hearback 0.1.0 → 0.1.1

package/bin/hearback.js

@@ -3,7 +3,8 @@
 import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { createInterface } from 'node:readline';
-import { execSync } from 'node:child_process';
+import { execSync, spawn } from 'node:child_process';
+import { platform } from 'node:os';
 
 const RESET = '\x1b[0m';
 const BOLD = '\x1b[1m';
@@ -18,13 +19,50 @@ function done(msg) { log(`  ${GREEN}✓${RESET} ${msg}`); }
 function info(msg) { log(`  ${DIM}${msg}${RESET}`); }
 function warn(msg) { log(`  ${YELLOW}⚠${RESET} ${msg}`); }
 
+// Readline with line-buffering — works with both interactive TTY and piped
+// input. `rl.question()` has a bug on piped stdin where only the first prompt
+// returns; using `rl.on('line')` + a queue avoids that.
+let _rl = null;
+const _pendingLines = [];
+const _pendingAsks = [];
+
+function getRl() {
+  if (!_rl) {
+    _rl = createInterface({ input: process.stdin, output: process.stdout, terminal: process.stdin.isTTY });
+    _rl.on('line', (line) => {
+      if (_pendingAsks.length > 0) {
+        const resolver = _pendingAsks.shift();
+        resolver(line.trim());
+      } else {
+        _pendingLines.push(line);
+      }
+    });
+    _rl.on('close', () => {
+      // Flush any waiters with empty strings (avoids hanging forever)
+      while (_pendingAsks.length > 0) {
+        _pendingAsks.shift()('');
+      }
+    });
+  }
+  return _rl;
+}
+
+function closeRl() {
+  if (_rl) {
+    _rl.close();
+    _rl = null;
+  }
+}
+
 async function ask(question) {
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  getRl();
+  process.stdout.write(`  ${question} `);
   return new Promise((resolve) => {
-    rl.question(`  ${question} `, (answer) => {
-      rl.close();
-      resolve(answer.trim());
-    });
+    if (_pendingLines.length > 0) {
+      resolve(_pendingLines.shift().trim());
+    } else {
+      _pendingAsks.push(resolve);
+    }
   });
 }
 
@@ -207,6 +245,53 @@ function injectNextjsWidget(content, endpoint) {
   return result;
 }
 
+// --- Token helpers ---
+
+/** Returns true if the `gh` CLI is installed and authenticated. */
+function hasGhCli() {
+  try {
+    execSync('gh auth status', { stdio: ['ignore', 'pipe', 'pipe'] });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/** Read token from `gh auth token`. Returns null on failure. */
+function getGhToken() {
+  try {
+    return execSync('gh auth token', { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'pipe'] }).trim();
+  } catch {
+    return null;
+  }
+}
+
+/** Open a URL in the user's default browser. Silent-fails if unavailable. */
+function openBrowser(url) {
+  const cmd = platform() === 'darwin' ? 'open'
+    : platform() === 'win32' ? 'start'
+    : 'xdg-open';
+  try {
+    spawn(cmd, [url], { detached: true, stdio: 'ignore' }).unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Build a GitHub fine-grained token URL with as much pre-filled as possible.
+ * Sadly GitHub does NOT support pre-filling permissions via URL params, but
+ * we can pre-fill the name + description to save time.
+ */
+function buildTokenUrl(repoName) {
+  const params = new URLSearchParams({
+    name: `hearback-${repoName.split('/').pop()}`,
+    description: 'Token for hearback feedback widget',
+  });
+  return `https://github.com/settings/personal-access-tokens/new?${params}`;
+}
+
 // --- Detect project type ---
 
 function detectProject(cwd) {
@@ -352,7 +437,8 @@ ${BOLD}Usage:${RESET}
 
   const pkgToInstall = project.type === 'agent' ? 'hearback-agent-skill' : 'hearback-server';
   try {
-    execSync(`npm install ${pkgToInstall}`, { cwd, stdio: 'pipe' });
+    // stdio: ['ignore', 'pipe', 'pipe'] — don't let npm consume our piped stdin
+    execSync(`npm install ${pkgToInstall}`, { cwd, stdio: ['ignore', 'pipe', 'pipe'] });
     done(`${pkgToInstall} installed`);
   } catch {
     warn(`Could not install ${pkgToInstall} (not yet published to npm)`);
@@ -449,23 +535,88 @@ ${BOLD}Usage:${RESET}
     }
   }
 
-  // Env vars
+  // Step 5 (was 4.5): GitHub token — interactive, with multiple fast paths
+  step(5, 'GitHub token');
+
   const envFile = existsSync(join(cwd, '.env.local')) ? '.env.local' : '.env';
   const envPath = join(cwd, envFile);
   const envContent = existsSync(envPath) ? readFileSync(envPath, 'utf-8') : '';
+  const hasExistingToken = /GITHUB_TOKEN=\S+/.test(envContent) || /FEEDBACK_GITHUB_TOKEN=\S+/.test(envContent);
 
