@chipschat/hermes 1.0.4 → 1.0.7

package/dist/main.js

@@ -8,9 +8,11 @@ var __export = (target, all) => {
 };
 
 // src/main.ts
-import { existsSync as existsSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { dirname as dirname4, join as join7, resolve as resolve4 } from "node:path";
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
+import { createServer as createServer2 } from "node:net";
+import { homedir as homedir8 } from "node:os";
+import { dirname as dirname6, join as join12, resolve as resolve6 } from "node:path";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -845,10 +847,10 @@ function promiseAllObject(promisesObj) {
     return resolvedObj;
   });
 }
-function randomString(length = 10) {
+function randomString(length2 = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
   let str = "";
-  for (let i = 0; i < length; i++) {
+  for (let i = 0; i < length2; i++) {
     str += chars[Math.floor(Math.random() * chars.length)];
   }
   return str;
@@ -1996,8 +1998,8 @@ var ulid = /^[0-7][0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{25}$/;
 var xid = /^[0-9a-vA-V]{20}$/;
 var ksuid = /^[A-Za-z0-9]{27}$/;
 var nanoid = /^[a-zA-Z0-9_-]{21}$/;
-function nanoidOfLength(length) {
-  return new RegExp(`^[a-zA-Z0-9_-]{${length}}$`);
+function nanoidOfLength(length2) {
+  return new RegExp(`^[a-zA-Z0-9_-]{${length2}}$`);
 }
 var duration = /^P(?:(\d+W)|(?!.*W)(?=\d|T\d)(\d+Y)?(\d+M)?(\d+D)?(T(?=\d)(\d+H)?(\d+M)?(\d+([.,]\d+)?S)?)?)$/;
 var extendedDuration = /^[-+]?P(?!$)(?:(?:[-+]?\d+Y)|(?:[-+]?\d+[.,]\d+Y$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:(?:[-+]?\d+W)|(?:[-+]?\d+[.,]\d+W$))?(?:(?:[-+]?\d+D)|(?:[-+]?\d+[.,]\d+D$))?(?:T(?=[\d+-])(?:(?:[-+]?\d+H)|(?:[-+]?\d+[.,]\d+H$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:[-+]?\d+(?:[.,]\d+)?S)?)??$/;
@@ -2022,8 +2024,8 @@ function emoji() {
 }
 var ipv4 = /^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/;
 var ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/;
-var mac = (delimiter2) => {
-  const escapedDelim = escapeRegex(delimiter2 ?? ":");
+var mac = (delimiter3) => {
+  const escapedDelim = escapeRegex(delimiter3 ?? ":");
   return new RegExp(`^(?:[0-9A-F]{2}${escapedDelim}){5}[0-9A-F]{2}$|^(?:[0-9a-f]{2}${escapedDelim}){5}[0-9a-f]{2}$`);
 };
 var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
@@ -2075,8 +2077,8 @@ var hex = /^[0-9a-fA-F]*$/;
 function fixedBase64(bodyLength, padding) {
   return new RegExp(`^[A-Za-z0-9+/]{${bodyLength}}${padding}$`);
 }
-function fixedBase64url(length) {
-  return new RegExp(`^[A-Za-z0-9_-]{${length}}$`);
+function fixedBase64url(length2) {
+  return new RegExp(`^[A-Za-z0-9_-]{${length2}}$`);
 }
 var md5_hex = /^[0-9a-fA-F]{32}$/;
 var md5_base64 = /* @__PURE__ */ fixedBase64(22, "==");
@@ -2339,8 +2341,8 @@ var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (ins
   inst._zod.check = (payload) => {
     const input2 = payload.value;
     const units = input2.length;
-    const length = typeof input2 === "string" && units > def.maximum ? codePointLength(input2) : units;
-    if (length <= def.maximum)
+    const length2 = typeof input2 === "string" && units > def.maximum ? codePointLength(input2) : units;
+    if (length2 <= def.maximum)
       return;
     const origin = getLengthableOrigin(input2);
     payload.issues.push({
@@ -2361,8 +2363,8 @@ var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (ins
   inst._zod.check = (payload) => {
     const input2 = payload.value;
     const units = input2.length;
-    const length = typeof input2 === "string" && units >= def.minimum && units < def.minimum * 2 ? codePointLength(input2) : units;
-    if (length >= def.minimum)
+    const length2 = typeof input2 === "string" && units >= def.minimum && units < def.minimum * 2 ? codePointLength(input2) : units;
+    if (length2 >= def.minimum)
       return;
     const origin = getLengthableOrigin(input2);
     payload.issues.push({
@@ -2383,11 +2385,11 @@ var $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals"
   inst._zod.check = (payload) => {
     const input2 = payload.value;
     const units = input2.length;
-    const length = typeof input2 === "string" && units >= def.length && units <= def.length * 2 ? codePointLength(input2) : units;
-    if (length === def.length)
+    const length2 = typeof input2 === "string" && units >= def.length && units <= def.length * 2 ? codePointLength(input2) : units;
+    if (length2 === def.length)
       return;
     const origin = getLengthableOrigin(input2);
-    const tooBig = length > def.length;
+    const tooBig = length2 > def.length;
     payload.issues.push({
       origin,
       ...tooBig ? { code: "too_big", maximum: def.length } : { code: "too_small", minimum: def.length },
@@ -2597,8 +2599,8 @@ var Doc = class {
     const lines2 = content.split("\n").filter((x) => x);
     const minIndent = Math.min(...lines2.map((x) => x.length - x.trimStart().length));
     const dedented = lines2.map((x) => x.slice(minIndent)).map((x) => " ".repeat(this.indent * 2) + x);
-    for (const line of dedented) {
-      this.content.push(line);
+    for (const line2 of dedented) {
+      this.content.push(line2);
     }
   }
   compile() {
@@ -3079,11 +3081,11 @@ var $ZodE164 = /* @__PURE__ */ $constructor("$ZodE164", (inst, def) => {
 });
 var CC_SANITIZE = /[- ]/g;
 function isLuhnAlgo(digits) {
-  let length = digits.length;
+  let length2 = digits.length;
   let bit = 1;
   let sum = 0;
-  while (length) {
-    const value = digits.charCodeAt(--length) - 48;
+  while (length2) {
+    const value = digits.charCodeAt(--length2) - 48;
     bit ^= 1;
     sum += bit ? [0, 2, 4, 6, 8, 1, 3, 5, 7, 9][value] : value;
   }
@@ -5079,7 +5081,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve5) {
+function isRecursive(inst, stack, resolve7) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -5089,7 +5091,7 @@ function isRecursive(inst, stack, resolve5) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve5);
+      const answer = isRecursive(child, stack, resolve7);
       if (answer > result)
         result = answer;
     }
@@ -5100,7 +5102,7 @@ function isRecursive(inst, stack, resolve5) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve5) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve7) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -5164,7 +5166,7 @@ function isRecursive(inst, stack, resolve5) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve5 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve7 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -15157,11 +15159,11 @@ function _minLength(minimum, params) {
   });
 }
 // @__NO_SIDE_EFFECTS__
-function _length(length, params) {
+function _length(length2, params) {
   return new $ZodCheckLengthEquals({
     check: "length_equals",
     ...normalizeParams(params),
-    length
+    length: length2
   });
 }
 // @__NO_SIDE_EFFECTS__
@@ -15728,8 +15730,8 @@ function encodeJSONPointerSegment(segment) {
   return segment.replace(/~/g, "~0").replace(/\//g, "~1");
 }
 function extractDefs(ctx, schema) {
-  const root = ctx.seen.get(schema);
-  if (!root)
+  const root2 = ctx.seen.get(schema);
+  if (!root2)
     throw new Error("Unprocessed schema. This is a bug in Zod.");
   if (ctx.external && ctx.sharedDefsExtractedFor === ctx.external)
     return;
@@ -15758,7 +15760,7 @@ function extractDefs(ctx, schema) {
     }
     const uriPrefix = `#`;
     const defUriPrefix = `${uriPrefix}/${defsSegment}/`;
-    if (entry[1] === root && !entry[1].schema.id) {
+    if (entry[1] === root2 && !entry[1].schema.id) {
       return { ref: uriPrefix };
     }
     const defId = entry[1].schema.id ?? `__schema${ctx.counter++}`;
@@ -15929,8 +15931,8 @@ function foldIntersection(json2) {
   assignProps(json2, folded);
 }
 function finalize(ctx, schema) {
-  const root = ctx.seen.get(schema);
-  if (!root)
+  const root2 = ctx.seen.get(schema);
+  if (!root2)
     throw new Error("Unprocessed schema. This is a bug in Zod.");
   const flattenRef = (zodSchema) => {
     const seen = ctx.seen.get(zodSchema);
@@ -16041,7 +16043,7 @@ function finalize(ctx, schema) {
       throw new Error("Schema is missing an `id` property");
     result.$id = ctx.external.uri(id2);
   }
-  assignProps(result, root.defId ? root.schema : root.def ?? root.schema);
+  assignProps(result, root2.defId ? root2.schema : root2.def ?? root2.schema);
   const rootMetaId = ctx.metadataRegistry.get(schema)?.id;
   if (rootMetaId !== void 0 && result.id === rootMetaId)
     delete result.id;
@@ -20533,31 +20535,31 @@ function withRole(name2, from) {
 function flat(text) {
   return text.replace(/\s*\n\s*/g, " ").trim();
 }
-function wordsOf(line) {
-  const text = flat(line.text ?? "");
-  const heard = line.transcript === void 0 ? "" : flat(line.transcript);
+function wordsOf(line2) {
+  const text = flat(line2.text ?? "");
+  const heard = line2.transcript === void 0 ? "" : flat(line2.transcript);
   const parts = [text];
   if (heard !== "")
     parts.push(text === "" ? `(voice note) ${heard}` : `(voice note: ${heard})`);
-  if (heard === "" && line.files !== void 0)
-    parts.push(`(sent ${line.files.join(", ")})`);
-  if (line.held === true)
+  if (heard === "" && line2.files !== void 0)
+    parts.push(`(sent ${line2.files.join(", ")})`);
+  if (line2.held === true)
     parts.push("(held by Chips until a person acts)");
   return parts.filter((part) => part !== "").join(" ");
 }
-function renderLine(line) {
-  const name2 = line.from.name;
-  switch (line.kind) {
+function renderLine(line2) {
+  const name2 = line2.from.name;
+  switch (line2.kind) {
     case "said":
-      return `${withRole(name2, line.from)}: ${wordsOf(line)}`;
+      return `${withRole(name2, line2.from)}: ${wordsOf(line2)}`;
     case "joined":
       return `(${name2} joined the space)`;
     case "left":
       return `(${name2} left the space)`;
     case "renamed":
-      if (line.title !== void 0)
-        return `(${name2} renamed the space "${line.title}")`;
-      return `(${line.previous ?? name2} is now called ${line.name ?? name2})`;
+      if (line2.title !== void 0)
+        return `(${name2} renamed the space "${line2.title}")`;
+      return `(${line2.previous ?? name2} is now called ${line2.name ?? name2})`;
     case "archived":
       return `(${name2} archived the space)`;
     default:
@@ -20567,8 +20569,8 @@ function renderLine(line) {
 function renderContext(context) {
   if (context === void 0)
     return "";
-  const said = context.lines.length === 0 ? "" : [CONTEXT_HEADING, ...context.lines.map(renderLine)].join("\n");
-  return [said, renderRoomFiles(context.files)].filter((part) => part !== "").join("\n\n");
+  const said2 = context.lines.length === 0 ? "" : [CONTEXT_HEADING, ...context.lines.map(renderLine)].join("\n");
+  return [said2, renderRoomFiles(context.files)].filter((part) => part !== "").join("\n\n");
 }
 function renderAttachment(file3) {
   const heard = file3.transcript === void 0 ? "" : `, which says: "${file3.transcript}"`;
@@ -20582,17 +20584,17 @@ function renderReplyingTo(replying, reading) {
   const whose = author === reading.taker ? "your message" : author === reading.sender.id ? "their own message" : `${withRole(replying.from.name, replying.from)}'s message`;
   const gone = replying.deleted === true ? ", which has since been deleted" : "";
   const replier = withRole(reading.sender.name, reading.sender);
-  const said = [
+  const said2 = [
     `${replier} is replying to ${whose} from ${saidWhen(replying.at, reading)}${gone}.`
   ];
   if (replying.before !== void 0 && replying.before.length > 0) {
-    said.push(REPLY_BEFORE_HEADING, ...replying.before.map(renderLine));
+    said2.push(REPLY_BEFORE_HEADING, ...replying.before.map(renderLine));
   }
   if (replying.deleted === true)
-    return said.join("\n");
+    return said2.join("\n");
   const edited = replying.edited === true ? " (edited)" : "";
-  said.push(`${whose[0]?.toUpperCase()}${whose.slice(1)}${edited}:`, ...quoteLines(replying));
-  return said.join("\n");
+  said2.push(`${whose[0]?.toUpperCase()}${whose.slice(1)}${edited}:`, ...quoteLines(replying));
+  return said2.join("\n");
 }
 function quoteLines(replying) {
   const text = replying.text ?? "";
@@ -20608,7 +20610,7 @@ function quoteLines(replying) {
       body.push(`(sent ${replying.files.join(", ")})`);
     }
   }
-  return body.map((line) => line === "" ? ">" : `> ${line}`);
+  return body.map((line2) => line2 === "" ? ">" : `> ${line2}`);
 }
 var DAY_MS = 864e5;
 function saidWhen(at, reading) {
@@ -20698,12 +20700,14 @@ var contextAnswer = {
     message: external_exports.string().min(1).max(300).optional().describe("What went wrong, for the person.")
   }).optional().describe("An edit not made. The copy beside it is the file as it is now.")
 };
+var readNote = external_exports.string().min(1).max(300).describe("When the agent reads these, in the harness's words: `Hermes reads these when a conversation starts.` Absent: at the start of every turn.");
 function uniqueNames(files) {
   return new Set(files.map((file3) => file3.name)).size === files.length;
 }
 var agentContextPut = external_exports.object({
   files: external_exports.array(contextFile).max(CONTEXT_FILES_SHOWN).refine(uniqueNames, { message: "Each file is named once." }).describe("The agent's files, in the order its page shows them: eight at most."),
   not_shown: external_exports.array(notShownFile).max(CONTEXT_NOT_SHOWN_MAX).optional(),
+  read_note: readNote.optional(),
   ...contextAnswer
 }).describe("`PUT /v1/agents/:id/context`: a harness's copy of one of its agents' files.");
 var harnessContextPut = external_exports.object({
@@ -20736,6 +20740,7 @@ var agentContextView = external_exports.object({
   harness_id: id("harness"),
   files: external_exports.array(contextFile),
   not_shown: external_exports.array(notShownFile),
+  read_note: readNote.optional(),
   read_at: isoTimestamp.describe("When the harness last sent its copy."),
   away: external_exports.boolean().describe("No socket of the harness hears edits now: read, but not saved.")
