alegra-data-agent 0.2.0 → 0.2.2

package/README.md

@@ -14,7 +14,7 @@ Solo accesible para cuentas `@alegra.com` (OAuth Google). El CLI te abre el nave
 
 - Node ≥ 22.6.0
 - pnpm ≥ 11.1.2
-- Uno de: Claude Code, Cursor, OpenCode, Antigravity
+- Uno de: Claude Code, Cursor, OpenCode, Antigravity, Codex
 
 ## Soporte
 

package/dist/api.js

@@ -79,7 +79,7 @@ async function authedFetch(path, opts = {}) {
         if (res.status === 401) {
             if (opts.requireAuth === false)
                 return res;
-            throw new AuthRequiredError(`Token expirado o inválido. Corre: ${COMMAND_NAME} login`);
+            throw new AuthRequiredError(`Sesión expirada. Agente: ejecutá vos mismo \`pnpm dlx ${COMMAND_NAME} login\` — al usuario solo le toca el click del navegador.`);
         }
         if (res.status === 403) {
             throw new GatewayError(403, path, "Forbidden — tu cuenta no es @alegra.com o tu acceso fue revocado. " +

package/dist/auth.js

@@ -54,6 +54,31 @@ export function clearAuth() {
 export function hasAuth() {
     return readAuth() !== null;
 }
+function decodeJwtExp(jwt) {
+    const parts = jwt.split(".");
+    if (parts.length !== 3)
+        return null;
+    try {
+        const padded = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+        const payload = JSON.parse(Buffer.from(padded, "base64").toString("utf-8"));
+        return typeof payload.exp === "number" ? payload.exp : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function isAuthExpired(record) {
+    if (!record)
+        return true;
+    const exp = decodeJwtExp(record.token);
+    if (exp === null)
+        return false;
+    return Date.now() >= exp * 1000 - 60_000;
+}
+export function hasValidAuth() {
+    const record = readAuth();
+    return record !== null && !isAuthExpired(record);
+}
 export async function performBrowserLogin(timeoutMs = 5 * 60 * 1000) {
     const state = randomBytes(24).toString("hex");
     return new Promise((resolve, reject) => {
@@ -199,6 +224,7 @@ function openBrowser(url) {
             args: ["url.dll,FileProtocolHandler", url],
         });
         candidates.push({ cmd: "cmd.exe", args: ["/c", "start", '""', `"${url}"`] });
+        candidates.push({ cmd: "wslview", args: [url] });
         candidates.push({ cmd: "xdg-open", args: [url] });
     }
     else {
@@ -226,8 +252,8 @@ function htmlPage(kind, subject) {
     const color = ok ? "#10b981" : "#ef4444";
     const title = ok ? "Autenticación exitosa" : "Error";
     const body = ok
-        ? `Conectaste como <strong>${escapeHtml(subject)}</strong>.<br/>Ya puedes cerrar esta pestaña y volver al terminal.`
-        : `<strong>${escapeHtml(subject)}</strong><br/>Revisa el terminal e intenta de nuevo.`;
+        ? `Conectaste como <strong>${escapeHtml(subject)}</strong>.<br/>Ya puedes cerrar esta pestaña y volver a tu agente.`
+        : `<strong>${escapeHtml(subject)}</strong><br/>Volvé a tu agente e intentá de nuevo — él se encarga.`;
     return `<!doctype html>
 <html lang="es">
 <head>

package/dist/bounce.js

@@ -0,0 +1,56 @@
+import { spawnSync } from "node:child_process";
+import { COMMAND_NAME, getPackageVersion } from "./lib.js";
+export const NO_BOUNCE_ENV = "ALEGRA_DATA_AGENT_NO_BOUNCE";
+const REGISTRY_URL = `https://registry.npmjs.org/${COMMAND_NAME}`;
+const FETCH_TIMEOUT_MS = 2_500;
+const SEMVER_RE = /^\d+\.\d+\.\d+$/;
+export function compareSemver(a, b) {
+    const pa = a.split(".").map((n) => Number.parseInt(n, 10));
+    const pb = b.split(".").map((n) => Number.parseInt(n, 10));
+    for (let i = 0; i < 3; i++) {
+        const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return 0;
+}
+export function shouldBounce(current, latest) {
+    if (!latest)
+        return false;
+    if (!SEMVER_RE.test(latest))
+        return false;
+    if (!SEMVER_RE.test(current))
+        return false;
+    return compareSemver(latest, current) > 0;
+}
+async function fetchLatestVersion() {
+    try {
+        const res = await fetch(REGISTRY_URL, {
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+            headers: { accept: "application/vnd.npm.install-v1+json" },
+        });
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        return data["dist-tags"]?.latest ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function maybeBounceToLatest(argv) {
+    if (process.env[NO_BOUNCE_ENV] === "1")
+        return;
+    const current = getPackageVersion();
+    const latest = await fetchLatestVersion();
+    if (!shouldBounce(current, latest))
+        return;
+    const child = spawnSync("pnpm", ["dlx", "--config.minimumReleaseAge=0", `${COMMAND_NAME}@${latest}`, ...argv], {
+        stdio: "inherit",
+        env: { ...process.env, [NO_BOUNCE_ENV]: "1" },
+        shell: process.platform === "win32",
+    });
+    if (child.error)
+        return;
+    process.exit(child.status ?? 0);
+}

