@join-pantheon/cli 0.33.1-rc.1 → 0.33.2-rc.1

package/README.md

@@ -194,11 +194,12 @@ this machine does not have runs nothing: the asker is told it waits, and it is n
 another repo's code. `pantheon spaces` and `doctor` say what the worker serves and what is not here.
 
 **No git at all (a PM, ops, a founder's docs).** `start` or `join` from a plain folder binds it
-(never your home folder). The worker serves it too: a teammate's question is answered from that
-folder, which the run can read but never change; anything it writes goes to a drafts folder of its
-own, and you are told. Answering from a folder unattended needs Claude Code on that machine (the one
-agent that can be opened a folder to read and held off editing it); with another agent, those requests
-wait for your live session, and the teammate is told.
+(never your home folder). The worker serves it too, with any agent you have installed (Claude Code,
+Codex, Cursor or Copilot): each run works in a copy of the folder made for it, so the folder itself is
+never changed. The copy leaves out links, `.git`, `node_modules` and secret-looking files (`.env`,
+keys, credentials), and a folder over 5,000 files or 200 MB is not copied: the request waits for you,
+and the teammate is told why. Anything the run writes or changes in its copy is kept as drafts, and
+you are told which files and where; a copy with no drafts is deleted when the run ends.
 
 ### If something is wrong
 

package/dist/accounts.js

@@ -133,6 +133,7 @@ export class Accounts {
       CREATE INDEX IF NOT EXISTS idx_sessions_account ON sessions(account_id);
       CREATE INDEX IF NOT EXISTS idx_audit_ts ON audit(ts);
       CREATE INDEX IF NOT EXISTS idx_audit_space ON audit(space);
+      CREATE INDEX IF NOT EXISTS idx_audit_actor ON audit(actor_account, event);
       CREATE TABLE IF NOT EXISTS blocks (
         pattern TEXT PRIMARY KEY,
         kind TEXT NOT NULL,
@@ -433,6 +434,15 @@ export class Accounts {
     deviceLive(pubkey) {
         return this.deviceByPubkey(pubkey) !== null;
     }
+    wasDeviceOf(accountId, fp, before) {
+        if (this.db.prepare("SELECT 1 FROM devices WHERE account_id = ? AND fingerprint = ? AND created_at <= ?").get(accountId, fp, before))
+            return true;
+        return !!this.db.prepare("SELECT 1 FROM audit WHERE actor_account = ? AND event = 'device_added' AND target = ? AND ts <= ?").get(accountId, fp, before);
+    }
+    lastEmailProof(accountId, fp) {
+        const r = this.db.prepare("SELECT MAX(ts) ts FROM audit WHERE actor_account = ? AND event IN ('login', 'email_verified') AND target = ?").get(accountId, fp);
+        return r?.ts ?? null;
+    }
     deleteAccount(accountId, ip = "") {
         const acct = this.accountById(accountId);
         if (!acct)

package/dist/agents.js

@@ -137,6 +137,17 @@ export function agentsNeedingUnsandboxed(available = detectAvailable()) {
         return [];
     return [...new Set(available.filter((a) => !NOT_FOR_UNATTENDED_RUNS.has(a.backend.id)).map((a) => a.backend.label))];
 }
+export const FOLDER_READERS = AGENTS.map((a) => a.id);
+export function readsFolders(id) {
+    return !!id && FOLDER_READERS.includes(id);
+}
+export function folderReaderLine(available) {
+    const takers = available.filter((a) => !NOT_FOR_UNATTENDED_RUNS.has(a.backend.id));
+    if (takers.length) {
+        return { ok: true, line: `any installed, signed-in agent here (${takers.map((a) => a.backend.label).join(", ")}) answers requests about bound folders while you are away, working in a copy — the folder itself is never changed` };
+    }
+    return { ok: false, line: `requests about bound folders wait for you: no agent here takes runs while you are away${available.length ? ` (${KIRO_UNATTENDED_REFUSAL})` : ""}` };
+}
 export const claudeSandboxable = (f, os = process.platform) => os !== "win32" && !!f.settings && versionAtLeast(f.version, "2.1.83");
 export function kiroSignedIn(binary, run = runStatus, env = process.env, home = homedir(), os = platform()) {
     if (env.KIRO_API_KEY)

