@kaikybrofc/omnizap-system 2.2.3 → 2.2.5

package/app/services/featureFlagService.js

@@ -0,0 +1,137 @@
+import { createHash } from 'node:crypto';
+
+import logger from '../utils/logger/loggerModule.js';
+import { executeQuery, TABLES } from '../../database/index.js';
+
+const FEATURE_FLAG_CACHE_TTL_MS = Math.max(
+  5_000,
+  Number(process.env.FEATURE_FLAG_CACHE_TTL_MS) || 30_000,
+);
+
+let cacheState = {
+  loadedAt: 0,
+  byName: new Map(),
+  tableAvailable: true,
+};
+
+const normalizeFlagName = (value) =>
+  String(value || '')
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9_:-]/g, '')
+    .slice(0, 120);
+
+const toPercent = (value) => {
+  const numeric = Number(value);
+  if (!Number.isFinite(numeric)) return 0;
+  return Math.max(0, Math.min(100, Math.floor(numeric)));
+};
+
+const toBool = (value, fallback = false) => {
+  if (value === true || value === 1) return true;
+  if (value === false || value === 0) return false;
+  if (value === undefined || value === null || value === '') return fallback;
+  const normalized = String(value).trim().toLowerCase();
+  if (['1', 'true', 'yes', 'y', 'on'].includes(normalized)) return true;
+  if (['0', 'false', 'no', 'n', 'off'].includes(normalized)) return false;
+  return fallback;
+};
+
+const normalizeRow = (row) => ({
+  flag_name: normalizeFlagName(row?.flag_name),
+  is_enabled: toBool(row?.is_enabled, false),
+  rollout_percent: toPercent(row?.rollout_percent ?? 100),
+});
+
+const resolveCohortBucket = (subjectKey) => {
+  const normalized = String(subjectKey || '').trim();
+  if (!normalized) return 0;
+  const digest = createHash('sha1').update(normalized).digest();
+  const value = digest.readUInt32BE(0);
+  return value % 100;
+};
+
+const loadFlagsFromDatabase = async () => {
+  const rows = await executeQuery(
+    `SELECT flag_name, is_enabled, rollout_percent
+     FROM ${TABLES.FEATURE_FLAG}`,
+    [],
+  );
+
+  const byName = new Map();
+  (Array.isArray(rows) ? rows : []).forEach((row) => {
+    const normalized = normalizeRow(row);
+    if (!normalized.flag_name) return;
+    byName.set(normalized.flag_name, normalized);
+  });
+  return byName;
+};
+
+export const refreshFeatureFlags = async ({ force = false } = {}) => {
+  const now = Date.now();
+  const isFresh = now - cacheState.loadedAt < FEATURE_FLAG_CACHE_TTL_MS;
+  if (!force && isFresh) return cacheState.byName;
+
+  if (!cacheState.tableAvailable) return cacheState.byName;
+
+  try {
+    const byName = await loadFlagsFromDatabase();
+    cacheState = {
+      loadedAt: now,
+      byName,
+      tableAvailable: true,
+    };
+  } catch (error) {
+    if (error?.code === 'ER_NO_SUCH_TABLE') {
+      cacheState = {
+        ...cacheState,
+        tableAvailable: false,
+      };
+      logger.warn('Tabela de feature flags indisponível. Usando fallback por env/default.', {
+        action: 'feature_flag_table_unavailable',
+      });
+      return cacheState.byName;
+    }
+    logger.warn('Falha ao carregar feature flags. Mantendo cache anterior.', {
+      action: 'feature_flag_refresh_failed',
+      error: error?.message,
+    });
+  }
+
+  return cacheState.byName;
+};
+
+const resolveEnvFallback = (flagName, fallback) => {
+  const envKey = `FEATURE_${flagName.toUpperCase()}`;
+  return toBool(process.env[envKey], fallback);
+};
+
+export const isFeatureEnabled = async (
+  flagName,
+  { fallback = false, subjectKey = '' } = {},
+) => {
+  const normalizedFlagName = normalizeFlagName(flagName);
+  if (!normalizedFlagName) return Boolean(fallback);
+
+  const byName = await refreshFeatureFlags();
+  const entry = byName.get(normalizedFlagName);
+  if (!entry) {
+    return resolveEnvFallback(normalizedFlagName, fallback);
+  }
+
+  if (!entry.is_enabled) return false;
+  if (entry.rollout_percent >= 100) return true;
+  if (entry.rollout_percent <= 0) return false;
+
+  const bucket = resolveCohortBucket(subjectKey || normalizedFlagName);
+  return bucket < entry.rollout_percent;
+};
+
+export const getFeatureFlagsSnapshot = async () => {
+  const byName = await refreshFeatureFlags();
+  return Array.from(byName.values()).map((entry) => ({
+    flag_name: entry.flag_name,
+    is_enabled: Boolean(entry.is_enabled),
+    rollout_percent: Number(entry.rollout_percent || 0),
+  }));
+};

