viviscape-mcp 1.0.1 → 2.0.0

package/README.md

@@ -16,14 +16,36 @@ Or install globally:
 npm install -g viviscape-mcp
 ```
 
-## Configuration
+## Sign in
+
+Authentication is per-user, the same browser flow the ViviScape CLI uses — no
+API keys. Sign in once:
+
+```bash
+npx viviscape-mcp login
+```
+
+A browser tab opens on ViviScape Work; confirm **Allow access** and the session
+is stored in Windows Credential Manager (or `~/.viviscape/mcp-credentials.json`
+on macOS/Linux). Every tool call then runs as *you*: your user id, account,
+role, and plan come from the session, so tools see exactly the data you can see
+in the app.
 
-Set the following environment variables:
+```bash
+npx viviscape-mcp status    # who am I, which account, role, plan
+npx viviscape-mcp logout    # clear the stored session
+```
+
+If you already ran `vs auth login` with the [ViviScape CLI](https://viviscape.io),
+that session is picked up automatically. Inside an MCP client you can also call
+the `auth_login`, `auth_status`, and `auth_logout` tools. Sessions expire; when
+one does, tools report it and you re-run `login`.
+
+## Configuration
 
 | Variable | Required | Default | Description |
 |----------|----------|---------|-------------|
-| `VIVISCAPE_API_KEY` | yes | — | Your ViviScape API key |
-| `VIVISCAPE_API_URL` | no | `https://api.viviscape.io` | API base URL |
+| `VIVISCAPE_BASE_URL` | no | `https://work.viviscape.io` | ViviScape Work base URL |
 
 ## Claude Desktop / Claude Code
 
@@ -34,10 +56,7 @@ Add to your MCP client config (e.g. `claude_desktop_config.json` or `.mcp.json`)
   "mcpServers": {
     "viviscape": {
       "command": "npx",
-      "args": ["-y", "viviscape-mcp"],
-      "env": {
-        "VIVISCAPE_API_KEY": "your-api-key-here"
-      }
+      "args": ["-y", "viviscape-mcp"]
     }
   }
 }
@@ -51,7 +70,6 @@ Codex accepts stdio MCP servers directly. Add to `~/.codex/config.toml`:
 [mcp_servers.viviscape]
 command = "npx"
 args = ["-y", "viviscape-mcp"]
-env = { VIVISCAPE_API_KEY = "your-api-key-here" }
 ```
 
 ## ChatGPT (Developer Mode / Apps SDK)
@@ -65,10 +83,13 @@ publicly (Cloudflare Tunnel, ngrok, or deploy to a host).
 Example with `supergateway`:
 
 ```bash
-VIVISCAPE_API_KEY=your-api-key-here \
+npx viviscape-mcp login   # once, on the host running the gateway
 npx -y supergateway --stdio "npx -y viviscape-mcp" --port 8000
 ```
 
+The gateway shares the host's stored session, so everyone reaching that endpoint
+acts as the signed-in user — put your own auth in front of it.
+
 Expose `http://localhost:8000/sse` publicly, then in ChatGPT:
 
 **Settings → Connectors → Create → Custom MCP server**
@@ -88,6 +109,7 @@ The server exposes tools across these domains:
 - **Notes** — `note_add`, `note_get`, `note_update`, `note_remove`, `notes_mine`, `notes_query`
 - **Insights** — hours by person/service/project, AI summary, person stats, time totals
 - **Account** — `account_info`, `account_services`, `account_users`
+- **Auth** — `auth_login`, `auth_status`, `auth_logout`
 
 ## Development
 

package/dist/api-client.d.ts

@@ -1,8 +1,28 @@
+import { Credentials } from './auth/credentials.js';
+/** Raised when the stored session is rejected or bounced to the login page. */
+export declare class SessionExpiredError extends Error {
+    constructor();
+}
+export declare class ApiError extends Error {
+    status: number;
+    constructor(status: number, message: string);
+}
+/**
+ * Client for the ViviScape Work core API. Authenticates exactly like the
+ * ViviScape CLI: the signed-in user's bearer token plus the user_id / pid
+ * context headers the core API falls back to.
