thinkpool-pair 0.7.364 → 0.7.366

package/hermes-session.mjs

@@ -1,683 +1 @@
-// Hermes Agent structured runtime over the official ACP stdio transport.
-// Implements the same narrow session contract as claude-session/codex-session.
-import fs from 'node:fs'
-import path from 'node:path'
-import { randomUUID } from 'node:crypto'
-import { AcpClient } from './acp-client.mjs'
-import { HermesEventMapper, hermesToolFor } from './hermes-event-mapper.mjs'
-import { probeHermesRuntime } from './hermes-probe.mjs'
-import { HERMES_PLAN_SAFE_MCP_TOOLS, HERMES_QUESTION_MCP_TOOL, hermesExactInventory, hermesPolicyEnv, hermesRoleFor } from './hermes-policy.mjs'
-import { startCodexMcpHttp } from './codex-mcp-http.mjs'
-import { autoAllow, classifyRisk } from './claude-session.mjs'
-import { crossPostNeedsCard } from './cross-terminal.mjs'
-import { buildThinkPoolTurnGuidance, createRoomContextSelector, usesFullThinkPoolReminder } from './thinkpool-room-prompt.mjs'
-import { createCumulativeEventRelay } from './cumulative-event-relay.mjs'
-
-export const HERMES_COMMAND = 'thinkpool'
-export const HERMES_ACP_PROTOCOL_VERSION = 1
-export const HERMES_SUPPORTED_MODES = new Set(['default', 'acceptEdits', 'plan', 'bypassPermissions'])
-export const HERMES_EFFORT_LEVELS = new Set(['none', 'low', 'medium', 'high', 'xhigh', 'max'])
-export const HERMES_EFFORT_CONFIG_ID = 'thinkpool_reasoning_effort'
-const HERMES_INITIALIZE_TIMEOUT_MS = 15_000
-const PLAN_SAFE_MCP_TOOLS = new Set([...HERMES_PLAN_SAFE_MCP_TOOLS, 'read_review_file'])
-
-const HERMES_SECRET_ENV_KEY = /(?:TOKEN|SECRET|PASSWORD|PRIVATE_KEY|API_KEY|ACCESS_KEY|CREDENTIAL)/i
-const HERMES_REPLAY_UPDATES = new Set(['agent_message_chunk', 'agent_thought_chunk', 'tool_call', 'tool_call_update', 'plan'])
-export const hermesChildEnv = (env = {}) => Object.fromEntries(
-  Object.entries(env).filter(([key]) => !HERMES_SECRET_ENV_KEY.test(key)),
-)
-
-const imageBlock = (imagePath) => {
-  const ext = path.extname(imagePath).toLowerCase()
-  const mimeType = ext === '.png' ? 'image/png' : ext === '.webp' ? 'image/webp' : ext === '.gif' ? 'image/gif' : 'image/jpeg'
-  return { type: 'image', mimeType, data: fs.readFileSync(imagePath).toString('base64') }
-}
-
-const modelList = (state) => (state?.availableModels || []).map((item) => ({ value: item.modelId, displayName: item.name || item.modelId, description: item.description || '' }))
-
-const mcpDescriptor = (url) => ({ type: 'http', name: 'thinkpool', url, headers: [] })
-const createAcpClient = (options) => new AcpClient(options)
-
-export function buildHermesPromptText({ text, firstTurn = false, terminalRolePrompt, rolePrompt, roomContext, promptIndex = 0, forceFullReminder = false } = {}) {
-  const context = typeof roomContext === 'function' ? roomContext() : roomContext
-  const inThinkPoolRoom = !!(terminalRolePrompt || rolePrompt || context)
-  const fullReminder = usesFullThinkPoolReminder({ promptIndex, forceFull: forceFullReminder })
-  const preamble = [
-    firstTurn || fullReminder ? terminalRolePrompt : '',
-    inThinkPoolRoom ? buildThinkPoolTurnGuidance({ text, promptIndex, forceFull: forceFullReminder }) : '',
-    firstTurn || fullReminder ? rolePrompt : '',
-    context,
-  ].filter(Boolean).join('\n\n')
-  const body = String(text ?? '')
-  return preamble ? `${preamble}\n\n${body}` : body
-}
-
-const permissionOutcome = (decision, options = []) => {
-  if (decision === 'deny' || !decision) return { outcome: 'cancelled' }
-  const preferred = decision === 'always'
-    ? ['allow_always', 'allow_session', 'allow_once']
-    : ['allow_once', 'allow_session', 'allow_always']
-  const option = preferred.map((kind) => options.find((item) => item.kind === kind || item.optionId === kind)).find(Boolean)
-    || options.find((item) => String(item.kind || '').startsWith('allow'))
-  return option ? { outcome: 'selected', optionId: option.optionId } : { outcome: 'cancelled' }
-}
-
-export function startHermesSession({
-  cwd, model, resume, env = process.env, mode = 'default', onEvent, requestPermission,
-  roomContext, terminalRolePrompt, rolePrompt, mcpServers, requiredMcpTools = [], prepareCwd = null,
-  command = HERMES_COMMAND, args = ['acp'], clientFactory = createAcpClient,
-  mcpHttpFactory = startCodexMcpHttp, lazy = false, hermesRole = null,
-  crossPostGate = null, didSpawnTarget = null, crossRoomPostGate = null, effort = 'high',
-  admitStart = null, onTurnStart = null,
-} = {}) {
-  let activeCwd = cwd
-  const requestedModel = model || null
-  let activeModel = requestedModel
-  let activeMode = HERMES_SUPPORTED_MODES.has(mode) ? mode : 'default'
-  let sessionId = resume || null
-  let client = null
-  let mapper = null
-  let mcpHttp = null
-  let starting = null
-  let ended = false
-  let turnActive = false
-  let started = false
-  let crashed = false
-  let firstTurn = true
-  let userPromptNo = 0
-  let forceFullReminder = true
-  const selectRoomContext = createRoomContextSelector(roomContext)
-  let stderrTail = ''
-  let promptChain = Promise.resolve()
-  let activeTurnId = 0
-  const abortedTurns = new Set()
-  let retireClient = () => {}
-  let resuming = false
-  let inventoryProbe = null
-  let modelSwitchPending = false
-  let bootCancelled = false
-  let suppressNextSessionPublish = false
-  let activeEffort = effort === null ? null : (HERMES_EFFORT_LEVELS.has(effort) ? effort : 'high')
-  const queuedTurns = []
-  let drainingQueuedTurns = false
-  let queueDrainPending = false
-  const policyRole = hermesRole || hermesRoleFor({})
-
-  const effectivePolicyRole = () => activeMode === 'plan' ? 'plan' : policyRole
-  const effectiveMcpTools = () => activeMode === 'plan'
-    ? requiredMcpTools.filter((name) => PLAN_SAFE_MCP_TOOLS.has(name))
-    : requiredMcpTools
-  const acpModeFor = (value) => value === 'acceptEdits'
-    ? 'accept_edits'
-    : value === 'bypassPermissions'
-      ? 'dont_ask'
-      : 'default'
-
-  const emit = createCumulativeEventRelay((event) => { try { onEvent?.(event) } catch { /* consumer isolation */ } })
-
-  const thinkpoolPeerTool = (name) => {
-    const lower = String(name || '').toLowerCase()
-    return [...HERMES_PLAN_SAFE_MCP_TOOLS, 'post_to_terminal', 'post_to_session', HERMES_QUESTION_MCP_TOOL]
-      .find((candidate) => lower === candidate || lower === `mcp__thinkpool__${candidate}` || lower === `mcp_thinkpool_${candidate}`) || null
-  }
-
-  async function onRequest(method, params, requestId) {
-    if (method !== 'session/request_permission') throw Object.assign(new Error(`Unsupported ACP client method: ${method}`), { code: -32601 })
-    const tool = hermesToolFor(params.toolCall || mapper?.tools.get(params.toolCallId) || {})
-    const peerTool = thinkpoolPeerTool(tool.name)
-    const card = {
-      id: `hermes-perm:${requestId}`,
-      toolName: peerTool ? `mcp__thinkpool__${peerTool}` : tool.name,
-      input: tool.input,
-      risk: peerTool?.startsWith('post_to_') ? 'high' : classifyRisk(tool.name, tool.input),
-    }
-    // ACP's native modes currently govern edit proposals only. ThinkPool's
-    // permission chip is the cross-runtime authority, so apply the same pure
-    // mode policy Claude uses before raising a durable room card. Structural
-    // role schemas still win: bypass can auto-allow a request, but it cannot
-    // restore a tool that the process-local Hermes policy never exposed.
