@join-pantheon/cli 0.33.5 → 0.33.6

package/dist/cli.js

@@ -22,12 +22,13 @@ import { Worker } from "./worker.js";
 import { DEFAULT_REMINDER_MS, ensureNativeNotifier, HumanNotifier, runNotifiers, sendDesktopNotification } from "./notifier.js";
 import { linuxDesktopReachable } from "./notice-linux.js";
 import { desktopUnavailable, hostEnv } from "./host-env.js";
-import { AGENT_SURFACES, applyProfileInit, cleanList, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, teamProfile, wakeDefault, wakeMode } from "./profile.js";
+import { commandState } from "./command-state.js";
+import { AGENT_SURFACES, applyProfileInit, cleanList, dropCatchAllClaims, isAgentSurface, loadProfile, organizationProfile, profileInitialized, saveProfile, teamProfile, wakeDefault, wakeMode } from "./profile.js";
 import { runGuide, terminalIO, questionOrNull, parseSetupFlags, questionnaire, optOutsFrom, decisionAreasProblem } from "./setup-guide.js";
 import { selectActs, formatAct, resolveRef } from "./history-view.js";
 import { doctor, render, shareBlock } from "./doctor.js";
 import { FEEDBACK_ADDRESS } from "./feedback.js";
-import { menubarProc, notifierProc, relayProc, workerProc, wiring, logFileFor, dataSummary, stopProc, statFile, elapsed, windowsProcessInfo } from "./machine.js";
+import { menubarProc, notifierProc, relayProc, runBy, workerProc, workerFlagRunMinutes, wiring, logFileFor, dataSummary, stopProc, statFile, elapsed, windowsProcessInfo } from "./machine.js";
 import { assess } from "./untrusted.js";
 import { report as spendReport, recentRuns } from "./spend.js";
 import { renderBrief, renderTeam } from "./brief.js";
@@ -39,14 +40,16 @@ import { removeHook, decideStop, writeIntent, clearIntent, readIntent, repairNot
 import { pending, render as renderPending } from "./pending.js";
 import { signedRead } from "./reads.js";
 import { start as qsStart, join as qsJoin, wireUp, teamNameFor, deviceLabel, bindableFolder, startReconnects } from "./quickstart.js";
-import { recordedAgent } from "./agents.js";
+import { recordedAgent, unattendedReadiness } from "./agents.js";
+import { pickupEstimate } from "./pickup.js";
+import { loadPolicy, requestReadinessRecheck, unsandboxedAllowed } from "./worker-policy.js";
 import { alreadyMemberLine, askedLine, configureLines, fetchSeats, inUseLine, offerSeats, seatsForTeam, seatsToMove, startGate, RECOVER_WAITING_EXIT } from "./recover-offer.js";
 import { shellArg, teamNameProblem } from "./team-name.js";
 import { folderRefusalHere, isTemporaryRefusal, projectFolderAnswer } from "./folder-guard.js";
 import { installService, serviceInstalled, serviceLogFile, uninstallService } from "./service.js";
 import { LEGACY_TASK_NAME, hostAlive, hostFiles, readHostState, recordedTaskName } from "./win-host.js";
 import { ACTS, LIMITS } from "./protocol.js";
-import { loadPersonas, personaByName, describePersona, initPersona, personaDir } from "./persona.js";
+import { loadPersonas, personaByName, describePersona, initPersona, personaDir, olderTeammatesNote } from "./persona.js";
 import { fingerprint, newKeypair, signAccount } from "./identity.js";
 import { VERSION } from "./version.js";
 import { connectFailure, signInHint } from "./refusal.js";
@@ -840,6 +843,33 @@ function unattendedProject() {
         return { project: resolve(flag("project", ".")), how: "explicit" };
     return { project: resolve("."), how: "default" };
 }
+function agentReadiness(cfg) {
+    let unsandboxedOk = false;
+    try {
+        unsandboxedOk = unsandboxedAllowed(loadPolicy());
+    }
+    catch { }
+    let commandsOn = false;
+    try {
+        commandsOn = commandState({ project: process.cwd() }).level !== "off";
+    }
+    catch { }
+    return unattendedReadiness({ prefer: loadProfile(cfg).agent.primary_surface, unsandboxedOk, commandsOn, inContainer: hostEnv().kind === "container" });
+}
+function sayAgentReadiness(cfg) {
+    if (!cfg || inWokenRun())
+        return;
+    requestReadinessRecheck();
+    try {
+        if (loadProfile(cfg).agent.wake_enabled === false)
+            return;
+        const r = agentReadiness(cfg);
+        if (r.ok)
+            return;
+        console.error(`\n\x1b[33m! Before teammates send you work:\x1b[0m ${r.says}\n  ${r.fix}\n  ${D("Messages and decisions work without it; pantheon doctor checks again.")}`);
