@join-pantheon/cli 0.31.1 → 0.31.2-rc.1

package/dist/cli.js

@@ -7,6 +7,7 @@ process.emitWarning = ((warning, ...rest) => {
     return _emitWarning(warning, ...rest);
 });
 import { randomBytes } from "node:crypto";
+import { gitConfigValue, suggestUsername } from "./onboard-defaults.js";
 import { existsSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { PantheonClient } from "./client.js";
@@ -14,13 +15,13 @@ import { agentSpawn, CmdLineUnsafe } from "./which.js";
 import { fromInvite, looksLikeInviteCode, resolveInviteCode, load, save, toInvite, toJoinLink, resolveFor, loadAll, identity, repoInfo, bindRepo, bindFolder, unbindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
 import { fmtLimit } from "./plans.js";
 import { validEmail, validUsername } from "./accounts.js";
-import { install, launcher, installForUser } from "./install.js";
+import { install, launcher, installForUser, windowsRepoOverrides } from "./install.js";
 import { Relay } from "./relay.js";
 import { runMcp } from "./mcp.js";
 import { Worker } from "./worker.js";
 import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, runNotifiers, sendDesktopNotification } from "./notifier.js";
 import { desktopUnavailable, hostEnv } from "./host-env.js";
-import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, wakeDefault, wakeMode } from "./profile.js";
+import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, teamProfile, wakeDefault, wakeMode } from "./profile.js";
 import { runGuide, terminalIO, questionOrNull, parseSetupFlags, questionnaire, optOutsFrom } from "./setup-guide.js";
 import { selectActs, formatAct, resolveRef } from "./history-view.js";
 import { doctor, render, shareBlock } from "./doctor.js";
@@ -69,7 +70,7 @@ async function signedFetch(cfg, method, path, params = {}) {
     }
     return res;
 }
-function requireSignInOnHostedRelay(relayFlag) {
+async function requireSignInOnHostedRelay(relayFlag) {
     const cfg = identity();
     if (cfg?.account)
         return;
@@ -77,6 +78,13 @@ function requireSignInOnHostedRelay(relayFlag) {
     const hosted = relay === DEFAULT_RELAY && !relayFlag && !process.env.PANTHEON_RELAY;
     if (!hosted)
         return;
+    if (process.stdin.isTTY) {
+        if (await interactiveOnboard(relay, { starting: true }) && identity()?.account) {
+            console.error("");
+            return;
+        }
+        die("not signed in yet.\n  When the code arrives:  pantheon verify <code>\n  Then run pantheon start again.");
+    }
     die(`sign in first — this relay verifies email.\n  New here:        pantheon signup --email you@work.com --username you\n  Have an account: pantheon login  --email you@work.com\n  Then run pantheon start again.`);
 }
 async function requireSignInOnAccountsRelay(relayFlag) {
@@ -91,17 +99,24 @@ async function requireSignInOnAccountsRelay(relayFlag) {
     catch {
         return;
     }
+    if (hasAccounts && process.stdin.isTTY) {
+        if (await interactiveOnboard(relayFlag, { starting: true }) && identity()?.account) {
+            console.error("");
+            return;
+        }
+        die("not signed in yet.\n  When the code arrives:  pantheon verify <code>\n  Then run this same pantheon start again.");
+    }
     if (hasAccounts)
         die(`sign in first — ${relayFlag} verifies email.${signInHint("NOT_SIGNED_IN", relayFlag)}\n  Then run this same pantheon start again.`);
 }
-async function interactiveOnboard(relayArg) {
+async function interactiveOnboard(relayArg, opts = {}) {
     const prior = identity();
     const relay = relayArg ?? prior?.relay ?? process.env.PANTHEON_RELAY ?? DEFAULT_RELAY;
     const base = relay.replace(/^ws/, "http").replace(/\/+$/, "");
     if (!process.stdin.isTTY) {
         console.error(`${B("pantheon")} — sign in to get started:`);
         console.error(`  ${C("pantheon signup --email you@work.com --username you")}   then   ${C("pantheon verify <code>")}`);
-        return;
+        return false;
     }
     const rl = createInterface({ input: process.stdin, output: process.stderr });
     const ask = async (q) => {
@@ -117,10 +132,16 @@ async function interactiveOnboard(relayArg) {
     const postJson = async (path, body) => fetch(`${base}${path}`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(body) })
         .then(async (x) => ({ status: x.status, j: await x.json() }));
     try {
-        console.error(`${B("Welcome to pantheon.")} Let's get this machine signed in.\n`);
+        console.error(opts.joining
+            ? `${B("Welcome to Pantheon.")} You've been invited to "${opts.joining}". First, sign this machine in — your email and a 6-digit code, nothing else.\n`
