;cursor:pointer';
     el.onclick = handler;
-    actions.append(el);
+    into.append(el);
     return el;
   }
-  async function upload(file) {
-    const session=await ready;
-    return window.dtfUpload(file,{api,progress:message,scope:session.cart_scope});
+  function node(tag, text, className) {
+    const el=document.createElement(tag);
+    if (text!=null) el.textContent=text;
+    if (className) el.className=className;
+    return el;
   }
+  // What the customer is paying for, from the server's approval.
+  function pintaResumo(quote) {
+    const approved = quote ? quote.approved : null;
+    resumo.hidden = !approved;
+    if (!approved) { resumo.replaceChildren(); return; }
+    const linha = (label, value, className='l') => {
+      const row=document.createElement('div'); row.className=className;
+      const name=document.createElement('span'); name.textContent=label;
+      const amount=document.createElement('b'); amount.textContent=value;
+      row.append(name,amount); return row;
+    };
+    const rows = approved.items.map(item => linha(
+      (MODOS[item.mode]?.tit || item.mode)+' · '+fmtM(Number(item.billed_metres))+' m', rs(item.total_cents/100)));
+    const pickup = approved.freight.service === 'pickup';
+    const prazo = approved.freight.days ? ' · até '+approved.freight.days+' dias úteis' : '';
+    rows.push(linha(pickup ? 'Retirada em Franca' : 'Frete'+prazo,
+      approved.freight.total_cents ? rs(approved.freight.total_cents/100) : 'Grátis'));
+    rows.push(linha('Total', rs(approved.total_cents/100), 'tot'));
+    resumo.replaceChildren(node('h4','Resumo do pedido'), ...rows);
+  }
+  function esqueletoPagamento() {
+    const linhas=['skel skelLinha','skel skelLinha','skel skelLinha curta'].map(c=>node('div',null,c));
+    resumo.hidden=false; resumo.replaceChildren(node('h4','Resumo do pedido'),...linhas);
+    actions.replaceChildren(node('div',null,'skel skelLinha curta'),node('div',null,'skel skelBloco'));
+  }
+  function semPedido() {
+    pintaResumo(null);
+    actions.replaceChildren();
+    message('Nenhum pedido aguardando pagamento.');
+    button('Ir para o carrinho', () => vaiPara(CARRINHO));
+  }
+  // Files start uploading as soon as they are in the cart, so a sheet of
+  // several GB is on its way while the customer fills in the order. The
+  // checkout waits for whatever is still going.
+  const envios=new Map();
+  const chaveArquivo=f=>[f.name,f.size,f.lastModified].join('|');
+  function enviar(file) {
+    const k=chaveArquivo(file);
+    let e=envios.get(k);
+    if (!e) {
+      e={file, sent:0, done:false, failed:null};
+      e.promise=(async()=>{
+        const session=await ready;
+        return window.dtfUpload(file,{api,scope:session.cart_scope,progress:()=>{},
+          onBytes:n=>{e.sent=n;pintaEnvio();}});
+      })();
+      e.promise.then(()=>{e.done=true;falhas.delete(k);pintaEnvio();},
+        error=>{envios.delete(k);falhas.set(k,{file,error});pintaEnvio();});
+      envios.set(k,e);
+    }
+    return e.promise;
+  }
+  // A failed upload is shown and waits for the customer, never retried behind
+  // their back: a file the check refused would fail again on every change.
+  const falhas=new Map();
+  function tentaDeNovo() {
+    const arquivos=[...falhas.values()].map(f=>f.file);
+    falhas.clear();
+    arquivos.forEach(f=>enviar(f).catch(()=>{}));
+    pintaEnvio();
+  }
+  const arquivosDoCarrinho=()=>[...pedido.filter(it=>it.marcado!==false),...(busy&&itemAtual?[itemAtual]:[])].flatMap(it=>it.localFiles||[]);
+  const gb=n=>(n/1073741824).toLocaleString('pt-BR',{maximumFractionDigits:1})+' GB';
+  const mb=n=>n>=1073741824 ? gb(n) : Math.round(n/1048576)+' MB';
+  // Where the uploads stand, and roughly how long is left from the recent speed.
+  const amostras=[];
+  function estadoEnvio() {
+    const files=arquivosDoCarrinho(); if(!files.length) return null;
+    let total=0, sent=0, pendentes=0;
+    for (const f of files) {
+      const e=envios.get(chaveArquivo(f));
+      total+=f.size; sent+=e ? Math.min(e.sent,f.size) : 0;
+      if (!e || !e.done) pendentes++;
+    }
+    const agora=Date.now();
+    amostras.push([agora,sent]); while(amostras.length>2 && agora-amostras[0][0]>15000) amostras.shift();
+    const [t0,s0]=amostras[0], taxa=agora>t0 ? (sent-s0)/((agora-t0)/1000) : 0;
+    const fase=!pendentes ? 'pronto' : sent>=total ? 'verificando' : 'enviando';
+    return {total, sent, fase, pct:Math.floor(sent/total*100),
+            restante: fase==='enviando' && taxa>0 ? (total-sent)/taxa : null};
+  }
+  const falta=s=>s<60 ? 'falta menos de 1 min' : 'faltam cerca de '+duracao(s);
+  // The time left, measured from the upload's own speed; until there is a
+  // measure, a range from the size.
+  const restante=e=>e.restante!=null ? falta(e.restante) : 'estimativa '+faixaEnvio(e.total-e.sent);
+  function textoEnvio(e) {
+    if (!e) return '';
+    if (e.fase==='pronto') return 'Arquivos enviados';
+    if (e.fase==='verificando') return 'Arquivos enviados · verificando a segurança…';
+    return 'Enviando seus arquivos · '+restante(e);
+  }
+  function pintaEnvio() {
+    const e=estadoEnvio(), texto=textoEnvio(e);
+    const el=document.getElementById('envioArq');
+    const falhou=arquivosDoCarrinho().map(f=>falhas.get(chaveArquivo(f))).filter(Boolean);
+    const topo=document.getElementById('cartEnvio');
+    if (falhou.length) {
+      if (el) {
+        el.replaceChildren(document.createTextNode('Não foi possível enviar '+falhou[0].file.name+': '+
+          (falhou[0].error?.message||'erro no envio').replace(/\.$/,'')+(falhou.length>1?' (e mais '+(falhou.length-1)+')':'')+'. '));
+        const b=document.createElement('button'); b.type='button'; b.className='envioDeNovo'; b.textContent='Tentar de novo';
+        b.onclick=tentaDeNovo; el.append(b);
+        el.classList.remove('ok'); el.classList.add('erro');
+      }
+      if (topo) topo.textContent='· falha no envio';
+      return;
+    }
+    if (el) el.classList.remove('erro');
+    if (el) {
+      el.replaceChildren();
+      if (e && e.fase!=='pronto') {
+        const barra=document.createElement('div'); barra.className='envioBarra';
+        const i=document.createElement('i'); i.style.width=(e.fase==='verificando'?100:e.pct)+'%'; barra.append(i);
+        el.append(barra);
+      }
+      if (e?.fase==='pronto') el.insertAdjacentHTML('beforeend', icone('okCirculo'));
+      if (texto) el.append(document.createTextNode(texto));
+      if (e?.fase==='enviando') {
+        const nota=document.createElement('small'); nota.className='envioNota';
+        nota.textContent='O tempo depende da velocidade da sua internet. Mantenha a página aberta.';
+        el.append(nota);
+      }
+      el.classList.toggle('ok', e?.fase==='pronto');
+    }
+    // Visible on every page while it runs.
+    if (topo) topo.textContent = !e || e.fase==='pronto' ? '' : e.fase==='verificando' ? '· verificando' : e.restante!=null ? '· '+duracao(e.restante) : '· enviando';
+    if (busy && texto) {
+      message(texto);
+      $('bPagarTx').textContent = e && e.fase!=='pronto' ? (e.fase==='verificando' ? 'Verificando os arquivos…' : 'Enviando arquivos… '+restante(e)) : $('bPagarTx').textContent;
+    }
+  }
+  // Leaving the page pauses an upload; it resumes, but the customer is warned.
+  window.addEventListener('beforeunload',event=>{
+    const e=estadoEnvio();
+    if (e && e.fase==='enviando') { event.preventDefault(); event.returnValue=''; }
+  });
+  // Only what is in the cart: the item on the product page may still change.
+  window.addEventListener('dtf-cart-changed',()=>{
+    arquivosDoCarrinho().forEach(f=>{ if(!falhas.has(chaveArquivo(f))) enviar(f).catch(()=>{}); });
+    pintaEnvio();
+  });
+  async function upload(file) {
+    return enviar(file);
+  }
+  // The cart's package: billed metres and value. The charged freight is
+  // quoted again by the server from the approved items.
+  const pacote = () => {
+    const items=itensAPagar();
+    return {metres:items.reduce((t,it)=>t+(it.cob||0),0), cents:Math.round(items.reduce((t,it)=>t+(it.total||0),0)*100)};
+  };
+  let freightQuoted = null;
   window.dtfFreight = async () => {
     const cep = entrega.cep;
+    const service = (await ready).freight_service;
+    if (!service) {
+      $('cepMsg').textContent = 'A entrega ainda não está disponível. Escolha a retirada em Franca.';
+      return;
+    }
+    const {metres, cents} = pacote();
+    if (!metres) { $('cepMsg').textContent = 'Adicione um item ao pedido para cotar o frete.'; return; }
+    $('cepMsg').textContent = 'Cotando o frete…';
     try {
-      const result = await api('/freight',{service:'mock-standard',postal_code:cep});
+      const result = await api('/freight',{service,postal_code:cep,metres:metres.toFixed(2),declared_cents:cents});
       if (entrega.cep !== cep || entrega.tipo !== 'frete') return;
       entrega.valor = result.total_cents/100;
+      entrega.dias = result.days || null;
       entrega.cotado = true;
-      $('cepMsg').textContent = 'Frete estimado: '+rs(entrega.valor)+'.';
+      freightQuoted = JSON.stringify(pacote());
+      $('cepMsg').textContent = '';
       pintaEntrega();
     } catch(error) { $('cepMsg').textContent = error.message; }
   };
+  // A different package is a different freight: quote it again.
+  window.addEventListener('dtf-cart-changed',()=>{
+    if (entrega.tipo==='frete' && entrega.cotado && freightQuoted && freightQuoted!==JSON.stringify(pacote())) {
+      entrega.cotado=false; freightQuoted=null; window.dtfFreight();
+    }
+  });
   window.dtfCheckout = async () => {
     if (busy) return;
-    if (draftId) { await refresh(); status.scrollIntoView({behavior:'smooth',block:'nearest'}); return; }
+    // The cart that was sent goes straight to its payment; a changed cart is sent again.
+    if (draftId && quotedCart === cartSnapshot()) { await refresh(true); return; }
+    if (draftId) clearDraft();
     if (!clienteOk() || !entrega.cotado) return;
     if (!enderecoOk()) return message('Preencha o endereço de entrega.');
     if (!cartPodeEnviar()) return message('Revise a qualidade e confirme a ressalva de cada item antes de enviar o pedido.');
-    const cart = [...pedido,...(itemAtual?[itemAtual]:[])];
+    const cart = itensAPagar();
     if (!cart.length) return message('Adicione um item ao pedido.');
     const initialCart=cartSnapshot();
     busy = true;
@@ -84,6 +261,7 @@
       await ready;
       if((await api('/session')).cart_scope !== (await ready).cart_scope) throw new Error('Sua conta ou sessão mudou. Recarregue a página antes de enviar o carrinho.');
       const items=[];
+      pintaEnvio();
       for (const item of cart) {
         if (!item.localFiles?.length) throw new Error('Selecione novamente os arquivos deste item.');
         const uploads=[];
@@ -95,7 +273,9 @@
             upload_id:uploads[index],...source}))},
           quality_status:item.qualityStatus,quality_acknowledged:item.qualityAcknowledged});
       }
-      const content = {customer:{...cliente},items,freight:{service:entrega.tipo==='retira'?'pickup':'mock-standard',postal_code:entrega.tipo==='retira'?'':entrega.cep}};
+      const service = entrega.tipo==='retira' ? 'pickup' : (await ready).freight_service;
+      if (!service) throw new Error('A entrega ainda não está disponível. Escolha a retirada em Franca.');
+      const content = {customer:{...cliente},items,freight:{service,postal_code:entrega.tipo==='retira'?'':entrega.cep}};
       const destination = destinoApi();
       if (destination) content.destination = destination;
       if (cartSnapshot()!==initialCart) throw new Error('O carrinho mudou durante o envio. Confira os itens e envie de novo.');
@@ -108,20 +288,31 @@
       const quote = await api('/quotes',{request_key:requestKey,...content});
       quotedCart=initialCart;localStorage.setItem('dtf-quote-cart',quotedCart);
       draftId=quote.id; localStorage.setItem('dtf-quote',draftId);
-      await refresh();
-      status.scrollIntoView({behavior:'smooth',block:'nearest'});
+      await refresh(true);
     } catch(error) { message(error.message); }
     finally { busy=false; pintaEntrega(); }
   };
-  async function refresh() {
-    if (!draftId) return;
+  // `go`: the customer asked to pay, so the cart page moves to the payment page.
+  async function refresh(go) {
+    if (!naPagina()) { if (!go || !draftId) return; }
+    else if (!draftId) { semPedido(); return; }
     const version=++refreshVersion, shownId=draftId;
+    if (naPagina() && !actions.children.length) esqueletoPagamento();
     try {
       await ready;
       const quote=await api('/quotes/'+shownId);
       if(version!==refreshVersion || draftId!==shownId) return;
+      if (!naPagina()) { message(''); vaiPara(PAGAMENTO); return; }
+      shownCart=cartSnapshot();
+      clearInterval(pixClock);
+      unmountCard();
       actions.replaceChildren();
-      if (quote.status!=='paid' && (!quotedCart || quotedCart!==cartSnapshot())) {
+      message('');
+      pintaResumo(quote);
+      document.querySelector('.pagVolta').hidden = quote.status==='paid';
+      if (quote.status==='paid') { confirmado(quote); return; }
+      if (naPix() && quote.status!=='approved') { vaiPara(PAGAMENTO); return; }
+      if (!quotedCart || quotedCart!==cartSnapshot()) {
         message('O carrinho mudou ou não está disponível neste navegador. A cotação anterior continua separada; envie o carrinho atual para uma nova revisão.');
         button('Enviar carrinho atual',()=>{clearDraft();window.dtfCheckout();});
         return;
@@ -131,46 +322,30 @@
           ? 'Arquivos enviados. No Kanban, confira metragem e nota e aprove a cotação '+draftId.slice(0,8)+'.'
           : 'Arquivos enviados. Nossa equipe está conferindo a cotação '+draftId.slice(0,8)+'; o valor final aparece aqui em seguida.');
       } else if (quote.status==='approved') {
-        message('Total validado no servidor: '+rs(quote.approved.total_cents/100)+' · inclui frete. Cotação válida por 24 horas.');
         if ((await ready).payment_provider === 'mercadopago') {
-          button('Pagar com PIX',async event=>{
-            if (!quotedCart || quotedCart!==cartSnapshot()) { await refresh(); return; }
-            event.target.disabled=true;
-            try { showPix(await api('/payments/intent',{quote_id:draftId,method:{type:'pix'}})); }
-            catch(error) { message(error.message); event.target.disabled=false; }
-          });
-          if ((await ready).payment_public_key) {
-            button('Pagar com cartão',async event=>{
-              if (!quotedCart || quotedCart!==cartSnapshot()) { await refresh(); return; }
-              event.target.disabled=true;
-              try { await showCard(quote.approved.total_cents); }
-              catch(error) { message(error.message); event.target.disabled=false; }
-            });
-          }
+          if (naPix()) await paginaPix(quote, version);
+          else await escolhaPagamento(quote, version);
           return;
         }
         if ((await ready).environment !== 'local') {
           message('Cotação revisada. O pagamento online ainda não está disponível.');
           return;
         }
+        // Local stack only: the simulated payment.
+        message('Total validado no servidor: '+rs(quote.approved.total_cents/100)+' · inclui frete. Cotação válida por 24 horas.');
         button('Criar pedido de teste',async event=>{
           if (!quotedCart || quotedCart!==cartSnapshot()) { await refresh(); return; }
           event.target.disabled=true;
           try {
             const order=await api('/orders/dev-paid',{quote_id:draftId});
-            pedido=[]; itemAtual=null; limpaPaineis();
-            await window.dtfClearCart?.();
+            await pagos();
             message('Pedido #'+order.number+' criado e disponível no Kanban.');
             await refresh();
           } catch(error) { message(error.message); event.target.disabled=false; }
         });
-      } else if (quote.status==='paid') {
-        const STAGES={rec:'arte recebida',tra:'arte tratada',fil:'na fila de impressão',imp:'imprimindo',cor:'aguardando correção',fin:'finalizado'};
-        message('Pedido #'+quote.order.number+' · '+(STAGES[quote.order.state]||quote.order.state)+'.');
-        button('Novo pedido',()=>{clearDraft();location.assign('/');});
       } else {
-        message('Cotação expirada. Envie o carrinho para uma nova revisão.');
-        button('Nova cotação',clearDraft);
+        message('Cotação expirada. Envie o carrinho de novo para pagar.');
+        button('Voltar ao carrinho',()=>{clearDraft();vaiPara(CARRINHO);});
       }
     } catch(error) {
       if(version!==refreshVersion || draftId!==shownId) return;
@@ -179,40 +354,149 @@
       button('Limpar referência e tentar de novo',clearDraft);
     }
   }
-  // PIX: the provider's QR code and copy-and-paste code. The order is created
-  // by the provider's notification, not by this page, so the page only waits.
-  let pixTimer=null;
-  function showPix(intent) {
-    actions.replaceChildren();
-    if (!intent.pix_qr_code) { message('Não foi possível gerar o PIX. Tente de novo em instantes.'); return; }
-    message('Pague o PIX de '+rs(intent.total_cents/100)+'. O pedido entra na produção assim que o pagamento for confirmado.');
-    if (intent.pix_qr_code_base64) {
-      const img=document.createElement('img');
-      img.src='data:image/png;base64,'+intent.pix_qr_code_base64;
-      img.alt='QR code do PIX';img.width=220;img.height=220;img.style.display='block';
-      actions.append(img);
-    }
-    const code=document.createElement('input');
-    code.readOnly=true;code.value=intent.pix_qr_code;code.style.cssText='width:100%;margin-top:8px;padding:8px';
-    actions.append(code);
-    button('Copiar código PIX',async()=>{ try{ await navigator.clipboard.writeText(intent.pix_qr_code); message('Código copiado.'); }catch(_){ code.select(); } });
-    clearInterval(pixTimer);
-    pixTimer=setInterval(async()=>{
+  // The order is created by Mercado Pago's notification, never by this page,
+  // so after paying the page only waits for the order to exist.
+  let waitTimer=null;
+  function waitForOrder() {
+    clearInterval(waitTimer);
+    waitTimer=setInterval(async()=>{
       try {
         const quote=await api('/quotes/'+draftId);
         if (quote.status==='paid') {
-          clearInterval(pixTimer);
-          pedido=[]; itemAtual=null; limpaPaineis();
-          await window.dtfClearCart?.();
+          clearInterval(waitTimer);
+          await pagos();
           await refresh();
+        } else if (quote.payment?.status==='rejected') {
+          // Refused after the bank's confirmation or the provider's review.
+          clearInterval(waitTimer);
+          await refresh();
+          message('Pagamento recusado. Tente de novo ou escolha outra forma de pagamento.');
         }
       } catch(_) {}
-    },5000);
+    },3000);
   }
+  // 3-D Secure: the bank's own page, opened by posting its request in a frame.
+  function showChallenge(challenge, into) {
+    unmountCard();
+    const frame=document.createElement('iframe');
+    frame.name='confirmacaoBanco'; frame.title='Confirmação do banco'; frame.className='desafio';
+    const form=document.createElement('form');
+    form.method='POST'; form.action=challenge.url; form.target=frame.name;
+    const input=document.createElement('input');
+    input.type='hidden'; input.name='creq'; input.value=challenge.creq;
+    form.append(input);
+    into.replaceChildren(node('p','Confirme o pagamento na página do seu banco, abaixo.','pagNota'),frame,form);
+    form.submit();
+    form.remove();
+  }
+  function confirmado(quote) {
+    clearInterval(waitTimer);
+    const box=node('div',null,'confirmado');
+    const titulo=node('h4','Pagamento confirmado');
+    titulo.insertAdjacentHTML('afterbegin', icone('okCirculo'));
+    box.append(titulo,
+      node('p','Pedido #'+quote.order.number+' recebido e enviado para a produção. Você acompanha cada etapa em Meus pedidos.'));
+    button('Ver meus pedidos',()=>location.assign('/conta/pedidos?order='+quote.order.id),box);
+    actions.append(box);
+  }
+  const cartOk=()=>!!quotedCart && quotedCart===cartSnapshot();
+  // What was paid leaves the cart; unchecked items stay for another order.
+  async function pagos() {
+    pedido=pedido.filter(it=>it.marcado===false); itemAtual=null; limpaPaineis();
+    if (pedido.length) pintaPedido(); else await window.dtfClearCart?.();
+  }
+
+  // Paying: card (the default, paid on this page) or PIX (paid on its own page).
+  async function escolhaPagamento(quote, version) {
+    const session=await ready;
+    const opcoes=[...(session.payment_public_key?[['credito','Cartão de crédito'],['debito','Cartão de débito']]:[]),['pix','PIX']];
+    let escolhido=opcoes[0][0];
+    const grupo=node('div',null,'metodos');
+    grupo.setAttribute('role','radiogroup'); grupo.setAttribute('aria-label','Forma de pagamento');
+    const area=node('div',null,'area');
+    const radios=opcoes.map(([key,label])=>{
+      const el=button(label,()=>{ if(escolhido!==key){ escolhido=key; pinta(); } },grupo,'metodo');
+      el.setAttribute('role','radio'); el.dataset.metodo=key;
+      el.insertAdjacentHTML('afterbegin', icone(key==='pix'?'qrcode':'cartao'));
+      return el;
+    });
+    actions.append(node('h4','Forma de pagamento'),grupo,area);
+    async function pinta() {
+      radios.forEach(el=>el.setAttribute('aria-checked',String(el.dataset.metodo===escolhido)));
+      unmountCard(); area.replaceChildren(); message('');
+      if (escolhido!=='pix') { await showCard(quote.approved, area, version, escolhido); return; }
+      area.append(node('p','Clique em Pagar para gerar o QR code do PIX.','pagNota'));
+      button('Pagar',async event=>{
+        if (!cartOk()) { await refresh(); return; }
+        event.target.disabled=true;
+        try {
+          await api('/payments/intent',{quote_id:draftId,method:{type:'pix'}});
+          vaiPara(PAGAMENTO_PIX);
+        } catch(error) { message(error.message); event.target.disabled=false; }
+      },area);
+    }
+    await pinta();
+  }
+
+  // The PIX page. The intent is idempotent on the quote, so reopening this
+  // page shows the same QR code instead of creating another charge.
+  async function paginaPix(quote, version) {
+    let intent;
+    try { intent=await api('/payments/intent',{quote_id:draftId,method:{type:'pix'}}); }
+    catch(error) {
+      if (version!==refreshVersion) return;
+      message(error.message);
+      button('Escolher outra forma de pagamento',()=>vaiPara(PAGAMENTO),actions,'pagBtn sec');
+      return;
+    }
+    if (version!==refreshVersion) return;
+    if (!intent.pix_qr_code) { message('Não foi possível gerar o PIX. Tente de novo em instantes.'); return; }
+    const box=node('div',null,'pixBox');
+    box.append(node('h4','Pague com PIX'),
+      node('p','Abra o app do seu banco, escolha pagar com PIX e leia o QR code ou cole o código abaixo.','pagNota'));
+    if (intent.pix_qr_code_base64) {
+      const img=document.createElement('img');
+      img.src='data:image/png;base64,'+intent.pix_qr_code_base64;
+      img.alt='QR code do PIX';img.width=240;img.height=240;
+      box.append(img);
+    }
+    const linha=node('div',null,'codigo');
+    const code=document.createElement('input');
+    code.readOnly=true;code.value=intent.pix_qr_code;code.setAttribute('aria-label','Código PIX copia e cola');
+    linha.append(code);
+    const copiar=button('Copiar código',async()=>{
+      try{ await navigator.clipboard.writeText(intent.pix_qr_code);
+        copiar.replaceChildren(); copiar.insertAdjacentHTML('beforeend', icone('ok')+'<span>Código copiado</span>'); }
+      catch(_){ code.select(); }
+    },linha);
+    copiar.insertAdjacentHTML('afterbegin', icone('copiar'));
+    const prazo=node('p',null,'prazo');
+    prazo.insertAdjacentHTML('afterbegin', icone('relogio'));
+    const prazoTx=node('span'); prazo.append(prazoTx);
+    box.append(linha,prazo,node('p','Aguardando a confirmação do pagamento…','aguarda'));
+    actions.append(box);
+    waitForOrder();
+    // The code stops working when it expires; a new one is a click away.
+    const fim=Date.parse(intent.expires_at);
+    if (!Number.isFinite(fim)) { prazo.remove(); return; }
+    const tick=()=>{
+      const s=Math.max(0,Math.ceil((fim-Date.now())/1000));
+      prazoTx.textContent='Pague em '+String(Math.floor(s/60)).padStart(2,'0')+':'+String(s%60).padStart(2,'0');
+      if (s>0) return;
+      clearInterval(pixClock);
+      const fimBox=node('div',null,'pixBox');
+      fimBox.append(node('h4','O código PIX expirou'),
+        node('p','Gere um novo código para pagar. O anterior não pode mais ser pago.','pagNota'));
+      button('Gerar novo PIX',()=>refresh(),fimBox);
+      actions.replaceChildren(fimBox);
+    };
+    tick();
+    pixClock=setInterval(tick,1000);
+  }
+
   // Card: Mercado Pago's own form (Card Payment Brick). The card is typed into
   // Mercado Pago's secure fields and becomes a one-time token; the number never
-  // reaches this page's code or our server. As with PIX, the order is created
-  // by the provider's notification, so the page only waits for it.
+  // reaches this page's code or our server.
   let sdkLoading=null;
   function loadMercadoPago() {
     if (window.MercadoPago) return Promise.resolve();
@@ -225,33 +509,64 @@
     });
     return sdkLoading;
   }
+  // The cardholder's document as the card form collected it.
+  function cardholder(id) {
+    const number=String(id?.number||'').replace(/\D/g,'');
+    const type=String(id?.type||'').toUpperCase();
+    return ['CPF','CNPJ'].includes(type) && /^[0-9]{11,14}$/.test(number)
+      ? {payer_document_type:type, payer_document:number} : {};
+  }
   let cardBrick=null;
-  async function showCard(totalCents) {
-    await loadMercadoPago();
-    const session=await ready;
-    actions.replaceChildren();
-    const holder=document.createElement('div');
+  function unmountCard() {
+    if (cardBrick) { try { cardBrick.unmount(); } catch(_) {} cardBrick=null; }
+  }
+  async function showCard(approved, into, version, tipo) {
+    const holder=node('div');
     holder.id='cardPaymentBrick';
-    holder.style.cssText='max-width:520px;margin-top:8px';
-    actions.append(holder);
-    message('Pagamento com cartão: '+rs(totalCents/100)+'.');
-    if (cardBrick) { try { await cardBrick.unmount(); } catch(_) {} }
+    const espera=node('div',null,'skel skelBloco');
+    into.append(espera,holder);
+    try { await loadMercadoPago(); }
+    catch(error) { espera.remove(); message(error.message); return; }
+    const session=await ready;
+    // The customer may have switched to PIX, or the page re-rendered, meanwhile.
+    if (!holder.isConnected || version!==refreshVersion) return;
+    unmountCard();
     const mp=new window.MercadoPago(session.payment_public_key,{locale:'pt-BR'});
     cardBrick=await mp.bricks().create('cardPayment','cardPaymentBrick',{
-      initialization:{amount:totalCents/100, payer:{email:cliente.mail}},
-      customization:{paymentMethods:{maxInstallments:12}},
+      initialization:{amount:approved.total_cents/100, payer:{email:approved.customer.mail}},
+      // Each option takes only its kind of card; debit is paid at once.
+      customization:{paymentMethods:tipo==='debito'
+          ? {maxInstallments:1,types:{excluded:['credit_card']}}
+          : {maxInstallments:12,types:{excluded:['debit_card']}},
+        // The option above already names the card; the form's own title
+        // ("crédito ou débito") would contradict it.
+        visual:{hideFormTitle:true,
+          style:{customVariables:{baseColor:'#FFA81A',buttonTextColor:'#03060B'}}}},
       callbacks:{
-        onReady:()=>{},
+        onReady:()=>{ espera.remove(); },
         onError:error=>{ console.error(error); message('Erro no formulário do cartão. Confira os dados e tente de novo.'); },
         onSubmit:async data=>{
-          const result=await api('/payments/intent',{quote_id:draftId,method:{
-            type:'card', token:data.token, payment_method_id:data.payment_method_id,
-            installments:Number(data.installments)||1,
-            issuer_id:data.issuer_id==null?null:String(data.issuer_id)}});
+          if (!cartOk()) { await refresh(); throw new Error('cart changed'); }
+          message('');
+          let result;
+          try {
+            result=await api('/payments/intent',{quote_id:draftId,method:{
+              type:'card', token:data.token, payment_method_id:data.payment_method_id,
+              installments:Number(data.installments)||1,
+              issuer_id:data.issuer_id==null?null:String(data.issuer_id),
+              ...cardholder(data.payer?.identification)}});
+          } catch(error) {
+            // Rejecting stops the form's spinner; the reason is shown above it.
+            message(error.message || 'Não foi possível concluir o pagamento. Tente de novo.');
+            status.scrollIntoView({behavior:'smooth',block:'center'});
+            throw error;
+          }
+          if (result.challenge) { showChallenge(result.challenge, into); waitForOrder(); return; }
           if (result.status==='approved' || result.status==='pending') {
-            message(result.status==='approved'
-              ? 'Pagamento aprovado. Seu pedido entra na produção em instantes.'
-              : 'Pagamento em análise pelo Mercado Pago. Avisamos assim que for confirmado.');
+            unmountCard();
+            into.replaceChildren(node('p',result.status==='approved'
+              ? 'Pagamento aprovado. Confirmando seu pedido…'
+              : 'Pagamento em análise pelo Mercado Pago. Esta página atualiza assim que ele for confirmado.','pagNota'));
             waitForOrder();
           } else {
             message('Pagamento recusado pelo Mercado Pago ('+(result.status_detail||result.status)+'). '+
@@ -261,26 +576,20 @@
         }
       }
     });
-  }
-  function waitForOrder() {
-    clearInterval(pixTimer);
-    pixTimer=setInterval(async()=>{
-      try {
-        const quote=await api('/quotes/'+draftId);
-        if (quote.status==='paid') {
-          clearInterval(pixTimer);
-          pedido=[]; itemAtual=null; limpaPaineis();
-          await window.dtfClearCart?.();
-          await refresh();
-        }
-      } catch(_) {}
-    },5000);
+    if (!holder.isConnected || version!==refreshVersion) unmountCard();
   }
   const quoteFromPortal=new URLSearchParams(location.search).get('quote');
   if(quoteFromPortal && /^[0-9a-f-]{36}$/.test(quoteFromPortal)){
     if(draftId!==quoteFromPortal){quotedCart=null;localStorage.removeItem('dtf-quote-cart');}
     draftId=quoteFromPortal;localStorage.setItem('dtf-quote',draftId);
   }
-  window.addEventListener('dtf-cart-changed',()=>{if(draftId) refresh();});
+  // Re-render the payment page only when the cart really changed: re-rendering
+  // would remount the card form under the customer's typing.
+  window.addEventListener('dtf-cart-changed',()=>{if(draftId && naPagina() && shownCart!==cartSnapshot()) refresh();});
+  // The cart page keeps only the sending progress and errors, never a payment.
+  window.addEventListener('dtf-page-changed',()=>{
+    if (naPagina()) refresh();
+    else if (!busy) { refreshVersion++; clearInterval(pixClock); message(''); actions.replaceChildren(); pintaResumo(null); }
+  });
   refresh();
 })();

web/kanban.css

@@ -18,46 +18,46 @@ a{color:var(--accent-tx)}
 .mono{font-family:var(--mono)}
 .muted{color:var(--muted)}
 .faint{color:var(--faint)}
-.btn{height:36px;padding:0 12px;border-radius:8px;border:1px solid var(--line2);background:var(--card2);color:var(--tx);font-size:13px;font-weight:600;white-space:nowrap}
+.btn{height:36px;padding:0 12px;border-radius:8px;border:1px solid var(--line2);background:var(--card2);color:var(--tx);font-size:14px;font-weight:600;white-space:nowrap}
 .btn:hover{border-color:var(--line3)}
 .btn.ghost{background:transparent;color:var(--muted)}
-.btn.primary{height:44px;border:0;background:var(--accent);color:#0F1113;font-weight:800;font-size:14px;padding:0 18px}
+.btn.primary{height:44px;border:0;background:var(--accent);color:#0F1113;font-weight:800;font-size:14.5px;padding:0 18px}
 .btn.primary:hover{filter:brightness(1.08)}
-.btn.danger{height:44px;background:transparent;border-color:var(--bad-line);color:var(--bad);font-weight:700;font-size:14px}
+.btn.danger{height:44px;background:transparent;border-color:var(--bad-line);color:var(--bad);font-weight:700;font-size:14.5px}
 .btn.warn{border:0;background:var(--warn);color:#0F1113;font-weight:800}
-.chip{height:34px;padding:0 12px;border-radius:8px;border:1px solid var(--line2);background:transparent;color:var(--muted);font-size:13px;font-weight:600}
+.chip{height:34px;padding:0 12px;border-radius:8px;border:1px solid var(--line2);background:transparent;color:var(--muted);font-size:14px;font-weight:600}
 .chip[aria-pressed=true]{border-color:var(--accent);background:rgba(255,139,43,.12);color:var(--accent-tx)}
-.badge{font-size:12px;font-weight:700;border-radius:999px;padding:1px 8px;background:var(--accent);color:#0F1113}
+.badge{font-size:13.5px;font-weight:700;border-radius:999px;padding:1px 8px;background:var(--accent);color:#0F1113}
 .badge.warn{background:var(--warn);color:#0F1113}
 .badge:empty{display:none}
-.eyebrow{font-size:12px;color:var(--faint);font-weight:700;text-transform:uppercase;letter-spacing:.06em;margin:0 0 8px}
+.eyebrow{font-size:13.5px;color:var(--faint);font-weight:700;text-transform:uppercase;letter-spacing:.06em;margin:0 0 8px}
 input[type=text],input[type=email],input[type=password],input[type=number],input:not([type]),textarea{height:40px;padding:0 12px;border-radius:8px;border:1px solid var(--line3);background:var(--bg);color:var(--tx)}
 textarea{height:auto;padding:10px 12px;min-height:72px;width:100%;resize:vertical}
 input[type=checkbox]{width:18px;height:18px;accent-color:var(--accent)}
-input[type=file]{font-size:13px;color:var(--muted);max-width:100%}
-.check{display:flex;align-items:center;gap:10px;font-size:13px;color:var(--tx2)}
+input[type=file]{font-size:14px;color:var(--muted);max-width:100%}
+.check{display:flex;align-items:center;gap:10px;font-size:14px;color:var(--tx2)}
 .ok{color:var(--ok)}.warn{color:var(--warn)}.bad{color:var(--bad)}
 
