alegra-data-agent 0.1.0 → 0.2.1

package/dist/auth.js

@@ -1,8 +1,8 @@
+import { spawn } from "node:child_process";
+import { randomBytes, timingSafeEqual } from "node:crypto";
 import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { createServer } from "node:http";
 import { dirname } from "node:path";
-import { spawn } from "node:child_process";
-import { randomBytes, timingSafeEqual } from "node:crypto";
 import { GATEWAY_URL, getAuthFilePath } from "./lib.js";
 function decodeJwtEmail(jwt) {
     const parts = jwt.split(".");
@@ -39,7 +39,7 @@ export function readAuth() {
 export function writeAuth(record) {
     const path = getAuthFilePath();
     mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, JSON.stringify(record, null, 2) + "\n", "utf-8");
+    writeFileSync(path, `${JSON.stringify(record, null, 2)}\n`, "utf-8");
     try {
         chmodSync(path, 0o600);
     }
@@ -54,6 +54,31 @@ export function clearAuth() {
 export function hasAuth() {
     return readAuth() !== null;
 }
+function decodeJwtExp(jwt) {
+    const parts = jwt.split(".");
+    if (parts.length !== 3)
+        return null;
+    try {
+        const padded = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+        const payload = JSON.parse(Buffer.from(padded, "base64").toString("utf-8"));
+        return typeof payload.exp === "number" ? payload.exp : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function isAuthExpired(record) {
+    if (!record)
+        return true;
+    const exp = decodeJwtExp(record.token);
+    if (exp === null)
+        return false;
+    return Date.now() >= exp * 1000 - 60_000;
+}
+export function hasValidAuth() {
+    const record = readAuth();
+    return record !== null && !isAuthExpired(record);
+}
 export async function performBrowserLogin(timeoutMs = 5 * 60 * 1000) {
     const state = randomBytes(24).toString("hex");
     return new Promise((resolve, reject) => {
@@ -139,7 +164,7 @@ export async function performBrowserLogin(timeoutMs = 5 * 60 * 1000) {
             }
         });
         server.listen(0, "127.0.0.1", () => {
-            const address = server.address();
+            const address = server?.address();
             if (typeof address !== "object" || !address) {
                 cleanup();
                 reject(new Error("No se pudo determinar el puerto."));
@@ -150,26 +175,21 @@ export async function performBrowserLogin(timeoutMs = 5 * 60 * 1000) {
             authUrl.searchParams.set("port", String(port));
             authUrl.searchParams.set("state", state);
             const u = authUrl.toString();
-            process.stdout.write("\n" +
-                "  ╭────────────────────────────────────────────────────────────╮\n" +
-                "  │  Inicia sesión con tu cuenta @alegra.com en el navegador   │\n" +
-                "  ╰────────────────────────────────────────────────────────────╯\n" +
-                "\n" +
-                "  Intento abrir tu navegador. Si no se abre solo, copia toda\n" +
-                "  esta URL (triple-click selecciona la línea completa) y\n" +
-                "  pégala en tu navegador:\n" +
-                "\n" +
-                "  ────────────────────────────────────────────────────────────\n" +
-                `${u}\n` +
-                "  ────────────────────────────────────────────────────────────\n" +
-                "\n" +
-                `  Esperando hasta ${Math.round(timeoutMs / 1000)}s a que completes el login…\n` +
-                "\n");
+            process.stdout.write(`\n  Abrí esta URL para iniciar sesión con tu cuenta @alegra.com:\n\n${u}\n\n  Si el navegador no se abrió solo: copiá la URL de arriba y pegala en tu navegador.\n  Esperando hasta ${Math.round(timeoutMs / 1000)}s…\n\n`);
+            try {
+                process.stdout._flush?.();
+            }
+            catch {
+            }
             openBrowser(u);
+            const nudgeTimer = setTimeout(() => {
+                if (resolved)
+                    return;
+                process.stdout.write(`\n  ¿No se abrió el navegador? Copiá esta URL y pegala manualmente:\n\n${u}\n\n`);
+            }, 8000);
             timer = setTimeout(() => {
-                safeReject(new Error(`Timeout: pasaron ${Math.round(timeoutMs / 1000)}s sin recibir la auth. ` +
-                    "Si abriste el link en otra máquina sin conexión al CLI, debes correr el comando " +
-                    "desde la misma máquina donde abrirás el browser. Reintenta."));
+                clearTimeout(nudgeTimer);
+                safeReject(new Error(`Timeout: pasaron ${Math.round(timeoutMs / 1000)}s sin recibir la auth.\n\nSi el navegador no se abrió, copiá esta URL manualmente en tu navegador y completá el login:\n\n${u}\n\nSi abriste el link en otra máquina sin conexión al CLI, debés correr el comando desde la misma máquina donde abrirás el navegador.`));
             }, timeoutMs);
         });
     });
@@ -204,6 +224,7 @@ function openBrowser(url) {
             args: ["url.dll,FileProtocolHandler", url],
         });
         candidates.push({ cmd: "cmd.exe", args: ["/c", "start", '""', `"${url}"`] });
+        candidates.push({ cmd: "wslview", args: [url] });
         candidates.push({ cmd: "xdg-open", args: [url] });
     }
     else {

package/dist/colors.js

@@ -1,7 +1,5 @@
-const SUPPORTS_COLOR = process.stdout.isTTY &&
-    process.env.TERM !== "dumb" &&
-    process.env.NO_COLOR === undefined;
-const wrap = (open, close) => (s) => (SUPPORTS_COLOR ? `${open}${s}${close}` : String(s));
+const SUPPORTS_COLOR = process.stdout.isTTY && process.env.TERM !== "dumb" && process.env.NO_COLOR === undefined;
+const wrap = (open, close) => (s) => SUPPORTS_COLOR ? `${open}${s}${close}` : String(s);
 export const bold = wrap("\x1b[1m", "\x1b[22m");
 export const dim = wrap("\x1b[2m", "\x1b[22m");
 export const red = wrap("\x1b[31m", "\x1b[39m");
@@ -19,17 +17,17 @@ export function write(s) {
     process.stdout.write(s);
 }
 export function log(s = "") {
-    process.stdout.write(s + "\n");
+    process.stdout.write(`${s}\n`);
 }
 export function logError(s) {
-    process.stderr.write(red("✗ ") + s + "\n");
+    process.stderr.write(`${red("✗ ") + s}\n`);
 }
 export function logWarn(s) {
-    process.stdout.write(yellow("⚠ ") + s + "\n");
+    process.stdout.write(`${yellow("⚠ ") + s}\n`);
 }
 export function logOk(s) {
-    process.stdout.write(green("✓ ") + s + "\n");
+    process.stdout.write(`${green("✓ ") + s}\n`);
 }
 export function logInfo(s) {
-    process.stdout.write(cyan("ℹ ") + s + "\n");
+    process.stdout.write(`${cyan("ℹ ") + s}\n`);
 }

