@chipschat/hermes 1.0.8 → 1.0.11

package/README.md

@@ -14,7 +14,7 @@ on Hermes's own API server.
   its original's profile, in its original's folder: Hermes forks a session only within its
   profile, so a copy has no profile of its own.
 
-Apache-2.0. Not published: a local repository until Chips's SDK is.
+Apache-2.0, published on npm as `@chipschat/hermes`.
 
 ## What Chips shows
 
@@ -83,11 +83,11 @@ hasn't been tried through Chips yet.
 
 ## From Chips's gallery
 
-The card's line is `chips connect hermes '<link>'` (Chips ADR 0218). It downloads this bridge as the npm package
+The card's line is `CHIPS_JOIN_LINK='<link>' chips connect hermes` (Chips ADR 0218). It downloads this bridge as the npm package
 `@chipschat/hermes`, the newest 1.x, checks it against the registry's checksum, and runs it on the Node
 that Chips carries, so the machine needs no Node or npm of its own. The bridge checks Hermes,
 joins, and keeps itself running from login. `chips disconnect hermes` stops it. On another computer,
-`curl -fsSL https://chipschat.ai/install | sh -s -- connect hermes '<link>'` installs Chips there
+`curl -fsSL https://chipschat.ai/install | CHIPS_JOIN_LINK='<link>' sh -s -- connect hermes` installs Chips there
 first. The steps below run the bridge from this checkout instead, to work on it.
 
 ## Run it
@@ -103,11 +103,11 @@ first. The steps below run the bridge from this checkout instead, to work on it.
 
 2. Once, in this repository: `npm install`.
 
-3. Join Chips once, with a link from Chips's gallery (Add an agent → Hermes), whose card gives
+3. Join Chips once, with a link from Chips's gallery (Agents → Connect a harness → Hermes), whose card gives
    this line with the link in it:
 
    ```
-   cd ~/Work/Chips/chips-hermes && CHIPS_JOIN_LINK='<link>' npm run keep
+   cd chips-hermes && CHIPS_JOIN_LINK='<link>' npm run keep
    ```
 
    `npm run keep` joins, then keeps the bridge running from login (below); `npm start` is the

package/dist/THIRD-PARTY-NOTICES.md

@@ -1,6 +1,6 @@
 # Third-party notices
 
-`dist/main.js` in @chipschat/hermes 1.0.8 carries these packages, bundled in. Each one's
+`dist/main.js` in @chipschat/hermes 1.0.11 carries these packages, bundled in. Each one's
 licence follows.
 
