@chipschat/hermes 1.0.5 → 1.0.7

package/dist/main.js

@@ -9,10 +9,10 @@ var __export = (target, all) => {
 
 // src/main.ts
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
 import { createServer as createServer2 } from "node:net";
-import { homedir as homedir7 } from "node:os";
-import { dirname as dirname5, join as join11, resolve as resolve5 } from "node:path";
+import { homedir as homedir8 } from "node:os";
+import { dirname as dirname6, join as join12, resolve as resolve6 } from "node:path";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -2024,8 +2024,8 @@ function emoji() {
 }
 var ipv4 = /^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/;
 var ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/;
-var mac = (delimiter2) => {
-  const escapedDelim = escapeRegex(delimiter2 ?? ":");
+var mac = (delimiter3) => {
+  const escapedDelim = escapeRegex(delimiter3 ?? ":");
   return new RegExp(`^(?:[0-9A-F]{2}${escapedDelim}){5}[0-9A-F]{2}$|^(?:[0-9a-f]{2}${escapedDelim}){5}[0-9a-f]{2}$`);
 };
 var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
@@ -2599,8 +2599,8 @@ var Doc = class {
     const lines2 = content.split("\n").filter((x) => x);
     const minIndent = Math.min(...lines2.map((x) => x.length - x.trimStart().length));
     const dedented = lines2.map((x) => x.slice(minIndent)).map((x) => " ".repeat(this.indent * 2) + x);
-    for (const line of dedented) {
-      this.content.push(line);
+    for (const line2 of dedented) {
+      this.content.push(line2);
     }
   }
   compile() {
@@ -5081,7 +5081,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve6) {
+function isRecursive(inst, stack, resolve7) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -5091,7 +5091,7 @@ function isRecursive(inst, stack, resolve6) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve6);
+      const answer = isRecursive(child, stack, resolve7);
       if (answer > result)
         result = answer;
     }
@@ -5102,7 +5102,7 @@ function isRecursive(inst, stack, resolve6) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve6) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve7) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -5166,7 +5166,7 @@ function isRecursive(inst, stack, resolve6) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve6 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve7 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -20535,31 +20535,31 @@ function withRole(name2, from) {
 function flat(text) {
   return text.replace(/\s*\n\s*/g, " ").trim();
 }
-function wordsOf(line) {
-  const text = flat(line.text ?? "");
-  const heard = line.transcript === void 0 ? "" : flat(line.transcript);
+function wordsOf(line2) {
+  const text = flat(line2.text ?? "");
+  const heard = line2.transcript === void 0 ? "" : flat(line2.transcript);
   const parts = [text];
   if (heard !== "")
     parts.push(text === "" ? `(voice note) ${heard}` : `(voice note: ${heard})`);
-  if (heard === "" && line.files !== void 0)
-    parts.push(`(sent ${line.files.join(", ")})`);
-  if (line.held === true)
+  if (heard === "" && line2.files !== void 0)
+    parts.push(`(sent ${line2.files.join(", ")})`);
+  if (line2.held === true)
     parts.push("(held by Chips until a person acts)");
   return parts.filter((part) => part !== "").join(" ");
 }
-function renderLine(line) {
-  const name2 = line.from.name;
-  switch (line.kind) {
+function renderLine(line2) {
+  const name2 = line2.from.name;
+  switch (line2.kind) {
     case "said":
-      return `${withRole(name2, line.from)}: ${wordsOf(line)}`;
+      return `${withRole(name2, line2.from)}: ${wordsOf(line2)}`;
     case "joined":
       return `(${name2} joined the space)`;
     case "left":
       return `(${name2} left the space)`;
     case "renamed":
-      if (line.title !== void 0)
-        return `(${name2} renamed the space "${line.title}")`;
-      return `(${line.previous ?? name2} is now called ${line.name ?? name2})`;
+      if (line2.title !== void 0)
+        return `(${name2} renamed the space "${line2.title}")`;
+      return `(${line2.previous ?? name2} is now called ${line2.name ?? name2})`;
     case "archived":
       return `(${name2} archived the space)`;
     default:
@@ -20610,7 +20610,7 @@ function quoteLines(replying) {
       body.push(`(sent ${replying.files.join(", ")})`);
     }
   }
-  return body.map((line) => line === "" ? ">" : `> ${line}`);
+  return body.map((line2) => line2 === "" ? ">" : `> ${line2}`);
 }
 var DAY_MS = 864e5;
 function saidWhen(at, reading) {
@@ -22517,7 +22517,7 @@ var AGENT_FIRST_NAMES = [
   "Xander Xavi Xavier",
   "Yann Yaro Yosef Yuri Yusuf Yves",
   "Zaid Zane Zeke Zeno Zev Ziggy"
-].flatMap((line) => line.split(" "));
+].flatMap((line2) => line2.split(" "));
 
 // node_modules/@chipschat/protocol/dist/src/frames.js
 var clientHelloFrame = external_exports.object({
@@ -22846,8 +22846,8 @@ function createOutbox() {
   const waiting = /* @__PURE__ */ new Map();
   return {
     add(key, event) {
-      return new Promise((resolve6, reject) => {
-        waiting.set(key, { event, resolve: resolve6, reject });
+      return new Promise((resolve7, reject) => {
+        waiting.set(key, { event, resolve: resolve7, reject });
       });
     },
     unanswered: () => [...waiting.values()].map((entry) => entry.event),
@@ -22923,7 +22923,7 @@ async function inPieces(call, path, bytes) {
 async function afterLoss(error62, failures) {
   if (error62 instanceof RefusedError || failures >= PIECE_TRIES)
     throw error62;
-  await new Promise((resolve6) => setTimeout(resolve6, 250 * failures));
+  await new Promise((resolve7) => setTimeout(resolve7, 250 * failures));
 }
 function sendPiece(call, path, bytes, offset) {
   const piece = bytes.subarray(offset, Math.min(offset + PIECE_BYTES, bytes.byteLength));
@@ -22949,16 +22949,16 @@ var TRIES = 4;
 var MARKS = /^(<<<<<<<|>>>>>>>) /m;
 var REJECTED = /\[rejected\]|fetch first|non-fast-forward/;
 var OWN_CONFIG = /^(core\.(repositoryformatversion|filemode|bare|logallrefupdates|ignorecase|precomposeunicode|symlinks)|remote\.origin\.(url|fetch)|branch\..+\.(remote|merge)|user\.(name|email))$/;
-var lines = (said2) => said2.split("\n").filter((line) => line !== "");
+var lines = (said2) => said2.split("\n").filter((line2) => line2 !== "");
 var unique = (names) => [...new Set(names)];
 function subjectOf(words4) {
-  const first = words4.split("\n").find((line) => line.trim() !== "")?.trim() ?? "";
+  const first = words4.split("\n").find((line2) => line2.trim() !== "")?.trim() ?? "";
   if (first === "")
     return "A change to the project";
   return first.length <= 72 ? first : `${first.slice(0, 71)}\u2026`;
 }
 function remoteWords(err) {
-  const said2 = lines(err).filter((line) => line.startsWith("remote: ")).map((line) => line.slice("remote: ".length).trim()).filter((line) => line !== "" && !/^error: hook declined/.test(line));
+  const said2 = lines(err).filter((line2) => line2.startsWith("remote: ")).map((line2) => line2.slice("remote: ".length).trim()).filter((line2) => line2 !== "" && !/^error: hook declined/.test(line2));
   return said2.length > 0 ? said2.join(" ") : lines(err)[0] ?? "git said nothing";
 }
 function versionIn(said2) {
@@ -23007,13 +23007,13 @@ function heldNote(pushed, name2) {
 }
 async function checkGit(git2 = "git", path = process.env["PATH"] ?? "/usr/bin:/bin") {
   const [major, minor] = versionIn(PROJECT_GIT_VERSION) ?? [0, 0];
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     execFile(git2, ["--version"], { env: { PATH: path } }, (error62, stdout) => {
       if (error62 !== null)
-        return resolve6({ ok: false, why: "git was not found on this machine" });
+        return resolve7({ ok: false, why: "git was not found on this machine" });
       const mine = versionIn(stdout);
       const enough = mine !== void 0 && (mine[0] > major || mine[0] === major && mine[1] >= minor);
-      resolve6(enough ? { ok: true, version: mine.join(".") } : { ok: false, why: `${stdout.trim()} is older than ${PROJECT_GIT_VERSION}` });
