@chipschat/hermes 1.0.5 → 1.0.8

package/dist/main.js

@@ -8,11 +8,11 @@ var __export = (target, all) => {
 };
 
 // src/main.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "node:fs";
+import { randomBytes as randomBytes3 } from "node:crypto";
+import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync5 } from "node:fs";
 import { createServer as createServer2 } from "node:net";
-import { homedir as homedir7 } from "node:os";
-import { dirname as dirname5, join as join11, resolve as resolve5 } from "node:path";
+import { homedir as homedir8 } from "node:os";
+import { dirname as dirname6, join as join13, resolve as resolve6 } from "node:path";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -2024,8 +2024,8 @@ function emoji() {
 }
 var ipv4 = /^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/;
 var ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/;
-var mac = (delimiter2) => {
-  const escapedDelim = escapeRegex(delimiter2 ?? ":");
+var mac = (delimiter3) => {
+  const escapedDelim = escapeRegex(delimiter3 ?? ":");
   return new RegExp(`^(?:[0-9A-F]{2}${escapedDelim}){5}[0-9A-F]{2}$|^(?:[0-9a-f]{2}${escapedDelim}){5}[0-9a-f]{2}$`);
 };
 var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
@@ -2599,8 +2599,8 @@ var Doc = class {
     const lines2 = content.split("\n").filter((x) => x);
     const minIndent = Math.min(...lines2.map((x) => x.length - x.trimStart().length));
     const dedented = lines2.map((x) => x.slice(minIndent)).map((x) => " ".repeat(this.indent * 2) + x);
-    for (const line of dedented) {
-      this.content.push(line);
+    for (const line2 of dedented) {
+      this.content.push(line2);
     }
   }
   compile() {
@@ -5081,7 +5081,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve6) {
+function isRecursive(inst, stack, resolve7) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -5091,7 +5091,7 @@ function isRecursive(inst, stack, resolve6) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve6);
+      const answer = isRecursive(child, stack, resolve7);
       if (answer > result)
         result = answer;
     }
@@ -5102,7 +5102,7 @@ function isRecursive(inst, stack, resolve6) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve6) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve7) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -5166,7 +5166,7 @@ function isRecursive(inst, stack, resolve6) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve6 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve7 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -20535,31 +20535,31 @@ function withRole(name2, from) {
 function flat(text) {
   return text.replace(/\s*\n\s*/g, " ").trim();
 }
-function wordsOf(line) {
-  const text = flat(line.text ?? "");
-  const heard = line.transcript === void 0 ? "" : flat(line.transcript);
+function wordsOf(line2) {
+  const text = flat(line2.text ?? "");
+  const heard = line2.transcript === void 0 ? "" : flat(line2.transcript);
   const parts = [text];
   if (heard !== "")
     parts.push(text === "" ? `(voice note) ${heard}` : `(voice note: ${heard})`);
-  if (heard === "" && line.files !== void 0)
-    parts.push(`(sent ${line.files.join(", ")})`);
-  if (line.held === true)
+  if (heard === "" && line2.files !== void 0)
+    parts.push(`(sent ${line2.files.join(", ")})`);
+  if (line2.held === true)
     parts.push("(held by Chips until a person acts)");
   return parts.filter((part) => part !== "").join(" ");
 }
-function renderLine(line) {
-  const name2 = line.from.name;
-  switch (line.kind) {
+function renderLine(line2) {
+  const name2 = line2.from.name;
+  switch (line2.kind) {
     case "said":
-      return `${withRole(name2, line.from)}: ${wordsOf(line)}`;
+      return `${withRole(name2, line2.from)}: ${wordsOf(line2)}`;
     case "joined":
       return `(${name2} joined the space)`;
     case "left":
       return `(${name2} left the space)`;
     case "renamed":
-      if (line.title !== void 0)
-        return `(${name2} renamed the space "${line.title}")`;
-      return `(${line.previous ?? name2} is now called ${line.name ?? name2})`;
+      if (line2.title !== void 0)
+        return `(${name2} renamed the space "${line2.title}")`;
+      return `(${line2.previous ?? name2} is now called ${line2.name ?? name2})`;
     case "archived":
       return `(${name2} archived the space)`;
     default:
@@ -20610,7 +20610,7 @@ function quoteLines(replying) {
       body.push(`(sent ${replying.files.join(", ")})`);
     }
   }
-  return body.map((line) => line === "" ? ">" : `> ${line}`);
+  return body.map((line2) => line2 === "" ? ">" : `> ${line2}`);
 }
 var DAY_MS = 864e5;
 function saidWhen(at, reading) {
@@ -22517,7 +22517,7 @@ var AGENT_FIRST_NAMES = [
   "Xander Xavi Xavier",
   "Yann Yaro Yosef Yuri Yusuf Yves",
   "Zaid Zane Zeke Zeno Zev Ziggy"
-].flatMap((line) => line.split(" "));
+].flatMap((line2) => line2.split(" "));
 
 // node_modules/@chipschat/protocol/dist/src/frames.js
 var clientHelloFrame = external_exports.object({
@@ -22846,8 +22846,8 @@ function createOutbox() {
   const waiting = /* @__PURE__ */ new Map();
   return {
     add(key, event) {
-      return new Promise((resolve6, reject) => {
-        waiting.set(key, { event, resolve: resolve6, reject });
+      return new Promise((resolve7, reject) => {
+        waiting.set(key, { event, resolve: resolve7, reject });
       });
     },
     unanswered: () => [...waiting.values()].map((entry) => entry.event),
@@ -22923,7 +22923,7 @@ async function inPieces(call, path, bytes) {
 async function afterLoss(error62, failures) {
   if (error62 instanceof RefusedError || failures >= PIECE_TRIES)
     throw error62;
-  await new Promise((resolve6) => setTimeout(resolve6, 250 * failures));
+  await new Promise((resolve7) => setTimeout(resolve7, 250 * failures));
 }
 function sendPiece(call, path, bytes, offset) {
   const piece = bytes.subarray(offset, Math.min(offset + PIECE_BYTES, bytes.byteLength));
@@ -22949,16 +22949,16 @@ var TRIES = 4;
 var MARKS = /^(<<<<<<<|>>>>>>>) /m;
 var REJECTED = /\[rejected\]|fetch first|non-fast-forward/;
 var OWN_CONFIG = /^(core\.(repositoryformatversion|filemode|bare|logallrefupdates|ignorecase|precomposeunicode|symlinks)|remote\.origin\.(url|fetch)|branch\..+\.(remote|merge)|user\.(name|email))$/;
-var lines = (said2) => said2.split("\n").filter((line) => line !== "");
+var lines = (said2) => said2.split("\n").filter((line2) => line2 !== "");
 var unique = (names) => [...new Set(names)];
 function subjectOf(words4) {
-  const first = words4.split("\n").find((line) => line.trim() !== "")?.trim() ?? "";
+  const first = words4.split("\n").find((line2) => line2.trim() !== "")?.trim() ?? "";
   if (first === "")
     return "A change to the project";
   return first.length <= 72 ? first : `${first.slice(0, 71)}\u2026`;
 }
 function remoteWords(err) {
-  const said2 = lines(err).filter((line) => line.startsWith("remote: ")).map((line) => line.slice("remote: ".length).trim()).filter((line) => line !== "" && !/^error: hook declined/.test(line));
+  const said2 = lines(err).filter((line2) => line2.startsWith("remote: ")).map((line2) => line2.slice("remote: ".length).trim()).filter((line2) => line2 !== "" && !/^error: hook declined/.test(line2));
   return said2.length > 0 ? said2.join(" ") : lines(err)[0] ?? "git said nothing";
 }
 function versionIn(said2) {
@@ -23007,13 +23007,13 @@ function heldNote(pushed, name2) {
 }
 async function checkGit(git2 = "git", path = process.env["PATH"] ?? "/usr/bin:/bin") {
   const [major, minor] = versionIn(PROJECT_GIT_VERSION) ?? [0, 0];
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     execFile(git2, ["--version"], { env: { PATH: path } }, (error62, stdout) => {
       if (error62 !== null)
-        return resolve6({ ok: false, why: "git was not found on this machine" });
+        return resolve7({ ok: false, why: "git was not found on this machine" });
       const mine = versionIn(stdout);
       const enough = mine !== void 0 && (mine[0] > major || mine[0] === major && mine[1] >= minor);
-      resolve6(enough ? { ok: true, version: mine.join(".") } : { ok: false, why: `${stdout.trim()} is older than ${PROJECT_GIT_VERSION}` });
+      resolve7(enough ? { ok: true, version: mine.join(".") } : { ok: false, why: `${stdout.trim()} is older than ${PROJECT_GIT_VERSION}` });
     });
   });
 }
@@ -23142,8 +23142,8 @@ var Project = class {
   async standing(remote) {
     const mine = await this.head("HEAD");
     const base = await this.baseOf(mine, remote);
-    const counted = lines((await this.git(["diff", "--numstat", "--no-renames", "-z", base])).out.replace(/\0/g, "\n")).map((line) => {
-      const [added2 = "0", removed = "0", ...path] = line.split("	");
+    const counted = lines((await this.git(["diff", "--numstat", "--no-renames", "-z", base])).out.replace(/\0/g, "\n")).map((line2) => {
+      const [added2 = "0", removed = "0", ...path] = line2.split("	");
       return { path: path.join("	"), added: Number(added2) || 0, removed: Number(removed) || 0 };
     });
     const added = lines((await this.git(["ls-files", "--others", "--exclude-standard", "-z"])).out.replace(/\0/g, "\n"));
@@ -23189,8 +23189,8 @@ var Project = class {
   async markedLines(path) {
     try {
       const all = (await readFile(join(this.copy, path), "utf8")).split("\n");
-      const start = all.findIndex((line) => line.startsWith("<<<<<<< "));
-      const end2 = all.findIndex((line, at) => at > start && line.startsWith(">>>>>>> "));
+      const start = all.findIndex((line2) => line2.startsWith("<<<<<<< "));
+      const end2 = all.findIndex((line2, at) => at > start && line2.startsWith(">>>>>>> "));
       if (start < 0 || end2 < 0)
         return void 0;
       const shown2 = all.slice(Math.max(0, start - 1), end2 + 2);
@@ -23459,8 +23459,8 @@ ${sent.err}`;
       env[`GIT_CONFIG_KEY_${at}`] = key;
       env[`GIT_CONFIG_VALUE_${at}`] = value;
     });
-    return new Promise((resolve6) => {
-      execFile(options.git ?? "git", [...args], { cwd: this.copy, env, maxBuffer: 64 * 1024 * 1024 }, (error62, stdout, stderr) => resolve6({ ok: error62 === null, out: stdout, err: stderr }));
+    return new Promise((resolve7) => {
+      execFile(options.git ?? "git", [...args], { cwd: this.copy, env, maxBuffer: 64 * 1024 * 1024 }, (error62, stdout, stderr) => resolve7({ ok: error62 === null, out: stdout, err: stderr }));
     });
   }
 };
@@ -23483,8 +23483,8 @@ var Lane = class {
   constructor(id2, wire) {
     this.id = id2;
     this.wire = wire;
-    this.result = new Promise((resolve6) => {
-      this.settle = resolve6;
+    this.result = new Promise((resolve7) => {
+      this.settle = resolve7;
     });
     this.stop = wire.hear(id2, (event) => this.onUpdated(event));
   }
@@ -23627,7 +23627,7 @@ var Run = class {
   /** Resolve once the run is not paused. A stopped run resolves too: check `over` after. */
   async whenRunning() {
     while (this.held && !this.ended) {
-      await new Promise((resolve6) => setTimeout(resolve6, 50));
+      await new Promise((resolve7) => setTimeout(resolve7, 50));
     }
   }
   status(input2) {
@@ -24411,8 +24411,8 @@ var Chips = class _Chips {
   }
   /** Resolve with the first event that matches, now or later. */
   waitFor(match) {
-    return new Promise((resolve6) => {
-      this.waiters.add({ match, resolve: resolve6 });
+    return new Promise((resolve7) => {
+      this.waiters.add({ match, resolve: resolve7 });
     });
   }
   close() {
@@ -24439,7 +24439,7 @@ var Chips = class _Chips {
     return `${base}/v1/ws?ticket=${encodeURIComponent(String(ticket))}`;
   }
   open(first) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       this.setState("connecting");
       const failed = (what, error62) => {
         if (first)
@@ -24457,13 +24457,13 @@ var Chips = class _Chips {
         }
         this.socket = socket;
         this.listen(socket, {
-          settled: (hello2) => this.settled(socket, hello2, first, resolve6, reject)
+          settled: (hello2) => this.settled(socket, hello2, first, resolve7, reject)
         });
       }, (error62) => failed("could not get a socket ticket", error62));
     });
   }
   /** The handshake's outcome: the hello, a refusal, or the socket gone before either. */
-  settled(socket, hello2, first, resolve6, reject) {
+  settled(socket, hello2, first, resolve7, reject) {
     if (hello2 === void 0) {
       if (first)
         reject(new ConnectError("the server closed the socket before saying hello"));
@@ -24477,7 +24477,7 @@ var Chips = class _Chips {
