@join-pantheon/cli 0.30.0 → 0.31.1

package/dist/cli.js

@@ -8,7 +8,7 @@ process.emitWarning = ((warning, ...rest) => {
 });
 import { randomBytes } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import { PantheonClient } from "./client.js";
 import { agentSpawn, CmdLineUnsafe } from "./which.js";
 import { fromInvite, looksLikeInviteCode, resolveInviteCode, load, save, toInvite, toJoinLink, resolveFor, loadAll, identity, repoInfo, bindRepo, bindFolder, unbindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
@@ -18,9 +18,9 @@ import { install, launcher, installForUser } from "./install.js";
 import { Relay } from "./relay.js";
 import { runMcp } from "./mcp.js";
 import { Worker } from "./worker.js";
-import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, sendDesktopNotification } from "./notifier.js";
+import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, runNotifiers, sendDesktopNotification } from "./notifier.js";
 import { desktopUnavailable, hostEnv } from "./host-env.js";
-import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, wakeDefault } from "./profile.js";
+import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, wakeDefault, wakeMode } from "./profile.js";
 import { runGuide, terminalIO, questionOrNull, parseSetupFlags, questionnaire, optOutsFrom } from "./setup-guide.js";
 import { selectActs, formatAct, resolveRef } from "./history-view.js";
 import { doctor, render, shareBlock } from "./doctor.js";
@@ -258,6 +258,175 @@ function sameHost(a, b) {
         return false;
     }
 }
+async function findAndBindRepos(all, m, teamRepos, opts = {}) {
+    const want = teamRepos.map((r) => r.fingerprint);
+    if (!want.length) {
+        console.error(D(`  "${m.name}" has no repos registered yet — the first member to connect from a clone registers it`));
+        return;
+    }
+    const name = (fp) => { const r = teamRepos.find((x) => x.fingerprint === fp); return r?.origin ? r.origin.replace(/^.*[:/]([^:/]+)$/, "$1") : fp; };
+    const already = new Set(Object.entries(all.bindings ?? {}).filter(([, b]) => b.space === m.id).map(([k]) => k));
+    const unbound = new Set(all.unbound ?? []);
+    for (const fp of want.filter((f) => unbound.has(f) && !already.has(f)))
+        console.error(D(`  ${name(fp)}: you unbound it on this machine — left so (pantheon use ${m.name} --here inside it to bind it again)`));
+    const todo = want.filter((fp) => !already.has(fp) && !unbound.has(fp));
+    if (!todo.length) {
+        console.error(`${C("✓")} every repo "${m.name}" works from is bound on this machine: ${want.map(name).join(", ")}`);
+        return;
+    }
+    let recents = opts.recents;
+    const tty = !!process.stdin.isTTY && !!process.stderr.isTTY;
+    if (recents === undefined && tty) {
+        const rl = createInterface({ input: process.stdin, output: process.stderr });
+        const a = ((await questionOrNull(rl, `Also look in the folders your editors and agents have opened? Only their paths are read, and nothing leaves this machine. [Y/n] `)) ?? "").trim().toLowerCase();
+        rl.close();
+        recents = a === "" || a.startsWith("y");
+    }
+    const { findTeamClones } = await import("./repo-find.js");
+    console.error(D(`  looking for ${todo.map(name).join(", ")} on this machine…`));
+    let found = findTeamClones(todo, { recents: !!recents, ...(opts.extra ? { extra: opts.extra } : {}) });
+    let missing = todo.filter((fp) => !found.some((f) => f.repo.fingerprint === fp));
+    if (missing.length && tty) {
+        const rl = createInterface({ input: process.stdin, output: process.stderr });
+        const a = ((await questionOrNull(rl, `  Not found: ${missing.map(name).join(", ")}. The folder your repos live in (Enter to skip): `)) ?? "").trim();
+        rl.close();
+        if (a) {
+            const more = findTeamClones(missing, { extra: [resolve(a.replace(/^~(?=$|\/)/, homedir()))] });
+            found = [...found, ...more];
+            missing = missing.filter((fp) => !more.some((f) => f.repo.fingerprint === fp));
+        }
+    }
+    const elsewhere = found.filter((f) => { const b = all.bindings?.[f.repo.fingerprint]; return !!b && b.space !== m.id; });
+    for (const f of elsewhere)
+        console.error(`  ${D("–")} ${name(f.repo.fingerprint).padEnd(18)} ${f.repo.root}   ${D(`bound to "${findMembership(all, all.bindings[f.repo.fingerprint].space)?.name ?? all.bindings[f.repo.fingerprint].space}" — left there (pantheon use ${m.name} --here inside it to move it)`)}`);
+    found = found.filter((f) => !elsewhere.includes(f));
+    for (const f of found)
+        console.error(`  ${C("✓")} ${name(f.repo.fingerprint).padEnd(18)} ${f.repo.root}   ${D(`(${f.how})`)}`);
+    for (const fp of missing)
+        console.error(`  ${D("✗")} ${name(fp).padEnd(18)} ${D("not on this machine — clone it, then: pantheon repo find")}`);
+    if (!found.length)
+        return;
+    let go = !!opts.yes || !!opts.auto;
+    if (!go && tty) {
+        const rl = createInterface({ input: process.stdin, output: process.stderr });
+        const a = ((await questionOrNull(rl, `Use ${found.length === 1 ? "it" : `these ${found.length}`} for "${m.name}"? [Y/n] `)) ?? "").trim().toLowerCase();
+        rl.close();
+        go = a === "" || a.startsWith("y");
+    }
+    if (!go) {
+        console.error(D(`  nothing bound${tty ? "" : " — run it again with --yes to bind them"}`));
+        return;
+    }
+    for (const f of found)
+        bindRepo(f.repo, m.id);
+    const them = found.length === 1 ? "it" : "them";
+    console.error(`${B("bound")} ${found.map((f) => name(f.repo.fingerprint)).join(", ")} → "${m.name}" — agents opened in ${them} speak for the team, and your worker (when it is on) serves ${them}`);
+}
+async function bindReposIn(dir, all, m, yes, again) {
+    const found = (await import("./repo-find.js")).reposUnder(dir, 3);
+    const taken = found.filter((r) => { const b = all.bindings?.[r.fingerprint]; return !!b && b.space !== m.id; });
+    for (const r of taken)
+        console.error(D(`  ${repoLabel(r)} is bound to "${findMembership(all, all.bindings[r.fingerprint].space)?.name ?? all.bindings[r.fingerprint].space}" — left there (pantheon use ${m.name} --here inside it to move it)`));
+    const unbound = new Set(all.unbound ?? []);
+    for (const r of found.filter((x) => unbound.has(x.fingerprint)))
+        console.error(D(`  ${repoLabel(r)}: you unbound it on this machine — left so (pantheon use ${m.name} --here inside it to bind it again)`));
+    let inside = found.filter((r) => !taken.includes(r) && !unbound.has(r.fingerprint));