+            : opts.starting
+                ? `${B("Welcome to Pantheon.")} First, sign this machine in — your email and a 6-digit code, nothing else. Then your team is created.\n`
+                : `${B("Welcome to pantheon.")} Let's get this machine signed in.\n`);
+        const gitEmail = gitConfigValue("user.email");
+        const emailGuess = validEmail(gitEmail) ? gitEmail : "";
         let email = "";
         while (!email) {
-            const e = await ask("  Your work email: ");
+            const e = (await ask(`  Your work email${emailGuess ? ` [${emailGuess}]` : ""}: `)) || emailGuess;
             if (validEmail(e))
                 email = e;
             else
@@ -129,8 +150,9 @@ async function interactiveOnboard(relayArg) {
         let started = null;
         let mode = "signup";
         let signupUsername = "";
+        let userGuess = suggestUsername(email);
         while (!started || started.status !== 200) {
-            const u = await ask("  Pick a username: ");
+            const u = (await ask(`  Pick a username${userGuess ? ` [${userGuess}]` : ""}: `)) || userGuess;
             if (!validUsername(u.toLowerCase())) {
                 console.error(D("    2–32 chars: letters, digits, . _ - (not at the ends)"));
                 continue;
@@ -138,25 +160,28 @@ async function interactiveOnboard(relayArg) {
             signupUsername = u;
             started = await postJson("/auth/signup", { email, username: u, pubkey: kp.publicKey, label }).catch((e) => { console.error(D(`    could not reach the relay: ${e.message}`)); return null; });
             if (!started)
-                return;
+                return false;
             if (started.status === 404) {
                 console.error(`\n  ${D("This relay is invite-based (no email accounts). Get started with:")}`);
                 console.error(`    ${C("pantheon start")}   ${D("(create a team)")}   or   ${C("pantheon join <invite>")}`);
-                return;
+                return false;
             }
             if (started.status === 200)
                 break;
             if (started.j.reason === "email_taken") {
                 console.error(D(`    that email already has an account — signing this device in instead…`));
-                started = await postJson("/auth/login", { email, pubkey: kp.publicKey, label });
+                started = await postJson("/auth/login", { email, pubkey: kp.publicKey, label }).catch((e) => { console.error(D(`    could not reach the relay: ${e.message}`)); return null; });
+                if (!started)
+                    return false;
                 mode = "login";
                 break;
             }
             console.error(D(`    ${started.j.error ?? "try a different username"}`));
+            userGuess = suggestUsername(email, Math.floor(10 + Math.random() * 90));
         }
         if (!started || started.status !== 200) {
             console.error(D(`  ${started?.j.error ?? "sign-up failed"}`));
-            return;
+            return false;
         }
         const authUser = mode === "signup" ? signupUsername : undefined;
         save({ ...(prior ?? {}), relay, member: signupUsername || prior?.member || "me",
@@ -182,7 +207,7 @@ async function interactiveOnboard(relayArg) {
                     console.error(D(`    could not resend: ${rs?.j.error ?? "the relay did not send an email"} — try again in a minute.`));
                 continue;
             }
-            const v = await postJson("/auth/verify", { email, code, pubkey: kp.publicKey });
+            const v = await postJson("/auth/verify", { email, code, pubkey: kp.publicKey }).catch((e) => ({ status: 0, j: { error: `could not reach the relay (${e.message}) — try the same code again` } }));
             if (v.status === 200) {
                 const acct = v.j.account;
                 const cfg = { ...(prior ?? {}), relay, member: acct.username, space: prior?.space ?? "", token: prior?.token ?? "",
@@ -191,14 +216,17 @@ async function interactiveOnboard(relayArg) {
                 delete cfg.pendingAuth;
                 save(cfg);
                 console.error(`\n  ${C("You're in")} — signed in as ${B(acct.username)} <${acct.email}> on this machine.\n`);
+                if (opts.joining || opts.starting)
+                    return true;
                 console.error(`  ${B("Next:")}  ${C("pantheon start")}  ${D("(create a team, get a link to send)")}`);
                 console.error(`         ${C("pantheon join <invite-link>")}  ${D("(join a teammate's team)")}`);
