@omnizap-system/omnizap 2.5.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (425) hide show
  1. package/.clusterfuzzlite/Dockerfile +10 -0
  2. package/.env.example +907 -0
  3. package/.github/codeql/codeql-config.yml +10 -0
  4. package/.github/dependabot.yml +35 -0
  5. package/.github/workflows/ci.yml +73 -0
  6. package/.github/workflows/codeql.yml +106 -0
  7. package/.github/workflows/db-migration-check.yml +98 -0
  8. package/.github/workflows/dependency-review.yml +22 -0
  9. package/.github/workflows/deploy.yml +95 -0
  10. package/.github/workflows/release.yml +106 -0
  11. package/.github/workflows/security-attest-provenance.yml +51 -0
  12. package/.github/workflows/security-gitleaks.yml +34 -0
  13. package/.github/workflows/security-runner-hardening.yml +31 -0
  14. package/.github/workflows/security-scorecard.yml +44 -0
  15. package/.github/workflows/security-zap-baseline.yml +44 -0
  16. package/.github/workflows/security-zap-full-scan.yml +43 -0
  17. package/.github/workflows/security-zizmor.yml +36 -0
  18. package/.github/workflows/wiki-sync.yml +44 -0
  19. package/.gitleaks.toml +15 -0
  20. package/.prettierrc +34 -0
  21. package/CODE_OF_CONDUCT.md +114 -0
  22. package/LICENSE +56 -0
  23. package/README.md +110 -0
  24. package/SECURITY.md +110 -0
  25. package/app/config/index.js +4 -0
  26. package/app/configParts/adminIdentity.js +92 -0
  27. package/app/configParts/baileysConfig.js +1818 -0
  28. package/app/configParts/groupUtils.js +692 -0
  29. package/app/configParts/loggerConfig.js +394 -0
  30. package/app/configParts/messagePersistenceService.js +305 -0
  31. package/app/connection/baileysCompatibility.test.js +40 -0
  32. package/app/connection/baileysDbAuthState.js +344 -0
  33. package/app/connection/socketController.js +2243 -0
  34. package/app/controllers/messageController.js +7 -0
  35. package/app/controllers/messagePipeline/commandMiddleware.js +146 -0
  36. package/app/controllers/messagePipeline/conversationMiddleware.js +183 -0
  37. package/app/controllers/messagePipeline/messagePipelineMiddlewares.test.js +522 -0
  38. package/app/controllers/messagePipeline/postProcessingMiddleware.js +41 -0
  39. package/app/controllers/messagePipeline/preProcessingMiddlewares.js +166 -0
  40. package/app/controllers/messageProcessingPipeline.js +699 -0
  41. package/app/modules/adminModule/AGENT.md +4056 -0
  42. package/app/modules/adminModule/adminAiHelpService.js +56 -0
  43. package/app/modules/adminModule/adminConfigRuntime.js +177 -0
  44. package/app/modules/adminModule/commandConfig.json +7122 -0
  45. package/app/modules/adminModule/groupCommandHandlers.js +1823 -0
  46. package/app/modules/adminModule/groupCommandHandlers.test.js +350 -0
  47. package/app/modules/adminModule/groupEventHandlers.js +399 -0
  48. package/app/modules/aiModule/AGENT.md +547 -0
  49. package/app/modules/aiModule/aiAiHelpService.js +14 -0
  50. package/app/modules/aiModule/aiConfigRuntime.js +135 -0
  51. package/app/modules/aiModule/catCommand.js +967 -0
  52. package/app/modules/aiModule/commandConfig.json +981 -0
  53. package/app/modules/analyticsModule/messageAnalysisEventRepository.js +83 -0
  54. package/app/modules/gameModule/AGENT.md +196 -0
  55. package/app/modules/gameModule/commandConfig.json +366 -0
  56. package/app/modules/gameModule/diceCommand.js +42 -0
  57. package/app/modules/gameModule/gameAiHelpService.js +14 -0
  58. package/app/modules/gameModule/gameConfigRuntime.js +68 -0
  59. package/app/modules/menuModule/AGENT.md +205 -0
  60. package/app/modules/menuModule/commandConfig.json +366 -0
  61. package/app/modules/menuModule/common.js +316 -0
  62. package/app/modules/menuModule/menuAiHelpService.js +14 -0
  63. package/app/modules/menuModule/menuConfigRuntime.js +68 -0
  64. package/app/modules/menuModule/menus.js +66 -0
  65. package/app/modules/playModule/AGENT.md +321 -0
  66. package/app/modules/playModule/commandConfig.json +584 -0
  67. package/app/modules/playModule/playAiHelpService.js +14 -0
  68. package/app/modules/playModule/playCommand.js +1417 -0
  69. package/app/modules/playModule/playConfigRuntime.js +68 -0
  70. package/app/modules/quoteModule/AGENT.md +199 -0
  71. package/app/modules/quoteModule/commandConfig.json +366 -0
  72. package/app/modules/quoteModule/quoteAiHelpService.js +14 -0
  73. package/app/modules/quoteModule/quoteCommand.js +842 -0
  74. package/app/modules/quoteModule/quoteConfigRuntime.js +68 -0
  75. package/app/modules/rpgPokemonModule/AGENT.md +229 -0
  76. package/app/modules/rpgPokemonModule/commandConfig.json +386 -0
  77. package/app/modules/rpgPokemonModule/rpgBattleCanvasRenderer.js +795 -0
  78. package/app/modules/rpgPokemonModule/rpgBattleService.js +2110 -0
  79. package/app/modules/rpgPokemonModule/rpgBattleService.test.js +770 -0
  80. package/app/modules/rpgPokemonModule/rpgEvolutionUtils.js +22 -0
  81. package/app/modules/rpgPokemonModule/rpgPokemonAiHelpService.js +14 -0
  82. package/app/modules/rpgPokemonModule/rpgPokemonCommand.js +174 -0
  83. package/app/modules/rpgPokemonModule/rpgPokemonConfigRuntime.js +68 -0
  84. package/app/modules/rpgPokemonModule/rpgPokemonDomain.js +192 -0
  85. package/app/modules/rpgPokemonModule/rpgPokemonDomain.test.js +93 -0
  86. package/app/modules/rpgPokemonModule/rpgPokemonEvolution.test.js +46 -0
  87. package/app/modules/rpgPokemonModule/rpgPokemonMessages.js +746 -0
  88. package/app/modules/rpgPokemonModule/rpgPokemonRepository.js +1847 -0
  89. package/app/modules/rpgPokemonModule/rpgPokemonService.js +6839 -0
  90. package/app/modules/rpgPokemonModule/rpgProfileCanvasRenderer.js +354 -0
  91. package/app/modules/statsModule/AGENT.md +320 -0
  92. package/app/modules/statsModule/commandConfig.json +540 -0
  93. package/app/modules/statsModule/globalRankingCommand.js +64 -0
  94. package/app/modules/statsModule/rankingCommand.js +41 -0
  95. package/app/modules/statsModule/rankingCommon.js +1305 -0
  96. package/app/modules/statsModule/statsAiHelpService.js +14 -0
