fintecia 0.1.0 → 1.0.1

package/README.md

@@ -19,7 +19,7 @@ que **nunca sale de tu máquina**.
 
 ## Estado del proyecto
 
-Esta es una **primera versión (0.1.0)**. Lo disponible hoy:
+Esta es una **primera versión (1.0.1)**. Lo disponible hoy:
 
 - ✅ Descarga de CFDI del SAT con e-firma local + materialización en Fintecia.
 - ✅ Consultas materializadas: `fintecia_financials` (estados NIF B-3/B-6),
@@ -122,9 +122,17 @@ cliente para la sintaxis exacta.
 
 ## Seguridad y privacidad
 
-- Tu **e-firma nunca sale de tu máquina**: se guarda en el keychain del sistema
-  (macOS Keychain / Windows Credential Manager / Linux libsecret). Fintecia solo
-  recibe los CFDI.
+Qué se queda local y qué se envía a Fintecia — transparente, sin letra chica:
+
+- **Tu e-firma nunca sale de tu máquina**: se guarda en el keychain del sistema
+  (macOS Keychain / Windows Credential Manager / Linux libsecret). Ni el `.key`
+  ni tu contraseña se transmiten a Fintecia ni al agente.
+- **Tus CFDI (facturas) sí se suben a los servidores de Fintecia** (Google Cloud)
+  para materializar tus estados financieros, impuestos y conciliación.
+  Es lo que permite que el agente responda "cuánto" con tus números reales.
+- **Telemetría anónima**: el MCP envía eventos de uso (id de instalación y de sesión
+  como UUID, qué agente usás, qué herramienta invocaste, resultado y duración).
+  **No** se envían tus prompts, conversaciones ni los argumentos de las herramientas.
 - El servidor es **local** (corre por stdio, en tu máquina) y **sin secretos**:
   la autenticación es OAuth de *loopback* — tu navegador hace el login y el token
   queda en memoria, no en disco.

package/dist/index.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
 import { McpServer } from "@modelcontextprotocol/server";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import { z } from "zod";
@@ -12,6 +15,10 @@ import { startOnboardServer } from "./onboard/server.js";
 import { detectKeychain, fielKeychainKey } from "./keychain/keychain.js";
 import { KeychainFielProvider } from "./sat/keychainFielProvider.js";
 import { API_BASE_URL } from "./auth/firebaseConfig.js";
+// Versión del servidor: leída de package.json (fuente única), no hardcodeada.
+// `dist/index.js` resuelve `../package.json` a la raíz del paquete publicado.
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PKG_VERSION = JSON.parse(readFileSync(join(__dirname, "../package.json"), "utf8")).version;
 /**
  * Fintecia MCP server — local, read-only (+ local e-firma download).
  *
@@ -21,7 +28,7 @@ import { API_BASE_URL } from "./auth/firebaseConfig.js";
  * ID token from that store.
  */
 function createServer() {
-    const server = new McpServer({ name: "fintecia-mcp", version: "0.1.0" });
+    const server = new McpServer({ name: "fintecia-mcp", version: PKG_VERSION });
     const session = new SessionStore();
     const fielStore = new FileFielStore();
     const keychain = detectKeychain(process.platform);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,cAAc,EAAoB,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD;;;;;;;GAOG;AAEH,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAEjE,IAAI,OAAO,GAA2C,IAAI,CAAC;IAE3D,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,YAAY;QACZ,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO;QACzC,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvB,GAAG;gBACH,WAAW,EAAE,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;aACjE,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,OAAoB,EAAe,EAAE;QACxE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE;oBAC5B,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,SAAS;oBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC/B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE;oBAC5B,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,OAAO;oBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC/B,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,EACD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,CAC/E,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,qBAAqB;IACrB,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,wEAAwE;YACxE,uEAAuE;YACvE,yEAAyE;YACzE,uDAAuD;QACzD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,IAAI,EAAE;QACT,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,+DAA+D;wBAC/D,6BAA6B,OAAO,CAAC,GAAG,EAAE;iBAC7C;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,oEAAoE;YACpE,0EAA0E;YAC1E,uEAAuE;QACzE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;aACjE;SACF;KACF,CAAC,CACH,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,UAAU,CAAC,YAAY,EAAE;IACvB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC;CACvE,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,cAAc,EAAoB,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,WAAW,GACf,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAGpE,CAAC,OAAO,CAAC;AAEV;;;;;;;GAOG;AAEH,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAEjE,IAAI,OAAO,GAA2C,IAAI,CAAC;IAE3D,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,YAAY;QACZ,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO;QACzC,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvB,GAAG;gBACH,WAAW,EAAE,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;aACjE,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,OAAoB,EAAe,EAAE;QACxE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE;oBAC5B,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,SAAS;oBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC/B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE;oBAC5B,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,OAAO;oBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC/B,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,EACD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,CAC/E,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,qBAAqB;IACrB,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,wEAAwE;YACxE,uEAAuE;YACvE,yEAAyE;YACzE,uDAAuD;QACzD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,IAAI,EAAE;QACT,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,+DAA+D;wBAC/D,6BAA6B,OAAO,CAAC,GAAG,EAAE;iBAC7C;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,oEAAoE;YACpE,0EAA0E;YAC1E,uEAAuE;QACzE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;aACjE;SACF;KACF,CAAC,CACH,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,UAAU,CAAC,YAAY,EAAE;IACvB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC;CACvE,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "fintecia",
-  "version": "0.1.0",
+  "version": "1.0.1",
+  "mcpName": "io.github.Fintecia/fintecia",
   "type": "module",
   "description": "MCP local de Fintecia — descarga de CFDI con e-firma, conciliación banco-CFDI, riesgo 69-B/EFOS, deducibilidad fiscal. SAT · CFDI · Conciliación · Seguridad · México · agente AI",
   "license": "MIT",

