@omnizap-system/omnizap 2.5.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (425) hide show
  1. package/.clusterfuzzlite/Dockerfile +10 -0
  2. package/.env.example +907 -0
  3. package/.github/codeql/codeql-config.yml +10 -0
  4. package/.github/dependabot.yml +35 -0
  5. package/.github/workflows/ci.yml +73 -0
  6. package/.github/workflows/codeql.yml +106 -0
  7. package/.github/workflows/db-migration-check.yml +98 -0
  8. package/.github/workflows/dependency-review.yml +22 -0
  9. package/.github/workflows/deploy.yml +95 -0
  10. package/.github/workflows/release.yml +106 -0
  11. package/.github/workflows/security-attest-provenance.yml +51 -0
  12. package/.github/workflows/security-gitleaks.yml +34 -0
  13. package/.github/workflows/security-runner-hardening.yml +31 -0
  14. package/.github/workflows/security-scorecard.yml +44 -0
  15. package/.github/workflows/security-zap-baseline.yml +44 -0
  16. package/.github/workflows/security-zap-full-scan.yml +43 -0
  17. package/.github/workflows/security-zizmor.yml +36 -0
  18. package/.github/workflows/wiki-sync.yml +44 -0
  19. package/.gitleaks.toml +15 -0
  20. package/.prettierrc +34 -0
  21. package/CODE_OF_CONDUCT.md +114 -0
  22. package/LICENSE +56 -0
  23. package/README.md +110 -0
  24. package/SECURITY.md +110 -0
  25. package/app/config/index.js +4 -0
  26. package/app/configParts/adminIdentity.js +92 -0
  27. package/app/configParts/baileysConfig.js +1818 -0
  28. package/app/configParts/groupUtils.js +692 -0
  29. package/app/configParts/loggerConfig.js +394 -0
  30. package/app/configParts/messagePersistenceService.js +305 -0
  31. package/app/connection/baileysCompatibility.test.js +40 -0
  32. package/app/connection/baileysDbAuthState.js +344 -0
  33. package/app/connection/socketController.js +2243 -0
  34. package/app/controllers/messageController.js +7 -0
  35. package/app/controllers/messagePipeline/commandMiddleware.js +146 -0
  36. package/app/controllers/messagePipeline/conversationMiddleware.js +183 -0
  37. package/app/controllers/messagePipeline/messagePipelineMiddlewares.test.js +522 -0
  38. package/app/controllers/messagePipeline/postProcessingMiddleware.js +41 -0
  39. package/app/controllers/messagePipeline/preProcessingMiddlewares.js +166 -0
  40. package/app/controllers/messageProcessingPipeline.js +699 -0
  41. package/app/modules/adminModule/AGENT.md +4056 -0
  42. package/app/modules/adminModule/adminAiHelpService.js +56 -0
  43. package/app/modules/adminModule/adminConfigRuntime.js +177 -0
  44. package/app/modules/adminModule/commandConfig.json +7122 -0
  45. package/app/modules/adminModule/groupCommandHandlers.js +1823 -0
  46. package/app/modules/adminModule/groupCommandHandlers.test.js +350 -0
  47. package/app/modules/adminModule/groupEventHandlers.js +399 -0
  48. package/app/modules/aiModule/AGENT.md +547 -0
  49. package/app/modules/aiModule/aiAiHelpService.js +14 -0
  50. package/app/modules/aiModule/aiConfigRuntime.js +135 -0
  51. package/app/modules/aiModule/catCommand.js +967 -0
  52. package/app/modules/aiModule/commandConfig.json +981 -0
  53. package/app/modules/analyticsModule/messageAnalysisEventRepository.js +83 -0
  54. package/app/modules/gameModule/AGENT.md +196 -0
  55. package/app/modules/gameModule/commandConfig.json +366 -0
  56. package/app/modules/gameModule/diceCommand.js +42 -0
  57. package/app/modules/gameModule/gameAiHelpService.js +14 -0
  58. package/app/modules/gameModule/gameConfigRuntime.js +68 -0
  59. package/app/modules/menuModule/AGENT.md +205 -0
  60. package/app/modules/menuModule/commandConfig.json +366 -0
  61. package/app/modules/menuModule/common.js +316 -0
  62. package/app/modules/menuModule/menuAiHelpService.js +14 -0
  63. package/app/modules/menuModule/menuConfigRuntime.js +68 -0
  64. package/app/modules/menuModule/menus.js +66 -0
  65. package/app/modules/playModule/AGENT.md +321 -0
  66. package/app/modules/playModule/commandConfig.json +584 -0
  67. package/app/modules/playModule/playAiHelpService.js +14 -0
  68. package/app/modules/playModule/playCommand.js +1417 -0
  69. package/app/modules/playModule/playConfigRuntime.js +68 -0
  70. package/app/modules/quoteModule/AGENT.md +199 -0
  71. package/app/modules/quoteModule/commandConfig.json +366 -0
  72. package/app/modules/quoteModule/quoteAiHelpService.js +14 -0
  73. package/app/modules/quoteModule/quoteCommand.js +842 -0
  74. package/app/modules/quoteModule/quoteConfigRuntime.js +68 -0
  75. package/app/modules/rpgPokemonModule/AGENT.md +229 -0
  76. package/app/modules/rpgPokemonModule/commandConfig.json +386 -0
  77. package/app/modules/rpgPokemonModule/rpgBattleCanvasRenderer.js +795 -0
  78. package/app/modules/rpgPokemonModule/rpgBattleService.js +2110 -0
  79. package/app/modules/rpgPokemonModule/rpgBattleService.test.js +770 -0
  80. package/app/modules/rpgPokemonModule/rpgEvolutionUtils.js +22 -0
  81. package/app/modules/rpgPokemonModule/rpgPokemonAiHelpService.js +14 -0
  82. package/app/modules/rpgPokemonModule/rpgPokemonCommand.js +174 -0
  83. package/app/modules/rpgPokemonModule/rpgPokemonConfigRuntime.js +68 -0
  84. package/app/modules/rpgPokemonModule/rpgPokemonDomain.js +192 -0
  85. package/app/modules/rpgPokemonModule/rpgPokemonDomain.test.js +93 -0
  86. package/app/modules/rpgPokemonModule/rpgPokemonEvolution.test.js +46 -0
  87. package/app/modules/rpgPokemonModule/rpgPokemonMessages.js +746 -0
  88. package/app/modules/rpgPokemonModule/rpgPokemonRepository.js +1847 -0
  89. package/app/modules/rpgPokemonModule/rpgPokemonService.js +6839 -0
  90. package/app/modules/rpgPokemonModule/rpgProfileCanvasRenderer.js +354 -0
  91. package/app/modules/statsModule/AGENT.md +320 -0
  92. package/app/modules/statsModule/commandConfig.json +540 -0
  93. package/app/modules/statsModule/globalRankingCommand.js +64 -0
  94. package/app/modules/statsModule/rankingCommand.js +41 -0
  95. package/app/modules/statsModule/rankingCommon.js +1305 -0
  96. package/app/modules/statsModule/statsAiHelpService.js +14 -0
  97. package/app/modules/statsModule/statsConfigRuntime.js +68 -0
  98. package/app/modules/stickerModule/AGENT.md +692 -0
