@omnizap-system/omnizap 2.6.0 → 2.6.2

package/server/controllers/admin/adminPanelHandlers.js

@@ -1,6 +1,8 @@
+import { now as __timeNow, nowIso as __timeNowIso, toUnixMs as __timeNowMs } from '#time';
 import { randomUUID, randomBytes, scryptSync, timingSafeEqual } from 'node:crypto';
-import { URLSearchParams } from 'node:url';
+import { URL, URLSearchParams } from 'node:url';
 
+import { setAdminOverviewSnapshot } from '../../../app/observability/metrics.js';
 import { parseAdminModeratorUpsertPayload, parseAdminSessionPasswordPayload } from '../../auth/validation/authSchemas.js';
 
 export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger, sendJson, readJsonBody, parseCookies, getCookieValuesFromRequest, appendSetCookie, buildCookieString, sanitizeText, normalizeGoogleSubject, normalizeEmail, normalizeJid, toIsoOrNull, toWhatsAppPhoneDigits, mapGoogleSessionResponseData, resolveGoogleWebSessionFromRequest, revokeGoogleWebSessionsByIdentity, getMarketplaceGlobalStatsCached, getSystemSummaryCached, getFeatureFlagsSnapshot, refreshFeatureFlags, listAdminBans, createAdminBanRecord, revokeAdminBanRecord, normalizeVisitPath, stickerWebPath, findStickerPackByPackKey, stickerPackService, buildManagedPackResponseData, sendManagedMutationStatus, sendManagedPackMutationStatus, deleteManagedPackWithCleanup, mapStickerPackWebManageError, cleanupOrphanStickerAssets, invalidateStickerCatalogDerivedCaches }) => {
@@ -15,6 +17,229 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
   const ADMIN_PANEL_SESSION_TTL_MS = Math.max(10 * 60 * 1000, Number(process.env.ADM_PANEL_SESSION_TTL_MS) || 12 * 60 * 60 * 1000);
   const ADMIN_MODERATOR_PASSWORD_MIN_LENGTH = Math.max(6, Number(process.env.ADM_MODERATOR_PASSWORD_MIN_LENGTH) || 8);
   const ADMIN_PANEL_SESSION_COOKIE_NAME = 'omnizap_admin_panel_session';
+  const SYSTEM_ADMIN_GRAFANA_TIME_FROM = sanitizeText(process.env.SYSTEM_ADMIN_GRAFANA_TIME_FROM || 'now-6h', 40, { allowEmpty: true }) || 'now-6h';
+  const SYSTEM_ADMIN_GRAFANA_TIME_TO = sanitizeText(process.env.SYSTEM_ADMIN_GRAFANA_TIME_TO || 'now', 40, { allowEmpty: true }) || 'now';
+  const SYSTEM_ADMIN_GRAFANA_REFRESH = sanitizeText(process.env.SYSTEM_ADMIN_GRAFANA_REFRESH || '10s', 20, { allowEmpty: true }) || '10s';
+  const SYSTEM_ADMIN_GRAFANA_STATUS_TIMEOUT_MS = Math.max(800, Number(process.env.SYSTEM_ADMIN_GRAFANA_STATUS_TIMEOUT_MS) || 2500);
+  const SYSTEM_ADMIN_GRAFANA_STATUS_CACHE_TTL_MS = Math.max(5000, Number(process.env.SYSTEM_ADMIN_GRAFANA_STATUS_CACHE_TTL_MS) || 15000);
+
+  const normalizeGrafanaBaseUrl = (value) => {
+    const raw = String(value || '').trim();
+    if (!raw) return '';
+    try {
+      const parsed = new URL(raw);
+      if (!['http:', 'https:'].includes(parsed.protocol)) return '';
+      const normalizedPathname = String(parsed.pathname || '/').replace(/\/+$/, '');
+      parsed.search = '';
+      parsed.hash = '';
+      return `${parsed.origin}${normalizedPathname === '/' ? '' : normalizedPathname}`;
+    } catch {
+      return '';
+    }
+  };
+
+  const normalizeGrafanaUid = (value) =>
+    String(value || '')
+      .trim()
+      .replace(/[^a-zA-Z0-9_-]/g, '')
+      .slice(0, 120);
+
+  const slugifyGrafanaDashboard = (value) => {
+    const raw = String(value || '')
+      .trim()
+      .toLowerCase();
+    const slug = raw
