utn-mcp 0.6.9 → 0.8.0

package/build/shared/pages.js

@@ -0,0 +1,66 @@
+/**
+ * Los colores del sitio del proyecto: papel milimetrado, tinta y un azul de acento. Oscuro salvo que
+ * el sistema pida claro. Sin fuentes externas: la página de login recibe contraseñas.
+ */
+const STYLE = `
+:root{--paper:#0a0b0d;--ink:#e9e7e0;--muted:#8b8a84;--line:rgb(233 231 224/.055);--line-faint:rgb(233 231 224/.025);
+--line-strong:rgb(233 231 224/.16);--accent:#6b93ff;--err:#f87171;--panel:rgb(20 21 24/.6);color-scheme:dark}
+@media(prefers-color-scheme:light){:root{--paper:#f3f2ec;--ink:#121212;--muted:#6d6c66;--line:rgb(18 18 18/.07);
+--line-faint:rgb(18 18 18/.035);--line-strong:rgb(18 18 18/.2);--accent:#1f4fd6;--err:#b91c1c;--panel:rgb(255 255 255/.55);color-scheme:light}}
+*{box-sizing:border-box}
+body{margin:0;min-height:100vh;color:var(--ink);font:15px/1.55 ui-sans-serif,system-ui,-apple-system,"Segoe UI",sans-serif;
+background-color:var(--paper);background-image:linear-gradient(var(--line) 1px,transparent 1px),
+linear-gradient(90deg,var(--line) 1px,transparent 1px),linear-gradient(var(--line-faint) 1px,transparent 1px),
+linear-gradient(90deg,var(--line-faint) 1px,transparent 1px);background-size:80px 80px,80px 80px,16px 16px,16px 16px;
+background-position:-1px -1px}
+.mono,label,button,.kicker,header{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}
+header{display:flex;align-items:center;gap:.5rem;height:3.5rem;padding:0 1rem;border-bottom:1px solid var(--line);
+font-size:13px;letter-spacing:-.01em;background:color-mix(in srgb,var(--paper) 75%,transparent)}
+header svg{height:1.5rem;width:auto}
+main{max-width:28rem;margin:3rem auto;padding:0 1rem}
+.card{position:relative;border:1px solid var(--line-strong);background:var(--panel);padding:1.5rem}
+.card::before,.card::after{content:"";position:absolute;width:9px;height:9px;border-color:var(--ink);opacity:.55}
+.card::before{top:-1px;left:-1px;border-top:1px solid;border-left:1px solid}
+.card::after{bottom:-1px;right:-1px;border-bottom:1px solid;border-right:1px solid}
+.kicker{margin:0 0 .5rem;font-size:10px;text-transform:uppercase;letter-spacing:.16em;color:var(--muted)}
+h1{margin:0 0 1rem;font-size:1.5rem;font-weight:600;letter-spacing:-.02em;line-height:1.2}
+p{margin:.75rem 0}
+a{color:var(--accent);text-underline-offset:4px}
+form{display:flex;flex-direction:column;gap:1rem;margin:1.5rem 0}
+label{display:flex;flex-direction:column;gap:.4rem;font-size:10px;text-transform:uppercase;letter-spacing:.16em;color:var(--muted)}
+input,select{font:inherit;font-size:15px;letter-spacing:normal;text-transform:none;color:var(--ink);background:transparent;
+border:1px solid var(--line-strong);border-radius:0;padding:.65rem .75rem}
+input:focus,select:focus{outline:none;border-color:var(--accent)}
+select option{background:var(--paper);color:var(--ink)}
+input[type=file]{padding:.5rem}
+button{font-size:12px;text-transform:uppercase;letter-spacing:.14em;border:0;border-radius:0;padding:.8rem 1rem;
+background:var(--ink);color:var(--paper);cursor:pointer;transition:background .15s}
+button:hover{background:var(--accent)}
+.nota{font-size:13px;color:var(--muted)}
+.error{border-left:2px solid var(--err);padding-left:.75rem;color:var(--err)}
+.aviso{border:1px solid var(--err);padding:0 1rem;margin:1rem 0}
+label.acepto{flex-direction:row;align-items:flex-start;gap:.6rem;font:13px/1.5 ui-sans-serif,system-ui,sans-serif;
+text-transform:none;letter-spacing:normal;color:var(--ink)}
+input[type=checkbox]{padding:0;margin:.2rem 0 0;accent-color:var(--accent)}
+ul{padding-left:1.2rem}
+::selection{background:var(--accent);color:var(--paper)}
+`.replace(/\n/g, "");
+/** El emblema del proyecto: el de la UTN con "MCP" en lugar de "UTN". */
+const MARK = '<svg viewBox="0 0 100 132" fill="none" aria-hidden="true"><g stroke="currentColor" stroke-width="11">' +
+    '<path d="M50 0v100M0 50h100"/><path d="M19 0v19a11 11 0 0 0 11 11h40a11 11 0 0 0 11-11V0"/>' +
+    '<path d="M19 100V81a11 11 0 0 1 11-11h40a11 11 0 0 1 11 11v19"/></g>' +
+    '<text x="50" y="131" text-anchor="middle" textLength="72" lengthAdjust="spacingAndGlyphs" ' +
+    'font-family="Arial,Helvetica,sans-serif" font-weight="900" font-size="29" fill="currentColor">MCP</text></svg>';
+/**
+ * Página mínima con el estilo del sitio del proyecto: se abre desde el celu, así que nada más que lo necesario.
+ * `kicker` es la etiqueta chica arriba del título.
+ */
+export function page(title, body, kicker = "UTN-MCP") {
+    return (`<!doctype html><html lang="es"><head><meta charset="utf-8">` +
+        `<meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(title)} · UTN-MCP</title>` +
+        `<style>${STYLE}</style></head><body>` +
+        `<header>${MARK}utn·mcp</header>` +
+        `<main><div class="card"><p class="kicker">${escapeHtml(kicker)}</p><h1>${escapeHtml(title)}</h1>${body}</div></main>` +
+        `</body></html>`);
+}
+export const escapeHtml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");

