@companion-ai/feynman 0.5.20 → 0.5.22

package/RELEASES.md

@@ -6,6 +6,15 @@ GitHub release notes are generated from the matching `## vX.Y.Z` section in this
 
 ## Unreleased
 
+## v0.5.22 - 2026-10-01
+
+- **Launch warnings and the first-run telemetry notice show inside the session.** Feynman printed them to the terminal just before starting Pi, where Pi 1.0's fullscreen interface (coming in a later Feynman release) hides them for the whole session. They now appear in Pi's own interface: the Windows "No Bash found" warning, the small-local-model warning for research workflows, and the one-time telemetry disclosure. A one-shot `--prompt` run still prints them to stderr.
+- `feynman doctor` reports Pi's new `quietStartup: "header"` setting as "header only" instead of "disabled".
+
+## v0.5.21 - 2026-10-01
+
+- **LiteLLM and custom providers that read their key from an environment variable work again.** Since Pi 0.99, `models.json` resolves an environment variable only when written as `$NAME`; a bare name is sent as the key itself. Feynman's LiteLLM setup wrote `LITELLM_MASTER_KEY`, so requests went out as `Authorization: Bearer LITELLM_MASTER_KEY` and the proxy rejected them, and custom providers set up with a variable name broke the same way. Feynman now writes `$NAME`, and on start rewrites any `apiKey` in `models.json` that is a bare all-caps variable name, such as `LITELLM_MASTER_KEY`, to `$LITELLM_MASTER_KEY`. Literal keys, placeholders such as `local`, and `!command` values are left alone.
+
 ## v0.5.20 - 2026-10-01
 
 - **Settings saved by Windows Notepad or PowerShell no longer stop Feynman.** Both can save UTF-8 with a byte-order mark, which JSON parsing rejects, so Feynman refused to start with "Invalid Feynman settings ... expected a JSON object", and other commands read the file as empty. Feynman now ignores the mark in `settings.json`, `auth.json`, and `web-search.json`, as Pi does. A settings file with a real JSON error now names the error, for example a trailing comma, instead of the generic message.

package/dist/model/commands.js

@@ -10,7 +10,7 @@ import { printInfo, printSection, printSuccess, printWarning } from "../ui/termi
 import { buildModelStatusSnapshotFromRecords, chooseRecommendedModel, getAuthenticatedModelRecords, getAvailableModelRecords, getSupportedModelRecords, isProClassModelSpec, } from "./catalog.js";
 import { MODEL_API_KEY_PROVIDERS } from "./api-key-providers.js";
 import { createModelRegistry, createModelRuntime, getModelsJsonPath } from "./registry.js";
-import { upsertProviderBaseUrl, upsertProviderConfig } from "./models-json.js";
+import { apiKeyReference, upsertProviderBaseUrl, upsertProviderConfig } from "./models-json.js";
 const exec = promisify(execCallback);
 async function collectModelStatus(settingsPath, authPath) {
     return buildModelStatusSnapshotFromRecords(await getSupportedModelRecords(authPath), await getAuthenticatedModelRecords(authPath), getCurrentModelSpec(settingsPath));
@@ -161,7 +161,7 @@ async function resolveApiKeyConfig(apiKeyConfig) {
             return undefined;
         }
     }
-    const envValue = process.env[trimmed];
+    const envValue = process.env[trimmed.replace(/^\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?$/, "$1")];
     if (typeof envValue === "string" && envValue.trim()) {
         return envValue.trim();
     }
@@ -267,10 +267,10 @@ async function promptCustomProviderSetup() {
     }
     printInfo("API key value supports:");
     printInfo("  - literal secret (stored in models.json)");
-    printInfo("  - env var name (resolved at runtime)");
+    printInfo("  - env var name such as MY_API_KEY or $MY_API_KEY (resolved at runtime)");
     printInfo("  - !command (executes and uses stdout)");
     const apiKeyConfigRaw = (await promptText("API key / resolver", "")).trim();
-    const apiKeyConfig = apiKeyConfigRaw || "local";
+    const apiKeyConfig = apiKeyReference(apiKeyConfigRaw) || "local";
     if (!apiKeyConfigRaw) {
         printInfo("Using placeholder apiKey value (required by Pi for custom providers).");
     }
@@ -346,7 +346,7 @@ async function promptLiteLlmProviderSetup() {
         return undefined;
     }
     const hasKey = keySelection === 0;
-    const apiKeyConfig = hasKey ? "LITELLM_MASTER_KEY" : "local";
+    const apiKeyConfig = hasKey ? "$LITELLM_MASTER_KEY" : "local";
     const authHeader = hasKey;
     if (hasKey) {
         printInfo("Set LITELLM_MASTER_KEY in your shell or .env before using Feynman.");

