Initial commit

Author: danizord

.github/workflows/ci.yml

@@ -0,0 +1,21 @@
+name: CI
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: "1.1.38"
+      - name: Install dependencies
+        run: bun install
+      - name: Run tests
+        run: bun test
+      - name: Typecheck
+        run: bun run typecheck

.gitignore

@@ -0,0 +1,5 @@
+node_modules
+dist
+tmp
+.DS_Store
+.env

README.md

@@ -0,0 +1,111 @@
+# clifood
+
+API-first CLI for iFood. It uses your authenticated browser session to call iFood’s internal APIs directly (search, catalog, cart, discovery) and only opens pages for login/address setup and checkout review. No UI scraping is required.
+
+## Quick start
+
+```bash
+bun install
+# Optional: install Playwright's bundled browser
+bunx playwright install chromium
+
+# Run a quick restaurant search (API)
+bun src/cli.ts restaurants --query "pizza" --limit 5 --json
+```
+
+## Use your existing logged-in browser (recommended)
+
+Start Chrome with remote debugging enabled, then point the CLI to it:
+
+```bash
+/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome \
+  --remote-debugging-port=9222 \
+  --user-data-dir="$HOME/.clifood/chrome-profile"
+
+# Then run
+bun src/cli.ts restaurants --query "japonesa" --cdp-url http://127.0.0.1:9222
+```
+
+This keeps your existing iFood login and address selection. All API calls are executed from your authenticated browser context to avoid bot blocks.
+
+## Commands
+
+### Open iFood (manual setup)
+
+```bash
+bun src/cli.ts open --wait
+```
+
+Use this to log in or set your delivery address in the connected browser profile.
+
+### Search restaurants
+
+```bash
+bun src/cli.ts restaurants --query "sushi" --limit 10
+```
+
+Exclude categories or names:
+
+```bash
+bun src/cli.ts restaurants --query "a" --exclude pizza --exclude hamburguer --exclude doces --limit 10
+```
+
+Shortcut:
+
+```bash
+bun src/cli.ts restaurants --query "a" --exclude-defaults --limit 10
+```
+
+Top restaurants (discovery feed, no search term):
+
+```bash
+bun src/cli.ts restaurants --top --exclude-defaults --limit 10
+```
+
+### Search items in a restaurant
+
+```bash
+bun src/cli.ts items --restaurant "Restaurante X" --query "temaki" --limit 10
+```
+
+You can also pass a full iFood restaurant URL with `--restaurant`.
+
+### Place an order
+
+```bash
+bun src/cli.ts order \
+  --restaurant "Restaurante X" \
+  --item "Temaki de salmão:2" \
+  --item "Guioza" \
+  --confirm
+```
+
+Safety: without `--confirm`, the CLI opens checkout but does **not** submit the order.
+
+## Configuration
+
+Config lives at `~/.clifood/config.json`. You can also override via CLI flags or environment variables.
+
+```bash
+bun src/cli.ts config show
+bun src/cli.ts config set cdpUrl http://127.0.0.1:9222
+bun src/cli.ts config set headless false
+```
+
+Supported keys: `cdpUrl`, `profileDir`, `headless`, `slowMo`, `locale`, `timeoutMs`.
+
+Environment overrides:
+
+- `IFOOD_CDP_URL`
+- `IFOOD_PROFILE_DIR`
+- `IFOOD_HEADLESS`
+- `IFOOD_SLOW_MO`
+- `IFOOD_LOCALE`
+- `IFOOD_TIMEOUT_MS`
+
+## Notes
+
+- The CLI is API-first and depends on a valid logged-in browser session.
+- Some menu items require mandatory option choices; the CLI auto-selects minimum required options from the catalog data.
+- Read `docs/architecture.md` for the exact API flow and data dependencies.
+- Read `docs/troubleshooting.md` if you hit auth or anti-bot issues.

bun.lock

@@ -0,0 +1,56 @@
+# Architecture
+
+## Goals
+
+- API-first: no DOM scraping for data.
+- Use the authenticated browser session to pass iFood anti-bot checks.
+- Keep checkout confirmation explicit and opt-in.
+
+## Auth strategy
+
+The CLI opens a Playwright page (either a persistent profile or a CDP-connected Chrome). It reads the Redux state for account + address data and listens for any iFood API request to capture required auth headers. Those headers are reused for subsequent API calls.
+
+Key headers captured (example):
+- `authorization`
+- `x-ifood-device-id`
+- `x-ifood-session-id`
+- `x-ifood-user-id`
+- `x-client-application-key`
+- `access_key`, `secret_key`
+- `x-px-cookies`
+
+All API calls are executed via `page.evaluate(fetch)` to inherit the browser’s context and avoid bot challenges.
+
+## Core endpoints
+
+- Search: `GET /v2/cardstack/search/results`
+- Discovery feed: `GET /v2/bm/home?alias=HOME_FOOD_DELIVERY`
+- Category page: `GET /v1/bm/page/{id}`
+- Merchant catalog: `GET /v1/bm/merchants/{id}/catalog`
+- Cart creation: `POST /v1/carts`
+
+## Command flows
+
+### `restaurants`
+
+- `--top`: fetch discovery feed + category pages, filter locally.
+- `--query`: use search endpoint.
+
+### `items`
+
+- Resolve merchant by URL or search.
+- Fetch merchant catalog.
+- Filter catalog items locally.
+
+### `order`
+
+- Resolve merchant by URL or search.
+- Fetch catalog, resolve item IDs, and build required sub-items.
+- `POST /v1/carts` to create cart.
+- Open `https://www.ifood.com.br/carrinho` and `https://www.ifood.com.br/checkout` to review.
+- Only submit if `--confirm` is explicitly provided.
+
+## Safety
+
+- Checkout is never submitted unless `--confirm` is provided.
+- If iFood challenges with anti-bot, the user must solve the challenge in the browser once.

