qiksy 1.0.0

package/tools/travel/vendor/lib/proposal.mjs

@@ -0,0 +1,207 @@
+/**
+ * Client proposal — the whole selection as ONE page an agency can send.
+ *
+ * This is the paid feature (owner decision 2026-07-25) and it is aimed at a
+ * measured pain: advisors report that a "five-minute" quote turns into two hours of
+ * reformatting, because the options live in six browser tabs and the client wants
+ * them side by side. Here the agent already has them structured, so the page is a
+ * pure rendering job: route, who is going, every option with its price, the
+ * recommended combination, and the agency's own name on top.
+ *
+ * Self-contained by construction — inline CSS, no scripts, no external assets — so
+ * it survives being saved to disk, attached to an email, or printed to PDF. It is
+ * generated by the LOCAL backend on the agent's own machine; nothing is uploaded.
+ */
+
+const CUR = { EUR: '€', USD: '$', UAH: '₴', PLN: 'zł', GBP: '£', CZK: 'Kč', CHF: 'CHF' };
+
+const esc = s => String(s ?? '').replace(/[&<>"']/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
+const safeUrl = u => (/^https?:\/\//i.test(String(u ?? '')) ? String(u) : '');
+const money = (amount, currency) => (amount == null ? '' : `${CUR[currency || ''] || (currency ? currency + ' ' : '')}${amount}`);
+
+const T = {
+  en: {
+    proposal: 'Trip proposal', who: 'Travellers', dates: 'Dates', route: 'Route',
+    transport: 'Transport', hotel: 'Stay', transfer: 'Transfer', other: 'Also',
+    recommended: 'Our recommendation', total: 'total', perNight: 'per night',
+    open: 'View', nights: n => `${n} night${n === 1 ? '' : 's'}`, oneWay: 'one way',
+    prepared: 'Prepared', direct: 'Direct', pick: 'Pick the option you like and reply — we book it.',
+    budget: 'Budget', notes: 'Notes',
+  },
+  ru: {
+    proposal: 'Предложение по поездке', who: 'Кто едет', dates: 'Даты', route: 'Маршрут',
+    transport: 'Транспорт', hotel: 'Проживание', transfer: 'Трансфер', other: 'Ещё',
+    recommended: 'Наша рекомендация', total: 'итого', perNight: 'за ночь',
+    open: 'Смотреть', nights: n => `${n} ${n % 10 === 1 && n % 100 !== 11 ? 'ночь' : [2, 3, 4].includes(n % 10) && ![12, 13, 14].includes(n % 100) ? 'ночи' : 'ночей'}`,
+    oneWay: 'в одну сторону', prepared: 'Подготовлено', direct: 'Без пересадок',
+    pick: 'Выберите вариант и ответьте — мы забронируем.', budget: 'Бюджет', notes: 'Примечания',
+  },
+  uk: {
+    proposal: 'Пропозиція щодо поїздки', who: 'Хто їде', dates: 'Дати', route: 'Маршрут',
+    transport: 'Транспорт', hotel: 'Проживання', transfer: 'Трансфер', other: 'Ще',
+    recommended: 'Наша рекомендація', total: 'разом', perNight: 'за ніч',
+    open: 'Дивитись', nights: n => `${n} ${n % 10 === 1 && n % 100 !== 11 ? 'ніч' : [2, 3, 4].includes(n % 10) && ![12, 13, 14].includes(n % 100) ? 'ночі' : 'ночей'}`,
+    oneWay: 'в один бік', prepared: 'Підготовлено', direct: 'Без пересадок',
+    pick: 'Оберіть варіант і дайте відповідь — ми забронюємо.', budget: 'Бюджет', notes: 'Примітки',
+  },
+};
+
+const MONTHS = {
+  en: ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'],
+  ru: ['янв', 'фев', 'мар', 'апр', 'мая', 'июн', 'июл', 'авг', 'сен', 'окт', 'ноя', 'дек'],
+  uk: ['січ', 'лют', 'бер', 'кві', 'тра', 'чер', 'лип', 'сер', 'вер', 'жов', 'лис', 'гру'],