  97. package/app/modules/statsModule/statsConfigRuntime.js +68 -0
  98. package/app/modules/stickerModule/AGENT.md +692 -0
  99. package/app/modules/stickerModule/addStickerMetadata.js +239 -0
  100. package/app/modules/stickerModule/commandConfig.json +1216 -0
  101. package/app/modules/stickerModule/convertToWebp.js +367 -0
  102. package/app/modules/stickerModule/stickerAiHelpService.js +14 -0
  103. package/app/modules/stickerModule/stickerCommand.js +446 -0
  104. package/app/modules/stickerModule/stickerConfigRuntime.js +68 -0
  105. package/app/modules/stickerModule/stickerConvertCommand.js +159 -0
  106. package/app/modules/stickerModule/stickerTextCommand.js +653 -0
  107. package/app/modules/stickerPackModule/AGENT.md +215 -0
  108. package/app/modules/stickerPackModule/autoPackCollectorRuntime.js +20 -0
  109. package/app/modules/stickerPackModule/autoPackCollectorService.js +357 -0
  110. package/app/modules/stickerPackModule/commandConfig.json +387 -0
  111. package/app/modules/stickerPackModule/domainEventOutboxRepository.js +227 -0
  112. package/app/modules/stickerPackModule/domainEvents.js +52 -0
  113. package/app/modules/stickerPackModule/semanticReclassificationEngine.js +429 -0
  114. package/app/modules/stickerPackModule/semanticReclassificationEngine.test.js +75 -0
  115. package/app/modules/stickerPackModule/semanticThemeClusterService.js +544 -0
  116. package/app/modules/stickerPackModule/stickerAssetClassificationRepository.js +400 -0
  117. package/app/modules/stickerPackModule/stickerAssetRepository.js +400 -0
  118. package/app/modules/stickerPackModule/stickerAssetReprocessQueueRepository.js +175 -0
  119. package/app/modules/stickerPackModule/stickerAutoPackByTagsRuntime.js +3702 -0
  120. package/app/modules/stickerPackModule/stickerClassificationBackgroundRuntime.js +559 -0
  121. package/app/modules/stickerPackModule/stickerClassificationService.js +557 -0
  122. package/app/modules/stickerPackModule/stickerDedicatedTaskWorkerRuntime.js +249 -0
  123. package/app/modules/stickerPackModule/stickerDomainEventBus.js +65 -0
  124. package/app/modules/stickerPackModule/stickerDomainEventConsumerRuntime.js +208 -0
  125. package/app/modules/stickerPackModule/stickerMarketplaceDriftService.js +99 -0
  126. package/app/modules/stickerPackModule/stickerObjectStorageService.js +285 -0
  127. package/app/modules/stickerPackModule/stickerPackAiHelpService.js +14 -0
  128. package/app/modules/stickerPackModule/stickerPackCommandHandlers.js +1148 -0
  129. package/app/modules/stickerPackModule/stickerPackConfigRuntime.js +68 -0
  130. package/app/modules/stickerPackModule/stickerPackEngagementRepository.js +152 -0
  131. package/app/modules/stickerPackModule/stickerPackErrors.js +30 -0
  132. package/app/modules/stickerPackModule/stickerPackInteractionEventRepository.js +101 -0
  133. package/app/modules/stickerPackModule/stickerPackItemRepository.js +432 -0
  134. package/app/modules/stickerPackModule/stickerPackMarketplaceService.js +313 -0
  135. package/app/modules/stickerPackModule/stickerPackMessageService.js +268 -0
  136. package/app/modules/stickerPackModule/stickerPackRepository.js +450 -0
  137. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRepository.js +179 -0
  138. package/app/modules/stickerPackModule/stickerPackScoreSnapshotRuntime.js +271 -0
  139. package/app/modules/stickerPackModule/stickerPackService.js +733 -0
  140. package/app/modules/stickerPackModule/stickerPackServiceRuntime.js +32 -0
  141. package/app/modules/stickerPackModule/stickerPackUtils.js +107 -0
  142. package/app/modules/stickerPackModule/stickerStorageService.js +559 -0
  143. package/app/modules/stickerPackModule/stickerWorkerPipelineRuntime.js +242 -0
  144. package/app/modules/stickerPackModule/stickerWorkerTaskQueueRepository.js +242 -0
  145. package/app/modules/systemMetricsModule/AGENT.md +193 -0
  146. package/app/modules/systemMetricsModule/commandConfig.json +344 -0
  147. package/app/modules/systemMetricsModule/pingCommand.js +399 -0
  148. package/app/modules/systemMetricsModule/systemMetricsAiHelpService.js +14 -0
  149. package/app/modules/systemMetricsModule/systemMetricsConfigRuntime.js +68 -0
  150. package/app/modules/tiktokModule/AGENT.md +196 -0
  151. package/app/modules/tiktokModule/commandConfig.json +366 -0
  152. package/app/modules/tiktokModule/tiktokAiHelpService.js +14 -0
  153. package/app/modules/tiktokModule/tiktokCommand.js +716 -0
  154. package/app/modules/tiktokModule/tiktokConfigRuntime.js +68 -0
  155. package/app/modules/userModule/AGENT.md +200 -0
  156. package/app/modules/userModule/commandConfig.json +386 -0
  157. package/app/modules/userModule/userAiHelpService.js +14 -0
  158. package/app/modules/userModule/userCommand.js +1155 -0
  159. package/app/modules/userModule/userConfigRuntime.js +68 -0
  160. package/app/modules/waifuPicsModule/AGENT.md +431 -0
  161. package/app/modules/waifuPicsModule/commandConfig.json +780 -0
  162. package/app/modules/waifuPicsModule/waifuPicsAiHelpService.js +14 -0
  163. package/app/modules/waifuPicsModule/waifuPicsCommand.js +586 -0
  164. package/app/modules/waifuPicsModule/waifuPicsConfigRuntime.js +68 -0
  165. package/app/observability/metrics.js +766 -0
  166. package/app/services/ai/aiHelpResponseCacheRepository.js +280 -0
  167. package/app/services/ai/aiLearningRepository.js +400 -0
  168. package/app/services/ai/commandConfigEnrichmentRepository.js +769 -0
  169. package/app/services/ai/commandConfigEnrichmentService.js +452 -0
  170. package/app/services/ai/commandConfigValidationService.js +443 -0
  171. package/app/services/ai/commandToolBuilderService.js +192 -0
  172. package/app/services/ai/conversationRouterService.js +516 -0
  173. package/app/services/ai/geminiService.js +115 -0
  174. package/app/services/ai/geminiService.test.js +87 -0
  175. package/app/services/ai/globalModuleAiHelpService.js +1412 -0
  176. package/app/services/ai/globalToolCallingService.js +203 -0
