@hermespilot/link 0.2.6 → 0.2.8

package/dist/{chunk-72RM6Y4H.js → chunk-W4U6XJ4W.js}

@@ -3724,7 +3724,7 @@ import os2 from "os";
 import path5 from "path";
 
 // src/constants.ts
-var LINK_VERSION = "0.2.6";
+var LINK_VERSION = "0.2.8";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -6541,6 +6541,7 @@ function readAttachmentWaveform(attachment) {
 // src/config/config.ts
 var defaultLinkConfig = {
   port: LINK_DEFAULT_PORT,
+  lanHost: null,
   serverBaseUrl: "https://hermes-server.clawpilot.me",
   relayBaseUrl: "https://hermes-relay.clawpilot.me",
   appConnectTokenIssuer: "https://hermes-server.clawpilot.me",
@@ -6550,18 +6551,51 @@ var defaultLinkConfig = {
 async function loadConfig(paths = resolveRuntimePaths()) {
   const existing = await readJsonFile(paths.configFile);
   const language = normalizeConfiguredLanguage(existing?.language);
+  const lanHost = normalizeLanHost(existing?.lanHost);
   return {
     ...defaultLinkConfig,
     ...existing ?? {},
-    language
+    language,
+    lanHost
   };
 }
+async function saveConfig(patch, paths = resolveRuntimePaths()) {
+  const current = await loadConfig(paths);
+  const next = { ...current, ...patch };
+  await writeJsonFile(paths.configFile, next);
+  return next;
+}
 function normalizeConfiguredLanguage(language) {
   if (language === "zh-CN" || language === "en" || language === "auto") {
     return language;
   }
   return defaultLinkConfig.language;
 }
+function normalizeLanHost(value) {
+  if (value === null || value === void 0) {
+    return null;
+  }
+  if (typeof value !== "string") {
+    return null;
+  }
+  const host = value.trim().replace(/^\[/u, "").replace(/\]$/u, "");
+  if (!host) {
+    return null;
+  }
+  if (!isUsableLanIpv4(host)) {
+    return null;
+  }
+  return host;
+}
+function isUsableLanIpv4(value) {
+  const parts = value.split(".").map((part) => Number.parseInt(part, 10));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  const [first, second, , fourth] = parts;
+  const privateRange = first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168;
+  return privateRange && fourth !== 0 && fourth !== 255;
+}
 
 // src/hermes/session-title.ts
 import { stat as stat6 } from "fs/promises";
@@ -7938,6 +7972,7 @@ function upsertAgentEventProjection(events, next) {
     ...next,
     id: previous.id,
     title: isGenericToolTitle(next.title) ? previous.title : next.title,
+    created_at: earliestTimestamp(previous.created_at, next.created_at),
     subtitle: nextSubtitleIsFallback ? previous.subtitle ?? next.subtitle : next.subtitle ?? previous.subtitle,
     detail: next.detail ?? previous.detail,
     completed_at: next.completed_at ?? previous.completed_at
@@ -7946,6 +7981,17 @@ function upsertAgentEventProjection(events, next) {
   copy[index] = merged;
   return copy;
 }
+function earliestTimestamp(left, right) {
+  const leftTime = Date.parse(left);
+  const rightTime = Date.parse(right);
+  if (Number.isNaN(leftTime)) {
+    return right;
+  }
+  if (Number.isNaN(rightTime)) {
+    return left;
+  }
+  return leftTime <= rightTime ? left : right;
+}
 function isGenericToolTitle(value) {
   const normalized = value.trim().toLowerCase().replace(/[\s_-]+/gu, "");
   return normalized === "tool" || normalized === "toolcall" || value === "\u5DE5\u5177\u8C03\u7528";
@@ -11697,7 +11743,10 @@ async function saveAssignedLinkId(linkId, paths = resolveRuntimePaths()) {
   return next;
 }
 function signRelayNonce(identity, nonce) {
-  const signature = sign(null, Buffer.from(nonce, "utf8"), identity.private_key_pem);
+  return signIdentityPayload(identity, nonce);
+}
+function signIdentityPayload(identity, payload) {
+  const signature = sign(null, Buffer.from(payload, "utf8"), identity.private_key_pem);
   return signature.toString("base64url");
 }
 function getIdentityStatus(identity) {
@@ -12435,6 +12484,8 @@ function registerConversationRoutes(router, options) {
   });
   router.get("/api/v1/conversations/events", async (ctx) => {
     await authenticateRequest(ctx, paths);
+    const mode = readQueryString(ctx.query.mode);
+    const notificationOnly = mode === "notifications";
     ctx.respond = false;
     const response = ctx.res;
     response.statusCode = 200;
@@ -12442,6 +12493,9 @@ function registerConversationRoutes(router, options) {
     response.setHeader("cache-control", "no-store");
     response.setHeader("connection", "keep-alive");
     const unsubscribe = conversations.subscribeAll((event) => {
+      if (notificationOnly && !isConversationNotificationEvent(event)) {
+        return;
+      }
       writeSseEvent(response, event);
     });
     const cleanup = () => {
@@ -12679,6 +12733,16 @@ function registerConversationRoutes(router, options) {
     }
   );
 }
+function isConversationNotificationEvent(event) {
+  const type = event.type.toLowerCase();
+  return type === "conversation.created" || type === "conversation.updated" || type === "conversation.deleted" || type === "message.created" || type === "message.completed" || type === "message.failed" || type === "run.completed" || type === "run.failed" || type === "run.cancelled" || type === "run.canceled" || type === "approval.requested" || readPayloadBool(event.payload, "requires_action") || readPayloadBool(event.payload, "requires_user_action") || readPayloadBool(event.payload, "requires_approval");
+}
+function readPayloadBool(payload, key) {
+  if (!payload || typeof payload !== "object") {
+    return false;
+  }
+  return payload[key] === true;
+}
 
