@join-pantheon/cli 0.22.0 → 0.23.0

package/README.md

@@ -57,6 +57,11 @@ pantheon start
 pantheon join pantheons://relay.joinpantheon.network/acme#C1qhJfdHBaPjuG3jF48vcqrP
 ```
 
+On the hosted relay, `pantheon start` and `pantheon invite` also print the same invite as a link,
+`https://www.joinpantheon.network/join/acme#C1qhJfdHBaPjuG3jF48vcqrP`. Pasted into a chat it
+unfurls with the team's name and hands the recipient the line for their agent. The token stays in the
+URL fragment, which browsers never send to any server. `pantheon join` accepts either form.
+
 Signed in, `pantheon start` puts your space on the hosted relay, so that link works from any
 network — no tunnel, no VPN. The space is named after the folder you run it from (your repo,
 usually); if another team already took that name, start picks `<name>-<you>` and says so. Choose

package/dist/cli.js

@@ -10,7 +10,7 @@ import { randomBytes } from "node:crypto";
 import { readFileSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { PantheonClient } from "./client.js";
-import { fromInvite, load, save, toInvite, resolveFor, loadAll, repoInfo, bindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
+import { fromInvite, load, save, toInvite, toJoinLink, resolveFor, loadAll, repoInfo, bindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
 import { fmtLimit } from "./plans.js";
 import { validEmail, validUsername } from "./accounts.js";
 import { install, launcher } from "./install.js";
@@ -18,6 +18,7 @@ import { Relay } from "./relay.js";
 import { runMcp } from "./mcp.js";
 import { Worker } from "./worker.js";
 import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, sendDesktopNotification } from "./notifier.js";
+import { desktopUnavailable, hostEnv } from "./host-env.js";
 import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, wakeDefault } from "./profile.js";
 import { runGuide, terminalIO, parseSetupFlags, questionnaire } from "./setup-guide.js";
 import { selectActs, formatAct, resolveRef } from "./history-view.js";
@@ -375,8 +376,9 @@ ${B("first time — verify your email once")}
 
 ${B("getting going — two commands, from your project's repo if you have one")}
   pantheon start              you: sets up this whole machine + one line to send your teammate
-  pantheon join <line>        them: that one line sets up their whole machine
-  pantheon invite             another single-use line, for a third person or a second machine
+  pantheon join <invite>      them: the link (or the line) sets up their whole machine
+  pantheon invite             another single-use invite, for a third person or a second machine
+                              (--list shows the open ones; --revoke <token|all> cancels)
 
   Both take the setup answers as flags (--name, --title, --wake, --commands, … — pantheon setup
   --questions lists them), so an agent sets a person up in one command. No repo? Messages, questions
@@ -510,12 +512,21 @@ async function main() {
                 process.exit(1);
             }
             if (r.invite) {
-                console.error(`\n${B("Send your teammate this one line — it sets up their whole machine:")}\n`);
-                console.error(`  ${C(`pantheon join ${r.invite}`)}\n`);
+                const link = toJoinLink(fromInvite(r.invite));
+                if (link) {
+                    console.error(`\n${B("Send your teammate this link — it unfurls in chat, and it sets up their whole machine:")}\n`);
+                    console.error(`  ${C(link)}\n`);
+                    console.error(D(`  The same invite as a command, for pasting straight into an agent:`));
+                    console.error(`  ${C(`pantheon join ${r.invite}`)}\n`);
+                }
+                else {
+                    console.error(`\n${B("Send your teammate this one line — it sets up their whole machine:")}\n`);
+                    console.error(`  ${C(`pantheon join ${r.invite}`)}\n`);
+                }
                 console.error(D(`  From their project's repo if they have one — a repo is only needed to hand over code or to be woken. Single use, expires in ${Math.round(Number(flag("ttl", "1440")) / 60)}h.`));
                 console.error(D(`  Redeeming it admits them — no separate approval step. Need another? \`pantheon invite\``));
                 console.error(D(`\n  Not technical? Forward them this instead, and their agent does the rest:`));
-                console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${r.invite}`)}`);
+                console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? r.invite}`)}`);
