@omnizap-system/omnizap 2.5.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.clusterfuzzlite/Dockerfile +10 -0
- package/.env.example +907 -0
- package/.github/codeql/codeql-config.yml +10 -0
- package/.github/dependabot.yml +35 -0
- package/.github/workflows/ci.yml +73 -0
- package/.github/workflows/codeql.yml +106 -0
- package/.github/workflows/db-migration-check.yml +98 -0
- package/.github/workflows/dependency-review.yml +22 -0
- package/.github/workflows/deploy.yml +95 -0
- package/.github/workflows/release.yml +106 -0
- package/.github/workflows/security-attest-provenance.yml +51 -0
- package/.github/workflows/security-gitleaks.yml +34 -0
- package/.github/workflows/security-runner-hardening.yml +31 -0
- package/.github/workflows/security-scorecard.yml +44 -0
- package/.github/workflows/security-zap-baseline.yml +44 -0
- package/.github/workflows/security-zap-full-scan.yml +43 -0
- package/.github/workflows/security-zizmor.yml +36 -0
- package/.github/workflows/wiki-sync.yml +44 -0
- package/.gitleaks.toml +15 -0
- package/.prettierrc +34 -0
- package/CODE_OF_CONDUCT.md +114 -0
- package/LICENSE +56 -0
- package/README.md +110 -0
- package/SECURITY.md +110 -0
- package/app/config/index.js +4 -0
- package/app/configParts/adminIdentity.js +92 -0
- package/app/configParts/baileysConfig.js +1818 -0
- package/app/configParts/groupUtils.js +692 -0
- package/app/configParts/loggerConfig.js +394 -0
- package/app/configParts/messagePersistenceService.js +305 -0
- package/app/connection/baileysCompatibility.test.js +40 -0
- package/app/connection/baileysDbAuthState.js +344 -0
- package/app/connection/socketController.js +2243 -0
- package/app/controllers/messageController.js +7 -0
- package/app/controllers/messagePipeline/commandMiddleware.js +146 -0
- package/app/controllers/messagePipeline/conversationMiddleware.js +183 -0
- package/app/controllers/messagePipeline/messagePipelineMiddlewares.test.js +522 -0
- package/app/controllers/messagePipeline/postProcessingMiddleware.js +41 -0
- package/app/controllers/messagePipeline/preProcessingMiddlewares.js +166 -0
- package/app/controllers/messageProcessingPipeline.js +699 -0
- package/app/modules/adminModule/AGENT.md +4056 -0
- package/app/modules/adminModule/adminAiHelpService.js +56 -0
- package/app/modules/adminModule/adminConfigRuntime.js +177 -0
- package/app/modules/adminModule/commandConfig.json +7122 -0
- package/app/modules/adminModule/groupCommandHandlers.js +1823 -0
- package/app/modules/adminModule/groupCommandHandlers.test.js +350 -0
- package/app/modules/adminModule/groupEventHandlers.js +399 -0
- package/app/modules/aiModule/AGENT.md +547 -0
- package/app/modules/aiModule/aiAiHelpService.js +14 -0
- package/app/modules/aiModule/aiConfigRuntime.js +135 -0
- package/app/modules/aiModule/catCommand.js +967 -0
- package/app/modules/aiModule/commandConfig.json +981 -0
- package/app/modules/analyticsModule/messageAnalysisEventRepository.js +83 -0
- package/app/modules/gameModule/AGENT.md +196 -0
- package/app/modules/gameModule/commandConfig.json +366 -0
- package/app/modules/gameModule/diceCommand.js +42 -0
- package/app/modules/gameModule/gameAiHelpService.js +14 -0
- package/app/modules/gameModule/gameConfigRuntime.js +68 -0
- package/app/modules/menuModule/AGENT.md +205 -0
- package/app/modules/menuModule/commandConfig.json +366 -0
- package/app/modules/menuModule/common.js +316 -0
- package/app/modules/menuModule/menuAiHelpService.js +14 -0
- package/app/modules/menuModule/menuConfigRuntime.js +68 -0
- package/app/modules/menuModule/menus.js +66 -0
- package/app/modules/playModule/AGENT.md +321 -0
- package/app/modules/playModule/commandConfig.json +584 -0
- package/app/modules/playModule/playAiHelpService.js +14 -0
- package/app/modules/playModule/playCommand.js +1417 -0
- package/app/modules/playModule/playConfigRuntime.js +68 -0
- package/app/modules/quoteModule/AGENT.md +199 -0
- package/app/modules/quoteModule/commandConfig.json +366 -0
- package/app/modules/quoteModule/quoteAiHelpService.js +14 -0
- package/app/modules/quoteModule/quoteCommand.js +842 -0
- package/app/modules/quoteModule/quoteConfigRuntime.js +68 -0
- package/app/modules/rpgPokemonModule/AGENT.md +229 -0
- package/app/modules/rpgPokemonModule/commandConfig.json +386 -0
- package/app/modules/rpgPokemonModule/rpgBattleCanvasRenderer.js +795 -0
- package/app/modules/rpgPokemonModule/rpgBattleService.js +2110 -0
- package/app/modules/rpgPokemonModule/rpgBattleService.test.js +770 -0
- package/app/modules/rpgPokemonModule/rpgEvolutionUtils.js +22 -0
- package/app/modules/rpgPokemonModule/rpgPokemonAiHelpService.js +14 -0
- package/app/modules/rpgPokemonModule/rpgPokemonCommand.js +174 -0
- package/app/modules/rpgPokemonModule/rpgPokemonConfigRuntime.js +68 -0
- package/app/modules/rpgPokemonModule/rpgPokemonDomain.js +192 -0
