feat(leads): add lead pipeline, keyword/status mapping, and encoding fixes

- Add lead ingestion, review queue, and keyword/status management - Add DB schema: leads, service_keywords, lead_statuses, processed_messages - Add migration with default keyword/status seeding per client - Fix SQLite read/write deadlock in sanitizeEncoding - Fix UTF-8 corruption: replace byte-iterating replaceAll with strings.ReplaceAll - Add utf8.ValidString guard to decodeLatin1 to avoid double-encoding - Remove hardcoded internal-secret; use config.InternalSecret() everywhere - Add .gitignore for binaries, SQLite DBs, build artifacts, WhatsApp sessions
2026-05-23 16:49:43 -03:00
parent 57e6e5a6fd
commit 57920d45d6
7 changed files with 1437 additions and 42 deletions
--- a/apps/go-crm/internal/handlers/customers.go
+++ b/apps/go-crm/internal/handlers/customers.go
@@ -5,13 +5,14 @@ import (
 	"strconv"
 	"time"

+	"go-crm/config"
 	"go-crm/internal/db"

 	"github.com/go-chi/chi/v5"
 )

-func ListCustomers(w http.ResponseWriter, r *http.Request) {
-	accountID, ok := requireAuth(w, r)
+func (a *App) ListCustomers(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
 	if !ok {
 		return
 	}
@@ -23,13 +24,13 @@ func ListCustomers(w http.ResponseWriter, r *http.Request) {
 		limit = 20
 	}

-	customers, err := db.ListCustomers(DB, accountID, clientID, limit, offset)
+	customers, err := db.ListCustomers(a.DB, accountID, clientID, limit, offset)
 	if err != nil {
 		http.Error(w, err.Error(), http.StatusInternalServerError)
 		return
 	}

-	clients, err := db.ListClients(DB, accountID, limit, offset)
+	clients, err := db.ListClients(a.DB, accountID, limit, offset)
 	if err != nil {
 		http.Error(w, err.Error(), http.StatusInternalServerError)
 		return
@@ -40,7 +41,7 @@ func ListCustomers(w http.ResponseWriter, r *http.Request) {
 		clientOptions += `<option value="` + strconv.FormatInt(c.ClientID, 10) + `">` + c.Name + `</option>`
 	}

-	w.Header().Set("Content-Type", "text/html")
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
 	w.Write([]byte(`<!DOCTYPE html><html><head><script src="https://unpkg.com/htmx.org@1.9.10"></script><style>.edit-form{display:none;margin-top:0.5rem;padding:0.5rem;border:1px solid #ccc}</style></head><body><h1>Customers</h1><button class="btn" onclick="document.getElementById('customerForm').style.display='block'">Add Customer</button><div id="customerForm" style="display:none; margin-top:1rem;"><form hx-post="/customers" hx-target="#customerList"><input type="text" name="name" placeholder="Name" required><input type="tel" name="phone" placeholder="Phone"><input type="date" name="birth_date" placeholder="Birth Date"><input type="text" name="instagram" placeholder="Instagram"><select name="client_id" required><option value="">Select Client</option>` + clientOptions + `</select><button type="submit">Add</button></form></div><table><thead><tr><th>Name</th><th>Phone</th><th>Birth Date</th><th>Instagram</th><th>Actions</th></tr></thead><tbody id="customerList">`))
 	for _, c := range customers {
 		w.Write([]byte(`<tr><td>` + c.Name + `</td><td>` + c.Phone + `</td><td>` + c.BirthDate + `</td><td>` + c.Instagram + `</td><td><a href="/customers/` + strconv.FormatInt(c.CustomerID, 10) + `">View</a><button type="button" onclick="document.getElementById('editCust` + strconv.FormatInt(c.CustomerID, 10) + `').style.display='block'">Edit</button><form method="DELETE" style="display:inline" hx-delete="/customers/` + strconv.FormatInt(c.CustomerID, 10) + `" hx-target="closest tr"><button type="submit">Delete</button></form></td></tr><tr id="editCust` + strconv.FormatInt(c.CustomerID, 10) + `" style="display:none"><td colspan="5"><form hx-put="/customers/` + strconv.FormatInt(c.CustomerID, 10) + `" hx-target="#customerList" hx-swap="innerHTML"><input type="text" name="name" value="` + c.Name + `"><input type="tel" name="phone" value="` + c.Phone + `"><input type="date" name="birth_date" value="` + c.BirthDate + `"><input type="text" name="instagram" value="` + c.Instagram + `"><select name="client_id"><option value="` + strconv.FormatInt(c.ClientID, 10) + `">` + c.Name + `</option>` + clientOptions + `</select><button type="submit">Save</button></form></td></tr>`))
@@ -48,24 +49,24 @@ func ListCustomers(w http.ResponseWriter, r *http.Request) {
 	w.Write([]byte(`</tbody></table></body></html>`))
 }