 /* Sign-in */
 .login{max-width:380px;margin:12vh auto 0;padding:32px;border:1px solid var(--line2);border-radius:14px;background:var(--panel);display:flex;flex-direction:column;gap:14px}
-.login label{display:flex;flex-direction:column;gap:6px;font-size:13px;font-weight:600;color:var(--muted)}
-.login .hint{font-size:12px;color:var(--faint);margin:0}
+.login label{display:flex;flex-direction:column;gap:6px;font-size:14px;font-weight:600;color:var(--muted)}
+.login .hint{font-size:13.5px;color:var(--faint);margin:0}
 
 /* Top bar */
 .top{height:64px;padding:0 24px;display:flex;align-items:center;gap:22px;border-bottom:1px solid var(--line);background:var(--bar);position:sticky;top:0;z-index:5}
 .brand{display:flex;align-items:center;gap:10px;font-weight:800;font-size:16px;letter-spacing:-.01em;white-space:nowrap}
 .brand i{width:28px;height:28px;border-radius:7px;background:var(--accent);color:#0F1113;font-style:normal;font-weight:800;font-size:15px;display:flex;align-items:center;justify-content:center}
 .tabs{display:flex;gap:4px;align-self:stretch}
-.tabs button{display:flex;align-items:center;gap:8px;padding:0 14px;border:0;border-bottom:2px solid transparent;background:none;color:var(--muted);font-weight:600;font-size:14px}
+.tabs button{display:flex;align-items:center;gap:8px;padding:0 14px;border:0;border-bottom:2px solid transparent;background:none;color:var(--muted);font-weight:600;font-size:14.5px}
 .tabs button[aria-selected=true]{color:var(--tx);font-weight:700;border-bottom-color:var(--accent)}
-.tabs .count{font-family:var(--mono);font-size:12px;color:var(--muted)}
+.tabs .count{font-family:var(--mono);font-size:13.5px;color:var(--muted)}
 .search{display:flex;align-items:center;gap:8px;width:300px;height:38px;padding:0 12px;border:1px solid var(--line2);border-radius:9px;background:var(--card);color:var(--faint);margin-left:auto}
 .search input{flex:1;min-width:0;border:0;background:transparent;height:auto;padding:0;outline:none}
-.tinydot{display:flex;align-items:center;gap:8px;font-size:13px;color:var(--muted);white-space:nowrap}
+.tinydot{display:flex;align-items:center;gap:8px;font-size:14px;color:var(--muted);white-space:nowrap}
 .tinydot::before{content:"";width:8px;height:8px;border-radius:999px;background:var(--dot,#5B6168)}
 .tinydot:empty{display:none}
-.who{font-size:13px;color:var(--muted);white-space:nowrap;max-width:220px;overflow:hidden;text-overflow:ellipsis}
-#status{position:fixed;left:50%;bottom:24px;transform:translateX(-50%);z-index:20;margin:0;max-width:min(640px,calc(100vw - 32px));padding:10px 16px;border-radius:10px;border:1px solid var(--line3);background:#1E2226;color:var(--tx);font-size:13px;box-shadow:0 10px 30px rgba(0,0,0,.45)}
+.who{font-size:14px;color:var(--muted);white-space:nowrap;max-width:220px;overflow:hidden;text-overflow:ellipsis}
+#status{position:fixed;left:50%;bottom:24px;transform:translateX(-50%);z-index:20;margin:0;max-width:min(640px,calc(100vw - 32px));padding:10px 16px;border-radius:10px;border:1px solid var(--line3);background:#1E2226;color:var(--tx);font-size:14px;box-shadow:0 10px 30px rgba(0,0,0,.45)}
 #status:empty,#login-status:empty{display:none}
 #status.error{border-color:var(--bad-line);color:var(--bad)}
 #login-status.error{color:var(--bad)}
@@ -74,22 +74,23 @@ main{padding:0 24px 24px}
 .col.target{border-color:var(--accent)}
 .col-head{display:flex;flex-direction:column;gap:6px;padding:2px 2px 8px;border-bottom:1px solid #22262B}
 .col-head div{display:flex;align-items:center;gap:8px}
-.col-head h2{margin:0;font-size:14px;font-weight:700}
+.col-head h2{margin:0;font-size:14.5px;font-weight:700}
 .col-head .swatch{width:10px;height:10px;border-radius:3px;background:var(--c)}
-.col-head .n{margin-left:auto;font-family:var(--mono);font-size:12px;color:var(--muted)}
-.col-head small{font-size:12px;color:var(--faint)}
-.col .empty{font-size:12px;color:var(--faint);padding:8px 2px}
+.col-head .n{margin-left:auto;font-family:var(--mono);font-size:13.5px;color:var(--muted)}
+.col-head small{font-size:13.5px;color:var(--faint)}
+.col .empty{font-size:13.5px;color:var(--faint);padding:8px 2px}
 .card{text-align:left;display:flex;flex-direction:column;gap:8px;padding:12px;border-radius:10px;border:1px solid var(--line2);background:var(--card);width:100%}
 .card:hover,.card.open{border-color:var(--line3);background:#1E2226}
 .card .row{display:flex;align-items:baseline;gap:8px;width:100%}
-.card .num{font-size:14px;font-weight:800}
-.card .age{margin-left:auto;font-size:12px;color:var(--faint)}
-.card .cust{font-size:13px;font-weight:600;color:var(--tx);width:100%;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.card .num{font-size:14.5px;font-weight:800}
+.card .age{margin-left:auto;font-size:13.5px;color:var(--faint)}
+.card .cust{font-size:14px;font-weight:600;color:var(--tx);width:100%;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
 .tags{display:flex;flex-wrap:wrap;gap:6px}
-.tag{font-size:12px;padding:3px 8px;border-radius:6px;background:var(--card2);color:var(--tx2)}
-.card .foot{display:flex;align-items:center;gap:6px;font-size:12px}
+.tag{font-size:13.5px;padding:3px 8px;border-radius:6px;background:var(--card2);color:var(--tx2)}
+.tag-teste{font-size:12.5px;font-weight:800;letter-spacing:.04em;padding:2px 7px;border-radius:6px;background:var(--warn);color:#1a1300}
+.card .foot{display:flex;align-items:center;gap:6px;font-size:13.5px}
 .card .foot .where{margin-left:auto;color:var(--muted)}
-.late{font-size:12px;color:#F06A5B;font-weight:600}
+.late{font-size:13.5px;color:#F06A5B;font-weight:600}
 
 /* Order panel */
 .drawer{position:fixed;inset:0;z-index:10;display:flex;justify-content:flex-end}
@@ -98,10 +99,10 @@ main{padding:0 24px 24px}
 .panel-head{padding:20px 24px;border-bottom:1px solid var(--line);display:flex;flex-direction:column;gap:14px}
 .panel-head .row{display:flex;align-items:center;gap:12px;flex-wrap:wrap}
 .panel-head .num{font-size:22px;font-weight:800}
-.stage{font-size:12px;font-weight:700;padding:4px 10px;border-radius:999px;background:color-mix(in srgb,var(--c) 18%,transparent);color:var(--c)}
+.stage{font-size:13.5px;font-weight:700;padding:4px 10px;border-radius:999px;background:color-mix(in srgb,var(--c) 18%,transparent);color:var(--c)}
 .close{margin-left:auto;width:40px;height:40px;border-radius:8px;border:1px solid var(--line2);background:transparent;color:var(--muted);display:flex;align-items:center;justify-content:center}
 .steps{margin:0;padding:0;list-style:none;display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:6px}
-.steps li{display:flex;flex-direction:column;gap:6px;font-size:11px;color:var(--faint)}
+.steps li{display:flex;flex-direction:column;gap:6px;font-size:12.5px;color:var(--faint)}
 .steps li::before{content:"";height:4px;border-radius:4px;background:var(--line2)}
 .steps li.done{color:var(--muted)}.steps li.done::before{background:var(--c)}
 .steps li.now{color:var(--tx);font-weight:700}.steps li.now::before{background:var(--c)}
@@ -110,27 +111,27 @@ main{padding:0 24px 24px}
 .reason{display:flex;flex-direction:column;gap:8px}
 .panel-body{flex:1;overflow:auto;padding:20px 24px 32px;display:flex;flex-direction:column;gap:24px}
 .facts{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:16px}
-.facts b{display:block;font-size:14px}
-.facts span{font-size:13px;color:var(--muted);overflow-wrap:anywhere}
+.facts b{display:block;font-size:14.5px}
+.facts span{font-size:14px;color:var(--muted);overflow-wrap:anywhere}
 .item{display:flex;gap:14px;padding:14px;border:1px solid var(--line2);border-radius:12px;background:var(--card)}
 .item.attention{border-color:#4A3A1E;background:#1C1A15}
 .item .preview{width:96px;flex-shrink:0;border-radius:8px;background:var(--card2);display:flex;align-items:flex-start;justify-content:center;padding:6px}
 .item .preview svg{width:100%;height:auto;display:block}
 .item .body{flex:1;min-width:0;display:flex;flex-direction:column;gap:8px}
 .item .title{display:flex;align-items:baseline;gap:8px}
-.item .title b{font-size:14px}
-.item .title .mono{margin-left:auto;font-size:13px}
-.item .line{font-size:12px;color:var(--muted)}
-.item .file{display:flex;align-items:center;gap:8px;font-size:13px}
+.item .title b{font-size:14.5px}
+.item .title .mono{margin-left:auto;font-size:14px}
+.item .line{font-size:13.5px;color:var(--muted)}
+.item .file{display:flex;align-items:center;gap:8px;font-size:14px}
 .buttons{display:flex;gap:8px;flex-wrap:wrap}
 .finals{display:flex;flex-direction:column;gap:12px}
-.finals .rev{font-size:13px;display:flex;flex-direction:column;gap:4px;padding:10px 12px;border:1px solid var(--line2);border-radius:10px}
+.finals .rev{font-size:14px;display:flex;flex-direction:column;gap:4px;padding:10px 12px;border:1px solid var(--line2);border-radius:10px}
 .finals form{display:flex;flex-direction:column;gap:12px;padding:14px;border:1px solid var(--line2);border-radius:12px}
-.finals .slot{display:flex;flex-direction:column;gap:6px;font-size:13px;font-weight:600}
+.finals .slot{display:flex;flex-direction:column;gap:6px;font-size:14px;font-weight:600}
 .timeline{margin:0;padding:0;list-style:none;display:flex;flex-direction:column;gap:10px}
-.timeline li{display:flex;gap:12px;font-size:13px}
+.timeline li{display:flex;gap:12px;font-size:14px}
 .timeline li::before{content:"";width:8px;height:8px;margin-top:6px;border-radius:999px;background:var(--c,var(--muted));flex-shrink:0}
-.timeline small{display:block;color:var(--faint);font-size:12px}
+.timeline small{display:block;color:var(--faint);font-size:13.5px}
 
 /* Quotes */
 #tab-quotes{padding-top:18px}
@@ -138,8 +139,8 @@ main{padding:0 24px 24px}
 .split .list{width:460px;flex-shrink:0;border-right:1px solid var(--line);padding:16px;display:flex;flex-direction:column;gap:12px;background:#111316}
 .qitem{text-align:left;display:flex;justify-content:space-between;gap:12px;padding:14px;border-radius:10px;border:1px solid var(--line2);background:var(--card);width:100%}
 .qitem[aria-current=true]{border-color:var(--accent);background:#1F1A15}
-.qitem b{display:block;font-size:14px;overflow-wrap:anywhere}
-.qitem span{font-size:12px;color:var(--muted)}
+.qitem b{display:block;font-size:14.5px;overflow-wrap:anywhere}
+.qitem span{font-size:13.5px;color:var(--muted)}
 .qitem .right{text-align:right;flex-shrink:0}
 .qitem .flag{display:block;color:var(--warn);font-weight:600;margin-top:4px}
 .pane{flex:1;min-width:0;display:flex;flex-direction:column}
@@ -147,7 +148,7 @@ main{padding:0 24px 24px}
 .pane .head b{font-size:18px;overflow-wrap:anywhere}
 .pane .content{flex:1;padding:20px 24px;display:flex;flex-direction:column;gap:16px}
 .pane .fields{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:14px}
-.pane .fields label{display:flex;flex-direction:column;gap:6px;font-size:12px;font-weight:600;color:var(--muted)}
+.pane .fields label{display:flex;flex-direction:column;gap:6px;font-size:13.5px;font-weight:600;color:var(--muted)}
 .pane .fields input[readonly]{color:var(--faint);background:var(--panel);border-color:var(--line2)}
 .pane .foot{padding:16px 24px;border-top:1px solid var(--line);background:var(--bar);display:flex;align-items:center;gap:16px;flex-wrap:wrap}
 .pane .foot .total{margin-left:auto;font-family:var(--mono);color:var(--muted)}
@@ -159,11 +160,11 @@ main{padding:0 24px 24px}
 .page h2{margin:0 0 10px;font-size:15px;font-weight:800}
 .issue{display:flex;align-items:center;gap:16px;flex-wrap:wrap;padding:16px 18px;border-radius:12px;border:1px solid #4A3A1E;background:#1C1A15;margin-bottom:8px}
 .issue .text{flex:1;min-width:260px;display:flex;flex-direction:column;gap:4px}
-.issue .text b{font-size:14px}
-.issue .text span{font-size:13px;color:var(--muted);overflow-wrap:anywhere}
+.issue .text b{font-size:14.5px}
+.issue .text span{font-size:14px;color:var(--muted);overflow-wrap:anywhere}
 .issue form{display:flex;gap:8px;align-items:center}
 .issue.done{border-color:var(--line2);background:var(--card)}
-.pager{display:flex;align-items:center;gap:16px;flex-wrap:wrap;padding:14px 4px;border-top:1px solid var(--line);margin-top:8px;font-size:13px;color:var(--muted)}
+.pager{display:flex;align-items:center;gap:16px;flex-wrap:wrap;padding:14px 4px;border-top:1px solid var(--line);margin-top:8px;font-size:14px;color:var(--muted)}
 .pager-size{display:flex;align-items:center;gap:8px}
 .pager-size select{height:34px;padding:0 8px;border-radius:8px;border:1px solid var(--line3);background:var(--bg);color:var(--tx)}
 .pager-range{margin-left:auto}
@@ -176,7 +177,7 @@ main{padding:0 24px 24px}
 .pager.compact .pager-range{margin-left:0}
 .pager.compact .pager-nav{margin-left:auto}
 .filters{display:flex;gap:12px;flex-wrap:wrap;align-items:flex-end;margin-bottom:12px}
-.field{display:flex;flex-direction:column;gap:6px;font-size:12px;font-weight:600;color:var(--muted)}
+.field{display:flex;flex-direction:column;gap:6px;font-size:13.5px;font-weight:600;color:var(--muted)}
 .field select,.field input{height:38px;min-width:160px;padding:0 10px;border-radius:8px;border:1px solid var(--line3);background:var(--bg);color:var(--tx)}
 .field input{min-width:110px;width:110px}
 .issue input{width:320px}
@@ -185,10 +186,10 @@ main{padding:0 24px 24px}
 .integration .head{display:flex;align-items:center;gap:8px}
 .integration .head b{font-size:15px}
 .integration .head .dot{width:9px;height:9px;border-radius:999px;background:var(--dot,#5B6168)}
-.integration .head em{margin-left:auto;font-style:normal;font-size:12px;font-weight:700;color:var(--dotx,var(--muted))}
-.integration p{margin:0;font-size:13px;color:var(--muted)}
+.integration .head em{margin-left:auto;font-style:normal;font-size:13.5px;font-weight:700;color:var(--dotx,var(--muted))}
+.integration p{margin:0;font-size:14px;color:var(--muted)}
 .integration .buttons{margin-top:auto}
-table.log{width:100%;border-collapse:collapse;font-size:13px}
+table.log{width:100%;border-collapse:collapse;font-size:14px}
 table.log th{text-align:left;color:var(--faint);font-weight:600;padding:8px 12px;border-bottom:1px solid var(--line)}
 table.log td{padding:10px 12px;border-bottom:1px solid #1E2226;vertical-align:top}
 .good{color:var(--ok);font-weight:600}.retry{color:var(--warn);font-weight:600}
@@ -201,3 +202,8 @@ table.log td{padding:10px 12px;border-bottom:1px solid #1E2226;vertical-align:to
   .split .list{width:auto;border-right:0;border-bottom:1px solid var(--line)}
   .facts,.pane .fields{grid-template-columns:1fr}
 }
+
+/* Icons beside a label: the download buttons, where a card ships, the WhatsApp link. */
+.btn.with-icon{display:inline-flex;align-items:center;gap:6px}
+.card .foot .where{display:inline-flex;align-items:center;gap:4px}
+a.zap{display:inline-flex;align-items:center;gap:4px;vertical-align:bottom}

web/kanban.html

@@ -3,7 +3,7 @@
 <title>Kanban DTF</title>
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700;800&amp;display=swap">
-<link rel="stylesheet" href="/kanban.css?v=redesign-7">
+<link rel="stylesheet" href="/kanban.css">
 </head><body>
 <form id="login" class="login" hidden>
   <div class="brand"><i aria-hidden="true">D</i>Kanban DTF</div>
@@ -67,4 +67,4 @@
   <div class="scrim" id="scrim"></div>
   <aside class="panel" id="panel" aria-label="Pedido"></aside>
 </div>
-<script src="/upload.js"></script><script src="/kanban.js?v=redesign-8"></script></body></html>
+<script src="/upload.js"></script><script src="/kanban.js"></script></body></html>

web/kanban.js

@@ -40,6 +40,23 @@ function ago(value){
   const hours=Math.round(minutes/60);
   return hours<48?'há '+hours+' h':'há '+Math.round(hours/24)+' dias';
 }
+// The customer's WhatsApp opens the conversation, for messages the system does
+// not send (a correction, a question about the artwork).
+function whatsappLink(zap){
+  const digits=String(zap||'').replace(/\D/g,'');
+  if(digits.length<10)return null;
+  return 'https://wa.me/'+(digits.length<=11?'55':'')+digits;
+}
+function contato(customer){
+  const line=node('span','CNPJ '+customer.cnpj+' · ');
+  const href=whatsappLink(customer.zap);
+  if(!href){line.append(customer.zap||'');return line;}
+  const d=String(customer.zap).replace(/\D/g,'').replace(/^55(?=\d{10,11}$)/,'');
+  const shown=d.length===11?'('+d.slice(0,2)+') '+d.slice(2,7)+'-'+d.slice(7):d.length===10?'('+d.slice(0,2)+') '+d.slice(2,6)+'-'+d.slice(6):customer.zap;
+  const a=node('a',shown,'zap');a.href=href;a.target='_blank';a.rel='noopener noreferrer';
+  a.title='Abrir conversa no WhatsApp';a.prepend(icon(ICON_CHAT));
+  line.append(a);return line;
+}
 function node(tag,text,className){const e=document.createElement(tag);if(text!==undefined&&text!==null)e.textContent=text;if(className)e.className=className;return e;}
 function button(text,fn,className='btn'){
   const b=node('button',text,className);b.type='button';
@@ -63,6 +80,14 @@ function icon(path){
   return svg;
 }
 const ICON_OK=['M5 12l4 4 10-10'], ICON_WARN=['M12 8v5M12 17h.01','circle 12 12 9'];
+// Lucide shapes (ISC licence), in the same stroke as the two above.
+const ICON_TRUCK=['M14 18V6a2 2 0 0 0-2-2H4a2 2 0 0 0-2 2v11a1 1 0 0 0 1 1h2','M15 18H9',
+  'M19 18h2a1 1 0 0 0 1-1v-3.65a1 1 0 0 0-.22-.62l-3.48-4.35A1 1 0 0 0 17.52 8H14','circle 17 18 2','circle 7 18 2'];
+const ICON_PIN=['M20 10c0 4.99-5.54 10.19-7.4 11.8a1 1 0 0 1-1.2 0C9.54 20.19 4 14.99 4 10a8 8 0 0 1 16 0','circle 12 10 3'];
+const ICON_DOWNLOAD=['M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4','m7 10 5 5 5-5','M12 15V3'];
+const ICON_CHAT=['M7.9 20A9 9 0 1 0 4 16.1L2 22Z'];
+// A download button: the arrow, then its label.
+function downloadButton(text,fn,className){const b=button(text,fn,className);b.prepend(icon(ICON_DOWNLOAD));b.classList.add('with-icon');return b;}
 async function api(path,body){
   const r=await fetch('/api/operator'+path,{headers:{'Content-Type':'application/json'},...(body===undefined?{}:{method:'POST',body:JSON.stringify(body)})});
   const d=await r.json();if(!r.ok){const error=new Error(typeof d.detail==='string'?d.detail:'Confira os campos ('+r.status+').');error.status=r.status;throw error;}return d;
@@ -170,18 +195,21 @@ function renderBoard(){
     return column;
   }));
 }
+// An operator's test order: no payment, no Tiny, no WhatsApp.
+const isTest=order=>order.payment?.provider==='teste';
 function card(order){
   const c=node('button',undefined,'card');c.type='button';c.dataset.card=order.id;c.draggable=true;
   if(order.id===openOrder)c.classList.add('open');
   const top=node('div',undefined,'row');
-  top.append(node('span','#'+order.number,'num'),node('span',ago(order.updated_at),'age'));
+  top.append(node('span','#'+order.number,'num'),...(isTest(order)?[node('span','TESTE','tag-teste')]:[]),node('span',ago(order.updated_at),'age'));
   const tags=node('div',undefined,'tags');
   for(const item of order.snapshot.items)tags.append(node('span',SHORT[item.mode]+' · '+metres(item.billed_metres),'tag'));
   const foot=node('div',undefined,'foot');const p=printState(order);
   const status=node('span',p.text,p.tone);status.style.display='flex';status.style.alignItems='center';status.style.gap='5px';
   if(p.tone==='ok')status.prepend(icon(ICON_OK));if(p.tone==='warn')status.prepend(icon(ICON_WARN));
   const dest=order.snapshot.destination;
-  foot.append(status,node('span',dest?'Entrega · '+dest.state:'Retirada','where'));
+  const where=node('span',dest?'Entrega · '+dest.state:'Retirada','where');where.prepend(icon(dest?ICON_TRUCK:ICON_PIN));
+  foot.append(status,where);
   c.append(top,node('div',order.snapshot.customer.mail,'cust'),tags,foot);
   if(['rec','tra','fil','imp'].includes(order.state)&&Date.now()-new Date(order.updated_at)>LATE_HOURS*3600000)
     c.append(node('div','Parado há mais de '+LATE_HOURS+' h','late'));
@@ -234,7 +262,8 @@ function renderPanel(order){
   const row=node('div',undefined,'row');
   const stage=node('span',board.states[order.state],'stage');stage.style.setProperty('--c',color);
   const close=node('button',undefined,'close');close.type='button';close.setAttribute('aria-label','Fechar');close.append(icon(['M6 6l12 12M18 6L6 18']));close.onclick=closePanel;
-  row.append(node('span','#'+order.number,'num'),stage,node('span','pago '+when(order.created_at),'faint'),close);
+  row.append(node('span','#'+order.number,'num'),stage,
+    isTest(order)?node('span','pedido de teste · sem pagamento, não vai ao Tiny nem ao WhatsApp','tag-teste'):node('span','pago '+when(order.created_at),'faint'),close);
   const steps=node('ol',undefined,'steps');steps.setAttribute('aria-label','Etapas');
   const at=FLOW.indexOf(order.state);
   for(const [i,s] of FLOW.entries()){const li=node('li',board.states[s]);li.style.setProperty('--c',STAGE_COLORS[s]);
@@ -244,7 +273,7 @@ function renderPanel(order){
   const body=node('div',undefined,'panel-body');
   const s=order.snapshot, dest=s.destination;
   const facts=node('section',undefined,'facts');
-  const who=node('div');who.append(node('p','Cliente','eyebrow'),node('b',s.customer.mail),node('span','CNPJ '+s.customer.cnpj+' · '+s.customer.zap));
+  const who=node('div');who.append(node('p','Cliente','eyebrow'),node('b',s.customer.mail),contato(s.customer));
   const where=node('div');where.append(node('p','Entrega','eyebrow'),node('b',dest?dest.recipient:'Retirada em Franca'),
     node('span',dest?dest.street+', '+dest.number+(dest.complement?' '+dest.complement:'')+' · '+dest.district+' · '+dest.city+'/'+dest.state+' · CEP '+dest.postal_code:'Cliente retira na fábrica'));
   facts.append(who,where);
@@ -307,15 +336,17 @@ function itemCard(order,item,index){
   const file=node('div',undefined,'file');
   if(row){
     const tone=row.status==='ready'?'ok':row.status==='manual'||row.status==='failed'?'warn':'muted';
-    const label=node('span',PRINT_TEXT[row.status]+(row.status==='ready'&&row.name?' · '+row.name:'')+(row.status==='manual'&&row.detail.reason?': '+row.detail.reason:''),tone);
+    const original=row.status==='ready'&&row.detail?.source==='original';
+    const label=node('span',(original?'Arquivo grande: o original é o arquivo de impressão':PRINT_TEXT[row.status])+
+      (row.status==='ready'&&row.name?' · '+row.name:'')+(row.status==='manual'&&row.detail.reason?': '+row.detail.reason:''),tone);
     file.append(tone==='ok'?icon(ICON_OK):tone==='warn'?icon(ICON_WARN):'',label);
-    if(row.status==='ready'&&row.detail){body.append(file,node('div',[row.detail.film_width_cm+' × '+row.detail.height_cm+' cm',
+    if(row.status==='ready'&&row.detail&&!original){body.append(file,node('div',[row.detail.film_width_cm+' × '+row.detail.height_cm+' cm',
       row.detail.min_dpi?'menor resolução '+row.detail.min_dpi+' DPI':'',row.detail.vector_sources?'PDF vetorial':''].filter(Boolean).join(' · '),'line'));}
     else body.append(file);
   }else body.append(node('div','Arquivo de impressão ainda não gerado','line'));
   const buttons=node('div',undefined,'buttons');
-  if(row?.status==='ready')buttons.append(button('Baixar PDF',download(row.upload_id)));
-  item.uploads.forEach((uid,i)=>buttons.append(button(item.uploads.length>1?'Original '+(i+1):'Baixar original',download(uid),'btn ghost')));
+  if(row?.status==='ready'&&row.detail?.source!=='original')buttons.append(downloadButton('Baixar PDF',download(row.upload_id)));
+  item.uploads.forEach((uid,i)=>buttons.append(downloadButton(item.uploads.length>1?'Original '+(i+1):'Baixar original',download(uid),'btn ghost')));
   if(spec?.placements)buttons.append(button('Manifesto',()=>manifest(spec),'btn ghost'));
   if(['rec','tra'].includes(order.state)&&(!row||row.status==='manual'||row.status==='failed'))
     buttons.append(button('Gerar novamente',async()=>{await api('/orders/'+order.id+'/print-files',{});await load();},'btn ghost'));
@@ -328,7 +359,7 @@ function finalsSection(order,revisions,section){
     const rev=node('div',undefined,'rev');
     rev.append(node('b',(file.kind==='final'?'Final':'Correção do cliente')+' · item '+(file.item_index+1)+' · '+file.name),
       node('span',(file.expired?'expirado':file.active?'atual':'substituído')+' · '+when(file.created_at)+' · '+file.note,'faint'));
-    if(!file.expired){const b=button('Baixar',download(file.upload_id),'btn ghost');b.style.alignSelf='flex-start';rev.append(b);}
+    if(!file.expired){const b=downloadButton('Baixar',download(file.upload_id),'btn ghost');b.style.alignSelf='flex-start';rev.append(b);}
     section.append(rev);
   }
   if(!['rec','tra','cor'].includes(order.state)){if(!revisions.length)section.append(node('p','Nenhum arquivo final registrado.','faint'));return;}
@@ -343,7 +374,7 @@ function finalsSection(order,revisions,section){
     if(generated){
       const use=node('input');use.type='checkbox';use.checked=true;use.dataset.useGenerated=index;input.required=false;input.hidden=true;
       use.onchange=()=>{input.hidden=use.checked;input.required=!use.checked;};
-      const choice=node('label',undefined,'check');choice.append(use,'Usar o PDF gerado ('+generated.name+')');
+      const choice=node('label',undefined,'check');choice.append(use,(generated.detail?.source==='original'?'Usar o original como arquivo final (':'Usar o PDF gerado (')+generated.name+')');
       slot.append(choice);input.generated=()=>use.checked?generated.upload_id:null;
     }
     slot.append(input);form.append(slot);return input;
@@ -407,6 +438,8 @@ function renderQuotes(){
       node('span',q.draft.items.map(i=>SHORT[i.mode]).join(' + ')+' · '+metres(quoteMetres(q))));
     if(q.draft.items.some(i=>i.production?.version!==2))left.append(node('span','Montagem antiga: peça nova cotação','flag'));
     else if(q.draft.items.some(i=>i.quality_status==='warning'))left.append(node('span','Ressalva de resolução aceita pelo cliente','flag'));
+    if(q.auto_approved)left.append(node('span','Aprovada automaticamente'));
+    else if(q.review_reason)left.append(node('span','Revisão manual: '+q.review_reason,'flag'));
     const right=node('div',undefined,'right');
     right.append(node('b',q.approved?money(q.approved.total_cents):q.id.slice(0,8),'mono'),node('span',ago(q.created_at)));
     b.append(left,right);b.onclick=()=>{currentQuote=q;renderQuotes();};return b;
@@ -434,7 +467,17 @@ function review(quote){
     content.append(node('p',quote.status==='expired'?'Cotação expirada. O cliente precisa solicitar outra.':
       'Aprovada: '+money(quote.approved.total_cents)+' · aguardando pagamento','muted'));
     for(const item of quote.draft.items)content.append(quoteItem(item,null));
-    card.append(head,content);return card;
+    card.append(head,content);
+    if(quote.status==='approved'){
+      // Tries the whole production flow without a payment.
+      foot.append(button('Criar pedido de teste',async()=>{
+        if(!confirm('Criar um pedido de TESTE para esta cotação? Não cobra nada e não vai para o Tiny nem para o WhatsApp.'))return;
+        const order=await api('/quotes/'+quote.id+'/test-order',{});
+        say('Pedido de teste #'+order.number+' criado em Arte recebida.');await load();
+      },'btn ghost'));
+      card.append(foot);
+    }
+    return card;
   }
   const form=node('form');form.style.display='contents';
   const edits=quote.draft.items.map(item=>{const fields={};content.append(quoteItem(item,fields));
@@ -470,7 +513,7 @@ function quoteItem(item,fields){
     grid.append(asked,m,g);body.append(grid);
   }
   const buttons=node('div',undefined,'buttons');
-  item.uploads.forEach((uid,i)=>buttons.append(button(item.uploads.length>1?'Original '+(i+1):'Baixar original',download(uid),'btn ghost')));
+  item.uploads.forEach((uid,i)=>buttons.append(downloadButton(item.uploads.length>1?'Original '+(i+1):'Baixar original',download(uid),'btn ghost')));
   if(item.production?.placements)buttons.append(button('Manifesto',()=>manifest(item.production),'btn ghost'));
   body.append(buttons);box.append(preview,body);return box;
 }
@@ -653,10 +696,32 @@ function renderIntegrations(){
       t.connected&&!t.problem?'ok':'warn',tinyDetail(t),actions));
   }
   const mp=board.providers?.payment;
+  const mpActions=mp==='mercadopago'?[button('Verificar conta',async()=>{
+    const r=await api('/mercadopago/check',{});
+    const conta=r.account.error?'conta: '+r.account.error:'conta '+r.account.nickname+' ('+r.account.id+') · '+
+      (r.account.test_user?'usuário de teste':'não é usuário de teste');
+    const bin=Array.isArray(r.bin)?(r.bin.length?r.bin.map(o=>o.method+' '+o.type+' · '+o.issuer+' · até '+Math.max(...o.installments)+'x').join('; '):'cartão de teste não reconhecido'):'cartão: '+r.bin.error;
+    const w=r.webhooks||{};
+    const avisos='avisos nas últimas 24 h: '+w.accepted_24h+' aceitos, '+w.refused_24h+' recusados pela assinatura'+
+      (w.last?' · último em '+new Date(w.last.received_at).toLocaleString('pt-BR')+' ('+w.last.status+')':' · nenhum recebido ainda');
+    say('Mercado Pago: credencial '+(r.token==='test'?'de teste':'de produção')+' · '+conta+' · '+bin+' · '+avisos,false,60000);
+  },'btn ghost')]:[];
   cards.push(integration('Mercado Pago',mp==='mercadopago'?'Ativo':'Não configurado',mp==='mercadopago'?'ok':'off',
-    mp==='mercadopago'?'PIX e cartão ativos.':'Aguardando credenciais.'));
-  cards.push(integration('Frete','Não configurado','off','Somente retirada.'));
+    mp==='mercadopago'?'PIX e cartão ativos.':'Aguardando credenciais.',mpActions));
+  const fr=board.providers?.freight||{};
+  const kg=v=>String(v).replace('.',',')+' kg';
+  cards.push(fr.provider==='jadlog'
+    ? integration('Frete','Ativo','ok','Entrega pela Jadlog e retirada em Franca. Pacote: '+kg(fr.base_kg)+
+        ' + '+kg(fr.per_metre_kg)+' por metro · prazo da Jadlog + '+fr.production_days+' dia(s) de produção.')
+    : integration('Frete','Não configurado','off','Somente retirada.'));
   cards.push(integration('WhatsApp','Não configurado','off','Mensagens registradas, sem envio.'));
+  const bk=board.providers?.backup||{};
+  const ontem=bk.last_ok&&Date.now()-new Date(bk.last_ok)<26*3600e3;
+  const tam=bk.bytes?' · '+(bk.bytes<1048576?Math.max(1,Math.round(bk.bytes/1024))+' KB':(bk.bytes/1048576).toFixed(1).replace('.',',')+' MB'):'';
+  cards.push(integration('Backup do banco',!bk.last_ok&&!bk.failed?'Não configurado':ontem&&!bk.failed?'Em dia':'Verificar',
+    !bk.last_ok&&!bk.failed?'off':ontem&&!bk.failed?'ok':'warn',
+    (bk.last_ok?'Último backup em '+when(bk.last_ok)+tam+'.':'Nenhum backup feito ainda.')+
+    (bk.failed?' A última tentativa falhou ('+when(bk.failed_at)+'): '+bk.failed:'')+' Cópia diária, criptografada, fora do servidor.'));
   $('integrations').replaceChildren(...cards);
   eventFilters();
 }

