cafe-na-ia

This repository serves as the official installation portal for GRUPO LUA applications. It exposes four independent download targets: App 1 for Android and iOS (administrators) and Keymaster for Android and iOS (DEV). Each file has its own scrypt password verifier, and access to one download does not authorize the others. The security flow uses POST/HTTPS, scrypt validation, random one-time use authorization tied to the session, and expiration within a few minutes. There are no fixed public routes for the binaries, which remain outside public/ and are ignored by Git. The system includes configurable anti-bruteforce protection via environment variables, with attempt limits per IP and per artifact. There is also an isolated exception called Avatar Dump, which receives authorized Roblox avatar technical JSON (UserId 765329164) for visual reconstruction. The avatar-gateway.js gateway sits in front of the original server and exposes specific routes for submission, querying the latest record, and status. A GitHub workflow syncs a sanitized version of latest.json to the public repository, removing game context and arbitrary attributes. The project includes a command to generate scrypt verifiers without exposing passwords, documentation of environment variables, support for iOS redirection after authorization, and guidelines for deploying on Render with a persistent private directory. Validation is performed with npm run check and npm test. The portal is mobile-first, with a black background, white text, and GRUPO LUA visual identity.