@omnizap-system/omnizap 2.5.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (425) hide show
  1. package/.clusterfuzzlite/Dockerfile +10 -0
  2. package/.env.example +907 -0
  3. package/.github/codeql/codeql-config.yml +10 -0
  4. package/.github/dependabot.yml +35 -0
  5. package/.github/workflows/ci.yml +73 -0
  6. package/.github/workflows/codeql.yml +106 -0
  7. package/.github/workflows/db-migration-check.yml +98 -0
  8. package/.github/workflows/dependency-review.yml +22 -0
  9. package/.github/workflows/deploy.yml +95 -0
  10. package/.github/workflows/release.yml +106 -0
  11. package/.github/workflows/security-attest-provenance.yml +51 -0
  12. package/.github/workflows/security-gitleaks.yml +34 -0
  13. package/.github/workflows/security-runner-hardening.yml +31 -0
  14. package/.github/workflows/security-scorecard.yml +44 -0
  15. package/.github/workflows/security-zap-baseline.yml +44 -0
  16. package/.github/workflows/security-zap-full-scan.yml +43 -0
  17. package/.github/workflows/security-zizmor.yml +36 -0
  18. package/.github/workflows/wiki-sync.yml +44 -0
  19. package/.gitleaks.toml +15 -0
  20. package/.prettierrc +34 -0
  21. package/CODE_OF_CONDUCT.md +114 -0
  22. package/LICENSE +56 -0
  23. package/README.md +110 -0
  24. package/SECURITY.md +110 -0
  25. package/app/config/index.js +4 -0
  26. package/app/configParts/adminIdentity.js +92 -0
  27. package/app/configParts/baileysConfig.js +1818 -0
  28. package/app/configParts/groupUtils.js +692 -0
  29. package/app/configParts/loggerConfig.js +394 -0
  30. package/app/configParts/messagePersistenceService.js +305 -0
  31. package/app/connection/baileysCompatibility.test.js +40 -0
  32. package/app/connection/baileysDbAuthState.js +344 -0
  33. package/app/connection/socketController.js +2243 -0
  34. package/app/controllers/messageController.js +7 -0
  35. package/app/controllers/messagePipeline/commandMiddleware.js +146 -0
  36. package/app/controllers/messagePipeline/conversationMiddleware.js +183 -0
  37. package/app/controllers/messagePipeline/messagePipelineMiddlewares.test.js +522 -0
  38. package/app/controllers/messagePipeline/postProcessingMiddleware.js +41 -0
  39. package/app/controllers/messagePipeline/preProcessingMiddlewares.js +166 -0
  40. package/app/controllers/messageProcessingPipeline.js +699 -0
  41. package/app/modules/adminModule/AGENT.md +4056 -0
  42. package/app/modules/adminModule/adminAiHelpService.js +56 -0
  43. package/app/modules/adminModule/adminConfigRuntime.js +177 -0
  44. package/app/modules/adminModule/commandConfig.json +7122 -0
  45. package/app/modules/adminModule/groupCommandHandlers.js +1823 -0
  46. package/app/modules/adminModule/groupCommandHandlers.test.js +350 -0
  47. package/app/modules/adminModule/groupEventHandlers.js +399 -0
  48. package/app/modules/aiModule/AGENT.md +547 -0
  49. package/app/modules/aiModule/aiAiHelpService.js +14 -0
  50. package/app/modules/aiModule/aiConfigRuntime.js +135 -0
  51. package/app/modules/aiModule/catCommand.js +967 -0
  52. package/app/modules/aiModule/commandConfig.json +981 -0
  53. package/app/modules/analyticsModule/messageAnalysisEventRepository.js +83 -0
  54. package/app/modules/gameModule/AGENT.md +196 -0
  55. package/app/modules/gameModule/commandConfig.json +366 -0
  56. package/app/modules/gameModule/diceCommand.js +42 -0
  57. package/app/modules/gameModule/gameAiHelpService.js +14 -0
  58. package/app/modules/gameModule/gameConfigRuntime.js +68 -0
  59. package/app/modules/menuModule/AGENT.md +205 -0
  60. package/app/modules/menuModule/commandConfig.json +366 -0
  61. package/app/modules/menuModule/common.js +316 -0
  62. package/app/modules/menuModule/menuAiHelpService.js +14 -0
  63. package/app/modules/menuModule/menuConfigRuntime.js +68 -0
  64. package/app/modules/menuModule/menus.js +66 -0
  65. package/app/modules/playModule/AGENT.md +321 -0
  66. package/app/modules/playModule/commandConfig.json +584 -0
  67. package/app/modules/playModule/playAiHelpService.js +14 -0
  68. package/app/modules/playModule/playCommand.js +1417 -0
  69. package/app/modules/playModule/playConfigRuntime.js +68 -0
  70. package/app/modules/quoteModule/AGENT.md +199 -0
  71. package/app/modules/quoteModule/commandConfig.json +366 -0
  72. package/app/modules/quoteModule/quoteAiHelpService.js +14 -0
  73. package/app/modules/quoteModule/quoteCommand.js +842 -0
  74. package/app/modules/quoteModule/quoteConfigRuntime.js +68 -0
  75. package/app/modules/rpgPokemonModule/AGENT.md +229 -0
  76. package/app/modules/rpgPokemonModule/commandConfig.json +386 -0
  77. package/app/modules/rpgPokemonModule/rpgBattleCanvasRenderer.js +795 -0
  78. package/app/modules/rpgPokemonModule/rpgBattleService.js +2110 -0
  79. package/app/modules/rpgPokemonModule/rpgBattleService.test.js +770 -0
  80. package/app/modules/rpgPokemonModule/rpgEvolutionUtils.js +22 -0
  81. package/app/modules/rpgPokemonModule/rpgPokemonAiHelpService.js +14 -0
  82. package/app/modules/rpgPokemonModule/rpgPokemonCommand.js +174 -0
  83. package/app/modules/rpgPokemonModule/rpgPokemonConfigRuntime.js +68 -0
  84. package/app/modules/rpgPokemonModule/rpgPokemonDomain.js +192 -0
  85. package/app/modules/rpgPokemonModule/rpgPokemonDomain.test.js +93 -0
  86. package/app/modules/rpgPokemonModule/rpgPokemonEvolution.test.js +46 -0
  87. package/app/modules/rpgPokemonModule/rpgPokemonMessages.js +746 -0
  88. package/app/modules/rpgPokemonModule/rpgPokemonRepository.js +1847 -0
  89. package/app/modules/rpgPokemonModule/rpgPokemonService.js +6839 -0
  90. package/app/modules/rpgPokemonModule/rpgProfileCanvasRenderer.js +354 -0
  91. package/app/modules/statsModule/AGENT.md +320 -0
  92. package/app/modules/statsModule/commandConfig.json +540 -0
  93. package/app/modules/statsModule/globalRankingCommand.js +64 -0
  94. package/app/modules/statsModule/rankingCommand.js +41 -0
  95. package/app/modules/statsModule/rankingCommon.js +1305 -0
  96. package/app/modules/statsModule/statsAiHelpService.js +14 -0
  97. package/app/modules/statsModule/statsConfigRuntime.js +68 -0
  98. package/app/modules/stickerModule/AGENT.md +692 -0
  99. package/app/modules/stickerModule/addStickerMetadata.js +239 -0
  100. package/app/modules/stickerModule/commandConfig.json +1216 -0
  101. package/app/modules/stickerModule/convertToWebp.js +367 -0
  102. package/app/modules/stickerModule/stickerAiHelpService.js +14 -0
  103. package/app/modules/stickerModule/stickerCommand.js +446 -0
  104. package/app/modules/stickerModule/stickerConfigRuntime.js +68 -0
  105. package/app/modules/stickerModule/stickerConvertCommand.js +159 -0
  106. package/app/modules/stickerModule/stickerTextCommand.js +653 -0
  107. package/app/modules/stickerPackModule/AGENT.md +215 -0