  99. package/app/modules/stickerModule/addStickerMetadata.js +239 -0
  100. package/app/modules/stickerModule/commandConfig.json +1216 -0
  101. package/app/modules/stickerModule/convertToWebp.js +367 -0
  102. package/app/modules/stickerModule/stickerAiHelpService.js +14 -0
  103. package/app/modules/stickerModule/stickerCommand.js +446 -0
  104. package/app/modules/stickerModule/stickerConfigRuntime.js +68 -0
  105. package/app/modules/stickerModule/stickerConvertCommand.js +159 -0
  106. package/app/modules/stickerModule/stickerTextCommand.js +653 -0
  107. package/app/modules/stickerPackModule/AGENT.md +215 -0
  108. package/app/modules/stickerPackModule/autoPackCollectorRuntime.js +20 -0
  109. package/app/modules/stickerPackModule/autoPackCollectorService.js +357 -0
  110. package/app/modules/stickerPackModule/commandConfig.json +387 -0
  111. package/app/modules/stickerPackModule/domainEventOutboxRepository.js +227 -0
  112. package/app/modules/stickerPackModule/domainEvents.js +52 -0
  113. package/app/modules/stickerPackModule/semanticReclassificationEngine.js +429 -0
  114. package/app/modules/stickerPackModule/semanticReclassificationEngine.test.js +75 -0
  115. package/app/modules/stickerPackModule/semanticThemeClusterService.js +544 -0
  116. package/app/modules/stickerPackModule/stickerAssetClassificationRepository.js +400 -0
  117. package/app/modules/stickerPackModule/stickerAssetRepository.js +400 -0
  118. package/app/modules/stickerPackModule/stickerAssetReprocessQueueRepository.js +175 -0
  119. package/app/modules/stickerPackModule/stickerAutoPackByTagsRuntime.js +3702 -0
  120. package/app/modules/stickerPackModule/stickerClassificationBackgroundRuntime.js +559 -0
  121. package/app/modules/stickerPackModule/stickerClassificationService.js +557 -0
  122. package/app/modules/stickerPackModule/stickerDedicatedTaskWorkerRuntime.js +249 -0
  123. package/app/modules/stickerPackModule/stickerDomainEventBus.js +65 -0
  124. package/app/modules/stickerPackModule/stickerDomainEventConsumerRuntime.js +208 -0
  125. package/app/modules/stickerPackModule/stickerMarketplaceDriftService.js +99 -0
  126. package/app/modules/stickerPackModule/stickerObjectStorageService.js +285 -0
  127. package/app/modules/stickerPackModule/stickerPackAiHelpService.js +14 -0
  128. package/app/modules/stickerPackModule/stickerPackCommandHandlers.js +1148 -0
  129. package/app/modules/stickerPackModule/stickerPackConfigRuntime.js +68 -0
  130. package/app/modules/stickerPackModule/stickerPackEngagementRepository.js +152 -0
  131. package/app/modules/stickerPackModule/stickerPackErrors.js +30 -0
  132. package/app/modules/stickerPackModule/stickerPackInteractionEventRepository.js +101 -0
  133. package/app/modules/stickerPackModule/stickerPackItemRepository.js +432 -0
  134. package/app/modules/stickerPackModule/stickerPackMarketplaceService.js +313 -0
  135. package/app/modules/stickerPackModule/stickerPackMessageService.js +268 -0
  136. package/app/modules/stickerPackModule/stickerPackRepository.js +450 -0
  137. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRepository.js +179 -0
  138. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRuntime.js +271 -0
  139. package/app/modules/stickerPackModule/stickerPackService.js +733 -0
  140. package/app/modules/stickerPackModule/stickerPackServiceRuntime.js +32 -0
  141. package/app/modules/stickerPackModule/stickerPackUtils.js +107 -0
  142. package/app/modules/stickerPackModule/stickerStorageService.js +559 -0
  143. package/app/modules/stickerPackModule/stickerWorkerPipelineRuntime.js +242 -0
  144. package/app/modules/stickerPackModule/stickerWorkerTaskQueueRepository.js +242 -0
  145. package/app/modules/systemMetricsModule/AGENT.md +193 -0
  146. package/app/modules/systemMetricsModule/commandConfig.json +344 -0
  147. package/app/modules/systemMetricsModule/pingCommand.js +399 -0
  148. package/app/modules/systemMetricsModule/systemMetricsAiHelpService.js +14 -0
  149. package/app/modules/systemMetricsModule/systemMetricsConfigRuntime.js +68 -0
  150. package/app/modules/tiktokModule/AGENT.md +196 -0
  151. package/app/modules/tiktokModule/commandConfig.json +366 -0
  152. package/app/modules/tiktokModule/tiktokAiHelpService.js +14 -0
  153. package/app/modules/tiktokModule/tiktokCommand.js +716 -0
  154. package/app/modules/tiktokModule/tiktokConfigRuntime.js +68 -0
  155. package/app/modules/userModule/AGENT.md +200 -0
  156. package/app/modules/userModule/commandConfig.json +386 -0
  157. package/app/modules/userModule/userAiHelpService.js +14 -0
  158. package/app/modules/userModule/userCommand.js +1155 -0
  159. package/app/modules/userModule/userConfigRuntime.js +68 -0
  160. package/app/modules/waifuPicsModule/AGENT.md +431 -0
  161. package/app/modules/waifuPicsModule/commandConfig.json +780 -0
  162. package/app/modules/waifuPicsModule/waifuPicsAiHelpService.js +14 -0
  163. package/app/modules/waifuPicsModule/waifuPicsCommand.js +586 -0
  164. package/app/modules/waifuPicsModule/waifuPicsConfigRuntime.js +68 -0
  165. package/app/observability/metrics.js +766 -0
  166. package/app/services/ai/aiHelpResponseCacheRepository.js +280 -0
  167. package/app/services/ai/aiLearningRepository.js +400 -0
  168. package/app/services/ai/commandConfigEnrichmentRepository.js +769 -0
  169. package/app/services/ai/commandConfigEnrichmentService.js +452 -0
  170. package/app/services/ai/commandConfigValidationService.js +443 -0
  171. package/app/services/ai/commandToolBuilderService.js +192 -0
  172. package/app/services/ai/conversationRouterService.js +516 -0
  173. package/app/services/ai/geminiService.js +115 -0
  174. package/app/services/ai/geminiService.test.js +87 -0
  175. package/app/services/ai/globalModuleAiHelpService.js +1412 -0
  176. package/app/services/ai/globalToolCallingService.js +203 -0
  177. package/app/services/ai/messageCommandExecutionService.js +391 -0
  178. package/app/services/ai/moduleAiHelpCoreService.js +1099 -0
  179. package/app/services/ai/moduleAiHelpWrapperFactory.js +65 -0