package/app/services/lidMapService.js

@@ -344,7 +344,10 @@ export const extractSenderInfoFromMessage = (msg) => {
   } else {
     if (isWhatsAppJid(remoteJid)) jid = remoteJid;
     if (!jid && isWhatsAppJid(participant)) jid = participant;
+    if (!jid && isWhatsAppJid(participantAlt)) jid = participantAlt;
     if (isLidJid(participant)) lid = participant;
+    if (!lid && isLidJid(remoteJid)) lid = remoteJid;
+    if (!lid && isLidJid(participantAlt)) lid = participantAlt;
   }
 
   return { lid, jid, participantAlt, remoteJid, groupMessage };
@@ -541,7 +544,7 @@ export const extractUserIdInfo = (value) => {
   const participantAlt = typeof value.participantAlt === 'string' ? value.participantAlt : null;
   const participant = typeof value.participant === 'string' ? value.participant : null;
   const jidCandidate = value.jid || value.id || participantAlt || participant || null;
-  const lidCandidate = value.lid || participant || null;
+  const lidCandidate = value.lid || participant || participantAlt || value.id || value.jid || null;
 
   return {
     lid: pickLid(lidCandidate, participantAlt, participant),

package/app/services/whatsappLoginLinkService.js

@@ -0,0 +1,232 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+import { URL } from 'node:url';
+import { getJidServer, getJidUser, normalizeJid } from '../config/baileysConfig.js';
+
+const WHATSAPP_USER_SERVERS = new Set(['s.whatsapp.net', 'c.us', 'hosted']);
+const DEFAULT_LOGIN_BASE_URL = 'https://omnizap.shop';
+const SIGNING_SECRET = String(process.env.WHATSAPP_LOGIN_LINK_SECRET || '').trim();
+const SIGNED_LINKS_ENABLED = Boolean(SIGNING_SECRET);
+const REQUIRE_SIGNATURE = parseEnvBool(process.env.WHATSAPP_LOGIN_REQUIRE_SIGNATURE, SIGNED_LINKS_ENABLED);
+const LOGIN_TTL_SECONDS = Math.max(60, Number(process.env.WHATSAPP_LOGIN_LINK_TTL_SECONDS) || 15 * 60);
+const LOGIN_PATH = normalizeLoginPath(process.env.WHATSAPP_LOGIN_PATH || '/login/');
+
+function parseEnvBool(value, fallback) {
+  if (value === undefined || value === null || value === '') return fallback;
+  const normalized = String(value).trim().toLowerCase();
+  if (['1', 'true', 'yes', 'y', 'on'].includes(normalized)) return true;
+  if (['0', 'false', 'no', 'n', 'off'].includes(normalized)) return false;
+  return fallback;
+}
+
+function normalizePhoneDigits(value) {
+  return String(value || '').replace(/\D+/g, '');
+}
+
+function normalizeLoginPath(value) {
+  const raw = String(value || '').trim();
+  if (!raw) return '/login/';
+  const withLeadingSlash = raw.startsWith('/') ? raw : `/${raw}`;
+  return withLeadingSlash.endsWith('/') ? withLeadingSlash : `${withLeadingSlash}/`;
+}
+
+function sanitizeTimestamp(value) {
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed) || parsed <= 0) return 0;
+  return Math.floor(parsed);
+}
+
