@join-pantheon/cli 0.32.0 → 0.33.0-rc.1

package/dist/cli.js

@@ -9,24 +9,25 @@ process.emitWarning = ((warning, ...rest) => {
 import { randomBytes } from "node:crypto";
 import { gitConfigValue, suggestUsername } from "./onboard-defaults.js";
 import { existsSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from "node:fs";
-import { basename, dirname, join, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { PantheonClient } from "./client.js";
 import { agentSpawn, CmdLineUnsafe } from "./which.js";
 import { fromInvite, looksLikeInviteCode, resolveInviteCode, load, save, toInvite, toJoinLink, resolveFor, loadAll, identity, repoInfo, bindRepo, bindFolder, unbindRepo, findMembership, setDefaultSpace, removeMembership, configFor, CONFIG_DIR, CONFIG_PATH, DEFAULT_RELAY, resolveForHook } from "./config.js";
 import { fmtLimit } from "./plans.js";
 import { validEmail, validUsername } from "./accounts.js";
-import { install, launcher, installForUser, windowsRepoOverrides } from "./install.js";
+import { install, launcher, installForUser, windowsRepoOverrides, agentAsksOnce } from "./install.js";
 import { Relay } from "./relay.js";
 import { runMcp } from "./mcp.js";
 import { Worker } from "./worker.js";
 import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, runNotifiers, sendDesktopNotification } from "./notifier.js";
+import { linuxDesktopReachable } from "./notice-linux.js";
 import { desktopUnavailable, hostEnv } from "./host-env.js";
 import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, teamProfile, wakeDefault, wakeMode } from "./profile.js";
 import { runGuide, terminalIO, questionOrNull, parseSetupFlags, questionnaire, optOutsFrom } from "./setup-guide.js";
 import { selectActs, formatAct, resolveRef } from "./history-view.js";
 import { doctor, render, shareBlock } from "./doctor.js";
 import { FEEDBACK_ADDRESS } from "./feedback.js";
-import { menubarProc, notifierProc, relayProc, workerProc, wiring, logFileFor, dataSummary, stopProc, statFile } from "./machine.js";
+import { menubarProc, notifierProc, relayProc, workerProc, wiring, logFileFor, dataSummary, stopProc, statFile, elapsed, windowsProcessInfo } from "./machine.js";
 import { assess } from "./untrusted.js";
 import { report as spendReport, recentRuns } from "./spend.js";
 import { renderBrief, renderTeam } from "./brief.js";
@@ -38,7 +39,9 @@ import { removeHook, decideStop, writeIntent, clearIntent, readIntent, installHo
 import { pending, render as renderPending } from "./pending.js";
 import { signedRead } from "./reads.js";
 import { start as qsStart, join as qsJoin, wireUp, teamNameFor, deviceLabel } from "./quickstart.js";
-import { installService, uninstallService } from "./service.js";
+import { folderRefusalHere, isTemporaryRefusal } from "./folder-guard.js";
+import { installService, serviceInstalled, serviceLogFile, uninstallService } from "./service.js";
+import { LEGACY_TASK_NAME, hostAlive, hostFiles, readHostState, recordedTaskName } from "./win-host.js";
 import { ACTS, LIMITS } from "./protocol.js";
 import { loadPersonas, personaByName, describePersona, initPersona, personaDir } from "./persona.js";
 import { fingerprint, newKeypair, signAccount } from "./identity.js";
@@ -47,7 +50,8 @@ import { connectFailure, signInHint } from "./refusal.js";
 import * as mcpWindows from "./mcp-windows.js";
 import { updateBanner } from "./update-check.js";
 import { inWokenRun } from "./worker-policy.js";
-import { joinInstructions, managedLayout, relayServesInstaller } from "./managed.js";
+import { childNodeFlags, joinInstructions, managedLayout, relayServesInstaller } from "./managed.js";
+import { spawn } from "node:child_process";
 const argv = process.argv.slice(2);
 for (let i = argv.length - 1; i >= 1; i--) {
     const m = /^(--[a-z][a-z0-9-]*)=(.*)$/i.exec(argv[i]);
@@ -822,24 +826,10 @@ function printReady(tools) {
         console.error(D(`  While you're away, a teammate you approve to wake this machine can hand work to it —`));
     if (workerOn)
         console.error(D(`  isolated branch, no secrets in the worktree. Pause any time from the menu bar.`));
-    const oneTime = new Map();
-    for (const t of tools) {
-        if (/unavailable|not found/i.test(t.status))
-            continue;
-        if (/claude/i.test(t.tool))
-            oneTime.set("claude", `claude   say yes once if it asks to trust this folder`);
-        if (/cursor/i.test(t.tool))
-            oneTime.set("cursor", `cursor   enable the "pantheon" MCP server if it asks`);
-        if (/codex/i.test(t.tool))
-            oneTime.set("codex", `codex    run /hooks inside codex once to approve the wake-up hook`);
-        if (/kiro/i.test(t.tool))
