@omnizap-system/omnizap 2.5.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (425) hide show
  1. package/.clusterfuzzlite/Dockerfile +10 -0
  2. package/.env.example +907 -0
  3. package/.github/codeql/codeql-config.yml +10 -0
  4. package/.github/dependabot.yml +35 -0
  5. package/.github/workflows/ci.yml +73 -0
  6. package/.github/workflows/codeql.yml +106 -0
  7. package/.github/workflows/db-migration-check.yml +98 -0
  8. package/.github/workflows/dependency-review.yml +22 -0
  9. package/.github/workflows/deploy.yml +95 -0
  10. package/.github/workflows/release.yml +106 -0
  11. package/.github/workflows/security-attest-provenance.yml +51 -0
  12. package/.github/workflows/security-gitleaks.yml +34 -0
  13. package/.github/workflows/security-runner-hardening.yml +31 -0
  14. package/.github/workflows/security-scorecard.yml +44 -0
  15. package/.github/workflows/security-zap-baseline.yml +44 -0
  16. package/.github/workflows/security-zap-full-scan.yml +43 -0
  17. package/.github/workflows/security-zizmor.yml +36 -0
  18. package/.github/workflows/wiki-sync.yml +44 -0
  19. package/.gitleaks.toml +15 -0
  20. package/.prettierrc +34 -0
  21. package/CODE_OF_CONDUCT.md +114 -0
  22. package/LICENSE +56 -0
  23. package/README.md +110 -0
  24. package/SECURITY.md +110 -0
  25. package/app/config/index.js +4 -0
  26. package/app/configParts/adminIdentity.js +92 -0
  27. package/app/configParts/baileysConfig.js +1818 -0
  28. package/app/configParts/groupUtils.js +692 -0
  29. package/app/configParts/loggerConfig.js +394 -0
  30. package/app/configParts/messagePersistenceService.js +305 -0
  31. package/app/connection/baileysCompatibility.test.js +40 -0
  32. package/app/connection/baileysDbAuthState.js +344 -0
  33. package/app/connection/socketController.js +2243 -0
  34. package/app/controllers/messageController.js +7 -0
  35. package/app/controllers/messagePipeline/commandMiddleware.js +146 -0
  36. package/app/controllers/messagePipeline/conversationMiddleware.js +183 -0
  37. package/app/controllers/messagePipeline/messagePipelineMiddlewares.test.js +522 -0
  38. package/app/controllers/messagePipeline/postProcessingMiddleware.js +41 -0
  39. package/app/controllers/messagePipeline/preProcessingMiddlewares.js +166 -0
  40. package/app/controllers/messageProcessingPipeline.js +699 -0
  41. package/app/modules/adminModule/AGENT.md +4056 -0
  42. package/app/modules/adminModule/adminAiHelpService.js +56 -0
  43. package/app/modules/adminModule/adminConfigRuntime.js +177 -0
  44. package/app/modules/adminModule/commandConfig.json +7122 -0
  45. package/app/modules/adminModule/groupCommandHandlers.js +1823 -0
  46. package/app/modules/adminModule/groupCommandHandlers.test.js +350 -0
  47. package/app/modules/adminModule/groupEventHandlers.js +399 -0
  48. package/app/modules/aiModule/AGENT.md +547 -0
  49. package/app/modules/aiModule/aiAiHelpService.js +14 -0
  50. package/app/modules/aiModule/aiConfigRuntime.js +135 -0
  51. package/app/modules/aiModule/catCommand.js +967 -0
  52. package/app/modules/aiModule/commandConfig.json +981 -0
  53. package/app/modules/analyticsModule/messageAnalysisEventRepository.js +83 -0
  54. package/app/modules/gameModule/AGENT.md +196 -0
  55. package/app/modules/gameModule/commandConfig.json +366 -0
  56. package/app/modules/gameModule/diceCommand.js +42 -0
  57. package/app/modules/gameModule/gameAiHelpService.js +14 -0
  58. package/app/modules/gameModule/gameConfigRuntime.js +68 -0
  59. package/app/modules/menuModule/AGENT.md +205 -0
  60. package/app/modules/menuModule/commandConfig.json +366 -0
  61. package/app/modules/menuModule/common.js +316 -0
  62. package/app/modules/menuModule/menuAiHelpService.js +14 -0
  63. package/app/modules/menuModule/menuConfigRuntime.js +68 -0
  64. package/app/modules/menuModule/menus.js +66 -0
  65. package/app/modules/playModule/AGENT.md +321 -0
  66. package/app/modules/playModule/commandConfig.json +584 -0
  67. package/app/modules/playModule/playAiHelpService.js +14 -0
  68. package/app/modules/playModule/playCommand.js +1417 -0
  69. package/app/modules/playModule/playConfigRuntime.js +68 -0
  70. package/app/modules/quoteModule/AGENT.md +199 -0
  71. package/app/modules/quoteModule/commandConfig.json +366 -0
  72. package/app/modules/quoteModule/quoteAiHelpService.js +14 -0
  73. package/app/modules/quoteModule/quoteCommand.js +842 -0
  74. package/app/modules/quoteModule/quoteConfigRuntime.js +68 -0
  75. package/app/modules/rpgPokemonModule/AGENT.md +229 -0
  76. package/app/modules/rpgPokemonModule/commandConfig.json +386 -0
  77. package/app/modules/rpgPokemonModule/rpgBattleCanvasRenderer.js +795 -0
  78. package/app/modules/rpgPokemonModule/rpgBattleService.js +2110 -0
  79. package/app/modules/rpgPokemonModule/rpgBattleService.test.js +770 -0
  80. package/app/modules/rpgPokemonModule/rpgEvolutionUtils.js +22 -0
  81. package/app/modules/rpgPokemonModule/rpgPokemonAiHelpService.js +14 -0
  82. package/app/modules/rpgPokemonModule/rpgPokemonCommand.js +174 -0
  83. package/app/modules/rpgPokemonModule/rpgPokemonConfigRuntime.js +68 -0
  84. package/app/modules/rpgPokemonModule/rpgPokemonDomain.js +192 -0
  85. package/app/modules/rpgPokemonModule/rpgPokemonDomain.test.js +93 -0
  86. package/app/modules/rpgPokemonModule/rpgPokemonEvolution.test.js +46 -0
  87. package/app/modules/rpgPokemonModule/rpgPokemonMessages.js +746 -0
  88. package/app/modules/rpgPokemonModule/rpgPokemonRepository.js +1847 -0
  89. package/app/modules/rpgPokemonModule/rpgPokemonService.js +6839 -0
  90. package/app/modules/rpgPokemonModule/rpgProfileCanvasRenderer.js +354 -0
  91. package/app/modules/statsModule/AGENT.md +320 -0
  92. package/app/modules/statsModule/commandConfig.json +540 -0
  93. package/app/modules/statsModule/globalRankingCommand.js +64 -0
  94. package/app/modules/statsModule/rankingCommand.js +41 -0
  95. package/app/modules/statsModule/rankingCommon.js +1305 -0
  96. package/app/modules/statsModule/statsAiHelpService.js +14 -0
  97. package/app/modules/statsModule/statsConfigRuntime.js +68 -0
  98. package/app/modules/stickerModule/AGENT.md +692 -0
  99. package/app/modules/stickerModule/addStickerMetadata.js +239 -0
  100. package/app/modules/stickerModule/commandConfig.json +1216 -0
  101. package/app/modules/stickerModule/convertToWebp.js +367 -0