  177. package/app/services/ai/messageCommandExecutionService.js +391 -0
  178. package/app/services/ai/moduleAiHelpCoreService.js +1099 -0
  179. package/app/services/ai/moduleAiHelpWrapperFactory.js +65 -0
  180. package/app/services/ai/moduleCommandConfigRuntimeService.js +113 -0
  181. package/app/services/ai/moduleToolExecutorService.js +464 -0
  182. package/app/services/ai/moduleToolRegistryService.js +178 -0
  183. package/app/services/ai/toolCandidateSelectorService.js +781 -0
  184. package/app/services/auth/googleWebLinkService.js +80 -0
  185. package/app/services/auth/whatsappLoginLinkService.js +230 -0
  186. package/app/services/external/pokeApiService.js +398 -0
  187. package/app/services/group/groupMetadataService.js +311 -0
  188. package/app/services/infra/dbWriteQueue.js +874 -0
  189. package/app/services/infra/featureFlagService.js +131 -0
  190. package/app/services/infra/queueUtils.js +55 -0
  191. package/app/services/messaging/captchaService.js +491 -0
  192. package/app/services/messaging/messagePersistenceService.js +1 -0
  193. package/app/services/messaging/newsBroadcastService.js +347 -0
  194. package/app/services/sticker/stickerFocusService.js +347 -0
  195. package/app/services/sticker/stickerFocusService.test.js +43 -0
  196. package/app/store/aiPromptStore.js +38 -0
  197. package/app/store/conversationSessionStore.js +131 -0
  198. package/app/store/groupConfigStore.js +58 -0
  199. package/app/store/premiumUserStore.js +54 -0
  200. package/app/utils/antiLink/antiLinkModule.js +700 -0
  201. package/app/utils/http/getImageBufferModule.js +18 -0
  202. package/app/utils/json/jsonSanitizer.js +113 -0
  203. package/app/utils/json/jsonSanitizer.test.js +40 -0
  204. package/app/utils/systemMetrics/systemMetricsModule.js +88 -0
  205. package/app/workers/aiLearningWorker.js +605 -0
  206. package/app/workers/commandConfigEnrichmentWorker.js +242 -0
  207. package/database/index.js +2075 -0
  208. package/database/init.js +151 -0
  209. package/database/migrations/.gitkeep +0 -0
  210. package/database/migrations/20260307_d0_hardening_down.sql +64 -0
  211. package/database/migrations/20260307_d0_hardening_up.sql +79 -0
  212. package/database/migrations/20260307_d1_terms_acceptance_down.sql +11 -0
  213. package/database/migrations/20260307_d1_terms_acceptance_up.sql +37 -0
  214. package/database/migrations/20260307_d2_auth_hardening_down.sql +75 -0
  215. package/database/migrations/20260307_d2_auth_hardening_up.sql +100 -0
  216. package/database/migrations/20260314_d7_canonical_sender_down.sql +53 -0
  217. package/database/migrations/20260314_d7_canonical_sender_up.sql +114 -0
  218. package/database/migrations/20260406_d30_security_analytics_down.sql +95 -0
  219. package/database/migrations/20260406_d30_security_analytics_up.sql +292 -0
  220. package/database/migrations/20260407_d31_web_google_session_token_hardening_down.sql +2 -0
  221. package/database/migrations/20260407_d31_web_google_session_token_hardening_up.sql +17 -0
  222. package/database/migrations/20260408_d32_ai_help_response_cache_down.sql +1 -0
  223. package/database/migrations/20260408_d32_ai_help_response_cache_up.sql +22 -0
  224. package/database/migrations/20260409_d33_ai_learning_tables_down.sql +4 -0
  225. package/database/migrations/20260409_d33_ai_learning_tables_up.sql +52 -0
  226. package/database/migrations/20260410_d34_command_config_enrichment_down.sql +3 -0
  227. package/database/migrations/20260410_d34_command_config_enrichment_up.sql +48 -0
  228. package/database/schema.sql +1186 -0
  229. package/docker-compose.yml +104 -0
  230. package/docs/audits/stickerCatalogController-out-of-scope.md +103 -0
  231. package/docs/audits/stickerCatalogController-symbols.md +58 -0
  232. package/docs/compliance/acceptable-use-policy-2026-03-07.md +35 -0
  233. package/docs/compliance/dpa-b2b-standard-2026-03-07.md +80 -0
  234. package/docs/compliance/monthly-compliance-checklist-2026-03-07.md +88 -0
  235. package/docs/compliance/notice-and-takedown-policy-2026-03-07.md +34 -0
  236. package/docs/compliance/privacy-policy-2026-03-07.md +75 -0
  237. package/docs/compliance/subprocessors-inventory-2026-03-07.md +16 -0
  238. package/docs/database/production-db-evolution-runbook-2026q1.md +365 -0
  239. package/docs/security/dsar-lgpd-runbook-2026-03-07.md +86 -0
  240. package/docs/security/incident-response-lgpd-anpd-runbook-2026-03-07.md +77 -0
  241. package/docs/security/network-hardening-runbook-2026-03-07.md +137 -0
  242. package/docs/seo/omnizap-seo-playbook-br-2026-02-28.md +238 -0
  243. package/docs/seo/satellite-page-template.md +116 -0
  244. package/docs/seo/satellite-pages-phase1.json +364 -0
  245. package/docs/wiki/Home.md +120 -0
  246. package/docs/wiki/pair-extraordinaire-2026-03-08.md +3 -0
  247. package/docs/wiki/recent-changes-2026-03-08.md +47 -0
  248. package/ecosystem.prod.config.cjs +135 -0
  249. package/eslint.config.js +89 -0
  250. package/index.js +488 -0
  251. package/ml/clip_classifier/Dockerfile +18 -0
  252. package/ml/clip_classifier/README.md +118 -0
  253. package/ml/clip_classifier/adaptive_scoring.py +40 -0
  254. package/ml/clip_classifier/classifier.py +654 -0
  255. package/ml/clip_classifier/embedding_store.py +481 -0
  256. package/ml/clip_classifier/env_loader.py +15 -0
  257. package/ml/clip_classifier/llm_label_expander.py +144 -0
  258. package/ml/clip_classifier/main.py +213 -0
  259. package/ml/clip_classifier/requirements.txt +10 -0
  260. package/ml/clip_classifier/similarity_engine.py +74 -0
  261. package/new-logo.png +0 -0
  262. package/observability/alert-rules.yml +60 -0
  263. package/observability/grafana/dashboards/omnizap-mysql.json +136 -0
  264. package/observability/grafana/dashboards/omnizap-overview.json +170 -0
  265. package/observability/grafana/provisioning/dashboards/dashboards.yml +11 -0
  266. package/observability/grafana/provisioning/datasources/datasources.yml +15 -0
  267. package/observability/loki-config.yml +38 -0
  268. package/observability/mysql-setup.sql +46 -0
