@join-pantheon/cli 0.21.3 → 0.23.0

package/dist/email.js

@@ -1,9 +1,9 @@
 function subjectAndBody(code, purpose) {
     const action = purpose === "signup" ? "confirm your email and finish signing up" : "add this device to your account";
     const eyebrow = purpose === "signup" ? "Confirm your email" : "New device sign-in";
-    const subject = `Your pantheon code: ${code}`;
+    const subject = `Your Pantheon code: ${code}`;
     const text = [
-        `pantheon — ${eyebrow.toLowerCase()}`,
+        `Pantheon — ${eyebrow.toLowerCase()}`,
         ``,
         `Your verification code is ${code}.`,
         ``,
@@ -12,37 +12,61 @@ function subjectAndBody(code, purpose) {
         ``,
         `The code expires in 10 minutes and works once. If you did not request it,`,
         `ignore this email — nothing happens without the code.`,
+        ``,
+        `joinpantheon.network — the execution layer for companies`,
     ].join("\n");
-    const mono = `ui-monospace,'SF Mono',Menlo,Consolas,'Liberation Mono',monospace`;
-    const serif = `Georgia,'Iowan Old Style','Times New Roman',Times,serif`;
+    const paper = "#eae4da", card = "#f2ede5", stone = "#ddd4c3", ink = "#292927", faint = "#7c766d", gold = "#d8a33a";
+    const mono = `'SF Mono',Menlo,Consolas,'Liberation Mono',monospace`;
+    const serif = `Georgia,'Times New Roman',Times,serif`;
     const html = `<!doctype html>
 <html lang="en">
-<body style="margin:0;padding:0;background-color:#E9EDEC">
-  <div style="display:none;max-height:0;overflow:hidden;mso-hide:all">Enter it to ${action} — expires in 10 minutes.&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;</div>
-  <table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background-color:#E9EDEC">
-    <tr><td align="center" style="padding:32px 16px">
-      <table role="presentation" width="440" cellpadding="0" cellspacing="0" style="max-width:440px;width:100%">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<meta name="color-scheme" content="light">
+<meta name="supported-color-schemes" content="light">
+<title>Your Pantheon code</title>
+</head>
+<body style="margin:0;padding:0;background:${paper}">
+  <div style="display:none;max-height:0;overflow:hidden;opacity:0">Your code is ${code}. It expires in 10 minutes and works once.&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;</div>
+  <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="background:${paper};margin:0;padding:0">
+    <tr><td align="center" style="padding:40px 16px">
+      <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="max-width:480px;width:100%">
 
-        <tr><td style="padding:0 4px 14px;border-bottom:2px solid #101A1C">
-          <span style="font-family:${mono};font-size:16px;font-weight:600;letter-spacing:.02em;color:#101A1C">pan<span style="color:#0E6F78">theon</span></span>
+        <tr><td align="left" style="padding:0 0 28px 0">
+          <img src="https://www.joinpantheon.network/email/mark.png" width="28" height="28" alt="Pantheon" style="display:inline-block;vertical-align:middle;border:0">
+          <span style="display:inline-block;vertical-align:middle;padding-left:10px;font-family:${serif};font-size:19px;letter-spacing:.01em;color:${ink}">Pantheon</span>
         </td></tr>
 