-            oneTime.set("kiro", `kiro     run kiro-cli chat --agent pantheon (or kiro-cli agent set-default pantheon) to keep working while a teammate waits; stay signed in — a woken run never starts Kiro signed out, since Kiro would open a browser`);
-        if (/copilot/i.test(t.tool))
-            oneTime.set("copilot", `copilot  say yes once when it asks to trust this folder; on a Copilot Business or Enterprise plan an org owner must have the "MCP servers in Copilot" policy on`);
-    }
-    if (oneTime.size) {
+    const oneTime = agentAsksOnce(tools);
+    if (oneTime.length) {
         console.error(`\n${B("Your agents may each ask once")} ${D("(their own security, not ours — one yes each):")}`);
-        for (const l of oneTime.values())
+        for (const l of oneTime)
             console.error(D(`  ${l}`));
     }
 }
@@ -909,12 +899,16 @@ ${B("control")}
   pantheon persona            how a woken worker should behave: list / init <name> / show <name>
   pantheon notifier           alert you when a task requires your decision
   pantheon menubar            the menu bar item: status at a glance, pause/resume, decisions
-  pantheon sessions           your devices & active sessions; revoke <id> to sign one out
+  pantheon tray               Windows: show the tray icon again after you quit it (it also returns at your next logon)
+  pantheon sessions          your devices & active sessions; revoke <id> to sign one out
   pantheon logout             sign this machine out   ·   pantheon account delete   remove your account
   pantheon audit [--space X]  the log: who did what, when (--json to export, --since <hours>)
   pantheon profile            show, create (init), or set your agent and attention profile
   pantheon directory          organization roles and decision authority
   pantheon approvals          decisions waiting on you; show or answer one
+  pantheon board              your board in the browser, on any OS: what needs you, what your agents are on, and act on it
+                              (--open start or reuse it and open it · --url print its address
+                              · --watch the same lanes in this terminal, for SSH · --keep never stop when idle · --stop)
   pantheon stop [relay|worker|notifier|menubar|all]  stop it
   pantheon hook install       your agent keeps working when a peer is waiting on it
                             (auto-detects claude / codex / cursor / copilot / kiro on this machine)
@@ -930,6 +924,7 @@ ${B("control")}
                               (--questions prints them for an agent to ask you; answers go back as flags,
                               to setup --yes or straight to start / join)
   pantheon upgrade            pull the latest pantheon, rebuild, and re-wire your agents
+  pantheon upgrade <version>  install exactly that release (e.g. to try one before your team does)
 
 ${D("more: pantheon help --all")}
 `;
@@ -938,6 +933,7 @@ ${B("less common")}
   pantheon relay              run only the relay, in this terminal
   pantheon service install [relay|worker|notifier|menubar] | restart | uninstall
                             run a long-lived component in the background, from login
+                            (Windows: service start <worker|notifier> resumes one stopped with pantheon stop)
   pantheon members            the full list, with key fingerprints
   pantheon pending            what a live agent window has not yet seen
   pantheon goal open "<title>" --with <who>   open a goal to work in   (goal list · goal close <id> "<summary>")
@@ -951,7 +947,32 @@ ${B("less common")}
   pantheon limits             the guard values in force
   pantheon version            the pantheon version this machine is running
 `;
-const QUIET = new Set(["mcp", "hook", "pending", "version", "tray-status"]);
+let workerAlerts = null;
+let workerAlertsSaid = false;
+function notifyFromWorker(n) {
+    if (process.platform === "linux") {
+        if (!workerAlerts || Date.now() - workerAlerts.at > 60_000)
+            workerAlerts = { at: Date.now(), ok: linuxDesktopReachable() };
+        if (!workerAlerts.ok) {
+            if (!workerAlertsSaid) {
+                workerAlertsSaid = true;
+                console.error(D("alerts: none — no graphical session on this machine; run notices wait in pantheon brief and pantheon board --watch"));
+            }
+            return;
+        }
+    }
+    if (process.platform !== "win32") {
+        sendDesktopNotification(n);
+        return;
+    }
+    const c = spawn(process.execPath, [...childNodeFlags(), process.argv[1], "notice-show"], {
+        env: { ...process.env, PANTHEON_NOTICE_B64: Buffer.from(JSON.stringify(n), "utf8").toString("base64") },
