fix(build): corrigir erros de tipo introduzidos pelo TypeScript 6.0

- Adiciona src/global.d.ts com declare module '*.css' para suportar side-effect imports de CSS com moduleResolution bundler - Adiciona ignoreDeprecations "6.0" no tsconfig para silenciar aviso de depreciação do baseUrl (será removido no TS 7) - Corrige cast de .message em better-auth 1.5.6, cujo tipo passou a ser string | RawError em chamadas de passkey Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
chore(release): publicar versão 2.1.0
2026-05-09 11:01:45 +00:00 · 2026-03-28 15:21:56 +00:00 · 2026-03-28 15:13:47 +00:00 · 2026-03-28 15:13:44 +00:00 · 2026-03-28 15:13:39 +00:00 · 2026-03-28 15:13:30 +00:00
37 changed files with 5820 additions and 341 deletions
--- a/.env.example
+++ b/.env.example
@@ -22,6 +22,13 @@ BETTER_AUTH_URL=http://localhost:3000
 APP_PORT=3000
 DB_PORT=5432

+# === S3 Server (Opcional) ===
+S3_ENDPOINT=
+S3_REGION=
+S3_ACCESS_KEY_ID=
+S3_SECRET_ACCESS_KEY=
+S3_BUCKET=
+
 # === Email (Opcional) ===
 # Provider: Resend (https://resend.com)
 RESEND_API_KEY=
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -0,0 +1,59 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Read version from package.json
+        id: version
+        run: |
+          VERSION=$(jq -r '.version' package.json)
+          echo "value=$VERSION" >> $GITHUB_OUTPUT
+          echo "tag=v$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Check if tag already exists
+        id: tag_check
+        run: |
+          if git ls-remote --tags origin "refs/tags/v${{ steps.version.outputs.value }}" | grep -q .; then
+            echo "exists=true" >> $GITHUB_OUTPUT
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Extract changelog for this version
+        if: steps.tag_check.outputs.exists == 'false'
+        id: changelog
+        run: |
+          VERSION="${{ steps.version.outputs.value }}"
+          # Extrai o bloco entre ## [X.Y.Z] e o próximo ## [
+          NOTES=$(awk "/^## \[$VERSION\]/{found=1; next} found && /^## \[/{exit} found{print}" CHANGELOG.md)
+          # Remove linhas em branco do início e fim
+          NOTES=$(echo "$NOTES" | sed '/./,$!d' | sed -e :a -e '/^\n*$/{$d;N;ba}')
+          {
+            echo "notes<<EOF"
+            echo "$NOTES"
+            echo "EOF"
+          } >> $GITHUB_OUTPUT
+
+      - name: Create tag and GitHub Release
+        if: steps.tag_check.outputs.exists == 'false'
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.version.outputs.tag }}
+          name: ${{ steps.version.outputs.tag }}
+          body: ${{ steps.changelog.outputs.notes }}
+          draft: false
+          prerelease: false
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,21 @@ e este projeto adere ao [Versionamento Semântico](https://semver.org/lang/pt-BR

 ## [Unreleased]

+## [2.1.0] - 2026-03-28
+
+### Adicionado
+
+- Lançamentos: suporte a anexos em transações com upload direto para storage compatível com S3, persistência em tabelas dedicadas (`anexos` e `lancamento_anexos`) e ações de visualizar/remover no detalhe do lançamento
+- Infraestrutura: novo workflow `.github/workflows/release.yml` para criar tag e GitHub Release automaticamente a partir da versão do `package.json` e da entrada correspondente no `CHANGELOG.md`
+
+### Alterado
+
+- Anexos: upload agora exige token assinado por arquivo, valida propriedade da transação também na leitura/remoção e confere tamanho/tipo do objeto no storage antes de persistir o vínculo no banco
+
+### Corrigido
+
+- Lançamentos: criação de transações no cartão de crédito agora bloqueia períodos cujas faturas já estão pagas, evitando divergência no relatório de análise de parcelas
+
 ## [2.0.3] - 2026-03-26

 ### Corrigido
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -18,6 +18,7 @@
 5. **Revalidation**: usar `revalidateForEntity("entity")` de `src/shared/lib/actions/helpers.ts` apos mutations.
 6. **Versionamento**: registrar mudancas no `CHANGELOG.md` seguindo Keep a Changelog.
 7. **Comunicacao**: responder em portugues clara e direta com o time.
+8. **Commit messages**: agrupar por natureza. em pt-br. seguindo o padrao do sistema.

 ---

--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@

 > **⚠️ Não há versão online hospedada.** Você precisa clonar o repositório e rodar localmente ou no seu próprio servidor.

-[![Version](https://img.shields.io/badge/version-2.0.0-blue?style=flat-square)](CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-2.1.0-blue?style=flat-square)](CHANGELOG.md)
 [![Next.js](https://img.shields.io/badge/Next.js-black?style=flat-square&logo=next.js)](https://nextjs.org/)
 [![TypeScript](https://img.shields.io/badge/TypeScript-blue?style=flat-square&logo=typescript)](https://www.typescriptlang.org/)
 [![PostgreSQL](https://img.shields.io/badge/PostgreSQL-blue?style=flat-square&logo=postgresql)](https://www.postgresql.org/)
@@ -32,6 +32,7 @@
 - [Início Rápido (manual)](#-início-rápido)
 - [Scripts Disponíveis](#-scripts-disponíveis)
 - [Docker](#-docker)
+- [Storage S3 Compatível](#-storage-s3-compatível)
 - [Variáveis de Ambiente](#-variáveis-de-ambiente)
 - [Arquitetura](#-arquitetura)
 - [Contribuindo](#-contribuindo)
@@ -238,6 +239,30 @@ DB_PORT=5433    # Padrão: 5432

 ---

+## ☁️ Storage S3 Compatível
+
+O suporte a anexos de lançamentos usa upload direto com URL pré-assinada. Essa configuração é opcional, mas passa a ser necessária se você quiser habilitar anexos no app.
+
+### Variáveis
+
+```env
+S3_ENDPOINT=
+S3_REGION=
+S3_ACCESS_KEY_ID=
+S3_SECRET_ACCESS_KEY=
+S3_BUCKET=
+```
+
+### Compatibilidade
+
+- O código atual espera um provider com API compatível com S3 e suporte a `PutObject`, `GetObject`, `HeadObject`, `DeleteObject` e URLs pré-assinadas.
+- A implementação usa `endpoint` customizado e `forcePathStyle: true` em [`src/shared/lib/storage/s3-client.ts`](/home/ubuntu/github/openmonetis/src/shared/lib/storage/s3-client.ts).
+- Em geral isso cobre MinIO, Cloudflare R2, Backblaze B2 S3-Compatible, DigitalOcean Spaces e AWS S3. Mas foi testado apenas no Supabase Storage.
+- Se o seu provider exigir `virtual-hosted-style` em vez de `path-style`, você vai precisar ajustar essa configuração antes de usar anexos.
+- Se as variáveis de S3 não forem configuradas, mantenha os anexos desabilitados no seu fluxo de uso.
+
+---
+
 ## 🔐 Variáveis de Ambiente

 Copie `.env.example` para `.env` e configure:
@@ -258,6 +283,13 @@ POSTGRES_USER=openmonetis
 POSTGRES_PASSWORD=openmonetis_dev_password
 POSTGRES_DB=openmonetis_db

+# S3 Server (opcional, necessario para anexos)
+S3_ENDPOINT=
+S3_REGION=
+S3_ACCESS_KEY_ID=
+S3_SECRET_ACCESS_KEY=
+S3_BUCKET=
+
 # Multi-domínio (landing-only no domínio público)
 # PUBLIC_DOMAIN=openmonetis.com