- package/app/modules/rpgPokemonModule/rpgPokemonDomain.test.js +93 -0
- package/app/modules/rpgPokemonModule/rpgPokemonEvolution.test.js +46 -0
- package/app/modules/rpgPokemonModule/rpgPokemonMessages.js +746 -0
- package/app/modules/rpgPokemonModule/rpgPokemonRepository.js +1847 -0
- package/app/modules/rpgPokemonModule/rpgPokemonService.js +6839 -0
- package/app/modules/rpgPokemonModule/rpgProfileCanvasRenderer.js +354 -0
- package/app/modules/statsModule/AGENT.md +320 -0
- package/app/modules/statsModule/commandConfig.json +540 -0
- package/app/modules/statsModule/globalRankingCommand.js +64 -0
- package/app/modules/statsModule/rankingCommand.js +41 -0
- package/app/modules/statsModule/rankingCommon.js +1305 -0
- package/app/modules/statsModule/statsAiHelpService.js +14 -0
- package/app/modules/statsModule/statsConfigRuntime.js +68 -0
- package/app/modules/stickerModule/AGENT.md +692 -0
- package/app/modules/stickerModule/addStickerMetadata.js +239 -0
- package/app/modules/stickerModule/commandConfig.json +1216 -0
- package/app/modules/stickerModule/convertToWebp.js +367 -0
- package/app/modules/stickerModule/stickerAiHelpService.js +14 -0
- package/app/modules/stickerModule/stickerCommand.js +446 -0
- package/app/modules/stickerModule/stickerConfigRuntime.js +68 -0
- package/app/modules/stickerModule/stickerConvertCommand.js +159 -0
- package/app/modules/stickerModule/stickerTextCommand.js +653 -0
- package/app/modules/stickerPackModule/AGENT.md +215 -0
- package/app/modules/stickerPackModule/autoPackCollectorRuntime.js +20 -0
- package/app/modules/stickerPackModule/autoPackCollectorService.js +357 -0
- package/app/modules/stickerPackModule/commandConfig.json +387 -0
- package/app/modules/stickerPackModule/domainEventOutboxRepository.js +227 -0
- package/app/modules/stickerPackModule/domainEvents.js +52 -0
- package/app/modules/stickerPackModule/semanticReclassificationEngine.js +429 -0
- package/app/modules/stickerPackModule/semanticReclassificationEngine.test.js +75 -0
- package/app/modules/stickerPackModule/semanticThemeClusterService.js +544 -0
- package/app/modules/stickerPackModule/stickerAssetClassificationRepository.js +400 -0
- package/app/modules/stickerPackModule/stickerAssetRepository.js +400 -0
- package/app/modules/stickerPackModule/stickerAssetReprocessQueueRepository.js +175 -0
- package/app/modules/stickerPackModule/stickerAutoPackByTagsRuntime.js +3702 -0
- package/app/modules/stickerPackModule/stickerClassificationBackgroundRuntime.js +559 -0
- package/app/modules/stickerPackModule/stickerClassificationService.js +557 -0
- package/app/modules/stickerPackModule/stickerDedicatedTaskWorkerRuntime.js +249 -0
- package/app/modules/stickerPackModule/stickerDomainEventBus.js +65 -0
- package/app/modules/stickerPackModule/stickerDomainEventConsumerRuntime.js +208 -0
- package/app/modules/stickerPackModule/stickerMarketplaceDriftService.js +99 -0
- package/app/modules/stickerPackModule/stickerObjectStorageService.js +285 -0
- package/app/modules/stickerPackModule/stickerPackAiHelpService.js +14 -0
- package/app/modules/stickerPackModule/stickerPackCommandHandlers.js +1148 -0
- package/app/modules/stickerPackModule/stickerPackConfigRuntime.js +68 -0
- package/app/modules/stickerPackModule/stickerPackEngagementRepository.js +152 -0
- package/app/modules/stickerPackModule/stickerPackErrors.js +30 -0
- package/app/modules/stickerPackModule/stickerPackInteractionEventRepository.js +101 -0
- package/app/modules/stickerPackModule/stickerPackItemRepository.js +432 -0
- package/app/modules/stickerPackModule/stickerPackMarketplaceService.js +313 -0
- package/app/modules/stickerPackModule/stickerPackMessageService.js +268 -0
- package/app/modules/stickerPackModule/stickerPackRepository.js +450 -0
- package/app/modules/stickerPackModule/stickerPackScoreSnapshotRepository.js +179 -0
- package/app/modules/stickerPackModule/stickerPackScoreSnapshotRuntime.js +271 -0
- package/app/modules/stickerPackModule/stickerPackService.js +733 -0
- package/app/modules/stickerPackModule/stickerPackServiceRuntime.js +32 -0
- package/app/modules/stickerPackModule/stickerPackUtils.js +107 -0
- package/app/modules/stickerPackModule/stickerStorageService.js +559 -0
- package/app/modules/stickerPackModule/stickerWorkerPipelineRuntime.js +242 -0
- package/app/modules/stickerPackModule/stickerWorkerTaskQueueRepository.js +242 -0
- package/app/modules/systemMetricsModule/AGENT.md +193 -0
- package/app/modules/systemMetricsModule/commandConfig.json +344 -0
- package/app/modules/systemMetricsModule/pingCommand.js +399 -0
- package/app/modules/systemMetricsModule/systemMetricsAiHelpService.js +14 -0
- package/app/modules/systemMetricsModule/systemMetricsConfigRuntime.js +68 -0
- package/app/modules/tiktokModule/AGENT.md +196 -0
