@join-pantheon/cli 0.33.4-rc.1 → 0.33.5-rc.1

package/dist/accounts.js

@@ -349,8 +349,10 @@ export class Accounts {
         this.db.exec("BEGIN");
         try {
             let account;
+            let welcome = false;
             if (v.purpose === "signup") {
                 const existing = this.accountByEmail(e);
+                welcome = existing?.status !== "active";
                 if (existing?.status === "suspended") {
                     this.db.exec("ROLLBACK");
                     return { ok: false, reason: "suspended" };
@@ -378,7 +380,7 @@ export class Accounts {
             run("DELETE FROM verify_failures WHERE email = ?").run(keyId);
             this.db.exec("COMMIT");
             this.audit({ actor_account: account.id, event: v.purpose === "signup" ? "email_verified" : "login", target: device.fingerprint, ip });
-            return { ok: true, account, session, device };
+            return { ok: true, account, session, device, welcome };
         }
         catch (err) {
             this.db.exec("ROLLBACK");

package/dist/agents.js

@@ -93,6 +93,29 @@ export function detectAvailable() {
     }
     return out;
 }
+export function detectedAgentId(home = homedir()) {
+    const onPath = detectAvailable()[0]?.backend.id;
+    if (onPath)
+        return onPath;
+    for (const [dir, id] of [[".claude", "claude-code"], [".codex", "codex"], [".cursor", "cursor"], [".kiro", "kiro"], [".copilot", "copilot"]]) {
+        if (existsSync(join(home, dir)))
+            return id;
+    }
+    return null;
+}
+export function recordedAgent(prior, opts = {}) {
+    const known = (x) => (x && x.trim() && x !== "unknown" ? x : null);
+    const env = known((opts.env ?? process.env).PANTHEON_AGENT);
+    if (env)
+        return env;
+    const detect = () => { try {
+        return known((opts.detect ?? detectedAgentId)());
+    }
+    catch {
+        return null;
+    } };
+    return (opts.fresh ? detect() ?? known(prior) : known(prior) ?? detect()) ?? "unknown";
+}
 export function detectOnPath() {
     for (const a of AGENTS) {
         if (resolveBinary(a))

package/dist/claude-config.js

@@ -11,7 +11,8 @@ export function claudeHomeConflict(env = process.env, os = platform(), home = ho
         return null;
     return `HOME (${env.HOME}) is not your Windows profile (${home}), whose ~/.claude.json Claude Code reads — it was left as it is`;
 }
-export const claudeUserEntryShape = (entry) => ({ type: "stdio", command: entry.command, args: [...entry.args], env: {} });
+export const CLAUDE_AGENT_ENV = { PANTHEON_AGENT: "claude-code" };
+export const claudeUserEntryShape = (entry) => ({ type: "stdio", command: entry.command, args: [...entry.args], env: { ...CLAUDE_AGENT_ENV } });
 const STALE_MS = 10_000;
 const WAIT_MS = 15_000;
 const sleepSync = (ms) => { try {