  180. package/app/services/ai/moduleCommandConfigRuntimeService.js +113 -0
  181. package/app/services/ai/moduleToolExecutorService.js +464 -0
  182. package/app/services/ai/moduleToolRegistryService.js +178 -0
  183. package/app/services/ai/toolCandidateSelectorService.js +781 -0
  184. package/app/services/auth/googleWebLinkService.js +80 -0
  185. package/app/services/auth/whatsappLoginLinkService.js +230 -0
  186. package/app/services/external/pokeApiService.js +398 -0
  187. package/app/services/group/groupMetadataService.js +311 -0
  188. package/app/services/infra/dbWriteQueue.js +874 -0
  189. package/app/services/infra/featureFlagService.js +131 -0
  190. package/app/services/infra/queueUtils.js +55 -0
  191. package/app/services/messaging/captchaService.js +491 -0
  192. package/app/services/messaging/messagePersistenceService.js +1 -0
  193. package/app/services/messaging/newsBroadcastService.js +347 -0
  194. package/app/services/sticker/stickerFocusService.js +347 -0
  195. package/app/services/sticker/stickerFocusService.test.js +43 -0
  196. package/app/store/aiPromptStore.js +38 -0
  197. package/app/store/conversationSessionStore.js +131 -0
  198. package/app/store/groupConfigStore.js +58 -0
  199. package/app/store/premiumUserStore.js +54 -0
  200. package/app/utils/antiLink/antiLinkModule.js +700 -0
  201. package/app/utils/http/getImageBufferModule.js +18 -0
  202. package/app/utils/json/jsonSanitizer.js +113 -0
  203. package/app/utils/json/jsonSanitizer.test.js +40 -0
  204. package/app/utils/systemMetrics/systemMetricsModule.js +88 -0
  205. package/app/workers/aiLearningWorker.js +605 -0
  206. package/app/workers/commandConfigEnrichmentWorker.js +242 -0
  207. package/database/index.js +2075 -0
  208. package/database/init.js +151 -0
  209. package/database/migrations/.gitkeep +0 -0
  210. package/database/migrations/20260307_d0_hardening_down.sql +64 -0
  211. package/database/migrations/20260307_d0_hardening_up.sql +79 -0
  212. package/database/migrations/20260307_d1_terms_acceptance_down.sql +11 -0
  213. package/database/migrations/20260307_d1_terms_acceptance_up.sql +37 -0
  214. package/database/migrations/20260307_d2_auth_hardening_down.sql +75 -0
  215. package/database/migrations/20260307_d2_auth_hardening_up.sql +100 -0
  216. package/database/migrations/20260314_d7_canonical_sender_down.sql +53 -0
  217. package/database/migrations/20260314_d7_canonical_sender_up.sql +114 -0
  218. package/database/migrations/20260406_d30_security_analytics_down.sql +95 -0
  219. package/database/migrations/20260406_d30_security_analytics_up.sql +292 -0
  220. package/database/migrations/20260407_d31_web_google_session_token_hardening_down.sql +2 -0
  221. package/database/migrations/20260407_d31_web_google_session_token_hardening_up.sql +17 -0
  222. package/database/migrations/20260408_d32_ai_help_response_cache_down.sql +1 -0
  223. package/database/migrations/20260408_d32_ai_help_response_cache_up.sql +22 -0
  224. package/database/migrations/20260409_d33_ai_learning_tables_down.sql +4 -0
  225. package/database/migrations/20260409_d33_ai_learning_tables_up.sql +52 -0
  226. package/database/migrations/20260410_d34_command_config_enrichment_down.sql +3 -0
  227. package/database/migrations/20260410_d34_command_config_enrichment_up.sql +48 -0
  228. package/database/schema.sql +1186 -0
  229. package/docker-compose.yml +104 -0
  230. package/docs/audits/stickerCatalogController-out-of-scope.md +103 -0
  231. package/docs/audits/stickerCatalogController-symbols.md +58 -0
  232. package/docs/compliance/acceptable-use-policy-2026-03-07.md +35 -0
  233. package/docs/compliance/dpa-b2b-standard-2026-03-07.md +80 -0
  234. package/docs/compliance/monthly-compliance-checklist-2026-03-07.md +88 -0
  235. package/docs/compliance/notice-and-takedown-policy-2026-03-07.md +34 -0
  236. package/docs/compliance/privacy-policy-2026-03-07.md +75 -0
  237. package/docs/compliance/subprocessors-inventory-2026-03-07.md +16 -0
  238. package/docs/database/production-db-evolution-runbook-2026q1.md +365 -0
  239. package/docs/security/dsar-lgpd-runbook-2026-03-07.md +86 -0
  240. package/docs/security/incident-response-lgpd-anpd-runbook-2026-03-07.md +77 -0
  241. package/docs/security/network-hardening-runbook-2026-03-07.md +137 -0
  242. package/docs/seo/omnizap-seo-playbook-br-2026-02-28.md +238 -0
  243. package/docs/seo/satellite-page-template.md +116 -0
  244. package/docs/seo/satellite-pages-phase1.json +364 -0
  245. package/docs/wiki/Home.md +120 -0
  246. package/docs/wiki/pair-extraordinaire-2026-03-08.md +3 -0
  247. package/docs/wiki/recent-changes-2026-03-08.md +47 -0
  248. package/ecosystem.prod.config.cjs +135 -0
  249. package/eslint.config.js +89 -0
  250. package/index.js +488 -0
  251. package/ml/clip_classifier/Dockerfile +18 -0
  252. package/ml/clip_classifier/README.md +118 -0
  253. package/ml/clip_classifier/adaptive_scoring.py +40 -0
  254. package/ml/clip_classifier/classifier.py +654 -0
  255. package/ml/clip_classifier/embedding_store.py +481 -0
  256. package/ml/clip_classifier/env_loader.py +15 -0
  257. package/ml/clip_classifier/llm_label_expander.py +144 -0
  258. package/ml/clip_classifier/main.py +213 -0
  259. package/ml/clip_classifier/requirements.txt +10 -0
  260. package/ml/clip_classifier/similarity_engine.py +74 -0
  261. package/new-logo.png +0 -0
  262. package/observability/alert-rules.yml +60 -0
  263. package/observability/grafana/dashboards/omnizap-mysql.json +136 -0
  264. package/observability/grafana/dashboards/omnizap-overview.json +170 -0
  265. package/observability/grafana/provisioning/dashboards/dashboards.yml +11 -0
  266. package/observability/grafana/provisioning/datasources/datasources.yml +15 -0
  267. package/observability/loki-config.yml +38 -0
  268. package/observability/mysql-setup.sql +46 -0
  269. package/observability/prometheus.yml +35 -0
  270. package/observability/promtail-config.yml +84 -0
  271. package/observability/sticker-catalog-slo.md +83 -0
  272. package/observability/sticker-scale-hardening-rollout.md +128 -0
  273. package/package.json +144 -0
