@tarileo/avileo-catalog-cli 0.3.1 → 0.3.3

package/dist/index.js

@@ -14605,7 +14605,7 @@ function isRetryableStatus(status2) {
 function requestIdFrom(response, payload) {
   return payload?.requestId ?? response.headers.get("x-request-id") ?? void 0;
 }
-function agentError(response, payload) {
+function agentError(response, payload, retry) {
   const code = payload?.code ?? "AGENT_REQUEST_FAILED";
   const message = payload?.message ?? "La API de Avileo devolvi\xF3 una respuesta inv\xE1lida";
   const options = {
@@ -14613,7 +14613,7 @@ function agentError(response, payload) {
     status: response.status,
     ...payload?.details === void 0 ? {} : { details: payload.details },
     ...requestIdFrom(response, payload) === void 0 ? {} : { requestId: requestIdFrom(response, payload) },
-    retryable: isRetryableStatus(response.status)
+    retryable: retry && isRetryableStatus(response.status)
   };
   if (response.status === 401 || code === "UNAUTHORIZED") {
     return new AgentAuthenticationError(message, options);
@@ -14656,16 +14656,18 @@ var AgentHttpClient = class {
   constructor(config2) {
     this.#apiKey = configuredApiKey(config2);
     this.#baseUrl = (config2.baseUrl ?? AVILEO_AGENT_API_URL).replace(/\/$/, "");
-    this.#fetchImpl = config2.fetch ?? fetch;
+    this.#fetchImpl = config2.fetch ?? ((...args) => fetch(...args));
     this.#timeoutMs = config2.timeoutMs;
   }
   request(path, options = {}) {
-    return this.perform(path, options, options.mutation ? crypto.randomUUID() : void 0);
+    return this.perform(path, options);
   }
-  async perform(path, options, operationId) {
+  async perform(path, options = {}) {
     const url2 = `${this.#baseUrl}${path}`;
     const formData = options.body instanceof FormData ? options.body : void 0;
     const body = options.body === void 0 ? void 0 : formData ?? JSON.stringify(options.body);
+    const idempotencyKey = options.dispatchIdempotency ? crypto.randomUUID() : void 0;
+    const retry = options.retry !== false;
     for (let attempt = 0; attempt < 3; attempt += 1) {
       const abort = createAbortSignal(this.#timeoutMs);
       let response;
@@ -14674,8 +14676,8 @@ var AgentHttpClient = class {
           method: options.method ?? "GET",
           headers: {
             ...formData || options.body === void 0 ? {} : { "content-type": "application/json" },
-            ...operationId ? { "idempotency-key": operationId } : {},
             ...options.approvalId ? { "x-avileo-approval-id": options.approvalId } : {},
+            ...idempotencyKey ? { "idempotency-key": idempotencyKey } : {},
             ...this.#apiKey ? { "x-avileo-agent-key": this.#apiKey } : {}
           },
           body,
@@ -14683,18 +14685,18 @@ var AgentHttpClient = class {
         });
       } catch {
         abort.cancel();
-        if (attempt < 2) {
+        if (retry && attempt < 2) {
           await new Promise((resolve) => setTimeout(resolve, retryDelayMs(attempt)));
           continue;
         }
         throw new AgentNetworkError("No se pudo conectar con la API de Avileo", {
           code: "NETWORK_ERROR",
           status: 0,
-          retryable: true
+          retryable: retry
         });
       }
       abort.cancel();
-      if (isRetryableStatus(response.status) && attempt < 2) {
+      if (retry && isRetryableStatus(response.status) && attempt < 2) {
         await new Promise((resolve) => setTimeout(resolve, retryDelayMs(attempt, response)));
         continue;
       }
@@ -14706,12 +14708,12 @@ var AgentHttpClient = class {
           code: "INVALID_RESPONSE",
           status: response.status,
           requestId: response.headers.get("x-request-id") ?? void 0,
-          retryable: isRetryableStatus(response.status)
+          retryable: retry && isRetryableStatus(response.status)
         });
       }
       const failure = errorPayload(payload);
       if (failure || !response.ok || !successPayload(payload)) {
-        throw agentError(response, failure);
+        throw agentError(response, failure, retry);
       }
       return payload.data;
     }
@@ -15304,6 +15306,14 @@ var AgentPaymentLinkPageSchema = external_exports.object({
