vidbyte-cli 0.1.0__tar.gz → 0.2.0__tar.gz

{vidbyte_cli-0.1.0/src/vidbyte_cli.egg-info → vidbyte_cli-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vidbyte-cli
-Version: 0.1.0
+Version: 0.2.0
 Summary: Vidbyte CLI: authentication, research threads, and configuration
 Author-email: Vidbyte <hello@vidbyte.ai>
 License-Expression: MIT
@@ -29,6 +29,7 @@ Requires-Dist: httpx<1,>=0.27
 Requires-Dist: keyring<26,>=25.2
 Requires-Dist: platformdirs<5,>=4.4
 Requires-Dist: pydantic<3,>=2.6
+Requires-Dist: rich<16,>=13.7
 Requires-Dist: x402[evm]==2.8.0
 Requires-Dist: vidbyte-sdk[codex]<0.3,>=0.2.0
 Provides-Extra: codex
@@ -67,6 +68,19 @@ vidbyte-cli --help
 
 The step-by-step guide lives at <https://vidbyte.pro/docs/cli/quickstart>.
 
+## Log in
+
+Create an API key at <https://vidbyte.pro/settings/api>, then run:
+
+```bash
+vidbyte-cli login                                  # guided: shows where to get a key, then a hidden prompt
+printf '%s' "$VIDBYTE_KEY" | vidbyte-cli login --with-token   # scripts and CI: no prompt, no styling
+```
+
+The interactive prompt is styled with [Rich](https://github.com/Textualize/rich) and written
+to stderr, so stdout still carries only the one result line. `--color never`, `NO_COLOR`, and
+`TERM=dumb` keep it plain. `vidbyte-cli provider login <provider>` follows the same pattern.
+
 If the CLI is useful to you, star it on GitHub from your terminal:
 
 ```bash
@@ -314,6 +328,14 @@ The canonical gate runs Ruff lint/format checks, strict mypy, byte compilation,
 command smoke checks, sdist/wheel build, Twine metadata validation, and an installed-wheel
 smoke check. GitHub Actions invokes the same script on Linux, Windows, and macOS.
 
+## Releasing
+
+Bump `version` in `pyproject.toml` in a pull request. When it merges, the
+`tag-release.yml` workflow sees a version with no `v{version}` tag and no PyPI release,
+creates the tag, and dispatches `release.yml`, which runs the gate above and publishes to
+PyPI through trusted publishing. Merges that leave the version alone release nothing.
+PyPI versions are permanent, so treat a version bump as the release decision.
+
 ## Runtime admission payments
 
 `vidbyte-cli runtime persistence "your task"` uses your authenticated Vidbyte API

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/README.md

@@ -25,6 +25,19 @@ vidbyte-cli --help
 
 The step-by-step guide lives at <https://vidbyte.pro/docs/cli/quickstart>.
 
+## Log in
+
+Create an API key at <https://vidbyte.pro/settings/api>, then run:
+
+```bash
+vidbyte-cli login                                  # guided: shows where to get a key, then a hidden prompt
+printf '%s' "$VIDBYTE_KEY" | vidbyte-cli login --with-token   # scripts and CI: no prompt, no styling
+```
+
+The interactive prompt is styled with [Rich](https://github.com/Textualize/rich) and written
+to stderr, so stdout still carries only the one result line. `--color never`, `NO_COLOR`, and
+`TERM=dumb` keep it plain. `vidbyte-cli provider login <provider>` follows the same pattern.
+
 If the CLI is useful to you, star it on GitHub from your terminal:
 
 ```bash
@@ -272,6 +285,14 @@ The canonical gate runs Ruff lint/format checks, strict mypy, byte compilation,
 command smoke checks, sdist/wheel build, Twine metadata validation, and an installed-wheel
 smoke check. GitHub Actions invokes the same script on Linux, Windows, and macOS.
 
