fidelizare-integrate 0.5.0 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fidelizare-integrate",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Asistent de integrare Fidelizare pentru softuri de gestiune si case de marcat. Scaneaza codul, gaseste locul potrivit si propune integrarea API-ului, in siguranta.",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -13,9 +13,8 @@ import { ansi, C, paint, bold, out, sleep } from './ui/ansi.js';
 import { logoIntro, withSpinner, scanSweep, heading, note, rule, setAnim } from './ui/anim.js';
 import { detectStack, listSourceFiles } from './core/detect.js';
 import { scanForIntegrationPoints } from './core/scan.js';
-import { proposeChange } from './core/propose.js';
 import { runAgentLoop } from './core/agent-loop.js';
-import { renderPlan, applyPlan, gitState, undoHint } from './core/apply.js';
+import { gitState } from './core/apply.js';
 import { vaultPut, vaultResolve } from './core/vault.js';
 
 const args = process.argv.slice(2);
@@ -67,111 +66,60 @@ async function main() {
   });
   note('Limbaj: ' + bold(paint(det.label, C.red)) + paint('  (' + (det.via || '?') + ')', C.dim));
 
-  // 4. Scan for integration points
+  // 4. Quick scan — just a hint; the agent explores the code itself.
   await scanSweep('Caut unde se citeste codul scanat si se finalizeaza bonul…', 1700);
   const files = listSourceFiles(root);
-  const candidates = await withSpinner('Evaluez cele mai sigure locuri de integrare', async () => {
-    await sleep(400);
-    return scanForIntegrationPoints(files, root);
-  });
-
-  if (candidates.length === 0) {
-    note('Nu am gasit un punct clar de integrare. Ruleaza cu --dir spre folderul softului.', C.amber);
+  if (files.length === 0) {
+    rule();
+    out('  ' + paint('✗ Nu am gasit fisiere sursa in proiect.', C.redBright) + '\n');
+    supportNote();
     rl.close();
     return;
   }
-  const top = candidates[0];
-  note('Punct gasit: ' + bold(paint(top.rel, C.white)) +
-    paint('  linia ' + top.topLine.line + '  (' + top.topLine.reasons.join(', ') + ')', C.dim));
+  const candidates = scanForIntegrationPoints(files, root);
+  if (candidates[0]) {
+    note('Punct probabil: ' + bold(paint(candidates[0].rel, C.white)) + paint('  linia ' + candidates[0].topLine.line, C.dim));
+  }
   rule();
 
   const git = gitState(root);
 
-  // 5a. Agentic tool-loop (real coding agent) — the DEFAULT when an LLM key is
-  // available. The model finds the files and applies the integration itself,
-  // each write gated. `--no-agent` forces the basic deterministic proposer.
-  const llmKey = process.env.OPENROUTER_API_KEY || process.env.FIDELIZARE_LLM_KEY;
-  if (!has('--no-agent') && !llmKey) {
-    note('Pentru integrare cu AI (recomandat), seteaza OPENROUTER_API_KEY. Acum folosesc modul determinist de baza.', C.amber);
-    rule();
-  }
-  if (!has('--no-agent') && llmKey) {
-    out('  ' + paint('Agent ', C.ink) + bold(paint(val('--model') || 'Opus 4.8', C.red)) +
-      paint('  ·  scrierile cer confirmare (y / a / N)', C.dim) + '\n\n');
-    const r = await runAgentLoop({
-      stack: det.stack, rootDir: root, files,
-      askRaw: ask, auto: AUTO, model: val('--model'),
-      guideUrl: val('--guide') || process.env.FIDELIZARE_GUIDE_URL,
-    });
-    if (r.ok) {
-      writeEnv(root, vaultResolve(keyRef));
-      out('\n  ' + paint('✓', C.green) + '  ' + paint(r.summary.split('\n')[0].slice(0, 88), C.white) + '\n');
-      note((r.changes.join(', ') || '—') + paint('   ·  cheia in .env, anulare: git checkout', C.dim), C.ink);
-      out('\n  ' + paint('Integrare pregatita.', C.green) + ' ' + paint('Fidelizare', C.red) + '\n\n');
-      rl.close();
-      return;
-    }
-    note('Agent indisponibil (' + r.reason + '). Trec la propunerea determinista.', C.amber);
-  }
+  // 5. Agent — the ONLY path. Inference via the Fidelizare gateway (the client
+  // uses only their Fidelizare key) or OPENROUTER_API_KEY for our dev. No
+  // deterministic fallback: if it can't run, we say so and point to support.
+  out('  ' + paint('Agent ', C.ink) + bold(paint(val('--model') || 'Opus 4.8', C.red)) +
+    paint('  ·  scrierile cer confirmare (y / a / N)', C.dim) +
+    (git.isRepo && !git.clean ? paint('  ·  ai modificari necomise', C.amber) : '') + '\n\n');
+
+  const r = await runAgentLoop({
+    stack: det.stack, rootDir: root, files,
+    askRaw: ask, auto: AUTO, model: val('--model'),
+    guideUrl: val('--guide') || process.env.FIDELIZARE_GUIDE_URL,
+    fidelKey: vaultResolve(keyRef),
+  });
 
