avios-cli 0.4.3__tar.gz → 0.6.0__tar.gz

{avios_cli-0.4.3 → avios_cli-0.6.0}/CHANGELOG.md

@@ -6,6 +6,81 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.6.0] - 2026-08-11
+
+### Added
+- **MCP server (`avios-mcp`).** Exposes your Avios accounts and British Airways
+  reward availability to Claude and any other MCP client over stdio. Install with
+  `uv tool install 'avios-cli[mcp]'`; sessions come from `avios login`, so the
+  server never performs a login itself. Closes #45.
+
+  Tools: `list_accounts`, `get_balance`, `get_transactions`,
+  `get_pending_transactions`, `whoami`, `search_reward_flights`.
+
+  Design constraints worth stating, because they are what make it safe to point an
+  agent at:
+
+  - **Read-only.** Nothing books, spends, or mutates a session.
+  - **No credentials in output.** Every tool returns an explicit response model
+    rather than a raw API payload, so cookies, API keys and the `whoami` id token
+    never leave the process.
+  - **Reward search is batched and rate-limited.** BA blocks by IP address, so an
+    agent fanning out over routes could lock you out of the site. A whole return
+    trip goes through one batched, single-browser-session search; the server
+    enforces a cooldown between searches; and a block is reported as terminal and
+    explicitly not retryable.
+  - **MCP is an optional extra**, so a plain CLI install does not pull in the SDK's
+    web stack.
+
+## [0.5.0] - 2026-08-11
+
+### Fixed
+- **BA reward-flight search returned nothing after British Airways rebuilt the
+  flight finder.** The new Next.js app moved each day's flights one level deeper
+  (`departureJourneys.<date>.journeys[].flights[]` instead of
+  `departureJourneys.<date>.flights[]`), so every day parsed as empty. Availability
+  parsing now follows the new shape, and the old flat shape still parses if BA
+  rolls back.
+- **Business-class seats were always reported as zero.** BA's availability rows use
+  cabin code `J`; the client only looked for `C`. Both are now recognised, matching
+  the site's own `cabinClassCodeMap`.
+- The request contract was re-derived from a live capture and is now reproduced
+  byte for byte — query parameters, both `next-router-state-tree` variants, `rsc`,
+  `next-url`, `accept`, and the full browser header set. A user-agent that
+  disagreed with the `sec-ch-ua` client hints (Chrome 126 vs 148) is fixed, since
+  the mismatch is itself a bot signal.
+
+### Added
+- **Avios prices.** Searching an exact `--date` now calls the finder's
+  `fetchPricingAction` server action and shows the Avios cost per cabin for your
+  party, in both the CLI table and the TUI. Calendar (month) searches stay
+  seats-only so they remain one request per leg.
+- Exact-date searches also re-read that date through
+  `getFlightResultsForSingleJourneyAction`, exactly as the website does when you
+  click a day, so seat counts are fresh rather than served from the month cache.
+- Seats that only sell against a BA companion voucher (Business `rbd: I`) are
+  marked `†` instead of being counted as general availability.
+- `AviosClient.search_reward_legs()` searches every leg of a trip over **one**
+  browser session, and reports failures per leg so one bad leg does not lose the
+  other. The CLI and TUI both use it.
+- Akamai denials are now distinguished from an expired session: a bot-manager 403
+  or a 429 raises `RewardSearchBlockedError` telling you to wait and switch
+  network, rather than sending you to log in again.
+
+### Changed
+- **Reward searches make far fewer requests.** Previously each leg launched its own
+  Chrome, navigated to the finder, and drove the search form. A search now warms
+  one browser navigation and issues in-page `fetch()` calls for everything after
+  it — a return trip costs one navigation and two fetches — with pacing between
+  requests. British Airways blocks by IP address, and page loads were what
+  triggered it.
+- One availability request now returns the whole 13-month booking window, so an
+  out-of-range month reports the window BA actually offers.
+- Dates beyond BA's rolling booking horizon are recognised (`availabilityLevel: 3`)
+  and no longer render as "no reward seats".
+- `flights --json` reports days as `journeys[].flights[]`, following the upstream
+  shape, and includes the `price` attached to each cabin.
+
 ## [0.4.3] - 2026-07-27
 