  269. package/observability/prometheus.yml +35 -0
  270. package/observability/promtail-config.yml +84 -0
  271. package/observability/sticker-catalog-slo.md +83 -0
  272. package/observability/sticker-scale-hardening-rollout.md +128 -0
  273. package/package.json +144 -0
  274. package/public/apple-touch-icon.png +0 -0
  275. package/public/assets/css/commands-react.input.css +71 -0
  276. package/public/assets/css/create-pack-react.input.css +31 -0
  277. package/public/assets/css/home-react.input.css +106 -0
  278. package/public/assets/css/login-react.input.css +58 -0
  279. package/public/assets/css/stickers-react.input.css +18 -0
  280. package/public/assets/css/terms-react.input.css +115 -0
  281. package/public/assets/css/user-react.input.css +57 -0
  282. package/public/assets/images/brand-icon-192.png +0 -0
  283. package/public/assets/images/brand-logo-128.webp +0 -0
  284. package/public/assets/images/hero-banner-1280.jpg +0 -0
  285. package/public/comandos/commands-catalog.json +4517 -0
  286. package/public/css/api-docs.css +161 -0
  287. package/public/css/stickers-admin.css +1288 -0
  288. package/public/css/styles.css +679 -0
  289. package/public/css/systemadm/admin.css +474 -0
  290. package/public/css/systemadm/base.css +73 -0
  291. package/public/css/systemadm/components.css +662 -0
  292. package/public/css/systemadm/layout.css +229 -0
  293. package/public/css/systemadm/tokens.css +56 -0
  294. package/public/favicon-16x16.png +0 -0
  295. package/public/favicon-32x32.png +0 -0
  296. package/public/favicon.ico +0 -0
  297. package/public/js/apps/apiDocsApp.js +235 -0
  298. package/public/js/apps/commandsReactApp.js +528 -0
  299. package/public/js/apps/createPackApp.js +1646 -0
  300. package/public/js/apps/homeReactApp.js +942 -0
  301. package/public/js/apps/loginReactApp.js +496 -0
  302. package/public/js/apps/stickersAdminApp.js +1753 -0
  303. package/public/js/apps/stickersApp.js +3797 -0
  304. package/public/js/apps/termsReactApp.js +528 -0
  305. package/public/js/apps/userApp.js +2540 -0
  306. package/public/js/apps/userProfile/actions.js +66 -0
  307. package/public/js/apps/userReactApp.js +547 -0
  308. package/public/js/catalog.js +950 -0
  309. package/public/pages/api-docs.html +40 -0
  310. package/public/pages/aup.html +158 -0
  311. package/public/pages/comandos.html +41 -0
  312. package/public/pages/dpa.html +227 -0
  313. package/public/pages/home.html +45 -0
  314. package/public/pages/licenca.html +182 -0
  315. package/public/pages/login.html +40 -0
  316. package/public/pages/notice-and-takedown.html +234 -0
  317. package/public/pages/politica-de-privacidade.html +251 -0
  318. package/public/pages/seo-bot-whatsapp-para-grupo.html +350 -0
  319. package/public/pages/seo-bot-whatsapp-sem-programar.html +350 -0
  320. package/public/pages/seo-como-automatizar-avisos-no-whatsapp.html +350 -0
  321. package/public/pages/seo-como-criar-comandos-whatsapp.html +350 -0
  322. package/public/pages/seo-como-evitar-spam-no-whatsapp.html +350 -0
  323. package/public/pages/seo-como-moderar-grupo-whatsapp.html +350 -0
  324. package/public/pages/seo-como-organizar-comunidade-whatsapp.html +350 -0
  325. package/public/pages/seo-melhor-bot-whatsapp-para-grupos.html +350 -0
  326. package/public/pages/stickers-admin.html +31 -0
  327. package/public/pages/stickers-create.html +41 -0
  328. package/public/pages/stickers.html +45 -0
  329. package/public/pages/suboperadores.html +237 -0
  330. package/public/pages/termos-de-uso-texto-integral.html +241 -0
  331. package/public/pages/termos-de-uso.html +41 -0
  332. package/public/pages/user-password-reset.html +32 -0
  333. package/public/pages/user-systemadm.html +508 -0
  334. package/public/pages/user.html +39 -0
  335. package/public/robots.txt +9 -0
  336. package/public/site.webmanifest +24 -0
  337. package/public/sitemap.xml +98 -0
  338. package/schemas/command-config.schema.json +582 -0
  339. package/scripts/baileys-compat-smoke.mjs +12 -0
  340. package/scripts/cache-bust.mjs +142 -0
  341. package/scripts/deploy.sh +916 -0
  342. package/scripts/email-broadcast-terms-update.mjs +170 -0
  343. package/scripts/enrich-command-discovery-fields.mjs +286 -0
  344. package/scripts/generate-command-config-schema.mjs +273 -0
  345. package/scripts/generate-commands-catalog.mjs +308 -0
  346. package/scripts/generate-module-agents.mjs +631 -0
  347. package/scripts/generate-seo-satellite-pages.mjs +400 -0
  348. package/scripts/github-deploy-notify.mjs +174 -0
  349. package/scripts/github-release-notify.mjs +219 -0
  350. package/scripts/release.sh +599 -0
  351. package/scripts/run-codeql-local.sh +116 -0
  352. package/scripts/run-prettier-all.mjs +25 -0
  353. package/scripts/security-smoketest.mjs +581 -0
  354. package/scripts/sticker-catalog-loadtest.mjs +210 -0
  355. package/scripts/sticker-worker-task.mjs +119 -0
  356. package/scripts/sync-readme-snapshot.mjs +133 -0
  357. package/scripts/validate-command-config-schema.mjs +130 -0
  358. package/scripts/validate-command-configs.mjs +15 -0
  359. package/scripts/wiki-sync.sh +191 -0
  360. package/server/auth/googleWebAuth/googleWebAuthRuntime.js +62 -0
  361. package/server/auth/googleWebAuth/googleWebAuthService.js +807 -0
  362. package/server/auth/jwt/webJwtService.js +147 -0
  363. package/server/auth/stickerCatalogAuthContext.js +165 -0
  364. package/server/auth/termsAcceptance/termsAcceptanceHandler.js +189 -0
  365. package/server/auth/userPassword/index.js +14 -0
  366. package/server/auth/userPassword/userPasswordAuthService.js +422 -0
  367. package/server/auth/userPassword/userPasswordCrypto.js +199 -0
  368. package/server/auth/userPassword/userPasswordCrypto.test.js +76 -0
  369. package/server/auth/userPassword/userPasswordRecoveryService.js +728 -0
  370. package/server/auth/validation/authSchemas.js +236 -0
  371. package/server/auth/webAccount/webAccountHandlers.js +1434 -0
  372. package/server/controllers/admin/adminBanService.js +138 -0