docs/architecture.md

@@ -0,0 +1,23 @@
+# Troubleshooting
+
+## "Not logged in" or missing address
+
+Run:
+
+```bash
+bun src/cli.ts open --wait
+```
+
+Log in and select a delivery address in the opened browser, then retry the command.
+
+## Anti-bot challenge
+
+If iFood shows a “click and hold” modal, complete it once in the browser session. The CLI will reuse that session for future calls.
+
+## Empty search results
+
+Use `--top` to rely on the discovery feed instead of search, or try a more specific query.
+
+## Menu item not found
+
+Use `bun src/cli.ts items --restaurant "..." --query "..."` to see the exact catalog item names and match those in your `order` command.

docs/troubleshooting.md

@@ -0,0 +1,24 @@
+{
+  "name": "clifood",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "bin": {
+    "clifood": "src/cli.ts"
+  },
+  "scripts": {
+    "cli": "bun src/cli.ts",
+    "build": "bun build src/cli.ts --outdir dist --target bun",
+    "typecheck": "bunx tsc --noEmit",
+    "test": "bun test"
+  },
+  "dependencies": {
+    "commander": "^12.1.0",
+    "playwright": "^1.49.0",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.4",
+    "typescript": "^5.7.3"
+  }
+}

package.json

@@ -0,0 +1,53 @@
+---
+name: clifood-api
+description: API-first iFood automation for the clifood project. Use when adding features, debugging, or running the iFood CLI, or when working with iFood discovery/search/catalog/cart APIs and related parsing logic in this repo.
+---
+
+# Clifood API Skill
+
+## Overview
+
+Use this skill to work on the clifood CLI and its API-first iFood integration without UI scraping. It captures auth headers from the logged-in browser session and calls iFood’s internal endpoints directly.
+
+## Quick start
+
+1. Ensure a logged-in browser session with a delivery address.
+2. Run CLI commands from repo root.
+
+Examples:
+
+```bash
+bun src/cli.ts restaurants --top --exclude-defaults --limit 10
+bun src/cli.ts items --restaurant "Restaurante X" --query "temaki"
+```
+
+## Core workflow (API-first)
+
+1. **Capture auth context**
+   - Call `getApiContext(page)` from `src/ifood/api.ts`.
+   - This reads Redux state (account + address) and captures required headers.
+
+2. **Fetch data**
+   - Discovery: `topRestaurantsApi` (home feed + category pages).
+   - Search: `searchRestaurantsApi`.
+   - Catalog: `getCatalog` + `extractMenuItems`.
+
+3. **Build cart**
+   - Resolve items with `buildCartItems` (uses catalog choices).
+   - Create cart with `createCart`.
+
+4. **Review checkout**
+   - Use `openCart` and `openCheckout` from `src/ifood/navigation.ts`.
+   - Do **not** submit the order unless explicitly requested.
+
+## Implementation notes
+
+- API calls must be executed via the browser context (`page.evaluate(fetch)`) to avoid bot challenges.
+- Use helper parsers in `src/ifood/parsers.ts` to extract category and merchant data.
+- Keep filters normalized using `normalizeText` (accent-insensitive).
+
+## References
+
+- `docs/architecture.md` for the full API flow.
+- `docs/troubleshooting.md` for auth/anti-bot issues.
+- `references/api.md` for endpoint summary.

skills/clifood-api/SKILL.md

@@ -0,0 +1,23 @@
+# iFood API Summary
+
+## Auth + headers
+
+Use `getApiContext(page)` from `src/ifood/api.ts` to capture headers and address/account data. It listens for any iFood API request after loading `/restaurantes` and extracts required headers.
+
+## Endpoints used
+
+- Discovery feed: `GET https://cw-marketplace.ifood.com.br/v2/bm/home?alias=HOME_FOOD_DELIVERY&latitude=...&longitude=...`
+- Category page: `GET https://cw-marketplace.ifood.com.br/v1/bm/page/{categoryId}?latitude=...&longitude=...`
+- Search: `GET https://cw-marketplace.ifood.com.br/v2/cardstack/search/results?alias=SEARCH_RESULTS_MERCHANT_TAB_GLOBAL&term=...`
+- Merchant catalog: `GET https://cw-marketplace.ifood.com.br/v1/bm/merchants/{merchantId}/catalog?latitude=...&longitude=...`
+- Cart creation: `POST https://cw-marketplace.ifood.com.br/v1/carts`
+
+## Data extraction helpers
+
+- `extractHomeData` / `extractMerchantsFromPage` in `src/ifood/parsers.ts`
+- `extractMenuItems` in `src/ifood/api.ts`
+- `buildCartItems` in `src/ifood/api.ts`
+
+## Safety
+
+Do not submit orders unless explicitly requested. The default flow stops after opening checkout.