 ## @chipschat/harness 0.0.0 (Apache-2.0)

package/dist/main.js

@@ -9,7 +9,7 @@ var __export = (target, all) => {
 
 // src/main.ts
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync12, writeFileSync as writeFileSync5 } from "node:fs";
 import { createServer as createServer2 } from "node:net";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname6, join as join13, resolve as resolve6 } from "node:path";
@@ -19945,8 +19945,9 @@ var policyRule = external_exports.object({
     external: external_exports.boolean().optional(),
     irreversible: external_exports.boolean().optional(),
     money_usd_over: external_exports.number().nonnegative().optional(),
-    risk: external_exports.array(riskClass).max(8).optional()
-  }).optional().describe("Extra conditions on the action's flags."),
+    risk: external_exports.array(riskClass).max(8).optional(),
+    starts_with: external_exports.array(external_exports.string().min(1).max(400)).min(1).max(8).optional().describe("For an action that carries a command (ADR 0239): the words a part of it starts with. A command goes ahead on such rules only when every part starts with one that allows it.")
+  }).optional().describe("Extra conditions on the action's flags, and for a command, how its parts start."),
   decision: external_exports.enum(["allow", "ask", "deny"]).describe("What to do when the rule matches."),
   approvers: external_exports.array(approverRef).max(16).optional().describe("Who may answer, when the decision is `ask`."),
   reason: external_exports.string().max(400).optional().describe("Shown to the harness, and recorded in the audit log."),
@@ -20465,9 +20466,17 @@ var roomIdle = external_exports.object({
 var roomNote = external_exports.object({
   members: external_exports.array(roomMember).max(500).describe("The room's people, then its agents, each by name, anybody removed left out."),
   notes: external_exports.record(external_exports.string().max(120), external_exports.string().max(64e3)).describe("The note for each who takes the turn (`for`), by their id: who is here, with handles, and that only those @-mentioned act. A harness puts it at the top of the turn."),
+  rules: external_exports.record(external_exports.string().max(120), external_exports.string().max(4e3)).optional().describe("How the space works, for each who takes the turn, by their id: the words its note ends with (ADR 0250), that everyone here reads what it writes and, beside other agents, what an @ does and when to answer NO_REPLY. They stay the same while the space's agents do, so a harness whose session keeps its earlier turns may say them once, and the note without them after."),
   working: external_exports.array(roomWork).max(500).optional().describe("The room's agents with a turn going as Chips sends this one (ADR 0104), the takers' own included. A turn nothing has been heard from for ten minutes is not counted."),
   idle: external_exports.array(roomIdle).max(500).optional().describe("The room's other agents that have had a turn here: how long since the last one ended (ADR 0104).")
 });
+function noteWithoutRules(room, taker) {
+  const note = room?.notes[taker];
+  const rules = room?.rules?.[taker];
+  if (note === void 0 || rules === void 0 || !note.endsWith(rules))
+    return note;
+  return note.slice(0, note.length - rules.length).trimEnd();
+}
 var MONTHS = [
   "January",
   "February",
@@ -20487,8 +20496,8 @@ var MONTHS = [
 var CONTEXT_CEILING = { lines: 200, chars: 32e3 };
 var CONTEXT_HEADING = "Said in this space since you last spoke:";
 var contextBudget = external_exports.object({
-  lines: external_exports.int().nonnegative().optional().describe("The most lines to be handed, 20 when absent. Chips hands over 200 at most, and none when this is 0."),
-  chars: external_exports.int().nonnegative().optional().describe("The most characters those lines may run to, as `Name: words` one per line, 4,000 when absent. Chips hands over 32,000 at most.")
+  lines: external_exports.int().nonnegative().optional().describe("The most lines to be handed, 40 when absent. Chips hands over 200 at most, and none when this is 0."),
+  chars: external_exports.int().nonnegative().optional().describe("The most characters those lines may run to, as `Name: words` one per line, 16,000 when absent. Chips hands over 32,000 at most.")
 }).describe("How much of the room a harness is handed with a message for it (ADR 0088). Its own to say: a budget promises nothing to anybody else.");
 var contextLine = external_exports.object({
   seq: external_exports.int().positive().describe("Where in the log it happened."),
@@ -20868,7 +20877,7 @@ var messageNew = defineEvent({
   summary: "Someone said something, with any attachments as signed URLs the harness can fetch.",
   requiresRun: false,
   payload: deliveredMessage.extend({