--- a/drizzle/0023_sturdy_wolfpack.sql
+++ b/drizzle/0023_sturdy_wolfpack.sql
@@ -0,0 +1,37 @@
+CREATE TABLE "anexos" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" text NOT NULL,
+	"chave_arquivo" text NOT NULL,
+	"nome_arquivo" text NOT NULL,
+	"tamanho_bytes" integer NOT NULL,
+	"mime_type" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "anexos_chave_arquivo_unique" UNIQUE("chave_arquivo")
+);
+--> statement-breakpoint
+CREATE TABLE "dashboard_notification_states" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" text NOT NULL,
+	"notification_key" text NOT NULL,
+	"fingerprint" text NOT NULL,
+	"read_at" timestamp with time zone,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "lancamento_anexos" (
+	"lancamento_id" uuid NOT NULL,
+	"anexo_id" uuid NOT NULL,
+	CONSTRAINT "lancamento_anexos_lancamento_id_anexo_id_pk" PRIMARY KEY("lancamento_id","anexo_id")
+);
+--> statement-breakpoint
+ALTER TABLE "anexos" ADD CONSTRAINT "anexos_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "dashboard_notification_states" ADD CONSTRAINT "dashboard_notification_states_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "lancamento_anexos" ADD CONSTRAINT "lancamento_anexos_lancamento_id_lancamentos_id_fk" FOREIGN KEY ("lancamento_id") REFERENCES "public"."lancamentos"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "lancamento_anexos" ADD CONSTRAINT "lancamento_anexos_anexo_id_anexos_id_fk" FOREIGN KEY ("anexo_id") REFERENCES "public"."anexos"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "dashboard_notification_states_user_id_key_unique" ON "dashboard_notification_states" USING btree ("user_id","notification_key");--> statement-breakpoint
+CREATE INDEX "dashboard_notification_states_user_id_archived_idx" ON "dashboard_notification_states" USING btree ("user_id","archived_at");--> statement-breakpoint
+CREATE INDEX "lancamento_anexos_anexo_id_idx" ON "lancamento_anexos" USING btree ("anexo_id");--> statement-breakpoint
+ALTER TABLE "preferencias_usuario" DROP COLUMN "system_font";--> statement-breakpoint
+ALTER TABLE "preferencias_usuario" DROP COLUMN "money_font";
--- a/drizzle/0024_add_extrato_note_as_column.sql
+++ b/drizzle/0024_add_extrato_note_as_column.sql
--- a/drizzle/0025_add_lancamentos_column_order.sql
+++ b/drizzle/0025_add_lancamentos_column_order.sql
--- a/drizzle/0026_next_blue_blade.sql
+++ b/drizzle/0026_next_blue_blade.sql
--- a/drizzle/0027_glorious_mindworm.sql
+++ b/drizzle/0027_glorious_mindworm.sql
--- a/drizzle/meta/0023_snapshot.json
+++ b/drizzle/meta/0023_snapshot.json
--- a/drizzle/meta/_journal.json
+++ b/drizzle/meta/_journal.json
@@ -162,6 +162,13 @@
 			"when": 1748000000000,
 			"tag": "0022_import-category-mappings",
 			"breakpoints": true
+		},
+		{
+			"idx": 23,
+			"version": "7",
+			"when": 1774529878374,
+			"tag": "0023_sturdy_wolfpack",
+			"breakpoints": true
 		}
 	]
 }
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "openmonetis",
-	"version": "2.0.3",
+	"version": "2.1.0",
 	"private": true,
 	"scripts": {
 		"dev": "next dev --turbopack",
@@ -29,10 +29,12 @@
 		"backup": "bash scripts/backup.sh"
 	},
 	"dependencies": {
-		"@ai-sdk/anthropic": "^3.0.63",
-		"@ai-sdk/google": "^3.0.52",
-		"@ai-sdk/openai": "^3.0.47",
-		"@better-auth/passkey": "^1.5.5",
+		"@ai-sdk/anthropic": "^3.0.64",
+		"@ai-sdk/google": "^3.0.53",
+		"@ai-sdk/openai": "^3.0.48",
+		"@aws-sdk/client-s3": "^3.1019.0",
+		"@aws-sdk/s3-request-presigner": "^3.1019.0",
+		"@better-auth/passkey": "^1.5.6",
 		"@dnd-kit/core": "^6.3.1",
 		"@dnd-kit/sortable": "^10.0.0",
 		"@dnd-kit/utilities": "^3.2.2",
@@ -61,14 +63,14 @@
 		"@tanstack/react-virtual": "^3.13.23",
 		"@vercel/analytics": "^2.0.1",
 		"@vercel/speed-insights": "^2.0.0",
-		"ai": "^6.0.134",
-		"better-auth": "1.5.5",
+		"ai": "^6.0.141",
+		"better-auth": "1.5.6",
 		"canvas-confetti": "^1.9.4",
 		"class-variance-authority": "0.7.1",
 		"clsx": "2.1.1",
 		"cmdk": "^1.1.1",
 		"date-fns": "^4.1.0",
-		"drizzle-orm": "0.45.1",
+		"drizzle-orm": "0.45.2",
 		"jspdf": "^4.2.1",
 		"jspdf-autotable": "^5.0.7",
 		"next": "16.1.7",
@@ -78,7 +80,7 @@
 		"react": "19.2.4",
 		"react-day-picker": "^9.14.0",
 		"react-dom": "19.2.4",
-		"recharts": "3.8.0",
+		"recharts": "3.8.1",
 		"resend": "^6.9.4",
 		"sonner": "2.0.7",
 		"tailwind-merge": "3.5.0",
@@ -87,7 +89,7 @@
 		"zod": "4.3.6"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "2.4.8",
+		"@biomejs/biome": "2.4.9",
 		"@tailwindcss/postcss": "4.2.2",
 		"@types/canvas-confetti": "^1.9.0",
 		"@types/node": "25.5.0",
@@ -98,6 +100,6 @@
 		"drizzle-kit": "0.31.10",
 		"tailwindcss": "4.2.2",
 		"tsx": "4.21.0",
-		"typescript": "5.9.3"
+		"typescript": "6.0.2"
 	}
 }
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
--- a/src/db/schema.ts
+++ b/src/db/schema.ts
@@ -847,7 +847,9 @@ export const inboxItemsRelations = relations(inboxItems, ({ one }) => ({
 	}),
 }));

-export const transactionsRelations = relations(transactions, ({ one }) => ({
+export const transactionsRelations = relations(
+	transactions,
+	({ one, many }) => ({
 		user: one(user, {
 			fields: [transactions.userId],
 			references: [user.id],
@@ -872,7 +874,9 @@ export const transactionsRelations = relations(transactions, ({ one }) => ({
 			fields: [transactions.anticipationId],
 			references: [installmentAnticipations.id],
 		}),
-}));
+		transactionAttachments: many(transactionAttachments),
+	}),
+);

 export const installmentAnticipationsRelations = relations(
 	installmentAnticipations,
@@ -896,6 +900,40 @@ export const installmentAnticipationsRelations = relations(
 	}),
 );

+// ===================== ATTACHMENTS =====================
+
+export const attachments = pgTable("anexos", {
+	id: uuid("id").primaryKey().default(sql`gen_random_uuid()`),
+	userId: text("user_id")
+		.notNull()
+		.references(() => user.id, { onDelete: "cascade" }),
+	fileKey: text("chave_arquivo").notNull().unique(),
+	fileName: text("nome_arquivo").notNull(),
+	fileSize: integer("tamanho_bytes").notNull(),
+	mimeType: text("mime_type").notNull(),
+	createdAt: timestamp("created_at", { mode: "date", withTimezone: true })
+		.notNull()
+		.defaultNow(),
+});
+
+export const transactionAttachments = pgTable(
+	"lancamento_anexos",
+	{
+		transactionId: uuid("lancamento_id")
+			.notNull()
+			.references(() => transactions.id, { onDelete: "cascade" }),
+		attachmentId: uuid("anexo_id")
+			.notNull()
+			.references(() => attachments.id, { onDelete: "cascade" }),
+	},
+	(table) => ({
+		pk: primaryKey({ columns: [table.transactionId, table.attachmentId] }),
+		attachmentIdIdx: index("lancamento_anexos_anexo_id_idx").on(
+			table.attachmentId,
+		),
+	}),
+);
+
 export const importCategoryMappings = pgTable(
 	"import_category_mappings",
 	{
@@ -939,3 +977,28 @@ export type NewApiToken = typeof apiTokens.$inferInsert;
 export type InboxItem = typeof inboxItems.$inferSelect;
 export type NewInboxItem = typeof inboxItems.$inferInsert;
 export type ImportCategoryMapping = typeof importCategoryMappings.$inferSelect;
+
+export const attachmentsRelations = relations(attachments, ({ one, many }) => ({
+	user: one(user, {
+		fields: [attachments.userId],
+		references: [user.id],
+	}),
+	transactionAttachments: many(transactionAttachments),
+}));
+
+export const transactionAttachmentsRelations = relations(
+	transactionAttachments,
+	({ one }) => ({
+		transaction: one(transactions, {
+			fields: [transactionAttachments.transactionId],
+			references: [transactions.id],
+		}),
+		attachment: one(attachments, {
+			fields: [transactionAttachments.attachmentId],
+			references: [attachments.id],
+		}),
+	}),
+);
+
+export type Attachment = typeof attachments.$inferSelect;
+export type TransactionAttachment = typeof transactionAttachments.$inferSelect;
--- a/src/features/auth/components/login-form.tsx
+++ b/src/features/auth/components/login-form.tsx
@@ -125,7 +125,7 @@ export function LoginForm({ className, ...props }: DivProps) {
 		});