             }
             if (!r.reach.shareable && r.reach.hint) {
                 console.error(`\n\x1b[33m  That address only works on this machine.\x1b[0m`);
@@ -535,13 +546,43 @@ async function main() {
             const client = new PantheonClient(cfg, undefined, { role: "cli" });
             await client.connect().catch((e) => die(client.pending ?? e.message));
             await new Promise((r) => setTimeout(r, 250));
+            const revokeAt = argv.indexOf("--revoke");
+            const revokeArg = revokeAt >= 0 ? (argv[revokeAt + 1] && !argv[revokeAt + 1].startsWith("--") ? argv[revokeAt + 1] : "all") : undefined;
+            if (argv.includes("--list") || revokeArg !== undefined) {
+                const open = await client.listInvites().catch((e) => die(e.message));
+                if (revokeArg !== undefined) {
+                    const targets = revokeArg === "all" ? open.filter((i) => i.mine) : open.filter((i) => i.token === revokeArg || i.token.endsWith(revokeArg.replace(/^…/, "")));
+                    if (!targets.length) {
+                        client.close();
+                        die(revokeArg === "all" ? "no open invites of yours to revoke" : `no open invite matches "${revokeArg}" — pantheon invite --list shows them`);
+                    }
+                    for (const i of targets) {
+                        await client.revokeInvite(i.token).catch((e) => { client.close(); return die(e.message); });
+                        console.log(`revoked …${i.token.slice(-6)}  (minted by ${i.created_by}, would have expired ${new Date(i.expires_at).toLocaleString()})`);
+                    }
+                    client.close();
+                    return;
+                }
+                if (!open.length)
+                    console.log(D("no open invites"));
+                for (const i of open)
+                    console.log(`${i.mine ? C(i.token) : D(i.token)}  by ${i.created_by}  expires ${new Date(i.expires_at).toLocaleString()}${i.may_wake ? "  may wake" : ""}${i.mine ? "" : D("  (not yours — masked)")}`);
+                if (open.length)
+                    console.log(D(`\nrevoke one: pantheon invite --revoke <token or its last 6 characters>   ·   all of yours: pantheon invite --revoke all`));
+                client.close();
+                return;
+            }
             const ttl = Number(flag("ttl", "1440"));
             const mayWake = argv.includes("--may-wake") ? true : argv.includes("--no-wake") ? false : wakeDefault(loadProfile(cfg));
             const inv = await client.makeInvite(mayWake, ttl).catch((e) => die(e.message));
-            console.log(`pantheon join ${toInvite({ ...cfg, token: inv.url })}`);
+            const raw = toInvite({ ...cfg, token: inv.url });
+            const link = toJoinLink({ relay: cfg.relay, space: cfg.space, token: inv.url });
+            console.log(`pantheon join ${raw}`);
+            if (link)
+                console.error(`\n${D("Or send this — it unfurls in chat with the team's name, and pantheon join accepts it too:")}\n  ${C(link)}`);
             console.error(D(`\nSingle use, expires ${new Date(inv.expires_at).toLocaleString()}.`));
             console.error(D(`For a teammate who is not technical, forward this and their agent does the rest:`));
-            console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${toInvite({ ...cfg, token: inv.url })}`)}`);
+            console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? raw}`)}`);
             client.close();
             return;
         }
@@ -616,7 +657,7 @@ async function main() {
             return;
         }
         case "join": {
-            const invite = argv[1] ?? die("usage: pantheon join pantheon://host/space#token [setup answers as flags — pantheon setup --questions]");
+            const invite = argv[1] ?? die("usage: pantheon join <invite>   (pantheons://host/space#token, or https://www.joinpantheon.network/join/<team>#<token>)  [setup answers as flags — pantheon setup --questions]");
             const setupFlags = parseSetupFlags(argv);
             if (setupFlags.errors.length)
                 die(setupFlags.errors.join("\n") + "\n  pantheon setup --questions  lists every answer");
@@ -674,8 +715,8 @@ async function main() {
                 console.error(`${B("setting this machine up")} ${D("(user scope)")}\n`);
                 const wired = wireUp({
                     hook: !argv.includes("--no-hook"),
-                    notifications: !argv.includes("--no-notifications") && process.platform === "darwin",