package/dist/auth/deviceFlow.d.ts

@@ -1,53 +0,0 @@
-/**
- * Device authorization flow client (RFC 8628-style) + Firebase token exchange.
- *
- * The MCP is a PUBLIC client: no client secret. Auth chain:
- *   1. `start()` → Fintecia `/device/start` returns device_code + user_code +
- *      verification_uri.
- *   2. The user opens verification_uri in the browser, signs in with Google+MFA
- *      (the existing Fintecia auth), and enters the user_code.
- *   3. `poll()` → Fintecia `/device/token` returns a Firebase custom token once
- *      the user authorized.
- *   4. `exchange()` → Firebase REST `accounts:signInWithCustomToken` swaps the
- *      custom token for an ID token + refresh token.
- *
- * The custom token is minted server-side (firebase-admin `createCustomToken`)
- * and MUST preserve the MFA step-up claim (see `functions/src/utils/callable.ts`).
- *
- * Contract is documented here for the backend implementation (T3). No secrets
- * live in this client: `firebaseApiKey` is a public Web API key.
- */
-export interface DeviceStartResponse {
-    deviceCode: string;
-    userCode: string;
-    verificationUri: string;
-    expiresIn: number;
-    interval: number;
-}
-export interface DeviceTokenResponse {
-    status: "pending" | "authorized" | "denied" | "expired";
-    customToken?: string;
-}
-export interface AuthSession {
-    idToken: string;
-    refreshToken: string;
-}
-export interface DeviceFlowConfig {
-    /** Fintecia backend base URL (no trailing slash). */
-    baseUrl: string;
-    /** Firebase Web API key (public, used only for the token exchange). */
-    firebaseApiKey: string;
-    /** Injectable fetch for tests. */
-    fetchFn?: typeof fetch;
-}
-export declare class DeviceFlowClient {
-    private readonly config;
-    constructor(config: DeviceFlowConfig);
-    private fetch;
-    start(): Promise<DeviceStartResponse>;
-    poll(deviceCode: string): Promise<DeviceTokenResponse>;
-    /** Exchange a Firebase custom token for an ID token + refresh token. */
-    exchange(customToken: string): Promise<AuthSession>;
-    /** Refresh an expired ID token via the Firebase secure-token endpoint. */
-    refresh(refreshToken: string): Promise<AuthSession>;
-}