-func CreateCustomer(w http.ResponseWriter, r *http.Request) {
-	isInternal := r.Header.Get("X-Internal-Secret") == "internal-secret"
-	
+func (a *App) CreateCustomer(w http.ResponseWriter, r *http.Request) {
+	isInternal := r.Header.Get("X-Internal-Secret") == config.InternalSecret()
+
 	var accountID int64
 	var clientID int64
 	var ok bool
-	
+
 	if isInternal {
 		clientID, _ = strconv.ParseInt(r.FormValue("client_id"), 10, 64)
 		accountID = clientID
 		ok = true
 	} else {
-		accountID, ok = requireAuth(w, r)
+		accountID, ok = a.requireAuth(w, r)
 		if ok {
 			clientID, _ = strconv.ParseInt(r.FormValue("client_id"), 10, 64)
 		}
 	}
-	
+
 	if !ok {
 		return
 	}
@@ -74,10 +75,10 @@ func CreateCustomer(w http.ResponseWriter, r *http.Request) {
 	if clientID == 0 {
 		clientID, _ = strconv.ParseInt(r.FormValue("client_id"), 10, 64)
 	}
-	
+
 	if !isInternal {
 		var checkID int64
-		err := DB.QueryRow("SELECT client_id FROM clients WHERE client_id = ? AND account_id = ?", clientID, accountID).Scan(&checkID)
+		err := a.DB.QueryRow("SELECT client_id FROM clients WHERE client_id = ? AND account_id = ?", clientID, accountID).Scan(&checkID)
 		if err != nil {
 			http.Error(w, "Invalid client", http.StatusBadRequest)
 			return
@@ -85,22 +86,22 @@ func CreateCustomer(w http.ResponseWriter, r *http.Request) {
 	}

 	customer := db.Customer{
-		ClientID:   clientID,
-		Name:       r.FormValue("name"),
-		Phone:      r.FormValue("phone"),
-		BirthDate:  r.FormValue("birth_date"),
-		Instagram:  r.FormValue("instagram"),
-		CreatedAt:  time.Now().Unix(),
+		ClientID:  clientID,
+		Name:      r.FormValue("name"),
+		Phone:     r.FormValue("phone"),
+		BirthDate: r.FormValue("birth_date"),
+		Instagram: r.FormValue("instagram"),
+		CreatedAt: time.Now().Unix(),
 	}

 	if phone := r.FormValue("phone"); phone != "" {
 		var existingID int64
-		err := DB.QueryRow(
+		err := a.DB.QueryRow(
 			"SELECT customer_id FROM customers WHERE client_id = ? AND phone = ?",
 			clientID, phone,
 		).Scan(&existingID)
 		if err == nil {
-			_, err = DB.Exec(
+			_, err = a.DB.Exec(
 				"UPDATE customers SET name = ?, birth_date = ?, instagram = ? WHERE customer_id = ?",
 				r.FormValue("name"), r.FormValue("birth_date"), r.FormValue("instagram"), existingID,
 			)
@@ -111,7 +112,7 @@ func CreateCustomer(w http.ResponseWriter, r *http.Request) {
 		}
 	}

-	if err := customer.Create(DB); err != nil {
+	if err := customer.Create(a.DB); err != nil {
 		http.Error(w, err.Error(), http.StatusBadRequest)
 		return
 	}
@@ -119,26 +120,26 @@ func CreateCustomer(w http.ResponseWriter, r *http.Request) {
 	w.Header().Set("HX-Refresh", "true")
 }

-func ViewCustomer(w http.ResponseWriter, r *http.Request) {
-	_, ok := requireAuth(w, r)
+func (a *App) ViewCustomer(w http.ResponseWriter, r *http.Request) {
+	_, ok := a.requireAuth(w, r)
 	if !ok {
 		return
 	}

 	id, _ := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
 	var c db.Customer
-	err := DB.QueryRow("SELECT customer_id, client_id, name, phone, birth_date, instagram, created_at FROM customers WHERE customer_id = ?", id).Scan(&c.CustomerID, &c.ClientID, &c.Name, &c.Phone, &c.BirthDate, &c.Instagram, &c.CreatedAt)
+	err := a.DB.QueryRow("SELECT customer_id, client_id, name, phone, birth_date, instagram, created_at FROM customers WHERE customer_id = ?", id).Scan(&c.CustomerID, &c.ClientID, &c.Name, &c.Phone, &c.BirthDate, &c.Instagram, &c.CreatedAt)
 	if err != nil {
 		http.Error(w, "Customer not found", http.StatusNotFound)
 		return
 	}

-	w.Header().Set("Content-Type", "text/html")
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
 	w.Write([]byte(`<!DOCTYPE html><body><h1>` + c.Name + `</h1><p>Phone: ` + c.Phone + `</p><p>Birth Date: ` + c.BirthDate + `</p><p>Instagram: ` + c.Instagram + `</p><a href="/customers">Back</a></body></html>`))
 }