- package/app/modules/tiktokModule/commandConfig.json +366 -0
- package/app/modules/tiktokModule/tiktokAiHelpService.js +14 -0
- package/app/modules/tiktokModule/tiktokCommand.js +716 -0
- package/app/modules/tiktokModule/tiktokConfigRuntime.js +68 -0
- package/app/modules/userModule/AGENT.md +200 -0
- package/app/modules/userModule/commandConfig.json +386 -0
- package/app/modules/userModule/userAiHelpService.js +14 -0
- package/app/modules/userModule/userCommand.js +1155 -0
- package/app/modules/userModule/userConfigRuntime.js +68 -0
- package/app/modules/waifuPicsModule/AGENT.md +431 -0
- package/app/modules/waifuPicsModule/commandConfig.json +780 -0
- package/app/modules/waifuPicsModule/waifuPicsAiHelpService.js +14 -0
- package/app/modules/waifuPicsModule/waifuPicsCommand.js +586 -0
- package/app/modules/waifuPicsModule/waifuPicsConfigRuntime.js +68 -0
- package/app/observability/metrics.js +766 -0
- package/app/services/ai/aiHelpResponseCacheRepository.js +280 -0
- package/app/services/ai/aiLearningRepository.js +400 -0
- package/app/services/ai/commandConfigEnrichmentRepository.js +769 -0
- package/app/services/ai/commandConfigEnrichmentService.js +452 -0
- package/app/services/ai/commandConfigValidationService.js +443 -0
- package/app/services/ai/commandToolBuilderService.js +192 -0
- package/app/services/ai/conversationRouterService.js +516 -0
- package/app/services/ai/geminiService.js +115 -0
- package/app/services/ai/geminiService.test.js +87 -0
- package/app/services/ai/globalModuleAiHelpService.js +1412 -0
- package/app/services/ai/globalToolCallingService.js +203 -0
- package/app/services/ai/messageCommandExecutionService.js +391 -0
- package/app/services/ai/moduleAiHelpCoreService.js +1099 -0
- package/app/services/ai/moduleAiHelpWrapperFactory.js +65 -0
- package/app/services/ai/moduleCommandConfigRuntimeService.js +113 -0
- package/app/services/ai/moduleToolExecutorService.js +464 -0
- package/app/services/ai/moduleToolRegistryService.js +178 -0
- package/app/services/ai/toolCandidateSelectorService.js +781 -0
- package/app/services/auth/googleWebLinkService.js +80 -0
- package/app/services/auth/whatsappLoginLinkService.js +230 -0
- package/app/services/external/pokeApiService.js +398 -0
- package/app/services/group/groupMetadataService.js +311 -0
- package/app/services/infra/dbWriteQueue.js +874 -0
- package/app/services/infra/featureFlagService.js +131 -0
- package/app/services/infra/queueUtils.js +55 -0
- package/app/services/messaging/captchaService.js +491 -0
- package/app/services/messaging/messagePersistenceService.js +1 -0
- package/app/services/messaging/newsBroadcastService.js +347 -0
- package/app/services/sticker/stickerFocusService.js +347 -0
- package/app/services/sticker/stickerFocusService.test.js +43 -0
- package/app/store/aiPromptStore.js +38 -0
- package/app/store/conversationSessionStore.js +131 -0
- package/app/store/groupConfigStore.js +58 -0
- package/app/store/premiumUserStore.js +54 -0
- package/app/utils/antiLink/antiLinkModule.js +700 -0
- package/app/utils/http/getImageBufferModule.js +18 -0
- package/app/utils/json/jsonSanitizer.js +113 -0
- package/app/utils/json/jsonSanitizer.test.js +40 -0
- package/app/utils/systemMetrics/systemMetricsModule.js +88 -0
- package/app/workers/aiLearningWorker.js +605 -0
- package/app/workers/commandConfigEnrichmentWorker.js +242 -0
- package/database/index.js +2075 -0
- package/database/init.js +151 -0
- package/database/migrations/.gitkeep +0 -0
- package/database/migrations/20260307_d0_hardening_down.sql +64 -0
- package/database/migrations/20260307_d0_hardening_up.sql +79 -0
- package/database/migrations/20260307_d1_terms_acceptance_down.sql +11 -0
- package/database/migrations/20260307_d1_terms_acceptance_up.sql +37 -0
- package/database/migrations/20260307_d2_auth_hardening_down.sql +75 -0
- package/database/migrations/20260307_d2_auth_hardening_up.sql +100 -0
- package/database/migrations/20260314_d7_canonical_sender_down.sql +53 -0
- package/database/migrations/20260314_d7_canonical_sender_up.sql +114 -0
- package/database/migrations/20260406_d30_security_analytics_down.sql +95 -0
- package/database/migrations/20260406_d30_security_analytics_up.sql +292 -0
- package/database/migrations/20260407_d31_web_google_session_token_hardening_down.sql +2 -0
- package/database/migrations/20260407_d31_web_google_session_token_hardening_up.sql +17 -0
- package/database/migrations/20260408_d32_ai_help_response_cache_down.sql +1 -0
- package/database/migrations/20260408_d32_ai_help_response_cache_up.sql +22 -0
- package/database/migrations/20260409_d33_ai_learning_tables_down.sql +4 -0
- package/database/migrations/20260409_d33_ai_learning_tables_up.sql +52 -0
- package/database/migrations/20260410_d34_command_config_enrichment_down.sql +3 -0
