150 Commits

Author SHA1 Message Date
Pedro Grisales
d71b036ab2 fix(seed-dev): remove invalid --env flag from cypher-shell invocation. (#72) 2026-03-15 23:31:10 -03:00
Pedro Grisales
b73052369a docs: add CHANGELOG.md compiled from GitHub Releases (#69)
Maintainer triage on March 9, 2026: merged after approving forked runs and confirming green required checks.
2026-03-08 23:08:31 -03:00
lspassos1
4ab2a1aa30 feat(frontend): add Emendas page with pagination, i18n, and responsive table (#63)
Maintainer triage on March 8, 2026: merged after manual label fix, branch update, and green required checks.
2026-03-08 01:16:41 -03:00
lspassos1
36cb016993 feat(etl): add Tesouro Emendas pipeline for National Treasury amendment data (#61)
Maintainer triage on March 8, 2026: merged after manual label fix, branch update, and green required checks.
2026-03-08 01:15:33 -03:00
lspassos1
638b9b7aaf feat(api): add /emendas endpoint with Pydantic model and pagination (#62)
Maintainer triage on March 8, 2026: merged after manual label fix, branch update, and green required checks.
2026-03-08 01:14:32 -03:00
lspassos1
c499154937 fix(ci): grant pull-requests write permission in auto-label workflow (#60)
Maintainer triage on March 8, 2026: merged after manual label fix and green required checks.
2026-03-08 01:13:14 -03:00
lspassos1
28bba662f7 fix(api): correct Dockerfile COPY instruction for multiple source files (#56)
Maintainer triage on March 7, 2026: merged after release labeling and full required checks passed.
2026-03-07 16:01:45 -03:00
Bruno César
52dc8d5030 docs(readme): add token transparency disclosure (#54)
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-06 14:26:55 -03:00
Bruno César
8a6e517d82 docs: update header image to 6_50PM variant (#52)
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-05 01:58:27 -03:00
Bruno César
bf413e5d19 docs: replace header with corrected br/acc image (#51)
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-05 01:27:38 -03:00
Bruno César
7a6cef204b docs: refresh repo header image (#50)
* docs: refresh header image asset

* security(etl): bump pypdf to 6.7.5 for CVE-2026-28804

---------

Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-05 01:22:55 -03:00
Davi Rezende
461ff067ca fix(ci): use lowercase image prefix for OCI compliance (#49) 2026-03-05 01:02:40 -03:00
Davi Rezende
f7d9aa15bd docs: add contributors section with avatars in README (#46)
Co-authored-by: Bruno César <bruno@sekai.cx>
2026-03-03 21:30:21 -03:00
7acini
154c81a03f docs(readme): update setup instructions for Docker-based workflow (#45)
Co-authored-by: Bruno César <bruno@sekai.cx>
2026-03-03 21:29:09 -03:00
Davi Rezende
d4179af665 feat(frontend/security): add npm audit to CI and document env guidelines (#41)
* chore(ci): add npm audit job for frontend deps in security workflow

* docs(frontend/security): document VITE env and JWT storage in CONTRIBUTING

* fix(frontend): resolve high-severity npm audit (minimatch, rollup)

- npm audit fix for ReDoS in minimatch and path traversal in rollup
- Unblocks Security / NPM Audit (frontend) CI check per review

Made-with: Cursor

---------

Co-authored-by: Bruno César <bruno@sekai.cx>
2026-03-03 21:27:54 -03:00
Davi Rezende
d889569a78 feat(ci): add docker-ci workflow for GHCR and optional image-based deploy (#47)
* feat(ci): add docker-ci workflow for Buildx and GHCR push

* refactor(docker): use per-service builds in root docker-compose

* refactor(etl): use uv and uv.lock in ETL Dockerfile

* fix(api): add uv.lock to API Dockerfile for reproducible builds

* feat(deploy): add optional GHCR image pull and prod images override

* refactor(docker): use uv in root Dockerfile etl stage, document canonical Dockerfiles

* chore(docker): extend .dockerignore for build context

* docs: add Docker Compose start option to README
2026-03-03 21:26:32 -03:00
7acini
d265df24a1 chore(pr-review): squash merge #34
Merged by strict manual review cycle 20260303T215220Z.
2026-03-03 19:09:52 -03:00
Davi Figueiredo
c53d28de39 chore(pr-review): squash merge #35
Merged by strict manual review cycle 20260303T215220Z.
2026-03-03 19:08:14 -03:00
Christos
38a7873897 chore(pr-review): squash merge #39
Merged by strict manual review cycle 20260303T215220Z.
2026-03-03 19:06:30 -03:00
Davi Rezende
52f71b19eb chore(pr-review): squash merge #40
Merged by strict manual review cycle 20260303T215220Z.
2026-03-03 19:02:44 -03:00
Davi Rezende
d91b5b009c chore(pr-review): squash merge #44
Merged by strict manual review cycle 20260303T215220Z.
2026-03-03 19:01:26 -03:00
Davi Rezende
8d12cadcb7 chore(pr-review): squash merge #43
Merged by strict manual review cycle 20260303T215220Z.
2026-03-03 18:59:29 -03:00
Davi Rezende
f79a0b1717 chore(pr-review): squash merge #42
Merged by strict manual review cycle 20260303T215220Z.
2026-03-03 18:58:27 -03:00
colkito
4de819e288 feat: add secure env generation script and make target (#33) 2026-03-02 22:26:49 -03:00
Bruno César
add44821e8 sync: upstream convergence 2026-03-02
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-02 03:51:26 -03:00
Bruno César
d00d150f93 Merge pull request #26 from gabriel7419/fix-makefile
fix: append check and neutrality commands to Makefile
2026-03-02 01:02:28 -03:00
Bruno César
522a9bb958 Merge branch 'main' into fix-makefile 2026-03-02 01:01:14 -03:00
Bruno César
8d0162f5a9 Merge pull request #28 from joaobenedetmachado/api-health-version
Include API version in /health response
2026-03-02 01:00:45 -03:00
joaobenedetmachado
66b6d9611c Include API version in /health response
Made-with: Cursor
2026-03-02 00:25:15 -03:00
Gabriel Paiva de Almeida
59e75939d2 Merge branch 'main' into fix-makefile 2026-03-01 22:26:06 -03:00
AbraaoAlves
2c2b32d0c5 feat: Update PR label from description template (#27)
* feat: update PR label from template