 		if (passkeyError) {
-			setError(passkeyError.message || "Erro ao entrar com passkey.");
+			setError((passkeyError.message as string) || "Erro ao entrar com passkey.");
 			setLoadingPasskey(false);
 		}
 	}
--- a/src/features/settings/components/passkeys-form.tsx
+++ b/src/features/settings/components/passkeys-form.tsx
@@ -73,7 +73,7 @@ export function PasskeysForm() {
 				const { data, error: fetchError } =
 					await authClient.passkey.listUserPasskeys();
 				if (fetchError) {
-					setError(fetchError.message || "Erro ao carregar passkeys.");
+					setError((fetchError.message as string) || "Erro ao carregar passkeys.");
 					return;
 				}
 				setPasskeys(
@@ -111,7 +111,7 @@ export function PasskeysForm() {
 				name: addName.trim() || undefined,
 			});
 			if (addError) {
-				setError(addError.message || "Erro ao registrar passkey.");
+				setError((addError.message as string) || "Erro ao registrar passkey.");
 				return;
 			}
 			setAddName("");
@@ -134,7 +134,7 @@ export function PasskeysForm() {
 				name: editName.trim(),
 			});
 			if (renameError) {
-				setError(renameError.message || "Erro ao renomear passkey.");
+				setError((renameError.message as string) || "Erro ao renomear passkey.");
 				return;
 			}
 			setEditingId(null);
@@ -156,7 +156,7 @@ export function PasskeysForm() {
 				id: deleteId,
 			});
 			if (deleteError) {
-				setError(deleteError.message || "Erro ao remover passkey.");
+				setError((deleteError.message as string) || "Erro ao remover passkey.");
 				return;
 			}
 			setDeleteId(null);
--- a/src/features/transactions/actions/attachments.ts
+++ b/src/features/transactions/actions/attachments.ts
@@ -0,0 +1,435 @@
+"use server";
+
+import crypto, { randomUUID } from "node:crypto";
+import { and, count, eq, inArray } from "drizzle-orm";
+import { z } from "zod/v4";
+import { attachments, transactionAttachments, transactions } from "@/db/schema";
+import {
+	ALLOWED_MIME_TYPES,
+	MAX_FILE_SIZE,
+} from "@/features/transactions/attachments-config";
+import {
+	handleActionError,
+	revalidateForEntity,
+} from "@/shared/lib/actions/helpers";
+import { getUser } from "@/shared/lib/auth/server";
+import { db } from "@/shared/lib/db";
+import {
+	createPresignedGetUrl,
+	createPresignedPutUrl,
+	deleteS3Object,
+	headS3Object,
+} from "@/shared/lib/storage/presign";
+import type { ActionResult } from "@/shared/lib/types/actions";
+
+const UPLOAD_TOKEN_EXPIRY_SECONDS = 10 * 60;
+
+const presignSchema = z.object({
+	fileName: z.string().min(1),
+	mimeType: z.enum(ALLOWED_MIME_TYPES),
+	fileSize: z.number().max(MAX_FILE_SIZE, "Arquivo deve ter no máximo 50MB."),
+	transactionId: z.string().uuid(),
+});
+
+const confirmSchema = z.object({
+	uploadToken: z.string().min(1),
+	applyToSeries: z.boolean().default(false),
+});
+
+const detachSchema = z.object({
+	attachmentId: z.string().uuid(),
+	transactionId: z.string().uuid(),
+});
+
+type PresignResult =
+	| {
+			success: true;
+			presignedUrl: string;
+			fileKey: string;
+			uploadToken: string;
+	  }
+	| { success: false; error: string };
+
+type UploadTokenPayload = {
+	userId: string;
+	transactionId: string;
+	fileKey: string;
+	fileName: string;
+	mimeType: (typeof ALLOWED_MIME_TYPES)[number];
+	fileSize: number;
+	exp: number;
+};
+
+function getUploadTokenSecret(): string {
+	const secret = process.env.BETTER_AUTH_SECRET;
+	if (!secret) {
+		throw new Error(
+			"BETTER_AUTH_SECRET is required. Set it in your .env file.",
+		);
+	}
+	return secret;
+}
+
+function base64UrlEncode(value: string): string {
+	return Buffer.from(value)
+		.toString("base64")
+		.replace(/\+/g, "-")
+		.replace(/\//g, "_")
+		.replace(/=/g, "");
+}
+
+function base64UrlDecode(value: string): string {
+	const normalized = value.replace(/-/g, "+").replace(/_/g, "/");
+	const pad = normalized.length % 4;
+	const padded = pad ? normalized + "=".repeat(4 - pad) : normalized;
+	return Buffer.from(padded, "base64").toString("utf8");
+}
+
+function signUploadToken(payload: UploadTokenPayload): string {
+	const encodedPayload = base64UrlEncode(JSON.stringify(payload));
+	const signature = crypto
+		.createHmac("sha256", getUploadTokenSecret())
+		.update(encodedPayload)
+		.digest("base64")
+		.replace(/\+/g, "-")
+		.replace(/\//g, "_")
+		.replace(/=/g, "");
+
+	return `${encodedPayload}.${signature}`;
+}
+
+function verifyUploadToken(token: string): UploadTokenPayload | null {
+	try {
+		const [encodedPayload, signature] = token.split(".");
+		if (!encodedPayload || !signature) return null;
+
+		const expectedSignature = crypto
+			.createHmac("sha256", getUploadTokenSecret())
+			.update(encodedPayload)
+			.digest("base64")
+			.replace(/\+/g, "-")
+			.replace(/\//g, "_")
+			.replace(/=/g, "");
+
+		if (
+			!crypto.timingSafeEqual(
+				Buffer.from(signature),
+				Buffer.from(expectedSignature),
+			)
+		) {
+			return null;
+		}
+
+		const payload = JSON.parse(
+			base64UrlDecode(encodedPayload),
+		) as UploadTokenPayload;
+		const now = Math.floor(Date.now() / 1000);
+
+		if (payload.exp < now) return null;
+		if (!payload.fileKey.startsWith(`${payload.userId}/`)) return null;
+		if (!ALLOWED_MIME_TYPES.includes(payload.mimeType)) return null;
+		if (payload.fileSize <= 0 || payload.fileSize > MAX_FILE_SIZE) return null;
+
+		return payload;
+	} catch {
+		return null;
+	}
+}
+
+export async function getPresignedUploadUrlAction(input: {
+	fileName: string;
+	mimeType: string;
+	fileSize: number;
+	transactionId: string;
+}): Promise<PresignResult> {
+	try {
+		const user = await getUser();
+		const data = presignSchema.parse(input);
+
+		const [transaction] = await db
+			.select({ id: transactions.id })
+			.from(transactions)
+			.where(
+				and(
+					eq(transactions.id, data.transactionId),
+					eq(transactions.userId, user.id),
+				),
+			);
+
+		if (!transaction) {
+			return { success: false, error: "Lançamento não encontrado." };
+		}
+
+		const ext = data.fileName.split(".").pop()?.toLowerCase() ?? "bin";
+		const fileKey = `${user.id}/${randomUUID()}.${ext}`;
+		const presignedUrl = await createPresignedPutUrl(fileKey, data.mimeType);
+		const uploadToken = signUploadToken({
+			userId: user.id,
+			transactionId: data.transactionId,
+			fileKey,
+			fileName: data.fileName,
+			mimeType: data.mimeType,
+			fileSize: data.fileSize,
+			exp: Math.floor(Date.now() / 1000) + UPLOAD_TOKEN_EXPIRY_SECONDS,
+		});
+
+		return { success: true, presignedUrl, fileKey, uploadToken };
+	} catch (error) {
+		const result = handleActionError(error);
+		if (!result.success) return { success: false, error: result.error };
+		return { success: false, error: "Erro inesperado." };
+	}
+}
+
+export async function confirmAttachmentUploadAction(input: {
+	uploadToken: string;
+	applyToSeries?: boolean;
+}): Promise<ActionResult> {
+	try {
+		const user = await getUser();
+		const data = confirmSchema.parse(input);
+		const uploadPayload = verifyUploadToken(data.uploadToken);
+
+		if (!uploadPayload || uploadPayload.userId !== user.id) {
+			return { success: false, error: "Upload de anexo inválido ou expirado." };
+		}
+
+		const [transaction] = await db
+			.select({ id: transactions.id, seriesId: transactions.seriesId })
+			.from(transactions)
+			.where(
+				and(
+					eq(transactions.id, uploadPayload.transactionId),
+					eq(transactions.userId, user.id),
+				),
+			);
+
+		if (!transaction) {
+			return { success: false, error: "Lançamento não encontrado." };
+		}
+
+		const objectMetadata = await headS3Object(uploadPayload.fileKey);
+
+		if (!objectMetadata.contentLength || objectMetadata.contentLength <= 0) {
+			return { success: false, error: "Arquivo enviado não encontrado." };
+		}
+
+		if (objectMetadata.contentLength > MAX_FILE_SIZE) {
+			return {
+				success: false,
+				error: "O arquivo enviado excede o limite permitido de 50MB.",
+			};
+		}
+
+		if (objectMetadata.contentLength !== uploadPayload.fileSize) {
+			return {
+				success: false,
+				error:
+					"O tamanho do arquivo enviado não confere com o upload autorizado.",
+			};
+		}
+
+		if (objectMetadata.contentType !== uploadPayload.mimeType) {
+			return {
+				success: false,
+				error: "O tipo do arquivo enviado não confere com o upload autorizado.",
+			};
+		}
+
+		const [attachment] = await db
+			.insert(attachments)
+			.values({
+				userId: user.id,
+				fileKey: uploadPayload.fileKey,
+				fileName: uploadPayload.fileName,
+				fileSize: uploadPayload.fileSize,
+				mimeType: uploadPayload.mimeType,
+			})
+			.returning({ id: attachments.id });
+
+		if (!attachment) {
+			return { success: false, error: "Erro ao salvar o anexo." };
+		}
+
+		let transactionIds: string[] = [uploadPayload.transactionId];
+
+		if (data.applyToSeries && transaction.seriesId) {
+			const seriesRows = await db
+				.select({ id: transactions.id })
+				.from(transactions)
+				.where(
+					and(
+						eq(transactions.seriesId, transaction.seriesId),
+						eq(transactions.userId, user.id),
+					),
+				);
+			transactionIds = seriesRows.map((t) => t.id);
+		}
+
+		await db.insert(transactionAttachments).values(
+			transactionIds.map((tid) => ({
+				transactionId: tid,
+				attachmentId: attachment.id,
+			})),
+		);
+
+		revalidateForEntity("transactions", user.id);
+
+		return { success: true, message: "Anexo salvo com sucesso." };
+	} catch (error) {
+		return handleActionError(error);
+	}
+}
+
+export async function detachTransactionAttachmentAction(input: {
+	attachmentId: string;
+	transactionId: string;
+}): Promise<ActionResult> {
+	try {
+		const user = await getUser();
+		const data = detachSchema.parse(input);
+
+		const [transaction] = await db
+			.select({ id: transactions.id })
+			.from(transactions)
+			.where(
+				and(
+					eq(transactions.id, data.transactionId),
+					eq(transactions.userId, user.id),
+				),
+			);
+
+		if (!transaction) {
+			return { success: false, error: "Lançamento não encontrado." };
+		}
+
+		const [attachment] = await db
+			.select({ id: attachments.id, fileKey: attachments.fileKey })
+			.from(attachments)
+			.where(
+				and(
+					eq(attachments.id, data.attachmentId),
+					eq(attachments.userId, user.id),
+				),
+			);
+
+		if (!attachment) {
+			return { success: false, error: "Anexo não encontrado." };
+		}
+
+		await db
+			.delete(transactionAttachments)
+			.where(
+				and(
+					eq(transactionAttachments.transactionId, data.transactionId),
+					eq(transactionAttachments.attachmentId, data.attachmentId),
+				),
+			);
+
+		const [remaining] = await db
+			.select({ total: count() })
+			.from(transactionAttachments)
+			.where(eq(transactionAttachments.attachmentId, data.attachmentId));
+
+		if (!remaining || remaining.total === 0) {
+			await deleteS3Object(attachment.fileKey);
+			await db.delete(attachments).where(eq(attachments.id, data.attachmentId));
+		}
+
+		revalidateForEntity("transactions", user.id);
+
+		return { success: true, message: "Anexo removido com sucesso." };
+	} catch (error) {
+		return handleActionError(error);
+	}
+}
+
+export async function fetchTransactionAttachmentsAction(
+	transactionId: string,
+): Promise<
+	Array<{
+		attachmentId: string;
+		fileName: string;
+		fileSize: number;
+		mimeType: string;
+		createdAt: Date;
+		url: string;
+	}>
+> {
+	const user = await getUser();
+
+	const [transaction] = await db
+		.select({ id: transactions.id })
+		.from(transactions)
+		.where(
+			and(eq(transactions.id, transactionId), eq(transactions.userId, user.id)),
+		);
+
+	if (!transaction) {
+		return [];
+	}
+
+	const rows = await db
+		.select({
+			attachmentId: transactionAttachments.attachmentId,
+			fileName: attachments.fileName,
+			fileSize: attachments.fileSize,
+			mimeType: attachments.mimeType,
+			fileKey: attachments.fileKey,
+			createdAt: attachments.createdAt,
+		})
+		.from(transactionAttachments)
+		.innerJoin(
+			transactions,
+			and(
+				eq(transactionAttachments.transactionId, transactions.id),
+				eq(transactions.userId, user.id),
+			),
+		)
+		.innerJoin(
+			attachments,
+			and(
+				eq(transactionAttachments.attachmentId, attachments.id),
+				eq(attachments.userId, user.id),
+			),
+		)
+		.where(eq(transactionAttachments.transactionId, transactionId));
+
+	return Promise.all(
+		rows.map(async (row) => ({
+			attachmentId: row.attachmentId,
+			fileName: row.fileName,
+			fileSize: row.fileSize,
+			mimeType: row.mimeType,
+			createdAt: row.createdAt,
+			url: await createPresignedGetUrl(row.fileKey),
+		})),
+	);
+}
+
+/** Limpa anexos órfãos do S3 após deletar transações. Chame APÓS o delete. */
+export async function cleanupAttachmentsAfterTransactionDelete(
+	attachmentData: Array<{ id: string; fileKey: string }>,
+): Promise<void> {
+	if (attachmentData.length === 0) return;
+
+	const uniqueIds = [...new Set(attachmentData.map((a) => a.id))];
+
+	const remaining = await db
+		.select({
+			attachmentId: transactionAttachments.attachmentId,
+			total: count(),
+		})
+		.from(transactionAttachments)
+		.where(inArray(transactionAttachments.attachmentId, uniqueIds))
+		.groupBy(transactionAttachments.attachmentId);
+
+	const remainingMap = new Map(remaining.map((r) => [r.attachmentId, r.total]));
+
+	for (const att of attachmentData) {
+		if (!remainingMap.has(att.id) || (remainingMap.get(att.id) ?? 0) === 0) {
+			await deleteS3Object(att.fileKey);
+			await db.delete(attachments).where(eq(attachments.id, att.id));
+		}
+	}
+}
--- a/src/features/transactions/actions/single-actions.ts
+++ b/src/features/transactions/actions/single-actions.ts
@@ -1,11 +1,18 @@
 "use server";