- package/database/migrations/20260410_d34_command_config_enrichment_up.sql +48 -0
- package/database/schema.sql +1186 -0
- package/docker-compose.yml +104 -0
- package/docs/audits/stickerCatalogController-out-of-scope.md +103 -0
- package/docs/audits/stickerCatalogController-symbols.md +58 -0
- package/docs/compliance/acceptable-use-policy-2026-03-07.md +35 -0
- package/docs/compliance/dpa-b2b-standard-2026-03-07.md +80 -0
- package/docs/compliance/monthly-compliance-checklist-2026-03-07.md +88 -0
- package/docs/compliance/notice-and-takedown-policy-2026-03-07.md +34 -0
- package/docs/compliance/privacy-policy-2026-03-07.md +75 -0
- package/docs/compliance/subprocessors-inventory-2026-03-07.md +16 -0
- package/docs/database/production-db-evolution-runbook-2026q1.md +365 -0
- package/docs/security/dsar-lgpd-runbook-2026-03-07.md +86 -0
- package/docs/security/incident-response-lgpd-anpd-runbook-2026-03-07.md +77 -0
- package/docs/security/network-hardening-runbook-2026-03-07.md +137 -0
- package/docs/seo/omnizap-seo-playbook-br-2026-02-28.md +238 -0
- package/docs/seo/satellite-page-template.md +116 -0
- package/docs/seo/satellite-pages-phase1.json +364 -0
- package/docs/wiki/Home.md +120 -0
- package/docs/wiki/pair-extraordinaire-2026-03-08.md +3 -0
- package/docs/wiki/recent-changes-2026-03-08.md +47 -0
- package/ecosystem.prod.config.cjs +135 -0
- package/eslint.config.js +89 -0
- package/index.js +488 -0
- package/ml/clip_classifier/Dockerfile +18 -0
- package/ml/clip_classifier/README.md +118 -0
- package/ml/clip_classifier/adaptive_scoring.py +40 -0
- package/ml/clip_classifier/classifier.py +654 -0
- package/ml/clip_classifier/embedding_store.py +481 -0
- package/ml/clip_classifier/env_loader.py +15 -0
- package/ml/clip_classifier/llm_label_expander.py +144 -0
- package/ml/clip_classifier/main.py +213 -0
- package/ml/clip_classifier/requirements.txt +10 -0
- package/ml/clip_classifier/similarity_engine.py +74 -0
- package/new-logo.png +0 -0
- package/observability/alert-rules.yml +60 -0
- package/observability/grafana/dashboards/omnizap-mysql.json +136 -0
- package/observability/grafana/dashboards/omnizap-overview.json +170 -0
- package/observability/grafana/provisioning/dashboards/dashboards.yml +11 -0
- package/observability/grafana/provisioning/datasources/datasources.yml +15 -0
- package/observability/loki-config.yml +38 -0
- package/observability/mysql-setup.sql +46 -0
- package/observability/prometheus.yml +35 -0
- package/observability/promtail-config.yml +84 -0
- package/observability/sticker-catalog-slo.md +83 -0
- package/observability/sticker-scale-hardening-rollout.md +128 -0
- package/package.json +144 -0
- package/public/apple-touch-icon.png +0 -0
- package/public/assets/css/commands-react.input.css +71 -0
- package/public/assets/css/create-pack-react.input.css +31 -0
- package/public/assets/css/home-react.input.css +106 -0
- package/public/assets/css/login-react.input.css +58 -0
- package/public/assets/css/stickers-react.input.css +18 -0
- package/public/assets/css/terms-react.input.css +115 -0
- package/public/assets/css/user-react.input.css +57 -0
- package/public/assets/images/brand-icon-192.png +0 -0
- package/public/assets/images/brand-logo-128.webp +0 -0
- package/public/assets/images/hero-banner-1280.jpg +0 -0
- package/public/comandos/commands-catalog.json +4517 -0
- package/public/css/api-docs.css +161 -0
- package/public/css/stickers-admin.css +1288 -0
- package/public/css/styles.css +679 -0
- package/public/css/systemadm/admin.css +474 -0
- package/public/css/systemadm/base.css +73 -0
- package/public/css/systemadm/components.css +662 -0
- package/public/css/systemadm/layout.css +229 -0
- package/public/css/systemadm/tokens.css +56 -0
- package/public/favicon-16x16.png +0 -0
- package/public/favicon-32x32.png +0 -0
- package/public/favicon.ico +0 -0
- package/public/js/apps/apiDocsApp.js +235 -0
- package/public/js/apps/commandsReactApp.js +528 -0
- package/public/js/apps/createPackApp.js +1646 -0
- package/public/js/apps/homeReactApp.js +942 -0
- package/public/js/apps/loginReactApp.js +496 -0
- package/public/js/apps/stickersAdminApp.js +1753 -0
- package/public/js/apps/stickersApp.js +3797 -0
- package/public/js/apps/termsReactApp.js +528 -0
- package/public/js/apps/userApp.js +2540 -0
- package/public/js/apps/userProfile/actions.js +66 -0
- package/public/js/apps/userReactApp.js +547 -0
- package/public/js/catalog.js +950 -0
- package/public/pages/api-docs.html +40 -0
- package/public/pages/aup.html +158 -0
- package/public/pages/comandos.html +41 -0
- package/public/pages/dpa.html +227 -0
- package/public/pages/home.html +45 -0
- package/public/pages/licenca.html +182 -0
- package/public/pages/login.html +40 -0
- package/public/pages/notice-and-takedown.html +234 -0
- package/public/pages/politica-de-privacidade.html +251 -0
