avios-cli 0.4.2__tar.gz → 0.5.0__tar.gz

{avios_cli-0.4.2 → avios_cli-0.5.0}/CHANGELOG.md

@@ -6,6 +6,67 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.5.0] - 2026-08-11
+
+### Fixed
+- **BA reward-flight search returned nothing after British Airways rebuilt the
+  flight finder.** The new Next.js app moved each day's flights one level deeper
+  (`departureJourneys.<date>.journeys[].flights[]` instead of
+  `departureJourneys.<date>.flights[]`), so every day parsed as empty. Availability
+  parsing now follows the new shape, and the old flat shape still parses if BA
+  rolls back.
+- **Business-class seats were always reported as zero.** BA's availability rows use
+  cabin code `J`; the client only looked for `C`. Both are now recognised, matching
+  the site's own `cabinClassCodeMap`.
+- The request contract was re-derived from a live capture and is now reproduced
+  byte for byte — query parameters, both `next-router-state-tree` variants, `rsc`,
+  `next-url`, `accept`, and the full browser header set. A user-agent that
+  disagreed with the `sec-ch-ua` client hints (Chrome 126 vs 148) is fixed, since
+  the mismatch is itself a bot signal.
+
+### Added
+- **Avios prices.** Searching an exact `--date` now calls the finder's
+  `fetchPricingAction` server action and shows the Avios cost per cabin for your
+  party, in both the CLI table and the TUI. Calendar (month) searches stay
+  seats-only so they remain one request per leg.
+- Exact-date searches also re-read that date through
+  `getFlightResultsForSingleJourneyAction`, exactly as the website does when you
+  click a day, so seat counts are fresh rather than served from the month cache.
+- Seats that only sell against a BA companion voucher (Business `rbd: I`) are
+  marked `†` instead of being counted as general availability.
+- `AviosClient.search_reward_legs()` searches every leg of a trip over **one**
+  browser session, and reports failures per leg so one bad leg does not lose the
+  other. The CLI and TUI both use it.
+- Akamai denials are now distinguished from an expired session: a bot-manager 403
+  or a 429 raises `RewardSearchBlockedError` telling you to wait and switch
+  network, rather than sending you to log in again.
+
+### Changed
+- **Reward searches make far fewer requests.** Previously each leg launched its own
+  Chrome, navigated to the finder, and drove the search form. A search now warms
+  one browser navigation and issues in-page `fetch()` calls for everything after
+  it — a return trip costs one navigation and two fetches — with pacing between
+  requests. British Airways blocks by IP address, and page loads were what
+  triggered it.
+- One availability request now returns the whole 13-month booking window, so an
+  out-of-range month reports the window BA actually offers.
+- Dates beyond BA's rolling booking horizon are recognised (`availabilityLevel: 3`)
+  and no longer render as "no reward seats".
+- `flights --json` reports days as `journeys[].flights[]`, following the upstream
+  shape, and includes the `price` attached to each cabin.
+
+## [0.4.3] - 2026-07-27
+
+### Changed
+- **`uvx avios-cli login` now works with no extra flags.** Browser-assisted login
+  (Playwright + browser-cookie3) moved from the optional `[login]` extra into the
+  base package, so `uvx avios-cli login iberia` just works — no more
+  `uvx --from 'avios-cli[login]' …`. The `login` extra is kept as a no-op alias
+  for backward compatibility.
+- If you have no system Chrome, `avios login` now **downloads Playwright's Chromium
+  automatically** on first use (~150 MB, one-time) instead of failing with an
+  install hint.
+
 ## [0.4.2] - 2026-07-27
 
 ### Fixed
@@ -198,7 +259,8 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 - Reward-flight **availability** search is not yet implemented (needs a British
   Airways capture).
 