+function buildSignaturePayload(phoneDigits, tsSeconds) {
+  return `${phoneDigits}.${tsSeconds}`;
+}
+
+function buildHintSignature(phoneDigits, tsSeconds) {
+  if (!SIGNED_LINKS_ENABLED) return '';
+  return createHmac('sha256', SIGNING_SECRET).update(buildSignaturePayload(phoneDigits, tsSeconds)).digest('hex');
+}
+
+function safeHexCompare(left, right) {
+  const leftHex = String(left || '').trim().toLowerCase();
+  const rightHex = String(right || '').trim().toLowerCase();
+  if (!leftHex || !rightHex || leftHex.length !== rightHex.length) return false;
+
+  try {
+    const leftBuffer = Buffer.from(leftHex, 'hex');
+    const rightBuffer = Buffer.from(rightHex, 'hex');
+    if (!leftBuffer.length || leftBuffer.length !== rightBuffer.length) return false;
+    return timingSafeEqual(leftBuffer, rightBuffer);
+  } catch {
+    return false;
+  }
+}
+
+function resolveLoginBaseUrl(explicitBaseUrl = '') {
+  const candidates = [
+    explicitBaseUrl,
+    process.env.WHATSAPP_LOGIN_BASE_URL,
+    process.env.SITE_ORIGIN,
+    process.env.PUBLIC_WEB_BASE_URL,
+    DEFAULT_LOGIN_BASE_URL,
+  ];
+
+  for (const candidate of candidates) {
+    const raw = String(candidate || '').trim();
+    if (!raw) continue;
+    try {
+      const url = new URL(raw);
+      return `${url.origin}`;
+    } catch (error) {
+      void error;
+    }
+  }
+
+  return DEFAULT_LOGIN_BASE_URL;
+}
+
+export const toWhatsAppPhoneDigits = (value) => {
+  const raw = String(value || '').trim();
+  if (!raw) return '';
+
+  if (raw.includes('@')) {
+    const normalizedJid = normalizeJid(raw);
+    const server = getJidServer(normalizedJid);
+    if (!WHATSAPP_USER_SERVERS.has(server)) return '';
+    const jidUser = String(getJidUser(normalizedJid) || '').split(':')[0];
+    const digits = normalizePhoneDigits(jidUser);
+    return digits.length >= 10 && digits.length <= 15 ? digits : '';
+  }
+
+  const digits = normalizePhoneDigits(raw);
+  return digits.length >= 10 && digits.length <= 15 ? digits : '';
+};
+
+export const toWhatsAppOwnerJid = (value) => {
+  const digits = toWhatsAppPhoneDigits(value);
+  if (!digits) return '';
+  return normalizeJid(`${digits}@s.whatsapp.net`) || '';
+};
+
+export const buildWhatsAppLoginHint = (value, { nowMs = Date.now() } = {}) => {
+  const phoneDigits = toWhatsAppPhoneDigits(value);
+  if (!phoneDigits) return null;
+
+  const tsSeconds = Math.floor(nowMs / 1000);
+  const hint = {
+    wa: phoneDigits,
+    wa_ts: String(tsSeconds),
+  };
+
+  const signature = buildHintSignature(phoneDigits, tsSeconds);
+  if (signature) hint.wa_sig = signature;
+
+  return hint;
+};
+
+export const buildWhatsAppGoogleLoginUrl = ({ userId, baseUrl } = {}) => {
+  const hint = buildWhatsAppLoginHint(userId);
+  if (!hint) return '';
+
+  const root = resolveLoginBaseUrl(baseUrl);