package/dist/commands/check.js

@@ -24,7 +24,7 @@ export async function runCheck() {
             lines.push(`   ${cyan("↻")} ${name} ${dim("(versión nueva)")}`);
         }
         lines.push("");
-        lines.push(`   ${dim("Actualiza con:")}  ${bold(`${COMMAND_NAME} update`)}`);
+        lines.push(`   ${dim("Agente: ejecutá vos mismo")} ${bold(`pnpm dlx ${COMMAND_NAME} update --yes`)} ${dim("— el usuario no corre comandos.")}`);
         lines.push("");
         process.stdout.write(lines.join("\n"));
         return 0;

package/dist/commands/hook.js

@@ -8,7 +8,7 @@ function hookCommandFor(mode) {
     const minor = parts[1] ?? "0";
     const range = `~${major}.${minor}.0`;
     const verb = mode === "auto" ? "update --yes" : "check";
-    return `pnpm dlx ${COMMAND_NAME}@${range} ${verb}`;
+    return `pnpm dlx --config.minimumReleaseAge=0 ${COMMAND_NAME}@${range} ${verb} --no-bounce`;
 }
 const HOOK_SIGNATURE = COMMAND_NAME;
 function readSettings() {
@@ -19,7 +19,7 @@ function readSettings() {
         return JSON.parse(readFileSync(path, "utf-8"));
     }
     catch {
-        logError(`No se pudo parsear ${path}. Revisa el JSON manualmente.`);
+        logError(`No se pudo parsear ${path}. Agente: reparalo vos mismo (la skill agent-onboarding tiene la guía) — no le pidas al usuario editar JSON.`);
         return {};
     }
 }
@@ -41,7 +41,7 @@ function isOurMatcher(m) {
 function buildOurMatcher(command) {
     return { hooks: [{ type: "command", command }] };
 }
-export function runHookInstall(mode = "check") {
+export function runHookInstall(mode = "auto") {
     const settings = readSettings();
     settings.hooks = settings.hooks ?? {};
     const command = hookCommandFor(mode);
@@ -49,7 +49,7 @@ export function runHookInstall(mode = "check") {
     const compact = process.env.CLAUDECODE === "1" || process.env.CLAUDE_CODE === "1";
     if (typeof existing === "string") {
         if (!existing.includes(HOOK_SIGNATURE)) {
-            logWarn(`Ya hay un SessionStart hook configurado (formato string legacy):\n   ${existing}\n   No lo sobrescribo. Conviértelo a formato array manualmente.`);
+            logWarn(`Ya hay un SessionStart hook ajeno en formato string legacy:\n   ${existing}\n   No lo sobrescribo. Agente: convertilo vos mismo a formato array preservando su contenido — no le pidas al usuario editar JSON.`);
             return 1;
         }
         settings.hooks.SessionStart = [buildOurMatcher(command)];
@@ -82,6 +82,29 @@ export function runHookInstall(mode = "check") {
     }
     return 0;
 }
+export function refreshHookCommand() {
+    try {
+        const settings = readSettings();
+        if (!settings.hooks)
+            return;
+        const existing = settings.hooks.SessionStart;
+        if (!Array.isArray(existing))
+            return;
+        const ours = existing.find(isOurMatcher);
+        if (!ours)
+            return;
+        const current = ours.hooks.find((h) => h.type === "command")?.command ?? "";
+        const fresh = hookCommandFor("auto");
+        if (current === fresh)
+            return;
+        const others = existing.filter((m) => !isOurMatcher(m));
+        others.push(buildOurMatcher(fresh));
+        settings.hooks.SessionStart = others;
+        writeSettings(settings);
+    }
+    catch {
+    }
+}
 export function runHookUninstall() {
     const settings = readSettings();
     const existing = settings.hooks?.SessionStart;