+    if (inside.length && !yes) {
+        console.error(`  ${B("repos in it")}  ${inside.map(repoLabel).join(", ")}`);
+        if (process.stdin.isTTY) {
+            const rl = createInterface({ input: process.stdin, output: process.stderr });
+            const a = ((await questionOrNull(rl, `  Bind ${inside.length === 1 ? "it" : `these ${inside.length}`} to "${m.name}" and register ${inside.length === 1 ? "it" : "them"} with the team? [Y/n] `)) ?? "").trim().toLowerCase();
+            rl.close();
+            if (!(a === "" || a.startsWith("y")))
+                inside = [];
+        }
+        else {
+            console.error(D(`  not bound yet — to bind and register them with "${m.name}": ${again}`));
+            inside = [];
+        }
+    }
+    if (!inside.length)
+        return 0;
+    for (const r of inside)
+        bindRepo(r, m.id);
+    const c = configFor(loadAll() ?? all, m, null);
+    const client = new PantheonClient(c, undefined, { role: "cli" });
+    const registered = [], failed = [];
+    try {
+        await client.connect();
+        for (const r of inside) {
+            if (client.repos.some((x) => x.fingerprint === r.fingerprint)) {
+                registered.push(repoLabel(r));
+                continue;
+            }
+            await client.bindRepo(r.fingerprint, repoShare(r)).then(() => registered.push(repoLabel(r)), (e) => failed.push(`${repoLabel(r)} (${e.message.split("\n")[0]})`));
+        }
+    }
+    catch (e) {
+        failed.push(...inside.map((r) => `${repoLabel(r)} (${e.message.split("\n")[0]})`));
+    }
+    finally {
+        client.close();
+    }
+    console.error(`  ${B("repos in it")}  ${inside.map(repoLabel).join(", ")} — each bound to "${m.name}"${registered.length ? "" : D(" here")}`);
+    if (failed.length)
+        console.error(D(`  not registered with the team yet: ${failed.join("; ")} — pantheon repo add, from each, when the relay is reachable`));
+    return inside.length;
+}
+async function bindReposHere(yes) {
+    const cwd = process.cwd();
+    if (repoInfo(cwd))
+        return;
+    const real = (d) => { try {
+        return realpathSync.native(d);
+    }
+    catch {
+        return resolve(d);
+    } };
+    const here = real(cwd);
+    if (here === real(homedir()) || dirname(here) === here)
+        return;
+    if (["Downloads", "Desktop", "Documents", "Library"].some((n) => here === join(real(homedir()), n)))
+        return;
+    const all = loadAll(), j = load();
+    const m = all && j ? findMembership(all, j.spaceId ?? j.space) ?? findMembership(all, j.space) : null;
+    if (!all || !m)
+        return;
+    const n = (await import("./repo-find.js")).reposUnder(cwd, 3).length;
+    if (!n)
+        return;
+    console.error("");
+    const many = n > 6 && !process.stdin.isTTY;
+    if (many) {
+        console.error(D(`  this folder holds ${n} repos — to bind and register them all with "${m.name}": pantheon use ${m.name} --here --yes   (or pantheon repo find, which binds only the team's own)`));
+        return;
+    }
+    await bindReposIn(cwd, all, m, yes, `pantheon use ${m.name} --here --yes`).catch((e) => console.error(D(`  could not bind the repos here: ${e.message}`)));
+}
+async function workerAfterBinding(how) {
+    if (how === "off")
+        return;
+    const j = load();
+    if (!j?.spaceId || wakeMode(loadProfile(j)) === "no")
+        return;
+    const { serviceInstalled, servicesUnavailable } = await import("./service.js");
+    if (servicesUnavailable(process.platform) || serviceInstalled("worker"))
+        return;
+    const ws = (await import("./worker-fleet.js")).teamWorkspaces(loadAll(), j.spaceId);
+    if (!ws.length)
+        return;
+    try {
+        const { commandsChosen } = await import("./profile.js");
+        const commandsOn = ws.some((w) => w.kind === "repo") && commandsChosen() !== false;
+        installService("worker", ws[0].path, commandsOn ? ["--allow-bash"] : []);
+        console.error(`  ${C("✓")} worker on — serves ${ws.map((w) => w.name).join(", ")} while you are away${wakeMode(loadProfile(j)) === "approved" ? "; you are asked the first time each teammate needs it" : ""}${commandsOn ? "; a run may run tests, commit and push to its own branch (edits only: pantheon setup --commands no)" : ""}`);
+    }
+    catch (e) {
+        console.error(D(`  the worker did not install: ${e.message} — pantheon service install worker`));
+    }
+}
+const repoLabel = (r) => r.origin ?? basename(r.root);
+const repoShare = (r) => (r.origin ? r.origin.replace(/^.*[:/]([^:/]+)$/, "$1") : basename(r.root));
 const teamFlag = (cfg) => (flag("space") ? ` --space ${cfg.space}` : "");
 function need() {
     const r = resolveFor(process.cwd());
@@ -268,8 +437,18 @@ function need() {
             die(`you are not in a team called "${flag("space")}". Yours: ${Object.values(f?.spaces ?? {}).map((x) => x.name).join(", ") || "none"}`);
         return r.cfg && (r.cfg.spaceId === m.id || r.cfg.space === m.name) && r.reason !== "default" ? r.cfg : configFor(f, m, null);
     }
-    if (r.cfg && r.cfg.space)
+    if (r.cfg && r.cfg.space) {
+        if (r.autoBound && r.repo && r.cfg.spaceId) {
+            try {
+                bindRepo(r.repo, r.cfg.spaceId);
+                console.error(D(`  ${r.repo.origin ?? r.repo.root} is one of "${r.cfg.space}"'s repos — bound here`));
+            }
+            catch { }
+        }
         return r.cfg;
+    }
+    if (r.claimedBy?.length)
+        die(`this repo is listed by more than one of your teams (${r.claimedBy.join(", ")}) — pick one: pantheon use <team> --here   (or name it: --space <team>)`);
     if (r.repoUnknown)
         die(`git did not answer in this folder, so which team this repo is bound to cannot be told — and a command for the wrong team is worse than none.\n  Check that git works here (git status), then run it again — or name the team: --space <team>`);
     if (r.reason === "unbound") {
@@ -343,6 +522,16 @@ function printGranted(granted) {
         console.error(`  \u2022 ${g}`);
     console.error(D(`  Undo: pantheon hook uninstall  ·  pantheon service uninstall worker`));
 }
+function printRelayNote(relay) {
+    let host = relay ?? "the relay";
+    try {
+        if (relay)
+            host = new URL(relay.replace(/^ws/, "http")).host;
+    }
+    catch { }
+    console.error(D(`\n  Your team's messages go through ${host}. Whoever runs it can read them (they are not end-to-end encrypted), so treat the team like a shared channel;`));
