blackboard-upc 1.0.8 → 1.0.9

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `blackboard-upc` will be documented here.
 
 ---
 
+## [1.0.9] — 2026-04-24
+
+### Fixed
+- **`whoami` y `status` mostraban `unknown`** — el extractor leía `userData.userName`, campo que la API de UPC no devuelve. Ahora se arma desde `name.given + name.family` con fallback a `studentId`
+- **`logout` no permitía cambiar de cuenta** — solo borraba `session.json` pero no el browser profile de Playwright (`~/.blackboard-cli/browser-profile`), donde viven las cookies de Microsoft SSO. El siguiente `login` se auto-autenticaba con la misma cuenta. Ahora `logout` borra también el profile
+
+### Added
+- `blackboard logout --keep-profile` — conserva las cookies SSO (útil para renovar sesión de la misma cuenta sin re-ingresar credenciales)
+- **Self-heal de sesiones viejas** — `whoami` y `status` detectan `userName: null` en sesiones guardadas con versiones previas y rellenan el nombre llamando a `/users/me` una sola vez (sin necesidad de re-login)
+- `resolveDisplayName()` helper en `src/auth/login.ts` — centraliza la lógica de nombre desde la respuesta de `/users/me`
+
+---
+
 ## [1.0.8] — 2026-04-19
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blackboard-upc",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "CLI no oficial para UPC Aula Virtual (Blackboard Learn) — acceso desde la terminal y MCP para Claude",
   "main": "run.js",
   "bin": {

package/src/auth/login.ts

@@ -43,6 +43,20 @@ function extractBbRouterExpiry(cookies: Cookie[]): number {
   return Date.now() + SESSION_TTL_FALLBACK_MS;
 }
 
+// UPC's /users/me omits `userName` at the root. The display name must be
+// assembled from `name.given` + `name.family`, falling back to `studentId`.
+export function resolveDisplayName(userData: any): string | undefined {
+  if (!userData) return undefined;
+  if (typeof userData.userName === 'string' && userData.userName.trim()) return userData.userName.trim();
+  const full = [userData?.name?.given, userData?.name?.family].filter(Boolean).join(' ').trim();
+  if (full) return full;
+  if (userData?.name?.preferredDisplayName && typeof userData.name.preferredDisplayName === 'string') {
+    const pdn = userData.name.preferredDisplayName.trim();
+    if (pdn && pdn !== 'GivenName' && pdn !== 'FamilyName') return pdn;
+  }
+  return userData.studentId || undefined;
+}
+
 function extractXsrf(cookies: Cookie[]): string {
   const bb = cookies.find(c => c.name === 'BbRouter');
   if (bb) {
@@ -158,16 +172,18 @@ export async function login(opts: LoginOptions = {}): Promise<Session> {
       if (resp.ok()) userData = await resp.json();
     } catch {}
 
+    const displayName = resolveDisplayName(userData);
+
     const session: Session = {
       cookies,
       xsrfToken: nonce,
       userId: userData?.id,
-      userName: userData?.userName,
+      userName: displayName,
       expiresAt: extractBbRouterExpiry(cookies),
     };
 
     saveSession(session);
-    console.log(`✓ Logged in as ${userData?.userName || 'unknown'}`);
+    console.log(`✓ Logged in as ${displayName || 'unknown'}`);
 
     return session;
   } finally {
@@ -215,11 +231,33 @@ export async function silentRelogin(previousSession?: Session | null): Promise<S
       throw new SilentLoginFailed('Redirect succeeded but session cookies are missing');
     }
 
+    let userId = previousSession?.userId;
+    let userName = previousSession?.userName;
+
+    // Self-heal: older sessions were stored with userName=null because the
+    // old extractor looked at the wrong field. Refetch once if it's missing.
+    if (!userName || !userId) {
+      try {
+        const cookieStrForApi = cookies
+          .filter(c => c.domain.includes('aulavirtual.upc.edu.pe'))
+          .map(c => `${c.name}=${c.value}`)
+          .join('; ');
+        const resp = await page.request.get(`${BASE_URL}/learn/api/public/v1/users/me`, {
+          headers: { Accept: 'application/json', Cookie: cookieStrForApi },
+        });
+        if (resp.ok()) {
+          const me = await resp.json();
+          userId = userId ?? me?.id;
+          userName = userName ?? resolveDisplayName(me);
+        }
+      } catch {}
+    }
+
     const session: Session = {
       cookies,
       xsrfToken: extractXsrf(cookies),
-      userId: previousSession?.userId,
-      userName: previousSession?.userName,
+      userId,
+      userName,
       expiresAt: extractBbRouterExpiry(cookies),
     };
 

package/src/auth/session.ts

@@ -5,6 +5,7 @@ import type { Session } from '../types/index.js';
 
 const SESSION_DIR = path.join(os.homedir(), '.blackboard-cli');
 const SESSION_FILE = path.join(SESSION_DIR, 'session.json');
+const PROFILE_DIR = path.join(SESSION_DIR, 'browser-profile');
 
 export function saveSession(session: Session): void {
   if (!fs.existsSync(SESSION_DIR)) {
@@ -27,10 +28,20 @@ export function loadSession(): Session | null {
   }
 }
 