-func UpdateCustomer(w http.ResponseWriter, r *http.Request) {
-	_, ok := requireAuth(w, r)
+func (a *App) UpdateCustomer(w http.ResponseWriter, r *http.Request) {
+	_, ok := a.requireAuth(w, r)
 	if !ok {
 		return
 	}
@@ -146,7 +147,7 @@ func UpdateCustomer(w http.ResponseWriter, r *http.Request) {
 	id, _ := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
 	r.ParseForm()
 	clientID, _ := strconv.ParseInt(r.FormValue("client_id"), 10, 64)
-	_, err := DB.Exec("UPDATE customers SET client_id=?, name=?, phone=?, birth_date=?, instagram=? WHERE customer_id=?", clientID, r.FormValue("name"), r.FormValue("phone"), r.FormValue("birth_date"), r.FormValue("instagram"), id)
+	_, err := a.DB.Exec("UPDATE customers SET client_id=?, name=?, phone=?, birth_date=?, instagram=? WHERE customer_id=?", clientID, r.FormValue("name"), r.FormValue("phone"), r.FormValue("birth_date"), r.FormValue("instagram"), id)
 	if err != nil {
 		http.Error(w, err.Error(), http.StatusBadRequest)
 		return
@@ -154,12 +155,30 @@ func UpdateCustomer(w http.ResponseWriter, r *http.Request) {
 	w.Header().Set("HX-Refresh", "true")
 }

-func DeleteCustomer(w http.ResponseWriter, r *http.Request) {
-	_, ok := requireAuth(w, r)
+func (a *App) DeleteCustomer(w http.ResponseWriter, r *http.Request) {
+	_, ok := a.requireAuth(w, r)
 	if !ok {
 		return
 	}

