pipecatcloud 0.2.19__tar.gz → 0.2.20__tar.gz

{pipecatcloud-0.2.19 → pipecatcloud-0.2.20}/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to **Pipecat Cloud** will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.20] - 2026-02-11
+
+### Fixed
+
+- Fixed `auth login --headless` to be fully non-interactive by using plain text
+  output instead of Rich terminal widgets, enabling use in environments like
+  Claude Code and CI/CD pipelines.
+
+
 ## [0.2.19] - 2026-01-27
 
 ### Added

{pipecatcloud-0.2.19 → pipecatcloud-0.2.20}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pipecatcloud
-Version: 0.2.19
+Version: 0.2.20
 Summary: Cloud hosting for Pipecat AI applications
 License: BSD 2-Clause License
 Project-URL: Website, https://docs.pipecat.daily.co/

{pipecatcloud-0.2.19 → pipecatcloud-0.2.20}/src/pipecatcloud/cli/commands/auth.py

@@ -161,17 +161,22 @@ async def login(
                 return
 
             # Display the authentication URL and code
-            console.print(
-                Panel(
-                    "[bold]To authenticate with Pipecat Cloud:[/bold]\n\n"
-                    "Visit this URL:\n"
-                    f"[blue][link={web_url}]{web_url}[/link][/blue]\n\n"
-                    "Then enter this code:\n"
-                    f"[cyan bold]{code}[/cyan bold]",
-                    title="[bold]Authentication Required[/bold]",
-                    border_style="blue",
+            if headless:
+                print("\nTo authenticate with Pipecat Cloud:\n", flush=True)
+                print(f"  Visit this URL: {web_url}", flush=True)
+                print(f"  Then enter this code: {code}\n", flush=True)
+            else:
+                console.print(
+                    Panel(
+                        "[bold]To authenticate with Pipecat Cloud:[/bold]\n\n"
+                        "Visit this URL:\n"
+                        f"[blue][link={web_url}]{web_url}[/link][/blue]\n\n"
+                        "Then enter this code:\n"
+                        f"[cyan bold]{code}[/cyan bold]",
+                        title="[bold]Authentication Required[/bold]",
+                        border_style="blue",
+                    )
                 )
-            )
 
             # Prompt user to open the browser (unless in headless mode)
             if not headless:
@@ -185,44 +190,76 @@ async def login(
                     return typer.Exit()
                 _open_url(web_url)
 
-            with Live(
-                console.status(
-                    "[dim]Waiting for authentication to complete...[/dim]", spinner="dots"
-                ),
-                transient=True,
-            ) as live:
+            if headless:
+                print("Waiting for authentication to complete...", flush=True)
                 for attempt in itertools.count():
                     result = await auth_flow.finish()
                     if result is not None:
                         break
-                    live.update(
-                        console.status(
-                            f"[dim]Waiting for authentication to complete... (attempt {attempt + 1})[/dim]"
-                        )
-                    )
                 if result is None:
-                    live.stop()
-                    console.error("Authentication failed")
+                    print("Error: Authentication failed", flush=True)
                     return typer.Exit()
 
-                live.update(console.status("[dim]Obtaining account data[/dim]", spinner="dots"))
+                print("Obtaining account data...", flush=True)
                 try:
                     account_name, account_name_verbose = await _get_account_org(result, active_org)
-                    live.stop()
                     logger.debug(f"Setting namespace to {account_name_verbose} ({account_name})")
                     if account_name is None:
                         raise
                 except Exception:
-                    live.stop()
-                    console.error(
-                        "Account has no associated namespace. Have you completed the onboarding process? Please first sign in via the web dashboard."
+                    print(
+                        "Error: Account has no associated namespace. "
+                        "Have you completed the onboarding process? "
+                        "Please first sign in via the web dashboard.",
+                        flush=True,
                     )
                     return typer.Exit()
 
-            console.success(
-                "Web authentication finished successfully!\n"
-                f"[dim]Account details stored to [magenta]{user_config_path}[/magenta][/dim]"
-            )
+                print("Web authentication finished successfully!", flush=True)
+                print(f"Account details stored to {user_config_path}", flush=True)
+            else:
+                with Live(
+                    console.status(
+                        "[dim]Waiting for authentication to complete...[/dim]", spinner="dots"
+                    ),
+                    transient=True,
+                ) as live:
+                    for attempt in itertools.count():
+                        result = await auth_flow.finish()
+                        if result is not None:
+                            break
+                        live.update(
+                            console.status(
+                                f"[dim]Waiting for authentication to complete... (attempt {attempt + 1})[/dim]"
+                            )
+                        )
+                    if result is None:
+                        live.stop()
+                        console.error("Authentication failed")
+                        return typer.Exit()
+
+                    live.update(console.status("[dim]Obtaining account data[/dim]", spinner="dots"))
+                    try:
+                        account_name, account_name_verbose = await _get_account_org(
+                            result, active_org
+                        )
+                        live.stop()
+                        logger.debug(
+                            f"Setting namespace to {account_name_verbose} ({account_name})"
+                        )
+                        if account_name is None:
+                            raise
+                    except Exception:
+                        live.stop()
+                        console.error(
+                            "Account has no associated namespace. Have you completed the onboarding process? Please first sign in via the web dashboard."
+                        )
+                        return typer.Exit()
+
+                console.success(
+                    "Web authentication finished successfully!\n"
+                    f"[dim]Account details stored to [magenta]{user_config_path}[/magenta][/dim]"
+                )
 
     except Exception as e:
         logger.debug(e)

{pipecatcloud-0.2.19 → pipecatcloud-0.2.20}/src/pipecatcloud/cli/config.py

@@ -5,6 +5,8 @@
 #
 
 import os
+import stat
+import warnings
 from typing import Optional
 
 import toml
@@ -47,6 +49,18 @@ def _read_user_config():
 
             if not all(isinstance(e, dict) for e in org_sections.values()):
                 config_problem = "Pipecat Cloud config file is not valid TOML. Organization sections must be dictionaries. Please log out and log back in."
+
+            # Warn if credentials file is readable by group or others (Unix only).
+            if os.name != "nt":
+                file_mode = os.stat(user_config_path).st_mode
+                if file_mode & (stat.S_IRWXG | stat.S_IRWXO):
+                    warnings.warn(
+                        f"Credentials file '{user_config_path}' has overly permissive "
+                        f"permissions ({stat.filemode(file_mode)}). Other users on this "
+                        f"system may be able to read your token. Run "
+                        f"'chmod 600 {user_config_path}' to fix, or login again to repair automatically.",
+                        stacklevel=2,
+                    )
         if config_problem:
             raise ConfigError(config_problem)
 
@@ -63,6 +77,12 @@ def _write_user_config(new_config):
     with open(user_config_path, "w") as f:
         toml.dump(new_config, f)
 
+    # Restrict permissions so only the file owner can access credentials.
+    # On Windows os.chmod is limited but home directories are already
+    # protected by ACLs, so this is effectively a Unix-only hardening.
+    os.chmod(dir_path, stat.S_IRWXU)  # 0o700
+    os.chmod(user_config_path, stat.S_IRUSR | stat.S_IWUSR)  # 0o600
+
 
 def remove_user_config():
     os.remove(user_config_path)

{pipecatcloud-0.2.19 → pipecatcloud-0.2.20}/src/pipecatcloud.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pipecatcloud
-Version: 0.2.19
+Version: 0.2.20
 Summary: Cloud hosting for Pipecat AI applications
 License: BSD 2-Clause License
 Project-URL: Website, https://docs.pipecat.daily.co/