 }).describe("`GET /v1/agents/:id/context`, for the harness's owner.");
@@ -22401,6 +22406,89 @@ var EVENT_TYPES = EVENTS.map((event) => event.type);
 var byType = new Map(EVENTS.map((event) => [event.type, event]));
 var schemas = new Map(EVENTS.map((event) => [event.type, eventSchema(event)]));
 
+// node_modules/@chipschat/protocol/dist/src/names.js
+var LOOK_LIKE = {
+  A: "\u0410\u0391",
+  // Cyrillic А, Greek Α
+  B: "\u0412\u0392",
+  // Cyrillic В, Greek Β
+  C: "\u0421",
+  // Cyrillic С
+  E: "\u0415\u0395",
+  // Cyrillic Е, Greek Ε
+  H: "\u041D\u0397",
+  // Cyrillic Н, Greek Η
+  I: "\u0406\u04C0\u0399",
+  // Cyrillic І and Ӏ, Greek Ι
+  J: "\u0408",
+  // Cyrillic Ј
+  K: "\u041A\u039A",
+  // Cyrillic К, Greek Κ
+  M: "\u041C\u039C",
+  // Cyrillic М, Greek Μ
+  N: "\u039D",
+  // Greek Ν
+  O: "\u041E\u039F",
+  // Cyrillic О, Greek Ο
+  P: "\u0420\u03A1",
+  // Cyrillic Р, Greek Ρ
+  Q: "\u051A",
+  // Cyrillic Ԛ
+  S: "\u0405",
+  // Cyrillic Ѕ
+  T: "\u0422\u03A4",
+  // Cyrillic Т, Greek Τ
+  W: "\u051C",
+  // Cyrillic Ԝ
+  X: "\u0425\u03A7",
+  // Cyrillic Х, Greek Χ
+  Y: "\u0423\u04AE\u03A5",
+  // Cyrillic У and Ү, Greek Υ
+  Z: "\u0396",
+  // Greek Ζ
+  a: "\u0430\u03B1",
+  // Cyrillic а, Greek α
+  c: "\u0441",
+  // Cyrillic с
+  d: "\u0501",
+  // Cyrillic ԁ
+  e: "\u0435",
+  // Cyrillic е
+  h: "\u04BB",
+  // Cyrillic һ
+  i: "\u0456\u03B9\u0131",
+  // Cyrillic і, Greek ι, Latin dotless ı
+  j: "\u0458",
+  // Cyrillic ј
+  k: "\u03BA",
+  // Greek κ
+  l: "\u04CF",
+  // Cyrillic ӏ
+  o: "\u043E\u03BF",
+  // Cyrillic о, Greek ο
+  p: "\u0440\u03C1",
+  // Cyrillic р, Greek ρ
+  q: "\u051B",
+  // Cyrillic ԛ
+  s: "\u0455",
+  // Cyrillic ѕ
+  u: "\u03C5",
+  // Greek υ
+  v: "\u03BD",
+  // Greek ν
+  w: "\u051D",
+  // Cyrillic ԝ
+  x: "\u0445\u03C7",
+  // Cyrillic х, Greek χ
+  y: "\u0443\u04AF"
+  // Cyrillic у and ү
+};
+var LATIN_OF = new Map(Object.entries(LOOK_LIKE).flatMap(([latin, others]) => [...others].map((other) => [other, latin])));
+var HIDDEN = "\\p{Cc}\\p{Cf}\\u034f\\u115f\\u1160\\u3164\\uffa0\\u2800";
+var UNSEEN = new RegExp(`[${HIDDEN}\\ufe00-\\ufe0f\\u{e0100}-\\u{e01ef}]`, "gu");
+var HIDDEN_ONE = new RegExp(`[${HIDDEN}]`, "u");
+var ALPHABETS = [new RegExp("\\p{Script=Latin}", "u"), new RegExp("\\p{Script=Cyrillic}", "u"), new RegExp("\\p{Script=Greek}", "u")];
+
 // node_modules/@chipschat/protocol/dist/src/first-names.js
 var AGENT_FIRST_NAMES = [
   "Abel Aldo Amir Amos Anders Ansel Anton Ari Arlo Arne Aron Arvid Asher Avi Axel Aziz",
@@ -22429,7 +22517,7 @@ var AGENT_FIRST_NAMES = [
   "Xander Xavi Xavier",
   "Yann Yaro Yosef Yuri Yusuf Yves",
   "Zaid Zane Zeke Zeno Zev Ziggy"
-].flatMap((line) => line.split(" "));
+].flatMap((line2) => line2.split(" "));
 
 // node_modules/@chipschat/protocol/dist/src/frames.js
 var clientHelloFrame = external_exports.object({
@@ -22758,8 +22846,8 @@ function createOutbox() {
   const waiting = /* @__PURE__ */ new Map();
   return {
     add(key, event) {
-      return new Promise((resolve5, reject) => {
-        waiting.set(key, { event, resolve: resolve5, reject });
+      return new Promise((resolve7, reject) => {
+        waiting.set(key, { event, resolve: resolve7, reject });
       });
     },
     unanswered: () => [...waiting.values()].map((entry) => entry.event),
@@ -22835,7 +22923,7 @@ async function inPieces(call, path, bytes) {
 async function afterLoss(error62, failures) {
   if (error62 instanceof RefusedError || failures >= PIECE_TRIES)
     throw error62;
-  await new Promise((resolve5) => setTimeout(resolve5, 250 * failures));
+  await new Promise((resolve7) => setTimeout(resolve7, 250 * failures));
 }
 function sendPiece(call, path, bytes, offset) {
   const piece = bytes.subarray(offset, Math.min(offset + PIECE_BYTES, bytes.byteLength));
@@ -22861,20 +22949,20 @@ var TRIES = 4;
 var MARKS = /^(<<<<<<<|>>>>>>>) /m;
 var REJECTED = /\[rejected\]|fetch first|non-fast-forward/;
 var OWN_CONFIG = /^(core\.(repositoryformatversion|filemode|bare|logallrefupdates|ignorecase|precomposeunicode|symlinks)|remote\.origin\.(url|fetch)|branch\..+\.(remote|merge)|user\.(name|email))$/;
-var lines = (said) => said.split("\n").filter((line) => line !== "");
+var lines = (said2) => said2.split("\n").filter((line2) => line2 !== "");
 var unique = (names) => [...new Set(names)];
 function subjectOf(words4) {
-  const first = words4.split("\n").find((line) => line.trim() !== "")?.trim() ?? "";
+  const first = words4.split("\n").find((line2) => line2.trim() !== "")?.trim() ?? "";
   if (first === "")
     return "A change to the project";
   return first.length <= 72 ? first : `${first.slice(0, 71)}\u2026`;
 }
 function remoteWords(err) {
-  const said = lines(err).filter((line) => line.startsWith("remote: ")).map((line) => line.slice("remote: ".length).trim()).filter((line) => line !== "" && !/^error: hook declined/.test(line));
-  return said.length > 0 ? said.join(" ") : lines(err)[0] ?? "git said nothing";
+  const said2 = lines(err).filter((line2) => line2.startsWith("remote: ")).map((line2) => line2.slice("remote: ".length).trim()).filter((line2) => line2 !== "" && !/^error: hook declined/.test(line2));
+  return said2.length > 0 ? said2.join(" ") : lines(err)[0] ?? "git said nothing";
 }
-function versionIn(said) {
-  const found = /(\d+)\.(\d+)/.exec(said);
+function versionIn(said2) {
+  const found = /(\d+)\.(\d+)/.exec(said2);
   return found === null ? void 0 : [Number(found[1]), Number(found[2])];
 }
 function pushedInWords(pushed) {
@@ -22919,13 +23007,13 @@ function heldNote(pushed, name2) {
 }
 async function checkGit(git2 = "git", path = process.env["PATH"] ?? "/usr/bin:/bin") {
   const [major, minor] = versionIn(PROJECT_GIT_VERSION) ?? [0, 0];
-  return new Promise((resolve5) => {
+  return new Promise((resolve7) => {
     execFile(git2, ["--version"], { env: { PATH: path } }, (error62, stdout) => {
       if (error62 !== null)
-        return resolve5({ ok: false, why: "git was not found on this machine" });
+        return resolve7({ ok: false, why: "git was not found on this machine" });
       const mine = versionIn(stdout);
       const enough = mine !== void 0 && (mine[0] > major || mine[0] === major && mine[1] >= minor);
-      resolve5(enough ? { ok: true, version: mine.join(".") } : { ok: false, why: `${stdout.trim()} is older than ${PROJECT_GIT_VERSION}` });
+      resolve7(enough ? { ok: true, version: mine.join(".") } : { ok: false, why: `${stdout.trim()} is older than ${PROJECT_GIT_VERSION}` });
     });
   });
 }
@@ -23054,8 +23142,8 @@ var Project = class {
   async standing(remote) {
     const mine = await this.head("HEAD");
     const base = await this.baseOf(mine, remote);
-    const counted = lines((await this.git(["diff", "--numstat", "--no-renames", "-z", base])).out.replace(/\0/g, "\n")).map((line) => {
-      const [added2 = "0", removed = "0", ...path] = line.split("	");
+    const counted = lines((await this.git(["diff", "--numstat", "--no-renames", "-z", base])).out.replace(/\0/g, "\n")).map((line2) => {
+      const [added2 = "0", removed = "0", ...path] = line2.split("	");
       return { path: path.join("	"), added: Number(added2) || 0, removed: Number(removed) || 0 };
     });
     const added = lines((await this.git(["ls-files", "--others", "--exclude-standard", "-z"])).out.replace(/\0/g, "\n"));
@@ -23101,8 +23189,8 @@ var Project = class {
   async markedLines(path) {
     try {
       const all = (await readFile(join(this.copy, path), "utf8")).split("\n");
-      const start = all.findIndex((line) => line.startsWith("<<<<<<< "));
-      const end2 = all.findIndex((line, at) => at > start && line.startsWith(">>>>>>> "));
+      const start = all.findIndex((line2) => line2.startsWith("<<<<<<< "));
+      const end2 = all.findIndex((line2, at) => at > start && line2.startsWith(">>>>>>> "));
       if (start < 0 || end2 < 0)
         return void 0;
       const shown2 = all.slice(Math.max(0, start - 1), end2 + 2);
@@ -23141,10 +23229,10 @@ var Project = class {
       const files = lines((await this.git(["diff", "--name-only", from, commit])).out);
       return { state: "sent", commit, files, over: earlier };
     }
-    const said = `${sent.out}
+    const said2 = `${sent.out}
 ${sent.err}`;
-    if (!REJECTED.test(said))
-      return { state: "refused", why: remoteWords(said) };
+    if (!REJECTED.test(said2))
+      return { state: "refused", why: remoteWords(said2) };
     await this.fetch();
     const theirs = await this.head("refs/remotes/origin/main");
     const over = unique([...earlier, ...await this.authors(`HEAD..${theirs}`)]);
@@ -23371,8 +23459,8 @@ ${sent.err}`;
       env[`GIT_CONFIG_KEY_${at}`] = key;
       env[`GIT_CONFIG_VALUE_${at}`] = value;
     });
-    return new Promise((resolve5) => {
-      execFile(options.git ?? "git", [...args], { cwd: this.copy, env, maxBuffer: 64 * 1024 * 1024 }, (error62, stdout, stderr) => resolve5({ ok: error62 === null, out: stdout, err: stderr }));
+    return new Promise((resolve7) => {
+      execFile(options.git ?? "git", [...args], { cwd: this.copy, env, maxBuffer: 64 * 1024 * 1024 }, (error62, stdout, stderr) => resolve7({ ok: error62 === null, out: stdout, err: stderr }));
     });
   }
 };
@@ -23395,8 +23483,8 @@ var Lane = class {
   constructor(id2, wire) {
     this.id = id2;
     this.wire = wire;
-    this.result = new Promise((resolve5) => {
-      this.settle = resolve5;
+    this.result = new Promise((resolve7) => {
+      this.settle = resolve7;
     });
     this.stop = wire.hear(id2, (event) => this.onUpdated(event));
   }
@@ -23539,7 +23627,7 @@ var Run = class {
   /** Resolve once the run is not paused. A stopped run resolves too: check `over` after. */
   async whenRunning() {
     while (this.held && !this.ended) {
-      await new Promise((resolve5) => setTimeout(resolve5, 50));
+      await new Promise((resolve7) => setTimeout(resolve7, 50));
     }
   }
   status(input2) {
@@ -24323,8 +24411,8 @@ var Chips = class _Chips {
   }
   /** Resolve with the first event that matches, now or later. */
   waitFor(match) {
-    return new Promise((resolve5) => {
-      this.waiters.add({ match, resolve: resolve5 });
+    return new Promise((resolve7) => {
+      this.waiters.add({ match, resolve: resolve7 });
     });
   }
   close() {
@@ -24351,7 +24439,7 @@ var Chips = class _Chips {
     return `${base}/v1/ws?ticket=${encodeURIComponent(String(ticket))}`;
   }
   open(first) {
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve7, reject) => {
       this.setState("connecting");
       const failed = (what, error62) => {
         if (first)
@@ -24369,13 +24457,13 @@ var Chips = class _Chips {
         }
         this.socket = socket;
         this.listen(socket, {
-          settled: (hello2) => this.settled(socket, hello2, first, resolve5, reject)
+          settled: (hello2) => this.settled(socket, hello2, first, resolve7, reject)
         });
       }, (error62) => failed("could not get a socket ticket", error62));
     });
   }
   /** The handshake's outcome: the hello, a refusal, or the socket gone before either. */
-  settled(socket, hello2, first, resolve5, reject) {
+  settled(socket, hello2, first, resolve7, reject) {
     if (hello2 === void 0) {
       if (first)
         reject(new ConnectError("the server closed the socket before saying hello"));
@@ -24389,7 +24477,7 @@ var Chips = class _Chips {
       return;
     }
     this.onHello(socket, hello2);
-    void this.subscribed(socket).then(resolve5);
+    void this.subscribed(socket).then(resolve7);
   }
   /** The socket's four events. `settled` fires once: with the hello, a refusal, or nothing. */
   listen(socket, on) {
@@ -24484,15 +24572,15 @@ var Chips = class _Chips {
   subscribed(socket) {
     this.pings += 1;
     const ts = Date.now() + this.pings;
-    return new Promise((resolve5) => {
+    return new Promise((resolve7) => {
       const timer = setTimeout(() => {
         this.pongs.delete(ts);
-        resolve5();
+        resolve7();
       }, 2e3);
       this.pongs.set(ts, () => {
         clearTimeout(timer);
         this.pongs.delete(ts);
-        resolve5();
+        resolve7();
       });
       socket.send(JSON.stringify({ frame: "ping", ts }));
     });
@@ -24875,7 +24963,7 @@ function openKeyStore(env, platform = process.platform) {
 // node_modules/@chipschat/harness/dist/steps.js
 import { writeSync } from "node:fs";
 var STEP_MARK = "chips-step ";
-function reportStep(step, detail = {}, env = process.env, write = (line) => void writeSync(1, line)) {
+function reportStep(step, detail = {}, env = process.env, write = (line2) => void writeSync(1, line2)) {
   if (env["CHIPS_STEPS"] !== "json")
     return;
   try {
@@ -24896,8 +24984,8 @@ var JoinError = class extends Error {
 };
 function serverJsonUrl(env) {
   try {
-    const said = JSON.parse(readFileSync2(joinPath(configHome(env), "server.json"), "utf8"));
-    return typeof said.url === "string" && said.url !== "" ? said.url : void 0;
+    const said2 = JSON.parse(readFileSync2(joinPath(configHome(env), "server.json"), "utf8"));
+    return typeof said2.url === "string" && said2.url !== "" ? said2.url : void 0;
   } catch {
     return void 0;
   }
@@ -24956,8 +25044,8 @@ async function refused(response) {
   const body = await response.json().catch(() => ({}));
   return new JoinError(body.error?.refusal ?? body.error?.code ?? `http_${response.status}`, body.error?.message ?? `Chips answered ${response.status}.`);
 }
-var wait = (ms, signal) => new Promise((resolve5, reject) => {
-  const timer = setTimeout(resolve5, ms);
+var wait = (ms, signal) => new Promise((resolve7, reject) => {
+  const timer = setTimeout(resolve7, ms);
   signal?.addEventListener("abort", () => {
     clearTimeout(timer);
     reject(new JoinError("stopped", "Stopped before a person decided."));
@@ -25081,8 +25169,8 @@ var MOST_FILES = 20;
 var MOST_FILE_BYTES = 100 * 1024 * 1024;
 function filesNamedIn(answer) {
   const named = [];
-  const kept = answer.split("\n").filter((line) => {
-    const media = /^\s*MEDIA:\s*(\S.*?)\s*$/.exec(line);
+  const kept = answer.split("\n").filter((line2) => {
+    const media = /^\s*MEDIA:\s*(\S.*?)\s*$/.exec(line2);
     if (media?.[1] === void 0)
       return true;
     if (!named.includes(media[1]))
@@ -25097,21 +25185,21 @@ function filesNamedIn(answer) {
 function inside(path, folder2) {
   return path === folder2 || path.startsWith(folder2.endsWith(sep) ? folder2 : folder2 + sep);
 }
-function pathOf(said) {
-  if (/^https?:\/\//i.test(said))
-    return { kind: "link", url: said };
-  if (/^file:/i.test(said)) {
+function pathOf(said2) {
+  if (/^https?:\/\//i.test(said2))
+    return { kind: "link", url: said2 };