  274. package/public/apple-touch-icon.png +0 -0
  275. package/public/assets/css/commands-react.input.css +71 -0
  276. package/public/assets/css/create-pack-react.input.css +31 -0
  277. package/public/assets/css/home-react.input.css +106 -0
  278. package/public/assets/css/login-react.input.css +58 -0
  279. package/public/assets/css/stickers-react.input.css +18 -0
  280. package/public/assets/css/terms-react.input.css +115 -0
  281. package/public/assets/css/user-react.input.css +57 -0
  282. package/public/assets/images/brand-icon-192.png +0 -0
  283. package/public/assets/images/brand-logo-128.webp +0 -0
  284. package/public/assets/images/hero-banner-1280.jpg +0 -0
  285. package/public/comandos/commands-catalog.json +4517 -0
  286. package/public/css/api-docs.css +161 -0
  287. package/public/css/stickers-admin.css +1288 -0
  288. package/public/css/styles.css +679 -0
  289. package/public/css/systemadm/admin.css +474 -0
  290. package/public/css/systemadm/base.css +73 -0
  291. package/public/css/systemadm/components.css +662 -0
  292. package/public/css/systemadm/layout.css +229 -0
  293. package/public/css/systemadm/tokens.css +56 -0
  294. package/public/favicon-16x16.png +0 -0
  295. package/public/favicon-32x32.png +0 -0
  296. package/public/favicon.ico +0 -0
  297. package/public/js/apps/apiDocsApp.js +235 -0
  298. package/public/js/apps/commandsReactApp.js +528 -0
  299. package/public/js/apps/createPackApp.js +1646 -0
  300. package/public/js/apps/homeReactApp.js +942 -0
  301. package/public/js/apps/loginReactApp.js +496 -0
  302. package/public/js/apps/stickersAdminApp.js +1753 -0
  303. package/public/js/apps/stickersApp.js +3797 -0
  304. package/public/js/apps/termsReactApp.js +528 -0
  305. package/public/js/apps/userApp.js +2540 -0
  306. package/public/js/apps/userProfile/actions.js +66 -0
  307. package/public/js/apps/userReactApp.js +547 -0
  308. package/public/js/catalog.js +950 -0
  309. package/public/pages/api-docs.html +40 -0
  310. package/public/pages/aup.html +158 -0
  311. package/public/pages/comandos.html +41 -0
  312. package/public/pages/dpa.html +227 -0
  313. package/public/pages/home.html +45 -0
  314. package/public/pages/licenca.html +182 -0
  315. package/public/pages/login.html +40 -0
  316. package/public/pages/notice-and-takedown.html +234 -0
  317. package/public/pages/politica-de-privacidade.html +251 -0
  318. package/public/pages/seo-bot-whatsapp-para-grupo.html +350 -0
  319. package/public/pages/seo-bot-whatsapp-sem-programar.html +350 -0
  320. package/public/pages/seo-como-automatizar-avisos-no-whatsapp.html +350 -0
  321. package/public/pages/seo-como-criar-comandos-whatsapp.html +350 -0
  322. package/public/pages/seo-como-evitar-spam-no-whatsapp.html +350 -0
  323. package/public/pages/seo-como-moderar-grupo-whatsapp.html +350 -0
  324. package/public/pages/seo-como-organizar-comunidade-whatsapp.html +350 -0
  325. package/public/pages/seo-melhor-bot-whatsapp-para-grupos.html +350 -0
  326. package/public/pages/stickers-admin.html +31 -0
  327. package/public/pages/stickers-create.html +41 -0
  328. package/public/pages/stickers.html +45 -0
  329. package/public/pages/suboperadores.html +237 -0
  330. package/public/pages/termos-de-uso-texto-integral.html +241 -0
  331. package/public/pages/termos-de-uso.html +41 -0
  332. package/public/pages/user-password-reset.html +32 -0
  333. package/public/pages/user-systemadm.html +508 -0
  334. package/public/pages/user.html +39 -0
  335. package/public/robots.txt +9 -0
  336. package/public/site.webmanifest +24 -0
  337. package/public/sitemap.xml +98 -0
  338. package/schemas/command-config.schema.json +582 -0
  339. package/scripts/baileys-compat-smoke.mjs +12 -0
  340. package/scripts/cache-bust.mjs +142 -0
  341. package/scripts/deploy.sh +916 -0
  342. package/scripts/email-broadcast-terms-update.mjs +170 -0
  343. package/scripts/enrich-command-discovery-fields.mjs +286 -0
  344. package/scripts/generate-command-config-schema.mjs +273 -0
  345. package/scripts/generate-commands-catalog.mjs +308 -0
  346. package/scripts/generate-module-agents.mjs +631 -0
  347. package/scripts/generate-seo-satellite-pages.mjs +400 -0
  348. package/scripts/github-deploy-notify.mjs +174 -0
  349. package/scripts/github-release-notify.mjs +219 -0
  350. package/scripts/release.sh +599 -0
  351. package/scripts/run-codeql-local.sh +116 -0
  352. package/scripts/run-prettier-all.mjs +25 -0
  353. package/scripts/security-smoketest.mjs +581 -0
  354. package/scripts/sticker-catalog-loadtest.mjs +210 -0
  355. package/scripts/sticker-worker-task.mjs +119 -0
  356. package/scripts/sync-readme-snapshot.mjs +133 -0
  357. package/scripts/validate-command-config-schema.mjs +130 -0
  358. package/scripts/validate-command-configs.mjs +15 -0
  359. package/scripts/wiki-sync.sh +191 -0
  360. package/server/auth/googleWebAuth/googleWebAuthRuntime.js +62 -0
  361. package/server/auth/googleWebAuth/googleWebAuthService.js +807 -0
  362. package/server/auth/jwt/webJwtService.js +147 -0
  363. package/server/auth/stickerCatalogAuthContext.js +165 -0
  364. package/server/auth/termsAcceptance/termsAcceptanceHandler.js +189 -0
  365. package/server/auth/userPassword/index.js +14 -0
  366. package/server/auth/userPassword/userPasswordAuthService.js +422 -0
  367. package/server/auth/userPassword/userPasswordCrypto.js +199 -0
  368. package/server/auth/userPassword/userPasswordCrypto.test.js +76 -0
  369. package/server/auth/userPassword/userPasswordRecoveryService.js +728 -0
  370. package/server/auth/validation/authSchemas.js +236 -0
  371. package/server/auth/webAccount/webAccountHandlers.js +1434 -0
  372. package/server/controllers/admin/adminBanService.js +138 -0
  373. package/server/controllers/admin/adminPanelHandlers.js +2083 -0
  374. package/server/controllers/admin/stickerCatalogAdminContext.js +17 -0
  375. package/server/controllers/admin/systemAdminController.js +201 -0
  376. package/server/controllers/email/emailAutomationController.js +239 -0
  377. package/server/controllers/metricsController.js +21 -0