-    // Match Claude/Codex peer semantics before the generic permission matrix.
-    // Paired-room reads are always read-only, including in Plan. Same-room posts
-    // honor bypass/ownership after their bridge gate. Cross-room posts always
-    // retain sender consent—even in bypass—because the target has a second card.
-    if (HERMES_PLAN_SAFE_MCP_TOOLS.includes(peerTool)) {
-      return { outcome: permissionOutcome('allow', params.options) }
-    }
-    // The question tool creates its own durable human-input card. Requiring a
-    // permission card before it can create that card deadlocks the interaction.
-    if (peerTool === HERMES_QUESTION_MCP_TOOL) {
-      return { outcome: permissionOutcome('allow', params.options) }
-    }
-    if (peerTool === 'post_to_terminal') {
-      const gate = crossPostGate ? crossPostGate() : { ok: true }
-      if (!gate.ok) return { outcome: { outcome: 'cancelled' } }
-      const spawnedByMe = didSpawnTarget ? !!didSpawnTarget(tool.input?.terminal) : false
-      if (!crossPostNeedsCard({ mode: activeMode, spawnedByMe })) {
-        return { outcome: permissionOutcome('allow', params.options) }
-      }
-    }
-    if (peerTool === 'post_to_session') {
-      const gate = crossRoomPostGate ? crossRoomPostGate() : { ok: true }
-      if (!gate.ok) return { outcome: { outcome: 'cancelled' } }
-      let decision = 'deny'
-      try { decision = await requestPermission?.(card) } catch { /* fail closed */ }
-      return { outcome: permissionOutcome(decision, params.options) }
-    }
-    if (activeMode === 'plan') return { outcome: { outcome: 'cancelled' } }
-    if (autoAllow({ toolName: card.toolName, input: card.input, mode: activeMode })) {
-      return { outcome: permissionOutcome('allow', params.options) }
-    }
-    let decision = 'deny'
-    try { decision = await requestPermission?.(card) } catch { /* fail closed */ }
-    return { outcome: permissionOutcome(decision, params.options) }
-  }
-
-  function onNotification(method, params) {
-    if (method !== 'session/update') return
-    const update = params?.update || params
-    if (inventoryProbe) {
-      if (update?.sessionUpdate === 'agent_message_chunk' && update?.content?.type === 'text') {
-        inventoryProbe.push(String(update.content.text || ''))
-        return
-      }
-      // `/tools` is a local readiness transaction, but Hermes can publish its
-      // command catalog (and other session chrome) concurrently with that
-      // response. Suppress only the probe's assistant text; dropping every
-      // notification here made the real native catalog disappear permanently.
-    }
-    if (resuming && HERMES_REPLAY_UPDATES.has(update?.sessionUpdate)) return
-    mapper?.push(params)
-  }
-
-  async function probeMcpTools() {
-    const required = [...new Set((Array.isArray(effectiveMcpTools()) ? effectiveMcpTools() : [])
-      .map((name) => String(name || '').trim()).filter(Boolean))]
-    // Direct runtime tests and unscoped upstream callers have no bridge role
-    // contract to prove. Every bridge-created Hermes lane supplies its required
-    // MCP list; only those lanes enter the exact-inventory transaction.
-    if (!required.length && effectivePolicyRole() !== 'plan') return { inventory: '', missing: [], forbidden: [] }
-    const exact = hermesExactInventory(effectivePolicyRole(), { mcpTools: required })
-    const allowedBuiltins = exact.builtinTools
-    const requiredBuiltins = exact.requiredBuiltinTools
-    const expectedMcp = exact.mcpTools
-    const chunks = []
-    inventoryProbe = chunks
-    try {
-      await client.request('session/prompt', {
-        sessionId,
-        prompt: [{ type: 'text', text: '/tools' }],
-        messageId: randomUUID(),
-      }, 30_000)
-    } finally { inventoryProbe = null }
-    const inventory = chunks.join('')
-    const has = (name) => new RegExp(`(?:^|[^a-z0-9_])${name}(?:$|[^a-z0-9_])`, 'i').test(inventory)
-    const mcpNames = [...inventory.matchAll(/\bmcp(?:__|_)[a-z0-9_]+/gi)].map((item) => item[0])
-    const expectedMcpNames = new Set(expectedMcp.flatMap((name) => [`mcp__thinkpool__${name}`, `mcp_thinkpool_${name}`]))
-    const unexpectedMcp = [...new Set(mcpNames.filter((name) => !expectedMcpNames.has(name)))]
-    // This is a zero-inference ACP inventory command. It proves the complete
-    // role schema (required built-ins plus exactly this lane's ThinkPool MCP
-    // set). Optional provider/browser capabilities may be absent, but any
-    // presented builtin outside the role allowlist is still a hard failure.
-    return {
-      inventory,
-      missing: [
-        ...requiredBuiltins.filter((name) => !has(name)),
-        ...expectedMcp.filter((name) => !has(`mcp__thinkpool__${name}`) && !has(`mcp_thinkpool_${name}`)),
-      ],
-      forbidden: [
-        ...exact.allBuiltinTools.filter((name) => !allowedBuiltins.includes(name) && has(name)),
-        ...unexpectedMcp,
-      ],
-    }
-  }
-
-  async function assertMcpReadiness() {
-    const probe = await probeMcpTools()
-    if (!probe.missing.length && !probe.forbidden.length) return probe
-    const details = [probe.missing.length ? `missing ${probe.missing.join(', ')}` : '', probe.forbidden.length ? `forbidden ${probe.forbidden.join(', ')}` : ''].filter(Boolean).join('; ')
-    throw new Error(`Hermes ThinkPool MCP readiness failed; ${details}`)
-  }
-
-  async function boot() {
-    if (ended) throw new Error('Hermes session is closed')
-    if (crashed) throw new Error('Hermes ACP process crashed; this lane must be restarted before sending another turn')
-    if (client?.alive && mapper) return
-    if (starting) return starting
-    const gate = typeof admitStart === 'function' ? admitStart() : { ok: true }
-    if (gate?.ok === false) throw new Error(gate.reason || 'Host memory is critically low. This Hermes runtime was not started.')