+      .replace(/[^a-z0-9]+/g, '-')
+      .replace(/^-+|-+$/g, '')
+      .slice(0, 90);
+    return slug || 'dashboard';
+  };
+
+  const parseGrafanaDashboardDefinitions = () => {
+    const raw = String(process.env.SYSTEM_ADMIN_GRAFANA_DASHBOARDS || '')
+      .split(',')
+      .map((item) => String(item || '').trim())
+      .filter(Boolean);
+
+    const parsed = raw
+      .map((entry) => {
+        const [uidPart, ...titleParts] = entry.split('|');
+        const uid = normalizeGrafanaUid(uidPart);
+        const title = sanitizeText(titleParts.join('|') || '', 90, { allowEmpty: true }) || '';
+        return uid ? { uid, title } : null;
+      })
+      .filter(Boolean);
+
+    if (parsed.length) return parsed;
+
+    return [
+      { uid: 'omnizap-system-admin', title: 'System Admin' },
+      { uid: 'omnizap-overview', title: 'Overview' },
+      { uid: 'omnizap-mysql', title: 'MySQL' },
+    ];
+  };
+
+  const buildAdminGrafanaObservabilityLinks = () => {
+    const baseUrl = normalizeGrafanaBaseUrl(process.env.SYSTEM_ADMIN_GRAFANA_URL || process.env.GRAFANA_PUBLIC_URL || '');
+    if (!baseUrl) {
+      return {
+        enabled: false,
+        base_url: null,
+        dashboards: [],
+      };
+    }
+
+    const base = new URL(`${baseUrl}/`);
+    const definitions = parseGrafanaDashboardDefinitions();
+
+    const dashboards = definitions
+      .map((entry, index) => {
+        const uid = normalizeGrafanaUid(entry?.uid || '');
+        if (!uid) return null;
+        const title = sanitizeText(entry?.title || '', 90, { allowEmpty: true }) || `Dashboard ${index + 1}`;
+        const slug = slugifyGrafanaDashboard(title || uid);
+        const viewUrl = new URL(`d/${encodeURIComponent(uid)}/${encodeURIComponent(slug)}`, base);
+        viewUrl.searchParams.set('orgId', '1');
+        viewUrl.searchParams.set('from', SYSTEM_ADMIN_GRAFANA_TIME_FROM);
+        viewUrl.searchParams.set('to', SYSTEM_ADMIN_GRAFANA_TIME_TO);
+        viewUrl.searchParams.set('refresh', SYSTEM_ADMIN_GRAFANA_REFRESH);
+
+        const embedUrl = new URL(String(viewUrl));
+        embedUrl.searchParams.set('kiosk', 'tv');
+
+        return {
+          uid,
+          title,
+          view_url: viewUrl.toString(),
+          embed_url: embedUrl.toString(),
+        };
+      })
+      .filter(Boolean);
+
+    return {
+      enabled: dashboards.length > 0,
+      base_url: baseUrl,
+      dashboards,
+    };
+  };
+  const grafanaObservabilityLinks = buildAdminGrafanaObservabilityLinks();
+  let grafanaRuntimeSnapshotCache = {
+    expires_at_ms: 0,
+    payload: null,
+  };
+
+  const resolveGrafanaHealthEndpointUrl = () => {
+    const candidates = [process.env.GRAFANA_PROXY_TARGET_URL, process.env.GRAFANA_INTERNAL_URL, process.env.SYSTEM_ADMIN_GRAFANA_URL, process.env.GRAFANA_PUBLIC_URL];
+    for (const candidate of candidates) {
+      const baseUrl = normalizeGrafanaBaseUrl(candidate);
+      if (!baseUrl) continue;
+      try {
+        return new URL('api/health', `${baseUrl}/`).toString();
+      } catch {
+        // noop
+      }
+    }
+    return '';
+  };
+
+  const getGrafanaRuntimeSnapshot = async () => {
+    const nowMs = __timeNowMs();
+    if (grafanaRuntimeSnapshotCache.payload && nowMs < grafanaRuntimeSnapshotCache.expires_at_ms) {