+    }
+    catch { }
+}
 async function guidedSetup(cfg, project, opts = {}) {
     if (argv.includes("--no-guide"))
         return;
@@ -868,11 +898,14 @@ async function guidedSetup(cfg, project, opts = {}) {
             catch {
                 return [];
             } },
+            readiness: () => agentReadiness(cfg),
             publish: async (p, keep) => {
                 const c = new PantheonClient(cfg, undefined, { role: "cli" });
                 try {
                     await c.connect();
-                    await c.publishProfile(organizationProfile(p, cfg.spaceId, cfg.space), keep);
+                    const r = await c.publishProfile(organizationProfile(p, cfg.spaceId, cfg.space), keep);
+                    if (r.note)
+                        console.error(D(`  the relay ${r.note}`));
                     return [...c.profiles.values()];
                 }
                 finally {
@@ -1152,6 +1185,8 @@ ${B("control")}
   pantheon worker             stay answerable while you are away
                             (--agent claude-code|codex|cursor|copilot|kiro|auto, --persona <name>)
   pantheon policy             what this machine's worker may do, in one screen (grant/revoke self-upgrade)
+  pantheon policy set run-minutes <5-180>   how long one woken run may take here (default 60)
+  pantheon policy set idle-seconds <0-900>  how long your session must be quiet before your worker takes a request (default 120)
   pantheon persona            how a woken worker should behave: list / init <name> / show <name>
   pantheon notifier           alert you when a task requires your decision
   pantheon menubar            the menu bar item: status at a glance, pause/resume, decisions
@@ -1159,6 +1194,7 @@ ${B("control")}
   pantheon sessions          your devices & active sessions; revoke <id> to sign one out
   pantheon logout             sign this machine out   ·   pantheon account delete   remove your account
   pantheon audit [--space X]  the log: who did what, when (--json to export, --since <hours>)
+  pantheon usage [--space X]  the team's daily message and goal counts, last 30 days (founder only; --days N)
   pantheon profile            show, create (init), or set your agent and attention profile
   pantheon directory          organization roles and decision authority
   pantheon approvals          decisions waiting on you; show or answer one
@@ -1255,13 +1291,14 @@ const COMMAND_FLAGS = {
     say: "<ACT> <text>  --to <member>[,<member>]  --goal <id>  --ref <id | seq | last>  --summary '<one line>'  --domains <a,b>  --branch --commit --remote (DELIVERED)  --space <team>",
     goal: "list | open \"<title>\" --with <member>[,…] [--acceptance \"…\"] [--deadline <ISO time>] [--list] | close <id> \"<summary>\"",
     history: "--goal <id>  --from <member>  --last <n>  --since <seq>  --short  --presence  --json",
+    usage: "--space <team>  --days <n>  --json",
     network: "--proxy <url> [--no-proxy <hosts>]  |  --direct  |  --clear",
     leave: "[<team>]  --yes  --keep-identity  --stop-relay  --project <dir>",
     uninstall: "--yes  --forget-identity  --stop-relay  --project <dir>",
     stop: "[relay|worker|notifier|menubar|all]  --port <n>",
     logs: "[relay|worker|notifier|menubar]  --follow  --n <lines>",
-    worker: "--agent <claude-code|codex|cursor|copilot|kiro|auto>  --persona <name>  --project <dir>  --allow-bash  --max-runs <n>  --max-runs-day <n>  --grace <s>  --once",
-    service: "install [relay|worker|notifier|menubar] | restart <kind> | uninstall <kind>   --project <dir>  --allow-bash",
+    worker: "--agent <claude-code|codex|cursor|copilot|kiro|auto>  --persona <name>  --project <dir>  --allow-bash  --max-runs <n>  --max-runs-day <n>  --run-minutes <5-180>  --grace <s>  --once",
+    service: "install [relay|worker|notifier|menubar] | restart <kind> | uninstall <kind>   --project <dir>  --allow-bash  --run-minutes <5-180>",
     doctor: "--share  --project <dir>",
     relay: "--port <n>  --host <address>  --data <dir>",
     use: "<team>  --here  --yes   ·   pantheon use --unbind   (this folder or repo bound to no team again)",
@@ -1536,6 +1573,8 @@ async function main() {
             printReady(r.tools);
             if (r.claimed)
