@join-pantheon/cli 0.19.1 → 0.21.0

package/dist/cli.js

@@ -9,14 +9,16 @@ process.emitWarning = ((warning, ...rest) => {
 import { randomBytes } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
 import { PantheonClient } from "./client.js";
-import { fromInvite, load, save, toInvite, CONFIG_PATH, DEFAULT_RELAY } from "./config.js";
+import { fromInvite, load, save, toInvite, resolveFor, loadAll, repoInfo, bindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
+import { fmtLimit } from "./plans.js";
 import { validEmail, validUsername } from "./accounts.js";
 import { install, launcher } from "./install.js";
 import { Relay } from "./relay.js";
 import { runMcp } from "./mcp.js";
 import { Worker } from "./worker.js";
 import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, sendDesktopNotification } from "./notifier.js";
-import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile } from "./profile.js";
+import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, wakeDefault } from "./profile.js";
+import { runGuide, terminalIO } from "./setup-guide.js";
 import { doctor, render } from "./doctor.js";
 import { menubarProc, notifierProc, relayProc, workerProc, wiring, logFileFor, dataSummary, stopProc, statFile } from "./machine.js";
 import { assess } from "./untrusted.js";
@@ -219,7 +221,37 @@ function sameHost(a, b) {
     }
 }
 function need() {
-    return load() ?? die("not configured. Run `pantheon signup` then `pantheon start` (create a team), or `pantheon join <invite>` (join one).");
+    const r = resolveFor(process.cwd());
+    if (r.cfg && r.cfg.space)
+        return r.cfg;
+    if (r.reason === "unbound") {
+        const names = Object.values(loadAll()?.spaces ?? {}).map((m) => m.name).join(", ");
+        die(`this folder is not bound to one of your ${r.memberships} teams (${names}).\n  From the team's repo:  pantheon use <team> --here\n  Or pick a default:      pantheon use <team>`);
+    }
+    if (r.reason === "stale")
+        die(`this repo is bound to a team this machine is no longer in (${r.binding?.space}).\n  Rebind it:  pantheon use <team> --here   ·   or rejoin:  pantheon join <invite>`);
+    if (r.cfg && !r.cfg.space)
+        die("signed in, but not on a team yet. Run `pantheon start` (create one) or `pantheon join <invite>` (join one).");
+    return die("not configured. Run `pantheon signup` then `pantheon start` (create a team), or `pantheon join <invite>` (join one).");
+}
+function targets() {
+    const f = loadAll();
+    if (flag("space")) {
+        const m = f && findMembership(f, flag("space"));
+        if (!f || !m)
+            die(`you are not in a team called "${flag("space")}"`);
+        return [configFor(f, m, null)];
+    }
+    const r = resolveFor(process.cwd());
+    if (r.cfg && r.cfg.space && r.reason !== "default")
+        return [r.cfg];
+    if (r.reason === "default" && f)
+        return Object.values(f.spaces ?? {}).map((m) => configFor(f, m, null));
+    return [need()];
+}
+function needStrict() {
+    const r = resolveFor(process.cwd(), { strict: true });
+    return r.cfg && r.cfg.space ? r.cfg : null;
 }
 function printGranted(granted) {
     if (!granted.length)
@@ -236,6 +268,39 @@ function unattendedProject() {
         return { project: resolve(flag("project", ".")), how: "explicit" };
     return { project: resolve("."), how: "default" };
 }
+async function guidedSetup(cfg, project, opts = {}) {
+    if (argv.includes("--no-guide"))
+        return;
+    const interactive = !!process.stdin.isTTY && !argv.includes("--yes");
+    if (!interactive && !opts.force)
+        return;
+    const rl = interactive ? createInterface({ input: process.stdin, output: process.stderr }) : null;
+    const io = rl ? terminalIO(rl, (l) => console.error(l)) : null;
+    console.error(`\n${B("A few choices, then you're done.")}${io ? "" : D("  (no terminal — taking the defaults)")}`);
+    try {
+        const r = await runGuide(io, { cfg, project }, {
+            publish: async (p) => {
+                const c = new PantheonClient(cfg, undefined, { role: "cli" });
+                try {
+                    await c.connect();
+                    await c.publishProfile(organizationProfile(p, cfg.spaceId, cfg.space));
+                }
+                finally {
+                    c.close();
+                }
+            },
+        });
+        console.error("");
+        for (const l of r.applied)
+            console.error(`  ${C("✓")} ${l}`);
+        for (const w of r.warnings)
+            console.error(`\x1b[33m  ! ${w}\x1b[0m`);
+        console.error(D(`\n  Change any of this later: pantheon setup`));
+    }
+    finally {
+        rl?.close();
+    }
+}
 function printReady(tools) {
     const workerOn = tools.some((t) => t.tool === "worker" && t.status.startsWith("on"));
     console.error(`\n${B("You're set.")} Restart your agent once (quit and reopen) and it is connected.`);
@@ -283,6 +348,15 @@ ${B("getting going — then two commands, run from your project's repo")}
   --no-worker, --no-hook, --no-notifications, --no-menubar.