+  if (/^file:/i.test(said2)) {
     try {
-      return fileURLToPath(said);
+      return fileURLToPath(said2);
     } catch {
-      return { kind: "refused", name: said, why: "its address is not a file's" };
+      return { kind: "refused", name: said2, why: "its address is not a file's" };
     }
   }
-  return said === "~" || said.startsWith("~/") ? homedir2() + said.slice(1) : said;
+  return said2 === "~" || said2.startsWith("~/") ? homedir2() + said2.slice(1) : said2;
 }
 async function refusalOf2(real, folders) {
   const roots = await Promise.all(folders.map((folder2) => realpath(folder2).catch(() => void 0)));
-  if (!roots.some((root) => root !== void 0 && inside(real, root))) {
+  if (!roots.some((root2) => root2 !== void 0 && inside(real, root2))) {
     return "it is outside the agent's folder";
   }
   const info = await stat2(real);
@@ -25124,11 +25212,11 @@ async function refusalOf2(real, folders) {
   return void 0;
 }
 async function readSendable(reference, folders) {
-  const said = reference.trim().replace(/^<(.*)>$/, "$1");
-  const path = pathOf(said);
+  const said2 = reference.trim().replace(/^<(.*)>$/, "$1");
+  const path = pathOf(said2);
   if (typeof path !== "string")
     return path;
-  const name2 = basename2(path) || said;
+  const name2 = basename2(path) || said2;
   const first = folders[0];
   if (first === void 0) {
     return { kind: "refused", name: name2, why: "this agent has no folder its files are sent from" };
@@ -25466,8 +25554,812 @@ function fileStore(path) {
 }
 
 // src/bridge.ts
-import { mkdirSync as mkdirSync4 } from "node:fs";
-import { join as join5 } from "node:path";
+import { mkdirSync as mkdirSync5 } from "node:fs";
+import { join as join8 } from "node:path";
+
+// src/context.ts
+import { spawn } from "node:child_process";
+import { createHash as createHash2, randomBytes } from "node:crypto";
+import {
+  closeSync,
+  existsSync as existsSync6,
+  fsyncSync,
+  lstatSync,
+  mkdirSync as mkdirSync4,
+  openSync,
+  readFileSync as readFileSync6,
+  realpathSync,
+  renameSync as renameSync2,
+  rmSync as rmSync3,
+  statSync as statSync2,
+  writeSync as writeSync2
+} from "node:fs";
+import { basename as basename3, dirname as dirname4, join as join6 } from "node:path";
+
+// src/home.ts
+import { execFileSync as execFileSync3 } from "node:child_process";
+import { existsSync as existsSync5, readFileSync as readFileSync5, readlinkSync, statSync } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { join as join5, resolve as resolve2 } from "node:path";
+function hermesRoot(env = process.env) {
+  return resolve2(env["HERMES_HOME"] || join5(homedir4(), ".hermes"));
+}
+function profileHome(root2, profile) {
+  const name2 = (profile ?? "default").trim().toLowerCase();
+  return name2 === "" || name2 === "default" ? root2 : join5(root2, "profiles", name2);
+}
+function profileName(profile) {
+  const name2 = (profile ?? "default").trim().toLowerCase();
+  return name2 === "" ? "default" : name2;
+}
+function envValue(home2, name2) {
+  const path = join5(home2, ".env");
+  if (!existsSync5(path)) return void 0;
+  let found;
+  for (const line2 of readFileSync5(path, "utf8").split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line2);
+    if (match?.[1] !== name2) continue;
+    const raw = match[2] ?? "";
+    const quoted2 = /^(["'])(.*)\1/.exec(raw);
+    found = quoted2 !== null ? quoted2[2] ?? "" : raw.replace(/\s+#.*$/, "");
+  }
+  return found;
+}
+function configText(home2) {
+  const path = join5(home2, "config.yaml");
+  try {
+    return existsSync5(path) ? readFileSync5(path, "utf8") : "";
+  } catch {
+    return "";
+  }
+}
+function uncommented(line2) {
+  const indent = line2.length - line2.trimStart().length;
+  let quote;
+  for (let at = indent; at < line2.length; at += 1) {
+    const char = line2[at];
+    if (quote !== void 0) {
+      if (char === quote) quote = void 0;
+    } else if (char === '"' || char === "'") {
+      quote = char;
+    } else if (char === "#" && (at === indent || /\s/.test(line2[at - 1] ?? ""))) {
+      return { indent, text: line2.slice(indent, at).trimEnd() };
+    }
+  }
+  return { indent, text: line2.slice(indent).trimEnd() };
+}
+function scalar(text) {
+  const trimmed = text.trim();
+  const quoted2 = /^(["'])(.*)\1$/.exec(trimmed);
+  return quoted2 !== null ? quoted2[2] ?? "" : trimmed;
+}
+function flowPairs(text) {
+  const inner = /^\{(.*)\}$/.exec(text.trim())?.[1];
+  if (inner === void 0) return void 0;
+  const pairs = /* @__PURE__ */ new Map();
+  for (const part of inner.split(",")) {
+    if (part.trim() === "") continue;
+    const at = part.indexOf(":");
+    if (at === -1) return void 0;
+    pairs.set(part.slice(0, at).trim(), scalar(part.slice(at + 1)));
+  }
+  return pairs;
+}
+function yamlValue(text, section, key) {
+  const lines2 = text.split("\n");
+  for (let at = 0; at < lines2.length; at += 1) {
+    const { indent, text: line2 } = uncommented(lines2[at] ?? "");
+    if (indent !== 0 || !line2.startsWith(`${section}:`)) continue;
+    const rest = line2.slice(section.length + 1).trim();
+    if (rest !== "") return flowPairs(rest)?.get(key);
+    let child;
+    for (let below = at + 1; below < lines2.length; below += 1) {
+      const next = uncommented(lines2[below] ?? "");
+      if (next.text === "") continue;
+      if (next.indent === 0) return void 0;
+      child ??= next.indent;
+      if (next.indent !== child) continue;
+      const match = /^([A-Za-z0-9_.-]+):(.*)$/.exec(next.text);
+      if (match?.[1] === key) return scalar(match[2] ?? "");
+    }
+    return void 0;
+  }
+  return void 0;
+}
+function yamlBool(value) {
+  if (value === void 0) return void 0;
+  const word = value.toLowerCase();
+  if (["true", "yes", "on", "y"].includes(word)) return true;
+  if (["false", "no", "off", "n"].includes(word)) return false;
+  return void 0;
+}
+function yamlNumber(value) {
+  if (value === void 0 || value === "" || value === "null" || value === "~") return void 0;
+  const number4 = Number(value.replace(/_/g, ""));
+  return Number.isFinite(number4) ? number4 : void 0;
+}
+function expanded(path) {
+  return resolve2(path === "~" || path.startsWith("~/") ? homedir4() + path.slice(1) : path);
+}
+function isFolder(path) {
+  try {
+    return statSync(path).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function workFolder(home2, env = process.env) {
+  const configured = yamlValue(configText(home2), "terminal", "cwd");
+  if (configured !== void 0 && configured !== "" && configured !== ".") {
+    const folder2 = expanded(configured);
+    if (isFolder(folder2)) return folder2;
+  }
+  for (const name2 of ["TERMINAL_CWD", "MESSAGING_CWD"]) {
+    const said2 = envValue(home2, name2) ?? env[name2];
+    if (said2 !== void 0 && said2 !== "" && isFolder(expanded(said2))) return expanded(said2);
+  }
+  return gatewayFolder(home2);
+}
+var gateways = /* @__PURE__ */ new Map();
+function gatewayFolder(home2) {
+  let raw;
+  try {
+    raw = readFileSync5(join5(home2, "gateway.pid"), "utf8").trim();
+  } catch {
+    return void 0;
+  }
+  const known = gateways.get(home2);
+  if (known?.pidFile === raw) return known.folder;
+  const folder2 = folderOfPid(raw);
+  gateways.set(home2, { pidFile: raw, folder: folder2 });
+  return folder2;
+}
+function folderOfPid(raw) {
+  let pid;
+  try {
+    const said2 = raw.startsWith("{") ? JSON.parse(raw).pid : Number(raw);
+    pid = typeof said2 === "number" && Number.isInteger(said2) && said2 > 0 ? said2 : void 0;
+  } catch {
+    return void 0;
+  }
+  return pid === void 0 ? void 0 : processFolder(pid);
+}
+function processFolder(pid) {
+  try {
+    if (process.platform === "linux") return readlinkSync(`/proc/${pid}/cwd`);
+    const out = execFileSync3("lsof", ["-a", "-p", String(pid), "-d", "cwd", "-Fn"], {
+      encoding: "utf8",
+      timeout: 3e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    const line2 = out.split("\n").find((each) => each.startsWith("n"));
+    return line2 === void 0 ? void 0 : line2.slice(1);
+  } catch {
+    return void 0;
+  }
+}
+
+// src/context.ts
+var FILES_SHOWN = 8;
+var FILE_BYTES = 65536;
+var READ_NOTE = "Hermes reads these when a conversation starts. A space already talking picks up a change after it next compacts.";
+var ENTRY_DELIMITER = "\n\xA7\n";
+var MEMORY_LIMIT = 2200;
+var USER_LIMIT = 1375;
+var PROJECT_FILES = [
+  ".hermes.md",
+  "HERMES.md",
+  "AGENTS.override.md",
+  "AGENTS.md",
+  "agents.md",
+  "CLAUDE.md",
+  "claude.md",
+  ".cursorrules"
+];
+var ROWS = {
+  soul: { title: "Who it is", role: "identity" },
+  project: { title: "Project instructions", role: "instructions" },
+  user: { title: "About you", role: "about_you" },
+  memory: { title: "Memory", role: "memory" }
+};
+var ORDER = ["soul", "project", "user", "memory"];
+function readText(path) {
+  try {
+    return readFileSync6(path, "utf8").replace(/^/, "");
+  } catch {
+    return "";
+  }
+}
+function hashOf(text) {
+  return createHash2("sha256").update(text, "utf8").digest("hex");
+}
+function length(text) {
+  let count = 0;
+  for (const _ of text) count += 1;
+  return count;
+}
+var said = (count) => count.toLocaleString("en-US");
+function entriesOf(text) {
+  return [...new Set(text.split(ENTRY_DELIMITER).map((each) => each.trim()).filter((each) => each !== ""))];
+}
+function memoryProblem(text, limit, what) {
+  const total = length(entriesOf(text).join(ENTRY_DELIMITER));
+  if (total > limit) {
+    return `That is ${said(total)} characters, and Hermes keeps ${what} to ${said(limit)}. Take out ${said(total - limit)}.`;
+  }
+  return void 0;
+}
+function memorySettings(home2) {
+  const text = configText(home2);
+  const value = (key) => yamlValue(text, "memory", key);
+  return {
+    ...yamlBool(value("memory_enabled")) === false ? {} : { memory: yamlNumber(value("memory_char_limit")) ?? MEMORY_LIMIT },
+    ...yamlBool(value("user_profile_enabled")) === false ? {} : { user: yamlNumber(value("user_char_limit")) ?? USER_LIMIT }
+  };
+}
+function sourcesOf(profile, env = process.env) {
+  const { name: name2, home: home2 } = profile;
+  const found = [];
+  const soul = join6(home2, "SOUL.md");
+  if (existsSync6(soul)) found.push({ path: soul, kind: "soul", file: "SOUL.md", profile: name2 });
+  const folder2 = workFolder(home2, env);
+  const project = folder2 === void 0 ? void 0 : PROJECT_FILES.find((file3) => readText(join6(folder2, file3)).trim() !== "");
+  if (folder2 !== void 0 && project !== void 0) {
+    found.push({ path: join6(folder2, project), kind: "project", file: project, profile: name2 });
+  }
+  const memory = memorySettings(home2);
+  if (memory.user !== void 0) {
+    found.push({ path: join6(home2, "memories", "USER.md"), kind: "user", file: "USER.md", profile: name2, limit: memory.user });
+  }
+  if (memory.memory !== void 0) {
+    found.push({ path: join6(home2, "memories", "MEMORY.md"), kind: "memory", file: "MEMORY.md", profile: name2, limit: memory.memory });
+  }
+  return found;
+}
+function aboutOf(source2) {
+  if (source2.limit === void 0) return void 0;
+  const what = source2.kind === "user" ? "What it knows of you" : "Its notes";
+  return `${what}, up to ${said(source2.limit)} characters. A line with only \xA7 starts the next entry.`;
+}
+function fileOf(source2, name2) {
+  const text = readText(source2.path);
+  const about = aboutOf(source2);
+  return {
+    tooLarge: Buffer.byteLength(text, "utf8") > FILE_BYTES,
+    file: {
+      name: name2,
+      title: ROWS[source2.kind].title,
+      role: ROWS[source2.kind].role,
+      ...about === void 0 ? {} : { about },
+      text,
+      hash: hashOf(text),
+      editable: true
+    }
+  };
+}
+var byOrder = (a, b) => ORDER.indexOf(a.kind) - ORDER.indexOf(b.kind) || a.profile.localeCompare(b.profile);
+var Picture = class {
+  /** Each file by its path, and the agents that read it. */
+  readers = /* @__PURE__ */ new Map();
+  /** The shared files, each with its id and the name the set shows. */
+  shared = /* @__PURE__ */ new Map();
+  /** The agents and the files each reads, in page order. */
+  agents = /* @__PURE__ */ new Map();
+  constructor(readers, first, env = process.env) {
+    const byProfile = /* @__PURE__ */ new Map();
+    const sourcesFor = (profile) => {
+      let sources = byProfile.get(profile.home);
+      if (sources === void 0) {
+        sources = sourcesOf(profile, env);
+        byProfile.set(profile.home, sources);
+      }
+      return sources;
+    };
+    if (first !== void 0) for (const source2 of sourcesFor(first)) this.readers.set(source2.path, { source: source2, agents: [] });
+    for (const reader of readers) {
+      const sources = sourcesFor(reader.profile);
+      this.agents.set(reader.agentId, [...sources].sort(byOrder));
+      for (const source2 of sources) {
+        const entry = this.readers.get(source2.path) ?? { source: source2, agents: [] };
+        if (!entry.agents.includes(reader.agentId)) entry.agents.push(reader.agentId);
+        this.readers.set(source2.path, entry);
+      }
+    }
+    const taken = /* @__PURE__ */ new Set();
+    const ids2 = /* @__PURE__ */ new Set();
+    const sharing = [...this.readers.values()].filter(({ source: source2, agents }) => source2.kind === "project" || source2.profile === first?.name || agents.length > 1).sort((a, b) => (a.source.profile === first?.name ? 0 : 1) - (b.source.profile === first?.name ? 0 : 1) || byOrder(a.source, b.source));
+    for (const { source: source2 } of sharing) {
+      const name2 = taken.has(source2.file) ? `${source2.file} (${source2.profile})` : source2.file;
+      taken.add(name2);
+      let id2 = `${source2.profile}-${source2.kind}`.slice(0, 60);
+      for (let count = 2; ids2.has(id2); count += 1) id2 = `${source2.profile}-${source2.kind}-${count}`.slice(0, 64);
+      ids2.add(id2);
+      this.shared.set(source2.path, { id: id2, name: name2 });
+    }
+  }
+  /** The harness's own set, as `PUT /v1/harnesses/:id/context` takes it. */
+  harnessCopy(first) {
+    const shown2 = [];
+    const notShown = [];
+    for (const [path, { id: id2, name: name2 }] of this.shared) {
+      const entry = this.readers.get(path);
+      if (entry === void 0) continue;
+      const { source: source2, agents } = entry;
+      const { file: file3, tooLarge } = fileOf(source2, name2);
+      if (tooLarge || shown2.length >= FILES_SHOWN) {
+        notShown.push({ name: name2, title: ROWS[source2.kind].title, reason: tooLarge ? "too_large" : "count" });
+        continue;
+      }
+      shown2.push({
+        ...file3,
+        id: id2,
+        used_by: agents.length,
+        // A new agent runs on the first profile: it reads that profile's files and its project file.