 import { randomUUID } from "node:crypto";
-import { and, eq } from "drizzle-orm";
-import { financialAccounts, transactions } from "@/db/schema";
+import { and, eq, inArray } from "drizzle-orm";
+import {
+	attachments,
+	financialAccounts,
+	invoices,
+	transactionAttachments,
+	transactions,
+} from "@/db/schema";
 import { handleActionError } from "@/shared/lib/actions/helpers";
 import { getUser } from "@/shared/lib/auth/server";
 import { db } from "@/shared/lib/db";
+import { INVOICE_PAYMENT_STATUS } from "@/shared/lib/invoices";
 import {
 	buildEntriesByPayer,
 	sendPayerAutoEmails,
@@ -16,6 +23,8 @@ import {
 	getBusinessTodayDate,
 	parseLocalDateString,
 } from "@/shared/utils/date";
+import { MONTH_NAMES } from "@/shared/utils/period";
+import { cleanupAttachmentsAfterTransactionDelete } from "./attachments";
 import {
 	buildLancamentoRecords,
 	buildShares,
@@ -37,7 +46,7 @@ import {

 export async function createTransactionAction(
 	input: CreateInput,
-): Promise<ActionResult> {
+): Promise<ActionResult<{ ids: string[] }>> {
 	try {
 		const user = await getUser();
 		const data = createSchema.parse(input);
@@ -102,7 +111,42 @@ export async function createTransactionAction(
 			throw new Error("Não foi possível criar os lançamentos solicitados.");
 		}

-		await db.insert(transactions).values(records);
+		if (data.cardId) {
+			const uniquePeriods = [
+				...new Set(
+					records.map((r) => r.period).filter((p): p is string => Boolean(p)),
+				),
+			];
+
+			const paidInvoices = await db.query.invoices.findMany({
+				columns: { period: true },
+				where: and(
+					eq(invoices.userId, user.id),
+					eq(invoices.cardId, data.cardId),
+					eq(invoices.paymentStatus, INVOICE_PAYMENT_STATUS.PAID),
+					inArray(invoices.period, uniquePeriods),
+				),
+			});
+
+			if (paidInvoices.length > 0) {
+				const labels = paidInvoices
+					.map((inv) => {
+						const [year, month] = (inv.period ?? "").split("-");
+						const monthName = MONTH_NAMES[Number(month) - 1] ?? month;
+						return `${monthName}/${year}`;
+					})
+					.join(", ");
+				return {
+					success: false,
+					error: `As faturas dos meses ${labels} já estão pagas. Desfaça o pagamento antes de adicionar este lançamento.`,
+				} as ActionResult<{ ids: string[] }>;
+			}
+		}
+
+		const inserted = await db
+			.insert(transactions)
+			.values(records)
+			.returning({ id: transactions.id });

 		const notificationEntries = buildEntriesByPayer(
 			records.map((record) => ({
@@ -128,9 +172,13 @@ export async function createTransactionAction(

 		revalidate(user.id);

-		return { success: true, message: "Lançamento criado com sucesso." };
+		return {
+			success: true,
+			message: "Lançamento criado com sucesso.",
+			data: { ids: inserted.map((r) => r.id) },
+		};
 	} catch (error) {
-		return handleActionError(error);
+		return handleActionError(error) as ActionResult<{ ids: string[] }>;
 	}
 }

@@ -329,12 +377,23 @@ export async function deleteTransactionAction(
 			};
 		}

+		const linkedAttachments = await db
+			.select({ id: attachments.id, fileKey: attachments.fileKey })
+			.from(transactionAttachments)
+			.innerJoin(
+				attachments,
+				eq(transactionAttachments.attachmentId, attachments.id),
+			)
+			.where(eq(transactionAttachments.transactionId, data.id));
+
 		await db
 			.delete(transactions)
 			.where(
 				and(eq(transactions.id, data.id), eq(transactions.userId, user.id)),
 			);