   items: external_exports.array(AgentPaymentLinkDtoSchema),
   total: external_exports.number().int().nonnegative()
 }).strict();
+var AGENT_PAYMENT_METHODS = ["yape", "plin", "transferencia"];
+var AgentPaymentMethodSchema = external_exports.enum(AGENT_PAYMENT_METHODS);
+var AgentPaymentMethodDtoSchema = external_exports.object({
+  id: uuidSchema,
+  metodo: AgentPaymentMethodSchema,
+  qrRenderUrl: external_exports.string().nullable(),
+  habilitado: external_exports.boolean()
+}).strict();
 var AGENT_DEVICE_AUTH_STATUSES = ["pending", "approved", "denied", "expired"];
 var AGENT_DEVICE_AUTH_DEFAULT_PERMISSIONS = [
   ...AGENT_KEY_READ_ACTIONS
@@ -15328,7 +15338,8 @@ var AvileoAgentDeviceAuthClient = class {
   async start(input = {}) {
     return this.http.request("/api/v1/agent-auth/device", {
       method: "POST",
-      body: input
+      body: input,
+      retry: false
     });
   }
   async poll(deviceCode) {
@@ -15381,7 +15392,7 @@ var AgentProductsResource = class {
     return this.http.request("/api/v1/agent/catalog/products", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15389,14 +15400,14 @@ var AgentProductsResource = class {
     return this.http.request(`/api/v1/agent/catalog/products/${encodeURIComponent(productId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   deactivate(productId, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/deactivate`,
-      { method: "POST", mutation: true, approvalId }
+      { method: "POST", dispatchIdempotency: true, approvalId }
     );
   }
 };
@@ -15416,27 +15427,27 @@ var AgentVariantsResource = class {
   create(productId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/variants`,
-      { method: "POST", body: input, mutation: true, approvalId }
+      { method: "POST", body: input, dispatchIdempotency: true, approvalId }
     );
   }
   update(variantId, input, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   deactivate(variantId, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/deactivate`,
-      { method: "POST", mutation: true, approvalId }
+      { method: "POST", dispatchIdempotency: true, approvalId }
     );
   }
   reorder(productId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/variants/reorder`,
-      { method: "POST", body: input, mutation: true, approvalId }
+      { method: "POST", body: input, dispatchIdempotency: true, approvalId }
     );
   }
 };
@@ -15455,7 +15466,7 @@ var AgentCategoriesResource = class {
     return this.http.request("/api/v1/agent/catalog/categories", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15463,14 +15474,14 @@ var AgentCategoriesResource = class {
     return this.http.request(`/api/v1/agent/catalog/categories/${encodeURIComponent(categoryId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   delete(categoryId, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/categories/${encodeURIComponent(categoryId)}`, {
       method: "DELETE",
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15490,7 +15501,7 @@ var AgentTagsResource = class {
     return this.http.request("/api/v1/agent/catalog/tags", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15498,14 +15509,14 @@ var AgentTagsResource = class {
     return this.http.request(`/api/v1/agent/catalog/tags/${encodeURIComponent(tagId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   delete(tagId, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/tags/${encodeURIComponent(tagId)}`, {
       method: "DELETE",
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15527,7 +15538,7 @@ var AgentAssetsResource = class {
     return this.http.request("/api/v1/agent/catalog/assets/upload", {
       method: "POST",
       body,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15535,7 +15546,7 @@ var AgentAssetsResource = class {
     return this.http.request("/api/v1/agent/catalog/assets/import", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15558,13 +15569,13 @@ var AgentInventoryResource = class {
   adjust(variantId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/inventory/adjust`,
-      { method: "POST", body: input, mutation: true, approvalId }