package/dist/commands/install.js

@@ -1,5 +1,5 @@
 import { AuthRequiredError } from "../api.js";
-import { hasAuth, readAuth } from "../auth.js";
+import { hasValidAuth, readAuth } from "../auth.js";
 import { bold, cyan, dim, gray, green, log, logError, red, yellow } from "../colors.js";
 import { installAll } from "../installer.js";
 import { COMMAND_NAME, formatBytes, getClaudeSkillsDir, getPackageVersion } from "../lib.js";
@@ -147,9 +147,9 @@ export async function runInstall(opts = {}) {
     const compact = isClaudeCode();
     if (!compact)
         fancyBanner();
-    if (!hasAuth()) {
+    if (!hasValidAuth()) {
         if (!compact)
-            log(dim("  No hay sesión activa. Inicio el flow de login antes de instalar.\n"));
+            log(dim("  No hay sesión activa (o expiró). Inicio el login antes de instalar.\n"));
         const code = await runLogin({});
         if (code !== 0)
             return code;
@@ -166,21 +166,13 @@ export async function runInstall(opts = {}) {
     if (!compact) {
         section("Descargando skills del gateway");
     }
-    let result;
-    try {
-        result = await installAll({
-            dryRun: opts.dryRun,
-            force: opts.force,
-            only: opts.only,
-            targets: opts.targets,
-        });
-    }
-    catch (err) {
-        if (err instanceof AuthRequiredError) {
-            logError(err.message);
-            log(dim(`  Corre: ${COMMAND_NAME} login`));
-            return 2;
-        }
+    const installOpts = {
+        dryRun: opts.dryRun,
+        force: opts.force,
+        only: opts.only,
+        targets: opts.targets,
+    };
+    const reportInstallError = (err) => {
         const msg = err instanceof Error ? err.message : String(err);
         logError(msg);
         if (msg.includes("EACCES") || msg.includes("permission denied")) {
@@ -195,6 +187,29 @@ export async function runInstall(opts = {}) {
             log(dim("  Verifica tu conexión a internet y el estado del gateway."));
         }
         return 1;
+    };
+    let result;
+    try {
+        result = await installAll(installOpts);
+    }
+    catch (err) {
+        if (!(err instanceof AuthRequiredError))
+            return reportInstallError(err);
+        if (!compact)
+            log(dim("  La sesión expiró durante la sincronización; reabro el login y reintento.\n"));
+        const code = await runLogin({ force: true });
+        if (code !== 0)
+            return code;
+        try {
+            result = await installAll(installOpts);
+        }
+        catch (err2) {
+            if (err2 instanceof AuthRequiredError) {
+                logError(err2.message);
+                return 2;
+            }
+            return reportInstallError(err2);
+        }
     }
     if ("error" in result) {
         logError(result.error);
@@ -258,7 +273,7 @@ function printCompactSummary(results, manifest, email) {
             .map((r) => r.name)
             .sort()
             .join(", "))}`);
-    log(`  ${gray("destino:")} ${cyan(getClaudeSkillsDir())}${gray("  ·  ")}${bold(yellow("reinicia tu cliente para activarlas"))}`);
+    log(`  ${gray("destino:")} ${cyan(getClaudeSkillsDir())}${gray("  ·  ")}${bold(yellow("reinicia tu cliente para activar skills y MCPs"))}`);
     if (unchanged > 0 && installed === 0 && updated === 0) {
         log(`  ${dim(`(${unchanged} sin cambios desde la última instalación)`)}`);
     }

package/dist/commands/login.js

@@ -1,18 +1,21 @@
-import { performBrowserLogin, readAuth, writeAuth } from "../auth.js";
-import { bold, dim, green, log, logError } from "../colors.js";
+import { isAuthExpired, performBrowserLogin, readAuth, writeAuth } from "../auth.js";
+import { bold, dim, green, log, logError, logWarn } from "../colors.js";
 import { GATEWAY_URL, getAuthFilePath } from "../lib.js";
 import { banner } from "../ui.js";
 export async function runLogin(opts = {}) {
     banner();
     if (!opts.force) {
         const existing = readAuth();
-        if (existing) {
+        if (existing && !isAuthExpired(existing)) {
             log(`  ${green("✓")} Ya estás autenticado como ${bold(existing.email)}.`);
             log(dim(`     Token: ${getAuthFilePath()}`));
             log(dim("     Para volver a iniciar sesión: --force"));
             log("");
             return 0;
         }
+        if (existing) {
+            logWarn(`Tu sesión (${existing.email}) expiró — reabro el login.`);
+        }
     }
     log(`  Gateway: ${dim(GATEWAY_URL)}`);
     try {

package/dist/commands/status.js

@@ -48,10 +48,10 @@ export async function runStatus() {
     log("");
     const total = drift.toInstall.length + drift.toUpdate.length;
     if (total > 0) {
-        logWarn(`Hay ${total} skill(s) por actualizar. Corre: ${bold(`${COMMAND_NAME} update`)}`);
+        logWarn(`Hay ${total} skill(s) por actualizar. Agente: ejecutá vos mismo ${bold(`pnpm dlx ${COMMAND_NAME} update --yes`)} — el usuario no corre comandos.`);
     }
     else if (Object.keys(lock.skills).length === 0) {
-        logWarn(`Aún no hay skills instaladas. Corre: ${bold(`${COMMAND_NAME} install`)}`);
+        logWarn(`Aún no hay skills instaladas. Agente: ejecutá vos mismo ${bold(`pnpm dlx ${COMMAND_NAME}`)} — el usuario no corre comandos.`);
     }
     else {
         log(`  ${green("Todo al día.")}`);

