@join-pantheon/cli 0.32.1 → 0.33.0-rc.2

package/dist/worker-policy.js

@@ -3,6 +3,7 @@ import { dirname, join } from "node:path";
 import { CONFIG_PATH } from "./config.js";
 import { trustWrite } from "./home-guard.js";
 import { parseJsonText } from "./text-file.js";
+import { compareVersions, isVersion } from "./installer.js";
 export const WAKE_NO_MS = 30 * 24 * 60 * 60 * 1_000;
 export const wakeKey = (team, member) => `${team}|${member}`;
 export function mayAskWake(p, teams, member, now = Date.now()) {
@@ -311,6 +312,8 @@ export function needsSelfUpgrade(localPkg, relayPkg, lastAttempt, now = Date.now
     return lastAttempt === null || now - lastAttempt >= UPGRADE_RETRY_MS;
 }
 export function isNewer(a, b) {
+    if (isVersion(a) && isVersion(b))
+        return compareVersions(a, b) > 0;
     const pa = a.split(".").map((x) => parseInt(x, 10) || 0);
     const pb = b.split(".").map((x) => parseInt(x, 10) || 0);
     for (let i = 0; i < 3; i++) {

package/dist/worker.js

@@ -61,7 +61,7 @@ function configuredSshCommand(cwd) {
         return hit;
     let set = false;
     try {
-        set = execFileSync("git", safeGitArgs(cwd, ["-C", cwd, "config", "--get", "core.sshCommand"]), { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 10_000 }).trim().length > 0;
+        set = execFileSync("git", safeGitArgs(cwd, ["-C", cwd, "config", "--get", "core.sshCommand"]), { encoding: "utf8", windowsHide: true, stdio: ["ignore", "pipe", "ignore"], timeout: 10_000 }).trim().length > 0;
     }
     catch { }
     sshCommandSeen.set(cwd, set);
@@ -78,7 +78,7 @@ export function agentBaseEnv(base, proxy) {
 const GIT_TIMEOUT_MS = 60_000;
 export const WORKTREE_ADD_TIMEOUT_MS = 15 * 60_000;
 export const FETCH_TIMEOUT_MS = 90_000;
-const git = (cwd, ...args) => execFileSync("git", safeGitArgs(cwd, args), { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], env: gitCallEnv(args, gitEnv(process.env, proxyEnvFor(), cwd)), timeout: GIT_TIMEOUT_MS, killSignal: "SIGKILL" }).trim();
+const git = (cwd, ...args) => execFileSync("git", safeGitArgs(cwd, args), { cwd, encoding: "utf8", windowsHide: true, stdio: ["ignore", "pipe", "pipe"], env: gitCallEnv(args, gitEnv(process.env, proxyEnvFor(), cwd)), timeout: GIT_TIMEOUT_MS, killSignal: "SIGKILL" }).trim();
 const gitVersions = new Map();
 export function gitVersion() {
     const key = process.env.PATH ?? "";
@@ -86,7 +86,7 @@ export function gitVersion() {
         return gitVersions.get(key);
     let v = null;
     try {
-        const m = /(\d+)\.(\d+)/.exec(execFileSync("git", ["--version"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 10_000 }));
+        const m = /(\d+)\.(\d+)/.exec(execFileSync("git", ["--version"], { encoding: "utf8", windowsHide: true, stdio: ["ignore", "pipe", "ignore"], timeout: 10_000 }));
         if (m)
             v = [Number(m[1]), Number(m[2])];
     }
@@ -101,7 +101,7 @@ export function fetchOrigin(project, timeoutMs = FETCH_TIMEOUT_MS) {
     return new Promise((res) => {
         let child;
         try {
-            child = procSpawn("git", safeGitArgs(project, ["fetch", "--quiet", "origin"]), { cwd: project, env: gitEnv(process.env, proxyEnvFor(), project), stdio: ["ignore", "ignore", "pipe"] });
+            child = procSpawn("git", safeGitArgs(project, ["fetch", "--quiet", "origin"]), { cwd: project, env: gitEnv(process.env, proxyEnvFor(), project), windowsHide: true, stdio: ["ignore", "ignore", "pipe"] });
         }
         catch (e) {
             res({ ok: false, why: e.message });
@@ -117,7 +117,7 @@ export function fetchOrigin(project, timeoutMs = FETCH_TIMEOUT_MS) {
 }
 function fetchOriginSync(project) {
     try {