  108. package/app/modules/stickerPackModule/autoPackCollectorRuntime.js +20 -0
  109. package/app/modules/stickerPackModule/autoPackCollectorService.js +357 -0
  110. package/app/modules/stickerPackModule/commandConfig.json +387 -0
  111. package/app/modules/stickerPackModule/domainEventOutboxRepository.js +227 -0
  112. package/app/modules/stickerPackModule/domainEvents.js +52 -0
  113. package/app/modules/stickerPackModule/semanticReclassificationEngine.js +429 -0
  114. package/app/modules/stickerPackModule/semanticReclassificationEngine.test.js +75 -0
  115. package/app/modules/stickerPackModule/semanticThemeClusterService.js +544 -0
  116. package/app/modules/stickerPackModule/stickerAssetClassificationRepository.js +400 -0
  117. package/app/modules/stickerPackModule/stickerAssetRepository.js +400 -0
  118. package/app/modules/stickerPackModule/stickerAssetReprocessQueueRepository.js +175 -0
  119. package/app/modules/stickerPackModule/stickerAutoPackByTagsRuntime.js +3702 -0
  120. package/app/modules/stickerPackModule/stickerClassificationBackgroundRuntime.js +559 -0
  121. package/app/modules/stickerPackModule/stickerClassificationService.js +557 -0
  122. package/app/modules/stickerPackModule/stickerDedicatedTaskWorkerRuntime.js +249 -0
  123. package/app/modules/stickerPackModule/stickerDomainEventBus.js +65 -0
  124. package/app/modules/stickerPackModule/stickerDomainEventConsumerRuntime.js +208 -0
  125. package/app/modules/stickerPackModule/stickerMarketplaceDriftService.js +99 -0
  126. package/app/modules/stickerPackModule/stickerObjectStorageService.js +285 -0
  127. package/app/modules/stickerPackModule/stickerPackAiHelpService.js +14 -0
  128. package/app/modules/stickerPackModule/stickerPackCommandHandlers.js +1148 -0
  129. package/app/modules/stickerPackModule/stickerPackConfigRuntime.js +68 -0
  130. package/app/modules/stickerPackModule/stickerPackEngagementRepository.js +152 -0
  131. package/app/modules/stickerPackModule/stickerPackErrors.js +30 -0
  132. package/app/modules/stickerPackModule/stickerPackInteractionEventRepository.js +101 -0
  133. package/app/modules/stickerPackModule/stickerPackItemRepository.js +432 -0
  134. package/app/modules/stickerPackModule/stickerPackMarketplaceService.js +313 -0
  135. package/app/modules/stickerPackModule/stickerPackMessageService.js +268 -0
  136. package/app/modules/stickerPackModule/stickerPackRepository.js +450 -0
  137. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRepository.js +179 -0
  138. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRuntime.js +271 -0
  139. package/app/modules/stickerPackModule/stickerPackService.js +733 -0
  140. package/app/modules/stickerPackModule/stickerPackServiceRuntime.js +32 -0
  141. package/app/modules/stickerPackModule/stickerPackUtils.js +107 -0
  142. package/app/modules/stickerPackModule/stickerStorageService.js +559 -0
  143. package/app/modules/stickerPackModule/stickerWorkerPipelineRuntime.js +242 -0
  144. package/app/modules/stickerPackModule/stickerWorkerTaskQueueRepository.js +242 -0
  145. package/app/modules/systemMetricsModule/AGENT.md +193 -0
  146. package/app/modules/systemMetricsModule/commandConfig.json +344 -0
  147. package/app/modules/systemMetricsModule/pingCommand.js +399 -0
  148. package/app/modules/systemMetricsModule/systemMetricsAiHelpService.js +14 -0
  149. package/app/modules/systemMetricsModule/systemMetricsConfigRuntime.js +68 -0
  150. package/app/modules/tiktokModule/AGENT.md +196 -0
  151. package/app/modules/tiktokModule/commandConfig.json +366 -0
  152. package/app/modules/tiktokModule/tiktokAiHelpService.js +14 -0
  153. package/app/modules/tiktokModule/tiktokCommand.js +716 -0
  154. package/app/modules/tiktokModule/tiktokConfigRuntime.js +68 -0
  155. package/app/modules/userModule/AGENT.md +200 -0
  156. package/app/modules/userModule/commandConfig.json +386 -0
  157. package/app/modules/userModule/userAiHelpService.js +14 -0
  158. package/app/modules/userModule/userCommand.js +1155 -0
  159. package/app/modules/userModule/userConfigRuntime.js +68 -0
  160. package/app/modules/waifuPicsModule/AGENT.md +431 -0
  161. package/app/modules/waifuPicsModule/commandConfig.json +780 -0
  162. package/app/modules/waifuPicsModule/waifuPicsAiHelpService.js +14 -0
  163. package/app/modules/waifuPicsModule/waifuPicsCommand.js +586 -0
  164. package/app/modules/waifuPicsModule/waifuPicsConfigRuntime.js +68 -0
  165. package/app/observability/metrics.js +766 -0
  166. package/app/services/ai/aiHelpResponseCacheRepository.js +280 -0
  167. package/app/services/ai/aiLearningRepository.js +400 -0
  168. package/app/services/ai/commandConfigEnrichmentRepository.js +769 -0
  169. package/app/services/ai/commandConfigEnrichmentService.js +452 -0
  170. package/app/services/ai/commandConfigValidationService.js +443 -0
  171. package/app/services/ai/commandToolBuilderService.js +192 -0
  172. package/app/services/ai/conversationRouterService.js +516 -0
  173. package/app/services/ai/geminiService.js +115 -0
  174. package/app/services/ai/geminiService.test.js +87 -0
  175. package/app/services/ai/globalModuleAiHelpService.js +1412 -0
  176. package/app/services/ai/globalToolCallingService.js +203 -0
  177. package/app/services/ai/messageCommandExecutionService.js +391 -0
  178. package/app/services/ai/moduleAiHelpCoreService.js +1099 -0
  179. package/app/services/ai/moduleAiHelpWrapperFactory.js +65 -0
  180. package/app/services/ai/moduleCommandConfigRuntimeService.js +113 -0
  181. package/app/services/ai/moduleToolExecutorService.js +464 -0
  182. package/app/services/ai/moduleToolRegistryService.js +178 -0
  183. package/app/services/ai/toolCandidateSelectorService.js +781 -0
  184. package/app/services/auth/googleWebLinkService.js +80 -0
  185. package/app/services/auth/whatsappLoginLinkService.js +230 -0
  186. package/app/services/external/pokeApiService.js +398 -0
  187. package/app/services/group/groupMetadataService.js +311 -0
  188. package/app/services/infra/dbWriteQueue.js +874 -0
  189. package/app/services/infra/featureFlagService.js +131 -0
  190. package/app/services/infra/queueUtils.js +55 -0
  191. package/app/services/messaging/captchaService.js +491 -0
  192. package/app/services/messaging/messagePersistenceService.js +1 -0
  193. package/app/services/messaging/newsBroadcastService.js +347 -0
  194. package/app/services/sticker/stickerFocusService.js +347 -0
  195. package/app/services/sticker/stickerFocusService.test.js +43 -0
  196. package/app/store/aiPromptStore.js +38 -0
  197. package/app/store/conversationSessionStore.js +131 -0
  198. package/app/store/groupConfigStore.js +58 -0
  199. package/app/store/premiumUserStore.js +54 -0
  200. package/app/utils/antiLink/antiLinkModule.js +700 -0
  201. package/app/utils/http/getImageBufferModule.js +18 -0
