@join-pantheon/cli 0.33.0-rc.1 → 0.33.0-rc.2

package/dist/cli.js

@@ -914,7 +914,8 @@ ${B("control")}
                             (auto-detects claude / codex / cursor / copilot / kiro on this machine)
   pantheon spend              woken runs on this machine, and what pantheon cannot see
   pantheon leave              remove what pantheon put on this machine
-  pantheon uninstall          leave, then remove Pantheon itself: its own Node, the pantheon command, the PATH lines
+  pantheon uninstall          leave, then remove Pantheon itself: its own Node, the pantheon command, the PATH lines,
+                            and all it keeps in ~/.pantheon (files of yours there stay)
   pantheon panic              emergency stop: ends the run in flight and the worker, and switches off wake rights in every team you are in
   pantheon doctor [--share]   check this machine end to end; --share prints it without names or paths, to paste to us
   pantheon network [--proxy <url> | --direct | --clear]   how this machine reaches the relay; save a proxy for every Pantheon process here
@@ -1038,7 +1039,7 @@ async function teamStanding(all, m) {
         return { others: null, founder: false };
     }
     finally {
-        c.close();
+        c.dispose();
     }
 }
 function slipDistance(a, b) {
@@ -1080,7 +1081,7 @@ async function main() {
         await installNetwork();
     }
     catch { }
-    if (!QUIET.has(cmd)) {
+    if (!QUIET.has(cmd) && cmd !== "uninstall") {
         try {
             console.error(D(updateBanner(VERSION)));
         }
@@ -2507,7 +2508,8 @@ async function main() {
             if (uninstalling && !argv.includes("--yes")) {
                 const teams = plan.teams.length && !keepIdentity ? `leaves ${plan.teams.map((t) => `"${t.name}"`).join(", ")} (this machine's key goes), ` : "";
                 const what = `this removes Pantheon from this machine: it ${teams}uninstalls its services, hooks and agent entries` +
-                    (install?.present ? `, and deletes Pantheon's own Node in ${install.runtime}, the pantheon command and the PATH lines the installer added.` : ".");
+                    (install?.present ? `, and deletes Pantheon's own Node in ${install.runtime}, the pantheon command and the PATH lines the installer added` : "") +
+                    `. Everything Pantheon keeps in ${CONFIG_DIR} goes${keepIdentity ? " (but your identity, --keep-identity)" : ""}; files of your own there stay.`;
                 if (!process.stdin.isTTY)
                     die(`${what}\n  If you mean it:  pantheon uninstall --yes`);
                 const rl = createInterface({ input: process.stdin, output: process.stderr });
@@ -2557,52 +2559,56 @@ async function main() {
                 left.push(...u.left);
             }
             const { unlinkSync, existsSync: exists, rmSync, readdirSync } = await import("node:fs");
-            if (all && exists(CONFIG_PATH)) {
-                if (keepIdentity) {
-                    left.push(`your identity and ${plan.teams.length} team membership${plan.teams.length === 1 ? "" : "s"}, ${CONFIG_PATH} (--keep-identity)`);
-                }
-                else {
+            const spare = [];
+            const hasConfig = !!all && exists(CONFIG_PATH);
+            if (hasConfig && keepIdentity) {
+                left.push(`your identity and ${plan.teams.length} team membership${plan.teams.length === 1 ? "" : "s"}, ${CONFIG_PATH} (--keep-identity)`);
+            }
+            else if (!keepIdentity && (hasConfig || uninstalling)) {
+                if (hasConfig) {
                     unlinkSync(CONFIG_PATH);
                     removed.push(`${CONFIG_PATH} — your key and ${plan.teams.length ? `the token${plan.teams.length === 1 ? "" : "s"} for ${plan.teams.map((t) => `"${t.name}"`).join(", ")}` : "account"}; rejoining means a new invite`);
-                    const runHomes = join(CONFIG_PATH, "..", "run-homes");
-                    const { restorePendingQuarantines, pendingQuarantines } = await import("./agents.js");
-                    const put = restorePendingQuarantines(runHomes);
-                    if (put.length)
-                        removed.push(`nothing of your repos' — what interrupted runs had held aside: ${put.join("; ")}`);
-                    const still = pendingQuarantines(runHomes);
-                    const keptAside = (dir) => { try {
-                        return readdirSync(join(dir, "quarantine-kept")).length > 0;