+        detached: true, stdio: "ignore", windowsHide: true,
+    });
+    c.on("error", () => { });
+    c.unref();
+}
+const QUIET = new Set(["mcp", "hook", "pending", "version", "tray-status", "handle-uri", "notice-show"]);
 function usageFor(command, help) {
     const plain = help.replace(/\x1b\[[0-9;]*m/g, "").split("\n");
     const out = [];
@@ -990,6 +1011,7 @@ const COMMAND_FLAGS = {
     signup: "--email <address>  --username <name>  --relay <url>  --label <device name>",
     audit: "--space <team>  --since <hours>  --json",
     setup: "--questions  (and every answer as a flag, with --yes)",
+    board: "--open  --url  --watch  --keep  --stop",
 };
 const HELP_OPAQUE = new Set(["mcp", "hook", "pending", "tray-status", "help", "version", "-v", "--help", "-h"]);
 function rememberWorkingProxy() {
@@ -1031,13 +1053,13 @@ function slipDistance(a, b) {
         }
     return d[a.length][b.length];
 }
-const EXTRA_FLAGS = "--agent-cmd --approve-all --ask-before-sending --child --code --data --device --display --force --help --host --idle --keywords --local " +
-    "--no-continue --no-guide --no-notify --path --peek --poll --portable --publish --queued --quiet --remind --scratch --session --surface --token --unattended " +
+const EXTRA_FLAGS = "--action-id --agent-cmd --approve-all --ask-before-sending --child --code --data --device --display --force --help --host --idle --keywords --local " +
+    "--no-browser --no-continue --no-guide --no-notify --only-action --path --peek --poll --portable --publish --queued --quiet --remind --scratch --serve --session --surface --token --unattended " +
     "--until --user --version --all --json " +
     "--name --title --wake --commands --unsandboxed --alerts --decides --playbook --base --responsibilities --human-required --agent-can-decide --capabilities";
 const KNOWN_FLAGS = new Set([...`${Object.values(COMMAND_FLAGS).join(" ")} ${EXTRA_FLAGS}`.matchAll(/--([a-z][a-z0-9-]*)/g)].map((m) => m[1]));
 function refuseUnknownFlags() {
-    if (["mcp", "hook", "tray-status", "_menubar"].includes(cmd))
+    if (["mcp", "hook", "tray-status", "_menubar", "handle-uri"].includes(cmd))
         return;
     for (const a of argv.slice(1)) {
         if (!/^--[a-z][a-z0-9-]*(?:=\S*)?$/i.test(a))
@@ -1522,14 +1544,28 @@ async function main() {
         }
         case "upgrade": {
             const { upgrade } = await import("./upgrade.js");
-            console.error(`${B("pantheon upgrade")}\n`);
-            const r = upgrade();
+            const asked = argv[1] && !argv[1].startsWith("-") ? argv[1] : undefined;
+            if (asked) {
+                const { isVersion } = await import("./installer.js");
+                if (!isVersion(asked))
+                    die(`usage: pantheon upgrade [version]   ("${asked}" is not a version, e.g. 0.32.2)`);
+            }
+            console.error(`${B("pantheon upgrade")}${asked ? ` ${asked}` : ""}\n`);
+            const r = upgrade(undefined, asked ? { version: asked, exact: true } : {});
             for (const s of r.steps)
                 console.error(`  ${s.ok ? C("ok") : "\x1b[31mFAIL\x1b[0m"}  ${s.name.padEnd(6)} ${s.detail}`);
             if (!r.ok) {
                 console.error(`\n${B("upgrade stopped")} — nothing was changed.${r.needsPerson ? "" : " Fix the above and run `pantheon upgrade` again."}`);
                 process.exit(1);
             }
+            if (r.alreadyCurrent && r.steps.some((x) => /another pantheon upgrade is running/.test(x.detail))) {
+                console.error(`\n${B("nothing installed")} — another upgrade is running on this machine (most likely the worker's own). Try again in a minute.`);
+                process.exit(1);
+            }
+            if (asked && r.alreadyCurrent && r.steps.some((x) => /not on npm yet/.test(x.detail))) {
+                console.error(`\n${B("nothing installed")} — npm has no ${asked}. Check the version (\`npm view @join-pantheon/cli versions\`).`);
+                process.exit(1);
+            }
             if (r.alreadyCurrent) {
                 console.error(`\n${B("already up to date")} ${D(`(${r.from})`)}`);
                 if (process.platform === "darwin") {
@@ -1998,14 +2034,26 @@ async function main() {
                 console.log(`            ${D("start it with: pantheon start")}`);
             }
             if (worker.running) {
-                console.log(`  worker    ${C("running")}   ${worker.managedBy === "launchd" ? `service ${worker.label}` : "started by hand"}   pid ${worker.pid}`);
