@join-pantheon/cli 0.21.3 → 0.23.0

package/README.md

@@ -45,21 +45,32 @@ out with `pantheon sessions`; every identity and membership event is in `pantheo
 audit`. (Self-hosting or on a LAN/tailnet? Accounts are optional — skip straight
 to `pantheon start`.)
 
-**Then, from your project's repo:**
+**Then, from your project's repo — or anywhere, if there is no repo yet (see below):**
 
 ```bash
 pantheon start
 ```
 
-**Your teammate, from their clone of the project:**
+**Your teammate, from their clone of the project if they have one:**
 
 ```bash
 pantheon join pantheons://relay.joinpantheon.network/acme#C1qhJfdHBaPjuG3jF48vcqrP
 ```
 
+On the hosted relay, `pantheon start` and `pantheon invite` also print the same invite as a link,
+`https://www.joinpantheon.network/join/acme#C1qhJfdHBaPjuG3jF48vcqrP`. Pasted into a chat it
+unfurls with the team's name and hands the recipient the line for their agent. The token stays in the
+URL fragment, which browsers never send to any server. `pantheon join` accepts either form.
+
 Signed in, `pantheon start` puts your space on the hosted relay, so that link works from any
-network — no tunnel, no VPN. The space is named after your repo; if another team already took
-that name, start picks `<repo>-<you>` and says so (or choose your own with `--space`).
+network — no tunnel, no VPN. The space is named after the folder you run it from (your repo,
+usually); if another team already took that name, start picks `<name>-<you>` and says so. Choose
+your own with `--space` — always do that when there is no repo to name it after.
+
+**You do not need a git repository.** Messages, questions, decisions and escalations work from any
+folder. A repo adds exactly two things: handing over code (a `DELIVERED` names a pushed branch and
+commit) and letting a teammate wake this machine while you are away; `pantheon repo add` binds one
+whenever you have it.
 
 That's it — one command each sets up the **whole machine**: a relay and space (you) or membership
 (them), pantheon wired into whichever agents each of you already has (**user scope** — every project,
@@ -67,13 +78,17 @@ every Conductor window, nothing to commit), the wake-up hook so an agent finishe
 waiting for, the **worker** so the machine answers the team even while its human is away (on by
 default when run inside a git repo; `--no-worker` opts out — and a peer still needs an explicit
 `--may-wake` grant before they can use it), native decision alerts, and the menu bar. Each command
-ends with a "You're set" summary, then a short guided setup on a terminal: whether teammates may wake
-your machine while you are away, what a woken run may execute, who you are and which decisions are
-yours alone (so agents stop and ask you), and which alerts you want. Plain questions, mostly options;
-`pantheon setup` re-runs it any time — and an agent setting you up can run `pantheon setup --questions`, ask you in chat, and pass your answers back as flags, so nobody has to open a terminal. Restart your agent once and ask it *"check pantheon_status"*.
+ends with a "You're set" summary, then a short guided setup on a terminal: three questions — your
+name, your role, and (inside a repo) whether a run a teammate wakes may execute commands — and one
+screen of defaults to keep or change: who may wake your machine while you are away, which alerts you
+want, which decisions are yours alone (so agents stop and ask you), the worker's playbook and its base
+branch. `pantheon setup` re-runs it any time. An agent setting you up runs `pantheon setup --questions`,
+asks you in chat, and passes your answers back as flags — to `pantheon setup --yes`, or straight to
+`pantheon start` / `pantheon join`, which apply them the moment the team exists — so nobody has to
+open a terminal. Restart your agent once and ask it *"check pantheon_status"*.
 
 Already a member — new laptop, or just pulled a newer build? The same full setup is one command:
-`pantheon install --user` (from your project's repo).
+`pantheon install --user` (from your project's repo if you have one).
 