web/portal.css

@@ -0,0 +1,152 @@
+/* Minha conta: the Site's look (tokens and shell from site-shell.css and
+   site-v2.css) for sign-in, the overview, the orders and the details. */
+[hidden]{display:none!important}
+body{background:var(--cinza)}
+.topo .acts a[aria-current="page"]{color:var(--laranja-escuro)}
+#quem{max-width:240px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.sr{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}
+.ped{padding-top:28px;padding-bottom:64px;min-height:70vh}
+.ped h1{font-size:30px;font-weight:800;margin-bottom:14px}
+.pedAviso{margin-bottom:14px;padding:12px 16px;border-radius:var(--raio2);background:var(--aviso-fundo);border:1px solid var(--aviso-linha);font-size:15px}
+.pedMsg{margin-bottom:14px;padding:10px 14px;border-radius:var(--raio2);background:var(--verde-fundo);color:var(--verde);font-size:15px}
+.pedMsg.erro{background:#FDE8E6;color:#B42318}
+.pedMsg:empty{display:none}
+
+/* Buttons, as on the Site. */
+.bPri{display:inline-flex;align-items:center;justify-content:center;gap:8px;height:48px;padding:0 22px;border:0;border-radius:var(--raio2);background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:16px;text-decoration:none;cursor:pointer}
+.bPri:hover:not(:disabled){background:#FFB53D}
+.bPri.bMini{height:38px;padding:0 16px;font-size:15px}
+.bSec{display:inline-flex;align-items:center;justify-content:center;gap:7px;height:40px;padding:0 16px;border:1px solid #D6D6D6;border-radius:var(--raio2);background:#fff;color:var(--preto);font-family:"Inter",sans-serif;font-weight:700;font-size:15px;cursor:pointer}
+.bSec:hover:not(:disabled){border-color:var(--preto)}
+.bSec .ic{width:18px;height:18px}
+.bLink{align-self:flex-start;margin-top:12px;padding:0;border:0;background:none;color:var(--laranja-escuro);font-family:inherit;font-weight:600;font-size:15px;cursor:pointer;text-decoration:underline;text-underline-offset:3px}
+button:disabled{opacity:.6;cursor:default}
+
+/* Forms. */
+.acessoGrid{display:grid;grid-template-columns:repeat(auto-fit,minmax(300px,1fr));gap:16px;align-items:start}
+.bloco{display:flex;flex-direction:column;margin-bottom:16px;padding:22px;border:1px solid var(--linha);border-radius:var(--raio);background:#fff}
+.bloco h2{font-size:20px;font-weight:800}
+.nota2{margin:4px 0 8px;font-size:14.5px;color:var(--fraco)}
+.nota2 a{color:var(--laranja-escuro)}
+.bloco label{margin:10px 0 5px;font-size:14px;font-weight:600;color:var(--texto2)}
+.bloco label .obs{font-weight:400;color:var(--fraco)}
+.bloco input,.busca2 input,.busca2 select,.correcaoForm textarea{width:100%;height:46px;padding:0 13px;border:1px solid #D6D6D6;border-radius:var(--raio2);font:inherit;font-size:16px;background:#fff;color:var(--preto)}
+.bloco input[readonly]{background:var(--cinza);color:var(--texto2)}
+.bloco input:focus,.busca2 input:focus,.busca2 select:focus,.correcaoForm textarea:focus{outline:none;border-color:var(--laranja);box-shadow:0 0 0 3px rgba(255,168,26,.2)}
+.bloco>.bPri,.bloco>.bSec{margin-top:16px;align-self:flex-start}
+.duas{display:grid;grid-template-columns:1fr 1fr;gap:0 12px}
+.tres{display:grid;grid-template-columns:1fr 1fr 90px;gap:0 12px}
+.duas>div,.tres>div{display:flex;flex-direction:column}
+
+/* The account area: menu on the side, one view beside it. */
+.area{display:grid;grid-template-columns:210px minmax(0,1fr);gap:28px;align-items:start}
+.lateral{position:sticky;top:90px;display:flex;flex-direction:column;gap:2px;padding:10px;border:1px solid var(--linha);border-radius:var(--raio);background:#fff}
+.lateral a,.lateral button{display:block;padding:10px 12px;border:0;border-radius:var(--raio2);background:none;color:var(--texto2);font:inherit;font-size:15.5px;text-align:left;text-decoration:none;cursor:pointer}
+.lateral a:hover,.lateral button:hover{background:var(--cinza);color:var(--preto)}
+.lateral a.on{background:var(--aviso-fundo);color:var(--laranja-escuro);font-weight:700}
+.lateral button{margin-top:6px;border-top:1px solid var(--linha);border-radius:0 0 var(--raio2) var(--raio2)}
+.conta{margin:-8px 0 16px;font-size:15px;color:var(--fraco)}
+.acessoIntro{margin:-6px 0 14px;font-size:15px;color:var(--texto2)}
+.acessoIntro:empty{display:none}
+.tituloGrupo{margin:22px 0 10px;font-size:18px;font-weight:800}
+
+/* Overview. */
+.metricas{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:12px}
+.metrica{display:flex;flex-direction:column;gap:4px;padding:16px 18px;border:1px solid var(--linha);border-radius:var(--raio);background:#fff;color:var(--texto2);font-size:14.5px;text-decoration:none}
+.metrica:hover{border-color:var(--laranja)}
+.metrica b{font-family:"Inter",sans-serif;font-size:28px;font-weight:800;color:var(--preto)}
+.metrica.alerta{border-color:#F3B7A9;background:#FFF6F4}
+.verTodos{display:inline-block;margin-top:12px;color:var(--laranja-escuro);font-weight:700;text-decoration:none}
+
+/* Orders: filters, rows, pages. */
+.filtros{display:flex;gap:8px;flex-wrap:wrap;margin-bottom:10px}
+.chipF{height:36px;padding:0 14px;border:1px solid #D6D6D6;border-radius:999px;background:#fff;color:var(--texto2);font:inherit;font-size:14.5px;font-weight:600;cursor:pointer}
+.chipF:hover{border-color:var(--preto)}
+.chipF.on{border-color:var(--laranja);background:var(--aviso-fundo);color:var(--laranja-escuro)}
+.busca2{display:grid;grid-template-columns:minmax(0,1fr) 200px;gap:10px;margin-bottom:12px}
+.lista{border:1px solid var(--linha);border-radius:var(--raio);background:#fff;overflow:hidden}
+.lista:empty{display:none}
+.item+.item{border-top:1px solid var(--linha)}
+.item.pendente{background:#FFFCF6}
+.linha{display:grid;grid-template-columns:90px minmax(0,1fr) auto 110px 90px;gap:14px;align-items:center;padding:14px 18px;cursor:pointer}
+.item.pendente .linha{cursor:default}
+.linha:hover{background:var(--cinza)}
+.linha .num{font-family:"Inter",sans-serif;font-size:16px}
+.oque{display:flex;flex-direction:column;min-width:0}
+.oque span{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:15px}
+.oque .data{font-size:14px;color:var(--fraco)}
+.estadoW{display:flex;align-items:center;gap:6px}
+.estado{padding:4px 10px;border-radius:999px;font-family:"Inter",sans-serif;font-size:13.5px;font-weight:700;background:var(--cinza);color:var(--texto2);white-space:nowrap}
+.via{font-size:13px;font-weight:700;color:var(--fraco)}
+.est-fin{background:var(--verde-fundo);color:var(--verde)}
+.est-cor{background:#FDE8E6;color:#B42318}
+.est-pay{background:#FFF1D6;color:#8A4B00}
+.est-rev{background:#EEF1F5;color:#45505E}
+.est-imp,.est-fil,.est-tra,.est-rec{background:#E7F0FB;color:#1D4E89}
+.linha .valor{font-family:"Inter",sans-serif;font-size:16px;text-align:right}
+.acao{display:flex;justify-content:flex-end}
+.acao .bSec{height:36px;padding:0 14px}
+.paginas{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-top:12px}
+.pags{display:flex;gap:6px}
+.pag{min-width:38px;height:38px;border:1px solid #D6D6D6;border-radius:var(--raio2);background:#fff;font:inherit;font-weight:700;cursor:pointer}
+.pag.on{border-color:var(--laranja);background:var(--aviso-fundo);color:var(--laranja-escuro);cursor:default}
+.vazio{display:flex;flex-direction:column;align-items:flex-start;gap:12px;padding:26px 22px;font-size:16px;color:var(--texto2)}
+
+/* An order opened in the list. */
+.detalhe{padding:4px 18px 18px;border-top:1px dashed var(--linha);background:#fff}
+.trilha{display:flex;list-style:none;margin:18px 0 6px;padding:0}
+.trilha li{flex:1;position:relative;display:flex;flex-direction:column;align-items:center;gap:6px;text-align:center;font-size:14px;color:var(--fraco)}
+.trilha li::before{content:"";position:absolute;top:14px;left:-50%;width:100%;height:2px;background:#E0E0E0;z-index:0}
+.trilha li:first-child::before{display:none}
+.trilha li.feito::before,.trilha li.atual::before{background:var(--verde)}
+.trilha .marca{position:relative;z-index:1;width:30px;height:30px;border-radius:50%;display:flex;align-items:center;justify-content:center;border:2px solid #D0D0D0;background:#fff;font-family:"Inter",sans-serif;font-weight:700;font-size:14px}
+.trilha .marca .ic{width:16px;height:16px;stroke-width:3}
+.trilha li.feito{color:var(--verde)}
+.trilha li.feito .marca{background:var(--verde-fundo);border-color:var(--verde-fundo);color:var(--verde)}
+.trilha li.atual{color:var(--preto)}
+.trilha li.atual .marca{background:var(--laranja);border-color:var(--laranja)}
+.trilha b{font-weight:600}
+.trilha li.atual b{font-weight:800}
+.pedAlerta{display:flex;gap:10px;align-items:flex-start;margin:16px 0 4px;padding:12px 14px;border-radius:var(--raio2);background:#FDE8E6;color:#7A1C10;font-size:15px}
+.pedAlerta .ic{flex:none;width:20px;height:20px;margin-top:1px;color:#B42318}
+.itensPed{list-style:none;margin:14px 0 0;padding:0;border-top:1px solid var(--linha)}
+.itensPed li{display:flex;gap:12px;align-items:baseline;padding:10px 0;border-bottom:1px solid var(--linha);font-size:15.5px}
+.itensPed .nome{flex:1;font-weight:600}
+.itensPed .qt{color:var(--fraco)}
+.itensPed b{min-width:96px;text-align:right;font-family:"Inter",sans-serif}
+.itensPed .frete .nome{font-weight:400;color:var(--texto2)}
+.entregaPed{display:flex;align-items:center;gap:8px;margin-top:12px;font-size:15px;color:var(--texto2)}
+.entregaPed .ic{flex:none;width:19px;height:19px;color:var(--laranja-escuro)}
+.secao{margin-top:16px}
+.secao h4{margin-bottom:8px;font-size:16px;font-weight:800}
+.historico{list-style:none;margin:0;padding:0 0 0 14px;border-left:2px solid var(--linha)}
+.historico li{position:relative;padding:0 0 12px 12px;font-size:15px}
+.historico li::before{content:"";position:absolute;left:-20px;top:6px;width:10px;height:10px;border-radius:50%;background:var(--laranja)}
+.historico li b{margin-right:8px}
+.historico li span{color:var(--fraco)}
+.historico .motivo{margin-top:4px;padding:8px 10px;border-radius:8px;background:#FDE8E6;font-size:14.5px}
+.arquivo{display:flex;align-items:center;gap:12px;padding:10px 0;border-bottom:1px solid var(--linha)}
+.arquivo>div{flex:1;min-width:0;display:flex;flex-direction:column}
+.arquivo b{overflow-wrap:anywhere;font-size:15px}
+.arquivo span{font-size:14px;color:var(--fraco)}
+.correcaoForm{display:flex;flex-direction:column;padding:16px;border-radius:var(--raio2);background:var(--cinza)}
+.correcaoForm label{margin:10px 0 5px;font-size:14px;font-weight:600;color:var(--texto2)}
+.correcaoForm textarea{height:auto;padding:10px 13px;resize:vertical}
+.correcaoForm .bPri{margin-top:14px;align-self:flex-start}
+
+@media (max-width:820px){
+  .area{grid-template-columns:1fr;gap:16px}
+  .lateral{position:static;flex-direction:row;flex-wrap:wrap}
+  .lateral button{margin:0;border:0;border-radius:var(--raio2)}
+  .linha{grid-template-columns:minmax(0,1fr) auto;gap:6px 12px}
+  .linha .num{grid-column:1}
+  .linha .oque{grid-column:1/-1;grid-row:2}
+  .linha .estadoW{grid-column:2;grid-row:1;justify-self:end}
+  .linha .valor{grid-column:1;grid-row:3;text-align:left}
+  .linha .acao{grid-column:2;grid-row:3}
+}
+@media (max-width:600px){
+  .ped h1{font-size:26px}
+  .trilha b{font-size:12.5px}
+  .duas,.tres,.busca2{grid-template-columns:1fr}
+}

web/portal.html

@@ -1,11 +1,169 @@
-<!doctype html><html lang="pt-BR"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Dropstar · Meus pedidos DTF</title>
-<style>
-*{box-sizing:border-box}body{margin:0;background:#f6f7f9;color:#20252d;font:15px/1.5 system-ui,sans-serif}header{background:white;border-bottom:1px solid #ddd;padding:20px max(20px,calc((100% - 1100px)/2));display:flex;gap:24px;align-items:center;flex-wrap:wrap}.brand{color:#ef8500;font-size:24px;font-style:italic;font-weight:900}a{color:#8a4e00}main{max-width:1100px;margin:24px auto;padding:0 20px}h1{font-size:28px}h2{font-size:21px}h3{font-size:17px}.notice{background:#fff1d4;border-left:4px solid #ffa900;padding:12px 16px}.grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:20px}.card{background:white;border:1px solid #ddd;border-radius:10px;padding:20px;margin:16px 0}.card p{overflow-wrap:anywhere}.muted{color:#596471}label{display:block;margin:10px 0}input,textarea,button{font:inherit;border:1px solid #9aa0a8;border-radius:6px;padding:10px}input:not([type=file]),textarea{width:100%}button{background:#ffa900;border-color:#ffa900;cursor:pointer}button:disabled{opacity:.6}form{margin:10px 0}.actions{display:flex;gap:10px;flex-wrap:wrap;align-items:center}#message{min-height:24px;color:#9b3800}li{margin:8px 0}.tag{background:#eef2f6;padding:5px 10px;border-radius:6px}details{margin:12px 0}[hidden]{display:none!important}
-</style></head><body>
-<header><a class="brand" href="/">DROPSTAR</a><a href="/">Enviar arte</a><span>Minha conta · DTF</span><button id="logout" hidden>Sair</button></header>
-<main><h1>Meus pedidos DTF</h1><p class="notice" id="dev-notice" hidden>Ambiente de desenvolvimento local. Pagamentos e notificações são simulados. Use apenas dados de teste.</p><p id="message" role="status"></p>
-<div id="account"></div><section id="auth" class="grid">
-<form id="login" class="card"><h2>Entrar</h2><label>E-mail <input id="email" type="email" autocomplete="username" required></label><label>Senha <input id="password" type="password" autocomplete="current-password" required></label><button>Entrar</button></form>
-<form id="register" class="card"><h2>Criar conta</h2><label>CNPJ <input id="cnpj" required></label><label>WhatsApp <input id="phone" required></label><label>E-mail <input id="register-email" type="email" autocomplete="email" required></label><label>Senha (12 caracteres ou mais) <input id="register-password" type="password" minlength="12" maxlength="128" autocomplete="new-password" required></label><button>Criar conta</button><p class="muted">Pedidos desta sessão serão associados à sua conta. Guarde sua senha: a recuperação por e-mail ainda não está disponível.</p></form>
-</section><div class="actions"><h2>Acompanhamento</h2><button id="refresh">Atualizar pedidos</button></div><p id="guest" class="muted"></p><section id="quotes"></section><section id="orders"></section></main>
-<script src="/privacy.js"></script><script src="/upload.js"></script><script src="/portal.js"></script></body></html>
+<!DOCTYPE html>
+<html lang="pt-BR">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Minha conta · DTF Dropstar</title>
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=Roboto:wght@300;400;500;700&display=swap" rel="stylesheet">
+<link rel="stylesheet" href="/site-shell.css">
+<link rel="stylesheet" href="/site-v2.css">
+<link rel="stylesheet" href="/portal.css">
+</head>
+<body>
+
+<div class="tarja">
+  ENVIE SEU ARQUIVO DTF PELO SITE · DTF TÊXTIL COM O MENOR PREÇO DO METRO EM FRANCA-SP
+</div>
+
+<header class="topo"><div class="w">
+  <a class="logo" href="https://www.dropstaratacado.com.br" aria-label="Dropstar Atacado"><img src="https://cdn.vnda.com.br/dropstar/2025/12/17/logo-header-15125700-16129080.png?v=1766009286" alt="Dropstar"></a>
+  <div class="acts">
+    <a href="/conta" aria-current="page"><svg class="ic" viewBox="0 0 24 24" aria-hidden="true" focusable="false"><path d="M19 21v-2a4 4 0 0 0-4-4H9a4 4 0 0 0-4 4v2"/><circle cx="12" cy="7" r="4"/></svg><span class="actTx" id="quem">Minha conta</span></a>
+    <a href="/carrinho"><svg class="ic" viewBox="0 0 24 24" aria-hidden="true" focusable="false"><path d="M6 2 3 6v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V6l-3-4Z"/><path d="M3 6h18"/><path d="M16 10a4 4 0 0 1-8 0"/></svg><span class="actTx">Carrinho</span></a>
+  </div>
+</div></header>
+
+<main class="ped w">
+  <p class="pedAviso" id="dev-notice" hidden>Ambiente de desenvolvimento local. Pagamentos e notificações são simulados. Use apenas dados de teste.</p>
+  <p class="pedMsg" id="message" role="status"></p>
+
+  <!-- /conta/entrar -->
+  <section class="acesso" id="auth" hidden aria-labelledby="tEntrar">
+    <h1 id="tEntrar">Minha conta</h1>
+    <div class="acessoGrid">
+      <form class="bloco" id="login">
+        <h2>Entrar</h2>
+        <p class="nota2">Para ver seus pedidos e seus dados.</p>
+        <label for="email">E-mail</label>
+        <input id="email" type="email" autocomplete="username" required>
+        <label for="password">Senha</label>
+        <input id="password" type="password" autocomplete="current-password" required>
+        <button class="bPri">Entrar</button>
+        <button type="button" class="bLink" id="esqueci">Esqueci minha senha</button>
+        <p class="nota2" id="esqueciTx" hidden>A recuperação por e-mail chega em breve. Enquanto isso, fale com a Dropstar pelo WhatsApp <a href="https://wa.me/message/NJ76CLIOUGXLB1" target="_blank" rel="noopener">16 99428-0056</a>.</p>
+      </form>
+      <form class="bloco" id="register">
+        <h2>Criar conta</h2>
+        <p class="nota2">Os pedidos feitos neste navegador passam para a sua conta.</p>
+        <div class="duas">
+          <div><label for="cnpj">CNPJ</label><input id="cnpj" inputmode="numeric" autocomplete="off" required></div>
+          <div><label for="phone">WhatsApp</label><input id="phone" inputmode="numeric" autocomplete="tel" required></div>
+        </div>
+        <label for="register-email">E-mail</label>
+        <input id="register-email" type="email" autocomplete="email" required>
+        <label for="register-password">Senha <span class="obs">12 caracteres ou mais</span></label>
+        <input id="register-password" type="password" minlength="12" maxlength="128" autocomplete="new-password" required>
+        <button class="bPri">Criar conta</button>
+      </form>
+    </div>
+  </section>
+
+  <!-- /conta, /conta/pedidos, /conta/dados -->
+  <div class="area" id="area" hidden>
+    <nav class="lateral" aria-label="Minha conta">
+      <a href="/conta" data-view="geral" data-conta>Visão geral</a>
+      <a href="/conta/pedidos" data-view="pedidos">Pedidos</a>
+      <a href="/conta/dados" data-view="dados" data-conta>Dados da conta</a>
+      <a href="/conta/entrar" data-view="entrar" id="navEntrar">Entrar</a>
+      <button type="button" id="logout" hidden>Sair</button>
+    </nav>
+
+    <section class="vista" id="vGeral" hidden aria-labelledby="tGeral">
+      <h1 id="tGeral">Olá</h1>
+      <p class="conta" id="account"></p>
+      <div class="metricas" id="metricas"></div>
+      <h2 class="tituloGrupo">Último pedido</h2>
+      <div class="lista" id="ultimo"></div>
+      <a class="verTodos" href="/conta/pedidos" data-view="pedidos">Ver todos os pedidos ›</a>
+    </section>
+
+    <section class="vista" id="vPedidos" hidden aria-labelledby="tPedidos">
+      <h1 id="tPedidos">Pedidos</h1>
+      <p class="acessoIntro" id="guest"></p>
+      <div class="filtros" id="filtros" role="group" aria-label="Filtrar pedidos"></div>
+      <div class="busca2">
+        <label class="sr" for="fNumero">Número do pedido</label>
+        <input id="fNumero" inputmode="numeric" placeholder="Nº do pedido">
+        <label class="sr" for="fPeriodo">Período</label>
+        <select id="fPeriodo">
+          <option value="30">Últimos 30 dias</option>
+          <option value="90">Últimos 90 dias</option>
+          <option value="365">Último ano</option>
+          <option value="0" selected>Todo o período</option>
+        </select>
+      </div>
+      <div class="lista" id="orders"></div>
+      <div class="paginas" id="paginas"></div>
+    </section>
+
+    <section class="vista" id="vDados" hidden aria-labelledby="tDados">
+      <h1 id="tDados">Dados da conta</h1>
+      <form class="bloco" id="fPerfil">
+        <h2>Empresa e entrega</h2>
+        <div class="duas">
+          <div><label for="dCnpj">CNPJ</label><input id="dCnpj" readonly aria-readonly="true"></div>
+          <div><label for="dZap">WhatsApp</label><input id="dZap" inputmode="numeric" autocomplete="tel" required></div>
+        </div>
+        <p class="nota2">Endereço de entrega: preenche o carrinho quando você escolhe receber em casa. Deixe em branco para não guardar.</p>
+        <div class="duas">
+          <div><label for="dCep">CEP</label><input id="dCep" inputmode="numeric" maxlength="9" placeholder="00000-000"></div>
+          <div><label for="dNome">Quem recebe</label><input id="dNome" maxlength="120"></div>
+        </div>
+        <label for="dRua">Rua / avenida</label><input id="dRua" maxlength="160">
+        <div class="duas">
+          <div><label for="dNum">Número</label><input id="dNum" maxlength="20"></div>
+          <div><label for="dComp">Complemento (opcional)</label><input id="dComp" maxlength="80"></div>
+        </div>
+        <div class="tres">
+          <div><label for="dBairro">Bairro</label><input id="dBairro" maxlength="80"></div>
+          <div><label for="dCidade">Cidade</label><input id="dCidade" maxlength="80"></div>
+          <div><label for="dUf">UF</label><input id="dUf" maxlength="2"></div>
+        </div>
+        <button class="bPri">Salvar</button>
+      </form>
+      <form class="bloco" id="fEmail">
+        <h2>E-mail</h2>
+        <p class="nota2">É o seu acesso e para onde vai a nota fiscal.</p>
+        <label for="dMail">E-mail</label><input id="dMail" type="email" autocomplete="email" required>
+        <label for="dMailSenha">Senha atual, para confirmar</label><input id="dMailSenha" type="password" autocomplete="current-password" required>
+        <button class="bSec">Alterar e-mail</button>
+      </form>
+      <form class="bloco" id="fSenha">
+        <h2>Senha</h2>
+        <label for="dAtual">Senha atual</label><input id="dAtual" type="password" autocomplete="current-password" required>
+        <label for="dNova">Nova senha <span class="obs">12 caracteres ou mais</span></label><input id="dNova" type="password" minlength="12" maxlength="128" autocomplete="new-password" required>
+        <button class="bSec">Alterar senha</button>
+        <p class="nota2">Os outros aparelhos conectados saem da conta.</p>
+      </form>
+    </section>
+  </div>
+</main>
+
+<footer><div class="w">
+  <div class="frow">
+    <span class="fmarca"><img src="https://cdn.vnda.com.br/dropstar/2025/12/17/logo-header-15125700-16129080.png?v=1766009286" alt="Dropstar">DTF</span>
+    <div class="flinks">
+      <a href="https://www.dropstaratacado.com.br" target="_blank" rel="noopener">Loja de atacado</a>
+      <a href="https://www.dropstaratacado.com.br/p/termos" target="_blank" rel="noopener">Trocas e privacidade</a>
+      <a href="https://www.dropstaratacado.com.br/p/atendimento" target="_blank" rel="noopener">Fale conosco</a>
+      <a href="https://www.instagram.com/dropstar.ofc/" target="_blank" rel="noopener">Instagram</a>
+    </div>
+    <div class="fcont">
+      <a href="https://wa.me/message/NJ76CLIOUGXLB1" target="_blank" rel="noopener">16 99428-0056</a>
+      · arquivos 16 99230-2546<br>
+      <a href="mailto:atendimentodropstar@gmail.com">atendimentodropstar@gmail.com</a><br>
+      Segunda a sexta, 07h às 17h
+    </div>
+  </div>
+  <div class="fbase">
+    <span>© Dropstar Atacado · CNPJ 55.786.635/0001-58 · Franca-SP</span>
+    <span>Visa · Master · Elo · Amex · Pix · Boleto</span>
+    <span>têxtil 57 cm · UV 28,5 cm</span>
+  </div>
+</div></footer>
+
+<script src="/privacy.js"></script><script src="/upload.js"></script><script src="/portal.js"></script>
+</body>
+</html>