+      resolve7(enough ? { ok: true, version: mine.join(".") } : { ok: false, why: `${stdout.trim()} is older than ${PROJECT_GIT_VERSION}` });
     });
   });
 }
@@ -23142,8 +23142,8 @@ var Project = class {
   async standing(remote) {
     const mine = await this.head("HEAD");
     const base = await this.baseOf(mine, remote);
-    const counted = lines((await this.git(["diff", "--numstat", "--no-renames", "-z", base])).out.replace(/\0/g, "\n")).map((line) => {
-      const [added2 = "0", removed = "0", ...path] = line.split("	");
+    const counted = lines((await this.git(["diff", "--numstat", "--no-renames", "-z", base])).out.replace(/\0/g, "\n")).map((line2) => {
+      const [added2 = "0", removed = "0", ...path] = line2.split("	");
       return { path: path.join("	"), added: Number(added2) || 0, removed: Number(removed) || 0 };
     });
     const added = lines((await this.git(["ls-files", "--others", "--exclude-standard", "-z"])).out.replace(/\0/g, "\n"));
@@ -23189,8 +23189,8 @@ var Project = class {
   async markedLines(path) {
     try {
       const all = (await readFile(join(this.copy, path), "utf8")).split("\n");
-      const start = all.findIndex((line) => line.startsWith("<<<<<<< "));
-      const end2 = all.findIndex((line, at) => at > start && line.startsWith(">>>>>>> "));
+      const start = all.findIndex((line2) => line2.startsWith("<<<<<<< "));
+      const end2 = all.findIndex((line2, at) => at > start && line2.startsWith(">>>>>>> "));
       if (start < 0 || end2 < 0)
         return void 0;
       const shown2 = all.slice(Math.max(0, start - 1), end2 + 2);
@@ -23459,8 +23459,8 @@ ${sent.err}`;
       env[`GIT_CONFIG_KEY_${at}`] = key;
       env[`GIT_CONFIG_VALUE_${at}`] = value;
     });
-    return new Promise((resolve6) => {
-      execFile(options.git ?? "git", [...args], { cwd: this.copy, env, maxBuffer: 64 * 1024 * 1024 }, (error62, stdout, stderr) => resolve6({ ok: error62 === null, out: stdout, err: stderr }));
+    return new Promise((resolve7) => {
+      execFile(options.git ?? "git", [...args], { cwd: this.copy, env, maxBuffer: 64 * 1024 * 1024 }, (error62, stdout, stderr) => resolve7({ ok: error62 === null, out: stdout, err: stderr }));
     });
   }
 };
@@ -23483,8 +23483,8 @@ var Lane = class {
   constructor(id2, wire) {
     this.id = id2;
     this.wire = wire;
-    this.result = new Promise((resolve6) => {
-      this.settle = resolve6;
+    this.result = new Promise((resolve7) => {
+      this.settle = resolve7;
     });
     this.stop = wire.hear(id2, (event) => this.onUpdated(event));
   }
@@ -23627,7 +23627,7 @@ var Run = class {
   /** Resolve once the run is not paused. A stopped run resolves too: check `over` after. */
   async whenRunning() {
     while (this.held && !this.ended) {
-      await new Promise((resolve6) => setTimeout(resolve6, 50));
+      await new Promise((resolve7) => setTimeout(resolve7, 50));
     }
   }
   status(input2) {
@@ -24411,8 +24411,8 @@ var Chips = class _Chips {
   }
   /** Resolve with the first event that matches, now or later. */
   waitFor(match) {
-    return new Promise((resolve6) => {
-      this.waiters.add({ match, resolve: resolve6 });
+    return new Promise((resolve7) => {
+      this.waiters.add({ match, resolve: resolve7 });
     });
   }
   close() {
@@ -24439,7 +24439,7 @@ var Chips = class _Chips {
     return `${base}/v1/ws?ticket=${encodeURIComponent(String(ticket))}`;
   }
   open(first) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       this.setState("connecting");
       const failed = (what, error62) => {
         if (first)
@@ -24457,13 +24457,13 @@ var Chips = class _Chips {
         }
         this.socket = socket;
         this.listen(socket, {
-          settled: (hello2) => this.settled(socket, hello2, first, resolve6, reject)
+          settled: (hello2) => this.settled(socket, hello2, first, resolve7, reject)
         });
       }, (error62) => failed("could not get a socket ticket", error62));
     });
   }
   /** The handshake's outcome: the hello, a refusal, or the socket gone before either. */
-  settled(socket, hello2, first, resolve6, reject) {
+  settled(socket, hello2, first, resolve7, reject) {
     if (hello2 === void 0) {
       if (first)
         reject(new ConnectError("the server closed the socket before saying hello"));
@@ -24477,7 +24477,7 @@ var Chips = class _Chips {
       return;
     }
     this.onHello(socket, hello2);
-    void this.subscribed(socket).then(resolve6);
+    void this.subscribed(socket).then(resolve7);
   }
   /** The socket's four events. `settled` fires once: with the hello, a refusal, or nothing. */
   listen(socket, on) {
@@ -24572,15 +24572,15 @@ var Chips = class _Chips {
   subscribed(socket) {
     this.pings += 1;
     const ts = Date.now() + this.pings;
-    return new Promise((resolve6) => {
+    return new Promise((resolve7) => {
       const timer = setTimeout(() => {
         this.pongs.delete(ts);
-        resolve6();
+        resolve7();
       }, 2e3);
       this.pongs.set(ts, () => {
         clearTimeout(timer);
         this.pongs.delete(ts);
-        resolve6();
+        resolve7();
       });
       socket.send(JSON.stringify({ frame: "ping", ts }));
     });
@@ -24963,7 +24963,7 @@ function openKeyStore(env, platform = process.platform) {
 // node_modules/@chipschat/harness/dist/steps.js
 import { writeSync } from "node:fs";
 var STEP_MARK = "chips-step ";
-function reportStep(step, detail = {}, env = process.env, write = (line) => void writeSync(1, line)) {
+function reportStep(step, detail = {}, env = process.env, write = (line2) => void writeSync(1, line2)) {
   if (env["CHIPS_STEPS"] !== "json")
     return;
   try {
@@ -25044,8 +25044,8 @@ async function refused(response) {
   const body = await response.json().catch(() => ({}));
   return new JoinError(body.error?.refusal ?? body.error?.code ?? `http_${response.status}`, body.error?.message ?? `Chips answered ${response.status}.`);
 }
-var wait = (ms, signal) => new Promise((resolve6, reject) => {
-  const timer = setTimeout(resolve6, ms);
+var wait = (ms, signal) => new Promise((resolve7, reject) => {
+  const timer = setTimeout(resolve7, ms);
   signal?.addEventListener("abort", () => {
     clearTimeout(timer);
     reject(new JoinError("stopped", "Stopped before a person decided."));
@@ -25169,8 +25169,8 @@ var MOST_FILES = 20;
 var MOST_FILE_BYTES = 100 * 1024 * 1024;
 function filesNamedIn(answer) {
   const named = [];
-  const kept = answer.split("\n").filter((line) => {
-    const media = /^\s*MEDIA:\s*(\S.*?)\s*$/.exec(line);
+  const kept = answer.split("\n").filter((line2) => {
+    const media = /^\s*MEDIA:\s*(\S.*?)\s*$/.exec(line2);
     if (media?.[1] === void 0)
       return true;
     if (!named.includes(media[1]))
@@ -25596,8 +25596,8 @@ function envValue(home2, name2) {
   const path = join5(home2, ".env");
   if (!existsSync5(path)) return void 0;
   let found;
-  for (const line of readFileSync5(path, "utf8").split("\n")) {
-    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line);
+  for (const line2 of readFileSync5(path, "utf8").split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line2);
     if (match?.[1] !== name2) continue;
     const raw = match[2] ?? "";
     const quoted2 = /^(["'])(.*)\1/.exec(raw);
@@ -25613,20 +25613,20 @@ function configText(home2) {
     return "";
   }
 }
-function uncommented(line) {
-  const indent = line.length - line.trimStart().length;
+function uncommented(line2) {
+  const indent = line2.length - line2.trimStart().length;
   let quote;
-  for (let at = indent; at < line.length; at += 1) {
-    const char = line[at];
+  for (let at = indent; at < line2.length; at += 1) {
+    const char = line2[at];
     if (quote !== void 0) {
       if (char === quote) quote = void 0;
     } else if (char === '"' || char === "'") {
       quote = char;
-    } else if (char === "#" && (at === indent || /\s/.test(line[at - 1] ?? ""))) {