-    starting = (async () => {
-      if (!started && prepareCwd) {
-        try { activeCwd = prepareCwd() || activeCwd } catch { /* retain original cwd */ }
-      }
-      const thinkpool = mcpServers?.thinkpool
-      if (thinkpool && !mcpHttp) mcpHttp = await mcpHttpFactory({ sdkServer: thinkpool })
-      let childEnv = hermesChildEnv(env)
-      let launchCommand = command
-      let launchArgs = args
-      // The bridge advertises Hermes only after this probe, but lazy lanes may
-      // boot much later. Re-check immediately before every real ACP process so
-      // a removed/changed delegation hook cannot ride a stale startup verdict.
-      if (command === HERMES_COMMAND && clientFactory === createAcpClient) {
-        const profile = probeHermesRuntime({ command, env: childEnv, strictBootstrap: true })
-        if (!profile.available) throw new Error(`Hermes profile safety check failed: ${profile.reason || 'runtime unavailable'}`)
-        // The executable is the installed venv Python, never the mutable
-        // profile wrapper. HERMES_HOME is the probe-verified isolated profile.
-        launchCommand = profile.python
-        launchArgs = [profile.bootstrap]
-        childEnv = { ...childEnv, HERMES_HOME: profile.profile, THINKPOOL_HERMES_ACP_POLICY: hermesPolicyEnv(effectivePolicyRole(), { mcpTools: effectiveMcpTools() }) }
-      }
-      let retired = false
-      retireClient = () => { retired = true }
-      const initializeParams = {
-        protocolVersion: HERMES_ACP_PROTOCOL_VERSION,
-        clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false },
-        clientInfo: { name: 'thinkpool-pair', title: 'ThinkPool Code', version: '1' },
-      }
-      let initialized
-      // Cold Hermes imports take 6–9 seconds on the supported host, and the
-      // production ENOSPC incident pushed one child just beyond the old 10s
-      // cliff. Initialization is pre-session and pre-inference, so one fresh
-      // process retry is safe: no prompt or tool can have executed yet.
-      for (let attempt = 0; attempt < 2; attempt++) {
-        retired = false
-        retireClient = () => { retired = true }
-        client = clientFactory({
-          command: launchCommand, args: launchArgs, cwd: activeCwd, env: childEnv,
-          onNotification,
-          onRequest,
-          onStderr: (text) => { stderrTail = (stderrTail + text).slice(-2000) },
-          onClose: (error) => {
-            if (ended || crashed || retired) return
-            crashed = true
-            turnActive = false
-            emit({ kind: 'error', message: `Hermes ACP closed unexpectedly: ${error?.message || error}`, recoverable: true })
-          },
-        })
-        client.start()
-        try {
-          initialized = await client.request('initialize', initializeParams, HERMES_INITIALIZE_TIMEOUT_MS)
-          break
-        } catch (error) {
-          const retryable = !bootCancelled && attempt === 0 && /^initialize timed out\b/i.test(String(error?.message || error))
-          if (!retryable) throw error
-          retireClient()
-          const timedOutClient = client
-          client = null
-          timedOutClient?.end()
-          stderrTail = ''
-        }
-      }
-      if (initialized?.protocolVersion !== HERMES_ACP_PROTOCOL_VERSION) {
-        throw new Error(`Unsupported Hermes ACP protocol ${initialized?.protocolVersion ?? 'unknown'}; expected ${HERMES_ACP_PROTOCOL_VERSION}`)
-      }
-      const params = { cwd: path.resolve(activeCwd), mcpServers: mcpHttp ? [mcpDescriptor(mcpHttp.url)] : [] }
-      mapper = new HermesEventMapper({ onEvent: emit, sessionId, model: activeModel })
-      let state
-      if (sessionId) {
-        if (!initialized?.agentCapabilities?.sessionCapabilities?.resume) {
-          throw new Error(`Hermes session ${sessionId} cannot be resumed by this ACP release; no fresh session was substituted`)
-        }
-        try {
-          resuming = true
-          state = await client.request('session/resume', { ...params, sessionId }, 30_000)
-        }
-        catch (error) {
-          throw new Error(`Hermes session ${sessionId} is not available; no fresh session was substituted (${error?.message || error})`)
-        }
-        finally { resuming = false }
-      } else state = await client.request('session/new', params, 30_000)
-      if (!sessionId) sessionId = state?.sessionId || null
-      if (!sessionId) throw new Error('Hermes ACP did not return a session id')
-      let toolProbe = await probeMcpTools()
-      let missingMcpTools = toolProbe.missing
-      // Hermes treats ACP-provided MCP registration as non-fatal. A transient
-      // first connection can therefore leave an otherwise healthy session with
-      // only built-in tools. Re-running the released resume lifecycle retries
-      // registration without inventing a new native identity. Bound this to one
-      // retry, then fail closed before any user prompt reaches a tool-less lane.
-      if (missingMcpTools.length && initialized?.agentCapabilities?.sessionCapabilities?.resume) {
-        try {
-          resuming = true
-          state = await client.request('session/resume', { ...params, sessionId }, 30_000)
-        } finally { resuming = false }
-        toolProbe = await probeMcpTools()
-        missingMcpTools = toolProbe.missing
-      }
-      if (missingMcpTools.length || toolProbe.forbidden.length) {
-        const details = [missingMcpTools.length ? `missing ${missingMcpTools.join(', ')}` : '', toolProbe.forbidden.length ? `forbidden ${toolProbe.forbidden.join(', ')}` : ''].filter(Boolean).join('; ')
-        throw new Error(`Hermes ThinkPool MCP readiness failed; ${details}`)
-      }
-      const serverModel = state?.models?.currentModelId || null
-      activeModel = requestedModel || serverModel || activeModel
-      // A spawned Hermes worker may be pinned to an exact model from its parent's
-      // ACP catalog. Acknowledge that model BEFORE publishing the initial system/
-      // models events; otherwise the worker runs the requested model while the UI
-      // and persisted resume record lie that it still uses the profile default.
-      if (requestedModel) {
-        await client.request('session/set_model', { sessionId, modelId: activeModel })
-        await assertMcpReadiness()
-      }
-      // The bootstrap owns this config id and applies it to the process-local
-      // agent.  Send it on new, resume and reconstructed sessions; it never
-      // touches Hermes' shared profile/config.yaml.