  102. package/app/modules/stickerModule/stickerAiHelpService.js +14 -0
  103. package/app/modules/stickerModule/stickerCommand.js +446 -0
  104. package/app/modules/stickerModule/stickerConfigRuntime.js +68 -0
  105. package/app/modules/stickerModule/stickerConvertCommand.js +159 -0
  106. package/app/modules/stickerModule/stickerTextCommand.js +653 -0
  107. package/app/modules/stickerPackModule/AGENT.md +215 -0
  108. package/app/modules/stickerPackModule/autoPackCollectorRuntime.js +20 -0
  109. package/app/modules/stickerPackModule/autoPackCollectorService.js +357 -0
  110. package/app/modules/stickerPackModule/commandConfig.json +387 -0
  111. package/app/modules/stickerPackModule/domainEventOutboxRepository.js +227 -0
  112. package/app/modules/stickerPackModule/domainEvents.js +52 -0
  113. package/app/modules/stickerPackModule/semanticReclassificationEngine.js +429 -0
  114. package/app/modules/stickerPackModule/semanticReclassificationEngine.test.js +75 -0
  115. package/app/modules/stickerPackModule/semanticThemeClusterService.js +544 -0
  116. package/app/modules/stickerPackModule/stickerAssetClassificationRepository.js +400 -0
  117. package/app/modules/stickerPackModule/stickerAssetRepository.js +400 -0
  118. package/app/modules/stickerPackModule/stickerAssetReprocessQueueRepository.js +175 -0
  119. package/app/modules/stickerPackModule/stickerAutoPackByTagsRuntime.js +3702 -0
  120. package/app/modules/stickerPackModule/stickerClassificationBackgroundRuntime.js +559 -0
  121. package/app/modules/stickerPackModule/stickerClassificationService.js +557 -0
  122. package/app/modules/stickerPackModule/stickerDedicatedTaskWorkerRuntime.js +249 -0
  123. package/app/modules/stickerPackModule/stickerDomainEventBus.js +65 -0
  124. package/app/modules/stickerPackModule/stickerDomainEventConsumerRuntime.js +208 -0
  125. package/app/modules/stickerPackModule/stickerMarketplaceDriftService.js +99 -0
  126. package/app/modules/stickerPackModule/stickerObjectStorageService.js +285 -0
  127. package/app/modules/stickerPackModule/stickerPackAiHelpService.js +14 -0
  128. package/app/modules/stickerPackModule/stickerPackCommandHandlers.js +1148 -0
  129. package/app/modules/stickerPackModule/stickerPackConfigRuntime.js +68 -0
  130. package/app/modules/stickerPackModule/stickerPackEngagementRepository.js +152 -0
  131. package/app/modules/stickerPackModule/stickerPackErrors.js +30 -0
  132. package/app/modules/stickerPackModule/stickerPackInteractionEventRepository.js +101 -0
  133. package/app/modules/stickerPackModule/stickerPackItemRepository.js +432 -0
  134. package/app/modules/stickerPackModule/stickerPackMarketplaceService.js +313 -0
  135. package/app/modules/stickerPackModule/stickerPackMessageService.js +268 -0
  136. package/app/modules/stickerPackModule/stickerPackRepository.js +450 -0
  137. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRepository.js +179 -0
  138. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRuntime.js +271 -0
  139. package/app/modules/stickerPackModule/stickerPackService.js +733 -0
  140. package/app/modules/stickerPackModule/stickerPackServiceRuntime.js +32 -0
  141. package/app/modules/stickerPackModule/stickerPackUtils.js +107 -0
  142. package/app/modules/stickerPackModule/stickerStorageService.js +559 -0
  143. package/app/modules/stickerPackModule/stickerWorkerPipelineRuntime.js +242 -0
  144. package/app/modules/stickerPackModule/stickerWorkerTaskQueueRepository.js +242 -0
  145. package/app/modules/systemMetricsModule/AGENT.md +193 -0
  146. package/app/modules/systemMetricsModule/commandConfig.json +344 -0
  147. package/app/modules/systemMetricsModule/pingCommand.js +399 -0
  148. package/app/modules/systemMetricsModule/systemMetricsAiHelpService.js +14 -0
  149. package/app/modules/systemMetricsModule/systemMetricsConfigRuntime.js +68 -0
  150. package/app/modules/tiktokModule/AGENT.md +196 -0
  151. package/app/modules/tiktokModule/commandConfig.json +366 -0
  152. package/app/modules/tiktokModule/tiktokAiHelpService.js +14 -0
  153. package/app/modules/tiktokModule/tiktokCommand.js +716 -0
  154. package/app/modules/tiktokModule/tiktokConfigRuntime.js +68 -0
  155. package/app/modules/userModule/AGENT.md +200 -0
  156. package/app/modules/userModule/commandConfig.json +386 -0
  157. package/app/modules/userModule/userAiHelpService.js +14 -0
  158. package/app/modules/userModule/userCommand.js +1155 -0
  159. package/app/modules/userModule/userConfigRuntime.js +68 -0
  160. package/app/modules/waifuPicsModule/AGENT.md +431 -0
  161. package/app/modules/waifuPicsModule/commandConfig.json +780 -0
  162. package/app/modules/waifuPicsModule/waifuPicsAiHelpService.js +14 -0
  163. package/app/modules/waifuPicsModule/waifuPicsCommand.js +586 -0
  164. package/app/modules/waifuPicsModule/waifuPicsConfigRuntime.js +68 -0
  165. package/app/observability/metrics.js +766 -0
  166. package/app/services/ai/aiHelpResponseCacheRepository.js +280 -0
  167. package/app/services/ai/aiLearningRepository.js +400 -0
  168. package/app/services/ai/commandConfigEnrichmentRepository.js +769 -0
  169. package/app/services/ai/commandConfigEnrichmentService.js +452 -0
  170. package/app/services/ai/commandConfigValidationService.js +443 -0
  171. package/app/services/ai/commandToolBuilderService.js +192 -0
  172. package/app/services/ai/conversationRouterService.js +516 -0
  173. package/app/services/ai/geminiService.js +115 -0
  174. package/app/services/ai/geminiService.test.js +87 -0
  175. package/app/services/ai/globalModuleAiHelpService.js +1412 -0
  176. package/app/services/ai/globalToolCallingService.js +203 -0
  177. package/app/services/ai/messageCommandExecutionService.js +391 -0
  178. package/app/services/ai/moduleAiHelpCoreService.js +1099 -0
  179. package/app/services/ai/moduleAiHelpWrapperFactory.js +65 -0
  180. package/app/services/ai/moduleCommandConfigRuntimeService.js +113 -0
  181. package/app/services/ai/moduleToolExecutorService.js +464 -0
  182. package/app/services/ai/moduleToolRegistryService.js +178 -0
  183. package/app/services/ai/toolCandidateSelectorService.js +781 -0
  184. package/app/services/auth/googleWebLinkService.js +80 -0
  185. package/app/services/auth/whatsappLoginLinkService.js +230 -0
  186. package/app/services/external/pokeApiService.js +398 -0