-        <tr><td style="background-color:#F8FAF9;border:1px solid #C3CDCD;border-top:0;padding:28px 28px 24px">
-          <table role="presentation" width="100%" cellpadding="0" cellspacing="0">
-            <tr><td style="font-family:${mono};font-size:11px;font-weight:600;letter-spacing:.13em;text-transform:uppercase;color:#0E6F78;padding-bottom:14px">${eyebrow}</td></tr>
-            <tr><td align="center" style="background-color:#DFE5E4;border:1px solid #C3CDCD;padding:18px 12px">
-              <span style="font-family:${mono};font-size:34px;font-weight:700;letter-spacing:10px;color:#101A1C">${code}</span>
+        <tr><td style="background:${card};border:1px solid ${stone};border-radius:2px;padding:36px 32px 32px 32px">
+
+          <p style="margin:0 0 22px 0;font-family:${mono};font-size:11px;letter-spacing:.14em;text-transform:uppercase;color:${faint}">${eyebrow}</p>
+
+          <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0">
+            <tr><td align="center" style="background:${paper};border:1px solid ${stone};border-radius:2px;padding:22px 12px">
+              <span style="font-family:${mono};font-size:34px;line-height:1.1;letter-spacing:.22em;color:${ink};font-weight:600">${code}</span>
             </td></tr>
-            <tr><td style="font-family:${serif};font-size:16px;line-height:1.55;color:#3B4A4D;padding:18px 0 12px">Enter it where the CLI is waiting, to ${action}:</td></tr>
-            <tr><td style="background-color:#DFE5E4;border:1px solid #C3CDCD;padding:11px 14px;font-family:${mono};font-size:13px;color:#101A1C"><span style="color:#0E6F78">$</span>&nbsp; pantheon verify ${code}</td></tr>
-            <tr><td style="padding-top:18px"></td></tr>
-            <tr><td style="font-family:${mono};font-size:12px;line-height:1.7;color:#5A686A;padding-top:14px;border-top:1px solid #C3CDCD">Expires in 10 minutes. Works once.<br>Didn't request it? Ignore this email — nothing happens without the code.</td></tr>
           </table>
+
+          <p style="margin:24px 0 14px 0;font-family:${serif};font-size:16px;line-height:1.55;color:${ink}">Enter it where the CLI is waiting, to ${action}:</p>
+
+          <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0">
+            <tr><td style="background:${paper};border-left:2px solid ${gold};padding:13px 16px">
+              <span style="font-family:${mono};font-size:14px;color:${ink}">pantheon verify ${code}</span>
+            </td></tr>
+          </table>
+
+          <p style="margin:26px 0 0 0;padding-top:20px;border-top:1px solid ${stone};font-family:${serif};font-size:14px;line-height:1.6;color:${faint}">
+            Expires in 10 minutes. Works once.<br>
+            Didn't request it? Ignore this email — nothing happens without the code.
+          </p>
+
         </td></tr>
 
-        <tr><td align="center" style="padding:16px 4px;font-family:${mono};font-size:11px;letter-spacing:.09em;color:#5A686A">
-          <a href="https://joinpantheon.network" style="color:#5A686A;text-decoration:none;border-bottom:1px solid #9AA8A8">joinpantheon.network</a>
-          &nbsp;&nbsp;·&nbsp;&nbsp;your agents, one space
+        <tr><td align="left" style="padding:22px 2px 0 2px;font-family:${mono};font-size:11.5px;letter-spacing:.04em;color:${faint}">
+          <a href="https://www.joinpantheon.network" style="color:${faint};text-decoration:underline">joinpantheon.network</a>
+          <span style="color:${gold};padding:0 8px">&middot;</span>
+          The execution layer for companies
         </td></tr>
 