package/dist/auth/deviceFlow.js

@@ -1,83 +0,0 @@
-/**
- * Device authorization flow client (RFC 8628-style) + Firebase token exchange.
- *
- * The MCP is a PUBLIC client: no client secret. Auth chain:
- *   1. `start()` → Fintecia `/device/start` returns device_code + user_code +
- *      verification_uri.
- *   2. The user opens verification_uri in the browser, signs in with Google+MFA
- *      (the existing Fintecia auth), and enters the user_code.
- *   3. `poll()` → Fintecia `/device/token` returns a Firebase custom token once
- *      the user authorized.
- *   4. `exchange()` → Firebase REST `accounts:signInWithCustomToken` swaps the
- *      custom token for an ID token + refresh token.
- *
- * The custom token is minted server-side (firebase-admin `createCustomToken`)
- * and MUST preserve the MFA step-up claim (see `functions/src/utils/callable.ts`).
- *
- * Contract is documented here for the backend implementation (T3). No secrets
- * live in this client: `firebaseApiKey` is a public Web API key.
- */
-export class DeviceFlowClient {
-    config;
-    constructor(config) {
-        this.config = config;
-    }
-    fetch(input, init) {
-        const fn = this.config.fetchFn ?? fetch;
-        return fn(input, init);
-    }
-    async start() {
-        const res = await this.fetch(`${this.config.baseUrl}/api/v1/device/start`, {
-            method: "POST",
-        });
-        if (!res.ok) {
-            throw new Error(`device/start failed: ${res.status}`);
-        }
-        return (await res.json());
-    }
-    async poll(deviceCode) {
-        const res = await this.fetch(`${this.config.baseUrl}/api/v1/device/token`, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({ deviceCode }),
-        });
-        if (!res.ok) {
-            throw new Error(`device/token failed: ${res.status}`);
-        }
-        return (await res.json());
-    }
-    /** Exchange a Firebase custom token for an ID token + refresh token. */
-    async exchange(customToken) {
-        const url = `https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken` +
-            `?key=${encodeURIComponent(this.config.firebaseApiKey)}`;
-        const res = await this.fetch(url, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({ token: customToken, returnSecureToken: true }),
-        });
-        if (!res.ok) {
-            throw new Error(`custom token exchange failed: ${res.status}`);
-        }
-        const body = (await res.json());
-        return { idToken: body.idToken, refreshToken: body.refreshToken };
-    }
-    /** Refresh an expired ID token via the Firebase secure-token endpoint. */
-    async refresh(refreshToken) {
-        const url = `https://securetoken.googleapis.com/v1/token` +
-            `?key=${encodeURIComponent(this.config.firebaseApiKey)}`;
-        const res = await this.fetch(url, {
-            method: "POST",
-            headers: { "content-type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({
-                grant_type: "refresh_token",
-                refresh_token: refreshToken,
-            }).toString(),
-        });
-        if (!res.ok) {
-            throw new Error(`refresh failed: ${res.status}`);
-        }
-        const body = (await res.json());
-        return { idToken: body.id_token, refreshToken: body.refresh_token };
-    }
-}
-//# sourceMappingURL=deviceFlow.js.map

package/dist/auth/deviceFlow.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deviceFlow.js","sourceRoot":"","sources":["../../src/auth/deviceFlow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA6BH,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEjD,KAAK,CAAC,KAAa,EAAE,IAAkB;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QACxC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,sBAAsB,EAAE;YACzE,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,sBAAsB,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,QAAQ,CAAC,WAAmB;QAChC,MAAM,GAAG,GACP,0EAA0E;YAC1E,QAAQ,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8C,CAAC;QAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACpE,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,MAAM,GAAG,GACP,6CAA6C;YAC7C,QAAQ,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgD,CAAC;QAC/E,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC;CACF"}

package/dist/public/data/debts.fixture.json

@@ -1,4 +0,0 @@
-[
-  { "rfc": "GIM150525L37", "nombre": "GIMORU, S.A. DE C.V.", "situacion": "credito_firme" },
-  { "rfc": "XAXX010101000", "nombre": "PÚBLICO EN GENERAL", "situacion": "credito_firme" }
-]