-    context: roomContext.optional().describe("What was said in the room since this harness last spoke there, or since it joined when it has not, up to this message and without it (ADR 0088). From when the turn that said its last words began, so what was said while it worked is here, and its own words are not (ADR 0105). Worked out from the log, so a replay hands over the same lines. As many as the budget the harness gave in its `hello`: 20 lines and 4,000 characters when it gave none, and none when it asked for 0. When older lines were left out, the taker's room note says so."),
+    context: roomContext.optional().describe("What was said in the room since this harness last spoke there, or since it joined when it has not, up to this message and without it (ADR 0088). From when the turn that said its last words began, so what was said while it worked is here, and its own words are not (ADR 0105). Worked out from the log, so a replay hands over the same lines. As many as the budget the harness gave in its `hello`: 40 lines and 16,000 characters when it gave none, and none when it asked for 0. When older lines were left out, the taker's room note says so."),
     room: roomNote.optional().describe("Who is in the room, with the handle that reaches each, and a note for each who takes the turn saying so and what an @ does (ADR 0092). A harness puts `notes[<taker>]` at the top of that turn. Absent on a message in no room."),
     exchange: deliveredExchange.optional().describe("How the agents' talk in the room stands, once it is worth a word (ADR 0097): from eight messages between agents since a person last acted or an agent last made something new. A harness puts `note` at the top of the turn, as Chips's, ahead of the room's note. Absent below that, and worked out from the log, so a replay hands over the same facts."),
     handed: external_exports.literal(true).optional().describe("Chips held this message when it was said and hands it over now a person has acted (ADR 0097): the newest of an agent's held messages, once; or, with `lead`, hands it to the room's lead. Its seq and id are the hand-over's, its `message_id` the message's own."),
@@ -20918,6 +20927,7 @@ var approvalResolved = defineEvent({
     approval_id: id("approval"),
     decision: external_exports.enum(["approved", "edited", "denied", "expired"]).describe("`expired` means nobody answered and the fallback applied."),
     scope: external_exports.enum(["once", "session", "always"]).default("once").describe("How far the answer reaches. `always` becomes a policy rule."),
+    everywhere: external_exports.boolean().optional().describe("With `always`: the rule is the harness's in every space, not only this one (ADR 0239). An owner or an admin only."),
     updated_input: external_exports.unknown().optional().describe("The edited action input, when the decision is `edited`."),
     reason: external_exports.string().max(4e3).optional().describe("Why. The harness gets to read this."),
     resolved_by: external_exports.string().min(1).max(120).describe("The participant who answered, or `system` on expiry \u2014 a harness when it settles its own ask, answered in its own tools. Filled in by Chips from the credential that sent it; a value the sender writes is replaced."),
@@ -21182,6 +21192,10 @@ function namesInWords(names) {
   return `${names.slice(0, -1).join(", ")} and ${names[names.length - 1]}`;
 }
 function renderProjectNote(facts, options) {
+  return `${renderProjectFacts(facts)}
+${renderProjectAsks(facts, options)}`;
+}
+function renderProjectFacts(facts) {
   const files = `${facts.files} file${facts.files === 1 ? "" : "s"}`;
   const lines2 = [
     `The space's project is a git repository. Your copy is ${facts.folder} (${files}), ${facts.trouble === void 0 ? "brought up to date just now" : "not brought up to date"}.`
@@ -21199,9 +21213,9 @@ function renderProjectNote(facts, options) {
   for (const key of facts.keys) {
     lines2.push(`${key.path} holds what looks like ${key.what}, so your last change wasn't sent: take it out and read it from outside the project.`);
   }
-  return [...lines2, ...asks(facts, options)].join("\n");
+  return lines2.join("\n");
 }
-function asks(facts, options) {
+function renderProjectAsks(facts, options) {
   const lines2 = [
     "Work on the project in that folder and leave git to Chips: when your turn ends, what you changed is committed under your name and sent to everyone here. Keep scratch work outside it.",
     // Sent with the answer too, a project's file became a room file of its own, with versions of
@@ -21222,7 +21236,7 @@ function asks(facts, options) {
   if (facts.pages === true) {
     lines2.push("A page opens in Chips as one document: name every file it needs in its tags and imports (<link>, <script src>, <img src>, import), since it can't fetch files while it runs.");
   }
-  return lines2;
+  return lines2.join("\n");
 }
 