 	id, _ := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
-	DB.Exec("DELETE FROM customers WHERE customer_id = ?", id)
-}
+	a.DB.Exec("DELETE FROM customers WHERE customer_id = ?", id)
+}
+
+// --- package-level shims kept for existing tests ---
+
+func ListCustomers(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).ListCustomers(w, r)
+}
+func CreateCustomer(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).CreateCustomer(w, r)
+}
+func ViewCustomer(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).ViewCustomer(w, r)
+}
+func UpdateCustomer(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).UpdateCustomer(w, r)
+}
+func DeleteCustomer(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).DeleteCustomer(w, r)
+}
--- a/apps/go-crm/internal/handlers/lead_ingest.go
+++ b/apps/go-crm/internal/handlers/lead_ingest.go
@@ -0,0 +1,151 @@
+package handlers
+
+import (
+	"database/sql"
+	"encoding/json"
+	"log"
+	"net/http"
+
+	"go-crm/config"
+	"go-crm/internal/db"
+	"go-crm/internal/parser"
+)
+
+// ingestRequest is the JSON body sent by the WhatsApp adapter.
+type ingestRequest struct {
+	ClientID  int64  `json:"client_id"`
+	Name      string `json:"name"`
+	Phone     string `json:"phone"`
+	Message   string `json:"message"`
+	MessageID string `json:"message_id"`
+}
+
+// IngestLead is the internal-only endpoint called by the WhatsApp adapter.
+// POST /leads/ingest   (X-Internal-Secret required)
+func (a *App) IngestLead(w http.ResponseWriter, r *http.Request) {
+	if r.Header.Get("X-Internal-Secret") != config.InternalSecret() {
+		http.Error(w, "forbidden", http.StatusForbidden)
+		return
+	}
+
+	var req ingestRequest
+	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
+		http.Error(w, "bad request", http.StatusBadRequest)
+		return
+	}
+
+	if req.ClientID == 0 || req.Phone == "" {
+		http.Error(w, "client_id and phone required", http.StatusBadRequest)
+		return
+	}
+
+	phoneNorm := parser.NormalizePhone(req.Phone)
+
+	// Dedup: skip if this message was already processed.
+	if req.MessageID != "" {
+		processed, err := db.IsMessageProcessed(a.DB, req.ClientID, req.MessageID)
+		if err != nil {
+			log.Printf("IngestLead: db error checking processed message: %v", err)
+		}
+		if processed {
+			w.WriteHeader(http.StatusOK)
+			return
+		}
+	}
+
+	// Check if lead already exists for this phone.
+	existing, err := db.GetLeadByPhone(a.DB, req.ClientID, phoneNorm)
+	if err != nil && err != sql.ErrNoRows {
+		log.Printf("IngestLead: db error checking existing lead: %v", err)
+		http.Error(w, "db error", http.StatusInternalServerError)
+		return
+	}
+
+	if existing != nil {
+		// Known lead — just update last contact timestamp.
+		if terr := db.TouchLeadContact(a.DB, existing.LeadID); terr != nil {
+			log.Printf("IngestLead: failed to touch lead %d: %v", existing.LeadID, terr)
+		}
+		if req.MessageID != "" {
+			if err := db.RecordProcessedMessage(a.DB, req.ClientID, req.MessageID); err != nil {
+				log.Printf("IngestLead: failed to record processed message: %v", err)
+			}
+		}
+		w.WriteHeader(http.StatusOK)
+		return
+	}
+
+	// New lead — extract service from message text.
+	mapping, err := db.LoadKeywordMapping(a.DB, req.ClientID)
+	if err != nil {
+		log.Printf("IngestLead: failed to load keyword mapping: %v", err)
+		mapping = map[string]string{}
+	}
+
+	serviceInterest := parser.ExtractService(req.Message, mapping)
+	needsReview := serviceInterest == "Não especificou"
+
+	lead := &db.Lead{
+		ClientID:        req.ClientID,
+		Name:            req.Name,
+		PhoneRaw:        req.Phone,
+		PhoneNormalized: phoneNorm,
+		ServiceInterest: serviceInterest,
+		Status:          "Não agendou",
+		NeedsReview:     needsReview,
+		PaymentStatus:   "Não pago",
+	}
+
+	if err := db.CreateLead(a.DB, lead); err != nil {
+		log.Printf("IngestLead: failed to create lead: %v", err)
+		http.Error(w, "db error", http.StatusInternalServerError)
+		return
+	}
+
+	if req.MessageID != "" {
+		if err := db.RecordProcessedMessage(a.DB, req.ClientID, req.MessageID); err != nil {
+			log.Printf("IngestLead: failed to record processed message: %v", err)
+		}
+	}
+
+	// Seed default statuses/keywords for this client if first lead.
+	go seedClientDefaults(a.DB, req.ClientID)
+
+	w.WriteHeader(http.StatusCreated)
+}
+
+// seedClientDefaults seeds default statuses and keywords for a client on first lead.
+// It accepts the DB as a parameter so it can be called from both the App method
+// and the legacy package-level shim without touching global state.
+func seedClientDefaults(database *sql.DB, clientID int64) {
+	statuses, _ := db.ListLeadStatuses(database, clientID)
+	if len(statuses) == 0 {
+		defaults := []string{"Não agendou", "Agendou", "Sem retorno / não evoluiu"}
+		for _, s := range defaults {
+			db.AddLeadStatus(database, clientID, s)
+		}
+	}
+
+	kws, _ := db.ListServiceKeywords(database, clientID)
+	if len(kws) == 0 {
+		defaultKWs := map[string][]string{
+			"Head Spa":           {"head spa", "head-spa", "headspa"},
+			"Massagem completa":  {"massagem", "massagem completa"},
+			"Drenagem linfatica": {"drenagem", "linfática", "drenagem linfatica"},
+			"Hydra Boost":        {"hydra", "hydra boost"},