       return;
     }
     this.onHello(socket, hello2);
-    void this.subscribed(socket).then(resolve6);
+    void this.subscribed(socket).then(resolve7);
   }
   /** The socket's four events. `settled` fires once: with the hello, a refusal, or nothing. */
   listen(socket, on) {
@@ -24572,15 +24572,15 @@ var Chips = class _Chips {
   subscribed(socket) {
     this.pings += 1;
     const ts = Date.now() + this.pings;
-    return new Promise((resolve6) => {
+    return new Promise((resolve7) => {
       const timer = setTimeout(() => {
         this.pongs.delete(ts);
-        resolve6();
+        resolve7();
       }, 2e3);
       this.pongs.set(ts, () => {
         clearTimeout(timer);
         this.pongs.delete(ts);
-        resolve6();
+        resolve7();
       });
       socket.send(JSON.stringify({ frame: "ping", ts }));
     });
@@ -24963,7 +24963,7 @@ function openKeyStore(env, platform = process.platform) {
 // node_modules/@chipschat/harness/dist/steps.js
 import { writeSync } from "node:fs";
 var STEP_MARK = "chips-step ";
-function reportStep(step, detail = {}, env = process.env, write = (line) => void writeSync(1, line)) {
+function reportStep(step, detail = {}, env = process.env, write = (line2) => void writeSync(1, line2)) {
   if (env["CHIPS_STEPS"] !== "json")
     return;
   try {
@@ -25044,8 +25044,8 @@ async function refused(response) {
   const body = await response.json().catch(() => ({}));
   return new JoinError(body.error?.refusal ?? body.error?.code ?? `http_${response.status}`, body.error?.message ?? `Chips answered ${response.status}.`);
 }
-var wait = (ms, signal) => new Promise((resolve6, reject) => {
-  const timer = setTimeout(resolve6, ms);
+var wait = (ms, signal) => new Promise((resolve7, reject) => {
+  const timer = setTimeout(resolve7, ms);
   signal?.addEventListener("abort", () => {
     clearTimeout(timer);
     reject(new JoinError("stopped", "Stopped before a person decided."));
@@ -25169,8 +25169,8 @@ var MOST_FILES = 20;
 var MOST_FILE_BYTES = 100 * 1024 * 1024;
 function filesNamedIn(answer) {
   const named = [];
-  const kept = answer.split("\n").filter((line) => {
-    const media = /^\s*MEDIA:\s*(\S.*?)\s*$/.exec(line);
+  const kept = answer.split("\n").filter((line2) => {
+    const media = /^\s*MEDIA:\s*(\S.*?)\s*$/.exec(line2);
     if (media?.[1] === void 0)
       return true;
     if (!named.includes(media[1]))
@@ -25555,7 +25555,7 @@ function fileStore(path) {
 
 // src/bridge.ts
 import { mkdirSync as mkdirSync5 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join10 } from "node:path";
 
 // src/context.ts
 import { spawn } from "node:child_process";
@@ -25578,7 +25578,7 @@ import { basename as basename3, dirname as dirname4, join as join6 } from "node:
 
 // src/home.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync5, readlinkSync, statSync } from "node:fs";
+import { appendFileSync, chmodSync as chmodSync3, existsSync as existsSync5, readFileSync as readFileSync5, readlinkSync, statSync } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { join as join5, resolve as resolve2 } from "node:path";
 function hermesRoot(env = process.env) {
@@ -25596,8 +25596,8 @@ function envValue(home2, name2) {
   const path = join5(home2, ".env");
   if (!existsSync5(path)) return void 0;
   let found;
-  for (const line of readFileSync5(path, "utf8").split("\n")) {
-    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line);
+  for (const line2 of readFileSync5(path, "utf8").split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line2);
     if (match?.[1] !== name2) continue;
     const raw = match[2] ?? "";
     const quoted2 = /^(["'])(.*)\1/.exec(raw);
@@ -25605,6 +25605,14 @@ function envValue(home2, name2) {
   }
   return found;
 }
+function appendEnv(home2, name2, value) {
+  const path = join5(home2, ".env");
+  const text = readFileSync5(path, "utf8");
+  const mode = statSync(path).mode & 511;
+  appendFileSync(path, `${text === "" || text.endsWith("\n") ? "" : "\n"}${name2}=${value}
+`);
+  chmodSync3(path, mode);
+}
 function configText(home2) {
   const path = join5(home2, "config.yaml");
   try {
@@ -25613,20 +25621,20 @@ function configText(home2) {
     return "";
   }
 }
-function uncommented(line) {
-  const indent = line.length - line.trimStart().length;
+function uncommented(line2) {
+  const indent = line2.length - line2.trimStart().length;
   let quote;
-  for (let at = indent; at < line.length; at += 1) {
-    const char = line[at];
+  for (let at = indent; at < line2.length; at += 1) {
+    const char = line2[at];
     if (quote !== void 0) {
       if (char === quote) quote = void 0;
     } else if (char === '"' || char === "'") {
       quote = char;
-    } else if (char === "#" && (at === indent || /\s/.test(line[at - 1] ?? ""))) {
-      return { indent, text: line.slice(indent, at).trimEnd() };
+    } else if (char === "#" && (at === indent || /\s/.test(line2[at - 1] ?? ""))) {
+      return { indent, text: line2.slice(indent, at).trimEnd() };
     }
   }
-  return { indent, text: line.slice(indent).trimEnd() };
+  return { indent, text: line2.slice(indent).trimEnd() };
 }
 function scalar(text) {
   const trimmed = text.trim();
@@ -25648,9 +25656,9 @@ function flowPairs(text) {
 function yamlValue(text, section, key) {
   const lines2 = text.split("\n");
   for (let at = 0; at < lines2.length; at += 1) {
-    const { indent, text: line } = uncommented(lines2[at] ?? "");
-    if (indent !== 0 || !line.startsWith(`${section}:`)) continue;
-    const rest = line.slice(section.length + 1).trim();
+    const { indent, text: line2 } = uncommented(lines2[at] ?? "");
+    if (indent !== 0 || !line2.startsWith(`${section}:`)) continue;
+    const rest = line2.slice(section.length + 1).trim();
     if (rest !== "") return flowPairs(rest)?.get(key);
     let child;
     for (let below = at + 1; below < lines2.length; below += 1) {
@@ -25722,7 +25730,9 @@ function folderOfPid(raw) {
   } catch {
     return void 0;
   }
-  if (pid === void 0) return void 0;
+  return pid === void 0 ? void 0 : processFolder(pid);
+}
+function processFolder(pid) {
   try {
     if (process.platform === "linux") return readlinkSync(`/proc/${pid}/cwd`);
     const out = execFileSync3("lsof", ["-a", "-p", String(pid), "-d", "cwd", "-Fn"], {
@@ -25730,8 +25740,8 @@ function folderOfPid(raw) {
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const line = out.split("\n").find((each) => each.startsWith("n"));
-    return line === void 0 ? void 0 : line.slice(1);
+    const line2 = out.split("\n").find((each) => each.startsWith("n"));
+    return line2 === void 0 ? void 0 : line2.slice(1);
   } catch {
     return void 0;
   }
@@ -25837,13 +25847,9 @@ function fileOf(source2, name2) {
 }
 var byOrder = (a, b) => ORDER.indexOf(a.kind) - ORDER.indexOf(b.kind) || a.profile.localeCompare(b.profile);
 var Picture = class {
-  /** Each file by its path, and the agents that read it. */
-  readers = /* @__PURE__ */ new Map();
-  /** The shared files, each with its id and the name the set shows. */
-  shared = /* @__PURE__ */ new Map();
-  /** The agents and the files each reads, in page order. */
-  agents = /* @__PURE__ */ new Map();
-  constructor(readers, first, env = process.env) {
+  constructor(readers, first, env = process.env, ownProfiles = false) {
+    this.first = first;
+    this.ownProfiles = ownProfiles;
     const byProfile = /* @__PURE__ */ new Map();
     const sourcesFor = (profile) => {
       let sources = byProfile.get(profile.home);
@@ -25865,7 +25871,7 @@ var Picture = class {
     }
     const taken = /* @__PURE__ */ new Set();
     const ids2 = /* @__PURE__ */ new Set();
-    const sharing = [...this.readers.values()].filter(({ source: source2, agents }) => source2.kind === "project" || source2.profile === first?.name || agents.length > 1).sort((a, b) => (a.source.profile === first?.name ? 0 : 1) - (b.source.profile === first?.name ? 0 : 1) || byOrder(a.source, b.source));
+    const sharing = [...this.readers.values()].filter(({ source: source2, agents }) => source2.kind === "project" || this.forNewAgents(source2) || agents.length > 1).sort((a, b) => (a.source.profile === first?.name ? 0 : 1) - (b.source.profile === first?.name ? 0 : 1) || byOrder(a.source, b.source));
     for (const { source: source2 } of sharing) {
       const name2 = taken.has(source2.file) ? `${source2.file} (${source2.profile})` : source2.file;
       taken.add(name2);
@@ -25875,8 +25881,24 @@ var Picture = class {
       this.shared.set(source2.path, { id: id2, name: name2 });
     }
   }
+  first;
+  ownProfiles;
+  /** Each file by its path, and the agents that read it. */
+  readers = /* @__PURE__ */ new Map();
+  /** The shared files, each with its id and the name the set shows. */
+  shared = /* @__PURE__ */ new Map();
+  /** The agents and the files each reads, in page order. */
+  agents = /* @__PURE__ */ new Map();
+  /**
+   * Whether each new agent starts with this file or a copy of it: the first profile's files, or
+   * where each new agent gets a profile of its own, the first profile's SOUL.md and the project file.
+   */
+  forNewAgents(source2) {
+    if (source2.profile !== this.first?.name) return false;
+    return !this.ownProfiles || source2.kind === "soul" || source2.kind === "project";
+  }
   /** The harness's own set, as `PUT /v1/harnesses/:id/context` takes it. */
-  harnessCopy(first) {
+  harnessCopy() {
     const shown2 = [];
     const notShown = [];
     for (const [path, { id: id2, name: name2 }] of this.shared) {
@@ -25892,8 +25914,7 @@ var Picture = class {
         ...file3,
         id: id2,
         used_by: agents.length,
-        // A new agent runs on the first profile: it reads that profile's files and its project file.
-        ...source2.profile === first?.name ? { for_new_agents: true } : {}
+        ...this.forNewAgents(source2) ? { for_new_agents: true } : {}
       });
     }
     return {
@@ -26054,9 +26075,9 @@ var Contexts = class {
   /** Every copy read again, and sent where it moved. */
   refresh() {
     return this.inLine(async () => {
-      const { readers, first } = this.roster();
-      const picture = new Picture(readers, first, this.env);
-      await this.port.harness(picture.harnessCopy(first)).catch((error62) => {
+      const { readers, first, ownProfiles } = this.roster();
+      const picture = new Picture(readers, first, this.env, ownProfiles);
+      await this.port.harness(picture.harnessCopy()).catch((error62) => {
         this.log(`the harness's context not sent: ${messageOf(error62)}`);
       });
       for (const { agentId: agentId2 } of readers) {
@@ -26074,12 +26095,12 @@ var Contexts = class {
    */
   async edit(frame) {
     const answer = await this.inLine(async () => {
-      const { readers, first } = this.roster();
+      const { readers, first, ownProfiles } = this.roster();
       const copyNow = () => {
-        const picture = new Picture(readers, first, this.env);
-        return frame.agent_id === void 0 ? picture.harnessCopy(first) : picture.agentCopy(frame.agent_id);
+        const picture = new Picture(readers, first, this.env, ownProfiles);
+        return frame.agent_id === void 0 ? picture.harnessCopy() : picture.agentCopy(frame.agent_id);
       };
-      const found = new Picture(readers, first, this.env).find(frame.agent_id, frame.name);
+      const found = new Picture(readers, first, this.env, ownProfiles).find(frame.agent_id, frame.name);
       if (found === void 0) {
         throw new Refuse(`Hermes gives this agent no file called ${frame.name}.`, copyNow(), "failed");
       }
@@ -26146,6 +26167,8 @@ function numbersOf(profile, body) {
   if (typeof body !== "object" || body === null) return void 0;
   const top = body;
   if (top["hook_event_name"] !== "post_api_request") return void 0;
+  const sender = top["profile"];
+  if (typeof sender === "string" && sender !== profile && sender !== "custom") return void 0;
   const extra = typeof top["extra"] === "object" && top["extra"] !== null ? top["extra"] : {};
   const named = typeof top["session_id"] === "string" ? top["session_id"] : "";
   const task2 = typeof extra["task_id"] === "string" && extra["task_id"] !== "" ? extra["task_id"] : void 0;
@@ -26451,6 +26474,13 @@ var HermesClient = class {
     const latest = read["session_id"];
     return typeof latest === "string" && latest !== "" ? latest : sessionId;
   }
+  /**
+   * The models Hermes has for this profile, as its own picker lists them: `GET /api/model/options`,
+   * only the providers the profile is set up for (`models.ts`).