+  const url = new URL(LOGIN_PATH, root);
+  url.searchParams.set('wa', hint.wa);
+  url.searchParams.set('wa_ts', hint.wa_ts);
+  if (hint.wa_sig) url.searchParams.set('wa_sig', hint.wa_sig);
+  return url.toString();
+};
+
+export const extractWhatsAppLoginHint = (payload = {}) => {
+  const source = payload && typeof payload === 'object' ? payload : {};
+  const nested = source.whatsapp_login && typeof source.whatsapp_login === 'object' ? source.whatsapp_login : {};
+  return {
+    wa: String(source.wa ?? source.whatsapp_phone ?? source.owner_phone ?? nested.wa ?? nested.phone ?? '').trim(),
+    wa_ts: String(source.wa_ts ?? source.whatsapp_ts ?? source.owner_phone_ts ?? nested.wa_ts ?? nested.ts ?? '').trim(),
+    wa_sig: String(source.wa_sig ?? source.whatsapp_sig ?? source.owner_phone_sig ?? nested.wa_sig ?? nested.sig ?? '').trim(),
+  };
+};
+
+export const resolveWhatsAppOwnerJidFromLoginPayload = (payload, { nowMs = Date.now() } = {}) => {
+  const hint = extractWhatsAppLoginHint(payload);
+  const hasPayload = Boolean(hint.wa || hint.wa_ts || hint.wa_sig);
+  if (!hasPayload) {
+    return {
+      hasPayload: false,
+      ownerJid: '',
+      verified: false,
+      signed: false,
+      reason: '',
+    };
+  }
+
+  const phoneDigits = toWhatsAppPhoneDigits(hint.wa);
+  const ownerJid = toWhatsAppOwnerJid(phoneDigits);
+  if (!ownerJid) {
+    return {
+      hasPayload: true,
+      ownerJid: '',
+      verified: false,
+      signed: false,
+      reason: 'invalid_phone',
+    };
+  }
+
+  if (!SIGNED_LINKS_ENABLED) {
+    return {
+      hasPayload: true,
+      ownerJid,
+      verified: false,
+      signed: false,
+      reason: '',
+    };
+  }
+
+  const tsSeconds = sanitizeTimestamp(hint.wa_ts);
+  const hasSignature = Boolean(hint.wa_sig);
+
+  if (!tsSeconds || !hasSignature) {
+    if (REQUIRE_SIGNATURE) {
+      return {
+        hasPayload: true,
+        ownerJid: '',
+        verified: false,
+        signed: false,
+        reason: 'missing_signature',
+      };
+    }
+    return {
+      hasPayload: true,
+      ownerJid,
+      verified: false,
+      signed: false,
+      reason: '',
+    };
+  }
+
+  const nowSeconds = Math.floor(nowMs / 1000);
+  if (Math.abs(nowSeconds - tsSeconds) > LOGIN_TTL_SECONDS) {
+    return {
+      hasPayload: true,
+      ownerJid: '',
+      verified: false,
+      signed: true,
+      reason: 'expired',
+    };
+  }
+
+  const expectedSignature = buildHintSignature(phoneDigits, tsSeconds);
+  if (!safeHexCompare(expectedSignature, hint.wa_sig)) {
+    return {
+      hasPayload: true,
+      ownerJid: '',
+      verified: false,
+      signed: true,
+      reason: 'invalid_signature',
+    };
+  }
+
+  return {
+    hasPayload: true,
+    ownerJid,
+    verified: true,
+    signed: true,
+    reason: '',
+  };
+};