  202. package/app/utils/json/jsonSanitizer.js +113 -0
  203. package/app/utils/json/jsonSanitizer.test.js +40 -0
  204. package/app/utils/systemMetrics/systemMetricsModule.js +88 -0
  205. package/app/workers/aiLearningWorker.js +605 -0
  206. package/app/workers/commandConfigEnrichmentWorker.js +242 -0
  207. package/database/index.js +2075 -0
  208. package/database/init.js +151 -0
  209. package/database/migrations/.gitkeep +0 -0
  210. package/database/migrations/20260307_d0_hardening_down.sql +64 -0
  211. package/database/migrations/20260307_d0_hardening_up.sql +79 -0
  212. package/database/migrations/20260307_d1_terms_acceptance_down.sql +11 -0
  213. package/database/migrations/20260307_d1_terms_acceptance_up.sql +37 -0
  214. package/database/migrations/20260307_d2_auth_hardening_down.sql +75 -0
  215. package/database/migrations/20260307_d2_auth_hardening_up.sql +100 -0
  216. package/database/migrations/20260314_d7_canonical_sender_down.sql +53 -0
  217. package/database/migrations/20260314_d7_canonical_sender_up.sql +114 -0
  218. package/database/migrations/20260406_d30_security_analytics_down.sql +95 -0
  219. package/database/migrations/20260406_d30_security_analytics_up.sql +292 -0
  220. package/database/migrations/20260407_d31_web_google_session_token_hardening_down.sql +2 -0
  221. package/database/migrations/20260407_d31_web_google_session_token_hardening_up.sql +17 -0
  222. package/database/migrations/20260408_d32_ai_help_response_cache_down.sql +1 -0
  223. package/database/migrations/20260408_d32_ai_help_response_cache_up.sql +22 -0
  224. package/database/migrations/20260409_d33_ai_learning_tables_down.sql +4 -0
  225. package/database/migrations/20260409_d33_ai_learning_tables_up.sql +52 -0
  226. package/database/migrations/20260410_d34_command_config_enrichment_down.sql +3 -0
  227. package/database/migrations/20260410_d34_command_config_enrichment_up.sql +48 -0
  228. package/database/schema.sql +1186 -0
  229. package/docker-compose.yml +104 -0
  230. package/docs/audits/stickerCatalogController-out-of-scope.md +103 -0
  231. package/docs/audits/stickerCatalogController-symbols.md +58 -0
  232. package/docs/compliance/acceptable-use-policy-2026-03-07.md +35 -0
  233. package/docs/compliance/dpa-b2b-standard-2026-03-07.md +80 -0
  234. package/docs/compliance/monthly-compliance-checklist-2026-03-07.md +88 -0
  235. package/docs/compliance/notice-and-takedown-policy-2026-03-07.md +34 -0
  236. package/docs/compliance/privacy-policy-2026-03-07.md +75 -0
  237. package/docs/compliance/subprocessors-inventory-2026-03-07.md +16 -0
  238. package/docs/database/production-db-evolution-runbook-2026q1.md +365 -0
  239. package/docs/security/dsar-lgpd-runbook-2026-03-07.md +86 -0
  240. package/docs/security/incident-response-lgpd-anpd-runbook-2026-03-07.md +77 -0
  241. package/docs/security/network-hardening-runbook-2026-03-07.md +137 -0
  242. package/docs/seo/omnizap-seo-playbook-br-2026-02-28.md +238 -0
  243. package/docs/seo/satellite-page-template.md +116 -0
  244. package/docs/seo/satellite-pages-phase1.json +364 -0
  245. package/docs/wiki/Home.md +120 -0
  246. package/docs/wiki/pair-extraordinaire-2026-03-08.md +3 -0
  247. package/docs/wiki/recent-changes-2026-03-08.md +47 -0
  248. package/ecosystem.prod.config.cjs +135 -0
  249. package/eslint.config.js +89 -0
  250. package/index.js +488 -0
  251. package/ml/clip_classifier/Dockerfile +18 -0
  252. package/ml/clip_classifier/README.md +118 -0
  253. package/ml/clip_classifier/adaptive_scoring.py +40 -0
  254. package/ml/clip_classifier/classifier.py +654 -0
  255. package/ml/clip_classifier/embedding_store.py +481 -0
  256. package/ml/clip_classifier/env_loader.py +15 -0
  257. package/ml/clip_classifier/llm_label_expander.py +144 -0
  258. package/ml/clip_classifier/main.py +213 -0
  259. package/ml/clip_classifier/requirements.txt +10 -0
  260. package/ml/clip_classifier/similarity_engine.py +74 -0
  261. package/new-logo.png +0 -0
  262. package/observability/alert-rules.yml +60 -0
  263. package/observability/grafana/dashboards/omnizap-mysql.json +136 -0
  264. package/observability/grafana/dashboards/omnizap-overview.json +170 -0
  265. package/observability/grafana/provisioning/dashboards/dashboards.yml +11 -0
  266. package/observability/grafana/provisioning/datasources/datasources.yml +15 -0
  267. package/observability/loki-config.yml +38 -0
  268. package/observability/mysql-setup.sql +46 -0
  269. package/observability/prometheus.yml +35 -0
  270. package/observability/promtail-config.yml +84 -0
  271. package/observability/sticker-catalog-slo.md +83 -0
  272. package/observability/sticker-scale-hardening-rollout.md +128 -0
  273. package/package.json +144 -0
  274. package/public/apple-touch-icon.png +0 -0
  275. package/public/assets/css/commands-react.input.css +71 -0
  276. package/public/assets/css/create-pack-react.input.css +31 -0
  277. package/public/assets/css/home-react.input.css +106 -0
  278. package/public/assets/css/login-react.input.css +58 -0
  279. package/public/assets/css/stickers-react.input.css +18 -0
  280. package/public/assets/css/terms-react.input.css +115 -0
  281. package/public/assets/css/user-react.input.css +57 -0
  282. package/public/assets/images/brand-icon-192.png +0 -0
  283. package/public/assets/images/brand-logo-128.webp +0 -0
  284. package/public/assets/images/hero-banner-1280.jpg +0 -0
  285. package/public/comandos/commands-catalog.json +4517 -0
  286. package/public/css/api-docs.css +161 -0
  287. package/public/css/stickers-admin.css +1288 -0
  288. package/public/css/styles.css +679 -0
  289. package/public/css/systemadm/admin.css +474 -0
  290. package/public/css/systemadm/base.css +73 -0
  291. package/public/css/systemadm/components.css +662 -0
  292. package/public/css/systemadm/layout.css +229 -0
  293. package/public/css/systemadm/tokens.css +56 -0
  294. package/public/favicon-16x16.png +0 -0
  295. package/public/favicon-32x32.png +0 -0
  296. package/public/favicon.ico +0 -0
  297. package/public/js/apps/apiDocsApp.js +235 -0
  298. package/public/js/apps/commandsReactApp.js +528 -0
  299. package/public/js/apps/createPackApp.js +1646 -0
  300. package/public/js/apps/homeReactApp.js +942 -0
  301. package/public/js/apps/loginReactApp.js +496 -0
  302. package/public/js/apps/stickersAdminApp.js +1753 -0
  303. package/public/js/apps/stickersApp.js +3797 -0
  304. package/public/js/apps/termsReactApp.js +528 -0
  305. package/public/js/apps/userApp.js +2540 -0
  306. package/public/js/apps/userProfile/actions.js +66 -0
  307. package/public/js/apps/userReactApp.js +547 -0
  308. package/public/js/catalog.js +950 -0
  309. package/public/pages/api-docs.html +40 -0
  310. package/public/pages/aup.html +158 -0
