feat: adicionar painel de máquinas e autenticação por agente

src/app/api/machines/register/route.ts

@@ -0,0 +1,94 @@
+import { NextResponse } from "next/server"
+import { z } from "zod"
+import { ConvexHttpClient } from "convex/browser"
+
+import { api } from "@/convex/_generated/api"
+import type { Id } from "@/convex/_generated/dataModel"
+import { env } from "@/lib/env"
+import { DEFAULT_TENANT_ID } from "@/lib/constants"
+import { ensureMachineAccount } from "@/server/machines-auth"
+
+const registerSchema = z
+  .object({
+    provisioningSecret: z.string().min(1),
+    tenantId: z.string().optional(),
+    companySlug: z.string().optional(),
+    hostname: z.string().min(1),
+    os: z.object({
+      name: z.string().min(1),
+      version: z.string().optional(),
+      architecture: z.string().optional(),
+    }),
+    macAddresses: z.array(z.string()).default([]),
+    serialNumbers: z.array(z.string()).default([]),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+    registeredBy: z.string().optional(),
+  })
+  .refine(
+    (data) => (data.macAddresses && data.macAddresses.length > 0) || (data.serialNumbers && data.serialNumbers.length > 0),
+    { message: "Informe ao menos um MAC address ou número de série" }
+  )
+
+export async function POST(request: Request) {
+  if (request.method !== "POST") {
+    return NextResponse.json({ error: "Método não permitido" }, { status: 405 })
+  }
+
+  const convexUrl = env.NEXT_PUBLIC_CONVEX_URL
+  if (!convexUrl) {
+    return NextResponse.json({ error: "Convex não configurado" }, { status: 500 })
+  }
+
+  let payload
+  try {
+    const raw = await request.json()
+    payload = registerSchema.parse(raw)
+  } catch (error) {
+    return NextResponse.json({ error: "Payload inválido", details: error instanceof Error ? error.message : String(error) }, { status: 400 })
+  }
+
+  const client = new ConvexHttpClient(convexUrl)
+
+  try {
+    const registration = await client.mutation(api.machines.register, {
+      provisioningSecret: payload.provisioningSecret,
+      tenantId: payload.tenantId ?? DEFAULT_TENANT_ID,
+      companySlug: payload.companySlug ?? undefined,
+      hostname: payload.hostname,
+      os: payload.os,
+      macAddresses: payload.macAddresses,
+      serialNumbers: payload.serialNumbers,
+      metadata: payload.metadata,
+      registeredBy: payload.registeredBy,
+    })
+
+    const account = await ensureMachineAccount({
+      machineId: registration.machineId,
+      tenantId: registration.tenantId ?? DEFAULT_TENANT_ID,
+      hostname: payload.hostname,
+      machineToken: registration.machineToken,
+    })
+
+    await client.mutation(api.machines.linkAuthAccount, {
+      machineId: registration.machineId as Id<"machines">,
+      authUserId: account.authUserId,
+      authEmail: account.authEmail,
+    })
+
+    return NextResponse.json(
+      {
+        machineId: registration.machineId,
+        tenantId: registration.tenantId,
+        companyId: registration.companyId,
+        companySlug: registration.companySlug,
+        machineToken: registration.machineToken,
+        machineEmail: account.authEmail,
+        expiresAt: registration.expiresAt,
+      },
+      { status: 201 }
+    )
+  } catch (error) {
+    console.error("[machines.register] Falha no provisionamento", error)
+    return NextResponse.json({ error: "Falha ao provisionar máquina" }, { status: 500 })
+  }
+}