-  // 5b. Deterministic proposer (fallback / no key).
-  heading('Propunere de integrare');
-  let plan = null;
-  if (!plan) {
-    plan = await withSpinner('Construiesc modificarea minima si sigura', async () => {
-      await sleep(500);
-      return proposeChange({ stack: det.stack, candidate: top, rootDir: root });
-    });
-  }
-  if (!plan) {
-    note('Nu pot genera o propunere pentru acest limbaj inca: ' + det.label, C.amber);
+  if (r.ok) {
+    writeEnv(root, vaultResolve(keyRef));
+    out('\n  ' + paint('✓', C.green) + '  ' + paint(r.summary.split('\n')[0].slice(0, 88), C.white) + '\n');
+    note((r.changes.join(', ') || '—') + paint('   ·  cheia in .env, anulare: git checkout', C.dim), C.ink);
+    out('\n  ' + paint('Integrare pregatita.', C.green) + ' ' + paint('Fidelizare', C.red) + '\n\n');
     rl.close();
     return;
   }
-  note(plan.summary, C.ink);
-  renderPlan(plan, root);
-  rule();
-
-  // 6. Safety: git state + confirmation (git computed above)
-  heading('Siguranta');
-  if (!git.isRepo) note('• Nu e repo git. Vom face copii .bak pentru fiecare fisier modificat.', C.amber);
-  else if (!git.clean) note('• Repo git cu modificari necomise. Recomandat: commit inainte (le poti anula cu git checkout).', C.amber);
-  else note('• Repo git curat. Orice modificare poate fi anulata cu git checkout.', C.green);
-  note('• Modific doar fisiere din proiect. Cheia API merge in .env, nu in cod.', C.green);
-
-  let go = AUTO;
-  if (!AUTO) {
-    const a = (await ask('\n  Aplic modificarile? [y/N]')).toLowerCase();
-    go = a === 'y' || a === 'yes' || a === 'da' || a === 'd';
-  }
-  if (!go) { note('Anulat. Nimic nu a fost scris.', C.amber); rl.close(); return; }
-
-  // 7. Apply + write .env (secret resolved host-side from the vault)
-  const res = await withSpinner('Aplic modificarile si scriu configuratia', async () => {
-    await sleep(500);
-    const r = applyPlan(plan, root);
-    const envPath = join(root, '.env');
-    const keyVal = vaultResolve(keyRef);
-    const block = `\n# Fidelizare\nFIDELIZARE_API_KEY=${keyVal}\nFIDELIZARE_STORE_ID=MAGAZINUL-TAU\nFIDELIZARE_POS_ID=CASA-1\n`;
-    if (!existsSync(envPath) || !readFileSync(envPath, 'utf8').includes('FIDELIZARE_API_KEY')) {
-      appendFileSync(envPath, block);
-    }
-    r.written.push(envPath);
-    return r;
-  });
 
