refactor(prod): unify currentDay exclusively in Enrollment model to fix scheduler sync

feat(prod): implementation of missing features for production readiness

fix(webhook): ADMIN_API_KEY demoted to warning — API starts with only WHATSAPP_VERIFY_TOKEN, Meta validation can reach public /webhook

fix(audit): 6 bugs fixed — static imports, store-audio endpoint, CONTINUE fallthrough, SUITE regex, no more require() calls

fix(startup): WHATSAPP_APP_SECRET demoted to warning — API no longer crashes if absent

feat(railway): combined API+Worker Dockerfile + fix list char limits + 10s AI timeout

feat(ux): interactive buttons for language choice + LIST menu for sector selection (8 sectors FR/Wolof)

fix(comp5): add 429 catch on generateFeedback, use proper imports for whatsappQueue/scheduleTrackDay + Wolof translations

fix(audit): add /v1/ai/transcribe endpoint + fix cross-package storage require in worker

feat(arch): interactive LIST menu, audio download-media job, OpenAI 429 fallback, DAY action IDs

fix(audit): extend DISABLE_WHATSAPP_SEND + remove dead INSCRIPTION handler

fix(arch): HF inbound-only + seedDatabase export + DISABLE_WORKER + DISABLE_WHATSAPP_SEND

fix(prod): in-process seed + DNS fix for worker ENOTFOUND

feat(module1): integrate the 12-day curriculum in FR/WO with seed data and auto-routing

fix(whatsapp): remove httpsAgent IPv4 constraint causing ENOTFOUND and timeouts on Railway

feat(whatsapp): implement interactive pedagogy architecture with Voice and Button routing

fix(whatsapp): send day 1 content instantly and allow INSCRIPTION to reset state for testing

fix: explicit dns setDefaultResultOrder ipv4first at global level

chore: revert /debug/net to google.com

chore: add /debug/graph endpoint to explicitly test Facebook Graph API accessibility on HF

chore: map debug route to graph.facebook.com to check HF DNS block

feat: add /debug/net route to test HF outbound network

fix: explicit httpsAgent with family 4 for Axios to bypass docker IPv6 ENOTFOUND

fix: replace native fetch with axios to fix Node 20 ipv6 DNS ENOTFOUND in Docker

fix: update privacy policy contact email to seydi@safetrack.tech

feat: add /privacy route for Meta app publication requirement

fix: cast meta.json() to typed interface to fix TS18046 strict error

feat: admin auth login, real WhatsApp Cloud API, Cloudflare R2 storage

fix(security): audit fixes — Stripe webhook scope, fail-fast secrets, prisma singleton, worker auth, Zod validation, WA number env var

fix(types): remove per-route rateLimit config and fix content-type parser done() types

fix(index): use dynamic import for rate-limit to fix local TS module error

fix(auth): inline onRequest hook in guardedRoutes scope to properly protect private routes

fix(api): move all imports to top level to fix ESM error in index.ts

feat(security): API key auth, HMAC webhook verification, rate limiting, Zod validation

feat(api): add root healthcheck for huggingface proxy

fix(redis): bypass ioredis minor version type mismatch and refactor scheduler

fix(redis): utilize ioredis and REDIS_URL for robust authenticated connections

fix(whatsapp): handle parameterless health check pings from meta webhook

fix(whatsapp): ignore trailing slashes globally for meta webhook

fix(whatsapp): strict text/plain response for Meta webhook verification

feat: sync all recent changes (AI, whatsapp, redis passwords, script fixes)

feat(payment): integrate stripe checkout, webhooks, and worker dispatch

feat: implement AI document generation (mock, pdf, pptx) and worker integration

feat: implement dynamic admin dashboard with API data

fix: resolve TS compilation errors in api service

feat: add Dockerfile and script for Hugging Face Spaces

chore: add netlify.toml and fix tsconfig exports

Initial commit: Monorepo setup with React+Vite, Fastify, Prisma, and Docker Compose