-                    }
-                    catch {
-                        return false;
-                    } };
-                    let homes = [];
+                }
+                const runHomes = join(CONFIG_PATH, "..", "run-homes");
+                const { restorePendingQuarantines, pendingQuarantines } = await import("./agents.js");
+                const put = restorePendingQuarantines(runHomes);
+                if (put.length)
+                    removed.push(`nothing of your repos' — what interrupted runs had held aside: ${put.join("; ")}`);
+                const still = pendingQuarantines(runHomes);
+                const keptAside = (dir) => { try {
+                    return readdirSync(join(dir, "quarantine-kept")).length > 0;
+                }
+                catch {
+                    return false;
+                } };
+                let homes = [];
+                try {
+                    homes = readdirSync(runHomes);
+                }
+                catch { }
+                const keep = new Set([...still.map((x) => x.runHome), ...homes.map((h) => join(runHomes, h)).filter(keptAside)]);
+                for (const h of homes) {
+                    const dir = join(runHomes, h);
+                    if (keep.has(dir))
+                        continue;
                     try {
-                        homes = readdirSync(runHomes);
+                        rmSync(dir, { recursive: true, force: true });
                     }
                     catch { }
-                    const keep = new Set([...still.map((x) => x.runHome), ...homes.map((h) => join(runHomes, h)).filter(keptAside)]);
-                    for (const h of homes) {
-                        const dir = join(runHomes, h);
-                        if (keep.has(dir))
-                            continue;
-                        try {
-                            rmSync(dir, { recursive: true, force: true });
-                        }
-                        catch { }
-                    }
-                    if (!keep.size) {
-                        try {
-                            rmSync(runHomes, { recursive: true, force: true });
-                        }
-                        catch { }
+                }
+                if (!keep.size) {
+                    try {
+                        rmSync(runHomes, { recursive: true, force: true });
                     }
-                    for (const x of still)
-                        left.push(`${x.runHome} — it still holds ${x.paths.join(", ")} from ${x.worktree}, which could not be put back safely; compare and move them back by hand, then delete the folder`);
-                    for (const dir of keep)
-                        if (keptAside(dir) && !still.some((x) => x.runHome === dir))
-                            left.push(`${join(dir, "quarantine-kept")} — agent config an interrupted run held, set aside because the repo had moved on; check it, then delete the folder`);
+                    catch { }
                 }
+                else
+                    spare.push(runHomes);
+                for (const x of still)
+                    left.push(`${x.runHome} — it still holds ${x.paths.join(", ")} from ${x.worktree}, which could not be put back safely; compare and move them back by hand, then delete the folder`);
+                for (const dir of keep)
+                    if (keptAside(dir) && !still.some((x) => x.runHome === dir))
+                        left.push(`${join(dir, "quarantine-kept")} — agent config an interrupted run held, set aside because the repo had moved on; check it, then delete the folder`);
             }
             {
                 const { removePantheonWorktrees, removeHomeLeftovers } = await import("./machine.js");
@@ -2626,6 +2632,10 @@ async function main() {
                 }
                 if (!runningManaged)
                     left.push(`this pantheon itself (${process.argv[1] ?? "the one you ran"}), which npm installed — remove it with: ${NPM_UNINSTALL}`);
+                const { sweepPantheonHome } = await import("./machine.js");
+                const swept = sweepPantheonHome(CONFIG_DIR, { keepIdentity, spare });
+                removed.push(...swept.removed);
+                left.push(...swept.left);
             }
             console.error(`\n${B("Removed")}`);
             for (const r of removed)