 // node_modules/@chipschat/protocol/dist/src/events/harness-to-chips.js
@@ -21874,7 +21888,7 @@ var membershipRemoved = defineEvent({
   payload: external_exports.object({
     participant_id: external_exports.string().min(1).max(120).describe("Who left."),
     removed_by: external_exports.string().min(1).max(120).optional().describe("Who removed them, if not themselves."),
-    reason: external_exports.enum([...RELEASE_REASONS, "person_removed"]).optional().describe("For an agent (ADR 0087): why it left, as `agent.released` says. For a person, `person_removed`: they were removed from the workspace (ADR 0160). Written by Chips; absent, a person took them out or they left."),
+    reason: external_exports.enum([...RELEASE_REASONS, "person_removed", "person_left"]).optional().describe("For an agent (ADR 0087): why it left, as `agent.released` says. For a person, `person_removed`: they were removed from the workspace (ADR 0160); `person_left`: they deleted their account and left it (ADR 0243). Written by Chips; absent, a person took them out or they left the room."),
     moved_to: id("space").optional().describe("For an agent moved away: the room it went to, so this room can say so.")
   })
 });
@@ -22183,14 +22197,14 @@ var personRemoved = defineEvent({
   type: "person.removed",
   direction: "workspace",
   sender: "chips",
-  summary: "A person was removed from the workspace: signed out everywhere, out of every room, and the harnesses they owned handed to whoever removed them. What they said stays, under their name.",
+  summary: "A person was removed from the workspace, or deleted their account: signed out everywhere, out of every room, and the harnesses they owned handed on. What they said stays, under their name.",
   requiresRun: false,
   payload: external_exports.object({
     participant_id: id("person").describe("Who was removed."),
     display_name: external_exports.string().min(1).max(120).describe("What they were called when they were removed, so the audit needs no lookup."),
-    removed_by: id("person").describe("The owner or admin who removed them."),
+    removed_by: id("person").describe("The owner or admin who removed them, or they themselves when they deleted their account (ADR 0243)."),
     spaces: external_exports.array(id("space")).max(1e3).optional().describe("The rooms they were taken out of, each with its own `membership.removed`."),
-    harnesses: external_exports.array(id("harness")).max(1e3).optional().describe("The harnesses they owned, handed to `removed_by` by `harness.transferred`.")
+    harnesses: external_exports.array(id("harness")).max(1e3).optional().describe("The harnesses they owned, each handed on by `harness.transferred`: to `removed_by`, or, for an account deleted, to an owner.")
   })
 });
 var joinWho = {
@@ -22536,7 +22550,7 @@ var clientHelloFrame = external_exports.object({
   })).max(64).optional().describe("Not read by Chips: a connection is its token's, and the server's `hello` names the token's harness and its agents (ADR 0087). Absent for a person's client."),
   since: external_exports.int().nonnegative().optional().describe("Not read by Chips: a stream resumes from `subscribe`'s `since`."),
   accepts: external_exports.array(external_exports.string().min(1).max(40)).max(32).optional().describe("Server frames beyond the base set this client understands, by the names in `SERVER_EXTENSIONS`. A name the server does not know is ignored rather than refused, so a client may name a frame a newer server sends and still be answered by an older one (ADR 0211, Phase 3). A client that says `events` is sent its replay in pages rather than one frame per event; one that says `presence` is sent an agent's state as it changes (ADR 0083); a harness's socket that says `restart` is sent `restart` when a person asks it to restart (ADR 0094); an owner's or admin's that says `join` is sent each join request as it changes (ADR 0122); a harness's that says `context` is sent `context.edit` when a person changes one of its context files (ADR 0134); a harness's that says `models` is sent `model.change` when a person changes an agent's model or effort (ADR 0140); a harness's that says `heartbeats` is sent `heartbeat.change` when a person switches an agent's heartbeat or changes how often it beats (ADR 0143); a harness's that says `context_windows` is sent `context_window.compact` and `context_window.change` when a person asks an agent to compact now or changes the limit it compacts itself at (ADR 0146); a person's that says `folders` is sent `folder.open` when they ask, from another of their devices, for a room's folder to be opened in Finder (ADR 0225), and `folder.run` when they ask for its project to be run or stopped there (ADR 0226); a person's that says `folder_runs` is sent `folder.run_state` when their Mac says how a run of theirs stands (ADR 0226); one that says nothing is sent what it was always sent, since an unknown frame is dropped in silence."),
-  context: contextBudget.optional().describe("How much of a room a harness is handed with each message for it (ADR 0088): 20 lines and 4,000 characters when absent, 200 and 32,000 at most. For this connection. A person's client is handed none.")
+  context: contextBudget.optional().describe("How much of a room a harness is handed with each message for it (ADR 0088): 40 lines and 16,000 characters when absent, 200 and 32,000 at most. For this connection. A person's client is handed none.")
 }).describe("The first frame a client sends.");
 var subscribeFrame = external_exports.object({
   frame: external_exports.literal("subscribe"),
@@ -23793,6 +23807,14 @@ var Run = class {
       ...cost2(input2.costUsd)
     });
   }
+  /**
+   * That this turn heard a message said in the room while it worked (ADR 0106): one that
+   * `message.overheard` named this run for in `working_turns`, handed to the turn at a step. The
+   * room shows its agent heard it while working. Say it once the turn has the words, never before.
+   */
+  heard(messageId) {
+    return this.wire.send("message.heard", { message_id: messageId });
+  }
   checkpoint(label2, next, compacted) {
     return this.wire.send("checkpoint", {
       label: label2,
@@ -24824,6 +24846,25 @@ function connect(options) {
   return Chips.connect(options);
 }
 
