release: merge develop into main for v0.27.0

Author: DavidsonGomes

CHANGELOG.md

@@ -5,6 +5,31 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.27.0] - 2026-04-22
+
+### Added
+
+- **Frontend i18n — pt-BR, en-US, es** (#24) — `react-i18next` + three locale bundles with 539 structurally identical keys each (validated via AST walker). Sidebar, Setup wizard (every label + validation string, live-switches as the user picks a language on step 1), Login, Settings, and 25+ page headers (Overview, Agents, Skills, Memory, Heartbeats, Goals, Providers, Integrations, Backups, Issues, Audit, Costs, Roles, Reports, MemPalace, Systems, Templates, Scheduler, Routines, Tasks, Knowledge layout, Knowledge Settings, API Keys, Connections) now render in the workspace's chosen language. Resolution order: `workspace.language` (backend) → `localStorage.evo_lang` → `navigator.language` → `en-US` fallback. Legacy codes (`ptBR`, `pt_BR`, `pt`, `enUS`, `en_US`) normalize to canonical BCP-47 transparently on both frontend and backend.
+- **`dashboard/frontend/.npmrc`** — `legacy-peer-deps=true` so `make dashboard-app` installs cleanly despite `i18next@24`/`react-i18next@15` declaring `typescript@^5` as peer while the frontend is on TS 6.
+
+### Changed
+
+- **Backend UTF-8 everywhere** — every Python I/O path that persists or reads user-facing content now uses explicit `encoding="utf-8"`: `workspace.yaml` + `CLAUDE.md` (auth_routes), `.env` editor (config), `routines.yaml` (goals, scheduler), `triggers.yaml`, `heartbeats.yaml`, ADW script docstring parsing, secret key file, port read, and Knowledge CLI env round-trip. Flask JSON responses emit real UTF-8 (`ensure_ascii = False`, `Content-Type: application/json; charset=utf-8`) instead of `\uXXXX` escapes. Accented content (`João`, `Leilões`) now survives on Windows + Docker slim (locale=C) without mangling.
+- **`settings.py` — `_normalize_language`** — transparent BCP-47 normalization on `GET` and `PUT /api/settings/workspace` so legacy `ptBR` in existing `workspace.yaml` promotes to `pt-BR` on read and canonicalizes on write. Alias lookup is case-insensitive (matches frontend's `/^ptBR$/i`).
+- **`setup.py`** — default language is now `pt-BR` (BCP-47) instead of legacy `ptBR`. Matches the canonical form used by the UI.
+- **`auth_routes._save_workspace_config`** — default language fallback changed from `"en"` to `"pt-BR"`, aligned with setup.py and frontend `DEFAULT_LOCALE`.
+
+### Fixed
+
+- **i18n resolver chain empty at runtime** — `LanguageDetector` + `supportedLngs` + `nonExplicitSupportedLngs` + `load: 'currentOnly'` combination left `i18n.languages = []` even with resources and language correctly loaded, so `t()` and `exists()` returned raw keys. Resolve the locale synchronously inline (localStorage → navigator.language → default) and pass it to `init({ lng })`. Drop `i18next-browser-languagedetector` — its job is now done inline.
+- **Scheduler — duplicate firings** — removed the `_run_scheduler` thread embedded in `app.py` that was running alongside the standalone `scheduler.py` process, causing every routine to fire 2-3× per trigger. Kept a lightweight `_poll_scheduled_tasks` thread for one-off `ScheduledTask` DB entries only.
+- **Scheduler — atomic PID lock** — replaced TOCTOU-prone check-then-create with `O_CREAT|O_EXCL` atomic open. Prevents multiple schedulers from starting simultaneously during rapid restarts (was causing `review-todoist` / `git-sync` to fire multiple times and send duplicate Telegram messages).
+- **Dashboard `restart-all`** — `pkill` processes directly then re-run `start-services.sh` instead of `systemctl restart` (which on `Type=oneshot` + `KillMode=none` didn't reliably kill children). Works without sudo.
+- **Heartbeat prompt passing** — pass prompt as positional arg instead of `-p` flag. Claude CLI has no `-p` flag; the YAML frontmatter (`---`) was being interpreted as an unknown CLI option, failing all heartbeats with `unknown option '---\nname: "zara-cs"'`.
+- **`fin-daily-pulse`** — convert all Stripe amounts to BRL (USD/IDR→BRL via exchangerate-api with 5.75 fallback); fix churn to use `customer.subscription.deleted` events with full pagination; unify Telegram to a single `reply()` call per run.
+- **`prod-good-morning` / `prod-end-of-day`** — replace sub-skill calls (`/gog-email-triage`, `/prod-review-todoist`) with direct Gmail MCP / Todoist calls, eliminating 2× Telegram notifications per run.
+- **`pulse-faq-sync`** — explicit instruction to send exactly ONE Telegram per run.
+
 ## [0.26.0] - 2026-04-22
 