-      if (activeEffort) await client.request('session/set_config_option', { sessionId, configId: HERMES_EFFORT_CONFIG_ID, value: activeEffort })
-      const publishedModels = state?.models
-        ? { ...state.models, currentModelId: activeModel }
-        : activeModel ? { currentModelId: activeModel, availableModels: [] } : state?.models
-      if (!suppressNextSessionPublish) {
-        mapper.startSession({ sessionId, models: publishedModels, modes: state?.modes, commands: [] })
-      } else {
-        // A Plan transition recreates only the ACP process so its tool schema
-        // can become structurally read-only. Keep the room transcript/catalog
-        // stable while the fresh mapper resumes the same native session.
-        mapper.sessionId = sessionId
-        mapper.model = activeModel
-        suppressNextSessionPublish = false
-      }
-      started = true
-      const acpMode = acpModeFor(activeMode)
-      if (state?.modes?.availableModes?.some((item) => item.id === acpMode) && state.modes.currentModeId !== acpMode) {
-        await client.request('session/set_mode', { sessionId, modeId: acpMode })
-      }
-      emit({ kind: 'capabilities', runtime: 'hermes', protocol: 'acp', protocolVersion: initialized?.protocolVersion, capabilities: initialized?.agentCapabilities || {}, models: modelList(state?.models), flow: command === HERMES_COMMAND && clientFactory === createAcpClient })
-    })().catch(async (error) => {
-      crashed = true
-      client?.end()
-      try { await mcpHttp?.close() } catch { /* startup cleanup */ }
-      mcpHttp = null
-      if (!bootCancelled) emit({ kind: 'error', message: `Hermes ACP startup failed: ${error?.message || error}${stderrTail ? `: ${stderrTail.trim().slice(-240)}` : ''}`, recoverable: true })
-      throw error
-    }).finally(() => { starting = null; bootCancelled = false })
-    return starting
-  }
-
-  function reviveAfterExplicitRetry() {
-    if (!crashed || ended) return
-    retireClient()
-    client?.end()
-    client = null
-    mapper = null
-    crashed = false
-    stderrTail = ''
-  }
-
-  function finishAbortedTurn() {
-    if (mapper) mapper.finishTurn({ stopReason: 'cancelled' })
-    else emit({ kind: 'result', subtype: 'aborted', sessionId, model: activeModel, costUsd: null, usage: null, numTurns: 1, durationMs: undefined, denials: 0, resultText: null })
-  }
-
-  async function restartAfterCancelledResponseFailure() {
-    const oldClient = client
-    retireClient()
-    client = null
-    mapper = null
-    oldClient?.end()
-    await boot()
-  }
-
-  function promptBlocks(text, options = {}, { promptIndex = 0, forceFull = false } = {}) {
-    const rawText = String(text)
-    // Hermes handles /steer, /queue, /compact and /reset only when the slash is
-    // the first character of a pure-text prompt.
-    if (/^\s*\//.test(rawText)) return [{ type: 'text', text: rawText }]
-    const fullReminder = usesFullThinkPoolReminder({ promptIndex, forceFull })
-    const blocks = [{ type: 'text', text: buildHermesPromptText({
-      text: rawText,
-      firstTurn,
-      terminalRolePrompt,
-      rolePrompt,
-      roomContext: () => selectRoomContext({ force: fullReminder }),
-      promptIndex,
-      forceFullReminder: forceFull,
-    }) }]
-    for (const imagePath of (Array.isArray(options.images) ? options.images : [])) {
-      try { blocks.push(imageBlock(imagePath)) } catch { /* quoted host path remains in text */ }
-    }
-    return blocks
-  }
-
-  async function runPrompt(text, options = {}, { steering = false, turnId = activeTurnId, promptIndex = 0, forceFull = false } = {}) {
-    try { await boot() }
-    catch (error) {
-      if (abortedTurns.has(turnId)) return { stopReason: 'cancelled' }
-      throw error
-    }
-    if (abortedTurns.has(turnId)) return { stopReason: 'cancelled' }
-    const body = steering ? `/steer ${String(text)}` : String(text)
-    let result
-    try {
-      result = await client.request('session/prompt', {
-        sessionId,
-        prompt: promptBlocks(body, options, { promptIndex, forceFull }),
-        messageId: randomUUID(),
-      }, 0)
-    } catch (error) {
-      // Hermes 0.18.2 successfully interrupts the model/tool, then its ACP
-      // prompt handler can reject with Internal error while constructing the
-      // cancelled response. The bridge already owns the canonical aborted
-      // boundary below, so a late response failure for that exact turn is not a
-      // second turn failure. Process-close errors still surface through onClose.
-      if (abortedTurns.has(turnId)) {
-        // Hermes 0.18.2 throws before clearing its transient is_running flag.
-        // Resume the same persisted session in a fresh per-lane ACP process so
-        // the next queued prompt cannot disappear into that stale runtime queue.
-        if (!ended) await restartAfterCancelledResponseFailure()
-        return { stopReason: 'cancelled' }
-      }
-      throw error
-    }
-    if (!steering) {
-      if (abortedTurns.has(turnId)) return result
-      turnActive = false
-      firstTurn = false
-      const compact = /^\s*\/compact\b/i.test(String(text || '')) ? mapper.compactOutcome() : null
-      if (compact) emit({ kind: 'compaction', trigger: 'manual', ...compact })
-      const reasoning = String(text || '').match(/^\s*\/reasoning\s+(low|medium|high|xhigh|max|none|reset)\s*$/i)
-      if (reasoning) {
-        const requested = reasoning[1].toLowerCase()
-        const confirmed = requested === 'reset'
-          ? /Session reasoning reset to model default/i.test(mapper.text)
-          : new RegExp(`Session reasoning set to ${requested}`, 'i').test(mapper.text)
-        if (confirmed) {
-          activeEffort = requested === 'reset' ? null : requested
-          emit({ kind: 'effort', level: activeEffort })
-        }
-      }
-      // Reserve the idle-looking result boundary for the existing FIFO before
-      // publishing it. An onEvent consumer can synchronously submit a new turn
-      // from the result callback; without this latch that turn starts ahead of
-      // already-queued work and violates /queue order.