+// node_modules/@chipschat/harness/dist/heard.js
+function workingTurnsOf(message) {
+  return (message.working_turns ?? []).map((turn) => ({
+    agentId: turn.agent_id,
+    runId: turn.run_id
+  }));
+}
+function overheardLine(message) {
+  const files = message.attachments ?? [];
+  const said2 = files.flatMap((file3) => file3.transcript === void 0 ? [] : [file3.transcript]);
+  const words4 = [
+    message.text.trim(),
+    ...said2.map((each) => `(voice note: ${each})`),
+    files.length === 0 ? "" : `(sent ${files.map((file3) => file3.filename).join(", ")})`
+  ].filter((part) => part !== "");
+  const who = withRole(message.from.display_name, message.from);
+  return `${who} said in the room, not to you: ${words4.join(" ")}`;
+}
+
 // node_modules/@chipschat/harness/dist/join.js
 import { createHash } from "node:crypto";
 import { readFileSync as readFileSync2 } from "node:fs";
@@ -25098,8 +25139,19 @@ async function redeem(url2, secret, options, send, machine) {
     throw await refused(answered);
   return await answered.json();
 }
+function reaching(send, url2) {
+  return async (input2, init) => {
+    try {
+      return await send(input2, init);
+    } catch (error62) {
+      if (error62 instanceof Error && error62.name === "AbortError")
+        throw error62;
+      throw new JoinError("unreachable", `Can't reach Chips at ${url2} from this computer. It has to be on the same network as Chips, on its tailnet, or Chips has to be at an address this computer can reach.`);
+    }
+  };
+}
 function askOrRedeem(server, options) {
-  const send = options.fetch ?? fetch;
+  const send = reaching(options.fetch ?? fetch, server.url);
   const machine = options.machine ?? hostname3();
   return server.secret === void 0 ? ask(server.url, options, send, machine) : redeem(server.url, server.secret, options, send, machine);
 }
@@ -25265,14 +25317,31 @@ async function sendAnswer(answer, options) {
 }
 