+   */
+  async modelOptions() {
+    return await this.call("GET", "/api/model/options?include_unconfigured=false");
+  }
   /** A run in a session: what it is told, and under a key a retry of the same turn repeats. */
   async startRun(input2) {
     const started = await this.call(
@@ -26460,6 +26490,7 @@ var HermesClient = class {
         input: input2.text,
         session_id: input2.sessionId,
         ...input2.model === void 0 ? {} : { model: input2.model },
+        ...input2.provider === void 0 ? {} : { provider: input2.provider },
         ...input2.instructions === void 0 ? {} : { instructions: input2.instructions }
       },
       { "Idempotency-Key": input2.key.slice(0, 255) }
@@ -26529,7 +26560,7 @@ function sessionIdOf(made) {
   return typeof id2 === "string" && id2 !== "" ? id2 : void 0;
 }
 function eventOf(block) {
-  const data = block.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice(5).replace(/^ /, "")).join("\n");
+  const data = block.split("\n").filter((line2) => line2.startsWith("data:")).map((line2) => line2.slice(5).replace(/^ /, "")).join("\n");
   if (data === "") return void 0;
   try {
     const parsed = JSON.parse(data);
@@ -26556,7 +26587,7 @@ async function failureOf(answer) {
 }
 
 // src/hooks.ts
-import { appendFileSync, chmodSync as chmodSync3, existsSync as existsSync7, readFileSync as readFileSync7, statSync as statSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
 import { join as join7 } from "node:path";
 var HOOK_NAME = "chips";
 var SECRET_ENV = "CHIPS_HOOK_SECRET";
@@ -26564,9 +26595,9 @@ function hookUrl(port, profile) {
   return `http://127.0.0.1:${port}${HOOK_PATH}${profile}`;
 }
 function linesOf2(text) {
-  return text.split("\n").map((line) => {
-    const indent = line.length - line.trimStart().length;
-    const words4 = line.trimStart().startsWith("#") ? "" : line.trim().replace(/\s+#.*$/, "");
+  return text.split("\n").map((line2) => {
+    const indent = line2.length - line2.trimStart().length;
+    const words4 = line2.trimStart().startsWith("#") ? "" : line2.trim().replace(/\s+#.*$/, "");
     return { indent, words: words4 };
   });
 }
@@ -26593,12 +26624,7 @@ function entryLines(indent, url2, secret) {
 function secretInEnv(home2, secret) {
   const path = join7(home2, ".env");
   if (!existsSync7(path)) return false;
-  if (envValue(home2, SECRET_ENV) !== void 0) return true;
-  const text = readFileSync7(path, "utf8");
-  const mode = statSync3(path).mode & 511;
-  appendFileSync(path, `${text === "" || text.endsWith("\n") ? "" : "\n"}${SECRET_ENV}=${secret}
-`);
-  chmodSync3(path, mode);
+  if (envValue(home2, SECRET_ENV) === void 0) appendEnv(home2, SECRET_ENV, secret);
   return true;
 }
 function addHook(home2, port, profile, secret) {
@@ -26608,15 +26634,15 @@ function addHook(home2, port, profile, secret) {
   const text = existsSync7(path) ? readFileSync7(path, "utf8") : "";
   const lines2 = linesOf2(text);
   const ours2 = new RegExp(`^(?:-\\s*)?url:\\s*["']?${url2.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&")}["']?$`);
-  if (lines2.some((line) => ours2.test(line.words))) return { state: "there", path };
-  const where = lines2.findIndex((line) => line.indent === 0 && /^["']?hooks["']?\s*:/.test(line.words));
+  if (lines2.some((line2) => ours2.test(line2.words))) return { state: "there", path };
+  const where = lines2.findIndex((line2) => line2.indent === 0 && /^["']?hooks["']?\s*:/.test(line2.words));
   const byHand = (why) => {
     const inEnv2 = secretInEnv(home2, secret);
     const shown2 = entryLines("  ", url2, inEnv2 ? { env: SECRET_ENV } : { inline: secret });
     return { state: "by_hand", path, why, lines: ["hooks:", ...shown2].join("\n") };
   };
   const plain = /^(?:"[^"]+"|'[^']+'|[A-Za-z_][\w.-]*)\s*:(?:\s|$)/;
-  if (lines2.some((line) => line.indent === 0 && line.words !== "" && !plain.test(line.words))) {
+  if (lines2.some((line2) => line2.indent === 0 && line2.words !== "" && !plain.test(line2.words))) {
     return byHand("its top level isn't laid out as this bridge expects");
   }
   if (where === -1) {
@@ -26636,20 +26662,20 @@ function addHook(home2, port, profile, secret) {
   const head = lines2[where]?.words ?? "";
   if (head.replace(/^["']?hooks["']?\s*:/, "").trim() !== "") return byHand("its hooks: is written on one line");
   const children = [];
-  for (const line of lines2.slice(where + 1)) {
-    if (line.words === "") continue;
-    if (line.indent === 0) break;
-    children.push(line);
+  for (const line2 of lines2.slice(where + 1)) {
+    if (line2.words === "") continue;
+    if (line2.indent === 0) break;
+    children.push(line2);
   }
   const indent = children[0]?.indent ?? 2;
   const named = new RegExp(`^(?:-\\s*)?name:\\s*["']?${HOOK_NAME}["']?$`);
-  if (children.some((line) => named.test(line.words))) {
+  if (children.some((line2) => named.test(line2.words))) {
     return byHand(`its hooks have an entry called ${HOOK_NAME} with another address`);
   }
-  if (children.some((line) => line.indent === indent && /^["']?outbound["']?\s*:/.test(line.words))) {
+  if (children.some((line2) => line2.indent === indent && /^["']?outbound["']?\s*:/.test(line2.words))) {
     return byHand("its hooks already have an outbound list");
   }
-  if (children.some((line) => line.indent !== indent && line.indent < indent) || children[0]?.words.startsWith("-")) {
+  if (children.some((line2) => line2.indent !== indent && line2.indent < indent) || children[0]?.words.startsWith("-")) {
     return byHand("its hooks: isn't laid out as this bridge expects");
   }
   const inEnv = secretInEnv(home2, secret);
@@ -26659,8 +26685,642 @@ function addHook(home2, port, profile, secret) {
   return { state: "added", path };
 }
 
+// src/models.ts
+var MODEL_CHOICES_MAX2 = 40;
+var LABEL_MAX = 80;
+var DEFAULT_LABEL = "Hermes's default";
+function choiceId(provider, model) {
+  return `${provider}/${model}`;
+}
+function runModelOf(id2) {
+  const at = id2.indexOf("/");
+  return at <= 0 ? { model: id2 } : { provider: id2.slice(0, at), model: id2.slice(at + 1) };
+}
+function providersOf(options) {
+  const ready = (options.providers ?? []).filter(
+    (provider) => provider.authenticated !== false && (provider.models ?? []).length > 0
+  );
+  const current = (provider) => provider.is_current === true || provider.slug === options.provider;
+  return [...ready.filter(current), ...ready.filter((provider) => !current(provider))];
+}
+function choicesOf(options) {
+  const choices = [];
+  for (const provider of providersOf(options)) {
+    for (const model of provider.models ?? []) {
+      const id2 = choiceId(provider.slug, model);
+      if (choices.some((choice) => choice.id === id2)) continue;
+      choices.push({ id: id2, label: `${model} \xB7 ${provider.name ?? provider.slug}`.slice(0, LABEL_MAX), efforts: [] });
+    }
+  }
+  return choices;
+}
+function defaultOf(options) {
+  const model = options.model?.trim();
+  if (model === void 0 || model === "") return void 0;
+  return options.provider === void 0 || options.provider === "" ? model : choiceId(options.provider, model);
+}
+function matched(choices, model) {
+  if (choices.some((choice) => choice.id === model)) return model;
+  return choices.find((choice) => runModelOf(choice.id).model === model)?.id ?? model;
+}
+function copyOf(options, own2) {
+  let choices = choicesOf(options);
+  const fallback = defaultOf(options);
+  const byDefault = fallback === void 0 ? void 0 : matched(choices, fallback);
+  const mine = own2 === void 0 ? void 0 : matched(choices, own2);
+  const model = mine ?? byDefault ?? choices[0]?.id;
+  if (model === void 0) return void 0;
+  const keep = [model, ...byDefault === void 0 ? [] : [byDefault]];
+  for (const id2 of keep) {
+    if (!choices.some((choice) => choice.id === id2)) choices = [{ id: id2, label: id2.slice(0, LABEL_MAX), efforts: [] }, ...choices];
+  }
+  let others = MODEL_CHOICES_MAX2 - keep.filter((id2, at) => keep.indexOf(id2) === at).length;
+  choices = choices.filter((choice) => keep.includes(choice.id) || others-- > 0);
+  return {
+    model,
+    own: mine !== void 0,
+    ...byDefault === void 0 ? {} : { default: { label: DEFAULT_LABEL, model: byDefault } },
+    choices,
+    editable: true
+  };
+}
+
+// src/profiles.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { existsSync as existsSync9, readFileSync as readFileSync9, rmSync as rmSync4 } from "node:fs";
+import { createConnection } from "node:net";
+import { join as join9 } from "node:path";
+
+// src/gateway.ts
+import { spawn as spawn2 } from "node:child_process";
+import { createHash as createHash3 } from "node:crypto";
+import { accessSync as accessSync2, appendFileSync as appendFileSync2, closeSync as closeSync2, constants as constants2, existsSync as existsSync8, openSync as openSync2, readFileSync as readFileSync8, readSync, statSync as statSync3 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { basename as basename4, delimiter as delimiter2, dirname as dirname5, join as join8, resolve as resolve3 } from "node:path";
+var TIMING = {
+  stopMs: 15e3,
+  killMs: 5e3,
+  earlyMs: 1e4,
+  upMs: 9e4,
+  serviceMs: 15e4,
+  pollMs: 500
+};
+var EXPAT = "/opt/homebrew/opt/expat/lib/libexpat.1.dylib";
+var EXPAT_SYMBOL = "_XML_SetAllocTrackerActivationThreshold";
+function gatewaysOf(agents) {
+  return [...new Set(agents.map(({ address }) => address.url.replace(/\/+$/, "")))].map((url2) => ({ url: url2 }));
+}
+function isLocal(url2) {
+  try {
+    return ["127.0.0.1", "localhost", "[::1]", "::1"].includes(new URL(url2).hostname);
+  } catch {
+    return false;
+  }
+}
+function portOf(url2) {
+  const parsed = new URL(url2);
+  return Number(parsed.port || (parsed.protocol === "https:" ? 443 : 80));
+}
+function line(words4) {
+  const one = words4.replace(/\s+/g, " ").trim();
+  return one.length <= 200 ? one : `${one.slice(0, 199)}\u2026`;
+}
+function whyFrom(output2, code) {
+  const lines2 = output2.split("\n").map((each) => each.trim()).filter((each) => each !== "");
+  const why = lines2.findLast((each) => /^[A-Za-z_][\w.]*(Error|Exception)\b/.test(each)) ?? lines2.at(-1);
+  if (why === void 0) return code === null || code === void 0 ? "it was stopped" : `it exited ${code}`;
+  return why.length <= 200 ? why : why.replace(/\/(?:[^\s/(),:'"]+\/)+([^\s/(),:'"]+)/g, "$1");
+}
+function gatewayRunArgs(command) {
+  const words4 = command.trim().split(/\s+/);
+  const at = words4.findIndex((word) => basename4(word) === "hermes");
+  if (at === -1) return void 0;
+  const args = words4.slice(at + 1);
+  const plain = [];
+  for (let next = 0; next < args.length; next += 1) {
+    const word = args[next] ?? "";
+    if (word === "-p" || word === "--profile") next += 1;
+    else if (!word.startsWith("-")) plain.push(word);
+  }
+  return plain[0] === "gateway" && plain[1] === "run" ? args : void 0;
+}
+function serviceOf(system, root2, env = {}) {
+  const home2 = resolve3(root2);
+  const native = resolve3(system.home, ".hermes");
+  const suffix = home2 === native ? "" : dirname5(home2) === join8(native, "profiles") ? basename4(home2) : createHash3("sha256").update(home2).digest("hex").slice(0, 8);
+  if (system.platform === "darwin") {
+    const path = join8(system.home, "Library", "LaunchAgents", `ai.hermes.gateway${suffix ? `-${suffix}` : ""}.plist`);
+    return system.exists(path) ? { kind: "launchd", path } : void 0;
+  }
+  if (system.platform === "linux") {
+    const unit = `hermes-gateway${suffix ? `-${suffix}` : ""}.service`;
+    const user = join8(env["XDG_CONFIG_HOME"] || join8(system.home, ".config"), "systemd", "user", unit);
+    if (system.exists(user)) return { kind: "systemd", path: user };
+    const machine = join8("/etc/systemd/system", unit);
+    if (system.exists(machine)) return { kind: "systemd", path: machine, system: true };
+  }
+  return void 0;
+}
+function expand(text, env) {
+  let out = "";
+  let at = 0;
+  while (at < text.length) {
+    const char = text[at] ?? "";
+    if (char === "\\" && at + 1 < text.length) {
+      out += text[at + 1];
+      at += 2;
+    } else if (char !== "$") {
+      out += char;
+      at += 1;
+    } else if (text[at + 1] === "{") {
+      let depth = 1;
+      let end2 = at + 2;
+      for (; end2 < text.length; end2 += 1) {
+        if (text[end2] === "{") depth += 1;
+        else if (text[end2] === "}" && --depth === 0) break;
+      }
+      const inner = /^([A-Za-z_][A-Za-z0-9_]*)(?:(:?)-([\s\S]*))?$/.exec(text.slice(at + 2, end2));
+      if (inner !== null) {
+        const value = env[inner[1] ?? ""];
+        const unset = inner[2] === ":" ? value === void 0 || value === "" : value === void 0;
+        out += inner[3] !== void 0 && unset ? expand(inner[3], env) : value ?? "";
+      }
+      at = end2 + 1;
+    } else {
+      const name2 = /^[A-Za-z_][A-Za-z0-9_]*/.exec(text.slice(at + 1))?.[0];
+      out += name2 === void 0 ? "$" : env[name2] ?? "";
+      at += 1 + (name2?.length ?? 0);
+    }
+  }
+  return out;
+}
+function wrapperOf(text, env) {
+  for (const each of text.split("\n")) {
+    const found = /^\s*((?:[A-Za-z_][A-Za-z0-9_]*="(?:[^"\\]|\\.)*"\s+)*)exec\s+"([^"]+)"/.exec(each);
+    if (found === null) continue;
+    const vars = {};
+    for (const set2 of (found[1] ?? "").matchAll(/([A-Za-z_][A-Za-z0-9_]*)="((?:[^"\\]|\\.)*)"/g)) {
+      vars[set2[1] ?? ""] = expand(set2[2] ?? "", env);
+    }
+    return { entry: expand(found[2] ?? "", env), vars };
+  }
+  return void 0;
+}
+var NO_HERMES = "The hermes command isn't on this machine's PATH, so Hermes's gateway can't be started.";
+var messageOf2 = (error62) => error62 instanceof Error ? error62.message : String(error62);
+function gatewayEnv(env) {
+  return Object.fromEntries(Object.entries(env).filter(([name2]) => !name2.startsWith("CHIPS_")));
+}
+async function runHermes(system, env, args, timeoutMs, log2) {
+  const hermes = system.which("hermes", env);
+  if (hermes === void 0) return { code: null, output: "The hermes command isn't on this machine's PATH." };
+  const plain = gatewayEnv(env);
+  const ran = await system.run(hermes, args, plain, timeoutMs);
+  if (ran.code === 0 || !ran.output.includes(EXPAT_SYMBOL) || !system.exists(EXPAT)) return ran;
+  const wrapper = wrapperOf(system.read(hermes) ?? "", plain);
+  if (wrapper === void 0) return ran;
+  const expat = dirname5(EXPAT);
+  log2(
+    `hermes ${args.slice(0, 2).join(" ")} stopped at once: Homebrew's Python can't load macOS's expat (${EXPAT_SYMBOL}). Running ${wrapper.entry} directly with DYLD_LIBRARY_PATH=${expat}.`
+  );
+  const libraries = [expat, plain["DYLD_LIBRARY_PATH"]].filter((each) => each !== void 0 && each !== "").join(":");
+  return system.run(wrapper.entry, args, { ...plain, ...wrapper.vars, DYLD_LIBRARY_PATH: libraries }, timeoutMs);
+}
+var Gateways = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  timing = TIMING;
+  /** Each gateway restarted, one after another: what went wrong, in a line, or nothing. */
+  async restart() {
+    const troubles = [];
+    for (const gateway of this.options.gateways) {
+      let trouble;
+      try {
+        trouble = await this.restartOne(gateway);
+      } catch (error62) {
+        trouble = `Restart failed: ${messageOf2(error62)}`;
+      }
+      if (trouble !== void 0) troubles.push(trouble);
+    }
+    return troubles.length === 0 ? void 0 : line(troubles.join(" "));
+  }
+  /** Each local gateway that doesn't answer, started: the bridge is starting. */
+  async startIfDown() {
+    const { system, log: log2 } = this.options;
+    for (const gateway of this.options.gateways) {
+      if (!isLocal(gateway.url)) continue;
+      const port = portOf(gateway.url);
+      try {
+        if (await system.healthy(gateway.url)) continue;
+        let trouble;
+        if (this.serviceFor(gateway) !== void 0) {
+          log2(`Hermes isn't answering on port ${port}: starting its service, hermes gateway start`);
+          trouble = await this.byService(gateway, "start", void 0);
+        } else {
+          const pid = await system.listener(port);
+          if (pid !== void 0) {
+            log2(`Hermes isn't answering on port ${port}, but pid ${pid} listens there: no second gateway started`);
+            continue;
+          }
+          log2(`Hermes isn't answering on port ${port}: starting hermes gateway run`);
+          trouble = await this.start(gateway, ["gateway", "run"], void 0);
+        }
+        if (trouble !== void 0) log2(trouble);
+      } catch (error62) {
+        log2(`Hermes's gateway on port ${port} couldn't be started: ${messageOf2(error62)}`);
+      }
+    }
+  }
+  /**
+   * The service of Hermes's root, for the Main agent's gateway: a gateway at another address is
+   * another profile's own, which `hermes gateway status` of the root doesn't speak for.