package/dist/commands/check.js

@@ -1,7 +1,7 @@
 import { fetchManifest } from "../api.js";
-import { detectDrift } from "../installer.js";
 import { hasAuth } from "../auth.js";
 import { bold, cyan, dim, yellow } from "../colors.js";
+import { detectDrift } from "../installer.js";
 import { COMMAND_NAME } from "../lib.js";
 export async function runCheck() {
     try {

package/dist/commands/hook.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { COMMAND_NAME, getClaudeSettingsPath, getPackageVersion, PRODUCT_NAME, } from "../lib.js";
 import { logError, logOk, logWarn } from "../colors.js";
+import { COMMAND_NAME, PRODUCT_NAME, getClaudeSettingsPath, getPackageVersion } from "../lib.js";
 function hookCommandFor(mode) {
     const v = getPackageVersion();
     const parts = v.split(".");
@@ -8,7 +8,7 @@ function hookCommandFor(mode) {
     const minor = parts[1] ?? "0";
     const range = `~${major}.${minor}.0`;
     const verb = mode === "auto" ? "update --yes" : "check";
-    return `pnpm dlx ${COMMAND_NAME}@${range} ${verb}`;
+    return `pnpm dlx --config.minimumReleaseAge=0 ${COMMAND_NAME}@${range} ${verb}`;
 }
 const HOOK_SIGNATURE = COMMAND_NAME;
 function readSettings() {
@@ -24,7 +24,7 @@ function readSettings() {
     }
 }
 function writeSettings(s) {
-    writeFileSync(getClaudeSettingsPath(), JSON.stringify(s, null, 2) + "\n", "utf-8");
+    writeFileSync(getClaudeSettingsPath(), `${JSON.stringify(s, null, 2)}\n`, "utf-8");
 }
 function isOurMatcher(m) {
     if (!m || typeof m !== "object")
@@ -49,8 +49,7 @@ export function runHookInstall(mode = "check") {
     const compact = process.env.CLAUDECODE === "1" || process.env.CLAUDE_CODE === "1";
     if (typeof existing === "string") {
         if (!existing.includes(HOOK_SIGNATURE)) {
-            logWarn(`Ya hay un SessionStart hook configurado (formato string legacy):\n   ${existing}\n` +
-                `   No lo sobrescribo. Conviértelo a formato array manualmente.`);
+            logWarn(`Ya hay un SessionStart hook configurado (formato string legacy):\n   ${existing}\n   No lo sobrescribo. Conviértelo a formato array manualmente.`);
             return 1;
         }
         settings.hooks.SessionStart = [buildOurMatcher(command)];
@@ -95,7 +94,7 @@ export function runHookUninstall() {
             logWarn(`El SessionStart hook actual no es de ${PRODUCT_NAME}. No lo toco.`);
             return 1;
         }
-        delete settings.hooks.SessionStart;
+        settings.hooks.SessionStart = undefined;
         writeSettings(settings);
         logOk("Hook removido.");
         return 0;
@@ -110,7 +109,7 @@ export function runHookUninstall() {
         return 1;
     }
     if (filtered.length === 0) {
-        delete settings.hooks.SessionStart;
+        settings.hooks.SessionStart = undefined;
     }
     else {
         settings.hooks.SessionStart = filtered;