package/dist/cli.js

@@ -23,7 +23,7 @@ import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, runNotifiers,
 import { linuxDesktopReachable } from "./notice-linux.js";
 import { desktopUnavailable, hostEnv } from "./host-env.js";
 import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, teamProfile, wakeDefault, wakeMode } from "./profile.js";
-import { runGuide, terminalIO, questionOrNull, parseSetupFlags, questionnaire, optOutsFrom } from "./setup-guide.js";
+import { runGuide, terminalIO, questionOrNull, parseSetupFlags, questionnaire, optOutsFrom, decisionAreasProblem } from "./setup-guide.js";
 import { selectActs, formatAct, resolveRef } from "./history-view.js";
 import { doctor, render, shareBlock } from "./doctor.js";
 import { FEEDBACK_ADDRESS } from "./feedback.js";
@@ -31,7 +31,7 @@ import { menubarProc, notifierProc, relayProc, workerProc, wiring, logFileFor, d
 import { assess } from "./untrusted.js";
 import { report as spendReport, recentRuns } from "./spend.js";
 import { renderBrief, renderTeam } from "./brief.js";
-import { resolveDataDir, saveAll } from "./config.js";
+import { resolveDataDir, saveAll, withConfigLock } from "./config.js";
 import { currentPlan, installNetwork, redactProxy, redactText, normalizeProxy, proxyToRemember, describeNetError, describeRelayFailure, checkRelayCertificate, interceptedText, interceptionExplanation, relayJson } from "./network.js";
 import { createInterface } from "node:readline";
 import { homedir } from "node:os";
@@ -39,6 +39,7 @@ import { removeHook, decideStop, writeIntent, clearIntent, readIntent, repairNot
 import { pending, render as renderPending } from "./pending.js";
 import { signedRead } from "./reads.js";
 import { start as qsStart, join as qsJoin, wireUp, teamNameFor, deviceLabel, bindableFolder, startReconnects } from "./quickstart.js";
+import { recordedAgent } from "./agents.js";
 import { alreadyMemberLine, askedLine, configureLines, fetchSeats, inUseLine, offerSeats, seatsForTeam, seatsToMove, startGate, RECOVER_WAITING_EXIT } from "./recover-offer.js";
 import { shellArg, teamNameProblem } from "./team-name.js";
 import { folderRefusalHere, isTemporaryRefusal, projectFolderAnswer } from "./folder-guard.js";
@@ -253,7 +254,7 @@ async function interactiveOnboard(relayArg, opts = {}) {
         const authUser = mode === "signup" ? signupUsername : undefined;
         save({ ...(prior ?? {}), relay, member: signupUsername || prior?.member || "me",
             space: prior?.space ?? "", token: prior?.token ?? "",
-            publicKey: kp.publicKey, privateKey: kp.privateKey, agent: prior?.agent ?? "unknown",
+            publicKey: kp.publicKey, privateKey: kp.privateKey, agent: recordedAgent(prior?.agent),
             pendingAuth: { email, ...(authUser ? { username: authUser } : {}), purpose: mode, at: recentPend?.at ?? (already && pend?.email === email && pend.at ? pend.at : Date.now()) } });
         if (started.j.reused) {
             console.error(`\n  ${C("A code was sent")} to ${B(email)} ${Math.max(1, Math.round((Date.now() - recentPend.at) / 60_000))} min ago — enter that one, or type 'resend' for a new one. ${SPAM_HINT}\n`);
@@ -285,7 +286,7 @@ async function interactiveOnboard(relayArg, opts = {}) {
             if (v.status === 200) {
                 const acct = v.j.account;
                 const cfg = { ...(prior ?? {}), relay, member: acct.username, space: prior?.space ?? "", token: prior?.token ?? "",
-                    publicKey: kp.publicKey, privateKey: kp.privateKey, agent: prior?.agent ?? "unknown",
+                    publicKey: kp.publicKey, privateKey: kp.privateKey, agent: recordedAgent(prior?.agent),
                     account: { username: acct.username, email: acct.email, verified_at: Date.now() } };
                 delete cfg.pendingAuth;
                 save(cfg);
@@ -867,11 +868,12 @@ async function guidedSetup(cfg, project, opts = {}) {
             catch {
                 return [];
             } },
-            publish: async (p) => {
+            publish: async (p, keep) => {
                 const c = new PantheonClient(cfg, undefined, { role: "cli" });
                 try {
                     await c.connect();
-                    await c.publishProfile(organizationProfile(p, cfg.spaceId, cfg.space));
+                    await c.publishProfile(organizationProfile(p, cfg.spaceId, cfg.space), keep);
+                    return [...c.profiles.values()];
                 }
                 finally {
                     c.close();
@@ -1129,6 +1131,7 @@ ${B("several teams on one machine")}
   pantheon leave <team>       drop one team from this machine (its token and repo bindings)
   pantheon space delete <team> --yes   dissolve a team you founded: disconnects everyone, frees a plan slot
   pantheon profile set --space <team> …   authority that applies in one team only (e.g. --human-required pricing)
+  pantheon profile clear-authority <member> [--space <team>]   founder: take a member's decision claims off (they can set them again)
 