package/dist/client.js

@@ -21,6 +21,7 @@ export class PantheonClient {
     seen = new Map();
     backoff = 500;
     closed = false;
+    disposed = false;
     everConnected = false;
     localOverride = null;
     usingLoopback = false;
@@ -170,6 +171,11 @@ export class PantheonClient {
     }
     attempt(address) {
         return new Promise((resolve, reject) => {
+            if (this.disposed) {
+                this.closed = true;
+                reject(new Error("this client was disposed"));
+                return;
+            }
             let settled = false;
             let heard = false;
             const fail = reject;
@@ -195,6 +201,8 @@ export class PantheonClient {
             this.watchdog.unref?.();
             ws.on("open", () => { });
             ws.on("message", (raw) => {
+                if (this.disposed)
+                    return;
                 this.lastInbound = Date.now();
                 let msg;
                 try {
@@ -438,6 +446,14 @@ export class PantheonClient {
         this.waiters = [];
         this.ws?.close(4000, "handover");
     }
+    dispose() {
+        this.disposed = true;
+        this.close();
+        if (this.watchdog) {
+            clearInterval(this.watchdog);
+            this.watchdog = null;
+        }
+    }
     close() {
         this.closed = true;
         for (const w of this.waiters) {

package/dist/machine.js

@@ -705,6 +705,142 @@ export function removeHomeLeftovers(home, keep, opts = {}) {
     }
     return { removed, left };
 }
+export const PANTHEON_HOME_ENTRIES = [
+    { name: "config.json", what: "your key and team tokens", identity: true },
+    { name: "config.json.bak", what: "the previous config.json", identity: true },
+    { name: "keys.json", what: "the teammates' keys this machine pinned", identity: true },
+    { name: "nonces.json", what: "the signed requests this machine has seen", identity: true },
+    { name: "continued.json", what: "what this machine already handled", identity: true },
+    { name: "cursors.json", what: "where each agent session last read", identity: true },
+    { name: "worker-cursor.json", what: "where the worker last read", identity: true },
+    { name: "profile.json", what: "your profile", identity: true },
+    { name: "worker-policy.json", what: "the worker's wake policy", identity: true },
+    { name: "spend.json", what: "the spend ledger", identity: true },
+    { name: "personas", what: "the worker's personas", dir: true, identity: true },
+    { name: "worker-state.json", what: "the worker's last state" },
+    { name: "worker-run.json", what: "the worker's record of a run in flight" },
+    { name: "run-slot.json", what: "the worker's run slot" },
+    { name: "worker.pid", what: "the worker's pid file" },
+    { name: /^notifier-state(-.+)?\.json$/, sample: "notifier-state-team%2Fone.json", what: "the alerts' state" },
+    { name: "update-check.json", what: "the update check's cache" },
+    { name: "uri-key", what: "the key pantheon:// links are signed with" },
+    { name: "board.json", what: "the board's state" },
+    { name: "hook-intent.json", what: "the hook intent" },
+    { name: "hook-guard.json", what: "the hook guard" },
+    { name: /^(worker|relay|notifier|menubar)\.log(\.1)?$/, sample: "worker.log", what: "service logs an older version wrote here" },
+    { name: /^\.write-check\..+$/, sample: ".write-check.1234.5678", what: "a leftover write probe" },
+    { name: "bin", what: "the menu bar's and alerts' files", dir: true },
+    { name: "logs", what: "the service logs", dir: true },
+    { name: "host", what: "the Windows host's queue, state and markers", dir: true },
+    { name: "mcp", what: "the agent windows' server state", dir: true },
+    { name: "run-homes", what: "the woken runs' homes", dir: true },
+    { name: "worktrees", what: "the worker's worktrees", dir: true },
+    { name: "no-hooks", what: "the empty hooks folder woken runs' git uses", dir: true },
+    { name: "lfs-hooks", what: "the LFS-only hooks folder woken runs' git uses", dir: true },
+    { name: "runtime", what: "Pantheon's own Node", dir: true, kept: "managed" },
+    { name: "data", what: "the relay's ledger", dir: true, kept: "it is your team's history and may be its only copy; delete it yourself once no relay runs from it" },