-[Unreleased]: https://github.com/alexechoi/avios-cli/compare/v0.4.2...HEAD
+[Unreleased]: https://github.com/alexechoi/avios-cli/compare/v0.4.3...HEAD
+[0.4.3]: https://github.com/alexechoi/avios-cli/compare/v0.4.2...v0.4.3
 [0.4.2]: https://github.com/alexechoi/avios-cli/compare/v0.4.1...v0.4.2
 [0.4.1]: https://github.com/alexechoi/avios-cli/compare/v0.4.0...v0.4.1
 [0.4.0]: https://github.com/alexechoi/avios-cli/compare/v0.3.0...v0.4.0

{avios_cli-0.4.2 → avios_cli-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: avios-cli
-Version: 0.4.2
+Version: 0.5.0
 Summary: A CLI and TUI for Avios balances, transactions, and BA reward-flight availability.
 Project-URL: Homepage, https://github.com/alexechoi/avios-cli
 Project-URL: Repository, https://github.com/alexechoi/avios-cli
@@ -21,7 +21,9 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Utilities
 Requires-Python: >=3.10
+Requires-Dist: browser-cookie3>=0.19
 Requires-Dist: httpx>=0.27
+Requires-Dist: playwright>=1.44
 Requires-Dist: pydantic-settings>=2.3
 Requires-Dist: pydantic>=2.7
 Requires-Dist: pyyaml>=6.0
@@ -29,8 +31,6 @@ Requires-Dist: rich>=13.7
 Requires-Dist: textual>=0.80
 Requires-Dist: typer>=0.12
 Provides-Extra: login
-Requires-Dist: browser-cookie3>=0.19; extra == 'login'
-Requires-Dist: playwright>=1.44; extra == 'login'
 Description-Content-Type: text/markdown
 
 # avios-cli
@@ -86,22 +86,26 @@ uv run avios --help
 avios.com has no credential API — login is Auth0 Universal Login behind hCaptcha and
 SMS/passkey MFA — so `avios login` opens a real browser, **waits while you finish
 logging in** (password, captcha, SMS code), and captures the session once you land
-on the dashboard. It needs the **`login` extra**:
+on the dashboard:
 
 ```bash
-uvx --from 'avios-cli[login]' avios login
-uvx --from 'avios-cli[login]' avios login finnair
+uvx avios-cli login
+uvx avios-cli login iberia
+uvx avios-cli login finnair
 ```
 
-It launches your installed **Google Chrome** (no extra download). If you don't have
-Chrome, install Playwright's browser once with
-`uvx --from playwright playwright install chromium`.
+It launches your installed **Google Chrome** (no download). If you don't have
+Chrome, it fetches Playwright's Chromium automatically on first login (~150 MB,
+one-time). No extra flags — browser support ships in the package.
+
+> Tip: if you'll use it often, `uv tool install avios-cli` once, then just run
+> `avios login`, `avios balance`, etc. directly.
 
 Prefer not to open a browser? Import the cookie from a Chrome you're already logged
 into avios.com with:
 
 ```bash
-uvx --from 'avios-cli[login]' avios login --from-browser
+uvx avios-cli login --from-browser
 ```
 
 This scans **all your Chrome profiles** and uses whichever one is actually logged
@@ -109,16 +113,12 @@ into avios.com (it tells you which). If you have several profiles, you can targe
 one directly:
 
 ```bash
-uvx --from 'avios-cli[login]' avios login --from-browser --profile "Profile 1"
+uvx avios-cli login --from-browser --profile "Profile 1"
 ```
 
-Plain `uvx avios-cli login` won't work — the isolated environment doesn't include
-the `login` extra.
-
 **Stuck in an endless captcha loop?** That's bot detection on the automated
 browser. Use `--from-browser` instead: log into avios.com in your normal Chrome
-(you'll get one normal captcha), then run
-`uvx --from 'avios-cli[login]' avios login --from-browser`.
+(you'll get one normal captcha), then run `uvx avios-cli login --from-browser`.
 
