bayane 1.0.0 → 1.1.0

package/dist/cli/index.js

@@ -3,12 +3,87 @@ import { Command } from "commander";
 import { password, input } from "@inquirer/prompts";
 import { writeFileSync } from "fs";
 import { spawnSync } from "child_process";
+import { createHash, randomBytes } from "crypto";
+import { createServer } from "http";
 import { loadConfig, saveConfig, CONFIG_PATH } from "../core/config.js";
 import { fetchStats, fetchReportPdf, fetchLatestReportDate } from "../core/api.js";
 import { formatStats, formatAlerts } from "../core/format.js";
 const DEFAULT_API_URL = "https://health-bd.nonas.app";
+async function pkceLogin(apiUrl) {
+    // 1. Generate PKCE pair
+    const verifier = randomBytes(32).toString("base64url");
+    const challenge = createHash("sha256").update(verifier).digest("base64url");
+    const state = randomBytes(16).toString("hex");
+    // 2. Start local callback server on a random port
+    const code = await new Promise((resolve, reject) => {
+        const server = createServer((req, res) => {
+            const url = new URL(req.url, "http://localhost");
+            const returnedCode = url.searchParams.get("code");
+            const returnedState = url.searchParams.get("state");
+            res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+            if (!returnedCode || returnedState !== state) {
+                res.end("<h2>Erreur d'authentification. Revenez au terminal.</h2>");
+                server.close();
+                reject(new Error("State mismatch or missing code."));
+                return;
+            }
+            res.end("<h2 style='font-family:sans-serif;text-align:center;margin-top:4rem'>✓ Authentification réussie. Revenez au terminal.</h2>");
+            server.close();
+            resolve(returnedCode);
+        });
+        server.listen(0, "127.0.0.1", () => {
+            const port = server.address().port;
+            const redirectUri = `http://127.0.0.1:${port}/callback`;
+            const adminUrl = new URL(`${apiUrl.replace("health-bd", "health")}/fr/admin`);
+            adminUrl.searchParams.set("code_challenge", challenge);
+            adminUrl.searchParams.set("code_challenge_method", "S256");
+            adminUrl.searchParams.set("redirect_uri", redirectUri);
+            adminUrl.searchParams.set("state", state);
+            console.log("\nOuverture du navigateur pour l'authentification...");
+            console.log(`\nSi le navigateur ne s'ouvre pas, visitez:\n${adminUrl.toString()}\n`);
+            // Open browser
+            const cmd = process.platform === "darwin"
+                ? "open"
+                : process.platform === "win32"
+                    ? "start"
+                    : "xdg-open";
+            spawnSync(cmd, [adminUrl.toString()], { shell: process.platform === "win32" });
+        });
+        server.on("error", reject);
+    });
+    // 3. Exchange code for API key
+    const res = await fetch(`${apiUrl}/api/oauth/exchange`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ code, codeVerifier: verifier, state }),
+    });
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? `Exchange failed: ${res.status}`);
+    }
+    const { apiKey } = (await res.json());
+    return apiKey;
+}
 const program = new Command();
 program.name("bayane").description("Hospital satisfaction survey CLI").version("1.0.0");
+// bayane login — OAuth PKCE flow (opens browser)
+program
+    .command("login")
+    .description("Authenticate via browser (opens admin dashboard)")
+    .option("--api-url <url>", "API URL", DEFAULT_API_URL)
+    .action(async (opts) => {
+    try {
+        console.log("Connexion à Bayane...");
+        const apiUrl = opts.apiUrl;
+        const apiKey = await pkceLogin(apiUrl);
+        saveConfig({ apiUrl, apiKey });
+        console.log(`\n✓ Connecté. Config enregistrée dans ${CONFIG_PATH}`);
+    }
+    catch (err) {
+        console.error("\n✗", err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+});
 // bayane setup
 program
     .command("setup")
@@ -91,4 +166,19 @@ program
     console.log("Installing bayane skill...");
     spawnSync("npx", ["skills", "add", "anouar-bm/bayane"], { stdio: "inherit" });
 });
+// bayane update
+program
+    .command("update")
+    .description("Update bayane CLI to the latest version")
+    .action(() => {
+    console.log("Updating bayane...");
+    const result = spawnSync("npm", ["install", "-g", "bayane@latest"], { stdio: "inherit" });
+    if (result.status === 0) {
+        console.log("✓ bayane updated successfully.");
+    }
+    else {
+        console.error("✗ Update failed. Try: npm install -g bayane@latest");
+        process.exit(1);
+    }
+});
 program.parse();