 **Consent happens once, here.** Setup pre-approves exactly the six pantheon *message* tools in
 each agent's own permission system (Claude Code `permissions.allow`, Cursor `Mcp()` tokens,
@@ -451,6 +466,7 @@ pantheon doctor                    preflight: node, keys, MCP entry, relay, memb
 pantheon worker / service          stay answerable while you are away (install as a service)
 pantheon persona                   list / init / show — what a woken worker may do
 pantheon spaces / use / repo       several teams on one machine — what is bound where; bind this repo; a team's repos
+pantheon history / show            read the thread, or one act, in full with ids — from a terminal, no agent needed
 pantheon sessions · logout         your devices and sessions; sign this machine out
 pantheon account delete            remove your account and everything the relay holds on you
 pantheon upgrade                   pull the latest release and re-wire your agents

package/dist/cli.js

@@ -8,9 +8,9 @@ process.emitWarning = ((warning, ...rest) => {
 });
 import { randomBytes } from "node:crypto";
 import { readFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import { PantheonClient } from "./client.js";
-import { fromInvite, load, save, toInvite, resolveFor, loadAll, repoInfo, bindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
+import { fromInvite, load, save, toInvite, toJoinLink, resolveFor, loadAll, repoInfo, bindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
 import { fmtLimit } from "./plans.js";
 import { validEmail, validUsername } from "./accounts.js";
 import { install, launcher } from "./install.js";
@@ -18,8 +18,10 @@ import { Relay } from "./relay.js";
 import { runMcp } from "./mcp.js";
 import { Worker } from "./worker.js";
 import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, sendDesktopNotification } from "./notifier.js";
+import { desktopUnavailable, hostEnv } from "./host-env.js";
 import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, wakeDefault } from "./profile.js";
 import { runGuide, terminalIO, parseSetupFlags, questionnaire } from "./setup-guide.js";
+import { selectActs, formatAct, resolveRef } from "./history-view.js";
 import { doctor, render } from "./doctor.js";
 import { menubarProc, notifierProc, relayProc, workerProc, wiring, logFileFor, dataSummary, stopProc, statFile } from "./machine.js";
 import { assess } from "./untrusted.js";
@@ -321,6 +323,13 @@ async function guidedSetup(cfg, project, opts = {}) {
         rl?.close();
     }
 }
+async function fetchHistory(cfg, since = 0) {
+    const base = cfg.relay.replace(/^ws/, "http").replace(/\/+$/, "");
+    const res = await fetch(`${base}/history?space=${encodeURIComponent(cfg.space)}&token=${encodeURIComponent(cfg.token)}&since=${since}`, { signal: AbortSignal.timeout(8000) });
+    if (!res.ok)
+        throw new Error(`relay answered ${res.status} for the ledger`);
+    return (await res.json()).acts ?? [];
+}
 function workerMidRun() {
     try {
         const s = JSON.parse(readFileSync(join(CONFIG_DIR, "worker-state.json"), "utf8"));
@@ -365,10 +374,16 @@ ${B("first time — verify your email once")}
   pantheon login --email you@work.com                    a second machine, same account
   pantheon whoami · pantheon sessions                      who you are; your devices & sessions
 
-${B("getting going — then two commands, run from your project's repo")}
+${B("getting going — two commands, from your project's repo if you have one")}
   pantheon start              you: sets up this whole machine + one line to send your teammate
-  pantheon join <line>        them: that one line sets up their whole machine
-  pantheon invite             another single-use line, for a third person or a second machine
+  pantheon join <invite>      them: the link (or the line) sets up their whole machine
+  pantheon invite             another single-use invite, for a third person or a second machine
+                              (--list shows the open ones; --revoke <token|all> cancels)
+
+  Both take the setup answers as flags (--name, --title, --wake, --commands, … — pantheon setup
+  --questions lists them), so an agent sets a person up in one command. No repo? Messages, questions
+  and decisions work anywhere; a repo only adds handing over code and being woken. Name the team
+  with --space when there is no repo to name it after.
 