+## Releasing
+
+Bump `version` in `pyproject.toml` in a pull request. When it merges, the
+`tag-release.yml` workflow sees a version with no `v{version}` tag and no PyPI release,
+creates the tag, and dispatches `release.yml`, which runs the gate above and publishes to
+PyPI through trusted publishing. Merges that leave the version alone release nothing.
+PyPI versions are permanent, so treat a version bump as the release decision.
+
 ## Runtime admission payments
 
 `vidbyte-cli runtime persistence "your task"` uses your authenticated Vidbyte API

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "vidbyte-cli"
-version = "0.1.0"
+version = "0.2.0"
 description = "Vidbyte CLI: authentication, research threads, and configuration"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -36,6 +36,8 @@ dependencies = [
     "keyring>=25.2,<26",
     "platformdirs>=4.4,<5",
     "pydantic>=2.6,<3",
+    # Styles the interactive login prompts; everything it renders goes to stderr.
+    "rich>=13.7,<16",
     "x402[evm]==2.8.0",
     # The Codex integration first shipped in 0.2.0. The SDK is alpha and may change APIs between
     # minor versions, so stay within 0.2.x until a newer minor is verified against this CLI.

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli/commands/auth/login.py

@@ -1,7 +1,8 @@
 """`vidbyte-cli login` — stores the user's Vidbyte API key for later commands.
 
 There is no `--api-key` option: a secret in argv leaks into `ps`, shell history, and CI
-logs. `--with-token` reads bounded stdin; anything else uses a hidden prompt.
+logs. `--with-token` reads bounded stdin; anything else uses a hidden prompt, preceded by a
+Rich card that says where keys are created (see `commands/login_screens.py`).
 """
 
 from __future__ import annotations
@@ -43,12 +44,19 @@ class LoginCommand:
         with_token: bool,
         allow_file_fallback: bool,
     ) -> None:
+        # Deferred so building the command tree never loads Rich; see login_screens.
+        from ..login_screens import vidbyte_login_guide, vidbyte_login_next_steps
+
         config = context.resolved_config()
+        console = context.console()
         credentials = CredentialInput(
             context.streams,
             context.output().terminal,
             no_input=context.options.no_input,
-        ).read(from_stdin=with_token)
+            console=console,
+        ).read(from_stdin=with_token, guide=lambda: vidbyte_login_guide(console, config))
+        if not with_token:
+            console.note("Checking the key with Vidbyte...")
         # Verify-before-persist. Syntactic checks cannot prove a key authenticates, and this
         # call sits immediately before the only write so a reordering is obvious in review.
         context.credential_verifier().verify(credentials, config)
@@ -77,6 +85,8 @@ class LoginCommand:
             ),
             f"Authenticated profile '{config.profile}' using {storage.value}.",
         )
+        if not with_token:
+            vidbyte_login_next_steps(console)
 
     def _fallback_consent(
         self,
@@ -91,10 +101,6 @@ class LoginCommand:
             return True
         if context.options.no_input or not context.output().terminal.interactive:
             raise FileFallbackNotApproved()
-        return bool(
-            click.confirm(
-                "No OS keyring is available. Store the key in a restricted local file?",
-                default=False,
-                err=True,
-            )
-        )
+        from ..login_screens import file_fallback_consent
+
+        return file_fallback_consent(context.console(), "key")