package/dist/board.js

@@ -51,6 +51,12 @@ export function clearBoardState(pid, home = CONFIG_DIR) {
 }
 export const LINK_TTL_MS = 30_000;
 export const boardLink = (port, nonce) => `http://127.0.0.1:${port}/#open=${nonce}`;
+export const FOCUS_RE = /^[ao]_[A-Za-z0-9]{6,48}$/;
+export function focusLink(link, focus) {
+    if (!FOCUS_RE.test(focus))
+        throw new Error("not an act or decision id");
+    return `${link}~focus=${focus}`;
+}
 const TOKEN_RE = /^[0-9a-f]{64}$/;
 const ID_RE = /^[A-Za-z0-9_-]{1,80}$/;
 const MAX_BODY_BYTES = 64 * 1024;
@@ -215,6 +221,11 @@ export function hudActionFor(op, item) {
             if (op.kind === "ANSWER" && item.kind !== "decision")
                 return { error: "only the person it waits on can answer it — add a note or ask back" };
             return { action: "reply", kind: op.kind, body: op.body, ...goal, ...space, ...(item.kind === "decision" ? { decision: item.id } : {}), ...ref };
+        case "wake-allow":
+        case "wake-deny":
+            if (item.kind !== "decision" || !item.wake || !item.ref)
+                return { error: "only a teammate waiting on your approval can be approved or declined here" };
+            return { action: "wake", allow: op.op === "wake-allow", member: item.wake, decision: item.id, act: item.ref, ...space };
         case "open":
             return { action: "open", prompt: item.prompt, ...space, ...goal, ...(item.kind === "decision" ? { decision: item.id } : {}) };
     }
@@ -238,6 +249,8 @@ export function parseBoardAction(raw) {
     switch (v.op) {
         case "done": return only([]) ? { op: "done", id, ...sp } : null;
         case "open": return only([]) ? { op: "open", id, ...sp } : null;
+        case "wake-allow":
+        case "wake-deny": return only([]) ? { op: v.op, id, ...sp } : null;
         case "choose":
             return only(["index"]) && Number.isInteger(v.index) && v.index >= 0 && v.index < 10
                 ? { op: "choose", id, ...sp, index: v.index } : null;
@@ -561,6 +574,10 @@ export async function startBoardServer(o = {}) {
             }
             const q = await runQueued(hud);
             const r = explainOutcome(q.r, q.nonce);
+            if (r.ok && hud.action === "wake") {
+                sendJson(res, 200, { ok: true, message: hud.allow ? `${hud.member} may start work on this machine — their waiting request runs now` : `Declined — ${hud.member}'s requests wait for you (pantheon wake allow ${hud.member} changes it)` });
+                return;
+            }
             if (r.sent) {
                 sent.set(r.sent.id, { ...(item.space ? { space: item.space } : {}), at: deps.now() });
                 for (const [k, v] of sent)
@@ -601,7 +618,7 @@ export async function startBoardServer(o = {}) {
     }
     return { port, token, get url() { return mintLink(); }, link: mintLink, server, get keep() { return keep; }, close, lastSeen: () => lastSeen };
 }
-const LINK_RE = /^http:\/\/127\.0\.0\.1:\d{1,5}\/#open=[0-9a-f]{64}$/;
+const LINK_RE = /^http:\/\/127\.0\.0\.1:\d{1,5}\/#open=[0-9a-f]{64}(?:~focus=[ao]_[A-Za-z0-9]{6,48})?$/;