   One command does everything: agents wired and pre-approved, wake-up hook (your
   agent finishes what a peer is waiting for), worker (this machine answers the
@@ -416,9 +431,11 @@ ${B("control")}
   pantheon leave              remove what pantheon put on this machine
   pantheon panic              cut off all unattended work on this machine, now
   pantheon doctor             check this machine end to end
-  pantheon setup              the guided choices: who may wake this machine, what a run may execute,
-                              what you personally decide, which alerts you want — re-run any time
-                              (--questions prints them for an agent to ask you; answers go back as flags)
+  pantheon setup              three questions — your name, your role, may a woken run execute commands —
+                              then one screen of defaults to keep or change: who may wake this machine,
+                              alerts, what you personally decide, playbook, base branch. Re-run any time.
+                              (--questions prints them for an agent to ask you; answers go back as flags,
+                              to setup --yes or straight to start / join)
   pantheon upgrade            pull the latest pantheon, rebuild, and re-wire your agents
 
 ${D("more: pantheon help --all")}
@@ -432,6 +449,9 @@ ${B("less common")}
   pantheon whoami             your name and fingerprint
   pantheon pending            what a live agent window has not yet seen
   pantheon say <ACT> <text>   send one act by hand   (NOTE, ASK, ANSWER, PROPOSE, ...)
+                              replies pick the act they answer; --ref <id | seq | last> to choose
+  pantheon history            the thread in full, with ids   (--goal <id>, --from <who>, --last N, --short)
+  pantheon show <id | seq>    one act in full, and what it replied to
   pantheon invite             mint another single-use invite link to send
   pantheon install            re-wire this machine's agents (after a Node/agent change)
   pantheon mcp                the server your agent runs; not for you
@@ -457,9 +477,14 @@ async function main() {
     switch (cmd) {
         case "start": {
             const port = Number(flag("port", "8787"));
+            const setupFlags = parseSetupFlags(argv);
+            if (setupFlags.errors.length)
+                die(setupFlags.errors.join("\n") + "\n  pantheon setup --questions  lists every answer");
             const wp = unattendedProject();
             requireSignInOnHostedRelay(flag("relay"));
             console.error(`${B("pantheon start")}\n`);
+            if (!flag("space") && !repoInfo(process.cwd()))
+                console.error(D(`  No git repo here, so the team will be named after this folder: "${basename(process.cwd()).toLowerCase().replace(/[^a-z0-9._-]/g, "-") || "team"}". Pass --space <name> to choose.\n`));
             const r = await qsStart({
                 port,
                 dataDir: resolveDataDir(flag("data")).dir,
@@ -487,12 +512,21 @@ async function main() {
                 process.exit(1);
             }
             if (r.invite) {
-                console.error(`\n${B("Send your teammate this one line — it sets up their whole machine:")}\n`);
-                console.error(`  ${C(`pantheon join ${r.invite}`)}\n`);
-                console.error(D(`  Tell them to run it from their project's git repo. Single use, expires in ${Math.round(Number(flag("ttl", "1440")) / 60)}h.`));
+                const link = toJoinLink(fromInvite(r.invite));
+                if (link) {
+                    console.error(`\n${B("Send your teammate this link — it unfurls in chat, and it sets up their whole machine:")}\n`);
+                    console.error(`  ${C(link)}\n`);
+                    console.error(D(`  The same invite as a command, for pasting straight into an agent:`));
+                    console.error(`  ${C(`pantheon join ${r.invite}`)}\n`);
+                }
+                else {
+                    console.error(`\n${B("Send your teammate this one line — it sets up their whole machine:")}\n`);
+                    console.error(`  ${C(`pantheon join ${r.invite}`)}\n`);
+                }
+                console.error(D(`  From their project's repo if they have one — a repo is only needed to hand over code or to be woken. Single use, expires in ${Math.round(Number(flag("ttl", "1440")) / 60)}h.`));
                 console.error(D(`  Redeeming it admits them — no separate approval step. Need another? \`pantheon invite\``));
                 console.error(D(`\n  Not technical? Forward them this instead, and their agent does the rest:`));
-                console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${r.invite}`)}`);
+                console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? r.invite}`)}`);
             }
             if (!r.reach.shareable && r.reach.hint) {
                 console.error(`\n\x1b[33m  That address only works on this machine.\x1b[0m`);
