@phantomcodes/cli 1.1.0 → 1.2.0

package/README.md

@@ -49,10 +49,12 @@ routing. Connect it using your saved key:
 
 ```bash
 npm i -g @phantomcodes/cli
-phantom login
 phantom setup
 ```
 
+With no key saved yet, `phantom setup` signs you in first (the same device
+approval as `phantom login`), then sets up your agents with the new key.
+
 Used pai, this CLI's old name? Run `phantom setup` once after you install. Until
 then, Claude Code and the shell block pai set up still call `pai`, and phantom
 prints a reminder.

package/dist/cli/commands.mjs

@@ -133,8 +133,10 @@ export const COMMANDS = [
         name: 'setup', handler: setupCommand, keyless: true,
         help: `  setup                             set up every agent found: install the skill and
                                     point its model calls at Phantom AI; shows each
-                                    file's changes and asks first
+                                    file's changes and asks first. With no key yet,
+                                    signs in first (in a terminal)
         [--yes]                     don't ask
+        [--no-browser]              print the sign-in link instead of opening it
         [--dry-run]                 show the changes, write nothing
         [--model <id>]              the model each agent starts on (default ${SETUP_MODEL})
   setup --agent <name>              install the skill for one agent, without asking:

package/dist/core/version.mjs

@@ -1,2 +1,2 @@
 /** This release of phantom. `npm version` keeps it equal to the version in package.json. */
-export const VERSION = '1.1.0';
+export const VERSION = '1.2.0';

package/dist/plan/command.mjs

@@ -1,17 +1,21 @@
 import { die } from "../core/errors.mjs";
 import { openUrl, out } from "../core/helpers.mjs";
 import { request } from "../core/request.mjs";
-/** The key's plan and its week (GET /plan). */
+import { savedManagement } from "../workspace/command.mjs";
+/** The plan of the key's workspace and its week (GET /plan). */
 export function getPlan(apiKey, baseUrl) {
     return request('GET', '/plan', apiKey, undefined, baseUrl);
 }
-/** A Stripe Checkout link that puts `plan` on the key (POST /plan/checkout). */
+/** A Stripe Checkout link that puts `plan` on the key's workspace (POST /plan/checkout). */
 export function planCheckout(apiKey, plan, baseUrl) {
     return request('POST', '/plan/checkout', apiKey, { plan }, baseUrl);
 }
-/** A link to Stripe's billing page for the key's plan (POST /plan/portal). */
-export function planPortal(apiKey, baseUrl) {
-    return request('POST', '/plan/portal', apiKey, undefined, baseUrl);
+/**
+ * A link to Stripe's billing page for a workspace's plan (POST /plan/portal).
+ * It takes the workspace's management credential: an inference key gets 403.
+ */
+export function planPortal(credential, baseUrl) {
+    return request('POST', '/plan/portal', credential, undefined, baseUrl);
 }
 const dollars = (n) => `$${n.toFixed(2)}`;
 /** `--table` output for `plan`. */
@@ -36,11 +40,12 @@ export function tablePlan(d) {
 /** What `phantom plan` accepts after `plan`. */
 const USAGE = 'Use phantom plan, phantom plan pro, phantom plan max or phantom plan manage.';
 /**
- * `phantom plan`: the key's plan and how much of the week is used.
- * `phantom plan pro|max` prints a Stripe Checkout link that puts the plan on
- * this key, and opens it unless `--no-browser`. `phantom plan manage` does the
- * same for Stripe's billing page, where the card changes, the plan switches
- * and it cancels. Run by `run()`.
+ * `phantom plan`: the plan of the key's workspace and how much of the week is
+ * used. `phantom plan pro|max` prints a Stripe Checkout link that puts the
+ * plan on that workspace, and opens it unless `--no-browser`. `phantom plan
+ * manage` does the same for Stripe's billing page, where the card changes, the
+ * plan switches and it cancels; it sends the workspace credential `phantom
+ * login` saved, since a key can't manage billing. Run by `run()`.
  */
 export async function planCommand(input) {
     const { io, apiKey, table, baseUrl, flags, subcommand } = input;
@@ -57,7 +62,7 @@ export async function planCommand(input) {
         open(result.checkout_url);
     }
     else if (subcommand === 'manage') {
-        const result = await planPortal(apiKey, baseUrl);
+        const result = await planPortal(savedManagement(input) ?? apiKey, baseUrl);
         out(result, table, (d) => `Open this link to manage billing: ${d.portal_url}`, io.stdout);
         open(result.portal_url);
     }

package/dist/setup/command.mjs

@@ -1,6 +1,8 @@
 import { createInterface } from 'node:readline/promises';
 import { die } from "../core/errors.mjs";
 import { out } from "../core/helpers.mjs";
+import { resolveApiKey } from "../keys/saved.mjs";
+import { workspaceLogin } from "../workspace/command.mjs";
 import { SETUP_AGENTS, SETUP_NAMES } from "./agents.mjs";
 import { planSetup } from "./plan.mjs";
 import { setupPreview, applySetup, previewSetup, restoreSetup } from "./apply.mjs";
@@ -52,8 +54,9 @@ export function tableRestore(d) {
     ];
     return lines.length ? lines.join('\n') : 'Nothing to restore.';
 }
-/** `phantom setup`: plans, previews, asks, applies or restores agent setup. Run by `run()`. */
-export async function setupCommand({ env, io, flags, table }) {
+/** `phantom setup`: plans, previews, asks, applies or restores agent setup. Plain setup with no key yet signs in first when it runs in a terminal. Run by `run()`. */
+export async function setupCommand(input) {
+    const { env, io, flags, table } = input;
     const agent = flags['agent'];
     if (agent === true)
         die(`--agent requires ${SETUP_NAMES.join(', ')} or all`);
@@ -74,6 +77,11 @@ export async function setupCommand({ env, io, flags, table }) {
     // Plain `phantom setup` sets up everything it finds and asks first. Any of
     // the older flags runs just what they name, without asking.
     const guided = agent === undefined && provider === undefined;
+    // With no key yet, sign in first, as phantom claude does, so the agents
+    // get one in this run. Its words go to stderr; stdout stays setup's result.
+    if (guided && !dryRun && io.isTTY && !resolveApiKey(env)) {
+        await workspaceLogin({ ...input, io: { ...io, stdout: io.stderr }, flags: flags['no-browser'] ? { 'no-browser': true } : {} });
+    }
     const plan = planSetup(env, {
         agent,
         provider: guided || provider === true ? true : provider === 'off' ? 'off' : false,

package/dist/workspace/command.mjs

@@ -27,6 +27,10 @@ function credentials(input) {
         die('This workspace belongs to a different API address. Run phantom login for this address.', 'workspace_origin');
     return saved;
 }
+/** The management credential `phantom login` saved for this API address, or null when it saved none. */
+export function savedManagement(input) {
+    return existsSync(credentialPath(input.env)) ? credentials(input).management_credential : null;
+}
 /** A read from the saved workspace, such as `/spend`, with its management credential. */
 export async function workspaceGet(input, path) {
     const saved = credentials(input);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phantomcodes/cli",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "AI inference for your coding agents. Route models, control spending, and fund your workspace.",
   "keywords": [
     "phantom",