vidbyte_cli-0.2.0/src/vidbyte_cli/commands/login_screens.py

@@ -0,0 +1,118 @@
+"""The Rich screens `login` and `provider login` show a person before and after a key prompt.
+
+Only these two commands talk to a person interactively, so their copy lives together here.
+Both import this module inside the method that needs it: every command module is imported
+when the command tree is built, and only these paths should pay for loading Rich.
+
+Everything rendered here goes to stderr through `HumanConsole`; stdout keeps its one result.
+"""
+
+from __future__ import annotations
+
+from rich.markup import escape
+
+from ..lib.auth.credentials import LIVE_API_KEY_PREFIX, VIDBYTE_API_KEY_SETTINGS_URL
+from ..lib.config import ResolvedConfig
+from ..lib.io.console import (
+    CardTone,
+    HumanConsole,
+    bullet_list,
+    link,
+    numbered_steps,
+    subheading,
+)
+from ..types.provider import PROVIDER_ENV_VARS, PROVIDER_KEY_PREFIXES, Provider
+
+
+def vidbyte_login_guide(console: HumanConsole, config: ResolvedConfig) -> None:
+    # Shown right before the hidden prompt, and only on the interactive path.
+    console.card(
+        "Log in to Vidbyte",
+        [
+            "Connect this terminal to your Vidbyte account with an API key.",
+            "",
+            subheading("How to get a key"),
+            numbered_steps(
+                [
+                    f"Register an API key on this URL:\n{link(VIDBYTE_API_KEY_SETTINGS_URL)}",
+                    f"Copy the key. It starts with [bold]{LIVE_API_KEY_PREFIX}[/].",
+                    "Enter the API key below. Typing stays hidden.",
+                ]
+            ),
+        ],
+    )
+    console.note(f"Profile: {escape(config.profile)}  |  API: {escape(config.api_url)}")
+
+
+def vidbyte_login_next_steps(console: HumanConsole) -> None:
+    # The commands a newly logged-in person most often runs next.
+    console.card(
+        "You're logged in",
+        [
+            subheading("Next steps"),
+            bullet_list(
+                [
+                    "[bold]vidbyte-cli whoami[/]  confirm which account this key belongs to",
+                    '[bold]vidbyte-cli research start "your question"[/]  open a thread',
+                    "[bold]vidbyte-cli logout[/]  remove the stored key",
+                ]
+            ),
+        ],
+    )
+
+
+def provider_login_guide(console: HumanConsole, provider: Provider, profile: str) -> None:
+    # No vendor dashboard links: seven providers' URLs would drift, and a wrong link misleads.
+    name = escape(provider.value)
+    prefixes = PROVIDER_KEY_PREFIXES.get(provider, ())
+    shape = (
+        f"Copy the key. It starts with [bold]{escape(' or '.join(prefixes))}[/]."
+        if prefixes
+        else "Copy the key."
+    )
+    console.card(
+        f"Connect your {provider.value} key",
+        [
+            f"Runtime agents call {name} with your own key, so {name} bills that usage to you.",
+            "",
+            subheading("How to get a key"),
+            numbered_steps(
+                [
+                    f"Create an API key in your {name} account dashboard.",
+                    shape,
+                    "Enter the API key below. Typing stays hidden.",
+                ]
+            ),
+            "",
+            subheading("Good to know"),
+            bullet_list(
+                [
+                    f"The key is checked with {name} before anything is saved.",
+                    f"[bold]{escape(PROVIDER_ENV_VARS[provider])}[/] in the environment "
+                    "overrides the stored key.",
+                ]
+            ),
+        ],
+    )
+    console.note(f"Profile: {escape(profile)}")
+
+
+def file_fallback_consent(console: HumanConsole, noun: str) -> bool:
+    # Explains what the restricted file does and does not protect, then asks; default no.
+    console.card(
+        "No OS keyring available",
+        [
+            f"This system has no keyring to hold the {noun} securely.",
+            "",
+            subheading("The alternative"),
+            bullet_list(
+                [
+                    f"Store the {noun} in a local file only your user account can read.",
+                    "Any program running as you can still read that file.",
+                    "Answer no to cancel; nothing is stored.",
+                ]
+            ),
+        ],
+        tone=CardTone.WARNING,
+    )
+    return console.confirm(f"Store the {noun} in a restricted local file?")

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli/commands/provider/login.py