@@ -500,7 +534,7 @@ async function main() {
             }
             printReady(r.tools);
             if (r.claimed)
-                await guidedSetup(load() ?? r.cfg, repoInfo(process.cwd())?.root ?? null);
+                await guidedSetup(load() ?? r.cfg, repoInfo(process.cwd())?.root ?? null, { preset: setupFlags.preset, force: Object.keys(setupFlags.preset).length > 0 || argv.includes("--yes") });
             if (r.relay) {
                 console.error(D(`\nKeeping the relay running here. Ctrl-C stops it (your teammate goes offline too).`));
                 await new Promise(() => { });
@@ -512,13 +546,43 @@ async function main() {
             const client = new PantheonClient(cfg, undefined, { role: "cli" });
             await client.connect().catch((e) => die(client.pending ?? e.message));
             await new Promise((r) => setTimeout(r, 250));
+            const revokeAt = argv.indexOf("--revoke");
+            const revokeArg = revokeAt >= 0 ? (argv[revokeAt + 1] && !argv[revokeAt + 1].startsWith("--") ? argv[revokeAt + 1] : "all") : undefined;
+            if (argv.includes("--list") || revokeArg !== undefined) {
+                const open = await client.listInvites().catch((e) => die(e.message));
+                if (revokeArg !== undefined) {
+                    const targets = revokeArg === "all" ? open.filter((i) => i.mine) : open.filter((i) => i.token === revokeArg || i.token.endsWith(revokeArg.replace(/^…/, "")));
+                    if (!targets.length) {
+                        client.close();
+                        die(revokeArg === "all" ? "no open invites of yours to revoke" : `no open invite matches "${revokeArg}" — pantheon invite --list shows them`);
+                    }
+                    for (const i of targets) {
+                        await client.revokeInvite(i.token).catch((e) => { client.close(); return die(e.message); });
+                        console.log(`revoked …${i.token.slice(-6)}  (minted by ${i.created_by}, would have expired ${new Date(i.expires_at).toLocaleString()})`);
+                    }
+                    client.close();
+                    return;
+                }
+                if (!open.length)
+                    console.log(D("no open invites"));
+                for (const i of open)
+                    console.log(`${i.mine ? C(i.token) : D(i.token)}  by ${i.created_by}  expires ${new Date(i.expires_at).toLocaleString()}${i.may_wake ? "  may wake" : ""}${i.mine ? "" : D("  (not yours — masked)")}`);
+                if (open.length)
+                    console.log(D(`\nrevoke one: pantheon invite --revoke <token or its last 6 characters>   ·   all of yours: pantheon invite --revoke all`));
+                client.close();
+                return;
+            }
             const ttl = Number(flag("ttl", "1440"));
             const mayWake = argv.includes("--may-wake") ? true : argv.includes("--no-wake") ? false : wakeDefault(loadProfile(cfg));
             const inv = await client.makeInvite(mayWake, ttl).catch((e) => die(e.message));
-            console.log(`pantheon join ${toInvite({ ...cfg, token: inv.url })}`);
+            const raw = toInvite({ ...cfg, token: inv.url });
+            const link = toJoinLink({ relay: cfg.relay, space: cfg.space, token: inv.url });
+            console.log(`pantheon join ${raw}`);
+            if (link)
+                console.error(`\n${D("Or send this — it unfurls in chat with the team's name, and pantheon join accepts it too:")}\n  ${C(link)}`);
             console.error(D(`\nSingle use, expires ${new Date(inv.expires_at).toLocaleString()}.`));
             console.error(D(`For a teammate who is not technical, forward this and their agent does the rest:`));
-            console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${toInvite({ ...cfg, token: inv.url })}`)}`);
+            console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? raw}`)}`);
             client.close();
             return;
         }
@@ -593,7 +657,10 @@ async function main() {
             return;
         }
         case "join": {
-            const invite = argv[1] ?? die("usage: pantheon join pantheon://host/space#token");
+            const invite = argv[1] ?? die("usage: pantheon join <invite>   (pantheons://host/space#token, or https://www.joinpantheon.network/join/<team>#<token>)  [setup answers as flags — pantheon setup --questions]");
+            const setupFlags = parseSetupFlags(argv);
+            if (setupFlags.errors.length)
+                die(setupFlags.errors.join("\n") + "\n  pantheon setup --questions  lists every answer");
             let parsed;
             try {
                 parsed = fromInvite(invite);
@@ -637,7 +704,7 @@ async function main() {
             {
                 const joined = load();
                 if (joined)
-                    await guidedSetup(joined, repoInfo(process.cwd())?.root ?? null);