  373. package/server/controllers/admin/adminPanelHandlers.js +2083 -0
  374. package/server/controllers/admin/stickerCatalogAdminContext.js +17 -0
  375. package/server/controllers/admin/systemAdminController.js +201 -0
  376. package/server/controllers/email/emailAutomationController.js +239 -0
  377. package/server/controllers/metricsController.js +21 -0
  378. package/server/controllers/seo/stickerCatalogSeoContext.js +514 -0
  379. package/server/controllers/sticker/nonCatalogHandlers.js +303 -0
  380. package/server/controllers/sticker/stickerCatalogController.js +4700 -0
  381. package/server/controllers/system/contactController.js +115 -0
  382. package/server/controllers/system/githubController.js +137 -0
  383. package/server/controllers/system/stickerCatalogSystemContext.js +758 -0
  384. package/server/controllers/system/storageController.js +154 -0
  385. package/server/controllers/system/systemController.js +135 -0
  386. package/server/controllers/system/systemMetricsController.js +156 -0
  387. package/server/controllers/system/visitController.js +90 -0
  388. package/server/controllers/userController.js +145 -0
  389. package/server/email/emailAutomationRuntime.js +225 -0
  390. package/server/email/emailAutomationService.js +125 -0
  391. package/server/email/emailOutboxRepository.js +282 -0
  392. package/server/email/emailTemplateService.js +480 -0
  393. package/server/email/emailTransportService.js +156 -0
  394. package/server/http/clientIp.js +95 -0
  395. package/server/http/httpRequestUtils.js +262 -0
  396. package/server/http/httpRequestUtils.test.js +80 -0
  397. package/server/http/httpServer.js +180 -0
  398. package/server/http/requestContext.js +20 -0
  399. package/server/http/siteRoutingUtils.js +87 -0
  400. package/server/index.js +1 -0
  401. package/server/middleware/cachePolicy.js +26 -0
  402. package/server/middleware/cachePolicyHelpers.js +1 -0
  403. package/server/middleware/endpointRateLimit.js +181 -0
  404. package/server/middleware/rateLimit.js +70 -0
  405. package/server/middleware/requireAdminAuth.js +48 -0
  406. package/server/middleware/securityHeaders.js +97 -0
  407. package/server/routes/admin/systemAdminRouter.js +64 -0
  408. package/server/routes/email/emailAutomationRouter.js +46 -0
  409. package/server/routes/health/healthRouter.js +41 -0
  410. package/server/routes/indexRouter.js +234 -0
  411. package/server/routes/metrics/metricsRouter.js +58 -0
  412. package/server/routes/static/staticPageRouter.js +134 -0
  413. package/server/routes/sticker/catalogHandlers/catalogAdminHttp.js +105 -0
  414. package/server/routes/sticker/catalogHandlers/catalogAuthHttp.js +77 -0
  415. package/server/routes/sticker/catalogHandlers/catalogPublicHttp.js +120 -0
  416. package/server/routes/sticker/catalogHandlers/catalogUploadHttp.js +83 -0
  417. package/server/routes/sticker/catalogRouter.js +77 -0
  418. package/server/routes/sticker/stickerApiRouter.js +84 -0
  419. package/server/routes/sticker/stickerDataRouter.js +145 -0
  420. package/server/routes/sticker/stickerSiteRouter.js +43 -0
  421. package/server/routes/user/userApiPaths.js +66 -0
  422. package/server/routes/user/userRouter.js +65 -0
  423. package/server/utils/safePath.js +26 -0
  424. package/utils/logger/loggerModule.js +35 -0
  425. package/vite.config.mjs +38 -0
@@ -0,0 +1,65 @@
1
+ import path from 'node:path';
2
+ import logger from '#logger';
3
+ import { createModuleAiHelpService } from './moduleAiHelpCoreService.js';
4
+ import { createModuleCommandConfigRuntime } from './moduleCommandConfigRuntimeService.js';
5
+
6
+ const normalizeText = (value) => String(value || '').trim();
7
+
8
+ export const createModuleAiHelpWrapper = ({ moduleKey, moduleLabel, envPrefix, moduleDirPath, moduleNameFallback = null, guidance = undefined, customLogger = logger }) => {
9
+ const safeModuleKey = normalizeText(moduleKey);
10
+ const safeModuleLabel = normalizeText(moduleLabel);
11
+ const safeEnvPrefix = normalizeText(envPrefix);
12
+ const safeModuleDirPath = normalizeText(moduleDirPath);
13
+
14
+ if (!safeModuleKey) {
15
+ throw new Error('createModuleAiHelpWrapper: moduleKey e obrigatorio');
16
+ }
17
+ if (!safeModuleLabel) {
18
+ throw new Error('createModuleAiHelpWrapper: moduleLabel e obrigatorio');
19
+ }
20
+ if (!safeEnvPrefix) {
21
+ throw new Error('createModuleAiHelpWrapper: envPrefix e obrigatorio');
22
+ }
23
+ if (!safeModuleDirPath) {
24
+ throw new Error('createModuleAiHelpWrapper: moduleDirPath e obrigatorio');
25
+ }
26
+
27
+ const runtime = createModuleCommandConfigRuntime({
28
+ configPath: path.join(safeModuleDirPath, 'commandConfig.json'),
29
+ fallbackConfig: {
30
+ module: moduleNameFallback || `${safeModuleKey}Module`,
31
+ commands: [],
32
+ },
33
+ });
34
+
35
+ const core = createModuleAiHelpService({
36
+ moduleKey: safeModuleKey,
37
+ moduleLabel: safeModuleLabel,
38
+ envPrefix: safeEnvPrefix,
39
+ getModuleConfig: runtime.getModuleConfig,
40
+ resolveCommandName: runtime.resolveCommandName,
41
+ getCommandEntry: runtime.getCommandEntry,
42
+ listEnabledCommands: runtime.listEnabledCommands,
43
+ agentMdPath: path.join(safeModuleDirPath, 'AGENT.md'),
44
+ logger: customLogger,
45
+ guidance,
46
+ });
47
+
48
+ return {
49
+ moduleKey: safeModuleKey,
50
+ moduleLabel: safeModuleLabel,
51
+ envPrefix: safeEnvPrefix,
52
+ moduleDirPath: safeModuleDirPath,
53
+ getModuleConfig: runtime.getModuleConfig,
54
+ resolveCommandName: runtime.resolveCommandName,
55
+ getCommandEntry: runtime.getCommandEntry,
56
+ listEnabledCommands: runtime.listEnabledCommands,
57
+ isCommandName: runtime.isCommandName,
58
+ gerarFaqAutomatica: core.gerarFaqAutomatica,
59
+ explicarComando: core.explicarComando,
60
+ responderPergunta: core.responderPergunta,
61
+ buildUnknownCommandSuggestion: core.buildUnknownCommandSuggestion,
62
+ startScheduler: core.startScheduler,
63
+ stopSchedulerForTests: core.stopSchedulerForTests,
64
+ };
65
+ };
@@ -0,0 +1,113 @@
1
+ import fs from 'node:fs';