web/portal.js

@@ -1,62 +1,325 @@
+/* Minha conta: sign-in, the overview, the orders (filtered, a page at a time,
+   with the cart waiting for payment among them) and the account's details.
+   One page; the address says which part shows (/conta, /conta/entrar,
+   /conta/pedidos, /conta/dados). */
 const $=id=>document.getElementById(id);
-const node=(tag,text)=>{const el=document.createElement(tag);if(text!==undefined)el.textContent=text;return el;};
+const node=(tag,text,className)=>{const el=document.createElement(tag);if(text!==undefined&&text!==null)el.textContent=text;if(className)el.className=className;return el;};
 const money=c=>(c/100).toLocaleString('pt-BR',{style:'currency',currency:'BRL'});
-let scope,states={},environment='';
-async function api(path,body){const r=await fetch('/api'+path,{headers:{'Content-Type':'application/json'},...(body===undefined?{}:{method:'POST',body:JSON.stringify(body)})});const d=await r.json();if(!r.ok){const error=new Error(typeof d.detail==='string'?d.detail:'Confira os campos informados.');error.status=r.status;throw error;}return d;}
-function button(text,fn){const b=node('button',text);b.onclick=async()=>{b.disabled=true;try{await fn();}catch(e){$('message').textContent=e.message;}finally{b.disabled=false;}};return b;}
-function forgetCheckout(){for(const k of ['dtf-quote','dtf-request-key','dtf-request-body'])localStorage.removeItem(k);}
-async function load(){
-  try{
-    const session=await api('/session');scope=session.cart_scope;environment=session.environment;
-    $('dev-notice').hidden=environment!=='local';
-    const account=await api('/account/me');
-    $('auth').hidden=!!account.customer;$('logout').hidden=!account.customer;
-    $('account').textContent=account.customer?'Conta: '+account.customer.mail:'';
-    $('guest').textContent=account.customer?'':'Você está vendo apenas os pedidos desta sessão. Crie uma conta para acessar seus pedidos em outro navegador.';
-    const data=await api('/customer/orders');states=data.states;
-    $('quotes').replaceChildren();
-    for(const quote of data.quotes){
-      const card=node('article');card.className='card';card.append(node('h3','Cotação '+quote.id.slice(0,8)));
-      card.append(node('p',quote.approved?'Total aprovado: '+money(quote.approved.total_cents):'Aguardando conferência de metragem e nota.'));
-      const link=node('a','Abrir cotação no Site');link.href='/carrinho?quote='+quote.id;card.append(link);$('quotes').append(card);
-    }
-    $('orders').replaceChildren();
-    if(!data.orders.length)$('orders').append(node('p','Nenhum pedido pago nesta conta ou sessão.'));
-    for(const order of data.orders){
-      const card=node('article');card.className='card';card.id='order-'+order.id;
-      card.append(node('h3','Pedido #'+order.number),node('p',states[order.state]+' · '+money(order.snapshot.total_cents)+(environment==='local'?' · pagamento de teste':'')));
-      card.append(node('p',new Date(order.created_at).toLocaleString('pt-BR')));
-      const content=node('div');
-      card.append(button('Ver detalhes e arquivos',()=>details(order.id,content)),content);$('orders').append(card);
-      if(new URLSearchParams(location.search).get('order')===order.id)await details(order.id,content);
-    }
-  }catch(error){$('message').textContent=error.message;}
+const quando=d=>new Date(d).toLocaleString('pt-BR',{day:'2-digit',month:'2-digit',year:'numeric',hour:'2-digit',minute:'2-digit'});
+const dia=d=>new Date(d).toLocaleDateString('pt-BR',{day:'2-digit',month:'2-digit',year:'2-digit'});
+const metros=m=>Number(m).toLocaleString('pt-BR',{minimumFractionDigits:2,maximumFractionDigits:2})+' m';
+const soDigitos=v=>String(v||'').replace(/\D/g,'');
+const fmtCnpj=v=>soDigitos(v).replace(/^(\d{2})(\d{3})(\d{3})(\d{4})(\d{2})$/,'$1.$2.$3/$4-$5');
+const fmtZap=v=>{const d=soDigitos(v);return d.length===11?'('+d.slice(0,2)+') '+d.slice(2,7)+'-'+d.slice(7):d.length===10?'('+d.slice(0,2)+') '+d.slice(2,6)+'-'+d.slice(6):v;};
+const fmtCep=v=>{const d=soDigitos(v).slice(0,8);return d.length>5?d.slice(0,5)+'-'+d.slice(5):d;};
+// Lucide shapes (ISC licence), the same as on the Site.
+const ICONES={
+  baixar:'<path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><path d="m7 10 5 5 5-5"/><path d="M12 15V3"/>',
+  local:'<path d="M20 10c0 4.99-5.54 10.19-7.4 11.8a1 1 0 0 1-1.2 0C9.54 20.19 4 14.99 4 10a8 8 0 0 1 16 0"/><circle cx="12" cy="10" r="3"/>',
+  caminhao:'<path d="M14 18V6a2 2 0 0 0-2-2H4a2 2 0 0 0-2 2v11a1 1 0 0 0 1 1h2"/><path d="M15 18H9"/><path d="M19 18h2a1 1 0 0 0 1-1v-3.65a1 1 0 0 0-.22-.62l-3.48-4.35A1 1 0 0 0 17.52 8H14"/><circle cx="17" cy="18" r="2"/><circle cx="7" cy="18" r="2"/>',
+  ok:'<path d="M20 6 9 17l-5-5"/>',
+  alerta:'<path d="M12 7v6"/><path d="M12 17h.01"/>',
+};
+function icone(nome){
+  const span=document.createElement('span');
+  span.innerHTML='<svg class="ic" viewBox="0 0 24 24" aria-hidden="true" focusable="false">'+ICONES[nome]+'</svg>';
+  return span.firstChild;
 }
-async function details(id,container){
+const PRODUTO={file:'DTF Têxtil · folha montada',avulsa:'DTF Têxtil · artes avulsas',
+               uvfile:'DTF UV · folha montada',uv:'DTF UV · artes avulsas'};
+const TRILHA=['rec','tra','fil','imp','fin'];
+const TAMANHO=10;
+let scope,states={},environment='',conta=null;
+let filtro={status:'all',number:'',days:0,page:1};
+
+async function api(path,body){const r=await fetch('/api'+path,{headers:{'Content-Type':'application/json'},...(body===undefined?{}:{method:'POST',body:JSON.stringify(body)})});const d=await r.json();if(!r.ok){const error=new Error(typeof d.detail==='string'?d.detail:'Confira os campos informados.');error.status=r.status;throw error;}return d;}
+const aviso=(text,erro)=>{$('message').textContent=text||'';$('message').classList.toggle('erro',!!erro);};
+function button(text,fn,className='bSec'){const b=node('button',text,className);b.type='button';b.onclick=async event=>{event?.stopPropagation?.();b.disabled=true;try{await fn();}catch(e){aviso(e.message,true);}finally{b.disabled=false;}};return b;}
+function forgetCheckout(){for(const k of ['dtf-quote','dtf-request-key','dtf-request-body'])localStorage.removeItem(k);}
+
+// ---- Addresses -----------------------------------------------------------
+
+function vista(){
+  const p=location.pathname.replace(/\/+$/,'');
+  if(p==='/conta/entrar') return 'entrar';
+  if(p==='/conta/dados') return 'dados';
+  if(p==='/conta') return 'geral';
+  return 'pedidos';                 // /conta/pedidos, and the old /portal.html
+}
+function ir(caminho){history.pushState({},'',caminho);mostra().catch(e=>aviso(e.message,true));}
+window.addEventListener('popstate',()=>mostra().catch(e=>aviso(e.message,true)));
+document.addEventListener('click',event=>{
+  const a=event.target.closest('a[data-view]');
+  if(!a||event.metaKey||event.ctrlKey||event.shiftKey)return;
+  event.preventDefault();ir(a.getAttribute('href'));
+});
+
+async function mostra(){
+  aviso('');
+  const v=vista(), proximo=new URLSearchParams(location.search).get('next');
+  // Overview and details are the account's; orders also work for a guest.
+  if((v==='geral'||v==='dados')&&!conta){history.replaceState({},'','/conta/entrar?next='+encodeURIComponent(location.pathname));return mostra();}
+  if(v==='entrar'&&conta){history.replaceState({},'',proximo&&/^\/conta(\/[a-z]+)?$/.test(proximo)?proximo:'/conta');return mostra();}
+  $('auth').hidden=v!=='entrar';
+  $('area').hidden=v==='entrar';
+  $('vGeral').hidden=v!=='geral';$('vPedidos').hidden=v!=='pedidos';$('vDados').hidden=v!=='dados';
+  for(const a of document.querySelectorAll('.lateral a'))a.classList.toggle('on',a.dataset.view===v);
+  for(const a of document.querySelectorAll('.lateral [data-conta]'))a.hidden=!conta;
+  $('navEntrar').hidden=!!conta;$('logout').hidden=!conta;
+  document.title=({entrar:'Entrar',geral:'Minha conta',pedidos:'Pedidos',dados:'Dados da conta'})[v]+' · DTF Dropstar';
+  if(v==='geral')await geral();
+  else if(v==='pedidos')await pedidos();
+  else if(v==='dados')dados();
+}
+
+// ---- Orders --------------------------------------------------------------
+
+function trilha(state){
+  const ol=node('ol',null,'trilha');
+  const atual=TRILHA.indexOf(state);
+  TRILHA.forEach((s,i)=>{
+    const feito=i<atual||state==='fin';
+    const li=node('li',null,feito?'feito':i===atual?'atual':'');
+    const marca=node('span',null,'marca');
+    if(feito)marca.append(icone('ok'));else marca.textContent=String(i+1);
+    li.append(marca,node('b',states[s]||s));ol.append(li);
+  });
+  return ol;
+}
+function estado(e){
+  if(e.kind==='quote')return e.state==='review'?['Em conferência','est-rev']:['Aguardando pagamento','est-pay'];
+  return [states[e.state]||e.state,'est-'+e.state];
+}
+function resumoItens(items){
+  if(!items.length)return '';
+  const total=items.reduce((t,i)=>t+Number(i.billed_metres||0),0);
+  return (items.length===1?PRODUTO[items[0].mode]||items[0].mode:items.length+' itens')+(total?' · '+metros(total):'');
+}
+function linha(e){
+  const row=node('div',null,'linha');
+  const [rotulo,cls]=estado(e);
+  const num=node('b',e.kind==='quote'?'Carrinho':'#'+e.number,'num');
+  const oque=node('div',null,'oque');oque.append(node('span',resumoItens(e.items)),node('span',dia(e.created_at),'data'));
+  const st=node('span',null,'estadoW');st.append(node('span',rotulo,'estado '+cls));
+  if(e.kind==='quote'&&e.pay_with==='pix')st.append(node('span','PIX','via'));
+  const valor=node('b',e.total_cents!=null?money(e.total_cents):'—','valor');
+  const acao=node('div',null,'acao');
+  row.append(num,oque,st,valor,acao);
+  const wrap=node('div',null,'item'+(e.kind==='quote'?' pendente':'')+(e.state==='cor'?' correcao':''));
+  wrap.append(row);
+  if(e.kind==='quote'){
+    if(e.state==='pay'){
+      const pagar=node('a','Pagar','bPri bMini');
+      pagar.href=(e.pay_with==='pix'?'/pagamento/pix':'/pagamento')+'?quote='+e.id;
+      acao.append(pagar);
+    }
+    return wrap;
+  }
+  wrap.id='order-'+e.id;
+  const detalhe=node('div',null,'detalhe');detalhe.hidden=true;
+  const alterna=async()=>{
+    if(!detalhe.hidden){detalhe.hidden=true;ver.textContent='Ver';return;}
+    await details(e.id,detalhe,e.created_at);detalhe.hidden=false;ver.textContent='Fechar';
+  };
+  const ver=button('Ver',alterna);
+  acao.append(ver);
+  row.addEventListener('click',event=>{if(!event.target.closest('button,a'))ver.click();});
+  wrap.append(detalhe);
+  wrap.abrir=async()=>{if(detalhe.hidden)await alterna();};
+  return wrap;
+}
+function filtros(counts,groups){
+  const box=$('filtros');box.replaceChildren();
+  const todos=Object.values(counts).reduce((a,b)=>a+b,0);
+  for(const [key,label] of [['all','Todos'],...Object.entries(groups)]){
+    const n=key==='all'?todos:counts[key];
+    const chip=node('button',label+(n?' · '+n:''),'chipF'+(filtro.status===key?' on':''));chip.type='button';
+    chip.setAttribute('aria-pressed',String(filtro.status===key));
+    chip.onclick=()=>{filtro={...filtro,status:key,page:1};pedidos().catch(x=>aviso(x.message,true));};
+    box.append(chip);
+  }
+}
+function paginas(total){
+  const box=$('paginas');box.replaceChildren();
+  const n=Math.ceil(total/TAMANHO);
+  if(n<=1){if(total)box.append(node('span',total+(total===1?' pedido':' pedidos'),'nota2'));return;}
+  const de=(filtro.page-1)*TAMANHO+1, ate=Math.min(total,filtro.page*TAMANHO);
+  box.append(node('span',de+'–'+ate+' de '+total+' pedidos','nota2'));
+  const nav=node('div',null,'pags');
+  const vai=p=>{filtro.page=p;pedidos().then(()=>$('vPedidos').scrollIntoView({block:'start'})).catch(x=>aviso(x.message,true));};
+  const b=(t,p,label)=>{const x=node('button',t,'pag'+(p===filtro.page?' on':''));x.type='button';if(label)x.setAttribute('aria-label',label);
+    if(p===filtro.page)x.setAttribute('aria-current','page');else if(p<1||p>n)x.disabled=true;else x.onclick=()=>vai(p);nav.append(x);};
+  b('‹',filtro.page-1,'Página anterior');
+  for(let p=Math.max(1,filtro.page-2);p<=Math.min(n,filtro.page+2);p++)b(String(p),p);
+  b('›',filtro.page+1,'Próxima página');
+  box.append(nav);
+}
+async function pedidos(){
+  $('guest').textContent=conta?'':'Você está vendo os pedidos feitos neste navegador. Entre ou crie uma conta para vê-los em qualquer lugar.';
+  const q=new URLSearchParams({status:filtro.status,days:String(filtro.days),page:String(filtro.page),size:String(TAMANHO)});
+  if(filtro.number)q.set('number',filtro.number);
+  const data=await api('/customer/orders?'+q);states=data.states;
+  filtros(data.counts,data.groups);
+  const lista=$('orders');lista.replaceChildren();
+  if(!data.items.length){
+    const livre=filtro.status==='all'&&!filtro.number&&!filtro.days;
+    const vazio=node('div',null,'vazio');
+    vazio.append(node('p',livre?'Seus pedidos aparecem aqui.':'Nenhum pedido com esse filtro.'));
+    if(livre){const a=node('a','Enviar uma arte','bPri');a.href='/#envio';vazio.append(a);}
+    lista.append(vazio);
+  }
+  for(const e of data.items)lista.append(linha(e));
+  paginas(data.total);
+  const aberto=new URLSearchParams(location.search).get('order');
+  if(aberto&&/^[0-9a-f-]{36}$/.test(aberto)){
+    let alvo=$('order-'+aberto);
+    if(!alvo){
+      // Not on this page of the list: shown on its own, above it.
+      try{const o=await api('/customer/orders/'+aberto);
+        alvo=linha({kind:'order',id:o.id,number:o.number,state:o.state,total_cents:o.snapshot.total_cents,
+                    created_at:o.created_at,items:o.snapshot.items});lista.prepend(alvo);}catch(e){alvo=null;}
+    }
+    if(alvo){await alvo.abrir();alvo.scrollIntoView({block:'start'});}
+  }
+}
+let buscaTimer;
+$('fNumero').addEventListener('input',e=>{e.target.value=soDigitos(e.target.value);clearTimeout(buscaTimer);
+  buscaTimer=setTimeout(()=>{filtro={...filtro,number:e.target.value,page:1};pedidos().catch(x=>aviso(x.message,true));},350);});
+$('fPeriodo').addEventListener('change',e=>{filtro={...filtro,days:Number(e.target.value),page:1};pedidos().catch(x=>aviso(x.message,true));});
+
+function itensPedido(snapshot){
+  const ul=node('ul',null,'itensPed');
+  for(const item of snapshot.items){
+    const li=node('li');
+    li.append(node('span',PRODUTO[item.mode]||item.mode,'nome'),node('span',metros(item.billed_metres),'qt'),node('b',money(item.total_cents)));
+    ul.append(li);
+  }
+  const f=snapshot.freight;
+  if(f&&f.total_cents){const li=node('li',null,'frete');li.append(node('span','Frete','nome'),node('span',f.days?'até '+f.days+' dias úteis':'','qt'),node('b',money(f.total_cents)));ul.append(li);}
+  return ul;
+}
+function entrega(snapshot){
+  const d=snapshot.destination, p=node('p',null,'entregaPed');
+  p.append(icone(d?'caminhao':'local'),node('span',d?'Entrega pela Jadlog · '+d.street+', '+d.number+' · '+d.city+'/'+d.state:'Retirada em Franca · Av. Major Elias Motta, 1281'));
+  return p;
+}
+async function details(id,container,criado){
   const order=await api('/customer/orders/'+id);container.replaceChildren();
-  for(const [i,item] of order.snapshot.items.entries())container.append(node('p',(i+1)+'. '+item.mode+' · '+item.billed_metres+' m · nota '+item.grade+' · '+money(item.total_cents)));
-  const history=node('ol');
-  for(const h of order.history)history.append(node('li',new Date(h.created_at).toLocaleString('pt-BR')+' · '+states[h.to_state]+(h.reason?' — '+h.reason:'')));
-  container.append(history);
-  for(const file of order.files){
-    const row=node('p',(file.kind==='final'?'Arquivo final':'Correção')+' · item '+(file.item_index+1)+' · '+file.name+' · '+(file.expired?'expirado':!file.active?'substituído':'disponível até '+new Date(file.expires_at).toLocaleDateString('pt-BR')));
-    if(file.active&&!file.expired)row.append(button('Baixar',async()=>{const d=await api('/customer/orders/'+id+'/files/'+file.id+'/download');const link=node('a');link.href=d.url;link.download=d.name;link.referrerPolicy='no-referrer';link.click();}));
-    container.append(row);
+  if(order.state==='cor'){
+    const p=node('p',null,'pedAlerta');p.append(icone('alerta'),node('span','A equipe precisa de uma correção na sua arte. Veja o motivo abaixo e envie o arquivo corrigido.'));
+    container.append(p);
+  }else container.append(trilha(order.state));
+  container.append(itensPedido(order.snapshot),entrega(order.snapshot));
+  const hist=node('div',null,'secao');hist.append(node('h4','Andamento'));
+  const ol=node('ol',null,'historico');
+  // Payment is where the order starts: the first step is not a movement.
+  if(criado){const li=node('li');li.append(node('b',states.rec||'Arte recebida'),node('span',quando(criado)));ol.append(li);}
+  for(const h of order.history){
+    const li=node('li');li.append(node('b',states[h.to_state]),node('span',quando(h.created_at)));
+    if(h.reason)li.append(node('p',h.reason,'motivo'));
+    ol.append(li);
+  }
+  hist.append(ol);container.append(hist);
+  if(order.files.length){
+    const arq=node('div',null,'secao');arq.append(node('h4','Arquivos'));
+    for(const file of order.files){
+      const row=node('div',null,'arquivo');
+      const info=node('div');
+      info.append(node('b',file.name),node('span',(file.kind==='final'?'Arquivo final':'Correção')+' · item '+(file.item_index+1)+' · '+
+        (file.expired?'expirado':!file.active?'substituído':'disponível até '+dia(file.expires_at))));
+      row.append(info);
+      if(file.active&&!file.expired){
+        const b=button('Baixar',async()=>{const d=await api('/customer/orders/'+id+'/files/'+file.id+'/download');const link=node('a');link.href=d.url;link.download=d.name;link.referrerPolicy='no-referrer';link.click();});
+        b.prepend(icone('baixar'));row.append(b);
+      }
+      arq.append(row);
+    }
+    container.append(arq);
   }
   if(order.state==='cor'){
-    const form=node('form');form.append(node('h3','Enviar arte corrigida'));
-    const inputs=order.snapshot.items.map((item,index)=>{const label=node('label','Item '+(index+1)+' · '+item.mode);const input=node('input');input.type='file';input.multiple=true;input.dataset.item=index;label.append(input);form.append(label);return input;});
-    const note=node('textarea');note.placeholder='Descreva a correção';note.required=true;note.maxLength=1000;form.append(note);
-    const submit=node('button','Enviar correção');submit.type='submit';form.append(submit);
+    const form=node('form',null,'secao correcaoForm');form.append(node('h4','Enviar arte corrigida'));
+    const inputs=order.snapshot.items.map((item,index)=>{
+      const label=node('label',(index+1)+'. '+(PRODUTO[item.mode]||item.mode));
+      const input=node('input');input.type='file';input.multiple=true;input.dataset.item=index;
+      form.append(label,input);return input;
+    });
+    const nl=node('label','O que foi corrigido');const note=node('textarea');note.required=true;note.maxLength=1000;note.rows=3;
+    form.append(nl,note);
+    const submit=node('button','Enviar correção','bPri');submit.type='submit';form.append(submit);
     form.onsubmit=async event=>{event.preventDefault();submit.disabled=true;try{
-      const files=[];for(const [index,input] of inputs.entries())for(const file of input.files)files.push({item_index:index,upload_id:await dtfUpload(file,{api,scope:scope+':correction:'+id+':'+order.version,progress:text=>$('message').textContent=text})});
+      const files=[];for(const [index,input] of inputs.entries())for(const file of input.files)files.push({item_index:index,upload_id:await dtfUpload(file,{api,scope:scope+':correction:'+id+':'+order.version,progress:text=>aviso(text)})});
       if(!files.length)throw new Error('Selecione pelo menos um arquivo corrigido.');
       await api('/customer/orders/'+id+'/corrections',{version:order.version,files,note:note.value});
-      $('message').textContent='Correção enviada. Aguarde a conferência da equipe.';await details(id,container);
-    }catch(error){$('message').textContent=error.message;}finally{submit.disabled=false;}};
+      aviso('Correção enviada. A equipe confere e segue com o pedido.');await details(id,container,criado);
+    }catch(error){aviso(error.message,true);}finally{submit.disabled=false;}};
     container.append(form);
   }
 }
+
+// ---- Overview ------------------------------------------------------------
+
+async function geral(){
+  $('account').textContent='CNPJ '+fmtCnpj(conta.cnpj)+' · '+conta.mail;
+  const data=await api('/customer/orders?page=1&size=1');states=data.states;
+  const box=$('metricas');box.replaceChildren();
+  for(const [key,label] of [['pay','Aguardando pagamento'],['prod','Em produção'],['cor','Correção'],['fin','Finalizados']]){
+    if(key==='cor'&&!data.counts.cor)continue;
+    const a=node('a',null,'metrica'+(key==='cor'?' alerta':''));a.href='/conta/pedidos';a.dataset.view='pedidos';
+    a.addEventListener('click',()=>{filtro={status:key,number:'',days:0,page:1};});
+    a.append(node('span',label),node('b',String(data.counts[key])));
+    box.append(a);
+  }
+  const ultimo=$('ultimo');ultimo.replaceChildren();
+  if(data.items.length)ultimo.append(linha(data.items[0]));
+  else{const v=node('div',null,'vazio');v.append(node('p','Seu primeiro pedido aparece aqui.'));const a=node('a','Enviar uma arte','bPri');a.href='/#envio';v.append(a);ultimo.append(v);}
+}
+
+// ---- Account details -----------------------------------------------------
+
+const CAMPOS_END=[['dNome','recipient'],['dRua','street'],['dNum','number'],['dComp','complement'],['dBairro','district'],['dCidade','city'],['dUf','state']];
+function dados(){
+  $('dCnpj').value=fmtCnpj(conta.cnpj);$('dZap').value=fmtZap(conta.zap);$('dMail').value=conta.mail;
+  const end=conta.address||{};
+  $('dCep').value=fmtCep(end.postal_code||'');
+  for(const [id,k] of CAMPOS_END)$(id).value=end[k]||'';
+  $('dMailSenha').value='';$('dAtual').value='';$('dNova').value='';
+}
+$('dZap').addEventListener('input',e=>{e.target.value=fmtZap(soDigitos(e.target.value).slice(0,11));});
+$('dCep').addEventListener('input',async e=>{
+  e.target.value=fmtCep(e.target.value);
+  const cep=soDigitos(e.target.value);
+  if(cep.length!==8)return;
+  try{const a=await api('/cep/'+cep);
+    for(const [id,v] of [['dRua',a.street],['dBairro',a.district],['dCidade',a.city],['dUf',a.state]])if(v)$(id).value=v;
+    (['dNome','dRua','dNum'].map($).find(el=>!el.value.trim())||$('dNum')).focus();
+  }catch(_){/* sem consulta: o cliente preenche */}
+});
+$('fPerfil').onsubmit=async event=>{
+  event.preventDefault();
+  const cep=soDigitos($('dCep').value);
+  const campos=Object.fromEntries(CAMPOS_END.map(([id,k])=>[k,$(id).value.trim()]));
+  const algum=cep||Object.values(campos).some(Boolean);
+  const address=algum?{...campos,state:campos.state.toUpperCase(),postal_code:cep}:null;
+  try{
+    const r=await api('/account/profile',{zap:$('dZap').value,address});
+    conta=r.customer;aviso('Dados salvos.');
+  }catch(e){aviso(e.status===422?(algum?'Confira o WhatsApp e o endereço: todos os campos, menos o complemento, são necessários.':'Confira o WhatsApp.'):e.message,true);}
+};
+$('fEmail').onsubmit=async event=>{
+  event.preventDefault();
+  try{const r=await api('/account/email',{email:$('dMail').value,password:$('dMailSenha').value});
+    conta=r.customer;$('dMailSenha').value='';$('quem').textContent=conta.mail;aviso('E-mail alterado. Use o novo e-mail para entrar.');}
+  catch(e){aviso(e.status===422?'Confira o e-mail.':e.message,true);}
+};
+$('fSenha').onsubmit=async event=>{
+  event.preventDefault();
+  try{await api('/account/password',{current:$('dAtual').value,new:$('dNova').value});
+    $('dAtual').value='';$('dNova').value='';aviso('Senha alterada.');}
+  catch(e){aviso(e.status===422?'A nova senha precisa ter 12 caracteres ou mais.':e.message,true);}
+};
+
+// ---- Signing in ----------------------------------------------------------
+
 async function migrateGuestCart(previous,next){
   if(previous===next)return;
   const database=await new Promise((resolve,reject)=>{const r=indexedDB.open('dtf-local-cart',1);r.onupgradeneeded=()=>r.result.createObjectStore('cart');r.onsuccess=()=>resolve(r.result);r.onerror=()=>reject(r.error);});
@@ -64,14 +327,25 @@ async function migrateGuestCart(previous,next){
   database.close();
 }
 async function authenticate(path,body){
-  const previous=scope,guest=!(await api('/account/me')).customer;
-  await api(path,body);forgetCheckout();$('message').textContent='Acesso confirmado.';
-  const next=(await api('/session')).cart_scope;
-  if(guest)try{await migrateGuestCart(previous,next);}catch{$('message').textContent='Acesso confirmado. Não foi possível transferir o carrinho salvo neste navegador.';}
-  await load();$('password').value='';$('register-password').value='';
+  const previous=scope,guest=!conta;
+  const r=await api(path,body);forgetCheckout();
+  const next=(await api('/session')).cart_scope;scope=next;
+  if(guest)try{await migrateGuestCart(previous,next);}catch{aviso('Não foi possível transferir o carrinho salvo neste navegador.',true);}
+  conta=r.customer;$('quem').textContent=conta.mail;
+  $('password').value='';$('register-password').value='';
+  await mostra();
 }
-$('login').onsubmit=async event=>{event.preventDefault();try{await authenticate('/account/login',{email:$('email').value,password:$('password').value});}catch(e){$('message').textContent=e.message;}};
-$('register').onsubmit=async event=>{event.preventDefault();try{await authenticate('/account/register',{customer:{cnpj:$('cnpj').value,zap:$('phone').value,mail:$('register-email').value},password:$('register-password').value});}catch(e){$('message').textContent=e.message;}};
-$('logout').onclick=async()=>{try{await window.dtfForgetPrivateData();await api('/account/logout',{});location.reload();}catch(error){$('message').textContent='Não foi possível limpar os dados deste navegador. Feche as abas do Site e limpe os dados do site nas configurações do navegador.';}};
-$('refresh').onclick=load;
-load();
+$('login').onsubmit=async event=>{event.preventDefault();try{await authenticate('/account/login',{email:$('email').value,password:$('password').value});}catch(e){aviso(e.message,true);}};
+$('register').onsubmit=async event=>{event.preventDefault();try{await authenticate('/account/register',{customer:{cnpj:$('cnpj').value,zap:$('phone').value,mail:$('register-email').value},password:$('register-password').value});}catch(e){aviso(e.status===422?'Confira o CNPJ, o WhatsApp e o e-mail. A senha precisa ter 12 caracteres ou mais.':e.message,true);}};
+$('esqueci').onclick=()=>{$('esqueciTx').hidden=!$('esqueciTx').hidden;};
+$('logout').onclick=async()=>{try{await window.dtfForgetPrivateData();await api('/account/logout',{});location.assign('/conta/entrar');}catch(error){aviso('Não foi possível limpar os dados deste navegador. Feche as abas do Site e limpe os dados do site nas configurações do navegador.',true);}};
+
+(async()=>{
+  try{
+    const session=await api('/session');scope=session.cart_scope;environment=session.environment;
+    $('dev-notice').hidden=environment!=='local';
+    conta=(await api('/account/me')).customer;
+    if(conta)$('quem').textContent=conta.mail;
+    await mostra();
+  }catch(error){aviso(error.message,true);}
+})();

web/site-cart.js

@@ -15,8 +15,13 @@ function itemPodeEnviar(item){
   return item.qualityStatus==='ok' || item.qualityStatus==='unverified' ||
     (item.qualityStatus==='warning' && item.qualityAcknowledged===true);
 }
+// Os itens marcados no carrinho são os que vão para o pagamento; um item
+// desmarcado fica guardado para depois. O item aberto no produto sempre vai.
+function itensAPagar(){
+  return [...pedido.filter(it=>it.marcado!==false),...(itemAtual?[itemAtual]:[])];
+}
 function cartPodeEnviar(){
-  const items=[...pedido,...(itemAtual?[itemAtual]:[])];
+  const items=itensAPagar();
   return items.length>0 && items.every(itemPodeEnviar);
 }
 function limpaPaineis(){
@@ -28,9 +33,17 @@ function limpaPaineis(){
 // O carrinho junta itens de produtos diferentes e cobra uma vez só.
 function pintaPedido(){
   $('itens').innerHTML = pedido.map((it,i)=>
-    '<div class="item"><div class="nm2"><b>'+escapeHTML(it.tit)+'</b><span>'+escapeHTML(it.desc)+'</span></div>'+
+    '<div class="item'+(it.marcado===false?' fora':'')+'">'+
+    '<label class="marca"><input type="checkbox" data-sel="'+i+'"'+(it.marcado===false?'':' checked')+
+      ' aria-label="Incluir '+escapeHTML(it.tit)+' no pagamento"></label>'+
+    '<span class="miniItem">'+(it.mini ? '<img src="'+escapeHTML(it.mini)+'" alt="">' : '<i>'+escapeHTML(it.ext||'')+'</i>')+
+      (it.arquivos>1 ? '<em>+'+(it.arquivos-1)+'</em>' : '')+'</span>'+
+    '<div class="nm2"><b>'+escapeHTML(it.tit)+'</b><span>'+escapeHTML(it.desc)+'</span></div>'+
     '<div class="vl2">'+rs(it.total)+'</div>'+
-    '<button type="button" class="x" data-rmi="'+i+'" aria-label="Remover '+escapeHTML(it.tit)+'">Remover</button></div>').join('');
+    '<button type="button" class="x" data-rmi="'+i+'" aria-label="Remover '+escapeHTML(it.tit)+'">'+icone('lixeira')+'<span>Remover</span></button></div>').join('');
+  $('itens').querySelectorAll('[data-sel]').forEach(c=>c.addEventListener('change',()=>{
+    pedido[+c.dataset.sel].marcado=c.checked; pintaPedido();
+  }));
   $('itens').querySelectorAll('[data-rmi]').forEach(b=>b.addEventListener('click',()=>{
     const i=+b.dataset.rmi, [item]=pedido.splice(i,1);
     pintaPedido();
@@ -39,28 +52,31 @@ function pintaPedido(){
     });
   }));
   $('bEsvaziar').hidden = pedido.length+(itemAtual?1:0) < 2;
-  const itens = pedido.reduce((t,it)=>t+it.total,0) + (itemAtual? itemAtual.total : 0);
+  const aPagar = itensAPagar();
+  const itens = aPagar.reduce((t,it)=>t+it.total,0);
   const frete = entrega.tipo==='frete' && entrega.cotado ? entrega.valor : 0;
   const soma = itens + frete;
-  const n = pedido.length + (itemAtual?1:0);
-  const eco = [...pedido, ...(itemAtual?[itemAtual]:[])]
+  const n = aPagar.length, noCarrinho = pedido.length + (itemAtual?1:0);
+  const eco = aPagar
     .reduce((t,it)=>t+(TABELA[it.modo]-it.unit)*it.cob, 0);
   $('resLin').innerHTML =
     '<div class="l"><span>'+n+(n===1?' item':' itens')+'</span><b>'+rs(itens+eco)+'</b></div>'+
     (eco>0.01? '<div class="l" style="color:var(--verde-ml)"><span>Desconto pela nota</span>'+
       '<b style="color:var(--verde-ml)">− '+rs(eco)+'</b></div>' : '')+
-    '<div class="l"><span>Frete</span><b>'+
+    '<div class="l"><span>Frete'+(entrega.tipo==='frete' && entrega.cotado && entrega.dias
+        ? ' · até '+entrega.dias+' dias úteis' : '')+'</span><b>'+
       (entrega.tipo==='retira' ? '<span style="color:var(--verde-ml)">Grátis</span>'
        : entrega.cotado ? rs(frete) : 'a cotar')+'</b></div>'+
     '<div class="l"><span>Revisão e reencaixe</span>'+
       '<b><span style="color:var(--verde-ml)">Grátis</span></b></div>';
   $('carrTot').textContent=rs(soma);
-  $('bPagar').textContent = (pedido.length + (itemAtual?1:0))>1
-    ? 'Pagar os '+(pedido.length+(itemAtual?1:0))+' itens de uma vez'
+  $('bPagarTx').textContent = n>1
+    ? 'Pagar os '+n+' itens de uma vez'
     : 'Ir para o pagamento';
   $('bPagar').disabled = !cartPodeEnviar() || !entrega.cotado || !clienteOk() || !enderecoOk();
   if(pedido.length || itemAtual) $('carr').classList.add('on');
-  if($('cartLink')) $('cartLink').textContent='Carrinho ('+n+')';
+  if($('cartN')){ $('cartN').textContent=noCarrinho>99?'99+':noCarrinho; $('cartN').hidden=!noCarrinho;
+    $('cartLink').setAttribute('aria-label','Carrinho, '+noCarrinho+(noCarrinho===1?' item':' itens')); }
   window.dispatchEvent(new Event('dtf-cart-changed'));
 }
 
@@ -90,7 +106,7 @@ function carrinho(){
        measurement:x.med?'file':'customer'}
     : {kind:'artwork',width_cm:x.cm,length_cm:+(x.cm*propDe(x)).toFixed(4),
        copies:x.q,rotation_degrees:x.giro||0,mirrored:!!x.esp,
-       measurement:x.src?'file':'customer'});
+       measurement:(x.src||x.semPrevia)?'file':'customer'});
   let layout;
   if(ehFolha()){
     let y=0;
@@ -110,6 +126,9 @@ function carrinho(){
   }
   itemAtual={modo, tit:MODOS[modo].tit, nota, metros, cob, unit, total:tot,
              localFiles:(ehFolha()?folhas:artes).map(x=>x.f),
+             mini:(ehFolha()?folhas:artes).map(x=>x.miniSrc).find(Boolean)||null,
+             ext:extDe(((ehFolha()?folhas:artes)[0]||{f:{name:''}}).f.name),
+             arquivos:(ehFolha()?folhas:artes).length,
              production:{version:2,film_width_cm:larguraFilme(),sources,...layout},
              qualityStatus:$('ciente').classList.contains('recusa')?'rejected':
                $('ciente').classList.contains('on')?'warning':nota===0?'unverified':'ok',
@@ -119,7 +138,7 @@ function carrinho(){
   previa();
   if(nota<90){
     const piso=pisoEscada(), ganho=(base-piso)*cob;
-    if(ganho>0.5) qm('<b>Dá para chegar ao melhor preço.</b> Corrigindo os pontos e chegando a 90, '+
+    if(ganho>0.5) qm('<b>Dá para pagar menos.</b> Com a arte em 300 DPI, '+
       'o metro cai para '+rs(piso)+' — são '+rs(ganho)+' a menos neste pedido.','var(--verde)');
   }
 }

web/site-compra.js

@@ -1,4 +1,4 @@
-/* Site DTF — the product page's buy box: grade, price per metre, billed length,
+/* Site DTF — the product page's buy box: price ladder, price per metre, billed length,
    total and the add-to-cart button, beside the live sheet. It shows the item
    the other site-*.js files already priced (itemAtual) and never computes a
    price of its own, so the box and the cart always agree. */
@@ -10,18 +10,29 @@
     add.disabled=!it || !itemPodeEnviar(it);
     if(!it) return;
     const semNota=!it.nota;
-    $('cNota').textContent = semNota ? 'sem nota' : it.nota;
-    $('cNotaBar').style.width=(semNota?0:it.nota)+'%';
-    $('cNotaBar').className = semNota ? '' : it.nota>=85 ? 'ok' : it.nota>=50 ? 'av' : 'er';
-    $('cTabela').textContent = TABELA[it.modo]-it.unit>0.001 ? rs(TABELA[it.modo]) : '';
+    // The price ladder in resolution: nota = DPI ÷ 3, so 90 is 270 DPI.
+    const faixas=FAIXAS[it.modo], ativa=faixas.findIndex(([min])=>it.nota>=min);
+    $('cEscada').innerHTML=faixas.map(([min,v],i)=>
+      '<li'+(i===ativa?' class="on" aria-current="true"':'')+'><span>'+
+        (min? min*3+'+'+(i? '' : ' DPI') : semNota? 'cheio' : 'menos')+'</span>'+
+        '<b>'+rs(v).slice(3)+'</b></li>').join('');
+    const analisadas=ehFolha(it.modo) && folhas.length && folhas.every(x=>x.an);
+    $('cMetroLbl').textContent = semNota ? 'Metro · preço cheio'
+      : analisadas && folhas.every(x=>x.an.vetor) ? 'Metro · arte vetorial'
+      : analisadas ? 'Metro · '+Math.min(...folhas.map(x=>x.an.dpi))+' DPI'
+      : 'Metro';
     $('cMetro').textContent=rs(it.unit);
     $('cMetragem').textContent=fmtM(it.cob)+' m';
+    const economia=(TABELA[it.modo]-it.unit)*it.cob;
+    $('cEco').textContent = economia>0.005 ? rs(economia)+' a menos pela resolução da arte' : '';
+    const partes=ehFolha(it.modo) ? Math.ceil(it.metros/20) : 1;
+    $('cPartes').textContent = partes>1 ? ' Sai em '+partes+' partes de até 20 m.' : '';
     const sobraCm=Math.round((it.cob-it.metros)*100);
     $('cObs').textContent =
       it.cob===MINIMO_M && it.metros<MINIMO_M
         ? (ehFolha(it.modo) ? 'Pedido mínimo de 1 m.'
                             : 'Pedido mínimo de 1 m: ainda cabem '+sobraCm+' cm de artes sem custo.')
-        : sobraCm>0 ? fmtM(it.metros)+' m de folha, arredondado a cada 10 cm.' : '';
+        : '';
     $('cTotal').textContent=rs(it.total);
   }
   add.addEventListener('click',()=>adicionaAoCarrinho());

web/site-config.js

@@ -5,28 +5,43 @@
 
 const $=id=>document.getElementById(id);
 const rs=v=>'R$ '+v.toFixed(2).replace('.',',');
-const fmt=b=>b<1048576?(b/1024).toFixed(0)+' KB':(b/1048576).toFixed(1).replace('.',',')+' MB';
+// Ícones (Lucide, licença ISC) desenhados no próprio HTML: nada a carregar, e a
+// cor vem do texto em volta. Os que ficam no HTML estático são os mesmos.
+const ICONES={
+  conta:'<path d="M19 21v-2a4 4 0 0 0-4-4H9a4 4 0 0 0-4 4v2"/><circle cx="12" cy="7" r="4"/>',
+  sacola:'<path d="M6 2 3 6v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V6l-3-4Z"/><path d="M3 6h18"/><path d="M16 10a4 4 0 0 1-8 0"/>',
+  enviar:'<path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><path d="m17 8-5-5-5 5"/><path d="M12 3v12"/>',
+  girar:'<path d="M21 12a9 9 0 1 1-9-9c2.52 0 4.93 1 6.74 2.74L21 8"/><path d="M21 3v5h-5"/>',
+  espelhar:'<path d="m3 7 5 5-5 5V7"/><path d="m21 7-5 5 5 5V7"/><path d="M12 20v2"/><path d="M12 14v2"/><path d="M12 8v2"/><path d="M12 2v2"/>',
+  fechar:'<path d="M18 6 6 18"/><path d="m6 6 12 12"/>',
+  adicionar:'<path d="M6 2 3 6v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V6l-3-4Z"/><path d="M3 6h18"/><path d="M12 10v6"/><path d="M9 13h6"/>',
+  cadeado:'<path d="M5 11h14a2 2 0 0 1 2 2v7a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-7a2 2 0 0 1 2-2Z"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/>',
+  lixeira:'<path d="M3 6h18"/><path d="M19 6v14c0 1-1 2-2 2H7c-1 0-2-1-2-2V6"/><path d="M8 6V4c0-1 1-2 2-2h4c1 0 2 1 2 2"/><path d="M10 11v6"/><path d="M14 11v6"/>',
+  local:'<path d="M20 10c0 4.99-5.54 10.19-7.4 11.8a1 1 0 0 1-1.2 0C9.54 20.19 4 14.99 4 10a8 8 0 0 1 16 0"/><circle cx="12" cy="10" r="3"/>',
+  caminhao:'<path d="M14 18V6a2 2 0 0 0-2-2H4a2 2 0 0 0-2 2v11a1 1 0 0 0 1 1h2"/><path d="M15 18H9"/><path d="M19 18h2a1 1 0 0 0 1-1v-3.65a1 1 0 0 0-.22-.62l-3.48-4.35A1 1 0 0 0 17.52 8H14"/><circle cx="17" cy="18" r="2"/><circle cx="7" cy="18" r="2"/>',
+  cartao:'<path d="M4 5h16a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V7a2 2 0 0 1 2-2Z"/><path d="M2 10h20"/>',
+  qrcode:'<path d="M3 3h5v5H3z"/><path d="M16 3h5v5h-5z"/><path d="M3 16h5v5H3z"/><path d="M21 16h-3a2 2 0 0 0-2 2v3"/><path d="M21 21v.01"/><path d="M12 7v3a2 2 0 0 1-2 2H7"/><path d="M3 12h.01"/><path d="M12 3h.01"/><path d="M12 16v.01"/><path d="M16 12h1"/><path d="M21 12v.01"/><path d="M12 21v-1"/>',
+  copiar:'<path d="M10 8h10a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H10a2 2 0 0 1-2-2V10a2 2 0 0 1 2-2Z"/><path d="M4 16a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h10a2 2 0 0 1 2 2"/>',
+  relogio:'<circle cx="12" cy="12" r="10"/><path d="M12 6v6l4 2"/>',
+  ok:'<path d="M20 6 9 17l-5-5"/>',
+  okCirculo:'<circle cx="12" cy="12" r="10"/><path d="m9 12 2 2 4-4"/>',
+  alerta:'<path d="M12 7v6"/><path d="M12 17h.01"/>',
+  refazer:'<path d="M3 12a9 9 0 1 0 9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"/><path d="M3 3v5h5"/>',
+};
+const icone=n=>'<svg class="ic" viewBox="0 0 24 24" aria-hidden="true" focusable="false">'+ICONES[n]+'</svg>';
+const fmt=b=>b<1048576?(b/1024).toFixed(0)+' KB'
+  :b<1073741824?(b/1048576).toFixed(1).replace('.',',')+' MB':(b/1073741824).toFixed(1).replace('.',',')+' GB';
 