+ */
 export declare class ViviScapeClient {
+    private creds;
     private baseUrl;
-    private apiKey;
-    constructor(baseUrl: string, apiKey: string);
+    constructor(creds: Credentials);
+    get userId(): number;
+    get accountId(): number;
+    get session(): Credentials;
+    private get ctx();
     private request;
+    private get;
+    private post;
     addProspect(data: Record<string, unknown>): Promise<unknown>;
     updateProspect(data: Record<string, unknown>): Promise<unknown>;
     getProspect(prospectId: number): Promise<unknown>;
@@ -30,6 +50,8 @@ export declare class ViviScapeClient {
     getActiveProjects(): Promise<Record<string, unknown>[]>;
     getProjectById(projectId: number): Promise<unknown>;
     getProjectStaff(projectId: number): Promise<unknown>;
+    getProjectsByCompany(userId: number, companyId: number): Promise<unknown>;
+    getActiveProjectsByUser(userId: number): Promise<unknown>;
     addTask(data: Record<string, unknown>): Promise<unknown>;
     updateTask(data: Record<string, unknown>): Promise<unknown>;
     getProjectTasks(projectId: number): Promise<unknown>;
@@ -39,15 +61,13 @@ export declare class ViviScapeClient {
     getTasksByMilestone(milestoneId: number): Promise<unknown>;
     getTasksByGroupAndUser(groupId: number, userId: number): Promise<unknown>;
     getCompanyTasks(companyId: number): Promise<unknown>;
-    getProjectsByCompany(userId: number, companyId: number): Promise<unknown>;
-    getActiveProjectsByUser(userId: number): Promise<unknown>;
     addTimeLog(data: Record<string, unknown>): Promise<unknown>;
     updateTimeLog(data: Record<string, unknown>): Promise<unknown>;
     getMyNotes(): Promise<unknown>;
-    getNoteById(noteId: number): Promise<unknown>;
+    getNoteById(noteId: number | string): Promise<unknown>;
     addNote(data: Record<string, unknown>): Promise<unknown>;
     updateNote(data: Record<string, unknown>): Promise<unknown>;
-    removeNote(noteId: number): Promise<unknown>;
+    removeNote(noteId: number | string): Promise<unknown>;
     queryNotes(data: Record<string, unknown>): Promise<unknown>;
     getAccountInfo(): Promise<unknown>;
     getActiveServices(): Promise<unknown>;

package/dist/api-client.js

@@ -1,4 +1,18 @@
-const DEFAULT_USER_ID = 210; // Art Hicks
+import { API_PREFIX, baseUrl } from './config.js';
+import { featureForPath, requireFeature } from './auth/permissions.js';
+/** Raised when the stored session is rejected or bounced to the login page. */
+export class SessionExpiredError extends Error {
+    constructor() {
+        super('Your ViviScape session has expired. Run `viviscape-mcp login` to sign in again.');
+    }
+}
+export class ApiError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
 /**
  * Parse shorthand duration (e.g., "3h", "1h30m", "45m") to HH:MM:SS TimeSpan format.
  */
@@ -19,10 +33,10 @@ function parseShorthandDuration(input) {
 /**
  * Build a full Group_Task payload from simplified MCP tool params.
  */
-function buildTaskPayload(data) {
+function buildTaskPayload(data, ctx) {
     const now = new Date().toISOString();
     const assignees = [];
-    const userId = data.assigned_to ?? DEFAULT_USER_ID;
+    const userId = data.assigned_to ?? ctx.userId;
     assignees.push({
         assignee_id: 0,
         task_id: 0,
@@ -70,7 +84,7 @@ function buildTaskPayload(data) {
         milestone_id: data.milestone_id ?? 0,
         client_id: 0,
         event_id: 0,
-        account_id: 0,
+        account_id: ctx.accountId,
         percentage: 0,
         attention: false,
         pinned: false,
@@ -80,11 +94,6 @@ function buildTaskPayload(data) {
         predecessor_id: 0,
         predecessor_complete: false,
         predecessor_name: '',
-        solution: '',
-        meta: '',
-        agent_id: '00000000-0000-0000-0000-000000000000',
-        unit_id: '00000000-0000-0000-0000-000000000000',
-        reviewer_id: 0,
         review_required: false,
         parts: '',
         staff_assignees: assignees,
@@ -135,15 +144,15 @@ function buildTaskUpdatePayload(data) {
 /**
  * Build a full LOG_Time payload from simplified MCP tool params.