+                console.log(`  worker    ${C("running")}   ${worker.managedBy === "launchd" ? `service ${worker.label}` : worker.managedBy === "host" ? `background host (${worker.label})` : "started by hand"}   pid ${worker.pid}`);
                 console.log(`            ${D("a teammate approved on this machine (pantheon wake list) can start an agent run here")}`);
             }
             else {
-                console.log(`  worker    ${D("not running")}   ${D("nobody can start an agent run on this machine")}`);
+                const paused = worker.managedBy === "host" && existsSync(hostFiles().disabled("worker"));
+                console.log(`  worker    ${D(paused ? "paused" : "not running")}   ${D(paused ? "pantheon service start worker resumes it" : "nobody can start an agent run on this machine")}`);
             }
             const menubar = menubarProc();
-            if (menubar.running) {
+            if (process.platform === "win32") {
+                const st = readHostState();
+                if (hostAlive(st)) {
+                    console.log(`  host      ${C("running")}   task ${recordedTaskName() ?? LEGACY_TASK_NAME}   pid ${st.pid}   up ${elapsed(Date.now() - st.started)}`);
+                    const tray = st.children.tray;
+                    const quit = existsSync(hostFiles().disabled("tray"));
+                    console.log(`  tray      ${tray?.phase === "running" ? `${C("running")}   pid ${tray.pid}` : D(quit ? "quit — back at your next logon, or now: pantheon tray" : tray?.gaveUp === "clm" ? "not shown — PowerShell is in Constrained Language Mode here (pantheon board instead)" : "not running")}`);
+                }
+                else
+                    console.log(`  host      ${D("not running")}   ${D(serviceInstalled("worker") || serviceInstalled("notifier") ? "pantheon service start worker (or log out and back in)" : "pantheon service install worker — the worker, alerts and the tray in the background")}`);
+            }
+            else if (menubar.running) {
                 console.log(`  menu bar  ${C("running")}   ${menubar.managedBy === "launchd" ? `service ${menubar.label}` : "started by hand"}   pid ${menubar.pid}`);
             }
             else {
@@ -2013,7 +2061,7 @@ async function main() {
                 console.log(`  menu bar  ${D("not running")}   ${D(why ?? "pantheon service install menubar — status and pause/resume in the menu bar")}`);
             }
             if (notifier.running) {
-                console.log(`  notifier  ${C("running")}   ${notifier.managedBy === "launchd" ? `service ${notifier.label}` : "started by hand"}   pid ${notifier.pid}`);
+                console.log(`  notifier  ${C("running")}   ${notifier.managedBy === "launchd" || notifier.managedBy === "systemd" ? `service ${notifier.label}` : notifier.managedBy === "host" ? `background host (${notifier.label})` : "started by hand"}   pid ${notifier.pid}`);
                 console.log(`            ${D("native alerts are on for decisions that require you")}`);
             }
             else {
@@ -2093,7 +2141,7 @@ async function main() {
             const proc = kind === "relay" ? relayProc(Number(flag("port", "8787"))) : kind === "worker" ? workerProc() : notifierProc();
             const f = logFileFor(kind, proc);
             if (!f)
-                die(`no ${kind} log found. ${process.platform === "linux" ? `If it runs as a service: journalctl --user -u pantheon-${kind}` : process.platform === "darwin" ? "If it runs as a service, the plist names the path" : "Services are not used on Windows"}; if you started it by hand, its output went to that terminal.`);
+                die(`no ${kind} log found. ${process.platform === "linux" ? `If it runs as a service: journalctl --user -u pantheon-${kind}` : process.platform === "darwin" ? "If it runs as a service, the plist names the path" : `The Pantheon host writes it to ${serviceLogFile(kind)} once it has started it (its own log: ${hostFiles().log})`}; if you started it by hand, its output went to that terminal.`);
             console.error(D(`${f}  (${statFile(f)})\n`));
             const follow = argv.includes("-f") || argv.includes("--follow");
             const { tailLines, followFile } = await import("./machine.js");
@@ -2501,6 +2549,13 @@ async function main() {
                 console.error(`  perms:${l}`);
                 removed.push(l.trim().replace(/^removed /, ""));
             }
+            if (process.platform === "win32") {
+                const { unregisterUriHandler, realRegIo } = await import("./uri-handler.js");
+                const { borrowedProfile } = await import("./service.js");
+                const u = unregisterUriHandler(realRegIo(() => borrowedProfile()));