package/database/index.js

@@ -104,8 +104,13 @@ export const TABLES = {
   SEMANTIC_THEME_SUGGESTION_CACHE: 'semantic_theme_suggestion_cache',
   STICKER_PACK_ENGAGEMENT: 'sticker_pack_engagement',
   STICKER_PACK_INTERACTION_EVENT: 'sticker_pack_interaction_event',
+  STICKER_PACK_SCORE_SNAPSHOT: 'sticker_pack_score_snapshot',
   STICKER_ASSET_REPROCESS_QUEUE: 'sticker_asset_reprocess_queue',
   STICKER_WORKER_TASK_QUEUE: 'sticker_worker_task_queue',
+  STICKER_WORKER_TASK_DLQ: 'sticker_worker_task_dlq',
+  DOMAIN_EVENT_OUTBOX: 'domain_event_outbox',
+  DOMAIN_EVENT_OUTBOX_DLQ: 'domain_event_outbox_dlq',
+  FEATURE_FLAG: 'feature_flag',
   STICKER_WEB_GOOGLE_USER: 'sticker_web_google_user',
   STICKER_WEB_GOOGLE_SESSION: 'sticker_web_google_session',
   STICKER_WEB_ADMIN_BAN: 'sticker_web_admin_ban',

package/database/migrations/20260228_0021_sticker_web_google_owner_phone.sql

@@ -0,0 +1,83 @@
+SET @db_name = DATABASE();
+
+SET @has_user_owner_phone := (
+  SELECT COUNT(*)
+  FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = @db_name
+    AND TABLE_NAME = 'sticker_web_google_user'
+    AND COLUMN_NAME = 'owner_phone'
+);
+SET @sql_user_owner_phone := IF(
+  @has_user_owner_phone = 0,
+  'ALTER TABLE sticker_web_google_user ADD COLUMN owner_phone VARCHAR(20) NULL AFTER owner_jid',
+  'SELECT 1'
+);
+PREPARE stmt_user_owner_phone FROM @sql_user_owner_phone;
+EXECUTE stmt_user_owner_phone;
+DEALLOCATE PREPARE stmt_user_owner_phone;
+
+SET @has_user_owner_phone_idx := (
+  SELECT COUNT(*)
+  FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = @db_name
+    AND TABLE_NAME = 'sticker_web_google_user'
+    AND INDEX_NAME = 'idx_sticker_web_google_user_owner_phone'
+);
+SET @sql_user_owner_phone_idx := IF(
+  @has_user_owner_phone_idx = 0,
+  'ALTER TABLE sticker_web_google_user ADD INDEX idx_sticker_web_google_user_owner_phone (owner_phone)',
+  'SELECT 1'
+);
+PREPARE stmt_user_owner_phone_idx FROM @sql_user_owner_phone_idx;
+EXECUTE stmt_user_owner_phone_idx;
+DEALLOCATE PREPARE stmt_user_owner_phone_idx;
+
+SET @has_session_owner_phone := (
+  SELECT COUNT(*)
+  FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = @db_name
+    AND TABLE_NAME = 'sticker_web_google_session'
+    AND COLUMN_NAME = 'owner_phone'
+);
+SET @sql_session_owner_phone := IF(
+  @has_session_owner_phone = 0,
+  'ALTER TABLE sticker_web_google_session ADD COLUMN owner_phone VARCHAR(20) NULL AFTER owner_jid',
+  'SELECT 1'
+);
+PREPARE stmt_session_owner_phone FROM @sql_session_owner_phone;
+EXECUTE stmt_session_owner_phone;
+DEALLOCATE PREPARE stmt_session_owner_phone;
+
+SET @has_session_owner_phone_idx := (
+  SELECT COUNT(*)
+  FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = @db_name
+    AND TABLE_NAME = 'sticker_web_google_session'
+    AND INDEX_NAME = 'idx_sticker_web_google_session_owner_phone'
+);
+SET @sql_session_owner_phone_idx := IF(
+  @has_session_owner_phone_idx = 0,
+  'ALTER TABLE sticker_web_google_session ADD INDEX idx_sticker_web_google_session_owner_phone (owner_phone)',
+  'SELECT 1'
+);
+PREPARE stmt_session_owner_phone_idx FROM @sql_session_owner_phone_idx;
+EXECUTE stmt_session_owner_phone_idx;
+DEALLOCATE PREPARE stmt_session_owner_phone_idx;
+
+UPDATE sticker_web_google_user
+SET owner_phone = CASE
+  WHEN SUBSTRING_INDEX(SUBSTRING_INDEX(owner_jid, '@', 1), ':', 1) REGEXP '^[0-9]{10,20}$'
+    THEN SUBSTRING_INDEX(SUBSTRING_INDEX(owner_jid, '@', 1), ':', 1)
+  ELSE NULL
+END
+WHERE (owner_phone IS NULL OR owner_phone = '')
+  AND owner_jid IS NOT NULL;
+
+UPDATE sticker_web_google_session
+SET owner_phone = CASE
+  WHEN SUBSTRING_INDEX(SUBSTRING_INDEX(owner_jid, '@', 1), ':', 1) REGEXP '^[0-9]{10,20}$'
+    THEN SUBSTRING_INDEX(SUBSTRING_INDEX(owner_jid, '@', 1), ':', 1)
+  ELSE NULL
+END
+WHERE (owner_phone IS NULL OR owner_phone = '')
+  AND owner_jid IS NOT NULL;

