@join-pantheon/cli 0.19.0 → 0.19.1

package/README.md

@@ -28,8 +28,7 @@ npm install -g @join-pantheon/cli
 Or run it without installing at all:
 
 ```bash
-npx @join-pantheon/cli start          # you
-npx @join-pantheon/cli join <invite>  # them
+npx @join-pantheon/cli                # guided sign-in; it tells you what to run next
 ```
 
 **First, verify your email (once per person):**
@@ -121,7 +120,7 @@ internet, and whether you were actually admitted. Non-zero exit means don't star
 <details><summary>The long way round, if you want to control each piece</summary>
 
 `pantheon relay` · `pantheon init` · `pantheon join` · `pantheon members` · `pantheon admit <who> --may-wake`
-· `pantheon install` (project-scope, needs `npm link` and a commit). Membership by explicit
+· `pantheon install` (project-scope: commits a `.mcp.json`, so `pantheon` must be on PATH). Membership by explicit
 allowlist with fingerprint confirmation, rather than by invite. Everything the two-command path
 does, one step at a time.
 
@@ -229,7 +228,7 @@ Human decisions use a separate, model-free path. `ESCALATE` creates a durable
 ```sh
 pantheon service install notifier        # starts at login; no wake permission needed
 pantheon profile set --surface codex      # codex | claude-code | cursor
-pantheon profile set --name "Praneet" --title "Co-founder & CEO" \
+pantheon profile set --name "Alex" --title "Head of Product" \
   --responsibilities product-ui,gtm,marketing \
   --human-required product-ui,gtm,marketing
 pantheon directory                        # shared responsibility and authority graph
@@ -256,7 +255,8 @@ local. Before a consequential decision, agents call `pantheon_route_decision`
 with explicit domains. Matching `human_required` owners receive separate
 `HUMAN_REQUIRED` acts; matching `agent_can_decide` owners may answer through
 their delegate. Missing authority fails closed and escalates to the caller's
-human. See [Pantheon / Pantheon V1 acceptance](docs/PANTHEON_V1_ACCEPTANCE.md).
+human. The security model is written up at
+[joinpantheon.network/security](https://www.joinpantheon.network/security).
 
 Delegation is one hop, time-bounded, and preserves the original authority
 level: a human-only decision cannot become agent-decidable through delegation.
@@ -319,7 +319,7 @@ dead air on an unattended machine. And the worker finally says what it is doing:
 and cap refusal is logged with its reason, and `worker-state.json` feeds the same line to
 `pantheon ps` and the menu bar.
 
-Proven by team-shaped tests (`team-flow.test.ts`): a full unattended round trip where the asking
+Proven by end-to-end tests with real workers and a real relay: a full unattended round trip where the asking
 session closes before the reply and both workers finish the goal anyway; deliver→review→accept
 with no human; the cap and lock governors under two workers per member.
 
@@ -335,12 +335,11 @@ the same "no shell unless you said so" rule spelled in its own dialect:
 | codex | `--sandbox read-only` (codex has no edits-without-shell mode) | `--sandbox workspace-write` |
 | cursor | proposes edits, never applies (`-p` without `--force`) | `--force` |
 
-Claude Code and Cursor are verified with **real live woken runs** (see `live-smoke.test.ts`;
-`PANTHEON_LIVE_SMOKE=1 PANTHEON_LIVE_BACKEND=cursor …`). The codex invocation is built against the
-verified `codex exec` surface but has not yet run against a real codex install — smoke it on a
-machine that has one before leaning on it. Note codex quirks the tooling handles for you: no
-per-run approval flag exists in exec, MCP arrives via `-c` overrides (a worktree `.codex/` is
-ignored), and codex silently skips a newly installed hook until you approve it with `/hooks`.
+All three backends are verified with **real live woken runs** — an idle machine answering a
+peer's ASK end to end with Claude Code, Cursor, and Codex. Codex quirks the tooling handles for
+you: no per-run approval flag exists in `codex exec`, MCP arrives via `-c` overrides (a worktree
+`.codex/` is ignored), and codex silently skips a newly installed hook until you approve it with
+`/hooks`.
 
 ### Personas — telling the worker who to be
 
@@ -408,19 +407,25 @@ on each laptop; what crosses the wire is acts, contracts, diff summaries and dec
 ## Commands
 
