@botuyo/mcp 0.1.0 → 0.2.1

package/dist/client.d.ts

@@ -1,36 +1,31 @@
 /**
  * BotuyoApiClient - Thin HTTP wrapper around the BotUyo REST API
  * All MCP tools go through this client.
+ *
+ * Uses a JWT token directly (obtained via `npx @botuyo/mcp login`).
  */
 export interface BotuyoClientConfig {
     apiUrl: string;
-    apiKey: string;
-}
-export interface AuthResult {
     token: string;
+}
+export interface AuthInfo {
     tenantId: string;
     tenantName: string;
     role: string;
-    canWrite: boolean;
-    channels: Array<{
-        type: string;
-        status: string;
-    }>;
-    adminPanelUrl: string;
+    email: string;
 }
 export declare class BotuyoApiClient {
     private config;
-    private token;
-    private authResult;
-    private tokenExpiresAt;
+    private authInfo;
     constructor(config: BotuyoClientConfig);
-    /** Exchange API key for a JWT and cache it for 55 minutes */
-    authenticate(): Promise<AuthResult>;
+    /** Verify the stored JWT is still valid by calling GET /api/auth/me */
+    verify(): Promise<AuthInfo>;
     /** Make an authenticated GET request */
     get<T = any>(path: string): Promise<T>;
     /** Make an authenticated POST request */
     post<T = any>(path: string, data: unknown): Promise<T>;
     /** Make an authenticated PUT request */
     put<T = any>(path: string, data: unknown): Promise<T>;
+    private handleResponse;
     private parseJson;
 }

