Lucas – Workflow Automation, API, Network administration

Solar PV and EV-charger sales, installation and maintenance for homes, condominiums and small businesses in Rio de Janeiro. The company has its own team and runs without me day to day, so it does not compete with client work.

• Ran the full trades workflow from inbound enquiry and qualification to site survey, quoting, install scheduling, and after-sales.
• Built the lead pipeline enriched from Google Places.
• Built tariff, payback, and system-sizing models used in the sales conversation.
• Deployed an AI voice receptionist on the company line and tested it on real calls.

Cinema-equipment rental and a certified cinema-lens service laboratory. The company has its own team and runs without me day to day, so it does not compete with client work.

• Owned finance, IT, and every internal system.
• Built internal automations for the operation before generalizing them.
• Ran Make.com and Zapier in production for years before replacing critical scenarios with code.
• Grew the business through the 2020–2022 expansion and restructured it through the 2023–2026 contraction.

A management panel for a preschool with about 60 students. Families re-enroll through a single link and an e-mail code, fill in a parents' form, sign the contract electronically and pay monthly tuition by dynamic Pix with automatic reconciliation. The school office imports spreadsheets, manages classes and students, sends requests in bulk or per family, and audits every change. It runs on Cloudflare's free plan.

• Designed the system on Cloudflare Workers, D1, R2, Durable Objects and Queues, and proved the free plan was enough with a 12-test spike that measured CPU time per route.
• Built re-enrollment with a single family link, a 6-digit e-mail code and Turnstile, and staff login through Cloudflare Access.
• Built idempotent webhooks for Asaas (Pix payments) and Autentique (e-signature); 20 parallel calls produced exactly the expected rows.
• Built spreadsheet import, a parents' form with postal-code lookup, and automatic data updates that notify the old contact with a "this wasn't me" option.
• Wrote 1,000+ unit tests (Vitest) and 50 end-to-end tests (Playwright), all green in CI, with zero type errors.

A live AI phone receptionist that answers LuxVolt's line, qualifies jobs, books site visits, opens support tickets, and transfers emergencies to a human.

• Built an AI voice agent that identified callers from caller ID, qualified jobs, booked site visits on the real calendar, opened triaged support tickets, and transferred emergencies to a human.
• Journaled every tool call before the agent spoke.
• Made bookings idempotent under retries.
• Verified webhook signatures.
• Built a public operations dashboard that masked caller PII.
• Enforced prompt rules to avoid inventing prices, dates, or bookings.
• Provisioned the agent and LLM from versioned code through the API.
• Added 35 automated tests and performed an adversarial security review in the repository.

An open-source secrets guard for AI coding agents. The user pastes a secret into a small native window that the agent cannot see, and it goes straight into 1Password. The agent reads secrets back by reference, so the values never enter the chat, the transcript or shell history, and a hook blocks the agent from reading or writing secret files. Works on Mac, Windows and Linux. MIT license.

• Built a native hidden-input dialog that stored secrets in 1Password without exposing them to the agent.
• Built a launcher that injected secrets as environment variables by reference, with one biometric prompt per session.
• Wrote a hook that blocked the agent from reading or writing secret files and deleted keys pasted in the chat before the model read them.
• Published it as open source under the MIT license for Mac, Windows and Linux.

Two-way sync between Booqable and ContaAzul for a live rental operation covering orders, customers, invoices, and sales commissions.

• Built a two-way sync between Booqable and ContaAzul for orders, customers, invoices, and sales commissions.
• Migrated four production Make.com scenarios and cut over with zero data loss.
• Built an idempotent decision engine over an append-only action journal so orders could be replayed or revived without duplicates.
• Built a daily invariant checker that emailed finance only when the two systems disagreed.
• Built a typed alert channel with 24-hour de-duplication.
• Added write guards that refused invoicing when a required tax ID was missing and raised a ticket instead.

Desktop focus-measurement software for cinema-lens collimation benches, used by lens technicians outside the company. It reads a live camera feed at up to 4K, computes a Tenengrad focus metric, and fits a parabola with propagated uncertainty to find best focus, with a mirror-tilt readout on a multimeter-style live display. Measurement runs separately from the display, so accuracy does not depend on the monitor. It ships for Windows, macOS and Linux with silent auto-update.

• Built the measurement core: Tenengrad focus metric at up to 4K, parabola fit with propagated uncertainty, and mirror-tilt readout.
• Decoupled measurement from display so accuracy did not depend on the monitor.
• Shipped a Windows installer (Inno Setup), a macOS .dmg and a Linux .deb through GitHub Actions.
• Added silent auto-update from public GitHub Releases and in-app bug reports posted to an API.
• Released ten versions in September 2026 for lens technicians outside my company.
• Wrote 70+ automated tests, and found and fixed a ±σ uncertainty estimate that was inflated 330×.