   Already a member, new machine or fresh pull?  pantheon install --user  does the same.
 
+${B("several teams on one machine")}
+  pantheon spaces             your teams, which repo is bound to which, and where this folder points
+  pantheon use <team> --here  bind this repo to a team (agents opened here speak in it)
+  pantheon repo add | list    the repos a team works from; a delivery must come from one of them
+                              (repo add --base <branch>: the branch workers cut from, else origin's default)
+  pantheon leave <team>       drop one team from this machine (its token and repo bindings)
+  pantheon space delete <team> --yes   dissolve a team you founded: disconnects everyone, frees a plan slot
+  pantheon profile set --space <team> …   authority that applies in one team only (e.g. --human-required pricing)
+
 ${B("day to day")}
   pantheon status             who is here, what is being worked on, what needs you
   pantheon brief              what needs you, and what your agent already handled
@@ -313,6 +387,8 @@ ${B("control")}
   pantheon leave              remove what pantheon put on this machine
   pantheon panic              cut off all unattended work on this machine, now
   pantheon doctor             check this machine end to end
+  pantheon setup              the guided choices: who may wake this machine, what a run may execute,
+                              what you personally decide, which alerts you want — re-run any time
   pantheon upgrade            pull the latest pantheon, rebuild, and re-wire your agents
 
 ${D("more: pantheon help --all")}
@@ -391,6 +467,8 @@ async function main() {
                 console.error(D(`  ${r.reach.hint}`));
             }
             printReady(r.tools);
+            if (r.claimed)
+                await guidedSetup(load() ?? r.cfg, repoInfo(process.cwd())?.root ?? null);
             if (r.relay) {
                 console.error(D(`\nKeeping the relay running here. Ctrl-C stops it (your teammate goes offline too).`));
                 await new Promise(() => { });
@@ -403,7 +481,8 @@ async function main() {
             await client.connect().catch((e) => die(client.pending ?? e.message));
             await new Promise((r) => setTimeout(r, 250));
             const ttl = Number(flag("ttl", "1440"));
-            const inv = await client.makeInvite(!argv.includes("--no-wake"), ttl).catch((e) => die(e.message));
+            const mayWake = argv.includes("--may-wake") ? true : argv.includes("--no-wake") ? false : wakeDefault(loadProfile(cfg));
+            const inv = await client.makeInvite(mayWake, ttl).catch((e) => die(e.message));
             console.log(`pantheon join ${toInvite({ ...cfg, token: inv.url })}`);
             console.error(D(`\nSingle use, expires ${new Date(inv.expires_at).toLocaleString()}.`));
             client.close();
@@ -521,6 +600,11 @@ async function main() {
                 console.error(`\x1b[33m  ! ${w}\x1b[0m`);
             printGranted(r.granted);
             printReady(r.tools);
+            {
+                const joined = load();
+                if (joined)
+                    await guidedSetup(joined, repoInfo(process.cwd())?.root ?? null);
+            }
             console.error(`\n${D('Then ask your agent: "check pantheon_status and say hello to the team".')}`);
             return;
         }
@@ -581,91 +665,106 @@ async function main() {
             }
             return;
         }
+        case "setup": {
+            const cfg = need();
+            await guidedSetup(cfg, repoInfo(process.cwd())?.root ?? null, { force: true });
+            return;
+        }
         case "version": {
             console.log(VERSION);
             return;
         }
         case "status": {
-            const cfg = need();
-            const client = new PantheonClient(cfg, undefined, { role: "cli" });
-            await client.connect().catch((e) => {
-                if (client.pending) {
-                    console.error(`${B("not admitted yet")}  (${C(cfg.member)}, fingerprint ${C(fingerprint(cfg.publicKey))})\n`);
-                    console.error(client.pending);
-                    process.exit(2);
+            const showStatus = async (cfg) => {
+                const client = new PantheonClient(cfg, undefined, { role: "cli" });
+                await client.connect().catch((e) => {
+                    if (client.pending) {
+                        console.error(`${B("not admitted yet")}  (${C(cfg.member)}, fingerprint ${C(fingerprint(cfg.publicKey))})\n`);
+                        console.error(client.pending);
+                        process.exit(2);
+                    }
+                    die(`cannot reach relay at ${cfg.relay} — ${e.message}`);
+                });
+                await new Promise((r) => setTimeout(r, 350));
+                const peers = client.roster.filter((m) => m.id !== cfg.member);
+                console.log(`${B(cfg.space)}  you are ${C(cfg.member)}  ${D(cfg.relay)}  ${D(`${client.head} acts`)}\n`);
+                if (client.plan)