package/dist/model/models-json.js

@@ -63,7 +63,9 @@ export function upsertProviderConfig(modelsJsonPath, providerId, patch) {
     if (patch.models !== undefined)
         nextProvider.models = patch.models;
     providers[providerId] = nextProvider;
-    const next = { ...value, providers };
+    return writeModelsJson(modelsJsonPath, { ...value, providers });
+}
+function writeModelsJson(modelsJsonPath, next) {
     try {
         mkdirSync(dirname(modelsJsonPath), { recursive: true });
         writeFileSync(modelsJsonPath, JSON.stringify(next, null, 2) + "\n", "utf8");
@@ -80,3 +82,31 @@ export function upsertProviderConfig(modelsJsonPath, providerId, patch) {
         return { ok: false, error: `Failed to write models.json: ${error instanceof Error ? error.message : String(error)}` };
     }
 }
+// Pi resolves an environment variable in `apiKey` only as $NAME or ${NAME}; a
+// bare name such as LITELLM_MASTER_KEY is sent as the key itself.
+const BARE_ENV_NAME = /^[A-Z][A-Z0-9_]*$/;
+export function apiKeyReference(value) {
+    return BARE_ENV_NAME.test(value) ? `$${value}` : value;
+}
+// Feynman's setup wrote bare names before Pi 0.99 stopped resolving them, so a
+// LiteLLM or custom provider sent "LITELLM_MASTER_KEY" as its key. Returns the
+// providers it rewrote to $NAME.
+export function migrateBareEnvApiKeys(modelsJsonPath) {
+    if (!existsSync(modelsJsonPath))
+        return [];
+    const read = readModelsJson(modelsJsonPath);
+    if (!read.ok)
+        return [];
+    const providers = { ...(read.value.providers ?? {}) };
+    const migrated = Object.keys(providers).filter((id) => {
+        const apiKey = providers[id]?.apiKey;
+        return typeof apiKey === "string" && BARE_ENV_NAME.test(apiKey);
+    });
+    if (migrated.length === 0)
+        return [];
+    for (const id of migrated) {
+        const provider = providers[id];
+        providers[id] = { ...provider, apiKey: apiKeyReference(provider.apiKey) };
+    }
+    return writeModelsJson(modelsJsonPath, { ...read.value, providers }).ok ? migrated : [];
+}

package/dist/pi/launch.js

@@ -41,15 +41,10 @@ export async function runPi(options, args, env, stdin = "inherit") {
     });
 }
 export async function launchPiChat(options) {
+    let telemetryNotice;
     if (process.stdout.isTTY && options.mode !== "rpc") {
         process.stdout.write("\x1b[2J\x1b[3J\x1b[H");
-        // Clearing the screen erased the first-run notice printed at startup.
-        const telemetryNotice = telemetryFirstRunNotice();
-        if (telemetryNotice)
-            process.stderr.write(`${telemetryNotice}\n`);
-    }
-    if (options.preLaunchNotice) {
-        process.stdout.write(`${options.preLaunchNotice}\n`);
+        telemetryNotice = telemetryFirstRunNotice();
     }
     const executables = await resolveAllExecutables();
     ensureFeynmanCommandShim(options.appRoot, options.feynmanAgentDir);
@@ -59,5 +54,13 @@ export async function launchPiChat(options) {
     // explicit prompt forever.
     const explicitPrompt = Boolean(options.oneShotPrompt || options.initialPrompt);
     const stdin = explicitPrompt && options.mode !== "rpc" && !process.stdin.isTTY ? "ignore" : "inherit";
-    process.exitCode = await runPi(options, buildPiArgs(options), buildPiEnv(options, executables), stdin);
+    // Pi's fullscreen UI hides anything printed before it starts, so the TUI
+    // session shows these itself; one-shot and JSON runs print them as before.
+    const notice = [telemetryNotice, options.preLaunchNotice].filter(Boolean).join("\n");
+    const tui = options.mode !== "rpc" && options.mode !== "json" && !options.oneShotPrompt;
+    if (notice && !tui)
+        process.stderr.write(`${notice}\n`);
+    const env = buildPiEnv(options, executables);
+    env.FEYNMAN_LAUNCH_NOTICE = notice && tui ? notice : undefined;
+    process.exitCode = await runPi(options, buildPiArgs(options), env, stdin);
 }