-      queueDrainPending = queuedTurns.length > 0 && !ended && !abortedTurns.has(turnId)
-      mapper.finishTurn({ stopReason: result?.stopReason, usage: result?.usage })
-      if (queueDrainPending) void drainQueuedTurns()
-    }
-    return result
-  }
-
-  async function drainQueuedTurns() {
-    if (drainingQueuedTurns || ended || turnActive) return
-    drainingQueuedTurns = true
-    try {
-      while (queuedTurns.length && !ended && !turnActive) {
-        queueDrainPending = false
-        const next = queuedTurns.shift()
-        const turnId = ++activeTurnId
-        turnActive = true
-        try { onTurnStart?.(next.options || {}) } catch { /* observer cannot break the FIFO */ }
-        try { await runPrompt(next.text, next.options, { steering: false, turnId, promptIndex: next.promptIndex, forceFull: next.forceFull }) }
-        catch (error) { turnActive = false; emit({ kind: 'error', message: `Hermes queued turn failed: ${error?.message || error}`, recoverable: true }) }
-      }
-    } finally { drainingQueuedTurns = false; queueDrainPending = false }
-  }
-
-  if (!lazy) queueMicrotask(() => { void boot().catch(() => {}) })
-
-  return {
-    get sessionId() { return sessionId },
-    get turnActive() { return turnActive },
-    get queuedDepth() { return queuedTurns.length },
-    get canSteer() { return !!client?.alive },
-    get started() { return started },
-    get models() { return [] },
-    get effort() { return activeEffort },
-    sendTurn(text, options = {}) {
-      if (ended) return false
-      if (!client?.alive && !starting) {
-        const gate = typeof admitStart === 'function' ? admitStart() : { ok: true }
-        if (gate?.ok === false) {
-          emit({ kind: 'error', message: gate.reason || 'Host memory is critically low. This Hermes runtime was not started.', recoverable: true })
-          return false
-        }
-      }
-      const promptIndex = userPromptNo++
-      const thisTurnForceFull = forceFullReminder
-      forceFullReminder = /^\s*\/(?:compact|reset|clear)\b/i.test(String(text || ''))
-      // A crash never replays work by itself. A later explicit turn is the
-      // authority to launch a fresh ACP process and resume the same native
-      // session id; this is the recovery path the old permanent latch blocked.
-      reviveAfterExplicitRetry()
-      const queued = String(text || '').match(/^\s*\/queue\s+([\s\S]+)$/i)
-      // A result callback may arrive after turnActive fell but before the FIFO
-      // drain claimed the next queued item. Keep any new human turn behind the
-      // already-visible queue instead of letting that micro-window reorder it.
-      if (queueDrainPending) {
-        queuedTurns.push({ text: queued ? queued[1] : String(text || ''), options, promptIndex, forceFull: thisTurnForceFull })
-        emit({ kind: 'queue-add', queued: true, depth: queuedTurns.length })
-        return true
-      }
-      // A busy prompt is a genuine ACP /steer call and may run concurrently.
-      if (turnActive) {
-        if (queued) {
-          queuedTurns.push({ text: queued[1], options, promptIndex, forceFull: thisTurnForceFull })
-          emit({ kind: 'queue-add', queued: true, depth: queuedTurns.length })
-          return true
-        }
-        const turnId = activeTurnId
-        void runPrompt(text, options, { steering: true, turnId, promptIndex, forceFull: thisTurnForceFull }).catch((error) => emit({ kind: 'error', message: `Hermes steering failed: ${error?.message || error}`, recoverable: true }))
-        return true
-      }
-      const turnId = ++activeTurnId
-      // Claim the turn synchronously, before the cold safety probe/import. The
-      // room can now show Thinking + Stop for the whole accepted lifecycle.
-      turnActive = true
-      promptChain = promptChain.then(() => runPrompt(text, options, { steering: false, turnId, promptIndex, forceFull: thisTurnForceFull })).catch((error) => {
-        turnActive = false
-        emit({ kind: 'error', message: `Hermes turn failed: ${error?.message || error}`, recoverable: true })
-      })
-      return true
-    },
-    async abort() {
-      if (!turnActive) return
-      queuedTurns.length = 0
-      queueDrainPending = false
-      const turnId = activeTurnId
-      abortedTurns.add(turnId)
-      // Bound retained turn ids while preserving any concurrent /steer request
-      // that may settle after the primary prompt response.
-      if (abortedTurns.size > 32) abortedTurns.delete(abortedTurns.values().next().value)
-      turnActive = false
-      firstTurn = false
-      if (starting) {
-        bootCancelled = true
-        retireClient()
-        client?.end()
-        finishAbortedTurn()
-        await promptChain.catch(() => {})
-        return
-      }
-      if (!sessionId || !client?.alive) {
-        finishAbortedTurn()
-        await promptChain.catch(() => {})
-        return
-      }
-      finishAbortedTurn()
-      await client.notify('session/cancel', { sessionId }).catch((error) => {
-        // Never display a stopped lane while the un-cancelled Hermes process
-        // might still be executing. A transport failure tears down the ACP
-        // process and makes the lane honestly non-resumable until restart.
-        crashed = true
-        client?.end()
-        emit({ kind: 'error', message: `Hermes cancellation delivery failed; ACP process stopped: ${error?.message || error}`, recoverable: true })
-      })
-      // The ACP cancellation notification is not itself the completion edge.
-      // Wait for the active prompt promise to unwind (including the 0.18.2
-      // cancelled-response recovery) before a bridge queue flush starts anew.
-      await promptChain.catch(() => {})
-    },
-    end() {
-      ended = true
-      turnActive = false
-      emit.cancel()
-      queuedTurns.length = 0
-      queueDrainPending = false
-      if (sessionId && client?.alive) void client.request('session/close', { sessionId }, 1500).catch(() => {}).finally(() => client?.end())
-      else client?.end()
-      void mcpHttp?.close().catch(() => {})
-    },
-    setModel(nextModel) {
-      if (!nextModel || turnActive || modelSwitchPending) return false
-      const requested = String(nextModel)
-      modelSwitchPending = true
-      void boot().then(() => client.request('session/set_model', { sessionId, modelId: requested })).then(async () => {
-        // 0.18.2 reconstructs state.agent during set_model.  The bootstrap
-        // re-registers its MCP; this independent zero-inference /tools check is
-        // the transaction's acknowledgement boundary.
-        await assertMcpReadiness()
-        if (ended) return
-        activeModel = requested
-        if (mapper) mapper.model = activeModel
-        emit({ kind: 'model-switch', status: 'success', model: activeModel, requested })
-      }).catch((error) => { if (!ended) emit({ kind: 'model-switch', status: 'failed', model: activeModel, requested, message: `Hermes model switch failed: ${error?.message || error}` }) })
-        .finally(() => { modelSwitchPending = false })
-      return true
-    },
-    setMode(nextMode) {
-      if (turnActive || !HERMES_SUPPORTED_MODES.has(nextMode)) return false
-      const priorMode = activeMode
-      const changesPolicySchema = (priorMode === 'plan') !== (nextMode === 'plan')
-      if (changesPolicySchema) {
-        // Plan is stronger than an approval preference: it removes terminal,
-        // process, write, patch, browser, and execution schemas. ACP modes alone
-        // cannot do that, so resume the exact native session in a fresh process
-        // under the bridge-owned read-only policy.