+                    console.log(D(`  ${client.plan.name} plan · ${client.plan.usage.spaces} of ${fmtLimit(client.plan.limits.spaces)} spaces created · ${client.plan.usage.members} of ${fmtLimit(client.plan.limits.members)} people here${client.plan.limits.wake ? "" : " · no unattended workers"}`) + "\n");
+                console.log(B("members"));
+                if (!peers.length)
+                    console.log(`  ${D("(nobody else yet — send them an invite from `pantheon invite`)")}`);
+                for (const p of peers) {
+                    const behind = p.seen_seq === undefined ? null : client.head - p.seen_seq;
+                    const reach = behind === null
+                        ? D(p.delivered_seq !== undefined && p.delivered_seq >= client.head
+                            ? "delivered, but no read-receipt — no wake-up hook on their machine"
+                            : "no wake-up hook on their machine — nothing surfaces until their human types")
+                        : behind > 0
+                            ? `\x1b[33mtheir agent has not seen your last ${behind} act${behind === 1 ? "" : "s"}\x1b[0m`
+                            : D("their agent is caught up");
+                    console.log(`  ${p.online ? C("●") : D("○")} ${p.id.padEnd(14)} ${D(p.agent.padEnd(12))} ${reach}`);
                 }
-                die(`cannot reach relay at ${cfg.relay} — ${e.message}`);
-            });
-            await new Promise((r) => setTimeout(r, 350));
-            const peers = client.roster.filter((m) => m.id !== cfg.member);
-            console.log(`${B(cfg.space)}  you are ${C(cfg.member)}  ${D(cfg.relay)}  ${D(`${client.head} acts`)}\n`);
-            console.log(B("members"));
-            if (!peers.length)
-                console.log(`  ${D("(nobody else yet — send them an invite from `pantheon invite`)")}`);
-            for (const p of peers) {
-                const behind = p.seen_seq === undefined ? null : client.head - p.seen_seq;
-                const reach = behind === null
-                    ? D(p.delivered_seq !== undefined && p.delivered_seq >= client.head
-                        ? "delivered, but no read-receipt — no wake-up hook on their machine"
-                        : "no wake-up hook on their machine — nothing surfaces until their human types")
-                    : behind > 0
-                        ? `\x1b[33mtheir agent has not seen your last ${behind} act${behind === 1 ? "" : "s"}\x1b[0m`
-                        : D("their agent is caught up");
-                console.log(`  ${p.online ? C("●") : D("○")} ${p.id.padEnd(14)} ${D(p.agent.padEnd(12))} ${reach}`);
-            }
-            const goals = [...client.goals.values()];
-            console.log(`\n${B("goals")}`);
-            if (!goals.length)
-                console.log(`  ${D("(none)")}`);
-            for (const g of goals) {
-                console.log(`  ${g.state.padEnd(8)} ${String(g.acts).padStart(3)}/${g.budget}  ${g.title}  ${D(g.id)}`);
-            }
-            const owed = client.obligations;
-            const ageOf = (t) => {
-                const m = Math.round((Date.now() - t) / 60000);
-                return m < 60 ? `${m}m` : `${Math.round(m / 60)}h`;
+                const goals = [...client.goals.values()];
+                console.log(`\n${B("goals")}`);
+                if (!goals.length)
+                    console.log(`  ${D("(none)")}`);
+                for (const g of goals) {
+                    console.log(`  ${g.state.padEnd(8)} ${String(g.acts).padStart(3)}/${g.budget}  ${g.title}  ${D(g.id)}`);
+                }
+                const owed = client.obligations;
+                const ageOf = (t) => {
+                    const m = Math.round((Date.now() - t) / 60000);
+                    return m < 60 ? `${m}m` : `${Math.round(m / 60)}h`;
+                };
+                const human = owed.filter((o) => o.kind === "HUMAN");
+                const between = owed.filter((o) => o.kind !== "HUMAN");
+                console.log(`\n${B("needs a human")}`);
+                if (!human.length)
+                    console.log(`  ${D("(nothing waiting on you)")}`);
+                for (const o of human) {
+                    const who = o.owner.replace(/^human:/, "");
+                    const stale = Date.now() - o.created_at > 3_600_000;
+                    console.log(`  ${stale ? "\x1b[33m" : C("")}${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)}\x1b[0m ${o.body}`);
+                    if (who === cfg.member)
+                        console.log(`         ${D("your peer was told this decision was coming — answer it or say it is dropped")}`);
+                }
+                console.log(`\n${B("between delegates")}`);
+                if (!between.length)
+                    console.log(`  ${D("(nothing owed)")}`);
+                for (const o of between) {
+                    console.log(`  ${o.kind.padEnd(7)} ${o.owner.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${o.body}`);
+                }
+                client.close();
             };
-            const human = owed.filter((o) => o.kind === "HUMAN");
-            const between = owed.filter((o) => o.kind !== "HUMAN");