package/dist/public/data/efos.fixture.json

@@ -1,8 +0,0 @@
-[
-  { "rfc": "AAA080808HL8", "nombre": "ASESORES EN AVALÚOS Y ACTIVOS, S.A. DE C.V.", "situacion": "sentencia_favorable", "oficio": "500-05-2018-16632" },
-  { "rfc": "AAA091014835", "nombre": "AQUAERIS ACUACULTURA Y ARQUITECTURA SUSTENTABLE, S.C.", "situacion": "desvirtuado", "oficio": "500-05-2016-38728" },
-  { "rfc": "AAA100303L51", "nombre": "INGENIOS SANTOS, S.A. DE C.V.", "situacion": "desvirtuado", "oficio": "500-05-2017-38736" },
-  { "rfc": "AAA120730823", "nombre": "ASESORES Y ADMINISTRADORES AGRICOLAS, S. DE R.L. DE C.V.", "situacion": "definitivo", "oficio": "500-05-2016-38728" },
-  { "rfc": "AAC120810NCA", "nombre": "AAA ASESORIA Y CAPACITACION EMPRESARIAL, S.C.", "situacion": "definitivo", "oficio": "500-05-2018-29883" },
-  { "rfc": "AAC1805044A8", "nombre": "ASESORES ACOST, S.C.", "situacion": "presunto", "oficio": "500-05-00-00-00-2026-21664" }
-]

package/dist/public/efos.d.ts

@@ -1,28 +0,0 @@
-/**
- * SAT 69-B (EFOS) lookup — contribuyentes con operaciones presuntamente
- * inexistentes. Public, no auth. The full list is refreshed from the SAT open
- * data (or a mirror); a small fixture is bundled so the tool works out of the
- * box for testing.
- *
- * Correctness-critical: a false "not on the list" is dangerous. Normalize the
- * RFC (uppercase, no whitespace) before lookup.
- */
-export type EfosSituacion = "presunto" | "definitivo" | "desvirtuado" | "sentencia_favorable";
-export interface EfosEntry {
-    rfc: string;
-    nombre: string;
-    situacion: EfosSituacion;
-    /** Oficio de notificación (SAT), si se conoce. */
-    oficio?: string;
-    /** Fecha de publicación (ISO YYYY-MM-DD), si se conoce. */
-    fechaPublicacion?: string;
-}
-export declare function normalizeRfc(rfc: string): string;
-export declare class EfosLookup {
-    private readonly byRfc;
-    constructor(entries: EfosEntry[]);
-    check(rfc: string): EfosEntry | null;
-    get size(): number;
-    /** Build an EfosLookup from raw JSON (array of EfosEntry). */
-    static fromJson(json: unknown): EfosLookup;
-}

package/dist/public/efos.js

@@ -1,45 +0,0 @@
-/**
- * SAT 69-B (EFOS) lookup — contribuyentes con operaciones presuntamente
- * inexistentes. Public, no auth. The full list is refreshed from the SAT open
- * data (or a mirror); a small fixture is bundled so the tool works out of the
- * box for testing.
- *
- * Correctness-critical: a false "not on the list" is dangerous. Normalize the
- * RFC (uppercase, no whitespace) before lookup.
- */
-export function normalizeRfc(rfc) {
-    return rfc.trim().toUpperCase();
-}
-export class EfosLookup {
-    byRfc;
-    constructor(entries) {
-        this.byRfc = new Map(entries.map((e) => [normalizeRfc(e.rfc), e]));
-    }
-    check(rfc) {
-        return this.byRfc.get(normalizeRfc(rfc)) ?? null;
-    }
-    get size() {
-        return this.byRfc.size;
-    }
-    /** Build an EfosLookup from raw JSON (array of EfosEntry). */
-    static fromJson(json) {
-        if (!Array.isArray(json)) {
-            throw new Error("EFOS data must be an array");
-        }
-        const entries = json.map((e) => {
-            const item = e;
-            if (typeof item.rfc !== "string" || typeof item.situacion !== "string") {
-                throw new Error("EFOS entry missing rfc/situacion");
-            }
-            return {
-                rfc: item.rfc,
-                nombre: item.nombre ?? "",
-                situacion: item.situacion,
-                oficio: item.oficio,
-                fechaPublicacion: item.fechaPublicacion,
-            };
-        });
-        return new EfosLookup(entries);
-    }
-}
-//# sourceMappingURL=efos.js.map

package/dist/public/efos.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"efos.js","sourceRoot":"","sources":["../../src/public/efos.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,OAAO,UAAU;IACJ,KAAK,CAAyB;IAE/C,YAAY,OAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,GAAW;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,8DAA8D;IAC9D,MAAM,CAAC,QAAQ,CAAC,IAAa;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,OAAO,GAAgB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAG,CAAuB,CAAC;YACrC,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;gBACzB,SAAS,EAAE,IAAI,CAAC,SAA0B;gBAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACxC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;CACF"}