 ### Added

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evoapi/evo-nexus",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Unofficial open source toolkit for Claude Code — AI-powered business operating system",
   "keywords": [
     "claude-code",

dashboard/backend/app.py

@@ -27,10 +27,10 @@
     _key_file = WORKSPACE / "dashboard" / "data" / ".secret_key"
     _key_file.parent.mkdir(parents=True, exist_ok=True)
     if _key_file.exists():
-        _secret_key = _key_file.read_text().strip()
+        _secret_key = _key_file.read_text(encoding="utf-8").strip()
     else:
         _secret_key = secrets.token_hex(32)
-        _key_file.write_text(_secret_key)
+        _key_file.write_text(_secret_key, encoding="utf-8")
         _key_file.chmod(0o600)
 
 app.secret_key = _secret_key
@@ -39,6 +39,20 @@
 app.config["REMEMBER_COOKIE_DURATION"] = timedelta(days=30)
 # SameSite=Strict prevents cross-origin cookie riding (CSRF defense layer 1).
 app.config["SESSION_COOKIE_SAMESITE"] = "Strict"
+
+# --- JSON encoding for API responses ---
+# With ensure_ascii=True (Flask default) jsonify escapes every non-ASCII
+# character as \uXXXX. JSON parsers in the browser decode this correctly,
+# but it clutters network logs and occasionally breaks naive consumers that
+# look at raw bytes (e.g. grep over nginx access logs). Emit real UTF-8 so
+# accented content ("João", "Mirandas Leilões") stays readable end-to-end.
+try:
+    app.json.ensure_ascii = False          # type: ignore[attr-defined]
+    app.json.mimetype = "application/json; charset=utf-8"  # type: ignore[attr-defined]
+except AttributeError:
+    # Flask <2.2 exposed this through app.config; keep compatibility.
+    app.config["JSON_AS_ASCII"] = False
+
 CORS(app, origins=["http://localhost:5173"], supports_credentials=True)
 
 # --------------- Database ---------------
@@ -724,7 +738,7 @@ def serve_frontend(path):
         import yaml
         config_path = WORKSPACE / "config" / "workspace.yaml"
         if config_path.is_file():
-            with open(config_path) as f:
+            with open(config_path, encoding="utf-8") as f:
                 cfg = yaml.safe_load(f)
             if cfg and cfg.get("port"):
                 port = int(cfg["port"])

dashboard/backend/heartbeat_schema.py

@@ -90,7 +90,7 @@ def load_heartbeats_yaml(path: Path | None = None) -> HeartbeatsFile:
         else:
             return HeartbeatsFile(heartbeats=[])
 
-    with open(path) as f:
+    with open(path, encoding="utf-8") as f:
         raw = yaml.safe_load(f) or {}
 
     return HeartbeatsFile.model_validate(raw)
@@ -112,7 +112,7 @@ def save_heartbeats_yaml(data: HeartbeatsFile, path: Path | None = None) -> None
     }
 
     tmp_path = path.with_suffix(".yaml.tmp")
-    with open(tmp_path, "w") as f:
+    with open(tmp_path, "w", encoding="utf-8") as f:
         yaml.dump(raw, f, default_flow_style=False, allow_unicode=True, sort_keys=False)
 
     os.rename(tmp_path, path)

dashboard/backend/knowledge/cli.py

@@ -34,27 +34,36 @@ def _find_env_file() -> Path:
 
 
 def _read_env_var(env_path: Path, key: str) -> str:
-    """Return the value of *key* in *env_path*, or empty string if absent."""
+    """Return the value of *key* in *env_path*, or empty string if absent.
+
+    Reads with explicit UTF-8 so non-ASCII content (accented comments,
+    names) survives on platforms where the default encoding is not UTF-8
+    (Windows cp1252, Docker slim with locale=C, etc.).
+    """
     if not env_path.exists():
         return ""
-    for line in env_path.read_text().splitlines():
+    for line in env_path.read_text(encoding="utf-8").splitlines():
         stripped = line.strip()
         if stripped.startswith(f"{key}="):
             return stripped[len(key) + 1:].strip().strip('"').strip("'")
     return ""
 