+    { name: /^(\.DS_Store|Thumbs\.db|desktop\.ini)$/i, sample: ".DS_Store", what: "the file browser's folder cache" },
+];
+const LOCK_OR_TMP = /^(.+?)(\.lock|(\.[0-9a-f]+)+\.tmp)$/i;
+export function homeEntryFor(name) {
+    const direct = (n) => PANTHEON_HOME_ENTRIES.find((e) => typeof e.name === "string" ? e.name === n : e.name.test(n)) ?? null;
+    const e = direct(name);
+    if (e)
+        return e;
+    const m = LOCK_OR_TMP.exec(name);
+    const base = m ? direct(m[1]) : null;
+    return base && !base.dir ? base : null;
+}
+const pause = (ms) => { try {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+catch { } };
+const realSweepFs = {
+    list: (d) => readdirSync(d),
+    exists: (p) => existsSync(p),
+    remove: (p) => rmSync(p, { recursive: true, force: true }),
+    removeDir: (d) => rmdirSync(d),
+};
+export function sweepPantheonHome(home, o = {}) {
+    const fs = o.fs ?? realSweepFs;
+    const tries = o.tries ?? 5, waitMs = o.waitMs ?? 200;
+    const os = o.os ?? platform();
+    const removed = [], left = [];
+    if (!fs.exists(home))
+        return { removed, left, gone: true };
+    const spare = new Set((o.spare ?? []).map((p) => resolve(p)));
+    const attempt = (p, rm) => {
+        let why = "";
+        for (let i = 0; i < tries; i++) {
+            try {
+                rm(p);
+            }
+            catch (e) {
+                why = String(e.code ?? e.message.split("\n")[0]);
+            }
+            if (!fs.exists(p))
+                return null;
+            if (i < tries - 1)
+                pause(waitMs * (i + 1));
+        }
+        return why || "still there";
+    };
+    const lockedHint = os === "win32" ? "; a Pantheon process (an agent window, the menu bar) may still have it open — close it, then delete it" : "; delete it yourself";
+    const gone = [], foreign = [], keptForIdentity = [];
+    let names = [];
+    try {
+        names = fs.list(home);
+    }
+    catch (e) {
+        return { removed, left: [`${home} — could not be read (${e.message.split("\n")[0]}), so nothing in it was removed`], gone: false };
+    }
+    for (const name of names.sort()) {
+        const p = join(home, name);
+        const e = homeEntryFor(name);
+        if (!e) {
+            foreign.push(name);
+            continue;
+        }
+        if (spare.has(resolve(p)))
+            continue;
+        if (e.kept === "managed")
+            continue;
+        if (e.kept) {
+            left.push(`${e.what}, ${p} — kept: ${e.kept}`);
+            continue;
+        }
+        if (o.keepIdentity && e.identity) {
+            keptForIdentity.push(name);
+            continue;
+        }
+        const why = attempt(p, fs.remove);
+        if (why === null)
+            gone.push(name);
+        else
+            left.push(`${e.what}, ${p} — could not remove (${why})${lockedHint}`);
+    }
+    if (gone.length)
+        removed.push(`Pantheon's own files in ${home}: ${gone.join(", ")}`);
+    if (keptForIdentity.length)
+        left.push(`what goes with your identity in ${home}: ${keptForIdentity.join(", ")} (--keep-identity)`);
+    let rest = [];
+    try {
+        rest = fs.list(home);
+    }
+    catch { }
+    if (!rest.length) {
+        const why = attempt(home, fs.removeDir);
+        if (why === null) {
+            removed.push(`${home} itself, now empty`);
+            return { removed, left, gone: true };
+        }
+        left.push(`${home} — empty, but could not remove it (${why})${lockedHint}`);
+        return { removed, left, gone: false };
+    }
+    if (foreign.length)
+        left.push(`${home}, for what is not Pantheon's: ${foreign.join(", ")} — Pantheon never writes ${foreign.length === 1 ? "it" : "these"}, so ${foreign.length === 1 ? "it was" : "they were"} not touched`);
+    return { removed, left, gone: false };
+}
 export const accountStillExists = (email) => `your account${email ? ` ${email}` : ""} still exists — this machine is signed out. Sign back in with: pantheon login${email ? ` --email ${email}` : ""}   (pantheon signup would fail: the email is taken). To delete the account itself: pantheon account delete, before leaving`;
 const LOG_KINDS = ["worker", "relay", "notifier", "menubar"];
 export function uninstallMachine(opts, io) {