                 await guidedSetup(load() ?? r.cfg, repoInfo(process.cwd())?.root ?? null, { preset: setupFlags.preset, force: Object.keys(setupFlags.preset).length > 0 || argv.includes("--yes"), founder: true });
+            if (r.claimed)
+                sayAgentReadiness(load() ?? r.cfg);
             if (r.relay) {
                 console.error(D(`\nKeeping the relay running here. Ctrl-C stops it (your teammate goes offline too).`));
                 await new Promise(() => { });
@@ -1819,6 +1858,7 @@ async function main() {
                 const joined = load();
                 if (joined)
                     await guidedSetup(joined, repoInfo(process.cwd())?.root ?? null, { preset: setupFlags.preset, force: Object.keys(setupFlags.preset).length > 0 || argv.includes("--yes") });
+                sayAgentReadiness(joined);
             }
             console.error(`\n${D('Then ask your agent: "check pantheon_status and say hello to the team".')}`);
             return;
@@ -2020,6 +2060,7 @@ async function main() {
                 die(errors.join("\n") + "\n  pantheon setup --questions  lists every answer");
             const cfg = need();
             await guidedSetup(cfg, repoInfo(process.cwd())?.root ?? null, { force: true, preset });
+            sayAgentReadiness(load() ?? cfg);
             return;
         }
         case "version": {
@@ -2039,6 +2080,7 @@ async function main() {
                 });
                 await new Promise((r) => setTimeout(r, 350));
                 const peers = client.roster.filter((m) => m.id !== cfg.member);
+                const { termSafe } = await import("./board.js");
                 console.log(`${B(cfg.space)}  you are ${C(cfg.member)}  ${D(cfg.relay)}  ${D(`${client.head} acts`)}\n`);
                 if (client.plan)
                     console.log(D(`  ${client.plan.name} plan · ${client.plan.usage.spaces} of ${fmtLimit(client.plan.limits.spaces)} spaces created · ${client.plan.usage.members} of ${fmtLimit(client.plan.limits.members)} people here${client.plan.limits.wake ? "" : " · no unattended workers"}`) + "\n");
@@ -2060,6 +2102,11 @@ async function main() {
                             ? `\x1b[33m${recent ? `their agent has not seen your last ${behind} act${behind === 1 ? "" : "s"}` : `their agent is ${behind} act${behind === 1 ? "" : "s"} behind the team`}\x1b[0m`
                             : lag > 0 ? D("their agent has seen everything you sent") : D("their agent is caught up");
                     console.log(`  ${p.online ? C("●") : D("○")} ${p.id.padEnd(14)} ${D(p.agent.padEnd(12))} ${reach}`);
+                    {
+                        const est = pickupEstimate(p, { now: client.relayNow() });
+                        if (est.kind === "unavailable")
+                            console.log(`  ${" ".repeat(16)}\x1b[33m${termSafe(est.says)}\x1b[0m`);
+                    }
                 }
                 const goals = [...client.goals.values()];
                 console.log(`\n${B("goals")}`);
@@ -2094,8 +2141,12 @@ async function main() {
                 console.log(`\n${B("between delegates")}`);
                 if (!between.length)
                     console.log(`  ${D("(nothing owed)")}`);
+                const myMayWake = client.members.find((m) => m.member === cfg.member)?.may_wake;
                 for (const o of between) {
                     console.log(`  ${o.kind.padEnd(7)} ${o.owner.padEnd(14)}${ageOf(o.created_at).padEnd(6)} ${o.body.split("\n")[0].slice(0, 110)}  ${D(o.ref)}`);
+                    const peer = o.owner !== cfg.member && o.kind !== "DELIVER" ? client.roster.find((m) => m.id === o.owner) ?? { id: o.owner, sessions: [] } : null;
+                    if (peer)
+                        console.log(`  ${" ".repeat(7)} ${D(termSafe(pickupEstimate(peer, { now: client.relayNow(), about: { ref: o.ref, goal: o.goal }, ...(myMayWake !== undefined ? { mayWake: myMayWake } : {}) }).says))}`);
                 }
                 if (human.length || between.length || goals.some((g) => g.state !== "CLOSED")) {
                     console.log(D(`\n  read in full: pantheon show <id>  ·  a thread: pantheon history --goal <goal>  ·  reply: pantheon say ANSWER "…" --ref <id>`));
@@ -2388,7 +2439,7 @@ async function main() {