+      { method: "POST", body: input, dispatchIdempotency: true, approvalId }
     );
   }
   set(variantId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/inventory`,
-      { method: "PUT", body: input, mutation: true, approvalId }
+      { method: "PUT", body: input, dispatchIdempotency: true, approvalId }
     );
   }
 };
@@ -15577,7 +15588,7 @@ var AgentImportsResource = class {
     return this.http.request("/api/v1/agent/catalog/imports/preview", {
       method: "POST",
       body: input,
-      mutation: true
+      dispatchIdempotency: true
     });
   }
   apply(importId, approvalId) {
@@ -15585,7 +15596,7 @@ var AgentImportsResource = class {
       `/api/v1/agent/catalog/imports/${encodeURIComponent(importId)}/apply`,
       {
         method: "POST",
-        mutation: true,
+        dispatchIdempotency: true,
         approvalId
       }
     );
@@ -15602,8 +15613,7 @@ var AgentOperationsResource = class {
   propose(input) {
     return this.http.request("/api/v1/agent/operations", {
       method: "POST",
-      body: input,
-      mutation: true
+      body: input
     });
   }
   proposeClientKey(name) {
@@ -15618,11 +15628,45 @@ var AgentOperationsResource = class {
   apply(operationId) {
     return this.http.request(`/api/v1/agent/operations/${encodeURIComponent(operationId)}/apply`, {
       method: "POST",
-      mutation: true,
       approvalId: operationId
     });
   }
 };
+var AgentPaymentMethodListSchema = external_exports.array(AgentPaymentMethodDtoSchema);
+var AgentPaymentMethodsResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Lists the payment methods with their QR render info. */
+  list() {
+    return this.http.request("/api/v1/agent/payment-methods").then((response) => AgentPaymentMethodListSchema.parse(response));
+  }
+};
+var AgentPaymentLinkPublicMethodSchema = external_exports.object({
+  phone: external_exports.string().optional(),
+  accountNumber: external_exports.string().optional(),
+  accountName: external_exports.string(),
+  bank: external_exports.string().optional(),
+  cci: external_exports.string().optional(),
+  qrUrl: external_exports.string().nullable()
+}).strict();
+var AgentPaymentLinkPublicViewSchema = external_exports.object({
+  businessName: external_exports.string(),
+  amountMinor: external_exports.number().int().positive(),
+  currency: external_exports.string().length(3),
+  concept: external_exports.string().nullable(),
+  expectedMethod: AgentPaymentLinkExpectedMethodSchema,
+  status: AgentPaymentLinkStatusSchema,
+  methods: external_exports.object({
+    yape: AgentPaymentLinkPublicMethodSchema.optional(),
+    plin: AgentPaymentLinkPublicMethodSchema.optional(),
+    transferencia: AgentPaymentLinkPublicMethodSchema.optional()
+  }).strict(),
+  expiresAt: external_exports.string(),
+  proofAttempts: external_exports.number().int().nonnegative(),
+  maxProofAttempts: external_exports.number().int().positive()
+}).strict();
 var AgentPaymentLinksResource = class {
   constructor(http) {
     this.http = http;
@@ -15631,15 +15675,33 @@ var AgentPaymentLinksResource = class {
   /**
    * Creates a payment link. `amount` is in soles (major units); the backend
    * converts it to minor units — never convert it here. The URL is only
-   * non-null for the initial create response.
+   * non-null for the initial create response. Automatic retries require an
+   * explicit idempotencyKey; a replay can only return `url: null`.
    */
   create(input) {
     return this.http.request("/api/v1/agent/payment-links", {
       method: "POST",
       body: input,
-      mutation: true
+      retry: Boolean(input.idempotencyKey?.trim())
     }).then((response) => AgentCreatedPaymentLinkDtoSchema.parse(response));
   }
+  /**
+   * Fetches the public payer view of a link by its plaintext token (no agent
+   * credential required). Use it right after `create` to render the QR and
+   * per-method instructions in your own UI instead of redirecting the payer
+   * to the hosted page: `methods.<yape|plin|transferencia>.qrUrl` is a
+   * backend-resolved render URL ready for `<img src>`.