-        execFileSync("git", safeGitArgs(project, ["fetch", "--quiet", "origin"]), { cwd: project, stdio: ["ignore", "ignore", "pipe"], env: gitEnv(process.env, proxyEnvFor(), project), timeout: FETCH_TIMEOUT_MS, killSignal: "SIGKILL" });
+        execFileSync("git", safeGitArgs(project, ["fetch", "--quiet", "origin"]), { cwd: project, windowsHide: true, stdio: ["ignore", "ignore", "pipe"], env: gitEnv(process.env, proxyEnvFor(), project), timeout: FETCH_TIMEOUT_MS, killSignal: "SIGKILL" });
         return { ok: true };
     }
     catch (e) {
@@ -140,7 +140,7 @@ const isRepo = (cwd) => {
 export const worktreeLabel = (wt) => `${basename(dirname(wt))}/${basename(wt)}`;
 const LINK_SCAN_BUDGET = 1_000_000;
 const GIT_SCAN_MAXBUFFER = 1 << 28;
-const gitScan = (cwd, args) => execFileSync("git", safeGitArgs(cwd, args), { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], env: gitCallEnv(args, gitEnv(process.env, proxyEnvFor(), cwd)), timeout: GIT_TIMEOUT_MS, killSignal: "SIGKILL", maxBuffer: GIT_SCAN_MAXBUFFER });
+const gitScan = (cwd, args) => execFileSync("git", safeGitArgs(cwd, args), { cwd, encoding: "utf8", windowsHide: true, stdio: ["ignore", "pipe", "pipe"], env: gitCallEnv(args, gitEnv(process.env, proxyEnvFor(), cwd)), timeout: GIT_TIMEOUT_MS, killSignal: "SIGKILL", maxBuffer: GIT_SCAN_MAXBUFFER });
 const ENV_DIRS = new Set([".venv", "venv", "env", ".tox", "__pypackages__", ".direnv"]);
 const AGENT_FILE = /^(CLAUDE.*\.md|AGENTS?.*\.md|GEMINI\.md|CONVENTIONS\.md|\.mcp\.json|\.cursorrules|\.windsurfrules|\.clinerules)$/i;
 const AGENT_DIRS = new Set([".claude", ".cursor", ".github", ".kiro", ".codex", ".vscode", ".agents", ".gemini", ".junie", ".amazonq", ".continue", ".clinerules", ".windsurf"]);
@@ -430,7 +430,7 @@ export function prepareWorktree(project, scratch, goal, log, branch = `pantheon/
     if ("done" in p)
         return p.done;
     try {
-        execFileSync("git", safeGitArgs(project, p.add), { cwd: project, stdio: ["ignore", "ignore", "pipe"], env: gitCallEnv(p.add, gitEnv(process.env, proxyEnvFor(), project)), timeout: opts.addTimeoutMs ?? WORKTREE_ADD_TIMEOUT_MS, killSignal: "SIGKILL" });
+        execFileSync("git", safeGitArgs(project, p.add), { cwd: project, windowsHide: true, stdio: ["ignore", "ignore", "pipe"], env: gitCallEnv(p.add, gitEnv(process.env, proxyEnvFor(), project)), timeout: opts.addTimeoutMs ?? WORKTREE_ADD_TIMEOUT_MS, killSignal: "SIGKILL" });
     }
     catch (e) {
         const err = e;
@@ -451,7 +451,7 @@ export async function prepareWorktreeAsync(project, scratch, goal, log, branch =
     const why = await new Promise((res) => {
         let child;
         try {
-            child = procSpawn("git", safeGitArgs(project, p.add), { cwd: project, env: gitCallEnv(p.add, gitEnv(process.env, proxyEnvFor(), project)), stdio: ["ignore", "ignore", "pipe"] });
+            child = procSpawn("git", safeGitArgs(project, p.add), { cwd: project, env: gitCallEnv(p.add, gitEnv(process.env, proxyEnvFor(), project)), windowsHide: true, stdio: ["ignore", "ignore", "pipe"] });
         }
         catch (e) {
             res(e.message);
@@ -589,7 +589,7 @@ export function gitOut(cwd, args, timeoutMs = GIT_TIMEOUT_MS) {
     return new Promise((res) => {
         let child;
         try {
-            child = procSpawn("git", argv, { cwd, env: gitCallEnv(args, gitEnv(process.env, proxyEnvFor(), cwd)), stdio: ["ignore", "pipe", "ignore"] });
+            child = procSpawn("git", argv, { cwd, env: gitCallEnv(args, gitEnv(process.env, proxyEnvFor(), cwd)), windowsHide: true, stdio: ["ignore", "pipe", "ignore"] });
         }
         catch {
             res(null);