package/dist/commands/install.js

@@ -1,7 +1,7 @@
 import { AuthRequiredError } from "../api.js";
-import { hasAuth, readAuth } from "../auth.js";
-import { installAll } from "../installer.js";
+import { hasValidAuth, readAuth } from "../auth.js";
 import { bold, cyan, dim, gray, green, log, logError, red, yellow } from "../colors.js";
+import { installAll } from "../installer.js";
 import { COMMAND_NAME, formatBytes, getClaudeSkillsDir, getPackageVersion } from "../lib.js";
 import { runHookInstall } from "./hook.js";
 import { runLogin } from "./login.js";
@@ -11,10 +11,10 @@ const SHORT_DESCRIPTIONS = {
     "alegra-sales": "New logos, MRR, deals, funnel, cuota",
     "alegra-accountant": "Programa Contadores, FC 2.0, halo",
     "alegra-growth": "Signups, MQL/PQL/SQL, conversión",
-    "alegra-ce-universe": "CHS, churn, retención, voice of customer",
-    "alegra-producto": "Métricas SaaS — MRR, ARPA, churn rate",
+    "alegra-cx": "CHS, churn, retención, voice of customer",
+    "alegra-product": "Métricas SaaS — MRR, ARPA, churn rate",
     "alegra-strategic": "MRR walk, cross-sell, upsell, pricing",
-    "alanube": "Tablas Alanube en Redshift",
+    alanube: "Tablas Alanube en Redshift",
 };
 function padToWidth(text, visibleLen, width) {
     const pad = Math.max(0, width - visibleLen);
@@ -26,21 +26,18 @@ function fancyBanner() {
     const nameLen = COMMAND_NAME.length;
     const versionLen = `v${v}`.length;
     const spacesBetween = Math.max(1, innerWidth - 4 - nameLen - versionLen);
-    const line1 = "   " +
-        bold(COMMAND_NAME) +
-        " ".repeat(spacesBetween) +
-        dim(`v${v}`);
+    const line1 = `   ${bold(COMMAND_NAME)}${" ".repeat(spacesBetween)}${dim(`v${v}`)}`;
     const line1PadCount = nameLen + spacesBetween + versionLen + 3;
     const line2Plain = "   Agente de Data · Alegra";
-    const line2 = "   " + gray("Agente de Data · Alegra");
+    const line2 = `   ${gray("Agente de Data · Alegra")}`;
     const emptyPad = innerWidth + 2;
     log("");
-    log("  " + cyan("╔" + "═".repeat(BANNER_WIDTH) + "╗"));
-    log("  " + cyan("║") + " ".repeat(emptyPad) + cyan("║"));
-    log("  " + cyan("║") + padToWidth(line1, line1PadCount, innerWidth + 2) + cyan("║"));
-    log("  " + cyan("║") + padToWidth(line2, line2Plain.length, innerWidth + 2) + cyan("║"));
-    log("  " + cyan("║") + " ".repeat(emptyPad) + cyan("║"));
-    log("  " + cyan("╚" + "═".repeat(BANNER_WIDTH) + "╝"));
+    log(`  ${cyan(`╔${"═".repeat(BANNER_WIDTH)}╗`)}`);
+    log(`  ${cyan("║")}${" ".repeat(emptyPad)}${cyan("║")}`);
+    log(`  ${cyan("║")}${padToWidth(line1, line1PadCount, innerWidth + 2)}${cyan("║")}`);
+    log(`  ${cyan("║")}${padToWidth(line2, line2Plain.length, innerWidth + 2)}${cyan("║")}`);
+    log(`  ${cyan("║")}${" ".repeat(emptyPad)}${cyan("║")}`);
+    log(`  ${cyan(`╚${"═".repeat(BANNER_WIDTH)}╝`)}`);
     log("");
 }
 function section(title) {
@@ -52,7 +49,7 @@ function shortDesc(name, manifestDesc) {
     if (handPicked)
         return handPicked;
     const oneLine = manifestDesc.split(/\.|\n/)[0].trim();
-    return oneLine.length > 55 ? oneLine.slice(0, 54) + "…" : oneLine;
+    return oneLine.length > 55 ? `${oneLine.slice(0, 54)}…` : oneLine;
 }
 function printResultRow(result, manifest) {
     const isSkill = result.kind === "skill";
@@ -61,7 +58,7 @@ function printResultRow(result, manifest) {
         ? entry
             ? shortDesc(result.name, entry.description)
             : ""
-        : entry?.description ?? "MCP server";
+        : (entry?.description ?? "MCP server");
     let icon;
     switch (result.status) {
         case "installed":
@@ -82,7 +79,7 @@ function printResultRow(result, manifest) {
     }
     const kindBadge = isSkill ? "" : dim("[mcp] ");
     const padName = result.name.padEnd(22);
-    log(`   ${icon} ${kindBadge}${bold(padName)} ${gray("· " + desc)}`);
+    log(`   ${icon} ${kindBadge}${bold(padName)} ${gray(`· ${desc}`)}`);
 }
 function printSummary(results, manifest) {
     const installed = results.filter((r) => r.status === "installed").length;
@@ -114,22 +111,24 @@ function printSummary(results, manifest) {
         parts.push(yellow(`${skipped} omitidas`));
     if (failed > 0)
         parts.push(red(`${failed} fallidas`));
-    log("   " +
-        green("✓") +
-        " " +
-        bold(parts.join(gray(" · "))) +
-        gray(`  ·  ${totalFiles} archivos · ${formatBytes(totalBytes)}`));
-    log("   " + green("✓") + " " + gray("destino:") + " " + getClaudeSkillsDir());
+    log(`   ${green("✓")} ${bold(parts.join(gray(" · ")))}${gray(`  ·  ${totalFiles} archivos · ${formatBytes(totalBytes)}`)}`);
+    log(`   ${green("✓")} ${gray("destino:")} ${getClaudeSkillsDir()}`);
     log("");
     for (const r of results.filter((x) => x.status === "failed")) {
         logError(`${r.name}: ${r.error}`);
     }
 }
 function printNextSteps(noHook) {
-    section("Siguientes pasos");
-    log("   " + bold(yellow("→  Reinicia Claude Code para activar las skills")));
+    section("Ya estás listo");
+    log(`   ${bold(yellow("1."))} ${bold("Reiniciá tu cliente")} ${gray("(Claude Code, Cursor, OpenCode o Antigravity)")}.`);
+    log(`   ${bold(yellow("2."))} ${bold("Hacele tu pregunta en español.")}`);
+    log(`      ${gray("Ejemplo:")} ${cyan('"cuántos nuevos clientes en mayo en Colombia?"')}`);
+    log("");
+    log(`   ${gray("La primera vez que use un servicio (Metabase, Amplitude, HubSpot, Wiki),")}`);
+    log(`   ${gray("te va a pedir 1 click para darle permiso con tu cuenta")} ${bold("@alegra.com")}${gray(".")}`);
+    log(`   ${gray("Después no te pide nada más.")}`);
     log("");
-    log("   " + dim("Comandos útiles:"));
+    log(`   ${dim("Comandos útiles:")}`);
     log(`     ${dim("$")} ${bold(`${COMMAND_NAME} list`)}      ${gray("ver skills disponibles")}`);
     log(`     ${dim("$")} ${bold(`${COMMAND_NAME} status`)}    ${gray("estado actual + drift")}`);
     log(`     ${dim("$")} ${bold(`${COMMAND_NAME} update`)}    ${gray("actualizar a la última")}`);
@@ -138,9 +137,7 @@ function printNextSteps(noHook) {
         log(`     ${dim("$")} ${bold(`${COMMAND_NAME} hook uninstall`)}  ${gray("apagar aviso")}`);
     }
     log("");
-    log("   " +
-        dim("Docs · ") +
-        cyan("github.com/alegradev/alegra-data-agent"));
+    log(`   ${dim("Docs · ")}${cyan("github.com/alegradev/alegra-data-agent")}`);
     log("");
 }
 function isClaudeCode() {
@@ -150,9 +147,9 @@ export async function runInstall(opts = {}) {
     const compact = isClaudeCode();
     if (!compact)
         fancyBanner();
-    if (!hasAuth()) {
+    if (!hasValidAuth()) {
         if (!compact)
-            log(dim("  No hay sesión activa. Inicio el flow de login antes de instalar.\n"));
+            log(dim("  No hay sesión activa (o expiró). Inicio el login antes de instalar.\n"));
         const code = await runLogin({});
         if (code !== 0)
             return code;
@@ -160,7 +157,7 @@ export async function runInstall(opts = {}) {
     const auth = readAuth();
     if (auth && !compact) {
         section("Cuenta autorizada");
-        log("   " + green("✓") + " " + bold(auth.email));
+        log(`   ${green("✓")} ${bold(auth.email)}`);
         log("");
     }
     if (opts.dryRun) {
@@ -169,33 +166,50 @@ export async function runInstall(opts = {}) {
     if (!compact) {
         section("Descargando skills del gateway");
     }
-    let result;
-    try {
-        result = await installAll({
-            dryRun: opts.dryRun,
-            force: opts.force,
-            only: opts.only,
-            targets: opts.targets,
-        });
-    }
-    catch (err) {
-        if (err instanceof AuthRequiredError) {
-            logError(err.message);
-            log(dim(`  Corre: ${COMMAND_NAME} login`));
-            return 2;
-        }
+    const installOpts = {
+        dryRun: opts.dryRun,
+        force: opts.force,
+        only: opts.only,
+        targets: opts.targets,
+    };
+    const reportInstallError = (err) => {
         const msg = err instanceof Error ? err.message : String(err);
         logError(msg);
         if (msg.includes("EACCES") || msg.includes("permission denied")) {
-            log(dim(`  Sin permisos para escribir. Verifica permisos de ~/.claude/skills/`));
+            log(dim("  Sin permisos para escribir. Verifica permisos de ~/.claude/skills/"));
         }
         else if (msg.includes("ENOSPC") || msg.includes("no space")) {
-            log(dim(`  No hay espacio en disco. Libera espacio y reintenta.`));
+            log(dim("  No hay espacio en disco. Libera espacio y reintenta."));
         }
-        else if (msg.includes("network") || msg.includes("ENOTFOUND") || msg.includes("ECONNREFUSED")) {
-            log(dim(`  Verifica tu conexión a internet y el estado del gateway.`));
+        else if (msg.includes("network") ||
+            msg.includes("ENOTFOUND") ||
+            msg.includes("ECONNREFUSED")) {
+            log(dim("  Verifica tu conexión a internet y el estado del gateway."));
         }
         return 1;
+    };
+    let result;
+    try {
+        result = await installAll(installOpts);
+    }
+    catch (err) {
+        if (!(err instanceof AuthRequiredError))
+            return reportInstallError(err);
+        if (!compact)
+            log(dim("  La sesión expiró durante la sincronización; reabro el login y reintento.\n"));
+        const code = await runLogin({ force: true });
+        if (code !== 0)
+            return code;
+        try {
+            result = await installAll(installOpts);
+        }
+        catch (err2) {
+            if (err2 instanceof AuthRequiredError) {
+                logError(err2.message);
+                return 2;
+            }
+            return reportInstallError(err2);
+        }
     }
     if ("error" in result) {
         logError(result.error);
@@ -217,7 +231,7 @@ export async function runInstall(opts = {}) {
         return 0;
     if (!opts.noHook) {
         if (!compact)
-            log("  " + gray("Instalando hook de notificaciones…"));
+            log(`  ${gray("Instalando hook de notificaciones…")}`);
         runHookInstall(opts.hookMode ?? "check");
         if (!compact)
             log("");
@@ -245,27 +259,23 @@ function printCompactSummary(results, manifest, email) {
         }
     }
     const verbo = updated > 0 && installed === 0 ? "actualizadas" : "instaladas";
-    const skillList = skillOks.map((r) => r.name).sort().join(", ");
+    const skillList = skillOks
+        .map((r) => r.name)
+        .sort()
+        .join(", ");
     const userPart = email ? gray(` · ${email}`) : "";
     log("");
-    log("  " +
-        green("✓") +
-        " " +
-        bold(`${skillOks.length} skills + ${mcpOks.length} MCPs ${verbo}`) +
-        gray(`  ·  ${totalFiles} archivos · ${formatBytes(totalBytes)}`) +
-        userPart);
+    log(`  ${green("✓")} ${bold(`${skillOks.length} skills + ${mcpOks.length} MCPs ${verbo}`)}${gray(`  ·  ${totalFiles} archivos · ${formatBytes(totalBytes)}`)}${userPart}`);
     if (skillList)
-        log("  " + gray("skills: ") + gray(skillList));
+        log(`  ${gray("skills: ")}${gray(skillList)}`);
     if (mcpOks.length > 0)
-        log("  " + gray("mcps:   ") + gray(mcpOks.map((r) => r.name).sort().join(", ")));
-    log("  " +
-        gray("destino:") +
-        " " +
-        cyan(getClaudeSkillsDir()) +
-        gray("  ·  ") +
-        bold(yellow("reinicia tu cliente para activarlas")));
+        log(`  ${gray("mcps:   ")}${gray(mcpOks
+            .map((r) => r.name)
+            .sort()
+            .join(", "))}`);
+    log(`  ${gray("destino:")} ${cyan(getClaudeSkillsDir())}${gray("  ·  ")}${bold(yellow("reinicia tu cliente para activarlas"))}`);
     if (unchanged > 0 && installed === 0 && updated === 0) {
-        log("  " + dim(`(${unchanged} sin cambios desde la última instalación)`));
+        log(`  ${dim(`(${unchanged} sin cambios desde la última instalación)`)}`);
     }
     log("");
     for (const r of failed) {

