fix(qa-sprint4-p0): segurança, validações críticas e UX de erro

src/components/auth/LegalFooter.tsx

@@ -1,4 +1,5 @@
-import { Link } from 'react-router-dom';
+// LegalFooter usa <a> nativo para abrir os links legais em nova aba,
+// preservando o estado do formulário de login. Não usar <Link> aqui.
 import { cn } from '@/lib/utils';
 
 interface LegalFooterProps {
@@ -14,6 +15,7 @@ interface LegalFooterProps {
  * - Responsivo: tipografia e espaçamento se adaptam em telas pequenas.
  * - Contraste melhorado em relação à versão anterior (text-muted-foreground/80).
  * - Inclui links clicáveis para Termos de Uso e Política de Privacidade.
+ * - Links abrem em nova aba (target="_blank") para não interromper o login.
  */
 export function LegalFooter({ className, withDivider = true }: LegalFooterProps) {
   const year = new Date().getFullYear();
@@ -37,21 +39,25 @@ export function LegalFooter({ className, withDivider = true }: LegalFooterProps)
         className="flex flex-wrap items-center justify-center gap-x-3 gap-y-1 text-[9px] opacity-90 sm:text-[10px]"
         aria-label="Links legais"
       >
-        <Link
-          to="/termos"
+        <a
+          href="/termos"
+          target="_blank"
+          rel="noopener noreferrer"
           className="rounded font-medium text-white/60 transition-colors hover:text-white hover:underline focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary focus-visible:ring-offset-2 focus-visible:ring-offset-[#030508]"
         >
           Termos de Uso
-        </Link>
+        </a>
         <span aria-hidden="true" className="text-white/20">
           •
         </span>
-        <Link
-          to="/privacidade"
+        <a
+          href="/privacidade"
+          target="_blank"
+          rel="noopener noreferrer"
           className="rounded font-medium text-white/60 transition-colors hover:text-white hover:underline focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary focus-visible:ring-offset-2 focus-visible:ring-offset-[#030508]"
         >
           Política de Privacidade
-        </Link>
+        </a>
       </nav>
 
       <p className="text-center text-[9px] font-medium text-white/40 opacity-90 sm:text-[10px]">

src/components/quotes/QuoteKanbanBoard.tsx

@@ -102,9 +102,11 @@ const columns: Column[] = [
 interface QuoteCardProps {
   quote: Quote;
   isDragging?: boolean;
+  /** Quando true, o card pulsa indicando que uma mutação está em andamento. */
+  isSaving?: boolean;
 }
 
-function QuoteCard({ quote, isDragging }: QuoteCardProps) {
+function QuoteCard({ quote, isDragging, isSaving }: QuoteCardProps) {
   const navigate = useNavigate();
 
   const formatCurrency = (value: number) => {
@@ -120,6 +122,7 @@ function QuoteCard({ quote, isDragging }: QuoteCardProps) {
         'cursor-grab transition-all duration-200 active:cursor-grabbing',
         'border-border/50 bg-card hover:bg-accent/50',
         isDragging && 'opacity-50 shadow-lg ring-2 ring-primary',
+        isSaving && 'opacity-70 ring-2 ring-primary/50 animate-pulse cursor-wait',
         quote.status === 'pending_approval' && 'border-amber-500/40 ring-1 ring-amber-500/10',
       )}
     >
@@ -175,13 +178,14 @@ function QuoteCard({ quote, isDragging }: QuoteCardProps) {
 
 interface SortableQuoteCardProps {
   quote: Quote;
+  isSaving?: boolean;
 }
 
 function getSortableQuoteId(quote: Quote) {
   return quote.id ?? `quote-${quote.quote_number}`;
 }
 
-function SortableQuoteCard({ quote }: SortableQuoteCardProps) {
+function SortableQuoteCard({ quote, isSaving }: SortableQuoteCardProps) {
   const sortableId = getSortableQuoteId(quote);
   const { attributes, listeners, setNodeRef, transform, transition, isDragging } = useSortable({
     id: sortableId,
@@ -194,7 +198,7 @@ function SortableQuoteCard({ quote }: SortableQuoteCardProps) {
 
   return (
     <div ref={setNodeRef} style={style} {...attributes} {...listeners}>
-      <QuoteCard quote={quote} isDragging={isDragging} />
+      <QuoteCard quote={quote} isDragging={isDragging} isSaving={isSaving} />
     </div>
   );
 }
@@ -203,9 +207,11 @@ interface KanbanColumnProps {
   column: Column;
   quotes: Quote[];
   totalValue: number;
+  /** Set de IDs dos cards em processo de salvamento (mostra pulse). */
+  savingIds: Set<string>;
 }
 