+		await cleanupAttachmentsAfterTransactionDelete(linkedAttachments);
+
 		if (existing.payerId) {
 			const notificationEntries = buildEntriesByPayer([
 				{
--- a/src/features/transactions/attachments-config.ts
+++ b/src/features/transactions/attachments-config.ts
@@ -0,0 +1,8 @@
+export const ALLOWED_MIME_TYPES = [
+	"application/pdf",
+	"image/jpeg",
+	"image/png",
+	"image/webp",
+] as const;
+
+export const MAX_FILE_SIZE = 50 * 1024 * 1024; // 50MB
--- a/src/features/transactions/components/attachments/attachment-file-picker.tsx
+++ b/src/features/transactions/components/attachments/attachment-file-picker.tsx
@@ -0,0 +1,92 @@
+"use client";
+
+import { RiAttachment2, RiCloseLine } from "@remixicon/react";
+import { useRef } from "react";
+import { toast } from "sonner";
+import {
+	ALLOWED_MIME_TYPES,
+	MAX_FILE_SIZE,
+} from "@/features/transactions/attachments-config";
+import { Button } from "@/shared/components/ui/button";
+
+interface AttachmentFilePickerProps {
+	file: File | null;
+	onChange: (file: File | null) => void;
+}
+
+export function AttachmentFilePicker({
+	file,
+	onChange,
+}: AttachmentFilePickerProps) {
+	const inputRef = useRef<HTMLInputElement>(null);
+
+	function handleFileChange(e: React.ChangeEvent<HTMLInputElement>) {
+		const selected = e.target.files?.[0];
+		if (inputRef.current) inputRef.current.value = "";
+
+		if (!selected) return;
+
+		if (
+			!ALLOWED_MIME_TYPES.includes(
+				selected.type as (typeof ALLOWED_MIME_TYPES)[number],
+			)
+		) {
+			toast.error(
+				"Tipo de arquivo não suportado. Use PDF ou imagem (JPEG, PNG, WebP).",
+			);
+			return;
+		}
+
+		if (selected.size > MAX_FILE_SIZE) {
+			toast.error("O arquivo deve ter no máximo 50MB.");
+			return;
+		}
+
+		onChange(selected);
+	}
+
+	return (
+		<div className="space-y-1.5">
+			<p className="text-xs">Anexo</p>
+			<input
+				ref={inputRef}
+				type="file"
+				className="hidden"
+				accept={ALLOWED_MIME_TYPES.join(",")}
+				onChange={handleFileChange}
+			/>
+
+			{file ? (
+				<div className="flex min-w-0 items-center gap-2 overflow-hidden rounded-md border px-3 py-2 text-sm">
+					<RiAttachment2 className="size-4 shrink-0 text-muted-foreground" />
+					<span className="min-w-0 flex-1 truncate" title={file.name}>
+						{file.name}
+					</span>
+					<Button
+						type="button"
+						variant="ghost"
+						size="icon"
+						className="size-6 shrink-0"
+						onClick={() => onChange(null)}
+					>
+						<RiCloseLine className="size-4" />
+					</Button>
+				</div>
+			) : (
+				<button
+					type="button"
+					className="flex w-full cursor-pointer flex-col items-center justify-center gap-1 rounded-md border border-dashed py-4 text-sm text-muted-foreground transition-colors hover:border-foreground/40 hover:text-foreground"
+					onClick={() => inputRef.current?.click()}
+				>
+					<span className="flex items-center gap-2">
+						<RiAttachment2 className="size-4" />
+						Adicionar anexo
+					</span>
+					<span className="text-[11px]">
+						PDF, JPEG, PNG ou WebP · máx. 50 MB
+					</span>
+				</button>
+			)}
+		</div>
+	);
+}
--- a/src/features/transactions/components/attachments/attachment-item.tsx
+++ b/src/features/transactions/components/attachments/attachment-item.tsx
@@ -0,0 +1,253 @@
+"use client";
+
+import {
+	RiDeleteBinLine,
+	RiDownloadLine,
+	RiExternalLinkLine,
+	RiFileImageLine,
+	RiFileLine,
+	RiFilePdfLine,
+} from "@remixicon/react";
+import { useState, useTransition } from "react";
+import { toast } from "sonner";
+import { detachTransactionAttachmentAction } from "@/features/transactions/actions/attachments";
+import { Button } from "@/shared/components/ui/button";
+import {
+	Dialog,
+	DialogClose,
+	DialogContent,
+	DialogDescription,
+	DialogFooter,
+	DialogHeader,
+	DialogTitle,
+} from "@/shared/components/ui/dialog";
+
+function formatBytes(bytes: number): string {
+	if (bytes < 1024) return `${bytes} B`;
+	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+	return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+
+function AttachmentIcon({ mimeType }: { mimeType: string }) {
+	if (mimeType === "application/pdf")
+		return <RiFilePdfLine className="size-4 text-red-500 shrink-0" />;
+	if (mimeType.startsWith("image/"))
+		return <RiFileImageLine className="size-4 text-blue-500 shrink-0" />;
+	return <RiFileLine className="size-4 text-muted-foreground shrink-0" />;
+}
+
+function AttachmentPreview({
+	open,
+	onOpenChange,
+	fileName,
+	mimeType,
+	url,
+}: {
+	open: boolean;
+	onOpenChange: (open: boolean) => void;
+	fileName: string;
+	mimeType: string;
+	url: string;
+}) {
+	const isPdf = mimeType === "application/pdf";
+	const isImage = mimeType.startsWith("image/");
+
+	return (
+		<Dialog open={open} onOpenChange={onOpenChange}>
+			<DialogContent
+				showCloseButton={false}
+				className="flex h-[92vh] w-[min(96vw,1400px)] max-w-none flex-col gap-0 overflow-hidden p-0 sm:p-0"
+			>
+				<DialogHeader className="flex-row items-center justify-between gap-3 border-b px-4 py-3 sm:px-5">
+					<div className="min-w-0">
+						<DialogTitle
+							className="truncate text-sm font-medium"
+							title={fileName}
+						>
+							{fileName}
+						</DialogTitle>
+					</div>
+
+					<div className="flex shrink-0 items-center gap-1">
+						<Button type="button" variant="ghost" size="icon" asChild>
+							<a
+								href={url}
+								target="_blank"
+								rel="noreferrer"
+								download={fileName}
+							>
+								<RiDownloadLine className="size-4" />
+							</a>
+						</Button>
+						<Button type="button" variant="ghost" size="icon" asChild>
+							<a href={url} target="_blank" rel="noreferrer">
+								<RiExternalLinkLine className="size-4" />
+							</a>
+						</Button>
+						<DialogClose asChild>
+							<Button type="button" variant="ghost" size="sm">
+								Fechar
+							</Button>
+						</DialogClose>
+					</div>
+				</DialogHeader>
+
+				<div className="min-h-0 min-w-0 flex-1">
+					{isPdf && (
+						<iframe
+							src={url}
+							className="h-full w-full border-0 bg-background"
+							title={fileName}
+						/>
+					)}
+					{isImage && (
+						<div className="flex h-full w-full items-center justify-center bg-black/85 p-4 sm:p-6">
+							{/* eslint-disable-next-line @next/next/no-img-element */}
+							<img
+								src={url}
+								alt={fileName}
+								className="max-h-full max-w-full rounded-md object-contain"
+							/>
+						</div>
+					)}
+				</div>
+			</DialogContent>
+		</Dialog>
+	);
+}
+
+interface AttachmentItemProps {
+	attachmentId: string;
+	transactionId: string;
+	fileName: string;
+	fileSize: number;
+	mimeType: string;
+	url: string;
+	onDeleted: () => void;
+	readonly?: boolean;
+}
+
+export function AttachmentItem({
+	attachmentId,
+	transactionId,
+	fileName,
+	fileSize,
+	mimeType,
+	url,
+	onDeleted,
+	readonly = false,
+}: AttachmentItemProps) {
+	const [isPending, startTransition] = useTransition();
+	const [previewOpen, setPreviewOpen] = useState(false);
+	const [confirmOpen, setConfirmOpen] = useState(false);
+
+	const canPreview =
+		mimeType === "application/pdf" || mimeType.startsWith("image/");
+
+	function handleDelete() {
+		startTransition(async () => {
+			const result = await detachTransactionAttachmentAction({
+				attachmentId,
+				transactionId,
+			});
+			if (result.success) {
+				toast.success(result.message);
+				onDeleted();
+			} else {
+				toast.error(result.error);
+			}
+		});
+		setConfirmOpen(false);
+	}
+
+	return (
+		<>
+			<div className="flex min-w-0 items-center gap-2 overflow-hidden rounded-md border px-3 py-2 text-sm">
+				<AttachmentIcon mimeType={mimeType} />
+				{canPreview ? (
+					<button
+						type="button"
+						className="min-w-0 flex-1 text-left"
+						onClick={() => setPreviewOpen(true)}
+						title={fileName}
+					>
+						<p className="truncate font-medium hover:underline">{fileName}</p>
+						<p className="text-xs text-muted-foreground">
+							{formatBytes(fileSize)}
+						</p>
+					</button>
+				) : (
+					<div className="flex-1 min-w-0">
+						<p className="truncate font-medium">{fileName}</p>
+						<p className="text-xs text-muted-foreground">
+							{formatBytes(fileSize)}
+						</p>
+					</div>
+				)}
+				<Button
+					type="button"
+					variant="ghost"
+					size="icon"
+					className="size-7 shrink-0"
+					asChild
+				>
+					<a href={url} target="_blank" rel="noreferrer" download={fileName}>
+						<RiDownloadLine className="size-4" />
+					</a>
+				</Button>
+				{!readonly && (
+					<Button
+						type="button"
+						variant="ghost"
+						size="icon"
+						className="size-7 shrink-0 text-destructive hover:text-destructive"
+						onClick={() => setConfirmOpen(true)}
+						disabled={isPending}
+					>
+						<RiDeleteBinLine className="size-4" />
+					</Button>
+				)}
+			</div>
+
+			{canPreview && (
+				<AttachmentPreview
+					open={previewOpen}
+					onOpenChange={setPreviewOpen}
+					fileName={fileName}
+					mimeType={mimeType}
+					url={url}
+				/>
+			)}
+
+			<Dialog open={confirmOpen} onOpenChange={setConfirmOpen}>
+				<DialogContent className="sm:max-w-sm">
+					<DialogHeader>
+						<DialogTitle>Remover anexo</DialogTitle>
+						<DialogDescription>
+							Tem certeza que deseja remover{" "}
+							<span className="break-all font-medium text-foreground">
+								{fileName}
+							</span>
+							?
+						</DialogDescription>
+					</DialogHeader>
+					<DialogFooter>
+						<DialogClose asChild>
+							<Button type="button" variant="outline" disabled={isPending}>
+								Cancelar
+							</Button>
+						</DialogClose>
+						<Button
+							type="button"
+							variant="destructive"
+							onClick={handleDelete}
+							disabled={isPending}
+						>
+							{isPending ? "Removendo..." : "Remover"}
+						</Button>
+					</DialogFooter>
+				</DialogContent>
+			</Dialog>
+		</>
+	);
+}
--- a/src/features/transactions/components/attachments/attachment-section.tsx
+++ b/src/features/transactions/components/attachments/attachment-section.tsx
@@ -0,0 +1,87 @@
+"use client";
+
+import { useCallback, useEffect, useState } from "react";
+import { fetchTransactionAttachmentsAction } from "@/features/transactions/actions/attachments";
+import { AttachmentItem } from "./attachment-item";
+import { AttachmentUpload } from "./attachment-upload";
+
+type AttachmentRow = {
+	attachmentId: string;
+	fileName: string;
+	fileSize: number;
+	mimeType: string;
+	createdAt: Date;
+	url: string;
+};
+
+interface AttachmentSectionProps {
+	transactionId: string;
+	seriesId: string | null;
+	readonly?: boolean;
+	onLoaded?: (count: number) => void;
+}
+
+export function AttachmentSection({
+	transactionId,
+	seriesId,
+	readonly = false,
+	onLoaded,
+}: AttachmentSectionProps) {
+	const [items, setItems] = useState<AttachmentRow[]>([]);
+	const [isLoading, setIsLoading] = useState(true);
+
+	const load = useCallback(async () => {
+		setIsLoading(true);
+		try {
+			const data = await fetchTransactionAttachmentsAction(transactionId);
+			setItems(data);
+			onLoaded?.(data.length);
+		} finally {
+			setIsLoading(false);
+		}
+	}, [transactionId, onLoaded]);
+
+	useEffect(() => {
+		load();
+	}, [load]);
+
+	return (
+		<div className="min-w-0 space-y-2 overflow-hidden">
+			{isLoading ? (
+				<p className="text-xs text-muted-foreground">Carregando...</p>
+			) : (
+				<>
+					{items.length > 0 ? (
+						<div className="min-w-0 space-y-1.5">
+							{items.map((item) => (
+								<AttachmentItem
+									key={item.attachmentId}
+									attachmentId={item.attachmentId}
+									transactionId={transactionId}
+									fileName={item.fileName}
+									fileSize={item.fileSize}
+									mimeType={item.mimeType}
+									url={item.url}
+									onDeleted={load}
+									readonly={readonly}
+								/>
+							))}
+						</div>
+					) : (
+						readonly && (
+							<p className="text-xs text-muted-foreground">Nenhum anexo.</p>
+						)
+					)}
+
+					{!readonly && (
+						<AttachmentUpload
+							transactionId={transactionId}
+							seriesId={seriesId}
+							onUploaded={load}
+						/>
+					)}
+				</>
+			)}
+		</div>
+	);
+}
--- a/src/features/transactions/components/attachments/attachment-upload.tsx
+++ b/src/features/transactions/components/attachments/attachment-upload.tsx
@@ -0,0 +1,180 @@
+"use client";
+
+import { RiAttachment2 } from "@remixicon/react";
+import { useRef, useState, useTransition } from "react";
+import { toast } from "sonner";
+import {
+	confirmAttachmentUploadAction,
+	getPresignedUploadUrlAction,
+} from "@/features/transactions/actions/attachments";
+import {
+	ALLOWED_MIME_TYPES,
+	MAX_FILE_SIZE,
+} from "@/features/transactions/attachments-config";
+import { Button } from "@/shared/components/ui/button";
+import { Checkbox } from "@/shared/components/ui/checkbox";
+import { Label } from "@/shared/components/ui/label";
+
+interface AttachmentUploadProps {
+	transactionId: string;
+	seriesId: string | null;
+	onUploaded: () => void;
+}
+
+export function AttachmentUpload({
+	transactionId,
+	seriesId,
+	onUploaded,
+}: AttachmentUploadProps) {
+	const inputRef = useRef<HTMLInputElement>(null);
+	const [isPending, startTransition] = useTransition();
+	const [applyToSeries, setApplyToSeries] = useState(false);
+	const [pendingFile, setPendingFile] = useState<File | null>(null);
+
+	function handleFileChange(e: React.ChangeEvent<HTMLInputElement>) {
+		const file = e.target.files?.[0];
+		if (!inputRef.current) return;
+		inputRef.current.value = "";
+
+		if (!file) return;
+
+		if (
+			!ALLOWED_MIME_TYPES.includes(
+				file.type as (typeof ALLOWED_MIME_TYPES)[number],
+			)
+		) {
+			toast.error(
+				"Tipo de arquivo não suportado. Use PDF ou imagem (JPEG, PNG, WebP).",
+			);
+			return;
+		}
+
+		if (file.size > MAX_FILE_SIZE) {
+			toast.error("O arquivo deve ter no máximo 50MB.");
+			return;
+		}
+
+		if (seriesId) {
+			setPendingFile(file);
+		} else {
+			uploadFile(file, false);
+		}
+	}
+
+	function uploadFile(file: File, toSeries: boolean) {
+		startTransition(async () => {
+			const presignResult = await getPresignedUploadUrlAction({
+				fileName: file.name,
+				mimeType: file.type,
+				fileSize: file.size,
+				transactionId,
+			});
+
+			if (!presignResult.success) {
+				toast.error(presignResult.error ?? "Erro ao iniciar upload.");
+				return;
+			}
+
+			const uploadResponse = await fetch(presignResult.presignedUrl, {
+				method: "PUT",
+				body: file,
+				headers: { "Content-Type": file.type },
+			});
+
+			if (!uploadResponse.ok) {
+				toast.error("Erro ao enviar o arquivo. Tente novamente.");
+				return;
+			}
+
+			const confirmResult = await confirmAttachmentUploadAction({
+				uploadToken: presignResult.uploadToken,
+				applyToSeries: toSeries,
+			});
+
+			if (confirmResult.success) {
+				toast.success(confirmResult.message);
+				setPendingFile(null);
+				setApplyToSeries(false);
+				onUploaded();
+			} else {
+				toast.error(confirmResult.error);
+			}
+		});
+	}
+
+	function handleConfirmPending() {
+		if (pendingFile) uploadFile(pendingFile, applyToSeries);
+	}
+
+	function handleCancelPending() {
+		setPendingFile(null);
+		setApplyToSeries(false);
+	}
+
+	if (pendingFile) {
+		return (
+			<div className="min-w-0 space-y-2 rounded-md border border-dashed p-3 text-sm">
+				<div className="min-w-0 overflow-hidden">
+					<p className="truncate font-medium" title={pendingFile.name}>
+						{pendingFile.name}
+					</p>
+				</div>
+				<div className="flex items-center gap-2">
+					<Checkbox
+						id="apply-series"
+						checked={applyToSeries}
+						onCheckedChange={(v) => setApplyToSeries(Boolean(v))}
+					/>
+					<Label htmlFor="apply-series" className="cursor-pointer text-xs">
+						Aplicar a todas as parcelas da série
+					</Label>
+				</div>
+				<div className="flex gap-2">
+					<Button
+						type="button"
+						size="sm"
+						onClick={handleConfirmPending}
+						disabled={isPending}
+					>
+						{isPending ? "Enviando..." : "Confirmar"}
+					</Button>
+					<Button
+						type="button"
+						size="sm"
+						variant="outline"
+						onClick={handleCancelPending}
+						disabled={isPending}
+					>
+						Cancelar
+					</Button>
+				</div>
+			</div>
+		);
+	}
+
+	return (
+		<>
+			<input
+				ref={inputRef}
+				type="file"
+				className="hidden"
+				accept={ALLOWED_MIME_TYPES.join(",")}
+				onChange={handleFileChange}
+			/>
+			<button
+				type="button"
+				className="flex w-full cursor-pointer flex-col items-center justify-center gap-1 rounded-md border border-dashed py-4 text-sm text-muted-foreground transition-colors hover:border-foreground/40 hover:text-foreground disabled:pointer-events-none disabled:opacity-50"
+				onClick={() => inputRef.current?.click()}
+				disabled={isPending}
+			>
+				<span className="flex items-center gap-2">
+					<RiAttachment2 className="size-4" />
+					{isPending ? "Enviando..." : "Adicionar anexo"}
+				</span>
+				{!isPending && (
+					<span className="text-xs">PDF, JPEG, PNG ou WebP · máx. 50 MB</span>
+				)}
+			</button>
+		</>
+	);
+}
--- a/src/features/transactions/components/dialogs/transaction-details-dialog.tsx
+++ b/src/features/transactions/components/dialogs/transaction-details-dialog.tsx
@@ -1,5 +1,6 @@
 "use client";