  378. package/server/controllers/seo/stickerCatalogSeoContext.js +514 -0
  379. package/server/controllers/sticker/nonCatalogHandlers.js +303 -0
  380. package/server/controllers/sticker/stickerCatalogController.js +4700 -0
  381. package/server/controllers/system/contactController.js +115 -0
  382. package/server/controllers/system/githubController.js +137 -0
  383. package/server/controllers/system/stickerCatalogSystemContext.js +758 -0
  384. package/server/controllers/system/storageController.js +154 -0
  385. package/server/controllers/system/systemController.js +135 -0
  386. package/server/controllers/system/systemMetricsController.js +156 -0
  387. package/server/controllers/system/visitController.js +90 -0
  388. package/server/controllers/userController.js +145 -0
  389. package/server/email/emailAutomationRuntime.js +225 -0
  390. package/server/email/emailAutomationService.js +125 -0
  391. package/server/email/emailOutboxRepository.js +282 -0
  392. package/server/email/emailTemplateService.js +480 -0
  393. package/server/email/emailTransportService.js +156 -0
  394. package/server/http/clientIp.js +95 -0
  395. package/server/http/httpRequestUtils.js +262 -0
  396. package/server/http/httpRequestUtils.test.js +80 -0
  397. package/server/http/httpServer.js +180 -0
  398. package/server/http/requestContext.js +20 -0
  399. package/server/http/siteRoutingUtils.js +87 -0
  400. package/server/index.js +1 -0
  401. package/server/middleware/cachePolicy.js +26 -0
  402. package/server/middleware/cachePolicyHelpers.js +1 -0
  403. package/server/middleware/endpointRateLimit.js +181 -0
  404. package/server/middleware/rateLimit.js +70 -0
  405. package/server/middleware/requireAdminAuth.js +48 -0
  406. package/server/middleware/securityHeaders.js +97 -0
  407. package/server/routes/admin/systemAdminRouter.js +64 -0
  408. package/server/routes/email/emailAutomationRouter.js +46 -0
  409. package/server/routes/health/healthRouter.js +41 -0
  410. package/server/routes/indexRouter.js +234 -0
  411. package/server/routes/metrics/metricsRouter.js +58 -0
  412. package/server/routes/static/staticPageRouter.js +134 -0
  413. package/server/routes/sticker/catalogHandlers/catalogAdminHttp.js +105 -0
  414. package/server/routes/sticker/catalogHandlers/catalogAuthHttp.js +77 -0
  415. package/server/routes/sticker/catalogHandlers/catalogPublicHttp.js +120 -0
  416. package/server/routes/sticker/catalogHandlers/catalogUploadHttp.js +83 -0
  417. package/server/routes/sticker/catalogRouter.js +77 -0
  418. package/server/routes/sticker/stickerApiRouter.js +84 -0
  419. package/server/routes/sticker/stickerDataRouter.js +145 -0
  420. package/server/routes/sticker/stickerSiteRouter.js +43 -0
  421. package/server/routes/user/userApiPaths.js +66 -0
  422. package/server/routes/user/userRouter.js +65 -0
  423. package/server/utils/safePath.js +26 -0
  424. package/utils/logger/loggerModule.js +35 -0
  425. package/vite.config.mjs +38 -0
@@ -0,0 +1,514 @@
1
+ import fs from 'node:fs/promises';
2
+
3
+ export const createStickerCatalogSeoContext = ({ executeQuery, tables, listStickerPacksForCatalog, logger, sendJson, toSiteAbsoluteUrl, isPackPubliclyVisible, buildPackWebUrl, config }) => {
4
+ const { stickerWebPath, stickerApiBasePath, stickerOrphanApiPath, stickerLoginWebPath, stickerCreateWebPath, stickerDataPublicPath, defaultListLimit, defaultOrphanListLimit, catalogTemplatePath, createPackTemplatePath, catalogStylesFilePath, catalogScriptFilePath, stickerWebAssetVersion, catalogStylesWebPath, catalogScriptWebPath, nsfwStickerPlaceholderUrl, packCommandPrefix, staticTextCacheSeconds, immutableAssetCacheSeconds, sitemapMaxPacks, sitemapCacheSeconds, seoDiscoveryLinkLimit, seoDiscoveryCacheSeconds } = config;
5
+
6
+ const SITEMAP_CACHE = {
7
+ expiresAt: 0,
8
+ xml: '',
9
+ };
10
+ const SEO_DISCOVERY_CACHE = {
11
+ expiresAt: 0,
12
+ html: '',
13
+ };
14
+
15
+ const escapeHtmlAttribute = (value) =>
16
+ String(value ?? '')
17
+ .replace(/&/g, '&')
18
+ .replace(/"/g, '"')
19
+ .replace(/'/g, ''')
20
+ .replace(/</g, '&lt;')
21
+ .replace(/>/g, '&gt;');
22
+
23
+ const escapeXml = (value) =>
24
+ String(value ?? '')
25
+ .replace(/&/g, '&amp;')
26
+ .replace(/</g, '&lt;')
27
+ .replace(/>/g, '&gt;')
28
+ .replace(/"/g, '&quot;')
29
+ .replace(/'/g, '&apos;');
30
+
31
+ const normalizeWhitespace = (value) =>
32
+ String(value || '')
33
+ .replace(/\s+/g, ' ')
34
+ .trim();
35
+
36
+ const truncateText = (value, maxLength = 160) => {
37
+ const normalized = normalizeWhitespace(value);
38
+ if (normalized.length <= maxLength) return normalized;
39
+ return `${normalized.slice(0, Math.max(0, maxLength - 1)).trim()}…`;
40
+ };
41
+
42
+ const toDateOnly = (value) => {
43
+ if (!value) return null;
44
+ const date = new Date(value);
45
+ if (Number.isNaN(date.getTime())) return null;
46
+ return date.toISOString().slice(0, 10);
47
+ };
48
+
49
+ const appendAssetVersionQuery = (assetPath) => (stickerWebAssetVersion ? `${assetPath}?v=${encodeURIComponent(stickerWebAssetVersion)}` : assetPath);
50
+ const buildCatalogStylesUrl = () => appendAssetVersionQuery(catalogStylesWebPath);
51
+ const buildCatalogScriptUrl = () => appendAssetVersionQuery(catalogScriptWebPath);
52
+ const buildStickersReactBundleUrl = () => appendAssetVersionQuery('/assets/js/stickers-react.bundle.js');
53
+
54
+ const buildCatalogDiscoveryLinksHtml = async () => {
55
+ if (SEO_DISCOVERY_CACHE.expiresAt > Date.now() && SEO_DISCOVERY_CACHE.html) {
56
+ return SEO_DISCOVERY_CACHE.html;
57
+ }
58
+
59
+ try {
60
+ const { packs } = await listStickerPacksForCatalog({
61
+ visibility: 'public',
62
+ search: '',
63
+ limit: seoDiscoveryLinkLimit,
64
+ offset: 0,
65
+ });
66
+
67
+ const links = (Array.isArray(packs) ? packs : []).filter((pack) => pack?.pack_key && isPackPubliclyVisible(pack)).slice(0, seoDiscoveryLinkLimit);
68
+
69
+ if (!links.length) {
70
+ SEO_DISCOVERY_CACHE.expiresAt = Date.now() + seoDiscoveryCacheSeconds * 1000;
71
+ SEO_DISCOVERY_CACHE.html = '';
72
+ return '';
73
+ }
74
+
75
+ const linksMarkup = links
76
+ .map((pack) => {
77
+ const href = escapeHtmlAttribute(buildPackWebUrl(pack.pack_key));