  */
-function buildTimeLogPayload(data) {
+function buildTimeLogPayload(data, ctx) {
     const now = new Date().toISOString();
     const durInput = String(data.duration || '0h');
     const { duration, log_time } = parseShorthandDuration(durInput);
     return {
         log_id: data.log_id ?? 0,
-        account_id: data.account_id ?? 1,
+        account_id: data.account_id ?? ctx.accountId,
         service_id: data.service_id ?? 0,
-        user_id: data.user_id ?? DEFAULT_USER_ID,
+        user_id: data.user_id ?? ctx.userId,
         company_id: data.company_id ?? 0,
         client_id: data.client_id ?? 0,
         group_id: data.group_id ?? 0,
@@ -177,28 +186,74 @@ function buildTimeLogPayload(data) {
         staff: [],
     };
 }
+const EPOCH = '2000-01-01T00:00:00';
+function isoDate(value, fallback) {
+    if (typeof value === 'string' && value.trim())
+        return value;
+    return fallback;
+}
+function nowIso() {
+    return new Date().toISOString();
+}
+/**
+ * Client for the ViviScape Work core API. Authenticates exactly like the
+ * ViviScape CLI: the signed-in user's bearer token plus the user_id / pid
+ * context headers the core API falls back to.
+ */
 export class ViviScapeClient {
+    creds;
     baseUrl;
-    apiKey;
-    constructor(baseUrl, apiKey) {
-        this.baseUrl = baseUrl.replace(/\/$/, '');
-        this.apiKey = apiKey;
+    constructor(creds) {
+        this.creds = creds;
+        this.baseUrl = (creds.base_url || baseUrl()).replace(/\/$/, '');
+    }
+    get userId() {
+        return this.creds.user_id;
+    }
+    get accountId() {
+        return this.creds.pid;
+    }
+    get session() {
+        return this.creds;
+    }
+    get ctx() {
+        return { userId: this.creds.user_id, accountId: this.creds.pid };
     }
     async request(method, path, body) {
-        const url = `${this.baseUrl}${path}`;
+        requireFeature(featureForPath(path), this.creds);
+        const url = `${this.baseUrl}${API_PREFIX}/${path.replace(/^\//, '')}`;
         const headers = {
-            'ApiKey': this.apiKey,
+            'Authorization': `Bearer ${this.creds.access_token}`,
+            'user_id': String(this.creds.user_id),
+            'pid': String(this.creds.pid),
             'Content-Type': 'application/json',
         };
         const res = await fetch(url, {
             method,
             headers,
-            body: body ? JSON.stringify(body) : undefined,
+            body: method === 'GET' ? undefined : JSON.stringify(body ?? {}),
+            // A rejected bearer token is answered with a 302 to /login; following it
+            // would just fetch the marketing page.
+            redirect: 'manual',
         });
         const text = await res.text();
+        if (res.status === 401 || res.status === 403)
+            throw new SessionExpiredError();
+        if (res.status >= 300 && res.status < 400)
+            throw new SessionExpiredError();
         if (!res.ok) {
-            throw new Error(`API ${method} ${path} returned ${res.status}: ${text}`);
+            const snippet = text.length > 400 ? `${text.slice(0, 400)}…` : text;
+            throw new ApiError(res.status, `API ${method} ${path} returned ${res.status}: ${snippet}`);
+        }
+        // Cookie-auth middleware bounces unauthenticated API calls to /login, which
+        // answers with marketing HTML and a 200. Treat that as an expired session
+        // instead of handing back a page body.