2
+
3
+ const normalizeCommandToken = (value) =>
4
+ String(value || '')
5
+ .trim()
6
+ .toLowerCase();
7
+
8
+ export const createModuleCommandConfigRuntime = ({ configPath, fallbackConfig = {} } = {}) => {
9
+ const normalizedPath = String(configPath || '').trim();
10
+ if (!normalizedPath) {
11
+ throw new Error('createModuleCommandConfigRuntime: configPath e obrigatorio');
12
+ }
13
+
14
+ const safeFallback = {
15
+ module: 'module',
16
+ commands: [],
17
+ ...(fallbackConfig || {}),
18
+ };
19
+
20
+ let cachedConfig = null;
21
+ let cachedMtimeMs = 0;
22
+ let cachedRegistry = null;
23
+
24
+ const loadConfigFromDisk = () => {
25
+ const descriptor = fs.openSync(normalizedPath, 'r');
26
+ try {
27
+ const stat = fs.fstatSync(descriptor);
28
+ if (cachedConfig && stat.mtimeMs === cachedMtimeMs) {
29
+ return cachedConfig;
30
+ }
31
+
32
+ const parsed = JSON.parse(fs.readFileSync(descriptor, 'utf8'));
33
+ cachedConfig = parsed;
34
+ cachedMtimeMs = stat.mtimeMs;
35
+ cachedRegistry = null;
36
+ return parsed;
37
+ } finally {
38
+ fs.closeSync(descriptor);
39
+ }
40
+ };
41
+
42
+ const getModuleConfig = () => {
43
+ try {
44
+ return loadConfigFromDisk();
45
+ } catch {
46
+ return safeFallback;
47
+ }
48
+ };
49
+
50
+ const buildRegistry = () => {
51
+ if (cachedRegistry) return cachedRegistry;
52
+
53
+ const config = getModuleConfig();
54
+ const entries = Array.isArray(config?.commands) ? config.commands : [];
55
+ const aliasToCanonical = new Map();
56
+ const commandEntryByCanonical = new Map();
57
+
58
+ for (const entry of entries) {
59
+ if (!entry || entry.enabled === false) continue;
60
+
61
+ const canonical = normalizeCommandToken(entry.name);
62
+ if (!canonical) continue;
63
+
64
+ commandEntryByCanonical.set(canonical, entry);
65
+ aliasToCanonical.set(canonical, canonical);
66
+
67
+ const aliases = Array.isArray(entry.aliases) ? entry.aliases : [];
68
+ for (const alias of aliases) {
69
+ const normalizedAlias = normalizeCommandToken(alias);
70
+ if (!normalizedAlias) continue;
71
+ aliasToCanonical.set(normalizedAlias, canonical);
72
+ }
73
+ }
74
+
75
+ cachedRegistry = {
76
+ aliasToCanonical,
77
+ commandEntryByCanonical,
78
+ };
79
+
80
+ return cachedRegistry;
81
+ };
82
+
83
+ const resolveCommandName = (command) => {
84
+ const normalized = normalizeCommandToken(command);
85
+ if (!normalized) return null;
86
+
87
+ const { aliasToCanonical } = buildRegistry();
88
+ return aliasToCanonical.get(normalized) || null;
89
+ };
90
+
91
+ const getCommandEntry = (command) => {
92
+ const canonical = resolveCommandName(command);
93
+ if (!canonical) return null;
94
+
95
+ const { commandEntryByCanonical } = buildRegistry();
96
+ return commandEntryByCanonical.get(canonical) || null;
97
+ };
98
+
99
+ const listEnabledCommands = () => {
100
+ const { commandEntryByCanonical } = buildRegistry();
101
+ return [...commandEntryByCanonical.values()];
102
+ };
103
+
104
+ const isCommandName = (command) => Boolean(resolveCommandName(command));
105
+
106
+ return {
107
+ getModuleConfig,
108
+ resolveCommandName,
109
+ getCommandEntry,
110
+ listEnabledCommands,
111
+ isCommandName,
112
+ };
113
+ };
@@ -0,0 +1,464 @@
1
+ import logger from '#logger';
2
+ import { getToolRecord } from './moduleToolRegistryService.js';
3
+ import { mapToolArgsToCommandText } from './commandToolBuilderService.js';
4
+ import { saveLearningEvent } from './aiLearningRepository.js';
5
+
6
+ const normalizeText = (value) =>
7
+ String(value || '')
8
+ .trim()
9
+ .toLowerCase();
10
+
11
+ const parseEnvInt = (value, fallback, min, max) => {
12
+ const parsed = Number.parseInt(String(value ?? ''), 10);
13
+ if (!Number.isFinite(parsed)) return fallback;
14
+ return Math.max(min, Math.min(max, parsed));
15
+ };
16
+
17
+ const MAX_TOOL_ARGS_LOG_LENGTH = parseEnvInt(process.env.GLOBAL_TOOL_EXECUTOR_ARGS_LOG_MAX_LEN, 900, 120, 4_000);
18
+
19
+ const safeJson = (value) => {
20
+ try {
21
+ return JSON.stringify(value);
22
+ } catch {
23
+ return String(value);
24
+ }
25
+ };
26
+
27
+ const truncate = (value, maxLen = MAX_TOOL_ARGS_LOG_LENGTH) => {
28
+ const text = String(value || '');
29
+ if (text.length <= maxLen) return text;
30
+ return `${text.slice(0, Math.max(0, maxLen - 16))}...[truncado]`;
31
+ };
32
+
33
+ const parseBoolean = (value) => {
34
+ if (typeof value === 'boolean') return value;
35
+ const normalized = normalizeText(value);
36
+ if (['true', '1', 'sim', 'yes', 'y', 'on'].includes(normalized)) return true;
37
+ if (['false', '0', 'nao', 'não', 'no', 'n', 'off'].includes(normalized)) return false;
38
+ return null;
39
+ };
40
+
41
+ const coerceArray = (value) => {
42
+ if (Array.isArray(value)) return value;
43
+ if (typeof value === 'string') {
44
+ return value
45
+ .split(/[\n,;|]/)
46
+ .flatMap((chunk) => chunk.split(/\s+/))
47
+ .map((token) => token.trim())
48
+ .filter(Boolean);
49
+ }
50
+ if (value === undefined || value === null) return [];
51
+ return [value];
52
+ };
53
+
54
+ const coerceValueByType = (value, spec) => {
55
+ const type = String(spec?.type || 'string')
56
+ .trim()
57
+ .toLowerCase();
58
+ if (value === undefined || value === null) return value;
59
+
60
+ if (type === 'array') {
61
+ return coerceArray(value);
62
+ }
63
+
64
+ if (type === 'integer') {
65
+ const parsed = Number.parseInt(String(value), 10);
66
+ return Number.isFinite(parsed) ? parsed : Number.NaN;
67
+ }
68
+
69
+ if (type === 'number') {
70
+ const parsed = Number.parseFloat(String(value));
71
+ return Number.isFinite(parsed) ? parsed : Number.NaN;
72
+ }
73
+
74
+ if (type === 'boolean') {
75
+ const parsed = parseBoolean(value);
76
+ return parsed === null ? value : parsed;
77
+ }
78
+
79
+ if (type === 'object') {
80
+ if (typeof value === 'object' && !Array.isArray(value)) return value;
81
+ try {
82
+ return JSON.parse(String(value));
83
+ } catch {
84
+ return value;
85
+ }
86
+ }
87
+
88
+ return String(value);
89
+ };
90
+
91
+ const isMissingRequired = (value, type) => {
92