package/dist/commands/uninstall.js

@@ -1,3 +1,6 @@
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 import { dim, gray, log, logOk, logWarn, red } from "../colors.js";
 import { uninstallAll } from "../installer.js";
 import { readLockFile } from "../lib.js";
@@ -22,7 +25,26 @@ export async function runUninstall(opts = {}) {
         }
     }
     const results = uninstallAll({ dryRun: opts.dryRun });
+    if (!opts.dryRun)
+        removeNpmrcCooldownExclude();
     log("");
-    logOk(`${results.length} skill(s) eliminadas.`);
+    if (opts.dryRun) {
+        logOk(`${results.length} skill(s) se eliminarían (dry-run, nada borrado).`);
+    }
+    else {
+        logOk(`${results.length} skill(s) eliminadas.`);
+    }
     return 0;
 }
+function removeNpmrcCooldownExclude() {
+    const npmrc = join(homedir(), ".npmrc");
+    if (!existsSync(npmrc))
+        return;
+    const EXCLUDE = "minimum-release-age-exclude[]=alegra-data-agent";
+    const lines = readFileSync(npmrc, "utf-8").split("\n");
+    const kept = lines.filter((l) => l.trim() !== EXCLUDE);
+    if (kept.length !== lines.length) {
+        writeFileSync(npmrc, kept.join("\n"));
+        logOk("Removido minimum-release-age-exclude de ~/.npmrc");
+    }
+}

package/dist/commands/update.js

@@ -1,21 +1,42 @@
 import { AuthRequiredError, fetchManifest } from "../api.js";
+import { hasValidAuth } from "../auth.js";
 import { cyan, dim, gray, green, log, logError, yellow } from "../colors.js";
 import { detectDrift, installAll, summarize } from "../installer.js";
 import { banner } from "../ui.js";
+import { refreshHookCommand } from "./hook.js";
+import { runLogin } from "./login.js";
 export async function runUpdate(opts = {}) {
     banner();
-    let manifest;
-    try {
-        manifest = await fetchManifest();
+    if (!hasValidAuth()) {
+        const code = await runLogin({});
+        if (code !== 0)
+            return code;
     }
-    catch (err) {
-        if (err instanceof AuthRequiredError) {
-            logError(err.message);
-            return 2;
+    let reauthed = false;
+    for (;;) {
+        try {
+            return await runUpdateOnce(opts);
+        }
+        catch (err) {
+            if (err instanceof AuthRequiredError && !reauthed) {
+                reauthed = true;
+                log(dim("  La sesión expiró durante la actualización; reabro el login y reintento.\n"));
+                const code = await runLogin({ force: true });
+                if (code !== 0)
+                    return code;
+                continue;
+            }
+            if (err instanceof AuthRequiredError) {
+                logError(err.message);
+                return 2;
+            }
+            logError(err instanceof Error ? err.message : String(err));
+            return 1;
         }
-        logError(err instanceof Error ? err.message : String(err));
-        return 1;
     }
+}
+async function runUpdateOnce(opts) {
+    const manifest = await fetchManifest();
     if (!manifest) {
         logError("No se pudo cargar el manifest.");
         return 1;
@@ -29,6 +50,8 @@ export async function runUpdate(opts = {}) {
     ];
     if (pending.length === 0) {
         log(green("  ✓ Todo al día (skills + MCPs).\n"));
+        if (!opts.dryRun)
+            refreshHookCommand();
         return 0;
     }
     log(cyan(`  → ${pending.length} elemento(s) por actualizar:\n`));
@@ -51,6 +74,7 @@ export async function runUpdate(opts = {}) {
         return 1;
     }
     summarize(result.results);
+    refreshHookCommand();
     const failed = result.results.some((r) => r.status === "failed");
     return failed ? 1 : 0;
 }

package/dist/commands/whoami.js

@@ -4,7 +4,7 @@ import { COMMAND_NAME, getAuthFilePath } from "../lib.js";
 export function runWhoami() {
     const auth = readAuth();
     if (!auth) {
-        logWarn(`No autenticado. Corre: ${COMMAND_NAME} login`);
+        logWarn(`No autenticado. Agente: ejecutá vos mismo \`pnpm dlx ${COMMAND_NAME} login\` — al usuario solo le toca el click del navegador.`);
         return 1;
     }
     log("");