-      return { indent, text: line.slice(indent, at).trimEnd() };
+    } else if (char === "#" && (at === indent || /\s/.test(line2[at - 1] ?? ""))) {
+      return { indent, text: line2.slice(indent, at).trimEnd() };
     }
   }
-  return { indent, text: line.slice(indent).trimEnd() };
+  return { indent, text: line2.slice(indent).trimEnd() };
 }
 function scalar(text) {
   const trimmed = text.trim();
@@ -25648,9 +25648,9 @@ function flowPairs(text) {
 function yamlValue(text, section, key) {
   const lines2 = text.split("\n");
   for (let at = 0; at < lines2.length; at += 1) {
-    const { indent, text: line } = uncommented(lines2[at] ?? "");
-    if (indent !== 0 || !line.startsWith(`${section}:`)) continue;
-    const rest = line.slice(section.length + 1).trim();
+    const { indent, text: line2 } = uncommented(lines2[at] ?? "");
+    if (indent !== 0 || !line2.startsWith(`${section}:`)) continue;
+    const rest = line2.slice(section.length + 1).trim();
     if (rest !== "") return flowPairs(rest)?.get(key);
     let child;
     for (let below = at + 1; below < lines2.length; below += 1) {
@@ -25722,7 +25722,9 @@ function folderOfPid(raw) {
   } catch {
     return void 0;
   }
-  if (pid === void 0) return void 0;
+  return pid === void 0 ? void 0 : processFolder(pid);
+}
+function processFolder(pid) {
   try {
     if (process.platform === "linux") return readlinkSync(`/proc/${pid}/cwd`);
     const out = execFileSync3("lsof", ["-a", "-p", String(pid), "-d", "cwd", "-Fn"], {
@@ -25730,8 +25732,8 @@ function folderOfPid(raw) {
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const line = out.split("\n").find((each) => each.startsWith("n"));
-    return line === void 0 ? void 0 : line.slice(1);
+    const line2 = out.split("\n").find((each) => each.startsWith("n"));
+    return line2 === void 0 ? void 0 : line2.slice(1);
   } catch {
     return void 0;
   }
@@ -26529,7 +26531,7 @@ function sessionIdOf(made) {
   return typeof id2 === "string" && id2 !== "" ? id2 : void 0;
 }
 function eventOf(block) {
-  const data = block.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice(5).replace(/^ /, "")).join("\n");
+  const data = block.split("\n").filter((line2) => line2.startsWith("data:")).map((line2) => line2.slice(5).replace(/^ /, "")).join("\n");
   if (data === "") return void 0;
   try {
     const parsed = JSON.parse(data);
@@ -26564,9 +26566,9 @@ function hookUrl(port, profile) {
   return `http://127.0.0.1:${port}${HOOK_PATH}${profile}`;
 }
 function linesOf2(text) {
-  return text.split("\n").map((line) => {
-    const indent = line.length - line.trimStart().length;
-    const words4 = line.trimStart().startsWith("#") ? "" : line.trim().replace(/\s+#.*$/, "");
+  return text.split("\n").map((line2) => {
+    const indent = line2.length - line2.trimStart().length;
+    const words4 = line2.trimStart().startsWith("#") ? "" : line2.trim().replace(/\s+#.*$/, "");
     return { indent, words: words4 };
   });
 }
@@ -26608,15 +26610,15 @@ function addHook(home2, port, profile, secret) {
   const text = existsSync7(path) ? readFileSync7(path, "utf8") : "";
   const lines2 = linesOf2(text);
   const ours2 = new RegExp(`^(?:-\\s*)?url:\\s*["']?${url2.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&")}["']?$`);
-  if (lines2.some((line) => ours2.test(line.words))) return { state: "there", path };
-  const where = lines2.findIndex((line) => line.indent === 0 && /^["']?hooks["']?\s*:/.test(line.words));
+  if (lines2.some((line2) => ours2.test(line2.words))) return { state: "there", path };
+  const where = lines2.findIndex((line2) => line2.indent === 0 && /^["']?hooks["']?\s*:/.test(line2.words));
   const byHand = (why) => {
     const inEnv2 = secretInEnv(home2, secret);
     const shown2 = entryLines("  ", url2, inEnv2 ? { env: SECRET_ENV } : { inline: secret });
     return { state: "by_hand", path, why, lines: ["hooks:", ...shown2].join("\n") };
   };
   const plain = /^(?:"[^"]+"|'[^']+'|[A-Za-z_][\w.-]*)\s*:(?:\s|$)/;
-  if (lines2.some((line) => line.indent === 0 && line.words !== "" && !plain.test(line.words))) {
+  if (lines2.some((line2) => line2.indent === 0 && line2.words !== "" && !plain.test(line2.words))) {
     return byHand("its top level isn't laid out as this bridge expects");
   }
   if (where === -1) {
@@ -26636,20 +26638,20 @@ function addHook(home2, port, profile, secret) {
   const head = lines2[where]?.words ?? "";
   if (head.replace(/^["']?hooks["']?\s*:/, "").trim() !== "") return byHand("its hooks: is written on one line");
   const children = [];
-  for (const line of lines2.slice(where + 1)) {
-    if (line.words === "") continue;
-    if (line.indent === 0) break;
-    children.push(line);
+  for (const line2 of lines2.slice(where + 1)) {
+    if (line2.words === "") continue;
+    if (line2.indent === 0) break;
+    children.push(line2);
   }
   const indent = children[0]?.indent ?? 2;
   const named = new RegExp(`^(?:-\\s*)?name:\\s*["']?${HOOK_NAME}["']?$`);
-  if (children.some((line) => named.test(line.words))) {
+  if (children.some((line2) => named.test(line2.words))) {
     return byHand(`its hooks have an entry called ${HOOK_NAME} with another address`);
   }
-  if (children.some((line) => line.indent === indent && /^["']?outbound["']?\s*:/.test(line.words))) {
+  if (children.some((line2) => line2.indent === indent && /^["']?outbound["']?\s*:/.test(line2.words))) {
     return byHand("its hooks already have an outbound list");
   }
-  if (children.some((line) => line.indent !== indent && line.indent < indent) || children[0]?.words.startsWith("-")) {
+  if (children.some((line2) => line2.indent !== indent && line2.indent < indent) || children[0]?.words.startsWith("-")) {
     return byHand("its hooks: isn't laid out as this bridge expects");
   }
   const inEnv = secretInEnv(home2, secret);
@@ -26660,7 +26662,7 @@ function addHook(home2, port, profile, secret) {
 }
 
 // src/bridge.ts
-var WANTS = ["agents", "new_agents", "forks", "context_files", "context_windows"];
+var WANTS = ["agents", "new_agents", "forks", "context_files", "context_windows", "restarts"];
 function settingsFor(active) {
   const bridge2 = () => {
     const there = active();
@@ -26725,7 +26727,7 @@ var Bridge = class {
         agent: (agentId2, copy) => chips2.settings.context(agentId2, copy),
         harness: (copy) => chips2.settings.harnessContext(copy)
       },
-      (line) => this.log(`context: ${line}`),
+      (line2) => this.log(`context: ${line2}`),
       options.env ?? process.env
     );
     if (options.fills === void 0) return;
@@ -26740,7 +26742,7 @@ var Bridge = class {
       send: (agentId2, copy) => chips2.settings.contextWindow(agentId2, copy),
       kept,
       save: () => options.saveState(options.state),
-      log: (line) => this.log(`context window: ${line}`),
+      log: (line2) => this.log(`context window: ${line2}`),
       sendEveryMs: options.fillsEveryMs
     });
   }
@@ -26767,6 +26769,10 @@ var Bridge = class {
   /** The port Hermes's webhook reaches the bridge on, once it listens. */
   fillsPort;
   toldNoReadings = false;
+  /** While Hermes's gateway restarts (Chips ADR 0094), the health watch says nothing: the restart says how it went. */
+  held = false;
+  /** What went wrong in the last restart, said in place of the watch's own words while Hermes doesn't answer. */
+  why;
   /** Register the agents, start hearing what is said to them, and say how their gateways are. */
   async start() {
     const { chips: chips2 } = this.options;
@@ -26795,6 +26801,20 @@ var Bridge = class {
     this.health.unref();
     await this.startSettings();
   }
+  /** Hold the health watch's words while Hermes's gateway restarts, and let them go after. */
+  hold(held) {
+    this.held = held;
+  }
+  /**
+   * How a restart went (Chips ADR 0094): fine as the gateways now are, or its words, which stand
+   * while Hermes doesn't answer. The health watch speaks for itself again after.