  187. package/app/services/group/groupMetadataService.js +311 -0
  188. package/app/services/infra/dbWriteQueue.js +874 -0
  189. package/app/services/infra/featureFlagService.js +131 -0
  190. package/app/services/infra/queueUtils.js +55 -0
  191. package/app/services/messaging/captchaService.js +491 -0
  192. package/app/services/messaging/messagePersistenceService.js +1 -0
  193. package/app/services/messaging/newsBroadcastService.js +347 -0
  194. package/app/services/sticker/stickerFocusService.js +347 -0
  195. package/app/services/sticker/stickerFocusService.test.js +43 -0
  196. package/app/store/aiPromptStore.js +38 -0
  197. package/app/store/conversationSessionStore.js +131 -0
  198. package/app/store/groupConfigStore.js +58 -0
  199. package/app/store/premiumUserStore.js +54 -0
  200. package/app/utils/antiLink/antiLinkModule.js +700 -0
  201. package/app/utils/http/getImageBufferModule.js +18 -0
  202. package/app/utils/json/jsonSanitizer.js +113 -0
  203. package/app/utils/json/jsonSanitizer.test.js +40 -0
  204. package/app/utils/systemMetrics/systemMetricsModule.js +88 -0
  205. package/app/workers/aiLearningWorker.js +605 -0
  206. package/app/workers/commandConfigEnrichmentWorker.js +242 -0
  207. package/database/index.js +2075 -0
  208. package/database/init.js +151 -0
  209. package/database/migrations/.gitkeep +0 -0
  210. package/database/migrations/20260307_d0_hardening_down.sql +64 -0
  211. package/database/migrations/20260307_d0_hardening_up.sql +79 -0
  212. package/database/migrations/20260307_d1_terms_acceptance_down.sql +11 -0
  213. package/database/migrations/20260307_d1_terms_acceptance_up.sql +37 -0
  214. package/database/migrations/20260307_d2_auth_hardening_down.sql +75 -0
  215. package/database/migrations/20260307_d2_auth_hardening_up.sql +100 -0
  216. package/database/migrations/20260314_d7_canonical_sender_down.sql +53 -0
  217. package/database/migrations/20260314_d7_canonical_sender_up.sql +114 -0
  218. package/database/migrations/20260406_d30_security_analytics_down.sql +95 -0
  219. package/database/migrations/20260406_d30_security_analytics_up.sql +292 -0
  220. package/database/migrations/20260407_d31_web_google_session_token_hardening_down.sql +2 -0
  221. package/database/migrations/20260407_d31_web_google_session_token_hardening_up.sql +17 -0
  222. package/database/migrations/20260408_d32_ai_help_response_cache_down.sql +1 -0
  223. package/database/migrations/20260408_d32_ai_help_response_cache_up.sql +22 -0
  224. package/database/migrations/20260409_d33_ai_learning_tables_down.sql +4 -0
  225. package/database/migrations/20260409_d33_ai_learning_tables_up.sql +52 -0
  226. package/database/migrations/20260410_d34_command_config_enrichment_down.sql +3 -0
  227. package/database/migrations/20260410_d34_command_config_enrichment_up.sql +48 -0
  228. package/database/schema.sql +1186 -0
  229. package/docker-compose.yml +104 -0
  230. package/docs/audits/stickerCatalogController-out-of-scope.md +103 -0
  231. package/docs/audits/stickerCatalogController-symbols.md +58 -0
  232. package/docs/compliance/acceptable-use-policy-2026-03-07.md +35 -0
  233. package/docs/compliance/dpa-b2b-standard-2026-03-07.md +80 -0
  234. package/docs/compliance/monthly-compliance-checklist-2026-03-07.md +88 -0
  235. package/docs/compliance/notice-and-takedown-policy-2026-03-07.md +34 -0
  236. package/docs/compliance/privacy-policy-2026-03-07.md +75 -0
  237. package/docs/compliance/subprocessors-inventory-2026-03-07.md +16 -0
  238. package/docs/database/production-db-evolution-runbook-2026q1.md +365 -0
  239. package/docs/security/dsar-lgpd-runbook-2026-03-07.md +86 -0
  240. package/docs/security/incident-response-lgpd-anpd-runbook-2026-03-07.md +77 -0
  241. package/docs/security/network-hardening-runbook-2026-03-07.md +137 -0
  242. package/docs/seo/omnizap-seo-playbook-br-2026-02-28.md +238 -0
  243. package/docs/seo/satellite-page-template.md +116 -0
  244. package/docs/seo/satellite-pages-phase1.json +364 -0
  245. package/docs/wiki/Home.md +120 -0
  246. package/docs/wiki/pair-extraordinaire-2026-03-08.md +3 -0
  247. package/docs/wiki/recent-changes-2026-03-08.md +47 -0
  248. package/ecosystem.prod.config.cjs +135 -0
  249. package/eslint.config.js +89 -0
  250. package/index.js +488 -0
  251. package/ml/clip_classifier/Dockerfile +18 -0
  252. package/ml/clip_classifier/README.md +118 -0
  253. package/ml/clip_classifier/adaptive_scoring.py +40 -0
  254. package/ml/clip_classifier/classifier.py +654 -0
  255. package/ml/clip_classifier/embedding_store.py +481 -0
  256. package/ml/clip_classifier/env_loader.py +15 -0
  257. package/ml/clip_classifier/llm_label_expander.py +144 -0
  258. package/ml/clip_classifier/main.py +213 -0
  259. package/ml/clip_classifier/requirements.txt +10 -0
  260. package/ml/clip_classifier/similarity_engine.py +74 -0
  261. package/new-logo.png +0 -0
  262. package/observability/alert-rules.yml +60 -0
  263. package/observability/grafana/dashboards/omnizap-mysql.json +136 -0
  264. package/observability/grafana/dashboards/omnizap-overview.json +170 -0
  265. package/observability/grafana/provisioning/dashboards/dashboards.yml +11 -0
  266. package/observability/grafana/provisioning/datasources/datasources.yml +15 -0
  267. package/observability/loki-config.yml +38 -0
  268. package/observability/mysql-setup.sql +46 -0
  269. package/observability/prometheus.yml +35 -0
  270. package/observability/promtail-config.yml +84 -0
  271. package/observability/sticker-catalog-slo.md +83 -0
  272. package/observability/sticker-scale-hardening-rollout.md +128 -0
  273. package/package.json +144 -0
  274. package/public/apple-touch-icon.png +0 -0
  275. package/public/assets/css/commands-react.input.css +71 -0
  276. package/public/assets/css/create-pack-react.input.css +31 -0
  277. package/public/assets/css/home-react.input.css +106 -0
  278. package/public/assets/css/login-react.input.css +58 -0
  279. package/public/assets/css/stickers-react.input.css +18 -0
  280. package/public/assets/css/terms-react.input.css +115 -0
  281. package/public/assets/css/user-react.input.css +57 -0
  282. package/public/assets/images/brand-icon-192.png +0 -0
  283. package/public/assets/images/brand-logo-128.webp +0 -0
  284. package/public/assets/images/hero-banner-1280.jpg +0 -0
