alegra-data-agent 0.2.6 → 0.2.8

package/dist/commands/status.js

@@ -1,4 +1,6 @@
 import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 import { AuthRequiredError, fetchManifest } from "../api.js";
 import { readAuth } from "../auth.js";
 import { bold, cyan, dim, gray, green, log, logError, logWarn, yellow } from "../colors.js";
@@ -101,13 +103,15 @@ function reportAccountConnectorOverlap(manifest) {
     }
     if (overlap.length === 0)
         return;
-    logWarn(`Tenés ${overlap.length} connector(s) de tu cuenta que duplican un MCP del agente:`);
+    logWarn(`Tenés ${overlap.length} connector(s) de tu cuenta con el mismo nombre que un MCP:`);
     for (const o of overlap)
         log(gray(`                  ${o}`));
-    log(gray("                  Son servidores distintos, cada uno con su propia autenticación."));
-    log(gray("                  Si el oficial no está autenticado, el agente puede responder por el"));
-    log(gray("                  tuyo — y un connector personalizado apunta a donde alguien escribió."));
-    log(gray(`                  Autenticá los del agente: /mcp → click en el servicio → Authenticate.`));
+    log(gray("                  Suelen ser el MISMO servidor visto dos veces, pero cada uno tiene"));
+    log(gray("                  su propia autenticación, y un connector personalizado apunta a la"));
+    log(gray("                  URL que escribió una persona: desde acá no se puede saber cuál es."));
+    log(gray("                  Lo que importa: si el del agente no está autenticado, la respuesta"));
+    log(gray("                  puede venir del connector sin que se note."));
+    log(gray("                  Autenticá los del agente: /mcp → click en el servicio → Authenticate."));
     log("");
 }
 export function findRogueMetabase(manifest, specs = Object.values(TARGETS)) {
@@ -154,6 +158,87 @@ function reportRogueMetabase(manifest) {
     log(gray("                  si no los necesitás, conviene quitarlos del cliente."));
     log("");
 }
+function connectorUrlsFromCredentials(ourServerNames, credentialsPath = join(homedir(), ".claude", ".credentials.json")) {
+    const urls = new Set();
+    if (!existsSync(credentialsPath))
+        return urls;
+    try {
+        const raw = JSON.parse(readFileSync(credentialsPath, "utf-8"));
+        const entries = raw.mcpOAuth;
+        if (!entries || typeof entries !== "object")
+            return urls;
+        for (const [key, val] of Object.entries(entries)) {
+            const name = key.split("|")[0];
+            if (ourServerNames.has(name))
+                continue;
+            const url = val?.serverUrl;
+            if (typeof url === "string")
+                urls.add(url.trim().replace(/\/+$/, "").toLowerCase());
+        }
+    }
+    catch {
+    }
+    return urls;
+}
+export function findClaudeAiDuplicates(manifest, claudeJsonPath = TARGETS["claude-code"].mcpConfigPath) {
+    if (!existsSync(claudeJsonPath))
+        return [];
+    let cfg;
+    try {
+        cfg = JSON.parse(readFileSync(claudeJsonPath, "utf-8"));
+    }
+    catch {
+        return [];
+    }
+    const connectors = cfg.claudeAiMcpEverConnected;
+    if (!Array.isArray(connectors))
+        return [];
+    const localServers = cfg[TARGETS["claude-code"].mcpRootKey];
+    if (!localServers || typeof localServers !== "object")
+        return [];
+    const ourNames = new Set(Object.keys(localServers));
+    const connectorUrls = connectorUrlsFromCredentials(ourNames);
+    const norm = (u) => u.trim().replace(/\/+$/, "").toLowerCase();
+    const flat = (v) => v.toLowerCase().replace(/[^a-z0-9]/g, "");
+    const out = [];
+    for (const name of ourNames) {
+        const official = manifest.mcps?.[name]?.url;
+        if (!manifest.mcps?.[name])
+            continue;
+        const needle = flat(name);
+        for (const c of connectors) {
+            if (typeof c !== "string")
+                continue;
+            const hay = flat(c.replace(/^claude\.ai\s*/i, ""));
+            if (!hay.includes(needle))
+                continue;
+            out.push({
+                mcp: name,
+                connector: c,
+                sameUrl: typeof official === "string" && connectorUrls.has(norm(official)),
+            });
+        }
+    }
+    return out;
+}
+function reportClaudeAiDuplicates(manifest) {
+    const dupes = findClaudeAiDuplicates(manifest);
+    if (dupes.length === 0)
+        return;
+    logWarn(`Hay ${dupes.length} MCP(s) que tenés por dos vías: server local y conector de claude.ai.`);
+    for (const d of dupes) {
+        const marca = d.sameUrl
+            ? " — mismo servidor (misma URL)"
+            : " — mismo nombre, URL sin verificar";
+        log(gray(`                  ${d.mcp} (local)  ·  ${d.connector}${marca}`));
+    }
+    log(gray("                  En Claude Code gana el local y el conector queda oculto, así que"));
+    log(gray("                  hoy no se pisan — pero autenticás dos veces el mismo servidor."));
+    log(gray("                  Si preferís el conector (una sola auth, y sirve también en Desktop,"));
+    log(gray("                  claude.ai, Cowork y móvil): claude mcp remove <nombre>."));
+    log(gray("                  Verificá antes que apunte a la MISMA URL que el oficial."));
+    log("");
+}
 export async function runStatus() {
     const auth = readAuth();
     const lockForTargets = readLockFile();
@@ -216,6 +301,7 @@ export async function runStatus() {
     log("");
     reportMcps(manifest, lock);
     reportRogueMetabase(manifest);
+    reportClaudeAiDuplicates(manifest);
     reportAccountConnectorOverlap(manifest);
     const total = drift.toInstall.length +
         drift.toUpdate.length +