+      return grafanaRuntimeSnapshotCache.payload;
+    }
+
+    const dashboardsTotal = Array.isArray(grafanaObservabilityLinks?.dashboards) ? grafanaObservabilityLinks.dashboards.length : 0;
+    const baseSnapshot = {
+      enabled: Boolean(grafanaObservabilityLinks?.enabled),
+      available: false,
+      status: 'unavailable',
+      response_ms: null,
+      checked_at: __timeNowIso(),
+      http_status: null,
+      version: null,
+      database: null,
+      commit: null,
+      dashboards_total: dashboardsTotal,
+      error: null,
+    };
+
+    const healthEndpointUrl = resolveGrafanaHealthEndpointUrl();
+    if (!healthEndpointUrl) {
+      grafanaRuntimeSnapshotCache = {
+        expires_at_ms: nowMs + SYSTEM_ADMIN_GRAFANA_STATUS_CACHE_TTL_MS,
+        payload: baseSnapshot,
+      };
+      return baseSnapshot;
+    }
+
+    const controller = typeof AbortController === 'function' ? new AbortController() : null;
+    const timeoutId =
+      controller && Number.isFinite(SYSTEM_ADMIN_GRAFANA_STATUS_TIMEOUT_MS)
+        ? setTimeout(() => {
+            controller.abort();
+          }, SYSTEM_ADMIN_GRAFANA_STATUS_TIMEOUT_MS)
+        : null;
+    const startedAtMs = __timeNowMs();
+
+    try {
+      const response = await globalThis.fetch(healthEndpointUrl, {
+        method: 'GET',
+        headers: {
+          Accept: 'application/json',
+        },
+        signal: controller?.signal,
+      });
+      const responseMs = Math.max(0, __timeNowMs() - startedAtMs);
+      let payload = null;
+      try {
+        payload = await response.json();
+      } catch {
+        payload = null;
+      }
+
+      const version = sanitizeText(payload?.version || '', 40, { allowEmpty: true }) || null;
+      const commit = sanitizeText(payload?.commit || '', 80, { allowEmpty: true }) || null;
+      const database = sanitizeText(payload?.database || '', 30, { allowEmpty: true }) || null;
+      const normalizedDatabase = String(database || '')
+        .trim()
+        .toLowerCase();
+      const status = !response.ok ? 'offline' : normalizedDatabase === 'ok' ? 'online' : normalizedDatabase ? 'degraded' : 'online';
+
+      const snapshot = {
+        ...baseSnapshot,
+        available: response.ok,
+        status,
+        response_ms: responseMs,
+        checked_at: __timeNowIso(),
+        http_status: Number(response.status || 0) || null,
+        version,
+        database,
+        commit,
+      };
+      grafanaRuntimeSnapshotCache = {
+        expires_at_ms: __timeNowMs() + SYSTEM_ADMIN_GRAFANA_STATUS_CACHE_TTL_MS,
+        payload: snapshot,
+      };
+      return snapshot;
+    } catch (error) {
+      const responseMs = Math.max(0, __timeNowMs() - startedAtMs);
+      const isAbort = error?.name === 'AbortError';
+      const snapshot = {
+        ...baseSnapshot,
+        status: 'offline',
+        response_ms: responseMs,
+        checked_at: __timeNowIso(),
+        error: sanitizeText(isAbort ? 'timeout' : error?.message || 'fetch_failed', 80, { allowEmpty: true }) || 'fetch_failed',
+      };
+      grafanaRuntimeSnapshotCache = {
+        expires_at_ms: __timeNowMs() + SYSTEM_ADMIN_GRAFANA_STATUS_CACHE_TTL_MS,
+        payload: snapshot,
+      };
+      return snapshot;
+    } finally {
+      if (timeoutId) clearTimeout(timeoutId);
+    }
+  };
 