package/dist/client.js

@@ -1,71 +1,74 @@
 /**
  * BotuyoApiClient - Thin HTTP wrapper around the BotUyo REST API
  * All MCP tools go through this client.
+ *
+ * Uses a JWT token directly (obtained via `npx @botuyo/mcp login`).
  */
 import fetch from 'node-fetch';
 export class BotuyoApiClient {
     config;
-    token = null;
-    authResult = null;
-    tokenExpiresAt = 0;
+    authInfo = null;
     constructor(config) {
         this.config = config;
     }
-    /** Exchange API key for a JWT and cache it for 55 minutes */
-    async authenticate() {
-        const now = Date.now();
-        if (this.token && this.authResult && now < this.tokenExpiresAt) {
-            return this.authResult;
-        }
-        const res = await fetch(`${this.config.apiUrl}/api/v1/mcp/auth`, {
-            method: 'POST',
-            headers: {
-                'x-api-key': this.config.apiKey,
-                'Content-Type': 'application/json'
-            }
+    /** Verify the stored JWT is still valid by calling GET /api/auth/me */
+    async verify() {
+        if (this.authInfo)
+            return this.authInfo;
+        const res = await fetch(`${this.config.apiUrl}/api/auth/me`, {
+            headers: { Authorization: `Bearer ${this.config.token}` }
         });
         const body = await this.parseJson(res);
         if (!body.success) {
-            throw new Error(`Authentication failed: ${body.error || 'Unknown error'}`);
+            throw new Error(`Session expired or invalid: ${body.error || 'Unknown error'}. Run: npx @botuyo/mcp login`);
         }
-        this.token = body.data.token;
-        this.authResult = body.data;
-        this.tokenExpiresAt = now + 55 * 60 * 1000; // 55 min (token expires in 1h)
-        return this.authResult;
+        const user = body.data.user;
+        this.authInfo = {
+            tenantId: user.tenantIds?.[0] || '',
+            tenantName: '', // Will be enriched from credentials
+            role: user.roles?.[0]?.role || 'member',
+            email: user.email
+        };
+        return this.authInfo;
     }
     /** Make an authenticated GET request */
     async get(path) {
-        await this.authenticate();
         const res = await fetch(`${this.config.apiUrl}${path}`, {
-            headers: { Authorization: `Bearer ${this.token}` }
+            headers: { Authorization: `Bearer ${this.config.token}` }
         });
-        return this.parseJson(res);
+        return this.handleResponse(res);
     }
     /** Make an authenticated POST request */
     async post(path, data) {
-        await this.authenticate();
         const res = await fetch(`${this.config.apiUrl}${path}`, {
             method: 'POST',
             headers: {
-                Authorization: `Bearer ${this.token}`,
+                Authorization: `Bearer ${this.config.token}`,
                 'Content-Type': 'application/json'
             },
             body: JSON.stringify(data)
         });
-        return this.parseJson(res);
+        return this.handleResponse(res);
     }
     /** Make an authenticated PUT request */
     async put(path, data) {
-        await this.authenticate();
         const res = await fetch(`${this.config.apiUrl}${path}`, {
             method: 'PUT',
             headers: {
-                Authorization: `Bearer ${this.token}`,
+                Authorization: `Bearer ${this.config.token}`,
                 'Content-Type': 'application/json'
             },
             body: JSON.stringify(data)
         });
-        return this.parseJson(res);
+        return this.handleResponse(res);
+    }
+    async handleResponse(res) {
+        const json = await this.parseJson(res);
+        // Detect expired token
+        if (res.status === 401) {
+            throw new Error('Sesión expirada. Ejecutá: npx @botuyo/mcp login');
+        }
+        return json;
     }
     async parseJson(res) {
         const text = await res.text();
@@ -77,6 +80,8 @@ export class BotuyoApiClient {
             return json;
         }
         catch (e) {
+            if (e instanceof Error && e.message.includes('HTTP'))
+                throw e;
             throw new Error(`HTTP ${res.status}: ${text.slice(0, 200)}`);
         }
     }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAmB,MAAM,YAAY,CAAA;AAiB5C,MAAM,OAAO,eAAe;IAClB,MAAM,CAAoB;IAC1B,KAAK,GAAkB,IAAI,CAAA;IAC3B,UAAU,GAAsB,IAAI,CAAA;IACpC,cAAc,GAAW,CAAC,CAAA;IAElC,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,UAAU,CAAA;QACxB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,kBAAkB,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC/B,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAA;QAC5E,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAkB,CAAA;QACzC,IAAI,CAAC,cAAc,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,+BAA+B;QAE1E,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,GAAG,CAAU,IAAY;QAC7B,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YACtD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAM,EAAE,EAAE;SACpD,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,IAAI,CAAU,IAAY,EAAE,IAAa;QAC7C,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAM,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,GAAG,CAAU,IAAY,EAAE,IAAa;QAC5C,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YACtD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAM,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAa;QACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YACrD,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAmB,MAAM,YAAY,CAAA;AAc5C,MAAM,OAAO,eAAe;IAClB,MAAM,CAAoB;IAC1B,QAAQ,GAAoB,IAAI,CAAA;IAExC,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,cAAc,EAAE;YAC3D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;SAC1D,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,KAAK,IAAI,eAAe,8BAA8B,CAAC,CAAA;QAC7G,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;QAC3B,IAAI,CAAC,QAAQ,GAAG;YACd,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;YACnC,UAAU,EAAE,EAAE,EAAE,oCAAoC;YACpD,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,QAAQ;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAA;QAED,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,GAAG,CAAU,IAAY;QAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YACtD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;SAC1D,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,IAAI,CAAU,IAAY,EAAE,IAAa;QAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC5C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,GAAG,CAAU,IAAY,EAAE,IAAa;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YACtD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC5C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAa;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAEtC,uBAAuB;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACpE,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAa;QACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YACrD,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,CAAA;YAC7D,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;CACF"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+/**
+ * @botuyo/mcp auth command (Browser OAuth flow)
+ *
+ * Usage: npx @botuyo/mcp auth
+ *
+ * Flow:
+ * 1. Starts a local HTTP server on a random port
+ * 2. Opens admin.botuyo.com/mcp-auth?redirect=http://localhost:PORT
+ * 3. The admin panel authenticates the user (login/Google),
+ *    calls POST /api/v1/mcp/oauth/authorize, then redirects to localhost with ?code=...
+ * 4. CLI exchanges the code for an API key (POST /api/v1/mcp/oauth/token)
+ * 5. Uses the API key to get a JWT (POST /api/v1/mcp/auth)
+ * 6. Saves the JWT to ~/.botuyo/credentials.json
+ *
+ * For terminal-only login (email/password), use `npx @botuyo/mcp login` instead.
+ */
+export declare function runAuth(args: string[]): Promise<void>;