       </table>

package/dist/history-view.js

@@ -0,0 +1,51 @@
+export function selectActs(acts, opts = {}) {
+    const kept = acts.filter((a) => (opts.presence || (a.act !== "JOIN" && a.act !== "LEAVE"))
+        && (opts.goal === undefined || a.goal === opts.goal)
+        && (opts.from === undefined || a.from === opts.from)
+        && (opts.since === undefined || a.seq > opts.since));
+    const n = opts.last ?? 20;
+    return kept.slice(Math.max(0, kept.length - n));
+}
+const when = (ts) => new Date(ts).toISOString().slice(0, 19).replace("T", " ") + "Z";
+export function formatAct(a, opts = {}) {
+    const who = `${a.from}${a.role && a.role !== "interactive" ? ` (${a.role})` : ""}`;
+    const head = `[${a.seq}] ${a.act} from ${who}${a.to?.length ? ` to ${a.to.join(",")}` : ""}  ${when(a.ts)}  id=${a.id}${a.ref ? `  ref=${a.ref}` : ""}${a.goal ? `  goal=${a.goal}${opts.goalTitle ? ` "${opts.goalTitle}"` : ""}` : ""}`;
+    if (opts.short)
+        return `${head}\n    ${(a.summary ?? a.body).split("\n")[0].slice(0, 160)}`;
+    const meta = a.meta && Object.keys(a.meta).length ? `\n    meta: ${JSON.stringify(a.meta)}` : "";
+    const summary = a.summary ? `\n    >> ${a.summary}` : "";
+    return `${head}${summary}\n${a.body.split("\n").map((l) => `    ${l}`).join("\n")}${meta}`;
+}
+const REPLIES_TO = {
+    ANSWER: ["ASK", "ESCALATE", "HUMAN_REQUIRED"],
+    ACCEPT: ["DELIVERED", "PROPOSE", "CONTRACT"],
+    OBJECT: ["DELIVERED", "PROPOSE", "CONTRACT"],
+};
+export function resolveRef(acts, ref, act, goal, me) {
+    const inGoal = (a) => goal === null || a.goal === goal;
+    if (ref && /^a_/.test(ref)) {
+        const hit = acts.find((a) => a.id === ref);
+        return { id: ref, goal: hit?.goal ?? goal };
+    }
+    if (ref && /^\d+$/.test(ref)) {
+        const hit = acts.find((a) => a.seq === Number(ref));
+        return hit ? { id: hit.id, goal: hit.goal ?? goal, note: `replying to [${hit.seq}] ${hit.act} from ${hit.from}` } : { id: null, goal, error: `no act with sequence ${ref} in what this relay still holds` };
+    }
+    const others = acts.filter((a) => a.from !== me && a.act !== "JOIN" && a.act !== "LEAVE" && inGoal(a));
+    if (ref === "last") {
+        const hit = others[others.length - 1];
+        return hit ? { id: hit.id, goal: hit.goal ?? goal, note: `replying to [${hit.seq}] ${hit.act} from ${hit.from}` } : { id: null, goal, error: "nothing from a peer to reply to" };
+    }
+    if (ref)
+        return { id: ref, goal };
+    const wants = REPLIES_TO[act];
+    if (!wants)
+        return { id: null, goal };
+    for (const kind of wants) {
+        const hit = [...others].reverse().find((a) => a.act === kind && (!a.to?.length || a.to.includes(me)));
+        if (hit)
+            return { id: hit.id, goal: hit.goal ?? goal, note: `replying to [${hit.seq}] ${hit.act} from ${hit.from} (pass --ref to pick another)` };
+    }
+    return { id: null, goal, error: `${act} must reference the act it answers — none from a peer found${goal ? ` in ${goal}` : ""}. See pantheon history, then --ref <id or sequence number>` };
+}
+//# sourceMappingURL=history-view.js.map

package/dist/host-env.js

@@ -0,0 +1,57 @@
+import { existsSync, readFileSync } from "node:fs";
+const CLOUD_VARS = [
+    ["CODESPACES", "GitHub Codespaces ($CODESPACES)"],
+    ["REMOTE_CONTAINERS", "a VS Code dev container ($REMOTE_CONTAINERS)"],
+    ["REMOTE_CONTAINERS_IPC", "a VS Code dev container ($REMOTE_CONTAINERS_IPC)"],
+    ["DEVCONTAINER", "a dev container ($DEVCONTAINER)"],
+    ["GITPOD_WORKSPACE_ID", "a Gitpod workspace ($GITPOD_WORKSPACE_ID)"],
+    ["CLOUD_SHELL", "a cloud shell ($CLOUD_SHELL)"],
+];
+export function hostEnv(env = process.env, plat = process.platform, exists = existsSync, read = (p) => readFileSync(p, "utf8")) {
+    if (plat === "darwin") {
+        return { platform: plat, kind: "local", evidence: [], ephemeral: false, desktop: true };
+    }
+    const evidence = [];
+    let kind = "local";
+    for (const [name, label] of CLOUD_VARS) {
+        if (env[name]) {
+            evidence.push(label);
+            kind = "cloud-workspace";
+        }
+    }
+    if (exists("/.dockerenv"))
+        evidence.push("/.dockerenv exists");
+    if (exists("/run/.containerenv"))
+        evidence.push("/run/.containerenv exists (podman)");
+    let cgroup = "";
+    try {
+        cgroup = exists("/proc/1/cgroup") ? read("/proc/1/cgroup") : "";
+    }
+    catch { }
+    if (/docker|containerd|kubepods|lxc/.test(cgroup))
+        evidence.push("pid 1 is in a container cgroup (/proc/1/cgroup)");
+    if (evidence.length && kind === "local")
+        kind = "container";
+    return {
+        platform: plat,
+        kind,
+        evidence,
+        ephemeral: kind !== "local",
+        desktop: false,
+    };
+}
+export function ephemeralWarning(host) {
+    return `this looks like ${host.kind === "container" ? "a container" : "a cloud workspace"}, not the computer you work on `
+        + `(${host.evidence.join("; ")}). That is why this machine reports ${host.platform}: your editor's agent is running `
+        + `somewhere else, so the menu bar and desktop alerts cannot be installed, and anything installed here disappears with `
+        + `the session. Your account and team are fine — run the same setup from a terminal on your own computer to finish it.`;
+}
+export function desktopUnavailable(host, what) {
+    if (host.desktop)
+        return null;
+    if (host.ephemeral) {
+        return `not available — ${what} ${what === "desktop alerts" ? "need" : "needs"} your own computer, and this is ${host.kind === "container" ? "a container" : "a cloud workspace"} reporting ${host.platform}`;
+    }
+    return `not available — ${what} ${host.platform === "darwin" ? "could not be built here" : `${what === "desktop alerts" ? "are" : "is"} macOS-only, and this machine is ${host.platform}`}`;
+}
+//# sourceMappingURL=host-env.js.map

