@join-pantheon/cli 0.19.1 → 0.20.0

package/dist/cli.js

@@ -9,7 +9,7 @@ process.emitWarning = ((warning, ...rest) => {
 import { randomBytes } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
 import { PantheonClient } from "./client.js";
-import { fromInvite, load, save, toInvite, CONFIG_PATH, DEFAULT_RELAY } from "./config.js";
+import { fromInvite, load, save, toInvite, resolveFor, loadAll, repoInfo, bindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY } from "./config.js";
 import { validEmail, validUsername } from "./accounts.js";
 import { install, launcher } from "./install.js";
 import { Relay } from "./relay.js";
@@ -219,7 +219,37 @@ function sameHost(a, b) {
     }
 }
 function need() {
-    return load() ?? die("not configured. Run `pantheon signup` then `pantheon start` (create a team), or `pantheon join <invite>` (join one).");
+    const r = resolveFor(process.cwd());
+    if (r.cfg && r.cfg.space)
+        return r.cfg;
+    if (r.reason === "unbound") {
+        const names = Object.values(loadAll()?.spaces ?? {}).map((m) => m.name).join(", ");
+        die(`this folder is not bound to one of your ${r.memberships} teams (${names}).\n  From the team's repo:  pantheon use <team> --here\n  Or pick a default:      pantheon use <team>`);
+    }
+    if (r.reason === "stale")
+        die(`this repo is bound to a team this machine is no longer in (${r.binding?.space}).\n  Rebind it:  pantheon use <team> --here   ·   or rejoin:  pantheon join <invite>`);
+    if (r.cfg && !r.cfg.space)
+        die("signed in, but not on a team yet. Run `pantheon start` (create one) or `pantheon join <invite>` (join one).");
+    return die("not configured. Run `pantheon signup` then `pantheon start` (create a team), or `pantheon join <invite>` (join one).");
+}
+function targets() {
+    const f = loadAll();
+    if (flag("space")) {
+        const m = f && findMembership(f, flag("space"));
+        if (!f || !m)
+            die(`you are not in a team called "${flag("space")}"`);
+        return [configFor(f, m, null)];
+    }
+    const r = resolveFor(process.cwd());
+    if (r.cfg && r.cfg.space && r.reason !== "default")
+        return [r.cfg];
+    if (r.reason === "default" && f)
+        return Object.values(f.spaces ?? {}).map((m) => configFor(f, m, null));
+    return [need()];
+}
+function needStrict() {
+    const r = resolveFor(process.cwd(), { strict: true });
+    return r.cfg && r.cfg.space ? r.cfg : null;
 }
 function printGranted(granted) {
     if (!granted.length)
@@ -283,6 +313,13 @@ ${B("getting going — then two commands, run from your project's repo")}
   --no-worker, --no-hook, --no-notifications, --no-menubar.
   Already a member, new machine or fresh pull?  pantheon install --user  does the same.