+                removed.push(...u.removed);
+                left.push(...u.left);
+            }
             const { unlinkSync, existsSync: exists, rmSync, readdirSync } = await import("node:fs");
             if (all && exists(CONFIG_PATH)) {
                 if (keepIdentity) {
@@ -3418,6 +3473,64 @@ async function main() {
             console.log(`\n${D("Change it: pantheon policy grant|revoke self-upgrade|run-commands|unsandboxed-runs · personas: pantheon persona init · who may wake this machine: pantheon wake allow|deny <who>")}`);
             return;
         }
+        case "notice-show": {
+            const raw = process.env.PANTHEON_NOTICE_B64;
+            if (!raw)
+                return;
+            try {
+                sendDesktopNotification(JSON.parse(Buffer.from(raw, "base64").toString("utf8")));
+            }
+            catch { }
+            return;
+        }
+        case "handle-uri": {
+            const { handleUri, parseHandleUriArgs, logUri } = await import("./uri-handler.js");
+            const { spawn, spawnSync } = await import("node:child_process");
+            const { childNodeFlags } = await import("./managed.js");
+            const { statSync } = await import("node:fs");
+            const self = (args) => [...childNodeFlags(), process.argv[1], ...args];
+            const hasBoard = /\n\s*pantheon board\b/.test(HELP_ALL);
+            const parsed = parseHandleUriArgs(argv.slice(1), isAbsolute, (p) => resolve(p));
+            const isDir = (p) => { try {
+                return statSync(p).isDirectory();
+            }
+            catch {
+                return false;
+            } };
+            if ("error" in parsed || (parsed.home && !isDir(parsed.home))) {
+                const why = "error" in parsed ? parsed.error : `its --home (${parsed.home}) is not a folder on this machine`;
+                console.log(`Pantheon did not act on this link: ${why}`);
+                logUri(CONFIG_DIR, `refused (${why})`);
+                process.exit(2);
+            }
+            const uriHome = parsed.home ?? CONFIG_DIR;
+            const childEnv = parsed.home ? { ...process.env, PANTHEON_HOME: parsed.home } : process.env;
+            const code = await handleUri(parsed.rest, {
+                home: uriHome,
+                wokenRun: inWokenRun(),
+                runQueued: (actionId) => spawnSync(process.execPath, self(["explain", "--queued", "--only-action", "--action-id", actionId]), { stdio: "inherit", env: childEnv }).status ?? 1,
+                openBoard: hasBoard ? () => new Promise((done) => {
+                    const c = spawn(process.execPath, self(["board", "--open"]), { detached: true, stdio: "ignore", windowsHide: true, env: childEnv });
+                    const t = setTimeout(() => { c.unref(); done(true); }, 4_000);
+                    c.on("error", () => { clearTimeout(t); done(false); });
+                    c.on("exit", (status) => { clearTimeout(t); done(status === 0); });
+                }) : null,
+                runBrief: () => spawnSync(process.execPath, self(["brief"]), { stdio: "inherit", env: childEnv }).status ?? 1,
+                print: (l) => console.log(l),
+                pause: async () => {
+                    if (!process.stdin.isTTY)
+                        return;
+                    const rl = createInterface({ input: process.stdin, output: process.stderr });
+                    try {
+                        await questionOrNull(rl, D("\npress Enter to close "));
+                    }
+                    finally {
+                        rl.close();
+                    }
+                },
+            });
+            process.exit(code);
+        }
         case "explain": {
             const { readFileSync, rmSync } = await import("node:fs");
             const CONFIG_DIR = dirname(CONFIG_PATH);
@@ -3428,18 +3541,48 @@ async function main() {
                     refuse("a woken run cannot act for the menu bar — a person has to click it");
                 const f = join(CONFIG_DIR, "bin", ".hud-action.json");
                 const { statSync } = await import("node:fs");
+                const want = flag("action-id");
+                if (want !== undefined && !/^[0-9a-f]{16,64}$/.test(want))
+                    refuse("that is not an action id");
                 let st = null;
                 let raw = null;
                 try {
                     st = statSync(f);
                     raw = readFileSync(f, "utf8");
-                    rmSync(f, { force: true });
                 }
                 catch {
                     st = null;
                     raw = null;
                 }