package/dist/commands/auth.js

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+/**
+ * @botuyo/mcp auth command (Browser OAuth flow)
+ *
+ * Usage: npx @botuyo/mcp auth
+ *
+ * Flow:
+ * 1. Starts a local HTTP server on a random port
+ * 2. Opens admin.botuyo.com/mcp-auth?redirect=http://localhost:PORT
+ * 3. The admin panel authenticates the user (login/Google),
+ *    calls POST /api/v1/mcp/oauth/authorize, then redirects to localhost with ?code=...
+ * 4. CLI exchanges the code for an API key (POST /api/v1/mcp/oauth/token)
+ * 5. Uses the API key to get a JWT (POST /api/v1/mcp/auth)
+ * 6. Saves the JWT to ~/.botuyo/credentials.json
+ *
+ * For terminal-only login (email/password), use `npx @botuyo/mcp login` instead.
+ */
+import http from 'http';
+import { URL } from 'url';
+import { execSync } from 'child_process';
+import { readCredentials, saveCredentials } from './credentials.js';
+import os from 'os';
+const ADMIN_URL = process.env.BOTUYO_ADMIN_URL || 'https://admin.botuyo.com';
+const API_URL = process.env.BOTUYO_API_URL || 'https://api.botuyo.com';
+export async function runAuth(args) {
+    console.log('\n🤖 BotUyo MCP — Autenticación por Browser\n');
+    const existing = await readCredentials();
+    if (existing && !args.includes('--force')) {
+        const expired = existing.expiresAt && new Date(existing.expiresAt) < new Date();
+        if (!expired) {
+            console.log(`✅ Ya estás autenticado como: ${existing.email || 'usuario'}`);
+            console.log(`   Tenant: ${existing.tenantName} (${existing.role})`);
+            console.log('\n   Usá --force para re-autenticarte.');
+            console.log('   O usá `npx @botuyo/mcp login` para login por terminal.\n');
+            return;
+        }
+        console.log('⚠️  Tu sesión expiró. Vamos a re-autenticarte.\n');
+    }
+    // Start local callback server
+    const { port, waitForCode } = await startCallbackServer();
+    const redirectUri = `http://localhost:${port}/callback`;
+    const deviceName = encodeURIComponent(`${os.hostname()} CLI`);
+    const authUrl = `${ADMIN_URL}/mcp-auth?redirect=${encodeURIComponent(redirectUri)}&device=${deviceName}`;
+    console.log(`📋 Abriendo browser para autorizar...\n   ${authUrl}\n`);
+    openBrowser(authUrl);
+    console.log('Esperando autorización (10 minutos máximo)...\n');
+    const code = await waitForCode;
+    if (!code) {
+        console.error('❌ La autorización expiró o fue cancelada.');
+        process.exit(1);
+    }
+    console.log('✅ Código de autorización recibido! Intercambiando por credenciales...');
+    // Exchange code for API key
+    const tokenRes = await fetch(`${API_URL}/api/v1/mcp/oauth/token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ code, name: `${os.hostname()} CLI` })
+    });
+    const tokenData = (await tokenRes.json());
+    if (!tokenData.success) {
+        console.error(`❌ Intercambio de token fallido: ${tokenData.error}`);
+        process.exit(1);
+    }
+    const apiKey = tokenData.data.key;
+    const tenantId = tokenData.data.tenantId;
+    const tenantName = tokenData.data.tenantName;
+    const role = tokenData.data.role;
+    // Now use the API key to get a JWT
+    console.log('⏳ Obteniendo sesión JWT...');
+    const authRes = await fetch(`${API_URL}/api/v1/mcp/auth`, {
+        method: 'POST',
+        headers: {
+            'x-api-key': apiKey,
+            'Content-Type': 'application/json'
+        }
+    });
+    const authData = (await authRes.json());
+    if (!authData.success) {
+        console.error(`❌ Error al obtener JWT: ${authData.error}`);
+        process.exit(1);
+    }
+    const creds = {
+        token: authData.data.token,
+        tenantId,
+        tenantName: tenantName || tenantId,
+        role: role || authData.data.role || 'viewer',
+        email: authData.data.callerEmail || '',
+        savedAt: new Date().toISOString(),
+        expiresAt: new Date(Date.now() + 1 * 60 * 60 * 1000).toISOString() // JWT from MCP auth = 1h
+    };
+    await saveCredentials(creds);
+    console.log(`\n✅ ¡Autenticado exitosamente!`);
+    console.log(`   Tenant:  ${creds.tenantName}`);
+    console.log(`   Role:    ${creds.role}`);
+    console.log(`   Email:   ${creds.email || '(no disponible)'}`);
+    console.log(`\n🚀 Ya podés usar el servidor MCP de BotUyo.\n`);
+}
+// ── Local callback server ─────────────────────────────────────────────────────
+function startCallbackServer() {
+    return new Promise((resolve) => {
+        let resolveCode;
+        const waitForCode = new Promise((res) => {
+            resolveCode = res;
+        });
+        const server = http.createServer((req, res) => {
+            const url = new URL(req.url || '/', `http://localhost`);
+            if (url.pathname === '/callback') {
+                const code = url.searchParams.get('code');
+                const html = code
+                    ? `<html><body style="font-family:sans-serif;text-align:center;padding:80px">
+              <h2>✅ BotUyo CLI Autorizado</h2>
+              <p>Podés cerrar esta pestaña y volver a la terminal.</p>
+             </body></html>`