 // ── modos
 const MODOS={
-  file:  {tit:'Arquivo por metro', lg:'DTF têxtil · 57 cm', larg:57,
-          preco:'R$ 14,90 a R$ 19,90 /m conforme a nota', multi:true, folha:true,
-          sub:'Sua folha montada. Revisamos, corrigimos e reencaixamos antes de imprimir.',
-          zt:'Arraste suas folhas montadas',
-          zs:'uma ou várias · PNG, JPG, TIFF ou PDF · PSD, AI e CDR passam por tratamento'},
-  avulsa:{tit:'Artes avulsas', lg:'DTF têxtil · 57 cm', larg:57,
-          preco:'R$ 24,90 a R$ 29,90 /m conforme a nota', multi:true,
-          sub:'Cada arte num arquivo. Montamos a folha com o melhor encaixe.',
+  file:  {tit:'Arquivo por metro', lg:'DTF têxtil · 57 cm', larg:57, multi:true, folha:true,
+          zt:'Arraste sua folha montada aqui', zs:'PNG, JPG ou PDF · 57 cm de largura'},
+  avulsa:{tit:'Artes avulsas', lg:'DTF têxtil · 57 cm', larg:57, multi:true,
           zt:'Arraste suas artes aqui',
           zs:'PNG ou JPG com fundo transparente · informe a largura de cada uma'},
-  uvfile:{tit:'Arquivo por metro · UV', lg:'Adesivo UV · 28,5 cm', larg:28.5,
-          preco:'R$ 69,90 a R$ 85,90 /m conforme a nota', multi:true, folha:true,
-          sub:'Sua folha de UV montada. Revisamos, corrigimos e reencaixamos antes de imprimir.',
-          zt:'Arraste suas folhas de UV',
-          zs:'uma ou várias · PNG, JPG, TIFF ou PDF · PSD, AI e CDR passam por tratamento'},
-  uv:    {tit:'Artes avulsas · UV', lg:'Adesivo UV · 28,5 cm', larg:28.5,
-          preco:'R$ 83,90 a R$ 99,90 /m conforme a nota', multi:true,
-          sub:'Cada arte de UV num arquivo. Montamos a folha com o melhor encaixe.',
+  uvfile:{tit:'Arquivo por metro · UV', lg:'Adesivo UV · 28,5 cm', larg:28.5, multi:true, folha:true,
+          zt:'Arraste sua folha de UV aqui', zs:'PNG, JPG ou PDF · 28,5 cm de largura'},
+  uv:    {tit:'Artes avulsas · UV', lg:'Adesivo UV · 28,5 cm', larg:28.5, multi:true,
           zt:'Arraste suas artes de UV',
           zs:'PNG ou JPG com fundo transparente · informe a largura de cada arte'}
 };
@@ -77,7 +92,6 @@ let pedido=[];                             // itens já fechados · o pagamento
 // ao que a expedição já recebe hoje, sem criar processo novo.
 let entrega={tipo:'retira', cep:'', valor:0, cotado:true, end:{}};
 let cliente={cnpj:'', zap:'', mail:''};
-let caminho='auto';                        // o que o cliente diz que vai mandar
 
 // CNPJ com os dois dígitos verificadores · máscara sem conta não vale nada
 function cnpjOk(v){
@@ -106,6 +120,23 @@ const destinoApi=()=>entrega.tipo!=='frete' ? null : {
   recipient:entrega.end.nome.trim(), street:entrega.end.rua.trim(), number:entrega.end.num.trim(),
   complement:(entrega.end.comp||'').trim(), district:entrega.end.bairro.trim(),
   city:entrega.end.cidade.trim(), state:entrega.end.uf.trim().toUpperCase(), postal_code:entrega.cep};
+// Tempo de envio antes de medir a internet de quem compra: uma faixa entre um
+// upload lento (10 Mbps) e um rápido (150 Mbps). O arquivo vai direto para o
+// armazenamento, então é o upload do cliente que manda.
+const ENVIO_LENTO=10e6/8, ENVIO_RAPIDO=150e6/8;
+const duracao=s=>{
+  const min=Math.ceil(s/60);
+  return s<60 ? 'menos de 1 min' : min<60 ? min+' min' : Math.floor(min/60)+' h'+(min%60? ' '+min%60+' min' : '');
+};
+const faixaEnvio=bytes=>bytes/ENVIO_RAPIDO<60 ? 'até '+duracao(bytes/ENVIO_LENTO)
+  : 'de '+duracao(bytes/ENVIO_RAPIDO)+' a '+duracao(bytes/ENVIO_LENTO);
+// Quanto falta para ler um arquivo grande no navegador, pelo ritmo até aqui.
+// A leitura é quase linear, então o tempo gasto diz o que resta.
+function faltaLeitura(l){
+  if(!l || !(l.p>0.02)) return 'calculando o tempo…';
+  const s=(Date.now()-l.inicio)/1000*(1-l.p)/l.p;
+  return s<10 ? 'faltam '+Math.max(1,Math.ceil(s))+' s' : s<60 ? 'faltam cerca de '+Math.ceil(s/5)*5+' s' : 'faltam cerca de '+duracao(s);
+}
 const larguraFilme=()=>MODOS[modo].larg;
 // cobrança proporcional: arredonda para cima em 10 cm · 2,75 m vira 2,80 m
 const cobrar=m=>Math.max(MINIMO_M, Math.ceil(m*10)/10);

web/site-flow.js

@@ -1,4 +1,4 @@
-/* Site DTF — Carousel, path selector, delivery choice and input masks.
+/* Site DTF — Carousel, delivery choice and input masks.
    Extracted verbatim from the single inline script in web/index.html.
    Loaded as classic scripts in the order listed there: they share one global
    scope and run top to bottom, exactly as the original did. */
@@ -73,44 +73,13 @@ $('pVolta').addEventListener('click',()=>{
   $('cPro').addEventListener('click',()=>ir(atual()+1));
 })();
 
-// A declaração de formato só orienta: filtra o seletor e mostra o preço esperado.
-// Se o arquivo que chegar contrariar, o arquivo ganha e o site avisa.
-const AUTO=/[.](png|jpe?g|webp|pdf)$/i;
-function pintaCaminhos(){
-  if(!$('caminhos')) return;
-  const ehF=modo&&ehFolha();
-  $('caminhos').style.display = ehF? '' : 'none';
-  if(!ehF) return;
-  document.querySelectorAll('#caminhos .cam').forEach(b=>b.classList.toggle('on', b.dataset.cam===caminho));
-  $('camA').textContent='a partir de '+rs(pisoEscada());
-  $('camB').textContent=rs(TABELA[modo])+' fixo';
-  $('inp').accept = caminho==='auto' ? '.png,.jpg,.jpeg,.pdf'
-                                     : '.tif,.tiff,.psd,.psb,.ai,.cdr';
-  $('zSub').textContent = caminho==='auto'
-    ? 'PNG, JPG ou PDF · conferência automática, nota na tela'
-    : 'CDR, AI, PSD ou TIFF · sem conferência, metro pela tabela';
-}
-document.querySelectorAll('#caminhos .cam').forEach(b=>b.addEventListener('click',()=>{
-  caminho=b.dataset.cam; avisoCam(''); pintaCaminhos();
-}));
-function avisoCam(txt){
-  const el=$('trocouCam'); if(!el) return;
-  el.innerHTML=txt; el.style.display = txt? '' : 'none';
-}
-
 function pintaEntrega(){
   document.querySelectorAll('.opE').forEach(b=>
     b.classList.toggle('on', b.dataset.ent===entrega.tipo));
   $('cep').classList.toggle('on', entrega.tipo==='frete');
   $('vFrete').textContent = entrega.tipo!=='frete' ? '—'
     : entrega.cotado ? rs(entrega.valor) : 'a cotar';
-  $('avisoE').innerHTML = entrega.tipo==='retira'
-    ? 'DTF é impresso depois que você paga. Avisamos no WhatsApp quando estiver '+
-      '<b>pronto para retirar</b> — não venha antes do aviso.'
-    : '';
   $('bPagar').disabled = !entrega.cotado || !clienteOk() || !enderecoOk() || !cartPodeEnviar();
-  $('eEnd').textContent = entrega.tipo==='frete' && entrega.cotado && !enderecoOk()
-    ? 'Preencha o endereço de entrega para seguir.' : '';
   pintaPedido();
 }
 
@@ -154,6 +123,14 @@ $('zMenos').addEventListener('click',()=>{
   if(zoomI>0){ zoomI--; pintaZoom(); previaAoVivo(); }
 });
 pintaZoom();
+// A ready sheet has nothing to zoom: "Ampliar" shows the same preview bigger.
+$('bAmpliar').addEventListener('click',()=>{
+  const previas=$('vArea').querySelector('.folhaPrevias'); if(!previas) return;
+  $('ampliaArea').replaceChildren(previas.cloneNode(true));
+  $('ampliaDlg').showModal();
+});
+$('ampliaFecha').addEventListener('click',()=>$('ampliaDlg').close());
+$('ampliaDlg').addEventListener('click',e=>{ if(e.target===$('ampliaDlg')) $('ampliaDlg').close(); });
 
 document.querySelectorAll('.opE').forEach(b=>b.addEventListener('click',()=>{
   entrega.tipo=b.dataset.ent;
@@ -161,11 +138,34 @@ document.querySelectorAll('.opE').forEach(b=>b.addEventListener('click',()=>{
   entrega.valor=0;
   if(entrega.tipo==='frete') $('cepMsg').innerHTML='';
   pintaEntrega();
+  // A CEP already typed is quoted again as soon as delivery is chosen.
+  if(entrega.tipo==='frete' && entrega.cep.length===8 && window.dtfFreight) window.dtfFreight();
 }));
+function fmtCep(v){ v=String(v||'').replace(/\D/g,'').slice(0,8); return v.length>5 ? v.slice(0,5)+'-'+v.slice(5) : v; }
+// The address of a complete CEP fills the form; only the number is left to type.
+let cepBuscado='';
+async function buscaEndereco(cep){
+  if(cep===cepBuscado || !window.dtfApi) return;
+  cepBuscado=cep;
+  try{
+    const a=await window.dtfApi('/cep/'+cep);
+    if(entrega.cep!==cep) return;
+    for(const [id,chave,valor] of [['eRua','rua',a.street],['eBairro','bairro',a.district],
+                                   ['eCidade','cidade',a.city],['eUf','uf',a.state]]){
+      if(!valor) continue;
+      $(id).value=valor; entrega.end={...(entrega.end||{}),[chave]:valor};
+    }
+    pintaEntrega();
+    const vazio=['eNome','eRua','eNum'].map($).find(el=>!el.value.trim());
+    if(vazio && document.activeElement===$('cepIn')) vazio.focus();
+  }catch(e){ /* sem consulta: o cliente preenche o endereço */ }
+}
 $('cepIn').addEventListener('input',e=>{
   const v=e.target.value.replace(/\D/g,'').slice(0,8);
-  e.target.value = v.length>5 ? v.slice(0,5)+'-'+v.slice(5) : v;
-  entrega.cep=v; entrega.cotado=false; entrega.valor=0; pintaEntrega();
+  e.target.value = fmtCep(v);
+  if(v===entrega.cep) return;
+  entrega.cep=v; entrega.cotado=false; entrega.valor=0; entrega.dias=null; pintaEntrega();
+  if(v.length===8){ buscaEndereco(v); if(window.dtfFreight) window.dtfFreight(); }
 });
 for(const [id,chave] of [['eNome','nome'],['eRua','rua'],['eNum','num'],['eComp','comp'],
                          ['eBairro','bairro'],['eCidade','cidade'],['eUf','uf']]){
@@ -175,17 +175,6 @@ for(const [id,chave] of [['eNome','nome'],['eRua','rua'],['eNum','num'],['eComp'
     pintaEntrega();
   });
 }
-$('bCep').addEventListener('click',async()=>{
-  if(entrega.cep.length!==8){ $('cepMsg').innerHTML='CEP incompleto.'; return; }
-  if(window.dtfFreight){ await window.dtfFreight(); return; }
-  // A cotação vem da transportadora. Enquanto a integração não existir, o pedido não
-  // fecha por frete: o valor precisa estar fechado antes do Mercado Pago.
-  $('cepMsg').innerHTML='<b style="color:#FFB63D">Cotação de frete ainda não integrada.</b><br>'+
-    'O valor precisa vir da transportadora antes do pagamento — senão você pagaria um '+
-    'total que não é o final. Por enquanto, retire em Franca ou fale conosco no WhatsApp.';
-  pintaEntrega();
-});
-
 $('bMais').addEventListener('click',()=>{ if(guardaItem()) vaiPara('/#envio'); });
 
 $('bPagar').addEventListener('click',()=>{
@@ -193,3 +182,29 @@ $('bPagar').addEventListener('click',()=>{
   else alert('O pedido online está indisponível no momento. Tente novamente em instantes.');
 });
 pintaEntrega();
+
+// Dúvidas: every question stays in the row of links; one answer is open at a
+// time, below the row, and its own link closes it again.
+(function(){
+  const req=$('req'); if(!req) return;
+  const itens=[...req.querySelectorAll('details')];
+  const barra=document.createElement('div'); barra.className='reqLinks';
+  const botoes=itens.map(d=>{
+    const b=document.createElement('button');
+    b.type='button'; b.textContent=d.querySelector('summary').textContent.trim();
+    b.addEventListener('click',()=>{
+      const abrir=!d.open;
+      itens.forEach(x=>{ x.open=false; });
+      d.open=abrir;
+    });
+    return b;
+  });
+  const pinta=()=>botoes.forEach((b,i)=>{
+    b.setAttribute('aria-expanded',String(itens[i].open));
+    b.classList.toggle('on',itens[i].open);
+  });
+  itens.forEach(d=>d.addEventListener('toggle',pinta));
+  barra.append(...botoes);
+  req.querySelector('.reqcab').after(barra);
+  pinta();
+})();

web/site-modes.js

@@ -15,7 +15,7 @@ function abrir(m){
   avisoTipo('');
   pintaModo();
   $('lista').innerHTML=''; $('rA').style.display='none'; recusa([]);
-  recemChegada=null; caminho='auto'; avisoCam(''); pintaCaminhos();
+  recemChegada=null;
   $('vMt').textContent='—'; previaAoVivo(); agendaAvaliacao();
   limpaPaineis();   // o carrinho só some se o pedido estiver vazio
   vaiPara(PAGINAS[m]);
@@ -25,16 +25,19 @@ function pintaModo(){
   const c=MODOS[m];
   $('cards').style.display='none'; $('foco').classList.add('on');
   $('fTit').textContent=c.tit; $('fLg').textContent=c.lg;
-  $('fPreco').textContent=c.preco; $('fSub').textContent=c.sub;
   $('zTit').textContent=c.zt; $('zSub').textContent=c.zs;
+  $('zManual').hidden=!ehFolha(m);
+  $('zOutra').textContent = ehFolha(m) ? 'Adicionar outra folha' : 'Adicionar mais artes';
+  $('zona').classList.remove('compacta');
   $('inp').multiple=c.multi;
-  $('inp').accept = ehFolha(m) ? '.png,.jpg,.jpeg,.pdf'
+  // The file decides the price: PNG, JPG and PDF are checked here, the others by hand.
+  $('inp').accept = ehFolha(m) ? '.png,.jpg,.jpeg,.pdf,.tif,.tiff,.psd,.psb,.ai,.cdr'
                                : '.png,.jpg,.jpeg,.webp';
   $('catFoco').className='cat '+(ehFolha(m)?'file':'av');
   $('larguraFolhaPronta').textContent=String(c.larg).replace('.',',');
   $('foco2').classList.remove('sofila');            // a caixa de requisitos vale nos 4 modos
   $('montcabTit').textContent = ehFolha(m) ? 'Sua folha' : 'Montagem ao vivo';
-  $('qOk').textContent = ehFolha(m) ? 'Adicionar ao carrinho' : 'Ver a folha montada';
+  $('qOk').innerHTML = ehFolha(m) ? icone('adicionar')+'<span>Adicionar ao carrinho</span>' : 'Ver a folha montada';
   pintaTipoEnvio();
 }
 // O par folha montada / artes separadas fica visível e com preço nos dois lados,
@@ -46,8 +49,8 @@ function pintaTipoEnvio(){
   if(el.hidden) return;
   const folha = ehFolha() ? modo : PAR[modo];
   const avulsa = ehFolha() ? PAR[modo] : modo;
-  $('tipoFolhaPreco').textContent='a partir de '+rs(pisoEscada(folha));
-  $('tipoAvulsaPreco').textContent='a partir de '+rs(pisoEscada(avulsa))+' · montagem inclusa';
+  $('tipoFolhaPreco').textContent=rs(pisoEscada(folha))+' a '+rs(TABELA[folha]).slice(3)+' /m';
+  $('tipoAvulsaPreco').textContent='+ '+rs(MONTAGEM[avulsa])+' /m';
   $('larguraFolhaPronta').textContent=String(MODOS[folha].larg).replace('.',',');
   const atual = ehFolha() ? 'folha' : 'avulsa';
   el.querySelectorAll('.cam').forEach(b=>{
@@ -89,8 +92,7 @@ function trocaTipo(destino){
   modo=destino;
   history.replaceState(history.state,'',PAGINAS[modo]); document.title=tituloPagina();
   $('lista').innerHTML=''; $('rA').style.display='none'; recusa([]);
-  caminho='auto'; avisoCam('');
-  pintaModo(); pintaCaminhos(); limpaPaineis(); agendaAvaliacao(); previaAoVivo();
+  pintaModo(); limpaPaineis(); agendaAvaliacao(); previaAoVivo();
 }
 $('bVoltar').addEventListener('click',()=>{
   itemAtual=null; modo=null; $('atual').style.display='none'; $('carrLin').innerHTML=''; pintaPedido();

web/site-packing.js

@@ -12,6 +12,18 @@ function carregarImagem(file){
     fr.readAsDataURL(file);
   });
 }
+// The image each artwork was measured with, loaded once and reused on every
+// repaint: the packing used to read and decode the whole file again each
+// time. Kept outside the artwork, which is saved with the cart.
+const imagensDasArtes=new WeakMap();
+function imagemDaArte(a){
+  if(!a.src) return Promise.resolve(null);
+  const guardada=imagensDasArtes.get(a);
+  if(guardada && guardada.src===a.src) return guardada.img;
+  const img=new Promise(res=>{ const im=new Image(); im.onload=()=>res(im); im.onerror=()=>res(null); im.src=a.src; });
+  imagensDasArtes.set(a,{src:a.src,img});
+  return img;
+}
 // A folha precisa parecer uma folha: borda, largura marcada e régua de metros.
 // Sem isso o cliente não tem noção de escala e acha que está mal encaixado.
 function molduraFolha(ctx,W,H,larguraCm,metrosReais){
@@ -199,12 +211,14 @@ function desenhaMontagem(area,lista,mts,W,fora,aoTerminar){
     return;
   }
 
-  Promise.all(itens.map(a=>carregarImagem(a.f).then(img=>({a,img})))).then(imagens=>{
+  Promise.all(itens.map(a=>imagemDaArte(a).then(img=>({a,img})))).then(imagens=>{
     if(area.montagemVersao!==versao) return;
     const cargas=imagens.flatMap(c=>Array.from({length:c.a.q||1},(_,copyIndex)=>({...c,copyIndex})));
     cargas.forEach(c=>{
       c.w = c.a.cm;                                    // o motor trabalha em centímetros
-      c.h = c.w * (c.img ? (c.a.giro? c.img.width/c.img.height : c.img.height/c.img.width) : 1);
+      // The file's own proportion: a large artwork is drawn from a smaller copy.
+      const prop = c.a.prop>0 ? c.a.prop : c.img ? c.img.height/c.img.width : 1;
+      c.h = c.w * (c.a.giro? 1/prop : prop);
       c.travado = !!c.a.giro;                    // giro do cliente manda no encaixe
     });
     const enc=encaixar(cargas,filme);
@@ -272,24 +286,43 @@ function previaAoVivo(){
   clearTimeout(tMont);
   montagemLayout=null;
   $('vArea').montagemVersao=($('vArea').montagemVersao||0)+1;
+  if(!ehFolha()) $('bAmpliar').hidden=true;
   if(ehFolha()){
     $('vUso').innerHTML='';
     const tot=folhaTotalM();
     $('vMt').textContent = tot>0 ? fmtM(cobrar(tot))+' m' : '—';
     const medidas=folhas.filter(x=>x.med);
-    const previews=folhas.filter(x=>x.previewSrc);
+    // Sheets still being read show a placeholder; a sheet printed N times is
+    // shown N times (up to REPETE_MAX, then a count).
+    const REPETE_MAX=6;
+    const previews=folhas.filter(x=>x.previewSrc || (x.pct!=null && x.med && x.med.grande));
     if(previews.length){
       const painel=document.createElement('div'); painel.className='folhaPrevias';
       previews.forEach((x,index)=>{
         const figura=document.createElement('figure'); figura.className='folhaPrevia';
-        const imagem=new Image(); imagem.src=x.previewSrc; imagem.alt=x.f.name;
         const legenda=document.createElement('figcaption');
+        const vezes=Math.max(1,x.rep||1);
         legenda.textContent=(previews.length>1 ? (index+1)+'. ' : '')+x.f.name+
-          (x.med ? ' · '+n1(x.med.larg)+' × '+n1(x.med.alt)+' cm' : '');
-        figura.append(imagem,legenda); painel.append(figura);
+          (x.med ? ' · '+n1(x.med.larg)+' × '+n1(x.med.alt)+' cm' : '')+(vezes>1 ? ' · '+vezes+' cópias' : '');
+        if(!x.previewSrc){
+          const esqueleto=document.createElement('div'); esqueleto.className='skel folhaSkel';
+          esqueleto.style.aspectRatio=x.med ? x.med.larg+' / '+Math.min(x.med.alt,x.med.larg*4) : '1 / 2';
+          esqueleto.append(Object.assign(document.createElement('span'),{textContent:'Gerando a prévia da folha…'}));
+          figura.append(esqueleto,legenda); painel.append(figura); return;
+        }
+        const pilha=document.createElement('div'); pilha.className='folhaPilha';
+        for(let k=0;k<Math.min(vezes,REPETE_MAX);k++){
+          const imagem=new Image(); imagem.src=x.previewSrc; imagem.alt=k? '' : x.f.name;
+          imagem.style.maxHeight=Math.floor(520/Math.min(vezes,REPETE_MAX))+'px'; pilha.append(imagem);
+        }
+        if(vezes>REPETE_MAX) pilha.append(Object.assign(document.createElement('div'),
+          {className:'folhaMais', textContent:'+ '+(vezes-REPETE_MAX)+' cópia'+(vezes-REPETE_MAX>1?'s':'')}));
+        figura.append(pilha,legenda); painel.append(figura);
       });
       $('vArea').replaceChildren(painel);
+      $('bAmpliar').hidden=false;
     }else{
+      $('bAmpliar').hidden=true;
       $('vArea').innerHTML = medidas.length
         ? '<div class="semmont"><b>'+(medidas.length>1
             ? medidas.length+' folhas · '+fmtM(tot)+' m'
@@ -304,7 +337,7 @@ function previaAoVivo(){
   tMont=setTimeout(()=>{
     // o produto pode ter sido fechado nesses 140 ms (item foi para o carrinho)
     if(!modo) return;
-    const prontas=artes.filter(a=>a.cm>0 && a.cm<=larguraFilme() && a.src);
+    const prontas=artes.filter(a=>a.cm>0 && a.cm<=larguraFilme() && (a.src||a.semPrevia));
     const W=Math.round(300*ZOOMS[zoomI]);
     $('vArea').classList.toggle('ampliado', zoomI>0);
     desenhaMontagem($('vArea'), prontas, 0, W, $('vUso'), r=>{

web/site-pages.js

@@ -1,4 +1,5 @@
-/* Site DTF — the Site's pages: the home, one page per product and the cart.
+/* Site DTF — the Site's pages: the home, one page per product, the cart and
+   the payment page.
    They share this document, so artworks already loaded in the browser survive
    moving between them; each page has its own address, so Back, Forward, reload
    and shared links behave as in any store. nginx serves index.html for these
@@ -6,14 +7,16 @@
    site-steps.js does the navigation. */
 const PAGINAS={file:'/arquivo-por-metro', avulsa:'/artes-avulsas',
                uvfile:'/uv-arquivo-por-metro', uv:'/uv-artes-avulsas'};
-const CARRINHO='/carrinho';
+const CARRINHO='/carrinho', PAGAMENTO='/pagamento', PAGAMENTO_PIX='/pagamento/pix';
 function paginaDe(caminho){
   caminho=caminho.replace(/\/+$/,'')||'/';
   if(caminho===CARRINHO) return {pagina:'carrinho'};
+  if(caminho===PAGAMENTO) return {pagina:'pagamento'};
+  if(caminho===PAGAMENTO_PIX) return {pagina:'pix'};
   const m=Object.keys(PAGINAS).find(k=>PAGINAS[k]===caminho);
   return m ? {pagina:'produto',modo:m} : {pagina:'inicio'};
 }
-// Older portal links open a quote on the home address; quotes live in the cart.
-if(location.pathname==='/' && new URLSearchParams(location.search).has('quote'))
-  history.replaceState(null,'',CARRINHO+location.search);
+// Portal links, old and new, open a quote on the payment page.
+if(['/',CARRINHO].includes(location.pathname.replace(/\/+$/,'')||'/') && new URLSearchParams(location.search).has('quote'))
+  history.replaceState(null,'',PAGAMENTO+location.search);
 document.documentElement.dataset.rota=paginaDe(location.pathname).pagina;

web/site-pdf.js

@@ -139,9 +139,166 @@ async function rasterizarPdf(file, larguraCm, alturaCm){
   return result||{erro:'não deu para conferir',semWorker:temWorker===false};
 }
 
+// Sheets of several GB are the normal order. The browser cannot decode an image
+// that size (it would freeze or crash the tab), and it does not need to: the
+// grade comes from the width in pixels, which PNG, JPEG and WebP store in their
+// first bytes. Above GRANDE_BYTES only those bytes are read.
+const GRANDE_BYTES=150*1048576;
+async function dimensoesImagem(file){
+  const b=new Uint8Array(await file.slice(0,Math.min(file.size,4*1048576)).arrayBuffer());
+  const u16=(i,le)=>le? b[i]|(b[i+1]<<8) : (b[i]<<8)|b[i+1];
+  const u32=(i)=>((b[i]<<24)>>>0)+(b[i+1]<<16)+(b[i+2]<<8)+b[i+3];
+  if(b[0]===0x89 && b[1]===0x50 && b[2]===0x4E && b[3]===0x47)             // PNG · IHDR
+    return {w:u32(16), h:u32(20)};
+  if(b[0]===0xFF && b[1]===0xD8){                                            // JPEG · SOFn
+    let i=2;
+    while(i+9<b.length){
+      if(b[i]!==0xFF){ i++; continue; }
+      const m=b[i+1], len=u16(i+2);
+      if(m>=0xC0 && m<=0xCF && ![0xC4,0xC8,0xCC].includes(m)) return {w:u16(i+7), h:u16(i+5)};
+      i+=2+len;
+    }
+    return null;
+  }
+  const tag=String.fromCharCode(...b.slice(8,16));
+  if(String.fromCharCode(...b.slice(0,4))==='RIFF' && tag.startsWith('WEBP')){ // WebP
+    if(tag==='WEBPVP8X') return {w:1+(b[24]|(b[25]<<8)|(b[26]<<16)), h:1+(b[27]|(b[28]<<8)|(b[29]<<16))};
+    if(tag==='WEBPVP8L'){ const n=b[21]|(b[22]<<8)|(b[23]<<16)|(b[24]<<24); return {w:(n&0x3FFF)+1, h:((n>>14)&0x3FFF)+1}; }
+    if(tag==='WEBPVP8 ') return {w:u16(26,true)&0x3FFF, h:u16(28,true)&0x3FFF};
+  }
+  return null;
+}
+// A small copy of a large PNG, read as a stream: the file is inflated in
+// pieces and only every n-th pixel of every n-th row is kept, so memory stays
+// at a few MB whatever the file's size. It is the preview, and what the sheet
+// check (pieces, gaps, background) reads. 8- and 16-bit greyscale, RGB,
+// palette and alpha; interlaced files return null.
+async function previaPngGrande(file, larguraAlvo, progresso){
+  const leitor=file.stream().getReader();
+  let pedacos=[], guardado=0, lidos=0, fim=false;
+  // A queue of the file's pieces: take() never copies more than it returns.
+  const enche=async n=>{
+    while(guardado<n && !fim){
+      const {done,value}=await leitor.read();
+      if(done){ fim=true; break; }
+      pedacos.push(value); guardado+=value.length; lidos+=value.length;
+      progresso && progresso(lidos/file.size);
+    }
+    return guardado>=n;
+  };
+  const tira=n=>{
+    const out=new Uint8Array(n); let k=0;
+    while(k<n){ const p=pedacos[0], m=Math.min(p.length,n-k);
+      out.set(p.subarray(0,m),k); k+=m;
+      if(m===p.length) pedacos.shift(); else pedacos[0]=p.subarray(m); }
+    guardado-=n; return out;
+  };
+  const u32=b=>((b[0]<<24)>>>0)+(b[1]<<16)+(b[2]<<8)+b[3];
+  if(!await enche(8)) return null; tira(8);
+  // 1 · header chunks, up to the first image data
+  let w=0,h=0,prof=0,tipo=-1,paleta=null,trns=null, idat=0;
+  for(;;){
+    if(!await enche(8)) return null;
+    const cab=tira(8), len=u32(cab), nome=String.fromCharCode(...cab.subarray(4,8));
+    if(nome==='IDAT'){ idat=len; break; }
+    if(!await enche(len+4)) return null;
+    const d=tira(len); tira(4);
+    if(nome==='IHDR'){ w=u32(d); h=u32(d.subarray(4)); prof=d[8]; tipo=d[9];
+      if(d[12]!==0 || ![8,16].includes(prof) || !{0:1,2:1,3:1,4:1,6:1}[tipo]) return null; }
+    else if(nome==='PLTE') paleta=d;
+    else if(nome==='tRNS') trns=d;
+    else if(nome==='IEND') return null;
+  }
+  if(!(w>0 && h>0) || (tipo===3 && (!paleta || prof!==8))) return null;
+  // 2 · image data streamed into the inflater, a piece at a time
+  const inflador=new DecompressionStream('deflate'), escritor=inflador.writable.getWriter();
+  const alimenta=(async()=>{
+    let resta=idat;
+    for(;;){
+      while(resta>0){
+        if(!guardado && !await enche(1)) { await escritor.close(); return; }
+        const n=Math.min(resta,guardado); await escritor.write(tira(n)); resta-=n;
+      }
+      if(!await enche(12)) break;
+      tira(4);                                       // CRC of the chunk just sent
+      const cab=tira(8), len=u32(cab), nome=String.fromCharCode(...cab.subarray(4,8));
+      if(nome==='IDAT'){ resta=len; continue; }
+      break;                                         // anything after the image data
+    }
+    await escritor.close();
+  })();
+  alimenta.catch(()=>{});
+  // 3 · rows unfiltered one at a time; every passo-th pixel is kept
+  const canais={0:1,2:3,3:1,4:2,6:4}[tipo], b=prof/8, bpp=canais*b, linha=w*bpp;
+  const passo=Math.max(1,Math.ceil(w/larguraAlvo));
+  const cw=Math.ceil(w/passo), ch=Math.ceil(h/passo);
+  const cv=document.createElement('canvas'); cv.width=cw; cv.height=ch;
+  const ctx=cv.getContext('2d'), img=ctx.createImageData(cw,1), px=img.data;
+  // Each row is gathered whole (filter byte + data), then unfiltered in one
+  // tight loop for its filter type.
+  let ant=new Uint8Array(linha), atual=new Uint8Array(linha), y=0;
+  const bruta=new Uint8Array(linha+1); let cheio=0;
+  const desfiltra=()=>{
+    const f=bruta[0], d=bruta.subarray(1);
+    if(f===0) atual.set(d);
+    else if(f===1){ for(let i=0;i<bpp;i++) atual[i]=d[i]; for(let i=bpp;i<linha;i++) atual[i]=d[i]+atual[i-bpp]; }
+    else if(f===2){ for(let i=0;i<linha;i++) atual[i]=d[i]+ant[i]; }
+    else if(f===3){ for(let i=0;i<bpp;i++) atual[i]=d[i]+(ant[i]>>1);
+                    for(let i=bpp;i<linha;i++) atual[i]=d[i]+((atual[i-bpp]+ant[i])>>1); }
+    else { for(let i=0;i<bpp;i++) atual[i]=d[i]+ant[i];
+           for(let i=bpp;i<linha;i++){ const a=atual[i-bpp], up=ant[i], c=ant[i-bpp], p=a+up-c;
+             const pa=p>a?p-a:a-p, pb=p>up?p-up:up-p, pc=p>c?p-c:c-p;
+             atual[i]=d[i]+(pa<=pb&&pa<=pc?a:pb<=pc?up:c); } }
+  };
+  const leitorInflado=inflador.readable.getReader();
+  for(;;){
+    const {done,value}=await leitorInflado.read(); if(done) break;
+    let j=0;
+    while(j<value.length){
+      const n=Math.min(linha+1-cheio, value.length-j);
+      bruta.set(value.subarray(j,j+n),cheio); cheio+=n; j+=n;
+      if(cheio<linha+1) break;
+      cheio=0;
+      // Every row is unfiltered: Up, Average and Paeth read the previous one.
+      desfiltra();
+      if(y%passo===0 && y/passo<ch){
+        for(let xx=0,k=0;xx<w;xx+=passo,k+=4){
+          const i=xx*bpp;
+          if(tipo===3){ const q=atual[i]; px[k]=paleta[q*3]; px[k+1]=paleta[q*3+1]; px[k+2]=paleta[q*3+2];
+                        px[k+3]=trns&&q<trns.length?trns[q]:255; }
+          else if(tipo===0){ px[k]=px[k+1]=px[k+2]=atual[i]; px[k+3]=255; }
+          else if(tipo===4){ px[k]=px[k+1]=px[k+2]=atual[i]; px[k+3]=atual[i+b]; }
+          else { px[k]=atual[i]; px[k+1]=atual[i+b]; px[k+2]=atual[i+2*b]; px[k+3]=tipo===6?atual[i+3*b]:255; }
+        }
+        ctx.putImageData(img,0,y/passo);
+      }
+      const t=ant; ant=atual; atual=t; y++;
+    }
+  }
+  await alimenta.catch(()=>{});
+  leitor.cancel().catch(()=>{});
+  return y>=h ? cv : null;
+}
+// Large PDFs are read in ranges, never loaded whole into memory.
+async function fontePdf(lib, file){
+  if(file.size<=GRANDE_BYTES) return {data:await file.arrayBuffer()};
+  const inicio=new Uint8Array(await file.slice(0,262144).arrayBuffer());
+  const t=new lib.PDFDataRangeTransport(file.size, inicio);
+  t.requestDataRange=(de,ate)=>{ file.slice(de,ate).arrayBuffer().then(buf=>t.onDataRange(de,new Uint8Array(buf))); };
+  return {range:t, rangeChunkSize:262144, disableAutoFetch:true, disableStream:true};
+}
 function medirFolha(file){
   return new Promise(res=>{
     const nome=(file.name||'').toLowerCase();
+    if(RENDERIZA.test(nome) && file.size>GRANDE_BYTES){
+      dimensoesImagem(file).then(d=>{
+        if(!d || !(d.w>0) || !(d.h>0)) return res(null);
+        const L=larguraFilme();
+        res({larg:L, alt:+(d.h/d.w*L).toFixed(1), fonte:'dimensões do arquivo',
+             dpiFolha:Math.round(d.w/(L/2.54)), px:d.w, grande:true});
+      }).catch(()=>res(null));
+      return;
+    }
     if(RENDERIZA.test(nome)){
       carregarImagem(file).then(img=>{
         if(!img || !img.width) return res(null);
@@ -160,7 +317,7 @@ function medirFolha(file){
       let doc=null;
       carregarPdfJs().then(async lib=>{
         if(!lib) throw new Error('Não foi possível carregar o leitor de PDF.');
-        doc=await lib.getDocument({data:await file.arrayBuffer(),
+        doc=await lib.getDocument({...await fontePdf(lib,file),
           disableFontFace:true, isEvalSupported:false, useSystemFonts:false,
           verbosity:0}).promise;
         if(doc.numPages!==1)
@@ -195,103 +352,144 @@ function medirFolha(file){
   });
 }
 