+			"Design Henna":       {"henna", "design henna"},
+			"Masculino":          {"masculino", "masc"},
+		}
+		for svc, keywords := range defaultKWs {
+			for _, kw := range keywords {
+				db.AddServiceKeyword(database, clientID, svc, kw)
+			}
+		}
+	}
+}
+
+// --- package-level shim kept for existing tests ---
+
+func IngestLead(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).IngestLead(w, r)
+}
--- a/apps/go-crm/internal/handlers/lead_keywords.go
+++ b/apps/go-crm/internal/handlers/lead_keywords.go
@@ -0,0 +1,242 @@
+package handlers
+
+import (
+	"fmt"
+	"net/http"
+	"strconv"
+
+	"go-crm/internal/db"
+
+	"github.com/go-chi/chi/v5"
+)
+
+// LeadKeywordsPage renders the keyword mapping management screen.
+// GET /leads/keywords
+func (a *App) LeadKeywordsPage(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+
+	clientID := a.clientIDForAccount(accountID)
+	if clientID == 0 {
+		http.Error(w, "No client found for account", http.StatusBadRequest)
+		return
+	}
+
+	kws, err := db.ListServiceKeywords(a.DB, clientID)
+	if err != nil {
+		http.Error(w, err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	statuses, _ := db.ListLeadStatuses(a.DB, clientID)
+	services := a.serviceNames(clientID)
+
+	pendingCount, _ := db.CountLeadsNeedingReview(a.DB, clientID)
+
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprintf(w, `<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Keyword Mapping</title>
+    <script src="https://unpkg.com/htmx.org@1.9.10"></script>
+    <style>
+        body { font-family: sans-serif; padding: 1rem; }
+        table { border-collapse: collapse; width: 100%%; margin-bottom: 2rem; }
+        th, td { border: 1px solid #ddd; padding: 8px; text-align: left; }
+        th { background: #f5f5f5; }
+        .badge { background: #dc3545; color: #fff; border-radius: 1rem; padding: 0.2rem 0.6rem; font-size: 0.8rem; }
+        .section { margin-top: 2rem; }
+        form.inline { display: inline; }
+    </style>
+</head>
+<body>
+    <h1>Keyword Mapping</h1>
+    <nav>
+        <a href="/">Home</a> |
+        <a href="/leads/review">Review Queue <span class="badge">%d</span></a> |
+        <a href="/leads/all">All Leads</a> |
+        <a href="/report">Monthly Report</a>
+    </nav>
+    <br>
+
+    <h2>Service Keywords</h2>
+    <p>Add keywords that trigger automatic service detection. Case and accent insensitive.</p>
+    <form hx-post="/leads/keywords" hx-target="#keywordTable" hx-swap="outerHTML">
+        <select name="service_name">%s</select>
+        <input type="text" name="keyword" placeholder="Keyword (e.g. massagem)" required>
+        <button type="submit">Add Keyword</button>
+    </form>
+    <br><br>
+    %s
+
+    <div class="section">
+    <h2>Lead Statuses</h2>
+    <p>Manage the status options available for leads.</p>
+    <form hx-post="/leads/statuses" hx-target="#statusTable" hx-swap="outerHTML">
+        <input type="text" name="status_name" placeholder="New status name" required>
+        <button type="submit">Add Status</button>
+    </form>
+    <br><br>
+    %s
+    </div>
+</body></html>`,
+		pendingCount,
+		buildServiceSelectOptions(services),
+		renderKeywordTable(kws),
+		renderStatusTable(statuses),
+	)
+}
+
+// AddServiceKeyword adds a new keyword mapping.
+// POST /leads/keywords
+func (a *App) AddServiceKeyword(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+	clientID := a.clientIDForAccount(accountID)
+	r.ParseForm()
+	svc := r.FormValue("service_name")
+	kw := r.FormValue("keyword")
+	if svc == "" || kw == "" {
+		http.Error(w, "service_name and keyword required", http.StatusBadRequest)
+		return
+	}
+	db.AddServiceKeyword(a.DB, clientID, svc, kw)
+
+	kws, _ := db.ListServiceKeywords(a.DB, clientID)
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprint(w, renderKeywordTable(kws))
+}
+
+// DeleteServiceKeywordHandler removes a keyword mapping.
+// DELETE /leads/keywords/{id}
+func (a *App) DeleteServiceKeywordHandler(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+	clientID := a.clientIDForAccount(accountID)
+	kwID, _ := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
+	db.DeleteServiceKeyword(a.DB, clientID, kwID)
+
+	kws, _ := db.ListServiceKeywords(a.DB, clientID)
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprint(w, renderKeywordTable(kws))
+}
+
+// AddLeadStatusHandler adds a new custom lead status.
+// POST /leads/statuses
+func (a *App) AddLeadStatusHandler(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+	clientID := a.clientIDForAccount(accountID)
+	r.ParseForm()
+	statusName := r.FormValue("status_name")
+	if statusName == "" {
+		http.Error(w, "status_name required", http.StatusBadRequest)
+		return
+	}
+	db.AddLeadStatus(a.DB, clientID, statusName)
+
+	statuses, _ := db.ListLeadStatuses(a.DB, clientID)
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprint(w, renderStatusTable(statuses))
+}
+
+// DeleteLeadStatusHandler removes a lead status.
+// DELETE /leads/statuses/{id}
+func (a *App) DeleteLeadStatusHandler(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+	clientID := a.clientIDForAccount(accountID)
+	statusID, _ := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
+	db.DeleteLeadStatus(a.DB, clientID, statusID)
+