+import { useEffect, useState } from "react";
 import {
 	currencyFormatter,
 	formatCondition,
@@ -21,6 +22,7 @@ import {
 import { Separator } from "@/shared/components/ui/separator";
 import { parseLocalDateString } from "@/shared/utils/date";
 import { getPaymentMethodIcon } from "@/shared/utils/icons";
+import { AttachmentSection } from "../attachments/attachment-section";
 import { InstallmentTimeline } from "../shared/installment-timeline";
 import type { TransactionItem } from "../types";

@@ -37,6 +39,12 @@ export function TransactionDetailsDialog({
 	transaction,
 	onEdit,
 }: TransactionDetailsDialogProps) {
+	const [attachmentCount, setAttachmentCount] = useState<number | null>(null);
+
+	useEffect(() => {
+		setAttachmentCount(null);
+	}, [transaction?.id]);
+
 	if (!transaction) return null;

 	const isInstallment =
@@ -63,7 +71,7 @@ export function TransactionDetailsDialog({

 	return (
 		<Dialog open={open} onOpenChange={onOpenChange}>
-			<DialogContent className="sm:max-w-xl">
+			<DialogContent className="min-w-0 overflow-x-hidden sm:max-w-xl">
 				<DialogHeader>
 					<DialogTitle>{transaction.name}</DialogTitle>
 					<DialogDescription>
@@ -71,9 +79,46 @@ export function TransactionDetailsDialog({
 					</DialogDescription>
 				</DialogHeader>

-				<div className="max-h-[60vh] overflow-y-auto text-sm">
-					<div className="grid gap-3">
-						<ul className="grid gap-3">
+				<div className="min-w-0 max-h-[60vh] overflow-x-hidden overflow-y-auto text-sm">
+					<div className="min-w-0 space-y-4">
+						<section className="rounded-lg border bg-muted/20 p-3">
+							<div className="flex items-start justify-between gap-3">
+								<div className="min-w-0">
+									<p className="text-xs uppercase tracking-wide text-muted-foreground">
+										Resumo
+									</p>
+									<p className="mt-1 text-2xl font-semibold">
+										{currencyFormatter.format(valorTotal)}
+									</p>
+								</div>
+								<Badge
+									variant="secondary"
+									className={
+										transaction.isSettled
+											? "text-success bg-success/10"
+											: "text-muted-foreground"
+									}
+								>
+									{transaction.isSettled ? "Pago" : "Pendente"}
+								</Badge>
+							</div>
+							<div className="mt-3 flex flex-wrap items-center gap-2 text-xs text-muted-foreground">
+								<TransactionTypeBadge
+									kind={
+										transaction.categoriaName === "Saldo inicial"
+											? "Saldo inicial"
+											: transaction.transactionType
+									}
+								/>
+								<span>{formatCondition(transaction.condition)}</span>
+							</div>
+						</section>
+
+						<section className="space-y-2">
+							<h3 className="text-xs font-medium uppercase tracking-wide text-muted-foreground">
+								Detalhes
+							</h3>
+							<ul className="min-w-0 grid gap-2 rounded-lg border p-3">
 								<DetailRow
 									label="Período"
 									value={formatPeriod(transaction.period)}
@@ -99,41 +144,11 @@ export function TransactionDetailsDialog({
 									value={transaction.categoriaName ?? "—"}
 								/>

-							<li className="flex items-center justify-between">
-								<span className="text-muted-foreground">Tipo de Transação</span>
-								<TransactionTypeBadge
-									kind={
-										transaction.categoriaName === "Saldo inicial"
-											? "Saldo inicial"
-											: transaction.transactionType
-									}
-								/>
-							</li>
-
-							<DetailRow
-								label="Condição"
-								value={formatCondition(transaction.condition)}
-							/>
-
 								<li className="flex items-center justify-between">
 									<span className="text-muted-foreground">Responsável</span>
 									<span>{transaction.pagadorName}</span>
 								</li>

-							<li className="flex items-center justify-between">
-								<span className="text-muted-foreground">Status</span>
-								<Badge
-									variant="secondary"
-									className={
-										transaction.isSettled
-											? "text-success bg-success/10"
-											: "text-muted-foreground"
-									}
-								>
-									{transaction.isSettled ? "Pago" : "Pendente"}
-								</Badge>
-							</li>
-
 								{isBoleto && transaction.dueDate && (
 									<DetailRow
 										label="Vencimento"
@@ -147,18 +162,16 @@ export function TransactionDetailsDialog({
 										<Badge variant="outline">Dividido</Badge>
 									</li>
 								)}
-
-							{transaction.note && (
-								<li className="flex flex-col gap-1">
-									<span className="text-muted-foreground">Notas</span>
-									<span className="text-foreground">{transaction.note}</span>
-								</li>
-							)}
 							</ul>
+						</section>

-						<ul className="mb-2 grid gap-3">
+						<section className="space-y-2">
+							<h3 className="text-xs font-medium uppercase tracking-wide text-muted-foreground">
+								Valores
+							</h3>
+							<ul className="min-w-0 grid gap-2 rounded-lg border p-3">
 								{isInstallment && (
-								<li className="mt-4">
+									<li className="mb-1">
 										<InstallmentTimeline
 											purchaseDate={parseLocalDateString(
 												transaction.purchaseDate,
@@ -188,19 +201,40 @@ export function TransactionDetailsDialog({
 										value={`${transaction.recurrenceCount} meses`}
 									/>
 								)}
-
-							{!isInstallment && <Separator className="my-2" />}
-
-							<li className="flex items-center justify-between font-semibold">
-								<span className="text-muted-foreground">Total da Compra</span>
-								<span className="text-lg">
-									{currencyFormatter.format(valorTotal)}
-								</span>
-							</li>
 							</ul>
+						</section>
+
+						{transaction.note ? (
+							<section className="space-y-2">
+								<h3 className="text-xs font-medium uppercase tracking-wide text-muted-foreground">
+									Notas
+								</h3>
+								<div className="rounded-lg border p-3 text-foreground">
+									{transaction.note}
+								</div>
+							</section>
+						) : null}
+
+						{attachmentCount !== 0 && (
+							<section className="space-y-2">
+								<h3 className="text-xs font-medium uppercase tracking-wide text-muted-foreground">
+									Anexos
+								</h3>
+								<div className="min-w-0">
+									<AttachmentSection
+										transactionId={transaction.id}
+										seriesId={transaction.seriesId}
+										readonly
+										onLoaded={setAttachmentCount}
+									/>
+								</div>
+							</section>
+						)}
 					</div>
 				</div>