+    console.error(D(`  on a relay from 0.31 on, it cannot write or change one in a teammate's name without your machine noticing: every message is signed by its sender. Your own relay: pantheon relay`));
+}
 const HUD_ACTION_MAX_AGE_MS = 30_000;
 function unattendedProject() {
     if (argv.includes("--no-worker"))
@@ -362,7 +551,23 @@ async function guidedSetup(cfg, project, opts = {}) {
     const io = rl ? terminalIO(rl, (l) => console.error(l)) : null;
     console.error(`\n${B("A few choices, then you're done.")}${io ? "" : Object.keys(preset).length ? D("  (applying the answers you passed)") : D("  (no terminal — taking the defaults)")}`);
     try {
-        const r = await runGuide(io, { cfg, project, optOut: optOutsFrom(argv) }, {
+        let serves = null;
+        if (!project && cfg.spaceId) {
+            try {
+                const ws = (await import("./worker-fleet.js")).teamWorkspaces(loadAll(), cfg.spaceId);
+                if (ws.length)
+                    serves = { path: ws[0].path, repos: ws.some((w) => w.kind === "repo") };
+            }
+            catch { }
+        }
+        const { agentsNeedingUnsandboxed } = await import("./agents.js");
+        const r = await runGuide(io, { cfg, project, optOut: optOutsFrom(argv), serves, ...(opts.founder !== undefined ? { founder: opts.founder } : {}) }, {
+            unsandboxedAgents: () => { try {
+                return agentsNeedingUnsandboxed();
+            }
+            catch {
+                return [];
+            } },
             publish: async (p) => {
                 const c = new PantheonClient(cfg, undefined, { role: "cli" });
                 try {
@@ -632,6 +837,7 @@ ${B("day to day")}
 ${B("control")}
   pantheon admit <who>        let someone in       (--may-wake: the team lets them wake workers, and this machine allows them)
   pantheon wake allow <who>   let a teammate wake THIS machine; wake deny <who> takes it back; wake list shows who can
+  pantheon trust [<who>]      the teammates' keys this machine checks their messages against; trust <who> adopts a changed one
                               (this machine only — nothing is sent to the team; --space <team> to pick one)
   pantheon admit <who> --revoke     remove them
   pantheon worker             stay answerable while you are away
@@ -651,7 +857,7 @@ ${B("control")}
                             (auto-detects claude / codex / cursor / copilot / kiro on this machine)
   pantheon spend              woken runs on this machine, and what pantheon cannot see
   pantheon leave              remove what pantheon put on this machine
-  pantheon panic              cut off all unattended work on this machine, now
+  pantheon panic              emergency stop: ends the run in flight and the worker, and switches off wake rights in every team you are in
   pantheon doctor [--share]   check this machine end to end; --share prints it without names or paths, to paste to us
   pantheon network [--proxy <url> | --direct | --clear]   how this machine reaches the relay; save a proxy for every Pantheon process here
   pantheon setup              three questions — your name, your role, may a woken run execute commands —
@@ -701,6 +907,7 @@ const COMMAND_FLAGS = {
     invite: "--list  --revoke <token|all>  --may-wake | --no-wake  --ttl <minutes>",
     admit: "<member>  --may-wake | --no-wake  --revoke  --forget  --yes",
     wake: "allow <member> | deny <member> | list   --space <team>",
+    trust: "[<member>]  --yes  --space <team>",
     say: "<ACT> <text>  --to <member>[,<member>]  --goal <id>  --ref <id | seq | last>  --summary '<one line>'  --domains <a,b>  --branch --commit --remote (DELIVERED)  --space <team>",
     goal: "list | open \"<title>\" --with <member>[,…] [--acceptance \"…\"] [--deadline <ISO time>] [--list] | close <id> \"<summary>\"",
     history: "--goal <id>  --from <member>  --last <n>  --since <seq>  --short  --presence  --json",
@@ -713,7 +920,7 @@ const COMMAND_FLAGS = {
     doctor: "--share  --project <dir>",
     relay: "--port <n>  --host <address>  --data <dir>",
     use: "<team>  --here  --yes   ·   pantheon use --unbind   (this folder or repo bound to no team again)",
-    repo: "add [--base <branch>] | list [--all]",
+    repo: "add [--base <branch>] | list [--all] | find [<folder>] [--recents] [--yes]",
     login: "--email <address>  --relay <url>  --label <device name>",
     signup: "--email <address>  --username <name>  --relay <url>  --label <device name>",
     audit: "--space <team>  --since <hours>  --json",
@@ -762,7 +969,7 @@ function slipDistance(a, b) {
 const EXTRA_FLAGS = "--agent-cmd --approve-all --ask-before-sending --child --code --data --device --display --force --help --host --idle --keywords --local " +
     "--no-continue --no-guide --no-notify --path --peek --poll --portable --publish --queued --quiet --remind --scratch --session --surface --token --unattended " +
     "--until --user --version --all --json " +
-    "--name --title --wake --commands --alerts --decides --playbook --base --responsibilities --human-required --agent-can-decide --capabilities";
+    "--name --title --wake --commands --unsandboxed --alerts --decides --playbook --base --responsibilities --human-required --agent-can-decide --capabilities";
 const KNOWN_FLAGS = new Set([...`${Object.values(COMMAND_FLAGS).join(" ")} ${EXTRA_FLAGS}`.matchAll(/--([a-z][a-z0-9-]*)/g)].map((m) => m[1]));
 function refuseUnknownFlags() {
     if (["mcp", "hook", "tray-status", "_menubar"].includes(cmd))
@@ -895,6 +1102,7 @@ async function main() {
             for (const w of r.warnings)
                 console.error(`\x1b[33m  ! ${w}\x1b[0m` + (/NOT_SIGNED_IN/.test(w) ? signInHint("NOT_SIGNED_IN", r.cfg.relay) : ""));
             printGranted(r.granted);
+            printRelayNote(r.cfg?.relay);
             rememberWorkingProxy();
             if (!r.claimed) {
                 console.error(`\n\x1b[31m  No team was created.\x1b[0m ${D("Fix the warning above, then run `pantheon start` again.")}`);
@@ -914,21 +1122,25 @@ async function main() {
                     console.error(`\n${B("Send your teammate this one line — it sets up their whole machine:")}\n`);
                     console.error(`  ${C(`pantheon join ${r.invite}`)}\n`);
                 }
-                console.error(D(`  From their project's repo if they have one — a repo is only needed to hand over code or to be woken. Single use, expires in ${Math.round(numFlag("ttl", 1440) / 60)}h.`));
+                console.error(D(`  From the folder they work in — a clone of the team's repo, or any folder for docs and plans (no git needed). Single use, expires in ${Math.round(numFlag("ttl", 1440) / 60)}h.`));