-                return;
+                return true;
             }
             const spent = v.j.reason === "expired" || v.j.reason === "too_many_attempts" || v.j.tries_left === 0;
             console.error(D(`    ${v.j.error ?? "that code is not right"}${spent ? " — type 'resend' for a new code" : " — try again"}`));
         }
         console.error(D("\n  Too many tries. Run `pantheon` again to restart, or `pantheon verify <code>` once you have it."));
+        return false;
     }
     finally {
         rl.close();
@@ -532,6 +560,20 @@ function printRelayNote(relay) {
     console.error(D(`\n  Your team's messages go through ${host}. Whoever runs it can read them (they are not end-to-end encrypted), so treat the team like a shared channel;`));
     console.error(D(`  on a relay from 0.31 on, it cannot write or change one in a teammate's name without your machine noticing: every message is signed by its sender. Your own relay: pantheon relay`));
 }
+function windowsOverridesForBoundRepos() {
+    const dirs = Object.values(loadAll()?.bindings ?? {}).map((b) => b.path).filter((p) => !!p && existsSync(p));
+    for (const r of windowsRepoOverrides(dirs))
+        console.error(`  ${D("claude code in")} ${r.dir}  ${D(r.status)}`);
+}
+function printJoinSteps(invite) {
+    console.error(`\n${B("For a teammate who'd rather not type commands, forward this whole block:")}\n`);
+    console.error(D(`  You're invited to my Pantheon team. Paste these two lines into a terminal`));
+    console.error(D(`  (Terminal on a Mac, Command Prompt on Windows), one at a time:`));
+    console.error(`    ${C("npm i -g @join-pantheon/cli")}`);
+    console.error(`    ${C(`pantheon join ${invite}`)}`);
+    console.error(D(`  The second line asks for your email, sends you a 6-digit code, and sets up`));
+    console.error(D(`  the coding agents on your computer. Needs Node.js 22.13 or newer: nodejs.org.`));
+}
 const HUD_ACTION_MAX_AGE_MS = 30_000;
 function unattendedProject() {
     if (argv.includes("--no-worker"))
@@ -644,6 +686,24 @@ async function readFailure(cfg, res, what) {
     }
     return new Error(`relay answered ${res.status} for ${what}${why ? `: ${why}` : ""}`);
 }
+async function decisionBriefFor(cfg, client, o) {
+    const { decisionBrief, decisionTitle, stripCeremony } = await import("./decision-ui.js");
+    const act = client.seenAct(o.ref) ?? (await fetchAct(cfg, o.ref, 6000).catch(() => null))?.act ?? null;
+    const g = o.goal ? client.goals.get(o.goal) : undefined;
+    const thread = o.goal ? await fetchHistory(cfg, { goal: o.goal }).catch(() => []) : [];
+    const recent = o.goal
+        ? selectActs(thread, { goal: o.goal, last: 7 }).filter((a) => a.id !== o.ref).slice(-6)
+            .map((a) => ({ from: a.from, act: a.act, text: a.summary || a.body, at: a.ts }))
+        : [];
+    const from = stripCeremony(o.body).from ?? act?.from;
+    return decisionBrief({
+        team: cfg.space, decisionId: o.id, ref: o.ref, title: decisionTitle(o.body),
+        from: !from || from === cfg.member ? "your agent" : from,
+        question: act?.body ?? o.body,
+        goal: g ? { id: g.id, title: g.title, ...(g.acceptance ? { acceptance: g.acceptance } : {}) } : null,
+        recent,
+    });
+}
 async function fetchAct(cfg, id, budgetMs = Number.POSITIVE_INFINITY) {
     const base = cfg.relay.replace(/^ws/, "http").replace(/\/+$/, "");
     const deadline = Date.now() + budgetMs;
@@ -1005,7 +1065,8 @@ async function main() {
             console.error(`${B("pantheon")} — signed in as ${C(cfg.account.username)}. ${D(`Your plate: pantheon brief · all commands: pantheon help`)}`);
             return;
         }
-        return interactiveOnboard();
+        await interactiveOnboard();
+        return;
     }
     const askedHelpOnly = argv.length === 2 && (argv[1] === "--help" || argv[1] === "-h") && ["pending", "hook"].includes(cmd);
     if (!HELP_OPAQUE.has(cmd) || askedHelpOnly) {
@@ -1076,7 +1137,7 @@ async function main() {
             if (setupFlags.errors.length)
                 die(setupFlags.errors.join("\n") + "\n  pantheon setup --questions  lists every answer");
             const wp = unattendedProject();
-            requireSignInOnHostedRelay(flag("relay"));
+            await requireSignInOnHostedRelay(flag("relay"));
             await requireSignInOnAccountsRelay(flag("relay"));
             console.error(`${B("pantheon start")}\n`);
             if (!flag("space") && !repoInfo(process.cwd()))
@@ -1127,8 +1188,7 @@ async function main() {
                 console.error(r.inviteMayWake