 
+${B("several teams on one machine")}
+  pantheon spaces             your teams, which repo is bound to which, and where this folder points
+  pantheon use <team> --here  bind this repo to a team (agents opened here speak in it)
+  pantheon repo add | list    the repos a team works from; a delivery must come from one of them
+  pantheon leave <team>       drop one team from this machine (its token and repo bindings)
+  pantheon profile set --space <team> …   authority that applies in one team only (e.g. --human-required pricing)
+
 ${B("day to day")}
   pantheon status             who is here, what is being worked on, what needs you
   pantheon brief              what needs you, and what your agent already handled
@@ -586,86 +623,94 @@ async function main() {
             return;
         }
         case "status": {
-            const cfg = need();
-            const client = new PantheonClient(cfg, undefined, { role: "cli" });
-            await client.connect().catch((e) => {
-                if (client.pending) {
-                    console.error(`${B("not admitted yet")}  (${C(cfg.member)}, fingerprint ${C(fingerprint(cfg.publicKey))})\n`);
-                    console.error(client.pending);
-                    process.exit(2);
+            const showStatus = async (cfg) => {
+                const client = new PantheonClient(cfg, undefined, { role: "cli" });
+                await client.connect().catch((e) => {
+                    if (client.pending) {
+                        console.error(`${B("not admitted yet")}  (${C(cfg.member)}, fingerprint ${C(fingerprint(cfg.publicKey))})\n`);
+                        console.error(client.pending);
+                        process.exit(2);
+                    }
+                    die(`cannot reach relay at ${cfg.relay} — ${e.message}`);
+                });
+                await new Promise((r) => setTimeout(r, 350));
+                const peers = client.roster.filter((m) => m.id !== cfg.member);
+                console.log(`${B(cfg.space)}  you are ${C(cfg.member)}  ${D(cfg.relay)}  ${D(`${client.head} acts`)}\n`);
+                console.log(B("members"));
+                if (!peers.length)
+                    console.log(`  ${D("(nobody else yet — send them an invite from `pantheon invite`)")}`);
+                for (const p of peers) {
+                    const behind = p.seen_seq === undefined ? null : client.head - p.seen_seq;
+                    const reach = behind === null
+                        ? D(p.delivered_seq !== undefined && p.delivered_seq >= client.head
+                            ? "delivered, but no read-receipt — no wake-up hook on their machine"
+                            : "no wake-up hook on their machine — nothing surfaces until their human types")
+                        : behind > 0
+                            ? `\x1b[33mtheir agent has not seen your last ${behind} act${behind === 1 ? "" : "s"}\x1b[0m`
+                            : D("their agent is caught up");
+                    console.log(`  ${p.online ? C("●") : D("○")} ${p.id.padEnd(14)} ${D(p.agent.padEnd(12))} ${reach}`);
                 }
-                die(`cannot reach relay at ${cfg.relay} — ${e.message}`);
-            });
-            await new Promise((r) => setTimeout(r, 350));
-            const peers = client.roster.filter((m) => m.id !== cfg.member);
-            console.log(`${B(cfg.space)}  you are ${C(cfg.member)}  ${D(cfg.relay)}  ${D(`${client.head} acts`)}\n`);
-            console.log(B("members"));
-            if (!peers.length)
-                console.log(`  ${D("(nobody else yet — send them an invite from `pantheon invite`)")}`);
-            for (const p of peers) {
-                const behind = p.seen_seq === undefined ? null : client.head - p.seen_seq;
-                const reach = behind === null
-                    ? D(p.delivered_seq !== undefined && p.delivered_seq >= client.head
-                        ? "delivered, but no read-receipt — no wake-up hook on their machine"
-                        : "no wake-up hook on their machine — nothing surfaces until their human types")
-                    : behind > 0
-                        ? `\x1b[33mtheir agent has not seen your last ${behind} act${behind === 1 ? "" : "s"}\x1b[0m`
-                        : D("their agent is caught up");
-                console.log(`  ${p.online ? C("●") : D("○")} ${p.id.padEnd(14)} ${D(p.agent.padEnd(12))} ${reach}`);
-            }
-            const goals = [...client.goals.values()];
-            console.log(`\n${B("goals")}`);
-            if (!goals.length)
-                console.log(`  ${D("(none)")}`);