+        ...source2.profile === first?.name ? { for_new_agents: true } : {}
+      });
+    }
+    return {
+      shared: shown2,
+      ...notShown.length === 0 ? {} : { not_shown: notShown }
+    };
+  }
+  /** One agent's files, as `PUT /v1/agents/:id/context` takes them: its own, and the shared it reads. */
+  agentCopy(agentId2) {
+    const sources = this.agents.get(agentId2);
+    if (sources === void 0) return void 0;
+    const files = [];
+    const notShown = [];
+    for (const source2 of sources) {
+      const shared = this.shared.get(source2.path);
+      if (files.length >= FILES_SHOWN) {
+        notShown.push({ name: shared?.name ?? source2.file, title: ROWS[source2.kind].title, reason: "count" });
+        continue;
+      }
+      if (shared !== void 0) {
+        files.push({
+          name: shared.name,
+          title: ROWS[source2.kind].title,
+          role: ROWS[source2.kind].role,
+          editable: true,
+          shared: shared.id,
+          replaceable: false
+        });
+        continue;
+      }
+      const { file: file3, tooLarge } = fileOf(source2, source2.file);
+      if (tooLarge) notShown.push({ name: source2.file, title: ROWS[source2.kind].title, reason: "too_large" });
+      else files.push(file3);
+    }
+    return {
+      files,
+      ...notShown.length === 0 ? {} : { not_shown: notShown },
+      read_note: READ_NOTE
+    };
+  }
+  /** The file an edit names: an agent's own, or one of the harness's set; with whether it is shared. */
+  find(agentId2, name2) {
+    if (agentId2 === void 0) {
+      for (const [path, { name: shown2 }] of this.shared) {
+        const source2 = this.readers.get(path)?.source;
+        if (shown2 === name2 && source2 !== void 0) return { source: source2, shared: true };
+      }
+      return void 0;
+    }
+    for (const source2 of this.agents.get(agentId2) ?? []) {
+      const shared = this.shared.get(source2.path);
+      if ((shared?.name ?? source2.file) === name2) return { source: source2, shared: shared !== void 0 };
+    }
+    return void 0;
+  }
+};
+var LOCK_WAIT_MS = 1e4;
+var LOCKER = [
+  "use Fcntl qw(:flock O_RDWR O_CREAT O_NOFOLLOW);",
+  'sysopen(my $fh, $ARGV[0], O_RDWR|O_CREAT|O_NOFOLLOW, 0600) or die "open: $!\\n";',
+  "chmod 0600, $fh;",
+  'flock($fh, LOCK_EX) or die "flock: $!\\n";',
+  '$| = 1; print "locked\\n";',
+  "while (<STDIN>) {}",
+  "flock($fh, LOCK_UN);"
+].join(" ");
+async function withLock(lockPath, work, waitMs = LOCK_WAIT_MS) {
+  const child = spawn("perl", ["-e", LOCKER, lockPath], { stdio: ["pipe", "pipe", "pipe"] });
+  const exited = new Promise((done) => {
+    child.on("close", () => done());
+    child.on("error", () => done());
+  });
+  try {
+    await new Promise((locked, failed) => {
+      const timer = setTimeout(() => failed(new Error("Hermes is writing its memory right now. Try again in a moment.")), waitMs);
+      let out = "";
+      child.stdout.on("data", (chunk) => {
+        out += chunk.toString("utf8");
+        if (out.includes("locked\n")) {
+          clearTimeout(timer);
+          locked();
+        }
+      });
+      child.on("error", () => {
+        clearTimeout(timer);
+        failed(new Error("The bridge couldn't lock Hermes's memory file, so it saved nothing: this machine has no perl."));
+      });
+      child.on("close", () => {
+        clearTimeout(timer);
+        failed(new Error("The bridge couldn't lock Hermes's memory file, so it saved nothing."));
+      });
+    });
+    return await work();
+  } finally {
+    child.stdin.end();
+    if (child.exitCode === null) {
+      const killer = setTimeout(() => child.kill(), 2e3);
+      await exited;
+      clearTimeout(killer);
+    }
+  }
+}
+function writeWhole(path, text) {
+  const target = existsSync6(path) && lstatSync(path).isSymbolicLink() ? realpathSync(path) : path;
+  const mode = existsSync6(target) ? statSync2(target).mode & 511 : 384;
+  const temp = join6(dirname4(target), `.chips_${basename3(target)}.${randomBytes(4).toString("hex")}`);
+  const fd = openSync(temp, "w", mode);
+  try {
+    writeSync2(fd, text, null, "utf8");
+    fsyncSync(fd);
+  } catch (error62) {
+    closeSync(fd);
+    rmSync3(temp, { force: true });
+    throw error62;
+  }
+  closeSync(fd);
+  try {
+    renameSync2(temp, target);
+  } catch (error62) {
+    rmSync3(temp, { force: true });
+    throw error62;
+  }
+}
+async function saveEdit(source2, edit) {
+  const memory = source2.limit !== void 0;
+  if (memory) {
+    const problem = memoryProblem(edit.text, source2.limit ?? MEMORY_LIMIT, source2.kind === "user" ? "what it knows of you" : "its memory");
+    if (problem !== void 0) throw new Refuse(problem, void 0, "failed");
+  }
+  const save = () => {
+    const now = readText(source2.path);
+    if (edit.base_hash !== null && hashOf(now) !== edit.base_hash) {
+      throw new Refuse("", void 0, "changed");
+    }
+    writeWhole(source2.path, memory ? entriesOf(edit.text).join(ENTRY_DELIMITER) : edit.text);
+  };
+  if (!memory) {
+    save();
+    return;
+  }
+  const folder2 = dirname4(source2.path);
+  if (!existsSync6(dirname4(folder2))) throw new Refuse(`Hermes has no profile at ${dirname4(folder2)}.`, void 0, "failed");
+  mkdirSync4(folder2, { recursive: true, mode: 448 });
+  await withLock(`${source2.path}.lock`, save);
+}
+var Contexts = class {
+  constructor(roster, port, log2, env = process.env) {
+    this.roster = roster;
+    this.port = port;
+    this.log = log2;
+    this.env = env;
+  }
+  roster;
+  port;
+  log;
+  env;
+  chain = Promise.resolve();
+  /** Every copy read again, and sent where it moved. */
+  refresh() {
+    return this.inLine(async () => {
+      const { readers, first } = this.roster();
+      const picture = new Picture(readers, first, this.env);
+      await this.port.harness(picture.harnessCopy(first)).catch((error62) => {
+        this.log(`the harness's context not sent: ${messageOf(error62)}`);
+      });
+      for (const { agentId: agentId2 } of readers) {
+        const copy = picture.agentCopy(agentId2);
+        if (copy === void 0) continue;
+        await this.port.agent(agentId2, copy).catch((error62) => {
+          this.log(`${agentId2}'s context not sent: ${messageOf(error62)}`);
+        });
+      }
+    }).catch((error62) => this.log(`the context wasn't read: ${messageOf(error62)}`));
+  }
+  /**
+   * A person's edit from Chips: saved, and answered with the copy it is in now; or refused, the
+   * copy as it is now beside the reason. The other copies the file is in follow.
+   */
+  async edit(frame) {
+    const answer = await this.inLine(async () => {
+      const { readers, first } = this.roster();
+      const copyNow = () => {
+        const picture = new Picture(readers, first, this.env);
+        return frame.agent_id === void 0 ? picture.harnessCopy(first) : picture.agentCopy(frame.agent_id);
+      };
+      const found = new Picture(readers, first, this.env).find(frame.agent_id, frame.name);
+      if (found === void 0) {
+        throw new Refuse(`Hermes gives this agent no file called ${frame.name}.`, copyNow(), "failed");
+      }
+      const { source: source2, shared } = found;
+      if (frame.base_hash === null) {
+        const why = source2.kind === "project" ? "Every agent on Hermes's gateway reads the same project file, so one can't have its own." : `Every agent on Hermes's ${source2.profile} profile reads the same ${source2.file}, so one can't have its own.`;
+        throw new Refuse(why, copyNow(), "failed");
+      }
+      try {
+        await saveEdit(source2, frame);
+      } catch (error62) {
+        const reason = error62 instanceof Refuse ? error62.reason : "failed";
+        this.log(`${source2.path} not saved from Chips: ${reason === "changed" ? "it changed since" : messageOf(error62)}`);
+        throw new Refuse(error62 instanceof Refuse ? error62.message : messageOf(error62), copyNow(), reason);
+      }
+      this.log(`${source2.path} saved from Chips${shared ? ", for every agent that reads it" : ""}`);
+      const copy = copyNow();
+      if (copy === void 0) throw new Refuse("Saved, but the agent is gone.", void 0, "failed");
+      return copy;
+    });
+    void this.refresh();
+    return answer;
+  }
+  inLine(work) {
+    const done = this.chain.catch(() => void 0).then(work);
+    this.chain = done.catch(() => void 0);
+    return done;
+  }
+};
+function messageOf(error62) {
+  return error62 instanceof Error ? error62.message : String(error62);
+}
+
+// src/fills.ts
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+var HOOK_PATH = "/chips-hermes/";
+var MAX_BODY = 4 * 1024 * 1024;
+var DROP = 0.7;
+var SEND_EVERY_MS = 2e3;
+var THRESHOLD = 0.5;
+var SMALL_WINDOW = 512e3;
+var SMALL_THRESHOLD = 0.75;
+var WHY_NOT = "Hermes can't be asked to compact from Chips.";
+var whyReadOnly = (profile) => `Hermes sets this for every agent on its ${profile} profile.`;
+var num = (value) => typeof value === "number" && Number.isFinite(value) ? value : void 0;
+function limitOf(home2, window) {
+  const text = configText(home2);
+  const enabled = yamlBool(yamlValue(text, "compression", "enabled")) ?? true;
+  const threshold = yamlNumber(yamlValue(text, "compression", "threshold")) ?? THRESHOLD;
+  let ratio = window < SMALL_WINDOW ? Math.max(threshold, SMALL_THRESHOLD) : threshold;
+  const tokens2 = yamlNumber(yamlValue(text, "compression", "threshold_tokens"));
+  if (tokens2 !== void 0 && tokens2 > 0 && window > 0) ratio = Math.min(ratio, tokens2 / window);
+  const at = Math.min(99, Math.max(1, Math.round(ratio * 100)));
+  return enabled ? { at, choices: [at], default: at, may_turn_off: false } : { at: null, choices: [at], default: null, may_turn_off: true };
+}
+function signedBy(body, header, secret) {
+  if (header === void 0 || !header.startsWith("sha256=")) return false;
+  const given = Buffer.from(header.slice("sha256=".length), "hex");
+  const made = createHmac("sha256", secret).update(body).digest();
+  return given.length === made.length && timingSafeEqual(given, made);
+}
+function numbersOf(profile, body) {
+  if (typeof body !== "object" || body === null) return void 0;
+  const top = body;
+  if (top["hook_event_name"] !== "post_api_request") return void 0;
+  const extra = typeof top["extra"] === "object" && top["extra"] !== null ? top["extra"] : {};
+  const named = typeof top["session_id"] === "string" ? top["session_id"] : "";
+  const task2 = typeof extra["task_id"] === "string" && extra["task_id"] !== "" ? extra["task_id"] : void 0;
+  const session = task2 ?? named;
+  if (session === "") return void 0;
+  const usage2 = typeof extra["usage"] === "object" && extra["usage"] !== null ? extra["usage"] : {};
+  const prompt = num(usage2["prompt_tokens"]) ?? (num(usage2["input_tokens"]) === void 0 ? void 0 : (num(usage2["input_tokens"]) ?? 0) + (num(usage2["cache_read_tokens"]) ?? 0) + (num(usage2["cache_write_tokens"]) ?? 0));
+  const window = num(extra["context_length"]);
+  if (prompt === void 0 || prompt <= 0 || window === void 0 || window <= 0) return void 0;
+  const ended = num(extra["ended_at"]);
+  const stamped = typeof top["timestamp"] === "string" && !Number.isNaN(Date.parse(top["timestamp"])) ? top["timestamp"] : void 0;
+  const at = ended !== void 0 ? new Date(ended * 1e3).toISOString() : stamped ?? (/* @__PURE__ */ new Date()).toISOString();
+  const model = typeof extra["model"] === "string" && extra["model"] !== "" ? extra["model"].slice(0, 120) : void 0;
+  const turn = typeof extra["turn_id"] === "string" && extra["turn_id"] !== "" ? extra["turn_id"] : void 0;
+  return {
+    profile,
+    session,
+    turn,
+    first: num(extra["api_call_count"]) === 1,
+    used: Math.round(prompt),
+    window: Math.round(window),
+    model,
+    at: new Date(at).toISOString()
+  };
+}
+var Fills = class {
+  constructor(options) {
+    this.options = options;
+    const kept = options.kept;
+    kept.readings ??= {};
+    kept.lasts ??= {};
+    kept.longTurns ??= {};
+    for (const reading of Object.values(kept.readings)) this.lastOf.set(reading.session, reading);
+  }
+  options;
+  server;
+  /** The last reading of each session, for a compaction's drop. */
+  lastOf = /* @__PURE__ */ new Map();
+  turns = /* @__PURE__ */ new Map();
+  timers = /* @__PURE__ */ new Map();
+  sentAt = /* @__PURE__ */ new Map();
+  /** The profiles whose unsigned or wrongly signed deliveries have been said once. */
+  badSaid = /* @__PURE__ */ new Set();
+  heard = false;
+  /** Whether any reading has come since the bridge started. */
+  get anyHeard() {
+    return this.heard;
+  }
+  /** Hear Hermes on `127.0.0.1:port`: the port it took (one of its own for 0). */
+  listen(port, host = "127.0.0.1") {
+    const server = createServer((request, response) => this.handle(request, response));
+    this.server = server;
+    return new Promise((done, failed) => {
+      server.once("error", failed);
+      server.listen(port, host, () => {
+        server.off("error", failed);
+        done(server.address().port);
+      });
+    });
+  }
+  async close() {
+    for (const timer of this.timers.values()) clearTimeout(timer);
+    if (this.timers.size > 0) this.options.save();
+    this.timers.clear();
+    const server = this.server;
+    this.server = void 0;
+    if (server === void 0) return;
+    server.closeAllConnections();
+    await new Promise((done) => server.close(() => done()));
+  }
+  /** An agent's copy, from what is known of it, or nothing when no reading has come. */
+  copyOf(agentId2) {
+    const { kept } = this.options;
+    const reading = kept.readings?.[agentId2];
+    const profile = this.options.profileOf(agentId2);
+    if (reading === void 0 || profile === void 0) return void 0;
+    const last = kept.lasts?.[agentId2];
+    const long = kept.longTurns?.[agentId2];
+    return {
+      used: reading.used,
+      window: reading.window,
+      ...reading.model === void 0 ? {} : { model: reading.model },
+      as_of: reading.at,
+      ...last === void 0 ? {} : { last },
+      ...long === void 0 ? {} : { long_turn: long },
+      compacts: false,
+      why_not: WHY_NOT,
+      limit: limitOf(profile.home, reading.window),
+      editable: false,
+      why_read_only: whyReadOnly(profile.profile)
+    };
+  }
+  /** Each agent's kept copy, sent: at start, so a restart shows what was known. */
+  async sendAll() {
+    for (const agentId2 of Object.keys(this.options.kept.readings ?? {})) await this.send(agentId2);
+  }
+  /** An agent gone: nothing more is sent for it, and nothing kept. */
+  forget(agentId2) {
+    const { kept } = this.options;
+    clearTimeout(this.timers.get(agentId2));
+    this.timers.delete(agentId2);
+    if (kept.readings?.[agentId2] === void 0 && kept.lasts?.[agentId2] === void 0) return;
+    delete kept.readings?.[agentId2];
+    delete kept.lasts?.[agentId2];
+    delete kept.longTurns?.[agentId2];
+    this.options.save();
+  }
+  /** One delivery: read whole up to its limit, checked, answered at once, then taken in. */
+  handle(request, response) {
+    const url2 = new URL(request.url ?? "/", "http://127.0.0.1");
+    const profile = url2.pathname.startsWith(HOOK_PATH) ? decodeURIComponent(url2.pathname.slice(HOOK_PATH.length)) : "";
+    if (request.method !== "POST" || profile === "" || profile.includes("/")) {
+      response.writeHead(404).end();
+      return;
+    }
+    const chunks = [];
+    let size = 0;
+    let over = false;
+    request.on("data", (chunk) => {
+      if (over) return;
+      size += chunk.length;
+      if (size > MAX_BODY) {
+        over = true;
+        response.writeHead(413, { connection: "close" }).end();
+        request.destroy();
+        return;
+      }
+      chunks.push(chunk);
+    });
+    request.on("end", () => {
+      if (over) return;
+      const body = Buffer.concat(chunks);