package/build/shared/paths.js

@@ -9,7 +9,7 @@ export function configDir() {
     }
     return join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"), "utn-mcp");
 }
-/** Token de Moodle + cookies del SSO del modo local. */
+/** Token de Moodle del modo local. */
 export const sessionFile = () => join(configDir(), "session.json");
 /** Base de usuarios, tokens y sesiones del modo HTTP: UTN_MCP_DB o un SQLite en la carpeta de configuración. */
 export const storeFile = () => process.env.UTN_MCP_DB ?? join(configDir(), "utn-mcp.db");

package/build/shared/store/sqlite-store.js

@@ -5,8 +5,11 @@ import { storeFile, storeKeyFile } from "../paths.js";
 const SCHEMA = `
     CREATE TABLE IF NOT EXISTS users (
         id INTEGER PRIMARY KEY,
-        utn_username TEXT NOT NULL UNIQUE,
-        created_at INTEGER NOT NULL
+        regional TEXT NOT NULL,
+        utn_username TEXT NOT NULL,
+        email TEXT,
+        created_at INTEGER NOT NULL,
+        UNIQUE (regional, utn_username)
     );
     CREATE TABLE IF NOT EXISTS tokens (
         hash TEXT PRIMARY KEY,
@@ -24,6 +27,16 @@ const SCHEMA = `
         updated_at INTEGER NOT NULL,
         PRIMARY KEY (user_id, platform)
     );
+    CREATE TABLE IF NOT EXISTS verified_regionals (
+        regional TEXT PRIMARY KEY,
+        verified_at INTEGER NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS oauth_clients (
+        client_id TEXT PRIMARY KEY,
+        client_name TEXT,
+        redirect_uris TEXT NOT NULL,
+        created_at INTEGER NOT NULL
+    );
 `;
 /** Bytes de la clave AES-256. */
 const KEY_BYTES = 32;
@@ -34,8 +47,8 @@ const TAG_BYTES = 16;
 const now = () => Math.floor(Date.now() / 1000);
 const hashToken = (token) => createHash("sha256").update(token).digest("hex");
 /**
- * El SessionStore sobre SQLite. Las sesiones van cifradas con AES-256-GCM: tienen el token de Moodle
- * y las cookies del SSO, que alcanzan para entrar al aula como el usuario. Los tokens se guardan
+ * El SessionStore sobre SQLite. Las sesiones van cifradas con AES-256-GCM: tienen el token de Moodle,
+ * que alcanza para entrar al aula como el usuario. Los tokens se guardan
  * hasheados, así que una copia de la base no sirve para usar el servidor.
  */
 export class SqliteStore {
@@ -59,16 +72,42 @@ export class SqliteStore {
         // WAL: el login escribe mientras el servidor lee, desde otro proceso.
         db.exec("PRAGMA journal_mode = WAL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = 5000;");
         db.exec(SCHEMA);
+        migrate(db);
         return new SqliteStore(db, await loadKey());
     }
-    async findOrCreateUser(utnUsername) {
+    async findOrCreateUser(regional, utnUsername, email) {
         const username = utnUsername.trim().toLowerCase();
         this.db
-            .prepare("INSERT INTO users (utn_username, created_at) VALUES (?, ?) ON CONFLICT DO NOTHING")
-            .run(username, now());
-        const row = this.db.prepare("SELECT id FROM users WHERE utn_username = ?").get(username);
+            .prepare("INSERT INTO users (regional, utn_username, created_at) VALUES (?, ?, ?) ON CONFLICT DO NOTHING")
+            .run(regional, username, now());
+        if (email) {
+            this.db
+                .prepare("UPDATE users SET email = ? WHERE regional = ? AND utn_username = ?")
+                .run(email.trim().toLowerCase(), regional, username);
+        }
+        const row = this.db
+            .prepare("SELECT id FROM users WHERE regional = ? AND utn_username = ?")
+            .get(regional, username);
         return row.id;
     }
+    async findUserByEmail(email) {
+        const row = this.db
+            .prepare("SELECT id, regional, utn_username, email FROM users WHERE email = ?")
+            .get(email.trim().toLowerCase());
+        return row ? toUser(row) : null;
+    }
+    async listUsers() {
+        const rows = this.db
+            .prepare("SELECT id, regional, utn_username, email, created_at FROM users ORDER BY created_at DESC")
+            .all();
+        return rows.map((r) => ({ ...toUser(r), createdAt: r.created_at }));
+    }
+    async findUser(userId) {
+        const row = this.db
+            .prepare("SELECT id, regional, utn_username, email FROM users WHERE id = ?")
+            .get(userId);
+        return row ? toUser(row) : null;
+    }
     async issueToken(userId, options) {
         const token = randomBytes(32).toString("base64url");
         const createdAt = now();