                     ? `  ${B("It also lets them wake workers:")} ${D("their requests can start an agent run on this machine while you are away (you chose wake \"anyone\"). Take it back: pantheon admit <name> --revoke")}`
                     : D(`  It lets them join and talk to your agent. It does not let them wake this machine on its own: the first time their request needs it while you are away, you are asked (Always / Just this once / No). Approve ahead: pantheon wake allow <name>`));
-                console.error(D(`\n  Not technical? Forward them this instead, and their agent does the rest:`));
-                console.error(`  ${D("Tell your agent: read")} ${C("https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? r.invite}`)}`);
+                printJoinSteps(link ?? r.invite);
             }
             if (!r.reach.shareable && r.reach.hint) {
                 console.error(`\n\x1b[33m  That address only works on this machine.\x1b[0m`);
@@ -1137,6 +1197,7 @@ async function main() {
             if (r.claimed) {
                 await bindReposHere(argv.includes("--yes"));
                 await workerAfterBinding(wp.how);
+                windowsOverridesForBoundRepos();
             }
             printReady(r.tools);
             if (r.claimed)
@@ -1187,8 +1248,9 @@ async function main() {
             if (link)
                 console.error(`\n${D("Or send this — it unfurls in chat with the team's name, and pantheon join accepts it too:")}\n  ${C(link)}`);
             console.error(D(`\nSingle use, expires ${new Date(inv.expires_at).toLocaleString()}.`));
-            console.error(D(`For a teammate who is not technical, forward this and their agent does the rest:`));
-            console.error(`  ${D("Tell your agent: read")} ${C("https://www.joinpantheon.network/skills/join.md")} ${D("and follow it. Invite:")} ${C(`pantheon join ${link ?? raw}`)}`);
+            if (inv.note)
+                console.error(`\x1b[33m  ! ${inv.note}\x1b[0m`);
+            printJoinSteps(link ?? raw);
             client.close();
             return;
         }
@@ -1299,12 +1361,18 @@ async function main() {
                 parsed = await resolveInviteCode(invite, candidates).catch((err) => die(err.message.replace(/^INVITE_CODE_[A-Z]+:\s*/, "")));
                 console.error(D(`That was just the code — it opens "${parsed.space}" on ${new URL(parsed.relay).host}. Joining that team.\n`));
             }
+            if (!identity()?.account && sameHost(parsed.relay, DEFAULT_RELAY) && process.stdin.isTTY) {
+                const ok = await interactiveOnboard(parsed.relay, { joining: parsed.space });
+                if (!ok || !identity()?.account)
+                    die(`not signed in yet — the invite is still good.\n  When the code arrives:  pantheon verify <code>\n  Then run this same \`pantheon join\` command again.`);
+                console.error("");
+            }
             if (!identity()?.account && sameHost(parsed.relay, DEFAULT_RELAY)) {
                 die(`sign in first — this relay verifies email.\n  New here:        pantheon signup --email you@work.com --username you\n  Have an account: pantheon login  --email you@work.com\n  Then run this same \`pantheon join\` command again — the invite is still good.`);
             }
             const wp = unattendedProject();
             console.error(`${B("pantheon join")}\n`);
-            const r = await qsJoin({
+            const joinOnce = () => qsJoin({
                 invite: parsed,
                 ...(flag("me") ? { me: flag("me") } : {}),
                 ...(argv.includes("--reset") ? { reset: true } : {}),
@@ -1314,6 +1382,15 @@ async function main() {
                 unattended: wp.project,
                 workerHow: wp.how,
                 log: (l) => console.error(l),
+            });
+            const r = await joinOnce().catch(async (e) => {
+                if (/NOT_SIGNED_IN/.test(e.message) && process.stdin.isTTY && !identity()?.account) {
+                    if (await interactiveOnboard(parsed.relay, { joining: parsed.space }) && identity()?.account) {
+                        console.error("");
+                        return joinOnce();
+                    }
+                }
+                throw e;
             }).catch((e) => {
                 const m = e.message;
                 if (/BAD_INVITE/.test(m)) {
@@ -1371,6 +1448,7 @@ async function main() {
                 }
             }
             await workerAfterBinding(wp.how);
+            windowsOverridesForBoundRepos();
             {
                 const joined = load();