-        activeMode = nextMode
-        suppressNextSessionPublish = started
-        if (started) {
-          retireClient()
-          const oldClient = client
-          client = null
-          mapper = null
-          started = false
-          crashed = false
-          stderrTail = ''
-          oldClient?.end()
-        }
-        void boot().then(() => emit({ kind: 'mode', mode: activeMode })).catch((error) => {
-          activeMode = priorMode
-          suppressNextSessionPublish = false
-          emit({ kind: 'error', message: `Hermes mode switch failed: ${error?.message || error}`, recoverable: true })
-        })
-        return true
-      }
-      void boot().then(() => client.request('session/set_mode', { sessionId, modeId: acpModeFor(nextMode) })).then(() => {
-        activeMode = nextMode
-        emit({ kind: 'mode', mode: activeMode })
-      }).catch((error) => emit({ kind: 'error', message: `Hermes mode switch failed: ${error?.message || error}`, recoverable: true }))
-      return true
-    },
-    setEffort(nextEffort) {
-      if (turnActive || !HERMES_EFFORT_LEVELS.has(nextEffort)) return false
-      const requested = String(nextEffort)
-      void boot().then(() => client.request('session/set_config_option', { sessionId, configId: HERMES_EFFORT_CONFIG_ID, value: requested })).then(() => {
-        activeEffort = requested
-        emit({ kind: 'effort', level: activeEffort })
-      }).catch((error) => emit({ kind: 'error', message: `Hermes reasoning change failed: ${error?.message || error}`, recoverable: true }))
-      return true
-    },
-    clearContext() {
-      if (turnActive) return false
-      return this.sendTurn('/reset')
-    },
-    warm() { void boot().catch(() => {}) },
-  }
-}
+import e from"node:fs";import t from"node:path";import{randomUUID as o}from"node:crypto";import{AcpClient as n}from"./acp-client.mjs";import{HermesEventMapper as s,hermesToolFor as r}from"./hermes-event-mapper.mjs";import{probeHermesRuntime as i}from"./hermes-probe.mjs";import{HERMES_PLAN_SAFE_MCP_TOOLS as l,HERMES_QUESTION_MCP_TOOL as a,hermesExactInventory as c,hermesPolicyEnv as d,hermesRoleFor as m}from"./hermes-policy.mjs";import{startCodexMcpHttp as u}from"./codex-mcp-http.mjs";import{autoAllow as p,classifyRisk as f}from"./claude-session.mjs";import{crossPostNeedsCard as h}from"./cross-terminal.mjs";import{buildThinkPoolTurnGuidance as g,createRoomContextSelector as w,usesFullThinkPoolReminder as _}from"./thinkpool-room-prompt.mjs";import{createCumulativeEventRelay as y}from"./cumulative-event-relay.mjs";export const HERMES_COMMAND="thinkpool";export const HERMES_ACP_PROTOCOL_VERSION=1;export const HERMES_SUPPORTED_MODES=new Set(["default","acceptEdits","plan","bypassPermissions"]);export const HERMES_EFFORT_LEVELS=new Set(["none","low","medium","high","xhigh","max"]);export const HERMES_EFFORT_CONFIG_ID="thinkpool_reasoning_effort";const E=new Set([...l,"read_review_file"]),I=/(?:TOKEN|SECRET|PASSWORD|PRIVATE_KEY|API_KEY|ACCESS_KEY|CREDENTIAL)/i,S=new Set(["agent_message_chunk","agent_thought_chunk","tool_call","tool_call_update","plan"]);export const hermesChildEnv=(e={})=>Object.fromEntries(Object.entries(e).filter(([e])=>!I.test(e)));const b=o=>{const n=t.extname(o).toLowerCase();return{type:"image",mimeType:".png"===n?"image/png":".webp"===n?"image/webp":".gif"===n?"image/gif":"image/jpeg",data:e.readFileSync(o).toString("base64")}},k=e=>(e?.availableModels||[]).map(e=>({value:e.modelId,displayName:e.name||e.modelId,description:e.description||""})),x=e=>new n(e);export function buildHermesPromptText({text:e,firstTurn:t=!1,terminalRolePrompt:o,rolePrompt:n,roomContext:s,promptIndex:r=0,forceFullReminder:i=!1}={}){const l="function"==typeof s?s():s,a=!!(o||n||l),c=_({promptIndex:r,forceFull:i}),d=[t||c?o:"",a?g({text:e,promptIndex:r,forceFull:i}):"",t||c?n:"",l].filter(Boolean).join("\n\n"),m=String(e??"");return d?`${d}\n\n${m}`:m}const v=(e,t=[])=>{if("deny"===e||!e)return{outcome:"cancelled"};const o=("always"===e?["allow_always","allow_session","allow_once"]:["allow_once","allow_session","allow_always"]).map(e=>t.find(t=>t.kind===e||t.optionId===e)).find(Boolean)||t.find(e=>String(e.kind||"").startsWith("allow"));return o?{outcome:"selected",optionId:o.optionId}:{outcome:"cancelled"}};export function startHermesSession({cwd:e,model:n,resume:g,env:I=process.env,mode:R="default",onEvent:C,requestPermission:H,roomContext:T,terminalRolePrompt:P,rolePrompt:$,mcpServers:M,requiredMcpTools:F=[],prepareCwd:O=null,command:q="thinkpool",args:A=["acp"],clientFactory:j=x,mcpHttpFactory:D=u,lazy:L=!1,hermesRole:N=null,crossPostGate:V=null,didSpawnTarget:B=null,crossRoomPostGate:U=null,effort:z="high",admitStart:G=null,onTurnStart:K=null}={}){let Y=e;const W=n||null;let J=W,Q=HERMES_SUPPORTED_MODES.has(R)?R:"default",X=g||null,Z=null,ee=null,te=null,oe=null,ne=!1,se=!1,re=!1,ie=!1,le=!0,ae=0,ce=!0;const de=w(T);let me="",ue=Promise.resolve(),pe=0;const fe=new Set;let he=()=>{},ge=!1,we=null,_e=!1,ye=!1,Ee=!1,Ie=null===z?null:HERMES_EFFORT_LEVELS.has(z)?z:"high";const Se=[];let be=!1,ke=!1;const xe=N||m({}),ve=()=>"plan"===Q?"plan":xe,Re=()=>"plan"===Q?F.filter(e=>E.has(e)):F,Ce=e=>"acceptEdits"===e?"accept_edits":"bypassPermissions"===e?"dont_ask":"default",He=y(e=>{try{C?.(e)}catch{}});async function Te(e,t,o){if("session/request_permission"!==e)throw Object.assign(new Error(`Unsupported ACP client method: ${e}`),{code:-32601});const n=r(t.toolCall||ee?.tools.get(t.toolCallId)||{}),s=(e=>{const t=String(e||"").toLowerCase();return[...l,"post_to_terminal","post_to_session",a].find(e=>t===e||t===`mcp__thinkpool__${e}`||t===`mcp_thinkpool_${e}`)||null})(n.name),i={id:`hermes-perm:${o}`,toolName:s?