 ${B("day to day")}
   pantheon status             who is here, what is being worked on, what needs you
@@ -1652,7 +1655,7 @@ async function main() {
                 publicKey: kp.publicKey,
                 privateKey: kp.privateKey,
                 display: flag("display"),
-                agent: flag("agent", "unknown"),
+                agent: flag("agent") ?? recordedAgent(had?.agent, { fresh: true }),
                 ...(had?.account ? { account: had.account } : {}),
             };
             save(cfg);
@@ -1853,6 +1856,21 @@ async function main() {
         }
         case "rewire": {
             const rows = installForUser(undefined, undefined, { direct: argv.includes("--direct") }).map((t) => ({ tool: t.tool, status: t.status }));
+            try {
+                const said = withConfigLock(() => {
+                    const f = loadAll();
+                    if (!f || (f.agent && f.agent !== "unknown"))
+                        return null;
+                    const a = recordedAgent(f.agent, { fresh: true });
+                    if (a === "unknown")
+                        return null;
+                    saveAll({ ...f, agent: a });
+                    return a;
+                });
+                if (said)
+                    rows.push({ tool: "agent", status: `recorded as ${said} (was unknown)` });
+            }
+            catch { }
             try {
                 const { refreshUserHooks } = await import("./notify.js");
                 const h = refreshUserHooks();
@@ -2300,6 +2318,8 @@ async function main() {
             const domains = flag("domains");
             if (domains)
                 meta.decision_domains = cleanList(domains.split(","));
+            if (act === "HUMAN_REQUIRED" && to && !inWokenRun())
+                meta.named_by_requester = true;
             let goalArg = flag("goal") ?? null;
             let ref = flag("ref") ?? null;
             if (ref !== null || ["ANSWER", "ACCEPT", "OBJECT"].includes(act)) {
@@ -2346,6 +2366,11 @@ async function main() {
                             : /GOAL_REQUIRED|NO_SUCH_GOAL|GOAL_CLOSED/.test(e.message) ? `${e.message.replace(/ — open one with pantheon_open_goal/, "").replace(/pantheon_open_goal/g, "pantheon goal open")}\n  Open one from here:  pantheon goal open "<what it is about>" --with <member>   then add --goal <id>   (pantheon goal list shows the open ones)`
                                 : e.message));
             console.log(`sent ${act} id=${r.id} seq=${r.seq}`);
+            {
+                const note = (await import("./secret-guard.js")).privateLinkNote(body, summary);
+                if (note)
+                    console.error(`\x1b[33mnote\x1b[0m: ${note}`);
+            }
             if (flag("space"))
                 console.error(D(`  in "${cfg.space}"`));
             else if (resolveFor(process.cwd()).reason === "default")
@@ -3282,7 +3307,7 @@ async function main() {
             if (r.status !== 200)
                 die(String(r.j.error ?? `signup failed (${r.status})`));
             save({ ...(prior ?? {}), relay, member: username ?? prior?.member ?? "me", space: prior?.space ?? "", token: prior?.token ?? "",
-                publicKey: kp.publicKey, privateKey: kp.privateKey, agent: prior?.agent ?? "unknown",
+                publicKey: kp.publicKey, privateKey: kp.privateKey, agent: recordedAgent(prior?.agent),
                 pendingAuth: { email, ...(username ? { username } : {}), purpose, at: Date.now() } });
             if (r.j.sent === false && r.j.via === "resend") {
                 console.error(`${B("signup accepted, but the email could not be sent just now.")}`);
@@ -3476,14 +3501,43 @@ async function main() {
             return;
         }
         case "profile": {
+            if (argv[1] === "clear-authority") {
+                if (inWokenRun())
+                    die("a woken run cannot clear anyone's decision claims — a person has to run this here");
+                const who = argv[2] && !argv[2].startsWith("--") ? argv[2] : die("usage: pantheon profile clear-authority <member> [--space <team>]");
+                let tc;
+                if (flag("space")) {
+                    const pf = loadAll() ?? die("not configured — pantheon join <invite> first");