 export function inServiceCgroup(read = (p) => readFileSync(p, "utf8"), os = platform()) {
     if (os !== "linux")
         return false;
@@ -681,9 +698,13 @@ export function terminalCommand(home, actionId, os = platform(), env = process.e
         return { cmd: "open", args: [file], opts };
     }
     if (os === "win32") {
-        if (argv.some((a) => /["%\r\n]/.test(a)))
+        const file = join(home, "bin", "pantheon-board-explain.cmd");
+        if ([...argv, file].some((a) => /["%\r\n]/.test(a)))
             return { error: "the path to Pantheon holds a character the Windows console cannot pass safely" };
-        const line = `start "Pantheon" ${argv.map((a) => `"${a}"`).join(" ")}`;
+        const text = ["@echo off", "%*", "if errorlevel 1 (", "  echo.", "  echo Pantheon: the agent did not start, or stopped with an error ^(above^). Press a key to close this window.", "  pause >nul", ")", "exit", ""].join("\r\n");
+        mkdirSync(dirname(file), { recursive: true });
+        writeFileSync(file, text);
+        const line = `start "Pantheon" "${file}" ${[...argv.slice(0, -1).map((a) => `"${a}"`), actionId].join(" ")}`;
         return { cmd: "cmd.exe", args: ["/d", "/s", "/c", `"${line}"`], opts: { ...opts, windowsVerbatimArguments: true, windowsHide: true } };
     }
     if (!env.DISPLAY && !env.WAYLAND_DISPLAY)
@@ -1074,9 +1095,11 @@ const LANES = ${JSON.stringify(LANES.map((l) => l.id))};
 const SESSION_KEY = "pantheon-board-session";
 let link = null;
 let session = null;
+// The item an alert opened the board on ("Approve or decline"): shown first, once.
+let focus = null;
 {
-  const m = /^#open=([0-9a-f]{64})$/.exec(location.hash);
-  if (m) link = m[1];
+  const m = /^#open=([0-9a-f]{64})(?:~focus=([ao]_[A-Za-z0-9]{6,48}))?$/.exec(location.hash);
+  if (m) { link = m[1]; focus = m[2] || null; }
   // The nonce leaves the address bar and this history entry before anything else runs.
   history.replaceState(null, "", "/");
 }
@@ -1195,7 +1218,12 @@ function row(item, card) {
   li.append(meta);
   if (item.context) li.append(el("p", "ctx", "For: " + item.context));
   const acts = el("div", "actions");
-  if (card) {
+  if (card && item.wake) {
+    // A teammate waiting on this person's approval: Approve / Just this once /
+    // Decline, and no "Mark done" — that would settle the question unanswered.
+    wakeButtons(item).forEach((b) => acts.append(b));
+    acts.append(tag(button("Reply…", () => openDetail(item, true)), item, "reply"));
+  } else if (card) {
     (item.choices || []).forEach((c, idx) => acts.append(tag(button(c.label, (ev) => act({ op: "choose", id: item.id, space: item.space, index: idx }, ev.currentTarget, c.label + " — sent."), idx === 0 ? "primary" : ""), item, "c" + idx)));
     if (item.kind === "decision") acts.append(tag(button("Mark done", (ev) => act({ op: "done", id: item.id, space: item.space }, ev.currentTarget), ""), item, "done"));
     acts.append(tag(button("Reply…", () => openDetail(item, true)), item, "reply"));
@@ -1208,6 +1236,17 @@ function row(item, card) {
   return li;
 }
 