+				<Separator />
+
 				<DialogFooter>
 					{onEdit && !transaction.readonly && (
 						<Button variant="outline" onClick={handleEdit}>
@@ -223,9 +257,9 @@ interface DetailRowProps {

 function DetailRow({ label, value }: DetailRowProps) {
 	return (
-		<li className="flex items-center justify-between">
+		<li className="min-w-0 flex items-center justify-between gap-3">
 			<span className="text-muted-foreground">{label}</span>
-			<span>{value}</span>
+			<span className="min-w-0 truncate">{value}</span>
 		</li>
 	);
 }
--- a/src/features/transactions/components/dialogs/transaction-dialog/transaction-dialog.tsx
+++ b/src/features/transactions/components/dialogs/transaction-dialog/transaction-dialog.tsx
@@ -6,6 +6,10 @@ import {
 	createTransactionAction,
 	updateTransactionAction,
 } from "@/features/transactions/actions";
+import {
+	confirmAttachmentUploadAction,
+	getPresignedUploadUrlAction,
+} from "@/features/transactions/actions/attachments";
 import {
 	filterSecondaryPayerOptions,
 	groupAndSortCategories,
@@ -30,7 +34,10 @@ import {
 	DialogTitle,
 	DialogTrigger,
 } from "@/shared/components/ui/dialog";
+import { Label } from "@/shared/components/ui/label";
 import { useControlledState } from "@/shared/hooks/use-controlled-state";
+import { AttachmentFilePicker } from "../../attachments/attachment-file-picker";
+import { AttachmentSection } from "../../attachments/attachment-section";
 import { BasicFieldsSection } from "./basic-fields-section";
 import { BoletoFieldsSection } from "./boleto-fields-section";
 import { CategorySection } from "./category-section";
@@ -90,6 +97,7 @@ export function TransactionDialog({
 	);
 	const [isPending, startTransition] = useTransition();
 	const [errorMessage, setErrorMessage] = useState<string | null>(null);
+	const [pendingFile, setPendingFile] = useState<File | null>(null);

 	useEffect(() => {
 		if (dialogOpen) {
@@ -126,6 +134,7 @@ export function TransactionDialog({

 			setFormState(initial);
 			setErrorMessage(null);
+			setPendingFile(null);
 		}
 	}, [
 		dialogOpen,
@@ -313,6 +322,29 @@ export function TransactionDialog({
 				const result = await createTransactionAction(payload);

 				if (result.success) {
+					if (pendingFile && result.data?.ids?.length) {
+						const firstId = result.data.ids[0];
+						const isNewSeries =
+							formState.condition === "Parcelado" ||
+							formState.condition === "Recorrente";
+						const presign = await getPresignedUploadUrlAction({
+							fileName: pendingFile.name,
+							mimeType: pendingFile.type,
+							fileSize: pendingFile.size,
+							transactionId: firstId,
+						});
+						if (presign.success) {
+							await fetch(presign.presignedUrl, {
+								method: "PUT",
+								body: pendingFile,
+								headers: { "Content-Type": pendingFile.type },
+							});
+							await confirmAttachmentUploadAction({
+								uploadToken: presign.uploadToken,
+								applyToSeries: isNewSeries,
+							});
+						}
+					}
 					toast.success(result.message);
 					onSuccess?.();
 					setDialogOpen(false);
@@ -415,18 +447,18 @@ export function TransactionDialog({
 	return (
 		<Dialog open={dialogOpen} onOpenChange={setDialogOpen}>
 			{trigger ? <DialogTrigger asChild>{trigger}</DialogTrigger> : null}
-			<DialogContent>
+			<DialogContent className="min-w-0 overflow-x-hidden">
 				<DialogHeader>
 					<DialogTitle>{title}</DialogTitle>
 					<DialogDescription>{description}</DialogDescription>
 				</DialogHeader>

 				<form
-					className="flex flex-col gap-0"
+					className="flex min-w-0 flex-col gap-0"
 					onSubmit={handleSubmit}
 					noValidate
 				>
-					<div className="space-y-3 -mx-6 max-h-[70vh] overflow-y-auto px-6 pb-1">
+					<div className="min-w-0 space-y-3 -mx-6 max-h-[90vh] overflow-x-hidden overflow-y-auto px-6 pb-1">
 						<BasicFieldsSection
 							formState={formState}
 							onFieldChange={handleFieldChange}
@@ -477,17 +509,31 @@ export function TransactionDialog({
 						) : null}

 						{isUpdateMode ? (
+							<>
 								<NoteSection
 									formState={formState}
 									onFieldChange={handleFieldChange}
 								/>
+								<div className="space-y-2">
+									<Label className="text-xs font-medium leading-none">
+										Anexos
+									</Label>
+									<AttachmentSection
+										transactionId={transaction?.id ?? ""}
+										seriesId={transaction?.seriesId ?? null}
+									/>
+								</div>
+							</>
 						) : (
-							<Collapsible defaultOpen={formState.condition !== "À vista"}>
+							<Collapsible
+								defaultOpen={formState.condition !== "À vista"}
+								className="min-w-0"
+							>
 								<CollapsibleTrigger className="flex w-full items-center gap-1 text-xs text-muted-foreground hover:text-foreground transition-colors cursor-pointer [&[data-state=open]>svg]:rotate-180 mt-4">
 									<RiArrowDropDownLine className="text-primary size-4 transition-transform duration-200" />
-									Condições e anotações
+									Condições, anotações e anexos
 								</CollapsibleTrigger>
-								<CollapsibleContent className="space-y-3 pt-3">
+								<CollapsibleContent className="min-w-0 overflow-hidden space-y-3 pt-3">
 									<ConditionSection
 										formState={formState}
 										onFieldChange={handleFieldChange}
@@ -498,6 +544,10 @@ export function TransactionDialog({
 										formState={formState}
 										onFieldChange={handleFieldChange}
 									/>
+									<AttachmentFilePicker
+										file={pendingFile}
+										onChange={setPendingFile}
+									/>
 								</CollapsibleContent>
 							</Collapsible>
 						)}
--- a/src/features/transactions/components/table/transactions-table.tsx
+++ b/src/features/transactions/components/table/transactions-table.tsx
@@ -6,6 +6,7 @@ import {
 	RiArrowLeftSLine,
 	RiArrowRightDoubleLine,
 	RiArrowRightSLine,
+	RiAttachment2,
 	RiBankCard2Line,
 	RiChat1Line,
 	RiCheckboxBlankCircleLine,
@@ -115,6 +116,14 @@ type BuildColumnsArgs = {
 	showActions: boolean;
 };

+function getPaymentMethodTableLabel(method: string) {
+	if (method === "Transferência bancária") {
+		return "Transf. bancária";
+	}
+
+	return method;
+}
+
 const buildColumns = ({
 	currentUserId,
 	noteAsColumn,
@@ -182,6 +191,7 @@ const buildColumns = ({
 					note,
 					isDivided,
 					isAnticipated,
+					hasAttachments,
 				} = row.original;

 				const installmentBadge =
@@ -191,7 +201,7 @@ const buildColumns = ({

 				const isBoleto = paymentMethod === "Boleto" && dueDate;
 				const dueDateLabel =
-					isBoleto && dueDate ? `Venc. ${formatDate(dueDate)}` : null;
+					isBoleto && dueDate ? `venc. ${formatDate(dueDate)}` : null;
 				const hasNote = Boolean(note?.trim().length);
 				const isLastInstallment =
 					currentInstallment === installmentCount &&
@@ -201,13 +211,18 @@ const buildColumns = ({
 				return (
 					<span className="flex items-center gap-2">
 						<EstablishmentLogo name={name} size={28} />
-						<span className="flex flex-col">
-							<span className="text-[11px] text-muted-foreground">
+
+						<span className="flex flex-col py-0.5">
+							<span className="text-xs text-muted-foreground flex items-center gap-2">
 								{formatDate(purchaseDate)}
+
+								{dueDateLabel ? (
+									<span className="text-primary">{dueDateLabel}</span>
+								) : null}
 							</span>
 							<Tooltip>
 								<TooltipTrigger asChild>
-									<span className="line-clamp-2 max-w-[160px] font-semibold truncate">
+									<span className="line-clamp-2 max-w-[180px] font-bold truncate">
 										{name}
 									</span>
 								</TooltipTrigger>
@@ -259,12 +274,6 @@ const buildColumns = ({
 							</Badge>
 						) : null}

-						{dueDateLabel ? (
-							<Badge variant="outline" className="px-2 text-xs">
-								{dueDateLabel}
-							</Badge>
-						) : null}
-
 						{isAnticipated && (
 							<Tooltip>
 								<TooltipTrigger asChild>
@@ -301,6 +310,21 @@ const buildColumns = ({
 								</TooltipContent>
 							</Tooltip>
 						) : null}
+
+						{hasAttachments ? (
+							<Tooltip>
+								<TooltipTrigger asChild>
+									<span className="inline-flex rounded-full p-1">
+										<RiAttachment2
+											className="h-4 w-4 text-muted-foreground"
+											aria-hidden
+										/>
+										<span className="sr-only">Possui anexos</span>
+									</span>
+								</TooltipTrigger>
+								<TooltipContent side="top">Possui anexos</TooltipContent>
+							</Tooltip>
+						) : null}
 					</span>
 				);
 			},
@@ -366,7 +390,7 @@ const buildColumns = ({
 				return (
 					<span className="flex items-center gap-2">
 						{icon}
-						<span>{method}</span>
+						<span>{getPaymentMethodTableLabel(method)}</span>
 					</span>
 				);
 			},
--- a/src/features/transactions/components/types.ts
+++ b/src/features/transactions/components/types.ts
@@ -33,6 +33,7 @@ export type TransactionItem = {
 	isAnticipated: boolean;
 	anticipationId: string | null;
 	seriesId: string | null;
+	hasAttachments: boolean;
 	readonly?: boolean;
 };