-            for (const g of goals) {
-                console.log(`  ${g.state.padEnd(8)} ${String(g.acts).padStart(3)}/${g.budget}  ${g.title}  ${D(g.id)}`);
-            }
-            const owed = client.obligations;
-            const ageOf = (t) => {
-                const m = Math.round((Date.now() - t) / 60000);
-                return m < 60 ? `${m}m` : `${Math.round(m / 60)}h`;
+                const goals = [...client.goals.values()];
+                console.log(`\n${B("goals")}`);
+                if (!goals.length)
+                    console.log(`  ${D("(none)")}`);
+                for (const g of goals) {
+                    console.log(`  ${g.state.padEnd(8)} ${String(g.acts).padStart(3)}/${g.budget}  ${g.title}  ${D(g.id)}`);
+                }
+                const owed = client.obligations;
+                const ageOf = (t) => {
+                    const m = Math.round((Date.now() - t) / 60000);
+                    return m < 60 ? `${m}m` : `${Math.round(m / 60)}h`;
+                };
+                const human = owed.filter((o) => o.kind === "HUMAN");
+                const between = owed.filter((o) => o.kind !== "HUMAN");
+                console.log(`\n${B("needs a human")}`);
+                if (!human.length)
+                    console.log(`  ${D("(nothing waiting on you)")}`);
+                for (const o of human) {
+                    const who = o.owner.replace(/^human:/, "");
+                    const stale = Date.now() - o.created_at > 3_600_000;
+                    console.log(`  ${stale ? "\x1b[33m" : C("")}${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)}\x1b[0m ${o.body}`);
+                    if (who === cfg.member)
+                        console.log(`         ${D("your peer was told this decision was coming — answer it or say it is dropped")}`);
+                }
+                console.log(`\n${B("between delegates")}`);
+                if (!between.length)
+                    console.log(`  ${D("(nothing owed)")}`);
+                for (const o of between) {
+                    console.log(`  ${o.kind.padEnd(7)} ${o.owner.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${o.body}`);
+                }
+                client.close();
             };
-            const human = owed.filter((o) => o.kind === "HUMAN");
-            const between = owed.filter((o) => o.kind !== "HUMAN");
-            console.log(`\n${B("needs a human")}`);
-            if (!human.length)
-                console.log(`  ${D("(nothing waiting on you)")}`);
-            for (const o of human) {
-                const who = o.owner.replace(/^human:/, "");
-                const stale = Date.now() - o.created_at > 3_600_000;
-                console.log(`  ${stale ? "\x1b[33m" : C("")}${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)}\x1b[0m ${o.body}`);
-                if (who === cfg.member)
-                    console.log(`         ${D("your peer was told this decision was coming — answer it or say it is dropped")}`);
-            }
-            console.log(`\n${B("between delegates")}`);
-            if (!between.length)
-                console.log(`  ${D("(nothing owed)")}`);
-            for (const o of between) {
-                console.log(`  ${o.kind.padEnd(7)} ${o.owner.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${o.body}`);
+            const ts = targets();
+            for (const [i, c] of ts.entries()) {
+                if (ts.length > 1)
+                    console.log(`${i ? "\n" : ""}${D("━━━ team")} ${B(c.space)} ${D(`(${i + 1} of ${ts.length}) ━━━`)}`);
+                await showStatus(c);
             }
-            client.close();
             return;
         }
         case "brief": {
-            const cfg = need();
-            const profile = loadProfile(cfg);
-            const client = new PantheonClient(cfg, undefined, { role: "cli" });
-            await client.connect().catch((e) => die(client.pending ?? e.message));
-            await new Promise((r) => setTimeout(r, 350));
-            process.stdout.write(renderBrief({
-                space: cfg.space,
-                person: {
-                    member: cfg.member,
-                    display_name: profile.human.display_name,
-                    title: profile.human.title,
-                    responsibilities: profile.human.responsibilities,
-                },
-                owed: client.myObligations().map((o) => ({
-                    id: o.id, kind: o.kind, body: o.body, created_at: o.created_at,
-                })),
-                recentRuns: recentRuns(86_400_000),
-            }));
-            client.close();
+            for (const cfg of targets()) {