 ### Changed

{avios_cli-0.4.3 → avios_cli-0.6.0}/PKG-INFO

@@ -1,14 +1,14 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: avios-cli
-Version: 0.4.3
-Summary: A CLI and TUI for Avios balances, transactions, and BA reward-flight availability.
+Version: 0.6.0
+Summary: A CLI, TUI and MCP server for Avios balances, transactions, and BA reward-flight availability.
 Project-URL: Homepage, https://github.com/alexechoi/avios-cli
 Project-URL: Repository, https://github.com/alexechoi/avios-cli
 Project-URL: Issues, https://github.com/alexechoi/avios-cli/issues
 Author: Alex Choi
 License-Expression: MIT
 License-File: LICENSE
-Keywords: avios,british-airways,cli,loyalty,terminal,tui
+Keywords: avios,british-airways,cli,loyalty,mcp,terminal,tui
 Classifier: Development Status :: 3 - Alpha
 Classifier: Environment :: Console
 Classifier: Intended Audience :: End Users/Desktop
@@ -31,6 +31,8 @@ Requires-Dist: rich>=13.7
 Requires-Dist: textual>=0.80
 Requires-Dist: typer>=0.12
 Provides-Extra: login
+Provides-Extra: mcp
+Requires-Dist: mcp<3,>=2.0; extra == 'mcp'
 Description-Content-Type: text/markdown
 
 # avios-cli
@@ -39,10 +41,10 @@ Description-Content-Type: text/markdown
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Python](https://img.shields.io/badge/python-3.10%2B-blue.svg)](https://www.python.org/)
 
-A **CLI and TUI for your Avios programmes** — check balances, browse transactions,
-and search British Airways reward-flight availability without leaving the terminal.
-British Airways, Iberia, and Aer Lingus use avios.com; Finnair Plus uses Finnair's
-own OAuth and loyalty API.
+A **CLI, TUI and MCP server for your Avios programmes** — check balances, browse
+transactions, and search British Airways reward-flight availability without leaving
+the terminal, or hand the same data to an AI agent. British Airways, Iberia, and
+Aer Lingus use avios.com; Finnair Plus uses Finnair's own OAuth and loyalty API.
 
 > ⚠️ **Unofficial.** This project is not affiliated with, authorised by, or endorsed by
 > Avios, British Airways, Finnair or IAG Loyalty. It drives the same private endpoints
@@ -130,10 +132,12 @@ Each programme session is stored at `~/.config/avios/accounts/<programme>.json`
 `avios logout <programme>` for one account or `avios logout` for all accounts.
 For BA, browser-assisted login also opens the separate reward-flight application.
 British Airways may show a second login prompt; keep the browser open until the
-CLI confirms success. Reward searches drive the site's own form in a background
-Chrome window because the flight-search route rejects plain HTTP and automated
-headless requests, so the `login` extra remains required when running
-`avios flights` or the Reward Flights TUI tab.
+CLI confirms success. Reward searches run inside a background Chrome window: the
+flight finder is behind Akamai Bot Manager, which rejects plain HTTP clients and
+**blocks by IP address** — a handful of ordinary page loads from a shared office
+network is enough to earn a site-wide 403. Every leg of a search is therefore
+batched through a single browser navigation, paced, and served by in-page
+`fetch()` calls. If you do get blocked, wait a few minutes and switch network.
 
