feat: implement WOW Sprint 1 (BusinessProfile, Structured Feedback, STT Hardening, Progress Bar)

feat: audit and hardening of audio pipeline, AI localization, and WhatsApp UX improvements

fix: port alignment, cascade delete, and audio pipeline hardening

feat: complete audio pipeline hardening and audit requirements

build: force deep rebuild v4 with improved logging

debug: add detailed logging for transcription connection error

fix(audio): Ensure /tmp/audio exists and fix nixpacks syntax

feat(audio): Enforce strict AI_API_BASE_URL and add FFmpeg MP3 STT conversion

feat(audio): Complete robust outbound/inbound pipeline and async AI generation

fix: Prevent HF webhook from pushing empty Whatsapp access token to Railway worker

fix: Split Webhook into Gateway (HuggingFace) and Processor (Railway), fix missing https:// in API_URL

fix(whatsapp): resolve duplicate CONTINUE action match and remote 120s blocking delay on feedback

feat: implement STT inbound audio, TTS fallback, and Interactive Lists

fix(deploy): make Stripe keys optional at initialization

refactor(prod): unify currentDay exclusively in Enrollment model to fix scheduler sync

feat(prod): implementation of missing features for production readiness

fix(webhook): ADMIN_API_KEY demoted to warning — API starts with only WHATSAPP_VERIFY_TOKEN, Meta validation can reach public /webhook

fix(audit): 6 bugs fixed — static imports, store-audio endpoint, CONTINUE fallthrough, SUITE regex, no more require() calls

fix(startup): WHATSAPP_APP_SECRET demoted to warning — API no longer crashes if absent

feat(railway): combined API+Worker Dockerfile + fix list char limits + 10s AI timeout

feat(ux): interactive buttons for language choice + LIST menu for sector selection (8 sectors FR/Wolof)

fix(comp5): add 429 catch on generateFeedback, use proper imports for whatsappQueue/scheduleTrackDay + Wolof translations

fix(audit): add /v1/ai/transcribe endpoint + fix cross-package storage require in worker

feat(arch): interactive LIST menu, audio download-media job, OpenAI 429 fallback, DAY action IDs

fix(audit): extend DISABLE_WHATSAPP_SEND + remove dead INSCRIPTION handler

fix(arch): HF inbound-only + seedDatabase export + DISABLE_WORKER + DISABLE_WHATSAPP_SEND

fix(prod): in-process seed + DNS fix for worker ENOTFOUND

feat(module1): integrate the 12-day curriculum in FR/WO with seed data and auto-routing

fix(whatsapp): remove httpsAgent IPv4 constraint causing ENOTFOUND and timeouts on Railway

feat(whatsapp): implement interactive pedagogy architecture with Voice and Button routing

fix(whatsapp): send day 1 content instantly and allow INSCRIPTION to reset state for testing

fix: explicit dns setDefaultResultOrder ipv4first at global level

chore: revert /debug/net to google.com

chore: add /debug/graph endpoint to explicitly test Facebook Graph API accessibility on HF

chore: map debug route to graph.facebook.com to check HF DNS block

feat: add /debug/net route to test HF outbound network

fix: explicit httpsAgent with family 4 for Axios to bypass docker IPv6 ENOTFOUND

fix: replace native fetch with axios to fix Node 20 ipv6 DNS ENOTFOUND in Docker

fix: update privacy policy contact email to seydi@safetrack.tech

feat: add /privacy route for Meta app publication requirement

fix: cast meta.json() to typed interface to fix TS18046 strict error

feat: admin auth login, real WhatsApp Cloud API, Cloudflare R2 storage

fix(security): audit fixes — Stripe webhook scope, fail-fast secrets, prisma singleton, worker auth, Zod validation, WA number env var

fix(tsconfig): override base with Node.js backend settings (CommonJS, node moduleResolution)

fix(types): remove per-route rateLimit config and fix content-type parser done() types

fix(index): use dynamic import for rate-limit to fix local TS module error

fix(auth): inline onRequest hook in guardedRoutes scope to properly protect private routes

fix(api): move all imports to top level to fix ESM error in index.ts

feat(security): API key auth, HMAC webhook verification, rate limiting, Zod validation

chore(build): use tsc --build to bust docker cache for new healthcheck