package/dist/commands/list.js

@@ -1,6 +1,6 @@
 import { AuthRequiredError, fetchManifest } from "../api.js";
-import { readLockFile, formatBytes } from "../lib.js";
 import { bold, cyan, dim, gray, green, log, logError, yellow } from "../colors.js";
+import { formatBytes, readLockFile } from "../lib.js";
 export async function runList() {
     let manifest;
     try {
@@ -21,7 +21,7 @@ export async function runList() {
     const lock = readLockFile();
     log("");
     log(bold(cyan("  Skills disponibles")) + dim(` — ${Object.keys(manifest.skills).length} totales`));
-    log(gray("  " + "─".repeat(70)));
+    log(gray(`  ${"─".repeat(70)}`));
     const names = Object.keys(manifest.skills).sort();
     for (const name of names) {
         const entry = manifest.skills[name];
@@ -36,7 +36,7 @@ export async function runList() {
             badge = yellow("[actualizar]  ");
         const team = entry.team ? gray(` ${entry.team}`) : "";
         log(`  ${badge} ${bold(name)}${team}  ${dim(formatBytes(entry.bytes))}`);
-        const desc = entry.description.length > 200 ? entry.description.slice(0, 200) + "…" : entry.description;
+        const desc = entry.description.length > 200 ? `${entry.description.slice(0, 200)}…` : entry.description;
         log(gray(`     ${desc}`));
         log("");
     }

package/dist/commands/login.js

@@ -1,18 +1,21 @@
-import { performBrowserLogin, readAuth, writeAuth } from "../auth.js";
-import { banner } from "../ui.js";
-import { bold, dim, green, log, logError } from "../colors.js";
+import { isAuthExpired, performBrowserLogin, readAuth, writeAuth } from "../auth.js";
+import { bold, dim, green, log, logError, logWarn } from "../colors.js";
 import { GATEWAY_URL, getAuthFilePath } from "../lib.js";
+import { banner } from "../ui.js";
 export async function runLogin(opts = {}) {
     banner();
     if (!opts.force) {
         const existing = readAuth();
-        if (existing) {
+        if (existing && !isAuthExpired(existing)) {
             log(`  ${green("✓")} Ya estás autenticado como ${bold(existing.email)}.`);
             log(dim(`     Token: ${getAuthFilePath()}`));
-            log(dim(`     Para volver a iniciar sesión: --force`));
+            log(dim("     Para volver a iniciar sesión: --force"));
             log("");
             return 0;
         }
+        if (existing) {
+            logWarn(`Tu sesión (${existing.email}) expiró — reabro el login.`);
+        }
     }
     log(`  Gateway: ${dim(GATEWAY_URL)}`);
     try {

package/dist/commands/status.js

@@ -1,13 +1,13 @@
 import { AuthRequiredError, fetchManifest } from "../api.js";
 import { readAuth } from "../auth.js";
+import { bold, cyan, dim, gray, green, log, logError, logWarn, yellow } from "../colors.js";
 import { detectDrift } from "../installer.js";
 import { COMMAND_NAME, GATEWAY_URL, getClaudeSkillsDir, getLockFilePath, getPackageVersion, readLockFile, } from "../lib.js";
-import { bold, cyan, dim, gray, green, log, logError, logWarn, yellow } from "../colors.js";
 export async function runStatus() {
     const auth = readAuth();
     log("");
     log(bold(cyan("  Estado")));
-    log(gray("  " + "─".repeat(70)));
+    log(gray(`  ${"─".repeat(70)}`));
     log(`  ${gray("Paquete:")}        ${bold(COMMAND_NAME)} v${getPackageVersion()}`);
     log(`  ${gray("Gateway:")}        ${GATEWAY_URL}`);
     log(`  ${gray("Autenticado:")}    ${auth ? green(auth.email) : gray("no")}`);