@@ -99,6 +138,46 @@ export class SqliteStore {
             "ON CONFLICT (user_id, platform) DO UPDATE SET data = excluded.data, updated_at = excluded.updated_at")
             .run(userId, platform, this.encrypt(data), now());
     }
+    async listVerifiedRegionals() {
+        const rows = this.db.prepare("SELECT regional FROM verified_regionals").all();
+        return rows.map((r) => r.regional);
+    }
+    async markRegionalVerified(regional) {
+        this.db
+            .prepare("INSERT INTO verified_regionals (regional, verified_at) VALUES (?, ?) ON CONFLICT DO NOTHING")
+            .run(regional, now());
+    }
+    async saveClient(client) {
+        this.db
+            .prepare("INSERT INTO oauth_clients (client_id, client_name, redirect_uris, created_at) VALUES (?, ?, ?, ?)")
+            .run(client.clientId, client.clientName, JSON.stringify(client.redirectUris), now());
+    }
+    async findClient(clientId) {
+        const row = this.db
+            .prepare("SELECT client_id, client_name, redirect_uris FROM oauth_clients WHERE client_id = ?")
+            .get(clientId);
+        if (!row)
+            return null;
+        return { clientId: row.client_id, clientName: row.client_name, redirectUris: JSON.parse(row.redirect_uris) };
+    }
+    async sessionUpdatedAt(userId, platform) {
+        const row = this.db
+            .prepare("SELECT updated_at FROM platform_sessions WHERE user_id = ? AND platform = ?")
+            .get(userId, platform);
+        return row?.updated_at ?? null;
+    }
+    async listConnectedClients(userId) {
+        const rows = this.db
+            .prepare("SELECT t.client_id, c.client_name, MAX(t.created_at) AS last_token_at FROM tokens t " +
+            "LEFT JOIN oauth_clients c ON c.client_id = t.client_id " +
+            "WHERE t.user_id = ? AND t.client_id IS NOT NULL AND (t.expires_at IS NULL OR t.expires_at > ?) " +
+            "GROUP BY t.client_id ORDER BY last_token_at DESC")
+            .all(userId, now());
+        return rows.map((r) => ({ clientId: r.client_id, clientName: r.client_name, lastTokenAt: r.last_token_at }));
+    }
+    async revokeClient(userId, clientId) {
+        this.db.prepare("DELETE FROM tokens WHERE user_id = ? AND client_id = ?").run(userId, clientId);
+    }
     /** iv + tag + texto cifrado, en un solo blob. */
     encrypt(plain) {
         const iv = randomBytes(IV_BYTES);
@@ -118,6 +197,54 @@ export class SqliteStore {
         }
     }
 }
+const toUser = (row) => ({
+    id: row.id,
+    regional: row.regional,
+    utnUsername: row.utn_username,
+    email: row.email,
+});
+/** Lo que `CREATE TABLE IF NOT EXISTS` no agrega a una base que ya existía. */
+function migrate(db) {
+    const columns = db.prepare("PRAGMA table_info(users)").all();
+    if (!columns.some((c) => c.name === "email"))
+        db.exec("ALTER TABLE users ADD COLUMN email TEXT");
+    if (!columns.some((c) => c.name === "regional"))
+        addRegional(db);
+}
+/**
+ * Antes de elegir la regional al entrar, todos los usuarios de un servidor eran de la que tenía
+ * configurada (UTN_REGIONAL, o FRBA). La unicidad pasa de `utn_username` a regional + usuario, y
+ * SQLite no cambia restricciones con ALTER TABLE: se rehace la tabla, conservando los ids.
+ */
+function addRegional(db) {
+    const legacy = process.env.UTN_REGIONAL?.trim().toLowerCase() || "frba";
+    // Sin esto, borrar `users` borraría en cascada los tokens y las sesiones.
+    db.exec("PRAGMA foreign_keys = OFF");
+    try {
+        db.exec("BEGIN");
+        db.exec(`
+            CREATE TABLE users_new (
+                id INTEGER PRIMARY KEY,
+                regional TEXT NOT NULL,
+                utn_username TEXT NOT NULL,
+                email TEXT,
+                created_at INTEGER NOT NULL,
+                UNIQUE (regional, utn_username)
+            );
+        `);
+        db.prepare("INSERT INTO users_new (id, regional, utn_username, email, created_at) " +
+            "SELECT id, ?, utn_username, email, created_at FROM users").run(legacy);
+        db.exec("DROP TABLE users; ALTER TABLE users_new RENAME TO users;");
+        db.exec("COMMIT");
+    }
+    catch (e) {
+        db.exec("ROLLBACK");
+        throw e;
+    }
+    finally {
+        db.exec("PRAGMA foreign_keys = ON");
+    }
+}
 /**
  * UTN_MCP_KEY (32 bytes en base64) en el servidor hosteado, donde la clave no tiene que estar en el
  * mismo disco que la base. En local, si no está, se genera una en la carpeta de configuración.