+	statuses, _ := db.ListLeadStatuses(a.DB, clientID)
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprint(w, renderStatusTable(statuses))
+}
+
+// --- rendering helpers -------------------------------------------------------
+
+func buildServiceSelectOptions(services []string) string {
+	out := ""
+	for _, s := range services {
+		if s == "Não especificou" {
+			continue // don't map keywords to the fallback
+		}
+		out += fmt.Sprintf(`<option value="%s">%s</option>`, htmlEscape(s), htmlEscape(s))
+	}
+	return out
+}
+
+func renderKeywordTable(kws []db.ServiceKeyword) string {
+	out := `<table id="keywordTable">
+    <thead><tr><th>Service</th><th>Keyword</th><th>Actions</th></tr></thead>
+    <tbody>`
+	if len(kws) == 0 {
+		out += `<tr><td colspan="3">No keywords defined.</td></tr>`
+	}
+	for _, kw := range kws {
+		out += fmt.Sprintf(`
+    <tr>
+        <td>%s</td>
+        <td>%s</td>
+        <td>
+            <form hx-delete="/leads/keywords/%d" hx-target="#keywordTable" hx-swap="outerHTML" style="display:inline">
+                <button type="submit">Remove</button>
+            </form>
+        </td>
+    </tr>`, htmlEscape(kw.ServiceName), htmlEscape(kw.Keyword), kw.KeywordID)
+	}
+	out += `</tbody></table>`
+	return out
+}
+
+func renderStatusTable(statuses []db.LeadStatus) string {
+	out := `<table id="statusTable">
+    <thead><tr><th>Status</th><th>Actions</th></tr></thead>
+    <tbody>`
+	if len(statuses) == 0 {
+		out += `<tr><td colspan="2">No statuses defined.</td></tr>`
+	}
+	for _, s := range statuses {
+		out += fmt.Sprintf(`
+    <tr>
+        <td>%s</td>
+        <td>
+            <form hx-delete="/leads/statuses/%d" hx-target="#statusTable" hx-swap="outerHTML" style="display:inline">
+                <button type="submit">Remove</button>
+            </form>
+        </td>
+    </tr>`, htmlEscape(s.StatusName), s.StatusID)
+	}
+	out += `</tbody></table>`
+	return out
+}
+
+// --- package-level shims kept for existing tests ---
+
+func LeadKeywordsPage(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).LeadKeywordsPage(w, r)
+}
+func AddServiceKeyword(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).AddServiceKeyword(w, r)
+}
+func DeleteServiceKeywordHandler(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).DeleteServiceKeywordHandler(w, r)
+}
+func AddLeadStatusHandler(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).AddLeadStatusHandler(w, r)
+}
+func DeleteLeadStatusHandler(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).DeleteLeadStatusHandler(w, r)
+}
--- a/apps/go-crm/internal/handlers/lead_review.go
+++ b/apps/go-crm/internal/handlers/lead_review.go
@@ -0,0 +1,423 @@
+package handlers
+
+import (
+	"fmt"
+	"net/http"
+	"strconv"
+	"strings"
+	"time"
+
+	"go-crm/internal/db"
+
+	"github.com/go-chi/chi/v5"
+)
+
+// LeadReviewQueue renders the review queue: leads where needs_review = 1.
+// GET /leads/review
+func (a *App) LeadReviewQueue(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+
+	clientID := a.clientIDForAccount(accountID)
+	if clientID == 0 {
+		http.Error(w, "No client found for account", http.StatusBadRequest)
+		return
+	}
+
+	limit, _ := strconv.Atoi(r.URL.Query().Get("limit"))
+	offset, _ := strconv.Atoi(r.URL.Query().Get("offset"))
+	if limit == 0 {
+		limit = 50
+	}
+
+	leads, err := db.ListLeadsForReview(a.DB, clientID, limit, offset)
+	if err != nil {
+		http.Error(w, err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	statuses, _ := db.ListLeadStatuses(a.DB, clientID)
+	services := a.serviceNames(clientID)
+
+	pendingCount := len(leads)
+
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprintf(w, `<!DOCTYPE html>
+<html>
+<head>
+    <title>Review Queue (%d pending)</title>
+    <script src="https://unpkg.com/htmx.org@1.9.10"></script>
+    <style>
+        body { font-family: sans-serif; padding: 1rem; }
+        h1 { display: flex; align-items: center; gap: 0.5rem; }
+        .badge { background: #dc3545; color: #fff; border-radius: 1rem; padding: 0.2rem 0.6rem; font-size: 0.85rem; }
+        table { border-collapse: collapse; width: 100%%; }
+        th, td { border: 1px solid #ddd; padding: 8px; text-align: left; vertical-align: top; }
+        th { background: #f5f5f5; }
+        form { display: inline; }
+        select, input[type=text] { width: 100%%; box-sizing: border-box; }
+        .actions button { margin-right: 4px; }
+        .empty { padding: 2rem; color: #888; text-align: center; }
+    </style>
+</head>
+<body>
+    <h1>Review Queue <span class="badge">%d</span></h1>
+    <p>Leads with service interest not yet identified. Confirm or correct each entry.</p>
+    <nav><a href="/">Home</a> | <a href="/leads/all">All Leads</a> | <a href="/leads/keywords">Keyword Mapping</a> | <a href="/report">Monthly Report</a></nav>
+    <br>
+`, pendingCount, pendingCount)
+
+	if len(leads) == 0 {
+		fmt.Fprintf(w, `<div class="empty">No leads pending review.</div>`)
+	} else {
+		fmt.Fprintf(w, `<table>
+        <thead>
+            <tr>
+                <th>Phone</th>
+                <th>Name</th>
+                <th>Service Interest</th>
+                <th>Status</th>
+                <th>Arrived</th>
+                <th>Actions</th>
+            </tr>