+                    : `<html><body style="font-family:sans-serif;text-align:center;padding:80px">
+              <h2>❌ Autorización fallida</h2>
+              <p>No se recibió el código. Intentá de nuevo.</p>
+             </body></html>`;
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(html);
+                server.close();
+                resolveCode(code);
+            }
+            else {
+                res.writeHead(404);
+                res.end();
+            }
+        });
+        server.listen(0, 'localhost', () => {
+            const port = server.address().port;
+            // Timeout after 10 minutes
+            setTimeout(() => { server.close(); resolveCode(null); }, 10 * 60 * 1000);
+            resolve({ port, waitForCode });
+        });
+    });
+}
+// ── Open browser cross-platform ───────────────────────────────────────────────
+function openBrowser(url) {
+    const platform = process.platform;
+    try {
+        if (platform === 'win32')
+            execSync(`start "" "${url}"`, { stdio: 'ignore' });
+        else if (platform === 'darwin')
+            execSync(`open "${url}"`, { stdio: 'ignore' });
+        else
+            execSync(`xdg-open "${url}"`, { stdio: 'ignore' });
+    }
+    catch {
+        console.log(`   No se pudo abrir el browser automáticamente. Visitá:\n   ${url}\n`);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAA;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAqB,MAAM,kBAAkB,CAAA;AACtF,OAAO,EAAE,MAAM,IAAI,CAAA;AAEnB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAA;AAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,wBAAwB,CAAA;AAEtE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAA;IAE5D,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAA;IACxC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,CAAA;QAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAA;YAC1E,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAA;YACnE,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAA;YACrD,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAA;YAC1E,OAAM;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAA;IACjE,CAAC;IAED,8BAA8B;IAC9B,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAA;IACzD,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAA;IACvD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE7D,MAAM,OAAO,GAAG,GAAG,SAAS,sBAAsB,kBAAkB,CAAC,WAAW,CAAC,WAAW,UAAU,EAAE,CAAA;IAExG,OAAO,CAAC,GAAG,CAAC,6CAA6C,OAAO,IAAI,CAAC,CAAA;IACrE,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;IAE9D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAA;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAA;IAEpF,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,yBAAyB,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;KAC7D,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;IAEhD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,mCAAmC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAA;IACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAA;IACxC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAA;IAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAA;IAEhC,mCAAmC;IACnC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,kBAAkB,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,WAAW,EAAE,MAAM;YACnB,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAQ,CAAA;IAE9C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,2BAA2B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAsB;QAC/B,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK;QAC1B,QAAQ;QACR,UAAU,EAAE,UAAU,IAAI,QAAQ;QAClC,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC5C,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE;QACtC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,yBAAyB;KAC7F,CAAA;IAED,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;IAE5B,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;IAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;IAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACxC,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC,CAAA;IAC9D,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;AAChE,CAAC;AAED,iFAAiF;AACjF,SAAS,mBAAmB;IAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,WAA0C,CAAA;QAE9C,MAAM,WAAW,GAAG,IAAI,OAAO,CAAgB,CAAC,GAAG,EAAE,EAAE;YACrD,WAAW,GAAG,GAAG,CAAA;QACnB,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;YAEvD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAEzC,MAAM,IAAI,GAAG,IAAI;oBACf,CAAC,CAAC;;;4BAGgB;oBAClB,CAAC,CAAC;;;4BAGgB,CAAA;gBAEpB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAEb,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,WAAY,CAAC,IAAI,CAAC,CAAA;YACpB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAU,CAAC,IAAI,CAAA;YAC3C,2BAA2B;YAC3B,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,WAAY,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;YACxE,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,OAAO;YAAE,QAAQ,CAAC,aAAa,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;aACvE,IAAI,QAAQ,KAAK,QAAQ;YAAE,QAAQ,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;;YACzE,QAAQ,CAAC,aAAa,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,+DAA+D,GAAG,IAAI,CAAC,CAAA;IACrF,CAAC;AACH,CAAC"}