+                const profile = loadProfile(cfg);
+                const client = new PantheonClient(cfg, undefined, { role: "cli" });
+                await client.connect().catch((e) => die(client.pending ?? e.message));
+                await new Promise((r) => setTimeout(r, 350));
+                process.stdout.write(renderBrief({
+                    space: cfg.space,
+                    person: {
+                        member: cfg.member,
+                        display_name: profile.human.display_name,
+                        title: profile.human.title,
+                        responsibilities: profile.human.responsibilities,
+                    },
+                    owed: client.myObligations().map((o) => ({
+                        id: o.id, kind: o.kind, body: o.body, created_at: o.created_at,
+                    })),
+                    recentRuns: recentRuns(86_400_000),
+                }));
+                client.close();
+            }
             return;
         }
         case "team": {
@@ -899,11 +944,14 @@ async function main() {
         }
         case "hook": {
             const sub = argv[1] ?? "status";
+            const hookCfg = needStrict();
             const reportIdle = async (session, seen) => {
+                if (!hookCfg)
+                    return true;
                 const { reportActivity } = await import("./pending.js");
                 for (let attempt = 0; attempt < 2; attempt++) {
                     const ok = await reportActivity({
-                        session: `hook:${session}`, state: "idle", ...(seen !== undefined ? { seen } : {}),
+                        cfg: hookCfg, session: `hook:${session}`, state: "idle", ...(seen !== undefined ? { seen } : {}),
                     }).catch(() => false);
                     if (ok)
                         return true;
@@ -923,8 +971,10 @@ async function main() {
                 }
                 catch { }
                 try {
-                    const { reportActivity } = await import("./pending.js");
-                    await reportActivity({ session: `hook:${session}`, state: "busy" });
+                    if (hookCfg) {
+                        const { reportActivity } = await import("./pending.js");
+                        await reportActivity({ cfg: hookCfg, session: `hook:${session}`, state: "busy" });
+                    }
                 }
                 catch { }
                 process.exit(0);
@@ -1139,6 +1189,15 @@ async function main() {
             return;
         }
         case "leave": {
+            if (argv[1] && !argv[1].startsWith("--")) {
+                const all = loadAll() ?? die("not configured");
+                const m = findMembership(all, argv[1]) ?? die(`you are not in a team called "${argv[1]}". Yours: ${Object.values(all.spaces ?? {}).map((x) => x.name).join(", ") || "none"}`);
+                const bound = Object.values(all.bindings ?? {}).filter((b) => b.space === m.id).map((b) => b.origin ?? b.path);
+                removeMembership(m.id);
+                console.error(`${B("left")} "${m.name}" — its token is gone from this machine${bound.length ? `, and ${bound.length} repo binding${bound.length === 1 ? "" : "s"} with it (${bound.join(", ")})` : ""}.`);
+                console.error(D(`Your teammates still list you in "${m.name}". Ask one of them to run:  pantheon admit ${m.name === all.member ? "you" : all.member} --revoke   if you are not coming back.`));
+                return;
+            }
             const cfg = load();
             const project = resolve(flag("project", "."));
             console.error(`${B("leaving pantheon")}\n`);
@@ -1503,7 +1562,7 @@ async function main() {
                 const client = new PantheonClient(cfg, undefined, { role: "cli" });
                 try {
                     await client.connect();
-                    await client.publishProfile(organizationProfile(profile));
+                    await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space));
                 }
                 finally {
                     client.close();
@@ -1544,6 +1603,39 @@ async function main() {
                 if (!surface && !publicChange) {
                     die("usage: pantheon profile set [--surface codex|claude-code|cursor] [--name name] [--title title] [--responsibilities a,b] [--human-required a,b] [--agent-can-decide a,b] [--keywords 'domain=word|word;domain=word']");
                 }
+                if (flag("space")) {
+                    const pf = loadAll() ?? die("not configured");
+                    const m = findMembership(pf, flag("space")) ?? die(`you are not in a team called "${flag("space")}"`);