package/dist/installer.js

@@ -4,7 +4,7 @@ import { dirname, join, resolve, sep } from "node:path";
 import { fetchManifest, fetchSkillFile } from "./api.js";
 import { dim, gray, green, logError, red, yellow } from "./colors.js";
 import { ensureDir, getLockFilePath, getPackageVersion, readLockFile, sha256File, writeLockFile, } from "./lib.js";
-import { renderMcpForTarget } from "./render.js";
+import { inlineReferences, renderMcpForTarget } from "./render.js";
 import { TARGETS, detectInstalledTargets } from "./targets.js";
 const SKILL_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 const MCP_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
@@ -32,6 +32,14 @@ function validateRelPath(rel) {
         }
     }
 }
+function mcpConfigHash(mcp) {
+    const salient = JSON.stringify({
+        url: mcp.url,
+        type: mcp.auth.type,
+        tokenEnv: mcp.auth.tokenEnv ?? null,
+    });
+    return createHash("sha256").update(salient).digest("hex");
+}
 function safeJoinSkillFile(skillRoot, rel) {
     const candidate = resolve(skillRoot, rel);
     const root = resolve(skillRoot);
@@ -95,17 +103,21 @@ function writeSkillToTarget(skillName, staged, spec) {
     if (!entry) {
         throw new Error(`Para target ${spec.id} se requiere SKILL.md o README.md en la skill`);
     }
+    const references = staged
+        .filter((f) => f.rel !== "SKILL.md" && f.rel !== "README.md")
+        .map((f) => ({ rel: f.rel, text: new TextDecoder().decode(f.data) }));
     const content = new TextDecoder().decode(entry.data);
-    const rendered = renderSkillForTargetFromContent(content, skillName, spec.skillFormat);
+    const rendered = renderSkillForTargetFromContent(content, skillName, spec.skillFormat, references);
     ensureDir(spec.skillsDir);
     const dst = join(spec.skillsDir, rendered.filename);
     atomicWriteFile(dst, rendered.content);
 }
-function renderSkillForTargetFromContent(content, skillName, format) {
+function renderSkillForTargetFromContent(content, skillName, format, references = []) {
     if (format === "folder") {
         throw new Error("renderSkillForTargetFromContent no soporta 'folder'");
     }
     const stripped = content.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n/, "").replace(/^\s+/, "");
+    const body = stripped + inlineReferences(references);
     const fm = parseFrontmatterMinimal(content);
     if (format === "cursor-mdc") {
         const desc = fm.description ?? `Skill ${skillName}`;
@@ -113,10 +125,10 @@ function renderSkillForTargetFromContent(content, skillName, format) {
         const safeDesc = cursorDesc.replace(/\n/g, " ").replace(/"/g, '\\"');
         return {
             filename: `${skillName}.mdc`,
-            content: `---\ndescription: "${safeDesc}"\nalwaysApply: false\n---\n\n${stripped}`,
+            content: `---\ndescription: "${safeDesc}"\nalwaysApply: false\n---\n\n${body}`,
         };
     }
-    return { filename: `${skillName}.md`, content: stripped };
+    return { filename: `${skillName}.md`, content: body };
 }
 function parseFrontmatterMinimal(content) {
     const m = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
@@ -151,11 +163,15 @@ function readJsonOrEmpty(path) {
         return JSON.parse(readFileSync(path, "utf-8"));
     }
     catch {
-        throw new Error(`${path} no es JSON válido. Arréglalo manualmente o muévelo y vuelve a instalar.`);
+        throw new Error(`${path} no es JSON válido. Agente: respaldalo vos mismo (renombralo a .bak) y volvé a correr la instalación — no le pidas al usuario tocar archivos.`);
     }
 }
 function registerMcpInTarget(mcp, spec) {
     validateMcpName(mcp.name);
+    if (spec.mcpMechanism === "toml-block") {
+        registerMcpInTomlBlock(mcp, spec);
+        return;
+    }
     const cfg = readJsonOrEmpty(spec.mcpConfigPath);
     const section = cfg[spec.mcpRootKey] ?? {};
     section[mcp.name] = renderMcpForTarget(mcp, spec);
@@ -164,6 +180,9 @@ function registerMcpInTarget(mcp, spec) {
     atomicWriteFile(spec.mcpConfigPath, `${JSON.stringify(cfg, null, 2)}\n`);
 }
 function unregisterMcpInTarget(mcpName, spec) {
+    if (spec.mcpMechanism === "toml-block") {
+        return unregisterMcpInTomlBlock(mcpName, spec);
+    }
     if (!existsSync(spec.mcpConfigPath))
         return false;
     const cfg = readJsonOrEmpty(spec.mcpConfigPath);
@@ -176,6 +195,77 @@ function unregisterMcpInTarget(mcpName, spec) {
     atomicWriteFile(spec.mcpConfigPath, `${JSON.stringify(cfg, null, 2)}\n`);
     return true;
 }
+function tomlBasicString(s) {