 ## Usage
 
@@ -150,9 +154,9 @@ avios overview                 # dashboard summary
 avios whoami                   # name, tier, membership, email
 avios raw /shell/api/users/current/accounts   # hit any endpoint directly
 
-# Direct British Airways reward-seat availability:
-avios flights LON ABZ --date 2026-11-05
-avios flights LON ABZ --date 2026-11-05 --return-date 2026-11-12
+# Direct British Airways reward-seat availability (--date also prices in Avios):
+avios flights LON HKG --date 2027-01-05
+avios flights LON HKG --date 2027-01-05 --return-date 2027-01-12
 avios flights LON ABZ --month 2026-11 --cabin economy --cabin business
 avios flights LON ABZ --month 2026-11 --return-month 2026-12 --json
 ```
@@ -176,10 +180,48 @@ A tabbed full-screen application:
 Press `r` to refresh the dashboard and `q` to quit. Reward searches run only when
 you press Search or Enter.
 
-Reward search is an unofficial, availability-only view. It currently supports
-direct BA flights, three-letter airport/city codes, and seat counts by cabin. It
-does not price, book, or show taxes/fees or connecting flights. Return journeys
-are two independent one-way searches.
+## MCP server
+
+Expose your accounts to Claude and other MCP clients, read-only:
+
+```bash
+uv tool install 'avios-cli[mcp]'
+avios login ba          # sessions come from the CLI; the server never logs in
+```
+
+```jsonc
+// Claude Desktop: claude_desktop_config.json
+{
+  "mcpServers": {
+    "avios": { "command": "avios-mcp" }
+  }
+}
+```
+
+Or, for Claude Code:
+
+```bash
+claude mcp add avios -- uvx --from 'avios-cli[mcp]' avios-mcp
+```
+
+Tools: `list_accounts`, `get_balance`, `get_transactions`,
+`get_pending_transactions`, `whoami`, `search_reward_flights`.
+
+Every tool is read-only — nothing books, spends, or changes a session — and no
+cookie or token is ever returned. `search_reward_flights` searches a whole return
+trip in one call and is rate-limited server-side, because it drives a real browser
+and British Airways blocks by IP address; an agent looping over routes could get
+you locked out of the site.
+
+## Notes on reward search
+
+Reward search is an unofficial view of BA's own flight finder. It supports direct
+BA flights, three-letter airport/city codes, and seat counts by cabin. Searching
+an exact `--date` also fetches the Avios price per cabin for your party; calendar
+(month) searches show seats only, which keeps them to one request per leg. Seats
+that need a BA companion voucher are marked `†`. It does not book, and it does
+not show taxes/fees or connecting flights. Return journeys are two reverse-route
+one-way searches sharing one browser session.
 
 ## Roadmap
 
@@ -191,6 +233,8 @@ are two independent one-way searches.
 - [x] Textual TUI dashboard
 - [x] Multiple accounts (BA, Iberia, Aer Lingus, Finnair) with combined views
 - [x] British Airways reward-flight **availability** search (CLI + TUI)
+- [x] Avios pricing per cabin for an exact date
+- [x] MCP server (`avios-mcp`) for AI agents
 
 ## Development
 

{avios_cli-0.4.3 → avios_cli-0.6.0}/README.md

@@ -4,10 +4,10 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Python](https://img.shields.io/badge/python-3.10%2B-blue.svg)](https://www.python.org/)
 
-A **CLI and TUI for your Avios programmes** — check balances, browse transactions,
-and search British Airways reward-flight availability without leaving the terminal.
-British Airways, Iberia, and Aer Lingus use avios.com; Finnair Plus uses Finnair's
-own OAuth and loyalty API.
+A **CLI, TUI and MCP server for your Avios programmes** — check balances, browse
+transactions, and search British Airways reward-flight availability without leaving
+the terminal, or hand the same data to an AI agent. British Airways, Iberia, and
+Aer Lingus use avios.com; Finnair Plus uses Finnair's own OAuth and loyalty API.
 
 > ⚠️ **Unofficial.** This project is not affiliated with, authorised by, or endorsed by
 > Avios, British Airways, Finnair or IAG Loyalty. It drives the same private endpoints
@@ -95,10 +95,12 @@ Each programme session is stored at `~/.config/avios/accounts/<programme>.json`
 `avios logout <programme>` for one account or `avios logout` for all accounts.
 For BA, browser-assisted login also opens the separate reward-flight application.
 British Airways may show a second login prompt; keep the browser open until the
-CLI confirms success. Reward searches drive the site's own form in a background
-Chrome window because the flight-search route rejects plain HTTP and automated
-headless requests, so the `login` extra remains required when running
-`avios flights` or the Reward Flights TUI tab.
+CLI confirms success. Reward searches run inside a background Chrome window: the
+flight finder is behind Akamai Bot Manager, which rejects plain HTTP clients and
+**blocks by IP address** — a handful of ordinary page loads from a shared office
+network is enough to earn a site-wide 403. Every leg of a search is therefore
+batched through a single browser navigation, paced, and served by in-page
+`fetch()` calls. If you do get blocked, wait a few minutes and switch network.
 
 ## Usage
 
@@ -115,9 +117,9 @@ avios overview                 # dashboard summary
 avios whoami                   # name, tier, membership, email
 avios raw /shell/api/users/current/accounts   # hit any endpoint directly
 
-# Direct British Airways reward-seat availability:
-avios flights LON ABZ --date 2026-11-05
-avios flights LON ABZ --date 2026-11-05 --return-date 2026-11-12
+# Direct British Airways reward-seat availability (--date also prices in Avios):
+avios flights LON HKG --date 2027-01-05
+avios flights LON HKG --date 2027-01-05 --return-date 2027-01-12
 avios flights LON ABZ --month 2026-11 --cabin economy --cabin business
 avios flights LON ABZ --month 2026-11 --return-month 2026-12 --json
 ```
@@ -141,10 +143,48 @@ A tabbed full-screen application:
 Press `r` to refresh the dashboard and `q` to quit. Reward searches run only when
 you press Search or Enter.
 
