13 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Ricardo Carneiro	843782249e	fix: configure ForwardedHeaders so playground rate limit uses real client IP ... Without this, RemoteIpAddress was always 127.0.0.1 (nginx), making the 10-calls/day limit shared across all users instead of per-IP. Clears KnownNetworks/KnownProxies to trust Cloudflare's X-Forwarded-For. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 22:57:07 -03:00
Ricardo Carneiro	12591d90f9	feat: validate_full_name v1.1 — sobrenome obrigatório + situation field ... - Exige ao menos duas palavras (nome + sobrenome) - Adiciona campo situation: name_provided/question/escalation/refused/evasive - Reject patterns para pedidos de atendente e recusas explícitas - Novos exemplos: frustração, escalation, pergunta, nome só - Novas suggestions: when_null_question, when_null_refused, when_null_escalation, when_uncertain_single_name Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 22:47:43 -03:00
Ricardo Carneiro	72ad41c529	fix: health check retry loop instead of fixed 35s sleep ... Retry up to 12x with 10s intervals (2 min total). Also reuse SSH setup in health check step. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 22:18:00 -03:00
Ricardo Carneiro	971c390ea3	fix: remove stack before secret rotation (scale=0 doesn't free secret refs) ... docker stack rm nalu releases all secret references. Wait for services to terminate before recreating secrets. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 21:43:12 -03:00
Ricardo Carneiro	a2c2b09d0e	ci: trigger rebuild after disk cleanup	2026-05-15 20:46:31 -03:00
Ricardo Carneiro	958e71d9bf	fix: scale service to 0 before secret rotation to avoid AlreadyExists error ... Docker Swarm refuses to delete secrets in use by running services. Scale nalu_app to 0 first, then rotate, then stack deploy re-creates. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 20:21:16 -03:00
Ricardo Carneiro	c5cb9df468	fix: use env var + sed for SSH key CRLF/escaped-newline handling ... Pass secret via env var (not inline), strip \r, convert literal \n to real newlines. Added head/wc debug output to diagnose key format. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 14:44:51 -03:00
Ricardo Carneiro	ba72b04313	fix: strip CRLF from SSH key in all workflow steps ... Gitea act runner injects secrets with \r\n line endings. Use printf + tr -d '\r' instead of echo to avoid libcrypto error. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 14:08:47 -03:00
Ricardo Carneiro	1177322f10	Fix failing tests: case-insensitive accept patterns + correct CPF expectation ... - DeterministicLayer: accept patterns now use IgnoreCase (was None) - Test: CPF ExtractedValue is raw formatted match, not stripped digits - CI filter: also exclude McpServerTests (require live server) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 13:02:01 -03:00
Ricardo Carneiro	9a68120adf	Fix CI: update test project reference and namespaces for Nalu.Web ... - Test project was referencing non-existent Nalu.Api.csproj → Nalu.Web.csproj - Replace using Nalu.Api.* → Nalu.Web.* in all test files - Skip PipelineIntegration tests in CI (require live MongoDB) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 12:49:54 -03:00
Ricardo Carneiro	e01787ee60	Add deploy infrastructure, missing validators, and new features ... - Add Docker Swarm deploy stack, CI workflow (.gitea), entrypoint script - Fix Dockerfile to build Nalu.Web (was pointing to old Nalu.Api path) - Add validate_name.md and other missing validators to prod - Add Stripe endpoints, HangfireDashboardAuth, InputGuard, NameLookupService - Add SuspiciousRateLimiter, En/ pages, Legal/ pages, Seguranca docs - Add Nalu.Jobs and Nalu.NameImporter projects (were untracked) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 12:31:12 -03:00
Ricardo Carneiro	56bbdd5345	Restore Groq API key (internal repo — prod secrets handled separately later)	2026-05-10 16:41:50 -03:00
Ricardo Carneiro	ea6cdb5395	Initial commit — NALU AI web platform ... - ASP.NET Core 9 Razor Pages + Minimal API hybrid - 14 validators (CPF, CEP, CNPJ, email, phone, name, yes-no, birthdate, handoff, cancel-intent, company-name, plate-br, postal-code, validate_reply) - OAuth login (Google, Microsoft, GitHub) + cookie auth - MongoDB usage tracking + CEP cache collection - Stripe checkout with inline PriceData (no Price IDs) - MCP server for Claude Code / Cursor integration - Playground (10 calls/IP/day, no auth) - Docs: Quickstart, API Reference, N8N, MCP, Créditos, Erros, Fluxos - Credit system: 3 cr standard validators, 5 cr validate_reply - SmartSuggestion: contextual re-ask via IA when obtained=false - Per-IP rate limiting + daily cap + shared-IP abuse detection - Lightbox for comic images - Validadores page split: Brasileiros / Universais + Em breve Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 16:39:04 -03:00