@@ -47,15 +47,24 @@ class ProviderLoginCommand:
         with_token: bool,
         allow_file_fallback: bool,
     ) -> None:
+        from ..login_screens import provider_login_guide
+
         # Verify-before-persist so a bad key never reaches storage.
         config = context.resolved_config()
         typed = Provider(provider)
+        console = context.console()
         credentials = ProviderCredentialInput(
             context.streams,
             context.output().terminal,
             no_input=context.options.no_input,
             provider=typed,
-        ).read(from_stdin=with_token)
+            console=console,
+        ).read(
+            from_stdin=with_token,
+            guide=lambda: provider_login_guide(console, typed, config.profile),
+        )
+        if not with_token:
+            console.note(f"Checking the key with {typed.value}...")
         context.provider_verifier(typed).verify(credentials)
         fallback_allowed = self._fallback_consent(context, allow_file_fallback)
         context.migration().migrate_if_needed()
@@ -93,10 +102,6 @@ class ProviderLoginCommand:
             return True
         if context.options.no_input or not context.output().terminal.interactive:
             raise FileFallbackNotApprovedForProvider(typed_name="provider")
-        return bool(
-            click.confirm(
-                "No OS keyring is available. Store the provider key in a restricted local file?",
-                default=False,
-                err=True,
-            )
-        )
+        from ..login_screens import file_fallback_consent
+
+        return file_fallback_consent(context.console(), "provider key")

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli/lib/auth/credentials.py

@@ -34,6 +34,8 @@ _MAX_KEY_CHARACTERS = 4096
 # The only prefix the backend gatekeeper extracts. A key without it yields no candidate at
 # all, so the request is not rejected as malformed — it is treated as unauthenticated.
 LIVE_API_KEY_PREFIX = "vb_live_"
+# The website page where a signed-in user creates and revokes these keys; `login` points at it.
+VIDBYTE_API_KEY_SETTINGS_URL = "https://vidbyte.pro/settings/api"
 
 
 class Credentials(BaseModel):

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli/lib/auth/input.py

@@ -1,4 +1,4 @@
-"""The two channels a login token may arrive on: a hidden prompt, or explicit stdin.
+"""The two channels a login token may arrive on: a guided hidden prompt, or explicit stdin.
 
 There is deliberately no `--api-key` option. An argv secret is visible in `ps`, the shell
 history file, and any CI log that echoes its command line, and no amount of care at the
@@ -11,7 +11,8 @@ The environment is absent on purpose: login persists only what a person explicit
 
 from __future__ import annotations
 
-import getpass
+from collections.abc import Callable
+from typing import TYPE_CHECKING
 
 from ..errors.failures import (
     ApiKeyNotLiveFormat,
@@ -22,6 +23,9 @@ from ..io import IOStreams
 from ..io.terminal import TerminalCapabilities
 from .credentials import Credentials
 
+if TYPE_CHECKING:
+    from ..io.console import HumanConsole
+
 _MAX_TOKEN_CHARACTERS = 4096
 
 
@@ -34,12 +38,14 @@ class CredentialInput:
         terminal: TerminalCapabilities,
         *,
         no_input: bool,
+        console: HumanConsole,
     ) -> None:
         self._streams = streams
         self._terminal = terminal
         self._no_input = no_input
+        self._console = console
 
-    def read(self, *, from_stdin: bool) -> Credentials:
+    def read(self, *, from_stdin: bool, guide: Callable[[], None] | None = None) -> Credentials:
         if from_stdin:
             # One past the bound, so an oversized stream is rejected rather than truncated
             # into a token that looks plausible.
@@ -47,8 +53,11 @@ class CredentialInput:
         else:
             if self._no_input or not self._terminal.interactive:
                 raise NoninteractiveLoginRequiresToken()
-            # The prompt goes to stderr so `login` stays usable inside a pipeline.
-            value = getpass.getpass("Vidbyte API key: ", stream=self._streams.stderr)
+            # The guide runs only after the terminal check, so it never precedes a refusal.
+            if guide is not None:
+                guide()
+            # The console writes to stderr so `login` stays usable inside a pipeline.
+            value = self._console.secret("Enter key:")
         token = value.strip()
         if not token or len(token) > _MAX_TOKEN_CHARACTERS:
             raise InvalidApiKeyInput()

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli/lib/auth/provider_input.py

@@ -1,11 +1,12 @@
-"""Acquisition of provider tokens via hidden prompt or stdin.
+"""Acquisition of provider tokens via a guided hidden prompt or stdin.
 