package/dist/commands/credentials.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Credential storage for @botuyo/mcp
+ * Saves/reads JWT tokens to/from ~/.botuyo/credentials.json
+ */
+export interface BotuyoCredentials {
+    token: string;
+    tenantId: string;
+    tenantName: string;
+    role: string;
+    email: string;
+    savedAt: string;
+    expiresAt: string;
+}
+export declare function readCredentials(): Promise<BotuyoCredentials | null>;
+export declare function saveCredentials(creds: BotuyoCredentials): Promise<void>;
+export declare function clearCredentials(): Promise<void>;
+/**
+ * Resolve the JWT token to use, in priority order:
+ * 1. BOTUYO_TOKEN env var
+ * 2. ~/.botuyo/credentials.json
+ *
+ * Returns null if no token or if expired.
+ */
+export declare function resolveToken(): Promise<string | null>;
+/**
+ * Check if stored credentials are expired
+ */
+export declare function isTokenExpired(): Promise<boolean>;

package/dist/commands/credentials.js

@@ -0,0 +1,59 @@
+/**
+ * Credential storage for @botuyo/mcp
+ * Saves/reads JWT tokens to/from ~/.botuyo/credentials.json
+ */
+import { readFile, writeFile, mkdir, unlink } from 'fs/promises';
+import { join } from 'path';
+import { homedir } from 'os';
+const CONFIG_DIR = join(homedir(), '.botuyo');
+const CREDENTIALS_FILE = join(CONFIG_DIR, 'credentials.json');
+export async function readCredentials() {
+    try {
+        const raw = await readFile(CREDENTIALS_FILE, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function saveCredentials(creds) {
+    await mkdir(CONFIG_DIR, { recursive: true });
+    await writeFile(CREDENTIALS_FILE, JSON.stringify(creds, null, 2), 'utf8');
+}
+export async function clearCredentials() {
+    try {
+        await unlink(CREDENTIALS_FILE);
+    }
+    catch {
+        // already gone
+    }
+}
+/**
+ * Resolve the JWT token to use, in priority order:
+ * 1. BOTUYO_TOKEN env var
+ * 2. ~/.botuyo/credentials.json
+ *
+ * Returns null if no token or if expired.
+ */
+export async function resolveToken() {
+    if (process.env.BOTUYO_TOKEN)
+        return process.env.BOTUYO_TOKEN;
+    const creds = await readCredentials();
+    if (!creds?.token)
+        return null;
+    // Check if expired
+    if (creds.expiresAt && new Date(creds.expiresAt) < new Date()) {
+        return null; // expired
+    }
+    return creds.token;
+}
+/**
+ * Check if stored credentials are expired
+ */
+export async function isTokenExpired() {
+    const creds = await readCredentials();
+    if (!creds?.expiresAt)
+        return true;
+    return new Date(creds.expiresAt) < new Date();
+}
+//# sourceMappingURL=credentials.js.map

package/dist/commands/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/commands/credentials.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;AAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;AAY7D,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;QACpD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAwB;IAC5D,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAE7D,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,KAAK;QAAE,OAAO,IAAI,CAAA;IAE9B,mBAAmB;IACnB,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAA,CAAC,UAAU;IACxB,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAA;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,SAAS;QAAE,OAAO,IAAI,CAAA;IAClC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,CAAA;AAC/C,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+/**
+ * @botuyo/mcp login command
+ *
+ * Usage: npx @botuyo/mcp login
+ *
+ * Flow:
+ * 1. Prompts for email and password in the terminal
+ * 2. Calls POST /api/auth/login to get a JWT
+ * 3. Calls GET /api/auth/me to get the user's tenants
+ * 4. If multiple tenants, asks the user to pick one
+ * 5. If needed, calls POST /api/auth/switch-tenant
+ * 6. Saves the credentials to ~/.botuyo/credentials.json
+ */
+export declare function runLogin(args: string[]): Promise<void>;