+function textoProgresso(x){
+  if(x.med && x.med.grande) return 'gerando a prévia e conferindo a arte · '+faltaLeitura(x.leitura);
+  return x.pct<50?'lendo o arquivo…':x.pct<70?'medindo a folha…':'conferindo a arte…';
+}
+// The file card's thumbnail (52 x 96 px, drawn at twice that for sharp screens).
+function miniatura(fonte){
+  const w=fonte.naturalWidth||fonte.width, h=fonte.naturalHeight||fonte.height;
+  if(!(w>0 && h>0)) return null;
+  const s=Math.min(1,104/w,192/h), cv=document.createElement('canvas');
+  cv.width=Math.max(1,Math.round(w*s)); cv.height=Math.max(1,Math.round(h*s));
+  cv.getContext('2d').drawImage(fonte,0,0,cv.width,cv.height);
+  return cv.toDataURL('image/webp',0.8);
+}
+// Moves one sheet's progress bar in place: repainting the whole list and the
+// preview on every step made "Sua folha" flicker while a large file was read.
+function pintaProgressoFolha(x){
+  const el=$('lista').querySelector('.rep[data-folha="'+folhas.indexOf(x)+'"]');
+  const barra=el && el.querySelector('.prog i'), texto=el && el.querySelector('.progT');
+  if(!barra){ pintaFolha(); return; }
+  barra.style.width=x.pct+'%'; if(texto) texto.textContent=textoProgresso(x);
+}
+// What the check found, as chips: ok (verde), av (atenção), er (resolva você),
+// fix (arrumamos de graça), nt (a equipe confere). Details stay one click away.
+function chipsDaFolha(a){
+  const chip=(k,t)=>'<li class="chip '+k+'">'+t+'</li>';
+  const dpi = a.vetor ? chip('ok','Arte vetorial')
+    : chip(a.dpi>=DPI_AVISA?'ok':a.dpi>=DPI_RECUSA?'av':'er', a.dpi+' DPI');
+  if(a.grande) return dpi+chip('nt','Peças, resíduos e fundo: a equipe confere');
+  return dpi+
+    (a.fundoChapado? chip('er','Fundo chapado') : chip('ok','Fundo transparente'))+
+    (a.residuos? chip('er',a.residuos+' resíduo'+(a.residuos>1?'s':'')) : chip('ok','Sem resíduos'))+
+    (a.encostadas? chip('fix',a.encostadas+' peças coladas · separamos grátis') : chip('ok','Peças separadas'));
+}
+function avisosDaFolha(a){
+  if(a.grande) return '';
+  return (a.fundoChapado? '<p class="avisoF"><b>O fundo não é transparente.</b> '+
+      'Branco parecendo transparente sai branco no filme. Exporte com fundo transparente.</p>' : '')+
+    (a.residuos? '<p class="avisoF"><b>'+a.residuos+' pontinho'+(a.residuos>1?'s soltos serão impressos':' solto será impresso')+
+      '.</b> A impressora imprime qualquer resíduo de recorte. Apague no arquivo e envie de novo.</p>' : '');
+}
+function detalhesDaFolha(a,i,aberto){
+  const linhas = a.grande
+    ? ['Resolução '+a.dpi+' DPI, lida do arquivo',
+       'Arquivo grande: peças, resíduos e fundo são conferidos pela equipe']
+    : [a.artes+' peça'+(a.artes===1?'':'s')+' · '+a.aproveitamento+'% da folha com arte',
+       'Resolução '+a.dpi+' DPI · '+(a.fonteDpi==='imagens'? 'medida imagem por imagem dentro do PDF'
+         : a.fonteDpi==='vetor'? 'arte vetorial, sem imagem embutida' : 'lida do arquivo'),
+       'Conferido numa grade de '+n1(a.grade)+' mm'];
+  return '<details class="confDet" data-det="'+i+'"'+(aberto?' open':'')+'>'+
+    '<summary>Ver detalhes da conferência</summary>'+
+    linhas.map(l=>'<span>'+l+'</span>').join('')+'</details>';
+}
 function pintaFolha(){
   invalidaItemAtual();
   const L=larguraFilme();
   pintaTipoEnvio();                        // trava o seletor enquanto houver folha
+  $('zona').classList.toggle('compacta', folhas.length>0);
   if(!folhas.length){ $('lista').innerHTML=''; agendaAvaliacao(); previaAoVivo(); return; }
 
-  $('lista').innerHTML = folhas.map((x,i)=>{
+  const tot=folhaTotalM();
+  $('lista').innerHTML = '<div class="listaCab"><h4>Seus arquivos</h4><span>'+
+    folhas.length+' folha'+(folhas.length>1?'s':'')+(tot>0? ' · '+fmtM(tot)+' m' : '')+'</span></div>'+
+    folhas.map((x,i)=>{
     const lido=!!x.med, larga=lido && x.med.larg>L, suspeito=lido && x.med.foraDoPadrao;
-    const sub=(x.m||0)*(x.rep||1);
-    let medida='';
+    const sub=(x.m||0)*(x.rep||1), a=lido && x.an;
+    let medida='', manual='';
     if(lido){
-      const a=x.an;
-      const conferido = a
-        ? '<div class="conf"><b>Conferido de verdade</b>'+
-          '<span>'+a.artes+' peça'+(a.artes===1?'':'s')+' · '+a.aproveitamento+
-          '% da folha virou arte · '+
-          (a.residuos? a.residuos+' resíduo'+(a.residuos>1?'s':'') : 'sem resíduo')+' · '+
-          (a.fundoChapado? 'fundo chapado' : 'fundo transparente')+'</span>'+
-          '<span>resolução '+a.dpi+' DPI · '+
-          (a.fonteDpi==='imagens'? 'medida imagem por imagem dentro do PDF'
-           : a.fonteDpi==='vetor'? 'arte vetorial, sem imagem embutida'
-           : 'lida do arquivo')+
-          ' · grade de '+n1(a.grade)+' mm</span></div>'
-        : '';
-      medida='<div class="med'+(larga||suspeito?' alerta':'')+'">'+
-        '<b>'+n1(x.med.larg)+' × '+n1(x.med.alt)+' cm</b>'+
-        '<span>'+x.med.fonte+' · '+fmtM(x.m)+' m de folha</span>'+
-        conferido+
-        (suspeito? '<em><b>Este PDF passa do tamanho que o formato comporta.</b> '+
+      medida='<div class="repMed"><b>'+n1(x.med.larg)+' × '+n1(x.med.alt)+' cm</b>'+
+        '<span>'+escapeHTML(extDe(x.f.name))+' · '+fmt(x.f.size)+'</span></div>'+
+        (a? '<ul class="chips">'+chipsDaFolha(a)+'</ul>'+avisosDaFolha(a)+detalhesDaFolha(a,i,x.detAberto) : '')+
+        (suspeito? '<p class="avisoF"><b>Este PDF passa do tamanho que o formato comporta.</b> '+
           'A especificação para em 508 cm e o seu tem '+n1(x.med.alt)+' cm. '+
           'Ele abre certo só em quem o gerou — aqui vai precisar de tratamento. '+
-          'Manda em <b>PNG ou TIFF</b>, ou divide em partes de até 5 m, que sai na hora.</em>':'')+
-        (larga? '<em><b>Esta folha não roda neste filme.</b> Ela tem '+n1(x.med.larg)+
+          'Manda em <b>PNG ou TIFF</b>, ou divide em partes de até 5 m, que sai na hora.</p>':'')+
+        (larga? '<p class="avisoF"><b>Esta folha não roda neste filme.</b> Ela tem '+n1(x.med.larg)+
           ' cm de largura e o filme aqui tem '+n1(L)+' cm. Não dá para reduzir: '+
           'encolher a folha encolheria cada arte junto.'+
           (x.med.larg<=57.5
             ? ' Ela cabe no <b>DTF têxtil de 57 cm</b> — troque de produto ali em cima.'
-            : ' Remonte a folha em '+n1(L)+' cm e suba de novo.')+'</em>':'')+
-      '</div>';
+            : ' Remonte a folha em '+n1(L)+' cm e suba de novo.')+'</p>':'');
     }else if(x.measurementError){
-      medida='<div class="med alerta"><b>Este PDF não pode ser orçado</b><span>'+
-        escapeHTML(x.measurementError)+'</span></div>';
+      medida='<span class="repPeso">'+escapeHTML(extDe(x.f.name))+' · '+fmt(x.f.size)+'</span>'+
+        '<p class="avisoF"><b>Este PDF não pode ser orçado.</b> '+escapeHTML(x.measurementError)+'</p>';
     }else{
       const teto=TABELA[modo], piso=pisoEscada();
       const dif=(x.m>0)? (teto-piso)*cobrar(x.m*(x.rep||1)) : 0;
-      medida='<div class="med pede">'+
-        '<b>'+escapeHTML(extDe(x.f.name))+' não abre no navegador</b>'+
-        '<span>Sem conseguir conferir o arquivo, não temos como dar nota — e sem nota '+
-        'o metro sai pela tabela, <b>'+rs(teto)+'</b>. Alguém vai abrir esse arquivo na mão '+
-        'antes de imprimir.</span>'+
-        '<div class="troca">Exportando a mesma folha em <b>PNG ou PDF</b>, a conferência é '+
-        'automática e o metro pode cair até <b>'+rs(piso)+'</b>'+
-        (dif>0.5? ' — <b>'+rs(dif)+' a menos</b> só nesta folha' : '')+'.</div>'+
-        '<span style="margin-top:9px">Informe o comprimento para seguir:</span>'+
-        '<input type="number" min="0.5" max="60" step="0.01" data-comp="'+i+'" '+
-          'placeholder="metros" value="'+(x.m? x.m.toFixed(2):'')+'">'+
-      '</div>';
+      medida='<span class="chipSo">Conferência manual · preço cheio</span>'+
+        '<p class="repTxt">O navegador não abre '+escapeHTML(extDe(x.f.name))+', então alguém da equipe '+
+        'confere antes de imprimir e o metro sai pela tabela, <b>'+rs(teto)+'</b>. '+
+        'Exportando em <b>PNG ou PDF</b>, o metro pode cair até <b>'+rs(piso)+'</b>'+
+        (dif>0.5? ' — <b>'+rs(dif)+' a menos</b> só nesta folha' : '')+'.</p>';
+      manual='<div class="campo"><label for="comp'+i+'">Comprimento</label>'+
+        '<span class="un"><input type="number" id="comp'+i+'" min="0.5" max="60" step="0.01" data-comp="'+i+'" '+
+          'placeholder="0,00" value="'+(x.m? x.m.toFixed(2):'')+'"><i>m</i></span></div>';
     }
     const barra = x.pct!=null
       ? '<div class="prog"><i style="width:'+x.pct+'%"></i></div>'+
-        '<span class="progT">'+(x.pct<50?'lendo o arquivo…':
-          x.pct<70?'medindo a folha…':'conferindo a arte…')+'</span>'
+        '<span class="progT">'+textoProgresso(x)+'</span>'
       : x.semAnalise
       ? '<div class="progF"><b>Não conseguimos conferir esta folha.</b> '+escapeHTML(x.semAnalise)+
         '. Seguimos com o preço de tabela — se quiser a nota e o desconto, exporte a mesma '+
         'folha em <b>PNG</b>, que a conferência é bem mais leve.</div>'
       : '';
-    return '<div class="rep"><div class="l1"><b>'+
-      (folhas.length>1? (i+1)+'. ':'')+escapeHTML(x.f.name)+'</b>'+
-      '<span style="color:var(--fraco);font-size:10.5px">'+fmt(x.f.size)+'</span>'+
-      '<button data-rmf="'+i+'">×</button></div>'+
-      barra+medida+
-      (x.m>0 ?
-      '<div class="cps" style="margin-top:10px">'+
-        '<div><label>quantas vezes repetir</label>'+
-          '<input type="number" min="1" max="200" data-repf="'+i+'" value="'+x.rep+'"></div>'+
-        '<div class="conta"><b>'+fmtM(sub)+' m</b>'+
-          (x.rep>1? ' · '+x.rep+' × '+fmtM(x.m)+' m':'')+'</div>'+
-      '</div>' : '')+
+    // A small thumbnail made once: the list is rebuilt on every change, and the
+    // full preview of a file up to 150 MB would be re-parsed each time.
+    const mini = x.miniSrc
+      ? '<img src="'+escapeHTML(x.miniSrc)+'" alt="">'
+      : '<span>'+escapeHTML(extDe(x.f.name))+'</span>';
+    const copias = x.m>0 || manual ?
+      '<div class="cps">'+manual+
+        (x.m>0 ?
+        '<div class="campo"><label for="repf'+i+'">Cópias</label>'+
+          '<span class="passo"><button type="button" data-passo="-1" data-i="'+i+'" aria-label="Menos uma cópia">−</button>'+
+          '<input type="number" id="repf'+i+'" min="1" max="200" data-repf="'+i+'" value="'+x.rep+'">'+
+          '<button type="button" data-passo="1" data-i="'+i+'" aria-label="Mais uma cópia">+</button></span></div>'+
+        '<div class="conta">'+(x.rep>1? x.rep+' × '+fmtM(x.m)+' m = ' : '')+'<b>'+fmtM(sub)+' m</b></div>' : '')+
+      '</div>' : '';
+    return '<div class="rep" data-folha="'+i+'">'+
+      '<div class="repTopo"><div class="miniF">'+mini+'</div><div class="repInfo">'+
+        '<div class="l1"><b>'+(folhas.length>1? (i+1)+'. ':'')+escapeHTML(x.f.name)+'</b>'+
+        '<button data-rmf="'+i+'" aria-label="Remover '+escapeHTML(x.f.name)+'">'+icone('fechar')+'</button></div>'+
+        (lido || x.measurementError ? '' : '<span class="repPeso">'+escapeHTML(extDe(x.f.name))+' · '+fmt(x.f.size)+'</span>')+
+        barra+medida+
+      '</div></div>'+copias+
     '</div>';
   }).join('');
 
-  // total do pedido, quando há mais de uma folha
-  const tot=folhaTotalM(), partes=Math.ceil(tot/20);
-  if(folhas.length>1 && tot>0){
-    $('lista').innerHTML += '<div class="somaF">'+
-      '<span>'+folhas.length+' folhas neste pedido</span>'+
-      '<b>'+fmtM(tot)+' m no total</b>'+
-      (partes>1? '<em>vai em '+partes+' partes de até 20 m</em>':'')+'</div>';
-  }else if(partes>1 && tot>0){
-    $('lista').innerHTML += '<div class="somaF"><span>folha longa</span>'+
-      '<b>'+fmtM(tot)+' m</b><em>vai em '+partes+' partes de até 20 m</em></div>';
-  }
-
   $('lista').querySelectorAll('[data-rmf]').forEach(b=>b.addEventListener('click',()=>{
     folhas.splice(+b.dataset.rmf,1); pintaFolha();
   }));
+  $('lista').querySelectorAll('[data-det]').forEach(d=>d.addEventListener('toggle',()=>{
+    folhas[+d.dataset.det].detAberto=d.open;
+  }));
+  $('lista').querySelectorAll('[data-passo]').forEach(b=>b.addEventListener('click',()=>{
+    const el=$('repf'+b.dataset.i);
+    el.value=Math.max(1,Math.min(200,(+el.value||1)+(+b.dataset.passo)));
+    el.dispatchEvent(new Event('change'));
+  }));
   $('lista').querySelectorAll('[data-repf]').forEach(el=>el.addEventListener('change',e=>{
     folhas[+el.dataset.repf].rep=Math.max(1,Math.min(200,+e.target.value||1)); pintaFolha();
   }));
@@ -321,23 +519,38 @@ function sugestao(a){
 }
 const n1=v=>v.toFixed(1).replace('.',',');
 
+// Moves one artwork's progress in place, without repainting the list.
+function pintaProgressoArte(a){
+  const el=$('lista').querySelector('[data-arte="'+artes.indexOf(a)+'"]');
+  const barra=el && el.querySelector('.prog i'), texto=el && el.querySelector('.progT');
+  if(!barra){ pintaArtes(); return; }
+  barra.style.width=a.lendo+'%'; if(texto) texto.textContent='arquivo grande · gerando a prévia · '+faltaLeitura(a.leitura);
+}
 function pintaArtes(){
   invalidaItemAtual();
-  $('lista').innerHTML=artes.map((a,i)=>{
-    let barra='', dica='', calc='<span>informe a largura para ver a qualidade</span>';
-    if(a.decodeError){
-      calc='<span class="er">Não conseguimos ler esta imagem; exporte novamente em PNG ou JPG</span>';
+  $('zona').classList.toggle('compacta', artes.length>0);
+  // The same card as a finished sheet: thumbnail, size, a DPI chip, then the
+  // width (with the usual sizes), copies, rotation and mirroring.
+  const copiasTot=artes.reduce((t,a)=>t+(a.q||1),0);
+  $('lista').innerHTML=(artes.length? '<div class="listaCab"><h4>Suas artes</h4><span>'+
+      artes.length+' arte'+(artes.length>1?'s':'')+' · '+copiasTot+' cópia'+(copiasTot>1?'s':'')+'</span></div>' : '')+
+    artes.map((a,i)=>{
+    let barra='', dica='', chips='', aviso='', medida='<b class="pede">Informe a largura</b>';
+    if(a.lendo!=null){
+      barra='<div class="prog"><i style="width:'+a.lendo+'%"></i></div>'+
+        '<span class="progT">arquivo grande · gerando a prévia · '+faltaLeitura(a.leitura)+'</span>';
+    }else if(a.decodeError){
+      aviso='<p class="avisoF"><b>Não conseguimos ler esta imagem.</b> Exporte novamente em PNG ou JPG.</p>';
     }else if(a.cm>larguraFilme()){
-      calc='<span class="er">Largura maior que o filme de '+n1(larguraFilme())+' cm</span>';
-    }else if(a.cm>0 && a.src){
-      const dpi=Math.round(dpiDe(a)), n=Math.max(6,Math.min(100,Math.round(dpi/300*100)));
-      barra='<div class="qb2"><i class="'+cls(n)+'" style="width:'+n+'%"></i></div>';
-      const fila=cabemNaLinha(a.cm);
-      calc='<span class="'+cls(n)+'"><b>'+n+'%</b> · '+dpi+' DPI</span><span>'+
-        a.q+' × '+n1(a.cm)+' × '+n1(a.cm*propDe(a))+' cm · '+fila+' por fileira</span>';
+      aviso='<p class="avisoF"><b>Largura maior que o filme.</b> O filme aqui tem '+n1(larguraFilme())+' cm.</p>';
+    }else if(a.cm>0 && (a.src||a.semPrevia)){
+      const dpi=Math.round(dpiDe(a));
+      medida='<b>'+n1(a.cm)+' × '+n1(a.cm*propDe(a))+' cm</b>';
+      chips='<ul class="chips"><li class="chip '+(dpi>=DPI_AVISA?'ok':dpi>=DPI_RECUSA?'av':'er')+'">'+dpi+' DPI</li>'+
+        '<li class="chip nt">'+cabemNaLinha(a.cm)+' por fileira</li></ul>';
       const sug=sugestao(a);
-      // One hint per row, on the row it is about: resolution first, since it
-      // changes the price; otherwise a width that saves sheet.
+      // One hint per artwork: resolution first, since it changes the price;
+      // otherwise a width that saves sheet.
       const maxCm=Math.floor(a.px/DPI_AVISA*2.54*10)/10;
       dica = dpi<DPI_AVISA && maxCm>0 && maxCm<a.cm
         ? '<div class="dica av">Pequena para '+n1(a.cm)+' cm. Em '+DPI_AVISA+' DPI ela sai com até '+
@@ -347,23 +560,41 @@ function pintaArtes(){
           n1(sug.cm)+' cm.<button data-usar="'+i+'" data-cm="'+sug.alvo+'">Usar '+n1(sug.alvo)+' cm</button></div>'
         : '';
     }
-    return '<div class="art'+(a===recemChegada?' nova':'')+'"><div class="l1"><b>'+escapeHTML(a.f.name)+'</b>'+
-      '<span style="color:var(--fraco);font-size:10.5px">'+
-        (a.px>0?a.px+' × '+a.py+' px':'a ler')+'</span>'+
-      '<button data-rm="'+i+'">×</button></div><div class="cps">'+
-      '<div><label>largura na peça</label><input type="number" min="1" max="'+larguraFilme()+
-        '" placeholder="cm" data-cm="'+i+'" value="'+(a.cm||'')+'"></div>'+
-      '<div><label>quantas vezes</label><input type="number" min="1" placeholder="1" data-q="'+i+
-        '" value="'+a.q+'"></div></div>'+
-      '<div class="atalhos">'+
-        (TAMANHOS[larguraFilme()]||[]).map(t=>'<button class="tm'+
-          (Math.abs(a.cm-t)<0.05?' on':'')+'" data-tam="'+i+'" data-t="'+t+'">'+
-          n1(t)+' cm</button>').join('')+
-        '<span class="sep"></span>'+
-        '<button class="gr'+(a.giro?' on':'')+'" data-giro="'+i+'" title="Girar 90°">⟳</button>'+
-        '<button class="gr'+(a.esp?' on':'')+'" data-esp="'+i+'" title="Espelhar">⇋</button>'+
-      '</div>'+barra+'<div class="calc">'+calc+'</div>'+dica+'</div>';
+    if(a.semPrevia && !a.decodeError)
+      aviso+='<p class="repTxt"><b>Sem prévia para '+escapeHTML(extDe(a.f.name))+' deste tamanho.</b> '+
+        'A arte entra na folha pela medida, e a equipe confere antes de imprimir. Em PNG, a prévia aparece.</p>';
+    const mini = a.miniSrc ? '<img src="'+escapeHTML(a.miniSrc)+'" alt="">' : '<span>'+escapeHTML(extDe(a.f.name))+'</span>';
+    const sub = a.cm>0 && (a.src||a.semPrevia) ? (a.q>1? a.q+' × ' : '')+'<b>'+n1(a.cm)+' × '+n1(a.cm*propDe(a))+' cm</b>' : '';
+    return '<div class="rep art2'+(a===recemChegada?' nova':'')+'" data-arte="'+i+'">'+
+      '<div class="repTopo"><div class="miniF">'+mini+'</div><div class="repInfo">'+
+        '<div class="l1"><b>'+escapeHTML(a.f.name)+'</b>'+(a===recemChegada?'<em class="novaT">nova</em>':'')+
+          '<button data-rm="'+i+'" aria-label="Remover '+escapeHTML(a.f.name)+'">'+icone('fechar')+'</button></div>'+
+        '<div class="repMed">'+medida+'<span>'+(a.px>0? a.px+' × '+a.py+' px · ' : '')+
+          escapeHTML(extDe(a.f.name))+' · '+fmt(a.f.size)+'</span></div>'+
+        barra+chips+aviso+dica+
+      '</div></div>'+
+      '<div class="cps">'+
+        '<div class="campo"><label for="cm'+i+'">Largura</label>'+
+          '<span class="un"><input type="number" id="cm'+i+'" min="1" max="'+larguraFilme()+'" step="0.1" '+
+            'placeholder="0" data-cm="'+i+'" value="'+(a.cm||'')+'"><i>cm</i></span></div>'+
+        '<div class="campo"><label for="q'+i+'">Cópias</label>'+
+          '<span class="passo"><button type="button" data-passoa="-1" data-i="'+i+'" aria-label="Menos uma cópia">−</button>'+
+          '<input type="number" id="q'+i+'" min="1" max="200" data-q="'+i+'" value="'+a.q+'">'+
+          '<button type="button" data-passoa="1" data-i="'+i+'" aria-label="Mais uma cópia">+</button></span></div>'+
+        '<span class="giros">'+
+          '<button class="gr'+(a.giro?' on':'')+'" data-giro="'+i+'" title="Girar 90°" aria-label="Girar 90°">'+icone('girar')+'</button>'+
+          '<button class="gr'+(a.esp?' on':'')+'" data-esp="'+i+'" title="Espelhar" aria-label="Espelhar">'+icone('espelhar')+'</button></span>'+
+        (sub? '<div class="conta">'+sub+'</div>' : '')+
+        '<div class="atalhos">'+(TAMANHOS[larguraFilme()]||[]).map(t=>'<button class="tm'+
+          (Math.abs(a.cm-t)<0.05?' on':'')+'" data-tam="'+i+'" data-t="'+t+'">'+n1(t)+' cm</button>').join('')+'</div>'+
+      '</div>'+
+    '</div>';
   }).join('');
+  $('lista').querySelectorAll('[data-passoa]').forEach(b=>b.addEventListener('click',()=>{
+    const el=$('q'+b.dataset.i);
+    el.value=Math.max(1,Math.min(200,(+el.value||1)+(+b.dataset.passoa)));
+    el.dispatchEvent(new Event('change'));
+  }));
   $('lista').querySelectorAll('[data-rm]').forEach(b=>b.addEventListener('click',()=>{artes.splice(+b.dataset.rm,1);pintaArtes();}));
   $('lista').querySelectorAll('[data-cm]').forEach(i=>i.addEventListener('change',()=>{artes[+i.dataset.cm].cm=+i.value||0;pintaArtes();}));
   $('lista').querySelectorAll('[data-q]').forEach(i=>i.addEventListener('change',()=>{artes[+i.dataset.q].q=Math.max(1,Math.min(200,Math.floor(+i.value||1)));pintaArtes();}));
@@ -390,7 +621,7 @@ function pintaArtes(){
   previaAoVivo();
 }
 function resumoArtes(){
-  const r=$('rA'), prontas=artes.filter(a=>a.cm>0 && a.cm<=larguraFilme() && a.src);
+  const r=$('rA'), prontas=artes.filter(a=>a.cm>0 && a.cm<=larguraFilme() && (a.src||a.semPrevia));
   if(!prontas.length){ r.style.display='none'; return; }
   const m=montagemCm/100;                    // a mesma folha que aparece ao lado
   const notas=prontas.map(a=>Math.max(6,Math.min(100,Math.round(dpiDe(a)/300*100))));

web/site-quality.js

@@ -45,15 +45,16 @@ function avaliar(){
              ? 'média por área das imagens dentro do PDF · pior em '+
                Math.min(...ans.map(a=>a.res? a.res.pior : a.dpi))+' DPI'
              : 'resolução do arquivo · arte ampliada antes de exportar não aparece aqui'],
-      ['ok', soma('artes')+' peças na folha',
+      ans.some(a=>a.grande) ? ['ok','Arquivo grande','peças, resíduos e fundo conferidos pela equipe'] : null,
+      ans.some(a=>a.grande) ? null : ['ok', soma('artes')+' peças na folha',
        Math.round(soma('aproveitamento')/ans.length)+'% da folha virou arte'],
-      soma('residuos') ? ['er','Resíduo de recorte',
+      ans.some(a=>a.grande) ? null : soma('residuos') ? ['er','Resíduo de recorte',
         soma('residuos')+' ponto'+(soma('residuos')>1?'s':'')+' abaixo de 2 mm · a impressora imprime']
         : ['ok','Sem resíduo de recorte','nada solto na folha'],
-      soma('encostadas') ? ['fix', soma('encostadas')+' peças a menos de 5 mm',
+      ans.some(a=>a.grande) ? null : soma('encostadas') ? ['fix', soma('encostadas')+' peças a menos de 5 mm',
         'se forem artes diferentes, separamos com 5 mm sem custo']
         : ['ok','Espaço entre peças','nenhuma abaixo de 6 mm'],
-      ans.some(a=>a.fundoChapado) ? ['er','Fundo chapado','a folha está sem transparência']
+      ans.some(a=>a.grande) ? null : ans.some(a=>a.fundoChapado) ? ['er','Fundo chapado','a folha está sem transparência']
         : ['ok','Fundo transparente','canal alfa conferido'],
       null
     ].filter(Boolean);
@@ -62,7 +63,8 @@ function avaliar(){
     return {pronto:true};
   }
   if(!artes.length) return {pronto:false, falta:'Arraste suas artes para começar.'};
-  if(artes.some(a=>a.decodeError || !a.src || !(a.px>0) || !(a.py>0)))
+  if(artes.some(a=>a.lendo!=null)) return {pronto:false, falta:'Gerando a prévia das artes grandes…'};
+  if(artes.some(a=>a.decodeError || !(a.src||a.semPrevia) || !(a.px>0) || !(a.py>0)))
     return {pronto:false, falta:'Não conseguimos ler uma das imagens. Exporte-a novamente em PNG ou JPG antes de continuar.'};
   if(artes.some(a=>!Number.isFinite(a.cm) || a.cm>larguraFilme()))
     return {pronto:false, falta:'A largura da arte precisa caber no filme de '+
@@ -115,7 +117,7 @@ function mostraNota(itens,n,titulo,sub){
   $('qbi').style.width=(semNota?0:n)+'%'; $('qbi').style.background=c;
   $('qitens').innerHTML=itens.map(i=>
     '<div class="qi '+i[0]+'"><span class="c">'+
-    (i[0]==='ok'?'✓':i[0]==='av'?'!':i[0]==='fix'?'↻':'×')+'</span>'+
+    icone(i[0]==='ok'?'ok':i[0]==='av'?'alerta':i[0]==='fix'?'refazer':'fechar')+'</span>'+
     '<div><b>'+escapeHTML(i[1])+'</b><span>'+escapeHTML(i[2])+'</span></div></div>').join('');
   $('qmsg').style.display='none';
   ressalvaResolucao();