   const adminPanelSessionMap = new Map();
   let adminPanelSessionPruneAt = 0;
@@ -298,7 +523,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
   };
 
   const pruneExpiredAdminPanelSessions = () => {
-    const now = Date.now();
+    const now = __timeNowMs();
     if (now - adminPanelSessionPruneAt < 30_000) return;
     adminPanelSessionPruneAt = now;
     for (const [token, session] of adminPanelSessionMap.entries()) {
@@ -334,7 +559,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
 
   const createAdminPanelSession = (googleSession, { role = 'owner' } = {}) => {
     pruneExpiredAdminPanelSessions();
-    const now = Date.now();
+    const now = __timeNowMs();
     const normalizedRole = normalizeAdminPanelRole(role, 'owner');
     const token = randomUUID();
     const session = {
@@ -359,7 +584,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
     if (!token) return null;
     const session = adminPanelSessionMap.get(token);
     if (!session) return null;
-    if (Number(session.expiresAt || 0) <= Date.now()) {
+    if (Number(session.expiresAt || 0) <= __timeNowMs()) {
       adminPanelSessionMap.delete(token);
       return null;
     }
@@ -616,7 +841,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
       rollout_percent: Math.max(0, Math.min(100, Number(row?.rollout_percent ?? normalizedRollout))),
       description: sanitizeText(row?.description || '', 255, { allowEmpty: true }) || null,
       updated_by: sanitizeText(row?.updated_by || '', 120, { allowEmpty: true }) || null,
-      updated_at: toIsoOrNull(row?.updated_at) || new Date().toISOString(),
+      updated_at: toIsoOrNull(row?.updated_at) || __timeNowIso(),
     };
   };
 
@@ -759,7 +984,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
 
   const buildAdminAlertSnapshot = ({ dashboardQuick = null, systemHealth = null, systemSummary = null, systemMeta = null } = {}) => {
     const alerts = [];
-    const updatedAt = toIsoOrNull(systemSummary?.updated_at) || new Date().toISOString();
+    const updatedAt = toIsoOrNull(systemSummary?.updated_at) || __timeNowIso();
     const pushAlert = (severity, code, title, message) => {
       alerts.push({
         id: `${code}:${severity}`,
@@ -956,7 +1181,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
   };
 
   const buildAdminOverviewPayload = async ({ adminSession = null } = {}) => {
-    const [marketplaceStats, activeSessions, knownUsers, bans, packsCountRows, stickersCountRows, recentPacks, visitSummary, systemSummaryPayload, messageFlowDaily, moderationQueue, auditLog, featureFlags] = await Promise.all([
+    const [marketplaceStats, activeSessions, knownUsers, bans, packsCountRows, stickersCountRows, recentPacks, visitSummary, systemSummaryPayload, messageFlowDaily, moderationQueue, auditLog, featureFlags, grafanaRuntimeSnapshot] = await Promise.all([
       getMarketplaceGlobalStatsCached().catch(() => null),
       listAdminActiveGoogleWebSessions({ limit: 80 }),
       listAdminKnownGoogleUsers({ limit: 120 }),
@@ -975,6 +1200,19 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
       buildModerationQueueSnapshot({ limit: 80 }).catch(() => []),
       listAdminAuditLog({ limit: 120 }).catch(() => []),
       listAdminFeatureFlagsDetailed({ limit: 300 }).catch(() => []),
+      getGrafanaRuntimeSnapshot().catch(() => ({
+        enabled: Boolean(grafanaObservabilityLinks?.enabled),
+        available: false,
+        status: 'offline',
+        response_ms: null,
+        checked_at: __timeNowIso(),
+        http_status: null,
+        version: null,
+        database: null,
+        commit: null,
+        dashboards_total: Array.isArray(grafanaObservabilityLinks?.dashboards) ? grafanaObservabilityLinks.dashboards.length : 0,
+        error: 'runtime_snapshot_failed',
+      })),
     ]);
 
     const systemSummary = systemSummaryPayload?.data || null;
@@ -996,7 +1234,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
       systemMeta,
     });
 