- package/public/pages/seo-bot-whatsapp-para-grupo.html +350 -0
- package/public/pages/seo-bot-whatsapp-sem-programar.html +350 -0
- package/public/pages/seo-como-automatizar-avisos-no-whatsapp.html +350 -0
- package/public/pages/seo-como-criar-comandos-whatsapp.html +350 -0
- package/public/pages/seo-como-evitar-spam-no-whatsapp.html +350 -0
- package/public/pages/seo-como-moderar-grupo-whatsapp.html +350 -0
- package/public/pages/seo-como-organizar-comunidade-whatsapp.html +350 -0
- package/public/pages/seo-melhor-bot-whatsapp-para-grupos.html +350 -0
- package/public/pages/stickers-admin.html +31 -0
- package/public/pages/stickers-create.html +41 -0
- package/public/pages/stickers.html +45 -0
- package/public/pages/suboperadores.html +237 -0
- package/public/pages/termos-de-uso-texto-integral.html +241 -0
- package/public/pages/termos-de-uso.html +41 -0
- package/public/pages/user-password-reset.html +32 -0
- package/public/pages/user-systemadm.html +508 -0
- package/public/pages/user.html +39 -0
- package/public/robots.txt +9 -0
- package/public/site.webmanifest +24 -0
- package/public/sitemap.xml +98 -0
- package/schemas/command-config.schema.json +582 -0
- package/scripts/baileys-compat-smoke.mjs +12 -0
- package/scripts/cache-bust.mjs +142 -0
- package/scripts/deploy.sh +916 -0
- package/scripts/email-broadcast-terms-update.mjs +170 -0
- package/scripts/enrich-command-discovery-fields.mjs +286 -0
- package/scripts/generate-command-config-schema.mjs +273 -0
- package/scripts/generate-commands-catalog.mjs +308 -0
- package/scripts/generate-module-agents.mjs +631 -0
- package/scripts/generate-seo-satellite-pages.mjs +400 -0
- package/scripts/github-deploy-notify.mjs +174 -0
- package/scripts/github-release-notify.mjs +219 -0
- package/scripts/release.sh +599 -0
- package/scripts/run-codeql-local.sh +116 -0
- package/scripts/run-prettier-all.mjs +25 -0
- package/scripts/security-smoketest.mjs +581 -0
- package/scripts/sticker-catalog-loadtest.mjs +210 -0
- package/scripts/sticker-worker-task.mjs +119 -0
- package/scripts/sync-readme-snapshot.mjs +133 -0
- package/scripts/validate-command-config-schema.mjs +130 -0
- package/scripts/validate-command-configs.mjs +15 -0
- package/scripts/wiki-sync.sh +191 -0
- package/server/auth/googleWebAuth/googleWebAuthRuntime.js +62 -0
- package/server/auth/googleWebAuth/googleWebAuthService.js +807 -0
- package/server/auth/jwt/webJwtService.js +147 -0
- package/server/auth/stickerCatalogAuthContext.js +165 -0
- package/server/auth/termsAcceptance/termsAcceptanceHandler.js +189 -0
- package/server/auth/userPassword/index.js +14 -0
- package/server/auth/userPassword/userPasswordAuthService.js +422 -0
- package/server/auth/userPassword/userPasswordCrypto.js +199 -0
- package/server/auth/userPassword/userPasswordCrypto.test.js +76 -0
- package/server/auth/userPassword/userPasswordRecoveryService.js +728 -0
- package/server/auth/validation/authSchemas.js +236 -0
- package/server/auth/webAccount/webAccountHandlers.js +1434 -0
- package/server/controllers/admin/adminBanService.js +138 -0
- package/server/controllers/admin/adminPanelHandlers.js +2083 -0
- package/server/controllers/admin/stickerCatalogAdminContext.js +17 -0
- package/server/controllers/admin/systemAdminController.js +201 -0
- package/server/controllers/email/emailAutomationController.js +239 -0
- package/server/controllers/metricsController.js +21 -0
- package/server/controllers/seo/stickerCatalogSeoContext.js +514 -0
- package/server/controllers/sticker/nonCatalogHandlers.js +303 -0
- package/server/controllers/sticker/stickerCatalogController.js +4700 -0
- package/server/controllers/system/contactController.js +115 -0
- package/server/controllers/system/githubController.js +137 -0
- package/server/controllers/system/stickerCatalogSystemContext.js +758 -0
- package/server/controllers/system/storageController.js +154 -0
- package/server/controllers/system/systemController.js +135 -0
- package/server/controllers/system/systemMetricsController.js +156 -0
- package/server/controllers/system/visitController.js +90 -0
- package/server/controllers/userController.js +145 -0
- package/server/email/emailAutomationRuntime.js +225 -0
- package/server/email/emailAutomationService.js +125 -0
- package/server/email/emailOutboxRepository.js +282 -0
- package/server/email/emailTemplateService.js +480 -0
- package/server/email/emailTransportService.js +156 -0
- package/server/http/clientIp.js +95 -0
- package/server/http/httpRequestUtils.js +262 -0
- package/server/http/httpRequestUtils.test.js +80 -0
- package/server/http/httpServer.js +180 -0
- package/server/http/requestContext.js +20 -0
- package/server/http/siteRoutingUtils.js +87 -0
- package/server/index.js +1 -0
- package/server/middleware/cachePolicy.js +26 -0