package/dist/pi/settings.js

@@ -3,6 +3,8 @@ import { dirname, join } from "node:path";
 import { parseJsonText, readJsonFile } from "../config/json-file.js";
 import { BUNDLED_PI_PACKAGES, getFeynmanPackageSources, resolvePackageRoot } from "./runtime.js";
 import { choosePreferredModelRecord, getAvailableModelRecords } from "../model/catalog.js";
+import { migrateBareEnvApiKeys } from "../model/models-json.js";
+import { getModelsJsonPath } from "../model/registry.js";
 // Written by Feynman <= 0.4.0 next to a subagent extension path it managed.
 const LEGACY_RESEARCHER_EXTENSION_MARKER = "_feynmanResearchToolsExtension";
 function findModel(modelLookup, provider, id) {
@@ -180,6 +182,7 @@ export async function ensureFeynmanSettings(settingsPath, bundledSettingsPath, a
     const existing = existsSync(settingsPath) ? readConfigObject(settingsPath, "Feynman settings") : undefined;
     const settings = existing ? { ...existing.value } : {};
     const defaults = readConfigObject(bundledSettingsPath, "bundled Feynman settings").value;
+    migrateBareEnvApiKeys(getModelsJsonPath(authPath));
     for (const [key, value] of Object.entries({ ...defaults, defaultThinkingLevel })) {
         if (settings[key] === undefined)
             settings[key] = value;

package/dist/setup/doctor.js

@@ -171,7 +171,7 @@ export async function runDoctor(options) {
     for (const line of formatPiWebAccessDoctorLines()) {
         console.log(line);
     }
-    console.log(`quiet startup: ${settings.quietStartup === true ? "enabled" : "disabled"}`);
+    console.log(`quiet startup: ${settings.quietStartup === "header" ? "header only" : settings.quietStartup === true ? "enabled" : "disabled"}`);
     console.log(`theme: ${typeof settings.theme === "string" ? settings.theme : "not set"}`);
     if (missingPiBits.length > 0) {
         console.log("pi runtime: missing files");

package/extensions/research-tools/launch-notice.ts

@@ -0,0 +1,12 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+
+export function registerLaunchNotice(pi: ExtensionAPI): void {
+	pi.on("session_start", (_event, ctx) => {
+		const notice = process.env.FEYNMAN_LAUNCH_NOTICE;
+		delete process.env.FEYNMAN_LAUNCH_NOTICE;
+		if (notice && ctx.mode === "tui" && ctx.hasUI) {
+			// Pi labels warnings itself.
+			ctx.ui.notify(notice.replace(/^Warning: /gm, ""), "warning");
+		}
+	});
+}

package/extensions/research-tools.ts

@@ -7,6 +7,7 @@ import { registerDocxFallback } from "./research-tools/docx-fallback.js";
 import { installFeynmanHeader } from "./research-tools/header.js";
 import { registerHelpCommand } from "./research-tools/help.js";
 import { registerHuggingFaceTools } from "./research-tools/huggingface.js";
+import { registerLaunchNotice } from "./research-tools/launch-notice.js";
 import { registerInitCommand, registerOutputsCommand } from "./research-tools/project.js";
 import { registerServiceTierControls } from "./research-tools/service-tier.js";
 import { registerScienceDatabaseTools } from "./research-tools/science-databases.js";
@@ -27,6 +28,7 @@ export default function researchTools(pi: ExtensionAPI): void {
 	registerDocxFallback(pi);
 	registerHelpCommand(pi);
 	registerInitCommand(pi);
+	registerLaunchNotice(pi);
 	registerOutputsCommand(pi);
 	registerServiceTierControls(pi);
 	registerScienceDatabaseTools(pi);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@companion-ai/feynman",
-  "version": "0.5.20",
+  "version": "0.5.22",
   "description": "Research-first CLI agent built on Pi and alphaXiv",
   "license": "MIT",
   "type": "module",