 Finnair uses a different CAS/OAuth flow. `avios login finnair` opens the Finnair Plus
 balance page, lets you complete password and MFA in the real browser, and captures the
@@ -130,10 +130,12 @@ Each programme session is stored at `~/.config/avios/accounts/<programme>.json`
 `avios logout <programme>` for one account or `avios logout` for all accounts.
 For BA, browser-assisted login also opens the separate reward-flight application.
 British Airways may show a second login prompt; keep the browser open until the
-CLI confirms success. Reward searches drive the site's own form in a background
-Chrome window because the flight-search route rejects plain HTTP and automated
-headless requests, so the `login` extra remains required when running
-`avios flights` or the Reward Flights TUI tab.
+CLI confirms success. Reward searches run inside a background Chrome window: the
+flight finder is behind Akamai Bot Manager, which rejects plain HTTP clients and
+**blocks by IP address** — a handful of ordinary page loads from a shared office
+network is enough to earn a site-wide 403. Every leg of a search is therefore
+batched through a single browser navigation, paced, and served by in-page
+`fetch()` calls. If you do get blocked, wait a few minutes and switch network.
 
 ## Usage
 
@@ -150,9 +152,9 @@ avios overview                 # dashboard summary
 avios whoami                   # name, tier, membership, email
 avios raw /shell/api/users/current/accounts   # hit any endpoint directly
 
-# Direct British Airways reward-seat availability:
-avios flights LON ABZ --date 2026-11-05
-avios flights LON ABZ --date 2026-11-05 --return-date 2026-11-12
+# Direct British Airways reward-seat availability (--date also prices in Avios):
+avios flights LON HKG --date 2027-01-05
+avios flights LON HKG --date 2027-01-05 --return-date 2027-01-12
 avios flights LON ABZ --month 2026-11 --cabin economy --cabin business
 avios flights LON ABZ --month 2026-11 --return-month 2026-12 --json
 ```
@@ -176,10 +178,13 @@ A tabbed full-screen application:
 Press `r` to refresh the dashboard and `q` to quit. Reward searches run only when
 you press Search or Enter.
 
-Reward search is an unofficial, availability-only view. It currently supports
-direct BA flights, three-letter airport/city codes, and seat counts by cabin. It
-does not price, book, or show taxes/fees or connecting flights. Return journeys
-are two independent one-way searches.
+Reward search is an unofficial view of BA's own flight finder. It supports direct
+BA flights, three-letter airport/city codes, and seat counts by cabin. Searching
+an exact `--date` also fetches the Avios price per cabin for your party; calendar
+(month) searches show seats only, which keeps them to one request per leg. Seats
+that need a BA companion voucher are marked `†`. It does not book, and it does
+not show taxes/fees or connecting flights. Return journeys are two reverse-route
+one-way searches sharing one browser session.
 
 ## Roadmap
 
@@ -191,6 +196,7 @@ are two independent one-way searches.
 - [x] Textual TUI dashboard
 - [x] Multiple accounts (BA, Iberia, Aer Lingus, Finnair) with combined views
 - [x] British Airways reward-flight **availability** search (CLI + TUI)
+- [x] Avios pricing per cabin for an exact date
 
 ## Development
 

{avios_cli-0.4.2 → avios_cli-0.5.0}/README.md

@@ -51,22 +51,26 @@ uv run avios --help
 avios.com has no credential API — login is Auth0 Universal Login behind hCaptcha and
 SMS/passkey MFA — so `avios login` opens a real browser, **waits while you finish
 logging in** (password, captcha, SMS code), and captures the session once you land
-on the dashboard. It needs the **`login` extra**:
+on the dashboard:
 
 ```bash
-uvx --from 'avios-cli[login]' avios login
-uvx --from 'avios-cli[login]' avios login finnair
+uvx avios-cli login
+uvx avios-cli login iberia
+uvx avios-cli login finnair
 ```
 
-It launches your installed **Google Chrome** (no extra download). If you don't have
-Chrome, install Playwright's browser once with
-`uvx --from playwright playwright install chromium`.
+It launches your installed **Google Chrome** (no download). If you don't have
+Chrome, it fetches Playwright's Chromium automatically on first login (~150 MB,
+one-time). No extra flags — browser support ships in the package.
+
+> Tip: if you'll use it often, `uv tool install avios-cli` once, then just run
+> `avios login`, `avios balance`, etc. directly.
 
 Prefer not to open a browser? Import the cookie from a Chrome you're already logged
 into avios.com with:
 