`mcp__thinkpool__${s}`:n.name,input:n.input,risk:s?.startsWith("post_to_")?"high":f(n.name,n.input)};if(l.includes(s))return{outcome:v("allow",t.options)};if(s===a)return{outcome:v("allow",t.options)};if("post_to_terminal"===s){if(!(V?V():{ok:!0}).ok)return{outcome:{outcome:"cancelled"}};const e=!!B&&!!B(n.input?.terminal);if(!h({mode:Q,spawnedByMe:e}))return{outcome:v("allow",t.options)}}if("post_to_session"===s){if(!(U?U():{ok:!0}).ok)return{outcome:{outcome:"cancelled"}};let e="deny";try{e=await(H?.(i))}catch{}return{outcome:v(e,t.options)}}if("plan"===Q)return{outcome:{outcome:"cancelled"}};if(p({toolName:i.toolName,input:i.input,mode:Q}))return{outcome:v("allow",t.options)};let c="deny";try{c=await(H?.(i))}catch{}return{outcome:v(c,t.options)}}function Pe(e,t){if("session/update"!==e)return;const o=t?.update||t;we&&"agent_message_chunk"===o?.sessionUpdate&&"text"===o?.content?.type?we.push(String(o.content.text||"")):ge&&S.has(o?.sessionUpdate)||ee?.push(t)}async function $e(){const e=[...new Set((Array.isArray(Re())?Re():[]).map(e=>String(e||"").trim()).filter(Boolean))];if(!e.length&&"plan"!==ve())return{inventory:"",missing:[],forbidden:[]};const t=c(ve(),{mcpTools:e}),n=t.builtinTools,s=t.requiredBuiltinTools,r=t.mcpTools,i=[];we=i;try{await Z.request("session/prompt",{sessionId:X,prompt:[{type:"text",text:"/tools"}],messageId:o()},3e4)}finally{we=null}const l=i.join(""),a=e=>new RegExp(`(?:^|[^a-z0-9_])${e}(?:$|[^a-z0-9_])`,"i").test(l),d=[...l.matchAll(/\bmcp(?:__|_)[a-z0-9_]+/gi)].map(e=>e[0]),m=new Set(r.flatMap(e=>[`mcp__thinkpool__${e}`,`mcp_thinkpool_${e}`])),u=[...new Set(d.filter(e=>!m.has(e)))];return{inventory:l,missing:[...s.filter(e=>!a(e)),...r.filter(e=>!a(`mcp__thinkpool__${e}`)&&!a(`mcp_thinkpool_${e}`))],forbidden:[...t.allBuiltinTools.filter(e=>!n.includes(e)&&a(e)),...u]}}async function Me(){const e=await $e();if(!e.missing.length&&!e.forbidden.length)return e;const t=[e.missing.length?`missing ${e.missing.join(", ")}`:"",e.forbidden.length?`forbidden ${e.forbidden.join(", ")}`:""].filter(Boolean).join("; ");throw new Error(`Hermes ThinkPool MCP readiness failed; ${t}`)}async function Fe(){if(ne)throw new Error("Hermes session is closed");if(ie)throw new Error("Hermes ACP process crashed; this lane must be restarted before sending another turn");if(Z?.alive&&ee)return;if(oe)return oe;const e="function"==typeof G?G():{ok:!0};if(!1===e?.ok)throw new Error(e.reason||"Host memory is critically low. This Hermes runtime was not started.");return oe=(async()=>{if(!re&&O)try{Y=O()||Y}catch{}const e=M?.thinkpool;e&&!te&&(te=await D({sdkServer:e}));let o=hermesChildEnv(I),n=q,r=A;if("thinkpool"===q&&j===x){const e=i({command:q,env:o,strictBootstrap:!0});if(!e.available)throw new Error(`Hermes profile safety check failed: ${e.reason||"runtime unavailable"}`);n=e.python,r=[e.bootstrap],o={...o,HERMES_HOME:e.profile,THINKPOOL_HERMES_ACP_POLICY:d(ve(),{mcpTools:Re()})}}let l=!1;he=()=>{l=!0};const a={protocolVersion:1,clientCapabilities:{fs:{readTextFile:!1,writeTextFile:!1},terminal:!1},clientInfo:{name:"thinkpool-pair",title:"ThinkPool Code",version:"1"}};let c;for(let e=0;e<2;e++){l=!1,he=()=>{l=!0},Z=j({command:n,args:r,cwd:Y,env:o,onNotification:Pe,onRequest:Te,onStderr:e=>{me=(me+e).slice(-2e3)},onClose:e=>{ne||ie||l||(ie=!0,se=!1,He({kind:"error",message:`Hermes ACP closed unexpectedly: ${e?.message||e}`,recoverable:!0}))}}),Z.start();try{c=await Z.request("initialize",a,15e3);break}catch(t){if(ye||0!==e||!/^initialize timed out\b/i.test(String(t?.message||t)))throw t;he();const o=Z;Z=null,o?.end(),me=""}}if(1!==c?.protocolVersion)throw new Error(`Unsupported Hermes ACP protocol ${c?.protocolVersion??"unknown"}; expected 1`);const m={cwd:t.resolve(Y),mcpServers:te?[(u=te.url,{type:"http",name:"thinkpool",url:u,headers:[]})]:[]};var u;let p;if(ee=new s({onEvent:He,sessionId:X,model:J}),X){if(!c?.agentCapabilities?.sessionCapabilities?.resume)throw new Error(`Hermes session ${X} cannot be resumed by this ACP release; no fresh session was substituted`);try{ge=!0,p=await Z.request("session/resume",{...m,sessionId:X},3e4)}catch(e){throw new Error(`Hermes session ${X} is not available; no fresh session was substituted (${e?.message||e})`)}finally{ge=!1}}else p=await Z.request("session/new",m,3e4);if(X||(X=p?.sessionId||null),!X)throw new Error("Hermes ACP did not return a session id");let f=await $e(),h=f.missing;if(h.length&&c?.agentCapabilities?.sessionCapabilities?.resume){try{ge=!0,p=await Z.request("session/resume",{...m,sessionId:X},3e4)}finally{ge=!1}f=await $e(),h=f.missing}if(h.length||f.forbidden.length){const e=[h.length?`missing ${h.join(", ")}`:"",f.forbidden.length?`forbidden ${f.forbidden.join(", ")}`:""].filter(Boolean).join("; ");throw new Error(`Hermes ThinkPool MCP readiness failed; ${e}`)}J=W||p?.models?.currentModelId||null||J,W&&(await Z.request("session/set_model",{sessionId:X,modelId:J}),await Me()),Ie&&await Z.request("session/set_config_option",{sessionId:X,configId:HERMES_EFFORT_CONFIG_ID,value:Ie});const g=p?.models?{...p.models,currentModelId:J}:J?{currentModelId:J,availableModels:[]}:p?.models;Ee?(ee.sessionId=X,ee.model=J,Ee=!1):ee.startSession({sessionId:X,models:g,modes:p?.modes,commands:[]}),re=!0;const w=Ce(Q);p?.modes?.availableModes?.some(e=>e.id===w)&&p.modes.currentModeId!==w&&await Z.request("session/set_mode",{sessionId:X,modeId:w}),He({kind:"capabilities",runtime:"hermes",protocol:"acp",protocolVersion:c?.protocolVersion,capabilities:c?.agentCapabilities||{},models:k(p?.models),flow:"thinkpool"===q&&j===x})})().catch(async e=>{ie=!0,Z?.end();try{await(te?.close())}catch{}throw te=null,ye||He({kind:"error",message:`Hermes ACP startup failed: ${e?.message||e}${me?