+                    const key = m.id.startsWith("legacy:") ? m.name : m.id;
+                    const prev = profile.spaces?.[key] ?? profile.spaces?.[m.name] ?? {};
+                    const auth = { ...(prev.authority ?? {}) };
+                    for (const domain of humanRequired ?? [])
+                        auth[domain] = "human_required";
+                    for (const domain of agentCanDecide ?? [])
+                        auth[domain] = "agent_can_decide";
+                    profile = { ...profile, spaces: { ...(profile.spaces ?? {}), [key]: {
+                                ...prev,
+                                ...(responsibilities !== undefined ? { responsibilities } : {}),
+                                ...(humanRequired !== undefined || agentCanDecide !== undefined ? { authority: auth } : {}),
+                                ...(keywords !== undefined ? { decision_keywords: keywordFlag(keywords) } : {}),
+                            } }, updated_at: Date.now() };
+                    saveProfile(profile);
+                    console.error(`${C("saved")} — authority for team "${m.name}" only`);
+                    const tc = configFor(pf, m, null);
+                    const tcl = new PantheonClient(tc, undefined, { role: "cli" });
+                    try {
+                        await tcl.connect();
+                        await tcl.publishProfile(organizationProfile(profile, m.id, m.name));
+                        console.error(`${C("published")} into "${m.name}"`);
+                    }
+                    catch (e) {
+                        console.error(`\x1b[33mnot published\x1b[0m — ${e.message}`);
+                    }
+                    finally {
+                        tcl.close();
+                    }
+                    return;
+                }
                 const authority = { ...profile.authority };
                 for (const domain of humanRequired ?? [])
                     authority[domain] = "human_required";
@@ -1604,7 +1696,7 @@ async function main() {
                 }
                 profile = { ...profile, delegations: [...profile.delegations, { to, domains, starts_at: startsAt, expires_at: expiresAt }], updated_at: Date.now() };
                 saveProfile(profile);
-                await client.publishProfile(organizationProfile(profile)).catch((e) => die(e.message));
+                await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space)).catch((e) => die(e.message));
                 client.close();
                 console.error(`${C("delegated")} — ${domains.join(", ")} routes to ${to} until ${new Date(expiresAt).toISOString()}`);
             }
@@ -1735,6 +1827,50 @@ async function main() {
             return;
         }
         case "approvals": {
+            const sub = argv[1] ?? "list";
+            const id = argv[2];
+            const conns = [];
+            for (const c of targets()) {
+                const cl = new PantheonClient(c, undefined, { role: "cli" });
+                await cl.connect().catch((e) => die(`${c.space}: ${e.message}`));
+                conns.push({ cfg: c, client: cl });
+            }
+            const closeAll = () => { for (const c of conns)
+                c.client.close(); };
+            const all = conns.flatMap(({ cfg, client }) => client.obligations.filter((o) => o.kind === "HUMAN" && o.owner === `human:${cfg.member}`).map((o) => ({ o, cfg, client })));
+            const find = (want) => all.find((x) => x.o.id === want);
+            if (sub === "answer") {
+                if (!id)
+                    die("usage: pantheon approvals answer <obligation-id> <decision>");
+                const hit = find(id) ?? die(`no decision ${id} is waiting on you${conns.length > 1 ? ` in any of your ${conns.length} teams` : ""}`);
+                const answer = argv.slice(3).join(" ").trim() || die("state the decision; it will be written to the audit ledger");
+                const sent = await hit.client.send({ act: "ANSWER", body: answer, goal: null, ref: hit.o.ref, after_seq: hit.client.readSeq });
+                console.log(`${C("answered")} ${id}${conns.length > 1 ? ` in ${B(hit.cfg.space)}` : ""} — ledger act ${sent.id}`);
+                closeAll();
+                return;
+            }
+            if (sub === "show") {
+                if (!id)
+                    die("usage: pantheon approvals show <obligation-id>");
+                const hit = find(id) ?? die(`no decision ${id} is waiting on you`);
+                console.log(`${B("Decision required")}  ${hit.o.id}${conns.length > 1 ? `  ${D("in " + hit.cfg.space)}` : ""}`);