             const upP = client ? client.connect().then(() => true, () => false) : Promise.resolve(false);
             console.log(B("this machine"));
             if (relay.running) {
-                const how = relay.managedBy === "launchd"
+                const how = relay.managedBy === "launchd" || relay.managedBy === "systemd"
                     ? `service ${relay.label}`
                     : "started by hand — it dies when that terminal closes";
                 console.log(`  relay     ${C("running")}   ${how}   pid ${relay.pid}${relay.since ? `   up ${relay.since}` : ""}`);
@@ -2415,7 +2466,7 @@ async function main() {
                 }
             }
             if (worker.running) {
-                console.log(`  worker    ${C("running")}   ${worker.managedBy === "launchd" ? `service ${worker.label}` : worker.managedBy === "host" ? `background host (${worker.label})` : "started by hand"}   pid ${worker.pid}`);
+                console.log(`  worker    ${C("running")}   ${runBy(worker)}   pid ${worker.pid}`);
                 console.log(`            ${D("a teammate approved on this machine (pantheon wake list) can start an agent run here")}`);
             }
             else {
@@ -2440,19 +2491,24 @@ async function main() {
                 }
             }
             else if (menubar.running) {
-                console.log(`  menu bar  ${C("running")}   ${menubar.managedBy === "launchd" ? `service ${menubar.label}` : "started by hand"}   pid ${menubar.pid}`);
+                console.log(`  menu bar  ${C("running")}   ${runBy(menubar)}   pid ${menubar.pid}`);
             }
             else {
                 const why = desktopUnavailable(hostEnv(), "the menu bar");
                 console.log(`  menu bar  ${D("not running")}   ${D(why ?? "pantheon service install menubar — status and pause/resume in the menu bar")}`);
             }
             if (notifier.running) {
-                console.log(`  notifier  ${C("running")}   ${notifier.managedBy === "launchd" || notifier.managedBy === "systemd" ? `service ${notifier.label}` : notifier.managedBy === "host" ? `background host (${notifier.label})` : "started by hand"}   pid ${notifier.pid}`);
+                console.log(`  notifier  ${C("running")}   ${runBy(notifier)}   pid ${notifier.pid}`);
                 console.log(`            ${D("native alerts are on for decisions that require you")}`);
             }
             else {
                 console.log(`  notifier  ${D("not running")}   ${D("human escalations only appear in pantheon status")}`);
             }
+            const RM = await import("./removed.js");
+            for (const { team, record } of RM.removals(RM.teamsOf(loadAll()))) {
+                const r = RM.removalWords(team, record.by);
+                console.log(`  removed   from "${r.name}"${r.by ? ` by ${r.by}` : ""} ${D(`on ${new Date(record.at).toISOString().slice(0, 10)} — this machine stopped connecting to it (checks now and then, at most every 6 hours); coming back needs a new invite: pantheon join <invite>`)}`);
+            }
             console.log(`\n${B("wired into")}`);
             for (const w of wiring())
                 console.log(`  ${w.tool.padEnd(14)}${w.state.startsWith("not wired") ? D(w.state) : w.state}`);
@@ -2500,7 +2556,7 @@ async function main() {
                 ? D("no signal — no turn reported since the relay came up; your next prompt reports one")
                 : w.busy
                     ? `a turn is in flight${w.busy_since ? ` (for ${ago(w.busy_since)})` : ""}   ${D(`the worker waits; a turn past ${LIMITS.activityBusyTtlMs / 60_000}m with no Stop is read as ended`)}`
-                    : `idle for ${ago(w.idle_since)}   ${D(`the worker takes work after ${LIMITS.workerIdleMs / 60_000}m idle`)}`;
+                    : `idle for ${ago(w.idle_since)}   ${D(await (async () => { const W = await import("./worker-policy.js"); const n = W.effectiveIdleSeconds({ policy: loadPolicy() }).seconds; return n ? `the worker takes work after ${W.describeIdleSeconds(n)} idle` : "the worker takes work as soon as no turn is in flight"; })())}`;
             console.log(`  your activity: ${activity}`);
             for (const p of client.roster.filter((m) => m.id !== cfg.member)) {