+    return `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+export function renderMcpToml(mcp) {
+    const lines = [`[mcp_servers.${mcp.name}]`, `url = ${tomlBasicString(mcp.url)}`];
+    if (mcp.auth.type === "gateway") {
+        if (!mcp.auth.tokenEnv) {
+            throw new Error(`MCP '${mcp.name}' es type=gateway pero no trae tokenEnv`);
+        }
+        lines.push(`bearer_token_env_var = ${tomlBasicString(mcp.auth.tokenEnv)}`);
+    }
+    return lines.join("\n");
+}
+function tomlMarkers(name) {
+    return {
+        begin: `# >>> alegra-data-agent:${name} >>>`,
+        end: `# <<< alegra-data-agent:${name} <<<`,
+    };
+}
+export function upsertTomlBlock(content, name, block) {
+    const { begin, end } = tomlMarkers(name);
+    const fenced = `${begin}\n${block}\n${end}`;
+    const bi = content.indexOf(begin);
+    if (bi !== -1) {
+        const ei = content.indexOf(end, bi);
+        if (ei !== -1) {
+            return content.slice(0, bi) + fenced + content.slice(ei + end.length);
+        }
+    }
+    if (content.length === 0)
+        return `${fenced}\n`;
+    const sep = content.endsWith("\n\n") ? "" : content.endsWith("\n") ? "\n" : "\n\n";
+    return `${content}${sep}${fenced}\n`;
+}
+export function removeTomlBlock(content, name) {
+    const { begin, end } = tomlMarkers(name);
+    const bi = content.indexOf(begin);
+    if (bi === -1)
+        return content;
+    const ei = content.indexOf(end, bi);
+    if (ei === -1)
+        return content;
+    let start = bi;
+    let stop = ei + end.length;
+    if (content[stop] === "\n")
+        stop++;
+    if (start > 0 && content[start - 1] === "\n")
+        start--;
+    return content.slice(0, start) + content.slice(stop);
+}
+function registerMcpInTomlBlock(mcp, spec) {
+    const existing = existsSync(spec.mcpConfigPath)
+        ? readFileSync(spec.mcpConfigPath, "utf-8")
+        : "";
+    const next = upsertTomlBlock(existing, mcp.name, renderMcpToml(mcp));
+    if (next === existing)
+        return;
+    backupIfExists(spec.mcpConfigPath);
+    atomicWriteFile(spec.mcpConfigPath, next);
+}
+function unregisterMcpInTomlBlock(name, spec) {
+    if (!existsSync(spec.mcpConfigPath))
+        return false;
+    const existing = readFileSync(spec.mcpConfigPath, "utf-8");
+    const next = removeTomlBlock(existing, name);
+    if (next === existing)
+        return false;
+    backupIfExists(spec.mcpConfigPath);
+    atomicWriteFile(spec.mcpConfigPath, next);
+    return true;
+}
 function resolveTargets(opts) {
     const ids = opts.targets?.length ? opts.targets : detectInstalledTargets();
     if (ids.length === 0) {
@@ -274,7 +364,7 @@ export function installMcp(mcp, opts = {}) {
     const targetsMatch = prev?.targets &&
         prev.targets.length === targetIds.length &&
         prev.targets.every((t) => targetIds.includes(t));
-    if (prev && targetsMatch && !opts.force) {
+    if (prev && targetsMatch && prev.configHash === mcpConfigHash(mcp) && !opts.force) {
         return { name: mcp.name, kind: "mcp", status: "unchanged", targets: targetIds };
     }
     if (opts.dryRun) {
@@ -293,6 +383,7 @@ export function installMcp(mcp, opts = {}) {
             name: mcp.name,
             installedFrom: getPackageVersion(),
             installedAt: new Date().toISOString(),
+            configHash: mcpConfigHash(mcp),
             targets: targetIds,
         };
         writeLockFile(lock);
@@ -399,8 +490,18 @@ export function uninstallMcp(name, opts = {}) {
     }
     const targetIds = (prev.targets ?? ["claude-code"]);
     if (!opts.dryRun) {
-        for (const tId of targetIds) {
-            unregisterMcpInTarget(name, TARGETS[tId]);
+        try {
+            for (const tId of targetIds) {
+                unregisterMcpInTarget(name, TARGETS[tId]);
+            }
+        }
+        catch (err) {
+            return {
+                name,
+                kind: "mcp",
+                status: "failed",
+                error: err instanceof Error ? err.message : String(err),
+            };
         }
         delete lock.mcps[name];
         writeLockFile(lock);
@@ -447,8 +548,11 @@ export function detectDrift(manifest) {
     };
     const manifestMcps = manifest.mcps ?? {};
     for (const name of Object.keys(manifestMcps)) {
-        if (!lock.mcps?.[name])
+        const prevMcp = lock.mcps?.[name];
+        if (!prevMcp)
             mcps.toInstall.push(name);
+        else if (prevMcp.configHash !== mcpConfigHash(manifestMcps[name]))
+            mcps.toUpdate.push(name);
         else
             mcps.unchanged.push(name);
     }