 
 def _append_to_env(env_path: Path, key: str, value: str, comment: str = "") -> None:
-    """Append a KEY=value pair (with optional preceding comment) to *env_path*."""
+    """Append a KEY=value pair (with optional preceding comment) to *env_path*.
+
+    Always reads and writes as UTF-8 so existing accented content is
+    preserved across the round-trip regardless of host locale.
+    """
     env_path.parent.mkdir(parents=True, exist_ok=True)
-    content = env_path.read_text() if env_path.exists() else ""
+    content = env_path.read_text(encoding="utf-8") if env_path.exists() else ""
     # Ensure a trailing newline before appending
     if content and not content.endswith("\n"):
         content += "\n"
     if comment:
         content += "\n" + comment + "\n"
     content += f"{key}={value}\n"
-    env_path.write_text(content)
+    env_path.write_text(content, encoding="utf-8")
     try:
         env_path.chmod(0o600)
     except OSError:

dashboard/backend/routes/_helpers.py

@@ -56,7 +56,7 @@ def _extract_agent_from_script(path: Path) -> str:
     """Extract agent name from script docstring (pattern: 'via AgentName')."""
     try:
         # Read only first 5 lines to find docstring
-        with open(path) as f:
+        with open(path, encoding="utf-8") as f:
             head = "".join(f.readline() for _ in range(5))
         m = re.search(r"via\s+(\w+)", head, re.IGNORECASE)
         if m:
@@ -145,7 +145,7 @@ def discover_routines() -> dict:
 def _extract_name_from_script(path: Path) -> str:
     """Extract human name from docstring (pattern: 'ADW: Name —')."""
     try:
-        with open(path) as f:
+        with open(path, encoding="utf-8") as f:
             head = "".join(f.readline() for _ in range(5))
         m = re.search(r'ADW:\s*(.+?)\s*[—–-]', head)
         if m:

dashboard/backend/routes/auth_routes.py

@@ -104,15 +104,18 @@ def _save_workspace_config(ws: dict):
             "owner": ws.get("owner_name", ""),
             "company": ws.get("company_name", ""),
             "timezone": ws.get("timezone", "UTC"),
-            "language": ws.get("language", "en"),
+            "language": ws.get("language", "pt-BR"),
         },
         "agents": {a: True for a in ws.get("agents", [])},
         "integrations": {i: True for i in ws.get("integrations", [])},
         "dashboard": {"port": 8080},
     }
 
     yaml_path = config_dir / "workspace.yaml"
-    with open(yaml_path, "w") as f:
+    # encoding="utf-8" is required — otherwise on Windows Python defaults to
+    # cp1252 and mangles accented characters in owner/company names
+    # (e.g. "João" becomes "Jo?o" on read).
+    with open(yaml_path, "w", encoding="utf-8") as f:
         yaml.dump(config, f, default_flow_style=False, allow_unicode=True)
 
     # Generate CLAUDE.md inline (no template needed)
@@ -126,7 +129,8 @@ def _save_workspace_config(ws: dict):
             f"**Name:** {ws['owner']}\n"
             f"**Company:** {ws['company']}\n"
             f"**Timezone:** {ws['timezone']}\n\n"
-            f"## Language\n\nAlways respond in **{ws['language']}**.\n"
+            f"## Language\n\nAlways respond in **{ws['language']}**.\n",
+            encoding="utf-8",
         )
 
     # Create workspace folders

dashboard/backend/routes/config.py

@@ -170,7 +170,7 @@ def update_integration_env():
         if key not in updated_keys:
             new_lines.append(f"{key}={val}")
 
-    env_path.write_text("\n".join(new_lines) + "\n")
+    env_path.write_text("\n".join(new_lines) + "\n", encoding="utf-8")
 
     # Reload dotenv in current process
     try:

dashboard/backend/routes/goals.py

@@ -450,7 +450,7 @@ def link_routine_to_goal():
         return jsonify({"error": "config/routines.yaml not found"}), 404
 
     import yaml  # type: ignore
-    with open(routines_path, "r") as f:
+    with open(routines_path, "r", encoding="utf-8") as f:
         config = yaml.safe_load(f) or {}
 
     updated = False
@@ -468,7 +468,7 @@ def link_routine_to_goal():
     if not updated:
         return jsonify({"error": f"Routine '{routine_name}' not found in routines.yaml"}), 404
 
-    with open(routines_path, "w") as f:
+    with open(routines_path, "w", encoding="utf-8") as f:
         yaml.dump(config, f, allow_unicode=True, default_flow_style=False, sort_keys=False)
 
     audit(current_user, "link", "goals", f"Linked routine '{routine_name}' to goal '{goal_slug}'")

dashboard/backend/routes/scheduler.py

@@ -110,7 +110,7 @@ def _load_yaml_routines(entries: list):
         return
 
     try:
-        with open(config_path) as f:
+        with open(config_path, encoding="utf-8") as f:
             config = yaml.safe_load(f)
         if not config:
             return