-            console.log(`\n${B("needs a human")}`);
-            if (!human.length)
-                console.log(`  ${D("(nothing waiting on you)")}`);
-            for (const o of human) {
-                const who = o.owner.replace(/^human:/, "");
-                const stale = Date.now() - o.created_at > 3_600_000;
-                console.log(`  ${stale ? "\x1b[33m" : C("")}${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)}\x1b[0m ${o.body}`);
-                if (who === cfg.member)
-                    console.log(`         ${D("your peer was told this decision was coming — answer it or say it is dropped")}`);
-            }
-            console.log(`\n${B("between delegates")}`);
-            if (!between.length)
-                console.log(`  ${D("(nothing owed)")}`);
-            for (const o of between) {
-                console.log(`  ${o.kind.padEnd(7)} ${o.owner.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${o.body}`);
+            const ts = targets();
+            for (const [i, c] of ts.entries()) {
+                if (ts.length > 1)
+                    console.log(`${i ? "\n" : ""}${D("━━━ team")} ${B(c.space)} ${D(`(${i + 1} of ${ts.length}) ━━━`)}`);
+                await showStatus(c);
             }
-            client.close();
             return;
         }
         case "brief": {
-            const cfg = need();
-            const profile = loadProfile(cfg);
-            const client = new PantheonClient(cfg, undefined, { role: "cli" });
-            await client.connect().catch((e) => die(client.pending ?? e.message));
-            await new Promise((r) => setTimeout(r, 350));
-            process.stdout.write(renderBrief({
-                space: cfg.space,
-                person: {
-                    member: cfg.member,
-                    display_name: profile.human.display_name,
-                    title: profile.human.title,
-                    responsibilities: profile.human.responsibilities,
-                },
-                owed: client.myObligations().map((o) => ({
-                    id: o.id, kind: o.kind, body: o.body, created_at: o.created_at,
-                })),
-                recentRuns: recentRuns(86_400_000),
-            }));
-            client.close();
+            for (const cfg of targets()) {
+                const profile = loadProfile(cfg);
+                const client = new PantheonClient(cfg, undefined, { role: "cli" });
+                await client.connect().catch((e) => die(client.pending ?? e.message));
+                await new Promise((r) => setTimeout(r, 350));
+                process.stdout.write(renderBrief({
+                    space: cfg.space,
+                    person: {
+                        member: cfg.member,
+                        display_name: profile.human.display_name,
+                        title: profile.human.title,
+                        responsibilities: profile.human.responsibilities,
+                    },
+                    owed: client.myObligations().map((o) => ({
+                        id: o.id, kind: o.kind, body: o.body, created_at: o.created_at,
+                    })),
+                    recentRuns: recentRuns(86_400_000),
+                }));
+                client.close();
+            }
             return;
         }
         case "team": {
@@ -899,11 +998,14 @@ async function main() {
         }
         case "hook": {
             const sub = argv[1] ?? "status";
+            const hookCfg = resolveForHook();
             const reportIdle = async (session, seen) => {
+                if (!hookCfg)
+                    return true;
                 const { reportActivity } = await import("./pending.js");
                 for (let attempt = 0; attempt < 2; attempt++) {
                     const ok = await reportActivity({
-                        session: `hook:${session}`, state: "idle", ...(seen !== undefined ? { seen } : {}),
+                        cfg: hookCfg, session: `hook:${session}`, state: "idle", ...(seen !== undefined ? { seen } : {}),
                     }).catch(() => false);
                     if (ok)
                         return true;
@@ -923,8 +1025,10 @@ async function main() {
                 }
                 catch { }
                 try {
-                    const { reportActivity } = await import("./pending.js");
-                    await reportActivity({ session: `hook:${session}`, state: "busy" });
+                    if (hookCfg) {
+                        const { reportActivity } = await import("./pending.js");
+                        await reportActivity({ cfg: hookCfg, session: `hook:${session}`, state: "busy" });
+                    }
                 }
                 catch { }
                 process.exit(0);
@@ -997,7 +1101,7 @@ async function main() {
                     const { pending: pendingFn } = await import("./pending.js");
                     const { load: loadCfg } = await import("./config.js");
                     const d = await decideStop(JSON.stringify({ session_id: session }), {
-                        pending: async (s) => pendingFn({ session: s }),