                 console.error(D(`  Redeeming it admits them — no separate approval step. Need another? \`pantheon invite\``));
                 console.error(r.inviteMayWake
                     ? `  ${B("It also lets them wake workers:")} ${D("their requests can start an agent run on this machine while you are away (you chose wake \"anyone\"). Take it back: pantheon admit <name> --revoke")}`
-                    : D(`  It lets them join and talk to your agent. It does NOT let them wake this machine: approve a person on this machine with pantheon wake allow <name>.`));
+                    : D(`  It lets them join and talk to your agent. It does not let them wake this machine on its own: the first time their request needs it while you are away, you are asked (Always / Just this once / No). Approve ahead: pantheon wake allow <name>`));
                 console.error(D(`\n  Not technical? Forward them this instead, and their agent does the rest:`));
-                console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? r.invite}`)}`);
+                console.error(`  ${D("Tell your agent: read")} ${C("https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? r.invite}`)}`);
             }
             if (!r.reach.shareable && r.reach.hint) {
                 console.error(`\n\x1b[33m  That address only works on this machine.\x1b[0m`);
                 console.error(D(`  ${r.reach.hint}`));
             }
+            if (r.claimed) {
+                await bindReposHere(argv.includes("--yes"));
+                await workerAfterBinding(wp.how);
+            }
             printReady(r.tools);
             if (r.claimed)
-                await guidedSetup(load() ?? r.cfg, repoInfo(process.cwd())?.root ?? null, { preset: setupFlags.preset, force: Object.keys(setupFlags.preset).length > 0 || argv.includes("--yes") });
+                await guidedSetup(load() ?? r.cfg, repoInfo(process.cwd())?.root ?? null, { preset: setupFlags.preset, force: Object.keys(setupFlags.preset).length > 0 || argv.includes("--yes"), founder: true });
             if (r.relay) {
                 console.error(D(`\nKeeping the relay running here. Ctrl-C stops it (your teammate goes offline too).`));
                 await new Promise(() => { });
@@ -976,7 +1188,7 @@ async function main() {
                 console.error(`\n${D("Or send this — it unfurls in chat with the team's name, and pantheon join accepts it too:")}\n  ${C(link)}`);
             console.error(D(`\nSingle use, expires ${new Date(inv.expires_at).toLocaleString()}.`));
             console.error(D(`For a teammate who is not technical, forward this and their agent does the rest:`));
-            console.error(`  ${D("Tell your agent: run")} ${C("curl -fsSL https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? raw}`)}`);
+            console.error(`  ${D("Tell your agent: read")} ${C("https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? raw}`)}`);
             client.close();
             return;
         }
@@ -1119,15 +1331,46 @@ async function main() {
             for (const w of r.warnings)
                 console.error(`\x1b[33m  ! ${w}\x1b[0m` + (/NOT_SIGNED_IN/.test(w) ? signInHint("NOT_SIGNED_IN", parsed.relay) : ""));
             printGranted(r.granted);
+            printRelayNote(r.cfg?.relay ?? parsed.relay);
             rememberWorkingProxy();
             printReady(r.tools);
             {
                 const jc = load();
-                const mode = jc ? loadProfile(jc).agent.wake_default ?? "approved" : "approved";
+                const mode = jc ? wakeMode(loadProfile(jc)) : "anyone";
                 console.error(D(mode === "anyone"
-                    ? `\n  You chose wake "anyone": teammates this team lets wake workers can start an agent run on this machine. Change it: pantheon setup`
-                    : `\n  Nobody on the team can wake this machine until you approve them, here: pantheon wake allow <name>${mode === "no" ? "" : " (or choose \"anyone\" below)"}.`));
+                    ? `\n  Your teammates can hand work to this machine while you're away, so nothing waits on you. To approve each teammate first: pantheon setup --wake approved`
+                    : mode === "no"
+                        ? `\n  This machine is set not to be woken: teammates' requests wait for you. Change it: pantheon setup`
+                        : `\n  The first time a teammate's request needs this machine while you are away, you are asked — "Always / Just this once / No" in the menu bar. Approve someone ahead: pantheon wake allow <name>`));
             }
+            if (process.stdin.isTTY)
+                await bindReposHere(false);
+            {
+                const j = load();
+                let teamRepos = [];
+                if (j) {
+                    const { repo: _r, repoOrigin: _o, ...plain } = j;
+                    const c = new PantheonClient(plain, undefined, { role: "cli" });
+                    try {
+                        await Promise.race([c.connect(), new Promise((_, no) => setTimeout(() => no(new Error("timeout")), 8000))]);
+                        await new Promise((res) => setTimeout(res, 150));
+                        teamRepos = c.repos.map((r) => ({ fingerprint: r.fingerprint, origin: r.origin ?? null }));
+                    }
+                    catch { }
+                    finally {
+                        c.close();
+                    }
+                }
+                const all = loadAll();
+                const m = all && j ? findMembership(all, j.spaceId ?? j.space) ?? findMembership(all, j.space) : null;
+                if (!teamRepos.length && m?.repos?.length)
+                    teamRepos = m.repos.map((r) => ({ fingerprint: r.fp, origin: r.name }));
+                if (all && m && teamRepos.length) {
+                    console.error("");
+                    await findAndBindRepos(all, m, teamRepos, { auto: !process.stdin.isTTY }).catch(() => { });
+                }
+            }
+            await workerAfterBinding(wp.how);
             {
                 const joined = load();
                 if (joined)
@@ -1324,7 +1567,7 @@ async function main() {
                 for (const p of peers) {
                     const lag = p.seen_seq === undefined ? null : client.head - p.seen_seq;
                     const behind = lag === null ? null : lag <= 0 ? 0
-                        : recent ? recent.filter((a) => a.seq > p.seen_seq && a.from === cfg.member && a.act !== "JOIN" && a.act !== "LEAVE").length : lag;