+      const secret = this.options.secretFor(profile);
+      const header = request.headers["x-hermes-signature-256"];
+      if (secret === void 0 || !signedBy(body, typeof header === "string" ? header : void 0, secret)) {
+        response.writeHead(401).end();
+        if (!this.badSaid.has(profile)) {
+          this.badSaid.add(profile);
+          this.options.log(
+            `a reading from Hermes's ${profile} profile wasn't signed with Chips's secret, and was dropped: start hermes gateway again if its .env changed`
+          );
+        }
+        return;
+      }
+      response.writeHead(204).end();
+      let parsed;
+      try {
+        parsed = JSON.parse(body.toString("utf8"));
+      } catch {
+        return;
+      }
+      const numbers = numbersOf(profile, parsed);
+      if (numbers !== void 0) this.take(numbers);
+    });
+  }
+  /** A reading taken in: the agent's latest, a compaction when it fell, the turn's peak. */
+  take(numbers) {
+    const whose = this.options.whose(numbers.session);
+    if (whose === void 0) return;
+    this.heard = true;
+    const { kept } = this.options;
+    const { agentId: agentId2 } = whose;
+    const reading = {
+      used: numbers.used,
+      window: numbers.window,
+      ...numbers.model === void 0 ? {} : { model: numbers.model },
+      at: numbers.at,
+      session: numbers.session
+    };
+    const before = this.lastOf.get(numbers.session);
+    const fell = before !== void 0 && before.model === reading.model && reading.used < before.used * DROP;
+    if (fell && before !== void 0) {
+      (kept.lasts ??= {})[agentId2] = { at: reading.at, from: before.used, to: reading.used, by: "itself" };
+      this.options.log(`${agentId2} compacted in Hermes, ${before.used} to ${reading.used} tokens`);
+    }
+    let turn = this.turns.get(numbers.session);
+    const fresh = numbers.turn === void 0 ? numbers.first || turn === void 0 : turn?.id !== numbers.turn;
+    if (turn === void 0 || fresh) {
+      turn = { id: numbers.turn, peak: 0, folds: 0 };
+      this.turns.set(numbers.session, turn);
+    }
+    turn.peak = Math.max(turn.peak, reading.used);
+    if (fell) turn.folds += 1;
+    if (turn.peak > reading.window / 2) {
+      (kept.longTurns ??= {})[agentId2] = { at: reading.at, peak: turn.peak, folds: Math.min(1e3, turn.folds) };
+    }
+    this.lastOf.set(numbers.session, reading);
+    (kept.readings ??= {})[agentId2] = reading;
+    this.schedule(agentId2);
+  }
+  /** The agent's copy sent now, or once readings slow down, and what is kept saved with it. */
+  schedule(agentId2) {
+    if (this.timers.has(agentId2)) return;
+    const every = this.options.sendEveryMs ?? SEND_EVERY_MS;
+    const wait2 = Math.max(0, (this.sentAt.get(agentId2) ?? 0) + every - Date.now());
+    const timer = setTimeout(() => {
+      this.timers.delete(agentId2);
+      this.sentAt.set(agentId2, Date.now());
+      this.options.save();
+      void this.send(agentId2);
+    }, wait2);
+    timer.unref?.();
+    this.timers.set(agentId2, timer);
+  }
+  async send(agentId2) {
+    const copy = this.copyOf(agentId2);
+    if (copy === void 0) return;
+    await this.options.send(agentId2, copy).catch((error62) => {
+      this.options.log(`${agentId2}'s context window not sent: ${error62 instanceof Error ? error62.message : String(error62)}`);
+    });
+  }
+};
 
 // src/hermes.ts
 var TERMINAL = /* @__PURE__ */ new Set([
@@ -25490,9 +26382,9 @@ var HermesClient = class {
   constructor(address, fetcher = fetch) {
     this.address = address;
     this.fetcher = fetcher;
-    const root = address.url.replace(/\/+$/, "");
+    const root2 = address.url.replace(/\/+$/, "");
     const profile = address.profile;
-    this.base = profile === void 0 || profile === "default" ? root : `${root}/p/${encodeURIComponent(profile)}`;
+    this.base = profile === void 0 || profile === "default" ? root2 : `${root2}/p/${encodeURIComponent(profile)}`;
   }
   address;
   fetcher;
@@ -25639,7 +26531,7 @@ function sessionIdOf(made) {
   return typeof id2 === "string" && id2 !== "" ? id2 : void 0;
 }
 function eventOf(block) {
-  const data = block.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice(5).replace(/^ /, "")).join("\n");
+  const data = block.split("\n").filter((line2) => line2.startsWith("data:")).map((line2) => line2.slice(5).replace(/^ /, "")).join("\n");
   if (data === "") return void 0;
   try {
     const parsed = JSON.parse(data);
@@ -25665,8 +26557,126 @@ async function failureOf(answer) {
   return new HermesError(message, answer.status, code);
 }
 
+// src/hooks.ts
+import { appendFileSync, chmodSync as chmodSync3, existsSync as existsSync7, readFileSync as readFileSync7, statSync as statSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join7 } from "node:path";
+var HOOK_NAME = "chips";
+var SECRET_ENV = "CHIPS_HOOK_SECRET";
+function hookUrl(port, profile) {
+  return `http://127.0.0.1:${port}${HOOK_PATH}${profile}`;
+}
+function linesOf2(text) {
+  return text.split("\n").map((line2) => {
+    const indent = line2.length - line2.trimStart().length;
+    const words4 = line2.trimStart().startsWith("#") ? "" : line2.trim().replace(/\s+#.*$/, "");
+    return { indent, words: words4 };
+  });
+}
+function hookPortIn(home2) {
+  const path = join7(home2, "config.yaml");
+  if (!existsSync7(path)) return void 0;
+  const escaped = HOOK_PATH.replace(/[/]/g, "\\/");
+  const match = new RegExp(`^\\s*(?:-\\s*)?url:\\s*["']?http:\\/\\/127\\.0\\.0\\.1:(\\d+)${escaped}`, "m").exec(
+    readFileSync7(path, "utf8")
+  );
+  const port = match === null ? void 0 : Number(match[1]);
+  return port !== void 0 && Number.isInteger(port) && port > 0 && port < 65536 ? port : void 0;
+}
+function entryLines(indent, url2, secret) {
+  return [
+    `${indent}outbound:`,
+    `${indent}  - name: ${HOOK_NAME}`,
+    `${indent}    url: ${url2}`,
+    `${indent}    events: [post_api_request]`,
+    "env" in secret ? `${indent}    secret_env: ${secret.env}` : `${indent}    secret: "${secret.inline}"`,
+    `${indent}    timeout: 5`
+  ];
+}
+function secretInEnv(home2, secret) {
+  const path = join7(home2, ".env");
+  if (!existsSync7(path)) return false;
+  if (envValue(home2, SECRET_ENV) !== void 0) return true;
+  const text = readFileSync7(path, "utf8");
+  const mode = statSync3(path).mode & 511;
+  appendFileSync(path, `${text === "" || text.endsWith("\n") ? "" : "\n"}${SECRET_ENV}=${secret}
+`);
+  chmodSync3(path, mode);
+  return true;
+}
+function addHook(home2, port, profile, secret) {
+  const path = join7(home2, "config.yaml");
+  if (!existsSync7(home2)) return { state: "no_home", path };
+  const url2 = hookUrl(port, profile);
+  const text = existsSync7(path) ? readFileSync7(path, "utf8") : "";
+  const lines2 = linesOf2(text);
+  const ours2 = new RegExp(`^(?:-\\s*)?url:\\s*["']?${url2.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&")}["']?$`);
+  if (lines2.some((line2) => ours2.test(line2.words))) return { state: "there", path };
+  const where = lines2.findIndex((line2) => line2.indent === 0 && /^["']?hooks["']?\s*:/.test(line2.words));
+  const byHand = (why) => {
+    const inEnv2 = secretInEnv(home2, secret);
+    const shown2 = entryLines("  ", url2, inEnv2 ? { env: SECRET_ENV } : { inline: secret });
+    return { state: "by_hand", path, why, lines: ["hooks:", ...shown2].join("\n") };
+  };
+  const plain = /^(?:"[^"]+"|'[^']+'|[A-Za-z_][\w.-]*)\s*:(?:\s|$)/;
+  if (lines2.some((line2) => line2.indent === 0 && line2.words !== "" && !plain.test(line2.words))) {
+    return byHand("its top level isn't laid out as this bridge expects");
+  }
+  if (where === -1) {
+    const inEnv2 = secretInEnv(home2, secret);
+    const block = [
+      "# Chips: how full each agent's context is, sent to the chips-hermes bridge after each model call.",
+      "hooks:",
+      ...entryLines("  ", url2, inEnv2 ? { env: SECRET_ENV } : { inline: secret })
+    ];
+    const before = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
+    if (text === "") writeFileSync4(path, `${block.join("\n")}
+`, { mode: 384 });
+    else writeWhole(path, `${text}${before}${block.join("\n")}
+`);
+    return { state: "added", path };
+  }
+  const head = lines2[where]?.words ?? "";
+  if (head.replace(/^["']?hooks["']?\s*:/, "").trim() !== "") return byHand("its hooks: is written on one line");
+  const children = [];
+  for (const line2 of lines2.slice(where + 1)) {
+    if (line2.words === "") continue;
+    if (line2.indent === 0) break;
+    children.push(line2);
+  }
+  const indent = children[0]?.indent ?? 2;
+  const named = new RegExp(`^(?:-\\s*)?name:\\s*["']?${HOOK_NAME}["']?$`);
+  if (children.some((line2) => named.test(line2.words))) {
+    return byHand(`its hooks have an entry called ${HOOK_NAME} with another address`);
+  }
+  if (children.some((line2) => line2.indent === indent && /^["']?outbound["']?\s*:/.test(line2.words))) {
+    return byHand("its hooks already have an outbound list");
+  }
+  if (children.some((line2) => line2.indent !== indent && line2.indent < indent) || children[0]?.words.startsWith("-")) {
+    return byHand("its hooks: isn't laid out as this bridge expects");
+  }
+  const inEnv = secretInEnv(home2, secret);
+  const raw = text.split("\n");
+  raw.splice(where + 1, 0, ...entryLines(" ".repeat(indent), url2, inEnv ? { env: SECRET_ENV } : { inline: secret }));
+  writeWhole(path, raw.join("\n"));
+  return { state: "added", path };
+}
+
 // src/bridge.ts
-var WANTS = ["agents", "new_agents", "forks"];
+var WANTS = ["agents", "new_agents", "forks", "context_files", "context_windows", "restarts"];
+function settingsFor(active) {
+  const bridge2 = () => {
+    const there = active();
+    if (there === void 0) throw new Refuse("The bridge is starting. Try again in a moment.");
+    return there;
+  };
+  return {
+    context: (edit) => bridge2().onContextEdit(edit),
+    contextWindows: {
+      compact: async (ask2) => bridge2().onWindowCompact(ask2),
+      change: async (ask2) => bridge2().onWindowChange(ask2)
+    }
+  };
+}
 function filesHere(project = false) {
   return `${sendingFiles({ project })} Hermes's note that this API server sends only pictures, and shows a MEDIA: tag on the runs endpoint as text, does not hold for these runs: they come from Chips, whose bridge takes each MEDIA: line out of your answer and attaches that file to your message, whatever its type, up to 100 MB.`;
 }
@@ -25675,10 +26685,10 @@ function instructionsFor(folder2, project = false) {
   const files = filesHere(project);
   return folder2 === void 0 ? files : `${files} Your own folder is ${folder2}: make and keep your files there, and run your commands from there.`;
 }
-function freeFolder(root, name2, taken) {
+function freeFolder(root2, name2, taken) {
   const slug = name2.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "agent";
   for (let count = 1; ; count += 1) {
-    const folder2 = join5(root, count === 1 ? slug : `${slug}-${count}`);
+    const folder2 = join8(root2, count === 1 ? slug : `${slug}-${count}`);
     if (!taken.includes(folder2)) return folder2;
   }
 }
@@ -25709,6 +26719,32 @@ var Bridge = class {
   constructor(options) {
     this.options = options;
     this.log = options.log ?? (() => void 0);
+    const { chips: chips2, hermesRoot: hermesRoot2 } = options;
+    if (hermesRoot2 === void 0) return;
+    this.contexts = new Contexts(
+      () => this.roster(),
+      {
+        agent: (agentId2, copy) => chips2.settings.context(agentId2, copy),
+        harness: (copy) => chips2.settings.harnessContext(copy)
+      },
+      (line2) => this.log(`context: ${line2}`),
+      options.env ?? process.env
+    );
+    if (options.fills === void 0) return;
+    const kept = options.state.fills ??= {};
+    this.fills = new Fills({
+      whose: (sessionId) => this.whoseSession(sessionId),
+      profileOf: (agentId2) => {
+        const profile = this.profileFor(agentId2);
+        return profile === void 0 ? void 0 : { profile: profile.name, home: profile.home };
+      },
+      secretFor: (profile) => envValue(profileHome(hermesRoot2, profile), SECRET_ENV) ?? kept.secret ?? options.fills?.secret,
+      send: (agentId2, copy) => chips2.settings.contextWindow(agentId2, copy),
+      kept,
+      save: () => options.saveState(options.state),
+      log: (line2) => this.log(`context window: ${line2}`),
+      sendEveryMs: options.fillsEveryMs
+    });
   }
   options;
   agents = [];
@@ -25723,6 +26759,20 @@ var Bridge = class {
   copying = Promise.resolve();
   log;
   health;
+  /** The harness's agents in Chips as last listed: whose context and window copies are sent. */
+  listed = [];
+  /** The agents' context files (Chips ADR 0134), when the bridge knows where Hermes keeps them. */
+  contexts;
+  contextTimer;
+  /** The agents' context windows (Chips ADR 0146), when Hermes's webhook has somewhere to reach. */
+  fills;
+  /** The port Hermes's webhook reaches the bridge on, once it listens. */
+  fillsPort;
+  toldNoReadings = false;
+  /** While Hermes's gateway restarts (Chips ADR 0094), the health watch says nothing: the restart says how it went. */
+  held = false;
+  /** What went wrong in the last restart, said in place of the watch's own words while Hermes doesn't answer. */
+  why;
   /** Register the agents, start hearing what is said to them, and say how their gateways are. */
   async start() {
     const { chips: chips2 } = this.options;
@@ -25736,20 +26786,138 @@ var Bridge = class {
     this.ours = /* @__PURE__ */ new Set([...known.map((agent) => agent.agentId), ...this.agents.map((agent) => agent.agentId)]);
     chips2.on("message.new", (message) => void this.hear(message));
     chips2.on("agent.asked", (asked) => {
-      this.make(asked).catch((error62) => this.log(`a new agent went wrong: ${messageOf(error62)}`));
+      this.make(asked).catch((error62) => this.log(`a new agent went wrong: ${messageOf2(error62)}`));
     });
     chips2.on("agent.fork", (fork) => {
-      this.copying = this.copying.then(() => this.copy(fork)).catch((error62) => this.log(`a copy went wrong: ${messageOf(error62)}`));
+      this.copying = this.copying.then(() => this.copy(fork)).catch((error62) => this.log(`a copy went wrong: ${messageOf2(error62)}`));
     });
     chips2.on("feedback", (feedback2) => {
-      this.notRight(feedback2).catch((error62) => this.log(`a note on a reply went wrong: ${messageOf(error62)}`));
+      this.notRight(feedback2).catch((error62) => this.log(`a note on a reply went wrong: ${messageOf2(error62)}`));
     });
+    chips2.on("agent.attached", () => void this.agentsMoved());
+    chips2.on("agent.released", () => void this.agentsMoved());
     await this.sayHowItIs();
     this.health = setInterval(() => void this.sayHowItIs(), this.options.healthEveryMs ?? 3e4);
     this.health.unref();
+    await this.startSettings();
+  }
+  /** Hold the health watch's words while Hermes's gateway restarts, and let them go after. */
+  hold(held) {
+    this.held = held;
+  }
+  /**
+   * How a restart went (Chips ADR 0094): fine as the gateways now are, or its words, which stand
+   * while Hermes doesn't answer. The health watch speaks for itself again after.
+   */
+  async restarted(trouble) {
+    this.held = false;
+    this.why = trouble;
+    if (trouble === void 0) return this.sayHowItIs();
+    await this.options.chips.reportTrouble(trouble).catch(() => void 0);
   }
   stop() {
     if (this.health !== void 0) clearInterval(this.health);
+    if (this.contextTimer !== void 0) clearInterval(this.contextTimer);
+    void this.fills?.close();
+  }
+  // ------------------------------------------------------------------ an agent's page
+  /**
+   * The agents' context and context windows, sent at start and kept current: the files read
+   * again every so often and after each turn, a window copy on each reading Hermes sends.