  285. package/public/comandos/commands-catalog.json +4517 -0
  286. package/public/css/api-docs.css +161 -0
  287. package/public/css/stickers-admin.css +1288 -0
  288. package/public/css/styles.css +679 -0
  289. package/public/css/systemadm/admin.css +474 -0
  290. package/public/css/systemadm/base.css +73 -0
  291. package/public/css/systemadm/components.css +662 -0
  292. package/public/css/systemadm/layout.css +229 -0
  293. package/public/css/systemadm/tokens.css +56 -0
  294. package/public/favicon-16x16.png +0 -0
  295. package/public/favicon-32x32.png +0 -0
  296. package/public/favicon.ico +0 -0
  297. package/public/js/apps/apiDocsApp.js +235 -0
  298. package/public/js/apps/commandsReactApp.js +528 -0
  299. package/public/js/apps/createPackApp.js +1646 -0
  300. package/public/js/apps/homeReactApp.js +942 -0
  301. package/public/js/apps/loginReactApp.js +496 -0
  302. package/public/js/apps/stickersAdminApp.js +1753 -0
  303. package/public/js/apps/stickersApp.js +3797 -0
  304. package/public/js/apps/termsReactApp.js +528 -0
  305. package/public/js/apps/userApp.js +2540 -0
  306. package/public/js/apps/userProfile/actions.js +66 -0
  307. package/public/js/apps/userReactApp.js +547 -0
  308. package/public/js/catalog.js +950 -0
  309. package/public/pages/api-docs.html +40 -0
  310. package/public/pages/aup.html +158 -0
  311. package/public/pages/comandos.html +41 -0
  312. package/public/pages/dpa.html +227 -0
  313. package/public/pages/home.html +45 -0
  314. package/public/pages/licenca.html +182 -0
  315. package/public/pages/login.html +40 -0
  316. package/public/pages/notice-and-takedown.html +234 -0
  317. package/public/pages/politica-de-privacidade.html +251 -0
  318. package/public/pages/seo-bot-whatsapp-para-grupo.html +350 -0
  319. package/public/pages/seo-bot-whatsapp-sem-programar.html +350 -0
  320. package/public/pages/seo-como-automatizar-avisos-no-whatsapp.html +350 -0
  321. package/public/pages/seo-como-criar-comandos-whatsapp.html +350 -0
  322. package/public/pages/seo-como-evitar-spam-no-whatsapp.html +350 -0
  323. package/public/pages/seo-como-moderar-grupo-whatsapp.html +350 -0
  324. package/public/pages/seo-como-organizar-comunidade-whatsapp.html +350 -0
  325. package/public/pages/seo-melhor-bot-whatsapp-para-grupos.html +350 -0
  326. package/public/pages/stickers-admin.html +31 -0
  327. package/public/pages/stickers-create.html +41 -0
  328. package/public/pages/stickers.html +45 -0
  329. package/public/pages/suboperadores.html +237 -0
  330. package/public/pages/termos-de-uso-texto-integral.html +241 -0
  331. package/public/pages/termos-de-uso.html +41 -0
  332. package/public/pages/user-password-reset.html +32 -0
  333. package/public/pages/user-systemadm.html +508 -0
  334. package/public/pages/user.html +39 -0
  335. package/public/robots.txt +9 -0
  336. package/public/site.webmanifest +24 -0
  337. package/public/sitemap.xml +98 -0
  338. package/schemas/command-config.schema.json +582 -0
  339. package/scripts/baileys-compat-smoke.mjs +12 -0
  340. package/scripts/cache-bust.mjs +142 -0
  341. package/scripts/deploy.sh +916 -0
  342. package/scripts/email-broadcast-terms-update.mjs +170 -0
  343. package/scripts/enrich-command-discovery-fields.mjs +286 -0
  344. package/scripts/generate-command-config-schema.mjs +273 -0
  345. package/scripts/generate-commands-catalog.mjs +308 -0
  346. package/scripts/generate-module-agents.mjs +631 -0
  347. package/scripts/generate-seo-satellite-pages.mjs +400 -0
  348. package/scripts/github-deploy-notify.mjs +174 -0
  349. package/scripts/github-release-notify.mjs +219 -0
  350. package/scripts/release.sh +599 -0
  351. package/scripts/run-codeql-local.sh +116 -0
  352. package/scripts/run-prettier-all.mjs +25 -0
  353. package/scripts/security-smoketest.mjs +581 -0
  354. package/scripts/sticker-catalog-loadtest.mjs +210 -0
  355. package/scripts/sticker-worker-task.mjs +119 -0
  356. package/scripts/sync-readme-snapshot.mjs +133 -0
  357. package/scripts/validate-command-config-schema.mjs +130 -0
  358. package/scripts/validate-command-configs.mjs +15 -0
  359. package/scripts/wiki-sync.sh +191 -0
  360. package/server/auth/googleWebAuth/googleWebAuthRuntime.js +62 -0
  361. package/server/auth/googleWebAuth/googleWebAuthService.js +807 -0
  362. package/server/auth/jwt/webJwtService.js +147 -0
  363. package/server/auth/stickerCatalogAuthContext.js +165 -0
  364. package/server/auth/termsAcceptance/termsAcceptanceHandler.js +189 -0
  365. package/server/auth/userPassword/index.js +14 -0
  366. package/server/auth/userPassword/userPasswordAuthService.js +422 -0
  367. package/server/auth/userPassword/userPasswordCrypto.js +199 -0
  368. package/server/auth/userPassword/userPasswordCrypto.test.js +76 -0
  369. package/server/auth/userPassword/userPasswordRecoveryService.js +728 -0
  370. package/server/auth/validation/authSchemas.js +236 -0
  371. package/server/auth/webAccount/webAccountHandlers.js +1434 -0
  372. package/server/controllers/admin/adminBanService.js +138 -0
  373. package/server/controllers/admin/adminPanelHandlers.js +2083 -0
  374. package/server/controllers/admin/stickerCatalogAdminContext.js +17 -0
  375. package/server/controllers/admin/systemAdminController.js +201 -0
  376. package/server/controllers/email/emailAutomationController.js +239 -0
  377. package/server/controllers/metricsController.js +21 -0
  378. package/server/controllers/seo/stickerCatalogSeoContext.js +514 -0
  379. package/server/controllers/sticker/nonCatalogHandlers.js +303 -0
  380. package/server/controllers/sticker/stickerCatalogController.js +4700 -0
  381. package/server/controllers/system/contactController.js +115 -0
  382. package/server/controllers/system/githubController.js +137 -0
  383. package/server/controllers/system/stickerCatalogSystemContext.js +758 -0
  384. package/server/controllers/system/storageController.js +154 -0
  385. package/server/controllers/system/systemController.js +135 -0
  386. package/server/controllers/system/systemMetricsController.js +156 -0
  387. package/server/controllers/system/visitController.js +90 -0
  388. package/server/controllers/userController.js +145 -0
  389. package/server/email/emailAutomationRuntime.js +225 -0
  390. package/server/email/emailAutomationService.js +125 -0
  391. package/server/email/emailOutboxRepository.js +282 -0