+};
+
+function fmtDate(iso, lang) {
+  if (!iso) return '';
+  const [, m, d] = String(iso).split('-');
+  if (!m || !d) return iso;
+  return `${Number(d)} ${MONTHS[lang][Number(m) - 1] || ''}`;
+}
+
+function nightsOf(trip) {
+  if (!trip.departDate || !trip.returnDate) return 0;
+  const n = Math.round((Date.parse(trip.returnDate) - Date.parse(trip.departDate)) / 86_400_000);
+  return n > 0 ? n : 0;
+}
+
+function optionCard(o, t, lang) {
+  const p = o.price || {};
+  const price = money(p.amount, p.currency);
+  const unit = p.unit === 'per_night' ? t.perNight : t.total;
+  const link = safeUrl(o.link);
+  const meta = [];
+  if (o.kind === 'hotel') {
+    if (o.stars) meta.push('★'.repeat(Math.max(1, Math.min(5, o.stars))));
+    if (o.rating?.score != null) meta.push(`${o.rating.score}${o.rating.reviews != null ? ` · ${o.rating.reviews}` : ''}`);
+    if (o.address) meta.push(esc(o.address));
+    if (o.distanceKm != null) meta.push(`${o.distanceKm} km`);
+  } else if (['flight', 'train', 'bus'].includes(o.kind)) {
+    const dep = o.depart || {}, arr = o.arrive || {};
+    if (dep.time || arr.time) meta.push(`${esc(dep.time || '')} → ${esc(arr.time || '')}`);
+    if (dep.place || arr.place) meta.push(`${esc(dep.place || '')} → ${esc(arr.place || '')}`);
+    if (o.duration) meta.push(esc(o.duration));
+    if (o.direct) meta.push(t.direct);
+    if (o.baggage) meta.push(esc(o.baggage));
+  } else {
+    if (o.service) meta.push(esc(o.service));
+    if (o.vehicle) meta.push(esc(o.vehicle));
+    if (o.pickupAt) meta.push(esc(o.pickupAt));
+  }
+  const extra = o.kind === 'hotel' && o.totalPrice != null
+    ? `<div class="extra">${t.total} ${esc(money(o.totalPrice, p.currency))}${o.nights ? ` · ${t.nights(o.nights)}` : ''}</div>`
+    : '';
+  return `
+  <article class="opt">
+    <div class="opt-n">${esc(o.n)}</div>
+    <div class="opt-main">
+      <h3>${esc(o.title)}${o.brand && o.brand !== o.title ? ` <span class="brand">· ${esc(o.brand)}</span>` : ''}</h3>
+      ${meta.length ? `<div class="meta">${meta.join(' · ')}</div>` : ''}
+      ${o.notes ? `<p class="notes">${esc(o.notes)}</p>` : ''}
+      ${link ? `<a class="link" href="${esc(link)}" target="_blank" rel="noopener">${t.open} →</a>` : ''}
+    </div>
+    <div class="opt-price">
+      ${price ? `<div class="unit">${esc(unit)}</div><div class="amount">${esc(price)}</div>` : ''}
+      ${extra}
+    </div>
+  </article>`;
+}
+
+/**
+ * @param {object} a
+ * @param {object} a.trip
+ * @param {object|null} a.party      the client this trip belongs to
+ * @param {object[]} a.travellers
+ * @param {object} a.brand           { name, contact, note } — the agency's own header
+ * @param {'en'|'ru'|'uk'} a.lang
+ */
+export function buildProposalHtml({ trip, party, travellers = [], brand = {}, lang = 'en' }) {
+  const t = T[lang] || T.en;
+  const opts = [...(trip.options || [])].sort((a, b) => (a.n || 0) - (b.n || 0));
+  const known = new Set(['flight', 'train', 'bus', 'hotel', 'transfer']);
+  const groups = [
+    { label: t.transport, items: opts.filter(o => ['flight', 'train', 'bus'].includes(o.kind)) },
+    { label: t.hotel, items: opts.filter(o => o.kind === 'hotel') },
+    { label: t.transfer, items: opts.filter(o => o.kind === 'transfer') },