@@ -680,7 +680,7 @@ export function massDeleteGuardEnv(runHome, worktree, allow, env = process.env)
     }
     let orig = "";
     try {
-        const out = execFileSync("git", repoHooksArgs(worktree), { cwd: worktree, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], env: gitCallEnv(["rev-parse"], gitEnv(process.env, proxyEnvFor(), worktree)), timeout: GIT_TIMEOUT_MS }).trim();
+        const out = execFileSync("git", repoHooksArgs(worktree), { cwd: worktree, encoding: "utf8", windowsHide: true, stdio: ["ignore", "pipe", "pipe"], env: gitCallEnv(["rev-parse"], gitEnv(process.env, proxyEnvFor(), worktree)), timeout: GIT_TIMEOUT_MS }).trim();
         orig = resolve(worktree, out);
     }
     catch (e) {
@@ -2690,7 +2690,7 @@ export class Worker {
                 detail = await new Promise((res) => {
                     let child;
                     try {
-                        child = procSpawn(sp.command, sp.args, { cwd: worktree, stdio: ["ignore", "pipe", "pipe"], env, ...sp.options, detached: process.platform !== "win32" });
+                        child = procSpawn(sp.command, sp.args, { cwd: worktree, stdio: ["ignore", "pipe", "pipe"], env, ...sp.options, windowsHide: true, detached: process.platform !== "win32" });
                     }
                     catch (e) {
                         res(`could not start "${command}": ${e.message}`);

package/helper/macos/prebuilt/manifest.json

@@ -1,6 +1,6 @@
 {
   "format": 1,
-  "built_at": "2026-10-03T18:03:55.381Z",
+  "built_at": "2026-10-05T04:55:37.913Z",
   "swiftc": "Apple Swift version 6.3.3 (swiftlang-6.3.3.1.3 clang-2100.1.1.101)",
   "helpers": {
     "pantheon-tray": {
@@ -17,7 +17,7 @@
     "pantheon-hud": {
       "source": "main.swift",
       "source_sha256": "bcf55a19b658d1f09a9d117c76030393ab08a2569062dd7413f884ca05f3a0eb",
-      "sha256": "191f3f18e8212e11ad4438bdbef87a5cc533f5ae2fae208801db01c9a265193b",
+      "sha256": "0414b397a533940e3a5c324add6250e1ed71919e67e462d11dcb2a1d0c2f9b41",
       "archs": [
         "arm64",
         "x86_64"

package/helper/windows/pantheon-host.cs

@@ -0,0 +1,170 @@
+// pantheon-host.exe: starts Pantheon's background host on Windows with no
+// window, and keeps it running.
+//
+// Task Scheduler starts this at logon (the "Pantheon-<your SID>" task, current
+// user, interactive, no elevation). It is a GUI-subsystem program
+// (/target:winexe), so Windows never gives it a console: nothing flashes on
+// screen at logon, as powershell.exe -WindowStyle Hidden or node.exe started
+// directly would.
+//
+// It does one thing: start the host with CreateNoWindow and wait for it. The
+// host is `node.exe [flags] cli.js host`, the supervisor that runs the worker,
+// the notifier and the tray (src/win-host.ts). Exit 0 means it was asked to
+// stop, and this exits too. Exit 75 means "start me again now" (it saw a new
+// Pantheon version on disk). Anything else is a crash: started again after
+// 2 s, doubling to 60 s, back to 2 s after ten healthy minutes.
+//
+// WHAT it starts is read again before every start, from the launch file
+// (--launch, one argument per line, written by `pantheon service install` and
+// by every upgrade), so a host that exits 75 comes back on whatever Node and
+// CLI the new version named, never on the argv this shim was registered with.
+// The argv after "--" is the fallback when that file is missing or names a
+// program that is not there. When neither program exists (an installer
+// swapping the runtime folder, a Node upgrade in progress) it waits and looks
+// again, with the same backoff; only after --missing-grace seconds (default
+// ten minutes) of nothing to start does it conclude Pantheon was removed, and
+// exit 3.