+                        : recent ? recent.filter((a) => a.seq > p.seen_seq && a.from === cfg.member && a.act !== "JOIN" && a.act !== "LEAVE" && !a.meta?.organization_profile).length : lag;
                     const reach = behind === null
                         ? D(p.delivered_seq !== undefined && p.delivered_seq >= client.head
                             ? "delivered, but no read-receipt — no wake-up hook on their machine"
@@ -1354,6 +1597,12 @@ async function main() {
                 for (const o of human) {
                     const who = o.owner.replace(/^human:/, "");
                     const stale = Date.now() - o.created_at > 3_600_000;
+                    const askAct = client.seenAct(o.ref);
+                    const wakeAsk = askAct?.from === who ? askAct.meta?.wake_ask : undefined;
+                    if (who !== cfg.member && typeof wakeAsk === "string") {
+                        console.log(`  ${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${D(`is being asked on their machine whether ${wakeAsk === cfg.member ? "you" : wakeAsk} may start work there while they are away`)}`);
+                        continue;
+                    }
                     console.log(`  ${stale ? "\x1b[33m" : C("")}${who.padEnd(14)}${ageOf(o.created_at).padEnd(6)}\x1b[0m ${o.body.split("\n")[0].slice(0, 110)}  ${D(o.ref)}`);
                     if (who === cfg.member)
                         console.log(`         ${D("your peer was told this decision was coming — answer it or say it is dropped")}`);
@@ -1875,7 +2124,8 @@ async function main() {
                 catch { }
                 try {
                     const { reportActivity } = await import("./pending.js");
-                    await reportActivity({ session: `hook:${session}`, state: "busy" });
+                    if (hookCfg)
+                        await reportActivity({ cfg: hookCfg, session: `hook:${session}`, state: "busy" });
                 }
                 catch { }
                 console.log(JSON.stringify({ continue: true }));
@@ -2351,7 +2601,7 @@ async function main() {
                     }
                     console.error(`  ${D("cannot")} touch your own checkout's working tree, or merge anything`);
                     console.error(`  ${D("limits")} one run at a time, 12 per hour, and only while a worker is running`);
-                    console.error(`\n  ${D("Nothing happens at all unless you run `pantheon worker`. Undo instantly: pantheon panic")}`);
+                    console.error(`\n  ${D("Runs happen only while a worker runs here (pantheon ps shows it). Undo: pantheon wake deny " + who + " (this machine) or pantheon admit " + who + " --no-wake (the team). Emergency: pantheon panic — it also switches off wake rights in every team you are in.")}`);
                     if (argv.includes("--yes")) {
                         console.error(`  ${D("--yes given: granted without prompting.")}`);
                     }
@@ -2823,6 +3073,72 @@ async function main() {
             client.close();
             return;
         }
+        case "trust": {
+            const { WOKEN_RUN_ENV } = await import("./worker-policy.js");
+            const inRun = process.env[WOKEN_RUN_ENV] !== undefined || /[\\/]run-homes[\\/]/.test(process.env.PANTHEON_HOME ?? "");
+            if (inRun && argv[1] && !argv[1].startsWith("--"))
+                die("a woken run cannot trust a key — a person has to, on this machine");
+            const cfg = need();
+            const { loadPins, trustPending, updatePins } = await import("./pins.js");
+            const { fingerprint } = await import("./identity.js");
+            const c = new PantheonClient(cfg, undefined, { role: "cli" });
+            await Promise.race([c.connect().catch(() => { }), new Promise((r) => setTimeout(r, 5000))]);
+            const team = c.pinKey();
+            c.close();
+            const p = loadPins();
+            const t = p.teams[team];
+            const who = argv[1] && !argv[1].startsWith("--") ? argv[1] : null;
+            if (!who) {
+                console.log(`${B("Teammates' keys this machine checks messages against")} ${D(`(${cfg.space}; messages ${t?.sigs ? "are" : "are not yet"} signed on this team's relay)`)}\n`);
+                for (const [m, pin] of Object.entries(t?.members ?? {}).sort()) {
+                    console.log(`  ${m.padEnd(16)} ${pin.fp}${m === cfg.member ? D("  (you)") : ""}${pin.pending ? `\n  ${" ".repeat(16)} ${B("changed to")} ${pin.pending.fp} ${D(`— not trusted until you check it with ${m}: pantheon trust ${m}`)}` : ""}`);
+                }
+                if (!t || !Object.keys(t.members).length)
+                    console.log(D("  none yet — keys are pinned the first time this machine sees each teammate"));
+                console.log(D(`\n  Your own key: ${fingerprint(cfg.publicKey)} — read it to a teammate who asks you to confirm it.`));
+                return;
+            }
+            const cur = t?.members[who];
+            if (!cur)
+                die(`no key for "${who}" is known on this machine in "${cfg.space}"`);
+            if (!cur.pending) {
+                console.log(`${C(who)}'s key is ${cur.fp} — nothing is waiting to be confirmed.`);
+                return;
+            }
+            console.log(`${B(`${who}'s key changed`)} (a new machine, or someone else):`);
+            console.log(`  was  ${cur.fp}`);
+            console.log(`  now  ${cur.pending.fp}`);
+            console.log(D(`  Ask ${who} to read theirs out (pantheon trust, last line) and compare. Only then trust it.`));
+            let go = argv.includes("--yes");
+            if (!go && process.stdin.isTTY) {
+                const rl = createInterface({ input: process.stdin, output: process.stderr });
+                const a = ((await questionOrNull(rl, `Trust ${who}'s new key ${cur.pending.fp}? [y/N] `)) ?? "").trim().toLowerCase();
+                rl.close();
+                go = a === "y" || a === "yes";
+            }
+            if (!go) {
+                console.log(D(process.stdin.isTTY ? "  nothing changed" : `  nothing changed — after checking it with ${who}: pantheon trust ${who} --yes`));
+                return;
+            }
+            let outcome = "ok";
+            updatePins((fresh) => {
+                if (fresh.corrupt) {
+                    outcome = "corrupt";
+                    return false;
+                }
+                if (fresh.teams[team]?.members[who]?.pending?.fp !== cur.pending.fp) {