--- a/src/features/transactions/page-helpers.ts
+++ b/src/features/transactions/page-helpers.ts
@@ -402,6 +402,7 @@ type TransactionRowWithRelations = Partial<typeof transactions.$inferSelect> & {
 	financialAccount?: AccountRow | null;
 	card?: CardRow | null;
 	category?: CategoryRow | null;
+	hasAttachments?: boolean;
 };

 export const mapTransactionsData = (rows: TransactionRowWithRelations[]) =>
@@ -442,6 +443,7 @@ export const mapTransactionsData = (rows: TransactionRowWithRelations[]) =>
 		isAnticipated: item.isAnticipated ?? false,
 		anticipationId: item.anticipationId ?? null,
 		seriesId: item.seriesId ?? null,
+		hasAttachments: item.hasAttachments ?? false,
 		readonly:
 			Boolean(item.note?.startsWith(ACCOUNT_AUTO_INVOICE_NOTE_PREFIX)) ||
 			item.category?.name === "Saldo inicial" ||
--- a/src/features/transactions/queries.ts
+++ b/src/features/transactions/queries.ts
@@ -15,6 +15,7 @@ import {
 	categories,
 	financialAccounts,
 	payers,
+	transactionAttachments,
 	transactions,
 } from "@/db/schema";
 import { INITIAL_BALANCE_NOTE } from "@/shared/lib/accounts/constants";
@@ -74,6 +75,7 @@ const mapTransactionRows = (
 		financialAccount: typeof financialAccounts.$inferSelect | null;
 		card: typeof cards.$inferSelect | null;
 		category: typeof categories.$inferSelect | null;
+		hasAttachments: boolean;
 	}[],
 ) =>
 	transactionRows.map((row) => ({
@@ -82,6 +84,7 @@ const mapTransactionRows = (
 		financialAccount: row.financialAccount,
 		card: row.card,
 		category: row.category,
+		hasAttachments: row.hasAttachments,
 	}));

 async function selectTransactionsWithRelations({
@@ -98,6 +101,10 @@ async function selectTransactionsWithRelations({
 			financialAccount: financialAccounts,
 			card: cards,
 			category: categories,
+			hasAttachments: sql<boolean>`EXISTS (
+				SELECT 1 FROM ${transactionAttachments}
+				WHERE ${transactionAttachments.transactionId} = ${transactions.id}
+			)`,
 		})
 		.from(transactions)
 		.leftJoin(payers, eq(transactions.payerId, payers.id))
--- a/src/global.d.ts
+++ b/src/global.d.ts
@@ -0,0 +1 @@
+declare module "*.css";
--- a/src/shared/components/ui/dialog.tsx
+++ b/src/shared/components/ui/dialog.tsx
@@ -56,7 +56,7 @@ function DialogContent({
 			<DialogPrimitive.Content
 				data-slot="dialog-content"
 				className={cn(
-					"bg-background fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] max-h-[90vh] overflow-y-auto translate-x-[-50%] translate-y-[-50%] gap-4 rounded-lg border p-4 shadow-lg sm:p-10 sm:max-w-xl",
+					"bg-background fixed top-[50%] left-[50%] z-50 grid w-full min-w-0 max-w-[calc(100%-2rem)] max-h-[90vh] overflow-x-hidden overflow-y-auto translate-x-[-50%] translate-y-[-50%] gap-4 rounded-lg border p-4 shadow-lg sm:p-10 sm:max-w-xl",
 					className,
 				)}
 				{...props}
--- a/src/shared/lib/categories/icons.ts
+++ b/src/shared/lib/categories/icons.ts
@@ -149,7 +149,7 @@ export const CATEGORY_ICON_OPTIONS: CategoryIconOption[] = [
 	{ label: "Chave", value: "RiKeyLine" },
 	{ label: "Configurações", value: "RiSettings3Line" },
 	{ label: "Link", value: "RiLinkLine" },
-	{ label: "Anexo", value: "RiAttachmentLine" },
+	{ label: "Anexo", value: "RiAttachment2" },
 	{ label: "Download", value: "RiDownloadLine" },
 	{ label: "Upload", value: "RiUploadLine" },
 	{ label: "Nuvem Download", value: "RiCloudDownloadLine" },
@@ -327,7 +327,7 @@ export const CATEGORY_ICON_GROUPS: CategoryIconGroup[] = [
 			{ label: "Chave", value: "RiKeyLine" },
 			{ label: "Configurações", value: "RiSettings3Line" },
 			{ label: "Link", value: "RiLinkLine" },
-			{ label: "Anexo", value: "RiAttachmentLine" },
+			{ label: "Anexo", value: "RiAttachment2" },
 			{ label: "Download", value: "RiDownloadLine" },
 			{ label: "Upload", value: "RiUploadLine" },
 			{ label: "Nuvem Download", value: "RiCloudDownloadLine" },
--- a/src/shared/lib/storage/presign.ts
+++ b/src/shared/lib/storage/presign.ts
@@ -0,0 +1,52 @@
+import {
+	DeleteObjectCommand,
+	GetObjectCommand,
+	HeadObjectCommand,
+	PutObjectCommand,
+} from "@aws-sdk/client-s3";
+import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
+import { S3_BUCKET, s3 } from "./s3-client";
+
+export async function createPresignedPutUrl(
+	fileKey: string,
+	mimeType: string,
+): Promise<string> {
+	const command = new PutObjectCommand({
+		Bucket: S3_BUCKET,
+		Key: fileKey,
+		ContentType: mimeType,
+	});
+	return getSignedUrl(s3, command, { expiresIn: 300 }); // 5 minutos
+}
+
+export async function createPresignedGetUrl(fileKey: string): Promise<string> {
+	const command = new GetObjectCommand({
+		Bucket: S3_BUCKET,
+		Key: fileKey,
+	});
+	return getSignedUrl(s3, command, { expiresIn: 3600 }); // 1 hora
+}
+
+export async function headS3Object(fileKey: string): Promise<{
+	contentLength: number | null;
+	contentType: string | null;
+}> {
+	const command = new HeadObjectCommand({
+		Bucket: S3_BUCKET,
+		Key: fileKey,
+	});
+	const result = await s3.send(command);
+
+	return {
+		contentLength: result.ContentLength ?? null,
+		contentType: result.ContentType ?? null,
+	};
+}
+
+export async function deleteS3Object(fileKey: string): Promise<void> {
+	const command = new DeleteObjectCommand({
+		Bucket: S3_BUCKET,
+		Key: fileKey,
+	});
+	await s3.send(command);
+}
--- a/src/shared/lib/storage/s3-client.ts
+++ b/src/shared/lib/storage/s3-client.ts
@@ -0,0 +1,13 @@
+import { S3Client } from "@aws-sdk/client-s3";
+
+export const s3 = new S3Client({
+	endpoint: process.env.S3_ENDPOINT ?? "",
+	region: process.env.S3_REGION ?? "auto",
+	credentials: {
+		accessKeyId: process.env.S3_ACCESS_KEY_ID ?? "",
+		secretAccessKey: process.env.S3_SECRET_ACCESS_KEY ?? "",
+	},
+	forcePathStyle: true,
+});
+
+export const S3_BUCKET = process.env.S3_BUCKET ?? "attachments";
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -1,5 +1,6 @@
 {
 	"compilerOptions": {
+		"ignoreDeprecations": "6.0",
 		"baseUrl": ".",
 		"target": "ES2017",
 		"lib": ["dom", "dom.iterable", "esnext"],
Author	SHA1	Message	Date
Felipe Coutinho	fee2a2c9f5	fix(build): corrigir erros de tipo introduzidos pelo TypeScript 6.0 - Adiciona src/global.d.ts com declare module '*.css' para suportar side-effect imports de CSS com moduleResolution bundler - Adiciona ignoreDeprecations "6.0" no tsconfig para silenciar aviso de depreciação do baseUrl (será removido no TS 7) - Corrige cast de .message em better-auth 1.5.6, cujo tipo passou a ser string \| RawError em chamadas de passkey Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:21:56 +00:00
Felipe Coutinho	839d7d0866	chore(release): publicar versão 2.1.0 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:47 +00:00
Felipe Coutinho	7cd7d95245	docs: atualizar README, .env.example e CLAUDE.md para a versão 2.1.0 Documenta variáveis S3 opcionais, instruções de self-hosting com anexos e padrão de commit messages no guia do projeto. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:44 +00:00
Felipe Coutinho	9bd762f7a3	chore(db): reorganizar migrations e adicionar tabelas de anexos Consolida migrations anteriores e adiciona tabelas `anexos` e `lancamento_anexos` com constraints de integridade referencial. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:39 +00:00
Felipe Coutinho	9b76db4ce9	chore(deps): adicionar AWS SDK S3 e atualizar dependências Adiciona @aws-sdk/client-s3 e @aws-sdk/s3-request-presigner para suporte a anexos; atualiza ai-sdk, better-auth, drizzle-orm, recharts, biome e typescript para versões mais recentes. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:30 +00:00
Felipe Coutinho	91457b6490	chore(ci): adicionar workflow de release automático Cria tag e GitHub Release a partir da versão do package.json e da entrada correspondente no CHANGELOG.md ao fazer push na branch main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:26 +00:00
Felipe Coutinho	a0a71623d7	fix(ui): corrigir overflow do dialog e ícone de anexo nas categorias Adiciona min-w-0 e overflow-x-hidden no DialogContent para evitar expansão indevida; corrige referência do ícone RiAttachment2. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:13 +00:00
Felipe Coutinho	00e624b8bc	fix(lancamentos): bloquear criação em fatura já paga no cartão de crédito Evita divergência no relatório de análise de parcelas ao impedir o cadastro de lançamentos em períodos cujas faturas já foram quitadas. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:10 +00:00
Felipe Coutinho	f82043127a	feat(lancamentos): adicionar suporte a anexos com upload para storage S3 Permite vincular arquivos (PDF, imagens) a lançamentos via upload direto para storage compatível com S3, usando token assinado por arquivo e validação de propriedade na leitura e remoção. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-28 15:13:05 +00:00