package/build/shared/uploads.js

@@ -4,6 +4,8 @@ import { extname } from "node:path";
 const UPLOAD_TTL_MS = 30 * 60 * 1000;
 /** Tope de una subida entera, en bytes: los archivos quedan en memoria hasta que se entregan. */
 export const MAX_UPLOAD_BYTES = 100 * 1024 * 1024;
+/** Links abiertos por usuario: con más, se cierra el más viejo. */
+const MAX_OPEN_PER_OWNER = 5;
 /**
  * Links de un solo uso para recibir archivos por HTTP: los sube el agente con `curl` si tiene
  * terminal, o el usuario desde el navegador. Los archivos quedan en memoria hasta que una tool los
@@ -17,6 +19,10 @@ export class UploadInbox {
     }
     open(owner, title, limits) {
         this.sweep();
+        // El Map conserva el orden de inserción: el primero que aparece es el más viejo.
+        const own = [...this.uploads].filter(([, u]) => u.owner === owner);
+        for (const [oldId] of own.slice(0, Math.max(0, own.length - MAX_OPEN_PER_OWNER + 1)))
+            this.uploads.delete(oldId);
         const id = randomBytes(24).toString("base64url");
         const expiresAt = Date.now() + UPLOAD_TTL_MS;
         this.uploads.set(id, { owner, title, limits, files: null, expiresAt });
@@ -27,11 +33,13 @@ export class UploadInbox {
         this.sweep();
         return this.uploads.get(id);
     }
-    /** Guarda los archivos de una subida; una subida nueva al mismo link reemplaza la anterior. */
+    /** Guarda los archivos de una subida; cada link acepta una sola. */
     receive(id, files) {
         const upload = this.uploads.get(id);
         if (!upload || upload.expiresAt < Date.now())
             throw new Error("El link de subida venció o no existe.");
+        if (upload.files)
+            throw new Error("Este link ya se usó. Pedile al agente uno nuevo.");
         if (!files.length)
             throw new Error('No llegó ningún archivo: van en el campo "archivos".');
         checkFiles(files, upload.limits);