+//
+// Each start of this shim is one session (PANTHEON_HOST_SESSION, a new GUID):
+// the host uses it to tell a restart (same session) from a new logon.
+//
+// Compiled on the person's machine by the .NET Framework's own csc.exe (part of
+// every Windows 10 and 11), from this file as shipped in the npm package.
+//
+//   pantheon-host.exe [--env NAME=VALUE]... [--launch FILE] [--missing-grace SECONDS] -- <program> [args...]
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.IO;
+using System.Text;
+using System.Threading;
+
+[assembly: System.Reflection.AssemblyTitle("Pantheon background host")]
+[assembly: System.Reflection.AssemblyDescription("Keeps Pantheon's worker, alerts and tray running while you are logged on")]
+[assembly: System.Reflection.AssemblyProduct("Pantheon")]
+[assembly: System.Reflection.AssemblyVersion("1.1.0.0")]
+
+static class PantheonHost
+{
+    const int RestartNow = 75;
+    const int BaseDelayMs = 2000;
+    const int MaxDelayMs = 60000;
+
+    static int Main(string[] args)
+    {
+        var env = new List<KeyValuePair<string, string>>();
+        string launchFile = null;
+        int graceSeconds = 600;
+        int i = 0;
+        for (; i < args.Length; i++)
+        {
+            if (args[i] == "--") { i++; break; }
+            if (args[i] == "--env" && i + 1 < args.Length)
+            {
+                string kv = args[++i];
+                int eq = kv.IndexOf('=');
+                if (eq > 0) env.Add(new KeyValuePair<string, string>(kv.Substring(0, eq), kv.Substring(eq + 1)));
+                continue;
+            }
+            if (args[i] == "--launch" && i + 1 < args.Length) { launchFile = args[++i]; continue; }
+            if (args[i] == "--missing-grace" && i + 1 < args.Length)
+            {
+                if (!int.TryParse(args[++i], out graceSeconds) || graceSeconds < 0) return 2;
+                continue;
+            }
+            return 2;
+        }
+        if (i >= args.Length) return 2;
+        var baked = new List<string>();
+        for (int j = i; j < args.Length; j++) baked.Add(args[j]);
+
+        string session = Guid.NewGuid().ToString("N");
+        int delay = BaseDelayMs;
+        DateTime missingSince = DateTime.MinValue;
+        while (true)
+        {
+            List<string> argv = ReadLaunch(launchFile);
+            if (argv == null || !File.Exists(argv[0])) argv = baked;
+            if (!File.Exists(argv[0]))
+            {
+                // Nothing to start right now: wait for it to come back, and give up
+                // only once it has been gone longer than any install or upgrade takes.
+                if (missingSince == DateTime.MinValue) missingSince = DateTime.UtcNow;
+                if ((DateTime.UtcNow - missingSince).TotalSeconds >= graceSeconds) return 3;
+                Thread.Sleep(delay);
+                delay = Math.Min(delay * 2, MaxDelayMs);
+                continue;
+            }
+            missingSince = DateTime.MinValue;
+            DateTime started = DateTime.UtcNow;
+            int code;
+            try
+            {
+                var rest = new StringBuilder();
+                for (int j = 1; j < argv.Count; j++)
+                {
+                    if (rest.Length > 0) rest.Append(' ');
+                    rest.Append(Quote(argv[j]));
+                }
+                var psi = new ProcessStartInfo(argv[0], rest.ToString());
+                psi.UseShellExecute = false;
+                psi.CreateNoWindow = true;
+                psi.WindowStyle = ProcessWindowStyle.Hidden;
+                psi.WorkingDirectory = Environment.GetFolderPath(Environment.SpecialFolder.UserProfile);
+                foreach (var kv in env) psi.EnvironmentVariables[kv.Key] = kv.Value;
+                psi.EnvironmentVariables["PANTHEON_HOST_SESSION"] = session;
+                using (Process p = Process.Start(psi))
+                {
+                    p.WaitForExit();
+                    code = p.ExitCode;
+                }
+            }
+            catch (Exception)
+            {
+                code = 1;
+            }
+            if (code == 0) return 0;
+            if (code == RestartNow) { delay = BaseDelayMs; continue; }
+            if ((DateTime.UtcNow - started).TotalMinutes >= 10) delay = BaseDelayMs;
+            Thread.Sleep(delay);
+            delay = Math.Min(delay * 2, MaxDelayMs);
+        }
+    }
+
+    // The launch file: one argument per line (UTF-8), the program first. null
+    // when there is none, or it cannot be read, or it names nothing.