-function KanbanColumn({ column, quotes, totalValue }: KanbanColumnProps) {
+function KanbanColumn({ column, quotes, totalValue, savingIds }: KanbanColumnProps) {
   const Icon = column.icon;
   const sortableQuoteIds = quotes.map(getSortableQuoteId);
 
@@ -239,7 +245,11 @@ function KanbanColumn({ column, quotes, totalValue }: KanbanColumnProps) {
         <SortableContext items={sortableQuoteIds} strategy={verticalListSortingStrategy}>
           <div className="space-y-2 p-1">
             {quotes.map((quote) => (
-              <SortableQuoteCard key={getSortableQuoteId(quote)} quote={quote} />
+              <SortableQuoteCard
+                key={getSortableQuoteId(quote)}
+                quote={quote}
+                isSaving={savingIds.has(quote.id ?? '')}
+              />
             ))}
             {quotes.length === 0 && (
               <div className="rounded-lg border border-dashed border-border/50 py-8 text-center text-sm text-muted-foreground">
@@ -260,6 +270,8 @@ interface QuoteKanbanBoardProps {
 export function QuoteKanbanBoard({ quotes }: QuoteKanbanBoardProps) {
   const { updateQuoteStatus } = useQuotes();
   const [activeQuote, setActiveQuote] = useState<Quote | null>(null);
+  /** IDs dos cards que estão sendo salvos — exibe animate-pulse enquanto a mutação está pendente. */
+  const [savingIds, setSavingIds] = useState<Set<string>>(new Set());
 
   const sensors = useSensors(
     useSensor(PointerSensor, {
@@ -362,20 +374,43 @@ export function QuoteKanbanBoard({ quotes }: QuoteKanbanBoardProps) {
       }
 
       if (!activeQuote.id) return;
-      const success = await updateQuoteStatus(activeQuote.id, targetStatus);
-      if (success) {
-        toast.success('Status atualizado!', {
-          description: `Orçamento movido para "${columns.find((c) => c.id === targetStatus)?.title}"`,
-        });
-        // 🎉 Celebration when quote is approved
-        if (targetStatus === 'approved') {
-          confetti({
-            particleCount: 80,
-            spread: 60,
-            origin: { y: 0.7 },
-            colors: ['hsl(25, 100%, 50%)', 'hsl(142, 71%, 45%)', 'hsl(217, 91%, 60%)'],
+
+      // Marca o card como "salvando" para feedback visual imediato (animate-pulse)
+      const cardId = activeQuote.id;
+      setSavingIds((prev) => new Set([...prev, cardId]));
+
+      try {
+        const success = await updateQuoteStatus(cardId, targetStatus);
+        if (success) {
+          toast.success('Status atualizado!', {
+            description: `Orçamento movido para "${columns.find((c) => c.id === targetStatus)?.title}"`,
+          });
+          // 🎉 Celebration when quote is approved
+          if (targetStatus === 'approved') {
+            confetti({
+              particleCount: 80,
+              spread: 60,
+              origin: { y: 0.7 },
+              colors: ['hsl(25, 100%, 50%)', 'hsl(142, 71%, 45%)', 'hsl(217, 91%, 60%)'],
+            });
+          }
+        } else {
+          // Falha silenciosa do updateQuoteStatus — mostra rollback visual
+          toast.error('Erro ao atualizar status', {
+            description: 'O card foi revertido para a posição original. Tente novamente.',
           });
         }
+      } catch {
+        toast.error('Falha ao salvar', {
+          description: 'Verifique sua conexão e tente novamente.',
+        });
+      } finally {
+        // Remove o indicador de salvamento independente do resultado
+        setSavingIds((prev) => {
+          const next = new Set(prev);
+          next.delete(cardId);
+          return next;
+        });
       }
     }
   };
@@ -395,6 +430,7 @@ export function QuoteKanbanBoard({ quotes }: QuoteKanbanBoardProps) {
             column={column}
             quotes={quotesByStatus[column.id]}
             totalValue={totalsByStatus[column.id]}
+            savingIds={savingIds}
           />
         ))}
       </div>