+   */
+  serviceFor(gateway) {
+    if (gateway !== this.options.gateways[0]) return void 0;
+    return serviceOf(this.options.system, this.options.root, this.options.env);
+  }
+  async restartOne(gateway) {
+    const { system, log: log2 } = this.options;
+    if (!isLocal(gateway.url)) {
+      return `Hermes's gateway at ${new URL(gateway.url).host} isn't on this machine, so it can't be restarted from here.`;
+    }
+    const port = portOf(gateway.url);
+    const pid = await system.listener(port);
+    if (this.serviceFor(gateway) !== void 0) {
+      log2("restarting Hermes's service: hermes gateway restart");
+      return this.byService(gateway, "restart", pid);
+    }
+    if (pid === void 0) {
+      if (await system.healthy(gateway.url)) return `Can't tell what answers on port ${port}, so nothing was restarted.`;
+      log2(`nothing listens on port ${port}: starting hermes gateway run`);
+      return this.start(gateway, ["gateway", "run"], void 0);
+    }
+    const info = await system.describe(pid);
+    if (info === void 0) return this.start(gateway, ["gateway", "run"], void 0);
+    const args = this.ours(info);
+    if (args === void 0) {
+      log2(`pid ${pid} on port ${port} isn't this user's hermes gateway run, so it was left alone: ${info.command.slice(0, 160)}`);
+      return `Port ${port} is held by something other than hermes gateway run (pid ${pid}), so nothing was restarted.`;
+    }
+    if (system.which("hermes", this.options.env) === void 0) return NO_HERMES;
+    log2(`stopping Hermes's gateway, pid ${pid}`);
+    if (!await this.stop(pid)) return `Hermes's gateway (pid ${pid}) didn't stop, so it wasn't started again.`;
+    return this.start(gateway, args, info.cwd);
+  }
+  /** A `hermes gateway run` of this user's: the words to start it again with. */
+  ours(info) {
+    return info.uid === this.options.system.uid ? gatewayRunArgs(info.command) : void 0;
+  }
+  /** SIGTERM, then SIGKILL once it has had a while, and only while it is still that gateway. */
+  async stop(pid) {
+    const { system, log: log2 } = this.options;
+    system.signal(pid, "SIGTERM");
+    if (await this.gone(pid, this.timing.stopMs)) return true;
+    const still = await system.describe(pid);
+    if (still === void 0) return true;
+    if (this.ours(still) === void 0) return false;
+    log2(`Hermes's gateway, pid ${pid}, is still running ${this.timing.stopMs / 1e3} s after SIGTERM: SIGKILL`);
+    system.signal(pid, "SIGKILL");
+    return this.gone(pid, this.timing.killMs);
+  }
+  async gone(pid, withinMs) {
+    const { system } = this.options;
+    const by = system.now() + withinMs;
+    while (system.alive(pid)) {
+      if (system.now() >= by) return false;
+      await system.sleep(this.timing.pollMs);
+    }
+    return true;
+  }
+  /** Hermes's own `hermes gateway restart|start`, then the gateway answering, from a new process. */
+  async byService(gateway, verb, before) {
+    const { system, env } = this.options;
+    const hermes = system.which("hermes", env);
+    if (hermes === void 0) return NO_HERMES;
+    const scope = this.serviceFor(gateway)?.system === true ? ["--system"] : [];
+    const ran = await system.run(hermes, ["gateway", verb, ...scope], gatewayEnv(env), this.timing.serviceMs);
+    if (ran.code !== 0) return line(`hermes gateway ${verb} failed: ${whyFrom(ran.output, ran.code)}`);
+    const by = system.now() + this.timing.serviceMs;
+    for (; ; ) {
+      const old = before !== void 0 && system.alive(before);
+      if (!old && await system.healthy(gateway.url)) return void 0;
+      if (system.now() >= by) {
+        if (await system.healthy(gateway.url)) return void 0;
+        return `Hermes's service ${verb === "start" ? "started" : "restarted"}, but nothing answers on port ${portOf(gateway.url)}.`;
+      }
+      await system.sleep(this.timing.pollMs);
+    }
+  }
+  /**
+   * `hermes <args>` (`gateway run`), on its own, in `cwd` (else the home), then through Homebrew's
+   * expat when it died of macOS's.
+   */
+  async start(gateway, args, cwd) {
+    const { system, env, log: log2 } = this.options;
+    const port = portOf(gateway.url);
+    const hermes = system.which("hermes", env);
+    if (hermes === void 0) return NO_HERMES;
+    const folder2 = cwd ?? system.home;
+    const plain = gatewayEnv(env);
+    let outcome = await this.launch(gateway, hermes, args, plain, folder2, `hermes ${args.join(" ")}`);
+    if (outcome.state === "ended" && outcome.early && outcome.output.includes(EXPAT_SYMBOL) && system.exists(EXPAT)) {
+      const wrapper = wrapperOf(system.read(hermes) ?? "", plain);
+      if (wrapper !== void 0) {
+        const expat = dirname5(EXPAT);
+        log2(
+          `hermes gateway run stopped at once: Homebrew's Python can't load macOS's expat (${EXPAT_SYMBOL}). Starting ${wrapper.entry} directly with DYLD_LIBRARY_PATH=${expat}.`
+        );
+        const libraries = [expat, plain["DYLD_LIBRARY_PATH"]].filter((each) => each !== void 0 && each !== "").join(":");
+        outcome = await this.launch(
+          gateway,
+          wrapper.entry,
+          args,
+          { ...plain, ...wrapper.vars, DYLD_LIBRARY_PATH: libraries },
+          folder2,
+          `${wrapper.entry} ${args.join(" ")} with DYLD_LIBRARY_PATH=${expat}`
+        );
+      }
+    }
+    if (outcome.state === "up") {
+      log2(`Hermes's gateway${outcome.pid === void 0 ? "" : `, pid ${outcome.pid},`} answers on port ${port}. It logs to ${this.options.logFile}.`);
+      return void 0;
+    }
+    if (outcome.state === "silent") return `Hermes's gateway started, but nothing answers on port ${port}.`;
+    return line(`Hermes's gateway stopped as it started: ${whyFrom(outcome.output, outcome.code)}`);
+  }
+  /** A program started, and watched until it answers, ends, or has had its time. */
+  async launch(gateway, command, args, env, cwd, what) {
+    const { system, logFile } = this.options;
+    system.note(logFile, `--- ${new Date(system.now()).toISOString()} chips-hermes started ${what}`);
+    const from = system.size(logFile);
+    const startedAt = system.now();
+    const child = system.launch({ command, args, env, cwd, log: logFile });
+    let ended;
+    void child.exited.then(({ code }) => {
+      ended = { code, at: system.now() };
+    });
+    for (; ; ) {
+      await Promise.resolve();
+      if (ended !== void 0) {
+        return { state: "ended", early: ended.at - startedAt <= this.timing.earlyMs, output: system.since(logFile, from), code: ended.code };
+      }
+      if (await system.healthy(gateway.url)) return { state: "up", pid: child.pid };
+      if (system.now() - startedAt >= this.timing.upMs) return { state: "silent" };
+      await system.sleep(this.timing.pollMs);
+    }
+  }
+};
+function restarter(deps) {
+  let running;
+  return (ask2) => {
+    if (running !== void 0) {
+      deps.log(`restart asked by ${ask2.askedBy} while one runs: it is the same restart`);
+      return running;
+    }
+    running = (async () => {
+      deps.log(`restart asked by ${ask2.askedBy}: restarting Hermes's gateway`);
+      deps.hold(true);
+      let trouble;
+      try {
+        trouble = await deps.restart();
+      } catch (error62) {
+        trouble = line(`Restart failed: ${error62 instanceof Error ? error62.message : String(error62)}`);
+      }
+      deps.log(trouble === void 0 ? "restarted, and Hermes answers" : `restart: ${trouble}`);
+      try {
+        await deps.say(trouble);
+      } catch (error62) {
+        deps.log(`could not tell Chips how the restart went: ${String(error62)}`);
+      } finally {
+        deps.hold(false);
+      }
+    })().finally(() => {
+      running = void 0;
+    });
+    return running;
+  };
+}
+function gatewayLog(configFolder, platform = process.platform) {
+  return platform === "darwin" ? join8(homedir5(), "Library", "Logs", "chips-hermes-gateway.log") : join8(configFolder, "gateway.log");
+}
+function runToEnd(command, args, options) {
+  return new Promise((done) => {
+    const child = spawn2(command, args, { env: options.env, stdio: ["ignore", "pipe", "pipe"] });
+    let output2 = "";
+    const keep = (data) => {
+      output2 = (output2 + String(data)).slice(-8e3);
+    };
+    child.stdout.on("data", keep);
+    child.stderr.on("data", keep);
+    const limit = setTimeout(() => child.kill("SIGTERM"), options.timeoutMs);
+    child.on("error", (error62) => {
+      clearTimeout(limit);
+      done({ code: null, output: error62.message });
+    });
+    child.on("close", (code) => {
+      clearTimeout(limit);
+      done({ code, output: output2 });
+    });
+  });
+}
+function thisMachine() {
+  return {
+    platform: process.platform,
+    uid: process.getuid?.() ?? -1,
+    home: homedir5(),
+    exists: existsSync8,
+    read(path) {
+      try {
+        return readFileSync8(path, "utf8");
+      } catch {
+        return void 0;
+      }
+    },
+    which(command, env) {
+      for (const folder2 of (env["PATH"] ?? "").split(delimiter2)) {
+        if (folder2 === "") continue;
+        const path = join8(folder2, command);
+        try {
+          accessSync2(path, constants2.X_OK);
+          return path;
+        } catch {
+        }
+      }
+      return void 0;
+    },
+    async listener(port) {
+      const { output: output2 } = await runToEnd("lsof", ["-nP", `-iTCP:${port}`, "-sTCP:LISTEN", "-Fp"], { timeoutMs: 5e3 });
+      const pid = Number(/^p(\d+)$/m.exec(output2)?.[1]);
+      return Number.isInteger(pid) && pid > 0 ? pid : void 0;
+    },
+    async describe(pid) {
+      const { code, output: output2 } = await runToEnd("ps", ["-ww", "-o", "uid=", "-o", "command=", "-p", String(pid)], { timeoutMs: 5e3 });
+      const found = /^\s*(\d+)\s+(.*)$/m.exec(output2);
+      if (code !== 0 || found === null) return void 0;
+      return { uid: Number(found[1]), command: found[2] ?? "", cwd: processFolder(pid) };
+    },
+    alive(pid) {
+      try {
+        process.kill(pid, 0);
+        return true;
+      } catch (error62) {
+        return error62.code === "EPERM";
+      }
+    },
+    signal(pid, signal) {
+      try {
+        process.kill(pid, signal);
+      } catch {
+      }
+    },
+    run: (command, args, env, timeoutMs) => runToEnd(command, args, { env, timeoutMs }),
+    launch({ command, args, env, cwd, log: log2 }) {
+      const out = openSync2(log2, "a");
+      try {
+        const child = spawn2(command, args, { cwd, env, detached: true, stdio: ["ignore", out, out] });
+        const exited = new Promise((done) => {
+          child.once("exit", (code, signal) => done({ code, signal }));
+          child.once("error", (error62) => {
+            appendFileSync2(log2, `${error62.message}
+`);
+            done({ code: null, signal: null });
+          });
+        });
+        child.unref();
+        return { pid: child.pid, exited };
+      } finally {
+        closeSync2(out);
+      }
+    },
+    note(log2, words4) {
+      appendFileSync2(log2, `${words4}
+`);
+    },
+    size(log2) {
+      try {