                 console.log(`  ${p.id.padEnd(16)}${p.online ? C("online") : D("offline")}   ${p.sessions.length} window(s)`);
@@ -2856,6 +2912,10 @@ async function main() {
                         `  Delete it instead:   pantheon space delete ${m.name} --yes\n  Leave it anyway:     pantheon leave ${m.name} --yes`);
                 }
                 removeMembership(m.id);
+                try {
+                    (await import("./removed.js")).clearRemoval({ space: m.name, spaceId: m.id, relay: m.relay });
+                }
+                catch { }
                 console.error(`${B("left")} "${m.name}" — its token is gone from this machine${bound.length ? `, and ${bound.length} binding${bound.length === 1 ? "" : "s"} with it (${bound.join(", ")})` : ""}.`);
                 sayDefaultAfter(all, m);
                 if (others === null)
@@ -3389,6 +3449,37 @@ async function main() {
             console.log(D(`\nRevoke one:  pantheon sessions revoke <id>   ·   remove a device:  pantheon sessions revoke <device-id> --device`));
             return;
         }
+        case "usage": {
+            let cfg;
+            if (flag("space")) {
+                const pf = loadAll() ?? die("not configured — pantheon join <invite> first");
+                const m = findMembership(pf, flag("space")) ?? die(`you are not in a team called "${flag("space")}"`);
+                cfg = configFor(pf, m, null);
+            }
+            else
+                cfg = need();
+            const { USAGE_SHOW_DAYS, USAGE_KEEP_DAYS, usageTable } = await import("./usage.js");
+            const daysRaw = flag("days");
+            const days = daysRaw === undefined ? USAGE_SHOW_DAYS : /^\d+$/.test(daysRaw) && Number(daysRaw) >= 1 && Number(daysRaw) <= USAGE_KEEP_DAYS ? Number(daysRaw) : die(`--days takes a whole number from 1 to ${USAGE_KEEP_DAYS}`);
+            let res;
+            try {
+                res = await signedRead(cfg, "/usage", { days }, { timeoutMs: 15_000 });
+            }
+            catch (e) {
+                die(connectFailure(e, cfg.relay));
+            }
+            const body = await res.json().then((b) => (b && typeof b === "object" ? b : null), () => null);
+            if (!body || typeof body.usage_v !== "number")
+                die(`"${cfg.space}"'s relay runs a Pantheon older than 0.33.6, which keeps no usage counts — nothing to show. Its operator can upgrade it.`);
+            if (!res.ok || !Array.isArray(body.days))
+                die(body.error ?? `the relay refused (HTTP ${res.status})`);
+            if (argv.includes("--json")) {
+                console.log(JSON.stringify(body, null, 2));
+                return;
+            }
+            console.log(usageTable(body.space ?? cfg.space, body.days, days));
+            return;
+        }
         case "audit": {
             const cfg = identity() ?? die("not set up on this machine — pantheon signup first");
             if (!cfg.account)
@@ -3482,6 +3573,11 @@ async function main() {
                 console.log(`${B(describePersona(p))}  ${D(p.file)}`);
                 for (const w of p.warnings)
                     console.log(`  \x1b[33m! ${w}\x1b[0m`);
+                {
+                    const n = olderTeammatesNote(p);
+                    if (n)
+                        console.log(`  \x1b[33m! ${n}\x1b[0m`);
+                }
                 console.log("");
                 console.log(p.instructions || D("(no instructions — policy only)"));
                 return;
@@ -3497,6 +3593,11 @@ async function main() {
                 console.log(`  ${describePersona(p)}  ${D(p.file)}`);
                 for (const w of p.warnings)
                     console.log(`    \x1b[33m! ${w}\x1b[0m`);
+                {
+                    const n = olderTeammatesNote(p);
+                    if (n)
+                        console.log(`    \x1b[33m! ${n}\x1b[0m`);
+                }
             }
             return;
         }
@@ -3537,7 +3638,9 @@ async function main() {
                 const client = new PantheonClient(cfg, undefined, { role: "cli" });
                 try {
                     await client.connect();
-                    await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space), keep);