+// Approve and Decline are pantheon wake allow|deny for the teammate the
+// question is about; "Just this once" is the question's own one-run answer.
+function wakeButtons(item, after) {
+  const done = (r) => { if (after && r && r.ok) after(); };
+  const out = [tag(button("Approve " + item.wake, (ev) => act({ op: "wake-allow", id: item.id, space: item.space }, ev.currentTarget).then(done), "primary"), item, "wake-allow")];
+  const once = (item.choices || []).findIndex((c) => c.answer === "allow once");
+  if (once >= 0) out.push(tag(button("Just this once", (ev) => act({ op: "choose", id: item.id, space: item.space, index: once }, ev.currentTarget, "Just this once — their request runs now.").then(done)), item, "wake-once"));
+  out.push(tag(button("Decline", (ev) => act({ op: "wake-deny", id: item.id, space: item.space }, ev.currentTarget).then(done)), item, "wake-deny"));
+  return out;
+}
+
 async function copy(text) {
   try { await navigator.clipboard.writeText(text); toast("Copied — paste it into your agent."); return; }
   catch { /* fall back to a box the person copies from */ }
@@ -1265,15 +1304,16 @@ async function openDetail(item, focusReply) {
   blocks($("d-body"), [{ kind: "para", text: item.detail || "" }]);
   $("d-options").hidden = true; $("d-options").replaceChildren();
   const ch = $("d-choices"); ch.replaceChildren();
-  (item.choices || []).forEach((c, idx) => ch.append(button(c.label, (ev) => act({ op: "choose", id: item.id, space: item.space, index: idx }, ev.currentTarget, c.label + " — sent.").then((r) => { if (r && r.ok) d.close(); }), idx === 0 ? "primary" : "")));
-  ch.hidden = !(item.choices && item.choices.length);
+  if (item.wake) wakeButtons(item, () => d.close()).forEach((b) => ch.append(b));
+  else (item.choices || []).forEach((c, idx) => ch.append(button(c.label, (ev) => act({ op: "choose", id: item.id, space: item.space, index: idx }, ev.currentTarget, c.label + " — sent.").then((r) => { if (r && r.ok) d.close(); }), idx === 0 ? "primary" : "")));
+  ch.hidden = !(item.wake || (item.choices && item.choices.length));
   const kind = $("d-kind"); kind.replaceChildren();
   for (const [v, label] of (item.kind === "decision" ? [["ANSWER", "Answer"], ["NOTE", "Note"], ["ASK", "Ask back"]] : [["NOTE", "Note"], ["ASK", "Ask back"]])) { const o = el("option", "", label); o.value = v; kind.append(o); }
   $("d-text").value = "";
   setStatus("");
   $("d-retract").hidden = true;
   const actions = $("d-actions"); actions.replaceChildren();
-  if (item.kind === "decision") actions.append(button("Mark done", (ev) => act({ op: "done", id: item.id, space: item.space }, ev.currentTarget).then((r) => { if (r && r.ok) d.close(); })));
+  if (item.kind === "decision" && !item.wake) actions.append(button("Mark done", (ev) => act({ op: "done", id: item.id, space: item.space }, ev.currentTarget).then((r) => { if (r && r.ok) d.close(); })));
   actions.append(button("Explain in " + surface(), (ev) => act({ op: "open", id: item.id, space: item.space }, ev.currentTarget)));
   if (item.goal && item.space) actions.append(button("Show the thread", () => thread(item)));
   actions.append(button("Copy the question", () => copy(item.prompt)));
@@ -1394,6 +1434,12 @@ document.addEventListener("visibilitychange", () => { if (!document.hidden) refr
   }
   if (!session) { $("loading").hidden = true; banner("This board needs its link. Run pantheon board to open it.", true); return; }
   await refresh();
+  if (focus && state) {
+    const want = focus;
+    focus = null;
+    const hit = (state.items || []).find((i) => i.id === want || i.ref === want);
+    if (hit) openDetail(hit); else toast("That is no longer waiting on you.");
+  }
   schedule();
 })();
 })();

package/dist/claude-confine.js

@@ -139,7 +139,7 @@ function userExcludedCommands(file) {
         return [];
     }
 }
-const SECRET_FILE_GLOBS = [".env", ".env.*", "*.pem", "*.key", "*.p12", "*.pfx", "id_rsa*", "id_ed25519*", ".npmrc", ".netrc", "credentials*", "*.keystore", "service-account*.json"];
+export const SECRET_FILE_GLOBS = [".env", ".env.*", "*.pem", "*.key", "*.p12", "*.pfx", "id_rsa*", "id_ed25519*", ".npmrc", ".netrc", "credentials*", "*.keystore", "service-account*.json"];
 const PANTHEON_HOME_ENTRIES = ["config.json", "config.json.bak", "config.json.lock", "worker-policy.json", "profile.json", "continued.json", "bin", "runtime", "ops", "run-homes", "logs", "mcp", "data"];
 function aroundWorktree(top, keeps, named) {
     const keep = (typeof keeps === "string" ? [keeps] : [...keeps]).map((k) => resolve(k));