package/dist/uninstall.js

@@ -5,7 +5,7 @@ import { posix, win32 } from "node:path";
 import { expectedLauncher } from "./managed.js";
 export const BEGIN_MARK = "# >>> pantheon >>>";
 export const END_MARK = "# <<< pantheon <<<";
-export const PROFILES = [".profile", ".bash_profile", ".bashrc", ".zshrc", ".zprofile"];
+export const PROFILES = [".profile", ".bash_profile", ".bash_login", ".bashrc", ".zshrc", ".zprofile"];
 export const FISH_CONF = ".config/fish/conf.d/pantheon.fish";
 export function withoutPathBlock(text) {
     const lines = text.match(/[^\n]*\n|[^\n]+$/g) ?? [];

package/dist/win-host.js

@@ -633,10 +633,12 @@ export function realHostIo(o = {}) {
         exit: (code) => process.exit(code),
     };
 }
-export function takeHostLock(home = CONFIG_DIR, pid = process.pid) {
+export const HOST_LOCK_STARTUP_GRACE_MS = 2 * 60_000;
+export function takeHostLock(home = CONFIG_DIR, pid = process.pid, now = Date.now, alive = pidAlive) {
     const f = hostFiles(home);
     mkdirSync(f.dir, { recursive: true });
-    for (let i = 0; i < 2; i++) {
+    let lastHolder = -1;
+    for (let i = 0; i < 4; i++) {
         try {
             const fd = openSync(f.lock, "wx");
             writeSync(fd, String(pid));
@@ -646,13 +648,35 @@ export function takeHostLock(home = CONFIG_DIR, pid = process.pid) {
         catch (e) {
             if (e.code !== "EEXIST")
                 throw e;
-            const held = Number(readFileSafe(f.lock));
-            if (Number.isInteger(held) && held > 0 && held !== pid && pidAlive(held) && hostAlive(readHostState(home)))
+        }
+        const held = Number(readFileSafe(f.lock));
+        let age = 0;
+        try {
+            age = now() - statSync(f.lock).mtimeMs;
+        }
+        catch {
+            continue;
+        }
+        if (Number.isInteger(held) && held > 0) {
+            lastHolder = held;
+            if (held === pid)
+                return null;
+            if (alive(held) && (hostAlive(readHostState(home)) || age < HOST_LOCK_STARTUP_GRACE_MS))
                 return held;
-            rmSync(f.lock, { force: true });
         }
+        else if (age < 10_000) {
+            return lastHolder;
+        }
+        const gone = `${f.lock}.stale-${pid}-${i}`;
+        try {
+            renameSync(f.lock, gone);
+        }
+        catch {
+            continue;
+        }
+        rmSync(gone, { force: true });
     }
-    return null;
+    return lastHolder;
 }
 const readFileSafe = (p) => { try {
     return readFileSync(p, "utf8").trim();