  392. package/server/email/emailTemplateService.js +480 -0
  393. package/server/email/emailTransportService.js +156 -0
  394. package/server/http/clientIp.js +95 -0
  395. package/server/http/httpRequestUtils.js +262 -0
  396. package/server/http/httpRequestUtils.test.js +80 -0
  397. package/server/http/httpServer.js +180 -0
  398. package/server/http/requestContext.js +20 -0
  399. package/server/http/siteRoutingUtils.js +87 -0
  400. package/server/index.js +1 -0
  401. package/server/middleware/cachePolicy.js +26 -0
  402. package/server/middleware/cachePolicyHelpers.js +1 -0
  403. package/server/middleware/endpointRateLimit.js +181 -0
  404. package/server/middleware/rateLimit.js +70 -0
  405. package/server/middleware/requireAdminAuth.js +48 -0
  406. package/server/middleware/securityHeaders.js +97 -0
  407. package/server/routes/admin/systemAdminRouter.js +64 -0
  408. package/server/routes/email/emailAutomationRouter.js +46 -0
  409. package/server/routes/health/healthRouter.js +41 -0
  410. package/server/routes/indexRouter.js +234 -0
  411. package/server/routes/metrics/metricsRouter.js +58 -0
  412. package/server/routes/static/staticPageRouter.js +134 -0
  413. package/server/routes/sticker/catalogHandlers/catalogAdminHttp.js +105 -0
  414. package/server/routes/sticker/catalogHandlers/catalogAuthHttp.js +77 -0
  415. package/server/routes/sticker/catalogHandlers/catalogPublicHttp.js +120 -0
  416. package/server/routes/sticker/catalogHandlers/catalogUploadHttp.js +83 -0
  417. package/server/routes/sticker/catalogRouter.js +77 -0
  418. package/server/routes/sticker/stickerApiRouter.js +84 -0
  419. package/server/routes/sticker/stickerDataRouter.js +145 -0
  420. package/server/routes/sticker/stickerSiteRouter.js +43 -0
  421. package/server/routes/user/userApiPaths.js +66 -0
  422. package/server/routes/user/userRouter.js +65 -0
  423. package/server/utils/safePath.js +26 -0
  424. package/utils/logger/loggerModule.js +35 -0
  425. package/vite.config.mjs +38 -0
@@ -0,0 +1,522 @@
1
+ import test from 'node:test';
2
+ import assert from 'node:assert/strict';
3
+
4
+ import { createPreProcessingMiddlewares } from './preProcessingMiddlewares.js';
5
+ import { createConversationMiddleware } from './conversationMiddleware.js';
6
+ import { createCommandMiddleware } from './commandMiddleware.js';
7
+ import { createPostProcessingMiddleware } from './postProcessingMiddleware.js';
8
+
9
+ const createBaseContext = (overrides = {}) => ({
10
+ sock: {},
11
+ messageInfo: { message: { conversation: 'oi' }, key: { id: 'msg-1' } },
12
+ key: { id: 'msg-1' },
13
+ remoteJid: '120363111111111111@g.us',
14
+ isGroupMessage: true,
15
+ extractedText: '/menu',
16
+ senderJid: '5511999999999@s.whatsapp.net',
17
+ senderIdentity: '5511999999999@s.whatsapp.net',
18
+ senderName: 'Tester',
19
+ expirationMessage: 0,
20
+ botJid: '5511888888888@s.whatsapp.net',
21
+ botJidCandidates: ['5511888888888@s.whatsapp.net'],
22
+ isMessageFromBot: false,
23
+ commandPrefix: '/',
24
+ groupConfig: null,
25
+ groupConfigLoaded: false,
26
+ mediaEntries: [],
27
+ upsertType: 'notify',
28
+ isNotifyUpsert: true,
29
+ isCommandMessage: false,
30
+ hasCommandPrefix: false,
31
+ analysisPayload: {
32
+ processingResult: 'processed',
33
+ errorCode: null,
34
+ metadata: {},
35
+ isCommand: false,
36
+ commandPrefix: '/',
37
+ commandName: null,
38
+ commandArgsCount: 0,
39
+ commandKnown: null,
40
+ },
41
+ pipelineStopped: false,
42
+ memo: Object.create(null),
43
+ ...overrides,
44
+ });
45
+
46
+ const createStopSpy = () => {
47
+ const calls = [];
48
+ const stopMessagePipeline = (ctx, processingResult = '', metadataPatch = null) => {
49
+ calls.push({ ctx, processingResult, metadataPatch });
50
+ if (processingResult) {
51
+ ctx.analysisPayload.processingResult = processingResult;
52
+ }
53
+ if (metadataPatch) {
54
+ ctx.analysisPayload.metadata = {
55
+ ...ctx.analysisPayload.metadata,
56
+ ...metadataPatch,
57
+ };
58
+ }
59
+ ctx.pipelineStopped = true;
60
+ return { stop: true };
61
+ };
62
+
63
+ return { stopMessagePipeline, calls };
64
+ };
65
+
66
+ test('pre-processing ignora mensagem nao processavel', async () => {
67
+ const stopSpy = createStopSpy();
68
+ const middlewares = createPreProcessingMiddlewares({
69
+ executeQuery: async () => [],
70
+ TABLES: { RPG_PLAYER: 'rpg_player' },
71
+ isStatusJid: () => false,
72
+ stopMessagePipeline: stopSpy.stopMessagePipeline,
73
+ handleAntiLink: async () => false,
74
+ ensureCommandPrefixForContext: async () => '/',
75
+ resolveCaptchaByMessage: async () => {},
76
+ maybeHandleStartLoginMessage: async () => false,
77
+ mergeAnalysisMetadata: () => {},
78
+ ensureGroupConfigForContext: async () => ({}),
79
+ resolveStickerFocusState: () => ({ enabled: false }),
80
+ resolveStickerFocusMessageClassification: () => ({ isThrottleCandidate: false }),
81
+ isUserAdmin: async () => false,
82
+ canSendMessageInStickerFocus: () => ({ allowed: true, remainingMs: 0 }),
83
+ registerMessageUsageInStickerFocus: () => {},
84
+ shouldSendStickerFocusWarning: () => false,
85
+ sendReply: async () => {},
86
+ formatStickerFocusRuleLabel: () => '',
87
+ formatRemainingMinutesLabel: () => 1,
88
+ logger: { warn: () => {} },
89
+ });
90
+
91
+ const ctx = createBaseContext({ remoteJid: 'status@broadcast' });
92
+ const result = await middlewares.ignoreUnprocessableMessageMiddleware(ctx);
93
+
94
+ assert.deepEqual(result, { stop: true });
95
+ assert.equal(stopSpy.calls.length, 1);
96
+ assert.equal(stopSpy.calls[0].processingResult, 'ignored_unprocessable');
97
+ assert.equal(ctx.analysisPayload.metadata.ignored_reason, 'status_broadcast');
98
+ });
99
+
100
+ test('pre-processing bloqueia por anti-link', async () => {
101
+ const stopSpy = createStopSpy();
102
+ let prefixResolved = false;
103
+
104
+ const middlewares = createPreProcessingMiddlewares({
105
+ executeQuery: async () => [],
106
+ TABLES: { RPG_PLAYER: 'rpg_player' },
107
+ isStatusJid: () => false,
108
+ stopMessagePipeline: stopSpy.stopMessagePipeline,
109
+ handleAntiLink: async () => true,
110
+ ensureCommandPrefixForContext: async () => {
111
+ prefixResolved = true;
112
+ return '/';
113
+ },
114
+ resolveCaptchaByMessage: async () => {},
115
+ maybeHandleStartLoginMessage: async () => false,
116
+ mergeAnalysisMetadata: () => {},
117