+                    const r = await client.publishProfile(organizationProfile(profile, cfg.spaceId, cfg.space), keep);
+                    if (r.note)
+                        console.error(D(`  the relay ${r.note}`));
                 }
                 finally {
                     client.close();
@@ -3580,7 +3683,12 @@ async function main() {
                 const keywords = flag("keywords");
                 const publicChange = name !== undefined || title !== undefined || responsibilities !== undefined ||
                     humanRequired !== undefined || agentCanDecide !== undefined || capabilities !== undefined || keywords !== undefined;
-                if (!surface && !publicChange) {
+                const vague = dropCatchAllClaims(profile);
+                if (vague.dropped.length) {
+                    profile = { ...vague.profile, updated_at: Date.now() };
+                    console.error(`${C("dropped")} ${vague.dropped.map((d) => `"${d}"`).join(", ")} from your decision claims — not a decision area, so it never routed anything`);
+                }
+                if (!surface && !publicChange && !vague.dropped.length) {
                     die("usage: pantheon profile set [--surface codex|claude-code|cursor|copilot|kiro] [--name name] [--title title] [--responsibilities a,b] [--human-required a,b] [--agent-can-decide a,b] [--keywords 'domain=word|word;domain=word']");
                 }
                 if (flag("space")) {
@@ -3605,8 +3713,8 @@ async function main() {
                     const tcl = new PantheonClient(tc, undefined, { role: "cli" });
                     try {
                         await tcl.connect();
-                        await tcl.publishProfile(organizationProfile(profile, m.id, m.name), [...(humanRequired ?? []), ...(agentCanDecide ?? [])]);
-                        console.error(`${C("published")} into "${m.name}"`);
+                        const r = await tcl.publishProfile(organizationProfile(profile, m.id, m.name), [...(humanRequired ?? []), ...(agentCanDecide ?? [])]);
+                        console.error(`${C("published")} into "${m.name}"${r.note ? D(` — the relay ${r.note}`) : ""}`);
                     }
                     catch (e) {
                         console.error(`\x1b[33mnot published\x1b[0m — ${e.message}`);
@@ -3636,7 +3744,7 @@ async function main() {
                 };
                 saveProfile(profile);
                 console.error(`${C("saved")} — ${surface ? `decision notifications open ${surface}` : "local organization profile updated"}`);
-                if (publicChange) {
+                if (publicChange || vague.dropped.length) {
                     try {
                         await publish([...(humanRequired ?? []), ...(agentCanDecide ?? [])]);
                         console.error(`${C("published")} — the organization can now route decisions using this authority`);
@@ -4070,9 +4178,52 @@ async function main() {
             }
         }
         case "policy": {
-            const { loadPolicy, savePolicy, grant, revoke, inWokenRun, CAPABILITY_ARGS } = await import("./worker-policy.js");
+            const { loadPolicy, savePolicy, grant, revoke, inWokenRun, CAPABILITY_ARGS, parseRunMinutes, runMinutesProblem, effectiveRunMinutes, describeRunMinutes, RUN_MINUTES, parseIdleSeconds, idleSecondsProblem, effectiveIdleSeconds, describeIdleSeconds, IDLE_SECONDS } = await import("./worker-policy.js");
             const { COMMAND_GRANT_SCOPE } = await import("./agents.js");
             const sub = argv[1];
+            if (sub === "set") {
+                const key = argv[2];
+                if (key !== "run-minutes" && key !== "idle-seconds")
+                    die(`usage: pantheon policy set run-minutes <${RUN_MINUTES.min}-${RUN_MINUTES.max} | default>   (how long one woken run may take on this machine)\n       pantheon policy set idle-seconds <${IDLE_SECONDS.min}-${IDLE_SECONDS.max} | default>   (how long your session must be quiet before your worker takes a request)`);
+                if (key === "idle-seconds") {
+                    if (inWokenRun())
+                        die("a woken run cannot change how long the worker waits for you — a person has to run this here");
+                    const raw = argv[3];