+                        pending: async (s) => (hookCfg ? pendingFn({ session: s, cfg: hookCfg }) : Promise.resolve(null)),
                         ...(loadCfg()?.member ? { me: loadCfg().member } : {}),
                     });
                     if (d.exit === 2 && d.message) {
@@ -1030,7 +1134,7 @@ async function main() {
                     const { pending: pendingFn } = await import("./pending.js");
                     const { load: loadCfg } = await import("./config.js");
                     const d = await decideStop(raw, {
-                        pending: async (session) => pendingFn({ session }),
+                        pending: async (session) => (hookCfg ? pendingFn({ session, cfg: hookCfg }) : Promise.resolve(null)),
                         ...(loadCfg()?.member ? { me: loadCfg().member } : {}),
                     });
                     if (d.exit === 2 && d.message) {
@@ -1068,7 +1172,9 @@ async function main() {
                     let surfaced;
                     const d = await decideStop(raw, {
                         pending: async (session) => {
-                            const r = await pendingFn({ session });
+                            if (!hookCfg)
+                                return null;
+                            const r = await pendingFn({ session, cfg: hookCfg });
                             if (r)
                                 surfaced = r.seq;
                             return r;
@@ -1138,7 +1244,34 @@ async function main() {
             }
             return;
         }
+        case "space": {
+            const sub = argv[1];
+            const name = argv[2];
+            if (sub !== "delete" || !name || name.startsWith("--"))
+                die("usage: pantheon space delete <team> --yes");
+            const all = loadAll() ?? die("not configured");
+            const m = findMembership(all, name) ?? die(`you are not in a team called "${name}". Yours: ${Object.values(all.spaces ?? {}).map((x) => x.name).join(", ") || "none"}`);
+            if (!argv.includes("--yes"))
+                die(`this deletes "${m.name}" for everyone in it — its history, goals and invites — and cannot be undone.\n  If you mean it:  pantheon space delete ${m.name} --yes`);
+            const client = new PantheonClient(configFor(all, m, null), undefined, { role: "cli" });
+            await client.connect().catch((e) => die(client.pending ?? e.message));
+            await client.deleteSpace(m.name).catch((e) => { client.close(); die(e.message); });
+            client.close();
+            const bound = Object.values(all.bindings ?? {}).filter((b) => b.space === m.id).length;
+            removeMembership(m.id);
+            console.error(`${B("deleted")} "${m.name}" — everyone in it was disconnected; its token${bound ? ` and ${bound} repo binding${bound === 1 ? "" : "s"}` : ""} left this machine`);
+            return;
+        }
         case "leave": {
+            if (argv[1] && !argv[1].startsWith("--")) {
+                const all = loadAll() ?? die("not configured");
+                const m = findMembership(all, argv[1]) ?? die(`you are not in a team called "${argv[1]}". Yours: ${Object.values(all.spaces ?? {}).map((x) => x.name).join(", ") || "none"}`);
+                const bound = Object.values(all.bindings ?? {}).filter((b) => b.space === m.id).map((b) => b.origin ?? b.path);
+                removeMembership(m.id);
+                console.error(`${B("left")} "${m.name}" — its token is gone from this machine${bound.length ? `, and ${bound.length} repo binding${bound.length === 1 ? "" : "s"} with it (${bound.join(", ")})` : ""}.`);
+                console.error(D(`Your teammates still list you in "${m.name}". Ask one of them to run:  pantheon admit ${m.name === all.member ? "you" : all.member} --revoke   if you are not coming back.`));
+                return;
+            }
             const cfg = load();
             const project = resolve(flag("project", "."));
             console.error(`${B("leaving pantheon")}\n`);
@@ -1503,7 +1636,7 @@ async function main() {
                 const client = new PantheonClient(cfg, undefined, { role: "cli" });
                 try {
                     await client.connect();
-                    await client.publishProfile(organizationProfile(profile));
+                    await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space));
                 }
                 finally {
                     client.close();
@@ -1544,6 +1677,39 @@ async function main() {
                 if (!surface && !publicChange) {
                     die("usage: pantheon profile set [--surface codex|claude-code|cursor] [--name name] [--title title] [--responsibilities a,b] [--human-required a,b] [--agent-can-decide a,b] [--keywords 'domain=word|word;domain=word']");
                 }
+                if (flag("space")) {
+                    const pf = loadAll() ?? die("not configured");
+                    const m = findMembership(pf, flag("space")) ?? die(`you are not in a team called "${flag("space")}"`);
+                    const key = m.id.startsWith("legacy:") ? m.name : m.id;
