feat: Protect home page with Angular Guards

.github/dependabot.yml

@@ -10,6 +10,8 @@ updates:
     commit-message:
       prefix: chore
       include: scope
+    allow:
+      - dependency-type: direct
 
   - package-ecosystem: maven
     directory: /timeless-api
@@ -32,3 +34,5 @@ updates:
     commit-message:
       prefix: chore
       include: scope
+    allow:
+      - dependency-type: direct

.github/workflows/build.yml

@@ -0,0 +1,120 @@
+name: Timeless CI - Build & Publish
+
+on:
+  push:
+    branches: [ "main" ]
+    paths-ignore:
+      - 'infrastructure/**'
+  pull_request:
+    branches: [ "main" ]
+    paths-ignore:
+      - 'infrastructure/**'
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  timeless-api:
+    name: Build & Publish - Timeless API (Java)
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: timeless-api        
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup JDK 21
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: "21"
+          cache: maven
+
+      - name: Build API
+        run: mvn -B -ntp formatter:validate impsort:check package
+
+      - name: Setup Node.js 24
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          cache: npm
+          cache-dependency-path: timeless-api/src/main/webui/package-lock.json
+
+      - name: Setup Chrome
+        id: chrome
+        uses: browser-actions/setup-chrome@v1
+
+      - name: Install Frontend Dependencies
+        working-directory: ./timeless-api/src/main/webui
+        run: npm ci
+
+      - name: Check code formatting with Prettier
+        working-directory: ./timeless-api/src/main/webui
+        run: npm run prettier:check
+
+      - name: Set up Podman
+        uses: gacts/install-podman@v1
+        if: github.repository == 'mcruzdev/timeless'
+        id: podman
+
+      - name: Login to Quay.io
+        if: github.repository == 'mcruzdev/timeless'
+        uses: docker/login-action@v3
+        with:
+          registry: quay.io
+          username: ${{ secrets.QUAY_USERNAME }}
+          password: ${{ secrets.QUAY_PASSWORD }}
+
+      - name: Create Docker image
+        if: github.repository == 'mcruzdev/timeless'
+        run: docker build -f src/main/docker/Dockerfile.jvm -t quay.io/timeless/timeless-api:${GITHUB_SHA::7} .
+
+      - name: Push Docker image to Quay.io
+        if: github.repository == 'mcruzdev/timeless'
+        run: docker push quay.io/timeless/timeless-api:${GITHUB_SHA::7}
+
+  whatsapp:
+    name: Build & Publish - WhatsApp Bot (Node.js)
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: whatsapp
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup Node.js 20
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+          cache-dependency-path: whatsapp/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check code formatting with Prettier
+        run: npm run prettier:check
+
+      - name: Login to Quay.io
+        if: github.repository == 'mcruzdev/timeless'
+        uses: docker/login-action@v3
+        with:
+          registry: quay.io
+          username: ${{ secrets.QUAY_USERNAME }}
+          password: ${{ secrets.QUAY_PASSWORD }}
+
+      - name: Create Docker image
+        if: github.repository == 'mcruzdev/timeless'
+        run: docker build -f Dockerfile -t quay.io/timeless/whatsapp:${GITHUB_SHA::7} .
+
+      - name: Push Docker image to Quay.io
+        if: github.repository == 'mcruzdev/timeless'
+        run: docker push quay.io/timeless/whatsapp:${GITHUB_SHA::7}

.github/workflows/pipeline.yml → .github/workflows/pull_request.yml

@@ -1,10 +1,10 @@
-name: Timeless CI
+name: Timeless CI - Pull Request Build
 
 on:
-  push:
-    branches: [ "main" ]
   pull_request:
     branches: [ "main" ]
+    paths-ignore:
+      - 'infrastructure/**'
 
 permissions:
   contents: read
@@ -15,11 +15,11 @@ concurrency:
 
 jobs:
   timeless-api:
-    name: Build & Test - Timeless API (Java)
+    name: Build Timeless API (Backend)
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: ./timeless-api        
+        working-directory: timeless-api        
 
     steps:
       - name: Checkout
@@ -32,13 +32,20 @@ jobs:
           java-version: "21"
           cache: maven
 