A set of tools that make LLM agents usable against real systems. It includes an MCP server that exposes an authenticated GraphQL API as typed tools instead of browser automation, a grounded knowledge agent that answers only from indexed material and cites its source, and guardrails that keep secrets and customer data out of what the model reads and writes.

• Built an MCP server exposing an authenticated VTEX GraphQL API as typed tools an LLM agent could call.
• Replaced brittle browser automation with direct API calls.
• Built a grounded knowledge agent over a technical Discord using incremental export, SQLite FTS5, and retrieval with citations.
• Deployed the knowledge agent as a web app.
• Built twelve custom agent skills.
• Wrote a Node policy hook enforcing an escalation ladder for web access after a root-cause audit of 92 tool failures across 69 sessions in 30 days.
• Built a voice and text ordering agent that parsed requests into a typed schema with an LLM and added the matching items to a real supermarket cart.

Two web apps for a cinema-lens service workshop. LensSys is multi-tenant workshop management: customers, equipment records, tickets with status history, quotes with PDF and public approval links, invoices, payments and a dashboard. LensReport turns a bench session into an insurance report in one click: per-lens findings, AI reading of instrument displays and lens labels from photos, terminology rules per user before AI translation, and a PDF. LensReport is also used by other lens-service companies.

• Built multi-tenant workshop management with tenant isolation enforced by Postgres row-level security under a non-superuser role.
• Built photo-to-value reading: the model read instrument displays and lens labels, ranked candidates per field, and a human confirmed each value before it was saved.
• Cut vision cost and latency by cropping and downscaling each image before the model call, and hardened the pipeline against hangs and silent failures.
• Generated insurance reports with immutable snapshots, per-user terminology rules applied before Anthropic-powered translation, and PDF output through Puppeteer.
• Built a RepairShopr importer that wrote data only with an explicit --commit flag.
• Wrote 300+ automated tests across five delivery plans.

Import-viability analyzer that scrapes marketplace and supplier pricing, computes landed cost, margin and ROI, and flags products needing ANATEL certification.

• Built an import-viability analyzer that scraped marketplace and supplier pricing.
• Computed landed cost, margin, and ROI.
• Flagged products that needed ANATEL certification.
• Owned the full production stack end to end including payments, transactional email, automatic SSL, off-site backups, and self-hosted health monitoring.

A mobile app that finds electric-vehicle chargers across Brazil's separate charging networks in one map. A Python extraction service pulls stations from several public sources, removes duplicates across sources, and feeds a PostGIS database behind a Fastify API. The iOS app shipped to TestFlight through EAS Build, with over-the-air updates.

• Built the iOS app in React Native and Expo with map search, station pages, vehicle profiles, a route planner, rankings and notifications.
• Built a Fastify and Drizzle API on PostgreSQL with PostGIS for location queries and JWT authentication.
• Built a Python extraction service in Docker with adapters for Tupimob, ABRP, Zletric, OpenChargeMap and Voltbras.
• Fixed cross-source duplicates with a dedup and classifier backfill that cut the station table from 11,712 to 8,905 rows.
• Shipped builds to TestFlight through EAS Build and pushed fixes with EAS Update over the air.

A set of Make.com automation scenarios, originally built on Integromat in 2021, that replaced earlier PHP scripts and grew to cover maintenance payments and financial transactions for an equipment rental and lens-service operation.

• Replaced the PHP scripts with Integromat (now Make.com) scenarios for rental and financial transactions.
• Expanded the automations to maintenance payments and other financial transactions.
• Ran the scenarios in production until the critical ones were rewritten as a coded sync engine in 2026.

Zapier automations that connected Booqable, the company's rental software, to the other tools the business used, so rental events moved between systems without manual copying.

• Built Zapier automations triggered by events in Booqable, the company's rental software.
• Connected rental events to the company's other business tools without manual copying.

PHP scripts that automated rental and financial transactions for 2olhares after the company adopted Booqable as its rental software in March 2018.

• Adopted Booqable as the company's rental software in March 2018.
• Wrote PHP scripts that automated rental and financial transactions.
• Ran the scripts in production until Integromat (now Make) scenarios replaced them.

A documentary production company. From 2006 to 2017, I was creative, executive and technical director across 64 episodes of a TV series, and also carried the executive producer, IT director and project manager roles. That meant owning both the edit and the machinery behind it: the media pipeline, storage, cataloguing and retrieval that a long-running series needs to stay findable years later.

• Ran the family documentary company.
• Served as creative, executive, and technical director for 64 episodes of the TV series "Expedições".
• Served as executive producer, IT director, and project manager.
• Implemented and maintained the media asset management (MAM) system, mainly on Apple Final Cut Server, with CatDV, MatrixStore archive and Xsan / MetaLan SAN storage, plus AppleScript and shell scripts for video production workflows and backup.