-    return {
+    const overviewPayload = {
       admin_session: mapAdminPanelSessionResponseData(adminSession),
       marketplace_stats: marketplaceStats,
       counters: {
@@ -1044,9 +1282,22 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
       visit_metrics: visitSummary,
       system_summary: systemSummary,
       system_meta: systemMeta,
+      observability_links: {
+        grafana: grafanaObservabilityLinks,
+      },
+      observability_runtime: {
+        grafana: grafanaRuntimeSnapshot,
+      },
       message_flow_daily: messageFlowDaily,
-      updated_at: new Date().toISOString(),
+      updated_at: __timeNowIso(),
     };
+
+    setAdminOverviewSnapshot({
+      overview: overviewPayload,
+      source: 'admin_overview_payload',
+    });
+
+    return overviewPayload;
   };
 
   const findAdminPackContextByKey = async (rawPackKey) => {
@@ -1364,7 +1615,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
             action,
             success: true,
             message: 'Caches internos invalidados com sucesso.',
-            updated_at: new Date().toISOString(),
+            updated_at: __timeNowIso(),
           },
         });
         return;
@@ -1408,7 +1659,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
             success: true,
             released_processing_items: released,
             message: released > 0 ? 'Itens em processamento foram recolocados em pending.' : 'Nenhum item travado encontrado nas filas.',
-            updated_at: new Date().toISOString(),
+            updated_at: __timeNowIso(),
           },
         });
         return;
@@ -1418,7 +1669,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
         const payloadJson = JSON.stringify({
           source: 'admin_panel',
           requested_by: normalizeEmail(adminSession?.email) || normalizeGoogleSubject(adminSession?.googleSub) || 'admin',
-          requested_at: new Date().toISOString(),
+          requested_at: __timeNowIso(),
         });
         await executeQuery(
           `INSERT INTO ${TABLES.STICKER_WORKER_TASK_QUEUE}
@@ -1440,7 +1691,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
             success: true,
             enqueued_tasks: 2,
             message: 'Ciclos de classificação e curadoria foram agendados.',
-            updated_at: new Date().toISOString(),
+            updated_at: __timeNowIso(),
           },
         });
         return;
@@ -1632,7 +1883,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
         data: {
           type,
           format: 'json',
-          exported_at: new Date().toISOString(),
+          exported_at: __timeNowIso(),
           payload: exportData,
         },
       });
@@ -1705,7 +1956,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
     }
 
     const csv = buildCsv(rows, headers);
-    const stamp = new Date().toISOString().slice(0, 19).replace(/[:T]/g, '-');
+    const stamp = __timeNowIso().slice(0, 19).replace(/[:T]/g, '-');
     res.statusCode = 200;
     res.setHeader('Content-Type', 'text/csv; charset=utf-8');
     res.setHeader('Content-Disposition', `attachment; filename="admin-${type}-${stamp}.csv"`);
@@ -1862,7 +2113,7 @@ export const createStickerCatalogAdminHandlers = ({ executeQuery, tables, logger
       deleted: !result?.missing,
       pack_key: result?.deletedPack?.pack_key || context.packKey,
       id: result?.deletedPack?.id || context.fullPack?.id || null,
-      deleted_at: toIsoOrNull(result?.deletedPack?.deleted_at || new Date()),
+      deleted_at: toIsoOrNull(result?.deletedPack?.deleted_at || __timeNow()),
       removed_sticker_count: Number(result?.removedCount || 0),
     });
   };