                 if (joined)
@@ -2673,8 +2751,10 @@ async function main() {
         case "signup":
         case "login": {
             const purpose = cmd;
-            if (!flag("email") && process.stdin.isTTY)
-                return interactiveOnboard(flag("relay"));
+            if (!flag("email") && process.stdin.isTTY) {
+                await interactiveOnboard(flag("relay"));
+                return;
+            }
             const email = flag("email") ?? die(`usage: pantheon ${purpose} --email you@work.com${purpose === "signup" ? " --username <name>" : ""} [--relay wss://...]`);
             const username = purpose === "signup" ? (flag("username") ?? die("usage: pantheon signup --email you@work.com --username <name>")) : undefined;
             const prior = identity();
@@ -3001,7 +3081,8 @@ async function main() {
                 if (to === cfg.member)
                     die("you cannot delegate authority to yourself");
                 const matches = (rule, domain) => rule === domain || rule === "*" || (rule.endsWith(".*") && (domain === rule.slice(0, -2) || domain.startsWith(rule.slice(0, -1))));
-                const owns = (domain) => Object.keys(profile.authority).some((rule) => matches(rule, domain));
+                const teamAuthority = teamProfile(profile, cfg.spaceId, cfg.space).authority;
+                const owns = (domain) => Object.keys(teamAuthority).some((rule) => matches(rule, domain));
                 const notOwned = domains.filter((d) => !owns(d));
                 if (notOwned.length)
                     die(`you cannot delegate authority you do not own: ${notOwned.join(", ")}`);
@@ -3480,7 +3561,23 @@ async function main() {
                 return;
             }
             if (hud?.action === "details") {
-                const wd = await workdirFor(cfg, hud).catch(() => null);
+                let tcfg = cfg;
+                let found = hud.act ? await fetchAct(cfg, hud.act, 8000).catch(() => null) : null;
+                if (hud.act && !found) {
+                    const f = loadAll();
+                    for (const m of Object.values(f?.spaces ?? {})) {
+                        const c = configFor(f, m, null);
+                        if (c.space === cfg.space)
+                            continue;
+                        const x = await fetchAct(c, hud.act, 6000).catch(() => null);
+                        if (x) {
+                            found = x;
+                            tcfg = c;
+                            break;
+                        }
+                    }
+                }
+                const wd = await workdirFor(tcfg, { ...hud, space: tcfg.space }).catch(() => null);
                 if (wd?.path) {
                     try {
                         process.chdir(wd.path);
@@ -3489,21 +3586,40 @@ async function main() {
                 }
                 if (wd)
                     console.error(D(`  ${wd.note}`));
-                const a = hud.act ? (await fetchAct(cfg, hud.act))?.act : undefined;
+                const a = found?.act;
+                const goalTitle = found?.goalTitle;
                 let o;
-                if (hud.decision) {
-                    const c2 = new PantheonClient(cfg, undefined, { role: "cli" });
-                    await c2.connect().catch((e) => die(connectFailure(e, cfg.relay)));
-                    o = c2.obligations.find((x) => x.id === hud.decision);
-                    c2.close();
+                let owed = [];
+                {
+                    const c2 = new PantheonClient(tcfg, undefined, { role: "cli" });
+                    try {
+                        await c2.connect();
+                        if (hud.decision)
+                            o = c2.obligations.find((x) => x.id === hud.decision);
+                        const g = a?.goal ?? o?.goal ?? null;
+                        owed = c2.obligations.filter((x) => g && x.goal === g && (x.owner === tcfg.member || x.owner === `human:${tcfg.member}`));
+                    }
+                    catch { }
+                    finally {
+                        c2.close();
+                    }
                 }
+                const req = a?.ref ? (await fetchAct(tcfg, a.ref, 6000).catch(() => null))?.act : undefined;
+                const mine = !!a && a.from === tcfg.member;
+                const peer = mine ? (req?.from ?? "a teammate") : (a?.from ?? "a teammate");
+                const meta = (a?.meta ?? {});
+                const block = (t, max) => {
+                    const ls = t.trim().split("\n");