+                    const p = loadPolicy();
+                    if (raw === "default")
+                        delete p.idleSeconds;
+                    else {
+                        const n = parseIdleSeconds(raw);
+                        if (n === null)
+                            die(idleSecondsProblem(raw));
+                        p.idleSeconds = n;
+                    }
+                    savePolicy(p);
+                    const now = effectiveIdleSeconds({ policy: p });
+                    console.log(`${C("set")} idle wait — your worker takes a teammate's request ${now.seconds ? `after your session has been quiet ${describeIdleSeconds(now.seconds)}` : "with no extra wait once your session is quiet (a turn in flight still holds it)"}${now.from === "default" ? " (the default)" : ""} ${D("— from its next look, no restart; teammates are told the wait")}`);
+                    if (workerProc().running)
+                        console.log(D(`  a worker started with --idle keeps its own value`));
+                    return;
+                }
+                if (inWokenRun())
+                    die("a woken run cannot change how long runs may take — a person has to run this here");
+                const raw = argv[3];
+                const p = loadPolicy();
+                if (raw === "default")
+                    delete p.runMinutes;
+                else {
+                    const n = parseRunMinutes(raw);
+                    if (n === null)
+                        die(runMinutesProblem(raw));
+                    p.runMinutes = n;
+                }
+                savePolicy(p);
+                const now = effectiveRunMinutes({ policy: p });
+                console.log(`${C("set")} run limit — ${describeRunMinutes(now)} ${D("— from the next run; a run already going keeps the limit it started with")}`);
+                if (workerProc().running)
+                    console.log(D(`  a worker started with --run-minutes keeps its own value; personas with max_run_minutes still lower it for what they handle`));
+                return;
+            }
             const capArg = (argv[2] ?? "").replace(/-/g, "_");
             const caps = Object.keys(CAPABILITY_ARGS);
             if (sub === "grant" || sub === "revoke") {
@@ -4096,7 +4247,7 @@ async function main() {
                 return;
             }
             if (sub && sub !== "show")
-                die(`usage: pantheon policy [show | grant <capability> | revoke <capability>]   capabilities: ${caps.map((c) => CAPABILITY_ARGS[c]).join(", ")}`);
+                die(`usage: pantheon policy [show | grant <capability> | revoke <capability> | set run-minutes <${RUN_MINUTES.min}-${RUN_MINUTES.max}|default> | set idle-seconds <${IDLE_SECONDS.min}-${IDLE_SECONDS.max}|default>]   capabilities: ${caps.map((c) => CAPABILITY_ARGS[c]).join(", ")}`);
             const p = loadPolicy();
             const w = workerProc();
             console.log(`${B("What this machine's worker may do")}\n`);
@@ -4132,7 +4283,19 @@ async function main() {
                     console.log(`                 ${D(`ignored "${r.line}" — ${r.why}`)}`);
             }
             console.log(`  runs           ${D("12/hour, 40/day, one at a time, 2 failed attempts then parked (defaults; personas only lower them)")}`);
-            console.log(`\n${D("Change it: pantheon policy grant|revoke self-upgrade|run-commands|unsandboxed-runs · personas: pantheon persona init · who may wake this machine: pantheon wake allow|deny <who>")}`);
+            {
+                const lim = effectiveRunMinutes({ policy: p });
+                const lowered = pers.filter((x) => x.maxRunMinutes !== undefined && x.maxRunMinutes < lim.minutes);
+                console.log(`  run limit      ${describeRunMinutes(lim)}${D(` — a run still going then is stopped, tried once more, then handed to you (change: pantheon policy set run-minutes <${RUN_MINUTES.min}-${RUN_MINUTES.max}>)`)}`);
+                if (lowered.length)
+                    console.log(`                 ${D(`lower for what ${lowered.map((x) => `${x.name} (${x.maxRunMinutes} min)`).join(", ")} handle${lowered.length === 1 ? "s" : ""}`)}`);
+                const wf = workerFlagRunMinutes();
+                if (wf !== null)