+ if (value === undefined || value === null) return true;
93
+ if (type === 'boolean') return false;
94
+ if (type === 'array') return !Array.isArray(value) || value.length === 0;
95
+ return String(value).trim() === '';
96
+ };
97
+
98
+ const validateAndNormalizeArgs = ({ record, inputArgs }) => {
99
+ const safeInput = inputArgs && typeof inputArgs === 'object' ? inputArgs : {};
100
+ const errors = [];
101
+ const normalized = {};
102
+
103
+ for (const spec of record.argumentSpecs) {
104
+ let value = safeInput[spec.key];
105
+
106
+ if ((value === undefined || value === null || value === '') && spec.defaultValue !== undefined) {
107
+ value = spec.defaultValue;
108
+ }
109
+
110
+ if (spec.required && isMissingRequired(value, spec.type)) {
111
+ errors.push(`argumento obrigatorio ausente: ${spec.key}`);
112
+ continue;
113
+ }
114
+
115
+ if (value === undefined || value === null || value === '') continue;
116
+
117
+ const coerced = coerceValueByType(value, spec);
118
+ if (spec.type === 'integer' || spec.type === 'number') {
119
+ if (!Number.isFinite(coerced)) {
120
+ errors.push(`argumento invalido para ${spec.key}: esperado ${spec.type}`);
121
+ continue;
122
+ }
123
+ }
124
+
125
+ if (spec.type === 'array') {
126
+ if (!Array.isArray(coerced) || coerced.length === 0) {
127
+ if (spec.required) {
128
+ errors.push(`argumento invalido para ${spec.key}: esperado lista nao vazia`);
129
+ }
130
+ continue;
131
+ }
132
+ }
133
+
134
+ if (spec.type === 'boolean') {
135
+ if (typeof coerced !== 'boolean') {
136
+ errors.push(`argumento invalido para ${spec.key}: esperado boolean`);
137
+ continue;
138
+ }
139
+ }
140
+
141
+ normalized[spec.key] = coerced;
142
+ }
143
+
144
+ return {
145
+ ok: errors.length === 0,
146
+ normalizedArgs: normalized,
147
+ errors,
148
+ };
149
+ };
150
+
151
+ const resolveLearningConfidence = ({ context, toolName }) => {
152
+ const direct = Number(context?.topMatchScore);
153
+ if (Number.isFinite(direct)) {
154
+ return Math.max(0, Math.min(1, direct));
155
+ }
156
+
157
+ const candidates = Array.isArray(context?.toolSelectionCandidates) ? context.toolSelectionCandidates : [];
158
+ const found = candidates.find((candidate) => normalizeText(candidate?.toolName) === normalizeText(toolName) || normalizeText(candidate?.commandName) === normalizeText(toolName));
159
+ const score = Number(found?.score);
160
+ if (Number.isFinite(score)) return Math.max(0, Math.min(1, score));
161
+ return null;
162
+ };
163
+
164
+ const resolveLearningQuestion = (context = {}) => String(context?.userQuestion || context?.question || context?.rawQuestion || context?.originalQuestion || '').trim();
165
+
166
+ const persistLearningEventSafe = async ({ context, toolSuggested, toolExecuted, success, confidence }) => {
167
+ const question = resolveLearningQuestion(context);
168
+ if (!question) return;
169
+
170
+ try {
171
+ await saveLearningEvent({
172
+ question,
173
+ toolSuggested,
174
+ toolExecuted,
175
+ success,
176
+ confidence,
177
+ });
178
+ } catch (error) {
179
+ logger.warn('Falha ao salvar evento de aprendizado de tool.', {
180
+ action: 'ai_learning_event_save_failed',
181
+ toolSuggested,
182
+ toolExecuted,
183
+ success: Boolean(success),
184
+ error: error?.message,
185
+ });
186
+ }
187
+ };
188
+
189
+ const normalizePermissionText = (value) => String(value || 'nao definido').trim();
190
+
191
+ const normalizeWhereLabel = (local = []) => {
192
+ const list = Array.isArray(local) ? local.map((item) => normalizeText(item)).filter(Boolean) : [];
193
+ return list;
194
+ };
195
+
196
+ const buildPermissionErrorText = ({ record, reason }) => {
197
+ const command = record.commandName;
198
+ const permission = normalizePermissionText(record.commandEntry?.permissao_necessaria);
199
+ const where = normalizeWhereLabel(record.commandEntry?.local_de_uso).join(', ') || 'nao definido';
200
+
201
+ const details = [`Nao posso executar automaticamente *${command}* neste contexto.`, `Motivo: ${reason}.`, `Permissao necessaria: ${permission}.`, `Local permitido: ${where}.`];
202
+
203
+ return details.join('\n');
204
+ };
205
+
206
+ const resolveSecurityContext = async (context = {}) => {
207
+ const resolver = typeof context.resolveToolSecurityContext === 'function' ? context.resolveToolSecurityContext : null;
208
+
209
+ if (!resolver) {
210
+ return {
211
+ isGroupMessage: Boolean(context.isGroupMessage),
212
+ isSenderAdmin: context.isSenderAdmin,
213
+ isSenderOwner: context.isSenderOwner,
214
+ hasGoogleLogin: context.hasGoogleLogin,
215
+ };
216
+ }
217
+
218
+ try {
219
+ const resolved = await resolver();
220
+ return {
221
+ isGroupMessage: Boolean(resolved?.isGroupMessage ?? context.isGroupMessage),
222
+ isSenderAdmin: resolved?.isSenderAdmin,
223
+ isSenderOwner: resolved?.isSenderOwner,
224
+ hasGoogleLogin: resolved?.hasGoogleLogin,
225
+ };
226
+ } catch (error) {
227
+ logger.warn('Falha ao resolver contexto de seguranca para tool execution.', {
228
+ action: 'tool_security_context_failed',
229
+ error: error?.message,
230
+ });
231
+
232
+ return {
233
+ isGroupMessage: Boolean(context.isGroupMessage),
234
+ isSenderAdmin: context.isSenderAdmin,
235
+ isSenderOwner: context.isSenderOwner,
236
+ hasGoogleLogin: context.hasGoogleLogin,
237
+ };
238
+ }
239
+ };
240
+
241
+ const validateSecurityPreconditions = ({ record, securityContext }) => {
242
+ const commandEntry = record.commandEntry || {};
243
+ const pre = commandEntry.pre_condicoes && typeof commandEntry.pre_condicoes === 'object' ? commandEntry.pre_condicoes : {};
244
+ const isGroupMessage = Boolean(securityContext?.isGroupMessage);
245
+
246
+ const localList = normalizeWhereLabel(commandEntry.local_de_uso);
247
+ if (localList.length) {
248
+ if (isGroupMessage && !localList.includes('grupo')) {
249
+ return {
250
+ ok: false,
251
+ reason: 'comando disponivel apenas no privado',
252
+ };
253
+ }
254
+ if (!isGroupMessage && !localList.includes('privado')) {
255
+ return {
256
+ ok: false,
257
+ reason: 'comando disponivel apenas em grupo',