+                    await guidedSetup(joined, repoInfo(process.cwd())?.root ?? null, { preset: setupFlags.preset, force: Object.keys(setupFlags.preset).length > 0 || argv.includes("--yes") });
             }
             console.error(`\n${D('Then ask your agent: "check pantheon_status and say hello to the team".')}`);
             return;
@@ -648,8 +715,8 @@ async function main() {
                 console.error(`${B("setting this machine up")} ${D("(user scope)")}\n`);
                 const wired = wireUp({
                     hook: !argv.includes("--no-hook"),
-                    notifications: !argv.includes("--no-notifications") && process.platform === "darwin",
-                    menubar: !argv.includes("--no-menubar") && process.platform === "darwin",
+                    notifications: !argv.includes("--no-notifications"),
+                    menubar: !argv.includes("--no-menubar"),
                     unattended: wp.project,
                     workerHow: wp.how,
                 });
@@ -822,7 +889,7 @@ async function main() {
                 for (const o of human) {
                     const who = o.owner.replace(/^human:/, "");
                     const stale = Date.now() - o.created_at > 3_600_000;
-                    console.log(`  ${stale ? "\x1b[33m" : C("")}${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)}\x1b[0m ${o.body}`);
+                    console.log(`  ${stale ? "\x1b[33m" : C("")}${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)}\x1b[0m ${o.body.split("\n")[0].slice(0, 110)}  ${D(o.ref)}`);
                     if (who === cfg.member)
                         console.log(`         ${D("your peer was told this decision was coming — answer it or say it is dropped")}`);
                 }
@@ -830,7 +897,10 @@ async function main() {
                 if (!between.length)
                     console.log(`  ${D("(nothing owed)")}`);
                 for (const o of between) {
-                    console.log(`  ${o.kind.padEnd(7)} ${o.owner.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${o.body}`);
+                    console.log(`  ${o.kind.padEnd(7)} ${o.owner.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${o.body.split("\n")[0].slice(0, 110)}  ${D(o.ref)}`);
+                }
+                if (human.length || between.length || goals.some((g) => g.state !== "CLOSED")) {
+                    console.log(D(`\n  read in full: pantheon show <id>  ·  a thread: pantheon history --goal <goal>  ·  reply: pantheon say ANSWER "…" --ref <id>`));
                 }
                 client.close();
             };
@@ -931,13 +1001,58 @@ async function main() {
             console.log(argv.includes("--json") ? JSON.stringify(report) : renderPending(report));
             return;
         }
+        case "history": {
+            const cfg = need();
+            const acts = await fetchHistory(cfg, numFlag("since", 0)).catch((e) => die(`cannot read the ledger — ${e.message}`));
+            const picked = selectActs(acts, {
+                ...(flag("goal") ? { goal: flag("goal") } : {}), ...(flag("from") ? { from: flag("from") } : {}),
+                last: numFlag("last", 20), presence: argv.includes("--presence"),
+            });
+            if (argv.includes("--json")) {
+                console.log(JSON.stringify(picked, null, 2));
+                return;
+            }
+            if (!picked.length) {
+                console.log(D("no acts match"));
+                return;
+            }
+            const client = new PantheonClient(cfg, undefined, { role: "cli" });
+            const titles = new Map();
+            try {
+                await client.connect();
+                for (const g of client.goals.values())
+                    titles.set(g.id, g.title);
+            }
+            catch { }
+            finally {
+                client.close();
+            }
+            for (const a of picked)
+                console.log(formatAct(a, { short: argv.includes("--short"), ...(a.goal && titles.get(a.goal) ? { goalTitle: titles.get(a.goal) } : {}) }) + "\n");
+            console.log(D(`${picked.length} of ${acts.filter((a) => a.act !== "JOIN" && a.act !== "LEAVE").length} acts · --last N · --goal <id> · --from <member> · --short · --json  ·  reply: pantheon say ANSWER "…" --ref <id or seq>`));
+            return;
+        }
+        case "show": {
+            const cfg = need();
+            const key = argv[1] ?? die("usage: pantheon show <act id | sequence number>");
+            const acts = await fetchHistory(cfg).catch((e) => die(`cannot read the ledger — ${e.message}`));
+            const a = acts.find((x) => x.id === key || String(x.seq) === key) ?? die(`no act ${key} in what the relay still holds (pantheon history lists them)`);
+            console.log(formatAct(a));
+            if (a.ref) {
+                const r = acts.find((x) => x.id === a.ref);
+                if (r)
+                    console.log(D(`\nin reply to:\n`) + formatAct(r, { short: true }));