 // node_modules/@chipschat/harness/dist/prompt.js
+function takerOf(message, options) {
+  return options.taker ?? (message.for?.length === 1 ? message.for[0] : void 0);
+}
+function othersBeside(message, taker) {
+  return (message.room?.members ?? []).some((member) => member.kind === "agent" && member.participant_id !== taker);
+}
+function rulesFor(message, options = {}) {
+  const taker = takerOf(message, options);
+  const { project } = options;
+  const rules = message.room?.rules ?? {};
+  return [
+    taker === void 0 ? void 0 : rules[taker],
+    project === void 0 ? void 0 : renderProjectAsks(project, { othersInRoom: othersBeside(message, taker) }),
+    options.sendsFiles === true ? sendingFiles({ project: project !== void 0 }) : void 0
+  ].filter((part) => part !== void 0 && part !== "").join("\n\n");
+}
 function promptFor(message, options = {}) {
-  const taker = options.taker ?? (message.for?.length === 1 ? message.for[0] : void 0);
+  const taker = takerOf(message, options);
+  const held = options.rulesHeld === true;
   const notes = message.room?.notes ?? {};
-  const note = taker === void 0 ? void 0 : notes[taker];
+  const note = taker === void 0 ? void 0 : held ? noteWithoutRules(message.room, taker) : notes[taker];
   const who = options.sayWho === false ? "" : `${withRole(message.from.display_name, message.from)}: `;
   const files = (message.attachments ?? []).map(renderAttachment);
   const words4 = [`${who}${message.text}`, ...files].join("\n");
-  const sending = options.sendsFiles === true ? sendingFiles({ project: options.project !== void 0 }) : void 0;
+  const sending = options.sendsFiles === true && !held ? sendingFiles({ project: options.project !== void 0 }) : void 0;
   const replying = renderReplyingTo(message.replying_to, {
     sender: {
       id: message.from.participant_id,
@@ -25284,8 +25353,7 @@ function promptFor(message, options = {}) {
     at: message.ts,
     zone: options.zone
   });
-  const others = (message.room?.members ?? []).some((member) => member.kind === "agent" && member.participant_id !== taker);
-  const project = options.project === void 0 ? void 0 : renderProjectNote(options.project, { othersInRoom: others });
+  const project = options.project === void 0 ? void 0 : held ? renderProjectFacts(options.project) : renderProjectNote(options.project, { othersInRoom: othersBeside(message, taker) });
   return [
     message.exchange?.note,
     note,
@@ -25472,7 +25540,10 @@ function nodeOnPath(env = process.env) {
 }
 var pause = (ms) => Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 var LOAD_TRIES = 40;
-var runOf = (options) => options.run ?? ((command) => void execFileSync2(command[0], command.slice(1), { stdio: "ignore" }));
+var runOf = (options) => options.run ?? ((command) => execFileSync2(command[0], command.slice(1), {
+  encoding: "utf8",
+  stdio: ["ignore", "pipe", "ignore"]
+}));
 var ours = (path) => !existsSync3(path) || readFileSync3(path, "utf8").includes(MARK);
 function runOne(command, run2, retryMs) {
   const tries = command[0] === "launchctl" && command[1] === "bootstrap" ? LOAD_TRIES : 1;
@@ -25495,6 +25566,24 @@ function runAll(commands, options) {
     runOne(command, run2, options.retryMs ?? 250);
 }
 var uidOf = (options) => options.uid ?? process.getuid?.() ?? 0;
+function lingers(options) {
+  const run2 = runOf(options);
+  const uid = String(uidOf(options));
+  try {
+    const on = run2(["loginctl", "show-user", uid, "--property=Linger", "--value"]);
+    if (typeof on === "string" && on.trim() === "yes")
+      return true;
+  } catch {
+  }
+  try {
+    run2(["loginctl", "enable-linger", uid]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var sayOf = (options) => options.say ?? ((line2) => void process.stderr.write(`${line2}
+`));
 function keepRunning(spec, options = {}) {
   if (machineOf(options.machine).env["CHIPS_KEEP"] === "off")
     return { state: "off" };
@@ -25509,6 +25598,9 @@ function keepRunning(spec, options = {}) {
   writeFileSync2(file3.path, file3.contents, { mode: 384 });
   chmodSync2(file3.path, 384);
   runAll(startCommands(file3.kind, spec.label, file3.path, uidOf(options)), options);
+  if (file3.kind === "systemd" && !lingers(options)) {
+    sayOf(options)("It stops when you log out. To keep it running on a machine nobody logs in to, run this once: sudo loginctl enable-linger $USER");
+  }
   return { state: "kept", path: file3.path, logFile: file3.logFile };
 }
 function stopKeeping(label2, options = {}) {
@@ -27340,9 +27432,11 @@ function filesHere(project = false) {
   return `${sendingFiles({ project })} Hermes's note that this API server sends only pictures, and shows a MEDIA: tag on the runs endpoint as text, does not hold for these runs: they come from Chips, whose bridge takes each MEDIA: line out of your answer and attaches that file to your message, whatever its type, up to 100 MB.`;
 }
 var FILES_HERE = filesHere();
-function instructionsFor(folder2, project = false) {
+var MARKDOWN_HERE = "Hermes's note that this API server's replies are plain text does not hold for these runs either: Chips shows your answer as Markdown, so use headings, lists, bold, tables and code blocks where they help a reader.";
+function instructionsFor(folder2, project = false, rules = "") {
   const files = filesHere(project);
-  return folder2 === void 0 ? files : `${files} Your own folder is ${folder2}: make and keep your files there, and run your commands from there.`;
+  const here2 = folder2 === void 0 ? files : `${files} Your own folder is ${folder2}: make and keep your files there, and run your commands from there.`;