+ ensureGroupConfigForContext: async () => ({}),
118
+ resolveStickerFocusState: () => ({ enabled: false }),
119
+ resolveStickerFocusMessageClassification: () => ({ isThrottleCandidate: false }),
120
+ isUserAdmin: async () => false,
121
+ canSendMessageInStickerFocus: () => ({ allowed: true, remainingMs: 0 }),
122
+ registerMessageUsageInStickerFocus: () => {},
123
+ shouldSendStickerFocusWarning: () => false,
124
+ sendReply: async () => {},
125
+ formatStickerFocusRuleLabel: () => '',
126
+ formatRemainingMinutesLabel: () => 1,
127
+ logger: { warn: () => {} },
128
+ });
129
+
130
+ const result = await middlewares.applyGroupPolicyMiddleware(createBaseContext());
131
+
132
+ assert.deepEqual(result, { stop: true });
133
+ assert.equal(stopSpy.calls[0].processingResult, 'blocked_antilink');
134
+ assert.equal(prefixResolved, false);
135
+ });
136
+
137
+ test('pre-processing trata trigger de iniciar login', async () => {
138
+ const stopSpy = createStopSpy();
139
+ const middlewares = createPreProcessingMiddlewares({
140
+ executeQuery: async () => [],
141
+ TABLES: { RPG_PLAYER: 'rpg_player' },
142
+ isStatusJid: () => false,
143
+ stopMessagePipeline: stopSpy.stopMessagePipeline,
144
+ handleAntiLink: async () => false,
145
+ ensureCommandPrefixForContext: async () => '/',
146
+ resolveCaptchaByMessage: async () => {},
147
+ maybeHandleStartLoginMessage: async () => true,
148
+ mergeAnalysisMetadata: () => {},
149
+ ensureGroupConfigForContext: async () => ({}),
150
+ resolveStickerFocusState: () => ({ enabled: false }),
151
+ resolveStickerFocusMessageClassification: () => ({ isThrottleCandidate: false }),
152
+ isUserAdmin: async () => false,
153
+ canSendMessageInStickerFocus: () => ({ allowed: true, remainingMs: 0 }),
154
+ registerMessageUsageInStickerFocus: () => {},
155
+ shouldSendStickerFocusWarning: () => false,
156
+ sendReply: async () => {},
157
+ formatStickerFocusRuleLabel: () => '',
158
+ formatRemainingMinutesLabel: () => 1,
159
+ logger: { warn: () => {} },
160
+ });
161
+
162
+ const result = await middlewares.handleStartLoginTriggerMiddleware(createBaseContext());
163
+
164
+ assert.deepEqual(result, { stop: true });
165
+ assert.equal(stopSpy.calls[0].processingResult, 'handled_start_login');
166
+ assert.equal(stopSpy.calls[0].metadataPatch.flow, 'whatsapp_google_login');
167
+ });
168
+
169
+ test('conversation middleware responde e interrompe pipeline', async () => {
170
+ const stopSpy = createStopSpy();
171
+ const replies = [];
172
+
173
+ const middleware = createConversationMiddleware({
174
+ logger: { warn: () => {} },
175
+ isUserAdmin: async () => false,
176
+ isAdminSenderAsync: async () => false,
177
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
178
+ isWhatsAppUserLinkedToGoogleWebAccount: async () => true,
179
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: true,
180
+ ensureUserHasGoogleWebLoginForCommand: async () => ({ allowed: true }),
181
+ executeMessageCommandRoute: async () => ({ commandRoute: 'menu', commandResult: { ok: true } }),
182
+ isAdminCommand: () => false,
183
+ runCommand: async () => ({ ok: true }),
184
+ sendReply: async (...args) => {
185
+ replies.push(args);
186
+ },
187
+ routeConversationMessage: async () => ({
188
+ handled: true,
189
+ text: 'Resposta IA',
190
+ reason: 'intent_match',
191
+ metadata: {
192
+ trigger_kind: 'mention',
193
+ intent_type: 'help',
194
+ module_key: 'global',
195
+ command_name: 'menu',
196
+ suppress_reply: false,
197
+ },
198
+ }),
199
+ stopMessagePipeline: stopSpy.stopMessagePipeline,
200
+ });
201
+
202
+ const result = await middleware(createBaseContext({ isCommandMessage: false, isNotifyUpsert: true, isMessageFromBot: false }));
203
+
204
+ assert.deepEqual(result, { stop: true });
205
+ assert.equal(replies.length, 1);
206
+ assert.equal(stopSpy.calls.length, 1);
207
+ assert.equal(stopSpy.calls[0].processingResult, 'conversation_reply');
208
+ });
209
+
210
+ test('conversation middleware resolve hasGoogleLogin=true quando usuario esta vinculado', async () => {
211
+ const googleLinkCalls = [];
212
+ let capturedToolSecurity = null;
213
+
214
+ const middleware = createConversationMiddleware({
215
+ logger: { warn: () => {} },
216
+ isUserAdmin: async () => false,
217
+ isAdminSenderAsync: async () => false,
218
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
219
+ isWhatsAppUserLinkedToGoogleWebAccount: async (payload) => {
220
+ googleLinkCalls.push(payload);
221
+ return true;
222
+ },
223
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: true,
224
+ ensureUserHasGoogleWebLoginForCommand: async () => ({ allowed: true }),
225
+ executeMessageCommandRoute: async () => ({ commandRoute: 'menu', commandResult: { ok: true } }),
226
+ isAdminCommand: () => false,
227
+ runCommand: async () => ({ ok: true }),
228
+ sendReply: async () => {},
229
+ routeConversationMessage: async ({ resolveToolSecurityContext }) => {
230
+ capturedToolSecurity = await resolveToolSecurityContext();
231
+ return { handled: false };
232
+ },
233
+ stopMessagePipeline: () => ({ stop: true }),
234
+ });
235
+
236
+ const result = await middleware(createBaseContext({ isCommandMessage: false, isNotifyUpsert: true, isMessageFromBot: false }));
237
+
238
+ assert.equal(result, null);
239
+ assert.deepEqual(googleLinkCalls, [{ ownerJid: '5511999999999@s.whatsapp.net' }]);
240
+ assert.equal(capturedToolSecurity?.hasGoogleLogin, true);
241
+ });
242
+
243
+ test('conversation middleware resolve hasGoogleLogin=false quando usuario nao esta vinculado', async () => {
244
+ const googleLinkCalls = [];
245
+ let capturedToolSecurity = null;
246
+
247
+ const middleware = createConversationMiddleware({
248
+ logger: { warn: () => {} },
249
+ isUserAdmin: async () => false,
250
+ isAdminSenderAsync: async () => false,
251
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
252
+ isWhatsAppUserLinkedToGoogleWebAccount: async (payload) => {
253
+ googleLinkCalls.push(payload);
254
+ return false;
255
+ },
256
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: true,
257
+ ensureUserHasGoogleWebLoginForCommand: async () => ({ allowed: true }),
258
+ executeMessageCommandRoute: async () => ({ commandRoute: 'menu', commandResult: { ok: true } }),
259
+ isAdminCommand: () => false,
260
+ runCommand: async () => ({ ok: true }),
261
+ sendReply: async () => {},