- package/server/middleware/cachePolicyHelpers.js +1 -0
- package/server/middleware/endpointRateLimit.js +181 -0
- package/server/middleware/rateLimit.js +70 -0
- package/server/middleware/requireAdminAuth.js +48 -0
- package/server/middleware/securityHeaders.js +97 -0
- package/server/routes/admin/systemAdminRouter.js +64 -0
- package/server/routes/email/emailAutomationRouter.js +46 -0
- package/server/routes/health/healthRouter.js +41 -0
- package/server/routes/indexRouter.js +234 -0
- package/server/routes/metrics/metricsRouter.js +58 -0
- package/server/routes/static/staticPageRouter.js +134 -0
- package/server/routes/sticker/catalogHandlers/catalogAdminHttp.js +105 -0
- package/server/routes/sticker/catalogHandlers/catalogAuthHttp.js +77 -0
- package/server/routes/sticker/catalogHandlers/catalogPublicHttp.js +120 -0
- package/server/routes/sticker/catalogHandlers/catalogUploadHttp.js +83 -0
- package/server/routes/sticker/catalogRouter.js +77 -0
- package/server/routes/sticker/stickerApiRouter.js +84 -0
- package/server/routes/sticker/stickerDataRouter.js +145 -0
- package/server/routes/sticker/stickerSiteRouter.js +43 -0
- package/server/routes/user/userApiPaths.js +66 -0
- package/server/routes/user/userRouter.js +65 -0
- package/server/utils/safePath.js +26 -0
- package/utils/logger/loggerModule.js +35 -0
- package/vite.config.mjs +38 -0
|
@@ -0,0 +1,285 @@
|
|
|
1
|
+
import path from 'node:path';
|
|
2
|
+
|
|
3
|
+
import logger from '#logger';
|
|
4
|
+
import { normalizeOwnerJid } from './stickerPackUtils.js';
|
|
5
|
+
|
|
6
|
+
const parseEnvBool = (value, fallback) => {
|
|
7
|
+
if (value === undefined || value === null || value === '') return fallback;
|
|
8
|
+
const normalized = String(value).trim().toLowerCase();
|
|
9
|
+
if (['1', 'true', 'yes', 'y', 'on'].includes(normalized)) return true;
|
|
10
|
+
if (['0', 'false', 'no', 'n', 'off'].includes(normalized)) return false;
|
|
11
|
+
return fallback;
|
|
12
|
+
};
|
|
13
|
+
|
|
14
|
+
const OBJECT_STORAGE_ENABLED = parseEnvBool(process.env.STICKER_OBJECT_STORAGE_ENABLED, false);
|
|
15
|
+
const OBJECT_STORAGE_UPLOAD_ON_WRITE = parseEnvBool(process.env.STICKER_OBJECT_STORAGE_UPLOAD_ON_WRITE, true);
|
|
16
|
+
const OBJECT_STORAGE_SIGNED_URL_ENABLED = parseEnvBool(process.env.STICKER_OBJECT_STORAGE_SIGNED_URL_ENABLED, true);
|
|
17
|
+
const OBJECT_STORAGE_PROVIDER = String(process.env.STICKER_OBJECT_STORAGE_PROVIDER || 's3')
|
|
18
|
+
.trim()
|
|
19
|
+
.toLowerCase();
|
|
20
|
+
const OBJECT_STORAGE_BUCKET = String(process.env.STICKER_OBJECT_STORAGE_BUCKET || '').trim();
|
|
21
|
+
const OBJECT_STORAGE_REGION = String(process.env.STICKER_OBJECT_STORAGE_REGION || 'us-east-1').trim() || 'us-east-1';
|
|
22
|
+
const OBJECT_STORAGE_ENDPOINT = String(process.env.STICKER_OBJECT_STORAGE_ENDPOINT || '').trim();
|
|
23
|
+
const OBJECT_STORAGE_ACCESS_KEY_ID = String(process.env.STICKER_OBJECT_STORAGE_ACCESS_KEY_ID || '').trim();
|
|
24
|
+
const OBJECT_STORAGE_SECRET_ACCESS_KEY = String(process.env.STICKER_OBJECT_STORAGE_SECRET_ACCESS_KEY || '').trim();
|
|
25
|
+
const OBJECT_STORAGE_FORCE_PATH_STYLE = parseEnvBool(process.env.STICKER_OBJECT_STORAGE_FORCE_PATH_STYLE, true);
|
|
26
|
+
const OBJECT_STORAGE_CDN_BASE_URL = String(process.env.STICKER_OBJECT_STORAGE_CDN_BASE_URL || '')
|
|
27
|
+
.trim()
|
|
28
|
+
.replace(/\/+$/, '');
|
|
29
|
+
const OBJECT_STORAGE_KEY_PREFIX =
|
|
30
|
+
String(process.env.STICKER_OBJECT_STORAGE_KEY_PREFIX || 'stickers')
|
|
31
|
+
.trim()
|
|
32
|
+
.replace(/^\/+|\/+$/g, '') || 'stickers';
|
|
33
|
+
|
|
34
|
+
let sdkLoadState = {
|
|
35
|
+
loaded: false,
|
|
36
|
+
warned: false,
|
|
37
|
+
S3Client: null,
|
|
38
|
+
PutObjectCommand: null,
|
|
39
|
+
GetObjectCommand: null,
|
|
40
|
+
getSignedUrl: null,
|
|
41
|
+
};
|
|
42
|
+
let s3Client = null;
|
|
43
|
+
|
|
44
|
+
const safeOwnerToken = (ownerJid) => {
|
|
45
|
+
const normalized = normalizeOwnerJid(ownerJid);
|
|
46
|
+
const token = String(normalized || 'unknown')
|
|
47
|
+
.replace(/[^a-zA-Z0-9._-]/g, '_')
|
|
48
|
+
.slice(0, 100);
|
|
49
|
+
return token || 'unknown';
|
|
50
|
+
};
|
|
51
|
+
|
|
52
|
+
const encodePathSegments = (value) =>
|
|
53
|
+
String(value || '')
|
|
54
|
+
.split('/')
|
|
55
|
+
.map((segment) => encodeURIComponent(segment))
|
|
56
|
+
.join('/');
|
|
57
|
+
|
|
58
|
+
const parseS3StoragePath = (storagePath) => {
|
|
59
|
+
const raw = String(storagePath || '').trim();
|
|
60
|
+
if (!raw.startsWith('s3://')) return null;
|
|
61
|
+
const withoutScheme = raw.slice('s3://'.length);
|
|
62
|
+
const slashIndex = withoutScheme.indexOf('/');
|
|
63
|
+
if (slashIndex < 0) return null;
|
|
64
|
+
const bucket = withoutScheme.slice(0, slashIndex).trim();
|
|
65
|
+
const key = withoutScheme.slice(slashIndex + 1).trim();
|
|
66
|
+