+   */
+  async startSettings() {
+    if (this.contexts === void 0) return;
+    this.listed = await this.options.chips.agents.list().catch(() => this.listed);
+    await this.contexts.refresh();
+    this.contextTimer = setInterval(() => void this.contexts?.refresh(), this.options.contextEveryMs ?? 15e3);
+    this.contextTimer.unref();
+    const fills2 = this.fills;
+    const asked = this.options.fills;
+    if (fills2 === void 0 || asked === void 0) return;
+    const kept = this.options.state.fills ??= {};
+    try {
+      this.fillsPort = await fills2.listen(asked.port);
+      if (kept.port !== this.fillsPort) {
+        kept.port = this.fillsPort;
+        this.options.saveState(this.options.state);
+      }
+    } catch (error62) {
+      this.log(`context window: nothing can listen on port ${asked.port} (${messageOf2(error62)}), so Chips won't show how full each agent's context is`);
+    }
+    await fills2.sendAll();
+  }
+  /** The address Hermes's webhook POSTs a profile's readings to, once the bridge listens. */
+  hookUrl(profile = "default") {
+    return this.fillsPort === void 0 ? void 0 : hookUrl(this.fillsPort, profileName(profile));
+  }
+  /** The harness's agents listed again, the copies of any gone forgotten, and the context sent. */
+  async agentsMoved() {
+    if (this.contexts === void 0) return;
+    const before = this.listed;
+    this.listed = await this.options.chips.agents.list().catch(() => this.listed);
+    const now = new Set(this.active().map((agent) => agent.agentId));
+    for (const gone of before) {
+      if (now.has(gone.agentId)) continue;
+      this.options.chips.settings.forget(gone.agentId);
+      this.fills?.forget(gone.agentId);
+    }
+    await this.contexts.refresh();
+  }
+  /** The harness's agents that read anything now: the active ones listed. */
+  active() {
+    return this.listed.filter((agent) => agent.state === "active");
+  }
+  /** A profile as the context needs it: its name and its home under Hermes's root. */
+  profileOfRunning(agent) {
+    const root2 = this.options.hermesRoot;
+    if (root2 === void 0) return void 0;
+    return { name: profileName(agent.config.address.profile), home: profileHome(root2, agent.config.address.profile) };
+  }
+  /** The profile an agent runs on: its own, a copy's original's, else the first (as `profileOf` picks). */
+  profileFor(agentId2) {
+    const own2 = this.agents.find((agent) => agent.agentId === agentId2);
+    const copied = this.options.state.profiles?.[agentId2];
+    const original = this.agents.find((agent) => copied !== void 0 && agent.key === copied);
+    const running = own2 ?? original ?? this.agents[0];
+    return running === void 0 ? void 0 : this.profileOfRunning(running);
+  }
+  /** Who reads what: each active agent with its profile, and the first profile, which new agents run on. */
+  roster() {
+    const readers = [];
+    const ids2 = /* @__PURE__ */ new Set([...this.active().map((agent) => agent.agentId), ...this.agents.map((agent) => agent.agentId)]);
+    for (const agentId2 of ids2) {
+      if (this.listed.some((agent) => agent.agentId === agentId2 && agent.state !== "active")) continue;
+      const profile = this.profileFor(agentId2);
+      if (profile !== void 0) readers.push({ agentId: agentId2, profile });
+    }
+    const first = this.agents[0];
+    return { readers, first: first === void 0 ? void 0 : this.profileOfRunning(first) };
+  }
+  /** The agent a Hermes session the bridge keeps is, with its profile: nothing for any other. */
+  whoseSession(sessionId) {
+    const entry = Object.entries(this.options.state.sessions).find(([, session]) => session === sessionId);
+    if (entry === void 0) return void 0;
+    const who = entry[0].slice(0, entry[0].lastIndexOf("|"));
+    const agentId2 = this.agents.find((agent) => agent.key === who)?.agentId ?? who;
+    const profile = this.profileFor(agentId2);
+    return profile === void 0 ? void 0 : { agentId: agentId2, profile: profile.name, home: profile.home };
+  }
+  /** A person's edit of a context file from Chips (Chips ADR 0134), saved and answered. */
+  async onContextEdit(frame) {
+    if (this.contexts === void 0) throw new Refuse("This bridge reads no context files.");
+    if (frame.agent_id !== void 0 && !this.listed.some((agent) => agent.agentId === frame.agent_id)) {
+      this.listed = await this.options.chips.agents.list().catch(() => this.listed);
+    }
+    return this.contexts.edit(frame);
+  }
+  /** A person's Compact now (Chips ADR 0146): Hermes can't be asked to compact from outside a run. */
+  onWindowCompact(frame) {
+    throw new Refuse(WHY_NOT, this.fills?.copyOf(frame.agent_id));
+  }
+  /** A person's limit (Chips ADR 0146): Hermes sets it in its profile's config, for all its agents. */
+  onWindowChange(frame) {
+    const profile = this.profileFor(frame.agent_id);
+    throw new Refuse(whyReadOnly(profile?.name ?? "default"), this.fills?.copyOf(frame.agent_id));
   }
   /** The Main agent, the first registered, once started: who says the harness's first words. */
   get mainAgentId() {
@@ -25801,6 +26969,7 @@ var Bridge = class {
     this.ours.add(agent.agentId);
     this.names.set(agent.agentId, agent.name);
     this.log(`${agent.name} made${agent.attached === false ? `, not in the room: ${agent.why ?? "too late"}` : ""}`);
+    void this.agentsMoved();
   }
   /**
    * A person asked for a copy of one of the harness's agents in another room (ADR 0087, Fork): the
@@ -25845,6 +27014,7 @@ var Bridge = class {
     this.names.set(copy.agentId, copy.name);
     const away = copy.attached === false && !copy.spaces.includes(spaceId);
     this.log(`${copy.name}, a copy of ${name2}, made${away ? `, not in the room: ${copy.why ?? "too late"}` : ""}`);
+    void this.agentsMoved();
   }
   /** An agent's name, from Chips's list when it isn't known yet. */
   async nameOf(agentId2, otherwise) {
@@ -25863,11 +27033,11 @@ var Bridge = class {
    */
   folderOf(agent, agentId2, name2) {
     if (agent.config.folder !== void 0) return agent.config.folder;
-    const { folders: root, state: state2 } = this.options;
-    if (root === void 0) return void 0;
+    const { folders: root2, state: state2 } = this.options;
+    if (root2 === void 0) return void 0;
     const kept = state2.folders?.[agentId2];
-    const folder2 = kept ?? freeFolder(root, name2, Object.values(state2.folders ?? {}));
-    mkdirSync4(folder2, { recursive: true });
+    const folder2 = kept ?? freeFolder(root2, name2, Object.values(state2.folders ?? {}));
+    mkdirSync5(folder2, { recursive: true });
     if (kept === void 0) {
       state2.folders = { ...state2.folders, [agentId2]: folder2 };
       this.options.saveState(state2);
@@ -25884,12 +27054,12 @@ var Bridge = class {
     const folder2 = turn.folder;
     if (folder2 === void 0) return void 0;
     try {
-      const project = this.options.chips.project({ spaceId, agentId: agentId2, name: name2, folder: folder2, log: (line) => this.log(line) });
+      const project = this.options.chips.project({ spaceId, agentId: agentId2, name: name2, folder: folder2, log: (line2) => this.log(line2) });
       const facts = await project.pull();
       turn.project = { copy: project, name: name2 };
       return facts;
     } catch (error62) {
-      this.log(`${name2}'s copy of the room's project couldn't be readied: ${messageOf(error62)}`);
+      this.log(`${name2}'s copy of the room's project couldn't be readied: ${messageOf2(error62)}`);
       return void 0;
     }
   }
@@ -25908,18 +27078,21 @@ var Bridge = class {
       const note = heldNote(pushed, name2);
       return note === void 0 ? {} : { note };
     } catch (error62) {
-      this.log(`${name2}'s project couldn't be sent: ${messageOf(error62)}`);
-      const note = heldNote({ state: "failed", why: messageOf(error62) }, name2);
+      this.log(`${name2}'s project couldn't be sent: ${messageOf2(error62)}`);
+      const note = heldNote({ state: "failed", why: messageOf2(error62) }, name2);
       return note === void 0 ? {} : { note };
     }
   }
-  /** Trouble while a profile's gateway doesn't answer, and fine once all do (ADR 0083). */
+  /** Trouble while a profile's gateway doesn't answer, and fine once all do (ADR 0083); nothing while a restart runs. */
   async sayHowItIs() {
+    if (this.held) return;
     for (const agent of this.agents) agent.up = await agent.client.healthy();
+    if (this.held) return;
     const down = this.agents.filter((agent) => !agent.up);
+    if (down.length === 0) this.why = void 0;
     const chips2 = this.options.chips;
-    const said = down.length === 0 ? chips2.reportOk() : chips2.reportTrouble(`Hermes isn't answering for ${down.map((agent) => agent.config.name).join(", ")}`);
-    await said.catch(() => void 0);
+    const said2 = down.length === 0 ? chips2.reportOk() : chips2.reportTrouble(this.why ?? `Hermes isn't answering for ${down.map((agent) => agent.config.name).join(", ")}`);
+    await said2.catch(() => void 0);
   }
   // ------------------------------------------------------------------ what is said to it
   /** A message for some of its agents: each takes a turn in its room, one after another there. */
@@ -25952,15 +27125,15 @@ var Bridge = class {
       this.lookedAt.delete(old);
     }
     const context = await this.options.chips.roomContext(spaceId, { limit: 200 }).catch(() => void 0);
-    const line = context?.lines.find((each) => each.message_id === messageId);
+    const line2 = context?.lines.find((each) => each.message_id === messageId);
     const message = {
       type: "message.new",
       space_id: spaceId,
       // An id of its own, so nothing of the turn is taken for the reply's.
       message_id: messageIdOf(feedback2.id),
-      text: lookAgain(feedback2.from.display_name, line?.text, note),
+      text: lookAgain(feedback2.from.display_name, line2?.text, note),
       from: feedback2.from,
-      ...line === void 0 ? {} : { for: [line.from.id] }
+      ...line2 === void 0 ? {} : { for: [line2.from.id] }
     };
     await this.hear(message, { goal: lookingAgain(note), sayWho: false });
   }
@@ -26014,9 +27187,10 @@ var Bridge = class {
     try {
       await this.turn(room, asked);
     } catch (error62) {
-      this.log(`a turn of ${room.agent.config.name} went wrong: ${messageOf(error62)}`);
+      this.log(`a turn of ${room.agent.config.name} went wrong: ${messageOf2(error62)}`);
     } finally {
       room.busy = false;
+      void this.contexts?.refresh();
       void this.pump(room);
     }
   }
@@ -26051,7 +27225,7 @@ var Bridge = class {
     try {
       session = await this.sessionFor(room);
     } catch (error62) {
-      await this.failed(turn, `${agent.config.name} couldn't open a session in Hermes: ${messageOf(error62)}`, true);
+      await this.failed(turn, `${agent.config.name} couldn't open a session in Hermes: ${messageOf2(error62)}`, true);
       return;
     }
     const name2 = speakerId === void 0 ? agent.config.name : await this.nameOf(speakerId, agent.config.name);
@@ -26080,7 +27254,7 @@ var Bridge = class {
     try {
       turn.hermesRun = await agent.client.startRun({ text, sessionId: session, model: agent.config.model, key, instructions: instructionsFor(turn.folder, turn.project !== void 0) });
     } catch (error62) {
-      await this.failed(turn, `${agent.config.name} couldn't start in Hermes: ${messageOf(error62)}`, true);
+      await this.failed(turn, `${agent.config.name} couldn't start in Hermes: ${messageOf2(error62)}`, true);
       return void 0;
     }
     if (turn.cancelled) await agent.client.stop(turn.hermesRun).catch(() => void 0);
@@ -26088,7 +27262,7 @@ var Bridge = class {
       const last = await agent.client.events(turn.hermesRun, (event) => this.heard(turn, event));
       return last ?? await this.endOf(turn);
     } catch (error62) {
-      this.log(`lost ${agent.config.name}'s run ${turn.hermesRun}: ${messageOf(error62)}`);
+      this.log(`lost ${agent.config.name}'s run ${turn.hermesRun}: ${messageOf2(error62)}`);
       return await this.endOf(turn);
     }
   }
@@ -26101,7 +27275,7 @@ var Bridge = class {
       if (status !== void 0 && TERMINAL.has(`run.${status}`)) {
         return { ...state2, event: `run.${status}` };
       }
-      await new Promise((resolve5) => setTimeout(resolve5, 1e3));
+      await new Promise((resolve7) => setTimeout(resolve7, 1e3));
     }
     await this.failed(turn, `${turn.agent.config.name}'s run in Hermes stopped answering.`, true);
     return void 0;
@@ -26133,7 +27307,7 @@ var Bridge = class {
         await turn.agent.client.steer(turn.hermesRun, text);
         return;
       } catch (error62) {
-        this.log(`Hermes didn't take a steer mid-run (${messageOf(error62)}); saying it next`);
+        this.log(`Hermes didn't take a steer mid-run (${messageOf2(error62)}); saying it next`);
       }
     }
     turn.next.push(text);
@@ -26169,10 +27343,10 @@ var Bridge = class {
   }
   sayThought(turn, text, phase) {
     const now = Date.now();
-    const line = lastLine(text);
-    if (line === "" || now - turn.saidAt < QUIET_MS) return;
+    const line2 = lastLine(text);
+    if (line2 === "" || now - turn.saidAt < QUIET_MS) return;
     turn.saidAt = now;
-    void turn.run.status({ phase, verbPhrase: line.slice(0, 200) }).catch(() => void 0);
+    void turn.run.status({ phase, verbPhrase: line2.slice(0, 200) }).catch(() => void 0);
   }
   async started(turn, event) {
     const sub = event.event === "subagent.start";
@@ -26182,11 +27356,11 @@ var Bridge = class {
     const stepId = callId ?? `${tool}-${turn.counted}`;
     const lane = callId ?? (sub ? "subagent" : `tool:${tool}`);
     turn.open.set(lane, [...turn.open.get(lane) ?? [], stepId]);
-    const said = sub ? event["goal"] : event["preview"];
+    const said2 = sub ? event["goal"] : event["preview"];
     await turn.run.step({
       stepId,
       status: "started",
-      title: `${tool}${typeof said === "string" && said !== "" ? ` \xB7 ${said}` : ""}`.slice(0, 300),
+      title: `${tool}${typeof said2 === "string" && said2 !== "" ? ` \xB7 ${said2}` : ""}`.slice(0, 300),
       tool,
       ...KINDS[tool] === void 0 ? {} : { kind: KINDS[tool] }
     }).catch(() => void 0);
@@ -26241,7 +27415,7 @@ var Bridge = class {
 ${command}
 \`\`\`` } }
     });
-    const stopped2 = new Promise((resolve5) => turn.run.on("cancel", () => resolve5(void 0)));
+    const stopped2 = new Promise((resolve7) => turn.run.on("cancel", () => resolve7(void 0)));
     const decision = await Promise.race([asked, stopped2]);
     const pending = turn.approvals.get(requestId ?? approvalId);
     if (decision === void 0 || pending === void 0 || pending.answered) return;
@@ -26249,10 +27423,10 @@ ${command}
     if (decision.allowed) turn.allowed.push(approvalId);
     const generation = event["execution_generation"];
     await turn.agent.client.approve(turn.hermesRun, {
-      choice: choiceOf(decision, choices),
+      choice: choiceOf(decision, choices, command !== void 0),
       ...requestId === void 0 ? {} : { request_id: requestId },
       ...typeof generation === "number" ? { execution_generation: generation } : {}
-    }).catch((error62) => this.log(`Hermes didn't take the answer: ${messageOf(error62)}`));
+    }).catch((error62) => this.log(`Hermes didn't take the answer: ${messageOf2(error62)}`));
   }
   /** An approval answered in Hermes's own tools: settled in Chips, once, so the card cools (ADR 0079). */
   async settled(turn, event) {
@@ -26297,10 +27471,27 @@ ${command}
     if (reply !== "" || post.uploadIds.length > 0) {
       await turn.speaker.post({ spaceId: run2.spaceId, runId: run2.id, text: reply, uploadIds: post.uploadIds, change });
     }
-    const said = post.summary;
-    const summary = said === "" ? "Done." : said.length <= 2e3 ? said : `${said.slice(0, 1990)}\u2026`;
+    const said2 = post.summary;
+    const summary = said2 === "" ? "Done." : said2.length <= 2e3 ? said2 : `${said2.slice(0, 1990)}\u2026`;
     await run2.complete({ summary });
     this.log(`${agent.config.name} answered in ${run2.spaceId}`);
+    this.missingReadings();
+  }
+  /**
+   * A turn ended and Hermes sent no reading at all since the bridge started: its gateway most
+   * likely started before Chips's webhook was in its config. Said once, a little after, since a
+   * reading comes a moment after its model call.
+   */
+  missingReadings() {
+    if (this.fills === void 0 || this.fillsPort === void 0 || this.fills.anyHeard || this.toldNoReadings) return;
+    this.toldNoReadings = true;
+    setTimeout(() => {
+      if (this.fills?.anyHeard === false) {
+        this.log(
+          "context window: Hermes sent no reading after a turn. Start hermes gateway again once, so it takes Chips's webhook from its config."
+        );
+      }
+    }, 1e4).unref();
   }
   /** A run that failed, was stopped or was cut short in Hermes. */
   async ended(turn, last) {
@@ -26349,8 +27540,9 @@ ${command}
     if (retryable) void this.sayHowItIs();
   }
 };
-function choiceOf(decision, choices) {
+function choiceOf(decision, choices, command = false) {
   if (!decision.allowed) return "deny";
+  if (command) return "once";
   if (decision.scope === "always" && choices.includes("always")) return "always";
   if (decision.scope !== "once" && choices.includes("session")) return "session";
   return "once";
@@ -26359,7 +27551,7 @@ function idOf(event) {
   const id2 = event["request_id"] ?? event["prompt_id"];
   return typeof id2 === "string" && id2 !== "" ? id2 : void 0;
 }
-function messageOf(error62) {
+function messageOf2(error62) {
   if (error62 instanceof HermesError) return `${error62.message} (${error62.status})`;
   return error62 instanceof Error ? error62.message : String(error62);
 }
@@ -26367,7 +27559,7 @@ function forkName(original) {
   return `${original.trim().replace(/ · fork( \d+)?$/, "")} \xB7 fork`;
 }
 function goalOf(message, name2) {
-  const first = message.text.split("\n").find((line) => line.trim() !== "")?.trim() ?? "";
+  const first = message.text.split("\n").find((line2) => line2.trim() !== "")?.trim() ?? "";
   const named = first.toLowerCase().startsWith(`@${name2.toLowerCase()}`);
   const goal = named ? first.slice(name2.length + 1).trim() : first.replace(/^@\S+\s*/, "");
   return (goal === "" ? `Answer ${message.from.display_name}` : goal).slice(0, 300);
@@ -26375,17 +27567,17 @@ function goalOf(message, name2) {
 var REPLY_SHOWN = 1500;
 var GOAL_SHOWN = 120;
 function lookAgain(who, reply, note) {
-  const said = reply?.trim() ?? "";
+  const said2 = reply?.trim() ?? "";
   return [
     `${who} says your reply in this space wasn't right.`,
-    ...said === "" ? [] : [`Your reply:
-\xAB${cut(said, REPLY_SHOWN)}\xBB`],
+    ...said2 === "" ? [] : [`Your reply:
+\xAB${cut(said2, REPLY_SHOWN)}\xBB`],
     note === void 0 || note === "" ? "They didn't say what. Read your reply again and find what was wrong." : `What wasn't right: \xAB${note}\xBB`,
     "Look at it again and answer properly in its place. If it is not clear what was wrong, ask them in one short line. Say plainly what you changed."