-Reward search is an unofficial, availability-only view. It currently supports
-direct BA flights, three-letter airport/city codes, and seat counts by cabin. It
-does not price, book, or show taxes/fees or connecting flights. Return journeys
-are two independent one-way searches.
+## MCP server
+
+Expose your accounts to Claude and other MCP clients, read-only:
+
+```bash
+uv tool install 'avios-cli[mcp]'
+avios login ba          # sessions come from the CLI; the server never logs in
+```
+
+```jsonc
+// Claude Desktop: claude_desktop_config.json
+{
+  "mcpServers": {
+    "avios": { "command": "avios-mcp" }
+  }
+}
+```
+
+Or, for Claude Code:
+
+```bash
+claude mcp add avios -- uvx --from 'avios-cli[mcp]' avios-mcp
+```
+
+Tools: `list_accounts`, `get_balance`, `get_transactions`,
+`get_pending_transactions`, `whoami`, `search_reward_flights`.
+
+Every tool is read-only — nothing books, spends, or changes a session — and no
+cookie or token is ever returned. `search_reward_flights` searches a whole return
+trip in one call and is rate-limited server-side, because it drives a real browser
+and British Airways blocks by IP address; an agent looping over routes could get
+you locked out of the site.
+
+## Notes on reward search
+
+Reward search is an unofficial view of BA's own flight finder. It supports direct
+BA flights, three-letter airport/city codes, and seat counts by cabin. Searching
+an exact `--date` also fetches the Avios price per cabin for your party; calendar
+(month) searches show seats only, which keeps them to one request per leg. Seats
+that need a BA companion voucher are marked `†`. It does not book, and it does
+not show taxes/fees or connecting flights. Return journeys are two reverse-route
+one-way searches sharing one browser session.
 
 ## Roadmap
 
@@ -156,6 +196,8 @@ are two independent one-way searches.
 - [x] Textual TUI dashboard
 - [x] Multiple accounts (BA, Iberia, Aer Lingus, Finnair) with combined views
 - [x] British Airways reward-flight **availability** search (CLI + TUI)
+- [x] Avios pricing per cabin for an exact date
+- [x] MCP server (`avios-mcp`) for AI agents
 
 ## Development