+                console.log(`  ${hit.o.body}`);
+                if (hit.o.goal)
+                    console.log(`  goal  ${hit.client.goals.get(hit.o.goal)?.title ?? hit.o.goal}`);
+                console.log(`\nAnswer: ${C(`pantheon approvals answer ${hit.o.id} 'your decision and rationale'`)}`);
+                closeAll();
+                return;
+            }
+            if (sub !== "list")
+                die("usage: pantheon approvals [list | show <id> | answer <id> <decision>]");
+            if (!all.length)
+                console.log(D(conns.length > 1 ? `no decisions waiting on you in any of your ${conns.length} teams` : "no decisions waiting on you"));
+            for (const { o, cfg, client } of all)
+                console.log(`${C(o.id)}  ${conns.length > 1 ? D(`[${cfg.space}] `) : ""}${client.goals.get(o.goal ?? "")?.title ?? "No goal"}\n  ${o.body}`);
+            closeAll();
+            return;
+        }
+        case "approvals-legacy-unreachable": {
             const cfg = need();
             const sub = argv[1] ?? "list";
             const client = new PantheonClient(cfg, undefined, { role: "cli" });
@@ -1773,6 +1909,41 @@ async function main() {
             return;
         }
         case "worker": {
+            const allCfg = loadAll();
+            const bindings = Object.values(allCfg?.bindings ?? {});
+            if (!flag("project") && bindings.length) {
+                const { WorkerFleet } = await import("./worker-fleet.js");
+                const fleet = new WorkerFleet({
+                    ...(flag("agent-cmd") ? { agentCmd: flag("agent-cmd") } : { agent: flag("agent", "auto") }),
+                    ...(flag("persona") ? { persona: flag("persona") } : {}),
+                    continuations: !argv.includes("--no-continue"),
+                    allowBash: argv.includes("--allow-bash"),
+                    idleMs: numFlag("idle", LIMITS.workerIdleMs / 1000) * 1000,
+                    maxRunsPerHour: numFlag("max-runs", 12),
+                    maxRunsPerDay: numFlag("max-runs-day", 40),
+                    graceMs: numFlag("grace", LIMITS.workerGraceMs / 1000) * 1000,
+                    once: argv.includes("--once"),
+                    ...(argv.includes("--no-notify") ? {} : {
+                        notify: (n) => {
+                            try {
+                                const c = load();
+                                if (c)
+                                    sendDesktopNotification(n.title, n.subtitle, n.body, loadProfile(c), "", n.eyebrow);
+                            }
+                            catch { }
+                        },
+                    }),
+                    log: (l) => console.error(l),
+                });
+                console.error(`${B("pantheon worker")} ${D(`(${bindings.length} bound repo${bindings.length === 1 ? "" : "s"} · ctrl-c to stop)`)}`);
+                if (argv.includes("--allow-bash")) {
+                    console.error(`\x1b[33m  --allow-bash: a woken run may execute commands. Only do this if you trust every\x1b[0m`);
+                    console.error(`\x1b[33m  peer you granted --may-wake, since their request is what starts the run.\x1b[0m`);
+                }
+                process.on("SIGINT", () => { fleet.stop(); process.exit(0); });
+                await fleet.run();
+                return;
+            }
             const cfg = need();
             const project = resolve(flag("project", "."));
             const worker = new Worker(cfg, {
@@ -1833,15 +2004,20 @@ async function main() {
             return;
         }
         case "notifier": {
-            const cfg = need();
-            const notifier = new HumanNotifier(cfg, {
+            const nf = loadAll();
+            const teams = nf ? Object.values(nf.spaces ?? {}).map((m) => configFor(nf, m, null)) : [];
+            const cfgs = teams.length ? teams : [need()];
+            const notifiers = cfgs.map((c) => new HumanNotifier(c, {
                 reminderMs: Math.max(1, numFlag("remind", DEFAULT_REMINDER_MS / 60_000)) * 60_000,
-                log: (line) => console.error(line),
-            });
-            console.error(`${B("pantheon notifier")} ${D("(ctrl-c to stop)")}`);
-            process.on("SIGINT", () => { notifier.stop(); process.exit(0); });
-            process.on("SIGTERM", () => { notifier.stop(); process.exit(0); });
-            await notifier.run();
+                ...(cfgs.length > 1 ? { label: c.space, stateFile: join(CONFIG_DIR, `notifier-state-${encodeURIComponent(c.spaceId ?? c.space)}.json`) } : {}),
+                log: (line) => console.error(cfgs.length > 1 ? `[${c.space}] ${line}` : line),