src/hooks/common/index.ts

@@ -1,4 +1,3 @@
-// Exporting all hooks from common
 export * from '@/hooks/common/useAppBootstrap';
 export * from '@/hooks/common/useBulkSelection';
 export * from '@/hooks/common/useConsecutiveFailures';
@@ -8,6 +7,8 @@ export * from '@/hooks/common/useDebouncedFilters';
 export * from '@/hooks/common/useEntitySelectionMode';
 export * from '@/hooks/common/useGenericFuzzySearch';
 export * from '@/hooks/common/useInfiniteScroll';
+export * from '@/hooks/common/useNetworkStatus';
+export * from '@/hooks/common/useOfflineGuard';
 export * from '@/hooks/common/useOrgData';
 export * from '@/hooks/common/useSearch';
 export * from '@/hooks/common/useSearchHistory';

src/hooks/common/useNetworkStatus.ts

@@ -0,0 +1,28 @@
+/**
+ * useNetworkStatus — monitora o estado da conexão de rede.
+ *
+ * Retorna { isOnline, isOffline } com atualização reativa
+ * baseada nos eventos window.online / window.offline.
+ */
+import { useState, useEffect } from 'react';
+
+export function useNetworkStatus() {
+  const [isOnline, setIsOnline] = useState(
+    typeof navigator !== 'undefined' ? navigator.onLine : true,
+  );
+
+  useEffect(() => {
+    const handleOnline = () => setIsOnline(true);
+    const handleOffline = () => setIsOnline(false);
+
+    window.addEventListener('online', handleOnline);
+    window.addEventListener('offline', handleOffline);
+
+    return () => {
+      window.removeEventListener('online', handleOnline);
+      window.removeEventListener('offline', handleOffline);
+    };
+  }, []);
+
+  return { isOnline, isOffline: !isOnline };
+}

src/hooks/common/useOfflineGuard.ts

@@ -0,0 +1,53 @@
+/**
+ * useOfflineGuard — hook para proteger operações de escrita quando offline.
+ *
+ * Uso:
+ *   const { isOffline, guardedMutate } = useOfflineGuard();
+ *
+ *   // Em vez de chamar mutate() diretamente:
+ *   guardedMutate(() => mutate(payload));
+ *
+ * Também expõe `isOffline` para desabilitar botões de submit:
+ *   <Button disabled={isOffline || isLoading}>Salvar</Button>
+ */
+import { useState, useEffect, useCallback } from 'react';
+import { toast } from 'sonner';
+
+export function useOfflineGuard() {
+  const [isOnline, setIsOnline] = useState(
+    typeof navigator !== 'undefined' ? navigator.onLine : true,
+  );
+
+  useEffect(() => {
+    const handleOnline = () => setIsOnline(true);
+    const handleOffline = () => setIsOnline(false);
+    window.addEventListener('online', handleOnline);
+    window.addEventListener('offline', handleOffline);
+    return () => {
+      window.removeEventListener('online', handleOnline);
+      window.removeEventListener('offline', handleOffline);
+    };
+  }, []);
+
+  const isOffline = !isOnline;
+
+  /**
+   * Executa `fn` somente se online.
+   * Se offline, exibe toast explicativo e retorna false.
+   */
+  const guardedMutate = useCallback(
+    <T>(fn: () => T | Promise<T>): T | Promise<T> | false => {
+      if (isOffline) {
+        toast.error('Sem conexão com a internet', {
+          description: 'Verifique sua conexão Wi-Fi ou dados móveis e tente novamente.',
+          duration: 5000,
+        });
+        return false;
+      }
+      return fn();
+    },
+    [isOffline],
+  );
+
+  return { isOnline, isOffline, guardedMutate };
+}

src/lib/query-config.ts

@@ -100,6 +100,26 @@ const PREFIX_STALE_MAP: Record<string, number> = {
   // REALTIME — near real-time signals
   'connection-status': CACHE_TIMES.REALTIME,
   'bridge-health': CACHE_TIMES.REALTIME,
+
+  // BI / INTELLIGENCE — dashboards analíticos (5min = DYNAMIC para dados operacionais)
+  // Evita refetch completo a cada navegação para a página de BI.
+  'market-intelligence': CACHE_TIMES.DYNAMIC,
+  'bi-kpis': CACHE_TIMES.DYNAMIC,
+  'commercial-intelligence': CACHE_TIMES.DYNAMIC,
+  'intelligence-kpis': CACHE_TIMES.DYNAMIC,
+  'intelligence-chart': CACHE_TIMES.DYNAMIC,
+  'trending-products': CACHE_TIMES.DYNAMIC,
+  'category-ranking': CACHE_TIMES.DYNAMIC,
+  'supplier-sales': CACHE_TIMES.DYNAMIC,
+  'sales-overview': CACHE_TIMES.DYNAMIC,
+  'unmet-demand': CACHE_TIMES.DYNAMIC,
+  'hot-searches': CACHE_TIMES.DYNAMIC,
+  'conversion-funnel': CACHE_TIMES.DYNAMIC,
+  'trends-heatmap': CACHE_TIMES.DYNAMIC,
+  'trends-forecast': CACHE_TIMES.DYNAMIC,
+  'trends-insights': CACHE_TIMES.DYNAMIC,
+  'top-categories': CACHE_TIMES.DYNAMIC,
+  'mockup-history': CACHE_TIMES.DYNAMIC,
 };
 