+                    const prev = profile.spaces?.[key] ?? profile.spaces?.[m.name] ?? {};
+                    const auth = { ...(prev.authority ?? {}) };
+                    for (const domain of humanRequired ?? [])
+                        auth[domain] = "human_required";
+                    for (const domain of agentCanDecide ?? [])
+                        auth[domain] = "agent_can_decide";
+                    profile = { ...profile, spaces: { ...(profile.spaces ?? {}), [key]: {
+                                ...prev,
+                                ...(responsibilities !== undefined ? { responsibilities } : {}),
+                                ...(humanRequired !== undefined || agentCanDecide !== undefined ? { authority: auth } : {}),
+                                ...(keywords !== undefined ? { decision_keywords: keywordFlag(keywords) } : {}),
+                            } }, updated_at: Date.now() };
+                    saveProfile(profile);
+                    console.error(`${C("saved")} — authority for team "${m.name}" only`);
+                    const tc = configFor(pf, m, null);
+                    const tcl = new PantheonClient(tc, undefined, { role: "cli" });
+                    try {
+                        await tcl.connect();
+                        await tcl.publishProfile(organizationProfile(profile, m.id, m.name));
+                        console.error(`${C("published")} into "${m.name}"`);
+                    }
+                    catch (e) {
+                        console.error(`\x1b[33mnot published\x1b[0m — ${e.message}`);
+                    }
+                    finally {
+                        tcl.close();
+                    }
+                    return;
+                }
                 const authority = { ...profile.authority };
                 for (const domain of humanRequired ?? [])
                     authority[domain] = "human_required";
@@ -1604,7 +1770,7 @@ async function main() {
                 }
                 profile = { ...profile, delegations: [...profile.delegations, { to, domains, starts_at: startsAt, expires_at: expiresAt }], updated_at: Date.now() };
                 saveProfile(profile);
-                await client.publishProfile(organizationProfile(profile)).catch((e) => die(e.message));
+                await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space)).catch((e) => die(e.message));
                 client.close();
                 console.error(`${C("delegated")} — ${domains.join(", ")} routes to ${to} until ${new Date(expiresAt).toISOString()}`);
             }
@@ -1735,6 +1901,50 @@ async function main() {
             return;
         }
         case "approvals": {
+            const sub = argv[1] ?? "list";
+            const id = argv[2];
+            const conns = [];
+            for (const c of targets()) {
+                const cl = new PantheonClient(c, undefined, { role: "cli" });
+                await cl.connect().catch((e) => die(`${c.space}: ${e.message}`));
+                conns.push({ cfg: c, client: cl });
+            }
+            const closeAll = () => { for (const c of conns)
+                c.client.close(); };
+            const all = conns.flatMap(({ cfg, client }) => client.obligations.filter((o) => o.kind === "HUMAN" && o.owner === `human:${cfg.member}`).map((o) => ({ o, cfg, client })));
+            const find = (want) => all.find((x) => x.o.id === want);
+            if (sub === "answer") {
+                if (!id)
+                    die("usage: pantheon approvals answer <obligation-id> <decision>");
+                const hit = find(id) ?? die(`no decision ${id} is waiting on you${conns.length > 1 ? ` in any of your ${conns.length} teams` : ""}`);
+                const answer = argv.slice(3).join(" ").trim() || die("state the decision; it will be written to the audit ledger");
+                const sent = await hit.client.send({ act: "ANSWER", body: answer, goal: null, ref: hit.o.ref, after_seq: hit.client.readSeq });
+                console.log(`${C("answered")} ${id}${conns.length > 1 ? ` in ${B(hit.cfg.space)}` : ""} — ledger act ${sent.id}`);
+                closeAll();
+                return;
+            }
+            if (sub === "show") {
+                if (!id)
+                    die("usage: pantheon approvals show <obligation-id>");
+                const hit = find(id) ?? die(`no decision ${id} is waiting on you`);
+                console.log(`${B("Decision required")}  ${hit.o.id}${conns.length > 1 ? `  ${D("in " + hit.cfg.space)}` : ""}`);
+                console.log(`  ${hit.o.body}`);
+                if (hit.o.goal)
+                    console.log(`  goal  ${hit.client.goals.get(hit.o.goal)?.title ?? hit.o.goal}`);
+                console.log(`\nAnswer: ${C(`pantheon approvals answer ${hit.o.id} 'your decision and rationale'`)}`);
+                closeAll();
+                return;
+            }
+            if (sub !== "list")
+                die("usage: pantheon approvals [list | show <id> | answer <id> <decision>]");
+            if (!all.length)