+    static List<string> ReadLaunch(string file)
+    {
+        if (file == null) return null;
+        try
+        {
+            if (!File.Exists(file)) return null;
+            var argv = new List<string>();
+            foreach (string line in File.ReadAllLines(file, Encoding.UTF8))
+            {
+                string a = line.TrimEnd('\r');
+                if (a.Length > 0) argv.Add(a);
+            }
+            return argv.Count > 0 ? argv : null;
+        }
+        catch (Exception) { return null; }
+    }
+
+    // One argument as CommandLineToArgvW reads it back (the MSVC rules node.exe uses).
+    static string Quote(string a)
+    {
+        if (a.Length > 0 && a.IndexOfAny(new[] { ' ', '\t', '"' }) < 0) return a;
+        var sb = new StringBuilder("\"");
+        int backslashes = 0;
+        foreach (char c in a)
+        {
+            if (c == '\\') { backslashes++; continue; }
+            if (c == '"') { sb.Append('\\', backslashes * 2 + 1); sb.Append('"'); }
+            else { sb.Append('\\', backslashes); sb.Append(c); }
+            backslashes = 0;
+        }
+        sb.Append('\\', backslashes * 2);
+        sb.Append('"');
+        return sb.ToString();
+    }
+}

package/helper/windows/pantheon-notice.ps1

@@ -0,0 +1,127 @@
+<#
+  Pantheon's desktop alerts on Windows: a toast, or a tray balloon where toasts
+  cannot be shown. One fixed file, the same bytes for every alert (src/notice-windows.ts).
+
+  Two ways it runs:
+
+  1. Loaded by the tray (helper/windows/pantheon-tray.ps1), which defines the
+     functions below and shows every alert from its own, long-running process.
+     The notifier drops each alert as a file in <home>\host\notices; the tray
+     picks it up, shows it, and deletes it. No process is started per alert.
+
+  2. When no tray is running (quit, or not started yet), the notifier starts
+     Windows PowerShell for one alert:
+       powershell -NoProfile -NonInteractive -Command
+         "if (<not FullLanguage>) { exit 64 }; & ([scriptblock]::Create([IO.File]::ReadAllText('<this file>'))) -Mode toast"
+     hidden by the way it is started (CREATE_NO_WINDOW), never -WindowStyle
+     Hidden or an encoded command. The alert travels in environment variables
+     (base64), never on the command line:
+       PANTHEON_TOAST_XML     the toast (UTF-8)
+       PANTHEON_TOAST_TAG     a tag that lets a reminder replace its alert
+       PANTHEON_TOAST_AUMIDS  the app ids to try, ";"-separated
+       PANTHEON_BALLOON_TITLE / _TEXT / _ICON   for -Mode balloon
+     -Mode toast exits 0 shown, 3 no toast API here, 4 toasts off or refused
+     for every app id. -Mode balloon shows a balloon for twenty seconds and
+     says in <home>\logs\alerts.log whether it could.
+
+  Like the tray it is run as a script block, so it never relies on $PSScriptRoot.
+  This file is kept ASCII (Windows PowerShell reads a .ps1 without a BOM in the
+  system code page).
+#>
+param([string]$Mode = '')
+
+# One toast: the XML, tried under each app id in turn. Returns @{ code; said }.
+function global:Show-PantheonToast([string]$Xml, [string]$Tag, [string[]]$Aumids) {
+  $said = New-Object System.Collections.Generic.List[string]
+  try {
+    [void][Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime]
+    [void][Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom.XmlDocument, ContentType = WindowsRuntime]
+    $doc = [Windows.Data.Xml.Dom.XmlDocument]::new()
+    $doc.LoadXml($Xml)
+  } catch {
+    $said.Add('no-toast-api ' + $_.Exception.Message)
+    return @{ code = 3; said = $said }
+  }
+  $ids = @($Aumids | Where-Object { $_ })
+  for ($i = 0; $i -lt $ids.Count; $i++) {
+    $id = $ids[$i]
+    $last = ($i -eq $ids.Count - 1)
+    try {
+      $notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($id)
+      if ([string]$notifier.Setting -ne 'Enabled') { $said.Add('off ' + $id + ' ' + $notifier.Setting); continue }
+      $toast = [Windows.UI.Notifications.ToastNotification]::new($doc)
+      if ($Tag) { $toast.Tag = $Tag; $toast.Group = 'pantheon' }
+      $notifier.Show($toast)
+      # Pantheon's own app id is used only when Windows then has the toast in
+      # its history for that id: a build that ignores the registration falls
+      # through to the next id instead of swallowing the alert.