+                if (raw !== null) {
+                    let nonce;
+                    try {
+                        nonce = JSON.parse(raw).nonce;
+                    }
+                    catch {
+                        nonce = undefined;
+                    }
+                    if (want !== undefined && nonce !== want)
+                        refuse("another click replaced that action before it ran — nothing was sent from here; click it again");
+                    if (want === undefined && typeof nonce === "string")
+                        refuse("another Pantheon window is sending an action right now — click it again in a moment");
+                }
+                if (raw !== null) {
+                    try {
+                        rmSync(f, { force: true });
+                    }
+                    catch { }
+                }
                 if (st && raw !== null) {
+                    let parsed = null;
+                    try {
+                        parsed = JSON.parse(raw);
+                    }
+                    catch {
+                        parsed = null;
+                    }
+                    if (want !== undefined && parsed && typeof parsed.nonce === "string" && /^[0-9a-f]{16,64}$/.test(parsed.nonce))
+                        console.log(`action ${parsed.nonce}`);
                     const age = Date.now() - st.mtimeMs;
                     const { runInFlight } = await import("./worker.js");
                     const run = runInFlight(CONFIG_DIR);
@@ -3447,13 +3590,10 @@ async function main() {
                         refuse(`that menu-bar action was written ${Math.round(age / 1000)}s ago — click it again`);
                     if (run && st.mtimeMs >= run.at - 1_000)
                         refuse("that menu-bar action was written while a woken run was working on this machine, so it is not trusted — click it again once the run is done");
-                    try {
-                        hud = JSON.parse(raw);
-                    }
-                    catch {
-                        hud = null;
-                    }
+                    hud = parsed;
                 }
+                if (argv.includes("--only-action") && !hud)
+                    refuse("that action was already taken or is no longer there — click it again");
             }
             const cfg = (() => {
                 if (!hud?.space)
@@ -3477,7 +3617,7 @@ async function main() {
             const { pickExplainAgent, decisionPrompt: dp, allDecisionsPrompt: adp, decisionTitle: dt, sessionName } = await import("./decision-ui.js");
             const { loadProfile } = await import("./profile.js");
             const { detectAvailable, launchArgs } = await import("./agents.js");
-            let id = argv.find((a, i) => i > 0 && !a.startsWith("--"));
+            let id = argv.find((a, i) => i > 0 && !a.startsWith("--") && argv[i - 1] !== "--action-id");
             if (argv.includes("--queued")) {
                 const queued = join(CONFIG_DIR, "bin", ".explain-id");
                 try {
@@ -3978,7 +4118,7 @@ async function main() {
                     once: argv.includes("--once"),
                     ...(argv.includes("--no-notify") ? {} : {
                         notify: (n) => { try {
-                            sendDesktopNotification(n);
+                            notifyFromWorker(n);
                         }
                         catch { } },
                     }),
@@ -4009,7 +4149,7 @@ async function main() {
                 once: argv.includes("--once"),
                 ...(argv.includes("--no-notify") ? {} : {
                     notify: (n) => { try {
-                        sendDesktopNotification(n);
+                        notifyFromWorker(n);
                     }
                     catch { } },
                 }),
@@ -4024,6 +4164,58 @@ async function main() {
             await worker.run();
             return;
         }
+        case "board": {
+            const b = await import("./board.js");
+            if (inWokenRun())
+                die("a woken run cannot open the board — a person has to run this here");
+            if (argv.includes("--watch")) {
+                await b.watchBoard();
+                return;
+            }
+            if (argv.includes("--serve")) {
+                await b.serveBoard({ keep: argv.includes("--keep") });
+                process.exit(0);
+            }
+            if (argv.includes("--stop")) {
+                const s = await b.runningBoard();
+                if (!s) {
+                    console.error(D("no board is running"));
+                    return;
+                }