262
+ routeConversationMessage: async ({ resolveToolSecurityContext }) => {
263
+ capturedToolSecurity = await resolveToolSecurityContext();
264
+ return { handled: false };
265
+ },
266
+ stopMessagePipeline: () => ({ stop: true }),
267
+ });
268
+
269
+ const result = await middleware(createBaseContext({ isCommandMessage: false, isNotifyUpsert: true, isMessageFromBot: false }));
270
+
271
+ assert.equal(result, null);
272
+ assert.deepEqual(googleLinkCalls, [{ ownerJid: '5511999999999@s.whatsapp.net' }]);
273
+ assert.equal(capturedToolSecurity?.hasGoogleLogin, false);
274
+ });
275
+
276
+ test('conversation middleware mantem hasGoogleLogin indefinido quando consulta de vinculo falha', async () => {
277
+ const warnCalls = [];
278
+ const googleLinkCalls = [];
279
+ let capturedToolSecurity = null;
280
+
281
+ const middleware = createConversationMiddleware({
282
+ logger: {
283
+ warn: (...args) => {
284
+ warnCalls.push(args);
285
+ },
286
+ },
287
+ isUserAdmin: async () => false,
288
+ isAdminSenderAsync: async () => false,
289
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
290
+ isWhatsAppUserLinkedToGoogleWebAccount: async (payload) => {
291
+ googleLinkCalls.push(payload);
292
+ throw new Error('lookup failed');
293
+ },
294
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: true,
295
+ ensureUserHasGoogleWebLoginForCommand: async () => ({ allowed: true }),
296
+ executeMessageCommandRoute: async () => ({ commandRoute: 'menu', commandResult: { ok: true } }),
297
+ isAdminCommand: () => false,
298
+ runCommand: async () => ({ ok: true }),
299
+ sendReply: async () => {},
300
+ routeConversationMessage: async ({ resolveToolSecurityContext }) => {
301
+ capturedToolSecurity = await resolveToolSecurityContext();
302
+ return { handled: false };
303
+ },
304
+ stopMessagePipeline: () => ({ stop: true }),
305
+ });
306
+
307
+ const result = await middleware(createBaseContext({ isCommandMessage: false, isNotifyUpsert: true, isMessageFromBot: false }));
308
+
309
+ assert.equal(result, null);
310
+ assert.deepEqual(googleLinkCalls, [{ ownerJid: '5511999999999@s.whatsapp.net' }]);
311
+ assert.equal(capturedToolSecurity?.hasGoogleLogin, undefined);
312
+ assert.equal(warnCalls.length, 1);
313
+ assert.equal(warnCalls[0][1]?.action, 'tool_security_google_login_check_failed');
314
+ });
315
+
316
+ test('conversation middleware reaproveita contexto de seguranca e evita lookup de login google duplicado', async () => {
317
+ let resolveHasGoogleLoginCalls = 0;
318
+ let ensureAuthCalls = 0;
319
+ let knownHasGoogleLoginInEnsure;
320
+ let toolSecurityReadCount = 0;
321
+
322
+ const middleware = createConversationMiddleware({
323
+ logger: { warn: () => {} },
324
+ resolveSenderAdminForContext: async () => false,
325
+ resolveSenderOwnerForContext: async () => false,
326
+ resolveHasGoogleLoginForContext: async () => {
327
+ resolveHasGoogleLoginCalls += 1;
328
+ return false;
329
+ },
330
+ isUserAdmin: async () => false,
331
+ isAdminSenderAsync: async () => false,
332
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
333
+ isWhatsAppUserLinkedToGoogleWebAccount: async () => {
334
+ throw new Error('fallback should not be used');
335
+ },
336
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: true,
337
+ ensureUserHasGoogleWebLoginForCommand: async ({ knownHasGoogleLogin }) => {
338
+ ensureAuthCalls += 1;
339
+ knownHasGoogleLoginInEnsure = knownHasGoogleLogin;
340
+ return { allowed: true };
341
+ },
342
+ executeMessageCommandRoute: async () => ({ commandRoute: 'menu', commandResult: { ok: true } }),
343
+ isAdminCommand: () => false,
344
+ runCommand: async () => ({ ok: true }),
345
+ sendReply: async () => {},
346
+ routeConversationMessage: async ({ resolveToolSecurityContext, toolCommandExecutor }) => {
347
+ await resolveToolSecurityContext();
348
+ toolSecurityReadCount += 1;
349
+ await resolveToolSecurityContext();
350
+ toolSecurityReadCount += 1;
351
+ await toolCommandExecutor({ commandName: 'menu', args: [], text: '' });
352
+ return { handled: false };
353
+ },
354
+ stopMessagePipeline: () => ({ stop: true }),
355
+ });
356
+
357
+ const result = await middleware(createBaseContext({ isCommandMessage: false, isNotifyUpsert: true, isMessageFromBot: false }));
358
+
359
+ assert.equal(result, null);
360
+ assert.equal(toolSecurityReadCount, 2);
361
+ assert.equal(resolveHasGoogleLoginCalls, 1);
362
+ assert.equal(ensureAuthCalls, 1);
363
+ assert.equal(knownHasGoogleLoginInEnsure, false);
364
+ });
365
+
366
+ test('command middleware ignora comando duplicado', async () => {
367
+ const stopSpy = createStopSpy();
368
+ let markCalled = false;
369
+
370
+ const middleware = createCommandMiddleware({
371
+ isAdminCommand: () => false,
372
+ isKnownNonAdminCommand: () => true,
373
+ isDuplicateCommandExecution: () => true,
374
+ markCommandExecution: () => {
375
+ markCalled = true;
376
+ },
377
+ MESSAGE_COMMAND_DEDUPE_TTL_MS: 120000,
378
+ stopMessagePipeline: stopSpy.stopMessagePipeline,
379
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: true,
380
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
381
+ ensureUserHasGoogleWebLoginForCommand: async () => ({ allowed: true }),
382
+ SITE_LOGIN_URL: 'https://example.com/login',
383
+ COMMAND_REACT_EMOJI: '🤖',
384
+ sendAndStore: async () => {},
385
+ executeMessageCommandRoute: async () => ({ commandRoute: 'menu', commandResult: { ok: true } }),
386
+ runCommand: async () => ({ ok: true }),
387
+ sendReply: async () => {},
388
+ registerGlobalHelpCommandExecution: async () => {},
389
+ logger: { warn: () => {} },
390
+ normalizeAnalysisErrorCode: () => 'normalized_error',
391
+ isUserAdmin: async () => false,
392
+ buildCommandErrorHelpText: async () => '',
393
+ mergeAnalysisMetadata: () => {},
394
+ });
395
+
396
+ const ctx = createBaseContext({ isCommandMessage: true, extractedText: '/menu' });
397
+ const result = await middleware(ctx);
398
+
399
+ assert.deepEqual(result, { stop: true });
400
+ assert.equal(markCalled, false);
401
+ assert.equal(stopSpy.calls[0].processingResult, 'duplicate_command_ignored');
402
+ });
403
+
404
+ test('command middleware bloqueia comando sem autenticacao google', async () => {
405
+ const stopSpy = createStopSpy();
406
+
407
+ const middleware = createCommandMiddleware({
408
+ isAdminCommand: () => false,
409