package/dist/commands/uninstall.js

@@ -1,7 +1,10 @@
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { dim, gray, log, logOk, logWarn, red } from "../colors.js";
 import { uninstallAll } from "../installer.js";
 import { readLockFile } from "../lib.js";
 import { banner, confirm } from "../ui.js";
-import { dim, gray, log, logOk, logWarn, red } from "../colors.js";
 export async function runUninstall(opts = {}) {
     banner();
     const lock = readLockFile();
@@ -22,7 +25,26 @@ export async function runUninstall(opts = {}) {
         }
     }
     const results = uninstallAll({ dryRun: opts.dryRun });
+    if (!opts.dryRun)
+        removeNpmrcCooldownExclude();
     log("");
-    logOk(`${results.length} skill(s) eliminadas.`);
+    if (opts.dryRun) {
+        logOk(`${results.length} skill(s) se eliminarían (dry-run, nada borrado).`);
+    }
+    else {
+        logOk(`${results.length} skill(s) eliminadas.`);
+    }
     return 0;
 }
+function removeNpmrcCooldownExclude() {
+    const npmrc = join(homedir(), ".npmrc");
+    if (!existsSync(npmrc))
+        return;
+    const EXCLUDE = "minimum-release-age-exclude[]=alegra-data-agent";
+    const lines = readFileSync(npmrc, "utf-8").split("\n");
+    const kept = lines.filter((l) => l.trim() !== EXCLUDE);
+    if (kept.length !== lines.length) {
+        writeFileSync(npmrc, kept.join("\n"));
+        logOk("Removido minimum-release-age-exclude de ~/.npmrc");
+    }
+}

package/dist/commands/update.js

@@ -1,21 +1,41 @@
 import { AuthRequiredError, fetchManifest } from "../api.js";
+import { hasValidAuth } from "../auth.js";
+import { cyan, dim, gray, green, log, logError, yellow } from "../colors.js";
 import { detectDrift, installAll, summarize } from "../installer.js";
 import { banner } from "../ui.js";
-import { cyan, dim, gray, green, log, logError, yellow } from "../colors.js";
+import { runLogin } from "./login.js";
 export async function runUpdate(opts = {}) {
     banner();
-    let manifest;
-    try {
-        manifest = await fetchManifest();
+    if (!hasValidAuth()) {
+        const code = await runLogin({});
+        if (code !== 0)
+            return code;
     }
-    catch (err) {
-        if (err instanceof AuthRequiredError) {
-            logError(err.message);
-            return 2;
+    let reauthed = false;
+    for (;;) {
+        try {
+            return await runUpdateOnce(opts);
+        }
+        catch (err) {
+            if (err instanceof AuthRequiredError && !reauthed) {
+                reauthed = true;
+                log(dim("  La sesión expiró durante la actualización; reabro el login y reintento.\n"));
+                const code = await runLogin({ force: true });
+                if (code !== 0)
+                    return code;
+                continue;
+            }
+            if (err instanceof AuthRequiredError) {
+                logError(err.message);
+                return 2;
+            }
+            logError(err instanceof Error ? err.message : String(err));
+            return 1;
         }
-        logError(err instanceof Error ? err.message : String(err));
-        return 1;
     }
+}
+async function runUpdateOnce(opts) {
+    const manifest = await fetchManifest();
     if (!manifest) {
         logError("No se pudo cargar el manifest.");
         return 1;