+        return statSync3(log2).size;
+      } catch {
+        return 0;
+      }
+    },
+    since(log2, from) {
+      try {
+        const to = statSync3(log2).size;
+        const start = Math.max(from, to - 64e3);
+        const buffer = Buffer.alloc(Math.max(0, to - start));
+        const fd = openSync2(log2, "r");
+        try {
+          readSync(fd, buffer, 0, buffer.length, start);
+        } finally {
+          closeSync2(fd);
+        }
+        return buffer.toString("utf8");
+      } catch {
+        return "";
+      }
+    },
+    healthy: (url2) => new HermesClient({ url: url2, key: "" }, (input2, init) => fetch(input2, { ...init, signal: AbortSignal.timeout(5e3) })).healthy(),
+    sleep: (ms) => new Promise((done) => setTimeout(done, ms)),
+    now: () => Date.now()
+  };
+}
+
+// src/profiles.ts
+var KEY_ENV = "API_SERVER_KEY";
+var RESERVED = /* @__PURE__ */ new Set(["hermes", "default", "test", "tmp", "root", "sudo"]);
+var CREATE_MS = 12e4;
+function freeProfile(root2, name2, taken) {
+  const slug = name2.normalize("NFKD").replace(/[̀-ͯ]/g, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 56).replace(/^-+|-+$/g, "") || "agent";
+  for (let count = 1; ; count += 1) {
+    if (count === 1 && RESERVED.has(slug)) continue;
+    const profile = count === 1 ? slug : `${slug}-${count}`;
+    if (!taken.includes(profile) && !existsSync9(join9(root2, "profiles", profile))) return profile;
+  }
+}
+function readyProfile(home2, names, hook) {
+  for (const file3 of ["MEMORY.md", "USER.md"]) rmSync4(join9(home2, "memories", file3), { force: true });
+  if (envValue(home2, KEY_ENV) === void 0) appendEnv(home2, KEY_ENV, randomBytes2(32).toString("hex"));
+  if (hook === void 0) return void 0;
+  const path = join9(home2, "config.yaml");
+  if (existsSync9(path)) {
+    const theirs = hookUrl(hook.port, names.from).replace(/[.*+?^${}()|[\]\\/]/g, "\\$&");
+    const entry = new RegExp(`^(\\s*(?:-\\s*)?url:\\s*["']?)${theirs}(["']?\\s*(?:#.*)?)$`, "m");
+    const text = readFileSync9(path, "utf8");
+    if (entry.test(text)) writeWhole(path, text.replace(entry, `$1${hookUrl(hook.port, names.profile)}$2`));
+  }
+  return addHook(home2, hook.port, names.profile, hook.secret);
+}
+function hermesProfiles(options) {
+  return {
+    async create(name2, from) {
+      const args = ["profile", "create", name2, "--clone-from", from, "--no-alias"];
+      const ran = await runHermes(options.system, options.env, args, CREATE_MS, options.log);
+      if (ran.code !== 0) throw new Error(whyFrom(ran.output, ran.code).replace(/^Error:\s*/, ""));
+    },
+    async serve() {
+      const result = await askGateway(options.root, "rescan-profiles");
+      return typeof result?.["multiplex"] === "boolean" ? result["multiplex"] : void 0;
+    }
+  };
+}
+function controlSocketOf(root2) {
+  const direct = join9(root2, "gateway.sock");
+  if (existsSync9(direct)) return direct;
+  try {
+    const pointed = readFileSync9(join9(root2, "gateway.sock.path"), "utf8").trim();
+    return pointed !== "" && existsSync9(pointed) ? pointed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function askGateway(root2, verb, timeoutMs = 8e3) {
+  const path = controlSocketOf(root2);
+  if (path === void 0) return Promise.resolve(void 0);
+  return new Promise((done) => {
+    let heard = "";
+    let over = false;
+    const socket = createConnection(path);
+    const finish = (line2) => {
+      if (over) return;
+      over = true;
+      clearTimeout(timer);
+      socket.destroy();
+      done(line2 === void 0 ? void 0 : resultOf(line2));
+    };
+    const timer = setTimeout(() => finish(void 0), timeoutMs);
+    socket.on("connect", () => socket.write(`${JSON.stringify({ verb, id: 1, protocol: 1 })}
+`));
+    socket.on("data", (chunk) => {
+      heard += String(chunk);
+      const end2 = heard.indexOf("\n");
+      if (end2 >= 0) finish(heard.slice(0, end2));
+    });
+    socket.on("end", () => finish(heard));
+    socket.on("error", () => finish(void 0));
+  });
+}
+function resultOf(line2) {
+  try {
+    const answer = JSON.parse(line2);
+    return answer.ok === true && typeof answer.result === "object" && answer.result !== null ? answer.result : void 0;
+  } catch {
+    return void 0;
+  }
+}
+
 // src/bridge.ts
-var WANTS = ["agents", "new_agents", "forks", "context_files", "context_windows"];
+var WANTS = [
+  "agents",
+  "new_spaces",
+  "new_agents",
+  "forks",
+  "context_files",
+  "models",
+  "context_windows",
+  "restarts"
+];
 function settingsFor(active) {
   const bridge2 = () => {
     const there = active();
@@ -26669,6 +27329,7 @@ function settingsFor(active) {
   };
   return {
     context: (edit) => bridge2().onContextEdit(edit),
+    models: (change) => bridge2().onModelChange(change),
     contextWindows: {
       compact: async (ask2) => bridge2().onWindowCompact(ask2),
       change: async (ask2) => bridge2().onWindowChange(ask2)
@@ -26686,7 +27347,7 @@ function instructionsFor(folder2, project = false) {
 function freeFolder(root2, name2, taken) {
   const slug = name2.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "agent";
   for (let count = 1; ; count += 1) {
-    const folder2 = join8(root2, count === 1 ? slug : `${slug}-${count}`);
+    const folder2 = join10(root2, count === 1 ? slug : `${slug}-${count}`);
     if (!taken.includes(folder2)) return folder2;
   }
 }
@@ -26725,7 +27386,7 @@ var Bridge = class {
         agent: (agentId2, copy) => chips2.settings.context(agentId2, copy),
         harness: (copy) => chips2.settings.harnessContext(copy)
       },
-      (line) => this.log(`context: ${line}`),
+      (line2) => this.log(`context: ${line2}`),
       options.env ?? process.env
     );
     if (options.fills === void 0) return;
@@ -26740,7 +27401,7 @@ var Bridge = class {
       send: (agentId2, copy) => chips2.settings.contextWindow(agentId2, copy),
       kept,
       save: () => options.saveState(options.state),
-      log: (line) => this.log(`context window: ${line}`),
+      log: (line2) => this.log(`context window: ${line2}`),
       sendEveryMs: options.fillsEveryMs
     });
   }
@@ -26751,10 +27412,15 @@ var Bridge = class {
   ours = /* @__PURE__ */ new Set();
   /** The harness's agents' names, by Chips id, for the folders named after them. */
   names = /* @__PURE__ */ new Map();
+  /** The agents made in Chips with a profile of their own, by Chips id (Chips ADR 0241). */
+  own = /* @__PURE__ */ new Map();
   /** The feedback events answered with a turn, the newest `KEPT_FEEDBACK`. */
   lookedAt = /* @__PURE__ */ new Set();
-  /** The copies being made, one after another: a message for one waits for it (see `copy`). */
-  copying = Promise.resolve();
+  /**
+   * The agents made, the spaces claimed and the copies made, one after another: a message for an
+   * agent not settled yet waits for them (see `runnerOf`).
+   */
+  making = Promise.resolve();
   log;
   health;
   /** The harness's agents in Chips as last listed: whose context and window copies are sent. */
@@ -26767,6 +27433,12 @@ var Bridge = class {
   /** The port Hermes's webhook reaches the bridge on, once it listens. */
   fillsPort;
   toldNoReadings = false;
+  /** Whether the log has said once that a model copy wasn't sent. */
+  toldModels = false;
+  /** While Hermes's gateway restarts (Chips ADR 0094), the health watch says nothing: the restart says how it went. */
+  held = false;
+  /** What went wrong in the last restart, said in place of the watch's own words while Hermes doesn't answer. */
+  why;
   /** Register the agents, start hearing what is said to them, and say how their gateways are. */
   async start() {
     const { chips: chips2 } = this.options;
@@ -26777,16 +27449,23 @@ var Bridge = class {
       const client = this.options.clientFor?.(config3) ?? new HermesClient(config3.address);
       this.agents.push({ config: config3, key, client, agentId: registered.agentId, up: true });
     }
+    for (const [agentId2, profile] of Object.entries(this.options.state.made ?? {})) {
+      const running = this.runningOn(agentId2, profile, known.find((agent) => agent.agentId === agentId2)?.name ?? profile);
+      if (running !== void 0) this.own.set(agentId2, running);
+    }
     this.ours = /* @__PURE__ */ new Set([...known.map((agent) => agent.agentId), ...this.agents.map((agent) => agent.agentId)]);
     chips2.on("message.new", (message) => void this.hear(message));
     chips2.on("agent.asked", (asked) => {
-      this.make(asked).catch((error62) => this.log(`a new agent went wrong: ${messageOf2(error62)}`));
+      this.making = this.making.then(() => this.make(asked)).catch((error62) => this.log(`a new agent went wrong: ${messageOf3(error62)}`));
     });
     chips2.on("agent.fork", (fork) => {
-      this.copying = this.copying.then(() => this.copy(fork)).catch((error62) => this.log(`a copy went wrong: ${messageOf2(error62)}`));
+      this.making = this.making.then(() => this.copy(fork)).catch((error62) => this.log(`a copy went wrong: ${messageOf3(error62)}`));
+    });
+    chips2.onSpaceAsked((asked) => {
+      this.making = this.making.then(() => this.claim(asked)).catch((error62) => this.log(`a space from the + went wrong: ${messageOf3(error62)}`));
     });
     chips2.on("feedback", (feedback2) => {
-      this.notRight(feedback2).catch((error62) => this.log(`a note on a reply went wrong: ${messageOf2(error62)}`));
+      this.notRight(feedback2).catch((error62) => this.log(`a note on a reply went wrong: ${messageOf3(error62)}`));
     });
     chips2.on("agent.attached", () => void this.agentsMoved());
     chips2.on("agent.released", () => void this.agentsMoved());
@@ -26795,6 +27474,20 @@ var Bridge = class {
     this.health.unref();
     await this.startSettings();
   }
+  /** Hold the health watch's words while Hermes's gateway restarts, and let them go after. */
+  hold(held) {
+    this.held = held;
+  }
+  /**
+   * How a restart went (Chips ADR 0094): fine as the gateways now are, or its words, which stand
+   * while Hermes doesn't answer. The health watch speaks for itself again after.
+   */
+  async restarted(trouble) {
+    this.held = false;
+    this.why = trouble;
+    if (trouble === void 0) return this.sayHowItIs();
+    await this.options.chips.reportTrouble(trouble).catch(() => void 0);
+  }
   stop() {
     if (this.health !== void 0) clearInterval(this.health);
     if (this.contextTimer !== void 0) clearInterval(this.contextTimer);
@@ -26802,12 +27495,14 @@ var Bridge = class {
   }
   // ------------------------------------------------------------------ an agent's page
   /**
-   * The agents' context and context windows, sent at start and kept current: the files read
-   * again every so often and after each turn, a window copy on each reading Hermes sends.
+   * The agents' models, context and context windows, sent at start and kept current: the models
+   * again when an agent comes or goes, the files read again every so often and after each turn, a
+   * window copy on each reading Hermes sends.
