fix(whatsapp): idempotency lock and progression blockers

apps/api/src/services/whatsapp.ts

@@ -106,6 +106,7 @@ export class WhatsAppService {
             await prisma.enrollment.deleteMany({ where: { userId: user.id } });
             await prisma.userProgress.deleteMany({ where: { userId: user.id } });
             await prisma.response.deleteMany({ where: { userId: user.id } });
+            await prisma.message.deleteMany({ where: { userId: user.id } }); // Purge totale historique des messages
             // Also explicitly clear business AI profile to prevent context leak on restart
             await (prisma as any).businessProfile.deleteMany({ where: { userId: user.id } });
             user = await prisma.user.update({
@@ -360,9 +361,8 @@ export class WhatsAppService {
                     where: { userId_trackId: { userId: user.id, trackId: activeEnrollment.trackId } }
                 });
 
-                // Strict check: you can only advance if the exercise is COMPLETED or if there's no mandatory exercise.
-                // We err on the side of blocking if it's PENDING or null (unexpected state).
-                if (userProgress?.exerciseStatus !== 'COMPLETED') {
+                // Strict check: you can jump if completed OR if currently in a deep dive (user skips it).
+                if (userProgress?.exerciseStatus !== 'COMPLETED' && userProgress?.exerciseStatus !== 'PENDING_DEEPDIVE') {
                     console.log(`[SUITE-BLOCKED] User ${user.id} tried SUITE but status is ${userProgress?.exerciseStatus || 'null'}`);
                     await scheduleMessage(user.id, user.language === 'WOLOF'
                         ? "Dafa laaj nga tontu laaj bi ci kaw dëbb (audio walla texte) balaa nga dem ci kanam ! 🎙️"

apps/whatsapp-worker/src/index.ts

@@ -55,6 +55,24 @@ const worker = new Worker('whatsapp-queue', async (job: Job) => {
             }) as any;
             if (!user?.phone) return;
 
+            // ─── 🚀 Idempotence Lock (Progression Bug Fix) ─────────
+            // Empêche de traiter le même feedback deux fois si le LLM prend > 20s.
+            const Redis = (await import('ioredis')).default;
+            const redis = process.env.REDIS_URL
+                ? new Redis(process.env.REDIS_URL, { maxRetriesPerRequest: null })
+                : new Redis({ host: process.env.REDIS_HOST || 'localhost', port: parseInt(process.env.REDIS_PORT || '6379'), maxRetriesPerRequest: null });
+            
+            // On utilise un hash unique combinant l'utilisateur, le jour et un bout du texte.
+            const textHash = text ? text.substring(0, 10).replace(/[^a-z0-9]/gi, '') : '';
+            const lockKey = `lock:feedback:${userId}:${currentDay}:${textHash}`;
+            
+            // EX 60 : Le verrou expire dans 60 secondes. S'il existe déjà, NX retourne null (ou 0).
+            const isLocked = await redis.set(lockKey, "1", "EX", 60, "NX");
+            if (!isLocked) {
+                console.log(`[WORKER] 🔒 Lock activé : ignorer ce job de feedback en double (User ${userId}, Day ${currentDay})`);
+                return;
+            }
+
             const trackDay = await prisma.trackDay.findFirst({
                 where: { trackId, dayNumber: currentDay }
             });
@@ -247,7 +265,7 @@ const worker = new Worker('whatsapp-queue', async (job: Job) => {
                         nextDay = currentDay;
                     }
 
-                    // 🚨 Hardening: If not qualified, we put the user in PENDING_REMEDIATION
+                    // 🚨 Hardening: If explicitly not qualified, we put the user in PENDING_REMEDIATION
                     await prisma.userProgress.update({
                         where: { userId_trackId: { userId, trackId } },
                         data: {