+        </thead>
+        <tbody id="reviewList">`)
+
+		for _, l := range leads {
+			arrived := time.Unix(l.CreatedAt, 0).Format("02/01 15:04")
+			fmt.Fprintf(w, `
+            <tr id="row-%d">
+                <td>%s</td>
+                <td>%s</td>
+                <td>
+                    <form hx-put="/leads/%d/review" hx-target="#row-%d" hx-swap="outerHTML">
+                        <select name="service_interest">%s</select>
+                        <select name="status">%s</select>
+                        <input type="text" name="name" value="%s" placeholder="Name">
+                        <div class="actions">
+                            <button type="submit">Confirm</button>
+                        </div>
+                    </form>
+                </td>
+                <td>%s</td>
+                <td>%s</td>
+                <td>
+                    <form hx-delete="/leads/%d" hx-target="#row-%d" hx-swap="outerHTML">
+                        <button type="submit" onclick="return confirm('Delete this lead?')">Delete</button>
+                    </form>
+                </td>
+            </tr>`,
+				l.LeadID,
+				htmlEscape(l.PhoneNormalized),
+				htmlEscape(l.Name),
+				l.LeadID, l.LeadID,
+				buildServiceOptions(services, l.ServiceInterest),
+				buildStatusOptions(statuses, l.Status),
+				htmlEscape(l.Name),
+				htmlEscape(l.Status),
+				arrived,
+				l.LeadID, l.LeadID,
+			)
+		}
+		fmt.Fprintf(w, `</tbody></table>`)
+	}
+
+	fmt.Fprintf(w, `</body></html>`)
+}
+
+// ConfirmLeadReview handles the form submission from the review queue.
+// PUT /leads/{id}/review
+func (a *App) ConfirmLeadReview(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+
+	clientID := a.clientIDForAccount(accountID)
+	if clientID == 0 {
+		http.Error(w, "No client found", http.StatusBadRequest)
+		return
+	}
+
+	leadID, _ := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
+	r.ParseForm()
+
+	lead, err := db.GetLeadByID(a.DB, clientID, leadID)
+	if err != nil {
+		http.Error(w, "Lead not found", http.StatusNotFound)
+		return
+	}
+
+	lead.Name = r.FormValue("name")
+	lead.ServiceInterest = r.FormValue("service_interest")
+	lead.Status = r.FormValue("status")
+	lead.NeedsReview = false
+
+	if err := db.UpdateLead(a.DB, lead); err != nil {
+		http.Error(w, err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprintf(w, `<tr id="row-%d" style="display:none"></tr>`, leadID)
+}
+
+// LeadAllList renders all leads (not just review queue).
+// GET /leads/all
+func (a *App) LeadAllList(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+
+	clientID := a.clientIDForAccount(accountID)
+	if clientID == 0 {
+		http.Error(w, "No client found for account", http.StatusBadRequest)
+		return
+	}
+
+	limit, _ := strconv.Atoi(r.URL.Query().Get("limit"))
+	offset, _ := strconv.Atoi(r.URL.Query().Get("offset"))
+	if limit == 0 {
+		limit = 50
+	}
+
+	var leads []db.Lead
+	var err error
+	if a.LeadService != nil {
+		domainLeads, svcErr := a.LeadService.ListAllLeads(r.Context(), clientID, limit, offset)
+		if svcErr != nil {
+			http.Error(w, svcErr.Error(), http.StatusInternalServerError)
+			return
+		}
+		// convert domain.Leaf to db.Lead
+		leads = make([]db.Lead, len(domainLeads))
+		for i, dl := range domainLeads {
+			leads[i] = db.Lead{
+				LeadID:          dl.LeadID,
+				ClientID:        dl.ClientID,
+				Name:            dl.Name,
+				PhoneRaw:        dl.PhoneRaw,
+				PhoneNormalized: dl.PhoneNormalized,
+				ServiceInterest: dl.ServiceInterest,
+				Status:          dl.Status,
+				NeedsReview:     dl.NeedsReview,
+				AppointmentDate: dl.AppointmentDate,
+				AppointmentTime: dl.AppointmentTime,
+				PaymentStatus:   dl.PaymentStatus,
+				PaymentAmount:   dl.PaymentAmount,
+				PaymentDate:     dl.PaymentDate,
+				CreatedAt:       dl.CreatedAt,
+				LastContactAt:   dl.LastContactAt,
+			}
+		}
+	} else {
+		leads, err = db.ListAllLeads(a.DB, clientID, limit, offset)
+		if err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+			return
+		}
+	}
+
+	pendingCount, _ := db.CountLeadsNeedingReview(a.DB, clientID)
+	statuses, _ := db.ListLeadStatuses(a.DB, clientID)
+	services := a.serviceNames(clientID)
+
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	fmt.Fprintf(w, `<!DOCTYPE html>
+<html>
+<head>
+    <title>All Leads</title>
+    <script src="https://unpkg.com/htmx.org@1.9.10"></script>
+    <style>
+        body { font-family: sans-serif; padding: 1rem; }
+        table { border-collapse: collapse; width: 100%%; }
+        th, td { border: 1px solid #ddd; padding: 8px; text-align: left; }
+        th { background: #f5f5f5; }
+        .badge { background: #dc3545; color: #fff; border-radius: 1rem; padding: 0.2rem 0.6rem; font-size: 0.8rem; }
+        .needs-review { background: #fff3cd; }
+        select, input[type=text] { width: 100%%; box-sizing: border-box; }
+    </style>
+</head>
+<body>
+    <h1>All Leads</h1>
+    <nav>
+        <a href="/">Home</a> |
+        <a href="/leads/review">Review Queue <span class="badge">%d</span></a> |
+        <a href="/leads/keywords">Keyword Mapping</a> |
+        <a href="/report">Monthly Report</a>
+    </nav>
+    <br>
+    <table>
+        <thead>
+            <tr>