package/dist/lib.js

@@ -8,7 +8,13 @@ export const COMMAND_NAME = "alegra-data-agent";
 export const REPO_SLUG = "alegradev/alegra-data-agent";
 export const REPO_DEFAULT_BRANCH = "main";
 export const GATEWAY_URL = process.env.ALEGRA_DATA_AGENT_GATEWAY_URL ?? "https://alegra-data-agent.vercel.app";
-export const ALL_TARGETS = ["claude-code", "cursor", "opencode", "antigravity"];
+export const ALL_TARGETS = [
+    "claude-code",
+    "cursor",
+    "opencode",
+    "antigravity",
+    "codex",
+];
 const __dirname = dirname(fileURLToPath(import.meta.url));
 export function getPackageRoot() {
     return join(__dirname, "..");
@@ -47,6 +53,14 @@ export function getAntigravitySkillsDir() {
 export function getAntigravitySettingsPath() {
     return join(homedir(), ".antigravity", "settings.json");
 }
+export function getCodexSkillsDir() {
+    return join(homedir(), ".agents", "skills");
+}
+export function getCodexConfigPath() {
+    const codexHome = process.env.CODEX_HOME;
+    const base = codexHome && codexHome.length > 0 ? codexHome : join(homedir(), ".codex");
+    return join(base, "config.toml");
+}
 export function getTargetSkillsDir(target) {
     switch (target) {
         case "claude-code":
@@ -57,6 +71,8 @@ export function getTargetSkillsDir(target) {
             return getOpenCodeSkillsDir();
         case "antigravity":
             return getAntigravitySkillsDir();
+        case "codex":
+            return getCodexSkillsDir();
     }
 }
 export function getTargetMcpConfigPath(target) {
@@ -69,6 +85,8 @@ export function getTargetMcpConfigPath(target) {
             return getOpenCodeConfigPath();
         case "antigravity":
             return getAntigravitySettingsPath();
+        case "codex":
+            return getCodexConfigPath();
     }
 }
 export function getLockFilePath() {

package/dist/main.js

@@ -1,3 +1,4 @@
+import { maybeBounceToLatest } from "./bounce.js";
 import { log, logError } from "./colors.js";
 import { ALL_TARGETS, getPackageVersion } from "./lib.js";
 import { helpText } from "./ui.js";
@@ -34,6 +35,7 @@ function parseArgs(argv) {
         help: false,
         version: false,
         noHook: false,
+        noBounce: false,
         autoUpdate: false,
     };
     const positional = [];
@@ -50,6 +52,8 @@ function parseArgs(argv) {
             flags.force = true;
         else if (a === "--no-hook")
             flags.noHook = true;
+        else if (a === "--no-bounce")
+            flags.noBounce = true;
         else if (a === "--auto-update")
             flags.autoUpdate = true;
         else if (a === "-h" || a === "--help")
@@ -87,6 +91,9 @@ function parseArgs(argv) {
 }
 async function main() {
     const args = parseArgs(process.argv.slice(2));
+    if (!args.flags.noBounce) {
+        await maybeBounceToLatest(process.argv.slice(2));
+    }
     if (args.flags.version) {
         log(getPackageVersion());
         process.exit(0);
@@ -114,7 +121,7 @@ async function main() {
                 only: args.only.length > 0 ? args.only : undefined,
                 targets: args.targets.length > 0 ? args.targets : undefined,
                 noHook: args.flags.noHook,
-                hookMode: args.flags.autoUpdate ? "auto" : "check",
+                hookMode: "auto",
             });
             break;
         case "update":
@@ -139,7 +146,7 @@ async function main() {
             break;
         case "hook":
             if (args.subcommand === "install") {
-                exitCode = runHookInstall(args.flags.autoUpdate ? "auto" : "check");
+                exitCode = runHookInstall("auto");
             }
             else if (args.subcommand === "uninstall") {
                 exitCode = runHookUninstall();