package/dist/installer.js

@@ -1,11 +1,11 @@
 import { createHash } from "node:crypto";
-import { copyFileSync, existsSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { copyFileSync, existsSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve, sep } from "node:path";
 import { fetchManifest, fetchSkillFile } from "./api.js";
 import { dim, gray, green, logError, red, yellow } from "./colors.js";
 import { ensureDir, getLockFilePath, getPackageVersion, readLockFile, sha256File, writeLockFile, } from "./lib.js";
-import { renderMcpForTarget } from "./render.js";
-import { detectInstalledTargets, TARGETS } from "./targets.js";
+import { inlineReferences, renderMcpForTarget } from "./render.js";
+import { TARGETS, detectInstalledTargets } from "./targets.js";
 const SKILL_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 const MCP_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 function validateSkillName(name) {
@@ -32,6 +32,14 @@ function validateRelPath(rel) {
         }
     }
 }
+function mcpConfigHash(mcp) {
+    const salient = JSON.stringify({
+        url: mcp.url,
+        type: mcp.auth.type,
+        tokenEnv: mcp.auth.tokenEnv ?? null,
+    });
+    return createHash("sha256").update(salient).digest("hex");
+}
 function safeJoinSkillFile(skillRoot, rel) {
     const candidate = resolve(skillRoot, rel);
     const root = resolve(skillRoot);
@@ -95,17 +103,21 @@ function writeSkillToTarget(skillName, staged, spec) {
     if (!entry) {
         throw new Error(`Para target ${spec.id} se requiere SKILL.md o README.md en la skill`);
     }
+    const references = staged
+        .filter((f) => f.rel !== "SKILL.md" && f.rel !== "README.md")
+        .map((f) => ({ rel: f.rel, text: new TextDecoder().decode(f.data) }));
     const content = new TextDecoder().decode(entry.data);
-    const rendered = renderSkillForTargetFromContent(content, skillName, spec.skillFormat);
+    const rendered = renderSkillForTargetFromContent(content, skillName, spec.skillFormat, references);
     ensureDir(spec.skillsDir);
     const dst = join(spec.skillsDir, rendered.filename);
     atomicWriteFile(dst, rendered.content);
 }
-function renderSkillForTargetFromContent(content, skillName, format) {
+function renderSkillForTargetFromContent(content, skillName, format, references = []) {
     if (format === "folder") {
         throw new Error("renderSkillForTargetFromContent no soporta 'folder'");
     }
     const stripped = content.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n/, "").replace(/^\s+/, "");
+    const body = stripped + inlineReferences(references);
     const fm = parseFrontmatterMinimal(content);
     if (format === "cursor-mdc") {
         const desc = fm.description ?? `Skill ${skillName}`;
@@ -113,10 +125,10 @@ function renderSkillForTargetFromContent(content, skillName, format) {
         const safeDesc = cursorDesc.replace(/\n/g, " ").replace(/"/g, '\\"');
         return {
             filename: `${skillName}.mdc`,
-            content: `---\ndescription: "${safeDesc}"\nalwaysApply: false\n---\n\n${stripped}`,
+            content: `---\ndescription: "${safeDesc}"\nalwaysApply: false\n---\n\n${body}`,
         };
     }
-    return { filename: `${skillName}.md`, content: stripped };
+    return { filename: `${skillName}.md`, content: body };
 }
 function parseFrontmatterMinimal(content) {
     const m = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
@@ -156,14 +168,21 @@ function readJsonOrEmpty(path) {
 }
 function registerMcpInTarget(mcp, spec) {
     validateMcpName(mcp.name);
+    if (spec.mcpMechanism === "toml-block") {
+        registerMcpInTomlBlock(mcp, spec);
+        return;
+    }
     const cfg = readJsonOrEmpty(spec.mcpConfigPath);
     const section = cfg[spec.mcpRootKey] ?? {};
     section[mcp.name] = renderMcpForTarget(mcp, spec);
     cfg[spec.mcpRootKey] = section;
     backupIfExists(spec.mcpConfigPath);
-    atomicWriteFile(spec.mcpConfigPath, JSON.stringify(cfg, null, 2) + "\n");
+    atomicWriteFile(spec.mcpConfigPath, `${JSON.stringify(cfg, null, 2)}\n`);
 }
 function unregisterMcpInTarget(mcpName, spec) {
+    if (spec.mcpMechanism === "toml-block") {
+        return unregisterMcpInTomlBlock(mcpName, spec);
+    }
     if (!existsSync(spec.mcpConfigPath))
         return false;
     const cfg = readJsonOrEmpty(spec.mcpConfigPath);
@@ -173,13 +192,82 @@ function unregisterMcpInTarget(mcpName, spec) {
     delete section[mcpName];
     cfg[spec.mcpRootKey] = section;
     backupIfExists(spec.mcpConfigPath);
-    atomicWriteFile(spec.mcpConfigPath, JSON.stringify(cfg, null, 2) + "\n");
+    atomicWriteFile(spec.mcpConfigPath, `${JSON.stringify(cfg, null, 2)}\n`);
+    return true;
+}
+function tomlBasicString(s) {
+    return `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+export function renderMcpToml(mcp) {
+    const lines = [`[mcp_servers.${mcp.name}]`, `url = ${tomlBasicString(mcp.url)}`];
+    if (mcp.auth.type === "gateway") {
+        if (!mcp.auth.tokenEnv) {
+            throw new Error(`MCP '${mcp.name}' es type=gateway pero no trae tokenEnv`);
+        }
+        lines.push(`bearer_token_env_var = ${tomlBasicString(mcp.auth.tokenEnv)}`);
+    }
+    return lines.join("\n");
+}
+function tomlMarkers(name) {
+    return {
+        begin: `# >>> alegra-data-agent:${name} >>>`,
+        end: `# <<< alegra-data-agent:${name} <<<`,
+    };
+}
+export function upsertTomlBlock(content, name, block) {
+    const { begin, end } = tomlMarkers(name);
+    const fenced = `${begin}\n${block}\n${end}`;
+    const bi = content.indexOf(begin);
+    if (bi !== -1) {
+        const ei = content.indexOf(end, bi);
+        if (ei !== -1) {
+            return content.slice(0, bi) + fenced + content.slice(ei + end.length);
+        }
+    }
+    if (content.length === 0)
+        return `${fenced}\n`;
+    const sep = content.endsWith("\n\n") ? "" : content.endsWith("\n") ? "\n" : "\n\n";
+    return `${content}${sep}${fenced}\n`;
+}
+export function removeTomlBlock(content, name) {
+    const { begin, end } = tomlMarkers(name);
+    const bi = content.indexOf(begin);
+    if (bi === -1)
+        return content;
+    const ei = content.indexOf(end, bi);
+    if (ei === -1)
+        return content;
+    let start = bi;
+    let stop = ei + end.length;
+    if (content[stop] === "\n")
+        stop++;
+    if (start > 0 && content[start - 1] === "\n")
+        start--;
+    return content.slice(0, start) + content.slice(stop);
+}
+function registerMcpInTomlBlock(mcp, spec) {
+    const existing = existsSync(spec.mcpConfigPath)
+        ? readFileSync(spec.mcpConfigPath, "utf-8")
+        : "";
+    const next = upsertTomlBlock(existing, mcp.name, renderMcpToml(mcp));
+    if (next === existing)
+        return;
+    backupIfExists(spec.mcpConfigPath);
+    atomicWriteFile(spec.mcpConfigPath, next);
+}
+function unregisterMcpInTomlBlock(name, spec) {
+    if (!existsSync(spec.mcpConfigPath))
+        return false;
+    const existing = readFileSync(spec.mcpConfigPath, "utf-8");
+    const next = removeTomlBlock(existing, name);
+    if (next === existing)
+        return false;
+    backupIfExists(spec.mcpConfigPath);
+    atomicWriteFile(spec.mcpConfigPath, next);
     return true;
 }
 function resolveTargets(opts) {
-    const ids = opts.targets?.length
-        ? opts.targets
-        : detectInstalledTargets();
+    const ids = opts.targets?.length ? opts.targets : detectInstalledTargets();
     if (ids.length === 0) {
         ids.push("claude-code");
     }
@@ -276,7 +364,7 @@ export function installMcp(mcp, opts = {}) {
     const targetsMatch = prev?.targets &&
         prev.targets.length === targetIds.length &&
         prev.targets.every((t) => targetIds.includes(t));
-    if (prev && targetsMatch && !opts.force) {
+    if (prev && targetsMatch && prev.configHash === mcpConfigHash(mcp) && !opts.force) {
         return { name: mcp.name, kind: "mcp", status: "unchanged", targets: targetIds };
     }
     if (opts.dryRun) {
@@ -295,6 +383,7 @@ export function installMcp(mcp, opts = {}) {
             name: mcp.name,
             installedFrom: getPackageVersion(),
             installedAt: new Date().toISOString(),
+            configHash: mcpConfigHash(mcp),
             targets: targetIds,
         };
         writeLockFile(lock);
@@ -330,7 +419,7 @@ export async function installAll(opts = {}) {
         ? opts.only.filter((s) => manifest.skills[s])
         : Object.keys(manifest.skills);
     const mcpNames = opts.only && opts.only.length > 0
-        ? opts.only.filter((s) => manifest.mcps && manifest.mcps[s])
+        ? opts.only.filter((s) => manifest.mcps?.[s])
         : Object.keys(manifest.mcps ?? {});
     const results = [];
     for (const name of skillNames) {
@@ -401,8 +490,18 @@ export function uninstallMcp(name, opts = {}) {
     }
     const targetIds = (prev.targets ?? ["claude-code"]);
     if (!opts.dryRun) {
-        for (const tId of targetIds) {
-            unregisterMcpInTarget(name, TARGETS[tId]);
+        try {
+            for (const tId of targetIds) {
+                unregisterMcpInTarget(name, TARGETS[tId]);
+            }
+        }
+        catch (err) {
+            return {
+                name,
+                kind: "mcp",
+                status: "failed",
+                error: err instanceof Error ? err.message : String(err),
+            };
         }
         delete lock.mcps[name];
         writeLockFile(lock);
@@ -449,8 +548,11 @@ export function detectDrift(manifest) {
     };
     const manifestMcps = manifest.mcps ?? {};
     for (const name of Object.keys(manifestMcps)) {
-        if (!lock.mcps?.[name])
+        const prevMcp = lock.mcps?.[name];
+        if (!prevMcp)
             mcps.toInstall.push(name);
+        else if (prevMcp.configHash !== mcpConfigHash(manifestMcps[name]))
+            mcps.toUpdate.push(name);
         else
             mcps.unchanged.push(name);
     }