package/dist/core/config.js

@@ -3,15 +3,23 @@ import { join } from "path";
 import { readFileSync, writeFileSync, existsSync } from "fs";
 export const CONFIG_PATH = join(homedir(), ".health-survey-rc");
 export function loadConfig() {
+    // Env var override — useful for CI / scripts
+    const envKey = process.env.BAYANE_API_KEY;
+    if (envKey) {
+        return {
+            apiUrl: process.env.BAYANE_API_URL ?? "https://health-bd.nonas.app",
+            apiKey: envKey,
+        };
+    }
     if (!existsSync(CONFIG_PATH)) {
-        console.error("Not configured. Run: bayane setup");
+        console.error("Not configured. Run: bayane login");
         process.exit(1);
     }
     try {
         return JSON.parse(readFileSync(CONFIG_PATH, "utf-8"));
     }
     catch {
-        console.error("Config file is corrupted. Run: bayane setup");
+        console.error("Config file is corrupted. Run: bayane login");
         process.exit(1);
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bayane",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "CLI and MCP server for hospital satisfaction survey data",
   "type": "module",
   "bin": {

package/skill/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: bayane
+description: Query hospital satisfaction data — stats, reports, alerts
+triggers:
+  - satisfaction score
+  - hospital stats
+  - download report
+  - critical alerts
+  - average score
+  - how are we doing
+---
+
+# bayane skill
+
+Use the `bayane` CLI to answer questions about hospital satisfaction data.
+
+## Prerequisites
+The user must have run `bayane login` once. Config stored in `~/.health-survey-rc`.
+
+## Commands
+
+**Stats:**
+```bash
+bayane stats                  # last 7 days
+bayane stats --period 30d
+bayane stats --period all
+```
+
+**Download report:**
+```bash
+bayane report --latest                        # most recent
+bayane report --date 2026-03-21
+bayane report --output ~/Desktop/report.pdf
+```
+
+**Alerts:**
+```bash
+bayane alerts
+```
+
+**Who am I:**
+```bash
+bayane whoami
+```
+
+## Usage
+Run the appropriate command via the Bash tool and summarize the output.

package/src/cli/index.ts

@@ -1,18 +1,107 @@
 #!/usr/bin/env node
 import { Command } from "commander";
 import { password, input } from "@inquirer/prompts";
-import { writeFileSync } from "fs";
+import { writeFileSync, existsSync, readFileSync } from "fs";
 import { spawnSync } from "child_process";
 import { execSync } from "child_process";
+import { createHash, randomBytes } from "crypto";
+import { createServer } from "http";
 import { loadConfig, saveConfig, CONFIG_PATH } from "../core/config.js";
 import { fetchStats, fetchReportPdf, fetchLatestReportDate } from "../core/api.js";
 import { formatStats, formatAlerts } from "../core/format.js";
 
 const DEFAULT_API_URL = "https://health-bd.nonas.app";
 