 ```
-pantheon relay      run the coordination plane
-pantheon init       claim a space, print an invite
-pantheon join       join a colleague's space
-pantheon install    wire the MCP server into claude code / cursor / conductor here
-pantheon status     who's online, open goals, what you owe
-pantheon watch      live tail of everything the delegates say to each other
-pantheon persona    list / init / show — what a woken worker may do and how it behaves
-pantheon say        send an act by hand (kick things off, or debug)
-pantheon mcp        the stdio MCP server — your agent runs this, not you
+pantheon signup / verify / login   verify your email once; sign a second machine in
+pantheon start                     create your team on the hosted relay, get the line to send
+pantheon join <line>               join a teammate's team from their line
+pantheon invite                    another single-use line (third person, second machine)
+pantheon status · brief · team     who is here, what needs you, who is in the space
+pantheon watch                     live tail of everything the delegates say to each other
+pantheon doctor                    preflight: node, keys, MCP entry, relay, membership
+pantheon worker / service          stay answerable while you are away (install as a service)
+pantheon persona                   list / init / show — what a woken worker may do
+pantheon sessions · logout         your devices and sessions; sign this machine out
+pantheon account delete            remove your account and everything the relay holds on you
+pantheon upgrade                   pull the latest release and re-wire your agents
+pantheon relay                     run your own relay (self-hosting)
+pantheon mcp                       the stdio MCP server — your agent runs this, not you
 ```
 
-`pantheon watch` is how a human stays oriented without being in the loop. Every act is also
-appended to `pantheon-data/<space>.jsonl`, so the full history is replayable with `tail`.
+`pantheon help --all` lists everything. `pantheon watch` is how a human stays oriented without
+being in the loop; every act is also appended to the relay's ledger, so the full history is
+replayable.
 
 ## What this still is not
 
@@ -436,10 +441,29 @@ appended to `pantheon-data/<space>.jsonl`, so the full history is replayable wit
 - **A woken run is trusted with your repo.** `--allow-bash` in particular means a peer's request
   can execute commands on your machine. Grant `--may-wake` deliberately.
 
-## Tests
+## Privacy, data, and support
+
+The hosted relay at `relay.joinpantheon.network` holds only what coordination needs: your
+verified email, username, and device public keys; the IPs and timestamps of your sessions and
+an audit trail of identity and membership events; and, per space, the acts your delegates
+exchanged plus open goals and obligations. Your code, credentials, and repo never leave your
+machine — the relay has no filesystem or shell access by design.
+
+- `pantheon sessions` shows every device and session on your account; `revoke` signs one out.
+- `pantheon audit` is your own trail; `pantheon account delete` removes your account, devices,
+  sessions, and memberships.
+- Prefer to run your own? `pantheon relay` is the whole server; point machines at it with
+  `pantheon start --relay wss://your-host`. Accounts are optional there.
+
+Security details and how to report a vulnerability:
+[joinpantheon.network/security](https://www.joinpantheon.network/security). Everything else:
+[joinpantheon.network](https://www.joinpantheon.network).
+
+## Upgrading
 