-      - name: Setup Node.js 20
+      - name: Build Timeless API
+        run: mvn -B -ntp formatter:validate impsort:check package
+
+      - name: Setup Node.js 24
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: npm
           cache-dependency-path: timeless-api/src/main/webui/package-lock.json
 
+      - name: Check code formatting with Prettier
+        working-directory: ./timeless-api/src/main/webui
+        run: npm run prettier:check
+
       - name: Setup Chrome
         id: chrome
         uses: browser-actions/setup-chrome@v1
@@ -47,40 +54,26 @@ jobs:
         working-directory: ./timeless-api/src/main/webui
         run: npm ci
 
-      - name: Check code formatting with Prettier
-        working-directory: ./timeless-api/src/main/webui
-        run: npm run prettier:check
-
-      - name: Ensure Maven wrapper is executable
-        run: chmod +x mvnw
-
-      - name: Build with unit and integration tests
-        run: ./mvnw -B -ntp formatter:validate impsort:check package
-        env:
-          CHROME_BIN: ${{ steps.chrome.outputs.chrome-path }}
-
   whatsapp:
-    name: Lint - WhatsApp
+    name: Build WhatsApp Bot (Node.js)
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: ./whatsapp
+        working-directory: whatsapp
 
     steps:
       - name: Checkout
         uses: actions/checkout@v5
 
-      - name: Setup Node.js 20
+      - name: Setup Node.js 24
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: npm
           cache-dependency-path: whatsapp/package-lock.json
 
       - name: Install Dependencies
         run: npm ci
 
       - name: Check code formatting with Prettier
-        run: npm run prettier:check
-
-
+        run: npm run prettier:check

README.md

@@ -8,6 +8,14 @@ See our landing page: [**https://timeless.platformoon.com**](https://timeless.pl
 
 This application monitors WhatsApp messages for signs of purchases (such as receipts, audio messages, transfers), extracts relevant information (amounts, descriptions), and automatically sends it to **Timeless**, helping you keep your finances organized — effortlessly.
 
+## ⚠️ Project Intent
+
+Timeless is primarily an educational project built to explore the intersection of automated messaging, NLP, and cloud infrastructure. While it mimics real-world financial tracking systems, its core goal is to demonstrate:
+
+* **Production-like Architecture**: Integrating Java/Quarkus with AI and external messaging APIs.
+* **Continuous Improvement**: The codebase is designed to evolve. We encourage experiments with local LLMs and different cloud providers.
+* **Learning by Doing**: This is a sandbox for implementing "real-world" logic in a controlled environment. Feel free to refactor, break, and improve!
+
 ## 🚀 Features
 
 - 📩 Automatic reading of WhatsApp messages
@@ -69,7 +77,7 @@ docker-compose up -d
 ### Execute the whatsapp application
 
 > [!NOTE]
-> Before you start, make sure to fill the `ALLOWED_USERS` and `OPENAI_API_KEY` variables in the `.env.local` file. This variable determines the number of users who can interact with the bot.
+> Before you start, make sure to fill the `ALLOWED_PHONE_NUMBERS` and `OPENAI_API_KEY` variables in the `.env.local` file. This variable determines the number of users who can interact with the bot.
 