+  // No fallback. Clear error + support ticket.
   rule();
-  heading('Gata');
-  note('Fisiere scrise:', C.white);
-  for (const w of res.written) out('    ' + paint('•', C.green) + ' ' + paint(w.replace(root, '.'), C.ink) + '\n');
-  out('\n');
-  undoHint(root, res);
-  note('Test: ruleaza un cod de fidelitate (ex 12333) prin scanner si verifica punctele in panoul tau.', C.ink);
-  note('Documentatie completa: cere acces pe fidelizare.ro/integrare', C.dim);
-  out('\n  ' + paint('Integrare pregatita.', C.green) + ' ' + paint('Fidelizare', C.red) + '\n\n');
+  out('  ' + paint('✗ Integrarea nu a putut rula.', C.redBright) + '  ' + paint('(' + r.reason + ')', C.dim) + '\n');
+  if (r.reason === 'no_key') note('Lipseste cheia. Lipeste cheia ta API Fidelizare cand ti-o cere CLI-ul.', C.amber);
+  supportNote();
   rl.close();
 }
 
+function supportNote() {
+  out('  ' + paint('Nu merge? Scrie-ne si rezolvam:', C.amber) + ' ' +
+    paint('https://fidelizare.ro/integrare#acces', C.white) + paint('  ·  contact@fidelizare.ro', C.dim) + '\n\n');
+}
+
 // Write the Fidelizare config block to .env (idempotent). The key comes from
 // the host-side vault, never from a diff or the model.
 function writeEnv(root, keyVal) {

package/src/core/agent-loop.js

@@ -15,6 +15,9 @@ import { C, paint, out } from '../ui/ansi.js';
 import { thinking, toolLine } from '../ui/anim.js';
 
 const URL = 'https://openrouter.ai/api/v1/chat/completions';
+// Fidelizare-hosted gateway: clients run the agent with ONLY their Fidelizare
+// key; inference is on us, the OpenRouter key stays server-side.
+const GATEWAY_URL = 'https://mcp.fidelizare.ro/llm';
 const DEFAULT_MODEL = 'anthropic/claude-opus-4.8';
 const DEFAULT_GUIDE = 'https://mcp.fidelizare.ro/assets/api-guide.md';
 const MAX_STEPS = 30;
@@ -53,9 +56,13 @@ const TOOLS = [
   { type: 'function', function: { name: 'finish', description: 'Termina integrarea.', parameters: { type: 'object', properties: { summary: { type: 'string' } }, required: ['summary'] } } },
 ];
 
-export async function runAgentLoop({ stack, rootDir, files, askRaw, auto, model, guideUrl }) {
-  const key = process.env.OPENROUTER_API_KEY || process.env.FIDELIZARE_LLM_KEY;
-  if (!key) return { ok: false, reason: 'no_key' };
+export async function runAgentLoop({ stack, rootDir, files, askRaw, auto, model, guideUrl, fidelKey }) {
+  // Dev path: OPENROUTER_API_KEY hits OpenRouter directly. Otherwise the client
+  // uses the Fidelizare gateway, authenticated by their Fidelizare key.
+  const orKey = process.env.OPENROUTER_API_KEY || process.env.FIDELIZARE_LLM_KEY;
+  const endpoint = orKey ? URL : (process.env.FIDELIZARE_GATEWAY_URL || GATEWAY_URL);
+  const authKey = orKey || fidelKey;
+  if (!authKey) return { ok: false, reason: 'no_key' };
   const usedModel = model || DEFAULT_MODEL;
   const guide = guideUrl || DEFAULT_GUIDE;
 
@@ -154,9 +161,9 @@ export async function runAgentLoop({ stack, rootDir, files, askRaw, auto, model,
     const stop = thinking('Gandeste');
     let data;
     try {
-      const res = await fetch(URL, {
+      const res = await fetch(endpoint, {
         method: 'POST',
-        headers: { Authorization: 'Bearer ' + key, 'Content-Type': 'application/json', 'X-Title': 'Fidelizare Integrate' },
+        headers: { Authorization: 'Bearer ' + authKey, 'Content-Type': 'application/json', 'X-Title': 'Fidelizare Integrate' },
         body: JSON.stringify({ model: usedModel, temperature: 0, tools: TOOLS, messages }),
         signal: AbortSignal.timeout(90_000),
       });