+async function pkceLogin(apiUrl: string): Promise<string> {
+  // 1. Generate PKCE pair
+  const verifier = randomBytes(32).toString("base64url");
+  const challenge = createHash("sha256").update(verifier).digest("base64url");
+  const state = randomBytes(16).toString("hex");
+
+  // 2. Start local callback server on a random port
+  const code = await new Promise<string>((resolve, reject) => {
+    const server = createServer((req, res) => {
+      const url = new URL(req.url!, "http://localhost");
+      const returnedCode = url.searchParams.get("code");
+      const returnedState = url.searchParams.get("state");
+
+      res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+      if (!returnedCode || returnedState !== state) {
+        res.end("<h2>Erreur d'authentification. Revenez au terminal.</h2>");
+        server.close();
+        reject(new Error("State mismatch or missing code."));
+        return;
+      }
+
+      res.end(
+        "<h2 style='font-family:sans-serif;text-align:center;margin-top:4rem'>✓ Authentification réussie. Revenez au terminal.</h2>"
+      );
+      server.close();
+      resolve(returnedCode);
+    });
+
+    server.listen(0, "127.0.0.1", () => {
+      const port = (server.address() as { port: number }).port;
+      const redirectUri = `http://127.0.0.1:${port}/callback`;
+      const adminUrl = new URL(`${apiUrl.replace("health-bd", "health")}/fr/admin`);
+      adminUrl.searchParams.set("code_challenge", challenge);
+      adminUrl.searchParams.set("code_challenge_method", "S256");
+      adminUrl.searchParams.set("redirect_uri", redirectUri);
+      adminUrl.searchParams.set("state", state);
+
+      console.log("\nOuverture du navigateur pour l'authentification...");
+      console.log(`\nSi le navigateur ne s'ouvre pas, visitez:\n${adminUrl.toString()}\n`);
+
+      // Open browser
+      const cmd =
+        process.platform === "darwin"
+          ? "open"
+          : process.platform === "win32"
+            ? "start"
+            : "xdg-open";
+      spawnSync(cmd, [adminUrl.toString()], { shell: process.platform === "win32" });
+    });
+
+    server.on("error", reject);
+  });
+
+  // 3. Exchange code for API key
+  const res = await fetch(`${apiUrl}/api/oauth/exchange`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ code, codeVerifier: verifier, state }),
+  });
+
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({}));
+    throw new Error((body as any).error ?? `Exchange failed: ${res.status}`);
+  }
+
+  const { apiKey } = (await res.json()) as { apiKey: string };
+  return apiKey;
+}
+
 const program = new Command();
 program.name("bayane").description("Hospital satisfaction survey CLI").version("1.0.0");
 
+// bayane login — OAuth PKCE flow (opens browser)
+program
+  .command("login")
+  .description("Authenticate via browser (opens admin dashboard)")
+  .option("--api-url <url>", "API URL", DEFAULT_API_URL)
+  .action(async (opts) => {
+    try {
+      console.log("Connexion à Bayane...");
+      const apiUrl = opts.apiUrl;
+      const apiKey = await pkceLogin(apiUrl);
+      saveConfig({ apiUrl, apiKey });
+      console.log(`\n✓ Connecté. Config enregistrée dans ${CONFIG_PATH}`);
+    } catch (err: unknown) {
+      console.error("\n✗", err instanceof Error ? err.message : String(err));
+      process.exit(1);
+    }
+  });
+
 // bayane setup
 program
   .command("setup")
@@ -99,4 +188,19 @@ program
     spawnSync("npx", ["skills", "add", "anouar-bm/bayane"], { stdio: "inherit" });
   });
 
+// bayane update
+program
+  .command("update")
+  .description("Update bayane CLI to the latest version")
+  .action(() => {
+    console.log("Updating bayane...");
+    const result = spawnSync("npm", ["install", "-g", "bayane@latest"], { stdio: "inherit" });
+    if (result.status === 0) {
+      console.log("✓ bayane updated successfully.");
+    } else {
+      console.error("✗ Update failed. Try: npm install -g bayane@latest");
+      process.exit(1);
+    }
+  });
+
 program.parse();

package/src/core/config.ts

@@ -6,14 +6,23 @@ import { Config } from "./types.js";
 export const CONFIG_PATH = join(homedir(), ".health-survey-rc");
 
 export function loadConfig(): Config {
+  // Env var override — useful for CI / scripts
+  const envKey = process.env.BAYANE_API_KEY;
+  if (envKey) {
+    return {
+      apiUrl: process.env.BAYANE_API_URL ?? "https://health-bd.nonas.app",
+      apiKey: envKey,
+    };
+  }
+
   if (!existsSync(CONFIG_PATH)) {
-    console.error("Not configured. Run: bayane setup");
+    console.error("Not configured. Run: bayane login");
     process.exit(1);
   }
   try {
     return JSON.parse(readFileSync(CONFIG_PATH, "utf-8")) as Config;
   } catch {
-    console.error("Config file is corrupted. Run: bayane setup");
+    console.error("Config file is corrupted. Run: bayane login");
     process.exit(1);
   }
 }