+                    outcome = "moved";
+                    return false;
+                }
+                return !!trustPending(fresh, team, who);
+            });
+            if (outcome === "corrupt")
+                die("keys.json could not be read, so nothing was changed — fix or remove it (pantheon doctor)");
+            if (outcome === "moved")
+                die(`${who}'s held-back key changed while you were deciding — run pantheon trust ${who} again`);
+            console.log(`${C("trusted")} ${who}'s new key on this machine — their signed messages count again.`);
+            return;
+        }
         case "wake": {
             const { loadPolicy, setLocalWaker } = await import("./worker-policy.js");
             const { wakeMode } = await import("./profile.js");
@@ -2842,11 +3158,16 @@ async function main() {
                 if (who === cfg.member)
                     die("your own requests always reach your own worker; there is nothing to allow");
                 let unchecked = false;
+                let teamBlocks = false;
                 if (sub === "allow") {
                     const c = new PantheonClient(cfg, undefined, { role: "cli" });
                     const got = await Promise.race([c.connect().then(() => true, () => false), new Promise((r) => setTimeout(() => r(false), 3_000))]);
                     if (got) {
                         const names = c.members.map((m) => m.member);
+                        {
+                            const e = c.members.find((m) => m.member === who);
+                            teamBlocks = e?.admitted === true && !e.revoked_by && e.may_wake === false;
+                        }
                         c.close();
                         if (!names.includes(who))
                             die(`"${who}" is not in "${cfg.space}". Its members: ${names.filter((n) => n !== cfg.member).join(", ") || "only you"}`);
@@ -2874,7 +3195,14 @@ async function main() {
                         console.log(D(`  This machine is set to wake for anyone the team lets, so the list is used only if you choose "approved" (pantheon setup).`));
                     if (mode === "no")
                         console.log(D(`  This machine is set not to be woken at all; the list applies once you choose "approved" (pantheon setup).`));
-                    console.log(D(`  The team must also let ${who} wake workers at all. If their requests are refused with NOT_ALLOWED_TO_WAKE, a member runs: pantheon admit ${who} --may-wake${teamFlag(cfg)}`));
+                    if (teamBlocks) {
+                        const { markTeamFlagOnYes } = await import("./worker-policy.js");
+                        markTeamFlagOnYes(cfg.spaceId ?? cfg.space, who);
+                    }
+                    if (teamBlocks)
+                        console.log(`  ${B("The team does not let")} ${C(who)} ${B("wake workers yet.")} ${D(`Your worker turns that on the first time ${who}'s request needs this machine (it is said when it does); or now: pantheon admit ${who} --may-wake${teamFlag(cfg)}`)}`);
+                    else if (unchecked)
+                        console.log(D(`  The team must also let ${who} wake workers at all. If their requests are refused with NOT_ALLOWED_TO_WAKE, a member runs: pantheon admit ${who} --may-wake${teamFlag(cfg)}`));
                 }
                 return;
             }
@@ -2922,7 +3250,11 @@ async function main() {
                 savePolicy(p);
                 const said = cap === "self_upgrade"
                     ? (sub === "grant" ? "— the worker keeps pantheon current with the relay" : "— the worker will ask in your approvals inbox when it falls behind")
-                    : (sub === "grant" ? `— ${COMMAND_GRANT_SCOPE}` : "— woken runs are back to edits only");
+                    : cap === "unsandboxed_runs"
+                        ? (sub === "grant"
+                            ? "— Codex, Cursor and Copilot answer teammates' requests while you're away, so nobody waits on you. To have them wait for you instead: pantheon policy revoke unsandboxed-runs"
+                            : "— Codex, Cursor and Copilot leave teammates' requests for you to pick up when you're back; Claude Code still answers them. On again: pantheon policy grant unsandboxed-runs")
+                        : (sub === "grant" ? `— ${COMMAND_GRANT_SCOPE}` : "— woken runs are back to edits only");
                 console.log(`${C(sub === "grant" ? "granted" : "revoked")} ${CAPABILITY_ARGS[cap]} ${D(said)}`);
                 return;
             }
@@ -2937,13 +3269,20 @@ async function main() {
             const rc = p.grants.run_commands;
             const { commandState, repoCommandsAtBase } = await import("./command-state.js");
             const cs = commandState({ project: resolve(".") });
+            const { commandCaveat } = await import("./command-state.js");
+            const caveat = cs.level !== "off" ? commandCaveat() : "";
             console.log(`  run-commands   ${rc ? C(rc.mode === "always" ? "granted" : "granted once") : D("not granted")}${rc ? D(`   (${rc.by}, ${new Date(rc.at).toLocaleDateString()})`) : cs.allowBash ? D("   — not needed: the worker runs with --allow-bash") : D("   — woken runs edit files only; it asks when a run needed more")}`);
+            const ur = p.grants.unsandboxed_runs;
+            const { unsandboxedAllowed } = await import("./worker-policy.js");
+            console.log(`  unsandboxed    ${unsandboxedAllowed(p)
+                ? C("on") + D(`   (${ur ? `${ur.by}, ${new Date(ur.at).toLocaleDateString()}` : "the default"}) — Codex, Cursor and Copilot answer teammates while you're away (off: pantheon policy revoke unsandboxed-runs)`)
+                : D("off (your choice) — Codex, Cursor and Copilot leave requests for when you're back; Claude Code still answers them (on: pantheon policy grant unsandboxed-runs)")}`);
             for (const cap of caps)
                 if (p.asks[cap])
                     console.log(`  ${"\x1b[33mopen request\x1b[0m"}   ${CAPABILITY_ARGS[cap]} — answer it here: pantheon approvals, or pantheon policy grant ${CAPABILITY_ARGS[cap]}`);
             const pers = loadPersonas(resolve("."), undefined);
             console.log(`  personas       ${pers.length ? pers.map((x) => x.name).join(", ") + D("   (restricted mode — tighten-only)") : D("none — open mode; peers this machine approved to wake it can hand it any matched work")}`);
-            console.log(`  commands       ${cs.level === "off" ? D(cs.summary) : C(cs.summary)}`);