package/src/core/propose.js

@@ -1,91 +0,0 @@
-// Deterministic proposal: given the detected stack and the best candidate
-// location, build a safe change plan (a new helper file + the inserted call +
-// an import). Language-aware indentation and import anchoring so the result
-// stays syntactically valid. Runs without an LLM; the agent mode (agent-loop)
-// replaces it for arbitrary real codebases.
-import { readFileSync } from 'fs';
-import { dirname, join } from 'path';
-import { HELPERS } from './snippets.js';
-
-export function proposeChange({ stack, candidate, rootDir }) {
-  const helper = HELPERS[stack];
-  if (!helper) return null;
-
-  const plan = { stack, newFiles: [], edits: [], summary: '' };
-  const targetDir = candidate ? dirname(candidate.file) : rootDir;
-  if (helper.content) {
-    plan.newFiles.push({ path: join(targetDir, helper.filename), content: helper.content });
-  }
-
-  if (candidate) {
-    const lines = readFileSync(candidate.file, 'utf8').split('\n');
-    const at = findFidelityLine(lines) ?? candidate.topLine.line;
-    const bodyIndent = blockBodyIndent(lines, at);
-    const codVar = inferCodeVar(lines[at - 1], stack);
-    const cmt = stack === 'python' ? '#' : '//';
-
-    plan.edits.push({
-      path: candidate.file,
-      atLine: at,
-      insert: [
-        bodyIndent + cmt + ' Fidelizare: cod de fidelitate detectat -> acumuleaza puncte',
-        bodyIndent + helper.call(codVar),
-      ],
-      reason: 'Apel API la detectarea cardului de fidelitate',
-    });
-
-    if (helper.importLine) {
-      const anchor = importAnchor(lines, stack);
-      plan.edits.push({ path: candidate.file, atLine: anchor, insert: [helper.importLine], reason: 'Import helper Fidelizare' });
-    }
-  }
-
-  plan.summary = `${plan.newFiles.length} fisier nou + ${plan.edits.length} modificare in ` +
-    (candidate ? candidate.rel : 'proiect');
-  return plan;
-}
-
-// The safest place to call the API is exactly where the code detects a
-// fidelity card (a branch on it).
-function findFidelityLine(lines) {
-  const FID = /(fidelit|fideliz|loyalty|loyaltycard|cardclient)/i;
-  const BRANCH = /\b(if|elif|else|when|case|switch)\b/i;
-  for (let i = 0; i < lines.length; i++) {
-    if (FID.test(lines[i]) && BRANCH.test(lines[i]) && !/^\s*(\/\/|#|\*)/.test(lines[i])) return i + 1;
-  }
-  for (let i = 0; i < lines.length; i++) {
-    if (FID.test(lines[i]) && !/^\s*(\/\/|#|\*)/.test(lines[i])) return i + 1;
-  }
-  return null;
-}
-
-// Match the indentation of the block opened at `at` by looking at the next
-// non-empty line that is more indented; else the line indent + one step.
-function blockBodyIndent(lines, at) {
-  const own = lines[at - 1].match(/^\s*/)?.[0] || '';
-  for (let i = at; i < lines.length; i++) {
-    if (!lines[i].trim()) continue;
-    const ind = lines[i].match(/^\s*/)?.[0] || '';
-    if (ind.length > own.length) return ind;
-    break;
-  }
-  return own + (own.includes('\t') ? '\t' : '    ');
-}
-
-function inferCodeVar(line, stack) {
-  const matches = [...line.matchAll(/\(\s*(\$?[a-zA-Z_][\w$]*)\s*\)/g)];
-  if (matches.length) return matches[matches.length - 1][1];
-  return stack === 'php' ? '$code' : 'code';
-}
-
-function importAnchor(lines, stack) {
-  const IMP = /^\s*(import |from .+ import|require_once|require|use |#include|uses )/i;
-  let last = 0;
-  lines.forEach((l, i) => { if (IMP.test(l)) last = i + 1; });
-  if (last > 0) return last;
-  if (stack === 'php') {
-    const tag = lines.findIndex((l) => /<\?php/.test(l));
-    return tag >= 0 ? tag + 1 : 0;
-  }
-  return 0;
-}