package/dist/mcp.js

@@ -9,7 +9,7 @@ import { VERSION } from "./version.js";
 import { backendFromLabel } from "./agents.js";
 import { agentHookStates } from "./notify.js";
 import { reportMcpBusy, reportMcpIdle } from "./mcp-activity.js";
-import { loadProfile, organizationProfile, profileInitialized, routeDecision } from "./profile.js";
+import { loadProfile, organizationProfile, profileInitialized, routeDecision, reservedDecisionsNote } from "./profile.js";
 import { identityLine, renderBrief } from "./brief.js";
 import { recentRuns } from "./spend.js";
 const ACT_HELP = {
@@ -60,6 +60,7 @@ YOU WERE WOKEN BY A PEER. No human is present in this session.
 `
         : "";
     const profile = loadProfile(cfg);
+    const reserved = reservedDecisionsNote(profile);
     const identity = profileInitialized(profile)
         ? ` You work as ${identityLine({
             member: cfg.member,
@@ -87,7 +88,8 @@ RULES
   The organization directory — not job-title guesswork — determines whose human or agent owns it.
   When a peer's human personally must decide and their agent may be offline, use HUMAN_REQUIRED and name that one peer in to.
   Do not use HUMAN_REQUIRED instead of ASK for something their delegate can answer. Their delegate settles it with ANSWER.
-  ESCALATE and HUMAN_REQUIRED outlive a goal close until the named human has actually answered.
+  ESCALATE and HUMAN_REQUIRED outlive a goal close until the named human has actually answered.${reserved ? `
+- ${reserved}` : ""}
 - Agree the interface BEFORE writing code that crosses it: PROPOSE, then CONTRACT once accepted.
 - Answer every ASK addressed to you. An unanswered ASK blocks a peer and eventually stalls the goal.
 - ACCEPT means you actually checked. If something is wrong, OBJECT with the reason.

package/dist/profile.js

@@ -33,6 +33,14 @@ export function defaultProfile(cfg) {
         updated_at: 0,
     };
 }
+export function reservedDecisionsNote(profile) {
+    const mine = Object.entries(profile.authority).filter(([, m]) => m === "human_required").map(([d]) => d);
+    if (!mine.length)
+        return "";
+    return `YOUR HUMAN DECIDES THESE PERSONALLY: ${mine.join(", ")}. If a peer asks you to settle one — approve a
+deploy, agree a price, sign off a release — do not answer it yourself, however well you have checked the
+work. Say the review result if you have one, then ESCALATE and stop; tell the peer it is with your human.`;
+}
 export function wakeDefault(profile) {
     return (profile.agent.wake_default ?? "anyone") === "anyone";
 }