   ].join("\n\n");
 }
 function lookingAgain(note) {
-  const first = note?.split("\n").find((line) => line.trim() !== "")?.trim();
+  const first = note?.split("\n").find((line2) => line2.trim() !== "")?.trim();
   return first === void 0 ? "Looking again at its reply" : cut(`Looking again: ${first}`, GOAL_SHOWN);
 }
 function cut(text, most) {
@@ -26401,31 +27593,492 @@ function resultWords(preview2) {
   }
   if (typeof result !== "object" || result === null || !("output" in result)) return preview2;
   const { output: output2, error: error62 } = result;
-  const said = [output2, error62].find((each) => typeof each === "string" && each.trim() !== "");
-  return typeof said === "string" ? said.trim() : "";
+  const said2 = [output2, error62].find((each) => typeof each === "string" && each.trim() !== "");
+  return typeof said2 === "string" ? said2.trim() : "";
 }
 function lastLine(text) {
-  const lines2 = text.split(/(?<=[.!?])\s+|\n+/).map((line) => line.trim()).filter((line) => line !== "");
+  const lines2 = text.split(/(?<=[.!?])\s+|\n+/).map((line2) => line2.trim()).filter((line2) => line2 !== "");
   return lines2.at(-1) ?? "";
 }
 function lowerFirst(text) {
   return text.length === 0 ? text : `${text[0]?.toLowerCase() ?? ""}${text.slice(1)}`;
 }
 
+// src/gateway.ts
+import { spawn as spawn2 } from "node:child_process";
+import { createHash as createHash3 } from "node:crypto";
+import { accessSync as accessSync2, appendFileSync as appendFileSync2, closeSync as closeSync2, constants as constants2, existsSync as existsSync8, openSync as openSync2, readFileSync as readFileSync8, readSync, statSync as statSync4 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { basename as basename4, delimiter as delimiter2, dirname as dirname5, join as join9, resolve as resolve3 } from "node:path";
+var TIMING = {
+  stopMs: 15e3,
+  killMs: 5e3,
+  earlyMs: 1e4,
+  upMs: 9e4,
+  serviceMs: 15e4,
+  pollMs: 500
+};
+var EXPAT = "/opt/homebrew/opt/expat/lib/libexpat.1.dylib";
+var EXPAT_SYMBOL = "_XML_SetAllocTrackerActivationThreshold";
+function gatewaysOf(agents) {
+  return [...new Set(agents.map(({ address }) => address.url.replace(/\/+$/, "")))].map((url2) => ({ url: url2 }));
+}
+function isLocal(url2) {
+  try {
+    return ["127.0.0.1", "localhost", "[::1]", "::1"].includes(new URL(url2).hostname);
+  } catch {
+    return false;
+  }
+}
+function portOf(url2) {
+  const parsed = new URL(url2);
+  return Number(parsed.port || (parsed.protocol === "https:" ? 443 : 80));
+}
+function line(words4) {
+  const one = words4.replace(/\s+/g, " ").trim();
+  return one.length <= 200 ? one : `${one.slice(0, 199)}\u2026`;
+}
+function whyFrom(output2, code) {
+  const lines2 = output2.split("\n").map((each) => each.trim()).filter((each) => each !== "");
+  const why = lines2.findLast((each) => /^[A-Za-z_][\w.]*(Error|Exception)\b/.test(each)) ?? lines2.at(-1);
+  if (why === void 0) return code === null || code === void 0 ? "it was stopped" : `it exited ${code}`;
+  return why.length <= 200 ? why : why.replace(/\/(?:[^\s/(),:'"]+\/)+([^\s/(),:'"]+)/g, "$1");
+}
+function gatewayRunArgs(command) {
+  const words4 = command.trim().split(/\s+/);
+  const at = words4.findIndex((word) => basename4(word) === "hermes");
+  if (at === -1) return void 0;
+  const args = words4.slice(at + 1);
+  const plain = [];
+  for (let next = 0; next < args.length; next += 1) {
+    const word = args[next] ?? "";
+    if (word === "-p" || word === "--profile") next += 1;
+    else if (!word.startsWith("-")) plain.push(word);
+  }
+  return plain[0] === "gateway" && plain[1] === "run" ? args : void 0;
+}
+function serviceOf(system, root2, env = {}) {
+  const home2 = resolve3(root2);
+  const native = resolve3(system.home, ".hermes");
+  const suffix = home2 === native ? "" : dirname5(home2) === join9(native, "profiles") ? basename4(home2) : createHash3("sha256").update(home2).digest("hex").slice(0, 8);
+  if (system.platform === "darwin") {
+    const path = join9(system.home, "Library", "LaunchAgents", `ai.hermes.gateway${suffix ? `-${suffix}` : ""}.plist`);
+    return system.exists(path) ? { kind: "launchd", path } : void 0;
+  }
+  if (system.platform === "linux") {
+    const unit = `hermes-gateway${suffix ? `-${suffix}` : ""}.service`;
+    const user = join9(env["XDG_CONFIG_HOME"] || join9(system.home, ".config"), "systemd", "user", unit);
+    if (system.exists(user)) return { kind: "systemd", path: user };
+    const machine = join9("/etc/systemd/system", unit);
+    if (system.exists(machine)) return { kind: "systemd", path: machine, system: true };
+  }
+  return void 0;
+}
+function expand(text, env) {
+  let out = "";
+  let at = 0;
+  while (at < text.length) {
+    const char = text[at] ?? "";
+    if (char === "\\" && at + 1 < text.length) {
+      out += text[at + 1];
+      at += 2;
+    } else if (char !== "$") {
+      out += char;
+      at += 1;
+    } else if (text[at + 1] === "{") {
+      let depth = 1;
+      let end2 = at + 2;
+      for (; end2 < text.length; end2 += 1) {
+        if (text[end2] === "{") depth += 1;
+        else if (text[end2] === "}" && --depth === 0) break;
+      }
+      const inner = /^([A-Za-z_][A-Za-z0-9_]*)(?:(:?)-([\s\S]*))?$/.exec(text.slice(at + 2, end2));
+      if (inner !== null) {
+        const value = env[inner[1] ?? ""];
+        const unset = inner[2] === ":" ? value === void 0 || value === "" : value === void 0;
+        out += inner[3] !== void 0 && unset ? expand(inner[3], env) : value ?? "";
+      }
+      at = end2 + 1;
+    } else {
+      const name2 = /^[A-Za-z_][A-Za-z0-9_]*/.exec(text.slice(at + 1))?.[0];
+      out += name2 === void 0 ? "$" : env[name2] ?? "";
+      at += 1 + (name2?.length ?? 0);
+    }
+  }
+  return out;
+}
+function wrapperOf(text, env) {
+  for (const each of text.split("\n")) {
+    const found = /^\s*((?:[A-Za-z_][A-Za-z0-9_]*="(?:[^"\\]|\\.)*"\s+)*)exec\s+"([^"]+)"/.exec(each);
+    if (found === null) continue;
+    const vars = {};
+    for (const set2 of (found[1] ?? "").matchAll(/([A-Za-z_][A-Za-z0-9_]*)="((?:[^"\\]|\\.)*)"/g)) {
+      vars[set2[1] ?? ""] = expand(set2[2] ?? "", env);
+    }
+    return { entry: expand(found[2] ?? "", env), vars };
+  }
+  return void 0;
+}
+var NO_HERMES = "The hermes command isn't on this machine's PATH, so Hermes's gateway can't be started.";
+var messageOf3 = (error62) => error62 instanceof Error ? error62.message : String(error62);
+function gatewayEnv(env) {
+  return Object.fromEntries(Object.entries(env).filter(([name2]) => !name2.startsWith("CHIPS_")));
+}
+var Gateways = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  timing = TIMING;
+  /** Each gateway restarted, one after another: what went wrong, in a line, or nothing. */
+  async restart() {
+    const troubles = [];
+    for (const gateway of this.options.gateways) {
+      let trouble;
+      try {
+        trouble = await this.restartOne(gateway);
+      } catch (error62) {
+        trouble = `Restart failed: ${messageOf3(error62)}`;
+      }
+      if (trouble !== void 0) troubles.push(trouble);
+    }
+    return troubles.length === 0 ? void 0 : line(troubles.join(" "));
+  }
+  /** Each local gateway that doesn't answer, started: the bridge is starting. */
+  async startIfDown() {
+    const { system, log: log2 } = this.options;
+    for (const gateway of this.options.gateways) {
+      if (!isLocal(gateway.url)) continue;
+      const port = portOf(gateway.url);
+      try {
+        if (await system.healthy(gateway.url)) continue;
+        let trouble;
+        if (this.serviceFor(gateway) !== void 0) {
+          log2(`Hermes isn't answering on port ${port}: starting its service, hermes gateway start`);
+          trouble = await this.byService(gateway, "start", void 0);
+        } else {
+          const pid = await system.listener(port);
+          if (pid !== void 0) {
+            log2(`Hermes isn't answering on port ${port}, but pid ${pid} listens there: no second gateway started`);
+            continue;
+          }
+          log2(`Hermes isn't answering on port ${port}: starting hermes gateway run`);
+          trouble = await this.start(gateway, ["gateway", "run"], void 0);
+        }
+        if (trouble !== void 0) log2(trouble);
+      } catch (error62) {
+        log2(`Hermes's gateway on port ${port} couldn't be started: ${messageOf3(error62)}`);
+      }
+    }
+  }
+  /**
+   * The service of Hermes's root, for the Main agent's gateway: a gateway at another address is
+   * another profile's own, which `hermes gateway status` of the root doesn't speak for.
+   */
+  serviceFor(gateway) {
+    if (gateway !== this.options.gateways[0]) return void 0;
+    return serviceOf(this.options.system, this.options.root, this.options.env);
+  }
+  async restartOne(gateway) {
+    const { system, log: log2 } = this.options;
+    if (!isLocal(gateway.url)) {
+      return `Hermes's gateway at ${new URL(gateway.url).host} isn't on this machine, so it can't be restarted from here.`;
+    }
+    const port = portOf(gateway.url);
+    const pid = await system.listener(port);
+    if (this.serviceFor(gateway) !== void 0) {
+      log2("restarting Hermes's service: hermes gateway restart");
+      return this.byService(gateway, "restart", pid);
+    }
+    if (pid === void 0) {
+      if (await system.healthy(gateway.url)) return `Can't tell what answers on port ${port}, so nothing was restarted.`;
+      log2(`nothing listens on port ${port}: starting hermes gateway run`);
+      return this.start(gateway, ["gateway", "run"], void 0);
+    }
+    const info = await system.describe(pid);
+    if (info === void 0) return this.start(gateway, ["gateway", "run"], void 0);
+    const args = this.ours(info);
+    if (args === void 0) {
+      log2(`pid ${pid} on port ${port} isn't this user's hermes gateway run, so it was left alone: ${info.command.slice(0, 160)}`);
+      return `Port ${port} is held by something other than hermes gateway run (pid ${pid}), so nothing was restarted.`;
+    }
+    if (system.which("hermes", this.options.env) === void 0) return NO_HERMES;
+    log2(`stopping Hermes's gateway, pid ${pid}`);
+    if (!await this.stop(pid)) return `Hermes's gateway (pid ${pid}) didn't stop, so it wasn't started again.`;
+    return this.start(gateway, args, info.cwd);
+  }
+  /** A `hermes gateway run` of this user's: the words to start it again with. */
+  ours(info) {
+    return info.uid === this.options.system.uid ? gatewayRunArgs(info.command) : void 0;
+  }
+  /** SIGTERM, then SIGKILL once it has had a while, and only while it is still that gateway. */
+  async stop(pid) {
+    const { system, log: log2 } = this.options;
+    system.signal(pid, "SIGTERM");
+    if (await this.gone(pid, this.timing.stopMs)) return true;
+    const still = await system.describe(pid);
+    if (still === void 0) return true;
+    if (this.ours(still) === void 0) return false;
+    log2(`Hermes's gateway, pid ${pid}, is still running ${this.timing.stopMs / 1e3} s after SIGTERM: SIGKILL`);
+    system.signal(pid, "SIGKILL");
+    return this.gone(pid, this.timing.killMs);
+  }
+  async gone(pid, withinMs) {
+    const { system } = this.options;
+    const by = system.now() + withinMs;
+    while (system.alive(pid)) {
+      if (system.now() >= by) return false;
+      await system.sleep(this.timing.pollMs);
+    }
+    return true;
+  }
+  /** Hermes's own `hermes gateway restart|start`, then the gateway answering, from a new process. */
+  async byService(gateway, verb, before) {
+    const { system, env } = this.options;
+    const hermes = system.which("hermes", env);
+    if (hermes === void 0) return NO_HERMES;
+    const scope = this.serviceFor(gateway)?.system === true ? ["--system"] : [];
+    const ran = await system.run(hermes, ["gateway", verb, ...scope], gatewayEnv(env), this.timing.serviceMs);
+    if (ran.code !== 0) return line(`hermes gateway ${verb} failed: ${whyFrom(ran.output, ran.code)}`);
+    const by = system.now() + this.timing.serviceMs;
+    for (; ; ) {
+      const old = before !== void 0 && system.alive(before);
+      if (!old && await system.healthy(gateway.url)) return void 0;
+      if (system.now() >= by) {
+        if (await system.healthy(gateway.url)) return void 0;
+        return `Hermes's service ${verb === "start" ? "started" : "restarted"}, but nothing answers on port ${portOf(gateway.url)}.`;
+      }
+      await system.sleep(this.timing.pollMs);
+    }
+  }
+  /**
+   * `hermes <args>` (`gateway run`), on its own, in `cwd` (else the home), then through Homebrew's
+   * expat when it died of macOS's.