+                    const m = findMembership(pf, flag("space")) ?? die(`you are not in a team called "${flag("space")}"`);
+                    tc = configFor(pf, m, null);
+                }
+                else
+                    tc = need();
+                const client = new PantheonClient(tc, undefined, { role: "cli" });
+                await client.connect().catch((e) => die(connectFailure(e, tc.relay)));
+                const claimed = Object.keys(client.profiles.get(who)?.authority ?? {});
+                try {
+                    await client.clearAuthority(who);
+                }
+                catch (e) {
+                    client.close();
+                    const msg = e.message;
+                    die(/BAD_MESSAGE/.test(msg) && /discriminator|\bt\b/.test(msg)
+                        ? `"${tc.space}"'s relay runs a Pantheon older than 0.33.5, which cannot clear someone's claims — nothing changed. Ask ${who} to run pantheon setup --decides none, or upgrade the relay.`
+                        : msg);
+                }
+                client.close();
+                console.error(`${C("cleared")} — ${who}'s decision claims in "${tc.space}"${claimed.length ? ` (${claimed.join(", ")})` : ""}. The team was told in a NOTE; ${who} can set them again with pantheon setup --decides`);
+                return;
+            }
             const cfg = need();
             const sub = argv[1] ?? "show";
             let profile = loadProfile(cfg);
-            const publish = async () => {
+            const publish = async (keep = []) => {
                 const client = new PantheonClient(cfg, undefined, { role: "cli" });
                 try {
                     await client.connect();
-                    await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space));
+                    await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space), keep);
                 }
                 finally {
                     client.close();
@@ -3515,6 +3569,11 @@ async function main() {
                 const name = flag("name");
                 const title = flag("title");
                 const responsibilities = listFlag("responsibilities");
+                for (const f of ["human-required", "agent-can-decide"]) {
+                    const bad = decisionAreasProblem(f, flag(f));
+                    if (bad)
+                        die(bad);
+                }
                 const humanRequired = listFlag("human-required");
                 const agentCanDecide = listFlag("agent-can-decide");
                 const capabilities = listFlag("capabilities");
@@ -3546,7 +3605,7 @@ async function main() {
                     const tcl = new PantheonClient(tc, undefined, { role: "cli" });
                     try {
                         await tcl.connect();
-                        await tcl.publishProfile(organizationProfile(profile, m.id, m.name));
+                        await tcl.publishProfile(organizationProfile(profile, m.id, m.name), [...(humanRequired ?? []), ...(agentCanDecide ?? [])]);
                         console.error(`${C("published")} into "${m.name}"`);
                     }
                     catch (e) {
@@ -3579,7 +3638,7 @@ async function main() {
                 console.error(`${C("saved")} — ${surface ? `decision notifications open ${surface}` : "local organization profile updated"}`);
                 if (publicChange) {
                     try {
-                        await publish();
+                        await publish([...(humanRequired ?? []), ...(agentCanDecide ?? [])]);
                         console.error(`${C("published")} — the organization can now route decisions using this authority`);
                     }
                     catch (e) {
@@ -3645,7 +3704,7 @@ async function main() {
                 console.error(`${C("published")} — organization profile is current`);
             }
             else if (sub !== "show") {
-                die("usage: pantheon profile [show | init ... | publish | set ... | delegate ... | undelegate ...]");
+                die("usage: pantheon profile [show | init ... | publish | set ... | delegate ... | undelegate ... | clear-authority <member>]");
             }
             console.log(JSON.stringify(profile, null, 2));
             return;