+            }));
+            console.error(`${B("pantheon notifier")} ${D(`(${cfgs.length === 1 ? "" : cfgs.length + " teams · "}ctrl-c to stop)`)}`);
+            const stopAll = () => { for (const n of notifiers)
+                n.stop(); process.exit(0); };
+            process.on("SIGINT", stopAll);
+            process.on("SIGTERM", stopAll);
+            await Promise.all(notifiers.map((n) => n.run()));
             return;
         }
         case "doctor": {
@@ -1927,6 +2103,78 @@ async function main() {
             console.error(`\n${D("It only acts on requests from peers you granted --may-wake, one run at a time.")}`);
             return;
         }
+        case "spaces": {
+            const all = loadAll() ?? die("not configured. Run `pantheon signup` first.");
+            const spaces = Object.values(all.spaces ?? {});
+            if (!spaces.length) {
+                console.error(D("no teams yet — pantheon start (create one) or pantheon join <invite>"));
+                return;
+            }
+            const here = resolveFor(process.cwd());
+            console.error(`${B("your teams")}  ${D(`(${spaces.length})`)}\n`);
+            for (const m of spaces) {
+                const bound = Object.values(all.bindings ?? {}).filter((b) => b.space === m.id);
+                const tags = [m.id === all.default_space ? C("default") : "", here.cfg?.spaceId === m.id || (here.cfg?.space === m.name && here.reason !== "none") ? C("← here") : ""].filter(Boolean).join("  ");
+                console.error(`  ${B(m.name.padEnd(18))} ${D(new URL(m.relay).host)}  ${tags}`);
+                for (const b of bound)
+                    console.error(`      ${D("repo")}  ${b.origin ?? b.path}${b.origin ? D(`  (${b.path})`) : ""}`);
+                if (!bound.length)
+                    console.error(`      ${D("repo  none bound — run `pantheon use " + m.name + " --here` from its checkout")}`);
+            }
+            const r = repoInfo(process.cwd());
+            console.error(`\n  ${D("this folder:")} ${r ? (r.origin ?? r.root) : D("not a git repo")} ${D("→")} ${here.reason === "binding" ? `"${here.cfg.space}"` : here.reason === "single" ? `"${here.cfg.space}" (your only team)` : here.reason === "default" ? `unbound — humans get the default "${here.cfg.space}"; agents refuse` : here.reason === "stale" ? "bound to a team you have left" : "unbound"}`);
+            return;
+        }
+        case "use": {
+            const all = loadAll() ?? die("not configured. Run `pantheon signup` first.");
+            const ref = argv[1] ?? die("usage: pantheon use <team> [--here]      # --here binds this repo to the team; without it, sets your default");
+            const m = findMembership(all, ref) ?? die(`you are not in a team called "${ref}". Yours: ${Object.values(all.spaces ?? {}).map((x) => x.name).join(", ") || "none"}`);
+            if (argv.includes("--here")) {
+                const r = repoInfo(process.cwd()) ?? die("this folder is not inside a git repo. Run it from the team's checkout.");
+                const { replaced } = bindRepo(r, m.id);
+                console.error(`${B("bound")} ${r.origin ?? r.root} → "${m.name}"${replaced ? D(`  (was: ${findMembership(all, replaced.space)?.name ?? replaced.space})`) : ""}`);
+                if (!r.shared)
+                    console.error(D("  this repo has no origin remote — deliveries from it cannot be fetched by teammates"));
+                const c = resolveFor(process.cwd()).cfg;
+                if (c && c.space === m.name) {
+                    const { repo: _r, repoOrigin: _o, ...plain } = c;
+                    const client = new PantheonClient(plain, undefined, { role: "cli" });
+                    await client.connect().then(() => client.bindRepo(r.fingerprint, r.origin)).catch((e) => console.error(D(`  (could not register the repo with the relay: ${e.message} — run \`pantheon repo add\` when it is reachable)`)));
+                    client.close();
+                }
+                console.error(D(`  Agents opened in this repo now speak as you in "${m.name}". Restart any that are open.`));
+            }
+            else {
+                setDefaultSpace(m.id);
+                console.error(`${B("default")} team is now "${m.name}" — used by your own commands when you run them outside a bound repo.`);
+                console.error(D("  Agents never use the default; bind each repo with:  pantheon use <team> --here"));
+            }
+            return;
+        }
+        case "repo": {
+            const cfg = need();
+            const sub = argv[1] ?? "list";