+            console.log(`  commands       ${cs.level === "off" ? D(cs.summary) : C(cs.summary)}${caveat ? `\n                 \x1b[33m${caveat}\x1b[0m` : ""}`);
             if (cs.level !== "off")
                 console.log(`                 ${D(COMMAND_GRANT_SCOPE)}`);
             {
@@ -2956,7 +3295,7 @@ async function main() {
                     console.log(`                 ${D(`ignored "${r.line}" — ${r.why}`)}`);
             }
             console.log(`  runs           ${D("12/hour, 40/day, one at a time, 2 failed attempts then parked (defaults; personas only lower them)")}`);
-            console.log(`\n${D("Change it: pantheon policy grant|revoke self-upgrade|run-commands · personas: pantheon persona init · who may wake this machine: pantheon wake allow|deny <who>")}`);
+            console.log(`\n${D("Change it: pantheon policy grant|revoke self-upgrade|run-commands|unsandboxed-runs · personas: pantheon persona init · who may wake this machine: pantheon wake allow|deny <who>")}`);
             return;
         }
         case "explain": {
@@ -3134,8 +3473,8 @@ async function main() {
                     return;
                 }
                 const open = o.goal && c2.goals.get(o.goal)?.state !== "CLOSED" ? o.goal : null;
-                await c2.send({ act: "ANSWER", ref: o.ref, goal: open, after_seq: c2.readSeq,
-                    body: "Marked done from the alert — handled outside this thread." }).catch((e) => die(e.message));
+                const doneBody = "Marked done from the alert — handled outside this thread.";
+                await c2.send({ act: "ANSWER", ref: o.ref, goal: open, after_seq: c2.readSeq, body: doneBody }).catch((e) => die(e.message));
                 c2.close();
                 console.error(D(`done — ${o.id} is no longer waiting on you`));
                 return;
@@ -3340,10 +3679,21 @@ async function main() {
                     die("usage: pantheon approvals show <obligation-id>");
                 const hit = find(id) ?? die(`no decision ${id} is waiting on you`);
                 console.log(`${B("Decision required")}  ${hit.o.id}${conns.length > 1 ? `  ${D("in " + hit.cfg.space)}` : ""}`);
+                const full = hit.client.seenAct(hit.o.ref) ?? (await fetchAct(hit.cfg, hit.o.ref, 4000).catch(() => null))?.act;
                 console.log(`  ${hit.o.body}`);
+                if (full?.body && full.body.trim() !== hit.o.body.trim())
+                    console.log(`\n${full.body.split("\n").map((l) => `  ${l}`).join("\n")}`);
                 if (hit.o.goal)
                     console.log(`  goal  ${hit.client.goals.get(hit.o.goal)?.title ?? hit.o.goal}`);
-                console.log(`\nAnswer: ${C(`pantheon approvals answer ${hit.o.id} 'your decision and rationale'`)}`);
+                const { localChoices } = await import("./tray.js");
+                const choices = localChoices(hit.o.ref);
+                if (choices) {
+                    console.log(`\nAnswer on this machine, one of:`);
+                    for (const c of choices)
+                        console.log(`  ${c.label.padEnd(16)} ${C(`pantheon approvals answer ${hit.o.id} ${c.answer}`)}`);
+                }
+                else
+                    console.log(`\nAnswer: ${C(`pantheon approvals answer ${hit.o.id} 'your decision and rationale'`)}`);
                 closeAll();
                 return;
             }
@@ -3351,8 +3701,11 @@ async function main() {
                 die("usage: pantheon approvals [list | show <id> | answer <id> <decision>]");
             if (!all.length)
                 console.log(D(conns.length > 1 ? `no decisions waiting on you in any of your ${conns.length} teams` : "no decisions waiting on you"));
-            for (const { o, cfg, client } of all)
-                console.log(`${C(o.id)}  ${conns.length > 1 ? D(`[${cfg.space}] `) : ""}${client.goals.get(o.goal ?? "")?.title ?? "No goal"}\n  ${o.body}`);
+            const { localChoices: lc } = await import("./tray.js");
+            for (const { o, cfg, client } of all) {
+                const ch = lc(o.ref);
+                console.log(`${C(o.id)}  ${conns.length > 1 ? D(`[${cfg.space}] `) : ""}${client.goals.get(o.goal ?? "")?.title ?? (ch ? "This machine" : "No goal")}\n  ${o.body}${ch ? D(`\n  answer: ${ch.map((c) => c.answer).join(" / ")}   (pantheon approvals show ${o.id})`) : ""}`);
+            }
             closeAll();
             return;
         }
@@ -3397,11 +3750,11 @@ async function main() {
         case "worker": {
             (await import("./machine.js")).recordWorkerPid();
             const allCfg = loadAll();
-            const bindings = Object.entries(allCfg?.bindings ?? {}).filter(([k]) => !k.startsWith("d_")).map(([, b]) => b);
+            const bindings = Object.values(allCfg?.bindings ?? {});
             if (!flag("project") && bindings.length) {
                 const { WorkerFleet } = await import("./worker-fleet.js");
                 const fleet = new WorkerFleet({
-                    ...(flag("agent-cmd") ? { agentCmd: flag("agent-cmd") } : { agent: flag("agent", "auto") }),
+                    ...(flag("agent-cmd") ? { agentCmd: flag("agent-cmd"), agentCmdFromCli: true } : { agent: flag("agent", "auto") }),
                     ...(flag("persona") ? { persona: flag("persona") } : {}),
                     continuations: !argv.includes("--no-continue"),
                     allowBash: argv.includes("--allow-bash"),
@@ -3418,7 +3771,7 @@ async function main() {
                     }),
                     log: (l) => console.error(l),
                 });
-                console.error(`${B("pantheon worker")} ${D(`(${bindings.length} bound repo${bindings.length === 1 ? "" : "s"} · ctrl-c to stop)`)}`);
+                console.error(`${B("pantheon worker")} ${D(`(${bindings.length} bound folder${bindings.length === 1 ? "" : "s"} · ctrl-c to stop)`)}`);
                 if (argv.includes("--allow-bash")) {
                     console.error(`\x1b[33m  --allow-bash: a woken run may execute commands. Only do this if you trust every\x1b[0m`);
                     console.error(`\x1b[33m  teammate approved to wake this machine (pantheon wake list), since their request is what starts the run.\x1b[0m`);
@@ -3432,7 +3785,7 @@ async function main() {
             const worker = new Worker(cfg, {
                 project,
                 scratch: resolve(flag("scratch", join(project, ".pantheon", "worktrees"))),
-                ...(flag("agent-cmd") ? { agentCmd: flag("agent-cmd") } : { agent: flag("agent", "auto") }),