+   */
+  async restarted(trouble) {
+    this.held = false;
+    this.why = trouble;
+    if (trouble === void 0) return this.sayHowItIs();
+    await this.options.chips.reportTrouble(trouble).catch(() => void 0);
+  }
   stop() {
     if (this.health !== void 0) clearInterval(this.health);
     if (this.contextTimer !== void 0) clearInterval(this.contextTimer);
@@ -27034,7 +27054,7 @@ var Bridge = class {
     const folder2 = turn.folder;
     if (folder2 === void 0) return void 0;
     try {
-      const project = this.options.chips.project({ spaceId, agentId: agentId2, name: name2, folder: folder2, log: (line) => this.log(line) });
+      const project = this.options.chips.project({ spaceId, agentId: agentId2, name: name2, folder: folder2, log: (line2) => this.log(line2) });
       const facts = await project.pull();
       turn.project = { copy: project, name: name2 };
       return facts;
@@ -27063,12 +27083,15 @@ var Bridge = class {
       return note === void 0 ? {} : { note };
     }
   }
-  /** Trouble while a profile's gateway doesn't answer, and fine once all do (ADR 0083). */
+  /** Trouble while a profile's gateway doesn't answer, and fine once all do (ADR 0083); nothing while a restart runs. */
   async sayHowItIs() {
+    if (this.held) return;
     for (const agent of this.agents) agent.up = await agent.client.healthy();
+    if (this.held) return;
     const down = this.agents.filter((agent) => !agent.up);
+    if (down.length === 0) this.why = void 0;
     const chips2 = this.options.chips;
-    const said2 = down.length === 0 ? chips2.reportOk() : chips2.reportTrouble(`Hermes isn't answering for ${down.map((agent) => agent.config.name).join(", ")}`);
+    const said2 = down.length === 0 ? chips2.reportOk() : chips2.reportTrouble(this.why ?? `Hermes isn't answering for ${down.map((agent) => agent.config.name).join(", ")}`);
     await said2.catch(() => void 0);
   }
   // ------------------------------------------------------------------ what is said to it
@@ -27102,15 +27125,15 @@ var Bridge = class {
       this.lookedAt.delete(old);
     }
     const context = await this.options.chips.roomContext(spaceId, { limit: 200 }).catch(() => void 0);
-    const line = context?.lines.find((each) => each.message_id === messageId);
+    const line2 = context?.lines.find((each) => each.message_id === messageId);
     const message = {
       type: "message.new",
       space_id: spaceId,
       // An id of its own, so nothing of the turn is taken for the reply's.
       message_id: messageIdOf(feedback2.id),
-      text: lookAgain(feedback2.from.display_name, line?.text, note),
+      text: lookAgain(feedback2.from.display_name, line2?.text, note),
       from: feedback2.from,
-      ...line === void 0 ? {} : { for: [line.from.id] }
+      ...line2 === void 0 ? {} : { for: [line2.from.id] }
     };
     await this.hear(message, { goal: lookingAgain(note), sayWho: false });
   }
@@ -27252,7 +27275,7 @@ var Bridge = class {
       if (status !== void 0 && TERMINAL.has(`run.${status}`)) {
         return { ...state2, event: `run.${status}` };
       }
-      await new Promise((resolve6) => setTimeout(resolve6, 1e3));
+      await new Promise((resolve7) => setTimeout(resolve7, 1e3));
     }
     await this.failed(turn, `${turn.agent.config.name}'s run in Hermes stopped answering.`, true);
     return void 0;
@@ -27320,10 +27343,10 @@ var Bridge = class {
   }
   sayThought(turn, text, phase) {
     const now = Date.now();
-    const line = lastLine(text);
-    if (line === "" || now - turn.saidAt < QUIET_MS) return;
+    const line2 = lastLine(text);
+    if (line2 === "" || now - turn.saidAt < QUIET_MS) return;
     turn.saidAt = now;
-    void turn.run.status({ phase, verbPhrase: line.slice(0, 200) }).catch(() => void 0);
+    void turn.run.status({ phase, verbPhrase: line2.slice(0, 200) }).catch(() => void 0);
   }
   async started(turn, event) {
     const sub = event.event === "subagent.start";
@@ -27392,7 +27415,7 @@ var Bridge = class {
 ${command}
 \`\`\`` } }
     });
-    const stopped2 = new Promise((resolve6) => turn.run.on("cancel", () => resolve6(void 0)));
+    const stopped2 = new Promise((resolve7) => turn.run.on("cancel", () => resolve7(void 0)));
     const decision = await Promise.race([asked, stopped2]);
     const pending = turn.approvals.get(requestId ?? approvalId);
     if (decision === void 0 || pending === void 0 || pending.answered) return;
@@ -27400,7 +27423,7 @@ ${command}
     if (decision.allowed) turn.allowed.push(approvalId);
     const generation = event["execution_generation"];
     await turn.agent.client.approve(turn.hermesRun, {
-      choice: choiceOf(decision, choices),
+      choice: choiceOf(decision, choices, command !== void 0),
       ...requestId === void 0 ? {} : { request_id: requestId },
       ...typeof generation === "number" ? { execution_generation: generation } : {}
     }).catch((error62) => this.log(`Hermes didn't take the answer: ${messageOf2(error62)}`));
@@ -27517,8 +27540,9 @@ ${command}
     if (retryable) void this.sayHowItIs();
   }
 };
-function choiceOf(decision, choices) {
+function choiceOf(decision, choices, command = false) {
   if (!decision.allowed) return "deny";
+  if (command) return "once";
   if (decision.scope === "always" && choices.includes("always")) return "always";
   if (decision.scope !== "once" && choices.includes("session")) return "session";
   return "once";
@@ -27535,7 +27559,7 @@ function forkName(original) {
   return `${original.trim().replace(/ · fork( \d+)?$/, "")} \xB7 fork`;
 }
 function goalOf(message, name2) {
-  const first = message.text.split("\n").find((line) => line.trim() !== "")?.trim() ?? "";
+  const first = message.text.split("\n").find((line2) => line2.trim() !== "")?.trim() ?? "";
   const named = first.toLowerCase().startsWith(`@${name2.toLowerCase()}`);
   const goal = named ? first.slice(name2.length + 1).trim() : first.replace(/^@\S+\s*/, "");
   return (goal === "" ? `Answer ${message.from.display_name}` : goal).slice(0, 300);
@@ -27553,7 +27577,7 @@ function lookAgain(who, reply, note) {
   ].join("\n\n");
 }
 function lookingAgain(note) {
-  const first = note?.split("\n").find((line) => line.trim() !== "")?.trim();
+  const first = note?.split("\n").find((line2) => line2.trim() !== "")?.trim();
   return first === void 0 ? "Looking again at its reply" : cut(`Looking again: ${first}`, GOAL_SHOWN);
 }
 function cut(text, most) {
@@ -27573,27 +27597,488 @@ function resultWords(preview2) {
   return typeof said2 === "string" ? said2.trim() : "";
 }
 function lastLine(text) {
-  const lines2 = text.split(/(?<=[.!?])\s+|\n+/).map((line) => line.trim()).filter((line) => line !== "");
+  const lines2 = text.split(/(?<=[.!?])\s+|\n+/).map((line2) => line2.trim()).filter((line2) => line2 !== "");
   return lines2.at(-1) ?? "";
 }
 function lowerFirst(text) {
   return text.length === 0 ? text : `${text[0]?.toLowerCase() ?? ""}${text.slice(1)}`;
 }
 
-// src/keep.ts
+// src/gateway.ts
+import { spawn as spawn2 } from "node:child_process";
+import { createHash as createHash3 } from "node:crypto";