+        const contentType = res.headers.get('content-type') || '';
+        if (contentType.toLowerCase().includes('text/html') || looksLikeHtml(text)) {
+            throw new SessionExpiredError();
         }
+        if (!text.trim())
+            return null;
         try {
             return JSON.parse(text);
         }
@@ -206,209 +261,271 @@ export class ViviScapeClient {
             return text;
         }
     }
+    get(path) {
+        return this.request('GET', path);
+    }
+    post(path, body) {
+        return this.request('POST', path, body);
+    }
     // ── Prospects ──────────────────────────────────────────────
     async addProspect(data) {
-        return this.request('POST', '/api/v1/crm/prospect/add', data);
+        return this.post('prospect/add', {
+            ...data,
+            account_id: data.account_id ?? this.accountId,
+            platform_account_id: data.platform_account_id ?? this.accountId,
+            user_id: data.user_id ?? this.userId,
+            status: data.status ?? 'new',
+        });
     }
     async updateProspect(data) {
-        return this.request('POST', '/api/v1/crm/prospect/update', data);
+        return this.post('prospect/update', {
+            ...data,
+            account_id: data.account_id ?? this.accountId,
+            platform_account_id: data.platform_account_id ?? this.accountId,
+        });
     }
     async getProspect(prospectId) {
-        return this.request('GET', `/api/v1/crm/prospect/id/${prospectId}`);
+        return this.get(`prospect/id/${prospectId}`);
     }
     async getProspectsByRep(repId) {
-        return this.request('GET', `/api/v1/crm/prospects/rep/${repId}`);
+        return this.get(`prospects/rep/${repId}/${this.accountId}`);
     }
     async getProspectsByAccount() {
-        return this.request('GET', '/api/v1/crm/prospects/account');
+        return this.get(`prospects/account/${this.accountId}?rep_id=0`);
     }
     async queryProspects(query, accountId, userId, stages) {
-        return this.request('POST', '/api/v1/crm/prospects/query', {
-            query, account_id: accountId, user_id: userId, stages,
+        return this.post('prospects/lookup', {
+            query: query ?? '',
+            account_id: accountId ?? this.accountId,
+            user_id: userId ?? this.userId,
+            stages: stages ?? [],
         });
     }
     async removeProspect(prospectId) {
-        return this.request('GET', `/api/v1/crm/prospect/remove/${prospectId}`);
+        return this.get(`prospect/remove/${prospectId}`);
     }
-    // ── Prospect Notes ─────────────────────────────────────────
+    // ── Prospect notes ─────────────────────────────────────────
     async addProspectNote(data) {
-        return this.request('POST', '/api/v1/crm/prospect/note/add', data);
+        return this.post('prospect/note/add', { user_id: this.userId, ...data });
     }
     async updateProspectNote(data) {
-        return this.request('POST', '/api/v1/crm/prospect/note/update', data);
+        return this.post('prospect/note/update', data);
     }
     async getProspectNotes(prospectId) {
-        return this.request('GET', `/api/v1/crm/prospect/notes/${prospectId}`);
+        return this.get(`prospect/notes/${prospectId}`);
     }
     async removeProspectNote(noteId) {
-        return this.request('GET', `/api/v1/crm/prospect/note/remove/${noteId}`);
+        return this.get(`prospect/note/remove/${noteId}`);
     }
-    // ── Prospect Followups ─────────────────────────────────────
+    // ── Prospect follow-ups ────────────────────────────────────
     async addFollowup(data) {
-        return this.request('POST', '/api/v1/crm/prospect/followup/add', data);
+        return this.post('prospect/followup/add', { user_id: this.userId, ...data });
     }
     async updateFollowup(data) {
-        return this.request('POST', '/api/v1/crm/prospect/followup/update', data);
+        return this.post('prospect/followup/update', data);
     }
     async getFollowups(prospectId) {
-        return this.request('GET', `/api/v1/crm/prospect/followups/list/${prospectId}`);
+        return this.get(`prospect/followups/list/${prospectId}`);
     }
-    // ── Companies ──────────────────────────────────────────────
+    // ── Companies & clients ────────────────────────────────────
     async listCompanies() {