-                    menubar: !argv.includes("--no-menubar") && process.platform === "darwin",
+                    notifications: !argv.includes("--no-notifications"),
+                    menubar: !argv.includes("--no-menubar"),
                     unattended: wp.project,
                     workerHow: wp.how,
                 });
@@ -1088,7 +1129,8 @@ async function main() {
                 console.log(`  menu bar  ${C("running")}   ${menubar.managedBy === "launchd" ? `service ${menubar.label}` : "started by hand"}   pid ${menubar.pid}`);
             }
             else {
-                console.log(`  menu bar  ${D("not running")}   ${D("pantheon service install menubar — status and pause/resume in the menu bar")}`);
+                const why = desktopUnavailable(hostEnv(), "the menu bar");
+                console.log(`  menu bar  ${D("not running")}   ${D(why ?? "pantheon service install menubar — status and pause/resume in the menu bar")}`);
             }
             if (notifier.running) {
                 console.log(`  notifier  ${C("running")}   ${notifier.managedBy === "launchd" ? `service ${notifier.label}` : "started by hand"}   pid ${notifier.pid}`);

package/dist/client.js

@@ -41,6 +41,7 @@ export class PantheonClient {
     plan = null;
     enroll = null;
     inviteUrl = null;
+    invitesList = null;
     constructor(cfg, onEvent, opts) {
         this.cfg = cfg;
         this.onEvent = onEvent;
@@ -138,6 +139,9 @@ export class PantheonClient {
                         break;
                     case "claimed":
                         break;
+                    case "invites":
+                        this.invitesList = msg.invites;
+                        break;
                     case "invite":
                         this.inviteUrl = { url: msg.url, expires_at: msg.expires_at };
                         break;
@@ -417,6 +421,36 @@ export class PantheonClient {
             }
         });
     }
+    listInvites() {
+        if (!this.ws || this.ws.readyState !== 1)
+            return Promise.reject(new Error(`not connected to relay (${this.pending ?? this.lastError ?? "offline"})`));
+        return new Promise((res, rej) => {
+            this.invitesList = null;
+            const cid = `c${++this.cid}`;
+            const finish = () => { clearInterval(poll); clearTimeout(t); this.acks.delete(cid); };
+            const t = setTimeout(() => { finish(); rej(new Error("relay did not list the invites in 10s")); }, 10_000);
+            const poll = setInterval(() => { if (this.invitesList) {
+                finish();
+                const v = this.invitesList;
+                this.invitesList = null;
+                res(v);
+            } }, 40);
+            this.acks.set(cid, (v) => { if ("error" in v) {
+                finish();
+                rej(new Error(v.error));
+            } });
+            try {
+                this.ws?.send(JSON.stringify({ t: "invites", cid }));
+            }
+            catch (e) {
+                finish();
+                rej(e);
+            }
+        });
+    }
+    revokeInvite(token) {
+        return this.rpc({ t: "revoke_invite", token: token.replace(/^…/, "") });
+    }
     myObligations() {
         return this.obligations.filter((o) => o.owner === this.cfg.member || o.owner === `human:${this.cfg.member}`);
     }

package/dist/config.js

@@ -275,17 +275,29 @@ export function toInvite(cfg) {
     const scheme = u.protocol === "wss:" ? "pantheons" : "pantheon";
     return `${scheme}://${u.host}/${encodeURIComponent(cfg.space)}#${cfg.token}`;
 }
+export const JOIN_LINK_BASE = "https://www.joinpantheon.network/join";
+const HOSTED_RELAY = "wss://relay.joinpantheon.network";
+const JOIN_SLUG = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
+export function toJoinLink(cfg) {
+    if (cfg.relay.replace(/\/+$/, "") !== HOSTED_RELAY || !JOIN_SLUG.test(cfg.space))
+        return null;
+    return `${JOIN_LINK_BASE}/${cfg.space}#${cfg.token}`;
+}
 export function fromInvite(invite) {
     const clean = invite
         .replace(/\u001b\[[0-9;]*m/g, "")
         .replace(/[\u0000-\u001f\u007f]/g, "")
         .trim()
         .replace(/^['"`]|['"`]$/g, "")
-        .replace(/^pantheon\s+join\s+/i, "")
         .trim();
-    const m = /^(pantheons?):\/\/([^/]+)\/([^#]+)#(.+)$/.exec(clean);
+    const web = /https?:\/\/(?:www\.)?joinpantheon\.network\/join\/([^\s#?/"'`]+)(?:\?[^\s#"'`]*)?#([^\s"'`]+)/i.exec(clean);
+    if (web) {
+        const [, slug, token] = web;
