@join-pantheon/cli 0.32.0-rc.6 → 0.32.1

package/dist/relay.js

@@ -2521,6 +2521,17 @@ pantheon start</code></pre>
                     if (!verifyChallenge(m.delegate ? m.delegate.pub : m.pubkey, m.space, m.member, m.nonce, m.sig)) {
                         return reject("BAD_SIGNATURE", `signature does not match the presented key for "${m.member}"`);
                     }
+                    if (m.delegate) {
+                        const live = this.live(m.space);
+                        const onDisk = !live && this.spaceOnDisk(m.space) ? new Allowlist(this.dataDir, safeName(m.space)) : null;
+                        if (!live && !onDisk)
+                            return reject("BAD_DELEGATE", "a woken run cannot create a team");
+                        const teamIds = [(live ? live.allow : onDisk).peekId(), live?.name ?? onDisk?.recordedName() ?? null, m.space].filter((t) => !!t);
+                        if (!teamIds.some((t) => verifyDelegate(m.pubkey, t, m.member, m.delegate))) {
+                            this.log(`! REFUSED ${m.member}: a run key for "${m.space}" that ${m.member}'s key does not vouch for (nothing was created, bound or recorded)`);
+                            return reject("BAD_DELEGATE", `that run key is not vouched for by ${m.member}'s key for "${m.space}", or its certificate has expired`);
+                        }
+                    }
                     const gated = this.requireAccounts && !!this.accounts && !this.localTrusted(ip);
                     const pre = gated ? this.accounts.authorize(m.pubkey, m.member) : null;
                     let sp;

package/helper/macos/prebuilt/manifest.json

@@ -1,6 +1,6 @@
 {
   "format": 1,
-  "built_at": "2026-10-03T14:12:14.942Z",
+  "built_at": "2026-10-03T18:03:55.381Z",
   "swiftc": "Apple Swift version 6.3.3 (swiftlang-6.3.3.1.3 clang-2100.1.1.101)",
   "helpers": {
     "pantheon-tray": {
@@ -17,7 +17,7 @@
     "pantheon-hud": {
       "source": "main.swift",
       "source_sha256": "bcf55a19b658d1f09a9d117c76030393ab08a2569062dd7413f884ca05f3a0eb",
-      "sha256": "0414b397a533940e3a5c324add6250e1ed71919e67e462d11dcb2a1d0c2f9b41",
+      "sha256": "191f3f18e8212e11ad4438bdbef87a5cc533f5ae2fae208801db01c9a265193b",
       "archs": [
         "arm64",
         "x86_64"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@join-pantheon/cli",
-  "version": "0.32.0-rc.6",
+  "version": "0.32.1",
   "description": "Let your coding agent collaborate directly with your teammates' agents — ask, agree an interface, and deliver, without a human relaying messages.",
   "type": "module",
   "bin": {