package/dist/protocol.js

@@ -132,6 +132,15 @@ export const MakeInvite = z.object({
     may_wake: z.boolean().default(true),
     ttl_minutes: z.number().int().min(1).max(10080).default(60),
 });
+export const ListInvites = z.object({
+    t: z.literal("invites"),
+    cid: z.string().max(64).optional(),
+});
+export const RevokeInvite = z.object({
+    t: z.literal("revoke_invite"),
+    cid: z.string().max(64).optional(),
+    token: z.string().min(6).max(64),
+});
 export const Admit = z.object({
     t: z.literal("admit"),
     cid: z.string().max(64).optional(),
@@ -183,7 +192,7 @@ export const WorkerState = z.object({
     detail: z.string().max(200).optional(),
     until: z.number().int().positive().optional(),
 });
-export const Inbound = z.discriminatedUnion("t", [Hello, SendAct, OpenGoal, Claim, Admit, MakeInvite, PublishProfile, BindRepo, DeleteSpace, WorkerState, Ping]);
+export const Inbound = z.discriminatedUnion("t", [Hello, SendAct, OpenGoal, Claim, Admit, MakeInvite, ListInvites, RevokeInvite, PublishProfile, BindRepo, DeleteSpace, WorkerState, Ping]);
 export function shouldDeferToHuman(sessions, work, opts = {}) {
     const now = opts.now ?? Date.now();
     const idleMs = opts.idleMs ?? LIMITS.workerIdleMs;

package/dist/quickstart.js

@@ -12,6 +12,7 @@ import { detectAvailable, agentById } from "./agents.js";
 import { installService } from "./service.js";
 import { ensureNativeNotifier } from "./notifier.js";
 import { ensureTrayBinary, writeTrayCommands } from "./tray.js";
+import { desktopUnavailable, ephemeralWarning, hostEnv } from "./host-env.js";
 import { existsSync } from "node:fs";
 import { grant as grantCap, loadPolicy, policyPath, savePolicy } from "./worker-policy.js";
 import { Relay } from "./relay.js";
@@ -27,9 +28,12 @@ export function wireUp(opts, deps = {}) {
     const installSvc = deps.installService ?? installService;
     const ensureNotifier = deps.ensureNotifier ?? ensureNativeNotifier;
     const ensureTray = deps.ensureTray ?? ensureTrayBinary;
+    const host = deps.host ?? hostEnv();
     const tools = installForUser().map((t) => ({ tool: t.tool, status: t.status }));
     const granted = [];
     const warnings = [];
+    if (host.ephemeral)
+        warnings.push(ephemeralWarning(host));
     if (opts.hook) {
         try {
             const { agents } = installHooks("user");
@@ -47,7 +51,10 @@ export function wireUp(opts, deps = {}) {
     else {
         tools.push({ tool: "wake-up hook", status: "skipped (--no-hook) — a peer's message waits until you type" });
     }
-    if (opts.notifications) {
+    if (opts.notifications && !host.desktop) {
+        tools.push({ tool: "notifications", status: desktopUnavailable(host, "desktop alerts") });
+    }
+    else if (opts.notifications) {
         try {
             ensureNotifier();
             installSvc("notifier", homedir(), []);
@@ -61,7 +68,10 @@ export function wireUp(opts, deps = {}) {
     else {
         tools.push({ tool: "notifications", status: "off (--no-notifications) — human escalations only appear in pantheon status" });
     }
-    if (opts.menubar) {
+    if (opts.menubar && !host.desktop) {
+        tools.push({ tool: "menu bar", status: desktopUnavailable(host, "the menu bar") });
+    }
+    else if (opts.menubar) {
         try {
             ensureTray();
             writeTrayCommands();
@@ -241,7 +251,7 @@ export async function start(opts) {
     const wired = wireUp({
         hook: opts.hook !== false,
         notifications: opts.notifications !== false,
-        menubar: opts.menubar !== false && process.platform === "darwin",
+        menubar: opts.menubar !== false,
         unattended: opts.unattended ?? null,
         ...(opts.workerHow ? { workerHow: opts.workerHow } : {}),
     });
@@ -290,7 +300,7 @@ export async function join(opts) {
     const wired = wireUp({
         hook: opts.hook !== false,
         notifications: opts.notifications !== false,
-        menubar: opts.menubar !== false && process.platform === "darwin",
+        menubar: opts.menubar !== false,
         unattended: opts.unattended ?? null,
         ...(opts.workerHow ? { workerHow: opts.workerHow } : {}),
     });