  311. package/public/pages/comandos.html +41 -0
  312. package/public/pages/dpa.html +227 -0
  313. package/public/pages/home.html +45 -0
  314. package/public/pages/licenca.html +182 -0
  315. package/public/pages/login.html +40 -0
  316. package/public/pages/notice-and-takedown.html +234 -0
  317. package/public/pages/politica-de-privacidade.html +251 -0
  318. package/public/pages/seo-bot-whatsapp-para-grupo.html +350 -0
  319. package/public/pages/seo-bot-whatsapp-sem-programar.html +350 -0
  320. package/public/pages/seo-como-automatizar-avisos-no-whatsapp.html +350 -0
  321. package/public/pages/seo-como-criar-comandos-whatsapp.html +350 -0
  322. package/public/pages/seo-como-evitar-spam-no-whatsapp.html +350 -0
  323. package/public/pages/seo-como-moderar-grupo-whatsapp.html +350 -0
  324. package/public/pages/seo-como-organizar-comunidade-whatsapp.html +350 -0
  325. package/public/pages/seo-melhor-bot-whatsapp-para-grupos.html +350 -0
  326. package/public/pages/stickers-admin.html +31 -0
  327. package/public/pages/stickers-create.html +41 -0
  328. package/public/pages/stickers.html +45 -0
  329. package/public/pages/suboperadores.html +237 -0
  330. package/public/pages/termos-de-uso-texto-integral.html +241 -0
  331. package/public/pages/termos-de-uso.html +41 -0
  332. package/public/pages/user-password-reset.html +32 -0
  333. package/public/pages/user-systemadm.html +508 -0
  334. package/public/pages/user.html +39 -0
  335. package/public/robots.txt +9 -0
  336. package/public/site.webmanifest +24 -0
  337. package/public/sitemap.xml +98 -0
  338. package/schemas/command-config.schema.json +582 -0
  339. package/scripts/baileys-compat-smoke.mjs +12 -0
  340. package/scripts/cache-bust.mjs +142 -0
  341. package/scripts/deploy.sh +916 -0
  342. package/scripts/email-broadcast-terms-update.mjs +170 -0
  343. package/scripts/enrich-command-discovery-fields.mjs +286 -0
  344. package/scripts/generate-command-config-schema.mjs +273 -0
  345. package/scripts/generate-commands-catalog.mjs +308 -0
  346. package/scripts/generate-module-agents.mjs +631 -0
  347. package/scripts/generate-seo-satellite-pages.mjs +400 -0
  348. package/scripts/github-deploy-notify.mjs +174 -0
  349. package/scripts/github-release-notify.mjs +219 -0
  350. package/scripts/release.sh +599 -0
  351. package/scripts/run-codeql-local.sh +116 -0
  352. package/scripts/run-prettier-all.mjs +25 -0
  353. package/scripts/security-smoketest.mjs +581 -0
  354. package/scripts/sticker-catalog-loadtest.mjs +210 -0
  355. package/scripts/sticker-worker-task.mjs +119 -0
  356. package/scripts/sync-readme-snapshot.mjs +133 -0
  357. package/scripts/validate-command-config-schema.mjs +130 -0
  358. package/scripts/validate-command-configs.mjs +15 -0
  359. package/scripts/wiki-sync.sh +191 -0
  360. package/server/auth/googleWebAuth/googleWebAuthRuntime.js +62 -0
  361. package/server/auth/googleWebAuth/googleWebAuthService.js +807 -0
  362. package/server/auth/jwt/webJwtService.js +147 -0
  363. package/server/auth/stickerCatalogAuthContext.js +165 -0
  364. package/server/auth/termsAcceptance/termsAcceptanceHandler.js +189 -0
  365. package/server/auth/userPassword/index.js +14 -0
  366. package/server/auth/userPassword/userPasswordAuthService.js +422 -0
  367. package/server/auth/userPassword/userPasswordCrypto.js +199 -0
  368. package/server/auth/userPassword/userPasswordCrypto.test.js +76 -0
  369. package/server/auth/userPassword/userPasswordRecoveryService.js +728 -0
  370. package/server/auth/validation/authSchemas.js +236 -0
  371. package/server/auth/webAccount/webAccountHandlers.js +1434 -0
  372. package/server/controllers/admin/adminBanService.js +138 -0
  373. package/server/controllers/admin/adminPanelHandlers.js +2083 -0
  374. package/server/controllers/admin/stickerCatalogAdminContext.js +17 -0
  375. package/server/controllers/admin/systemAdminController.js +201 -0
  376. package/server/controllers/email/emailAutomationController.js +239 -0
  377. package/server/controllers/metricsController.js +21 -0
  378. package/server/controllers/seo/stickerCatalogSeoContext.js +514 -0
  379. package/server/controllers/sticker/nonCatalogHandlers.js +303 -0
  380. package/server/controllers/sticker/stickerCatalogController.js +4700 -0
  381. package/server/controllers/system/contactController.js +115 -0
  382. package/server/controllers/system/githubController.js +137 -0
  383. package/server/controllers/system/stickerCatalogSystemContext.js +758 -0
  384. package/server/controllers/system/storageController.js +154 -0
  385. package/server/controllers/system/systemController.js +135 -0
  386. package/server/controllers/system/systemMetricsController.js +156 -0
  387. package/server/controllers/system/visitController.js +90 -0
  388. package/server/controllers/userController.js +145 -0
  389. package/server/email/emailAutomationRuntime.js +225 -0
  390. package/server/email/emailAutomationService.js +125 -0
  391. package/server/email/emailOutboxRepository.js +282 -0
  392. package/server/email/emailTemplateService.js +480 -0
  393. package/server/email/emailTransportService.js +156 -0
  394. package/server/http/clientIp.js +95 -0
  395. package/server/http/httpRequestUtils.js +262 -0
  396. package/server/http/httpRequestUtils.test.js +80 -0
  397. package/server/http/httpServer.js +180 -0
  398. package/server/http/requestContext.js +20 -0
  399. package/server/http/siteRoutingUtils.js +87 -0
  400. package/server/index.js +1 -0
  401. package/server/middleware/cachePolicy.js +26 -0
  402. package/server/middleware/cachePolicyHelpers.js +1 -0
  403. package/server/middleware/endpointRateLimit.js +181 -0
  404. package/server/middleware/rateLimit.js +70 -0
  405. package/server/middleware/requireAdminAuth.js +48 -0
  406. package/server/middleware/securityHeaders.js +97 -0
  407. package/server/routes/admin/systemAdminRouter.js +64 -0
  408. package/server/routes/email/emailAutomationRouter.js +46 -0
  409. package/server/routes/health/healthRouter.js +41 -0
  410. package/server/routes/indexRouter.js +234 -0
  411. package/server/routes/metrics/metricsRouter.js +58 -0
  412. package/server/routes/static/staticPageRouter.js +134 -0
  413. package/server/routes/sticker/catalogHandlers/catalogAdminHttp.js +105 -0
  414. package/server/routes/sticker/catalogHandlers/catalogAuthHttp.js +77 -0
  415. package/server/routes/sticker/catalogHandlers/catalogPublicHttp.js +120 -0
  416. package/server/routes/sticker/catalogHandlers/catalogUploadHttp.js +83 -0
  417. package/server/routes/sticker/catalogRouter.js +77 -0
  418. package/server/routes/sticker/stickerApiRouter.js +84 -0
  419. package/server/routes/sticker/stickerDataRouter.js +145 -0
  420. package/server/routes/sticker/stickerSiteRouter.js +43 -0