+   */
+  getPublicView(token) {
+    const trimmed = token.trim();
+    if (trimmed.length < 20 || trimmed.length > 128 || !/^lnk_[0-9A-Za-z]+$/.test(trimmed)) {
+      throw new AgentValidationError("Token de link de pago inv\xE1lido", {
+        code: "INVALID_PAYMENT_LINK_TOKEN",
+        status: 0
+      });
+    }
+    return this.http.request(`/api/v1/public/pagar/${encodeURIComponent(trimmed)}`).then((response) => AgentPaymentLinkPublicViewSchema.parse(response));
+  }
   /** Fetches a persisted link; `url` is always `null`. */
   get(paymentLinkId) {
     return this.http.request(`/api/v1/agent/payment-links/${encodeURIComponent(paymentLinkId)}`).then((response) => AgentPaymentLinkDtoSchema.parse(response));
@@ -15661,7 +15723,8 @@ function createAvileoAgent(config2) {
     assets: new AgentAssetsResource(http),
     inventory: new AgentInventoryResource(http),
     imports: new AgentImportsResource(http),
-    paymentLinks: new AgentPaymentLinksResource(http)
+    paymentLinks: new AgentPaymentLinksResource(http),
+    paymentMethods: new AgentPaymentMethodsResource(http)
   };
 }
 
@@ -15670,6 +15733,53 @@ import { chmodSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSy
 import { randomUUID } from "crypto";
 import { homedir } from "os";
 import { dirname, join } from "path";
+import { isIP } from "net";
+var LOCAL_IPV4_HOST_PATTERN = /^(?:127\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.|100\.(?:6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.)/;
+function isLocalHostname(hostname3) {
+  const host = hostname3.replace(/^\[|\]$/g, "").toLowerCase();
+  if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local")) return true;
+  if (host === "::1" || host === "::" || /^f[cd][0-9a-f]{2}:/.test(host)) return true;
+  if (host.includes(":")) return false;
+  if (!host.includes(".")) return true;
+  return isIP(host) === 4 && LOCAL_IPV4_HOST_PATTERN.test(host);
+}
+function normalizeApiBaseUrl(rawUrl) {
+  const candidate = rawUrl.trim().replace(/\/+$/, "");
+  if (!candidate) {
+    throw new CliOriginUnsupportedError("La URL base de la API est\xE1 vac\xEDa");
+  }
+  let parsed;
+  try {
+    parsed = new URL(candidate);
+  } catch {
+    throw new CliOriginUnsupportedError(`La URL base de la API no es v\xE1lida: ${candidate}`);
+  }
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    throw new CliOriginUnsupportedError(
+      `La URL base debe usar HTTPS (o HTTP local de desarrollo); se recibi\xF3 ${parsed.protocol}//`
+    );
+  }
+  if (parsed.protocol === "http:" && !isLocalHostname(parsed.hostname)) {
+    throw new CliOriginUnsupportedError(
+      "Solo se permite HTTP para hosts locales de desarrollo; usa un origen HTTPS"
+    );
+  }
+  if (parsed.username || parsed.password) {
+    throw new CliOriginUnsupportedError("La URL base no debe incluir credenciales embebidas");
+  }
+  if (parsed.search || parsed.hash) {
+    throw new CliOriginUnsupportedError("La URL base no debe incluir query ni fragmento");
+  }
+  return `${parsed.protocol}//${parsed.host}${parsed.pathname.replace(/\/+$/, "")}`;
+}
+function apiOrigin(baseUrl) {
+  const parsed = new URL(baseUrl);
+  return `${parsed.protocol}//${parsed.host}`;
+}
+function overrideBaseUrl(env) {
+  const raw = env.AVILEO_AGENT_BASE_URL?.trim();
+  return raw ? normalizeApiBaseUrl(raw) : void 0;
+}
 var AGENT_KEY_PATTERN = /^avileo_sk_[^\s]+$/;
 function normalizeAgentKey(value, message) {
   const key = value.trim();
@@ -15700,10 +15810,15 @@ function readLocalCredential(env = process.env) {
     throw new CliConfigurationError("La credencial local no es una Agent Key v\xE1lida");
   }
   const apiKey = normalizeAgentKey(record2.apiKey, "La credencial local no es una Agent Key v\xE1lida");
-  const baseUrl = typeof record2.baseUrl === "string" && record2.baseUrl.trim() ? record2.baseUrl.trim() : void 0;
-  return { apiKey, ...baseUrl ? { baseUrl } : {} };
+  if (typeof record2.baseUrl !== "string" || !record2.baseUrl.trim()) {
+    throw new CliConfigurationError(
+      "La credencial local no tiene un origen vinculado. Vuelve a autorizar con auth login --base-url <URL_DEL_PORTAL> antes de usarla."