 Mirrors CredentialInput but parameterizes by provider so prefix checks are exact.
 """
 
 from __future__ import annotations
 
-import getpass
+from collections.abc import Callable
+from typing import TYPE_CHECKING
 
 from ...types.provider import Provider
 from ..errors.failures import (
@@ -17,6 +18,9 @@ from ..io import IOStreams
 from ..io.terminal import TerminalCapabilities
 from .provider_credentials import ProviderCredentials
 
+if TYPE_CHECKING:
+    from ..io.console import HumanConsole
+
 _MAX_TOKEN_CHARACTERS = 4096
 
 
@@ -30,22 +34,28 @@ class ProviderCredentialInput:
         *,
         no_input: bool,
         provider: Provider,
+        console: HumanConsole,
     ) -> None:
         # No_input and provider are fixed per command construction.
         self._streams = streams
         self._terminal = terminal
         self._no_input = no_input
         self._provider = provider
+        self._console = console
 
-    def read(self, *, from_stdin: bool) -> ProviderCredentials:
+    def read(
+        self, *, from_stdin: bool, guide: Callable[[], None] | None = None
+    ) -> ProviderCredentials:
         # Bounded read, then prefix check, so an accidental file redirect fails clearly.
         if from_stdin:
             value = self._streams.stdin.read(_MAX_TOKEN_CHARACTERS + 1)
         else:
             if self._no_input or not self._terminal.interactive:
                 raise NoninteractiveProviderLoginRequiresToken(self._provider.value)
-            prompt = f"{self._provider.value} API key: "
-            value = getpass.getpass(prompt, stream=self._streams.stderr)
+            # The guide runs only after the terminal check, so it never precedes a refusal.
+            if guide is not None:
+                guide()
+            value = self._console.secret(f"Enter {self._provider.value} key:")
         token = value.strip()
         if not token or len(token) > _MAX_TOKEN_CHARACTERS:
             raise InvalidProviderApiKeyInput(self._provider.value)