if (!bucket || !key) return null;
|
|
67
|
+
return { bucket, key };
|
|
68
|
+
};
|
|
69
|
+
|
|
70
|
+
const resolveStickerObjectKey = (asset) => {
|
|
71
|
+
const fromStoragePath = parseS3StoragePath(asset?.storage_path);
|
|
72
|
+
if (fromStoragePath?.key) return fromStoragePath.key;
|
|
73
|
+
const ownerToken = safeOwnerToken(asset?.owner_jid || 'unknown');
|
|
74
|
+
const sha256 = String(asset?.sha256 || '')
|
|
75
|
+
.trim()
|
|
76
|
+
.toLowerCase();
|
|
77
|
+
if (!sha256) return '';
|
|
78
|
+
return `${OBJECT_STORAGE_KEY_PREFIX}/${ownerToken}/${sha256}.webp`;
|
|
79
|
+
};
|
|
80
|
+
|
|
81
|
+
const loadAwsSdk = async () => {
|
|
82
|
+
if (sdkLoadState.loaded) return sdkLoadState;
|
|
83
|
+
try {
|
|
84
|
+
const [{ S3Client, PutObjectCommand, GetObjectCommand }, { getSignedUrl }] = await Promise.all([import('@aws-sdk/client-s3'), import('@aws-sdk/s3-request-presigner')]);
|
|
85
|
+
sdkLoadState = {
|
|
86
|
+
loaded: true,
|
|
87
|
+
warned: false,
|
|
88
|
+
S3Client,
|
|
89
|
+
PutObjectCommand,
|
|
90
|
+
GetObjectCommand,
|
|
91
|
+
getSignedUrl,
|
|
92
|
+
};
|
|
93
|
+
} catch (error) {
|
|
94
|
+
if (!sdkLoadState.warned) {
|
|
95
|
+
sdkLoadState.warned = true;
|
|
96
|
+
logger.warn('SDK AWS não disponível para object storage. Mantendo fallback local.', {
|
|
97
|
+
action: 'sticker_object_storage_sdk_unavailable',
|
|
98
|
+
error: error?.message,
|
|
99
|
+
});
|
|
100
|
+
}
|
|
101
|
+
sdkLoadState = {
|
|
102
|
+
...sdkLoadState,
|
|
103
|
+
loaded: true,
|
|
104
|
+
};
|
|
105
|
+
}
|
|
106
|
+
return sdkLoadState;
|
|
107
|
+
};
|
|
108
|
+
|
|
109
|
+
const getS3Client = async () => {
|
|
110
|
+
if (!OBJECT_STORAGE_ENABLED || OBJECT_STORAGE_PROVIDER !== 's3') return null;
|
|
111
|
+
if (!OBJECT_STORAGE_BUCKET) return null;
|
|
112
|
+
if (s3Client) return s3Client;
|
|
113
|
+
|
|
114
|
+
const sdk = await loadAwsSdk();
|
|
115
|
+
if (!sdk?.S3Client) return null;
|
|
116
|
+
|
|
117
|
+
s3Client = new sdk.S3Client({
|
|
118
|
+
region: OBJECT_STORAGE_REGION,
|
|
119
|
+
endpoint: OBJECT_STORAGE_ENDPOINT || undefined,
|
|
120
|
+
forcePathStyle: OBJECT_STORAGE_FORCE_PATH_STYLE,
|
|
121
|
+
credentials:
|
|
122
|
+
OBJECT_STORAGE_ACCESS_KEY_ID && OBJECT_STORAGE_SECRET_ACCESS_KEY
|
|
123
|
+
? {
|
|
124
|
+
accessKeyId: OBJECT_STORAGE_ACCESS_KEY_ID,
|
|
125
|
+
secretAccessKey: OBJECT_STORAGE_SECRET_ACCESS_KEY,
|
|
126
|
+
}
|
|
127
|
+
: undefined,
|
|
128
|
+
});
|
|
129
|
+
return s3Client;
|
|
130
|
+
};
|
|
131
|
+
|
|
132
|
+
const streamToBuffer = async (body) => {
|
|
133
|
+
if (!body) return null;
|
|
134
|
+
if (Buffer.isBuffer(body)) return body;
|
|
135
|
+
if (typeof body?.transformToByteArray === 'function') {
|
|
136
|
+
const bytes = await body.transformToByteArray();
|
|
137
|
+
return Buffer.from(bytes);
|
|
138
|
+
}
|
|
139
|
+
if (typeof body?.getReader === 'function') {
|
|
140
|
+
const reader = body.getReader();
|
|
141
|
+
const chunks = [];
|
|
142
|
+
while (true) {
|
|
143
|
+
const { value, done } = await reader.read();
|
|
144
|
+
if (done) break;
|
|
145
|
+
if (value) chunks.push(Buffer.from(value));
|
|
146
|
+
}
|
|
147
|
+
return Buffer.concat(chunks);
|
|
148
|
+
}
|
|
149
|
+
if (typeof body?.on === 'function') {
|
|
150
|
+
const chunks = [];
|
|
151
|
+
return await new Promise((resolve, reject) => {
|
|
152
|
+
body.on('data', (chunk) => chunks.push(Buffer.from(chunk)));
|
|
153
|
+
body.on('end', () => resolve(Buffer.concat(chunks)));
|
|
154
|
+
body.on('error', reject);
|
|
155
|
+
});
|
|
156
|
+
}
|
|
157
|
+
return null;
|
|
158
|
+
};
|
|
159
|
+
|
|
160
|
+
export const isStickerObjectStorageEnabled = () => Boolean(OBJECT_STORAGE_ENABLED && OBJECT_STORAGE_PROVIDER === 's3' && OBJECT_STORAGE_BUCKET);
|
|
161
|
+
|
|
162
|
+
export const uploadStickerToObjectStorage = async ({ ownerJid, sha256, buffer, mimetype = 'image/webp' } = {}) => {
|
|
163
|
+
if (!OBJECT_STORAGE_UPLOAD_ON_WRITE || !Buffer.isBuffer(buffer) || !buffer.length) {
|
|
164
|
+
return { uploaded: false, key: null };
|
|
165
|
+
}
|
|
166
|
+
if (!isStickerObjectStorageEnabled()) {
|
|
167
|
+
return { uploaded: false, key: null };
|
|
168
|
+
}
|
|
169
|
+
|
|
170
|
+
const key = `${OBJECT_STORAGE_KEY_PREFIX}/${safeOwnerToken(ownerJid)}/${String(sha256 || '')
|
|
171
|
+
.trim()
|
|
172
|
+
.toLowerCase()}.webp`;
|
|
173
|
+
if (!key || key.endsWith('/.webp')) return { uploaded: false, key: null };
|
|
174
|
+
|
|
175
|
+
try {
|
|
176
|
+
const client = await getS3Client();
|
|
177
|
+
const sdk = await loadAwsSdk();
|
|
178
|
+
if (!client || !sdk?.PutObjectCommand) return { uploaded: false, key: null };
|
|
179
|
+
|
|
180
|
+
await client.send(
|
|
181
|
+
new sdk.PutObjectCommand({
|
|
182
|
+
Bucket: OBJECT_STORAGE_BUCKET,
|
|
183
|
+
Key: key,
|
|
184
|
+
Body: buffer,
|
|
185
|
+