+import { accessSync as accessSync2, appendFileSync as appendFileSync2, closeSync as closeSync2, constants as constants2, existsSync as existsSync8, openSync as openSync2, readFileSync as readFileSync8, readSync, statSync as statSync4 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { basename as basename4, join as join9, resolve as resolve3 } from "node:path";
+import { basename as basename4, delimiter as delimiter2, dirname as dirname5, join as join9, resolve as resolve3 } from "node:path";
+var TIMING = {
+  stopMs: 15e3,
+  killMs: 5e3,
+  earlyMs: 1e4,
+  upMs: 9e4,
+  serviceMs: 15e4,
+  pollMs: 500
+};
+var EXPAT = "/opt/homebrew/opt/expat/lib/libexpat.1.dylib";
+var EXPAT_SYMBOL = "_XML_SetAllocTrackerActivationThreshold";
+function gatewaysOf(agents) {
+  return [...new Set(agents.map(({ address }) => address.url.replace(/\/+$/, "")))].map((url2) => ({ url: url2 }));
+}
+function isLocal(url2) {
+  try {
+    return ["127.0.0.1", "localhost", "[::1]", "::1"].includes(new URL(url2).hostname);
+  } catch {
+    return false;
+  }
+}
+function portOf(url2) {
+  const parsed = new URL(url2);
+  return Number(parsed.port || (parsed.protocol === "https:" ? 443 : 80));
+}
+function line(words4) {
+  const one = words4.replace(/\s+/g, " ").trim();
+  return one.length <= 200 ? one : `${one.slice(0, 199)}\u2026`;
+}
+function whyFrom(output2, code) {
+  const lines2 = output2.split("\n").map((each) => each.trim()).filter((each) => each !== "");
+  const why = lines2.findLast((each) => /^[A-Za-z_][\w.]*(Error|Exception)\b/.test(each)) ?? lines2.at(-1);
+  if (why === void 0) return code === null || code === void 0 ? "it was stopped" : `it exited ${code}`;
+  return why.length <= 200 ? why : why.replace(/\/(?:[^\s/(),:'"]+\/)+([^\s/(),:'"]+)/g, "$1");
+}
+function gatewayRunArgs(command) {
+  const words4 = command.trim().split(/\s+/);
+  const at = words4.findIndex((word) => basename4(word) === "hermes");
+  if (at === -1) return void 0;
+  const args = words4.slice(at + 1);
+  const plain = [];
+  for (let next = 0; next < args.length; next += 1) {
+    const word = args[next] ?? "";
+    if (word === "-p" || word === "--profile") next += 1;
+    else if (!word.startsWith("-")) plain.push(word);
+  }
+  return plain[0] === "gateway" && plain[1] === "run" ? args : void 0;
+}
+function serviceOf(system, root2, env = {}) {
+  const home2 = resolve3(root2);
+  const native = resolve3(system.home, ".hermes");
+  const suffix = home2 === native ? "" : dirname5(home2) === join9(native, "profiles") ? basename4(home2) : createHash3("sha256").update(home2).digest("hex").slice(0, 8);
+  if (system.platform === "darwin") {
+    const path = join9(system.home, "Library", "LaunchAgents", `ai.hermes.gateway${suffix ? `-${suffix}` : ""}.plist`);
+    return system.exists(path) ? { kind: "launchd", path } : void 0;
+  }
+  if (system.platform === "linux") {
+    const unit = `hermes-gateway${suffix ? `-${suffix}` : ""}.service`;
+    const user = join9(env["XDG_CONFIG_HOME"] || join9(system.home, ".config"), "systemd", "user", unit);
+    if (system.exists(user)) return { kind: "systemd", path: user };
+    const machine = join9("/etc/systemd/system", unit);
+    if (system.exists(machine)) return { kind: "systemd", path: machine, system: true };
+  }
+  return void 0;
+}
+function expand(text, env) {
+  let out = "";
+  let at = 0;
+  while (at < text.length) {
+    const char = text[at] ?? "";
+    if (char === "\\" && at + 1 < text.length) {
+      out += text[at + 1];
+      at += 2;
+    } else if (char !== "$") {
+      out += char;
+      at += 1;
+    } else if (text[at + 1] === "{") {
+      let depth = 1;
+      let end2 = at + 2;
+      for (; end2 < text.length; end2 += 1) {
+        if (text[end2] === "{") depth += 1;
+        else if (text[end2] === "}" && --depth === 0) break;
+      }
+      const inner = /^([A-Za-z_][A-Za-z0-9_]*)(?:(:?)-([\s\S]*))?$/.exec(text.slice(at + 2, end2));
+      if (inner !== null) {
+        const value = env[inner[1] ?? ""];
+        const unset = inner[2] === ":" ? value === void 0 || value === "" : value === void 0;
+        out += inner[3] !== void 0 && unset ? expand(inner[3], env) : value ?? "";
+      }
+      at = end2 + 1;
+    } else {
+      const name2 = /^[A-Za-z_][A-Za-z0-9_]*/.exec(text.slice(at + 1))?.[0];
+      out += name2 === void 0 ? "$" : env[name2] ?? "";
+      at += 1 + (name2?.length ?? 0);
+    }
+  }
+  return out;
+}
+function wrapperOf(text, env) {
+  for (const each of text.split("\n")) {
+    const found = /^\s*((?:[A-Za-z_][A-Za-z0-9_]*="(?:[^"\\]|\\.)*"\s+)*)exec\s+"([^"]+)"/.exec(each);
+    if (found === null) continue;
+    const vars = {};
+    for (const set2 of (found[1] ?? "").matchAll(/([A-Za-z_][A-Za-z0-9_]*)="((?:[^"\\]|\\.)*)"/g)) {
+      vars[set2[1] ?? ""] = expand(set2[2] ?? "", env);
+    }
+    return { entry: expand(found[2] ?? "", env), vars };
+  }
+  return void 0;
+}
+var NO_HERMES = "The hermes command isn't on this machine's PATH, so Hermes's gateway can't be started.";
+var messageOf3 = (error62) => error62 instanceof Error ? error62.message : String(error62);
+function gatewayEnv(env) {
+  return Object.fromEntries(Object.entries(env).filter(([name2]) => !name2.startsWith("CHIPS_")));
+}
+var Gateways = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  timing = TIMING;
+  /** Each gateway restarted, one after another: what went wrong, in a line, or nothing. */
+  async restart() {
+    const troubles = [];
+    for (const gateway of this.options.gateways) {
+      let trouble;
+      try {
+        trouble = await this.restartOne(gateway);
+      } catch (error62) {
+        trouble = `Restart failed: ${messageOf3(error62)}`;
+      }
+      if (trouble !== void 0) troubles.push(trouble);
+    }
+    return troubles.length === 0 ? void 0 : line(troubles.join(" "));
+  }
+  /** Each local gateway that doesn't answer, started: the bridge is starting. */
+  async startIfDown() {
+    const { system, log: log2 } = this.options;
+    for (const gateway of this.options.gateways) {
+      if (!isLocal(gateway.url)) continue;
+      const port = portOf(gateway.url);
+      try {
+        if (await system.healthy(gateway.url)) continue;
+        let trouble;
+        if (this.serviceFor(gateway) !== void 0) {
+          log2(`Hermes isn't answering on port ${port}: starting its service, hermes gateway start`);
+          trouble = await this.byService(gateway, "start", void 0);
+        } else {
+          const pid = await system.listener(port);
+          if (pid !== void 0) {
+            log2(`Hermes isn't answering on port ${port}, but pid ${pid} listens there: no second gateway started`);
+            continue;
+          }
+          log2(`Hermes isn't answering on port ${port}: starting hermes gateway run`);
+          trouble = await this.start(gateway, ["gateway", "run"], void 0);
+        }
+        if (trouble !== void 0) log2(trouble);
+      } catch (error62) {
+        log2(`Hermes's gateway on port ${port} couldn't be started: ${messageOf3(error62)}`);
+      }
+    }
+  }
+  /**
+   * The service of Hermes's root, for the Main agent's gateway: a gateway at another address is
+   * another profile's own, which `hermes gateway status` of the root doesn't speak for.