+                await b.boardPost(s, "/api/stop").catch(() => null);
+                console.error(D("the board is stopped"));
+                return;
+            }
+            const r = await b.ensureBoard({ keep: argv.includes("--keep") }).catch((e) => die(e.message));
+            if (argv.includes("--url")) {
+                console.log(r.url);
+                console.error(D("  good once, within 30 seconds — pantheon board --url makes another"));
+                if (!argv.includes("--open"))
+                    return;
+            }
+            const url = argv.includes("--url") ? await b.boardLinkFor(r.state).catch((e) => die(e.message)) : r.url;
+            const opened = argv.includes("--no-browser") ? false : await b.openBrowser(url).catch(() => false);
+            console.error(`${B("pantheon board")} ${D(r.reused ? "(already running)" : "(started)")}`);
+            if (!opened)
+                console.error(`  open this in your browser within 30 seconds (it works once): ${C(url)}`);
+            else
+                console.error(D("  opened in your browser · pantheon board --url prints its address · --watch shows it in this terminal"));
+            console.error(D(r.state.keep ? "  it stays running" : "  it stops itself after 30 minutes with no open tab"));
+            return;
+        }
+        case "tray": {
+            if (process.platform !== "win32")
+                die(process.platform === "darwin" ? "the tray icon is Windows'; on macOS the menu bar is: pantheon menubar" : "the tray icon is Windows'; on Linux: pantheon board");
+            const { showTray } = await import("./service.js");
+            try {
+                for (const l of showTray())
+                    console.error(l);
+            }
+            catch (e) {
+                die(e.message);
+            }
+            return;
+        }
         case "tray-status": {
             const { trayStatus } = await import("./tray.js");
             console.log(JSON.stringify(await trayStatus()));
@@ -4100,6 +4292,19 @@ async function main() {
             await new Promise((r) => child.on("close", () => r()));
             return;
         }
+        case "host": {
+            const { runHost, provenOrphan } = await import("./win-host.js");
+            const { childNodeFlags, managedLauncher } = await import("./managed.js");
+            const layout = managedLayout();
+            runHost({
+                node: process.execPath,
+                flags: childNodeFlags(),
+                managed: layout ? { pkgDir: layout.pkgDir, prevDir: layout.prevDir } : null,
+                ...(managedLauncher() ? { pantheonCommand: managedLauncher() } : {}),
+                isOurs: (pid, r) => process.platform === "win32" && provenOrphan(r, windowsProcessInfo(pid)),
+            });
+            return;
+        }
         case "notifier": {
             const nf = loadAll();
             const teams = nf ? Object.values(nf.spaces ?? {}).map((m) => configFor(nf, m, null)) : [];
@@ -4110,6 +4315,15 @@ async function main() {
                 log: (line) => console.error(cfgs.length > 1 ? `[${c.space}] ${line}` : line),
             }));
             console.error(`${B("pantheon notifier")} ${D(`(${cfgs.length === 1 ? "" : cfgs.length + " teams · "}ctrl-c to stop)`)}`);
+            if (process.platform === "win32") {
+                try {
+                    const { ensureUriHandler } = await import("./notice-windows.js");
+                    console.error(D(`  ${ensureUriHandler().line}`));
+                }
+                catch (e) {
+                    console.error(D(`  pantheon: links not registered (${e.message.split("\n")[0]})`));
+                }
+            }
             const stopAll = () => { for (const n of notifiers)
                 n.stop(); process.exit(0); };
             process.on("SIGINT", stopAll);
@@ -4148,6 +4362,17 @@ async function main() {
                     console.error(l);
                 return;
             }
+            if (sub === "start" && process.platform === "win32" && (kind === "worker" || kind === "notifier")) {
+                const { enableService } = await import("./service.js");
+                try {
+                    for (const l of enableService(kind))
+                        console.error(l);
+                }
+                catch (e) {
+                    die(e.message);
+                }
+                return;
+            }
             if (kind === "relay") {
                 const data = resolveDataDir(flag("data")).dir;
                 const port = flag("port", "8787");
@@ -4184,12 +4409,30 @@ async function main() {
                 if (flag("remind"))