 ```bash
-uvx --from 'avios-cli[login]' avios login --from-browser
+uvx avios-cli login --from-browser
 ```
 
 This scans **all your Chrome profiles** and uses whichever one is actually logged
@@ -74,16 +78,12 @@ into avios.com (it tells you which). If you have several profiles, you can targe
 one directly:
 
 ```bash
-uvx --from 'avios-cli[login]' avios login --from-browser --profile "Profile 1"
+uvx avios-cli login --from-browser --profile "Profile 1"
 ```
 
-Plain `uvx avios-cli login` won't work — the isolated environment doesn't include
-the `login` extra.
-
 **Stuck in an endless captcha loop?** That's bot detection on the automated
 browser. Use `--from-browser` instead: log into avios.com in your normal Chrome
-(you'll get one normal captcha), then run
-`uvx --from 'avios-cli[login]' avios login --from-browser`.
+(you'll get one normal captcha), then run `uvx avios-cli login --from-browser`.
 
 Finnair uses a different CAS/OAuth flow. `avios login finnair` opens the Finnair Plus
 balance page, lets you complete password and MFA in the real browser, and captures the
@@ -95,10 +95,12 @@ Each programme session is stored at `~/.config/avios/accounts/<programme>.json`
 `avios logout <programme>` for one account or `avios logout` for all accounts.
 For BA, browser-assisted login also opens the separate reward-flight application.
 British Airways may show a second login prompt; keep the browser open until the
-CLI confirms success. Reward searches drive the site's own form in a background
-Chrome window because the flight-search route rejects plain HTTP and automated
-headless requests, so the `login` extra remains required when running
-`avios flights` or the Reward Flights TUI tab.
+CLI confirms success. Reward searches run inside a background Chrome window: the
+flight finder is behind Akamai Bot Manager, which rejects plain HTTP clients and
+**blocks by IP address** — a handful of ordinary page loads from a shared office
+network is enough to earn a site-wide 403. Every leg of a search is therefore
+batched through a single browser navigation, paced, and served by in-page
+`fetch()` calls. If you do get blocked, wait a few minutes and switch network.
 
 ## Usage
 
@@ -115,9 +117,9 @@ avios overview                 # dashboard summary
 avios whoami                   # name, tier, membership, email
 avios raw /shell/api/users/current/accounts   # hit any endpoint directly
 
-# Direct British Airways reward-seat availability:
-avios flights LON ABZ --date 2026-11-05
-avios flights LON ABZ --date 2026-11-05 --return-date 2026-11-12
+# Direct British Airways reward-seat availability (--date also prices in Avios):
+avios flights LON HKG --date 2027-01-05
+avios flights LON HKG --date 2027-01-05 --return-date 2027-01-12
 avios flights LON ABZ --month 2026-11 --cabin economy --cabin business
 avios flights LON ABZ --month 2026-11 --return-month 2026-12 --json
 ```
@@ -141,10 +143,13 @@ A tabbed full-screen application:
 Press `r` to refresh the dashboard and `q` to quit. Reward searches run only when
 you press Search or Enter.
 
-Reward search is an unofficial, availability-only view. It currently supports
-direct BA flights, three-letter airport/city codes, and seat counts by cabin. It
-does not price, book, or show taxes/fees or connecting flights. Return journeys
-are two independent one-way searches.
+Reward search is an unofficial view of BA's own flight finder. It supports direct
+BA flights, three-letter airport/city codes, and seat counts by cabin. Searching
+an exact `--date` also fetches the Avios price per cabin for your party; calendar
+(month) searches show seats only, which keeps them to one request per leg. Seats
+that need a BA companion voucher are marked `†`. It does not book, and it does
+not show taxes/fees or connecting flights. Return journeys are two reverse-route
+one-way searches sharing one browser session.
 
 ## Roadmap
 
@@ -156,6 +161,7 @@ are two independent one-way searches.
 - [x] Textual TUI dashboard
 - [x] Multiple accounts (BA, Iberia, Aer Lingus, Finnair) with combined views
 - [x] British Airways reward-flight **availability** search (CLI + TUI)
+- [x] Avios pricing per cabin for an exact date
 
 ## Development