+                ...(flag("agent-cmd") ? { agentCmd: flag("agent-cmd"), agentCmdFromCli: true } : { agent: flag("agent", "auto") }),
                 ...(flag("persona") ? { persona: flag("persona") } : {}),
                 continuations: !argv.includes("--no-continue"),
                 allowBash: argv.includes("--allow-bash"),
@@ -3523,7 +3876,9 @@ async function main() {
                 n.stop(); process.exit(0); };
             process.on("SIGINT", stopAll);
             process.on("SIGTERM", stopAll);
-            await Promise.all(notifiers.map((n) => n.run()));
+            const ok = await runNotifiers(notifiers.map((n, i) => ({ label: cfgs[i].space, run: () => n.run(), stopped: () => n.isStopped })), { log: (line) => console.error(line) });
+            if (!ok)
+                process.exit(1);
             return;
         }
         case "doctor": {
@@ -3605,7 +3960,7 @@ async function main() {
             }
             need();
             const project = resolve(flag("project", "."));
-            const extra = ["--project", project];
+            const extra = flag("project") ? ["--project", project] : [];
             if (argv.includes("--allow-bash"))
                 extra.push("--allow-bash");
             if (argv.includes("--no-continue"))
@@ -3615,10 +3970,10 @@ async function main() {
                     extra.push(`--${f}`, flag(f));
             }
             console.error(`${B("installing the pantheon worker as a background service")}`);
-            console.error(D(`  project ${project}`));
+            console.error(D(flag("project") ? `  project ${project} (this checkout only)` : `  serves   every repo and folder bound to a team on this machine`));
             for (const l of installService(kind, project, extra))
                 console.error(l);
-            console.error(`\n${D("It only acts on requests from teammates approved on this machine (pantheon wake allow <name>), one run at a time.")}`);
+            console.error(`\n${D("It only acts on requests from teammates approved on this machine — you are asked the first time each one needs it — one run at a time.")}`);
             return;
         }
         case "spaces": {
@@ -3638,6 +3993,10 @@ async function main() {
                     console.error(`      ${D(b.origin === null && !existsSync(join(b.path, ".git")) ? "folder" : "repo")}  ${b.origin ?? b.path}${b.origin ? D(`  (${b.path})`) : ""}`);
                 if (!bound.length)
                     console.error(`      ${D("repo  none bound — run `pantheon use " + m.name + " --here` from its checkout")}`);
+                const boundFps = new Set(Object.entries(all.bindings ?? {}).filter(([, b]) => b.space === m.id).map(([k]) => k));
+                const missing = (m.repos ?? []).filter((r) => !boundFps.has(r.fp)).map((r) => r.name);
+                if (missing.length)
+                    console.error(`      ${D(`not on this machine: ${missing.join(", ")} — pantheon repo find, once you have ${missing.length === 1 ? "it" : "them"} cloned`)}`);
             }
             const r = repoInfo(process.cwd());
             console.error(`\n  ${D("this folder:")} ${r ? (r.origin ?? r.root) : D("not a git repo")} ${D("→")} ${here.reason === "binding" ? `"${here.cfg.space}"` : here.reason === "single" ? `"${here.cfg.space}" (your only team)` : here.reason === "default" ? `unbound — humans get the default "${here.cfg.space}"; agents refuse` : here.reason === "stale" ? "bound to a team you have left" : "unbound"}`);
@@ -3679,9 +4038,17 @@ async function main() {
                     if ((here === real(homedir()) || dirname(here) === here) && !argv.includes("--yes")) {
                         die(`this is ${dirname(here) === here ? "the root of the disk" : "your home folder"}: binding it puts every folder under it in "${m.name}", and an agent opened anywhere there would speak for that team.\n  Bind a project folder instead, or if you mean it:  pantheon use ${m.name} --here --yes`);
                     }
+                    if ((await import("./repo-find.js")).holdsRepo(process.cwd())) {
+                        const n = await bindReposIn(process.cwd(), all, m, argv.includes("--yes"), `pantheon use ${m.name} --here --yes`);
+                        if (!n)
+                            console.error(D(`  nothing bound — the folder itself is not bound, since it holds repos`));
+                        else
+                            console.error(D(`  Agents opened in those repos now speak as you in "${m.name}". Restart any that are open.`));
+                        return;
+                    }
                     const { replaced } = bindFolder(process.cwd(), m.id);
-                    console.error(`${B("bound")} this folder (not a git repo) → "${m.name}"${replaced ? D(`  (was: ${findMembership(all, replaced.space)?.name ?? replaced.space})`) : ""}`);
-                    console.error(D(`  Agents opened here, or below here, now speak as you in "${m.name}". Delivering code needs a git repo. Restart any that are open.`));
+                    console.error(`${B("bound")} this folder → "${m.name}"${replaced ? D(`  (was: ${findMembership(all, replaced.space)?.name ?? replaced.space})`) : ""}`);
+                    console.error(D(`  Agents opened here, or in any folder below, now speak as you in "${m.name}". Restart any that are open.`));
                     return;
                 }
                 const { replaced } = bindRepo(r, m.id);
@@ -3710,6 +4077,15 @@ async function main() {
             const { repo: _r, repoOrigin: _o, ...plain } = cfg;
             const client = new PantheonClient(plain, undefined, { role: "cli" });
             await client.connect().catch((e) => die(client.pending ?? connectFailure(e, plain.relay)));
+            if (sub === "find") {
+                await new Promise((res) => setTimeout(res, 150));
+                const all = loadAll() ?? die("not configured");
+                const m = findMembership(all, cfg.spaceId ?? cfg.space) ?? findMembership(all, cfg.space) ?? die(`not in "${cfg.space}" on this machine`);
+                const where = argv[2] && !argv[2].startsWith("--") ? resolve(argv[2]) : null;
+                client.close();
+                await findAndBindRepos(all, m, client.repos, { ...(where ? { extra: [where] } : {}), recents: argv.includes("--recents") ? true : undefined, yes: argv.includes("--yes") });
+                return;
+            }
             if (sub === "add") {
                 const r = repoInfo(flag("path") ?? process.cwd()) ?? die("not inside a git repo");
                 const base = flag("base") ?? null;