@phantomcodes/cli 1.2.2 → 1.2.3

package/dist/cli/commands.mjs

@@ -138,6 +138,7 @@ export const COMMANDS = [
         [--yes]                     don't ask
         [--no-browser]              print the sign-in link instead of opening it
         [--dry-run]                 show the changes, write nothing
+        [--json]                    print JSON in a terminal too (a pipe always gets JSON)
         [--model <id>]              the model each agent starts on (default ${SETUP_MODEL})
   setup --agent <name>              install the skill for one agent, without asking:
                                     ${orList(SETUP_NAMES)}

package/dist/cli/run.mjs

@@ -12,7 +12,8 @@ import { LEGACY_SETUP_HINT, legacySetupFound } from "../setup/legacy.mjs";
  * fails. Errors go to `io.stderr` as JSON. It never calls `process.exit`.
  * @param argv The arguments after `phantom`.
  * @param env The environment to read settings from.
- * @param io Where output goes, and whether stderr is a terminal (for progress lines).
+ * @param io Where output goes, whether stderr is a terminal (for progress lines),
+ *   and whether stdout is one (setup prints a summary there instead of JSON).
  * @param node The Node version it runs on; one too old to reject forged
  *   eMudhra certificates gets a warning on stderr first.
  */
@@ -20,6 +21,7 @@ export async function run(argv = process.argv.slice(2), env = process.env, io =
     stdout: (s) => process.stdout.write(s),
     stderr: (s) => process.stderr.write(s),
     isTTY: Boolean(process.stderr.isTTY),
+    stdoutIsTTY: Boolean(process.stdout.isTTY),
 }, node = process.versions.node) {
     const unsafe = nodeTrustWarning(node);
     if (unsafe)

package/dist/core/version.mjs

@@ -1,2 +1,2 @@
 /** This release of phantom. `npm version` keeps it equal to the version in package.json. */
-export const VERSION = '1.2.2';
+export const VERSION = '1.2.3';

package/dist/setup/command.mjs

@@ -43,6 +43,10 @@ export function tableSetup(d) {
         lines.push(n);
     if (r.applied === false)
         lines.push('Nothing was changed.');
+    // Agents that read the key from the shell only see it in a terminal opened after setup.
+    else if (!r.dry_run && (r.files ?? []).some((f) => f.agent === 'shell')) {
+        lines.push('', 'Open a new terminal before you start your agents, so they can read your Phantom AI key.');
+    }
     return lines.join('\n');
 }
 /** `--table` output for `setup --restore`. */
@@ -56,7 +60,9 @@ export function tableRestore(d) {
 }
 /** `phantom setup`: plans, previews, asks, applies or restores agent setup. Plain setup with no key yet signs in first when it runs in a terminal. Run by `run()`. */
 export async function setupCommand(input) {
-    const { env, io, flags, table } = input;
+    const { env, io, flags } = input;
+    // A person at a terminal gets the short summary; a pipe, or --json, gets JSON.
+    const table = input.table || (Boolean(io.stdoutIsTTY) && !flags['json']);
     const agent = flags['agent'];
     if (agent === true)
         die(`--agent requires ${SETUP_NAMES.join(', ')} or all`);
@@ -80,7 +86,7 @@ export async function setupCommand(input) {
     // With no key yet, sign in first, as phantom claude does, so the agents
     // get one in this run. Its words go to stderr; stdout stays setup's result.
     if (guided && !dryRun && io.isTTY && !resolveApiKey(env)) {
-        await workspaceLogin({ ...input, io: { ...io, stdout: io.stderr }, flags: flags['no-browser'] ? { 'no-browser': true } : {} });
+        await workspaceLogin({ ...input, io: { ...io, stdout: io.stderr }, flags: flags['no-browser'] ? { 'no-browser': true } : {} }, { inSetup: true });
     }
     const plan = planSetup(env, {
         agent,

package/dist/workspace/command.mjs

@@ -36,8 +36,12 @@ export async function workspaceGet(input, path) {
     const saved = credentials(input);
     return wire(saved.base_url, 'GET', '/workspaces/' + encodeURIComponent(saved.workspace_id) + path, undefined, saved.management_credential);
 }
-/** Device authorization for accounts or guests, saving keys locally without copying a secret through the browser. */
-export async function workspaceLogin(input) {
+/**
+ * Device authorization for accounts or guests, saving keys locally without copying a secret through the browser.
+ * With `inSetup`, `phantom setup` carries on once it is signed in, so it says that instead of printing the
+ * saved key's details and the next commands.
+ */
+export async function workspaceLogin(input, opts = {}) {
     const { env, io, flags } = input;
     if (flags.save === true)
         die('--save requires a key name.');
@@ -49,7 +53,9 @@ export async function workspaceLogin(input) {
     const start = await wire(url, 'POST', '/auth/device', { client_name: `phantom on ${hostname()}` });
     if (new URL(start.verification_uri_complete).origin !== new URL(url).origin)
         die('The approval URL belongs to another site.', 'device_origin');
-    io.stderr(`Open ${start.verification_uri_complete}\nConfirm code ${start.user_code}\n`);
+    io.stderr(`Sign in at ${start.verification_uri_complete}\n` +
+        `Check that the page shows code ${start.user_code}, then approve.\n` +
+        'Waiting for you to approve...\n');
     if (!flags['no-browser'])
         openUrl(start.verification_uri_complete);
     let interval = Math.max(1, start.interval) * 1000;
@@ -82,6 +88,10 @@ export async function workspaceLogin(input) {
             io.stderr('phantom could not save the connection. Sign in or restore your workspace to revoke the device key and reconnect.\n');
             throw error;
         }
+        if (opts.inSetup) {
+            io.stderr('Signed in. Setting up your agents next.\n\n');
+            return 0;
+        }
         io.stdout(JSON.stringify({ saved_as: name, key_name: token.key_name, workspace_id: token.workspace_id, storage: keychainOn(env) ? 'macOS Keychain' : 'private files' }) + '\n');
         io.stderr('Ready. Run phantom claude, phantom codex or phantom pi. Guests can export recovery with phantom workspace export --file <path>.\n');
         return 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phantomcodes/cli",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "AI inference for your coding agents. Route models, control spending, and fund your workspace.",
   "keywords": [
     "phantom",