Phantom Secrets: a day of first-run fixes

The second is a warning. On Linux, Phantom can fall back to a vault backend that does not survive a reboot. The fix warns the user in plain words and points the next steps at local checks.

The third is about output. The command phantom exec printed about 20 lines of its own messages into the same stream as the program it launched. That broke simple uses such as saving a program's output to a file. The fix keeps the child program's output clean and honors a quiet flag. The pull request notes a fresh project printed 22 lines where the child wrote one.

The fourth is help. phantom --help used to show a long flat list of about 40 commands. It now shows a four-step quick start and groups every command by task. The pull request says it changes help text only, with no behavior change.

Dependency updates landed the same day: a security-advisory bump of rustls and an upgrade of the MCP library. Documentation now treats v0.7.9 as the current release.

Agents can read your .env file like any other file. Phantom Secrets swaps real keys for placeholders and adds the real one only when a request leaves.