-export function clearSession(): void {
+export function clearSession(opts: { keepProfile?: boolean } = {}): void {
   try {
     if (fs.existsSync(SESSION_FILE)) fs.unlinkSync(SESSION_FILE);
   } catch {}
+  if (!opts.keepProfile) clearBrowserProfile();
+}
+
+// The browser profile holds Microsoft SSO cookies. Without clearing it,
+// the next `login` silently re-authenticates with the same account and
+// switching users becomes impossible.
+export function clearBrowserProfile(): void {
+  try {
+    if (fs.existsSync(PROFILE_DIR)) fs.rmSync(PROFILE_DIR, { recursive: true, force: true });
+  } catch {}
 }
 
 export function isSessionValid(session: Session | null): boolean {

package/src/commands/login.ts

@@ -2,8 +2,10 @@ import { Command } from 'commander';
 import inquirer from 'inquirer';
 import chalk from 'chalk';
 import ora from 'ora';
-import { login } from '../auth/login.js';
-import { loadSession, loadOrRefreshSession, clearSession, isSessionValid } from '../auth/session.js';
+import { login, resolveDisplayName } from '../auth/login.js';
+import { loadSession, loadOrRefreshSession, saveSession, clearSession, isSessionValid } from '../auth/session.js';
+import { createClient } from '../api/client.js';
+import { getMe } from '../api/courses.js';
 import { ok, fail, warn, whatNext } from '../ui/theme.js';
 
 export function loginCommand(program: Command) {
@@ -48,21 +50,40 @@ export function loginCommand(program: Command) {
 
   program
     .command('logout')
-    .description('Clear the saved session')
-    .action(() => {
-      clearSession();
-      console.log(chalk.green('✓ Session cleared'));
+    .description('Borra la sesión y las cookies SSO para poder cambiar de cuenta')
+    .option('--keep-profile', 'Conservar las cookies SSO del navegador (no permite cambiar de cuenta)')
+    .action((opts) => {
+      clearSession({ keepProfile: !!opts.keepProfile });
+      if (opts.keepProfile) {
+        console.log(chalk.green('✓ Sesión borrada') + chalk.gray(' (profile SSO conservado)'));
+      } else {
+        console.log(chalk.green('✓ Sesión y profile SSO borrados'));
+        console.log(chalk.gray('  El próximo `blackboard login` te pedirá credenciales de nuevo.'));
+      }
     });
 
   program
     .command('whoami')
     .description('Show current logged-in user')
     .action(async () => {
-      const session = await loadOrRefreshSession();
+      let session = await loadOrRefreshSession();
       if (!isSessionValid(session)) {
         console.log(chalk.red('Not logged in. Run: blackboard login'));
         process.exit(1);
       }
+
+      // Self-heal old sessions that were stored with userName=null.
+      if (!session!.userName) {
+        try {
+          const me = await getMe(createClient(session!));
+          const name = resolveDisplayName(me);
+          if (name) {
+            session = { ...session!, userId: session!.userId ?? me?.id, userName: name };
+            saveSession(session!);
+          }
+        } catch {}
+      }
+
       console.log(chalk.green(`Logged in as: ${chalk.bold(session!.userName || session!.userId || 'unknown')}`));
       const remaining = Math.round((session!.expiresAt - Date.now()) / 60_000);
       console.log(chalk.gray(`Session expires in: ${remaining} minutes`));

package/src/index.ts

@@ -6,9 +6,10 @@ import { coursesCommand } from './commands/courses.js';
 import { apiDocsCommand } from './commands/api-docs.js';
 import { downloadCommand } from './commands/download.js';
 import { assignmentsCommand } from './commands/assignments.js';
-import { loadSession, loadOrRefreshSession, isSessionValid } from './auth/session.js';
+import { loadSession, loadOrRefreshSession, saveSession, isSessionValid } from './auth/session.js';
 import { createClient } from './api/client.js';
 import { getMe, getSystemVersion } from './api/courses.js';
+import { resolveDisplayName } from './auth/login.js';
 import { BANNER, ok, fail, hint } from './ui/theme.js';
 
 const program = new Command();
@@ -16,7 +17,7 @@ const program = new Command();
 program
   .name('blackboard')
   .description('CLI no oficial para UPC Aula Virtual (Blackboard Learn)')
-  .version('1.0.7')
+  .version('1.0.9')
   .addHelpText('beforeAll', BANNER);
 
 // Auth commands
@@ -31,12 +32,23 @@ program
   .description('Estado de sesión y versión del servidor')
   .option('--json', 'Output raw JSON')
   .action(async (opts) => {
-    const session = await loadOrRefreshSession();
+    let session = await loadOrRefreshSession();
     const valid = isSessionValid(session);
 
-    const sysVersion = await getSystemVersion(
-      createClient(session ?? { cookies: [], xsrfToken: '', expiresAt: 0 })
-    ).catch(() => null);
+    const client = createClient(session ?? { cookies: [], xsrfToken: '', expiresAt: 0 });
+    const sysVersion = await getSystemVersion(client).catch(() => null);
+
+    // Self-heal old sessions with userName=null.
+    if (valid && !session!.userName) {
+      try {
+        const me = await getMe(client);
+        const name = resolveDisplayName(me);
+        if (name) {
+          session = { ...session!, userId: session!.userId ?? me?.id, userName: name };
+          saveSession(session!);
+        }
+      } catch {}
+    }
 
     const result = {
       loggedIn: valid,