+                    return ls.slice(0, max).map((l) => `  ${l}`).join("\n") + (ls.length > max ? `\n  ${D(`… ${ls.length - max} more lines — 3 shows the whole thread`)}` : "");
+                };
                 if (a) {
-                    console.log(formatAct(a));
-                    if (a.ref) {
-                        const r = (await fetchAct(cfg, a.ref))?.act;
-                        if (r)
-                            console.log(D("\nin reply to:\n") + formatAct(r, { short: true }));
-                    }
+                    console.log(`${B(mine ? `Your worker answered ${peer}` : `${a.from} sent ${a.act === "ASK" ? "a question" : a.act === "DELIVERED" ? "a delivery" : "a message"}`)}${D(`  · team ${tcfg.space}${goalTitle ? ` · "${goalTitle}"` : ""} · ${ago(a.ts)}`)}`);
+                    if (req)
+                        console.log(`\n${B(mine ? `What ${peer} asked` : "In reply to")}\n${block(req.body, 12)}`);
+                    console.log(`\n${B(mine ? `What it replied (${a.act === "DELIVERED" ? "delivered" : a.act === "ANSWER" ? "answer" : a.act.toLowerCase()})` : "What they said")}\n${block(a.body, 20)}`);
+                    if (meta.branch)
+                        console.log(`\n${B("The work")}\n  branch ${C(meta.branch)}${meta.commit ? `  at ${meta.commit.slice(0, 12)}` : ""}\n  ${D(`review it here: git log -p ${meta.branch}`)}`);
+                    console.log(`\n${B("Owed by you")}${owed.length ? "\n" + owed.map((x) => `  • ${x.body}`).join("\n") : `  ${D("nothing in this goal right now")}`}`);
                 }
                 else if (!o)
                     console.log(D("that act is no longer in what the relay holds"));
@@ -3526,7 +3642,26 @@ async function main() {
                             break;
                         if (choice === "1" && agent) {
                             rl.close();
-                            const prompt = o ? dp(o.id, dt(o.body)) : `Read Pantheon act ${a.id}${goalId ? ` and the thread of goal ${goalId}` : ""}. Explain in plain words what happened and whether anything is owed by me, then give me numbered next steps. Do not act until I choose.`;
+                            let prompt = o ? dp(o.id, dt(o.body)) : "";
+                            if (o) {
+                                const c3 = new PantheonClient(tcfg, undefined, { role: "cli" });
+                                try {
+                                    await c3.connect();
+                                    prompt = await decisionBriefFor(tcfg, c3, o);
+                                }
+                                catch { }
+                                finally {
+                                    c3.close();
+                                }
+                            }
+                            else {
+                                const { runBrief } = await import("./decision-ui.js");
+                                prompt = runBrief({ team: tcfg.space, peer, goal: goalTitle ? { title: goalTitle } : null, request: req?.body ?? "(the request is no longer held by the relay)",
+                                    reply: mine ? { act: a.act, text: a.body } : null, ...(meta.branch ? { branch: meta.branch } : {}), ...(meta.commit ? { commit: meta.commit } : {}),
+                                    owedByMe: owed.map((x) => x.body), ok: true });
+                                if (!mine)
+                                    prompt = prompt.replace(/^Pantheon: my worker handled .*$/m, `Pantheon: ${a.from}'s ${a.act.toLowerCase()} in "${tcfg.space}"`);
+                            }
                             console.error(D(`opening ${agent.id}…`));
                             await launchAgent(agent.binary, (p) => launchArgs(agent.id, p, sessionName(prompt)), prompt);
                             return;
@@ -3606,6 +3741,19 @@ async function main() {
                     await launchAgent(bin, (p) => [p], hud.prompt, cwd ?? undefined);
                     return;
                 }
+                if (hud.decision) {
+                    const cl = new PantheonClient(cfg, undefined, { role: "cli" });
+                    try {
+                        await cl.connect();
+                        const o = cl.obligations.find((x) => x.id === hud.decision);
+                        if (o)
+                            hud.prompt = await decisionBriefFor(cfg, cl, o);
+                    }
+                    catch { }
+                    finally {
+                        cl.close();
+                    }
+                }
                 if (hud.prompt) {