+            }
+            return;
+        }
         case "say": {
             const cfg = need();
-            const act = argv[1]?.toUpperCase() ?? die("usage: pantheon say <ACT> <body> [--goal id] [--to a,b] [--domains technical,gtm]");
+            const act = argv[1]?.toUpperCase() ?? die("usage: pantheon say <ACT> <body> [--goal id] [--to a,b] [--ref <id | seq | last>] [--summary 'one line'] [--domains technical,gtm]");
             const stop = argv.findIndex((a, i) => i >= 2 && a.startsWith("--"));
             const body = argv.slice(2, stop === -1 ? undefined : stop).join(" ");
             if (!body)
                 die("nothing to say — pantheon say NOTE 'your message here'");
+            const summary = flag("summary");
             const client = new PantheonClient(cfg, undefined, { role: "cli" });
             await client.connect().catch((e) => die(`cannot reach relay — ${e.message}`));
             const to = flag("to");
@@ -950,13 +1065,28 @@ async function main() {
             const domains = flag("domains");
             if (domains)
                 meta.decision_domains = cleanList(domains.split(","));
+            let goalArg = flag("goal") ?? null;
+            let ref = flag("ref") ?? null;
+            if (ref !== null || ["ANSWER", "ACCEPT", "OBJECT"].includes(act)) {
+                const acts = await fetchHistory(cfg).catch(() => []);
+                const rr = resolveRef(acts, ref, act, goalArg, cfg.member);
+                if (rr.error) {
+                    client.close();
+                    die(rr.error);
+                }
+                if (rr.note)
+                    console.error(D(`  ${rr.note}`));
+                ref = rr.id;
+                goalArg = goalArg ?? rr.goal;
+            }
             const r = await client.send({
                 act: act, body,
-                goal: flag("goal") ?? null,
+                goal: goalArg,
                 to: to ? to.split(",").map((s) => s.trim()) : null,
-                ref: flag("ref") ?? null,
+                ref,
+                ...(summary ? { summary } : {}),
                 ...(Object.keys(meta).length ? { meta } : {}),
-            }).catch((e) => die(e.message));
+            }).catch((e) => die(/SUMMARY_REQUIRED/.test(e.message) ? `${e.message}\n  Add one: --summary 'the point they must not miss'` : e.message));
             console.log(`sent ${act} id=${r.id} seq=${r.seq}`);
             client.close();
             return;
@@ -999,7 +1129,8 @@ async function main() {
                 console.log(`  menu bar  ${C("running")}   ${menubar.managedBy === "launchd" ? `service ${menubar.label}` : "started by hand"}   pid ${menubar.pid}`);
             }
             else {
-                console.log(`  menu bar  ${D("not running")}   ${D("pantheon service install menubar — status and pause/resume in the menu bar")}`);
+                const why = desktopUnavailable(hostEnv(), "the menu bar");
+                console.log(`  menu bar  ${D("not running")}   ${D(why ?? "pantheon service install menubar — status and pause/resume in the menu bar")}`);
             }
             if (notifier.running) {
                 console.log(`  notifier  ${C("running")}   ${notifier.managedBy === "launchd" ? `service ${notifier.label}` : "started by hand"}   pid ${notifier.pid}`);
@@ -2013,10 +2144,13 @@ async function main() {
             const find = (want) => all.find((x) => x.o.id === want);
             if (sub === "answer") {
                 if (!id)
-                    die("usage: pantheon approvals answer <obligation-id> <decision>");
+                    die("usage: pantheon approvals answer <obligation-id> <decision> [--summary 'one line']");
                 const hit = find(id) ?? die(`no decision ${id} is waiting on you${conns.length > 1 ? ` in any of your ${conns.length} teams` : ""}`);
-                const answer = argv.slice(3).join(" ").trim() || die("state the decision; it will be written to the audit ledger");
-                const sent = await hit.client.send({ act: "ANSWER", body: answer, goal: null, ref: hit.o.ref, after_seq: hit.client.readSeq });
+                const stopAt = argv.findIndex((a, i) => i >= 3 && a.startsWith("--"));
+                const answer = argv.slice(3, stopAt === -1 ? undefined : stopAt).join(" ").trim() || die("state the decision; it will be written to the audit ledger");
+                const summary = flag("summary");
+                const sent = await hit.client.send({ act: "ANSWER", body: answer, goal: null, ref: hit.o.ref, after_seq: hit.client.readSeq, ...(summary ? { summary } : {}) })
+                    .catch((e) => { closeAll(); return die(/SUMMARY_REQUIRED/.test(e.message) ? `${e.message}\n  Add one: --summary 'the point they must not miss'` : e.message); });
                 console.log(`${C("answered")} ${id}${conns.length > 1 ? ` in ${B(hit.cfg.space)}` : ""} — ledger act ${sent.id}`);
                 closeAll();
                 return;