+    { label: t.other, items: opts.filter(o => !known.has(o.kind)) },
+  ].filter(g => g.items.length);
+
+  const n = nightsOf(trip);
+  const dates = trip.returnDate
+    ? `${fmtDate(trip.departDate, lang)} → ${fmtDate(trip.returnDate, lang)}${n ? ` · ${t.nights(n)}` : ''}`
+    : `${fmtDate(trip.departDate, lang)} · ${t.oneWay}`;
+  const who = travellers.map(m => m.nameRu || m.nameEn).filter(Boolean).join(', ');
+  const rec = trip.recommendation || {};
+  const title = `${trip.from} → ${trip.to}`;
+
+  return `<!doctype html>
+<html lang="${lang}">
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${esc(brand.name ? brand.name + ' — ' : '')}${esc(title)}</title>
+<style>
+  :root { --ink:#112a2d; --ink2:#4a6165; --ink3:#8aa2a4; --line:#dde8e8; --teal:#17948f; --bg:#f4f8f8; --card:#fff; }
+  * { box-sizing: border-box; }
+  body { margin:0; background:var(--bg); color:var(--ink);
+         font:15px/1.55 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, system-ui, sans-serif; }
+  .wrap { max-width: 880px; margin: 0 auto; padding: 32px 20px 64px; }
+  header.brand { display:flex; align-items:baseline; gap:12px; flex-wrap:wrap; margin-bottom: 26px; }
+  .brand-name { font-size:16px; font-weight:800; letter-spacing:-.2px; }
+  .brand-contact { color:var(--ink3); font-size:13px; }
+  .hero { background:linear-gradient(120deg,#0b3d40,#0f766e); color:#fff; border-radius:20px; padding:26px 28px; }
+  .hero .eyebrow { text-transform:uppercase; letter-spacing:1.6px; font-size:11px; opacity:.85; }
+  .hero h1 { margin:8px 0 12px; font-size:30px; letter-spacing:-.6px; }
+  .hero .facts { display:flex; gap:22px; flex-wrap:wrap; font-size:13.5px; opacity:.95; }
+  .lead { margin:22px 0 6px; color:var(--ink2); }
+  .rec { background:#e9f8ef; border:1px solid #b8e6c9; border-radius:16px; padding:16px 18px; margin:20px 0 8px; }
+  .rec h2 { margin:0 0 6px; font-size:14px; text-transform:uppercase; letter-spacing:1.2px; color:#15803d; }
+  h2.sec { font-size:12px; text-transform:uppercase; letter-spacing:1.4px; color:var(--teal); margin:28px 0 10px; }
+  .opt { display:flex; gap:16px; background:var(--card); border:1px solid var(--line); border-radius:16px;
+         padding:16px 18px; margin-bottom:12px; page-break-inside:avoid; }
+  .opt-n { flex:none; width:28px; height:28px; border-radius:9px; background:#eef5f5; color:var(--teal);
+           font-weight:800; display:flex; align-items:center; justify-content:center; font-size:13px; }
+  .opt-main { flex:1; min-width:0; }
+  .opt-main h3 { margin:0 0 4px; font-size:16px; letter-spacing:-.2px; }
+  .brand { color:var(--ink3); font-weight:500; }
+  .meta { color:var(--ink2); font-size:13px; }
+  .notes { color:var(--ink2); font-size:13px; margin:6px 0 0; }
+  .link { display:inline-block; margin-top:8px; color:var(--teal); font-size:13px; font-weight:600; text-decoration:none; }
+  .opt-price { flex:none; text-align:right; min-width:110px; }
+  .unit { font-size:11px; text-transform:uppercase; letter-spacing:.8px; color:var(--ink3); }
+  .amount { font-size:20px; font-weight:800; letter-spacing:-.4px; }
+  .extra { font-size:12px; color:var(--ink2); margin-top:2px; }
+  footer { margin-top:34px; padding-top:16px; border-top:1px solid var(--line); color:var(--ink3); font-size:12.5px; }