  421. package/server/routes/user/userApiPaths.js +66 -0
  422. package/server/routes/user/userRouter.js +65 -0
  423. package/server/utils/safePath.js +26 -0
  424. package/utils/logger/loggerModule.js +35 -0
  425. package/vite.config.mjs +38 -0
@@ -0,0 +1,387 @@
1
+ {
2
+ "schema_version": "2.0.0",
3
+ "module": "stickerPackModule",
4
+ "enabled": true,
5
+ "source_files": ["stickerPackCommandHandlers.js"],
6
+ "defaults": {
7
+ "inheritance_mode": "deep_merge_with_command_overrides",
8
+ "compatibility_mode": "legacy_and_v2_fields",
9
+ "legacy_field_aliases": {
10
+ "descricao": "description",
11
+ "metodos_de_uso": "usage",
12
+ "permissao_necessaria": "permission",
13
+ "local_de_uso": "contexts",
14
+ "informacoes_coletadas": "collected_data",
15
+ "pre_condicoes": "requirements",
16
+ "dependencias_externas": "dependencies",
17
+ "efeitos_colaterais": "side_effects",
18
+ "observabilidade": "observability",
19
+ "privacidade": "privacy",
20
+ "limite_uso_por_plano": "plan_limits",
21
+ "argumentos": "arguments",
22
+ "acesso": "access"
23
+ },
24
+ "command": {
25
+ "enabled": true,
26
+ "category": "figurinhas",
27
+ "version": "1.0.0",
28
+ "stability": "stable",
29
+ "deprecated": false,
30
+ "replaced_by": null,
31
+ "risk_level": "medium"
32
+ },
33
+ "requirements": {
34
+ "require_group": false,
35
+ "require_group_admin": false,
36
+ "require_bot_owner": false,
37
+ "require_google_login": true,
38
+ "require_nsfw_enabled": false,
39
+ "require_media": false,
40
+ "require_reply_message": false,
41
+ "legacy": {
42
+ "requer_grupo": false,
43
+ "requer_admin": false,
44
+ "requer_admin_principal": false,
45
+ "requer_google_login": true,
46
+ "requer_nsfw": false,
47
+ "requer_midia": false,
48
+ "requer_mensagem_respondida": false
49
+ }
50
+ },
51
+ "pre_condicoes": {
52
+ "requer_grupo": false,
53
+ "requer_admin": false,
54
+ "requer_admin_principal": false,
55
+ "requer_google_login": true,
56
+ "requer_nsfw": false,
57
+ "requer_midia": false,
58
+ "requer_mensagem_respondida": false
59
+ },
60
+ "rate_limit": {
61
+ "max": 20,
62
+ "janela_ms": 60000,
63
+ "escopo": "usuario"
64
+ },
65
+ "dependencies": ["banco de dados de packs", "armazenamento de assets de figurinha"],
66
+ "dependencias_externas": ["banco de dados de packs", "armazenamento de assets de figurinha"],
67
+ "responses": {
68
+ "success": "Comando executado com sucesso.",
69
+ "usage_error": "Formato de uso inválido. Consulte metodos_de_uso.",
70
+ "permission_error": "Permissão insuficiente para executar este comando."
71
+ },
72
+ "respostas_padrao": {
73
+ "sucesso": "Comando executado com sucesso.",
74
+ "erro_uso": "Formato de uso inválido. Consulte metodos_de_uso.",
75
+ "erro_permissao": "Permissão insuficiente para executar este comando."
76
+ },
77
+ "observability": {
78
+ "event_name": "command.executed",
79
+ "log_level": "info",
80
+ "tags": ["whatsapp", "command", "stickerPackModule"]
81
+ },
82
+ "privacy": {
83
+ "data_categories": ["chat_identifier", "sender_identifier", "command_content"],
84
+ "retention_policy": "standard_app_logs",
85
+ "legal_basis": "service_execution_and_legitimate_interest"
86
+ },
87
+ "access": {
88
+ "premium_only": false,
89
+ "allowed_plans": ["comum", "premium"]
90
+ },
91
+ "acesso": {
92
+ "somente_premium": false,
93
+ "planos_permitidos": ["comum", "premium"]
94
+ },
95
+ "plan_limits": {
96
+ "comum": {
97
+ "max": 12,
98
+ "janela_ms": 300000,
99
+ "escopo": "usuario"
100
+ },
101
+ "premium": {
102
+ "max": 45,
103
+ "janela_ms": 300000,
104
+ "escopo": "usuario"
105
+ }
106
+ },
107
+ "limite_uso_por_plano": {
108
+ "comum": {
109
+ "max": 12,
110
+ "janela_ms": 300000,
111
+ "escopo": "usuario"
112
+ },
113
+ "premium": {
114
+ "max": 45,
115
+ "janela_ms": 300000,
116
+ "escopo": "usuario"
117
+ }
118
+ },
119
+ "behavior_templates": {
120
+ "toggle_on_off_status": {
121
+ "type": "toggle",
122
+ "allowed_actions": ["on", "off", "status"],
123
+ "action_argument": "acao"
124
+ },
125
+ "add_remove_list": {
126
+ "type": "list_management",
127
+ "allowed_actions": ["add", "remove", "list"],
128
+ "action_argument": "acao"
129
+ },
130
+ "approve_reject": {
131
+ "type": "moderation_decision",
132
+ "allowed_actions": ["approve", "reject"],
133
+ "action_argument": "acao",
134
+ "requires_targets": true
135
+ },
136
+ "set_status_reset": {
137
+ "type": "configuration_window",
138
+ "allowed_actions": ["set", "status", "reset"],
139
+ "action_argument": "valor"
140
+ }
141
+ }
142
+ },
143
+ "commands": [
144
+ {
145
+ "name": "pacote",
146
+ "aliases": ["packs", "pacotes", "pack"],
147
+ "descricao": "Gerencia packs de figurinhas (criar, listar, adicionar, enviar).",
148
+ "metodos_de_uso": ["<prefix>pacote help", "<prefix>pacote create meupack", "<prefix>pacote list", "<prefix>pacote add <pacote>", "<prefix>pacote send <pacote>"],
149
+ "permissao_necessaria": "usuario comum",
150
+ "limite_de_uso": "rate limit por janela e limite de itens por pack",
151
+ "local_de_uso": ["privado", "grupo"],
152
+ "informacoes_coletadas": ["identificador do chat (remoteJid)", "identificador do remetente (senderJid)", "texto do comando e argumentos", "contexto da mensagem (citacao e mencoes, quando existir)", "subcomando e argumentos do pack", "figurinha da mensagem atual/citada (para add/setcover)", "estado de rate limit por usuario", "dados de packs do usuario no armazenamento interno"],
153
+ "enabled": true,
154
+ "categoria": "figurinhas",
155
+ "subcomandos": ["help", "create", "list", "info", "add", "setcover", "setdesc", "setpublisher", "send", "rename", "remove", "delete", "reorder"],
156
+ "argumentos": [
157
+ {
158
+ "nome": "subcomando",
159
+ "tipo": "string",
160
+ "obrigatorio": true,
161
+ "validacao": "ação de gerenciamento de pack",
162
+ "default": null
163
+ },
164
+ {
165
+ "nome": "parametros",
166
+ "tipo": "array<string>",
167
+ "obrigatorio": false,
168
+ "validacao": "dependente do subcomando",
169
+ "default": []
170
+ }
171
+ ],
172
+ "pre_condicoes": {
173
+ "requer_grupo": false,
174
+ "requer_admin": false,
175
+ "requer_admin_principal": false,
176
+ "requer_google_login": true,
177
+ "requer_nsfw": false,
178
+ "requer_midia": false,
179
+ "requer_mensagem_respondida": false
180
+ },
181
+ "rate_limit": {
182
+ "max": 20,
183
+ "janela_ms": 60000,
184
+ "escopo": "usuario"
185
+ },
186
+ "dependencias_externas": ["banco de dados de packs", "armazenamento de assets de figurinha"],
187
+ "efeitos_colaterais": ["cria/atualiza packs no banco", "pode armazenar/remover assets de figurinha"],
188
+ "respostas_padrao": {
189
+ "sucesso": "Comando executado com sucesso.",
190
+ "erro_uso": "Formato de uso inválido. Consulte metodos_de_uso.",
191
+ "erro_permissao": "Permissão insuficiente para executar este comando."