ContentType: mimetype || 'image/webp',
|
|
186
|
+
CacheControl: 'public, max-age=31536000, immutable',
|
|
187
|
+
}),
|
|
188
|
+
);
|
|
189
|
+
|
|
190
|
+
return { uploaded: true, key };
|
|
191
|
+
} catch (error) {
|
|
192
|
+
logger.warn('Falha ao enviar sticker para object storage.', {
|
|
193
|
+
action: 'sticker_object_storage_upload_failed',
|
|
194
|
+
owner_jid: ownerJid || null,
|
|
195
|
+
error: error?.message,
|
|
196
|
+
});
|
|
197
|
+
return { uploaded: false, key: null };
|
|
198
|
+
}
|
|
199
|
+
};
|
|
200
|
+
|
|
201
|
+
export const getStickerObjectStorageUrl = async (asset, { secure = true, expiresInSeconds = 300 } = {}) => {
|
|
202
|
+
if (!isStickerObjectStorageEnabled()) return null;
|
|
203
|
+
|
|
204
|
+
const key = resolveStickerObjectKey(asset);
|
|
205
|
+
if (!key) return null;
|
|
206
|
+
|
|
207
|
+
if (OBJECT_STORAGE_CDN_BASE_URL) {
|
|
208
|
+
if (!secure) {
|
|
209
|
+
return `${OBJECT_STORAGE_CDN_BASE_URL}/${encodePathSegments(key)}`;
|
|
210
|
+
}
|
|
211
|
+
if (!OBJECT_STORAGE_SIGNED_URL_ENABLED) {
|
|
212
|
+
return `${OBJECT_STORAGE_CDN_BASE_URL}/${encodePathSegments(key)}`;
|
|
213
|
+
}
|
|
214
|
+
}
|
|
215
|
+
|
|
216
|
+
if (!secure || !OBJECT_STORAGE_SIGNED_URL_ENABLED) {
|
|
217
|
+
if (OBJECT_STORAGE_CDN_BASE_URL) {
|
|
218
|
+
return `${OBJECT_STORAGE_CDN_BASE_URL}/${encodePathSegments(key)}`;
|
|
219
|
+
}
|
|
220
|
+
if (OBJECT_STORAGE_ENDPOINT) {
|
|
221
|
+
const base = OBJECT_STORAGE_ENDPOINT.replace(/\/+$/, '');
|
|
222
|
+
return `${base}/${encodeURIComponent(OBJECT_STORAGE_BUCKET)}/${encodePathSegments(key)}`;
|
|
223
|
+
}
|
|
224
|
+
return null;
|
|
225
|
+
}
|
|
226
|
+
|
|
227
|
+
const client = await getS3Client();
|
|
228
|
+
const sdk = await loadAwsSdk();
|
|
229
|
+
if (!client || !sdk?.GetObjectCommand || typeof sdk?.getSignedUrl !== 'function') return null;
|
|
230
|
+
|
|
231
|
+
try {
|
|
232
|
+
const command = new sdk.GetObjectCommand({
|
|
233
|
+
Bucket: OBJECT_STORAGE_BUCKET,
|
|
234
|
+
Key: key,
|
|
235
|
+
});
|
|
236
|
+
return await sdk.getSignedUrl(client, command, {
|
|
237
|
+
expiresIn: Math.max(30, Math.min(3600 * 6, Number(expiresInSeconds) || 300)),
|
|
238
|
+
});
|
|
239
|
+
} catch (error) {
|
|
240
|
+
logger.warn('Falha ao gerar URL segura do object storage.', {
|
|
241
|
+
action: 'sticker_object_storage_signed_url_failed',
|
|
242
|
+
key,
|
|
243
|
+
error: error?.message,
|
|
244
|
+
});
|
|
245
|
+
return null;
|
|
246
|
+
}
|
|
247
|
+
};
|
|
248
|
+
|
|
249
|
+
export const readStickerFromObjectStorage = async (asset) => {
|
|
250
|
+
if (!isStickerObjectStorageEnabled()) return null;
|
|
251
|
+
const key = resolveStickerObjectKey(asset);
|
|
252
|
+
if (!key) return null;
|
|
253
|
+
|
|
254
|
+
try {
|
|
255
|
+
const client = await getS3Client();
|
|
256
|
+
const sdk = await loadAwsSdk();
|
|
257
|
+
if (!client || !sdk?.GetObjectCommand) return null;
|
|
258
|
+
|
|
259
|
+
const response = await client.send(
|
|
260
|
+
new sdk.GetObjectCommand({
|
|
261
|
+
Bucket: OBJECT_STORAGE_BUCKET,
|
|
262
|
+
Key: key,
|
|
263
|
+
}),
|
|
264
|
+
);
|
|
265
|
+
return await streamToBuffer(response?.Body);
|
|
266
|
+
} catch (error) {
|
|
267
|
+
logger.warn('Falha ao ler sticker no object storage.', {
|
|
268
|
+
action: 'sticker_object_storage_read_failed',
|
|
269
|
+
storage_path: asset?.storage_path || null,
|
|
270
|
+
error: error?.message,
|
|
271
|
+
});
|
|
272
|
+
return null;
|
|
273
|
+
}
|
|
274
|
+
};
|
|
275
|
+
|
|
276
|
+
export const toStickerStoragePath = ({ localPath, ownerJid, sha256 }) => {
|
|
277
|
+
const normalizedLocalPath = path.resolve(String(localPath || ''));
|
|
278
|
+
if (!isStickerObjectStorageEnabled()) return normalizedLocalPath;
|
|
279
|
+
if (!OBJECT_STORAGE_UPLOAD_ON_WRITE) return normalizedLocalPath;
|
|
280
|
+
const key = `${OBJECT_STORAGE_KEY_PREFIX}/${safeOwnerToken(ownerJid)}/${String(sha256 || '')
|
|
281
|
+
.trim()
|
|
282
|
+
.toLowerCase()}.webp`;
|
|
283
|
+
if (!key || key.endsWith('/.webp')) return normalizedLocalPath;
|
|
284
|
+
return `s3://${OBJECT_STORAGE_BUCKET}/${key}`;
|
|
285
|
+
};
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import path from 'node:path';
|
|
2
|
+
import { fileURLToPath } from 'node:url';
|
|
3
|
+
import { createModuleAiHelpWrapper } from '../../services/ai/moduleAiHelpWrapperFactory.js';
|
|
4
|
+
|
|
5
|
+
const __filename = fileURLToPath(import.meta.url);
|
|
6
|
+
const __dirname = path.dirname(__filename);
|
|
7
|
+
|
|
8
|
+
export const stickerPackAiHelpWrapper = createModuleAiHelpWrapper({
|
|
9
|
+
moduleKey: 'sticker_pack',
|
|
10
|
+
moduleLabel: 'comandos de pacote de stickers',
|
|
11
|
+
envPrefix: 'STICKER_PACK_AI_HELP',
|
|
12
|
+
moduleDirPath: __dirname,
|
|
13
|
+
moduleNameFallback: 'stickerPackModule',
|
|
14
|
+
});
|