+            const { repo: _r, repoOrigin: _o, ...plain } = cfg;
+            const client = new PantheonClient(plain, undefined, { role: "cli" });
+            await client.connect().catch((e) => die(client.pending ?? e.message));
+            if (sub === "add") {
+                const r = repoInfo(flag("path") ?? process.cwd()) ?? die("not inside a git repo");
+                await client.bindRepo(r.fingerprint, r.origin).catch((e) => die(e.message));
+                if (cfg.spaceId)
+                    bindRepo(r, cfg.spaceId);
+                console.error(`${B("registered")} ${r.origin ?? r.root} as a repo "${cfg.space}" works from${r.shared ? "" : D("  (no origin remote — deliveries from it cannot be fetched)")}`);
+            }
+            else {
+                await new Promise((res) => setTimeout(res, 150));
+                console.error(`${B(`repos "${cfg.space}" works from`)}  ${D(`(${client.repos.length})`)}`);
+                for (const r of client.repos)
+                    console.error(`  ${(r.origin ?? r.fingerprint).padEnd(48)} ${D(`added by ${r.added_by}`)}`);
+                if (!client.repos.length)
+                    console.error(D("  none yet — the first member to connect from a checkout registers it"));
+            }
+            client.close();
+            return;
+        }
         case "mcp":
             await runMcp();
             return;

package/dist/client.js

@@ -36,6 +36,8 @@ export class PantheonClient {
     session;
     role;
     enrolledToken = null;
+    spaceId = null;
+    repos = [];
     enroll = null;
     inviteUrl = null;
     constructor(cfg, onEvent, opts) {
@@ -115,6 +117,7 @@ export class PantheonClient {
                             agent: this.cfg.agent ?? "unknown",
                             pkg: VERSION,
                             from_seq: this.seq,
+                            ...(this.cfg.repo ? { repo: this.cfg.repo, ...(this.cfg.repoOrigin ? { repo_origin: this.cfg.repoOrigin } : {}) } : {}),
                         }));
                         break;
                     case "pending":
@@ -149,6 +152,12 @@ export class PantheonClient {
                             this.enrolledToken = msg.token;
                             this.cfg.token = msg.token;
                         }
+                        if (msg.space_id) {
+                            this.spaceId = msg.space_id;
+                            this.cfg.spaceId = msg.space_id;
+                        }
+                        this.repos = msg.repos ?? [];
+                        this.adoptKnownRepo();
                         this.backoff = 500;
                         this.roster = msg.roster;
                         this.obligations = msg.obligations;
@@ -161,6 +170,10 @@ export class PantheonClient {
                             resolve();
                         }
                         break;
+                    case "repos":
+                        this.repos = msg.repos;
+                        this.adoptKnownRepo();
+                        break;
                     case "act":
                         if (msg.act.seq > this.seq)
                             this.seq = msg.act.seq;
@@ -308,7 +321,9 @@ export class PantheonClient {
         });
     }
     async send(a) {
-        const r = await this.rpc({ t: "act", ...a });
+        const repo = this.cfg.repo;
+        const meta = a.act === "DELIVERED" && repo && !(a.meta && "repo" in a.meta) ? { ...(a.meta ?? {}), repo } : a.meta;
+        const r = await this.rpc({ t: "act", ...a, ...(meta ? { meta } : {}), ...(repo ? { repo } : {}) });
         if (a.ref) {
             for (const [id, o] of this.claimedByMe)
                 if (o.ref === a.ref)
@@ -350,6 +365,21 @@ export class PantheonClient {
     publishProfile(profile) {
         return this.rpc({ t: "publish_profile", profile });
     }
+    adoptKnownRepo() {
+        const c = this.cfg;
+        if (c.repo || !c.cwdRepo)
+            return;
+        if (!this.repos.some((r) => r.fingerprint === c.cwdRepo))
+            return;
+        c.repo = c.cwdRepo;
+        if (c.cwdRepoOrigin)
+            c.repoOrigin = c.cwdRepoOrigin;
+    }
+    bindRepo(fingerprint = this.cfg.repo, origin = this.cfg.repoOrigin ?? null) {
+        if (!fingerprint)
+            return Promise.reject(new Error("not inside a git repo — run this from the team's checkout"));
+        return this.rpc({ t: "bind_repo", repo: fingerprint, origin });
+    }
     makeInvite(mayWake = true, ttlMinutes = 60) {
         return new Promise((res, rej) => {
             const t = setTimeout(() => rej(new Error("relay did not return an invite in 10s")), 10_000);