+                console.log(D(conns.length > 1 ? `no decisions waiting on you in any of your ${conns.length} teams` : "no decisions waiting on you"));
+            for (const { o, cfg, client } of all)
+                console.log(`${C(o.id)}  ${conns.length > 1 ? D(`[${cfg.space}] `) : ""}${client.goals.get(o.goal ?? "")?.title ?? "No goal"}\n  ${o.body}`);
+            closeAll();
+            return;
+        }
+        case "approvals-legacy-unreachable": {
             const cfg = need();
             const sub = argv[1] ?? "list";
             const client = new PantheonClient(cfg, undefined, { role: "cli" });
@@ -1773,6 +1983,41 @@ async function main() {
             return;
         }
         case "worker": {
+            const allCfg = loadAll();
+            const bindings = Object.values(allCfg?.bindings ?? {});
+            if (!flag("project") && bindings.length) {
+                const { WorkerFleet } = await import("./worker-fleet.js");
+                const fleet = new WorkerFleet({
+                    ...(flag("agent-cmd") ? { agentCmd: flag("agent-cmd") } : { agent: flag("agent", "auto") }),
+                    ...(flag("persona") ? { persona: flag("persona") } : {}),
+                    continuations: !argv.includes("--no-continue"),
+                    allowBash: argv.includes("--allow-bash"),
+                    idleMs: numFlag("idle", LIMITS.workerIdleMs / 1000) * 1000,
+                    maxRunsPerHour: numFlag("max-runs", 12),
+                    maxRunsPerDay: numFlag("max-runs-day", 40),
+                    graceMs: numFlag("grace", LIMITS.workerGraceMs / 1000) * 1000,
+                    once: argv.includes("--once"),
+                    ...(argv.includes("--no-notify") ? {} : {
+                        notify: (n) => {
+                            try {
+                                const c = load();
+                                if (c)
+                                    sendDesktopNotification(n.title, n.subtitle, n.body, loadProfile(c), "", n.eyebrow);
+                            }
+                            catch { }
+                        },
+                    }),
+                    log: (l) => console.error(l),
+                });
+                console.error(`${B("pantheon worker")} ${D(`(${bindings.length} bound repo${bindings.length === 1 ? "" : "s"} · ctrl-c to stop)`)}`);
+                if (argv.includes("--allow-bash")) {
+                    console.error(`\x1b[33m  --allow-bash: a woken run may execute commands. Only do this if you trust every\x1b[0m`);
+                    console.error(`\x1b[33m  peer you granted --may-wake, since their request is what starts the run.\x1b[0m`);
+                }
+                process.on("SIGINT", () => { fleet.stop(); process.exit(0); });
+                await fleet.run();
+                return;
+            }
             const cfg = need();
             const project = resolve(flag("project", "."));
             const worker = new Worker(cfg, {
@@ -1833,15 +2078,20 @@ async function main() {
             return;
         }
         case "notifier": {
-            const cfg = need();
-            const notifier = new HumanNotifier(cfg, {
+            const nf = loadAll();
+            const teams = nf ? Object.values(nf.spaces ?? {}).map((m) => configFor(nf, m, null)) : [];
+            const cfgs = teams.length ? teams : [need()];
+            const notifiers = cfgs.map((c) => new HumanNotifier(c, {
                 reminderMs: Math.max(1, numFlag("remind", DEFAULT_REMINDER_MS / 60_000)) * 60_000,
-                log: (line) => console.error(line),
-            });
-            console.error(`${B("pantheon notifier")} ${D("(ctrl-c to stop)")}`);
-            process.on("SIGINT", () => { notifier.stop(); process.exit(0); });
-            process.on("SIGTERM", () => { notifier.stop(); process.exit(0); });
-            await notifier.run();
+                ...(cfgs.length > 1 ? { label: c.space, stateFile: join(CONFIG_DIR, `notifier-state-${encodeURIComponent(c.spaceId ?? c.space)}.json`) } : {}),
+                log: (line) => console.error(cfgs.length > 1 ? `[${c.space}] ${line}` : line),
+            }));
+            console.error(`${B("pantheon notifier")} ${D(`(${cfgs.length === 1 ? "" : cfgs.length + " teams · "}ctrl-c to stop)`)}`);
+            const stopAll = () => { for (const n of notifiers)
+                n.stop(); process.exit(0); };
+            process.on("SIGINT", stopAll);
+            process.on("SIGTERM", stopAll);
+            await Promise.all(notifiers.map((n) => n.run()));
             return;
         }
         case "doctor": {
@@ -1927,6 +2177,79 @@ async function main() {
             console.error(`\n${D("It only acts on requests from peers you granted --may-wake, one run at a time.")}`);
             return;
         }
+        case "spaces": {
+            const all = loadAll() ?? die("not configured. Run `pantheon signup` first.");
+            const spaces = Object.values(all.spaces ?? {});
+            if (!spaces.length) {
+                console.error(D("no teams yet — pantheon start (create one) or pantheon join <invite>"));
+                return;
+            }