+        return { relay: HOSTED_RELAY, space: decodeURIComponent(slug), token };
+    }
+    const m = /(pantheons?):\/\/([^/\s"'`]+)\/([^#\s"'`]+)#([^\s"'`]+)/.exec(clean);
     if (!m)
-        throw new Error("not a pantheon invite — expected pantheon://host/space#token (or pantheons:// for TLS)");
+        throw new Error("not a pantheon invite — expected pantheons://host/space#token (pantheon:// without TLS), or https://www.joinpantheon.network/join/<team>#<token>");
     const [, scheme, host, space, token] = m;
     return {
         relay: `${scheme === "pantheons" ? "wss" : "ws"}://${host}`,

package/dist/doctor.js

@@ -11,6 +11,7 @@ import { loadPersonas } from "./persona.js";
 import { workerProc } from "./machine.js";
 import { VERSION } from "./version.js";
 import { serviceInstalled } from "./service.js";
+import { hostEnv } from "./host-env.js";
 const sh = (cmd, cwd) => {
     try {
         return execFileSync("sh", ["-lc", cmd], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
@@ -46,6 +47,13 @@ export async function doctor(projectDir) {
     major >= 22
         ? add("pass", "node", `v${process.versions.node}`)
         : add("fail", "node", `v${process.versions.node} is too old`, "pantheon needs Node 22 or newer (the relay uses node:sqlite) — install it and re-run");
+    const host = hostEnv();
+    if (host.ephemeral) {
+        add("warn", "machine", `${host.platform} in ${host.kind === "container" ? "a container" : "a cloud workspace"} — ${host.evidence.join("; ")}`, `this is not the computer you work on, which is why it reports ${host.platform} to someone who may be sitting at a Mac. The team and your account are fine here, but the menu bar, desktop alerts and the worker belong on your own machine — run the setup from a terminal there.`);
+    }
+    else {
+        add("pass", "machine", `${host.platform}${host.desktop ? " — menu bar and desktop alerts can run here" : " — no menu bar or desktop alerts (macOS only); use phone or chat delivery"}`);
+    }
     let cfg = null;
     try {
         cfg = load();
@@ -193,6 +201,11 @@ export async function doctor(projectDir) {
             add("warn", "wake rights", `${who}, but no worker is running here, so nothing can be woken`, "start one with `pantheon service install worker --project <a git repo>`; until then a peer's act waits for you to type");
         }
     }
+    if (host.desktop) {
+        serviceInstalled("menubar")
+            ? add("pass", "menu bar", "installed — status, pause/resume, and a badge when a decision needs you")
+            : add("warn", "menu bar", "not installed on a Mac that can run it", "install it with: pantheon service install menubar (needs the Xcode Command Line Tools — xcode-select --install — and a setup that ran on this computer, not in a cloud agent). --no-menubar at setup also leaves it off; that is fine if it was your choice");
+    }
     if (!hookStates.length && !hook.installed) {
         add("warn", "wake-up hook", "not installed — your agent will not notice a peer's message until you ask it to", "pantheon hook install --user (auto-detects claude / codex / cursor on PATH)");
     }

package/dist/email.js

@@ -1,9 +1,9 @@
 function subjectAndBody(code, purpose) {
     const action = purpose === "signup" ? "confirm your email and finish signing up" : "add this device to your account";
     const eyebrow = purpose === "signup" ? "Confirm your email" : "New device sign-in";
-    const subject = `Your pantheon code: ${code}`;
+    const subject = `Your Pantheon code: ${code}`;
     const text = [
-        `pantheon — ${eyebrow.toLowerCase()}`,
+        `Pantheon — ${eyebrow.toLowerCase()}`,
         ``,
         `Your verification code is ${code}.`,
         ``,
@@ -12,37 +12,61 @@ function subjectAndBody(code, purpose) {
         ``,
         `The code expires in 10 minutes and works once. If you did not request it,`,
         `ignore this email — nothing happens without the code.`,
+        ``,
+        `joinpantheon.network — the execution layer for companies`,
     ].join("\n");
-    const mono = `ui-monospace,'SF Mono',Menlo,Consolas,'Liberation Mono',monospace`;
-    const serif = `Georgia,'Iowan Old Style','Times New Roman',Times,serif`;
+    const paper = "#eae4da", card = "#f2ede5", stone = "#ddd4c3", ink = "#292927", faint = "#7c766d", gold = "#d8a33a";
+    const mono = `'SF Mono',Menlo,Consolas,'Liberation Mono',monospace`;
+    const serif = `Georgia,'Times New Roman',Times,serif`;
     const html = `<!doctype html>
 <html lang="en">
-<body style="margin:0;padding:0;background-color:#E9EDEC">