 1. Go to `whatsapp` directory and install all necessary packages:
 
@@ -98,4 +106,4 @@ You should receive something like it:
 
 ### How to contribute
 
-[CONTRIBUTING.md](CONTRIBUTING.md)
+[CONTRIBUTING.md](CONTRIBUTING.md)

RUNNING_TERRAFORM_AWS.md

@@ -57,7 +57,7 @@ AWS_SECRET_ACCESS_KEY=
 OPENAI_API_KEY=
 SECURITY_KEY=
 INCOMING_MESSAGE_FIFO_URL=
-MESSAGES_PROCESSED_FIFO_URL=
+RECOGNIZED_MESSAGES_FIFO_URL=
 EOF
 ```
 
@@ -73,7 +73,7 @@ The table below explains the purpose of each variable along with suggested examp
 | `OPENAI_API_KEY`              | Your OpenAI API key                                                                          | `sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`                 |
 | `SECURITY_KEY`                | Secret key used for AES encryption (must be exactly 16, 24, or 32 characters long, no accents) | `MySuperSecretAESKey12345678901234`                          |
 | `INCOMING_MESSAGE_FIFO_URL`  | The URL of the SQS FIFO queue for incoming messages                                          | `https://sqs.us-east-1.amazonaws.com/123456789/incoming-messages.fifo` |
-| `MESSAGES_PROCESSED_FIFO_URL`| The URL of the SQS FIFO queue for processed messages                                        | `https://sqs.us-east-1.amazonaws.com/123456789/messages-processed.fifo` |
+| `RECOGNIZED_MESSAGES_FIFO_URL`| The URL of the SQS FIFO queue for processed messages                                        | `https://sqs.us-east-1.amazonaws.com/123456789/messages-processed.fifo` |
 
 4. Execute the application in Dev mode
 
@@ -85,7 +85,7 @@ The table below explains the purpose of each variable along with suggested examp
 
 6. Sign in at <http://localhost:8080>
 
-7. Add the user phone number at <http://localhost:8080/home/user-configs>, this phone number must be set after on `ALLOWED_USERS`.
+7. Add the user phone number at <http://localhost:8080/home/user-configs>, this phone number must be set after on `ALLOWED_PHONE_NUMBERS`.
 
 ## Configuring and running the whatsapp application
 
@@ -104,10 +104,10 @@ npm install
 | `AWS_ACCESS_KEY_ID`                  | Your AWS Access Key                                                                               | `AKIAxxxxxxxxxxxxxxxxxx`                                         |
 | `AWS_SECRET_ACCESS_KEY`                  | Your AWS Secret Key                                                                               | `xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`                       |
 | `ASSETS_BUCKET`              | The name of the bucket where audio and images will be stored (created via Terraform)                      | `my-assets-bucket`                                                 |
-| `ALLOWED_USERS`                | Comma-separated list of phone numbers allowed to interact with the bot             | `5511999999999,5511888888888`                                  |
+| `ALLOWED_PHONE_NUMBERS`                | Comma-separated list of phone numbers allowed to interact with the bot             | `5511999999999,5511888888888`                                  |
 | `OPENAI_API_KEY`             | Your OpenAI API Key used to access GPT and Whisper APIs                                           | `sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`            |
 | `INCOMING_MESSAGE_QUEUE`     | URL of the SQS queue that receives incoming messages                                              | `https://sqs.us-east-1.amazonaws.com/123456789/incoming-messages.fifo`    |
-| `MESSAGES_PROCESSED_FIFO_URL`| URL of the SQS FIFO queue where processed messages are sent                                       | `https://sqs.us-east-1.amazonaws.com/123456789/messages-processed.fifo`   |
+| `RECOGNIZED_MESSAGES_FIFO_URL`| URL of the SQS FIFO queue where processed messages are sent                                       | `https://sqs.us-east-1.amazonaws.com/123456789/messages-processed.fifo`   |
 
 4. Start the application
 
@@ -127,7 +127,7 @@ npm run start
 2. Fill out the registration form with your details and submit it.
 3. Log in to your account at [http://localhost:8080](http://localhost:8080).
 4. Add your phone number on the [User Configs page](http://localhost:8080/home/user-configs).  
-   ⚠️ Make sure the phone number matches one of the values defined in the `ALLOWED_USERS` environment variable.
+   ⚠️ Make sure the phone number matches one of the values defined in the `ALLOWED_PHONE_NUMBERS` environment variable.
 5. After connected the device with the scanned QR Code, send the following message: `"Achei mil reais no chão da praia"`.
 
    You should receive something like it: