auth: guarda server-side em rotas protegidas

- /tickets/[id], /tickets/resolved, /views, /play, /reports/*, /settings agora exigem sessão via requireAuthenticatedSession()
- Complementa o middleware e evita casos não-redirecionados em DEV/SSG
- Mantém /settings/templates com requireStaffSession() como já estava.

src/app/play/page.tsx

@@ -2,8 +2,10 @@ import { AppShell } from "@/components/app-shell"
 import { SiteHeader } from "@/components/site-header"
 import { PlayNextTicketCard } from "@/components/tickets/play-next-ticket-card"
 import { TicketQueueSummaryCards } from "@/components/tickets/ticket-queue-summary"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
-export default function PlayPage() {
+export default async function PlayPage() {
+  await requireAuthenticatedSession()
   return (
     <AppShell
       header={

src/app/reports/backlog/page.tsx

@@ -1,10 +1,12 @@
 import { AppShell } from "@/components/app-shell"
 import { BacklogReport } from "@/components/reports/backlog-report"
 import { SiteHeader } from "@/components/site-header"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
 export const dynamic = "force-dynamic"
 
-export default function ReportsBacklogPage() {
+export default async function ReportsBacklogPage() {
+  await requireAuthenticatedSession()
   return (
     <AppShell
       header={

src/app/reports/csat/page.tsx

@@ -1,10 +1,12 @@
 import { AppShell } from "@/components/app-shell"
 import { CsatReport } from "@/components/reports/csat-report"
 import { SiteHeader } from "@/components/site-header"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
 export const dynamic = "force-dynamic"
 
-export default function ReportsCsatPage() {
+export default async function ReportsCsatPage() {
+  await requireAuthenticatedSession()
   return (
     <AppShell
       header={

src/app/reports/hours/page.tsx

@@ -1,10 +1,12 @@
 import { AppShell } from "@/components/app-shell"
 import { SiteHeader } from "@/components/site-header"
 import { HoursReport } from "@/components/reports/hours-report"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
 export const dynamic = "force-dynamic"
 
-export default function ReportsHoursPage() {
+export default async function ReportsHoursPage() {
+  await requireAuthenticatedSession()
   return (
     <AppShell
       header={
@@ -20,4 +22,3 @@ export default function ReportsHoursPage() {
     </AppShell>
   )
 }
-

src/app/reports/sla/page.tsx

@@ -1,10 +1,12 @@
 import { AppShell } from "@/components/app-shell"
 import { SlaReport } from "@/components/reports/sla-report"
 import { SiteHeader } from "@/components/site-header"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
 export const dynamic = "force-dynamic"
 
-export default function ReportsSlaPage() {
+export default async function ReportsSlaPage() {
+  await requireAuthenticatedSession()
   return (
     <AppShell
       header={

src/app/settings/page.tsx

@@ -1,8 +1,10 @@
 import { AppShell } from "@/components/app-shell"
 import { SettingsContent } from "@/components/settings/settings-content"
 import { SiteHeader } from "@/components/site-header"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
-export default function SettingsPage() {
+export default async function SettingsPage() {
+  await requireAuthenticatedSession()
   return (
     <AppShell
       header={<SiteHeader title="Configurações" lead="Central de preferências e governança do workspace" />}

src/app/tickets/[id]/page.tsx

@@ -5,12 +5,14 @@ import { TicketDetailStatic } from "@/components/tickets/ticket-detail-static"
 import { NewTicketDialogDeferred } from "@/components/tickets/new-ticket-dialog.client"
 import { getTicketById } from "@/lib/mocks/tickets"
 import type { TicketWithDetails } from "@/lib/schemas/ticket"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
 type TicketDetailPageProps = {
   params: Promise<{ id: string }>
 }
 
 export default async function TicketDetailPage({ params }: TicketDetailPageProps) {
+  await requireAuthenticatedSession()
   const { id } = await params
   const isMock = id.startsWith("ticket-")
   const mock = isMock ? getTicketById(id) : null

src/app/tickets/resolved/page.tsx

@@ -1,5 +1,7 @@
 import { TicketsResolvedPageClient } from "./tickets-resolved-page-client"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
-export default function TicketsResolvedPage() {
+export default async function TicketsResolvedPage() {
+  await requireAuthenticatedSession()
   return <TicketsResolvedPageClient />
 }

src/app/views/page.tsx

@@ -2,10 +2,12 @@ import { AppShell } from "@/components/app-shell"
 import { SiteHeader } from "@/components/site-header"
 import { ChartAreaInteractive } from "@/components/chart-area-interactive"
 import { ViewsCharts } from "@/components/charts/views-charts"
+import { requireAuthenticatedSession } from "@/lib/auth-server"
 
 export const dynamic = "force-dynamic"
 
-export default function ViewsPage() {
+export default async function ViewsPage() {
+  await requireAuthenticatedSession()
   return (
     <AppShell
       header={<SiteHeader title="Visualizações" lead="Relatórios visuais e insights" />}
@@ -19,4 +21,3 @@ export default function ViewsPage() {
     </AppShell>
   )
 }
-