+  @media print { body { background:#fff; } .wrap { padding:0; } .opt { box-shadow:none; } }
+</style>
+<div class="wrap">
+  ${brand.name || brand.contact ? `<header class="brand">
+    ${brand.name ? `<span class="brand-name">${esc(brand.name)}</span>` : ''}
+    ${brand.contact ? `<span class="brand-contact">${esc(brand.contact)}</span>` : ''}
+  </header>` : ''}
+
+  <section class="hero">
+    <div class="eyebrow">${esc(party && party.kind === 'client' && party.name ? party.name : t.proposal)}</div>
+    <h1>${esc(trip.from)} → ${esc(trip.to)}</h1>
+    <div class="facts">
+      <span>${esc(dates)}</span>
+      ${who ? `<span>${esc(t.who)}: ${esc(who)}</span>` : ''}
+      ${trip.budget ? `<span>${esc(t.budget)}: ${esc(trip.budget)}</span>` : ''}
+    </div>
+  </section>
+
+  ${trip.summary ? `<p class="lead">${esc(trip.summary)}</p>` : ''}
+
+  ${rec.text || (rec.ids || []).length ? `<div class="rec">
+    <h2>${esc(t.recommended)}</h2>
+    ${rec.text ? `<div>${esc(rec.text)}</div>` : ''}
+    ${(rec.ids || []).length ? `<div class="meta">№ ${(rec.ids || []).map(x => esc(x)).join(' + ')}${rec.comboTotal ? ` · ${esc(rec.comboTotal)}` : ''}</div>` : ''}
+  </div>` : ''}
+
+  ${groups.map(g => `<h2 class="sec">${esc(g.label)}</h2>${g.items.map(o => optionCard(o, t, lang)).join('')}`).join('')}
+
+  ${brand.note ? `<p class="lead">${esc(brand.note)}</p>` : `<p class="lead">${esc(t.pick)}</p>`}
+
+  <footer>${esc(t.prepared)}: ${new Date().toLocaleDateString(lang === 'en' ? 'en-GB' : lang === 'uk' ? 'uk-UA' : 'ru-RU')}${brand.name ? ` · ${esc(brand.name)}` : ''}</footer>
+</div>
+</html>`;
+}

package/tools/travel/vendor/lib/spawn-claude.mjs

@@ -0,0 +1,44 @@
+/**
+ * Start the `claude` CLI — on any operating system.
+ *
+ * On macOS and Linux `claude` on PATH is a real executable and Node's own spawn finds
+ * it. ON WINDOWS IT IS NOT: npm installs a `claude.cmd` shim, and Node cannot execute
+ * a .cmd without a shell — recent versions refuse outright (the fix for CVE-2024-27980).
+ * So every call landed on ENOENT and the panel announced "Claude Code is not installed"
+ * on a machine where it was installed and working perfectly. The probe, the sign-in and
+ * the agent runs all went through this one door, so on Windows nothing worked at all.
+ *
+ * `shell: true` would make the error go away and open a hole instead: the agent passes
+ * the user's OWN TEXT in argv — a resume, a job description, an MCP config as JSON —
+ * and through cmd.exe every `&`, `|`, `^` and quote in it becomes a shell metacharacter.
+ * cross-spawn is the standard answer to exactly this (npm itself runs on it): it
+ * resolves the shim and escapes arguments for cmd.exe properly.
+ *
+ * Imported LAZILY, with a fallback, so the backends keep the "no dependencies"
+ * property they were written for: run from this monorepo they get cross-spawn, run
+ * standalone on macOS or Linux they fall back to Node's spawn — which is exactly what
+ * they used before this file existed.
+ */
+
+import { spawn as nodeSpawn } from 'node:child_process';
+
+let impl = null;
+try {
+  impl = (await import('cross-spawn')).default;
+} catch {
+  // Only Windows actually needs it; saying so anywhere else would be noise.