+   */
+  serviceFor(gateway) {
+    if (gateway !== this.options.gateways[0]) return void 0;
+    return serviceOf(this.options.system, this.options.root, this.options.env);
+  }
+  async restartOne(gateway) {
+    const { system, log: log2 } = this.options;
+    if (!isLocal(gateway.url)) {
+      return `Hermes's gateway at ${new URL(gateway.url).host} isn't on this machine, so it can't be restarted from here.`;
+    }
+    const port = portOf(gateway.url);
+    const pid = await system.listener(port);
+    if (this.serviceFor(gateway) !== void 0) {
+      log2("restarting Hermes's service: hermes gateway restart");
+      return this.byService(gateway, "restart", pid);
+    }
+    if (pid === void 0) {
+      if (await system.healthy(gateway.url)) return `Can't tell what answers on port ${port}, so nothing was restarted.`;
+      log2(`nothing listens on port ${port}: starting hermes gateway run`);
+      return this.start(gateway, ["gateway", "run"], void 0);
+    }
+    const info = await system.describe(pid);
+    if (info === void 0) return this.start(gateway, ["gateway", "run"], void 0);
+    const args = this.ours(info);
+    if (args === void 0) {
+      log2(`pid ${pid} on port ${port} isn't this user's hermes gateway run, so it was left alone: ${info.command.slice(0, 160)}`);
+      return `Port ${port} is held by something other than hermes gateway run (pid ${pid}), so nothing was restarted.`;
+    }
+    if (system.which("hermes", this.options.env) === void 0) return NO_HERMES;
+    log2(`stopping Hermes's gateway, pid ${pid}`);
+    if (!await this.stop(pid)) return `Hermes's gateway (pid ${pid}) didn't stop, so it wasn't started again.`;
+    return this.start(gateway, args, info.cwd);
+  }
+  /** A `hermes gateway run` of this user's: the words to start it again with. */
+  ours(info) {
+    return info.uid === this.options.system.uid ? gatewayRunArgs(info.command) : void 0;
+  }
+  /** SIGTERM, then SIGKILL once it has had a while, and only while it is still that gateway. */
+  async stop(pid) {
+    const { system, log: log2 } = this.options;
+    system.signal(pid, "SIGTERM");
+    if (await this.gone(pid, this.timing.stopMs)) return true;
+    const still = await system.describe(pid);
+    if (still === void 0) return true;
+    if (this.ours(still) === void 0) return false;
+    log2(`Hermes's gateway, pid ${pid}, is still running ${this.timing.stopMs / 1e3} s after SIGTERM: SIGKILL`);
+    system.signal(pid, "SIGKILL");
+    return this.gone(pid, this.timing.killMs);
+  }
+  async gone(pid, withinMs) {
+    const { system } = this.options;
+    const by = system.now() + withinMs;
+    while (system.alive(pid)) {
+      if (system.now() >= by) return false;
+      await system.sleep(this.timing.pollMs);
+    }
+    return true;
+  }
+  /** Hermes's own `hermes gateway restart|start`, then the gateway answering, from a new process. */
+  async byService(gateway, verb, before) {
+    const { system, env } = this.options;
+    const hermes = system.which("hermes", env);
+    if (hermes === void 0) return NO_HERMES;
+    const scope = this.serviceFor(gateway)?.system === true ? ["--system"] : [];
+    const ran = await system.run(hermes, ["gateway", verb, ...scope], gatewayEnv(env), this.timing.serviceMs);
+    if (ran.code !== 0) return line(`hermes gateway ${verb} failed: ${whyFrom(ran.output, ran.code)}`);
+    const by = system.now() + this.timing.serviceMs;
+    for (; ; ) {
+      const old = before !== void 0 && system.alive(before);
+      if (!old && await system.healthy(gateway.url)) return void 0;
+      if (system.now() >= by) {
+        if (await system.healthy(gateway.url)) return void 0;
+        return `Hermes's service ${verb === "start" ? "started" : "restarted"}, but nothing answers on port ${portOf(gateway.url)}.`;
+      }
+      await system.sleep(this.timing.pollMs);
+    }
+  }
+  /**
+   * `hermes <args>` (`gateway run`), on its own, in `cwd` (else the home), then through Homebrew's
+   * expat when it died of macOS's.
+   */
+  async start(gateway, args, cwd) {
+    const { system, env, log: log2 } = this.options;
+    const port = portOf(gateway.url);
+    const hermes = system.which("hermes", env);
+    if (hermes === void 0) return NO_HERMES;
+    const folder2 = cwd ?? system.home;
+    const plain = gatewayEnv(env);
+    let outcome = await this.launch(gateway, hermes, args, plain, folder2, `hermes ${args.join(" ")}`);
+    if (outcome.state === "ended" && outcome.early && outcome.output.includes(EXPAT_SYMBOL) && system.exists(EXPAT)) {
+      const wrapper = wrapperOf(system.read(hermes) ?? "", plain);
+      if (wrapper !== void 0) {
+        const expat = dirname5(EXPAT);
+        log2(
+          `hermes gateway run stopped at once: Homebrew's Python can't load macOS's expat (${EXPAT_SYMBOL}). Starting ${wrapper.entry} directly with DYLD_LIBRARY_PATH=${expat}.`
+        );
+        const libraries = [expat, plain["DYLD_LIBRARY_PATH"]].filter((each) => each !== void 0 && each !== "").join(":");
+        outcome = await this.launch(
+          gateway,
+          wrapper.entry,
+          args,
+          { ...plain, ...wrapper.vars, DYLD_LIBRARY_PATH: libraries },
+          folder2,
+          `${wrapper.entry} ${args.join(" ")} with DYLD_LIBRARY_PATH=${expat}`
+        );
+      }
+    }
+    if (outcome.state === "up") {
+      log2(`Hermes's gateway${outcome.pid === void 0 ? "" : `, pid ${outcome.pid},`} answers on port ${port}. It logs to ${this.options.logFile}.`);
+      return void 0;
+    }
+    if (outcome.state === "silent") return `Hermes's gateway started, but nothing answers on port ${port}.`;
+    return line(`Hermes's gateway stopped as it started: ${whyFrom(outcome.output, outcome.code)}`);
+  }
+  /** A program started, and watched until it answers, ends, or has had its time. */
+  async launch(gateway, command, args, env, cwd, what) {
+    const { system, logFile } = this.options;
+    system.note(logFile, `--- ${new Date(system.now()).toISOString()} chips-hermes started ${what}`);
+    const from = system.size(logFile);
+    const startedAt = system.now();
+    const child = system.launch({ command, args, env, cwd, log: logFile });
+    let ended;
+    void child.exited.then(({ code }) => {
+      ended = { code, at: system.now() };
+    });
+    for (; ; ) {
+      await Promise.resolve();
+      if (ended !== void 0) {
+        return { state: "ended", early: ended.at - startedAt <= this.timing.earlyMs, output: system.since(logFile, from), code: ended.code };
+      }
+      if (await system.healthy(gateway.url)) return { state: "up", pid: child.pid };
+      if (system.now() - startedAt >= this.timing.upMs) return { state: "silent" };
+      await system.sleep(this.timing.pollMs);
+    }
+  }
+};
+function restarter(deps) {
+  let running;
+  return (ask2) => {
+    if (running !== void 0) {
+      deps.log(`restart asked by ${ask2.askedBy} while one runs: it is the same restart`);
+      return running;
+    }
+    running = (async () => {
+      deps.log(`restart asked by ${ask2.askedBy}: restarting Hermes's gateway`);
+      deps.hold(true);
+      let trouble;
+      try {
+        trouble = await deps.restart();
+      } catch (error62) {
+        trouble = line(`Restart failed: ${error62 instanceof Error ? error62.message : String(error62)}`);
+      }
+      deps.log(trouble === void 0 ? "restarted, and Hermes answers" : `restart: ${trouble}`);
+      try {
+        await deps.say(trouble);