                     const agent = pickExplainAgent(hud.tool ?? p.agent.primary_surface, detectAvailable());
                     if (!agent)
@@ -3624,24 +3772,50 @@ async function main() {
                     catch { }
                 }
             }
-            const client = new PantheonClient(cfg, undefined, { role: "cli" });
-            await client.connect().catch((e) => die(connectFailure(e, cfg.relay)));
-            const waiting = client.obligations.filter((o) => o.kind === "HUMAN" && o.owner === `human:${cfg.member}`);
-            client.close();
-            const one = id ? waiting.find((o) => o.id === id) : waiting.length === 1 ? waiting[0] : undefined;
-            if (id && !one)
-                die(`no decision ${id} is waiting on you`);
-            const prompt = one ? dp(one.id, dt(one.body)) : waiting.length > 1 ? adp(waiting.length) : null;
+            const every = (() => { const f = loadAll(); return f && Object.keys(f.spaces ?? {}).length ? Object.values(f.spaces).map((m) => configFor(f, m, null)) : [cfg]; })();
+            const open = [];
+            const clients = [];
+            for (const tc of every) {
+                const cl = new PantheonClient(tc, undefined, { role: "cli" });
+                try {
+                    await cl.connect();
+                }
+                catch {
+                    cl.close();
+                    continue;
+                }
+                clients.push(cl);
+                for (const o of cl.obligations)
+                    if (o.kind === "HUMAN" && o.owner === `human:${tc.member}`)
+                        open.push({ cfg: tc, client: cl, o });
+            }
+            const closeAll = () => { for (const c of clients)
+                c.close(); };
+            const one = id ? open.find((x) => x.o.id === id) : open.length === 1 ? open[0] : undefined;
+            if (id && !one) {
+                closeAll();
+                die(`no decision ${id} is waiting on you in ${every.length > 1 ? `any of your ${every.length} teams` : `"${cfg.space}"`}`);
+            }
+            let prompt = null;
+            let cwd;
+            if (one) {
+                prompt = await decisionBriefFor(one.cfg, one.client, one.o).catch(() => dp(one.o.id, dt(one.o.body)));
+                cwd = (await workdirFor(one.cfg, { action: "open", space: one.cfg.space, ...(one.o.goal ? { goal: one.o.goal } : {}) }).catch(() => null))?.path ?? undefined;
+            }
+            else if (open.length > 1)
+                prompt = adp(open.length);
+            closeAll();
             if (!prompt) {
                 console.log(D("no decisions waiting on you — nothing to explain"));
                 return;
             }
-            const agent = pickExplainAgent(loadProfile(cfg).agent.primary_surface, detectAvailable());
+            const agent = pickExplainAgent(loadProfile(one?.cfg ?? cfg).agent.primary_surface, detectAvailable());
             if (!agent)
                 die("no agent CLI found on this machine (claude, cursor-agent, codex, copilot, or kiro-cli)");
-            console.error(D(`opening ${agent.id} with the question…`));
+            console.error(D(`opening ${agent.id} with the question${one ? ` (team "${one.cfg.space}")` : ""}…`));
             const { spawnSync } = await import("node:child_process");
-            await launchAgent(agent.binary, (p) => launchArgs(agent.id, p, sessionName(prompt)), prompt);
+            const finalPrompt = prompt;
+            await launchAgent(agent.binary, (p) => launchArgs(agent.id, p, sessionName(finalPrompt)), finalPrompt, cwd);
             return;
         }
         case "approvals": {
@@ -3817,10 +3991,31 @@ async function main() {
             return;
         }
         case "tray-detail": {
-            const key = argv[1] ?? die("usage: pantheon tray-detail <act id>");
-            const cfgNow = load() ?? die("not joined to a team");
+            const key = argv[1] ?? die("usage: pantheon tray-detail <act id> [--space <team>]");
+            const fileNow = loadAll();
+            const named = flag("space") && fileNow ? findMembership(fileNow, flag("space")) : undefined;
+            const tryCfgs = [
+                ...(named && fileNow ? [configFor(fileNow, named, null)] : []),
+                ...(fileNow ? Object.values(fileNow.spaces ?? {}).filter((m) => m !== named).map((m) => configFor(fileNow, m, null)) : []),
+            ];
+            if (!tryCfgs.length) {
+                const c0 = load();
+                if (c0)
+                    tryCfgs.push(c0);
+            }