- Search the PR text for checkboxes marked in the format [x] release:...``
- Only accepts these labels (the same as the pull_request_template.md template): release:major, release:feature, release:patterns, release:api, release:data, release:privacy, release:fix, release:docs, release:infra, release:security

- The job fails if more than one release:* is checked
 - Removes other old release:* from the PR and adds only the chosen one (keeps “exactly one” in sync)

* fix(ci): run auto-labeler on pull_request_target

---------

Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-01 22:19:06 -03:00
gabriel7419
f9c1686b46 fix: append check and neutrality commands to Makefile 2026-03-01 21:52:51 -03:00
c3c4d4
e2c564dceb Harden auth, sharing, search, and ETL security controls (#24)
* Harden auth, sharing, search, and ETL security controls

* Address PR feedback on client headers, store deps, and test coverage

* test(frontend): fix GraphExplorer store mock selector support

* fix(api): escape lucene query in search count

---------

Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-01 21:32:19 -03:00
Cat w/ Eyebrows
57f075f087 fix: escape Lucene special characters in fulltext search (#21)
Searching for formatted CNPJs (with / and -) caused a 500 error
because these are Lucene query syntax characters. Escape all special
characters before passing user input to the fulltext index.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-01 21:21:35 -03:00
Bruno César
9bad9beb28 feat: add bootstrap-all orchestration and public trust hardening (#25)
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-01 21:17:32 -03:00
Bruno César
69fbf6252f Merge pull request #16 from World-Open-Graph/codex/ci-effectiveness-2026-03-01
CI: faster PR feedback via concurrency + shared quality scripts
2026-03-01 19:29:42 -03:00
bruno cesar
3ddac354b9 Merge remote-tracking branch 'origin/main' into codex/ci-effectiveness-2026-03-01 2026-03-01 19:28:41 -03:00
Bruno César
a962069097 fix: point shields.io badges to correct repo World-Open-Graph/br-acc (#15)
Badges for last-commit, issues, stars, and forks showed "repo not found"
because they referenced the non-existent brunoclz/world-transparency-graph.

Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-01 19:27:42 -03:00
bruno cesar
11602459cb chore(ci): trigger concurrency test 2 2026-03-01 19:26:53 -03:00
bruno cesar
22d316eaad chore(ci): trigger concurrency test 1 2026-03-01 19:26:42 -03:00
bruno cesar
0800806fe9 ci: improve feedback speed with concurrency and shared quality scripts 2026-03-01 19:25:30 -03:00
Bruno César
f7e4105511 docs: redesign README with new brand identity and structure (#14)
Rewrite both EN and pt-BR READMEs with improved information architecture:
badges, Mermaid architecture diagram, dataset matrix, collapsible sections,
and public-safe defaults documentation. Add PNG header banner.

Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-01 19:23:17 -03:00
Lorenzo Machado
4eed42df82 alterei loadPersistedToken e persistToken para usar sessionStorage em vez de localStorage (#10)
* Alterei loadPersistedToken e persistToken para usar sessionStorage em vez de localStorage

reduzir a superfície de exposição do token entre sessões (mitigação frente a XSS).

* test: align auth store tests with sessionStorage persistence

---------

Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-01 18:54:42 -03:00
Bruno César
4db4307888 fix: remove linear audit from PR governor and tolerate fork comments (#13)
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-01 18:48:51 -03:00
Bruno César
262defc6e2 feat: add claude PR governor with deterministic merge gate (#9)
Co-authored-by: bruno cesar <brunoclz@brunos-MacBook-Pro.local>
2026-03-01 18:08:04 -03:00
Bruno César
854a3931fa Merge pull request #12 from World-Open-Graph/codex/release-notes-more-specific
docs+ci: enforce specific release notes with explicit pattern IDs
2026-03-01 17:55:22 -03:00
bruno cesar
4f822b3bd4 docs+ci: require explicit pattern-level release details 2026-03-01 17:54:13 -03:00
Bruno César
e9d32bd8b3 Merge pull request #11 from World-Open-Graph/codex/port-8-patterns-release-v030
feat: port 8 public-safe patterns and release system for v0.3.0
2026-03-01 17:41:14 -03:00
bruno cesar
f8914441fc fix: satisfy mypy typing for community pattern selection 2026-03-01 17:40:14 -03:00
bruno cesar
35275d8b2b feat: port 8 public-safe patterns and release system 2026-03-01 17:38:03 -03:00