+                <th>Phone</th><th>Name</th><th>Service</th><th>Status</th>
+                <th>Payment</th><th>Arrived</th><th>Last Contact</th><th>Actions</th>
+            </tr>
+        </thead>
+        <tbody id="leadsList">
+`, pendingCount)
+
+	for _, l := range leads {
+		arrived := time.Unix(l.CreatedAt, 0).Format("02/01/2006 15:04")
+		lastContact := time.Unix(l.LastContactAt, 0).Format("02/01/2006 15:04")
+		rowClass := ""
+		if l.NeedsReview {
+			rowClass = `class="needs-review"`
+		}
+		fmt.Fprintf(w, `
+        <tr %s id="lead-%d">
+            <td>%s</td>
+            <td>%s</td>
+            <td>%s</td>
+            <td>%s</td>
+            <td>%s</td>
+            <td>%s</td>
+            <td>%s</td>
+            <td>
+                <button onclick="document.getElementById('edit-%d').style.display='table-row'">Edit</button>
+                <form hx-delete="/leads/%d" hx-target="#lead-%d" hx-swap="outerHTML" style="display:inline">
+                    <button onclick="return confirm('Delete?')">Delete</button>
+                </form>
+            </td>
+        </tr>
+        <tr id="edit-%d" style="display:none">
+            <td colspan="8">
+                <form hx-put="/leads/%d/review" hx-target="#lead-%d" hx-swap="outerHTML">
+                    <input type="text" name="name" value="%s" placeholder="Name">
+                    <select name="service_interest">%s</select>
+                    <select name="status">%s</select>
+                    <button type="submit">Save</button>
+                    <button type="button" onclick="document.getElementById('edit-%d').style.display='none'">Cancel</button>
+                </form>
+            </td>
+        </tr>`,
+			rowClass, l.LeadID,
+			htmlEscape(l.PhoneNormalized),
+			htmlEscape(l.Name),
+			htmlEscape(l.ServiceInterest),
+			htmlEscape(l.Status),
+			htmlEscape(l.PaymentStatus),
+			arrived,
+			lastContact,
+			l.LeadID,
+			l.LeadID, l.LeadID,
+			l.LeadID,
+			l.LeadID, l.LeadID,
+			htmlEscape(l.Name),
+			buildServiceOptions(services, l.ServiceInterest),
+			buildStatusOptions(statuses, l.Status),
+			l.LeadID,
+		)
+	}
+
+	fmt.Fprintf(w, `</tbody></table></body></html>`)
+}
+
+// DeleteLeadNew handles DELETE /leads/{id}
+func (a *App) DeleteLeadNew(w http.ResponseWriter, r *http.Request) {
+	accountID, ok := a.requireAuth(w, r)
+	if !ok {
+		return
+	}
+	clientID := a.clientIDForAccount(accountID)
+	leadID, _ := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
+	a.DB.Exec("DELETE FROM leads WHERE lead_id = ? AND client_id = ?", leadID, clientID)
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	w.Write([]byte(""))
+}
+
+// serviceNames returns the list of service names for the review/all-leads dropdowns.
+// It reads from the DB-backed services table first, then falls back to the
+// hardcoded defaults so the dropdown is never empty on a fresh install.
+func (a *App) serviceNames(clientID int64) []string {
+	rows, err := a.DB.Query(
+		"SELECT DISTINCT name FROM services WHERE client_id = ? ORDER BY name",
+		clientID,
+	)
+	if err == nil {
+		defer rows.Close()
+		var names []string
+		for rows.Next() {
+			var n string
+			if rows.Scan(&n) == nil {
+				names = append(names, n)
+			}
+		}
+		if len(names) > 0 {
+			// Ensure "Não especificou" is always first.
+			hasDefault := false
+			for _, n := range names {
+				if n == "Não especificou" {
+					hasDefault = true
+					break
+				}
+			}
+			if !hasDefault {
+				names = append([]string{"Não especificou"}, names...)
+			}
+			return names
+		}
+	}
+	// Fallback: hardcoded defaults for a fresh install with no services yet.
+	return []string{
+		"Não especificou",
+		"Head Spa",
+		"Massagem completa",
+		"Drenagem linfatica",
+		"Hydra Boost",
+		"Design Henna",
+		"Masculino",
+	}
+}
+
+// --- rendering helpers -------------------------------------------------------
+
+func buildServiceOptions(services []string, selected string) string {
+	out := ""
+	for _, s := range services {
+		sel := ""
+		if s == selected {
+			sel = ` selected`
+		}
+		out += fmt.Sprintf(`<option value="%s"%s>%s</option>`, htmlEscape(s), sel, htmlEscape(s))
+	}
+	return out
+}
+
+func buildStatusOptions(statuses []db.LeadStatus, selected string) string {
+	out := ""
+	for _, s := range statuses {
+		sel := ""
+		if s.StatusName == selected {
+			sel = ` selected`
+		}
+		out += fmt.Sprintf(`<option value="%s"%s>%s</option>`, htmlEscape(s.StatusName), sel, htmlEscape(s.StatusName))
+	}
+	return out
+}
+
+func htmlEscape(s string) string {
+	s = strings.ReplaceAll(s, "&", "&amp;")
+	s = strings.ReplaceAll(s, "<", "&lt;")
+	s = strings.ReplaceAll(s, ">", "&gt;")
+	s = strings.ReplaceAll(s, `"`, "&#34;")
+	return s
+}
+
+// --- package-level shims kept for existing tests ---
+
+func LeadReviewQueue(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).LeadReviewQueue(w, r)
+}
+func ConfirmLeadReview(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).ConfirmLeadReview(w, r)
+}
+func LeadAllList(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).LeadAllList(w, r)
+}
+func DeleteLeadNew(w http.ResponseWriter, r *http.Request) {
+	(&App{DB: DB, WAConnector: WAConnector}).DeleteLeadNew(w, r)
+}