78
+ const label = escapeHtmlAttribute(truncateText(pack.name || pack.pack_key, 80));
79
+ return `<li><a href="${href}">${label}</a></li>`;
80
+ })
81
+ .join('');
82
+
83
+ const html = `
84
+ <noscript>
85
+ <section id="seo-discovery-links" style="padding:16px;color:#e5e7eb;background:#020617;">
86
+ <h2 style="margin:0 0 8px;font-size:18px;">Packs populares</h2>
87
+ <p style="margin:0 0 12px;">Navegue direto pelos packs mais recentes:</p>
88
+ <ul style="margin:0;padding-left:18px;display:grid;gap:6px;">
89
+ ${linksMarkup}
90
+ </ul>
91
+ </section>
92
+ </noscript>`;
93
+
94
+ SEO_DISCOVERY_CACHE.expiresAt = Date.now() + seoDiscoveryCacheSeconds * 1000;
95
+ SEO_DISCOVERY_CACHE.html = html;
96
+ return html;
97
+ } catch (error) {
98
+ logger.warn('Falha ao gerar links SEO de descoberta do catalogo.', {
99
+ action: 'sticker_catalog_seo_discovery_links_failed',
100
+ error: error?.message,
101
+ });
102
+ return '';
103
+ }
104
+ };
105
+
106
+ const renderCatalogHtml = async ({ initialPackKey }) => {
107
+ const template = await fs.readFile(catalogTemplatePath, 'utf8');
108
+ const replacements = {
109
+ __STICKER_WEB_PATH__: escapeHtmlAttribute(stickerWebPath),
110
+ __STICKER_API_BASE_PATH__: escapeHtmlAttribute(stickerApiBasePath),
111
+ __STICKER_ORPHAN_API_PATH__: escapeHtmlAttribute(stickerOrphanApiPath),
112
+ __STICKER_LOGIN_WEB_PATH__: escapeHtmlAttribute(stickerLoginWebPath),
113
+ __STICKER_DATA_PUBLIC_PATH__: escapeHtmlAttribute(stickerDataPublicPath),
114
+ __DEFAULT_LIST_LIMIT__: String(defaultListLimit),
115
+ __DEFAULT_ORPHAN_LIST_LIMIT__: String(defaultOrphanListLimit),
116
+ __INITIAL_PACK_KEY__: escapeHtmlAttribute(initialPackKey || ''),
117
+ __CATALOG_STYLES_PATH__: escapeHtmlAttribute(buildCatalogStylesUrl()),
118
+ __CATALOG_SCRIPT_PATH__: escapeHtmlAttribute(buildCatalogScriptUrl()),
119
+ __CURRENT_YEAR__: String(new Date().getFullYear()),
120
+ };
121
+
122
+ let html = template;
123
+ for (const [token, value] of Object.entries(replacements)) {
124
+ html = html.replaceAll(token, value);
125
+ }
126
+
127
+ const initialPackKeyAttr = `data-initial-pack-key="${escapeHtmlAttribute(initialPackKey || '')}"`;
128
+ html = html.replace(/data-initial-pack-key="[^"]*"/i, initialPackKeyAttr);
129
+
130
+ if (!/rel="canonical"/i.test(html)) {
131
+ html = html.replace('</head>', ` <link rel="canonical" href="${escapeHtmlAttribute(toSiteAbsoluteUrl(`${stickerWebPath}/`))}" />\n</head>`);
132
+ }
133
+
134
+ const discoveryLinks = await buildCatalogDiscoveryLinksHtml();
135
+ if (discoveryLinks && html.includes('</body>')) {
136
+ html = html.replace('</body>', `${discoveryLinks}\n</body>`);
137
+ }
138
+
139
+ return html;
140
+ };
141
+
142
+ const renderPackSeoHtml = ({ packSummary }) => {
143
+ const packName = truncateText(packSummary?.name || packSummary?.pack_key || 'Pack', 95);
144
+ const packDescription = truncateText(packSummary?.description || `Pack de stickers "${packName}" disponível no catálogo OmniZap para uso em bots e automações WhatsApp via API.`, 180);
145
+ const canonicalUrl = toSiteAbsoluteUrl(buildPackWebUrl(packSummary?.pack_key || ''));
146
+ const catalogUrl = toSiteAbsoluteUrl(`${stickerWebPath}/`);
147
+ const homeUrl = toSiteAbsoluteUrl('/');
148
+ const apiDocsUrl = toSiteAbsoluteUrl('/api-docs/');
149
+ const fallbackCoverUrl = packSummary?.is_nsfw ? nsfwStickerPlaceholderUrl : 'https://iili.io/fSNGag2.png';
150
+ const coverUrl = toSiteAbsoluteUrl(packSummary?.cover_url || fallbackCoverUrl);
151
+ const publisher = truncateText(packSummary?.publisher || 'Criador OmniZap', 80);
152
+ const stickerCount = Math.max(0, Number(packSummary?.sticker_count || 0));
153
+ const updatedAt = packSummary?.updated_at || packSummary?.created_at || new Date().toISOString();
154
+ const schemaJson = JSON.stringify(
155
+ {
156
+ '@context': 'https://schema.org',
157
+ '@type': 'CreativeWork',
158
+ name: packName,
159
+ description: packDescription,
160
+ url: canonicalUrl,
161
+ image: coverUrl,
162
+ dateModified: updatedAt,
163
+ author: {
164
+ '@type': 'Person',
165
+ name: publisher,
166
+ },
167
+ inLanguage: 'pt-BR',
168
+ },
169
+ null,
170
+ 0,
171
+ ).replace(/</g, '\\u003c');
172
+ const faqSchemaJson = JSON.stringify(
173
+ {
174
+ '@context': 'https://schema.org',
175
+ '@type': 'FAQPage',
176
+ mainEntity: [
177
+ {
178
+ '@type': 'Question',
179
+ name: `Como usar o pack ${packName} no meu bot?`,
180
+ acceptedAnswer: {
181
+ '@type': 'Answer',
182
+ text: `Use o pack ${packName} como recurso de engajamento e consulte exemplos de integração em ${apiDocsUrl}.`,
183
+ },
184
+ },
185
+ {
186
+ '@type': 'Question',
187
+ name: 'Onde encontro mais packs de stickers?',
188
+ acceptedAnswer: {
189
+ '@type': 'Answer',
190
+ text: `Veja o catálogo completo em ${catalogUrl}.`,
191
+ },
192
+ },
193
+ {
194
+ '@type': 'Question',
195
+ name: 'Onde vejo a plataforma principal do OmniZap?',
196
+ acceptedAnswer: {
197
+ '@type': 'Answer',
198
+ text: `A página principal do OmniZap está em ${homeUrl}.`,
199
+ },
200
+ },
201
+ ],
202
+ },
203
+ null,
204
+ 0,
205
+ ).replace(/</g, '\\u003c');
206
+
207
+ return `<!doctype html>
208
+ <html lang="pt-BR">
209
+ <head>
210
+ <meta charset="utf-8" />
211
+ <meta name="viewport" content="width=device-width, initial-scale=1" />
212
+ <title>${escapeHtmlAttribute(`${packName} | Stickers para Bot WhatsApp OmniZap`)}</title>
213
+ <meta name="description" content="${escapeHtmlAttribute(packDescription)}" />
214
+ <meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1" />
215
+ <link rel="canonical" href="${escapeHtmlAttribute(canonicalUrl)}" />
216
+ <link rel="icon" type="image/jpeg" href="https://iili.io/FC3FABe.jpg" />
217
+ <link rel="preconnect" href="https://fonts.googleapis.com" />
218
+ <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
219
+ <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet" />
220
+ <script src="https://cdn.tailwindcss.com"></script>
221
+ <script>
222
+ tailwind.config = {
223
+ theme: {
224
+ extend: {
225
+ fontFamily: {
226