package/package.json

@@ -1,58 +1,58 @@
-{
-  "name": "utn-mcp",
-  "version": "0.6.9",
-  "description": "Este es el Model Context Protocol server NO OFICIAL de la UTN para buscar informacion o archivos en el aula virtual.",
-  "main": "build/index.js",
-  "bin": {
-    "utn-mcp": "build/index.js"
-  },
-  "files": [
-    "build",
-    "vendor"
-  ],
-  "scripts": {
-    "prebuild": "node -e \"require('fs').rmSync('build',{recursive:true,force:true})\"",
-    "build": "tsc",
-    "prepublishOnly": "npm run build",
-    "prepare": "node scripts/vendor-pdfjs.mjs",
-    "start": "node build/index.js",
-    "dev": "tsx src/index.ts",
-    "test": "echo \"Error: no test specified\" && exit 1",
-    "login": "tsx src/index.ts login"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/nialvape/utn-mcp.git"
-  },
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "utn",
-    "aula-virtual"
-  ],
-  "author": "Joaquín Peñalva (https://github.com/nialvape)",
-  "license": "ISC",
-  "type": "module",
-  "bugs": {
-    "url": "https://github.com/nialvape/utn-mcp/issues"
-  },
-  "homepage": "https://utnmcp.com.ar",
-  "dependencies": {
-    "@modelcontextprotocol/node": "^2.1.1",
-    "@modelcontextprotocol/server": "^2.3.0",
-    "@napi-rs/keyring": "^2.1.0",
-    "express": "^5.2.1",
-    "tough-cookie": "^6.0.2",
-    "zod": "^4.6.5"
-  },
-  "devDependencies": {
-    "@types/express": "^5.0.6",
-    "@types/node": "^26.6.4",
-    "pdfjs-dist": "^6.4.299",
-    "tsx": "^4.23.15",
-    "typescript": "^7.0.2"
-  },
-  "engines": {
-    "node": ">=20"
-  }
-}
+{
+  "name": "utn-mcp",
+  "version": "0.8.0",
+  "description": "Este es el Model Context Protocol server NO OFICIAL de la UTN para buscar informacion o archivos en el aula virtual.",
+  "main": "build/index.js",
+  "bin": {
+    "utn-mcp": "build/index.js"
+  },
+  "files": [
+    "build",
+    "vendor"
+  ],
+  "scripts": {
+    "prebuild": "node -e \"require('fs').rmSync('build',{recursive:true,force:true})\"",
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "prepare": "node scripts/vendor-pdfjs.mjs",
+    "start": "node build/index.js",
+    "dev": "tsx src/index.ts",
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "login": "tsx src/index.ts login"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nialvape/utn-mcp.git"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "utn",
+    "aula-virtual"
+  ],
+  "author": "Joaquín Peñalva (https://github.com/nialvape)",
+  "license": "ISC",
+  "type": "module",
+  "bugs": {
+    "url": "https://github.com/nialvape/utn-mcp/issues"
+  },
+  "homepage": "https://utnmcp.com.ar",
+  "dependencies": {
+    "@modelcontextprotocol/node": "^2.1.1",
+    "@modelcontextprotocol/server": "^2.3.0",
+    "@napi-rs/keyring": "^2.1.0",
+    "express": "^5.2.1",
+    "tough-cookie": "^6.0.2",
+    "zod": "^4.6.5"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.6",
+    "@types/node": "^26.6.4",
+    "pdfjs-dist": "^6.4.299",
+    "tsx": "^4.23.15",
+    "typescript": "^7.0.2"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/build/aula-virtual/client/constants.js

@@ -1,2 +0,0 @@
-export const AULA_BASE_URL = "https://aulasvirtuales.frba.utn.edu.ar";
-export const SSO_HOST = "auth.frba.utn.edu.ar";