package/src/core/snippets.js

@@ -1,187 +0,0 @@
-// Canonical integration artifacts per stack: a helper file that wraps the
-// Fidelizare API call, and the call inserted where the POS detects a fidelity
-// card. The API key is referenced from the environment, never inlined.
-
-export const HELPERS = {
-  node: {
-    filename: 'fidelizare.js',
-    importLine: `import { acumuleazaPuncte } from "./fidelizare.js";`,
-    call: (v) => `await acumuleazaPuncte(${v}, cart, total);`,
-    content: `// Generat de fidelizare-integrate. Cheia din mediu, niciodata in cod.
-const FIDELIZARE_API = "https://fidelizare.ro/api/integration/s2s/submitReceipt";
-
-export async function acumuleazaPuncte(codFidelitate, items, total) {
-  try {
-    const bon = "BF" + Date.now();
-    const res = await fetch(FIDELIZARE_API, {
-      method: "POST",
-      headers: {
-        Authorization: "Bearer " + process.env.FIDELIZARE_API_KEY,
-        "Content-Type": "application/json",
-        "Idempotency-Key": "BON-" + bon,
-      },
-      body: JSON.stringify({
-        store_id: process.env.FIDELIZARE_STORE_ID || "MAGAZINUL-TAU",
-        pos_id: process.env.FIDELIZARE_POS_ID || "CASA-1",
-        receipt_number: bon,
-        fidelity_card: codFidelitate,
-        total,
-        items,
-      }),
-    });
-    return await res.json();
-  } catch (e) {
-    return { success: false }; // nu blocheaza vanzarea
-  }
-}
-`,
-  },
-
-  php: {
-    filename: 'Fidelizare.php',
-    importLine: `require_once __DIR__ . '/Fidelizare.php';`,
-    call: (v) => `Fidelizare::acumuleazaPuncte(${v}, $cart, $total);`,
-    content: `<?php
-// Generat de fidelizare-integrate. Cheia din mediu, niciodata in cod.
-class Fidelizare {
-  public static function acumuleazaPuncte($codFidelitate, $items, $total) {
-    try {
-      $bon = 'BF' . time();
-      $ch = curl_init('https://fidelizare.ro/api/integration/s2s/submitReceipt');
-      curl_setopt_array($ch, [
-        CURLOPT_POST => true,
-        CURLOPT_RETURNTRANSFER => true,
-        CURLOPT_TIMEOUT => 3,
-        CURLOPT_HTTPHEADER => [
-          'Authorization: Bearer ' . getenv('FIDELIZARE_API_KEY'),
-          'Content-Type: application/json',
-          'Idempotency-Key: BON-' . $bon,
-        ],
-        CURLOPT_POSTFIELDS => json_encode([
-          'store_id' => getenv('FIDELIZARE_STORE_ID') ?: 'MAGAZINUL-TAU',
-          'pos_id' => getenv('FIDELIZARE_POS_ID') ?: 'CASA-1',
-          'receipt_number' => $bon,
-          'fidelity_card' => $codFidelitate,
-          'total' => $total,
-          'items' => $items,
-        ]),
-      ]);
-      $res = curl_exec($ch);
-      curl_close($ch);
-      return json_decode($res, true);
-    } catch (\\Throwable $e) {
-      return ['success' => false]; // nu blocheaza vanzarea
-    }
-  }
-}
-`,
-  },
-
-  python: {
-    filename: 'fidelizare.py',
-    importLine: `from fidelizare import acumuleaza_puncte`,
-    call: (v) => `acumuleaza_puncte(${v}, cart, total)`,
-    content: `# Generat de fidelizare-integrate. Cheia din mediu, niciodata in cod.
-import os, time, json, urllib.request
-
-
-def acumuleaza_puncte(cod_fidelitate, items, total):
-    try:
-        bon = "BF" + str(int(time.time()))
-        body = json.dumps({
-            "store_id": os.environ.get("FIDELIZARE_STORE_ID", "MAGAZINUL-TAU"),
-            "pos_id": os.environ.get("FIDELIZARE_POS_ID", "CASA-1"),
-            "receipt_number": bon,