258
+ };
259
+ }
260
+ }
261
+
262
+ if (pre.requer_grupo && !isGroupMessage) {
263
+ return {
264
+ ok: false,
265
+ reason: 'este comando exige execucao em grupo',
266
+ };
267
+ }
268
+
269
+ if (pre.requer_admin && securityContext?.isSenderAdmin !== true) {
270
+ return {
271
+ ok: false,
272
+ reason: 'este comando exige permissao de admin do grupo',
273
+ };
274
+ }
275
+
276
+ if (pre.requer_admin_principal && securityContext?.isSenderOwner !== true) {
277
+ return {
278
+ ok: false,
279
+ reason: 'este comando exige admin principal do bot',
280
+ };
281
+ }
282
+
283
+ if (pre.requer_google_login && securityContext?.hasGoogleLogin === false) {
284
+ return {
285
+ ok: false,
286
+ reason: 'este comando exige login Google ativo',
287
+ };
288
+ }
289
+
290
+ return { ok: true };
291
+ };
292
+
293
+ export const executeTool = async (toolName, toolArgs, context = {}) => {
294
+ const normalizedToolName = normalizeText(toolName);
295
+ if (!normalizedToolName) {
296
+ return {
297
+ ok: false,
298
+ handled: false,
299
+ status: 'invalid_tool_name',
300
+ text: 'Tool invalida.',
301
+ };
302
+ }
303
+
304
+ const record = getToolRecord(normalizedToolName);
305
+ if (!record) {
306
+ return {
307
+ ok: false,
308
+ handled: false,
309
+ status: 'tool_not_found',
310
+ text: 'Nao encontrei esta tool no registro global.',
311
+ };
312
+ }
313
+
314
+ if (record.commandEntry?.enabled === false) {
315
+ return {
316
+ ok: false,
317
+ handled: true,
318
+ status: 'tool_disabled',
319
+ moduleKey: record.moduleKey,
320
+ commandName: record.commandName,
321
+ text: `O comando ${record.commandName} esta desativado no momento.`,
322
+ };
323
+ }
324
+
325
+ const argsValidation = validateAndNormalizeArgs({
326
+ record,
327
+ inputArgs: toolArgs,
328
+ });
329
+
330
+ if (!argsValidation.ok) {
331
+ await persistLearningEventSafe({
332
+ context,
333
+ toolSuggested: normalizedToolName,
334
+ toolExecuted: record.toolName,
335
+ success: false,
336
+ confidence: resolveLearningConfidence({ context, toolName: record.toolName }),
337
+ });
338
+
339
+ return {
340
+ ok: false,
341
+ handled: true,
342
+ status: 'invalid_arguments',
343
+ moduleKey: record.moduleKey,
344
+ commandName: record.commandName,
345
+ text: [`Nao consegui executar *${record.commandName}* por argumentos invalidos.`, ...argsValidation.errors.map((error) => `- ${error}`)].join('\n'),
346
+ };
347
+ }
348
+
349
+ const securityContext = await resolveSecurityContext(context);
350
+ const securityValidation = validateSecurityPreconditions({
351
+ record,
352
+ securityContext,
353
+ });
354
+
355
+ if (!securityValidation.ok) {
356
+ await persistLearningEventSafe({
357
+ context,
358
+ toolSuggested: normalizedToolName,
359
+ toolExecuted: record.toolName,
360
+ success: false,
361
+ confidence: resolveLearningConfidence({ context, toolName: record.toolName }),
362
+ });
363
+
364
+ return {
365
+ ok: false,
366
+ handled: true,
367
+ status: 'security_precondition_failed',
368
+ moduleKey: record.moduleKey,
369
+ commandName: record.commandName,
370
+ text: buildPermissionErrorText({
371
+ record,
372
+ reason: securityValidation.reason,
373
+ }),
374
+ };
375
+ }
376
+
377
+ const executeCommand = typeof context.executeCommand === 'function' ? context.executeCommand : null;
378
+
379
+ if (!executeCommand) {
380
+ return {
381
+ ok: false,
382
+ handled: false,
383
+ status: 'missing_execute_command',
384
+ moduleKey: record.moduleKey,
385
+ commandName: record.commandName,
386
+ text: 'Executor de comando indisponivel para tool call.',
387
+ };
388
+ }
389
+
390
+ const mapped = mapToolArgsToCommandText(record.argumentSpecs, argsValidation.normalizedArgs);
391
+ const startedAt = Date.now();
392
+
393
+ let executionResult = null;
394
+ try {
395
+ executionResult = await executeCommand({
396
+ commandName: record.commandName,
397
+ args: mapped.args,
398
+ text: mapped.text,
399
+ normalizedToolArgs: argsValidation.normalizedArgs,
400
+ toolName: record.toolName,
401
+ moduleKey: record.moduleKey,
402
+ });
403
+ } catch (error) {
404
+ executionResult = {
405
+ ok: false,
406
+ error,
407
+ alreadyResponded: false,
408
+ text: '',
409
+ };
410
+ }
411
+
412
+ const executionTimeMs = Date.now() - startedAt;
413
+ logger.info('Execucao de tool AI concluida.', {
414
+ action: 'ai_tool_execution',
415
+ tool_used: record.toolName,
416
+ command_name: record.commandName,
417
+ module_key: record.moduleKey,
418
+ tool_arguments: truncate(safeJson(argsValidation.normalizedArgs)),
419
+ execution_time_ms: executionTimeMs,
420
+ ok: Boolean(executionResult?.ok),
421
+ });
422
+
423
+ if (!executionResult?.ok) {
424
+ await persistLearningEventSafe({
425
+ context,
426
+ toolSuggested: normalizedToolName,
427
+ toolExecuted: record.toolName,
428
+ success: false,
429
+ confidence: resolveLearningConfidence({ context, toolName: record.toolName }),
430
+ });
431
+
432
+ return {
433
+ ok: false,
434
+ handled: true,
435
+ status: 'command_execution_failed',
436
+ moduleKey: record.moduleKey,
437
+ commandName: record.commandName,
438
+ toolName: record.toolName,
439
+ executionTimeMs,
440
+ suppressReply: executionResult?.alreadyResponded === true,
441
+ text: executionResult?.alreadyResponded === true ? '' : String(executionResult?.text || '').trim() || `Nao consegui executar ${record.commandName}. Tente o comando manualmente.`,
442
+ };
443
+ }
444
+
445
+ await persistLearningEventSafe({
446
+ context,
447
+ toolSuggested: normalizedToolName,
448
+ toolExecuted: record.toolName,
449
+ success: true,
450
+ confidence: resolveLearningConfidence({ context, toolName: record.toolName }),
451
+ });
452
+
453
+ return {
454
+ ok: true,
455
+ handled: true,
456
+ status: 'executed',
457
+ moduleKey: record.moduleKey,
458
+ commandName: record.commandName,
459
+ toolName: record.toolName,
460
+ executionTimeMs,
461
+ suppressReply: executionResult?.alreadyResponded !== false,
462
+ text: String(executionResult?.text || '').trim(),
463
+ };
464
+ };