package/dist/lib.js

@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync, } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join, relative, sep } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -7,8 +7,7 @@ export const PRODUCT_NAME = "alegra-data-agent";
 export const COMMAND_NAME = "alegra-data-agent";
 export const REPO_SLUG = "alegradev/alegra-data-agent";
 export const REPO_DEFAULT_BRANCH = "main";
-export const GATEWAY_URL = process.env.ALEGRA_DATA_AGENT_GATEWAY_URL ??
-    "https://alegra-data-agent.vercel.app";
+export const GATEWAY_URL = process.env.ALEGRA_DATA_AGENT_GATEWAY_URL ?? "https://alegra-data-agent.vercel.app";
 export const ALL_TARGETS = ["claude-code", "cursor", "opencode", "antigravity"];
 const __dirname = dirname(fileURLToPath(import.meta.url));
 export function getPackageRoot() {
@@ -48,6 +47,14 @@ export function getAntigravitySkillsDir() {
 export function getAntigravitySettingsPath() {
     return join(homedir(), ".antigravity", "settings.json");
 }
+export function getCodexSkillsDir() {
+    return join(homedir(), ".agents", "skills");
+}
+export function getCodexConfigPath() {
+    const codexHome = process.env.CODEX_HOME;
+    const base = codexHome && codexHome.length > 0 ? codexHome : join(homedir(), ".codex");
+    return join(base, "config.toml");
+}
 export function getTargetSkillsDir(target) {
     switch (target) {
         case "claude-code":
@@ -58,6 +65,8 @@ export function getTargetSkillsDir(target) {
             return getOpenCodeSkillsDir();
         case "antigravity":
             return getAntigravitySkillsDir();
+        case "codex":
+            return getCodexSkillsDir();
     }
 }
 export function getTargetMcpConfigPath(target) {
@@ -70,6 +79,8 @@ export function getTargetMcpConfigPath(target) {
             return getOpenCodeConfigPath();
         case "antigravity":
             return getAntigravitySettingsPath();
+        case "codex":
+            return getCodexConfigPath();
     }
 }
 export function getLockFilePath() {
@@ -122,7 +133,7 @@ export function readLockFile() {
 export function writeLockFile(lock) {
     const path = getLockFilePath();
     mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, JSON.stringify(lock, null, 2) + "\n", "utf-8");
+    writeFileSync(path, `${JSON.stringify(lock, null, 2)}\n`, "utf-8");
 }
 export function sha256(buf) {
     return createHash("sha256").update(buf).digest("hex");

package/dist/main.js

@@ -1,6 +1,6 @@
+import { log, logError } from "./colors.js";
 import { ALL_TARGETS, getPackageVersion } from "./lib.js";
 import { helpText } from "./ui.js";
-import { log, logError } from "./colors.js";
 import { runCheck } from "./commands/check.js";
 import { runHookInstall, runHookUninstall } from "./commands/hook.js";
 import { runInstall } from "./commands/install.js";
@@ -13,7 +13,10 @@ import { runUpdate } from "./commands/update.js";
 import { runWhoami } from "./commands/whoami.js";
 function parseTargetList(raw) {
     const out = [];
-    for (const piece of raw.split(",").map((s) => s.trim()).filter(Boolean)) {
+    for (const piece of raw
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean)) {
         if (ALL_TARGETS.includes(piece)) {
             out.push(piece);
         }

package/dist/render.js

@@ -1,5 +1,5 @@
 import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
+import { extname, join } from "node:path";
 import { parseFrontmatter } from "./lib.js";
 function readSkillEntryPoint(skillDir) {
     const candidates = ["SKILL.md", "README.md"];
@@ -37,6 +37,39 @@ function stripFrontmatter(content) {
         return content;
     return m[1].replace(/^\s+/, "");
 }
+const INLINE_TEXT_EXT = new Set([".md", ".sql", ".txt", ".json", ".yaml", ".yml", ".csv"]);
+const INLINE_MAX_BYTES = 64 * 1024;
+const FENCE_LANG = {
+    ".sql": "sql",
+    ".json": "json",
+    ".yaml": "yaml",
+    ".yml": "yaml",
+    ".csv": "csv",
+    ".txt": "",
+};
+export function inlineReferences(refs) {
+    const sections = [];
+    for (const ref of refs) {
+        const ext = extname(ref.rel).toLowerCase();
+        const bytes = Buffer.byteLength(ref.text, "utf-8");
+        if (!INLINE_TEXT_EXT.has(ext)) {
+            sections.push(`### \`${ref.rel}\`\n\n> (omitido: tipo \`${ext || "sin extensión"}\` no inlineable)`);
+        }
+        else if (bytes > INLINE_MAX_BYTES) {
+            sections.push(`### \`${ref.rel}\`\n\n> (omitido: ${Math.round(bytes / 1024)} KB; supera el límite de inline)`);
+        }
+        else if (ext === ".md") {
+            sections.push(`### \`${ref.rel}\`\n\n${ref.text.trim()}`);
+        }
+        else {
+            const lang = FENCE_LANG[ext] ?? "";
+            sections.push(`### \`${ref.rel}\`\n\n\`\`\`${lang}\n${ref.text.replace(/\s+$/, "")}\n\`\`\``);
+        }
+    }
+    if (sections.length === 0)
+        return "";
+    return `\n\n---\n\n# Referencias (incluidas inline)\n\n> Este cliente instala la skill como un solo archivo; el contenido de \`references/\` se incluye acá para que las menciones del cuerpo sigan disponibles.\n\n${sections.join("\n\n")}\n`;
+}
 export function renderMcpForTarget(mcp, spec) {
     const obj = {
         [spec.mcpUrlKey]: mcp.url,
@@ -64,5 +97,7 @@ function bearerInterpolation(env, target) {
             return `Bearer \${env:${env}}`;
         case "opencode":
             return `Bearer {env:${env}}`;
+        case "codex":
+            throw new Error("codex usa config TOML (bearer_token_env_var), no headers JSON");
     }
 }