+            const here = resolveFor(process.cwd());
+            console.error(`${B("your teams")}  ${D(`(${spaces.length})`)}\n`);
+            for (const m of spaces) {
+                const bound = Object.values(all.bindings ?? {}).filter((b) => b.space === m.id);
+                const tags = [m.id === all.default_space ? C("default") : "", here.cfg?.spaceId === m.id || (here.cfg?.space === m.name && here.reason !== "none") ? C("← here") : ""].filter(Boolean).join("  ");
+                console.error(`  ${B(m.name.padEnd(18))} ${D(new URL(m.relay).host)}  ${tags}`);
+                for (const b of bound)
+                    console.error(`      ${D("repo")}  ${b.origin ?? b.path}${b.origin ? D(`  (${b.path})`) : ""}`);
+                if (!bound.length)
+                    console.error(`      ${D("repo  none bound — run `pantheon use " + m.name + " --here` from its checkout")}`);
+            }
+            const r = repoInfo(process.cwd());
+            console.error(`\n  ${D("this folder:")} ${r ? (r.origin ?? r.root) : D("not a git repo")} ${D("→")} ${here.reason === "binding" ? `"${here.cfg.space}"` : here.reason === "single" ? `"${here.cfg.space}" (your only team)` : here.reason === "default" ? `unbound — humans get the default "${here.cfg.space}"; agents refuse` : here.reason === "stale" ? "bound to a team you have left" : "unbound"}`);
+            return;
+        }
+        case "use": {
+            const all = loadAll() ?? die("not configured. Run `pantheon signup` first.");
+            const ref = argv[1] ?? die("usage: pantheon use <team> [--here]      # --here binds this repo to the team; without it, sets your default");
+            const m = findMembership(all, ref) ?? die(`you are not in a team called "${ref}". Yours: ${Object.values(all.spaces ?? {}).map((x) => x.name).join(", ") || "none"}`);
+            if (argv.includes("--here")) {
+                const r = repoInfo(process.cwd()) ?? die("this folder is not inside a git repo. Run it from the team's checkout.");
+                const { replaced } = bindRepo(r, m.id);
+                console.error(`${B("bound")} ${r.origin ?? r.root} → "${m.name}"${replaced ? D(`  (was: ${findMembership(all, replaced.space)?.name ?? replaced.space})`) : ""}`);
+                if (!r.shared)
+                    console.error(D("  this repo has no origin remote — deliveries from it cannot be fetched by teammates"));
+                const c = resolveFor(process.cwd()).cfg;
+                if (c && c.space === m.name) {
+                    const { repo: _r, repoOrigin: _o, ...plain } = c;
+                    const client = new PantheonClient(plain, undefined, { role: "cli" });
+                    await client.connect().then(() => client.bindRepo(r.fingerprint, r.origin)).catch((e) => console.error(D(`  (could not register the repo with the relay: ${e.message} — run \`pantheon repo add\` when it is reachable)`)));
+                    client.close();
+                }
+                console.error(D(`  Agents opened in this repo now speak as you in "${m.name}". Restart any that are open.`));
+            }
+            else {
+                setDefaultSpace(m.id);
+                console.error(`${B("default")} team is now "${m.name}" — used by your own commands when you run them outside a bound repo.`);
+                console.error(D("  Agents never use the default; bind each repo with:  pantheon use <team> --here"));
+            }
+            return;
+        }
+        case "repo": {
+            const cfg = need();
+            const sub = argv[1] ?? "list";
+            const { repo: _r, repoOrigin: _o, ...plain } = cfg;
+            const client = new PantheonClient(plain, undefined, { role: "cli" });
+            await client.connect().catch((e) => die(client.pending ?? e.message));
+            if (sub === "add") {
+                const r = repoInfo(flag("path") ?? process.cwd()) ?? die("not inside a git repo");
+                const base = flag("base") ?? null;
+                await client.bindRepo(r.fingerprint, r.origin, base).catch((e) => die(e.message));
+                if (cfg.spaceId)
+                    bindRepo(r, cfg.spaceId);
+                console.error(`${B("registered")} ${r.origin ?? r.root} as a repo "${cfg.space}" works from${base ? ` — workers cut from ${C(base)}` : ""}${r.shared ? "" : D("  (no origin remote — deliveries from it cannot be fetched)")}`);
+            }
+            else {
+                await new Promise((res) => setTimeout(res, 150));
+                console.error(`${B(`repos "${cfg.space}" works from`)}  ${D(`(${client.repos.length})`)}`);
+                for (const r of client.repos)
+                    console.error(`  ${(r.origin ?? r.fingerprint).padEnd(48)} ${D(`added by ${r.added_by}`)}${r.base ? `  ${D("base")} ${C(r.base)}` : ""}`);
+                if (!client.repos.length)
+                    console.error(D("  none yet — the first member to connect from a checkout registers it"));
+            }
+            client.close();
+            return;
+        }
         case "mcp":
             await runMcp();
             return;