create-byan-agent 2.54.0 → 2.58.1

package/install/src/webui/public/app.js

@@ -200,6 +200,15 @@ class ByanApp {
         <label for="cfg-name">Your Name</label>
         <input id="cfg-name" type="text" value="${this.escapeHtml(this.config.userName)}" placeholder="Yan">
       </div>
+      <div class="form-group">
+        <label for="cfg-project-name">Project Name</label>
+        <input id="cfg-project-name" type="text" value="${this.escapeHtml(this.config.projectName || '')}" placeholder="mon-projet">
+      </div>
+      <div class="form-group">
+        <label for="cfg-project-dir">Project Directory</label>
+        <input id="cfg-project-dir" type="text" value="${this.escapeHtml(this.config.projectDir || this.status?.projectRoot || '')}" placeholder="/chemin/vers/le/projet">
+        <div class="form-hint">Defaults to the directory the wizard was launched from.</div>
+      </div>
       <div class="form-group">
         <label for="cfg-lang">Communication Language</label>
         <select id="cfg-lang">
@@ -239,9 +248,13 @@ class ByanApp {
   readConfigForm() {
     const nameEl = document.getElementById('cfg-name');
     const langEl = document.getElementById('cfg-lang');
+    const projNameEl = document.getElementById('cfg-project-name');
+    const projDirEl = document.getElementById('cfg-project-dir');
 
     if (nameEl) this.config.userName = nameEl.value.trim() || 'User';
     if (langEl) this.config.language = langEl.value;
+    if (projNameEl) this.config.projectName = projNameEl.value.trim();
+    if (projDirEl) this.config.projectDir = projDirEl.value.trim();
 
     const platforms = [];
     document.querySelectorAll('input[name="platform"]:checked').forEach(el => platforms.push(el.value));
@@ -264,7 +277,8 @@ class ByanApp {
       ['Language', this.config.language],
       ['Platforms', this.config.platforms.join(', ') || 'auto-detect'],
       ['Modules', this.config.modules.join(', ')],
-      ['Project Root', this.status?.projectRoot || '(auto)']
+      ['Project Name', this.config.projectName || '(nom du dossier)'],
+      ['Project Root', this.config.projectDir || this.status?.projectRoot || '(auto)']
     ];
 
     container.innerHTML = rows.map(([k, v]) =>

package/install/src/webui/server.js

@@ -50,7 +50,12 @@ class ByanWebUI {
     });
 
     return new Promise((resolve) => {
-      this.server.listen(this.port, () => {
+      // Bind to loopback ONLY. Without a host argument Node binds to :: (every
+      // interface), which made the installer LAN-reachable — and since it runs
+      // the real install engine (file writes + child processes), that exposed
+      // an arbitrary-write surface to the local network. A local installer has
+      // no business listening off-host.
+      this.server.listen(this.port, '127.0.0.1', () => {
         const addr = this.server.address();
         const assignedPort = (addr && typeof addr === 'object') ? addr.port : this.port;
         const url = `http://localhost:${assignedPort}`;

package/install/templates/.claude/hooks/lib/plain-language.js

@@ -61,6 +61,25 @@ const METAPHOR_OFFENDERS = Object.freeze([
     label: 'outil "vivant/mort"',
     good: 'le fait observe : "repond" / "ne repond pas" + le resultat exact',
   },
+  {
+    // BYAN in-house doctrine shorthand dropped raw in prose (field complaint,
+    // 2026-07-21). "le rail" means the byan-auto-dispatch workflow; a reader
+    // without the internal doctrine cannot decode it — same offence as raw
+    // English jargon (IA-26). The article-bound match spares ordinary French
+    // ("un rail de guidage", "rail ferroviaire").
+    id: 'jargon-doctrine-rail',
+    re: /\b(?:le|ce|du)\s+rail\b(?!\s+(?:de|d'|ferroviaire))/i,
+    label: '"le rail" (jargon doctrine)',
+    good: 'dis-le en clair : le workflow automatique de dispatch (byan-auto-dispatch)',
+  },
+  {
+    // "voie/option armee" means: option enabled AND Codex linked. Say the fact.
+    // The noun-bound match spares the ordinary word ("l'armee").
+    id: 'jargon-doctrine-armee',
+    re: /\b(?:voie|option|lane)\s+(?:est\s+|n'est\s+pas\s+)?arm[ée]e?s?\b/i,
+    label: 'voie/option "armee" (jargon doctrine)',
+    good: 'dis le fait : option activee ET Codex connecte (ou pas)',
+  },
 ]);
 
 // A word boundary that treats accented letters as part of a word, so \btier\b

package/install/templates/_byan/mcp/byan-mcp-server/lib/leantime-sync.js

@@ -21,6 +21,12 @@
 // format against projets.acadenice.com. Items tagged VERIFY@F0 are the ones the
 // recon could not confirm without a live call.
 
+// Config resolution goes through resolve-config (env -> ~/.byan/credentials.json
+// -> empty), the same chain the rest of the server uses. Reading process.env
+// directly here was the gap that made the per-user credentials file invisible
+// to the Leantime client.
+import { resolveConfig } from './resolve-config.js';
+
 const DEFAULT_TIMEOUT_MS = 5000;
 const RPC_PATH = '/api/jsonrpc';
 
@@ -62,11 +68,11 @@ const DEFAULT_STATUS_MAP = {
 };
 
 function apiBase() {
-  return (process.env.LEANTIME_API_URL || '').replace(/\/+$/, '');
+  return (resolveConfig().LEANTIME_API_URL || '').replace(/\/+$/, '');
 }
 
 function apiToken() {
-  return process.env.LEANTIME_API_TOKEN || '';
+  return resolveConfig().LEANTIME_API_TOKEN || '';
 }
 
 // Leantime authenticates the JSON-RPC API with its own header, NOT an

package/install/templates/docs/intelligent-dispatch.md

@@ -86,3 +86,14 @@ dev leaf holds the Bash tool and is what actually invokes `codex exec`.
 `codex mcp-server` is wired, Codex becomes a tool Claude can call mid-reasoning
 (and Codex can call BYAN tools back) — the closest thing to live. It drops in as a
 new transport behind the same F2 seam, with no change to F1 or the loop.
+
+## Config des integrations (Leantime, Google) — une seule memoire
+
+Depuis 2.56.0, le client Leantime du serveur MCP resout sa config par la meme
+chaine que le reste du serveur : variables d'environnement d'abord, puis
+`~/.byan/credentials.json`, ecrit par l'installeur a la premiere saisie. Google
+suit le meme fichier (`GOOGLE_APPLICATION_CREDENTIALS`, `GDOC_TEMPLATE_ID`,
+`GDOC_LOGO_PNG_URL`, deja compris par `resolve-config.js`) : l'acces Google
+passe par une cle de service account dont le CHEMIN est memorise — le portage
+d'un OAuth interactif complet dans le serveur MCP reste hors perimetre (le
+serveur tourne sans navigateur), c'est le cadrage assume.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-byan-agent",
-  "version": "2.54.0",
+  "version": "2.58.1",
   "description": "BYAN v2.8 - Intelligent AI agent creator with ELO trust system + scientific fact-check + Hermes universal dispatcher + native Claude Code integration (hooks, skills, MCP server). Multi-platform (Claude Code, Codex). Merise Agile + TDD + 71 Mantras. ~54% LLM cost savings.",
   "main": "src/index.js",
   "bin": {