Independent software studio building public web apps, operator tooling, and AI agent infrastructure on Cloudflare's edge.

LCV Ideas & Software is a vibe coding independente studio. It builds AI-assisted public-facing web applications, editorial tooling, infrastructure services, sponsor infrastructure, and developer utilities — all on a shared Cloudflare edge stack (Pages + Workers + D1) integrated with leading AI providers (Claude, Codex, Gemini, DeepSeek, Grok, Perplexity). Org homepage: www.lcv.dev.

Status. Active organization profile. Current release: not versioned. See the version-history table below for the full change history.

The version history at a glance:

A small, opinionated portfolio organized in three layers, all sharing the same Cloudflare edge runtime and a single unified D1 database:

1. Public products — consumer-facing web apps with AI assistance, deployed on Cloudflare Pages with Worker backends.
2. Operator infrastructure — the single-tenant control plane and supporting services that govern the public products.
3. Developer tooling — open-source MCP servers and editorial workbenches built around multi-agent AI convergence.

Every repository is published on GitHub under the LCV-Ideas-Software organization and ships with its own public surface or operational endpoint under custom domains zones (custom domains, HTTPS-enforced). Everything is delivered under strict multi-peer cross-review discipline with caller self-review prohibited, version-pinned baselines, CodeQL Default Setup, Secret Scanning push protection, and SHA-pinned GitHub Actions.

Frontend     React 19 + Vite 8 + TypeScript
Runtime      Cloudflare Pages (static + SSR) + Cloudflare Workers (Hono)
Database     Cloudflare D1   (single shared Claudflare DB1)
Storage      Cloudflare R2   (Cloudflare R2 bucket)
Auth         Cloudflare Access (Zero Trust JWT) — operator surfaces
AI           Claude Code · ChatGPT Codex · Gemini CLI · DeepSeek · Grok
Email        Resend
Sponsorship  sponsor-motor + Mercado Pago Checkout Transparente Orders API
Anti-abuse   Cloudflare Turnstile + GCP Natural Language
Desktop      Tauri 2  (Maestro)

• One database. All consumer products and the operator control plane share Claudflare DB1. Cross-app reads use Cloudflare bindings in-place, never public URLs between sibling apps.
• One bucket. Cloudflare R2 (R2) is shared by mainsite-app and admin-app. Magic-byte sniffing, allowlisted MIME types, 10 MB cap, SVG-sandboxed legacy fallback.
• Defense in depth. Cloudflare Access gates who enters admin surfaces; CSP gates what the browser can execute on public surfaces; Turnstile gates form anti-abuse; GCP Natural Language scores comment moderation.

• Ultrabrain + cross-review before every merge. No substantive engineering change is closed without ultrabrain reasoning plus the cross-review MCP gate. The caller can never review its own work; reviewer/relator self-review is invalid by policy.
• 4-gate quality. Every code change passes eslint + biome + prettier + cross-review before commit, tag, release, deploy, or publish.
• Structured reasoning is mandatory. Planning and implementation passes through the LCV ultrabrain MCP server before execution. Hard gate, not a suggestion.
• CodeQL Default Setup everywhere. Advanced Setup requires explicit operator authorization. Branch protection on main requires Analyze (javascript-typescript) to pass.
• Conservative branch baseline. Single deploy branch (main); preview → main automation via auto-merge with retry polling on required checks.
• Anti-drift smoke. cross-review self-tests check that README, runtime version and CHANGELOG heading stay in lockstep on every push.
• Memory parity across Claude Code, ChatGPT Codex, and Gemini Code Assist. New directives propagate to all three active agent ecosystems before being considered shipped.
• SHA-pinned GitHub Actions. Supply-chain hardening baseline. wrangler is always invoked at latest in CI.

The AGPL-3.0 network-service trigger applies to the AGPL repositories: running a modified fork as a public service obligates publication of the modifications under the same license. Each repository ships a THIRDPARTY.md inventory and a NOTICE (where applicable). Forks are welcome under the respective license terms.

• Security: GitHub Secret Scanning, Code Scanning (CodeQL), and Dependabot are active across all repositories. Vulnerability disclosures follow each repository's SECURITY.md.
• Contributing: Each repository carries its own CONTRIBUTING.md. PRs require green CI gates locally before submission.
• Code of Conduct: Contributor Covenant 3.0. See each repository's CODE_OF_CONDUCT.md.

• Homepage: www.lcv.dev
• GitHub: opening issues on the relevant repository is the canonical channel.
• Email: lcv@lcv.dev for general topics.
• Phones: +55 (21) 3955-0883 / +55 (21) 99152-4643
• Sponsorship: support the work through the secure sponsor page → www.lcv.dev/sponsor.

• License: AGPL-3.0-or-later. Network-service trigger applies: running a modified fork as a public service obligates you to publish modifications.
• Notices: see NOTICE and THIRDPARTY.
• Security disclosure: see SECURITY.md.
• Code of conduct: see CODE_OF_CONDUCT.md.
• Contributing: see CONTRIBUTING.md.
• Sponsorship: see the repo's Sponsor button or central sponsor page.
• Action pinning: all GitHub Actions are pinned by full SHA per supply-chain hardening baseline.
• Code owners: .github/CODEOWNERS.

• Site: https://www.lcv.dev
• GitHub: https://github.com/LCV-Ideas-Software/.github
• Sponsors: https://github.com/sponsors/LCV-Ideas-Software

AGPL-3.0-or-later. See LICENSE, NOTICE, and THIRDPARTY.

Copyright © 2026 LCV Ideas & Software
_{LEONARDO CARDOZO VARGAS TECNOLOGIA DA INFORMACAO LTDA
Rua Pais Leme, 215 Conj 1713 - Pinheiros
São Paulo - SP - CEP 05424-150
CNPJ: 66.584.678/0001-77 - IM: 3039854}