192
+ },
193
+ "observabilidade": {
194
+ "evento_analytics": "whatsapp_command_pack",
195
+ "tags_log": ["whatsapp", "command", "stickerPackModule", "pack"],
196
+ "nivel_log": "info"
197
+ },
198
+ "privacidade": {
199
+ "dados_sensiveis": ["identificador do remetente", "conteúdo de figurinhas adicionadas ao pack", "metadados de packs do usuário"],
200
+ "retencao": "conforme políticas de logs, banco de dados e arquivos temporários da aplicação",
201
+ "base_legal": "execução do serviço solicitado e legítimo interesse operacional"
202
+ },
203
+ "capability_keywords": ["pacote", "packs", "figurinhas", "privado", "grupo"],
204
+ "faq_patterns": ["como usar pacote", "o que faz pacote", "comando pacote"],
205
+ "user_phrasings": ["quero usar pacote", "me ajuda com pacote", "gerencia packs de figurinhas"],
206
+ "suggestion_priority": 100,
207
+ "acesso": {
208
+ "somente_premium": false,
209
+ "planos_permitidos": ["comum", "premium"]
210
+ },
211
+ "limite_uso_por_plano": {
212
+ "comum": {
213
+ "max": 12,
214
+ "janela_ms": 300000,
215
+ "escopo": "usuario"
216
+ },
217
+ "premium": {
218
+ "max": 45,
219
+ "janela_ms": 300000,
220
+ "escopo": "usuario"
221
+ }
222
+ },
223
+ "mensagens_uso": {
224
+ "default": ["<prefix>pacote help", "<prefix>pacote create meupack", "<prefix>pacote list", "<prefix>pacote add <pacote>", "<prefix>pacote send <pacote>"]
225
+ },
226
+ "id": "stickerpack.pacote",
227
+ "description": "Gerencia packs de figurinhas (criar, listar, adicionar, enviar).",
228
+ "usage": ["<prefix>pacote help", "<prefix>pacote create meupack", "<prefix>pacote list", "<prefix>pacote add <pacote>", "<prefix>pacote send <pacote>"],
229
+ "docs": {
230
+ "summary": "Gerencia packs de figurinhas (criar, listar, adicionar, enviar).",
231
+ "usage_examples": ["<prefix>pacote help", "<prefix>pacote create meupack", "<prefix>pacote list", "<prefix>pacote add <pacote>", "<prefix>pacote send <pacote>"],
232
+ "usage_variants": {
233
+ "default": ["<prefix>pacote help", "<prefix>pacote create meupack", "<prefix>pacote list", "<prefix>pacote add <pacote>", "<prefix>pacote send <pacote>"]
234
+ }
235
+ },
236
+ "permission": "usuario comum",
237
+ "contexts": ["privado", "grupo"],
238
+ "collected_data": ["identificador do chat (remoteJid)", "identificador do remetente (senderJid)", "texto do comando e argumentos", "contexto da mensagem (citacao e mencoes, quando existir)", "subcomando e argumentos do pack", "figurinha da mensagem atual/citada (para add/setcover)", "estado de rate limit por usuario", "dados de packs do usuario no armazenamento interno"],
239
+ "requirements": {
240
+ "require_group": false,
241
+ "require_group_admin": false,
242
+ "require_bot_owner": false,
243
+ "require_google_login": true,
244
+ "require_nsfw_enabled": false,
245
+ "require_media": false,
246
+ "require_reply_message": false,
247
+ "legacy": {
248
+ "requer_grupo": false,
249
+ "requer_admin": false,
250
+ "requer_admin_principal": false,
251
+ "requer_google_login": true,
252
+ "requer_nsfw": false,
253
+ "requer_midia": false,
254
+ "requer_mensagem_respondida": false
255
+ }
256
+ },
257
+ "arguments": [
258
+ {
259
+ "name": "subcomando",
260
+ "type": "string",
261
+ "required": true,
262
+ "default": null,
263
+ "enum": null,
264
+ "description": "ação de gerenciamento de pack",
265
+ "position": 0,
266
+ "accepts_mentions": false,
267
+ "accepts_reply_target": false,
268
+ "greedy": false,
269
+ "validation": "ação de gerenciamento de pack"
270
+ },
271
+ {
272
+ "name": "parametros",
273
+ "type": "array",
274
+ "required": false,
275
+ "default": [],
276
+ "enum": null,
277
+ "description": "dependente do subcomando",
278
+ "position": 1,
279
+ "accepts_mentions": false,
280
+ "accepts_reply_target": false,
281
+ "greedy": false,
282
+ "validation": "dependente do subcomando"
283
+ }
284
+ ],
285
+ "behavior": {
286
+ "type": "list_management",
287
+ "allowed_actions": ["add", "remove", "list"],
288
+ "action_argument": "acao"
289
+ },
290
+ "limits": {
291
+ "usage_description": "rate limit por janela e limite de itens por pack",
292
+ "rate_limit": {
293
+ "max": 20,
294
+ "janela_ms": 60000,
295
+ "escopo": "usuario"
296
+ },
297
+ "access": {
298
+ "somente_premium": false,
299
+ "planos_permitidos": ["comum", "premium"]
300
+ },
301
+ "plan_limits": {
302
+ "comum": {
303
+ "max": 12,
304
+ "janela_ms": 300000,
305
+ "escopo": "usuario"
306
+ },
307
+ "premium": {
308
+ "max": 45,
309
+ "janela_ms": 300000,
310
+ "escopo": "usuario"
311
+ }
312
+ }
313
+ },
314
+ "dependencies": ["banco de dados de packs", "armazenamento de assets de figurinha"],
315
+ "side_effects": ["cria/atualiza packs no banco", "pode armazenar/remover assets de figurinha"],
316
+ "observability": {
317
+ "event_name": "command.executed",
318
+ "event_key": "stickerpack.pacote",
319
+ "analytics_event": "whatsapp_command_pack",
320
+ "log_level": "info",
321
+ "tags": ["whatsapp", "command", "stickerPackModule", "pack"],
322
+ "legacy": {
323
+ "evento_analytics": "whatsapp_command_pack",
324
+ "tags_log": ["whatsapp", "command", "stickerPackModule", "pack"],
325
+ "nivel_log": "info"
326
+ }
327
+ },
328
+ "privacy": {
329
+ "data_categories": ["sender_identifier"],
330
+ "sensitive_fields": ["senderJid"],
331
+ "retention_policy": "standard_app_logs",
332
+ "retention_notes": "conforme políticas de logs, banco de dados e arquivos temporários da aplicação",
333
+ "legal_basis": "service_execution_and_legitimate_interest",
334
+ "legal_basis_notes": "execução do serviço solicitado e legítimo interesse operacional",
335
+ "legacy": {
336
+ "dados_sensiveis": ["identificador do remetente", "conteúdo de figurinhas adicionadas ao pack", "metadados de packs do usuário"],
337
+ "retencao": "conforme políticas de logs, banco de dados e arquivos temporários da aplicação",
338
+ "base_legal": "execução do serviço solicitado e legítimo interesse operacional"
339
+ }
340
+ },
341
+ "discovery": {
342
+ "keywords": ["pacote", "packs", "figurinhas", "privado", "grupo"],
343
+ "faq_queries": ["como usar pacote", "o que faz pacote", "comando pacote"],