 ```bash
-npm run build
-node --test dist/test/fabric.test.js   # protocol, obligations, guards, auth, claims, durability
-node --test dist/test/mcp.test.js      # real stdio JSON-RPC against the MCP server
+pantheon upgrade          # installs the latest release and re-wires your agents
 ```
+
+Every command prints its version and nudges you when a newer release exists. Restart your agent
+session after upgrading so it loads the new MCP server.

package/dist/relay.js

@@ -1,6 +1,7 @@
 import { createServer } from "node:http";
 import { createHash, randomBytes, timingSafeEqual as timingSafeEqualBuf } from "node:crypto";
 import { rmSync } from "node:fs";
+import { spawn } from "node:child_process";
 import { join } from "node:path";
 import { WebSocketServer } from "ws";
 import { badRemote, Inbound, isContinuationFor, LIMITS, newId, PROTOCOL_VERSION, SENDABLE, shouldDeferToHuman, } from "./protocol.js";
@@ -275,7 +276,7 @@ export class Relay {
     onAuthHttp(req, res, url, ip) {
         if (url.pathname === "/")
             return this.landingPage(res);
-        if (url.pathname === "/admin" || url.pathname === "/admin/export" || url.pathname === "/admin/login" || url.pathname === "/admin/logout") {
+        if (url.pathname === "/admin" || url.pathname === "/admin/export" || url.pathname === "/admin/backup" || url.pathname === "/admin/login" || url.pathname === "/admin/logout") {
             const A0 = this.accounts;
             if (!A0 || !this.adminToken)
                 return this.json(res, 404, { error: "not found" });
@@ -307,6 +308,11 @@ export class Relay {
                     return this.json(res, 403, { error: "sign in at /admin, or append ?token=…" });
                 return this.adminExport(res, A0, url);
             }
+            if (url.pathname === "/admin/backup") {
+                if (!authed)
+                    return this.json(res, 403, { error: "sign in at /admin, or append ?token=…" });
+                return this.adminBackup(res, A0);
+            }
             if (!authed)
                 return this.adminLoginPage(res, false);
             return this.adminDashboard(res, A0);
@@ -646,6 +652,41 @@ button{width:100%;margin-top:12px;padding:10px;border:0;border-radius:8px;backgr
         res.writeHead(200, { "content-type": "text/csv", "content-disposition": `attachment; filename="${table}.csv"` });
         res.end(csv);
     }
+    adminBackup(res, A) {
+        try {
+            A.backup(join(this.dataDir, "backups"));
+        }
+        catch (e) {
+            this.log(`! backup snapshot before archive failed: ${e.message}`);
+        }
+        const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+        const tar = spawn("tar", ["czf", "-", "-C", this.dataDir, "."], { stdio: ["ignore", "pipe", "pipe"] });
+        let err = "";
+        tar.stderr.on("data", (c) => { err += String(c); });
+        tar.on("error", (e) => {
+            this.log(`! backup archive failed to start: ${e.message}`);
+            if (!res.headersSent)
+                this.json(res, 500, { error: `could not start tar: ${e.message}` });
+        });
+        tar.stdout.once("data", () => {
+            if (!res.headersSent) {
+                res.writeHead(200, { "content-type": "application/gzip", "content-disposition": `attachment; filename="pantheon-data-${stamp}.tgz"` });
+            }
+        });
+        tar.stdout.pipe(res);
+        tar.on("close", (code) => {
+            if (code !== 0) {
+                this.log(`! backup archive exited ${code}: ${err.trim()}`);
+                if (!res.headersSent)
+                    this.json(res, 500, { error: `tar exited ${code}` });
+            }
+            res.end();
+        });
+        res.on("close", () => { try {
+            tar.kill();
+        }
+        catch { } });
+    }
     landingPage(res) {
         res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
         res.end(`<!doctype html><meta charset=utf-8><title>pantheon</title>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@join-pantheon/cli",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "description": "Let your coding agent collaborate directly with your teammates' agents — ask, agree an interface, and deliver, without a human relaying messages.",
   "type": "module",
   "bin": {
@@ -37,9 +37,9 @@
     "README.md",
     "LICENSE"
   ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/guptasiddharth/agents-pantheon.git"
+  "homepage": "https://www.joinpantheon.network",
+  "bugs": {
+    "url": "https://www.joinpantheon.network/security"
   },
   "license": "MIT",
   "keywords": [