+      } catch (error62) {
+        deps.log(`could not tell Chips how the restart went: ${String(error62)}`);
+      } finally {
+        deps.hold(false);
+      }
+    })().finally(() => {
+      running = void 0;
+    });
+    return running;
+  };
+}
+function gatewayLog(configFolder, platform = process.platform) {
+  return platform === "darwin" ? join9(homedir5(), "Library", "Logs", "chips-hermes-gateway.log") : join9(configFolder, "gateway.log");
+}
+function runToEnd(command, args, options) {
+  return new Promise((done) => {
+    const child = spawn2(command, args, { env: options.env, stdio: ["ignore", "pipe", "pipe"] });
+    let output2 = "";
+    const keep = (data) => {
+      output2 = (output2 + String(data)).slice(-8e3);
+    };
+    child.stdout.on("data", keep);
+    child.stderr.on("data", keep);
+    const limit = setTimeout(() => child.kill("SIGTERM"), options.timeoutMs);
+    child.on("error", (error62) => {
+      clearTimeout(limit);
+      done({ code: null, output: error62.message });
+    });
+    child.on("close", (code) => {
+      clearTimeout(limit);
+      done({ code, output: output2 });
+    });
+  });
+}
+function thisMachine() {
+  return {
+    platform: process.platform,
+    uid: process.getuid?.() ?? -1,
+    home: homedir5(),
+    exists: existsSync8,
+    read(path) {
+      try {
+        return readFileSync8(path, "utf8");
+      } catch {
+        return void 0;
+      }
+    },
+    which(command, env) {
+      for (const folder2 of (env["PATH"] ?? "").split(delimiter2)) {
+        if (folder2 === "") continue;
+        const path = join9(folder2, command);
+        try {
+          accessSync2(path, constants2.X_OK);
+          return path;
+        } catch {
+        }
+      }
+      return void 0;
+    },
+    async listener(port) {
+      const { output: output2 } = await runToEnd("lsof", ["-nP", `-iTCP:${port}`, "-sTCP:LISTEN", "-Fp"], { timeoutMs: 5e3 });
+      const pid = Number(/^p(\d+)$/m.exec(output2)?.[1]);
+      return Number.isInteger(pid) && pid > 0 ? pid : void 0;
+    },
+    async describe(pid) {
+      const { code, output: output2 } = await runToEnd("ps", ["-ww", "-o", "uid=", "-o", "command=", "-p", String(pid)], { timeoutMs: 5e3 });
+      const found = /^\s*(\d+)\s+(.*)$/m.exec(output2);
+      if (code !== 0 || found === null) return void 0;
+      return { uid: Number(found[1]), command: found[2] ?? "", cwd: processFolder(pid) };
+    },
+    alive(pid) {
+      try {
+        process.kill(pid, 0);
+        return true;
+      } catch (error62) {
+        return error62.code === "EPERM";
+      }
+    },
+    signal(pid, signal) {
+      try {
+        process.kill(pid, signal);
+      } catch {
+      }
+    },
+    run: (command, args, env, timeoutMs) => runToEnd(command, args, { env, timeoutMs }),
+    launch({ command, args, env, cwd, log: log2 }) {
+      const out = openSync2(log2, "a");
+      try {
+        const child = spawn2(command, args, { cwd, env, detached: true, stdio: ["ignore", out, out] });
+        const exited = new Promise((done) => {
+          child.once("exit", (code, signal) => done({ code, signal }));
+          child.once("error", (error62) => {
+            appendFileSync2(log2, `${error62.message}
+`);
+            done({ code: null, signal: null });
+          });
+        });
+        child.unref();
+        return { pid: child.pid, exited };
+      } finally {
+        closeSync2(out);
+      }
+    },
+    note(log2, words4) {
+      appendFileSync2(log2, `${words4}
+`);
+    },
+    size(log2) {
+      try {
+        return statSync4(log2).size;
+      } catch {
+        return 0;
+      }
+    },
+    since(log2, from) {
+      try {
+        const to = statSync4(log2).size;
+        const start = Math.max(from, to - 64e3);
+        const buffer = Buffer.alloc(Math.max(0, to - start));
+        const fd = openSync2(log2, "r");
+        try {
+          readSync(fd, buffer, 0, buffer.length, start);
+        } finally {
+          closeSync2(fd);
+        }
+        return buffer.toString("utf8");
+      } catch {
+        return "";
+      }
+    },
+    healthy: (url2) => new HermesClient({ url: url2, key: "" }, (input2, init) => fetch(input2, { ...init, signal: AbortSignal.timeout(5e3) })).healthy(),
+    sleep: (ms) => new Promise((done) => setTimeout(done, ms)),
+    now: () => Date.now()
+  };
+}
+
+// src/keep.ts
+import { homedir as homedir6 } from "node:os";
+import { basename as basename5, join as join10, resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var flags = process.argv.slice(2);
 var words3 = flags.filter((word) => !word.startsWith("--"));
-var whole = (word) => resolve3(word.startsWith("~/") ? join9(homedir5(), word.slice(2)) : word);
+var whole = (word) => resolve4(word.startsWith("~/") ? join10(homedir6(), word.slice(2)) : word);
 var here = fileURLToPath2(new URL("..", import.meta.url)).replace(/\/$/, "");
 var self = fileURLToPath2(import.meta.url);
 var run = self.endsWith(".js") ? [self] : ["--import", "tsx", "src/main.ts"];
-var again = process.env["npm_lifecycle_event"] === "keep" ? "npm run keep --" : basename4(process.argv[1] ?? "chips");
+var again = process.env["npm_lifecycle_event"] === "keep" ? "npm run keep --" : basename5(process.argv[1] ?? "chips");
 var stopLine = process.env["CHIPS_STOP_COMMAND"] || [again, ...words3, "--stop"].join(" ");
-var end = (line, code) => {
-  (code === 0 ? process.stdout : process.stderr).write(`${line}
+var end = (line2, code) => {
+  (code === 0 ? process.stdout : process.stderr).write(`${line2}
 `);
   process.exit(code);
 };
@@ -27632,9 +28117,9 @@ function keepIfAsked(label2, url2, names, log2, before = () => void 0) {
 }
 
 // src/setup.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join10, resolve as resolve4 } from "node:path";
+import { existsSync as existsSync9, readFileSync as readFileSync9 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join11, resolve as resolve5 } from "node:path";
 var SetupError = class extends Error {
   constructor(message, words4 = {}) {
     super(message);
@@ -27643,21 +28128,21 @@ var SetupError = class extends Error {
   words;
   name = "SetupError";
 };
-var shown = (path) => path.startsWith(`${homedir6()}/`) ? `~${path.slice(homedir6().length)}` : path;
-var portOf = (url2) => {
+var shown = (path) => path.startsWith(`${homedir7()}/`) ? `~${path.slice(homedir7().length)}` : path;
+var portOf2 = (url2) => {
   const parsed = new URL(url2);
   return parsed.port || (parsed.protocol === "https:" ? "443" : "80");
 };
-function checkedWords(config3, restart = false) {
+function checkedWords(config3, restart2 = false) {
   const urls = new Set(config3.agents.map((agent) => agent.address.url));
   const [url2] = urls;
-  const found = urls.size === 1 && url2 !== void 0 ? `Its API server answers on port ${portOf(url2)}` : `Its API server answers for each of ${config3.agents.length} agents`;
-  return restart ? `${found}. ${RESTART}` : found;
+  const found = urls.size === 1 && url2 !== void 0 ? `Its API server answers on port ${portOf2(url2)}` : `Its API server answers for each of ${config3.agents.length} agents`;
+  return restart2 ? `${found}. ${RESTART}` : found;
 }
 var RESTART = "Start hermes gateway again once, so it tells Chips how full each agent's context is.";
 function readyHooks(config3, options) {
   const lines2 = [];
-  let restart = false;
+  let restart2 = false;
   const done = /* @__PURE__ */ new Set();
   for (const agent of config3.agents) {