-  <div style="display:none;max-height:0;overflow:hidden;mso-hide:all">Enter it to ${action} — expires in 10 minutes.&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;</div>
-  <table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background-color:#E9EDEC">
-    <tr><td align="center" style="padding:32px 16px">
-      <table role="presentation" width="440" cellpadding="0" cellspacing="0" style="max-width:440px;width:100%">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<meta name="color-scheme" content="light">
+<meta name="supported-color-schemes" content="light">
+<title>Your Pantheon code</title>
+</head>
+<body style="margin:0;padding:0;background:${paper}">
+  <div style="display:none;max-height:0;overflow:hidden;opacity:0">Your code is ${code}. It expires in 10 minutes and works once.&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;</div>
+  <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="background:${paper};margin:0;padding:0">
+    <tr><td align="center" style="padding:40px 16px">
+      <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="max-width:480px;width:100%">
 
-        <tr><td style="padding:0 4px 14px;border-bottom:2px solid #101A1C">
-          <span style="font-family:${mono};font-size:16px;font-weight:600;letter-spacing:.02em;color:#101A1C">pan<span style="color:#0E6F78">theon</span></span>
+        <tr><td align="left" style="padding:0 0 28px 0">
+          <img src="https://www.joinpantheon.network/email/mark.png" width="28" height="28" alt="Pantheon" style="display:inline-block;vertical-align:middle;border:0">
+          <span style="display:inline-block;vertical-align:middle;padding-left:10px;font-family:${serif};font-size:19px;letter-spacing:.01em;color:${ink}">Pantheon</span>
         </td></tr>
 
-        <tr><td style="background-color:#F8FAF9;border:1px solid #C3CDCD;border-top:0;padding:28px 28px 24px">
-          <table role="presentation" width="100%" cellpadding="0" cellspacing="0">
-            <tr><td style="font-family:${mono};font-size:11px;font-weight:600;letter-spacing:.13em;text-transform:uppercase;color:#0E6F78;padding-bottom:14px">${eyebrow}</td></tr>
-            <tr><td align="center" style="background-color:#DFE5E4;border:1px solid #C3CDCD;padding:18px 12px">
-              <span style="font-family:${mono};font-size:34px;font-weight:700;letter-spacing:10px;color:#101A1C">${code}</span>
+        <tr><td style="background:${card};border:1px solid ${stone};border-radius:2px;padding:36px 32px 32px 32px">
+
+          <p style="margin:0 0 22px 0;font-family:${mono};font-size:11px;letter-spacing:.14em;text-transform:uppercase;color:${faint}">${eyebrow}</p>
+
+          <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0">
+            <tr><td align="center" style="background:${paper};border:1px solid ${stone};border-radius:2px;padding:22px 12px">
+              <span style="font-family:${mono};font-size:34px;line-height:1.1;letter-spacing:.22em;color:${ink};font-weight:600">${code}</span>
             </td></tr>
-            <tr><td style="font-family:${serif};font-size:16px;line-height:1.55;color:#3B4A4D;padding:18px 0 12px">Enter it where the CLI is waiting, to ${action}:</td></tr>
-            <tr><td style="background-color:#DFE5E4;border:1px solid #C3CDCD;padding:11px 14px;font-family:${mono};font-size:13px;color:#101A1C"><span style="color:#0E6F78">$</span>&nbsp; pantheon verify ${code}</td></tr>
-            <tr><td style="padding-top:18px"></td></tr>
-            <tr><td style="font-family:${mono};font-size:12px;line-height:1.7;color:#5A686A;padding-top:14px;border-top:1px solid #C3CDCD">Expires in 10 minutes. Works once.<br>Didn't request it? Ignore this email — nothing happens without the code.</td></tr>
           </table>
+
+          <p style="margin:24px 0 14px 0;font-family:${serif};font-size:16px;line-height:1.55;color:${ink}">Enter it where the CLI is waiting, to ${action}:</p>
+
+          <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0">
+            <tr><td style="background:${paper};border-left:2px solid ${gold};padding:13px 16px">
+              <span style="font-family:${mono};font-size:14px;color:${ink}">pantheon verify ${code}</span>
+            </td></tr>
+          </table>
+
+          <p style="margin:26px 0 0 0;padding-top:20px;border-top:1px solid ${stone};font-family:${serif};font-size:14px;line-height:1.6;color:${faint}">
+            Expires in 10 minutes. Works once.<br>
+            Didn't request it? Ignore this email — nothing happens without the code.