+  let token = '';
+
+  if (hasExistingToken) {
+    info(`${envFile} already has a GITHUB_TOKEN — skipping token setup`);
+  } else {
+    info('hearback needs a GitHub token with Issues: read-write (and Contents: read-write for screenshots)');
+    log('');
+    log(`  ${BOLD}How would you like to provide the token?${RESET}`);
+    log(`  ${DIM}1)${RESET} Reuse my gh CLI token ${hasGhCli() ? GREEN + '(detected)' + RESET : DIM + '(gh CLI not found)' + RESET}`);
+    log(`  ${DIM}2)${RESET} Generate a new fine-grained token on GitHub (opens browser)`);
+    log(`  ${DIM}3)${RESET} I'll paste one manually`);
+    log(`  ${DIM}4)${RESET} Skip — I'll add it to ${envFile} later`);
+    log('');
+    const choice = (await ask('Choose [1/2/3/4]:')).trim() || '1';
+
+    if (choice === '1') {
+      if (!hasGhCli()) {
+        warn('gh CLI not found or not authenticated. Install: https://cli.github.com/');
+        info('Falling back to option 2 (browser)');
+      } else {
+        const ghToken = getGhToken();
+        if (ghToken) {
+          token = ghToken;
+          done('Using gh CLI token');
+          warn('Note: gh CLI tokens have broad permissions. For stricter scoping, choose option 2 next time.');
+        } else {
+          warn('Could not read gh token');
+        }
+      }
+    }
+
+    if (!token && (choice === '2' || choice === '1')) {
+      const url = buildTokenUrl(repo);
+      info('Opening GitHub in your browser...');
+      info(`If it does not open, paste this URL manually:`);
+      log(`  ${DIM}${url}${RESET}`);
+      log('');
+      info(`Set these permissions:`);
+      log(`  ${DIM}- Repository access: Only select repositories → ${repo}${RESET}`);
+      log(`  ${DIM}- Permissions → Issues: Read and write${RESET}`);
+      log(`  ${DIM}- Permissions → Contents: Read and write (for screenshots)${RESET}`);
+      log('');
+      openBrowser(url);
+      token = (await ask('Paste your token (starts with github_pat_...):')).trim();
+    }
+
+    if (!token && choice === '3') {
+      token = (await ask('Paste your token:')).trim();
+    }
+
+    if (choice === '4' || (!token && choice !== '1' && choice !== '2' && choice !== '3')) {
+      info(`Skipping. Add GITHUB_TOKEN to ${envFile} before running the dev server.`);
+    }
+  }
+
+  // Write env vars
   const newVars = [];
   if (!envContent.includes('FEEDBACK_REPO')) newVars.push(`FEEDBACK_REPO=${repo}`);
-  if (!envContent.includes('GITHUB_TOKEN')) newVars.push(`GITHUB_TOKEN=  # Create at https://github.com/settings/tokens?type=beta (needs issues:write + contents:write)`);
+  if (!envContent.includes('GITHUB_TOKEN')) {
+    if (token) {
+      newVars.push(`GITHUB_TOKEN=${token}`);
+    } else {
+      newVars.push(`GITHUB_TOKEN=  # Generate at https://github.com/settings/personal-access-tokens/new (Issues: read/write, Contents: read/write)`);
+    }
+  }
 
   if (newVars.length > 0) {
     const addition = '\n# hearback\n' + newVars.join('\n') + '\n';
     writeFileSync(envPath, envContent + addition);
-    done(`Added env vars to ${envFile}`);
+    done(token ? `Wrote FEEDBACK_REPO + GITHUB_TOKEN to ${envFile}` : `Wrote FEEDBACK_REPO to ${envFile}`);
   }
 
-  // Step 5: Notification workflow
-  step(5, 'Notification loop');
+  // Step 6: Notification workflow
+  step(6, 'Notification loop');
   const wantNotify = await confirm('Set up email notifications when issues are fixed?');
 
   if (wantNotify) {
@@ -477,10 +628,16 @@ ${BOLD}Usage:${RESET}
   }
 
   // Done
+  closeRl();
   log(`\n${GREEN}${BOLD}✓ hearback is ready!${RESET}\n`);
   log(`${DIM}Next steps:`);
-  log(`  1. Add your GITHUB_TOKEN to ${envFile}`);
-  log(`  2. Run your dev server and test the feedback button${RESET}\n`);
+  if (!token && !hasExistingToken) {
+    log(`  1. Add your GITHUB_TOKEN to ${envFile}`);
+    log(`  2. Run your dev server and test the feedback button${RESET}\n`);
+  } else {
+    log(`  1. Run your dev server (e.g. npm run dev / bun dev)`);
+    log(`  2. Look for the feedback button in the bottom-right corner${RESET}\n`);
+  }
 }
 
 main().catch((err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hearback",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Add user feedback → GitHub Issues → email notification loop to any product with one command. Works with Next.js, Express, Hono, and AI agents.",
   "type": "module",
   "bin": {