     const profile = profileName(agent.address.profile);
@@ -27668,12 +28153,12 @@ function readyHooks(config3, options) {
     try {
       outcome = addHook(home2, options.port, profile, options.secret);
     } catch (error62) {
-      lines2.push(`Chips's webhook wasn't added to ${shown(join10(home2, "config.yaml"))}: ${error62 instanceof Error ? error62.message : String(error62)}`);
+      lines2.push(`Chips's webhook wasn't added to ${shown(join11(home2, "config.yaml"))}: ${error62 instanceof Error ? error62.message : String(error62)}`);
       continue;
     }
     if (outcome.state === "added") {
       lines2.push(`Added Chips's webhook to ${shown(outcome.path)}, so Hermes tells Chips how full each agent's context is.`);
-      restart ||= options.gatewayUp;
+      restart2 ||= options.gatewayUp;
     } else if (outcome.state === "by_hand") {
       lines2.push(
         `${shown(outcome.path)} was left as it is: ${outcome.why}. For Chips to show how full each agent's context is, add these lines to it, then start hermes gateway again:
@@ -27683,30 +28168,30 @@ ${outcome.lines}`
       lines2.push(`Hermes has no ${profile} profile at ${shown(home2)}, so no webhook was added for it.`);
     }
   }
-  if (restart) lines2.push(RESTART);
-  return { lines: lines2, restart };
+  if (restart2) lines2.push(RESTART);
+  return { lines: lines2, restart: restart2 };
 }
 var STILL_GOOD = "The link is still good: run the same command again once that's done.";
 var EXAMPLE = '{ "agents": [{ "name": "Hermes", "profile": "default", "keyEnv": "API_SERVER_KEY" }] }';
 var PLAIN = { agents: [{ name: "Hermes", profile: "default", keyEnv: "API_SERVER_KEY" }] };
 function hermesEnvPath(env = process.env) {
-  return resolve4(env["HERMES_HOME"] ?? resolve4(homedir6(), ".hermes"), ".env");
+  return resolve5(env["HERMES_HOME"] ?? resolve5(homedir7(), ".hermes"), ".env");
 }
 function fromHermes(name2, env) {
   const path = hermesEnvPath(env);
-  if (!existsSync8(path)) return void 0;
-  for (const line of readFileSync8(path, "utf8").split("\n")) {
-    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line);
+  if (!existsSync9(path)) return void 0;
+  for (const line2 of readFileSync9(path, "utf8").split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line2);
     if (match?.[1] === name2) return match[2]?.replace(/^(["'])(.*)\1$/, "$2");
   }
   return void 0;
 }
 function folderOf(said2) {
   if (typeof said2 !== "string" || said2 === "") return void 0;
-  return resolve4(said2 === "~" || said2.startsWith("~/") ? homedir6() + said2.slice(1) : said2);
+  return resolve5(said2 === "~" || said2.startsWith("~/") ? homedir7() + said2.slice(1) : said2);
 }
 function readConfig(path, env = process.env) {
-  const raw = existsSync8(path) ? JSON.parse(readFileSync8(path, "utf8")) : PLAIN;
+  const raw = existsSync9(path) ? JSON.parse(readFileSync9(path, "utf8")) : PLAIN;
   const url2 = typeof raw.url === "string" ? raw.url : "http://127.0.0.1:8642";
   const folder2 = folderOf(raw.folder);
   if (!Array.isArray(raw.agents) || raw.agents.length === 0) {
@@ -27745,7 +28230,7 @@ function readConfig(path, env = process.env) {
   return {
     ...typeof raw.name === "string" ? { name: raw.name } : {},
     agents,
-    folders: folderOf(raw.folders) ?? resolve4(homedir6(), "chips-hermes", "agents"),
+    folders: folderOf(raw.folders) ?? resolve5(homedir7(), "chips-hermes", "agents"),
     ...typeof hookPort === "number" && Number.isInteger(hookPort) && hookPort > 0 && hookPort < 65536 ? { hookPort } : {}
   };
 }
@@ -27756,7 +28241,7 @@ async function checkHermes(config3, clientFor = (agent) => new HermesClient(agen
       throw new SetupError(
         `Hermes isn't answering for ${agent.name} at ${agent.address.url}: start its API server (API_SERVER_ENABLED=true, then hermes gateway). ${STILL_GOOD}`,
         {
-          detail: `Nothing answers on port ${portOf(agent.address.url)}`,
+          detail: `Nothing answers on port ${portOf2(agent.address.url)}`,
           says: "Hermes's API server is off.",
           doing: `Add this line to ${shown(hermesEnvPath())}, then start Hermes with hermes gateway.`,
           copy: "API_SERVER_ENABLED=true"
@@ -27777,20 +28262,20 @@ async function checkHermes(config3, clientFor = (agent) => new HermesClient(agen
 }
 
 // src/main.ts
-var home = (path) => path.startsWith("~/") ? join11(homedir7(), path.slice(2)) : path;
+var home = (path) => path.startsWith("~/") ? join12(homedir8(), path.slice(2)) : path;
 var link = process.env["CHIPS_JOIN_LINK"] || void 0;
 var LABEL = "chat.chips.hermes";
 stopIfAsked(LABEL);
-var configPath = resolve5(home(words3[0] ?? "~/.chips-hermes/config.json"));
-var folder = dirname5(configPath);
-var statePath = join11(folder, "sessions.json");
-var state = existsSync9(statePath) ? JSON.parse(readFileSync9(statePath, "utf8")) : { sessions: {} };
+var configPath = resolve6(home(words3[0] ?? "~/.chips-hermes/config.json"));
+var folder = dirname6(configPath);
+var statePath = join12(folder, "sessions.json");
+var state = existsSync10(statePath) ? JSON.parse(readFileSync10(statePath, "utf8")) : { sessions: {} };
 var saveState = (next) => {
   mkdirSync6(folder, { recursive: true, mode: 448 });
   writeFileSync5(statePath, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
 };
-var log = (line) => process.stdout.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+var log = (line2) => process.stdout.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${line2}
 `);
 var freePort = () => new Promise((done, failed) => {
   const server = createServer2();
@@ -27815,7 +28300,7 @@ try {
   const first = config2.agents[0];
   const gatewayUp = link !== void 0 || first !== void 0 && await new HermesClient(first.address).healthy();
   const hooks = readyHooks(config2, { root, port: fills.port, secret: fills.secret, gatewayUp });
-  for (const line of hooks.lines) log(line);
+  for (const line2 of hooks.lines) log(line2);
   if (link !== void 0) reportStep("checked", { detail: checkedWords(config2, hooks.restart) });
 } catch (error62) {
   if (!(error62 instanceof SetupError)) throw error62;
@@ -27825,6 +28310,15 @@ try {
   process.exit(1);
 }
 var name = config2.name ?? "Hermes";
+var gateways2 = new Gateways({
+  gateways: gatewaysOf(config2.agents),
+  root,
+  env: process.env,
+  system: thisMachine(),
+  log: (line2) => log(`gateway: ${line2}`),
+  logFile: gatewayLog(folder)
+});
+if (link === void 0) await gateways2.startIfDown();
 var refused2 = (error62) => {
   if (!(error62 instanceof JoinError)) throw error62;
   process.stderr.write(`${error62.message}
@@ -27841,11 +28335,21 @@ var joined = await join3({
 }).catch(refused2);
 keepIfAsked(LABEL, joined.url, ["HERMES_HOME", ...config2.agents.map((agent) => agent.keyEnv ?? "API_SERVER_KEY")], log);
 var bridge;
+var restart = restarter({
+  restart: () => gateways2.restart(),
+  hold: (held) => bridge?.hold(held),
+  say: async (trouble) => {
+    if (bridge !== void 0) return bridge.restarted(trouble);
+    await (trouble === void 0 ? chips.reportOk() : chips.reportTrouble(trouble));
+  },
+  log: (line2) => log(`gateway: ${line2}`)
+});
 var chips = await connect({
   url: joined.url,
   token: joined.token,
   client: { name: "chips-hermes", version: "1.0.0" },
-  store: fileStore(join11(folder, "chips-state.json")),
+  store: fileStore(join12(folder, "chips-state.json")),
+  onRestart: restart,
   settings: settingsFor(() => bridge)
 });
 var git = await checkGit();