-        return this.request('GET', '/api/v1/companies/list');
+        return this.get(`user/accounts?user_id=${this.userId}&account_id=${this.accountId}`);
     }
     async addCompany(data) {
-        return this.request('POST', '/api/v1/companies/add', data);
+        return this.post('account/add', { account_id: this.accountId, ...data });
     }
     async updateCompany(data) {
-        return this.request('POST', '/api/v1/companies/update', data);
+        return this.post('account/update', { account_id: this.accountId, ...data });
     }
     async getClientsByCompany(companyId) {
-        return this.request('GET', `/api/v1/companies/clients/company/${companyId}`);
+        return this.get(`clients/company/list/${companyId}`);
     }
     async addClient(data) {
-        return this.request('POST', '/api/v1/companies/client/add', data);
+        return this.post('client/add', data);
     }
     async getClientById(clientId) {
-        return this.request('GET', `/api/v1/companies/client/id/${clientId}`);
+        return this.get(`client/id/${clientId}`);
     }
     async getClientByEmail(data) {
-        return this.request('POST', '/api/v1/companies/client/email', data);
+        return this.post('client/email', data);
     }
-    // ── Projects ───────────────────────────────────────────────
+    // ── Projects (groups) ──────────────────────────────────────
     async getMyProjects() {
-        return this.request('GET', '/api/v1/projects/user/projects');
+        return this.get(`user/groups/company?user_id=${this.userId}&account_id=${this.accountId}&companyid=0`);
     }
     async getActiveProjects() {
-        const projects = await this.request('GET', '/api/v1/projects/user/projects');
-        return projects.filter(p => p.bitActive === true);
+        const projects = await this.getMyProjects();
+        if (!Array.isArray(projects))
+            return projects;
+        return projects.filter((p) => p.bitActive === true || String(p.status ?? '').toLowerCase() === 'active');
     }
     async getProjectById(projectId) {
-        return this.request('GET', `/api/v1/projects/id?project_id=${projectId}`);
+        return this.get(`group/id/${projectId}`);
     }
     async getProjectStaff(projectId) {
-        return this.request('GET', `/api/v1/projects/project/staff?project_id=${projectId}`);
+        return this.get(`groups/group/staff?group_id=${projectId}`);
+    }
+    async getProjectsByCompany(userId, companyId) {
+        return this.get(`user/groups/company?user_id=${userId || this.userId}&account_id=${this.accountId}&companyid=${companyId}`);
     }
+    async getActiveProjectsByUser(userId) {
+        return this.get(`user/groups/active?user_id=${userId || this.userId}&account_id=${this.accountId}`);
+    }
+    // ── Tasks ──────────────────────────────────────────────────
     async addTask(data) {
-        const payload = buildTaskPayload(data);
-        return this.request('POST', '/api/v1/projects/task/add', payload);
+        return this.post('tasks/add', buildTaskPayload(data, this.ctx));
     }
     async updateTask(data) {
         if (data.task_id) {
-            const existing = await this.getTask(data.task_id);
-            const payload = { ...existing, ...buildTaskUpdatePayload(data) };
-            return this.request('POST', '/api/v1/projects/task/update', payload);
+            const existing = await this.getTask(Number(data.task_id));
+            return this.post('tasks/update', { ...existing, ...buildTaskUpdatePayload(data) });
         }
-        return this.request('POST', '/api/v1/projects/task/update', buildTaskUpdatePayload(data));
+        return this.post('tasks/update', buildTaskUpdatePayload(data));
     }
     async getProjectTasks(projectId) {
-        return this.request('GET', `/api/v1/projects/tasks/project?project_id=${projectId}`);
+        return this.get(`tasks/group?group_id=${projectId}`);
     }
     async getOpenTasks() {
-        return this.request('POST', '/api/v1/projects/account/tasks/open', {});
+        return this.post('account/tasks/open', {
+            account_id: this.accountId,
+            user_id: this.userId,
+            start: EPOCH,
+            end: nowIso(),
+            company_id: 0,
+            teamfilter: '',
+            onlymytasks: false,
+        });
     }
     async getTask(taskId) {