+    );
+  }
+  return { apiKey, baseUrl: normalizeApiBaseUrl(record2.baseUrl) };
 }
 function resolveCredential(env = process.env) {
+  const override = overrideBaseUrl(env);
   const environmentValue = env.AVILEO_AGENT_API_KEY;
   if (environmentValue !== void 0) {
     return {
@@ -15712,31 +15827,29 @@ function resolveCredential(env = process.env) {
         "AVILEO_AGENT_API_KEY no es una Agent Key v\xE1lida"
       ),
       source: "environment",
-      ...env.AVILEO_AGENT_BASE_URL?.trim() ? { baseUrl: env.AVILEO_AGENT_BASE_URL.trim() } : {}
+      baseUrl: override ?? AVILEO_AGENT_API_URL
     };
   }
   const local = readLocalCredential(env);
   if (!local) return null;
-  return {
-    ...local,
-    source: "local",
-    ...env.AVILEO_AGENT_BASE_URL?.trim() ? { baseUrl: env.AVILEO_AGENT_BASE_URL.trim() } : {}
-  };
+  if (override && apiOrigin(local.baseUrl) !== apiOrigin(override)) {
+    throw new CliOriginConflictError(
+      `La credencial local est\xE1 vinculada al origen ${apiOrigin(local.baseUrl)}, pero AVILEO_AGENT_BASE_URL apunta a ${apiOrigin(override)}. La clave nunca se env\xEDa a otro origen: quita la variable de entorno o vuelve a autenticar con auth login --base-url ${apiOrigin(override)} para emitir una clave en ese origen.`
+    );
+  }
+  return { ...local, source: "local" };
 }
 function saveLocalCredential(credential, env = process.env) {
   const apiKey = normalizeAgentKey(
     credential.apiKey,
     "Solo se pueden guardar Agent Keys de Avileo"
   );
+  const baseUrl = normalizeApiBaseUrl(credential.baseUrl);
   const path = localCredentialPath(env);
   mkdirSync(dirname(path), { recursive: true, mode: 448 });
   const temporaryPath = `${path}.${randomUUID()}.tmp`;
-  writeFileSync(
-    temporaryPath,
-    `${JSON.stringify({ apiKey, ...credential.baseUrl ? { baseUrl: credential.baseUrl } : {} })}
-`,
-    { mode: 384 }
-  );
+  writeFileSync(temporaryPath, `${JSON.stringify({ apiKey, baseUrl })}
+`, { mode: 384 });
   chmodSync(temporaryPath, 384);
   renameSync(temporaryPath, path);
   chmodSync(path, 384);
@@ -15760,7 +15873,7 @@ function createClientFromEnvironment({
   }
   return clientFactory({
     apiKey: credential.apiKey,
-    ...credential.baseUrl ? { baseUrl: credential.baseUrl } : {}
+    baseUrl: credential.baseUrl
   });
 }
 var CliConfigurationError = class extends Error {
@@ -15770,6 +15883,20 @@ var CliConfigurationError = class extends Error {
     this.name = "CliConfigurationError";
   }
 };
+var CliOriginUnsupportedError = class extends CliConfigurationError {
+  code = "CLI_ORIGIN_UNSUPPORTED";
+  constructor(message) {
+    super(message);
+    this.name = "CliOriginUnsupportedError";
+  }
+};
+var CliOriginConflictError = class extends CliConfigurationError {
+  code = "CLI_ORIGIN_CONFLICT";
+  constructor(message) {
+    super(message);
+    this.name = "CliOriginConflictError";
+  }
+};
 
 // src/output.ts
 var CliProtocolError = class extends Error {
@@ -16426,9 +16553,15 @@ async function openVerificationUri(uri) {
   }
   return false;
 }
+function resolveSelectedBaseUrl(options) {
+  const explicit = options.baseUrl?.trim();
+  if (explicit) return normalizeApiBaseUrl(explicit);
+  const fromEnvironment = options.env.AVILEO_AGENT_BASE_URL?.trim();
+  return fromEnvironment ? normalizeApiBaseUrl(fromEnvironment) : AVILEO_AGENT_API_URL;
+}
 async function login(options) {
-  const baseUrl = options.env.AVILEO_AGENT_BASE_URL?.trim();
-  const deviceAuth = options.deviceAuthFactory(baseUrl ? { baseUrl } : {});
+  const baseUrl = resolveSelectedBaseUrl(options);
+  const deviceAuth = options.deviceAuthFactory({ baseUrl });
   const start = await deviceAuth.start({ name: "Avileo CLI" });
   const browserOpened = await options.openBrowser(start.verificationUri);
   process.stderr.write(
@@ -16438,46 +16571,58 @@ async function login(options) {
   const expiresAt = Date.parse(start.expiresAt);
   const deadline = Number.isFinite(expiresAt) ? expiresAt : Date.now() + 10 * 60 * 1e3;
   while (Date.now() < deadline) {
-    const result = await deviceAuth.poll(start.deviceCode);
+    let result;
+    try {
+      result = await deviceAuth.poll(start.deviceCode);
+    } catch (error51) {
+      if (error51 instanceof AgentError && error51.code === "AGENT_DEVICE_AUTH_CONSUMED") {
+        throw new AgentConflictError(
+          `${error51.message} La clave solo se entrega una vez y no se puede recuperar. Revoca la clave de este intento en Mis agentes y ejecuta \xABavileo auth login\xBB nuevamente. Tu credencial local anterior no se modific\xF3.`,
+          {
+            code: error51.code,
+            status: error51.status,
+            details: error51.details,
+            requestId: error51.requestId
+          }
+        );
+      }
+      if (error51 instanceof AgentError && error51.code === "NETWORK_ERROR") {
+        throw new CliProtocolError(
+          "CLI_AUTH_DELIVERY_UNCERTAIN",
+          "No se pudo confirmar la entrega de la clave. Revisa Mis agentes y revoca la clave de este intento si aparece; luego ejecuta \xABavileo auth login\xBB nuevamente. Tu credencial local anterior no se modific\xF3."