                     extraN.push("--remind", flag("remind"));
                 console.error(`${B("installing human notifications as a background service")}`);
-                try {
-                    const binary = ensureNativeNotifier();
-                    console.error(D(`  actionable HUD ${binary}`));
+                if (process.platform === "linux") {
+                    const { linuxGraphicalSession } = await import("./host-env.js");
+                    if (!linuxGraphicalSession(process.env))
+                        console.error(D("  no graphical session in this shell (SSH or headless?) — alerts appear once you are logged in to the desktop; pantheon doctor says which way they are shown"));
+                    let lines = [];
+                    try {
+                        lines = installService(kind, homedir(), extraN);
+                    }
+                    catch (e) {
+                        die(e.message);
+                    }
+                    for (const l of lines)
+                        console.error(l);
+                    console.error(`\n${D("Alerts come from your desktop's own notifications. Done answers a decision from the alert; a click opens the board. No agent run or wake permission is involved.")}`);
+                    return;
                 }
-                catch (e) {
-                    die(`could not build the native notification helper: ${e.message}`);
+                if (process.platform !== "win32") {
+                    try {
+                        const binary = ensureNativeNotifier();
+                        console.error(D(`  actionable HUD ${binary}`));
+                    }
+                    catch (e) {
+                        die(`could not build the native notification helper: ${e.message}`);
+                    }
                 }
                 for (const l of installService(kind, homedir(), extraN))
                     console.error(l);
@@ -4266,15 +4509,12 @@ async function main() {
                         if (dirname(d) === d)
                             break;
                     }
-                    const real = (d) => { try {
-                        return realpathSync.native(d);
-                    }
-                    catch {
-                        return resolve(d);
-                    } };
-                    const here = real(process.cwd());
-                    if ((here === real(homedir()) || dirname(here) === here) && !argv.includes("--yes")) {
-                        die(`this is ${dirname(here) === here ? "the root of the disk" : "your home folder"}: binding it puts every folder under it in "${m.name}", and an agent opened anywhere there would speak for that team.\n  Bind a project folder instead, or if you mean it:  pantheon use ${m.name} --here --yes`);
+                    const refused = folderRefusalHere(process.cwd());
+                    if (isTemporaryRefusal(refused))
+                        die(`${refused.why.replace("<team>", m.name)}.`);
+                    if (refused && ["root", "home", "above-home"].includes(refused.kind) && !argv.includes("--yes")) {
+                        const what = refused.kind === "root" ? "the root of the disk" : refused.kind === "home" ? "your home folder" : "a folder that holds your home folder";
+                        die(`this is ${what}: binding it puts every folder under it in "${m.name}", and an agent opened anywhere there would speak for that team.\n  Bind a project folder instead, or if you mean it:  pantheon use ${m.name} --here --yes`);
                     }
                     if ((await import("./repo-find.js")).holdsRepo(process.cwd())) {
                         const n = await bindReposIn(process.cwd(), all, m, argv.includes("--yes"), `pantheon use ${m.name} --here --yes`);

package/dist/command-state.js

@@ -5,6 +5,7 @@ import { chooseAgent, claudeSandboxable, NOT_FOR_UNATTENDED_RUNS, parseRepoComma
 import { detectClaudeFeatures } from "./claude-confine.js";
 import { loadPersonas } from "./persona.js";
 import { plistPath, existingUnitPath } from "./service.js";
+import { readDefinition } from "./win-host.js";
 import { loadPolicy, unsandboxedAllowed } from "./worker-policy.js";
 export function workerServiceAllowsBash(plat = platform()) {
     try {
@@ -17,7 +18,7 @@ export function workerServiceAllowsBash(plat = platform()) {
             return args.includes("--allow-bash");
         }
         if (plat === "win32")
-            return null;
+            return readDefinition("worker")?.args.includes("--allow-bash") ?? null;
         const u = existingUnitPath("worker");
         if (!u)
             return null;