+ sans: ['Inter', 'ui-sans-serif', 'system-ui', 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji']
227
+ },
228
+ colors: {
229
+ slateApp: '#0f172a',
230
+ slateCard: '#1e293b',
231
+ borderApp: 'rgba(255,255,255,0.05)',
232
+ accent: '#2563eb',
233
+ accentTech: '#7c3aed',
234
+ cta: '#22c55e'
235
+ },
236
+ boxShadow: {
237
+ soft: '0 8px 24px rgba(2, 6, 23, 0.22)'
238
+ }
239
+ }
240
+ }
241
+ };
242
+ </script>
243
+
244
+ <meta property="og:type" content="website" />
245
+ <meta property="og:locale" content="pt_BR" />
246
+ <meta property="og:site_name" content="OmniZap System" />
247
+ <meta property="og:title" content="${escapeHtmlAttribute(packName)}" />
248
+ <meta property="og:description" content="${escapeHtmlAttribute(packDescription)}" />
249
+ <meta property="og:url" content="${escapeHtmlAttribute(canonicalUrl)}" />
250
+ <meta property="og:image" content="${escapeHtmlAttribute(coverUrl)}" />
251
+ <meta property="og:image:alt" content="${escapeHtmlAttribute(`Capa do pack ${packName}`)}" />
252
+
253
+ <meta name="twitter:card" content="summary_large_image" />
254
+ <meta name="twitter:title" content="${escapeHtmlAttribute(packName)}" />
255
+ <meta name="twitter:description" content="${escapeHtmlAttribute(packDescription)}" />
256
+ <meta name="twitter:image" content="${escapeHtmlAttribute(coverUrl)}" />
257
+
258
+ <script type="application/ld+json">${schemaJson}</script>
259
+ <script type="application/ld+json">${faqSchemaJson}</script>
260
+ <style>
261
+ body { margin: 0; font-family: Inter, ui-sans-serif, system-ui, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", sans-serif; background: #0f172a; color: #f8fafc; }
262
+ .seo-shell { max-width: 880px; margin: 0 auto; padding: 18px 14px 12px; }
263
+ .seo-card { border: 1px solid rgba(255, 255, 255, 0.05); border-radius: 12px; background: #1e293b; padding: 16px; }
264
+ .seo-card h1 { margin: 0 0 8px; font-size: 26px; line-height: 1.2; }
265
+ .seo-card p { margin: 0 0 10px; line-height: 1.55; color: #94a3b8; }
266
+ .seo-row { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 10px; }
267
+ .seo-row a { color: #2563eb; text-decoration: none; border: 1px solid rgba(255, 255, 255, 0.05); border-radius: 8px; padding: 8px 10px; }
268
+ .seo-row a:hover { background: #111827; }
269
+ </style>
270
+ </head>
271
+ <body class="bg-slateApp text-slate-100 font-sans min-h-screen">
272
+ <noscript>
273
+ <main class="seo-shell">
274
+ <section class="seo-card">
275
+ <h1>${escapeHtmlAttribute(packName)}</h1>
276
+ <p>${escapeHtmlAttribute(packDescription)}</p>
277
+ <p>Criador: <strong>${escapeHtmlAttribute(publisher)}</strong> • Stickers: <strong>${stickerCount}</strong></p>
278
+ <p>Use este pack como recurso integrado no seu bot. Consulte endpoints e exemplos na área de desenvolvedor da API OmniZap.</p>
279
+ <h2 style="margin:12px 0 6px;font-size:18px;">FAQ rápido</h2>
280
+ <p style="margin-bottom:6px;"><strong>Como usar no bot?</strong> Consulte a documentação técnica e exemplos na área de desenvolvedor.</p>
281
+ <p style="margin-bottom:6px;"><strong>Tem mais packs?</strong> Sim, explore o catálogo completo para encontrar packs relacionados.</p>
282
+ <div class="seo-row">
283
+ <a href="${escapeHtmlAttribute(canonicalUrl)}">Abrir este pack</a>
284
+ <a href="${escapeHtmlAttribute(catalogUrl)}">Voltar ao catálogo</a>
285
+ <a href="${escapeHtmlAttribute(apiDocsUrl)}">Área de Desenvolvedor</a>
286
+ <a href="${escapeHtmlAttribute(homeUrl)}">Plataforma OmniZap</a>
287
+ </div>
288
+ </section>
289
+ </main>
290
+ </noscript>
291
+
292
+ <div id="stickers-react-root"
293
+ data-web-path="${escapeHtmlAttribute(stickerWebPath)}"
294
+ data-api-base-path="${escapeHtmlAttribute(stickerApiBasePath)}"
295
+ data-orphan-api-path="${escapeHtmlAttribute(stickerOrphanApiPath)}"
296
+ data-login-path="${escapeHtmlAttribute(stickerLoginWebPath)}"
297
+ data-default-limit="${defaultListLimit}"
298
+ data-default-orphan-limit="${defaultOrphanListLimit}"
299
+ data-initial-pack-key="${escapeHtmlAttribute(packSummary?.pack_key || '')}"
300
+ ></div>
301
+ <script type="module" src="${escapeHtmlAttribute(buildStickersReactBundleUrl())}"></script>
302
+ </body>
303
+ </html>`;
304
+ };
305
+
306
+ const renderPackNotFoundHtml = (packKey = '') => `<!doctype html>
307
+ <html lang="pt-BR">
308
+ <head>
309
+ <meta charset="utf-8" />
310
+ <meta name="viewport" content="width=device-width, initial-scale=1" />
311
+ <title>Pack não encontrado | OmniZap</title>
312
+ <meta name="robots" content="noindex, nofollow" />
313
+ <link rel="canonical" href="${escapeHtmlAttribute(toSiteAbsoluteUrl(`${stickerWebPath}/`))}" />
314
+ <style>
315
+ body { margin: 0; font-family: ui-sans-serif, system-ui, sans-serif; background: #0f172a; color: #f8fafc; }
316
+ main { max-width: 760px; margin: 0 auto; padding: 20px 14px; }
317
+ article { border: 1px solid rgba(255, 255, 255, 0.05); border-radius: 12px; background: #1e293b; padding: 16px; }
318
+ a { color: #2563eb; text-decoration: none; }
319
+ </style>
320
+ </head>
321
+ <body>
322
+ <main>
323
+ <article>
324
+ <h1>Pack não encontrado</h1>
325
+ <p>Não localizamos o pack <strong>${escapeHtmlAttribute(packKey || 'informado')}</strong>.</p>
326
+ <p><a href="${escapeHtmlAttribute(toSiteAbsoluteUrl(`${stickerWebPath}/`))}">Ir para o catálogo</a></p>
327
+ </article>
328
+ </main>
329
+ </body>
330
+ </html>`;
331
+
332
+ const renderCreatePackHtml = async () => {
333
+ const template = await fs.readFile(createPackTemplatePath, 'utf8');
334
+ const replacements = {
335
+ __STICKER_WEB_PATH__: escapeHtmlAttribute(stickerWebPath),
336
+ __STICKER_CREATE_WEB_PATH__: escapeHtmlAttribute(stickerCreateWebPath),
337
+ __STICKER_LOGIN_WEB_PATH__: escapeHtmlAttribute(stickerLoginWebPath),
338
+ __STICKER_API_BASE_PATH__: escapeHtmlAttribute(stickerApiBasePath),
339
+ __PACK_COMMAND_PREFIX__: escapeHtmlAttribute(packCommandPrefix),
340
+ __CURRENT_YEAR__: String(new Date().getFullYear()),
341
+ };
342
+
343
+ let html = template;
344
+ for (const [token, value] of Object.entries(replacements)) {
345
+ html = html.replaceAll(token, value);
346
+ }
347
+ return html;