package/dist/client.js

@@ -1,5 +1,6 @@
 import WebSocket from "ws";
-import { adoptSpaceId, rememberTeamRepos, updateMembershipToken } from "./config.js";
+import { adoptSpaceId, loadAll, rememberTeamRepos, updateMembershipToken } from "./config.js";
+import { honourClearedAuthority } from "./profile.js";
 import { markContinued } from "./continued.js";
 import { markAnswered, nonceOf } from "./nonces.js";
 import { signedRead } from "./reads.js";
@@ -248,9 +249,11 @@ export class PantheonClient {
                     case "members":
                         this.members = msg.members;
                         this.observePins();
+                        this.honourCleared();
                         break;
                     case "profiles":
                         this.profiles = new Map((msg.profiles ?? []).map((p) => [p.member, p]));
+                        this.honourCleared();
                         break;
                     case "claimed":
                         break;
@@ -325,6 +328,7 @@ export class PantheonClient {
                         this.features = msg.features ?? [];
                         this.observePins();
                         this.profiles = new Map((msg.profiles ?? []).map((p) => [p.member, p]));
+                        this.honourCleared();
                         for (const g of msg.goals)
                             this.goals.set(g.id, g);
                         if (!settled) {
@@ -527,6 +531,30 @@ export class PantheonClient {
         });
     }
     async send(a) {
+        let inferredTo = false;
+        if ((a.act === "ANSWER" || a.act === "ACCEPT" || a.act === "OBJECT") && a.ref && a.to == null) {
+            const author = await this.authorOf(a.ref);
+            const goal = a.goal ? this.goals.get(a.goal) : undefined;
+            const entry = author ? this.members.find((m) => m.member === author) : undefined;
+            const known = !!entry && entry.admitted && !entry.revoked_at;
+            if (author && author !== this.cfg.member && known && (!a.goal || goal?.members.includes(author))) {
+                a = { ...a, to: [author] };
+                inferredTo = true;
+            }
+        }
+        if (inferredTo) {
+            try {
+                return await this.sendAct(a);
+            }
+            catch (e) {
+                if (!/NO_SUCH_MEMBER|NOT_IN_GOAL/.test(e.message))
+                    throw e;
+                return this.sendAct({ ...a, to: null });
+            }
+        }
+        return this.sendAct(a);
+    }
+    async sendAct(a) {
         const repo = this.cfg.repo;
         const meta = a.act === "DELIVERED" && repo && !(a.meta && "repo" in a.meta) ? { ...(a.meta ?? {}), repo } : a.meta;
         const id = newActId();
@@ -756,9 +784,63 @@ export class PantheonClient {
     setMayWake(member, mayWake) {
         return this.rpc({ t: "admit", member, may_wake: mayWake, wake_only: true });
     }
-    publishProfile(profile) {
+    publishProfile(profile, keep = []) {
+        const own = this.profiles.get(this.cfg.member);
+        if (own?.authority_cleared) {
+            try {
+                honourClearedAuthority(this.cfg, own, { keep: [...keep], force: true, teams: this.teamCount(), founder: this.founder() });
+            }
+            catch { }
+            const gone = new Set(own.authority_cleared.by === this.founder() ? own.authority_cleared.domains.filter((d) => !keep.includes(d)) : []);
+            profile = { ...profile, authority: Object.fromEntries(Object.entries(profile.authority).filter(([d]) => !gone.has(d))) };
+        }
         return this.rpc({ t: "publish_profile", profile });
     }
+    async authorOf(id) {
+        const seen = this.seen.get(id);
+        if (seen)
+            return seen.from;
+        const read = (async () => {
+            try {
+                const res = await signedRead(this.cfg, "/act", { id }, { timeoutMs: 300 });
+                return res.ok ? (await res.json()).act?.from ?? null : null;
+            }
+            catch {
+                return null;
+            }
+        })();
+        let timer;
+        const late = new Promise((r) => { timer = setTimeout(() => r(null), 300); });
+        try {
+            return await Promise.race([read, late]);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    clearAuthority(member) {
+        return this.rpc({ t: "clear_authority", member });
+    }
+    founder() {
+        return this.members.find((m) => m.founder)?.member ?? null;
+    }
+    teamCount() {
+        try {
+            return Object.keys(loadAll()?.spaces ?? {}).length;
+        }
+        catch {
+            return 1;
+        }
+    }
+    honourCleared() {
+        const own = this.profiles.get(this.cfg.member);
+        if (!own?.authority_cleared)
+            return;
+        try {
+            honourClearedAuthority(this.cfg, own, { teams: this.teamCount(), founder: this.founder() });
+        }
+        catch { }
+    }
     adoptKnownRepo() {
         const c = this.cfg;
         if (c.repo || !c.cwdRepo)