 const PREFIX_GC_MAP: Record<string, number> = {
@@ -178,6 +198,19 @@ export const STABLE_DATA_QUERY_OPTIONS = {
   refetchOnMount: false,
 } as const;
 
+
+
+// ─────────────────────────────────────────────────────────────────────────────
+// BI / Intelligence query options — dashboards analíticos
+// Cache de 5 min evita refetch completo a cada navegação para páginas de BI.
+// ─────────────────────────────────────────────────────────────────────────────
+export const BI_QUERY_OPTIONS = {
+  staleTime: CACHE_TIMES.DYNAMIC,
+  gcTime: GC_TIMES.DEFAULT,
+  refetchOnWindowFocus: false,
+  refetchOnMount: false,
+} as const;
+
 // ─────────────────────────────────────────────────────────────────────────────
 // Default query options
 // ─────────────────────────────────────────────────────────────────────────────

src/pages/auth/Auth.tsx

@@ -85,6 +85,11 @@ export default function Auth() {
   const [blockedIP, setBlockedIP] = useState<string | null>(null);
   const [currentIP, setCurrentIP] = useState<string | null>(null);
   const [geoLocation, setGeoLocation] = useState<string | null>(null);
+
+  /** Segundos restantes para rate limit. 0 = sem bloqueio. */
+  const [rateLimitCountdown, setRateLimitCountdown] = useState(0);
+  const rateLimitTimerRef = useRef<ReturnType<typeof setInterval> | null>(null);
+
   // Fallback social → email/senha: mensagem amigável quando OAuth falha.
   const [socialError, setSocialError] = useState<OAuthErrorCopy | null>(null);
 
@@ -256,7 +261,23 @@ export default function Auth() {
           title = 'Acesso Temporariamente Suspenso';
           description =
             'Detectamos muitas tentativas seguidas. Por segurança, sua conta foi bloqueada por alguns minutos.';
-          hint = 'Tome um café e tente novamente em instantes.';
+          // Extrai o tempo de espera da mensagem do Supabase (ex: "after 47 seconds")
+          const secondsMatch = error.message.match(/after (\d+) seconds?/i);
+          const waitSeconds = secondsMatch ? parseInt(secondsMatch[1], 10) : 60;
+          hint = `Aguarde ${waitSeconds} segundos antes de tentar novamente.`;
+
+          // Iniciar countdown visual
+          if (rateLimitTimerRef.current) clearInterval(rateLimitTimerRef.current);
+          setRateLimitCountdown(waitSeconds);
+          rateLimitTimerRef.current = setInterval(() => {
+            setRateLimitCountdown((prev) => {
+              if (prev <= 1) {
+                if (rateLimitTimerRef.current) clearInterval(rateLimitTimerRef.current);
+                return 0;
+              }
+              return prev - 1;
+            });
+          }, 1000);
         } else if (
           error.status === 0 ||
           error.message.includes('network') ||
@@ -746,13 +767,18 @@ export default function Auth() {
                       className={authButtonClass(
                         'h-12 w-full rounded-xl border border-white/10 bg-blue-600 text-base text-white shadow-lg shadow-blue-500/25 hover:bg-blue-700 hover:shadow-xl hover:shadow-blue-500/40 active:scale-[0.98]',
                       )}
-                      disabled={isSubmitting}
+                      disabled={isSubmitting || rateLimitCountdown > 0}
                     >
                       {isSubmitting ? (
                         <>
                           <Loader2 className="mr-2 h-4 w-4 animate-spin" />
                           Iniciando Sistemas...
                         </>
+                      ) : rateLimitCountdown > 0 ? (
+                        <>
+                          <Loader2 className="mr-2 h-4 w-4 animate-spin" />
+                          Aguarde {rateLimitCountdown}s...
+                        </>
                       ) : (
                         'Entrar na Plataforma'
                       )}