+          </p>
+
         </td></tr>
 
-        <tr><td align="center" style="padding:16px 4px;font-family:${mono};font-size:11px;letter-spacing:.09em;color:#5A686A">
-          <a href="https://joinpantheon.network" style="color:#5A686A;text-decoration:none;border-bottom:1px solid #9AA8A8">joinpantheon.network</a>
-          &nbsp;&nbsp;·&nbsp;&nbsp;your agents, one space
+        <tr><td align="left" style="padding:22px 2px 0 2px;font-family:${mono};font-size:11.5px;letter-spacing:.04em;color:${faint}">
+          <a href="https://www.joinpantheon.network" style="color:${faint};text-decoration:underline">joinpantheon.network</a>
+          <span style="color:${gold};padding:0 8px">&middot;</span>
+          The execution layer for companies
         </td></tr>
 
       </table>

package/dist/host-env.js

@@ -0,0 +1,57 @@
+import { existsSync, readFileSync } from "node:fs";
+const CLOUD_VARS = [
+    ["CODESPACES", "GitHub Codespaces ($CODESPACES)"],
+    ["REMOTE_CONTAINERS", "a VS Code dev container ($REMOTE_CONTAINERS)"],
+    ["REMOTE_CONTAINERS_IPC", "a VS Code dev container ($REMOTE_CONTAINERS_IPC)"],
+    ["DEVCONTAINER", "a dev container ($DEVCONTAINER)"],
+    ["GITPOD_WORKSPACE_ID", "a Gitpod workspace ($GITPOD_WORKSPACE_ID)"],
+    ["CLOUD_SHELL", "a cloud shell ($CLOUD_SHELL)"],
+];
+export function hostEnv(env = process.env, plat = process.platform, exists = existsSync, read = (p) => readFileSync(p, "utf8")) {
+    if (plat === "darwin") {
+        return { platform: plat, kind: "local", evidence: [], ephemeral: false, desktop: true };
+    }
+    const evidence = [];
+    let kind = "local";
+    for (const [name, label] of CLOUD_VARS) {
+        if (env[name]) {
+            evidence.push(label);
+            kind = "cloud-workspace";
+        }
+    }
+    if (exists("/.dockerenv"))
+        evidence.push("/.dockerenv exists");
+    if (exists("/run/.containerenv"))
+        evidence.push("/run/.containerenv exists (podman)");
+    let cgroup = "";
+    try {
+        cgroup = exists("/proc/1/cgroup") ? read("/proc/1/cgroup") : "";
+    }
+    catch { }
+    if (/docker|containerd|kubepods|lxc/.test(cgroup))
+        evidence.push("pid 1 is in a container cgroup (/proc/1/cgroup)");
+    if (evidence.length && kind === "local")
+        kind = "container";
+    return {
+        platform: plat,
+        kind,
+        evidence,
+        ephemeral: kind !== "local",
+        desktop: false,
+    };
+}
+export function ephemeralWarning(host) {
+    return `this looks like ${host.kind === "container" ? "a container" : "a cloud workspace"}, not the computer you work on `
+        + `(${host.evidence.join("; ")}). That is why this machine reports ${host.platform}: your editor's agent is running `
+        + `somewhere else, so the menu bar and desktop alerts cannot be installed, and anything installed here disappears with `
+        + `the session. Your account and team are fine — run the same setup from a terminal on your own computer to finish it.`;
+}
+export function desktopUnavailable(host, what) {
+    if (host.desktop)
+        return null;
+    if (host.ephemeral) {
+        return `not available — ${what} ${what === "desktop alerts" ? "need" : "needs"} your own computer, and this is ${host.kind === "container" ? "a container" : "a cloud workspace"} reporting ${host.platform}`;
+    }
+    return `not available — ${what} ${host.platform === "darwin" ? "could not be built here" : `${what === "desktop alerts" ? "are" : "is"} macOS-only, and this machine is ${host.platform}`}`;
+}
+//# sourceMappingURL=host-env.js.map

package/dist/protocol.js

@@ -132,6 +132,15 @@ export const MakeInvite = z.object({
     may_wake: z.boolean().default(true),
     ttl_minutes: z.number().int().min(1).max(10080).default(60),
 });
+export const ListInvites = z.object({
+    t: z.literal("invites"),
+    cid: z.string().max(64).optional(),