-        return this.request('GET', `/api/v1/projects/task/get?task_id=${taskId}`);
+        return this.get(`tasks/get?task_id=${taskId}`);
     }
     async getPendingTasks(userId) {
-        return this.request('GET', `/api/v1/projects/user/tasks/pending?user_id=${userId}`);
+        return this.get(`user/tasks/pending?user_id=${userId || this.userId}&account_id=${this.accountId}`);
     }
     async getTasksByMilestone(milestoneId) {
-        return this.request('GET', `/api/v1/projects/tasks/milestones?milestone_id=${milestoneId}`);
+        return this.get(`tasks/milestones?milestone_id=${milestoneId}`);
     }
     async getTasksByGroupAndUser(groupId, userId) {
-        return this.request('GET', `/api/v1/projects/tasks/group/user?group_id=${groupId}&user_id=${userId}`);
+        return this.get(`tasks/group/user?group_id=${groupId}&user_id=${userId || this.userId}`);
     }
     async getCompanyTasks(companyId) {
-        return this.request('GET', `/api/v1/projects/company/tasks?company_id=${companyId}`);
-    }
-    async getProjectsByCompany(userId, companyId) {
-        return this.request('GET', `/api/v1/projects/user/projects/company?user_id=${userId}&companyid=${companyId}`);
-    }
-    async getActiveProjectsByUser(userId) {
-        return this.request('GET', `/api/v1/projects/user/projects/active?user_id=${userId}`);
+        return this.get(`company/tasks?company_id=${companyId}&user_id=${this.userId}`);
     }
+    // ── Time logs ──────────────────────────────────────────────
     async addTimeLog(data) {
-        const payload = buildTimeLogPayload(data);
-        return this.request('POST', '/api/v1/projects/task/logs/add', payload);
+        return this.post('logs/add', buildTimeLogPayload(data, this.ctx));
     }
     async updateTimeLog(data) {
-        if (data.log_id) {
-            const payload = buildTimeLogPayload(data);
-            return this.request('POST', '/api/v1/projects/task/logs/update', payload);
-        }
-        return this.request('POST', '/api/v1/projects/task/logs/update', buildTimeLogPayload(data));
+        return this.post('logs/update', buildTimeLogPayload(data, this.ctx));
     }
     // ── Notes ──────────────────────────────────────────────────
     async getMyNotes() {
-        return this.request('GET', '/api/v1/notes/me');
+        return this.get('notes/me');
     }
     async getNoteById(noteId) {
-        return this.request('GET', `/api/v1/notes/id/${noteId}`);
+        return this.get(`note/id/${noteId}`);
     }
     async addNote(data) {
-        return this.request('POST', '/api/v1/notes/add', data);
+        return this.post('note/add', {
+            account_id: this.accountId,
+            user_id: this.userId,
+            creator_id: this.userId,
+            ...data,
+        });
     }
     async updateNote(data) {
-        return this.request('POST', '/api/v1/notes/update', data);
+        return this.post('note/update', { account_id: this.accountId, user_id: this.userId, ...data });
     }
     async removeNote(noteId) {
-        return this.request('GET', `/api/v1/notes/remove/${noteId}`);
+        return this.get(`note/remove/${noteId}`);
     }
     async queryNotes(data) {
-        return this.request('POST', '/api/v1/notes/query', data);
+        return this.post('notes/query', {
+            query: data.query ?? '',
+            account_id: this.accountId,
+            user_id: this.userId,
+            company_id: data.company_id ?? 0,
+            use_notes: true,
+            use_tasks: false,
+            use_knowledge: true,
+            module: 'notes',
+        });
     }
     // ── Account ────────────────────────────────────────────────
     async getAccountInfo() {
-        return this.request('GET', '/api/v1/account/info');
+        return this.get(`account/id/${this.accountId}`);
     }
     async getActiveServices() {
-        return this.request('GET', '/api/v1/account/services/active');
+        return this.get(`services/${this.accountId}/active`);
     }
     async getAllServices() {
-        return this.request('GET', '/api/v1/account/services/list');
+        return this.get(`services/${this.accountId}`);
     }
     async getUsers() {
-        return this.request('GET', '/api/v1/account/users');
+        return this.get(`account/users/${this.accountId}`);
     }
     // ── Insights ───────────────────────────────────────────────