+   */
+  async start(gateway, args, cwd) {
+    const { system, env, log: log2 } = this.options;
+    const port = portOf(gateway.url);
+    const hermes = system.which("hermes", env);
+    if (hermes === void 0) return NO_HERMES;
+    const folder2 = cwd ?? system.home;
+    const plain = gatewayEnv(env);
+    let outcome = await this.launch(gateway, hermes, args, plain, folder2, `hermes ${args.join(" ")}`);
+    if (outcome.state === "ended" && outcome.early && outcome.output.includes(EXPAT_SYMBOL) && system.exists(EXPAT)) {
+      const wrapper = wrapperOf(system.read(hermes) ?? "", plain);
+      if (wrapper !== void 0) {
+        const expat = dirname5(EXPAT);
+        log2(
+          `hermes gateway run stopped at once: Homebrew's Python can't load macOS's expat (${EXPAT_SYMBOL}). Starting ${wrapper.entry} directly with DYLD_LIBRARY_PATH=${expat}.`
+        );
+        const libraries = [expat, plain["DYLD_LIBRARY_PATH"]].filter((each) => each !== void 0 && each !== "").join(":");
+        outcome = await this.launch(
+          gateway,
+          wrapper.entry,
+          args,
+          { ...plain, ...wrapper.vars, DYLD_LIBRARY_PATH: libraries },
+          folder2,
+          `${wrapper.entry} ${args.join(" ")} with DYLD_LIBRARY_PATH=${expat}`
+        );
+      }
+    }
+    if (outcome.state === "up") {
+      log2(`Hermes's gateway${outcome.pid === void 0 ? "" : `, pid ${outcome.pid},`} answers on port ${port}. It logs to ${this.options.logFile}.`);
+      return void 0;
+    }
+    if (outcome.state === "silent") return `Hermes's gateway started, but nothing answers on port ${port}.`;
+    return line(`Hermes's gateway stopped as it started: ${whyFrom(outcome.output, outcome.code)}`);
+  }
+  /** A program started, and watched until it answers, ends, or has had its time. */
+  async launch(gateway, command, args, env, cwd, what) {
+    const { system, logFile } = this.options;
+    system.note(logFile, `--- ${new Date(system.now()).toISOString()} chips-hermes started ${what}`);
+    const from = system.size(logFile);
+    const startedAt = system.now();
+    const child = system.launch({ command, args, env, cwd, log: logFile });
+    let ended;
+    void child.exited.then(({ code }) => {
+      ended = { code, at: system.now() };
+    });
+    for (; ; ) {
+      await Promise.resolve();
+      if (ended !== void 0) {
+        return { state: "ended", early: ended.at - startedAt <= this.timing.earlyMs, output: system.since(logFile, from), code: ended.code };
+      }
+      if (await system.healthy(gateway.url)) return { state: "up", pid: child.pid };
+      if (system.now() - startedAt >= this.timing.upMs) return { state: "silent" };
+      await system.sleep(this.timing.pollMs);
+    }
+  }
+};
+function restarter(deps) {
+  let running;
+  return (ask2) => {
+    if (running !== void 0) {
+      deps.log(`restart asked by ${ask2.askedBy} while one runs: it is the same restart`);
+      return running;
+    }
+    running = (async () => {
+      deps.log(`restart asked by ${ask2.askedBy}: restarting Hermes's gateway`);
+      deps.hold(true);
+      let trouble;
+      try {
+        trouble = await deps.restart();
+      } catch (error62) {
+        trouble = line(`Restart failed: ${error62 instanceof Error ? error62.message : String(error62)}`);
+      }
+      deps.log(trouble === void 0 ? "restarted, and Hermes answers" : `restart: ${trouble}`);
+      try {
+        await deps.say(trouble);
+      } catch (error62) {
+        deps.log(`could not tell Chips how the restart went: ${String(error62)}`);
+      } finally {
+        deps.hold(false);
+      }
+    })().finally(() => {
+      running = void 0;
+    });
+    return running;
+  };
+}
+function gatewayLog(configFolder, platform = process.platform) {
+  return platform === "darwin" ? join9(homedir5(), "Library", "Logs", "chips-hermes-gateway.log") : join9(configFolder, "gateway.log");
+}
+function runToEnd(command, args, options) {
+  return new Promise((done) => {
+    const child = spawn2(command, args, { env: options.env, stdio: ["ignore", "pipe", "pipe"] });
+    let output2 = "";
+    const keep = (data) => {
+      output2 = (output2 + String(data)).slice(-8e3);
+    };
+    child.stdout.on("data", keep);
+    child.stderr.on("data", keep);
+    const limit = setTimeout(() => child.kill("SIGTERM"), options.timeoutMs);
+    child.on("error", (error62) => {
+      clearTimeout(limit);
+      done({ code: null, output: error62.message });
+    });
+    child.on("close", (code) => {
+      clearTimeout(limit);
+      done({ code, output: output2 });
+    });
+  });
+}
+function thisMachine() {
+  return {
+    platform: process.platform,
+    uid: process.getuid?.() ?? -1,
+    home: homedir5(),
+    exists: existsSync8,
+    read(path) {
+      try {
+        return readFileSync8(path, "utf8");
+      } catch {
+        return void 0;
+      }
+    },
+    which(command, env) {
+      for (const folder2 of (env["PATH"] ?? "").split(delimiter2)) {
+        if (folder2 === "") continue;
+        const path = join9(folder2, command);
+        try {
+          accessSync2(path, constants2.X_OK);
+          return path;
+        } catch {
+        }
+      }
+      return void 0;
+    },
+    async listener(port) {
+      const { output: output2 } = await runToEnd("lsof", ["-nP", `-iTCP:${port}`, "-sTCP:LISTEN", "-Fp"], { timeoutMs: 5e3 });
+      const pid = Number(/^p(\d+)$/m.exec(output2)?.[1]);
+      return Number.isInteger(pid) && pid > 0 ? pid : void 0;
+    },
+    async describe(pid) {
+      const { code, output: output2 } = await runToEnd("ps", ["-ww", "-o", "uid=", "-o", "command=", "-p", String(pid)], { timeoutMs: 5e3 });
+      const found = /^\s*(\d+)\s+(.*)$/m.exec(output2);
+      if (code !== 0 || found === null) return void 0;
+      return { uid: Number(found[1]), command: found[2] ?? "", cwd: processFolder(pid) };
+    },
+    alive(pid) {
+      try {
+        process.kill(pid, 0);
+        return true;
+      } catch (error62) {
+        return error62.code === "EPERM";
+      }
+    },
+    signal(pid, signal) {
+      try {
+        process.kill(pid, signal);
+      } catch {
+      }
+    },
+    run: (command, args, env, timeoutMs) => runToEnd(command, args, { env, timeoutMs }),
+    launch({ command, args, env, cwd, log: log2 }) {
+      const out = openSync2(log2, "a");
+      try {
+        const child = spawn2(command, args, { cwd, env, detached: true, stdio: ["ignore", out, out] });
+        const exited = new Promise((done) => {
+          child.once("exit", (code, signal) => done({ code, signal }));
+          child.once("error", (error62) => {
+            appendFileSync2(log2, `${error62.message}
+`);
+            done({ code: null, signal: null });
+          });
+        });
+        child.unref();
+        return { pid: child.pid, exited };
+      } finally {
+        closeSync2(out);
+      }
+    },
+    note(log2, words4) {
+      appendFileSync2(log2, `${words4}
+`);
+    },
+    size(log2) {
+      try {
+        return statSync4(log2).size;
+      } catch {
+        return 0;
+      }
+    },
+    since(log2, from) {
+      try {
+        const to = statSync4(log2).size;
+        const start = Math.max(from, to - 64e3);
+        const buffer = Buffer.alloc(Math.max(0, to - start));
+        const fd = openSync2(log2, "r");
+        try {
+          readSync(fd, buffer, 0, buffer.length, start);
+        } finally {
+          closeSync2(fd);
+        }
+        return buffer.toString("utf8");
+      } catch {
+        return "";
+      }
+    },
+    healthy: (url2) => new HermesClient({ url: url2, key: "" }, (input2, init) => fetch(input2, { ...init, signal: AbortSignal.timeout(5e3) })).healthy(),
+    sleep: (ms) => new Promise((done) => setTimeout(done, ms)),
+    now: () => Date.now()
+  };
+}
+
 // src/keep.ts
-import { homedir as homedir4 } from "node:os";
-import { basename as basename3, join as join6, resolve as resolve2 } from "node:path";
+import { homedir as homedir6 } from "node:os";
+import { basename as basename5, join as join10, resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var flags = process.argv.slice(2);
 var words3 = flags.filter((word) => !word.startsWith("--"));
-var whole = (word) => resolve2(word.startsWith("~/") ? join6(homedir4(), word.slice(2)) : word);
+var whole = (word) => resolve4(word.startsWith("~/") ? join10(homedir6(), word.slice(2)) : word);
 var here = fileURLToPath2(new URL("..", import.meta.url)).replace(/\/$/, "");
 var self = fileURLToPath2(import.meta.url);
 var run = self.endsWith(".js") ? [self] : ["--import", "tsx", "src/main.ts"];
-var again = process.env["npm_lifecycle_event"] === "keep" ? "npm run keep --" : basename3(process.argv[1] ?? "chips");
+var again = process.env["npm_lifecycle_event"] === "keep" ? "npm run keep --" : basename5(process.argv[1] ?? "chips");
 var stopLine = process.env["CHIPS_STOP_COMMAND"] || [again, ...words3, "--stop"].join(" ");
-var end = (line, code) => {
-  (code === 0 ? process.stdout : process.stderr).write(`${line}
+var end = (line2, code) => {
+  (code === 0 ? process.stdout : process.stderr).write(`${line2}
 `);
   process.exit(code);
 };
@@ -26464,9 +28117,9 @@ function keepIfAsked(label2, url2, names, log2, before = () => void 0) {
 }
 
 // src/setup.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
-import { resolve as resolve3 } from "node:path";
+import { existsSync as existsSync9, readFileSync as readFileSync9 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join11, resolve as resolve5 } from "node:path";
 var SetupError = class extends Error {
   constructor(message, words4 = {}) {
     super(message);
@@ -26475,37 +28128,70 @@ var SetupError = class extends Error {
   words;
   name = "SetupError";
 };
-var shown = (path) => path.startsWith(`${homedir5()}/`) ? `~${path.slice(homedir5().length)}` : path;
-var portOf = (url2) => {
+var shown = (path) => path.startsWith(`${homedir7()}/`) ? `~${path.slice(homedir7().length)}` : path;
+var portOf2 = (url2) => {
   const parsed = new URL(url2);
   return parsed.port || (parsed.protocol === "https:" ? "443" : "80");
 };
-function checkedWords(config3) {
+function checkedWords(config3, restart2 = false) {
   const urls = new Set(config3.agents.map((agent) => agent.address.url));
   const [url2] = urls;
-  return urls.size === 1 && url2 !== void 0 ? `Its API server answers on port ${portOf(url2)}` : `Its API server answers for each of ${config3.agents.length} agents`;
+  const found = urls.size === 1 && url2 !== void 0 ? `Its API server answers on port ${portOf2(url2)}` : `Its API server answers for each of ${config3.agents.length} agents`;
+  return restart2 ? `${found}. ${RESTART}` : found;
+}
+var RESTART = "Start hermes gateway again once, so it tells Chips how full each agent's context is.";
+function readyHooks(config3, options) {
+  const lines2 = [];
+  let restart2 = false;
+  const done = /* @__PURE__ */ new Set();
+  for (const agent of config3.agents) {
+    const profile = profileName(agent.address.profile);
+    if (done.has(profile)) continue;
+    done.add(profile);
+    const home2 = profileHome(options.root, agent.address.profile);
+    let outcome;
+    try {
+      outcome = addHook(home2, options.port, profile, options.secret);
+    } catch (error62) {
+      lines2.push(`Chips's webhook wasn't added to ${shown(join11(home2, "config.yaml"))}: ${error62 instanceof Error ? error62.message : String(error62)}`);
+      continue;
+    }
+    if (outcome.state === "added") {
+      lines2.push(`Added Chips's webhook to ${shown(outcome.path)}, so Hermes tells Chips how full each agent's context is.`);
+      restart2 ||= options.gatewayUp;
+    } else if (outcome.state === "by_hand") {
+      lines2.push(
+        `${shown(outcome.path)} was left as it is: ${outcome.why}. For Chips to show how full each agent's context is, add these lines to it, then start hermes gateway again:
+${outcome.lines}`
+      );
+    } else if (outcome.state === "no_home") {
+      lines2.push(`Hermes has no ${profile} profile at ${shown(home2)}, so no webhook was added for it.`);
+    }
+  }
+  if (restart2) lines2.push(RESTART);
+  return { lines: lines2, restart: restart2 };
 }
 var STILL_GOOD = "The link is still good: run the same command again once that's done.";
 var EXAMPLE = '{ "agents": [{ "name": "Hermes", "profile": "default", "keyEnv": "API_SERVER_KEY" }] }';
 var PLAIN = { agents: [{ name: "Hermes", profile: "default", keyEnv: "API_SERVER_KEY" }] };
 function hermesEnvPath(env = process.env) {
-  return resolve3(env["HERMES_HOME"] ?? resolve3(homedir5(), ".hermes"), ".env");
+  return resolve5(env["HERMES_HOME"] ?? resolve5(homedir7(), ".hermes"), ".env");
 }
 function fromHermes(name2, env) {
   const path = hermesEnvPath(env);
-  if (!existsSync5(path)) return void 0;
-  for (const line of readFileSync5(path, "utf8").split("\n")) {
-    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line);
+  if (!existsSync9(path)) return void 0;
+  for (const line2 of readFileSync9(path, "utf8").split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line2);
     if (match?.[1] === name2) return match[2]?.replace(/^(["'])(.*)\1$/, "$2");
   }
   return void 0;
 }
-function folderOf(said) {
-  if (typeof said !== "string" || said === "") return void 0;
-  return resolve3(said === "~" || said.startsWith("~/") ? homedir5() + said.slice(1) : said);
+function folderOf(said2) {
+  if (typeof said2 !== "string" || said2 === "") return void 0;
+  return resolve5(said2 === "~" || said2.startsWith("~/") ? homedir7() + said2.slice(1) : said2);
 }
 function readConfig(path, env = process.env) {
-  const raw = existsSync5(path) ? JSON.parse(readFileSync5(path, "utf8")) : PLAIN;
+  const raw = existsSync9(path) ? JSON.parse(readFileSync9(path, "utf8")) : PLAIN;
   const url2 = typeof raw.url === "string" ? raw.url : "http://127.0.0.1:8642";
   const folder2 = folderOf(raw.folder);
   if (!Array.isArray(raw.agents) || raw.agents.length === 0) {
@@ -26540,10 +28226,12 @@ function readConfig(path, env = process.env) {
       ...own2 === void 0 ? {} : { folder: own2 }
     };
   });
+  const hookPort = raw.hookPort;
   return {
     ...typeof raw.name === "string" ? { name: raw.name } : {},
     agents,
-    folders: folderOf(raw.folders) ?? resolve3(homedir5(), "chips-hermes", "agents")
+    folders: folderOf(raw.folders) ?? resolve5(homedir7(), "chips-hermes", "agents"),
+    ...typeof hookPort === "number" && Number.isInteger(hookPort) && hookPort > 0 && hookPort < 65536 ? { hookPort } : {}
   };
 }
 async function checkHermes(config3, clientFor = (agent) => new HermesClient(agent.address)) {
@@ -26553,7 +28241,7 @@ async function checkHermes(config3, clientFor = (agent) => new HermesClient(agen
       throw new SetupError(
         `Hermes isn't answering for ${agent.name} at ${agent.address.url}: start its API server (API_SERVER_ENABLED=true, then hermes gateway). ${STILL_GOOD}`,
         {
-          detail: `Nothing answers on port ${portOf(agent.address.url)}`,
+          detail: `Nothing answers on port ${portOf2(agent.address.url)}`,
           says: "Hermes's API server is off.",
           doing: `Add this line to ${shown(hermesEnvPath())}, then start Hermes with hermes gateway.`,
           copy: "API_SERVER_ENABLED=true"
@@ -26574,19 +28262,46 @@ async function checkHermes(config3, clientFor = (agent) => new HermesClient(agen
 }
 
 // src/main.ts
-var home = (path) => path.startsWith("~/") ? join7(homedir6(), path.slice(2)) : path;
+var home = (path) => path.startsWith("~/") ? join12(homedir8(), path.slice(2)) : path;
 var link = process.env["CHIPS_JOIN_LINK"] || void 0;
 var LABEL = "chat.chips.hermes";
 stopIfAsked(LABEL);
-var configPath = resolve4(home(words3[0] ?? "~/.chips-hermes/config.json"));
+var configPath = resolve6(home(words3[0] ?? "~/.chips-hermes/config.json"));
+var folder = dirname6(configPath);
+var statePath = join12(folder, "sessions.json");
+var state = existsSync10(statePath) ? JSON.parse(readFileSync10(statePath, "utf8")) : { sessions: {} };
+var saveState = (next) => {
+  mkdirSync6(folder, { recursive: true, mode: 448 });
+  writeFileSync5(statePath, `${JSON.stringify(next, null, 2)}
+`, { mode: 384 });
+};
+var log = (line2) => process.stdout.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${line2}
+`);
+var freePort = () => new Promise((done, failed) => {
+  const server = createServer2();
+  server.once("error", failed);
+  server.listen(0, "127.0.0.1", () => {
+    const address = server.address();
+    server.close(() => done(typeof address === "object" && address !== null ? address.port : 0));
+  });
+});
 var config2;
+var root = hermesRoot();
+var fills = state.fills ??= {};
 try {
   config2 = readConfig(configPath);
   if (link !== void 0) {
     reportStep("checking", { detail: "Looking for its API server" });
     await checkHermes(config2);
-    reportStep("checked", { detail: checkedWords(config2) });
   }
+  fills.secret ??= randomBytes2(32).toString("hex");
+  fills.port = config2.hookPort ?? fills.port ?? hookPortIn(profileHome(root, config2.agents[0]?.address.profile)) ?? await freePort();
+  saveState(state);
+  const first = config2.agents[0];
+  const gatewayUp = link !== void 0 || first !== void 0 && await new HermesClient(first.address).healthy();
+  const hooks = readyHooks(config2, { root, port: fills.port, secret: fills.secret, gatewayUp });
+  for (const line2 of hooks.lines) log(line2);
+  if (link !== void 0) reportStep("checked", { detail: checkedWords(config2, hooks.restart) });
 } catch (error62) {
   if (!(error62 instanceof SetupError)) throw error62;
   reportStep("failed", error62.words);
@@ -26595,10 +28310,15 @@ try {
   process.exit(1);
 }
 var name = config2.name ?? "Hermes";
-var folder = dirname4(configPath);
-var statePath = join7(folder, "sessions.json");
-var log = (line) => process.stdout.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${line}
-`);
+var gateways2 = new Gateways({
+  gateways: gatewaysOf(config2.agents),
+  root,
+  env: process.env,
+  system: thisMachine(),
+  log: (line2) => log(`gateway: ${line2}`),
+  logFile: gatewayLog(folder)
+});
+if (link === void 0) await gateways2.startIfDown();
 var refused2 = (error62) => {
   if (!(error62 instanceof JoinError)) throw error62;
   process.stderr.write(`${error62.message}
@@ -26614,25 +28334,37 @@ var joined = await join3({
   onCode: (code) => log(`Allow this harness in Chips: ${code}`)
 }).catch(refused2);
 keepIfAsked(LABEL, joined.url, ["HERMES_HOME", ...config2.agents.map((agent) => agent.keyEnv ?? "API_SERVER_KEY")], log);
-var state = existsSync6(statePath) ? JSON.parse(readFileSync6(statePath, "utf8")) : { sessions: {} };
+var bridge;
+var restart = restarter({
+  restart: () => gateways2.restart(),
+  hold: (held) => bridge?.hold(held),
+  say: async (trouble) => {
+    if (bridge !== void 0) return bridge.restarted(trouble);
+    await (trouble === void 0 ? chips.reportOk() : chips.reportTrouble(trouble));
+  },
+  log: (line2) => log(`gateway: ${line2}`)
+});
 var chips = await connect({
   url: joined.url,
   token: joined.token,
   client: { name: "chips-hermes", version: "1.0.0" },
-  store: fileStore(join7(folder, "chips-state.json"))
+  store: fileStore(join12(folder, "chips-state.json")),
+  onRestart: restart,
+  settings: settingsFor(() => bridge)
 });
 var git = await checkGit();
 if (!git.ok) log(`rooms' projects are off: ${git.why}`);
-var bridge = new Bridge({
+bridge = new Bridge({
   folders: config2.folders,
   projects: git.ok,
   chips,
   agents: config2.agents,
   home: joined.spaceId,
   state,
-  saveState: (next) => writeFileSync4(statePath, `${JSON.stringify(next, null, 2)}
-`, { mode: 384 }),
-  log
+  saveState,
+  log,
+  hermesRoot: root,
+  fills: { port: fills.port, secret: fills.secret }
 });
 await bridge.start();
 log(`answering for ${config2.agents.map((agent) => agent.name).join(", ")} through Hermes`);
@@ -26646,7 +28378,7 @@ await helloOnce(joined, {
 }).catch((error62) => log(`hello not said: ${String(error62)}`));
 for (const signal of ["SIGINT", "SIGTERM"]) {
   process.on(signal, () => {
-    bridge.stop();
+    bridge?.stop();
     chips.close();
     process.exit(0);
   });