package/dist/client.js

@@ -41,6 +41,7 @@ export class PantheonClient {
     plan = null;
     enroll = null;
     inviteUrl = null;
+    invitesList = null;
     constructor(cfg, onEvent, opts) {
         this.cfg = cfg;
         this.onEvent = onEvent;
@@ -138,6 +139,9 @@ export class PantheonClient {
                         break;
                     case "claimed":
                         break;
+                    case "invites":
+                        this.invitesList = msg.invites;
+                        break;
                     case "invite":
                         this.inviteUrl = { url: msg.url, expires_at: msg.expires_at };
                         break;
@@ -417,6 +421,36 @@ export class PantheonClient {
             }
         });
     }
+    listInvites() {
+        if (!this.ws || this.ws.readyState !== 1)
+            return Promise.reject(new Error(`not connected to relay (${this.pending ?? this.lastError ?? "offline"})`));
+        return new Promise((res, rej) => {
+            this.invitesList = null;
+            const cid = `c${++this.cid}`;
+            const finish = () => { clearInterval(poll); clearTimeout(t); this.acks.delete(cid); };
+            const t = setTimeout(() => { finish(); rej(new Error("relay did not list the invites in 10s")); }, 10_000);
+            const poll = setInterval(() => { if (this.invitesList) {
+                finish();
+                const v = this.invitesList;
+                this.invitesList = null;
+                res(v);
+            } }, 40);
+            this.acks.set(cid, (v) => { if ("error" in v) {
+                finish();
+                rej(new Error(v.error));
+            } });
+            try {
+                this.ws?.send(JSON.stringify({ t: "invites", cid }));
+            }
+            catch (e) {
+                finish();
+                rej(e);
+            }
+        });
+    }
+    revokeInvite(token) {
+        return this.rpc({ t: "revoke_invite", token: token.replace(/^…/, "") });
+    }
     myObligations() {
         return this.obligations.filter((o) => o.owner === this.cfg.member || o.owner === `human:${this.cfg.member}`);
     }