package/dist/installer.js

@@ -41,6 +41,7 @@ function mcpConfigHash(mcp) {
         env: mcp.env ?? null,
         type: mcp.auth.type,
         tokenEnv: mcp.auth.tokenEnv ?? null,
+        ...(mcp.delivery ? { delivery: mcp.delivery } : {}),
     });
     return createHash("sha256").update(salient).digest("hex");
 }
@@ -624,6 +625,43 @@ export function installMcp(mcp, opts = {}) {
     const lock = readLockFile();
     if (!lock.mcps)
         lock.mcps = {};
+    if (mcp.delivery === "connector") {
+        const hint = mcp.connectorHint ?? "se habilita como conector de la cuenta, no como server local";
+        const stale = lock.mcps[mcp.name];
+        if (!stale)
+            return { name: mcp.name, kind: "mcp", status: "skipped", error: hint };
+        const staleTargets = (stale.targets ?? ["claude-code"]);
+        if (opts.dryRun) {
+            return {
+                name: mcp.name,
+                kind: "mcp",
+                status: "skipped",
+                targets: staleTargets,
+                error: `${hint} (se retirará la entry local)`,
+            };
+        }
+        try {
+            for (const tId of staleTargets)
+                unregisterMcpInTarget(mcp.name, TARGETS[tId]);
+        }
+        catch (err) {
+            return {
+                name: mcp.name,
+                kind: "mcp",
+                status: "failed",
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+        delete lock.mcps[mcp.name];
+        writeLockFile(lock);
+        return {
+            name: mcp.name,
+            kind: "mcp",
+            status: "skipped",
+            targets: staleTargets,
+            error: `entry local retirada — ${hint}`,
+        };
+    }
     const wantedTargets = resolveTargets(opts).filter((t) => !mcp.targets || mcp.targets.includes(t.id));
     const targetIds = wantedTargets.map((t) => t.id);
     if (targetIds.length === 0) {
@@ -858,6 +896,8 @@ export function detectDrift(manifest) {
     };
     const manifestMcps = manifest.mcps ?? {};
     for (const name of Object.keys(manifestMcps)) {
+        if (manifestMcps[name].delivery === "connector")
+            continue;
         const prevMcp = lock.mcps?.[name];
         if (!prevMcp) {
             mcps.toInstall.push(name);
@@ -916,6 +956,11 @@ export function summarize(results) {
             logError(`${r.name}: ${r.error}`);
         }
     }
+    for (const r of results) {
+        if (r.status === "skipped" && r.error) {
+            process.stdout.write(yellow(`  - ${r.name}: ${r.error}\n`));
+        }
+    }
     process.stdout.write(dim(`  Lock: ${getLockFilePath()}\n`));
     process.stdout.write("\n");
 }

package/dist/main.js

@@ -118,7 +118,6 @@ async function main() {
             break;
         case "install":
             exitCode = await runInstall({
-                yes: args.flags.yes,
                 dryRun: args.flags.dryRun,
                 force: args.flags.force,
                 only: args.only.length > 0 ? args.only : undefined,
@@ -129,7 +128,6 @@ async function main() {
             break;
         case "update":
             exitCode = await runUpdate({
-                yes: args.flags.yes,
                 dryRun: args.flags.dryRun,
                 background: args.flags.background,
                 targets: args.targets.length > 0 ? args.targets : undefined,

package/dist/ui.js

@@ -56,7 +56,7 @@ ${bold("Comandos:")}
   version            Muestra la versión
 
 ${bold("Opciones:")}
-  -y, --yes            No pedir confirmación
+  -y, --yes            No pedir confirmación — solo uninstall pregunta
       --dry-run        Mostrar qué se haría, sin tocar archivos
       --only=a,b,c     Instalar solo esas skills/MCPs
       --target=NAME    Restringir al cliente NAME (claude-code|cursor|opencode|antigravity|codex)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alegra-data-agent",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "private": false,
   "description": "Agente de Data interno de Alegra. Instala skills + MCPs en tu cliente de IA con un comando.",
   "license": "UNLICENSED",
@@ -47,6 +47,7 @@
     "test:all": "pnpm run test && pnpm run test:security",
     "eval:run": "node tests/evals/run-phase2.mjs",
     "verify:clients": "node scripts/verify-clients.mjs",
+    "pack:web": "node --experimental-strip-types --disable-warning=ExperimentalWarning scripts/pack-skills-web.mjs",
     "lint": "pnpm dlx @biomejs/biome@1.9.4 check .",
     "lint:fix": "pnpm dlx @biomejs/biome@1.9.4 check --write .",
     "format": "pnpm dlx @biomejs/biome@1.9.4 format --write ."