+});
+export const RevokeInvite = z.object({
+    t: z.literal("revoke_invite"),
+    cid: z.string().max(64).optional(),
+    token: z.string().min(6).max(64),
+});
 export const Admit = z.object({
     t: z.literal("admit"),
     cid: z.string().max(64).optional(),
@@ -183,7 +192,7 @@ export const WorkerState = z.object({
     detail: z.string().max(200).optional(),
     until: z.number().int().positive().optional(),
 });
-export const Inbound = z.discriminatedUnion("t", [Hello, SendAct, OpenGoal, Claim, Admit, MakeInvite, PublishProfile, BindRepo, DeleteSpace, WorkerState, Ping]);
+export const Inbound = z.discriminatedUnion("t", [Hello, SendAct, OpenGoal, Claim, Admit, MakeInvite, ListInvites, RevokeInvite, PublishProfile, BindRepo, DeleteSpace, WorkerState, Ping]);
 export function shouldDeferToHuman(sessions, work, opts = {}) {
     const now = opts.now ?? Date.now();
     const idleMs = opts.idleMs ?? LIMITS.workerIdleMs;

package/dist/quickstart.js

@@ -12,6 +12,7 @@ import { detectAvailable, agentById } from "./agents.js";
 import { installService } from "./service.js";
 import { ensureNativeNotifier } from "./notifier.js";
 import { ensureTrayBinary, writeTrayCommands } from "./tray.js";
+import { desktopUnavailable, ephemeralWarning, hostEnv } from "./host-env.js";
 import { existsSync } from "node:fs";
 import { grant as grantCap, loadPolicy, policyPath, savePolicy } from "./worker-policy.js";
 import { Relay } from "./relay.js";
@@ -27,9 +28,12 @@ export function wireUp(opts, deps = {}) {
     const installSvc = deps.installService ?? installService;
     const ensureNotifier = deps.ensureNotifier ?? ensureNativeNotifier;
     const ensureTray = deps.ensureTray ?? ensureTrayBinary;
+    const host = deps.host ?? hostEnv();
     const tools = installForUser().map((t) => ({ tool: t.tool, status: t.status }));
     const granted = [];
     const warnings = [];
+    if (host.ephemeral)
+        warnings.push(ephemeralWarning(host));
     if (opts.hook) {
         try {
             const { agents } = installHooks("user");
@@ -47,7 +51,10 @@ export function wireUp(opts, deps = {}) {
     else {
         tools.push({ tool: "wake-up hook", status: "skipped (--no-hook) — a peer's message waits until you type" });
     }
-    if (opts.notifications) {
+    if (opts.notifications && !host.desktop) {
+        tools.push({ tool: "notifications", status: desktopUnavailable(host, "desktop alerts") });
+    }
+    else if (opts.notifications) {
         try {
             ensureNotifier();
             installSvc("notifier", homedir(), []);
@@ -61,7 +68,10 @@ export function wireUp(opts, deps = {}) {
     else {
         tools.push({ tool: "notifications", status: "off (--no-notifications) — human escalations only appear in pantheon status" });
     }
-    if (opts.menubar) {
+    if (opts.menubar && !host.desktop) {
+        tools.push({ tool: "menu bar", status: desktopUnavailable(host, "the menu bar") });
+    }
+    else if (opts.menubar) {
         try {
             ensureTray();
             writeTrayCommands();
@@ -241,7 +251,7 @@ export async function start(opts) {
     const wired = wireUp({
         hook: opts.hook !== false,
         notifications: opts.notifications !== false,
-        menubar: opts.menubar !== false && process.platform === "darwin",
+        menubar: opts.menubar !== false,
         unattended: opts.unattended ?? null,
         ...(opts.workerHow ? { workerHow: opts.workerHow } : {}),
     });
@@ -290,7 +300,7 @@ export async function join(opts) {
     const wired = wireUp({
         hook: opts.hook !== false,
         notifications: opts.notifications !== false,
-        menubar: opts.menubar !== false && process.platform === "darwin",
+        menubar: opts.menubar !== false,
         unattended: opts.unattended ?? null,
         ...(opts.workerHow ? { workerHow: opts.workerHow } : {}),
     });