344
+ "user_phrasings": ["quero usar pacote", "me ajuda com pacote", "gerencia packs de figurinhas"],
345
+ "suggestion_priority": 100
346
+ },
347
+ "access": {
348
+ "premium_only": false,
349
+ "allowed_plans": ["comum", "premium"],
350
+ "legacy": {
351
+ "somente_premium": false,
352
+ "planos_permitidos": ["comum", "premium"]
353
+ }
354
+ },
355
+ "plan_limits": {
356
+ "comum": {
357
+ "max": 12,
358
+ "janela_ms": 300000,
359
+ "escopo": "usuario"
360
+ },
361
+ "premium": {
362
+ "max": 45,
363
+ "janela_ms": 300000,
364
+ "escopo": "usuario"
365
+ }
366
+ },
367
+ "version": "1.0.0",
368
+ "stability": "stable",
369
+ "deprecated": false,
370
+ "replaced_by": null,
371
+ "risk_level": "low",
372
+ "handler": {
373
+ "file": "stickerPackCommandHandlers.js",
374
+ "method": "handlePackCommand",
375
+ "command_case": "pacote"
376
+ },
377
+ "compatibility": {
378
+ "schema": "legacy_v1_and_v2",
379
+ "legacy_name": "pacote",
380
+ "legacy_fields_present": ["descricao", "metodos_de_uso", "permissao_necessaria", "local_de_uso", "informacoes_coletadas", "argumentos", "pre_condicoes", "dependencias_externas", "efeitos_colaterais", "observabilidade", "privacidade", "acesso", "limite_uso_por_plano"]
381
+ }
382
+ }
383
+ ],
384
+ "textos": {
385
+ "usage_header": ""
386
+ }
387
+ }
@@ -0,0 +1,227 @@
1
+ import { randomUUID } from 'node:crypto';
2
+
3
+ import { executeQuery, TABLES } from '../../../database/index.js';
4
+ import { normalizeDomainEventPayload } from './domainEvents.js';
5
+
6
+ const normalizeStatus = (value) => {
7
+ const normalized = String(value || '')
8
+ .trim()
9
+ .toLowerCase();
10
+ if (['pending', 'processing', 'completed', 'failed'].includes(normalized)) return normalized;
11
+ return null;
12
+ };
13
+
14
+ const parseJson = (value, fallback = null) => {
15
+ if (value === null || value === undefined) return fallback;
16
+ if (typeof value === 'object') return value;
17
+ if (Buffer.isBuffer(value)) {
18
+ try {
19
+ return JSON.parse(value.toString('utf8'));
20
+ } catch {
21
+ return fallback;
22
+ }
23
+ }
24
+ if (typeof value === 'string') {
25
+ try {
26
+ return JSON.parse(value);
27
+ } catch {
28
+ return fallback;
29
+ }
30
+ }
31
+ return fallback;
32
+ };
33
+
34
+ const clampInt = (value, fallback, min, max) => {
35
+ const numeric = Number(value);
36
+ if (!Number.isFinite(numeric)) return fallback;
37
+ return Math.max(min, Math.min(max, Math.floor(numeric)));
38
+ };
39
+
40
+ const CLAIM_LOCK_TIMEOUT_SECONDS = clampInt(process.env.DOMAIN_EVENT_OUTBOX_LOCK_TIMEOUT_SECONDS, 15 * 60, 30, 24 * 60 * 60);
41
+
42
+ const normalizeRow = (row) => {
43
+ if (!row) return null;
44
+ return {
45
+ id: Number(row.id),
46
+ event_type: row.event_type,
47
+ aggregate_type: row.aggregate_type,
48
+ aggregate_id: row.aggregate_id,
49
+ payload: parseJson(row.payload, {}),
50
+ status: row.status,
51
+ priority: Number(row.priority || 0),
52
+ idempotency_key: row.idempotency_key || null,
53
+ available_at: row.available_at || null,
54
+ attempts: Number(row.attempts || 0),
55
+ max_attempts: Number(row.max_attempts || 0),
56
+ worker_token: row.worker_token || null,
57
+ last_error: row.last_error || null,
58
+ locked_at: row.locked_at || null,
59
+ processed_at: row.processed_at || null,
60
+ created_at: row.created_at || null,
61
+ updated_at: row.updated_at || null,
62
+ };
63
+ };
64
+
65
+ export async function enqueueDomainEvent(eventPayload, connection = null) {
66
+ const normalized = normalizeDomainEventPayload(eventPayload);
67
+ if (!normalized) return false;
68
+
69
+ await executeQuery(
70
+ `INSERT INTO ${TABLES.DOMAIN_EVENT_OUTBOX}
71
+ (
72
+ event_type,
73
+ aggregate_type,
74
+ aggregate_id,
75
+ payload,
76
+ status,
77
+ priority,
78
+ idempotency_key,
79
+ available_at,
80
+ attempts,
81
+ max_attempts
82
+ )
83
+ VALUES (?, ?, ?, ?, 'pending', ?, ?, COALESCE(?, UTC_TIMESTAMP()), 0, ?)
84
+ ON DUPLICATE KEY UPDATE
85
+ priority = GREATEST(priority, VALUES(priority)),
86
+ available_at = LEAST(available_at, VALUES(available_at)),
87
+ updated_at = CURRENT_TIMESTAMP`,
88
+ [normalized.event_type, normalized.aggregate_type, normalized.aggregate_id, JSON.stringify(normalized.payload ?? {}), normalized.priority, normalized.idempotency_key, normalized.available_at, normalized.max_attempts],
89
+ connection,
90
+ );
91
+ return true;
92
+ }
93
+
94
+ export async function claimDomainEvent({ eventTypes = [], allowRetryFailed = true } = {}, connection = null) {
95
+ const workerToken = randomUUID();
96
+ const statusClause = allowRetryFailed
97
+ ? `(status = 'pending'
98
+ OR (status = 'failed' AND attempts < max_attempts)
99
+ OR (status = 'processing' AND locked_at <= (UTC_TIMESTAMP() - INTERVAL ${CLAIM_LOCK_TIMEOUT_SECONDS} SECOND)))`
100
+ : `(status = 'pending'
101
+ OR (status = 'processing' AND locked_at <= (UTC_TIMESTAMP() - INTERVAL ${CLAIM_LOCK_TIMEOUT_SECONDS} SECOND)))`;
102
+
103
+ const normalizedTypes = Array.from(
104
+ new Set(
105
+ (Array.isArray(eventTypes) ? eventTypes : [])
106
+ .map((type) =>
107
+ String(type || '')
108
+ .trim()
109
+ .toUpperCase(),
110
+ )
111
+ .filter(Boolean),
112
+ ),
113
+ );
114
+
115
+ let eventTypeClause = '';
116
+ let params = [workerToken];
117
+ if (normalizedTypes.length) {
118
+ eventTypeClause = `AND event_type IN (${normalizedTypes.map(() => '?').join(', ')})`;
119
+ params = [workerToken, ...normalizedTypes];
120
+ }
121
+
122
+ await executeQuery(
123
+ `UPDATE ${TABLES.DOMAIN_EVENT_OUTBOX}
124
+ SET status = 'processing',
125
+ worker_token = ?,
126
+ locked_at = UTC_TIMESTAMP(),
127
+ attempts = attempts + 1,
128
+ updated_at = UTC_TIMESTAMP()
129
+ WHERE id = (
130
+ SELECT id FROM (
131
+ SELECT id
132
+ FROM ${TABLES.DOMAIN_EVENT_OUTBOX}
133
+ WHERE ${statusClause}
134
+ ${eventTypeClause}
135
+ AND available_at <= UTC_TIMESTAMP()
136
+ ORDER BY priority DESC, available_at ASC, id ASC
137
+ LIMIT 1
138
+ ) picked
139
+ )`,
140
+ params,
141
+ connection,
142
+ );
143
+
144
+ const rows = await executeQuery(
145
+ `SELECT *
146
+ FROM ${TABLES.DOMAIN_EVENT_OUTBOX}
147
+ WHERE worker_token = ?