web/site-shell.css

@@ -0,0 +1,87 @@
+/* Site DTF — what every page shares: the tokens, the base type, the stripe,
+   header, category menu and footer. The Site (index.html) and the order page
+   (portal.html) both load it before their own styles. */
+:root{
+ /* tokens do site institucional */
+ --font-family-base:"Roboto",sans-serif; --font-family-title:"Inter",sans-serif;
+ --font-color-base:#03060b; --font-color-title:#03060b;
+ --font-weight-base:400; --font-weight-title:700; --font-weight-subtitle:600; --font-weight-button:600;
+ --font-size-title:3rem; --font-size-subtitle:2rem; --font-size-button:1.4rem;
+ --font-size-small:1.2rem; --font-size-base:1.4rem; --font-size-medium:1.6rem; --font-size-big:1.8rem;
+ --line-height:1.5;
+ --white:#fff; --black:#03060b;
+ --gray-1:#f9f9f9; --gray-2:#c3c3c3; --gray-3:#707070; --gray-4:#363636;
+ --primary-color:#ffa81a; --secondary-color:#ff7f0a;
+ --white-transparency:#ffffffb3; --transition:all .4s ease;
+ /* apelidos usados nesta pagina, mapeados nos tokens acima */
+ --marinho:var(--black); --papel:var(--white); --cinza:var(--gray-1);
+ --tx:var(--font-color-base); --fraco:var(--gray-3); --linha:#e6e6e6;
+ --laranja:var(--primary-color); --laranja2:var(--secondary-color);
+ --vermelho:#D94A28; --verde:#2E9E5B; --verde-ml:#00A650; --verde-claro:#57D68A;
+ --sombra:0 1px 2px rgba(3,6,11,.05), 0 4px 14px rgba(3,6,11,.05);
+ --sombra-alta:0 2px 6px rgba(3,6,11,.07), 0 10px 30px rgba(3,6,11,.11)}
+
+*{box-sizing:border-box;margin:0;padding:0}
+html{scroll-behavior:smooth;font-size:62.5%}
+body{background:var(--white);color:var(--font-color-base);font-family:var(--font-family-base);
+ font-size:var(--font-size-base);font-weight:var(--font-weight-base);line-height:var(--line-height);
+ -webkit-font-smoothing:antialiased}
+h1,h2,h3{font-family:var(--font-family-title);color:var(--font-color-title);
+ font-weight:var(--font-weight-title);letter-spacing:normal;line-height:1.15}
+.w{max-width:1020px;margin:0 auto;padding:0 22px}
+
+/* tarja rotativa, como no site */
+.tarja{background:var(--laranja);color:#111;text-align:center;padding:8px 16px;
+ font-family:"Inter",sans-serif;font-weight:700;font-size:14.5px;letter-spacing:.02em}
+.tarja a{color:#111;text-decoration:none}
+
+/* topo */
+.topo{background:#fff;border-bottom:1px solid var(--linha);position:sticky;top:0;z-index:60}
+.topo .w{display:flex;align-items:center;gap:22px;padding-top:15px;padding-bottom:15px}
+.logo{display:flex;align-items:center;text-decoration:none;white-space:nowrap;flex:none}
+.logo img{height:26px;width:auto;display:block}
+.logotexto{font-family:"Inter",sans-serif;font-weight:700;font-size:19px;color:var(--black);
+ letter-spacing:-.03em}
+.logotexto i{font-style:normal;color:var(--laranja)}
+.acts{margin-left:auto;display:flex;gap:18px;align-items:center;font-size:15px}
+.acts a{color:var(--tx);text-decoration:none;display:flex;align-items:center;gap:6px}
+.acts a:hover{color:var(--laranja)}
+
+/* menu */
+.menu{background:#fff;border-bottom:1px solid var(--linha)}
+.menu .w{display:flex;gap:0;flex-wrap:wrap}
+.mi{position:relative}
+.mi>a{display:block;padding:13px 16px;font-family:"Inter",sans-serif;font-weight:600;
+ font-size:15px;color:var(--tx);text-decoration:none;white-space:nowrap}
+.mi:hover>a{color:var(--laranja)}
+.mi.on>a{color:var(--laranja);box-shadow:inset 0 -2px 0 var(--laranja)}
+.sub{display:none;position:absolute;top:100%;left:0;background:#fff;border:1px solid var(--linha);
+ border-radius:0 0 9px 9px;min-width:224px;padding:7px 0;z-index:70;
+ box-shadow:0 10px 26px rgba(0,0,0,.09)}
+.mi:hover .sub,.mi:focus-within .sub{display:block}
+.sub a{display:block;padding:8px 17px;font-size:15px;color:var(--fraco);text-decoration:none}
+.sub a:hover{color:var(--laranja);background:var(--cinza)}
+@media(max-width:820px){
+  .menu .w{overflow-x:auto;flex-wrap:nowrap}
+  .sub{display:none!important}
+}
+
+footer{background:#000;color:#8D9AB0;padding:26px 0 20px;font-size:15px}
+.frow{display:flex;gap:26px;align-items:flex-start;flex-wrap:wrap;padding-bottom:18px}
+.fmarca{display:flex;align-items:center;gap:9px;font-family:"Inter",sans-serif;
+ font-weight:700;font-size:15px;color:var(--laranja);letter-spacing:.06em;white-space:nowrap}
+.fmarca img{height:22px;width:auto;display:block;filter:brightness(0) invert(1)}
+footer a{color:#8D9AB0;text-decoration:none}
+footer a:hover{color:var(--laranja2)}
+.flinks{display:flex;gap:18px;flex-wrap:wrap;font-size:15px}
+.fcont{margin-left:auto;text-align:right;font-size:15px;line-height:1.7}
+@media(max-width:720px){.fcont{margin-left:0;text-align:left}}
+.fbase{border-top:1px solid rgba(255,255,255,.1);padding-top:14px;display:flex;
+ justify-content:space-between;gap:12px;flex-wrap:wrap;font-size:13.5px;color:#5A6570}
+
+/* The footer sits at the bottom of the screen even when the page is short. */
+body{display:flex;flex-direction:column;min-height:100vh}
+body>footer{margin-top:auto}
+/* In a column, auto side margins shrink a box to its content: the page's
+   centred blocks keep their full width, up to their max-width, as before. */
+body>.w{width:100%}

web/site-steps.js

@@ -11,6 +11,8 @@ const TITULO_INICIO=document.title;
 function tituloPagina(){
   const p=paginaDe(location.pathname);
   if(p.pagina==='carrinho') return 'Carrinho · DTF Dropstar';
+  if(p.pagina==='pagamento') return 'Pagamento · DTF Dropstar';
+  if(p.pagina==='pix') return 'Pagamento com PIX · DTF Dropstar';
   if(p.pagina==='produto') return MODOS[p.modo].tit+' · DTF Dropstar';
   return TITULO_INICIO;
 }
@@ -91,10 +93,12 @@ function vaiPara(url){
     passos.hidden = r==='inicio' || carrinhoVazio;
     alturas();
     if(!passos.hidden){
-      const atual = r==='produto' ? 1 : temCheckout() ? 3 : 2;
+      const atual = r==='produto' ? 1 : r==='pagamento' || r==='pix' ? 3 : 2;
       passos.querySelectorAll('[data-passo]').forEach(a=>{
         const n=Number(a.dataset.passo);
         a.classList.toggle('atual',n===atual); a.classList.toggle('feito',n<atual);
+        const marca=a.querySelector('span');
+        if(marca) marca.innerHTML = n<atual ? icone('ok') : String(n);
         if(n===atual) a.setAttribute('aria-current','step'); else a.removeAttribute('aria-current');
       });
       passos.querySelector('[data-passo="1"]').href =
@@ -124,8 +128,10 @@ function vaiPara(url){
 
   // Payment is a step only once the order has been sent.
   passos.querySelector('[data-passo="3"]').addEventListener('click',e=>{
-    if(!temCheckout()) e.preventDefault();
-  });
+    let enviado=false;
+    try{ enviado=!!localStorage.getItem('dtf-quote'); }catch(_){}
+    if(!enviado){ e.preventDefault(); e.stopPropagation(); }
+  },true);
   $('barraMBtn').addEventListener('click',e=>{
     e.preventDefault();
     alvoBarra()?.scrollIntoView({behavior:'smooth',block:'center'});

web/site-upload.js

@@ -37,33 +37,17 @@ function sel(fs){
   const fora = fs.filter(f=>!regra.test(f.name));
   fs = fs.filter(f=>regra.test(f.name));
   recusa(fora);
-  const max=window.dtfUploadMaxBytes||128*1048576;
+  const max=window.dtfUploadMaxBytes||5*1073741824;
   const grandes=fs.filter(f=>f.size>max);
   if(grandes.length){
     const el=$('recusa');
     el.style.display='block';
-    el.innerHTML='<b>Arquivo acima do limite de '+(max/1048576).toFixed(0)+
-      ' MB.</b> A verificação de segurança ainda não consegue liberar arquivos maiores. '+
-      'Divida ou compacte a arte antes de enviar.';
+    el.innerHTML='<b>Arquivo acima do limite de '+(max/1073741824).toFixed(0)+
+      ' GB.</b> Divida a folha em partes menores antes de enviar.';
     fs=fs.filter(f=>f.size<=max);
   }
   if(!fs.length) return;
   if(ehFolha()){
-    const auto=fs.filter(f=>AUTO.test(f.name)).length;
-    const manual=fs.length-auto;
-    if(caminho==='auto' && manual){
-      caminho='tabela';
-      avisoCam('<b>Trocamos o caminho para você.</b> Você marcou conferência automática, '+
-        'mas '+(manual>1? manual+' arquivos vieram':'o arquivo veio')+' em formato que não '+
-        'abrimos. O metro vai pela tabela, '+rs(TABELA[modo])+'.');
-      pintaCaminhos();
-    }else if(caminho==='tabela' && auto){
-      caminho='auto';
-      avisoCam('<b>Boa notícia.</b> Você marcou o caminho sem conferência, mas '+
-        (auto>1? 'os arquivos vieram':'o arquivo veio')+' em formato que a gente confere. '+
-        'Vamos avaliar e o metro pode cair até '+rs(pisoEscada())+'.');
-      pintaCaminhos();
-    }
     const novas=fs.map(f=>({f, med:null, rep:1, m:0, semAnalise:null}));
     folhas=folhas.concat(novas);            // soma, não substitui
     pintaFolha();
@@ -75,12 +59,36 @@ function sel(fs){
         }
         if(md && md.dpiFolha!=null && md.dpiFolha<DPI_RECUSA) return recusaFolha(x, md);
         x.med=md; if(md) x.m=md.alt/100; x.pct=55; pintaFolha();
-        if(md && RENDERIZA.test(x.f.name)){
+        if(md && md.grande){
+          // Graded at once from its size in pixels. A PNG is then read as a
+          // stream into a small copy: the preview, and the sheet check.
+          x.an={dpi:md.dpiFolha, grande:true, artes:0, residuos:0, encostadas:0,
+                fundoChapado:false, aproveitamento:0, alturaCm:md.alt, fonteDpi:'arquivo'};
+          if(!/\.png$/i.test(x.f.name)){ x.pct=null; pintaFolha(); return; }
+          x.pct=60; x.leitura={inicio:Date.now(), p:0}; pintaFolha();
+          let mostrado=0;
+          previaPngGrande(x.f, 600, p=>{
+            const pct=60+Math.floor(p*38);
+            x.leitura.p=p;
+            if(pct-mostrado>=1){ mostrado=pct; x.pct=pct; pintaProgressoFolha(x); }
+          }).then(cv=>{
+            if(cv && folhas.includes(x)){
+              x.previewSrc=cv.toDataURL('image/webp',0.85); x.miniSrc=miniatura(cv);
+              try{
+                const an=analisarFolha(cv, md.larg);
+                x.an={...an, dpi:md.dpiFolha, fonteDpi:'arquivo', grande:false};
+              }catch(e){}
+            }
+          }).catch(()=>{}).finally(()=>{ x.pct=null; pintaFolha(); });
+        }else if(md && RENDERIZA.test(x.f.name)){
           carregarImagem(x.f).then(img=>{
-            if(img){ x.previewSrc=img.src; try{ x.an=analisarFolha(img, md.larg); if(x.an) x.an.fonteDpi='arquivo'; }
+            if(img){ x.previewSrc=img.src; x.miniSrc=miniatura(img); try{ x.an=analisarFolha(img, md.larg); if(x.an) x.an.fonteDpi='arquivo'; }
                      catch(e){} }
             x.pct=null; pintaFolha();
           });
+        }else if(md && /\.pdf$/i.test(x.f.name) && x.f.size>GRANDE_BYTES){
+          x.semAnalise='PDF grande: a resolução das imagens de dentro é conferida pela equipe';
+          x.pct=null; pintaFolha();
         }else if(md && /\.pdf$/i.test(x.f.name)){
           x.pct=70; pintaFolha();
           rasterizarPdf(x.f, md.larg, md.alt).then(r=>{
@@ -90,6 +98,7 @@ function sel(fs){
                 : '');
             }
             if(r && r.tela){
+              x.miniSrc=miniatura(r.tela);
               try{
                 x.an=analisarFolha(r.tela, md.larg);
                 // vetor puro não tem resolução · nota máxima, e está certo
@@ -114,8 +123,30 @@ function sel(fs){
   Promise.all(novos.map(medir)).then(pintaArtes);
 }
 function medir(a){
+  // A large artwork is measured from its header and packed from a small copy
+  // read as a stream (previaPngGrande); the file itself is never decoded.
+  if(a.f.size>GRANDE_BYTES){
+    return dimensoesImagem(a.f).then(async d=>{
+      if(!d || !(d.w>0) || !(d.h>0)){ a.decodeError=true; return a; }
+      a.px=d.w; a.py=d.h; a.prop=d.h/d.w; a.grande=true;
+      // JPG and WebP cannot be read in parts: the art is placed by its
+      // measurements, as a full box, and the team checks it before printing.
+      if(!/\.png$/i.test(a.f.name)){ a.semPrevia=true; return a; }
+      a.lendo=0; a.leitura={inicio:Date.now(), p:0}; pintaArtes();
+      let mostrado=0;
+      const cv=await previaPngGrande(a.f, 1200, p=>{
+        const pct=Math.floor(p*100);
+        a.leitura.p=p;
+        if(pct-mostrado>=1){ mostrado=pct; a.lendo=pct; pintaProgressoArte(a); }
+      }).catch(()=>null);
+      a.lendo=null;
+      if(cv && artes.includes(a)){ a.src=cv.toDataURL('image/webp',0.9); a.miniSrc=miniatura(cv); }
+      else if(!cv) a.decodeError=true;
+      return a;
+    }).catch(()=>{ a.decodeError=true; return a; });
+  }
   return carregarImagem(a.f).then(img=>{
-    if(img){ a.prop=img.height/img.width; a.px=img.width; a.py=img.height; a.src=img.src; }
+    if(img){ a.prop=img.height/img.width; a.px=img.width; a.py=img.height; a.src=img.src; a.miniSrc=miniatura(img); }
     else a.decodeError=true;
     return a;
   });

web/site-v2.css

@@ -10,43 +10,44 @@
 body{background:#fff}
 .w{max-width:1200px;padding:0 24px}
 h1,h2,h3,h4{font-family:"Inter",sans-serif}
-.et{font-family:"Inter",sans-serif;font-weight:800;font-size:12.5px;letter-spacing:.06em;text-transform:uppercase;color:var(--laranja-escuro)}
+.et{font-family:"Inter",sans-serif;font-weight:800;font-size:15px;letter-spacing:.06em;text-transform:uppercase;color:var(--laranja-escuro)}
 
 /* Pages (site-pages.js): the home, a product page and the cart show only their own parts. */
 html[data-rota="inicio"] :is(#passos,#foco,#qual,#prev,#carr,.checkout,#carrVazio),
 html[data-rota="produto"] :is(.hero2,.etapas2,#cards,#carr,.checkout,#carrVazio,#info),
-html[data-rota="carrinho"] :is(.hero2,.etapas2,#cards,#foco,#qual,#prev,#info){display:none!important}
+html[data-rota="carrinho"] :is(.hero2,.etapas2,#cards,#foco,#qual,#prev,#info,.pagCab,.pagResumo){display:none!important}
+html:is([data-rota="pagamento"],[data-rota="pix"]) :is(.hero2,.etapas2,#cards,#foco,#qual,#prev,#info,#carr,#carrVazio,#desfazer){display:none!important}
 html[data-sem-itens] #carr{display:none!important}
 html:not([data-rota="inicio"]) #envio{padding-top:0;padding-bottom:64px;min-height:70vh}
 #envio,#foco,#qual,#prev,#checkoutStatus{scroll-margin-top:var(--topo-passos,128px)}
 .carrVazio{max-width:520px;margin:48px auto 0;padding:0 16px;text-align:center;display:flex;flex-direction:column;align-items:center;gap:14px}
 .carrVazio[hidden]{display:none}
 .carrVazio h2{font-size:28px;font-weight:800;letter-spacing:-.02em}
-.carrVazio p{color:var(--fraco);font-size:16px}
+.carrVazio p{color:var(--fraco);font-size:17.5px}
 
 /* Hero */
 .hero2{background:var(--preto);color:#fff;padding:64px 0}
 .hero2-grid{display:grid;grid-template-columns:minmax(0,1.05fr) minmax(0,1fr);gap:56px;align-items:center}
 .hero2-text{display:flex;flex-direction:column;gap:24px}
 .chips{display:flex;gap:10px;flex-wrap:wrap}
-.chip2{font-family:"Inter",sans-serif;font-weight:700;font-size:12px;letter-spacing:.04em;text-transform:uppercase;padding:6px 12px;border-radius:6px;border:1px solid #3A3D42;color:#E4E4E4}
+.chip2{font-family:"Inter",sans-serif;font-weight:700;font-size:14.5px;letter-spacing:.04em;text-transform:uppercase;padding:6px 12px;border-radius:6px;border:1px solid #3A3D42;color:#E4E4E4}
 .chip2.destaque{background:var(--laranja);border-color:var(--laranja);color:var(--preto);font-weight:800}
 .hero2 h1{color:#fff;font-size:clamp(34px,4.6vw,58px);line-height:1.04;font-weight:900;letter-spacing:-.03em}
 .hero2 h1 em{font-style:normal;color:var(--laranja)}
-.hero2-text>p{font-size:18px;line-height:1.55;color:#C9CCD1;max-width:560px}
+.hero2-text>p{font-size:19px;line-height:1.55;color:#C9CCD1;max-width:560px}
 .hero2-cta{display:flex;align-items:center;gap:18px;flex-wrap:wrap}
-.hero2-cta span{font-size:14px;color:#9EA3AA}
-.btn-laranja{height:56px;padding:0 28px;border-radius:var(--raio2);background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:17px;display:inline-flex;align-items:center;gap:10px;text-decoration:none}
+.hero2-cta span{font-size:16px;color:#9EA3AA}
+.btn-laranja{height:56px;padding:0 28px;border-radius:var(--raio2);background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:18px;display:inline-flex;align-items:center;gap:10px;text-decoration:none}
 .btn-laranja:hover{background:#FFB53D}
 .hero2-folha{background:#14171B;border:1px solid #262A2F;border-radius:18px;padding:22px;display:flex;flex-direction:column;gap:14px}
 .hf-cab{display:flex;align-items:baseline;gap:10px}
-.hf-cab b{font-family:"Inter",sans-serif;font-size:15px}
-.hf-cab span{margin-left:auto;font-size:13px;color:#9EA3AA}
+.hf-cab b{font-family:"Inter",sans-serif;font-size:16.5px}
+.hf-cab span{margin-left:auto;font-size:15px;color:#9EA3AA}
 .hf-area{position:relative;height:260px;border-radius:10px;background:#0B0D10;border:1px dashed #3A3D42;overflow:hidden}
 .hf-area i{position:absolute;border-radius:6px;opacity:.88}
 .hf-num{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px}
-.hf-num span{display:block;font-size:12px;color:#9EA3AA}
-.hf-num b{font-family:"Inter",sans-serif;font-size:18px}
+.hf-num span{display:block;font-size:14.5px;color:#9EA3AA}
+.hf-num b{font-family:"Inter",sans-serif;font-size:19px}
 .hf-num .verde{color:#57D68A}.hf-num .laranja{color:var(--laranja)}
 
 /* Steps strip */
@@ -54,15 +55,15 @@ html:not([data-rota="inicio"]) #envio{padding-top:0;padding-bottom:64px;min-heig
 .etapas2 .w{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:24px}
 .etapas2 .w>div{display:flex;gap:14px;align-items:flex-start}
 .etapas2 span{width:36px;height:36px;flex-shrink:0;border-radius:999px;background:#FFF1DB;color:var(--laranja-escuro);font-family:"Inter",sans-serif;font-weight:800;display:flex;align-items:center;justify-content:center}
-.etapas2 b{font-family:"Inter",sans-serif;font-size:15.5px}
-.etapas2 p{margin-top:3px;font-size:14px;color:var(--fraco)}
+.etapas2 b{font-family:"Inter",sans-serif;font-size:17px}
+.etapas2 p{margin-top:3px;font-size:16px;color:var(--fraco)}
 section+section{border-top:0}
 
 /* Product chooser */
 #envio{padding-top:56px}
 .cards-cab{display:flex;align-items:flex-end;gap:24px;flex-wrap:wrap}
 .cards-cab h2{margin-top:8px;font-size:clamp(28px,3vw,38px);font-weight:800;letter-spacing:-.02em}
-.cards-cab p{margin-left:auto;max-width:440px;font-size:15px;color:var(--fraco)}
+.cards-cab p{margin-left:auto;max-width:440px;font-size:16.5px;color:var(--fraco)}
 .escolha{grid-template-columns:repeat(2,minmax(0,1fr));gap:20px;margin-top:28px}
 .ec{text-align:left;padding:26px;gap:14px;border:1px solid var(--linha);border-radius:16px;box-shadow:none;cursor:pointer;font:inherit;color:inherit}
 .ec::before,.ec::after{display:none}
@@ -70,23 +71,23 @@ section+section{border-top:0}
 .ec.f,.ec.f:hover{border-color:var(--linha)}
 .ec.f:hover{border-color:var(--laranja)}
 .ec-top{display:flex;align-items:center;gap:10px}
-.ec-kind{font-family:"Inter",sans-serif;font-weight:700;font-size:12px;letter-spacing:.05em;color:#707070}
-.marc2{margin-left:auto;font-family:"Inter",sans-serif;font-weight:800;font-size:11px;letter-spacing:.05em;text-transform:uppercase;padding:4px 10px;border-radius:999px;background:var(--preto);color:var(--laranja)}
+.ec-kind{font-family:"Inter",sans-serif;font-weight:700;font-size:14.5px;letter-spacing:.05em;color:#707070}
+.marc2{margin-left:auto;font-family:"Inter",sans-serif;font-weight:800;font-size:13.5px;letter-spacing:.05em;text-transform:uppercase;padding:4px 10px;border-radius:999px;background:var(--preto);color:var(--laranja)}
 .ec h3{font-size:25px;font-weight:800;letter-spacing:-.01em;color:var(--preto)}
-.ec>p{font-size:15px;line-height:1.5;color:var(--texto2);flex:1}
+.ec>p{font-size:16.5px;line-height:1.5;color:var(--texto2);flex:1}
 .ec-pe{display:flex;align-items:flex-end;gap:12px;padding-top:14px;border-top:1px solid #EFEFEF}
 .ec-preco{display:flex;flex-direction:column;gap:2px}
-.ec-preco span{font-size:13px;color:#707070}
+.ec-preco span{font-size:15px;color:#707070}
 .ec-preco em{font-style:normal}
 .ec-preco b{font-family:"Inter",sans-serif;font-size:29px;font-weight:900;letter-spacing:-.02em;color:var(--preto)}
-.ec-go{margin-left:auto;height:46px;padding:0 18px;border-radius:var(--raio2);background:var(--preto);color:#fff;font-family:"Inter",sans-serif;font-weight:700;font-size:15px;display:flex;align-items:center;white-space:nowrap}
+.ec-go{margin-left:auto;height:46px;padding:0 18px;border-radius:var(--raio2);background:var(--preto);color:#fff;font-family:"Inter",sans-serif;font-weight:700;font-size:16.5px;display:flex;align-items:center;white-space:nowrap}
 .ec:hover .ec-go{background:var(--laranja);color:var(--preto)}
 
 /* Progress bar */
-.passos{position:sticky;top:var(--topo,64px);z-index:30;display:flex;align-items:center;justify-content:center;gap:14px;margin:0 0 22px;padding:14px 16px;background:rgba(255,255,255,.96);backdrop-filter:blur(6px);border-bottom:1px solid var(--linha);font-family:"Inter",sans-serif;font-size:14px}
+.passos{position:sticky;top:var(--topo,64px);z-index:30;display:flex;align-items:center;justify-content:center;gap:14px;margin:0 0 22px;padding:14px 16px;background:rgba(255,255,255,.96);backdrop-filter:blur(6px);border-bottom:1px solid var(--linha);font-family:"Inter",sans-serif;font-size:16px}
 .passos[hidden]{display:none}
 .passos a{display:flex;align-items:center;gap:8px;color:#707070;font-weight:600;text-decoration:none}
-.passos a span{width:26px;height:26px;border-radius:999px;border:2px solid #D0D0D0;display:flex;align-items:center;justify-content:center;font-size:13px}
+.passos a span{width:26px;height:26px;border-radius:999px;border:2px solid #D0D0D0;display:flex;align-items:center;justify-content:center;font-size:15px}
 .passos a.atual{color:var(--preto);font-weight:800}
 .passos a.atual span{background:var(--laranja);border-color:var(--laranja)}
 .passos a.feito{color:var(--verde)}
@@ -99,92 +100,195 @@ section+section{border-top:0}
    parts live in the buy box, and the rest repeated it (the findings list too:
    each row already says what was checked). */
 #qual,#prev,#rA,.qb2,#qitens{display:none!important}
-.voltar{height:auto;padding:0;border:0;background:none;box-shadow:none;font-size:14px;font-weight:500;color:var(--fraco);margin:24px 0 14px}
+.voltar{height:auto;padding:0;border:0;background:none;box-shadow:none;font-size:16px;font-weight:500;color:var(--fraco);margin:24px 0 14px}
 .voltar:hover{color:var(--laranja-escuro)}
 .focoGrid{grid-template-columns:minmax(0,1fr);gap:20px}
 .cat,.cat.file{border:0;background:transparent;box-shadow:none;overflow:visible}
-.cabfoco,.cat.file .cabfoco{padding:0 0 20px!important;background:transparent;border:0;display:grid;
-  grid-template-columns:minmax(0,1fr) auto;grid-template-areas:"t e" "s e" "p e";column-gap:24px;align-items:end}
-.cabfoco>div:first-child{grid-area:t;display:flex;flex-direction:column-reverse;gap:4px}
-.cabfoco .lg{font-size:12px;color:#707070;letter-spacing:.05em}
-.cabfoco h3{font-size:32px;font-weight:800;letter-spacing:-.02em;line-height:1.1}
-.cabfoco p{grid-area:s;margin-top:6px;font-size:15px;color:var(--texto2)}
-.cabfoco .pr2{grid-area:p;margin-top:4px;font-size:14px;font-weight:600;color:var(--fraco);white-space:normal}
-.tipoEnvio{grid-area:e;margin:0}
-.tipoEnvio:not([hidden]){display:inline-flex;gap:4px;padding:4px;border-radius:10px;background:#EFEFEF}
-.tipoEnvio .cam,.tipoEnvio .cam.on{border:0;box-shadow:none;background:transparent;padding:0 14px;min-height:40px;border-radius:8px;align-items:center}
-.tipoEnvio .cam.on{background:#fff;box-shadow:0 1px 2px rgba(3,6,11,.14)}
-.tipoEnvio .cam .mk2,.tipoEnvio .cam span,.tipoEnvio .cam em{display:none}
-.tipoEnvio .cam b{margin:0;font-size:13.5px;font-weight:600;white-space:nowrap}
-.tipoEnvio .cam.on b{font-weight:800}
+.cabfoco,.cat.file .cabfoco{padding:0 0 24px!important;background:transparent;border:0;display:flex;flex-direction:column;gap:20px}
+.cabfoco>div:first-child{display:flex;flex-direction:column-reverse;gap:4px}
+.cabfoco .lg{font-size:15px;font-weight:800;color:var(--laranja-escuro);letter-spacing:.06em;text-transform:uppercase}
+.cabfoco h3{font-size:36px;font-weight:800;letter-spacing:-.02em;line-height:1.1}
+.tipoEnvio{margin:0}
+.tipoEnvio:not([hidden]){display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px;max-width:calc(100% - 452px)}
+.tipoEnvio .cam,.tipoEnvio .cam.on{padding:14px 16px;min-height:0;border-radius:12px;border:1px solid var(--linha);background:#F9F9F9;box-shadow:none;align-items:flex-start}
+.tipoEnvio .cam.on{padding:13px 15px;border:2px solid var(--preto);background:#fff}
+.tipoEnvio .cam .mk2{display:none}
+.tipoEnvio .cam div{display:grid;grid-template-columns:minmax(0,1fr) auto;column-gap:12px;row-gap:4px;align-items:baseline}
+.tipoEnvio .cam b{margin:0;font-size:16.5px;font-weight:700;color:var(--texto2)}
+.tipoEnvio .cam.on b{color:var(--preto);font-weight:800}
+.tipoEnvio .cam em{margin:0;font-size:15px;font-weight:500;color:var(--fraco);white-space:nowrap}
+.tipoEnvio .cam.on em{font-weight:600;color:var(--preto)}
+.tipoEnvio .cam div>span{grid-column:1/-1;font-size:15px;color:var(--fraco);line-height:1.4}
+.tipoEnvio .cam.on div>span{color:var(--texto2)}
 .tipoEnvio .cam:disabled{cursor:default}
-.tipoEnvio .cam:disabled:not(.on){opacity:.5}
+.tipoEnvio .cam:disabled:not(.on){opacity:.55}
+@media(max-width:1100px){.tipoEnvio:not([hidden]){max-width:none}}
 .cat .in{padding:0!important}
 .foco2{grid-template-columns:minmax(0,1fr) 420px;gap:32px}
 .fila{display:flex;flex-direction:column;gap:12px}
 .fila>*{margin:0}
 .cam{border-radius:var(--raio2)}
 .cam.on{border-color:var(--laranja);background:var(--aviso-fundo)}
-#larguraFolhaPronta{display:inline}
+#larguraFolhaPronta{display:inline;font-size:inherit;color:inherit}
 .zona{display:grid;grid-template-columns:44px minmax(0,1fr);column-gap:16px;row-gap:2px;align-items:center;text-align:left;padding:16px 20px;margin:0;border:2px dashed #F2B25A;background:var(--aviso-fundo);border-radius:var(--raio)}
-.zona .ico{grid-row:1/4;width:44px;height:44px;line-height:44px;margin:0;border-radius:10px;background:var(--laranja);color:var(--preto);box-shadow:none}
-.zona b{font-size:15px;margin:0}
-.zona span{max-width:none;margin:0;font-size:13px;color:var(--fraco)}
+.zona .ico{grid-row:1/4;display:flex;align-items:center;justify-content:center;width:44px;height:44px;line-height:1;margin:0;border-radius:10px;background:var(--laranja);color:var(--preto);font-size:20px;box-shadow:none}
+.zona b{font-size:16.5px;margin:0}
+.zona span{max-width:none;margin:0;font-size:15px;color:var(--fraco)}
 .zona .bt{display:none}
 .zona:hover,.zona.sobre{border-color:var(--laranja2);box-shadow:none}
+.zona .zManual{grid-column:1/-1;margin-top:12px;padding-top:12px;border-top:1px solid var(--aviso-linha);color:var(--texto2);line-height:1.5}
+.zona .zManual[hidden]{display:none}
+.zona .zManual b{display:inline;font-size:15px}
+.zona .zOutra{display:none}
+.zona.compacta{display:flex;justify-content:center;align-items:center;min-height:56px;padding:0 20px;border:1.5px dashed #D0D0D0;background:#fff;cursor:pointer}
+.zona.compacta>*{display:none}
+.zona.compacta .zOutra{display:inline;font-size:16px;color:var(--fraco)}
+.zona.compacta .zOutra b{display:inline;font-size:16px;font-weight:600;color:var(--preto)}
+.zona.compacta .zOutra b::before{content:"+";margin-right:8px;font-weight:700}
+.zona.compacta:hover,.zona.compacta.sobre{border-color:var(--laranja2)}
 #lista{display:flex;flex-direction:column;gap:10px}
 #lista:empty{display:none}
 .art{margin:0;padding:14px 16px;border-radius:12px;background:#fff;border:1px solid var(--linha)}
 .art.nova{background:#fff;box-shadow:0 0 0 2px rgba(255,168,26,.45)}
-.art .l1 b{font-size:15px;font-weight:700}
-.art label{font-size:12px}
-.art input{height:42px;font-size:15px;font-weight:600;border-radius:8px}
+.art .l1 b{font-size:16.5px;font-weight:700}
+.art label{font-size:14.5px}
+.art input{height:42px;font-size:16.5px;font-weight:600;border-radius:8px}
 .art .cps{grid-template-columns:repeat(2,minmax(0,160px))}
-.rep{margin:0;padding:14px 16px;border-radius:12px;background:#fff;border:1px solid var(--linha)}
-.calc{font-size:13px;margin-top:8px}
-.dica{display:flex;align-items:center;gap:12px;margin-top:10px;padding:10px 12px;border:0;border-radius:8px;background:var(--verde-fundo);font-size:13px;color:#14532D}
+.listaCab{display:flex;justify-content:space-between;align-items:baseline;gap:12px}
+.listaCab h4{margin:0;font-size:19px;font-weight:700}
+.listaCab span{font-size:15px;color:var(--fraco)}
+.rep{margin:0;padding:20px;border-radius:14px;background:#fff;border:1px solid var(--linha);display:flex;flex-direction:column;gap:16px}
+.repTopo{display:flex;gap:16px;align-items:flex-start}
+.miniF{flex:none;width:52px;height:96px;border-radius:6px;border:1px solid #D6D6D6;background:#F4F4F2;display:flex;align-items:center;justify-content:center;overflow:hidden}
+.miniF img{width:100%;height:100%;object-fit:contain;display:block}
+.miniF span{font-size:13.5px;font-weight:800;color:var(--texto2)}
+.repInfo{flex:1;min-width:0;display:flex;flex-direction:column;gap:6px}
+.rep .l1{margin:0}
+.rep .l1 b{font-size:16px;font-weight:600;color:var(--preto)}
+.rep .l1 button{width:32px;height:32px;margin:-6px -6px -6px 0;border-radius:8px;font-size:19px}
+.rep .l1 button:hover{background:#F1F1F1;color:var(--preto)}
+.repMed{display:flex;align-items:baseline;gap:10px;flex-wrap:wrap}
+.repMed b{font-family:"Inter",sans-serif;font-size:22px;font-weight:700;letter-spacing:-.01em}
+.repMed span,.repPeso{font-size:15px;color:var(--fraco)}
+.chips{list-style:none;margin:4px 0 0;padding:0;display:flex;flex-wrap:wrap;gap:8px}
+.chip{display:inline-flex;align-items:center;gap:6px;padding:5px 10px;border-radius:999px;font-size:15px;font-weight:600;line-height:1.2}
+.chip::before{font-weight:800}
+.chip.ok{background:var(--verde-fundo);color:var(--verde)}.chip.ok::before{content:"✓"}
+.chip.av{background:#FFF1DB;color:#8A4B00}.chip.av::before{content:"!"}
+.chip.er{background:#FDE8E6;color:#B3261E}.chip.er::before{content:"×"}
+.chip.fix{background:#E8F0FB;color:#1F4E8C}.chip.fix::before{content:"✓"}
+.chip.nt{background:#F1F1F1;color:var(--texto2)}
+.chipSo{align-self:flex-start;padding:5px 10px;border-radius:999px;background:#F1F1F1;color:var(--texto2);font-size:15px;font-weight:600}
+.avisoF{margin:4px 0 0;padding:10px 12px;border-radius:10px;background:#FDE8E6;font-size:15px;line-height:1.5;color:var(--preto)}
+.avisoF b{color:#B3261E}
+.repTxt{margin:2px 0 0;font-size:15.5px;line-height:1.5;color:var(--texto2)}
+.repTxt b{color:var(--preto)}
+.confDet{font-size:15px}
+.confDet summary{display:inline;cursor:pointer;list-style:none;color:var(--laranja-escuro);font-weight:500}
+.confDet summary::-webkit-details-marker{display:none}
+.confDet summary:hover{text-decoration:underline}
+.confDet[open] summary{display:inline-block;margin-bottom:6px}
+.confDet span{display:block;color:var(--texto2);line-height:1.6}
+.rep .cps{display:flex;align-items:center;gap:16px 24px;flex-wrap:wrap;margin:0;padding-top:16px;border-top:1px solid #EFEFEF}
+.rep .campo{display:flex;align-items:center;gap:12px}
+.rep .campo label{margin:0;font-size:16px;font-weight:600;color:var(--preto)}
+.passo{display:inline-flex;border:1px solid #D6D6D6;border-radius:10px;overflow:hidden}
+.passo button{width:44px;height:44px;border:0;background:#F9F9F9;font-size:19px;color:var(--preto);cursor:pointer}
+.passo button:hover{background:#EFEFEF}
+.rep .passo input{width:56px;height:44px;padding:0;border:0;border-radius:0;text-align:center;font-size:17.5px;font-weight:700;-moz-appearance:textfield;appearance:textfield}
+.passo input::-webkit-inner-spin-button,.passo input::-webkit-outer-spin-button{-webkit-appearance:none;margin:0}
+.rep .un{display:inline-flex;align-items:center;gap:6px;height:44px;padding:0 12px;border:1px solid #D6D6D6;border-radius:10px}
+.rep .un input{width:64px;padding:0;border:0;font-size:17.5px;font-weight:700;text-align:right}
+.rep .un i{font-style:normal;font-size:16px;color:var(--fraco)}
+.rep .conta{margin-left:auto;font-size:16px;color:var(--texto2)}
+.rep .conta b{font-family:"Inter",sans-serif;font-size:17.5px;color:var(--preto)}
+.calc{font-size:15px;margin-top:8px}
+.dica{display:flex;align-items:center;gap:12px;margin-top:10px;padding:10px 12px;border:0;border-radius:8px;background:var(--verde-fundo);font-size:15px;color:#14532D}
 .dica.av{background:var(--aviso-fundo);color:#5A3A00}
-.dica button{display:inline-flex;width:auto;margin:0 0 0 auto;flex:none;height:34px;align-items:center;padding:0 12px;border-radius:7px;border:1px solid var(--verde);background:#fff;color:var(--verde);box-shadow:none;font-size:13px}
+.dica button{display:inline-flex;width:auto;margin:0 0 0 auto;flex:none;height:34px;align-items:center;padding:0 12px;border-radius:7px;border:1px solid var(--verde);background:#fff;color:var(--verde);box-shadow:none;font-size:15px}
 .dica button:hover{background:var(--verde);color:#fff;box-shadow:none}
-.req{position:static;padding:16px 20px 6px;border-radius:12px;box-shadow:none}
-.reqcab{font-size:15px;margin-bottom:6px}
+.req{position:static;padding:8px 0 0;border:0;border-radius:0;background:none;box-shadow:none;display:flex;flex-wrap:wrap;align-items:baseline;gap:8px 20px}
+.reqcab{margin:0;font-size:15px;font-weight:400;color:var(--fraco)}
+.req details,.req details:first-of-type{border:0}
+.reqLinks{display:contents}
+.reqLinks button{padding:0;border:0;background:none;font:inherit;font-size:15px;font-weight:500;color:var(--laranja-escuro);cursor:pointer}
+.reqLinks button:hover{text-decoration:underline}
+.reqLinks button.on{font-weight:700;color:var(--preto);text-decoration:underline;text-underline-offset:4px;text-decoration-color:var(--laranja)}
+/* The links above open and close the answers; a closed one is not shown. */
+.req details:not([open]){display:none}
+.req summary{display:inline;padding:0;font-size:15px;font-weight:500;color:var(--laranja-escuro)}
+.req summary::before{display:none}
+.req details[open]{order:1;flex-basis:100%;padding:14px 16px 4px;border-radius:12px;background:var(--cinza)}
+.req details[open] summary{display:block;margin-bottom:6px;font-size:16px;font-weight:700;color:var(--preto);text-decoration:none}
+.req li{font-size:15px}
+.req .obs2{font-size:14.5px}
 