package/database/migrations/20260228_0022_sticker_scale_indexes.sql

@@ -0,0 +1,16 @@
+ALTER TABLE sticker_asset
+  ADD INDEX idx_sticker_asset_created_at (created_at);
+
+ALTER TABLE sticker_asset_classification
+  ADD INDEX idx_sticker_asset_classification_confidence (confidence),
+  ADD INDEX idx_sticker_asset_classification_updated_at (updated_at),
+  ADD INDEX idx_sticker_asset_classification_version_updated (classification_version, updated_at);
+
+ALTER TABLE sticker_pack_item
+  ADD INDEX idx_sticker_pack_item_sticker_id (sticker_id);
+
+ALTER TABLE sticker_pack
+  ADD INDEX idx_sticker_pack_catalog_lookup (deleted_at, status, pack_status, visibility, updated_at);
+
+ALTER TABLE sticker_pack_interaction_event
+  ADD INDEX idx_sticker_pack_interaction_created_at (created_at);

package/database/migrations/20260228_0023_sticker_pack_score_snapshot.sql

@@ -0,0 +1,25 @@
+CREATE TABLE IF NOT EXISTS sticker_pack_score_snapshot (
+  pack_id CHAR(36) PRIMARY KEY,
+  ranking_score DECIMAL(10,6) NOT NULL DEFAULT 0,
+  pack_score DECIMAL(10,6) NOT NULL DEFAULT 0,
+  trend_score DECIMAL(10,6) NOT NULL DEFAULT 0,
+  quality_score DECIMAL(10,6) NOT NULL DEFAULT 0,
+  engagement_score DECIMAL(10,6) NOT NULL DEFAULT 0,
+  diversity_score DECIMAL(10,6) NOT NULL DEFAULT 0,
+  cohesion_score DECIMAL(10,6) NOT NULL DEFAULT 0,
+  sensitive_content TINYINT(1) NOT NULL DEFAULT 0,
+  nsfw_level ENUM('safe', 'suggestive', 'explicit') NOT NULL DEFAULT 'safe',
+  sticker_count INT UNSIGNED NOT NULL DEFAULT 0,
+  tags JSON NULL,
+  scores_json JSON NULL,
+  source_version VARCHAR(32) NOT NULL DEFAULT 'v1',
+  refreshed_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  CONSTRAINT fk_sticker_pack_score_snapshot_pack
+    FOREIGN KEY (pack_id) REFERENCES sticker_pack(id)
+    ON DELETE CASCADE ON UPDATE CASCADE,
+  INDEX idx_sticker_pack_score_snapshot_ranking (ranking_score),
+  INDEX idx_sticker_pack_score_snapshot_trend (trend_score),
+  INDEX idx_sticker_pack_score_snapshot_refresh (refreshed_at)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;