-            "fidelity_card": cod_fidelitate,
-            "total": total,
-            "items": items,
-        }).encode()
-        req = urllib.request.Request(
-            "https://fidelizare.ro/api/integration/s2s/submitReceipt",
-            data=body, method="POST",
-            headers={
-                "Authorization": "Bearer " + os.environ.get("FIDELIZARE_API_KEY", ""),
-                "Content-Type": "application/json",
-                "Idempotency-Key": "BON-" + bon,
-            })
-        with urllib.request.urlopen(req, timeout=3) as r:
-            return json.loads(r.read())
-    except Exception:
-        return {"success": False}  # nu blocheaza vanzarea
-`,
-  },
-
-  csharp: {
-    filename: 'Fidelizare.cs',
-    call: (v) => `await Fidelizare.AcumuleazaPuncte(${v});`,
-    content: `// Generat de fidelizare-integrate. Cheia din mediu, niciodata in cod.
-using System;
-using System.Net.Http;
-using System.Text;
-using System.Threading.Tasks;
-
-public static class Fidelizare {
-  static readonly HttpClient Http = new HttpClient();
-  public static async Task AcumuleazaPuncte(string codFidelitate) {
-    try {
-      var bon = "BF" + DateTimeOffset.UtcNow.ToUnixTimeSeconds();
-      var json = "{\\"fidelity_card\\":\\"" + codFidelitate + "\\"}";
-      var req = new HttpRequestMessage(HttpMethod.Post,
-        "https://fidelizare.ro/api/integration/s2s/submitReceipt");
-      req.Headers.Add("Authorization", "Bearer " + Environment.GetEnvironmentVariable("FIDELIZARE_API_KEY"));
-      req.Headers.Add("Idempotency-Key", "BON-" + bon);
-      req.Content = new StringContent(json, Encoding.UTF8, "application/json");
-      await Http.SendAsync(req);
-    } catch { /* nu blocheaza vanzarea */ }
-  }
-}
-`,
-  },
-
-  java: {
-    filename: 'Fidelizare.java',
-    call: (v) => `Fidelizare.acumuleazaPuncte(${v});`,
-    content: `// Generat de fidelizare-integrate. Cheia din mediu, niciodata in cod.
-import java.net.URI;
-import java.net.http.*;
-
-public class Fidelizare {
-  public static void acumuleazaPuncte(String codFidelitate) {
-    try {
-      String body = "{\\"fidelity_card\\":\\"" + codFidelitate + "\\"}";
-      HttpRequest req = HttpRequest.newBuilder()
-        .uri(URI.create("https://fidelizare.ro/api/integration/s2s/submitReceipt"))
-        .header("Authorization", "Bearer " + System.getenv("FIDELIZARE_API_KEY"))
-        .POST(HttpRequest.BodyPublishers.ofString(body)).build();
-      HttpClient.newHttpClient().send(req, HttpResponse.BodyHandlers.ofString());
-    } catch (Exception e) { /* nu blocheaza vanzarea */ }
-  }
-}
-`,
-  },
-
-  delphi: {
-    filename: 'Fidelizare.pas',
-    call: (v) => `AcumuleazaPuncte(${v});`,
-    content: `// Generat de fidelizare-integrate. Cheia din mediu, niciodata in cod.
-unit Fidelizare;
-interface
-procedure AcumuleazaPuncte(const CodFidelitate: string);
-implementation
-uses System.Net.HttpClient, System.Classes, System.SysUtils;
-procedure AcumuleazaPuncte(const CodFidelitate: string);
-var Http: THTTPClient; Body: TStringStream;
-begin
-  try
-    Http := THTTPClient.Create;
-    Body := TStringStream.Create('{"fidelity_card":"' + CodFidelitate + '"}', TEncoding.UTF8);
-    Http.CustomHeaders['Authorization'] := 'Bearer ' + GetEnvironmentVariable('FIDELIZARE_API_KEY');
-    Http.Post('https://fidelizare.ro/api/integration/s2s/submitReceipt', Body);
-  except
-    // nu blocheaza vanzarea
-  end;
-end;
-end.
-`,
-  },
-};