+      if (-not $last -and $Tag) {
+        Start-Sleep -Milliseconds 400
+        $seen = $false
+        foreach ($h in [Windows.UI.Notifications.ToastNotificationManager]::History.GetHistory($id)) { if ($h.Tag -eq $Tag) { $seen = $true } }
+        if (-not $seen) {
+          try { [Windows.UI.Notifications.ToastNotificationManager]::History.Remove($Tag, 'pantheon', $id) } catch { }
+          $said.Add('unseen ' + $id)
+          continue
+        }
+      }
+      $said.Add('shown ' + $id)
+      return @{ code = 0; said = $said }
+    } catch { $said.Add('failed ' + $id + ' ' + $_.Exception.Message) }
+  }
+  return @{ code = 4; said = $said }
+}
+
+function global:ConvertFrom-PantheonB64([string]$s) {
+  if (-not $s) { return '' }
+  return [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($s))
+}
+
+function global:Write-PantheonAlertLog([string]$line) {
+  try {
+    $h = [string]$env:PANTHEON_HOME
+    if (-not $h) { $h = Join-Path ([Environment]::GetFolderPath('UserProfile')) '.pantheon' }
+    $dir = Join-Path $h 'logs'
+    if (-not (Test-Path -LiteralPath $dir)) { [void](New-Item -ItemType Directory -Path $dir -Force) }
+    Add-Content -LiteralPath (Join-Path $dir 'alerts.log') -Value ((Get-Date).ToString('o') + ' ' + $line) -Encoding UTF8
+  } catch { }
+}
+
+if ($Mode -eq 'toast') {
+  $ErrorActionPreference = 'Stop'
+  $xml = ''
+  try { $xml = ConvertFrom-PantheonB64 ([string]$env:PANTHEON_TOAST_XML) } catch { [Console]::Out.WriteLine('bad-input ' + $_.Exception.Message); exit 3 }
+  $r = Show-PantheonToast $xml ([string]$env:PANTHEON_TOAST_TAG) (([string]$env:PANTHEON_TOAST_AUMIDS) -split ';')
+  foreach ($l in $r.said) { [Console]::Out.WriteLine($l) }
+  exit $r.code
+}
+
+if ($Mode -eq 'balloon') {
+  # A balloon of its own, for twenty seconds; a click opens the board through
+  # the same pantheon: link. What happened is logged here, where it is known.
+  try {
+    Add-Type -AssemblyName System.Windows.Forms
+    Add-Type -AssemblyName System.Drawing
+    $title = ConvertFrom-PantheonB64 ([string]$env:PANTHEON_BALLOON_TITLE)
+    $text = ConvertFrom-PantheonB64 ([string]$env:PANTHEON_BALLOON_TEXT)
+    $tray = New-Object System.Windows.Forms.NotifyIcon
+    $ico = [string]$env:PANTHEON_BALLOON_ICON
+    if ($ico -and (Test-Path -LiteralPath $ico)) { $tray.Icon = New-Object System.Drawing.Icon -ArgumentList $ico } else { $tray.Icon = [System.Drawing.SystemIcons]::Information }
+    $tray.Text = 'Pantheon'
+    $global:PantheonBalloonClicked = $false
+    $tray.add_BalloonTipClicked({ $global:PantheonBalloonClicked = $true })
+    $tray.add_Click({ $global:PantheonBalloonClicked = $true })
+    $tray.Visible = $true
+    $tray.ShowBalloonTip(15000, $title, $text, [System.Windows.Forms.ToolTipIcon]::Info)
+    Write-PantheonAlertLog 'balloon: shown'
+    $until = (Get-Date).AddSeconds(20)
+    while ((Get-Date) -lt $until -and -not $global:PantheonBalloonClicked) { [System.Windows.Forms.Application]::DoEvents(); Start-Sleep -Milliseconds 100 }
+    if ($global:PantheonBalloonClicked) { try { Start-Process 'pantheon://board' } catch { } }
+    $tray.Visible = $false
+    $tray.Dispose()
+    exit 0
+  } catch {
+    Write-PantheonAlertLog ('balloon: not shown (' + $_.Exception.Message + ')')
+    exit 5
+  }
+}