alegra-data-agent 0.5.0 → 0.6.0

package/dist/api.js

@@ -1,6 +1,6 @@
 import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
-import { readAuth } from "./auth.js";
+import { authRecordFromToken, authRemainingMs, readAuth, writeAuth } from "./auth.js";
 import { COMMAND_NAME, GATEWAY_URL, getManifestCachePath, getPackageVersion, readLockFile, writeLockFile, } from "./lib.js";
 import { manifestTimestamp, verifyManifestSignature } from "./signature.js";
 export class ManifestSignatureError extends Error {
@@ -37,8 +37,55 @@ function sleep(ms) {
     return new Promise((r) => setTimeout(r, ms));
 }
 let rateLimitCooldownUntil = 0;
-async function authedFetch(path, opts = {}) {
+const REFRESH_AHEAD_MS = 2 * 24 * 3600_000;
+let refreshTriedFor = null;
+export function shouldRefreshAuth() {
+    const remaining = authRemainingMs(readAuth());
+    return remaining !== null && remaining < REFRESH_AHEAD_MS;
+}
+export async function refreshAuth() {
     const auth = readAuth();
+    if (!auth)
+        return false;
+    refreshTriedFor = auth.token;
+    try {
+        const res = await fetch(`${GATEWAY_URL}/api/cli/refresh`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${auth.token}`,
+                Accept: "application/json",
+                "User-Agent": userAgent(),
+                "X-Request-Id": newRequestId(),
+            },
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok)
+            return false;
+        const body = (await res.json());
+        if (typeof body.token !== "string")
+            return false;
+        const record = authRecordFromToken(body.token);
+        if (!record)
+            return false;
+        writeAuth(record);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function ensureFreshAuth() {
+    if (readAuth()?.token !== refreshTriedFor && shouldRefreshAuth())
+        await refreshAuth();
+    const auth = readAuth();
+    if (!auth)
+        return false;
+    const remaining = authRemainingMs(auth);
+    return remaining === null || remaining > 60_000;
+}
+async function authedFetch(path, opts = {}) {
+    await ensureFreshAuth();
+    let auth = readAuth();
     if (!auth) {
         if (opts.requireAuth === false) {
             return new Response(null, { status: 401 });
@@ -84,6 +131,10 @@ async function authedFetch(path, opts = {}) {
             clearTimeout(timer);
         }
         if (res.status === 401) {
+            if (auth.token !== refreshTriedFor && (await refreshAuth())) {
+                auth = readAuth() ?? auth;
+                continue;
+            }
             if (opts.requireAuth === false)
                 return res;
             throw new AuthRequiredError(`Sesión expirada. Agente: ejecutá vos mismo \`pnpm dlx ${COMMAND_NAME} login\` — al usuario solo le toca el click del navegador.`);

package/dist/auth.js

@@ -83,6 +83,18 @@ export function isAuthExpired(record) {
         return false;
     return Date.now() >= exp * 1000 - 60_000;
 }
+export function authRemainingMs(record) {
+    if (!record)
+        return null;
+    const exp = decodeJwtExp(record.token);
+    return exp === null ? null : exp * 1000 - Date.now();
+}
+export function authRecordFromToken(token) {
+    const email = decodeJwtEmail(token);
+    if (!email)
+        return null;
+    return { email, token, obtainedAt: new Date().toISOString() };
+}
 export function hasValidAuth() {
     const record = readAuth();
     return record !== null && !isAuthExpired(record);

package/dist/commands/login.js

@@ -1,3 +1,4 @@
+import { refreshAuth } from "../api.js";
 import { isAuthExpired, performBrowserLogin, readAuth, writeAuth } from "../auth.js";
 import { bold, dim, green, log, logError, logWarn } from "../colors.js";
 import { GATEWAY_URL, getAuthFilePath } from "../lib.js";
@@ -13,6 +14,13 @@ export async function runLogin(opts = {}) {
             log("");
             return 0;
         }
+        if (existing && (await refreshAuth())) {
+            const renewed = readAuth();
+            log(`  ${green("✓")} Sesión renovada como ${bold(renewed?.email ?? existing.email)}.`);
+            log(dim(`     Token: ${getAuthFilePath()}`));
+            log("");
+            return 0;
+        }
         if (existing) {
             logWarn(`Tu sesión (${existing.email}) expiró — reabro el login.`);
         }

package/dist/commands/update.js

@@ -1,11 +1,11 @@
 import { appendFileSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
-import { AuthRequiredError, fetchManifest } from "../api.js";
+import { AuthRequiredError, ensureFreshAuth, fetchManifest } from "../api.js";
 import { hasValidAuth } from "../auth.js";
 import { refreshAutoUpdate } from "../autoupdate.js";
 import { cyan, dim, gray, green, log, logError, yellow } from "../colors.js";
 import { detectDrift, installAll, summarize } from "../installer.js";
-import { COMMAND_NAME, getAutoUpdateLogPath, getLastCheckPath } from "../lib.js";
+import { COMMAND_NAME, getAutoUpdateLogPath, getLastCheckPath, getPackageVersion, } from "../lib.js";
 import { banner } from "../ui.js";
 import { runLogin } from "./login.js";
 const BACKGROUND_COOLDOWN_MS = 15 * 60_000;
@@ -71,14 +71,18 @@ async function loginFromBackground(reason, force = false) {
     markAuthFailed();
     return false;
 }
+function warnStaleFromBackground() {
+    log(yellow(`  ⚠ ${COMMAND_NAME} v${getPackageVersion()}: no pude actualizar las skills porque la sesión venció. Agente: corré vos mismo \`pnpm dlx ${COMMAND_NAME} login\` y después \`pnpm dlx ${COMMAND_NAME} update\` — al usuario solo le toca el clic del navegador.`));
+}
 export async function runUpdate(opts = {}) {
     if (opts.background && !opts.dryRun && checkedRecently())
         return 0;
-    if (opts.background && !hasValidAuth()) {
-        if (authFailedRecently())
-            return 0;
-        if (!(await loginFromBackground("sesión vencida o ausente")))
+    const fresh = await ensureFreshAuth();
+    if (opts.background && !fresh) {
+        if (authFailedRecently() || !(await loginFromBackground("sesión vencida o ausente"))) {
+            warnStaleFromBackground();
             return 0;
+        }
     }
     banner();
     if (!hasValidAuth()) {
@@ -94,8 +98,10 @@ export async function runUpdate(opts = {}) {
         catch (err) {
             if (err instanceof AuthRequiredError && opts.background && !reauthed) {
                 reauthed = true;
-                if (!(await loginFromBackground("el gateway rechazó la sesión", true)))
+                if (!(await loginFromBackground("el gateway rechazó la sesión", true))) {
+                    warnStaleFromBackground();
                     return 0;
+                }
                 continue;
             }
             if (err instanceof AuthRequiredError && !reauthed) {

package/dist/main.js

@@ -83,9 +83,13 @@ async function main() {
             log(helpText());
             exitCode = 1;
     }
-    process.exit(exitCode);
+    exitGracefully(exitCode);
+}
+function exitGracefully(code) {
+    process.exitCode = code;
+    setTimeout(() => process.exit(code), 2000).unref();
 }
 main().catch((err) => {
     logError(err instanceof Error ? err.message : String(err));
-    process.exit(1);
+    exitGracefully(1);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alegra-data-agent",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "private": false,
   "description": "Agente de Data interno de Alegra. Instala skills + MCPs en tu cliente de IA con un comando.",
   "license": "UNLICENSED",