+            if (!tryCfgs.length)
+                die("not joined to a team");
             const { humanize } = await import("./humanize.js");
-            const found = await fetchAct(cfgNow, key);
+            let found = null;
+            let cfgNow = tryCfgs[0];
+            for (const c of tryCfgs) {
+                const x = await fetchAct(c, key, 8000).catch(() => null);
+                if (x) {
+                    found = x;
+                    cfgNow = c;
+                    break;
+                }
+            }
             if (!found) {
                 console.log(JSON.stringify({ ok: false }));
                 return;
@@ -3833,8 +4028,12 @@ async function main() {
                 c2.close();
             }
             const { headline, blocks } = humanize(a.body, { ...(goalTitle ? { goalTitle } : {}), from: a.from });
+            const asker = a.from !== cfgNow.member ? a.from : a.sig?.role === "run" ? "your worker" : "your agent";
+            const { answerOptions } = await import("./decision-ui.js");
+            const options = ["ESCALATE", "HUMAN_REQUIRED", "ASK"].includes(a.act) ? answerOptions(a.body) : [];
             console.log(JSON.stringify({
-                ok: true, id: a.id, act: a.act, from: a.from, ts: a.ts,
+                ok: true, id: a.id, act: a.act, from: a.from, ts: a.ts, asker, team: cfgNow.space,
+                ...(options.length ? { options } : {}),
                 ...(a.summary ? { summary: a.summary } : {}),
                 ...(goalTitle ? { goal_title: goalTitle } : {}),
                 headline, blocks, raw: a.body,
@@ -4062,6 +4261,7 @@ async function main() {
                     await client.connect().then(() => client.bindRepo(r.fingerprint, r.origin)).catch((e) => console.error(D(`  (could not register the repo with the relay: ${e.message} — run \`pantheon repo add\` when it is reachable)`)));
                     client.close();
                 }
+                windowsOverridesForBoundRepos();
                 console.error(D(`  Agents opened in this repo now speak as you in "${m.name}". Restart any that are open.`));
             }
             else {
@@ -4092,6 +4292,7 @@ async function main() {
                 await client.bindRepo(r.fingerprint, r.origin, base).catch((e) => die(e.message));
                 if (cfg.spaceId)
                     bindRepo(r, cfg.spaceId);
+                windowsOverridesForBoundRepos();
                 console.error(`${B("registered")} ${r.origin ?? r.root} as a repo "${cfg.space}" works from${base ? ` — workers cut from ${C(base)}` : ""}${r.shared ? "" : D("  (no origin remote — deliveries from it cannot be fetched)")}`);
             }
             else {

package/dist/client.js

@@ -247,7 +247,7 @@ export class PantheonClient {
                         this.invitesList = msg.invites;
                         break;
                     case "invite":
-                        this.inviteUrl = { url: msg.url, expires_at: msg.expires_at };
+                        this.inviteUrl = { url: msg.url, expires_at: msg.expires_at, ...(typeof msg.note === "string" ? { note: msg.note } : {}) };
                         break;
                     case "welcome":
                         if (this.cfg.spaceId && msg.space_id && msg.space_id !== this.cfg.spaceId) {
@@ -622,7 +622,7 @@ export class PantheonClient {
         }
         const r = verifyAct(rec, [this.cfg.spaceId, this.spaceId, this.cfg.space], pin?.fp, pin?.key);
         if (trusted(r.trust) && rec.sig && !this.verifiedIds.has(rec.id)) {
-            this.verifiedIds.set(rec.id, { member: rec.from, nonce: rec.sig.nonce });
+            this.verifiedIds.set(rec.id, { member: rec.from, nonce: rec.sig.nonce, sig: rec.sig.s });
             if (this.verifiedIds.size > 5000)
                 this.verifiedIds.delete(this.verifiedIds.keys().next().value);
         }
@@ -660,7 +660,7 @@ export class PantheonClient {
     async noteAnswered(ref) {
         const known = this.verifiedIds.get(ref);
         if (known) {
-            markAnswered(this.pinTeam, known.member, known.nonce, ref);
+            markAnswered(this.pinTeam, known.member, known.nonce, ref, undefined, known.sig);
             return true;
         }
         let r = this.seen.get(ref) ?? null;

package/dist/config.js

@@ -599,6 +599,7 @@ export function toJoinLink(cfg) {
 export function fromInvite(invite) {
     const clean = invite
         .replace(/\u001b\[[0-9;]*m/g, "")
+        .replace(/[\r\n\t]+/g, " ")
         .replace(/[\u0000-\u001f\u007f]/g, "")
         .trim()
         .replace(/^['"`]|['"`]$/g, "")