+  return [here2, MARKDOWN_HERE, rules].filter((part) => part !== "").join("\n\n");
 }
 function freeFolder(root2, name2, taken) {
   const slug = name2.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "agent";
@@ -27408,6 +27502,8 @@ var Bridge = class {
   options;
   agents = [];
   rooms = /* @__PURE__ */ new Map();
+  /** The turns going, by their Chips run, for what is said in their rooms while they work (Chips ADR 0106). */
+  working = /* @__PURE__ */ new Map();
   /** Every Chips agent of the harness's, configured here or not. */
   ours = /* @__PURE__ */ new Set();
   /** The harness's agents' names, by Chips id, for the folders named after them. */
@@ -27455,6 +27551,7 @@ var Bridge = class {
     }
     this.ours = /* @__PURE__ */ new Set([...known.map((agent) => agent.agentId), ...this.agents.map((agent) => agent.agentId)]);
     chips2.on("message.new", (message) => void this.hear(message));
+    chips2.on("message.overheard", (message) => void this.overheard(message));
     chips2.on("agent.asked", (asked) => {
       this.making = this.making.then(() => this.make(asked)).catch((error62) => this.log(`a new agent went wrong: ${messageOf3(error62)}`));
     });
@@ -28071,8 +28168,20 @@ ${hook.lines}`);
       counted: 0,
       approvals: /* @__PURE__ */ new Map(),
       allowed: [],
-      interrupted: false
+      interrupted: false,
+      overheard: []
     };
+    this.working.set(run2.id, turn);
+    try {
+      await this.take(turn, room, { message, speakerId, sayWho });
+    } finally {
+      this.working.delete(run2.id);
+    }
+  }
+  /** A turn begun: Hermes's runs of it, from the first words to its end. */
+  async take(turn, room, { message, speakerId, sayWho }) {
+    const { agent } = room;
+    const { run: run2 } = turn;
     run2.on("cancel", () => {
       turn.cancelled = true;
       if (turn.hermesRun !== "") void agent.client.stop(turn.hermesRun).catch(() => void 0);
@@ -28091,7 +28200,8 @@ ${hook.lines}`);
     const name2 = speakerId === void 0 ? agent.config.name : await this.nameOf(speakerId, agent.config.name);
     turn.folder = this.folderOf(agent, speakerId ?? agent.agentId, name2);
     const project = await this.projectFor(turn, room.spaceId, speakerId ?? agent.agentId, name2);
-    let text = promptFor(message, { taker: speakerId, sayWho, project });
+    turn.rules = rulesFor(message, { taker: speakerId, project });
+    let text = promptFor(message, { taker: speakerId, sayWho, project, rulesHeld: true });
     for (let round = 0; text !== void 0 && !turn.cancelled && !run2.over; round += 1) {
       const last = await this.once(turn, session, text, `${run2.id}:${round}`);
       if (last === void 0) return;
@@ -28117,19 +28227,53 @@ ${hook.lines}`);
         sessionId: session,
         ...this.runModel(turn),
         key,
-        instructions: instructionsFor(turn.folder, turn.project !== void 0)
+        instructions: instructionsFor(turn.folder, turn.project !== void 0, turn.rules)
       });
     } catch (error62) {
       await this.failed(turn, `${agent.config.name} couldn't start in Hermes: ${messageOf3(error62)}`, true);
       return void 0;
     }
     if (turn.cancelled) await agent.client.stop(turn.hermesRun).catch(() => void 0);
+    let last;
     try {
-      const last = await agent.client.events(turn.hermesRun, (event) => this.heard(turn, event));
-      return last ?? await this.endOf(turn);
+      last = await agent.client.events(turn.hermesRun, (event) => this.heard(turn, event)) ?? await this.endOf(turn);
     } catch (error62) {
       this.log(`lost ${agent.config.name}'s run ${turn.hermesRun}: ${messageOf3(error62)}`);
-      return await this.endOf(turn);
+      last = await this.endOf(turn);
+    }
+    await this.toldWhileWorking(turn, last);
+    return last;
+  }
+  /**
+   * Words said in a room, not to the harness, while its agents work there (Chips ADRs 0105, 0106):
+   * each turn Chips names hears them as a steer of its Hermes run, which Hermes gives the model
+   * after the step it is on. A run that won't take a steer is ending, and its agent's next turn is
+   * handed the words.
+   */
+  async overheard(message) {
+    const line2 = overheardLine(message);
+    for (const { runId } of workingTurnsOf(message)) {
+      const turn = this.working.get(runId);
+      if (turn === void 0 || turn.run.over || turn.hermesRun === "") continue;
+      try {
+        await turn.agent.client.steer(turn.hermesRun, line2);
+        turn.overheard.push({ messageId: message.message_id, line: line2 });
+      } catch {
+      }
+    }
+  }
+  /**
+   * Which of the words steered into a run it heard: those Hermes gave it before it completed, not
+   * those it kept back as `pending_steer`, nor any in a run that failed or was stopped. Chips is
+   * told of each, and the room shows the agent heard it while working (Chips ADR 0106).
+   */
+  async toldWhileWorking(turn, last) {
+    const told = turn.overheard.splice(0);
+    if (last?.event !== "run.completed") return;
+    const kept = typeof last["pending_steer"] === "string" ? last["pending_steer"] : "";
+    for (const { messageId, line: line2 } of told) {
+      if (kept.includes(line2)) continue;
+      await turn.run.heard(messageId).catch((error62) => this.log(`couldn't say a turn heard ${messageId}: ${messageOf3(error62)}`));
     }
   }
   /** The end of a run whose stream was lost: its state read until it is over, as a terminal event. */
@@ -28672,6 +28816,10 @@ async function checkHermes(config3, clientFor = (agent) => new HermesClient(agen
   }
 }
 