package/dist/render.js

@@ -1,5 +1,5 @@
 import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
+import { extname, join } from "node:path";
 import { parseFrontmatter } from "./lib.js";
 function readSkillEntryPoint(skillDir) {
     const candidates = ["SKILL.md", "README.md"];
@@ -37,6 +37,39 @@ function stripFrontmatter(content) {
         return content;
     return m[1].replace(/^\s+/, "");
 }
+const INLINE_TEXT_EXT = new Set([".md", ".sql", ".txt", ".json", ".yaml", ".yml", ".csv"]);
+const INLINE_MAX_BYTES = 64 * 1024;
+const FENCE_LANG = {
+    ".sql": "sql",
+    ".json": "json",
+    ".yaml": "yaml",
+    ".yml": "yaml",
+    ".csv": "csv",
+    ".txt": "",
+};
+export function inlineReferences(refs) {
+    const sections = [];
+    for (const ref of refs) {
+        const ext = extname(ref.rel).toLowerCase();
+        const bytes = Buffer.byteLength(ref.text, "utf-8");
+        if (!INLINE_TEXT_EXT.has(ext)) {
+            sections.push(`### \`${ref.rel}\`\n\n> (omitido: tipo \`${ext || "sin extensión"}\` no inlineable)`);
+        }
+        else if (bytes > INLINE_MAX_BYTES) {
+            sections.push(`### \`${ref.rel}\`\n\n> (omitido: ${Math.round(bytes / 1024)} KB; supera el límite de inline)`);
+        }
+        else if (ext === ".md") {
+            sections.push(`### \`${ref.rel}\`\n\n${ref.text.trim()}`);
+        }
+        else {
+            const lang = FENCE_LANG[ext] ?? "";
+            sections.push(`### \`${ref.rel}\`\n\n\`\`\`${lang}\n${ref.text.replace(/\s+$/, "")}\n\`\`\``);
+        }
+    }
+    if (sections.length === 0)
+        return "";
+    return `\n\n---\n\n# Referencias (incluidas inline)\n\n> Este cliente instala la skill como un solo archivo; el contenido de \`references/\` se incluye acá para que las menciones del cuerpo sigan disponibles.\n\n${sections.join("\n\n")}\n`;
+}
 export function renderMcpForTarget(mcp, spec) {
     const obj = {
         [spec.mcpUrlKey]: mcp.url,
@@ -64,5 +97,7 @@ function bearerInterpolation(env, target) {
             return `Bearer \${env:${env}}`;
         case "opencode":
             return `Bearer {env:${env}}`;
+        case "codex":
+            throw new Error("codex usa config TOML (bearer_token_env_var), no headers JSON");
     }
 }

package/dist/targets.js

@@ -1,7 +1,7 @@
 import { existsSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { getAntigravitySettingsPath, getAntigravitySkillsDir, getClaudeSettingsPath, getClaudeSkillsDir, getCursorMcpPath, getCursorSkillsDir, getOpenCodeConfigPath, getOpenCodeSkillsDir, } from "./lib.js";
+import { getAntigravitySettingsPath, getAntigravitySkillsDir, getClaudeSettingsPath, getClaudeSkillsDir, getCodexConfigPath, getCodexSkillsDir, getCursorMcpPath, getCursorSkillsDir, getOpenCodeConfigPath, getOpenCodeSkillsDir, } from "./lib.js";
 export const TARGETS = {
     "claude-code": {
         id: "claude-code",
@@ -40,17 +40,31 @@ export const TARGETS = {
         mcpRootKey: "mcpServers",
         mcpUrlKey: "serverUrl",
     },
+    codex: {
+        id: "codex",
+        label: "Codex",
+        skillsDir: getCodexSkillsDir(),
+        skillFormat: "folder",
+        mcpConfigPath: getCodexConfigPath(),
+        mcpRootKey: "mcpServers",
+        mcpUrlKey: "url",
+        mcpMechanism: "toml-block",
+    },
 };
 export function detectInstalledTargets() {
     const home = homedir();
     const xdgConfig = process.env.XDG_CONFIG_HOME && process.env.XDG_CONFIG_HOME.length > 0
         ? process.env.XDG_CONFIG_HOME
         : join(home, ".config");
+    const codexHome = process.env.CODEX_HOME && process.env.CODEX_HOME.length > 0
+        ? process.env.CODEX_HOME
+        : join(home, ".codex");
     const sentinels = {
         "claude-code": join(home, ".claude"),
         cursor: join(home, ".cursor"),
         opencode: join(xdgConfig, "opencode"),
         antigravity: join(home, ".antigravity"),
+        codex: codexHome,
     };
     const out = [];
     for (const id of Object.keys(sentinels)) {

package/dist/ui.js

@@ -59,9 +59,10 @@ ${bold("Opciones:")}
   -y, --yes            No pedir confirmación
       --dry-run        Mostrar qué se haría, sin tocar archivos
       --only=a,b,c     Instalar solo esas skills/MCPs
-      --target=NAME    Restringir al cliente NAME (claude-code|cursor|opencode|antigravity)
+      --target=NAME    Restringir al cliente NAME (claude-code|cursor|opencode|antigravity|codex)
       --no-hook        No instalar el hook de SessionStart
-      --auto-update    Hook en modo auto-update (instala en silencio)
+      --no-bounce      No saltar a la última versión publicada (la usa el hook)
+      --auto-update    Aceptado por compatibilidad — el hook ya es auto-update por default
   -h, --help           Mostrar ayuda
   -v, --version        Mostrar versión
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alegra-data-agent",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "private": false,
   "description": "Agente de Data interno de Alegra. Instala skills + MCPs en tu cliente de IA con un comando.",
   "license": "UNLICENSED",