package/dist/config.js

@@ -275,17 +275,29 @@ export function toInvite(cfg) {
     const scheme = u.protocol === "wss:" ? "pantheons" : "pantheon";
     return `${scheme}://${u.host}/${encodeURIComponent(cfg.space)}#${cfg.token}`;
 }
+export const JOIN_LINK_BASE = "https://www.joinpantheon.network/join";
+const HOSTED_RELAY = "wss://relay.joinpantheon.network";
+const JOIN_SLUG = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
+export function toJoinLink(cfg) {
+    if (cfg.relay.replace(/\/+$/, "") !== HOSTED_RELAY || !JOIN_SLUG.test(cfg.space))
+        return null;
+    return `${JOIN_LINK_BASE}/${cfg.space}#${cfg.token}`;
+}
 export function fromInvite(invite) {
     const clean = invite
         .replace(/\u001b\[[0-9;]*m/g, "")
         .replace(/[\u0000-\u001f\u007f]/g, "")
         .trim()
         .replace(/^['"`]|['"`]$/g, "")
-        .replace(/^pantheon\s+join\s+/i, "")
         .trim();
-    const m = /^(pantheons?):\/\/([^/]+)\/([^#]+)#(.+)$/.exec(clean);
+    const web = /https?:\/\/(?:www\.)?joinpantheon\.network\/join\/([^\s#?/"'`]+)(?:\?[^\s#"'`]*)?#([^\s"'`]+)/i.exec(clean);
+    if (web) {
+        const [, slug, token] = web;
+        return { relay: HOSTED_RELAY, space: decodeURIComponent(slug), token };
+    }
+    const m = /(pantheons?):\/\/([^/\s"'`]+)\/([^#\s"'`]+)#([^\s"'`]+)/.exec(clean);
     if (!m)
-        throw new Error("not a pantheon invite — expected pantheon://host/space#token (or pantheons:// for TLS)");
+        throw new Error("not a pantheon invite — expected pantheons://host/space#token (pantheon:// without TLS), or https://www.joinpantheon.network/join/<team>#<token>");
     const [, scheme, host, space, token] = m;
     return {
         relay: `${scheme === "pantheons" ? "wss" : "ws"}://${host}`,

package/dist/doctor.js

@@ -11,6 +11,7 @@ import { loadPersonas } from "./persona.js";
 import { workerProc } from "./machine.js";
 import { VERSION } from "./version.js";
 import { serviceInstalled } from "./service.js";
+import { hostEnv } from "./host-env.js";
 const sh = (cmd, cwd) => {
     try {
         return execFileSync("sh", ["-lc", cmd], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
@@ -46,6 +47,13 @@ export async function doctor(projectDir) {
     major >= 22
         ? add("pass", "node", `v${process.versions.node}`)
         : add("fail", "node", `v${process.versions.node} is too old`, "pantheon needs Node 22 or newer (the relay uses node:sqlite) — install it and re-run");
+    const host = hostEnv();
+    if (host.ephemeral) {
+        add("warn", "machine", `${host.platform} in ${host.kind === "container" ? "a container" : "a cloud workspace"} — ${host.evidence.join("; ")}`, `this is not the computer you work on, which is why it reports ${host.platform} to someone who may be sitting at a Mac. The team and your account are fine here, but the menu bar, desktop alerts and the worker belong on your own machine — run the setup from a terminal there.`);
+    }
+    else {
+        add("pass", "machine", `${host.platform}${host.desktop ? " — menu bar and desktop alerts can run here" : " — no menu bar or desktop alerts (macOS only); use phone or chat delivery"}`);
+    }
     let cfg = null;
     try {
         cfg = load();
@@ -193,6 +201,11 @@ export async function doctor(projectDir) {
             add("warn", "wake rights", `${who}, but no worker is running here, so nothing can be woken`, "start one with `pantheon service install worker --project <a git repo>`; until then a peer's act waits for you to type");
         }
     }
+    if (host.desktop) {
+        serviceInstalled("menubar")
+            ? add("pass", "menu bar", "installed — status, pause/resume, and a badge when a decision needs you")
+            : add("warn", "menu bar", "not installed on a Mac that can run it", "install it with: pantheon service install menubar (needs the Xcode Command Line Tools — xcode-select --install — and a setup that ran on this computer, not in a cloud agent). --no-menubar at setup also leaves it off; that is fine if it was your choice");
+    }
     if (!hookStates.length && !hook.installed) {
         add("warn", "wake-up hook", "not installed — your agent will not notice a peer's message until you ask it to", "pantheon hook install --user (auto-detects claude / codex / cursor on PATH)");
     }