package/dist/decision-ui.js

@@ -1,4 +1,14 @@
 const oneLine = (value) => value.replace(/\s+/g, " ").trim();
+export function namedMarker(from, meta, passed) {
+    if (meta?.authority !== "named")
+        return null;
+    const p = (x, n) => String(x).replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029\[\]]+/g, " ").slice(0, n);
+    const over = (passed ?? []).slice(0, 4).map((o) => `${p(o.member, 48)} (${o.domains.slice(0, 4).map((d) => p(d, 48)).join(", ")})`);
+    return `named by ${p(from, 48)}${over.length ? ` — passes over ${over.join(", ")}` : ""}`;
+}
+export function namedMarkerIn(text) {
+    return /\[(named by [^\]\n]{1,400})\]/.exec(text ?? "")?.[1] ?? null;
+}
 const LAYERS = [
     /^([a-z0-9._-]+)\s+escalated\s*:\s*/i,
     /^([a-z0-9._-]+)\s+needs? a decision\s*:\s*/i,

package/dist/doctor.js

@@ -226,8 +226,18 @@ export async function doctor(projectDir) {
         add("pass", "team", folderHere ? `this folder is bound to "${here.cfg.space}" (${here.binding?.path ?? projectDir}) — no git needed` : `this repo is bound to "${here.cfg.space}"${here.repo?.origin ? ` (${here.repo.origin})` : ""}`, undefined, `this ${folderHere ? "folder" : "repo"} is bound to a team (${nTeams} on this machine)`);
     else if (here.reason === "single")
         add("pass", "team", `"${cfg.space}" — your only team, so every folder resolves to it`, undefined, "one team on this machine");
-    else if (here.reason === "unbound")
-        add("fail", "team", `this folder is not bound to any of your ${nTeams} teams — agents opened here will refuse to send`, `from the team's checkout: pantheon use <team> --here   (pantheon spaces lists them)`, `folder not bound to any of ${nTeams} teams`);
+    else if (here.reason === "unbound") {
+        const all = loadAll();
+        const names = new Map(Object.values(all?.spaces ?? {}).map((m) => [m.id, m.name]));
+        const bound = Object.values(all?.bindings ?? {}).filter((b) => names.has(b.space));
+        if (bound.length) {
+            const list = bound.slice(0, 4).map((b) => `${b.path} (${names.get(b.space)})`).join(", ") + (bound.length > 4 ? `, and ${bound.length - 4} more` : "");
+            add("info", "team", `run doctor from a project folder to check it; bound here: ${list}`, undefined, `run outside a project; ${bound.length} folder${bound.length === 1 ? "" : "s"} bound on this machine`);
+        }
+        else {
+            add("fail", "team", `this folder is not bound to any of your ${nTeams} teams — agents opened here will refuse to send`, `from the team's checkout: pantheon use <team> --here   (pantheon spaces lists them)`, `folder not bound to any of ${nTeams} teams`);
+        }
+    }
     else if (here.reason === "stale")
         add("fail", "team", `this ${here.repo ? "repo" : "folder"} is bound to a team this machine has left (${here.binding?.space})`, "pantheon use <team> --here, or pantheon join <invite>", "bound to a team this machine has left");
     if (here.repo && !here.repo.shared)