148
+ AND status = 'processing'
149
+ ORDER BY id DESC
150
+ LIMIT 1`,
151
+ [workerToken],
152
+ connection,
153
+ );
154
+
155
+ return normalizeRow(rows?.[0] || null);
156
+ }
157
+
158
+ export async function completeDomainEvent(eventId, connection = null) {
159
+ if (!eventId) return false;
160
+ await executeQuery(
161
+ `UPDATE ${TABLES.DOMAIN_EVENT_OUTBOX}
162
+ SET status = 'completed',
163
+ processed_at = UTC_TIMESTAMP(),
164
+ worker_token = NULL,
165
+ locked_at = NULL,
166
+ last_error = NULL,
167
+ updated_at = CURRENT_TIMESTAMP
168
+ WHERE id = ?`,
169
+ [eventId],
170
+ connection,
171
+ );
172
+ return true;
173
+ }
174
+
175
+ export async function failDomainEvent(eventId, { error = null, retryDelaySeconds = 0 } = {}, connection = null) {
176
+ if (!eventId) return false;
177
+
178
+ const safeDelay = clampInt(retryDelaySeconds, 0, 0, 86400 * 7);
179
+ const message =
180
+ String(error || '')
181
+ .trim()
182
+ .slice(0, 255) || null;
183
+
184
+ await executeQuery(
185
+ `UPDATE ${TABLES.DOMAIN_EVENT_OUTBOX}
186
+ SET status = IF(attempts >= max_attempts, 'failed', 'pending'),
187
+ worker_token = NULL,
188
+ locked_at = NULL,
189
+ last_error = ?,
190
+ available_at = IF(attempts >= max_attempts, available_at, UTC_TIMESTAMP() + INTERVAL ${safeDelay} SECOND),
191
+ updated_at = CURRENT_TIMESTAMP,
192
+ processed_at = IF(attempts >= max_attempts, UTC_TIMESTAMP(), processed_at)
193
+ WHERE id = ?`,
194
+ [message, eventId],
195
+ connection,
196
+ );
197
+
198
+ await executeQuery(
199
+ `INSERT INTO ${TABLES.DOMAIN_EVENT_OUTBOX_DLQ}
200
+ (outbox_event_id, event_type, aggregate_type, aggregate_id, payload, attempts, max_attempts, last_error)
201
+ SELECT id, event_type, aggregate_type, aggregate_id, payload, attempts, max_attempts, last_error
202
+ FROM ${TABLES.DOMAIN_EVENT_OUTBOX}
203
+ WHERE id = ?
204
+ AND status = 'failed'
205
+ ON DUPLICATE KEY UPDATE
206
+ last_error = VALUES(last_error),
207
+ attempts = VALUES(attempts),
208
+ max_attempts = VALUES(max_attempts),
209
+ failed_at = CURRENT_TIMESTAMP`,
210
+ [eventId],
211
+ connection,
212
+ ).catch(() => null);
213
+ return true;
214
+ }
215
+
216
+ export async function countDomainEventsByStatus(status = 'pending', connection = null) {
217
+ const normalized = normalizeStatus(status);
218
+ if (!normalized) return 0;
219
+ const rows = await executeQuery(
220
+ `SELECT COUNT(*) AS total
221
+ FROM ${TABLES.DOMAIN_EVENT_OUTBOX}
222
+ WHERE status = ?`,
223
+ [normalized],
224
+ connection,
225
+ );
226
+ return Number(rows?.[0]?.total || 0);
227
+ }
@@ -0,0 +1,52 @@
1
+ export const STICKER_DOMAIN_EVENTS = Object.freeze({
2
+ STICKER_ASSET_CREATED: 'STICKER_ASSET_CREATED',
3
+ STICKER_CLASSIFIED: 'STICKER_CLASSIFIED',
4
+ PACK_UPDATED: 'PACK_UPDATED',
5
+ ENGAGEMENT_RECORDED: 'ENGAGEMENT_RECORDED',
6
+ });
7
+
8
+ export const STICKER_DOMAIN_EVENT_TYPES = new Set(Object.values(STICKER_DOMAIN_EVENTS));
9
+
10
+ const normalizeType = (value) =>
11
+ String(value || '')
12
+ .trim()
13
+ .toUpperCase()
14
+ .replace(/[^A-Z0-9_]/g, '')
15
+ .slice(0, 96);
16
+
17
+ const normalizeAggregateType = (value) =>
18
+ String(value || '')
19
+ .trim()
20
+ .toLowerCase()
21
+ .replace(/[^a-z0-9_:-]/g, '')
22
+ .slice(0, 96);
23
+
24
+ const normalizeAggregateId = (value) =>
25
+ String(value || '')
26
+ .trim()
27
+ .slice(0, 128);
28
+
29
+ const normalizeIdempotencyKey = (value) =>
30
+ String(value || '')
31
+ .trim()
32
+ .replace(/[^a-zA-Z0-9_:-]/g, '')
33
+ .slice(0, 180);
34
+
35
+ export const normalizeDomainEventPayload = ({ eventType, aggregateType, aggregateId, payload = null, priority = 50, availableAt = null, idempotencyKey = '', maxAttempts = 10 } = {}) => {
36
+ const normalizedType = normalizeType(eventType);
37
+ if (!normalizedType) return null;
38
+ const normalizedAggregateType = normalizeAggregateType(aggregateType);
39
+ const normalizedAggregateId = normalizeAggregateId(aggregateId);
40
+ if (!normalizedAggregateType || !normalizedAggregateId) return null;
41
+
42
+ return {
43
+ event_type: normalizedType,
44
+ aggregate_type: normalizedAggregateType,
45
+ aggregate_id: normalizedAggregateId,
46
+ payload: payload && typeof payload === 'object' ? payload : (payload ?? null),
47
+ priority: Math.max(1, Math.min(100, Number(priority) || 50)),
48
+ available_at: availableAt ? new Date(availableAt) : null,
49
+ idempotency_key: normalizeIdempotencyKey(idempotencyKey) || null,
50
+ max_attempts: Math.max(1, Math.min(30, Number(maxAttempts) || 10)),
51
+ };
52
+ };