+                    console.log(`                 \x1b[33mthe running worker was started with --run-minutes ${wf}, which it uses instead\x1b[0m`);
+                const idle = effectiveIdleSeconds({ policy: p });
+                console.log(`  idle wait      ${idle.seconds ? `${describeIdleSeconds(idle.seconds)} of quiet in your session before your worker takes a request` : "none — your worker takes a request as soon as no turn is in flight in your session"}${D(` (${idle.from === "default" ? "the default" : "set on this machine"}; change: pantheon policy set idle-seconds <${IDLE_SECONDS.min}-${IDLE_SECONDS.max}>)`)}`);
+            }
+            console.log(`\n${D("Change it: pantheon policy grant|revoke self-upgrade|run-commands|unsandboxed-runs · pantheon policy set run-minutes <n> | idle-seconds <n> · personas: pantheon persona init · who may wake this machine: pantheon wake allow|deny <who>")}`);
             return;
         }
         case "notice-show": {
@@ -4852,6 +5015,7 @@ async function main() {
             return;
         }
         case "worker": {
+            const runMinutesFlag = flag("run-minutes") === undefined ? undefined : (await import("./worker-policy.js")).parseRunMinutes(flag("run-minutes")) ?? die((await import("./worker-policy.js")).runMinutesProblem(flag("run-minutes")).replace("pantheon policy set run-minutes default", "leave --run-minutes off"));
             (await import("./machine.js")).recordWorkerPid();
             const allCfg = loadAll();
             const bindings = Object.values(allCfg?.bindings ?? {});
@@ -4862,10 +5026,11 @@ async function main() {
                     ...(flag("persona") ? { persona: flag("persona") } : {}),
                     continuations: !argv.includes("--no-continue"),
                     allowBash: argv.includes("--allow-bash"),
-                    idleMs: numFlag("idle", LIMITS.workerIdleMs / 1000) * 1000,
+                    ...(flag("idle") !== undefined ? { idleMs: numFlag("idle", LIMITS.workerIdleMs / 1000) * 1000 } : {}),
                     maxRunsPerHour: numFlag("max-runs", 12),
                     maxRunsPerDay: numFlag("max-runs-day", 40),
                     graceMs: numFlag("grace", LIMITS.workerGraceMs / 1000) * 1000,
+                    ...(runMinutesFlag !== undefined ? { runMinutes: runMinutesFlag } : {}),
                     once: argv.includes("--once"),
                     ...(argv.includes("--no-notify") ? {} : {
                         notify: (n) => { try {
@@ -4893,10 +5058,11 @@ async function main() {
                 ...(flag("persona") ? { persona: flag("persona") } : {}),
                 continuations: !argv.includes("--no-continue"),
                 allowBash: argv.includes("--allow-bash"),
-                idleMs: numFlag("idle", LIMITS.workerIdleMs / 1000) * 1000,
+                ...(flag("idle") !== undefined ? { idleMs: numFlag("idle", LIMITS.workerIdleMs / 1000) * 1000 } : {}),
                 maxRunsPerHour: numFlag("max-runs", 12),
                 maxRunsPerDay: numFlag("max-runs-day", 40),
                 graceMs: numFlag("grace", LIMITS.workerGraceMs / 1000) * 1000,
+                ...(runMinutesFlag !== undefined ? { runMinutes: runMinutesFlag } : {}),
                 once: argv.includes("--once"),
                 ...(argv.includes("--no-notify") ? {} : {
                     notify: (n) => { try {
@@ -5204,7 +5370,12 @@ async function main() {
                 extra.push("--allow-bash");
             if (argv.includes("--no-continue"))
                 extra.push("--no-continue");
-            for (const f of ["idle", "grace", "max-runs", "max-runs-day", "scratch", "agent-cmd", "agent", "persona"]) {
+            if (flag("run-minutes") !== undefined) {
+                const { parseRunMinutes, runMinutesProblem } = await import("./worker-policy.js");
+                if (parseRunMinutes(flag("run-minutes")) === null)
+                    die(runMinutesProblem(flag("run-minutes")).replace("pantheon policy set run-minutes default", "leave --run-minutes off"));
+            }
+            for (const f of ["idle", "grace", "max-runs", "max-runs-day", "run-minutes", "scratch", "agent-cmd", "agent", "persona"]) {
                 if (flag(f))
                     extra.push(`--${f}`, flag(f));
             }