package/helper/macos/prebuilt/manifest.json

@@ -1,6 +1,6 @@
 {
   "format": 1,
-  "built_at": "2026-10-04T17:35:53.208Z",
+  "built_at": "2026-10-05T04:55:37.913Z",
   "swiftc": "Apple Swift version 6.3.3 (swiftlang-6.3.3.1.3 clang-2100.1.1.101)",
   "helpers": {
     "pantheon-tray": {

package/installer/install.ps1

@@ -622,7 +622,10 @@ function Install-Pantheon {
     # Start-Process -NoNewWindow, so pantheon gets this console itself: a real
     # terminal for the sign-in questions, not a pipe PowerShell reads from.
     $State.step = 'starting pantheon'
-    $line = ConvertTo-ArgLine (@($entry) + $Arguments)
+    # With the same --use-system-ca as npm and pantheon.cmd: this first run is the
+    # one that signs in, and behind a TLS-inspecting proxy the relay's
+    # certificate chains only to the company root in the Windows store.
+    $line = ConvertTo-ArgLine (@($ca) + @($entry) + $Arguments)
     $noConsole = $false
     try { $noConsole = [Console]::IsInputRedirected } catch { $noConsole = $false }
     if (-not $noConsole) {

package/installer/install.sh

@@ -508,6 +508,17 @@ add_block() {
     note "the pantheon block in $f has a marker line without its pair, so $f was left as it is; put $BIN_DIR at the front of PATH there yourself"
     return 0
   fi
+  # One of each, but the end before the begin (edited by hand): the rewrite
+  # below would skip from the begin marker to the end of the file and drop
+  # everything after it, so the file is not touched either.
+  if [ "${begins:-0}" -eq 1 ]; then
+    bline=$(grep -nxF "$BEGIN_MARK" "$f" | head -n 1 | cut -d: -f1)
+    eline=$(grep -nxF "$END_MARK" "$f" | head -n 1 | cut -d: -f1)
+    if [ "${bline:-0}" -gt "${eline:-0}" ]; then
+      note "the pantheon block in $f has its end marker before its begin marker, so $f was left as it is; put $BIN_DIR at the front of PATH there yourself"
+      return 0
+    fi
+  fi
   if [ "${begins:-0}" -eq 1 ]; then
     awk -v b="$BEGIN_MARK" -v e="$END_MARK" '$0 == b { keep = 1 } keep { print } $0 == e { keep = 0 }' "$f" >"$TMP_DIR/old"
     same "$TMP_DIR/old" "$TMP_DIR/block" && return 0
@@ -531,10 +542,13 @@ add_block() {
 }
 
 login_shell=$(basename "${SHELL:-sh}")
-# ~/.profile: read by sh and dash logins, by bash when it has no .bash_profile,
+# ~/.profile: read by sh and dash logins, by bash when it has no .bash_profile or .bash_login,
 # and by the `sh -lc` Pantheon itself uses to find programs.
 add_block "$HOME/.profile"
 [ -f "$HOME/.bash_profile" ] && add_block "$HOME/.bash_profile"
+# bash logins read the first of .bash_profile, .bash_login and .profile: with
+# no .bash_profile, an existing .bash_login is the one read, not .profile.
+[ -f "$HOME/.bash_login" ] && add_block "$HOME/.bash_login"
 { [ -f "$HOME/.bashrc" ] || [ "$login_shell" = bash ]; } && add_block "$HOME/.bashrc"
 { [ -f "$HOME/.zshrc" ] || [ "$login_shell" = zsh ]; } && add_block "$HOME/.zshrc"
 [ -f "$HOME/.zprofile" ] && add_block "$HOME/.zprofile"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@join-pantheon/cli",
-  "version": "0.33.0-rc.1",
+  "version": "0.33.0-rc.2",
   "description": "Let your coding agent collaborate directly with your teammates' agents — ask, agree an interface, and deliver, without a human relaying messages.",
   "type": "module",
   "bin": {