    */
   async startSettings() {
-    if (this.contexts === void 0) return;
     this.listed = await this.options.chips.agents.list().catch(() => this.listed);
+    await this.sendModels();
+    if (this.contexts === void 0) return;
     await this.contexts.refresh();
     this.contextTimer = setInterval(() => void this.contexts?.refresh(), this.options.contextEveryMs ?? 15e3);
     this.contextTimer.unref();
@@ -26822,7 +27517,7 @@ var Bridge = class {
         this.options.saveState(this.options.state);
       }
     } catch (error62) {
-      this.log(`context window: nothing can listen on port ${asked.port} (${messageOf2(error62)}), so Chips won't show how full each agent's context is`);
+      this.log(`context window: nothing can listen on port ${asked.port} (${messageOf3(error62)}), so Chips won't show how full each agent's context is`);
     }
     await fills2.sendAll();
   }
@@ -26830,9 +27525,8 @@ var Bridge = class {
   hookUrl(profile = "default") {
     return this.fillsPort === void 0 ? void 0 : hookUrl(this.fillsPort, profileName(profile));
   }
-  /** The harness's agents listed again, the copies of any gone forgotten, and the context sent. */
+  /** The harness's agents listed again, the copies of any gone forgotten, and the context and models sent. */
   async agentsMoved() {
-    if (this.contexts === void 0) return;
     const before = this.listed;
     this.listed = await this.options.chips.agents.list().catch(() => this.listed);
     const now = new Set(this.active().map((agent) => agent.agentId));
@@ -26841,7 +27535,8 @@ var Bridge = class {
       this.options.chips.settings.forget(gone.agentId);
       this.fills?.forget(gone.agentId);
     }
-    await this.contexts.refresh();
+    await this.contexts?.refresh();
+    await this.sendModels();
   }
   /** The harness's agents that read anything now: the active ones listed. */
   active() {
@@ -26855,13 +27550,24 @@ var Bridge = class {
   }
   /** The profile an agent runs on: its own, a copy's original's, else the first (as `profileOf` picks). */
   profileFor(agentId2) {
-    const own2 = this.agents.find((agent) => agent.agentId === agentId2);
-    const copied = this.options.state.profiles?.[agentId2];
-    const original = this.agents.find((agent) => copied !== void 0 && agent.key === copied);
-    const running = own2 ?? original ?? this.agents[0];
+    const running = this.runningFor(agentId2);
     return running === void 0 ? void 0 : this.profileOfRunning(running);
   }
-  /** Who reads what: each active agent with its profile, and the first profile, which new agents run on. */
+  /** What answers for an agent: its own profile, a copy's original's, else the first. */
+  runningFor(agentId2) {
+    const own2 = this.agents.find((agent) => agent.agentId === agentId2) ?? this.own.get(agentId2);
+    const copied = this.options.state.profiles?.[agentId2];
+    return own2 ?? (copied === void 0 ? void 0 : this.byKey(copied)) ?? this.agents[0];
+  }
+  /** A profile the bridge speaks to, by its key: a configured agent's, or a made agent's Chips id. */
+  byKey(key) {
+    return this.agents.find((agent) => agent.key === key) ?? this.own.get(key);
+  }
+  /**
+   * Who reads what: each active agent with its profile, and the first profile, whose SOUL.md each
+   * new agent starts from (and whose every file each new agent reads, where none gets a profile of
+   * its own).
+   */
   roster() {
     const readers = [];
     const ids2 = /* @__PURE__ */ new Set([...this.active().map((agent) => agent.agentId), ...this.agents.map((agent) => agent.agentId)]);
@@ -26871,7 +27577,11 @@ var Bridge = class {
       if (profile !== void 0) readers.push({ agentId: agentId2, profile });
     }
     const first = this.agents[0];
-    return { readers, first: first === void 0 ? void 0 : this.profileOfRunning(first) };
+    return {
+      readers,
+      first: first === void 0 ? void 0 : this.profileOfRunning(first),
+      ownProfiles: this.options.profiles !== void 0
+    };
   }
   /** The agent a Hermes session the bridge keeps is, with its profile: nothing for any other. */
   whoseSession(sessionId) {
@@ -26890,6 +27600,77 @@ var Bridge = class {
     }
     return this.contexts.edit(frame);
   }
+  // ------------------------------------------------------------------ an agent's model
+  /**
+   * The model a person picked for an agent, as its copy names it: a choice's id, or the model its
+   * config says each of its profile's runs asks for; nothing for Hermes's default.
+   */
+  ownModel(agentId2, running) {
+    const picked = this.options.state.models?.[agentId2];
+    return picked === null ? void 0 : picked ?? running.config.model;
+  }
+  /** What a turn's runs ask Hermes for: the agent's own model, else nothing, and the profile's runs. */
+  runModel(turn) {
+    const picked = this.options.state.models?.[turn.who];
+    if (picked === null) return {};
+    if (picked !== void 0) return runModelOf(picked);
+    return turn.agent.config.model === void 0 ? {} : { model: turn.agent.config.model };
+  }
+  /**
+   * Each agent's model, sent to Chips (Chips ADR 0141): the models Hermes has for its profile, read
+   * once a profile, with the one it runs on. One whose Hermes doesn't answer is sent none, and the
+   * log says so once.
+   */
+  async sendModels() {
+    const { chips: chips2 } = this.options;
+    const ids2 = /* @__PURE__ */ new Set([...this.active().map((agent) => agent.agentId), ...this.agents.map((agent) => agent.agentId)]);
+    const read = /* @__PURE__ */ new Map();
+    for (const agentId2 of ids2) {
+      const running = this.runningFor(agentId2);
+      if (running === void 0) continue;
+      try {
+        let options = read.get(running);
+        if (options === void 0) {
+          options = running.client.modelOptions();
+          read.set(running, options);
+        }
+        const copy = copyOf(await options, this.ownModel(agentId2, running));
+        if (copy !== void 0) await chips2.settings.model(agentId2, copy);
+      } catch (error62) {
+        if (!this.toldModels) this.log(`models: none sent for ${running.config.name}: ${messageOf3(error62)}`);
+        this.toldModels = true;
+      }
+    }
+  }
+  /**
+   * A person picked an agent's model (Chips ADR 0141): one Hermes has for its profile, kept as the
+   * model each of its runs asks for from now on, or Hermes's default (`null`), the profile's own.
+   * The model it runs on already changes nothing. Hermes says no levels of effort, so none is taken.
+   */
+  async onModelChange(frame) {
+    const { state: state2 } = this.options;
+    const agentId2 = frame.agent_id;
+    const ours2 = this.ours.has(agentId2) || this.agents.some((agent) => agent.agentId === agentId2) || this.own.has(agentId2);
+    const running = ours2 ? this.runningFor(agentId2) : void 0;
+    if (running === void 0) throw new Refuse(`${agentId2} isn't one of this harness's agents.`);
+    let options;
+    try {
+      options = await running.client.modelOptions();
+    } catch (error62) {
+      throw new Refuse(`Hermes didn't say which models it has: ${messageOf3(error62)}`);
+    }
+    const now = copyOf(options, this.ownModel(agentId2, running));
+    if (now === void 0) throw new Refuse("Hermes has no model for this agent's profile.");
+    if (frame.model === now.model) return now;
+    if (frame.model !== null && !now.choices.some((choice) => choice.id === frame.model)) {
+      throw new Refuse(`Hermes has no ${frame.model} for this agent's profile.`, now);
+    }
+    state2.models = { ...state2.models, [agentId2]: frame.model };
+    this.options.saveState(state2);
+    const name2 = await this.nameOf(agentId2, running.config.name);
+    this.log(`${name2} runs on ${frame.model ?? `Hermes's default (${now.default?.model ?? "its profile's"})`}, from Chips`);
+    return copyOf(options, this.ownModel(agentId2, running)) ?? now;
+  }
   /** A person's Compact now (Chips ADR 0146): Hermes can't be asked to compact from outside a run. */
   onWindowCompact(frame) {
     throw new Refuse(WHY_NOT, this.fills?.copyOf(frame.agent_id));
@@ -26935,7 +27716,7 @@ var Bridge = class {
   /**
    * A person asked for a new agent in a room (Chips ADR 0108): one of the harness's, keyed by the
    * ask so an ask heard twice makes one, registered for the room, which Chips puts it in while the
-   * room waits. It answers through the first profile, in a session of its own.
+   * room waits. It answers through a Hermes profile of its own (`ownProfile`).
    */
   async make(asked) {
     const { chips: chips2 } = this.options;
@@ -26946,16 +27727,112 @@ var Bridge = class {
       madeFor: asked.id,
       spaceId: asked.space_id
     });
-    this.ours.add(agent.agentId);
     this.names.set(agent.agentId, agent.name);
     this.log(`${agent.name} made${agent.attached === false ? `, not in the room: ${agent.why ?? "too late"}` : ""}`);
+    await this.ownProfile(agent.agentId, agent.name);
+    this.ours.add(agent.agentId);
     void this.agentsMoved();
   }
+  /**
+   * A Hermes profile of its own for an agent made in Chips (Chips ADR 0241), so it remembers only
+   * its own conversations: named after the agent, cloned from the Main agent's profile so it starts
+   * with its model, keys, tools, skills and SOUL.md, its memory empty (`profiles.ts`). The gateway
+   * is asked to serve it now; one that serves only the profile it started with, as Hermes's does
+   * when it started with one, is restarted once. Where Hermes doesn't make one, the agent runs on
+   * the first profile, in a session of its own, and the log says why.
+   */
+  async ownProfile(agentId2, name2) {
+    const { profiles, hermesRoot: root2, state: state2 } = this.options;
+    const main2 = this.agents[0];
+    if (profiles === void 0 || root2 === void 0 || main2 === void 0 || this.own.has(agentId2)) return;
+    const from = profileName(main2.config.address.profile);
+    const profile = freeProfile(root2, name2, Object.values(state2.made ?? {}));
+    const home2 = profileHome(root2, profile);
+    const secret = state2.fills?.secret ?? this.options.fills?.secret;
+    try {
+      await profiles.create(profile, from);
+      const port = this.fillsPort;
+      const hook = readyProfile(home2, { from, profile }, port === void 0 || secret === void 0 ? void 0 : { port, secret });
+      if (hook?.state === "by_hand") this.log(`context window: ${hook.path} was left as it is: ${hook.why}. Add these lines to it:
+${hook.lines}`);
+    } catch (error62) {
+      this.log(`${name2} runs on the ${from} profile, in a session of its own: Hermes didn't make it one (${messageOf3(error62)})`);
+      return;
+    }
+    state2.made = { ...state2.made, [agentId2]: profile };
+    this.options.saveState(state2);
+    const running = this.runningOn(agentId2, profile, name2);
+    if (running !== void 0) this.own.set(agentId2, running);
+    this.log(`${name2} has a Hermes profile of its own, ${profile}, cloned from ${from}`);
+    const served = await profiles.serve().catch(() => void 0);
+    if (served === false) {
+      this.log(`Hermes's gateway serves only the profile it started with, as it does when there was one: restarting it once, so it serves ${profile} too`);
+      await this.options.restartGateway?.();
+    } else if (served === void 0) {
+      this.log(`Hermes's gateway didn't answer on its control socket: it serves ${profile} once it looks again, or starts again`);
+    }
+  }
+  /**
+   * A profile made for an agent, as the bridge reaches it: under `/p/<profile>` of the gateway the
+   * Main agent is reached at, with the key in the profile's own `.env`.
+   */
+  runningOn(agentId2, profile, name2) {
+    const main2 = this.agents[0];
+    const root2 = this.options.hermesRoot;
+    if (main2 === void 0 || root2 === void 0) return void 0;
+    const home2 = profileHome(root2, profile);
+    const config3 = {
+      name: name2,
+      address: { url: main2.config.address.url, profile, key: envValue(home2, KEY_ENV) ?? "" },
+      keyEnv: KEY_ENV,
+      keyFrom: join10(home2, ".env")
+    };
+    const client = this.options.clientFor?.(config3) ?? new HermesClient(config3.address);
+    return { config: config3, key: agentId2, client, agentId: agentId2, up: true };
+  }
+  /**
+   * A space a person asked the harness for from the + (Chips ADR 0241), as the ACP bridge takes
+   * one: claimed under a key made from the space, so a space handed over twice is claimed once,
+   * and named from its first words. Chips makes the agent of that key and puts it in the space; it
+   * gets a Hermes profile of its own (`ownProfile`). It answers the first words, which are the
+   * ask's and aren't heard again.