348
+ };
349
+
350
+ const buildSitemapXml = async () => {
351
+ if (SITEMAP_CACHE.expiresAt > Date.now() && SITEMAP_CACHE.xml) {
352
+ return SITEMAP_CACHE.xml;
353
+ }
354
+
355
+ const staticUrls = [
356
+ { loc: toSiteAbsoluteUrl('/'), changefreq: 'daily', priority: '1.0' },
357
+ { loc: toSiteAbsoluteUrl(`${stickerWebPath}/`), changefreq: 'hourly', priority: '0.9' },
358
+ { loc: toSiteAbsoluteUrl('/api-docs/'), changefreq: 'weekly', priority: '0.8' },
359
+ { loc: toSiteAbsoluteUrl('/comandos/'), changefreq: 'weekly', priority: '0.78' },
360
+ { loc: toSiteAbsoluteUrl('/termos-de-uso/'), changefreq: 'monthly', priority: '0.5' },
361
+ {
362
+ loc: toSiteAbsoluteUrl('/politica-de-privacidade/'),
363
+ changefreq: 'monthly',
364
+ priority: '0.5',
365
+ },
366
+ { loc: toSiteAbsoluteUrl('/aup/'), changefreq: 'monthly', priority: '0.45' },
367
+ { loc: toSiteAbsoluteUrl('/dpa/'), changefreq: 'monthly', priority: '0.45' },
368
+ { loc: toSiteAbsoluteUrl('/notice-and-takedown/'), changefreq: 'monthly', priority: '0.45' },
369
+ { loc: toSiteAbsoluteUrl('/suboperadores/'), changefreq: 'monthly', priority: '0.45' },
370
+ { loc: toSiteAbsoluteUrl('/licenca/'), changefreq: 'monthly', priority: '0.5' },
371
+ {
372
+ loc: toSiteAbsoluteUrl('/seo/bot-whatsapp-para-grupo/'),
373
+ changefreq: 'weekly',
374
+ priority: '0.75',
375
+ },
376
+ {
377
+ loc: toSiteAbsoluteUrl('/seo/como-moderar-grupo-whatsapp/'),
378
+ changefreq: 'weekly',
379
+ priority: '0.72',
380
+ },
381
+ {
382
+ loc: toSiteAbsoluteUrl('/seo/como-evitar-spam-no-whatsapp/'),
383
+ changefreq: 'weekly',
384
+ priority: '0.72',
385
+ },
386
+ {
387
+ loc: toSiteAbsoluteUrl('/seo/como-organizar-comunidade-whatsapp/'),
388
+ changefreq: 'weekly',
389
+ priority: '0.72',
390
+ },
391
+ {
392
+ loc: toSiteAbsoluteUrl('/seo/como-automatizar-avisos-no-whatsapp/'),
393
+ changefreq: 'weekly',
394
+ priority: '0.72',
395
+ },
396
+ {
397
+ loc: toSiteAbsoluteUrl('/seo/como-criar-comandos-whatsapp/'),
398
+ changefreq: 'weekly',
399
+ priority: '0.71',
400
+ },
401
+ {
402
+ loc: toSiteAbsoluteUrl('/seo/melhor-bot-whatsapp-para-grupos/'),
403
+ changefreq: 'weekly',
404
+ priority: '0.74',
405
+ },
406
+ {
407
+ loc: toSiteAbsoluteUrl('/seo/bot-whatsapp-sem-programar/'),
408
+ changefreq: 'weekly',
409
+ priority: '0.73',
410
+ },
411
+ ];
412
+
413
+ const packRows = await executeQuery(
414
+ `SELECT pack_key, updated_at, created_at
415
+ FROM ${tables.STICKER_PACK}
416
+ WHERE deleted_at IS NULL
417
+ AND status = 'published'
418
+ AND COALESCE(pack_status, 'ready') = 'ready'
419
+ AND visibility IN ('public', 'unlisted')
420
+ ORDER BY updated_at DESC
421
+ LIMIT ?`,
422
+ [sitemapMaxPacks],
423
+ );
424
+
425
+ const packUrls = (Array.isArray(packRows) ? packRows : [])
426
+ .filter((row) => String(row?.pack_key || '').trim())
427
+ .map((row) => ({
428
+ loc: toSiteAbsoluteUrl(buildPackWebUrl(row.pack_key)),
429
+ lastmod: toDateOnly(row.updated_at || row.created_at || null),
430
+ changefreq: 'daily',
431
+ priority: '0.7',
432
+ }));
433
+
434
+ const xmlItems = [...staticUrls, ...packUrls]
435
+ .map((entry) => {
436
+ const lastmod = entry.lastmod ? `\n <lastmod>${escapeXml(entry.lastmod)}</lastmod>` : '';
437
+ const changefreq = entry.changefreq ? `\n <changefreq>${escapeXml(entry.changefreq)}</changefreq>` : '';
438
+ const priority = entry.priority ? `\n <priority>${escapeXml(entry.priority)}</priority>` : '';
439
+ return ` <url>\n <loc>${escapeXml(entry.loc)}</loc>${lastmod}${changefreq}${priority}\n </url>`;
440
+ })
441
+ .join('\n');
442
+
443
+ const xml = `<?xml version="1.0" encoding="UTF-8"?>\n<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">\n${xmlItems}\n</urlset>\n`;
444
+ SITEMAP_CACHE.expiresAt = Date.now() + sitemapCacheSeconds * 1000;
445
+ SITEMAP_CACHE.xml = xml;
446
+ return xml;
447
+ };
448
+
449
+ const handleSitemapRequest = async (req, res) => {
450
+ const xml = await buildSitemapXml();
451
+ res.statusCode = 200;
452
+ res.setHeader('Content-Type', 'application/xml; charset=utf-8');
453
+ res.setHeader('Cache-Control', `public, max-age=${sitemapCacheSeconds}`);
454
+ if (req.method === 'HEAD') {
455
+ res.end();
456
+ return true;
457
+ }
458
+ res.end(xml);
459
+ return true;
460
+ };
461
+
462
+ const sendStaticTextFile = async (req, res, filePath, contentType) => {
463
+ try {
464
+ const body = await fs.readFile(filePath, 'utf8');
465
+ const hasVersionQuery = /(?:\?|&)v=/.test(String(req.url || ''));
466
+ const cacheControl = hasVersionQuery ? `public, max-age=${immutableAssetCacheSeconds}, immutable` : `public, max-age=${staticTextCacheSeconds}, stale-while-revalidate=${Math.min(86400, staticTextCacheSeconds * 4)}`;
467
+ res.statusCode = 200;
468
+ res.setHeader('Content-Type', contentType);
469
+ res.setHeader('Cache-Control', cacheControl);
470
+ if (req.method === 'HEAD') {
471
+ res.end();
472
+ return true;
473
+ }
474
+ res.end(body);
475
+ return true;
476
+ } catch (error) {
477
+ if (error?.code === 'ENOENT') {
478
+ sendJson(req, res, 404, { error: 'Arquivo estatico nao encontrado.' });
479
+ return true;
480
+ }
481
+
482
+ logger.error('Falha ao servir asset estatico do catalogo.', {
483
+ action: 'sticker_catalog_static_asset_failed',
484
+ path: filePath,
485
+ error: error?.message,
486
+ });
487
+ sendJson(req, res, 500, { error: 'Falha ao servir arquivo estatico.' });
488
+ return true;
489
+ }
490
+ };
491
+
492
+ const handleCatalogStaticAssetRequest = async (req, res, pathname) => {
493
+ if (pathname === catalogStylesWebPath) {
494
+ return sendStaticTextFile(req, res, catalogStylesFilePath, 'text/css; charset=utf-8');
495
+ }
496
+
497
+ if (pathname === catalogScriptWebPath) {
498
+ return sendStaticTextFile(req, res, catalogScriptFilePath, 'application/javascript; charset=utf-8');
499
+ }
500
+
501
+ return false;
502
+ };
503
+
504
+ return {
505
+ buildCatalogStylesUrl,
506
+ buildCatalogScriptUrl,
507
+ handleCatalogStaticAssetRequest,
508
+ renderCatalogHtml,
509
+ renderPackSeoHtml,
510
+ renderPackNotFoundHtml,
511
+ renderCreatePackHtml,
512
+ handleSitemapRequest,
513
+ };
514
+ };