+// src/version.ts
+import { readFileSync as readFileSync11 } from "node:fs";
+var VERSION = JSON.parse(readFileSync11(new URL("../package.json", import.meta.url), "utf8")).version;
+
 // src/main.ts
 var home = (path) => path.startsWith("~/") ? join13(homedir8(), path.slice(2)) : path;
 var link = process.env["CHIPS_JOIN_LINK"] || void 0;
@@ -28680,7 +28828,7 @@ stopIfAsked(LABEL);
 var configPath = resolve6(home(words3[0] ?? "~/.chips-hermes/config.json"));
 var folder = dirname6(configPath);
 var statePath = join13(folder, "sessions.json");
-var state = existsSync11(statePath) ? JSON.parse(readFileSync11(statePath, "utf8")) : { sessions: {} };
+var state = existsSync11(statePath) ? JSON.parse(readFileSync12(statePath, "utf8")) : { sessions: {} };
 var saveState = (next) => {
   mkdirSync6(folder, { recursive: true, mode: 448 });
   writeFileSync5(statePath, `${JSON.stringify(next, null, 2)}
@@ -28741,7 +28889,7 @@ var joined = await join3({
   link,
   url: process.env["CHIPS_URL"],
   name,
-  software: "chips-hermes 1.0.0",
+  software: `chips-hermes ${VERSION}`,
   wants: WANTS,
   onCode: (code) => log(`Allow this harness in Chips: ${code}`)
 }).catch(refused2);
@@ -28759,7 +28907,7 @@ var restart = restarter({
 var chips = await connect({
   url: joined.url,
   token: joined.token,
-  client: { name: "chips-hermes", version: "1.0.0" },
+  client: { name: "chips-hermes", version: VERSION },
   store: fileStore(join13(folder, "chips-state.json")),
   onRestart: restart,
   settings: settingsFor(() => bridge)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chipschat/hermes",
-  "version": "1.0.8",
+  "version": "1.0.11",
   "description": "Hermes Agent as a Chips harness, on its Runs API: each profile a Chips agent, each room a Hermes session.",
   "license": "Apache-2.0",
   "type": "module",