+ isKnownNonAdminCommand: () => true,
410
+ isDuplicateCommandExecution: () => false,
411
+ markCommandExecution: () => {},
412
+ MESSAGE_COMMAND_DEDUPE_TTL_MS: 120000,
413
+ stopMessagePipeline: stopSpy.stopMessagePipeline,
414
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: true,
415
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
416
+ ensureUserHasGoogleWebLoginForCommand: async () => ({ allowed: false, loginUrl: 'https://example.com/login' }),
417
+ SITE_LOGIN_URL: 'https://example.com/login-fallback',
418
+ COMMAND_REACT_EMOJI: '🤖',
419
+ sendAndStore: async () => {},
420
+ executeMessageCommandRoute: async () => ({ commandRoute: 'menu', commandResult: { ok: true } }),
421
+ runCommand: async () => ({ ok: true }),
422
+ sendReply: async () => {},
423
+ registerGlobalHelpCommandExecution: async () => {},
424
+ logger: { warn: () => {} },
425
+ normalizeAnalysisErrorCode: () => 'normalized_error',
426
+ isUserAdmin: async () => false,
427
+ buildCommandErrorHelpText: async () => '',
428
+ mergeAnalysisMetadata: () => {},
429
+ });
430
+
431
+ const result = await middleware(createBaseContext({ isCommandMessage: true, extractedText: '/menu' }));
432
+
433
+ assert.deepEqual(result, { stop: true });
434
+ assert.equal(stopSpy.calls[0].processingResult, 'auth_required');
435
+ assert.equal(stopSpy.calls[0].metadataPatch.auth_required_for_command, 'menu');
436
+ assert.equal(stopSpy.calls[0].metadataPatch.auth_login_url, 'https://example.com/login');
437
+ });
438
+
439
+ test('command middleware marca erro e envia ajuda quando comando falha', async () => {
440
+ const sentReplies = [];
441
+ const runLabels = [];
442
+
443
+ const middleware = createCommandMiddleware({
444
+ isAdminCommand: () => false,
445
+ isKnownNonAdminCommand: () => true,
446
+ isDuplicateCommandExecution: () => false,
447
+ markCommandExecution: () => {},
448
+ MESSAGE_COMMAND_DEDUPE_TTL_MS: 120000,
449
+ stopMessagePipeline: () => ({ stop: true }),
450
+ WHATSAPP_COMMAND_REQUIRES_GOOGLE_LOGIN: false,
451
+ resolveCanonicalSenderJidForContext: async () => '5511999999999@s.whatsapp.net',
452
+ ensureUserHasGoogleWebLoginForCommand: async () => ({ allowed: true }),
453
+ SITE_LOGIN_URL: 'https://example.com/login',
454
+ COMMAND_REACT_EMOJI: '',
455
+ sendAndStore: async () => {},
456
+ executeMessageCommandRoute: async () => ({
457
+ commandRoute: 'menu',
458
+ commandResult: { ok: false, error: { code: 'test_error' } },
459
+ }),
460
+ runCommand: async (label, handler) => {
461
+ runLabels.push(label);
462
+ await handler();
463
+ return { ok: true };
464
+ },
465
+ sendReply: async (...args) => {
466
+ sentReplies.push(args);
467
+ },
468
+ registerGlobalHelpCommandExecution: async () => {},
469
+ logger: { warn: () => {} },
470
+ normalizeAnalysisErrorCode: () => 'test_error_code',
471
+ isUserAdmin: async () => false,
472
+ buildCommandErrorHelpText: async () => 'Use /menu para ajuda.',
473
+ mergeAnalysisMetadata: (analysis, patch) => {
474
+ analysis.metadata = { ...analysis.metadata, ...patch };
475
+ },
476
+ });
477
+
478
+ const ctx = createBaseContext({ isCommandMessage: true, extractedText: '/menu' });
479
+ await middleware(ctx);
480
+
481
+ assert.equal(ctx.analysisPayload.processingResult, 'command_error');
482
+ assert.equal(ctx.analysisPayload.errorCode, 'test_error_code');
483
+ assert.deepEqual(runLabels, ['command-error-help']);
484
+ assert.equal(sentReplies.length, 1);
485
+ });
486
+
487
+ test('post-processing aciona autosticker quando midia suportada', async () => {
488
+ const runLabels = [];
489
+
490
+ const middleware = createPostProcessingMiddleware({
491
+ runCommand: async (label, handler) => {
492
+ runLabels.push(label);
493
+ await handler();
494
+ return { ok: true };
495
+ },
496
+ maybeCaptureIncomingSticker: async () => {},
497
+ extractSupportedStickerMediaDetails: () => ({ mediaType: 'image' }),
498
+ ensureGroupConfigForContext: async () => ({ autoStickerEnabled: true }),
499
+ mergeAnalysisMetadata: (analysis, patch) => {
500
+ analysis.metadata = { ...analysis.metadata, ...patch };
501
+ },
502
+ processSticker: async () => {},
503
+ normalizeAnalysisErrorCode: () => 'sticker_error',
504
+ });
505
+
506
+ const ctx = createBaseContext({
507
+ isGroupMessage: true,
508
+ isCommandMessage: false,
509
+ isMessageFromBot: false,
510
+ analysisPayload: {
511
+ processingResult: 'processed',
512
+ errorCode: null,
513
+ metadata: {},
514
+ },
515
+ });
516
+
517
+ await middleware(ctx);
518
+
519
+ assert.deepEqual(runLabels, ['pack-capture', 'autosticker']);
520
+ assert.equal(ctx.analysisPayload.processingResult, 'autosticker_triggered');
521
+ assert.equal(ctx.analysisPayload.metadata.auto_sticker_media_type, 'image');
522
+ });
@@ -0,0 +1,41 @@
1
+ export const createPostProcessingMiddleware = ({ runCommand, maybeCaptureIncomingSticker, extractSupportedStickerMediaDetails, ensureGroupConfigForContext, mergeAnalysisMetadata, processSticker, normalizeAnalysisErrorCode }) => {
2
+ return async (ctx) => {
3
+ if (!ctx.isMessageFromBot) {
4
+ await runCommand('pack-capture', () =>
5
+ maybeCaptureIncomingSticker({
6
+ messageInfo: ctx.messageInfo,
7
+ senderJid: ctx.senderJid,
8
+ isMessageFromBot: ctx.isMessageFromBot,
9
+ }),
10
+ );
11
+ }
12
+
13
+ if (!ctx.isGroupMessage || ctx.isCommandMessage || ctx.isMessageFromBot) return;
14
+
15
+ const autoStickerMedia = extractSupportedStickerMediaDetails(ctx.messageInfo, {
16
+ includeQuoted: false,
17
+ });
18
+
19
+ if (!autoStickerMedia || autoStickerMedia.mediaType === 'sticker') return;
20
+
21
+ const activeGroupConfig = await ensureGroupConfigForContext(ctx);
22
+ if (!activeGroupConfig?.autoStickerEnabled) return;
23
+
24
+ ctx.analysisPayload.processingResult = 'autosticker_triggered';
25
+ mergeAnalysisMetadata(ctx.analysisPayload, {
26
+ auto_sticker_media_type: autoStickerMedia.mediaType || null,
27
+ });
28
+
29
+ const autoStickerResult = await runCommand('autosticker', () =>
30
+ processSticker(ctx.sock, ctx.messageInfo, ctx.senderJid, ctx.remoteJid, ctx.expirationMessage, ctx.senderName, '', {
31
+ includeQuotedMedia: false,
32
+ showAutoPackNotice: false,
33
+ commandPrefix: ctx.commandPrefix,
34
+ }),
35
+ );
36
+
37
+ if (!autoStickerResult.ok) {
38
+ ctx.analysisPayload.errorCode = normalizeAnalysisErrorCode(autoStickerResult.error);
39
+ }
40
+ };
41
+ };