+        );
+      }
+      throw error51;
+    }
     if (result.status === "pending") {
       const remaining = Math.max(0, deadline - Date.now());
       await sleep(Math.min(Math.max(250, start.pollInterval * 1e3), remaining));
       continue;
     }
     if (result.status === "denied" || result.status === "expired") {
-      emitSuccess(safeFinalResult(start, browserOpened, result));
+      emitSuccess({ ...safeFinalResult(start, browserOpened, result), baseUrl });
       return;
     }
     if (!result.agentKey || !result.keyId || !result.businessId) {
       throw new CliProtocolError(
         "CLI_AUTH_ERROR",
-        "La autorizaci\xF3n aprobada no devolvi\xF3 una credencial v\xE1lida"
+        "La autorizaci\xF3n aprobada no devolvi\xF3 una credencial v\xE1lida. Revoca la clave de este intento en Mis agentes y ejecuta \xABavileo auth login\xBB nuevamente. Tu credencial local anterior no se modific\xF3."
       );
     }
-    saveLocalCredential(
-      {
-        apiKey: result.agentKey,
-        ...baseUrl ? { baseUrl } : {}
-      },
-      options.env
-    );
-    emitSuccess(safeFinalResult(start, browserOpened, result));
+    saveLocalCredential({ apiKey: result.agentKey, baseUrl }, options.env);
+    emitSuccess({ ...safeFinalResult(start, browserOpened, result), baseUrl });
     return;
   }
   throw new CliProtocolError("CLI_AUTH_TIMEOUT", "La autorizaci\xF3n expir\xF3 antes de ser aprobada");
 }
 async function configure(options) {
+  const baseUrl = resolveSelectedBaseUrl(options);
   const apiKey = await options.readSecret("Agent Key de Avileo (no se mostrar\xE1): ");
-  saveLocalCredential(
-    {
-      apiKey,
-      ...options.env.AVILEO_AGENT_BASE_URL?.trim() ? { baseUrl: options.env.AVILEO_AGENT_BASE_URL.trim() } : {}
-    },
-    options.env
-  );
+  saveLocalCredential({ apiKey, baseUrl }, options.env);
   emitSuccess({
     configured: true,
     source: "local",
+    baseUrl,
     credentialPath: localCredentialPath(options.env)
   });
 }
@@ -16498,7 +16643,7 @@ async function status(options) {
   emitSuccess({
     configured: true,
     source: credential.source,
-    credentialPath: credential.source === "local" ? localCredentialPath(options.env) : void 0,
+    baseUrl: credential.baseUrl ?? AVILEO_AGENT_API_URL,
     business,
     ...businessLookupError ? { businessLookupError } : {}
   });
@@ -16514,8 +16659,15 @@ async function logout(options) {
 }
 function registerAuthCommands(root, options) {
   const auth = root.command("auth").description("Conecta la CLI con Avileo sin copiar claves en el chat");
-  auth.command("configure").description("Guarda una Agent Key existente sin mostrarla en pantalla").action(() => configure(options));
-  auth.command("login").description("Autoriza esta CLI mediante un link temporal").action(() => login(options));
+  auth.command("configure").description("Guarda una Agent Key existente sin mostrarla en pantalla").option("--base-url <url>", "Origen de la API donde se usar\xE1 la clave").action(
+    (commandOptions) => configure({ ...options, baseUrl: commandOptions.baseUrl })
+  );
+  auth.command("login").description("Autoriza esta CLI mediante un link temporal").option(
+    "--base-url <url>",
+    "Origen de la API a vincular; tiene prioridad sobre AVILEO_AGENT_BASE_URL"
+  ).action(
+    (commandOptions) => login({ ...options, baseUrl: commandOptions.baseUrl })
+  );
   auth.command("status").description("Muestra el estado de la credencial sin revelar secretos").action(() => status(options));
   auth.command("logout").description("Elimina solamente la credencial local").action(() => logout(options));
 }