+   */
+  async claim(asked) {
+    const { chips: chips2 } = this.options;
+    const { spaceId, firstMessage } = asked;
+    const key = `hermes:space:${spaceId}`;
+    await chips2.claimSpace(spaceId, key, titleFrom(firstMessage.text));
+    const agent = (await chips2.agents.list()).find((each) => each.key === key);
+    if (agent === void 0) {
+      this.log(`claimed ${spaceId}, and Chips put no agent there`);
+      return;
+    }
+    this.names.set(agent.agentId, agent.name);
+    this.log(`${agent.name} claimed ${spaceId}`);
+    await this.ownProfile(agent.agentId, agent.name);
+    this.ours.add(agent.agentId);
+    void this.agentsMoved();
+    const message = {
+      type: "message.new",
+      space_id: spaceId,
+      message_id: firstMessage.messageId,
+      text: firstMessage.text,
+      from: { participant_id: asked.askedBy, kind: "person", display_name: await this.whoSaid(asked), role: "member" },
+      for: [agent.agentId]
+    };
+    void this.hear(message);
+  }
+  /** Who said a space's first words, from its lines. */
+  async whoSaid(asked) {
+    const context = await this.options.chips.roomContext(asked.spaceId, { limit: 20 }).catch(() => void 0);
+    return context?.lines.find((line2) => line2.message_id === asked.firstMessage.messageId)?.from.name ?? "Someone";
+  }
   /**
    * A person asked for a copy of one of the harness's agents in another room (ADR 0087, Fork): the
    * agent's session in the room it is in, else the last it had, forked in Hermes, is the copy's
    * session in the room asked. The copy answers through its original's profile, whose Hermes has
-   * that session, and works in its original's folder. It is registered with `forkedFrom` for the
+   * that session (Hermes forks a session only within its profile, so a copy gets no profile of its
+   * own: Chips ADR 0241), and works in its original's folder. It is registered with `forkedFrom` for the
    * room, which Chips puts it in while the room waits. The fork and the copy are keyed by the ask,
    * so an ask heard twice forks once (Hermes refuses the id again) and registers the same copy. An
    * agent that never spoke is copied with nothing to remember. A turn still going is not in the
@@ -27034,12 +27911,12 @@ var Bridge = class {
     const folder2 = turn.folder;
     if (folder2 === void 0) return void 0;
     try {
-      const project = this.options.chips.project({ spaceId, agentId: agentId2, name: name2, folder: folder2, log: (line) => this.log(line) });
+      const project = this.options.chips.project({ spaceId, agentId: agentId2, name: name2, folder: folder2, log: (line2) => this.log(line2) });
       const facts = await project.pull();
       turn.project = { copy: project, name: name2 };
       return facts;
     } catch (error62) {
-      this.log(`${name2}'s copy of the room's project couldn't be readied: ${messageOf2(error62)}`);
+      this.log(`${name2}'s copy of the room's project couldn't be readied: ${messageOf3(error62)}`);
       return void 0;
     }
   }
@@ -27058,17 +27935,20 @@ var Bridge = class {
       const note = heldNote(pushed, name2);
       return note === void 0 ? {} : { note };
     } catch (error62) {
-      this.log(`${name2}'s project couldn't be sent: ${messageOf2(error62)}`);
-      const note = heldNote({ state: "failed", why: messageOf2(error62) }, name2);
+      this.log(`${name2}'s project couldn't be sent: ${messageOf3(error62)}`);
+      const note = heldNote({ state: "failed", why: messageOf3(error62) }, name2);
       return note === void 0 ? {} : { note };
     }
   }
-  /** Trouble while a profile's gateway doesn't answer, and fine once all do (ADR 0083). */
+  /** Trouble while a profile's gateway doesn't answer, and fine once all do (ADR 0083); nothing while a restart runs. */
   async sayHowItIs() {
+    if (this.held) return;
     for (const agent of this.agents) agent.up = await agent.client.healthy();
+    if (this.held) return;
     const down = this.agents.filter((agent) => !agent.up);
+    if (down.length === 0) this.why = void 0;
     const chips2 = this.options.chips;
-    const said2 = down.length === 0 ? chips2.reportOk() : chips2.reportTrouble(`Hermes isn't answering for ${down.map((agent) => agent.config.name).join(", ")}`);
+    const said2 = down.length === 0 ? chips2.reportOk() : chips2.reportTrouble(this.why ?? `Hermes isn't answering for ${down.map((agent) => agent.config.name).join(", ")}`);
     await said2.catch(() => void 0);
   }
   // ------------------------------------------------------------------ what is said to it
@@ -27102,36 +27982,38 @@ var Bridge = class {
       this.lookedAt.delete(old);
     }
     const context = await this.options.chips.roomContext(spaceId, { limit: 200 }).catch(() => void 0);
-    const line = context?.lines.find((each) => each.message_id === messageId);
+    const line2 = context?.lines.find((each) => each.message_id === messageId);
     const message = {
       type: "message.new",
       space_id: spaceId,
       // An id of its own, so nothing of the turn is taken for the reply's.
       message_id: messageIdOf(feedback2.id),
-      text: lookAgain(feedback2.from.display_name, line?.text, note),
+      text: lookAgain(feedback2.from.display_name, line2?.text, note),
       from: feedback2.from,
-      ...line === void 0 ? {} : { for: [line.from.id] }
+      ...line2 === void 0 ? {} : { for: [line2.from.id] }
     };
     await this.hear(message, { goal: lookingAgain(note), sayWho: false });
   }
   /**
-   * Which profile answers for a Chips agent, as `profileOf` says. An agent not known yet may be a
-   * copy being made, which is waited for, so that its first message is answered in its session.
+   * Which profile answers for a Chips agent, as `profileOf` says. An agent not settled may be one
+   * being made, or a copy, which is waited for, so that its first message is answered on its own
+   * profile, or in the session it was forked.
    */
   async runnerOf(taker) {
-    if (taker !== this.options.chips.harnessId && !this.ours.has(taker)) await this.copying;
+    const settled = taker === this.options.chips.harnessId || this.own.has(taker) || this.agents.some((agent) => agent.agentId === taker);
+    if (!settled) await this.making;
     return this.profileOf(taker);
   }
   /**
-   * Which profile answers for a Chips agent: its own; a copy's original's; or the first for the
-   * harness itself and for any other of the harness's — its default agent, one Chips made since —
-   * read afresh once when a name is new.
+   * Which profile answers for a Chips agent: its own, configured or made for it; a copy's
+   * original's; or the first for the harness itself and for any other of the harness's — its
+   * default agent, one made before profiles were — read afresh once when a name is new.
    */
   async profileOf(taker) {
-    const own2 = this.agents.find((agent) => agent.agentId === taker);
+    const own2 = this.agents.find((agent) => agent.agentId === taker) ?? this.own.get(taker);
     if (own2 !== void 0) return own2;
     const copied = this.options.state.profiles?.[taker];
-    const original = this.agents.find((agent) => copied !== void 0 && agent.key === copied);
+    const original = copied === void 0 ? void 0 : this.byKey(copied);
     if (original !== void 0) return original;
     if (taker !== this.options.chips.harnessId && !this.ours.has(taker)) {
       const listed = await this.options.chips.agents.list().catch(() => []);
@@ -27164,7 +28046,7 @@ var Bridge = class {
     try {
       await this.turn(room, asked);
     } catch (error62) {
-      this.log(`a turn of ${room.agent.config.name} went wrong: ${messageOf2(error62)}`);
+      this.log(`a turn of ${room.agent.config.name} went wrong: ${messageOf3(error62)}`);
     } finally {
       room.busy = false;
       void this.contexts?.refresh();
@@ -27179,6 +28061,7 @@ var Bridge = class {
       run: run2,
       speaker,
       agent,
+      who: speakerId ?? agent.agentId,
       hermesRun: "",
       reply: "",
       saidAt: 0,
@@ -27202,7 +28085,7 @@ var Bridge = class {
     try {
       session = await this.sessionFor(room);
     } catch (error62) {
-      await this.failed(turn, `${agent.config.name} couldn't open a session in Hermes: ${messageOf2(error62)}`, true);
+      await this.failed(turn, `${agent.config.name} couldn't open a session in Hermes: ${messageOf3(error62)}`, true);
       return;
     }
     const name2 = speakerId === void 0 ? agent.config.name : await this.nameOf(speakerId, agent.config.name);
@@ -27229,9 +28112,15 @@ var Bridge = class {
   async once(turn, session, text, key) {
     const { agent } = turn;
     try {
-      turn.hermesRun = await agent.client.startRun({ text, sessionId: session, model: agent.config.model, key, instructions: instructionsFor(turn.folder, turn.project !== void 0) });
+      turn.hermesRun = await agent.client.startRun({
+        text,
+        sessionId: session,
+        ...this.runModel(turn),
+        key,
+        instructions: instructionsFor(turn.folder, turn.project !== void 0)
+      });
     } catch (error62) {
-      await this.failed(turn, `${agent.config.name} couldn't start in Hermes: ${messageOf2(error62)}`, true);
+      await this.failed(turn, `${agent.config.name} couldn't start in Hermes: ${messageOf3(error62)}`, true);
       return void 0;
     }
     if (turn.cancelled) await agent.client.stop(turn.hermesRun).catch(() => void 0);
@@ -27239,7 +28128,7 @@ var Bridge = class {
       const last = await agent.client.events(turn.hermesRun, (event) => this.heard(turn, event));
       return last ?? await this.endOf(turn);
     } catch (error62) {
-      this.log(`lost ${agent.config.name}'s run ${turn.hermesRun}: ${messageOf2(error62)}`);
+      this.log(`lost ${agent.config.name}'s run ${turn.hermesRun}: ${messageOf3(error62)}`);
       return await this.endOf(turn);
     }
   }
@@ -27252,7 +28141,7 @@ var Bridge = class {
       if (status !== void 0 && TERMINAL.has(`run.${status}`)) {
         return { ...state2, event: `run.${status}` };
       }
-      await new Promise((resolve6) => setTimeout(resolve6, 1e3));
+      await new Promise((resolve7) => setTimeout(resolve7, 1e3));
     }
     await this.failed(turn, `${turn.agent.config.name}'s run in Hermes stopped answering.`, true);
     return void 0;
@@ -27284,7 +28173,7 @@ var Bridge = class {
         await turn.agent.client.steer(turn.hermesRun, text);
         return;
       } catch (error62) {
-        this.log(`Hermes didn't take a steer mid-run (${messageOf2(error62)}); saying it next`);
+        this.log(`Hermes didn't take a steer mid-run (${messageOf3(error62)}); saying it next`);
       }
     }
     turn.next.push(text);
@@ -27320,10 +28209,10 @@ var Bridge = class {
   }
   sayThought(turn, text, phase) {
     const now = Date.now();
-    const line = lastLine(text);
-    if (line === "" || now - turn.saidAt < QUIET_MS) return;
+    const line2 = lastLine(text);
+    if (line2 === "" || now - turn.saidAt < QUIET_MS) return;
     turn.saidAt = now;
-    void turn.run.status({ phase, verbPhrase: line.slice(0, 200) }).catch(() => void 0);
+    void turn.run.status({ phase, verbPhrase: line2.slice(0, 200) }).catch(() => void 0);
   }
   async started(turn, event) {
     const sub = event.event === "subagent.start";
@@ -27392,7 +28281,7 @@ var Bridge = class {
 ${command}
 \`\`\`` } }
     });
-    const stopped2 = new Promise((resolve6) => turn.run.on("cancel", () => resolve6(void 0)));
+    const stopped2 = new Promise((resolve7) => turn.run.on("cancel", () => resolve7(void 0)));
     const decision = await Promise.race([asked, stopped2]);
     const pending = turn.approvals.get(requestId ?? approvalId);
     if (decision === void 0 || pending === void 0 || pending.answered) return;
@@ -27400,10 +28289,10 @@ ${command}
     if (decision.allowed) turn.allowed.push(approvalId);
     const generation = event["execution_generation"];
     await turn.agent.client.approve(turn.hermesRun, {
-      choice: choiceOf(decision, choices),
+      choice: choiceOf(decision, choices, command !== void 0),
       ...requestId === void 0 ? {} : { request_id: requestId },
       ...typeof generation === "number" ? { execution_generation: generation } : {}
-    }).catch((error62) => this.log(`Hermes didn't take the answer: ${messageOf2(error62)}`));
+    }).catch((error62) => this.log(`Hermes didn't take the answer: ${messageOf3(error62)}`));
   }
   /** An approval answered in Hermes's own tools: settled in Chips, once, so the card cools (ADR 0079). */
   async settled(turn, event) {
@@ -27496,7 +28385,7 @@ ${command}
     const output2 = count("output_tokens") ?? 0;
     if (input2 + output2 === 0) return;
     const runtime = last["runtime"] ?? {};
-    const model = typeof runtime["model"] === "string" ? runtime["model"] : turn.agent.config.model ?? "hermes";
+    const model = typeof runtime["model"] === "string" ? runtime["model"] : this.runModel(turn).model ?? "hermes";
     await turn.run.usage({
       scope: "step",
       model,
@@ -27517,8 +28406,9 @@ ${command}
     if (retryable) void this.sayHowItIs();
   }
 };
-function choiceOf(decision, choices) {
+function choiceOf(decision, choices, command = false) {
   if (!decision.allowed) return "deny";
+  if (command) return "once";
   if (decision.scope === "always" && choices.includes("always")) return "always";
   if (decision.scope !== "once" && choices.includes("session")) return "session";
   return "once";
@@ -27527,15 +28417,21 @@ function idOf(event) {
   const id2 = event["request_id"] ?? event["prompt_id"];
   return typeof id2 === "string" && id2 !== "" ? id2 : void 0;
 }
-function messageOf2(error62) {
+function messageOf3(error62) {
   if (error62 instanceof HermesError) return `${error62.message} (${error62.status})`;
   return error62 instanceof Error ? error62.message : String(error62);
 }
+function titleFrom(text) {