package/database/migrations/20260228_0024_domain_event_outbox.sql

@@ -0,0 +1,42 @@
+CREATE TABLE IF NOT EXISTS domain_event_outbox (
+  id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT,
+  event_type VARCHAR(96) NOT NULL,
+  aggregate_type VARCHAR(96) NOT NULL,
+  aggregate_id VARCHAR(128) NOT NULL,
+  payload JSON NULL,
+  status ENUM('pending', 'processing', 'completed', 'failed') NOT NULL DEFAULT 'pending',
+  priority TINYINT UNSIGNED NOT NULL DEFAULT 50,
+  idempotency_key VARCHAR(180) NULL,
+  available_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  attempts TINYINT UNSIGNED NOT NULL DEFAULT 0,
+  max_attempts TINYINT UNSIGNED NOT NULL DEFAULT 10,
+  worker_token CHAR(36) NULL,
+  last_error VARCHAR(255) NULL,
+  locked_at TIMESTAMP NULL DEFAULT NULL,
+  processed_at TIMESTAMP NULL DEFAULT NULL,
+  created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  UNIQUE KEY uq_domain_event_outbox_idempotency_key (idempotency_key),
+  INDEX idx_domain_event_outbox_status_sched (status, available_at, priority),
+  INDEX idx_domain_event_outbox_event_type (event_type, status, available_at),
+  INDEX idx_domain_event_outbox_aggregate (aggregate_type, aggregate_id, created_at),
+  INDEX idx_domain_event_outbox_worker_token (worker_token)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+CREATE TABLE IF NOT EXISTS domain_event_outbox_dlq (
+  id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT,
+  outbox_event_id BIGINT UNSIGNED NULL,
+  event_type VARCHAR(96) NOT NULL,
+  aggregate_type VARCHAR(96) NOT NULL,
+  aggregate_id VARCHAR(128) NOT NULL,
+  payload JSON NULL,
+  attempts TINYINT UNSIGNED NOT NULL DEFAULT 0,
+  max_attempts TINYINT UNSIGNED NOT NULL DEFAULT 0,
+  last_error VARCHAR(255) NULL,
+  failed_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  UNIQUE KEY uq_domain_event_outbox_dlq_outbox_event (outbox_event_id),
+  INDEX idx_domain_event_outbox_dlq_event (event_type, failed_at),
+  INDEX idx_domain_event_outbox_dlq_aggregate (aggregate_type, aggregate_id, failed_at),
+  INDEX idx_domain_event_outbox_dlq_outbox_event_id (outbox_event_id)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;

package/database/migrations/20260228_0025_sticker_worker_task_idempotency_dlq.sql

@@ -0,0 +1,23 @@
+ALTER TABLE sticker_worker_task_queue
+  ADD COLUMN IF NOT EXISTS idempotency_key VARCHAR(180) NULL AFTER task_type;
+
+CREATE UNIQUE INDEX uq_sticker_worker_task_idempotency_key
+  ON sticker_worker_task_queue (idempotency_key);
+
+CREATE TABLE IF NOT EXISTS sticker_worker_task_dlq (
+  id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT,
+  task_id BIGINT UNSIGNED NULL,
+  task_type ENUM('classification_cycle', 'curation_cycle', 'rebuild_cycle') NOT NULL,
+  payload JSON NULL,
+  idempotency_key VARCHAR(180) NULL,
+  attempts TINYINT UNSIGNED NOT NULL DEFAULT 0,
+  max_attempts TINYINT UNSIGNED NOT NULL DEFAULT 0,
+  priority TINYINT UNSIGNED NOT NULL DEFAULT 0,
+  last_error VARCHAR(255) NULL,
+  failed_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  UNIQUE KEY uq_sticker_worker_task_dlq_task_id (task_id),
+  INDEX idx_sticker_worker_task_dlq_type_failed_at (task_type, failed_at),
+  INDEX idx_sticker_worker_task_dlq_task_id (task_id),
+  INDEX idx_sticker_worker_task_dlq_idempotency_key (idempotency_key)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;

package/database/migrations/20260228_0026_feature_flags.sql

@@ -0,0 +1,21 @@
+CREATE TABLE IF NOT EXISTS feature_flag (
+  id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT,
+  flag_name VARCHAR(120) NOT NULL,
+  is_enabled TINYINT(1) NOT NULL DEFAULT 0,
+  rollout_percent TINYINT UNSIGNED NOT NULL DEFAULT 100,
+  description VARCHAR(255) NULL,
+  updated_by VARCHAR(120) NULL,
+  updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  UNIQUE KEY uq_feature_flag_name (flag_name),
+  INDEX idx_feature_flag_enabled (is_enabled, rollout_percent)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+INSERT INTO feature_flag (flag_name, is_enabled, rollout_percent, description)
+VALUES
+  ('enable_ranking_snapshot_read', 1, 100, 'Leitura HTTP do ranking/sinais a partir de snapshot'),
+  ('enable_domain_event_outbox', 1, 100, 'Publicacao e consumo de eventos de dominio via outbox interno'),
+  ('enable_worker_dedicated_processes', 0, 100, 'Ativa workers dedicados por tipo de task'),
+  ('enable_object_storage_delivery', 0, 100, 'Entrega de assets via object storage/CDN com URL segura')
+ON DUPLICATE KEY UPDATE
+  description = VALUES(description);