`: ${me.trim().slice(-240)}`:""}`,recoverable:!0}),e}).finally(()=>{oe=null,ye=!1}),oe}function Oe(){ee?ee.finishTurn({stopReason:"cancelled"}):He({kind:"result",subtype:"aborted",sessionId:X,model:J,costUsd:null,usage:null,numTurns:1,durationMs:void 0,denials:0,resultText:null})}function qe(e,t={},{promptIndex:o=0,forceFull:n=!1}={}){const s=String(e);if(/^\s*\//.test(s))return[{type:"text",text:s}];const r=_({promptIndex:o,forceFull:n}),i=[{type:"text",text:buildHermesPromptText({text:s,firstTurn:le,terminalRolePrompt:P,rolePrompt:$,roomContext:()=>de({force:r}),promptIndex:o,forceFullReminder:n})}];for(const e of Array.isArray(t.images)?t.images:[])try{i.push(b(e))}catch{}return i}async function Ae(e,t={},{steering:n=!1,turnId:s=pe,promptIndex:r=0,forceFull:i=!1}={}){try{await Fe()}catch(e){if(fe.has(s))return{stopReason:"cancelled"};throw e}if(fe.has(s))return{stopReason:"cancelled"};const l=n?`/steer ${String(e)}`:String(e);let a;try{a=await Z.request("session/prompt",{sessionId:X,prompt:qe(l,t,{promptIndex:r,forceFull:i}),messageId:o()},0)}catch(e){if(fe.has(s))return ne||await async function(){const e=Z;he(),Z=null,ee=null,e?.end(),await Fe()}(),{stopReason:"cancelled"};throw e}if(!n){if(fe.has(s))return a;se=!1,le=!1;const t=/^\s*\/compact\b/i.test(String(e||""))?ee.compactOutcome():null;t&&He({kind:"compaction",trigger:"manual",...t});const o=String(e||"").match(/^\s*\/reasoning\s+(low|medium|high|xhigh|max|none|reset)\s*$/i);if(o){const e=o[1].toLowerCase();("reset"===e?/Session reasoning reset to model default/i.test(ee.text):new RegExp(`Session reasoning set to ${e}`,"i").test(ee.text))&&(Ie="reset"===e?null:e,He({kind:"effort",level:Ie}))}ke=Se.length>0&&!ne&&!fe.has(s),ee.finishTurn({stopReason:a?.stopReason,usage:a?.usage}),ke&&async function(){if(!(be||ne||se)){be=!0;try{for(;Se.length&&!ne&&!se;){ke=!1;const e=Se.shift(),t=++pe;se=!0;try{K?.(e.options||{})}catch{}try{await Ae(e.text,e.options,{steering:!1,turnId:t,promptIndex:e.promptIndex,forceFull:e.forceFull})}catch(e){se=!1,He({kind:"error",message:`Hermes queued turn failed: ${e?.message||e}`,recoverable:!0})}}}finally{be=!1,ke=!1}}}()}return a}return L||queueMicrotask(()=>{Fe().catch(()=>{})}),{get sessionId(){return X},get turnActive(){return se},get queuedDepth(){return Se.length},get canSteer(){return!!Z?.alive},get started(){return re},get models(){return[]},get effort(){return Ie},sendTurn(e,t={}){if(ne)return!1;if(!Z?.alive&&!oe){const e="function"==typeof G?G():{ok:!0};if(!1===e?.ok)return He({kind:"error",message:e.reason||"Host memory is critically low. This Hermes runtime was not started.",recoverable:!0}),!1}const o=ae++,n=ce;ce=/^\s*\/(?:compact|reset|clear)\b/i.test(String(e||"")),ie&&!ne&&(he(),Z?.end(),Z=null,ee=null,ie=!1,me="");const s=String(e||"").match(/^\s*\/queue\s+([\s\S]+)$/i);if(ke)return Se.push({text:s?s[1]:String(e||""),options:t,promptIndex:o,forceFull:n}),He({kind:"queue-add",queued:!0,depth:Se.length}),!0;if(se)return s?(Se.push({text:s[1],options:t,promptIndex:o,forceFull:n}),He({kind:"queue-add",queued:!0,depth:Se.length}),!0):(Ae(e,t,{steering:!0,turnId:pe,promptIndex:o,forceFull:n}).catch(e=>He({kind:"error",message:`Hermes steering failed: ${e?.message||e}`,recoverable:!0})),!0);const r=++pe;return se=!0,ue=ue.then(()=>Ae(e,t,{steering:!1,turnId:r,promptIndex:o,forceFull:n})).catch(e=>{se=!1,He({kind:"error",message:`Hermes turn failed: ${e?.message||e}`,recoverable:!0})}),!0},async abort(){if(!se)return;Se.length=0,ke=!1;const e=pe;return fe.add(e),fe.size>32&&fe.delete(fe.values().next().value),se=!1,le=!1,oe?(ye=!0,he(),Z?.end(),Oe(),void await ue.catch(()=>{})):X&&Z?.alive?(Oe(),await Z.notify("session/cancel",{sessionId:X}).catch(e=>{ie=!0,Z?.end(),He({kind:"error",message:`Hermes cancellation delivery failed; ACP process stopped: ${e?.message||e}`,recoverable:!0})}),void await ue.catch(()=>{})):(Oe(),void await ue.catch(()=>{}))},end(){ne=!0,se=!1,He.cancel(),Se.length=0,ke=!1,X&&Z?.alive?Z.request("session/close",{sessionId:X},1500).catch(()=>{}).finally(()=>Z?.end()):Z?.end(),te?.close().catch(()=>{})},setModel(e){if(!e||se||_e)return!1;const t=String(e);return _e=!0,Fe().then(()=>Z.request("session/set_model",{sessionId:X,modelId:t})).then(async()=>{await Me(),ne||(J=t,ee&&(ee.model=J),He({kind:"model-switch",status:"success",model:J,requested:t}))}).catch(e=>{ne||He({kind:"model-switch",status:"failed",model:J,requested:t,message:`Hermes model switch failed: ${e?.message||e}`})}).finally(()=>{_e=!1}),!0},setMode(e){if(se||!HERMES_SUPPORTED_MODES.has(e))return!1;const t=Q;if("plan"===t!=("plan"===e)){if(Q=e,Ee=re,re){he();const e=Z;Z=null,ee=null,re=!1,ie=!1,me="",e?.end()}return Fe().then(()=>He({kind:"mode",mode:Q})).catch(e=>{Q=t,Ee=!1,He({kind:"error",message:`Hermes mode switch failed: ${e?.message||e}`,recoverable:!0})}),!0}return Fe().then(()=>Z.request("session/set_mode",{sessionId:X,modeId:Ce(e)})).then(()=>{Q=e,He({kind:"mode",mode:Q})}).catch(e=>He({kind:"error",message:`Hermes mode switch failed: ${e?.message||e}`,recoverable:!0})),!0},setEffort(e){if(se||!HERMES_EFFORT_LEVELS.has(e))return!1;const t=String(e);return Fe().then(()=>Z.request("session/set_config_option",{sessionId:X,configId:HERMES_EFFORT_CONFIG_ID,value:t})).then(()=>{Ie=t,He({kind:"effort",level:Ie})}).catch(e=>He({kind:"error",message:`Hermes reasoning change failed: ${e?.message||e}`,recoverable:!0})),!0},clearContext(){return!se&&this.sendTurn("/reset")},warm(){Fe().catch(()=>{})}}}