vidbyte_cli-0.2.0/src/vidbyte_cli/lib/io/console.py

@@ -0,0 +1,116 @@
+"""Rich-styled conversation with a person at a terminal: cards, notes, hidden input, consent.
+
+Everything here writes to stderr. Stdout carries results only, and a prompt is not a result,
+so a command that talks to a person stays usable inside a pipeline.
+
+Styling follows the invocation's `TerminalCapabilities` rather than Rich's own detection, so
+`--color never`, `NO_COLOR`, `TERM=dumb`, and a redirected stderr keep producing plain text
+exactly as every other code path promises. Product copy belongs to the commands; this module
+only knows how to lay it out.
+"""
+
+from __future__ import annotations
+
+import getpass
+from collections.abc import Sequence
+from enum import StrEnum
+
+from rich.console import Console, Group, RenderableType
+from rich.markup import escape
+from rich.panel import Panel
+from rich.table import Table
+
+from .streams import IOStreams
+from .terminal import TerminalCapabilities
+
+
+class CardTone(StrEnum):
+    """The two moods a card can carry; each maps to one border color."""
+
+    INFO = "info"
+    WARNING = "warning"
+
+
+_BORDER_STYLES = {CardTone.INFO: "cyan", CardTone.WARNING: "yellow"}
+
+
+class HumanConsole:
+    """A stderr-bound Rich console that respects one invocation's terminal capabilities."""
+
+    def __init__(self, streams: IOStreams, terminal: TerminalCapabilities) -> None:
+        self._streams = streams
+        # `no_color` alone still lets bold and underline through, so a terminal without color
+        # is also not a terminal to Rich: it then writes no escape sequence at all.
+        # Highlighting and emoji are off so a URL or a profile name renders exactly as given.
+        self._console = Console(
+            file=streams.stderr,
+            force_terminal=terminal.color,
+            no_color=not terminal.color,
+            highlight=False,
+            emoji=False,
+        )
+
+    def card(
+        self,
+        title: str,
+        parts: Sequence[RenderableType],
+        *,
+        tone: CardTone = CardTone.INFO,
+    ) -> None:
+        # Unexpanded, so a short card does not stretch across a wide terminal.
+        self._console.print(
+            Panel(
+                Group(*parts),
+                title=f"[bold]{escape(title)}[/]",
+                title_align="left",
+                border_style=_BORDER_STYLES[tone],
+                padding=(1, 2),
+                expand=False,
+            )
+        )
+
+    def note(self, message: str) -> None:
+        # Secondary context such as which profile is being written; callers escape values.
+        self._console.print(f"[dim]{message}[/]")
+
+    def secret(self, label: str) -> str:
+        # The label is styled by Rich; the read stays getpass so the key is never echoed.
+        self._console.print(f"[bold]{escape(label)}[/] ", end="")
+        return getpass.getpass("", stream=self._streams.stderr)
+
+    def confirm(self, question: str) -> bool:
+        # Only an explicit yes consents: a blank line, EOF, or anything else means no.
+        self._console.print(f"[bold]{escape(question)}[/] [dim]\\[y/N][/] ", end="")
+        answer = self._streams.stdin.readline()
+        return answer.strip().lower() in {"y", "yes"}
+
+
+def subheading(text: str) -> str:
+    # Markup for a bold section label inside a card.
+    return f"[bold]{escape(text)}[/]"
+
+
+def numbered_steps(steps: Sequence[RenderableType]) -> Table:
+    # A two-column grid gives each step a hanging indent when its text wraps.
+    grid = Table.grid(padding=(0, 1))
+    grid.add_column(style="bold cyan", no_wrap=True)
+    grid.add_column()
+    for index, step in enumerate(steps, start=1):
+        grid.add_row(f"{index}.", step)
+    return grid
+
+
+def bullet_list(items: Sequence[RenderableType]) -> Table:
+    # Same hanging-indent layout as numbered_steps, for unordered items.
+    grid = Table.grid(padding=(0, 1))
+    grid.add_column(style="cyan", no_wrap=True)
+    grid.add_column()
+    for item in items:
+        grid.add_row("-", item)
+    return grid
+
+
+def link(url: str) -> str:
+    # The URL is always printed as text; OSC 8 terminals additionally make it clickable.
+    safe = escape(url)
+    return f"[link={safe}][underline cyan]{safe}[/][/link]"

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli/lib/runtime/context.py

@@ -16,6 +16,7 @@ from __future__ import annotations
 import os
 from collections.abc import Callable, Mapping
 from dataclasses import dataclass
+from typing import TYPE_CHECKING
 
 from ...types.provider import Provider
 from ..api.client import ApiClient
@@ -44,6 +45,9 @@ from ..output.formats import ColorMode, OutputFormat
 from ..output.manager import OutputManager, OutputPolicy
 from ..runtime_primitives import RuntimeExecutor, RuntimeHostRegistry, RuntimeLaunchPlanner
 
+if TYPE_CHECKING:
+    from ..io.console import HumanConsole
+
 
 @dataclass(frozen=True)
 class InvocationOptions:
@@ -212,6 +216,13 @@ class ApplicationContext:
         # Callers share one policy object so stdout cardinality stays enforceable.
         return self._output
 
+    def console(self) -> HumanConsole:
+        # Built per call from the output policy's terminal, so it follows any reconfigure.
+        # Imported here so only the commands that talk to a person pay for loading Rich.
+        from ..io.console import HumanConsole as _HumanConsole
+
+        return _HumanConsole(self.streams, self._output.terminal)
+
     def provider_store(self) -> ProviderCredentialStore:
         # Lazily created so --help never opens the keyring.
         if self._provider_store is None:

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli/lib/runtime/version.py

@@ -10,8 +10,8 @@ from __future__ import annotations
 from importlib.metadata import PackageNotFoundError, version
 
 _DISTRIBUTION_NAME = "vidbyte-cli"
-# Deliberately not "0.1.0": a source tree must not claim to be the released version.
-_SOURCE_TREE_VERSION = "0.1.0.dev0"
+# Deliberately not "0.2.0": a source tree must not claim to be the released version.
+_SOURCE_TREE_VERSION = "0.2.0.dev0"
 
 
 class VersionProvider:

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0/src/vidbyte_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vidbyte-cli
-Version: 0.1.0
+Version: 0.2.0
 Summary: Vidbyte CLI: authentication, research threads, and configuration
 Author-email: Vidbyte <hello@vidbyte.ai>
 License-Expression: MIT
@@ -29,6 +29,7 @@ Requires-Dist: httpx<1,>=0.27
 Requires-Dist: keyring<26,>=25.2
 Requires-Dist: platformdirs<5,>=4.4
 Requires-Dist: pydantic<3,>=2.6
+Requires-Dist: rich<16,>=13.7
 Requires-Dist: x402[evm]==2.8.0
 Requires-Dist: vidbyte-sdk[codex]<0.3,>=0.2.0
 Provides-Extra: codex
@@ -67,6 +68,19 @@ vidbyte-cli --help
 
 The step-by-step guide lives at <https://vidbyte.pro/docs/cli/quickstart>.
 
+## Log in
+
+Create an API key at <https://vidbyte.pro/settings/api>, then run:
+
+```bash
+vidbyte-cli login                                  # guided: shows where to get a key, then a hidden prompt
+printf '%s' "$VIDBYTE_KEY" | vidbyte-cli login --with-token   # scripts and CI: no prompt, no styling
+```
+
+The interactive prompt is styled with [Rich](https://github.com/Textualize/rich) and written
+to stderr, so stdout still carries only the one result line. `--color never`, `NO_COLOR`, and
+`TERM=dumb` keep it plain. `vidbyte-cli provider login <provider>` follows the same pattern.
+
 If the CLI is useful to you, star it on GitHub from your terminal:
 
 ```bash
@@ -314,6 +328,14 @@ The canonical gate runs Ruff lint/format checks, strict mypy, byte compilation,
 command smoke checks, sdist/wheel build, Twine metadata validation, and an installed-wheel
 smoke check. GitHub Actions invokes the same script on Linux, Windows, and macOS.
 
+## Releasing
+
+Bump `version` in `pyproject.toml` in a pull request. When it merges, the
+`tag-release.yml` workflow sees a version with no `v{version}` tag and no PyPI release,
+creates the tag, and dispatches `release.yml`, which runs the gate above and publishes to
+PyPI through trusted publishing. Merges that leave the version alone release nothing.
+PyPI versions are permanent, so treat a version bump as the release decision.
+
 ## Runtime admission payments
 
 `vidbyte-cli runtime persistence "your task"` uses your authenticated Vidbyte API

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli.egg-info/SOURCES.txt

@@ -12,6 +12,7 @@ src/vidbyte_cli.egg-info/requires.txt
 src/vidbyte_cli.egg-info/top_level.txt
 src/vidbyte_cli/commands/__init__.py
 src/vidbyte_cli/commands/agent_options.py
+src/vidbyte_cli/commands/login_screens.py
 src/vidbyte_cli/commands/agents/__init__.py
 src/vidbyte_cli/commands/agents/suggestion/__init__.py
 src/vidbyte_cli/commands/agents/suggestion/render.py
@@ -162,6 +163,7 @@ src/vidbyte_cli/lib/files/store.py
 src/vidbyte_cli/lib/io/__init__.py
 src/vidbyte_cli/lib/io/attachments.py
 src/vidbyte_cli/lib/io/codex_attachments.py
+src/vidbyte_cli/lib/io/console.py
 src/vidbyte_cli/lib/io/prompt.py
 src/vidbyte_cli/lib/io/streams.py
 src/vidbyte_cli/lib/io/terminal.py

{vidbyte_cli-0.1.0 → vidbyte_cli-0.2.0}/src/vidbyte_cli.egg-info/requires.txt

@@ -3,6 +3,7 @@ httpx<1,>=0.27
 keyring<26,>=25.2
 platformdirs<5,>=4.4
 pydantic<3,>=2.6
+rich<16,>=13.7
 x402[evm]==2.8.0
 vidbyte-sdk[codex]<0.3,>=0.2.0