     async getHoursByPerson(data) {
-        return this.request('POST', '/api/v1/insights/logs/hours/person', data);
+        const userId = Number(data.user_id) || this.userId;
+        return this.get(`insights/logs/hours/person/${userId}?account_id=${this.accountId}` +
+            `&start=${encodeURIComponent(isoDate(data.start_date, EPOCH))}` +
+            `&end=${encodeURIComponent(isoDate(data.end_date, nowIso()))}`);
     }
     async getTimeLogsByDateRange(data) {
-        return this.request('POST', '/api/v1/insights/logs/account/daterange', data);
+        return this.get(`timelog/account?account_id=${this.accountId}` +
+            `&start=${encodeURIComponent(isoDate(data.start_date, EPOCH))}` +
+            `&end=${encodeURIComponent(isoDate(data.end_date, nowIso()))}`);
     }
     async getPersonStats(data) {
-        return this.request('POST', '/api/v1/insights/person/stats', data);
+        const userId = Number(data.user_id) || this.userId;
+        return this.get(`insights/person/stats/${userId}/${this.accountId}`);
     }
     async getHoursByPersonAndService(data) {
-        return this.request('POST', '/api/v1/insights/logs/hours/person/service', data);
+        const userId = Number(data.user_id) || this.userId;
+        return this.get(`insights/logs/hours/person/service/${userId}?account_id=${this.accountId}` +
+            `&start=${encodeURIComponent(isoDate(data.start_date, EPOCH))}` +
+            `&end=${encodeURIComponent(isoDate(data.end_date, nowIso()))}`);
     }
     async getAllTimeHoursByPersonAndService(data) {
-        return this.request('POST', '/api/v1/insights/logs/hours/alltime/person/service', data);
+        const userId = Number(data.user_id) || this.userId;
+        return this.get(`insights/logs/hours/alltime/person/service/${userId}/${this.accountId}`);
     }
     async getProjectHoursByService(data) {
-        return this.request('POST', '/api/v1/insights/logs/project/hours/service', data);
+        return this.get(`insights/logs/project/hours/service/${this.userId}?account_id=${this.accountId}` +
+            `&start=${encodeURIComponent(isoDate(data.start_date, EPOCH))}` +
+            `&end=${encodeURIComponent(isoDate(data.end_date, nowIso()))}`);
     }
     async getAccountHoursByService(data) {
-        return this.request('POST', '/api/v1/insights/logs/account/hours/service', data);
+        return this.get(`insights/logs/account/hours/service/${this.userId}?account_id=${this.accountId}` +
+            `&start=${encodeURIComponent(isoDate(data.start_date, EPOCH))}` +
+            `&end=${encodeURIComponent(isoDate(data.end_date, nowIso()))}`);
     }
     async getAiLogSummary(data) {
-        return this.request('POST', '/api/v1/insights/ai/log/summary', data);
+        return this.post('ai/insights/logs/account/hours/services', {
+            user_id: Number(data.user_id) || this.userId,
+            account_id: this.accountId,
+            start: isoDate(data.start_date, EPOCH),
+            end: isoDate(data.end_date, nowIso()),
+            query: data.query ?? '',
+        });
     }
     async getPersonHoursThisWeek(userId) {
-        return this.request('GET', `/api/v1/insights/insights/eval/person/week/${userId}`);
+        return this.get(`insights/eval/person/week/${userId || this.userId}/${this.accountId}`);
     }
     async getPersonHoursThisMonth(userId) {
-        return this.request('GET', `/api/v1/insights/eval/person/month/${userId}`);
+        return this.get(`insights/eval/person/month/${userId || this.userId}/${this.accountId}`);
     }
     async getPersonHoursLastMonth(userId) {
-        return this.request('GET', `/api/v1/insights/eval/person/lastmonth/${userId}`);
+        return this.get(`insights/eval/person/lastmonth/${userId || this.userId}/${this.accountId}`);
     }
     async getProjectTimeTotal(projectId) {
-        return this.request('GET', `/api/v1/insights/eval/project/all/${projectId}`);
+        return this.get(`insights/eval/project/all/${projectId}/${this.accountId}`);
     }
     async getAllUsersTime() {
-        return this.request('GET', '/api/v1/insights/eval/users/all');
+        return this.get(`insights/eval/users/all/${this.userId}/${this.accountId}`);
     }
 }
+function looksLikeHtml(text) {
+    const t = text.trimStart().toLowerCase();
+    return t.startsWith('<!doctype') || t.startsWith('<html');
+}