package/dist/signature.js

@@ -5,11 +5,13 @@ export function canonicalize(obj) {
     if (obj === null || typeof obj !== "object")
         return JSON.stringify(obj);
     if (Array.isArray(obj)) {
-        return "[" + obj.map((v) => canonicalize(v)).join(",") + "]";
+        return `[${obj.map((v) => canonicalize(v)).join(",")}]`;
     }
     const o = obj;
-    const keys = Object.keys(o).filter((k) => k !== "signature").sort();
-    return "{" + keys.map((k) => JSON.stringify(k) + ":" + canonicalize(o[k])).join(",") + "}";
+    const keys = Object.keys(o)
+        .filter((k) => k !== "signature")
+        .sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${canonicalize(o[k])}`).join(",")}}`;
 }
 const MAX_MANIFEST_AGE_DAYS = 90;
 export function verifyManifestSignature(manifest, options = {}) {
@@ -24,11 +26,14 @@ export function verifyManifestSignature(manifest, options = {}) {
         return { ok: false, reason: `algoritmo no soportado: ${sig.alg}` };
     }
     if (sig.keyId !== SIGNING_KEY_ID) {
-        return { ok: false, reason: `keyId no reconocido: ${sig.keyId} (CLI espera ${SIGNING_KEY_ID})` };
+        return {
+            ok: false,
+            reason: `keyId no reconocido: ${sig.keyId} (CLI espera ${SIGNING_KEY_ID})`,
+        };
     }
     if (typeof manifest.generatedAt === "string") {
         const ts = Date.parse(manifest.generatedAt);
-        if (!isNaN(ts)) {
+        if (!Number.isNaN(ts)) {
             const ageMs = Date.now() - ts;
             const maxAgeMs = MAX_MANIFEST_AGE_DAYS * 24 * 3600 * 1000;
             if (ageMs > maxAgeMs) {

package/dist/targets.js

@@ -1,7 +1,7 @@
 import { existsSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { getAntigravitySettingsPath, getAntigravitySkillsDir, getClaudeSettingsPath, getClaudeSkillsDir, getCursorMcpPath, getCursorSkillsDir, getOpenCodeConfigPath, getOpenCodeSkillsDir, } from "./lib.js";
+import { getAntigravitySettingsPath, getAntigravitySkillsDir, getClaudeSettingsPath, getClaudeSkillsDir, getCodexConfigPath, getCodexSkillsDir, getCursorMcpPath, getCursorSkillsDir, getOpenCodeConfigPath, getOpenCodeSkillsDir, } from "./lib.js";
 export const TARGETS = {
     "claude-code": {
         id: "claude-code",
@@ -40,17 +40,31 @@ export const TARGETS = {
         mcpRootKey: "mcpServers",
         mcpUrlKey: "serverUrl",
     },
+    codex: {
+        id: "codex",
+        label: "Codex",
+        skillsDir: getCodexSkillsDir(),
+        skillFormat: "folder",
+        mcpConfigPath: getCodexConfigPath(),
+        mcpRootKey: "mcpServers",
+        mcpUrlKey: "url",
+        mcpMechanism: "toml-block",
+    },
 };
 export function detectInstalledTargets() {
     const home = homedir();
     const xdgConfig = process.env.XDG_CONFIG_HOME && process.env.XDG_CONFIG_HOME.length > 0
         ? process.env.XDG_CONFIG_HOME
         : join(home, ".config");
+    const codexHome = process.env.CODEX_HOME && process.env.CODEX_HOME.length > 0
+        ? process.env.CODEX_HOME
+        : join(home, ".codex");
     const sentinels = {
         "claude-code": join(home, ".claude"),
         cursor: join(home, ".cursor"),
         opencode: join(xdgConfig, "opencode"),
         antigravity: join(home, ".antigravity"),
+        codex: codexHome,
     };
     const out = [];
     for (const id of Object.keys(sentinels)) {

package/dist/ui.js

@@ -1,5 +1,5 @@
-import { createInterface } from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
+import { createInterface } from "node:readline/promises";
 import { bold, cyan, dim, gray, log } from "./colors.js";
 import { COMMAND_NAME, getPackageVersion } from "./lib.js";
 export function banner() {
@@ -25,7 +25,7 @@ export async function confirm(question, defaultYes = true) {
 export async function ask(question, defaultValue) {
     const rl = createInterface({ input, output });
     try {
-        const suffix = defaultValue ? dim(`(${defaultValue})`) + " " : "";
+        const suffix = defaultValue ? `${dim(`(${defaultValue})`)} ` : "";
         const answer = (await rl.question(`${question} ${suffix}`)).trim();
         return answer === "" && defaultValue !== undefined ? defaultValue : answer;
     }

package/index.mjs

@@ -8,9 +8,7 @@ const [major, minor] = process.versions.node.split(".").map(Number);
 
 if (major < 22 || (major === 22 && minor < 6)) {
   console.error(
-    `\n  ⚠ alegra-data-agent requiere Node.js >= 22.6.0.` +
-      `\n  Versión actual: ${process.version}` +
-      `\n  Actualiza desde → https://nodejs.org\n`,
+    `\n  ⚠ alegra-data-agent requiere Node.js >= 22.6.0.\n  Versión actual: ${process.version}\n  Actualiza desde → https://nodejs.org\n`,
   );
   process.exit(1);
 }
@@ -27,7 +25,7 @@ if (existsSync(distPath)) {
   // Desarrollo: ejecuta el .ts directo (requiere --experimental-strip-types).
   const tsPath = join(__dirname, "src", "main.ts");
   if (!existsSync(tsPath)) {
-    console.error(`\n  ⚠ Instalación incompleta: no se encontró dist/ ni src/.\n`);
+    console.error("\n  ⚠ Instalación incompleta: no se encontró dist/ ni src/.\n");
     process.exit(1);
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alegra-data-agent",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "private": false,
   "description": "Agente de Data interno de Alegra. Instala skills + MCPs en tu cliente de IA con un comando.",
   "license": "UNLICENSED",
@@ -37,7 +37,9 @@
     "manifest:generate": "node --experimental-strip-types --disable-warning=ExperimentalWarning scripts/generate-manifest.mjs",
     "manifest:sign": "node scripts/sign-manifest.mjs",
     "manifest:scan": "node scripts/scan-skills.mjs",
-    "manifest": "pnpm run manifest:scan && pnpm run manifest:generate && pnpm run manifest:sign",
+    "manifest:validate": "node scripts/validate-skills.mjs --legacy-ok",
+    "manifest:validate:strict": "node scripts/validate-skills.mjs",
+    "manifest": "pnpm run manifest:validate && pnpm run manifest:scan && pnpm run manifest:generate && pnpm run manifest:sign",
     "test": "node tests/runner.mjs",
     "test:report": "node tests/runner.mjs --report markdown",
     "test:security": "node tests/security/runner.mjs",