+  if (process.platform === 'win32') {
+    console.warn(
+      '[claude] cross-spawn is missing, and on Windows the CLI cannot be started without it.\n' +
+        '         Run `npm install` in the qiksy-studio root, then start this server again.',
+    );
+  }
+}
+
+/**
+ * @param {string[]} args argv for the CLI
+ * @param {import('node:child_process').SpawnOptions} [opts]
+ */
+export function spawnClaude(args, opts = {}) {
+  return (impl ?? nodeSpawn)('claude', args, opts);
+}

package/tools/travel/vendor/lib/store.mjs

@@ -0,0 +1,75 @@
+/** JSON file store: data/db.json. Zero deps, sync IO (single-user tool). */
+import { readFileSync, writeFileSync, mkdirSync, existsSync, renameSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+export const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const DB_PATH = process.env.TA_DB ? resolve(process.env.TA_DB) : resolve(ROOT, 'data/db.json');
+
+export const uid = () => Date.now().toString(36) + Math.random().toString(36).slice(2, 7);
+
+const CORPORATE_DEFAULTS = {
+  legalEntity: '', travelAgency: '', geniusLevel: '', airlineCodes: '',
+  insurance: '', transferVendor: '',
+  flightClass: 'эконом', trainClass: '2 класс', hotelStars: '3-4*',
+  perDiem: '', hrTimezone: 'Europe/Kyiv', currency: 'EUR',
+};
+
+// plan: 'free' = ОДНА группа (сам + семья); вести чужие поездки (несколько
+// клиентов) — платно. 'dev' (наш инстанс) снимает лимит — руками в db.json.
+// plan: ручной выбор ограничен free/dev; платный pro включается лицензией.
+// license — ключ (tr_…), licenseInfo — кэш последней проверки у воркера.
+// brand* — шапка клиентского предложения (Pro): агентство ставит на страницу своё
+// имя и контакт, потому что отправляет её клиенту от своего лица, не от нашего.
+const SETTINGS_DEFAULTS = {
+  model: 'sonnet', browserSearch: false, extraInstructions: '',
+  plan: 'free', license: '', licenseInfo: null,
+  brandName: '', brandContact: '', brandNote: '',
+};
+
+/** Своя группа — «я и моя семья». Есть всегда, создаётся молча: на free человек
+ *  вообще не должен видеть слово «клиент», он просто добавляет попутчиков. */
+export const SELF_PARTY_ID = 'p_self';
+const selfParty = () => ({ id: SELF_PARTY_ID, kind: 'self', name: '', email: '', phone: '', note: '', createdAt: Date.now() });
+
+// A fresh install starts EMPTY — no demo travellers, no demo trips (owner decision
+// 2026-07-19: every flow begins from zero; the UI's empty states guide the first step).
+function defaults() {
+  return {
+    // parties = «кто едет»: на free одна (своя семья), на Pro — по группе на клиента.
+    parties: [selfParty()],
+    team: [],
+    corporate: { ...CORPORATE_DEFAULTS },
+    trips: [],
+    settings: { ...SETTINGS_DEFAULTS },
+  };
+}
+
+export function load() {
+  if (!existsSync(DB_PATH)) {
+    const db = defaults();
+    save(db);
+    return db;
+  }
+  const db = JSON.parse(readFileSync(DB_PATH, 'utf8'));
+  // migrate: fill keys added after the db was first created
+  db.team ||= [];
+  db.trips ||= [];
+  db.corporate = { ...CORPORATE_DEFAULTS, ...db.corporate };
+  db.settings = { ...SETTINGS_DEFAULTS, ...db.settings };
+  // Groups arrived after the flat team list: everything that existed before is
+  // the owner's own party, so nothing needs re-assigning by hand on upgrade.
+  if (!Array.isArray(db.parties) || !db.parties.length) db.parties = [selfParty()];
+  for (const m of db.team) m.partyId ||= db.parties[0].id;
+  for (const t of db.trips) t.partyId ||= db.parties[0].id;
+  return db;
+}
+
+export function save(db) {
+  mkdirSync(dirname(DB_PATH), { recursive: true });
+  // Write to a temp file then rename over db.json — atomic on the same FS, so a
+  // crash mid-write leaves the previous db.json intact instead of a truncated one.
+  const tmp = DB_PATH + '.tmp';
+  writeFileSync(tmp, JSON.stringify(db, null, 2), 'utf8');
+  renameSync(tmp, DB_PATH);
+}

package/tools/travel/vendor/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "travel-assistant-web",
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "start": "node server.mjs",
+    "browser": "node scripts/launch-browser.mjs"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}