 /* The buy box */
 .mont{position:sticky;top:var(--topo-passos,128px);padding:20px;border-radius:16px;background:#fff;box-shadow:none;display:flex;flex-direction:column;gap:12px}
 .mont>*{margin:0}
-.montcab b{font-size:17px;font-weight:800}
-.montpe{font-size:12px;text-align:center}
+.montcab b{font-size:18px;font-weight:800}
+.montpe{font-size:14.5px;text-align:center}
 .compra{display:flex;flex-direction:column;gap:12px;padding-top:16px;border-top:1px solid #EFEFEF}
 .compra .aoVivo{margin:0}
 .compra .aoVivo.pronto{display:none}
-#compraVals{display:flex;flex-direction:column;gap:10px;font-size:15px}
+#compraVals{display:flex;flex-direction:column;gap:10px;font-size:16.5px}
 #compraVals[hidden]{display:none}
-.cNota{display:flex;align-items:center;gap:12px}
-.cNota span,.cLin>span:first-child{color:var(--texto2)}
-.cNota>i{flex:1;height:6px;border-radius:999px;background:#EFEFEF;overflow:hidden}
-.cNota>i i{display:block;height:100%;border-radius:999px;background:#C9CCD1}
-.cNota>i i.ok{background:var(--verde)}.cNota>i i.av{background:var(--laranja)}.cNota>i i.er{background:var(--vermelho)}
-.cNota b{font-family:"Inter",sans-serif;font-weight:800}
+.cat.file .zoomB{display:none}
+.ampliar{margin-left:auto;height:32px;padding:0 12px;border-radius:8px;border:1px solid #D6D6D6;background:#fff;font-size:15px;font-weight:600;color:var(--preto);cursor:pointer}
+.ampliar:hover{border-color:var(--preto)}
+.ampliar[hidden]{display:none}
+.cat.file #vArea{max-height:340px}
+.cEscada{display:flex;flex-direction:column;gap:8px;margin-bottom:4px}
+.cEscada>span{font-size:15px;font-weight:600}
+.cEscada ol{list-style:none;margin:0;padding:0;display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:4px}
+.cEscada li{padding:8px 2px;border-radius:8px;background:#F4F4F2;border:1.5px solid transparent;display:flex;flex-direction:column;align-items:center;gap:2px}
+.cEscada li span{font-size:13.5px;color:var(--fraco);white-space:nowrap}
+.cEscada li b{font-size:15px;font-weight:500;color:var(--texto2)}
+.cEscada li.on{background:var(--verde-fundo);border-color:var(--verde)}
+.cEscada li.on span,.cEscada li.on b{font-weight:700;color:var(--verde)}
+.cEscada li.on:last-child{background:#F1F1F1;border-color:var(--preto)}
+.cEscada li.on:last-child span,.cEscada li.on:last-child b{color:var(--preto)}
+.cLin>span:first-child{color:var(--texto2)}
+.cLin small{font-size:14.5px;color:var(--fraco)}
+.cEco{margin:-6px 0 0;text-align:right;font-size:15px;font-weight:600;color:var(--verde)}
+.cEco:empty{display:none}
+#cPartes{display:block}
+.ampliaDlg{width:min(960px,calc(100vw - 32px));max-height:calc(100vh - 48px);padding:0;border:0;border-radius:16px;box-shadow:0 20px 60px rgba(3,6,11,.3)}
+.ampliaDlg::backdrop{background:rgba(3,6,11,.55)}
+.ampliaCab{position:sticky;top:0;z-index:1;display:flex;align-items:center;justify-content:space-between;padding:12px 16px;border-bottom:1px solid var(--linha);background:#fff}
+.ampliaCab b{font-size:17.5px;font-weight:800}
+.ampliaCab button{width:40px;height:40px;border:0;border-radius:8px;background:#F1F1F1;font-size:20px;cursor:pointer}
+#ampliaArea .folhaPrevias{display:grid;gap:16px;padding:16px;background:#F8F9FA}
+#ampliaArea .folhaPrevia{margin:0;background:#fff;border:1px solid var(--linha);border-radius:8px;overflow:hidden}
+#ampliaArea .folhaPilha{display:flex;flex-direction:column;align-items:center;gap:4px}
+#ampliaArea .folhaPilha img{display:block;width:auto;max-width:100%;height:auto;max-height:calc(100vh - 180px)!important}
+#ampliaArea figcaption{padding:8px 12px;font-size:15px;color:var(--texto2);border-top:1px solid var(--linha)}
 .cLin{display:flex;align-items:baseline;gap:8px}
 .cLin>span:last-child,.cLin>b{margin-left:auto;display:flex;gap:8px;align-items:baseline}
-.cLin s{font-size:13px;color:#707070}
-.cObs{margin:-4px 0 0;font-size:13px;color:var(--verde)}
+.cLin s{font-size:15px;color:#707070}
+.cObs{margin:-4px 0 0;font-size:15px;color:var(--verde)}
 .cObs:empty{display:none}
 .cTot{display:flex;align-items:baseline;padding-top:12px;border-top:1px solid #EFEFEF}
 .cTot span{font-family:"Inter",sans-serif;font-weight:700}
 .cTot b{margin-left:auto;font-family:"Inter",sans-serif;font-size:30px;font-weight:900;letter-spacing:-.01em}
-#qmsg{font-size:13px;line-height:1.45}
+#qmsg{font-size:15px;line-height:1.45}
 .compra .ciente{margin:0;padding:12px 14px}
-.compra .ciente h4{font-size:13.5px}
-.compra .ciente p,.compra .ciente .lista{font-size:13px}
-.cAdd{height:54px;border-radius:var(--raio2);border:0;background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:16px;cursor:pointer}
+.compra .ciente h4{font-size:15.5px}
+.compra .ciente p,.compra .ciente .lista{font-size:15px}
+.cAdd{height:54px;border-radius:var(--raio2);border:0;background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:17.5px;cursor:pointer}
 .cAdd:hover:not(:disabled){background:#FFB53D}
 .cAdd:disabled{background:#EDEDED;color:#8A8D92;cursor:not-allowed}
-.cPe{margin:0;font-size:13px;color:var(--fraco);text-align:center}
+.cPe{margin:0;font-size:15px;color:var(--fraco);text-align:center}
 @media(max-width:1100px){.foco2{grid-template-columns:1fr}.mont{position:static}}
-@media(max-width:620px){.montcab b{font-size:15px}
-  .cabfoco,.cat.file .cabfoco{grid-template-columns:1fr;grid-template-areas:"t" "s" "p" "e"}
-  .tipoEnvio:not([hidden]){display:grid;grid-template-columns:1fr 1fr;margin-top:14px}}
+@media(max-width:620px){.montcab b{font-size:16.5px}
+  .cabfoco h3{font-size:28px}
+  .tipoEnvio .cam div{grid-template-columns:1fr}
+  .tipoEnvio .cam div>span{display:none}
+  .rep{padding:16px}
+  .repTopo{gap:12px}
+  .miniF{width:40px;height:80px}
+  .repMed b{font-size:20px}
+  .rep .conta{margin-left:0}}
 
 /* The quality, preview, cart and checkout panels sit directly in #envio,
    outside .w; they share the page column so nothing runs edge to edge. */
@@ -194,63 +298,148 @@ section+section{border-top:0}
 /* Cart */
 .itensCab{display:flex;align-items:baseline;gap:12px;margin-bottom:11px}
 .itensCab h4{margin:0}
-.esvaziar{margin-left:auto;border:0;background:none;padding:6px 0;font-size:13.5px;font-weight:600;color:var(--fraco);cursor:pointer;text-decoration:underline;text-underline-offset:3px}
+.esvaziar{margin-left:auto;border:0;background:none;padding:6px 0;font-size:15.5px;font-weight:600;color:var(--fraco);cursor:pointer;text-decoration:underline;text-underline-offset:3px}
 .esvaziar:hover{color:#B8391C}
 .esvaziar[hidden]{display:none}
 .item{align-items:center}
-.item .x{flex:none;height:36px;padding:0 12px;border-radius:8px;border:1px solid #D6D6D6;background:#fff;color:var(--texto2);font-size:13px;font-weight:600;font-family:inherit;cursor:pointer}
+.item .marca{flex:none;display:flex;align-items:center;cursor:pointer}
+.item .marca input{width:20px;height:20px;margin:0;accent-color:var(--laranja);cursor:pointer}
+.miniItem{position:relative;flex:none;width:52px;height:52px;border-radius:8px;border:1px solid var(--linha);background:repeating-conic-gradient(#F1F1F1 0 25%,#fff 0 50%) 0 0/12px 12px;display:flex;align-items:center;justify-content:center;overflow:hidden}
+.miniItem img{max-width:100%;max-height:100%;object-fit:contain}
+.miniItem i{font-style:normal;font-size:12px;font-weight:700;color:var(--fraco)}
+.miniItem em{position:absolute;right:2px;bottom:2px;padding:0 4px;border-radius:5px;background:rgba(3,6,11,.75);color:#fff;font-style:normal;font-size:11px;font-weight:700}
+.item.fora .miniItem,.item.fora .nm2,.item.fora .vl2{opacity:.45}
+.item .x{flex:none;height:36px;padding:0 12px;border-radius:8px;border:1px solid #D6D6D6;background:#fff;color:var(--texto2);font-size:15px;font-weight:600;font-family:inherit;cursor:pointer}
 .item .x:hover{border-color:#B8391C;color:#B8391C}
-.desfazer{position:fixed;left:50%;bottom:24px;transform:translateX(-50%);z-index:80;display:flex;align-items:center;gap:16px;padding:12px 14px 12px 18px;border-radius:12px;background:var(--preto);color:#fff;font-size:14px;box-shadow:0 10px 30px rgba(3,6,11,.25);max-width:calc(100% - 32px);box-sizing:border-box}
+.desfazer{position:fixed;left:50%;bottom:24px;transform:translateX(-50%);z-index:80;display:flex;align-items:center;gap:16px;padding:12px 14px 12px 18px;border-radius:12px;background:var(--preto);color:#fff;font-size:16px;box-shadow:0 10px 30px rgba(3,6,11,.25);max-width:calc(100% - 32px);box-sizing:border-box}
 .desfazer[hidden]{display:none}
-.desfazer button{flex:none;height:36px;padding:0 14px;border-radius:8px;border:0;background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:14px;cursor:pointer}
+.desfazer button{flex:none;height:36px;padding:0 14px;border-radius:8px;border:0;background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:16px;cursor:pointer}
 @media(max-width:820px){.desfazer{bottom:100px}}
-.carrAviso{grid-column:1/-1;font-size:13px;color:var(--fraco)}
+.carrAviso{grid-column:1/-1;font-size:15px;color:var(--fraco)}
 .carrAviso:empty{display:none}
 .carr{border-radius:16px}
 .carr h3{font-size:24px;font-weight:800;letter-spacing:-.02em}
 .cxE{border-radius:var(--raio);border-color:var(--linha)}
-.cxE h4,.resumo h4{font-family:"Inter",sans-serif;font-weight:800;font-size:17px}
+.cxE h4,.resumo h4{font-family:"Inter",sans-serif;font-weight:800;font-size:18px}
 .cp input,.cepL input{height:46px;border-radius:var(--raio2)}
 .cp input:focus,.cepL input:focus{border-color:var(--laranja2);box-shadow:0 0 0 3px rgba(255,168,26,.18)}
 .opE{border-radius:12px}
 .opE.on{border:2px solid var(--laranja);background:var(--aviso-fundo)}
 .resumo{position:sticky;top:var(--topo-passos,128px);border-radius:16px}
 .tot b{font-family:"Inter",sans-serif;font-weight:900}
-#bPagar{height:54px;border-radius:var(--raio2);background:var(--laranja);color:var(--preto);border:0;font-family:"Inter",sans-serif;font-weight:800;font-size:16px}
+#bPagar{height:auto;min-height:54px;padding:8px 14px;line-height:1.25;border-radius:var(--raio2);background:var(--laranja);color:var(--preto);border:0;font-family:"Inter",sans-serif;font-weight:800;font-size:17.5px}
 #bPagar:hover:not(:disabled){background:#FFB53D}
 #bPagar:disabled{background:#EDEDED;color:#8A8D92}
 #bMais{height:46px;border-radius:var(--raio2);font-family:"Inter",sans-serif;font-weight:600}
 .checkout{max-width:760px;margin:20px auto 0}
-.checkout #checkoutStatus:not(:empty){padding:16px 18px;border-radius:var(--raio);background:var(--verde-fundo);border:1px solid #BFE6CE;color:#14532D;font-size:15px}
-#checkoutActions{display:flex;flex-wrap:wrap;gap:10px;margin-top:12px}
-#checkoutActions button{height:48px!important;padding:0 20px!important;margin:0!important;border-radius:var(--raio2);border:0;background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:15px}
-#checkoutActions input{height:44px;border-radius:var(--raio2);border:1px solid #D6D6D6;padding:0 12px}
+.checkout #checkoutStatus:not(:empty){padding:16px 18px;border-radius:var(--raio);background:var(--verde-fundo);border:1px solid #BFE6CE;color:#14532D;font-size:16.5px}
+#checkoutActions{margin-top:12px}
+/* Only our own fields: Mercado Pago's card form (its instalment radios) keeps its own styles. */
+#checkoutActions .pixBox input{height:44px;border-radius:var(--raio2);border:1px solid #D6D6D6;padding:0 12px}
+/* The payment pages: paying on the left, the order summary on the right */
+html:is([data-rota="pagamento"],[data-rota="pix"]) .checkout{max-width:1040px;margin-top:8px}
+html:is([data-rota="pagamento"],[data-rota="pix"]) .pagGrid{display:grid;grid-template-columns:minmax(0,1fr) 340px;gap:32px;align-items:start}
+.ic{width:21px;height:21px;flex:none;fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round;vertical-align:middle}
+.acts a .ic{width:23px;height:23px}
+.cartIc{position:relative;display:inline-flex}
+.acts #cartLink{gap:11px}
+.cartN{position:absolute;top:-7px;right:-9px;min-width:17px;height:17px;padding:0 4px;border-radius:9px;background:var(--laranja);color:var(--preto);font-size:13px;font-weight:800;line-height:17px;text-align:center}
+.cartN[hidden]{display:none}
+.zona .ico .ic{width:23px;height:23px}
+.art2 .giros .gr{display:inline-flex;align-items:center;justify-content:center}
+.art2 .giros .gr .ic{width:22px;height:22px}
+.rep .l1 button{display:inline-flex;align-items:center;justify-content:center}
+.rep .l1 button .ic{width:20px;height:20px}
+#ampliaFecha .ic{width:23px;height:23px}
+@media (max-width:600px){.acts .actTx{display:none}.acts{gap:16px}}
+.cAdd,#bPagar,#pOk,#qOk{display:flex;align-items:center;justify-content:center;gap:8px}
+#pOk{display:inline-flex}
+.cAdd .ic,#bPagar .ic{width:22px;height:22px}
+.item .x{display:inline-flex;align-items:center;gap:6px}
+.item .x .ic{width:18px;height:18px}
+.opE b .ic{width:19px;height:19px;margin:-2px 6px 0 0;color:var(--laranja-escuro)}
+.metodo .ic{width:23px;height:23px;color:var(--texto2)}
+.codigo .pagBtn{display:inline-flex;align-items:center;gap:7px}
+.codigo .pagBtn .ic{width:20px;height:20px}
+.pixBox .prazo{display:flex;align-items:center;gap:8px}
+.pixBox .prazo .ic{width:23px;height:23px}
+.confirmado h4{display:flex;align-items:center;gap:8px}
+.confirmado h4 .ic{width:24px;height:24px}
+.envioArq .ic{width:19px;height:19px;margin:-2px 6px 0 0}
+.qi .c .ic{width:15px;height:15px;stroke-width:3}
+.passos a span .ic{width:17px;height:17px;stroke-width:3}
+.obr{color:#B42318;font-weight:700}
+.envioNota{display:block;margin-top:4px;font-size:14px;color:var(--fraco)}
+.envioArq{font-size:15px;color:var(--texto2);margin-top:14px;line-height:1.5}
+.envioArq.ok{color:var(--verde)}
+.envioArq.erro{color:#B42318}
+.envioDeNovo{margin-left:4px;padding:0;border:0;background:none;color:inherit;font:inherit;font-weight:700;text-decoration:underline;cursor:pointer}
+.envioBarra{height:6px;border-radius:999px;background:#EDEDED;overflow:hidden;margin-bottom:6px}
+.envioBarra i{display:block;height:100%;background:var(--laranja);border-radius:999px;transition:width .4s}
+.cartEnvio{font-size:15px;font-weight:700;color:var(--laranja-escuro);margin-left:6px}
+.cartEnvio:empty{display:none}
+.envioArq:empty{display:none}
+.pagCab{display:flex;align-items:baseline;justify-content:space-between;gap:16px;margin-bottom:20px}
+.pagCab h3{font-size:26px;font-weight:800;letter-spacing:-.02em}
+.pagVolta{font-size:16px;color:var(--texto2)}
+#checkoutActions > h4,#checkoutActions .pixBox > h4{font-size:18px;font-weight:800;margin-bottom:12px}
+.pagNota{font-size:16px;color:var(--texto2);margin:4px 0 16px;line-height:1.5}
+.pagResumo{position:sticky;top:var(--topo-passos,128px);border:1px solid var(--linha);border-radius:16px;background:#fff;padding:20px 22px}
+.pagResumo h4{font-size:18px;font-weight:800;margin-bottom:10px}
+.pagResumo .l{display:flex;justify-content:space-between;gap:12px;font-size:16px;padding:5px 0}
+.pagResumo .l span{color:var(--texto2)}
+.pagResumo .tot{display:flex;justify-content:space-between;align-items:baseline;border-top:1px solid #EFEFEF;margin-top:10px;padding-top:12px}
+.pagResumo .tot b{font-family:"Inter",sans-serif;font-weight:900;font-size:24px}
+.metodos{display:grid;grid-template-columns:1fr;gap:10px;max-width:420px;margin-bottom:20px}
+.metodo{height:56px;display:flex;align-items:center;gap:12px;padding:0 16px;border:2px solid var(--linha);border-radius:var(--raio2);background:#fff;color:var(--preto);font-family:"Inter",sans-serif;font-weight:700;font-size:16.5px;text-align:left;cursor:pointer}
+.metodo::before{content:"";width:18px;height:18px;flex-shrink:0;border-radius:50%;border:2px solid #B5B8BD;box-sizing:border-box}
+.metodo[aria-checked="true"]{border-color:var(--laranja);background:var(--aviso-fundo)}
+.metodo[aria-checked="true"]::before{border:6px solid var(--laranja)}
+.pagBtn{height:48px;padding:0 24px;margin:0 10px 0 0;border-radius:var(--raio2);border:0;background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:16.5px;cursor:pointer}
+.pagBtn:hover:not(:disabled){background:#FFB53D}
+.pagBtn:disabled{background:#EDEDED;color:#8A8D92;cursor:default}
+.pagBtn.sec{background:#fff;border:1px solid #D6D6D6}
+.desafio{display:block;width:100%;max-width:520px;height:560px;border:1px solid var(--linha);border-radius:12px;background:#fff}
+.pixBox{display:flex;flex-direction:column;align-items:flex-start;gap:12px}
+.pixBox img{border:1px solid var(--linha);border-radius:12px;padding:8px;background:#fff}
+.pixBox .codigo{display:flex;gap:10px;width:100%}
+.pixBox .codigo input{flex:1;min-width:0;font-size:15px}
+.pixBox .aguarda{font-size:16px;color:var(--texto2)}
+.pixBox .prazo{font-family:"Inter",sans-serif;font-weight:800;font-size:19px;font-variant-numeric:tabular-nums}
+.confirmado{border:1px solid #BFE6CE;background:var(--verde-fundo);border-radius:16px;padding:24px}
+.confirmado h4{font-size:22px;color:#14532D;margin-bottom:8px}
+.confirmado p{font-size:16.5px;color:#14532D;margin-bottom:18px;line-height:1.5}
+@media(max-width:820px){
+  html:is([data-rota="pagamento"],[data-rota="pix"]) .pagGrid{grid-template-columns:1fr;gap:20px}
+  .pagResumo{position:static;order:-1}
+  .metodos{grid-template-columns:1fr}
+}
 
 /* Price and benefits */
 .info2{background:var(--cinza);padding:64px 0}
 .info2-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:56px;align-items:start}
 .info2-preco{display:flex;flex-direction:column;gap:16px}
 .info2 h2{font-size:clamp(26px,3vw,34px);font-weight:800;letter-spacing:-.02em}
-.info2-preco>p{font-size:15px;color:var(--texto2)}
-.info2 table{border-collapse:collapse;background:#fff;border:1px solid var(--linha);border-radius:12px;overflow:hidden;font-size:15px}
-.info2 th{text-align:left;background:var(--preto);color:#fff;font-family:"Inter",sans-serif;font-size:13px;padding:12px 18px}
+.info2-preco>p{font-size:16.5px;color:var(--texto2)}
+.info2 table{border-collapse:collapse;background:#fff;border:1px solid var(--linha);border-radius:12px;overflow:hidden;font-size:16.5px}
+.info2 th{text-align:left;background:var(--preto);color:#fff;font-family:"Inter",sans-serif;font-size:15px;padding:12px 18px}
 .info2 td{padding:11px 18px;border-top:1px solid #EFEFEF}
 .info2 td.melhor{font-weight:700;color:var(--verde)}
-.info2 .nota2{font-size:13px;color:#707070}
+.info2 .nota2{font-size:15px;color:#707070}
 .info2-vant{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:16px}
 .info2-vant>div{padding:22px;border-radius:var(--raio);background:#fff;border:1px solid var(--linha);display:flex;flex-direction:column;gap:6px}
-.info2-vant b{font-family:"Inter",sans-serif;font-size:16px}
+.info2-vant b{font-family:"Inter",sans-serif;font-size:17.5px}
 .info2-vant b.n{font-size:32px;font-weight:900;color:var(--laranja2)}
-.info2-vant span{font-size:14px;color:var(--fraco)}
+.info2-vant span{font-size:16px;color:var(--fraco)}
 
 /* Phone total bar */
 .barraM{display:none}
 @media (max-width:820px){
   .barraM:not([hidden]){display:flex;position:fixed;left:0;right:0;bottom:0;z-index:40;align-items:center;gap:12px;padding:12px 16px calc(12px + env(safe-area-inset-bottom));background:#fff;border-top:1px solid var(--linha);box-shadow:0 -6px 20px rgba(3,6,11,.08)}
   .barraM div{display:flex;flex-direction:column}
-  .barraM span{font-size:12px;color:#707070}
+  .barraM span{font-size:14.5px;color:#707070}
   .barraM b{font-family:"Inter",sans-serif;font-size:21px;font-weight:900}
-  .barraM a{margin-left:auto;height:50px;padding:0 22px;border-radius:var(--raio2);background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:16px;display:flex;align-items:center;text-decoration:none}
+  .barraM a{margin-left:auto;height:50px;padding:0 22px;border-radius:var(--raio2);background:var(--laranja);color:var(--preto);font-family:"Inter",sans-serif;font-weight:800;font-size:17.5px;display:flex;align-items:center;text-decoration:none}
   .w{padding:0 16px}
   .hero2{padding:40px 0}
   .hero2-grid,.info2-grid{grid-template-columns:1fr;gap:28px}
@@ -261,7 +450,7 @@ section+section{border-top:0}
   .ec-go{margin-left:0;width:100%;justify-content:center}
   .focoGrid{grid-template-columns:1fr}
   .mont,.resumo{position:static}
-  .passos{gap:8px;font-size:12.5px;margin:0 0 16px;padding:10px 16px}
+  .passos{gap:8px;font-size:15px;margin:0 0 16px;padding:10px 16px}
   .passos i{width:14px}
   .passos a{flex-direction:column;gap:4px;text-align:center}
   .info2-vant{grid-template-columns:1fr}
@@ -270,3 +459,35 @@ section+section{border-top:0}
 @media (max-width:480px){
   .etapas2 .w{grid-template-columns:1fr}
 }
+
+/* Skeleton placeholders where the page really waits */
+.skel{position:relative;border-radius:8px;background:linear-gradient(90deg,#EEEFF1 25%,#F7F7F8 37%,#EEEFF1 63%);background-size:400% 100%;animation:skel 1.4s ease infinite}
+@keyframes skel{0%{background-position:100% 50%}100%{background-position:0 50%}}
+@media (prefers-reduced-motion:reduce){.skel{animation:none}}
+.folhaSkel{display:flex;align-items:center;justify-content:center;max-height:520px;min-height:180px;width:100%}
+.folhaSkel span{font-size:15px;color:var(--fraco);background:#fffc;padding:4px 10px;border-radius:999px}
+#vArea .folhaPilha{display:flex;flex-direction:column;gap:4px;max-height:520px;overflow:auto;background:#fff}
+#vArea .folhaPilha img{width:100%;height:auto;display:block}
+.folhaMais{font-size:14.5px;color:var(--texto2);text-align:center;padding:8px}
+.skelLinha{height:14px;margin:8px 0}
+.skelLinha.curta{width:40%}
+.skelBloco{height:160px;margin-top:8px}
+
+/* Artes avulsas: the file card of a finished sheet, plus width, rotation and sizes */
+.rep.nova{box-shadow:0 0 0 2px rgba(255,168,26,.45)}
+.novaT{margin-left:8px;padding:2px 7px;border-radius:999px;background:#FFF1DB;color:#8A4B00;font-size:13.5px;font-style:normal;font-weight:800;text-transform:uppercase;letter-spacing:.04em}
+.repMed .pede{font-size:17.5px;color:var(--texto2)}
+.art2 .giros{display:inline-flex;gap:6px}
+.art2 .giros .gr{width:44px;height:44px;border:1px solid #D6D6D6;border-radius:10px;background:#fff;font-size:17.5px;cursor:pointer}
+.art2 .giros .gr.on{border-color:var(--laranja);background:var(--aviso-fundo)}
+.art2 .atalhos{flex-basis:100%;display:flex;flex-wrap:wrap;gap:8px;margin:0}
+.art2 .atalhos .tm{height:34px;padding:0 12px;border:1px solid #D6D6D6;border-radius:8px;background:#fff;font-size:15px;font-weight:600;cursor:pointer}
+.art2 .atalhos .tm.on{border-color:var(--verde);background:var(--verde-fundo);color:var(--verde)}
+.art2 .dica{margin-top:4px}
+.rep .l1 .novaT{margin-right:auto}
+
+/* On a computer the Site is drawn at 80%: the sizes above were chosen looking
+   at it that way, and at 100% everything felt too big. Phones and tablets
+   keep their own sizes. The zoom scales viewport units too, so the page's
+   full height is 125vh there (site-shell.css keeps the footer at the bottom). */
+@media (min-width:1100px){html{zoom:.8}body{min-height:125vh}}

web/upload.js

@@ -1,5 +1,5 @@
 /* Shared direct multipart transport for customer originals/corrections and operator finals. */
-window.dtfUpload = async (file, {api, prefix='/uploads', startPath=prefix, progress=()=>{}, scope='guest', resume=true}) => {
+window.dtfUpload = async (file, {api, prefix='/uploads', startPath=prefix, progress=()=>{}, onBytes=()=>{}, scope='guest', resume=true}) => {
   const samples=new Blob([file.slice(0,65536),file.slice(Math.max(0,file.size-65536))]);
   const hash=Array.from(new Uint8Array(await crypto.subtle.digest('SHA-256',await samples.arrayBuffer())),b=>b.toString(16).padStart(2,'0')).join('');
   const key='dtf-upload:'+JSON.stringify([scope,file.name,file.size,file.lastModified,hash]);
@@ -7,7 +7,11 @@ window.dtfUpload = async (file, {api, prefix='/uploads', startPath=prefix, progr
   if(id){try{state=await api(prefix+'/'+id);}catch(error){if(![404,410].includes(error.status))throw error;id=null;}}
   if(!id){state=await api(startPath,{name:file.name,size:file.size});id=state.id;if(resume)localStorage.setItem(key,id);}
   async function waitForScan(){
-    for(let attempt=0;attempt<150;attempt++){
+    onBytes(file.size);
+    // The antivirus streams the whole file: about a second per 2 MB, and at
+    // least two and a half minutes.
+    const attempts=Math.max(150,Math.ceil(file.size/2e6));
+    for(let attempt=0;attempt<attempts;attempt++){
       const checked=await api(prefix+'/'+id);
       if(checked.scan_state==='clean')return id;
       if(['rejected','error'].includes(checked.scan_state))throw new Error(checked.scan_reason||'Arquivo bloqueado pela verificação de segurança.');
@@ -18,12 +22,15 @@ window.dtfUpload = async (file, {api, prefix='/uploads', startPath=prefix, progr
   }
   if(state.complete)return waitForScan();
   const done=new Set(state.parts||[]),size=state.part_bytes;
+  onBytes(Math.min(file.size,done.size*size));
   for(let offset=0,part=1;offset<file.size;offset+=size,part++){
     if(done.has(part))continue;
     progress('Enviando '+file.name+' · parte '+part+'/'+Math.ceil(file.size/size));
     const signed=await api(prefix+'/'+id+'/parts/'+part,{});
     const response=await fetch(signed.url,{method:'PUT',body:file.slice(offset,offset+size)});
     if(!response.ok)throw new Error('Upload interrompido. Tente novamente para retomar.');
+    done.add(part);
+    onBytes(Math.min(file.size,done.size*size));
   }
   await api(prefix+'/'+id+'/complete',{});
   return waitForScan();