+  const line2 = text.trim().split("\n")[0] ?? "";
+  if (line2.length <= 48) return line2;
+  const cut2 = line2.slice(0, 48);
+  return `${cut2.slice(0, Math.max(cut2.lastIndexOf(" "), 24))}\u2026`;
+}
 function forkName(original) {
   return `${original.trim().replace(/ · fork( \d+)?$/, "")} \xB7 fork`;
 }
 function goalOf(message, name2) {
-  const first = message.text.split("\n").find((line) => line.trim() !== "")?.trim() ?? "";
+  const first = message.text.split("\n").find((line2) => line2.trim() !== "")?.trim() ?? "";
   const named = first.toLowerCase().startsWith(`@${name2.toLowerCase()}`);
   const goal = named ? first.slice(name2.length + 1).trim() : first.replace(/^@\S+\s*/, "");
   return (goal === "" ? `Answer ${message.from.display_name}` : goal).slice(0, 300);
@@ -27553,7 +28449,7 @@ function lookAgain(who, reply, note) {
   ].join("\n\n");
 }
 function lookingAgain(note) {
-  const first = note?.split("\n").find((line) => line.trim() !== "")?.trim();
+  const first = note?.split("\n").find((line2) => line2.trim() !== "")?.trim();
   return first === void 0 ? "Looking again at its reply" : cut(`Looking again: ${first}`, GOAL_SHOWN);
 }
 function cut(text, most) {
@@ -27573,7 +28469,7 @@ function resultWords(preview2) {
   return typeof said2 === "string" ? said2.trim() : "";
 }
 function lastLine(text) {
-  const lines2 = text.split(/(?<=[.!?])\s+|\n+/).map((line) => line.trim()).filter((line) => line !== "");
+  const lines2 = text.split(/(?<=[.!?])\s+|\n+/).map((line2) => line2.trim()).filter((line2) => line2 !== "");
   return lines2.at(-1) ?? "";
 }
 function lowerFirst(text) {
@@ -27581,19 +28477,19 @@ function lowerFirst(text) {
 }
 
 // src/keep.ts
-import { homedir as homedir5 } from "node:os";
-import { basename as basename4, join as join9, resolve as resolve3 } from "node:path";
+import { homedir as homedir6 } from "node:os";
+import { basename as basename5, join as join11, resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var flags = process.argv.slice(2);
 var words3 = flags.filter((word) => !word.startsWith("--"));
-var whole = (word) => resolve3(word.startsWith("~/") ? join9(homedir5(), word.slice(2)) : word);
+var whole = (word) => resolve4(word.startsWith("~/") ? join11(homedir6(), word.slice(2)) : word);
 var here = fileURLToPath2(new URL("..", import.meta.url)).replace(/\/$/, "");
 var self = fileURLToPath2(import.meta.url);
 var run = self.endsWith(".js") ? [self] : ["--import", "tsx", "src/main.ts"];
-var again = process.env["npm_lifecycle_event"] === "keep" ? "npm run keep --" : basename4(process.argv[1] ?? "chips");
+var again = process.env["npm_lifecycle_event"] === "keep" ? "npm run keep --" : basename5(process.argv[1] ?? "chips");
 var stopLine = process.env["CHIPS_STOP_COMMAND"] || [again, ...words3, "--stop"].join(" ");
-var end = (line, code) => {
-  (code === 0 ? process.stdout : process.stderr).write(`${line}
+var end = (line2, code) => {
+  (code === 0 ? process.stdout : process.stderr).write(`${line2}
 `);
   process.exit(code);
 };
@@ -27632,9 +28528,9 @@ function keepIfAsked(label2, url2, names, log2, before = () => void 0) {
 }
 
 // src/setup.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join10, resolve as resolve4 } from "node:path";
+import { existsSync as existsSync10, readFileSync as readFileSync10 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join12, resolve as resolve5 } from "node:path";
 var SetupError = class extends Error {
   constructor(message, words4 = {}) {
     super(message);
@@ -27643,37 +28539,37 @@ var SetupError = class extends Error {
   words;
   name = "SetupError";
 };
-var shown = (path) => path.startsWith(`${homedir6()}/`) ? `~${path.slice(homedir6().length)}` : path;
-var portOf = (url2) => {
+var shown = (path) => path.startsWith(`${homedir7()}/`) ? `~${path.slice(homedir7().length)}` : path;
+var portOf2 = (url2) => {
   const parsed = new URL(url2);
   return parsed.port || (parsed.protocol === "https:" ? "443" : "80");
 };
-function checkedWords(config3, restart = false) {
+function checkedWords(config3, restart2 = false) {
   const urls = new Set(config3.agents.map((agent) => agent.address.url));
   const [url2] = urls;
-  const found = urls.size === 1 && url2 !== void 0 ? `Its API server answers on port ${portOf(url2)}` : `Its API server answers for each of ${config3.agents.length} agents`;
-  return restart ? `${found}. ${RESTART}` : found;
+  const found = urls.size === 1 && url2 !== void 0 ? `Its API server answers on port ${portOf2(url2)}` : `Its API server answers for each of ${config3.agents.length} agents`;
+  return restart2 ? `${found}. ${RESTART}` : found;
 }
 var RESTART = "Start hermes gateway again once, so it tells Chips how full each agent's context is.";
 function readyHooks(config3, options) {
   const lines2 = [];
-  let restart = false;
+  let restart2 = false;
   const done = /* @__PURE__ */ new Set();
-  for (const agent of config3.agents) {
-    const profile = profileName(agent.address.profile);
+  for (const named of [...config3.agents.map((agent) => agent.address.profile), ...options.made ?? []]) {
+    const profile = profileName(named);
     if (done.has(profile)) continue;
     done.add(profile);
-    const home2 = profileHome(options.root, agent.address.profile);
+    const home2 = profileHome(options.root, named);
     let outcome;
     try {
       outcome = addHook(home2, options.port, profile, options.secret);
     } catch (error62) {
-      lines2.push(`Chips's webhook wasn't added to ${shown(join10(home2, "config.yaml"))}: ${error62 instanceof Error ? error62.message : String(error62)}`);
+      lines2.push(`Chips's webhook wasn't added to ${shown(join12(home2, "config.yaml"))}: ${error62 instanceof Error ? error62.message : String(error62)}`);
       continue;
     }
     if (outcome.state === "added") {
       lines2.push(`Added Chips's webhook to ${shown(outcome.path)}, so Hermes tells Chips how full each agent's context is.`);
-      restart ||= options.gatewayUp;
+      restart2 ||= options.gatewayUp;
     } else if (outcome.state === "by_hand") {
       lines2.push(
         `${shown(outcome.path)} was left as it is: ${outcome.why}. For Chips to show how full each agent's context is, add these lines to it, then start hermes gateway again:
@@ -27683,30 +28579,30 @@ ${outcome.lines}`
       lines2.push(`Hermes has no ${profile} profile at ${shown(home2)}, so no webhook was added for it.`);
     }
   }
-  if (restart) lines2.push(RESTART);
-  return { lines: lines2, restart };
+  if (restart2) lines2.push(RESTART);
+  return { lines: lines2, restart: restart2 };
 }
 var STILL_GOOD = "The link is still good: run the same command again once that's done.";
 var EXAMPLE = '{ "agents": [{ "name": "Hermes", "profile": "default", "keyEnv": "API_SERVER_KEY" }] }';
 var PLAIN = { agents: [{ name: "Hermes", profile: "default", keyEnv: "API_SERVER_KEY" }] };
 function hermesEnvPath(env = process.env) {
-  return resolve4(env["HERMES_HOME"] ?? resolve4(homedir6(), ".hermes"), ".env");
+  return resolve5(env["HERMES_HOME"] ?? resolve5(homedir7(), ".hermes"), ".env");
 }
 function fromHermes(name2, env) {
   const path = hermesEnvPath(env);
-  if (!existsSync8(path)) return void 0;
-  for (const line of readFileSync8(path, "utf8").split("\n")) {
-    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line);
+  if (!existsSync10(path)) return void 0;
+  for (const line2 of readFileSync10(path, "utf8").split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line2);
     if (match?.[1] === name2) return match[2]?.replace(/^(["'])(.*)\1$/, "$2");
   }
   return void 0;
 }
 function folderOf(said2) {
   if (typeof said2 !== "string" || said2 === "") return void 0;
-  return resolve4(said2 === "~" || said2.startsWith("~/") ? homedir6() + said2.slice(1) : said2);
+  return resolve5(said2 === "~" || said2.startsWith("~/") ? homedir7() + said2.slice(1) : said2);
 }
 function readConfig(path, env = process.env) {
-  const raw = existsSync8(path) ? JSON.parse(readFileSync8(path, "utf8")) : PLAIN;
+  const raw = existsSync10(path) ? JSON.parse(readFileSync10(path, "utf8")) : PLAIN;
   const url2 = typeof raw.url === "string" ? raw.url : "http://127.0.0.1:8642";
   const folder2 = folderOf(raw.folder);
   if (!Array.isArray(raw.agents) || raw.agents.length === 0) {
@@ -27745,7 +28641,7 @@ function readConfig(path, env = process.env) {
   return {
     ...typeof raw.name === "string" ? { name: raw.name } : {},
     agents,
-    folders: folderOf(raw.folders) ?? resolve4(homedir6(), "chips-hermes", "agents"),
+    folders: folderOf(raw.folders) ?? resolve5(homedir7(), "chips-hermes", "agents"),
     ...typeof hookPort === "number" && Number.isInteger(hookPort) && hookPort > 0 && hookPort < 65536 ? { hookPort } : {}
   };
 }
@@ -27756,7 +28652,7 @@ async function checkHermes(config3, clientFor = (agent) => new HermesClient(agen
       throw new SetupError(
         `Hermes isn't answering for ${agent.name} at ${agent.address.url}: start its API server (API_SERVER_ENABLED=true, then hermes gateway). ${STILL_GOOD}`,
         {
-          detail: `Nothing answers on port ${portOf(agent.address.url)}`,
+          detail: `Nothing answers on port ${portOf2(agent.address.url)}`,
           says: "Hermes's API server is off.",
           doing: `Add this line to ${shown(hermesEnvPath())}, then start Hermes with hermes gateway.`,
           copy: "API_SERVER_ENABLED=true"
@@ -27777,20 +28673,20 @@ async function checkHermes(config3, clientFor = (agent) => new HermesClient(agen
 }
 
 // src/main.ts
-var home = (path) => path.startsWith("~/") ? join11(homedir7(), path.slice(2)) : path;
+var home = (path) => path.startsWith("~/") ? join13(homedir8(), path.slice(2)) : path;
 var link = process.env["CHIPS_JOIN_LINK"] || void 0;
 var LABEL = "chat.chips.hermes";
 stopIfAsked(LABEL);
-var configPath = resolve5(home(words3[0] ?? "~/.chips-hermes/config.json"));
-var folder = dirname5(configPath);
-var statePath = join11(folder, "sessions.json");
-var state = existsSync9(statePath) ? JSON.parse(readFileSync9(statePath, "utf8")) : { sessions: {} };
+var configPath = resolve6(home(words3[0] ?? "~/.chips-hermes/config.json"));
+var folder = dirname6(configPath);
+var statePath = join13(folder, "sessions.json");
+var state = existsSync11(statePath) ? JSON.parse(readFileSync11(statePath, "utf8")) : { sessions: {} };
 var saveState = (next) => {
   mkdirSync6(folder, { recursive: true, mode: 448 });
   writeFileSync5(statePath, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
 };
-var log = (line) => process.stdout.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+var log = (line2) => process.stdout.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${line2}
 `);
 var freePort = () => new Promise((done, failed) => {
   const server = createServer2();
@@ -27809,13 +28705,14 @@ try {
     reportStep("checking", { detail: "Looking for its API server" });
     await checkHermes(config2);
   }
-  fills.secret ??= randomBytes2(32).toString("hex");
+  fills.secret ??= randomBytes3(32).toString("hex");
   fills.port = config2.hookPort ?? fills.port ?? hookPortIn(profileHome(root, config2.agents[0]?.address.profile)) ?? await freePort();
   saveState(state);
   const first = config2.agents[0];
   const gatewayUp = link !== void 0 || first !== void 0 && await new HermesClient(first.address).healthy();
-  const hooks = readyHooks(config2, { root, port: fills.port, secret: fills.secret, gatewayUp });
-  for (const line of hooks.lines) log(line);
+  const made = Object.values(state.made ?? {});
+  const hooks = readyHooks(config2, { root, port: fills.port, secret: fills.secret, gatewayUp, made });
+  for (const line2 of hooks.lines) log(line2);
   if (link !== void 0) reportStep("checked", { detail: checkedWords(config2, hooks.restart) });
 } catch (error62) {
   if (!(error62 instanceof SetupError)) throw error62;
@@ -27825,6 +28722,15 @@ try {
   process.exit(1);
 }
 var name = config2.name ?? "Hermes";
+var gateways2 = new Gateways({
+  gateways: gatewaysOf(config2.agents),
+  root,
+  env: process.env,
+  system: thisMachine(),
+  log: (line2) => log(`gateway: ${line2}`),
+  logFile: gatewayLog(folder)
+});
+if (link === void 0) await gateways2.startIfDown();
 var refused2 = (error62) => {
   if (!(error62 instanceof JoinError)) throw error62;
   process.stderr.write(`${error62.message}
@@ -27841,11 +28747,21 @@ var joined = await join3({
 }).catch(refused2);
 keepIfAsked(LABEL, joined.url, ["HERMES_HOME", ...config2.agents.map((agent) => agent.keyEnv ?? "API_SERVER_KEY")], log);
 var bridge;
+var restart = restarter({
+  restart: () => gateways2.restart(),
+  hold: (held) => bridge?.hold(held),
+  say: async (trouble) => {
+    if (bridge !== void 0) return bridge.restarted(trouble);
+    await (trouble === void 0 ? chips.reportOk() : chips.reportTrouble(trouble));
+  },
+  log: (line2) => log(`gateway: ${line2}`)
+});
 var chips = await connect({
   url: joined.url,
   token: joined.token,
   client: { name: "chips-hermes", version: "1.0.0" },
-  store: fileStore(join11(folder, "chips-state.json")),
+  store: fileStore(join13(folder, "chips-state.json")),
+  onRestart: restart,
   settings: settingsFor(() => bridge)
 });
 var git = await checkGit();
@@ -27860,7 +28776,10 @@ bridge = new Bridge({
   saveState,
   log,
   hermesRoot: root,
-  fills: { port: fills.port, secret: fills.secret }
+  fills: { port: fills.port, secret: fills.secret },
+  // Each agent made in Chips is a Hermes profile of its own (Chips ADR 0241).
+  profiles: hermesProfiles({ root, env: process.env, system: thisMachine(), log: (line2) => log(`profiles: ${line2}`) }),
+  restartGateway: () => restart({ askedBy: "chips-hermes, for a new agent's profile", askedAt: (/* @__PURE__ */ new Date()).toISOString() })
 });
 await bridge.start();
 log(`answering for ${config2.agents.map((agent) => agent.name).join(", ")} through Hermes`);