 // src/http/middleware/error-handler.ts
 function createHttpErrorMiddleware(logger) {
@@ -17561,218 +17625,807 @@ async function handleFrame(socket, raw, localPort, abortControllers) {
   }
 }
 
-// src/daemon/scheduler.ts
-function startCronDeliveryScheduler(options) {
-  let running = false;
-  const syncCronDeliveries = async () => {
-    if (running) {
-      return;
-    }
-    running = true;
-    try {
-      await syncHermesLinkCronDeliveries(
-        options.paths,
-        options.conversations,
-        options.logger
-      );
-    } catch (error) {
-      void options.logger.warn("cron_link_delivery_sync_failed", {
-        error: error instanceof Error ? error.message : String(error)
-      });
-    } finally {
-      running = false;
-    }
-  };
-  const timer = setInterval(() => {
-    void syncCronDeliveries();
-  }, options.intervalMs ?? 3e4);
-  timer.unref?.();
+// src/runtime/system-info.ts
+import { execFileSync } from "child_process";
+import { readFileSync } from "fs";
+import os5 from "os";
+function readLinkSystemInfo() {
+  const platform = process.platform;
+  const hostname = readHostname(platform);
+  const osLabel = readOsLabel(platform);
+  const defaultDisplayName = buildDefaultDisplayName({ hostname, osLabel, platform });
   return {
-    close() {
-      clearInterval(timer);
-    }
+    platform,
+    hostname,
+    osLabel,
+    defaultDisplayName
   };
 }
-
-// src/daemon/service.ts
-async function startLinkService(options = {}) {
-  const paths = options.paths ?? resolveRuntimePaths();
-  const logger = createFileLogger({ paths });
-  const [identity, config] = await Promise.all([loadIdentity(paths), loadConfig(paths)]);
-  await logger.info("service_starting", {
-    port: config.port,
-    mode: identity?.link_id ? "paired" : "local-only"
-  });
-  const migration = await migrateLinkDatabase(paths);
-  if (migration.appliedVersions.length > 0) {
-    await logger.info("database_migrated", {
-      database_file: migration.databaseFile,
-      applied_versions: migration.appliedVersions,
-      current_version: migration.currentVersion
-    });
+function buildDefaultDisplayName(input) {
+  const hostname = normalizeText(input.hostname);
+  const osLabel = normalizeText(input.osLabel);
+  if (hostname && osLabel && hostname.toLowerCase() !== osLabel.toLowerCase()) {
+    return truncateText(`${hostname} - ${osLabel}`, 128);
   }
-  const conversations = new ConversationService(paths, logger);
-  await conversations.rebuildStatisticsIndex();
-  const app = await createApp({
-    paths,
-    logger,
-    conversations,
-    onPairingClaimed: options.onPairingClaimed
-  });
-  const server = createServer(app.callback());
-  try {
-    await listenServer(server, config.port);
-  } catch (error) {
-    await logger.error("service_start_failed", {
-      port: config.port,
-      error: error instanceof Error ? error.message : String(error)
-    });
-    await logger.flush();
-    throw error;
+  return truncateText(hostname ?? osLabel ?? `Hermes Link ${input.platform}`, 128);
+}
+function parseLinuxOsRelease(content) {
+  const values = /* @__PURE__ */ new Map();
+  for (const line of content.split(/\r?\n/u)) {
+    const match = /^([A-Z0-9_]+)=(.*)$/u.exec(line.trim());
+    if (!match) {
+      continue;
+    }
+    values.set(match[1], unquoteOsReleaseValue(match[2]));
   }
-  server.on("error", (error) => {
-    void logger.error("service_error", { error: error.message });
-  });
-  void logger.info("service_started", {
-    port: config.port,
-    link_id: identity?.link_id ?? null
-  });
-  const scheduler = startCronDeliveryScheduler({
-    paths,
-    conversations,
-    logger
-  });
-  let relay = null;
-  if (identity?.link_id) {
-    relay = connectRelayControl({
-      relayBaseUrl: config.relayBaseUrl,
-      linkId: identity.link_id,
-      localPort: config.port,
-      maxReconnectAttempts: options.relayMaxReconnectAttempts ?? 5,
-      backoffBaseMs: 1e3,
-      backoffMaxMs: 3e4,
-      onStatus: (status) => {
-        void logger.info("relay_status", status);
-      }
-    });
-  } else {
-    void logger.info("relay_skipped", { reason: "link_not_paired" });
+  return normalizeText(values.get("PRETTY_NAME")) ?? buildLinuxName(values);
+}
+function readHostname(platform) {
+  if (platform === "darwin") {
+    const computerName = readCommandOutput("scutil", ["--get", "ComputerName"]);
+    if (computerName) {
+      return computerName;
+    }
   }
-  if (options.writePidFile) {
-    await writePidFile(paths);
+  return normalizeText(os5.hostname());
+}
+function readOsLabel(platform) {
+  if (platform === "darwin") {
+    const version = readCommandOutput("sw_vers", ["-productVersion"]);
+    return version ? `macOS ${version}` : "macOS";
   }
-  return {
-    async close() {
-      scheduler.close();
-      relay?.close();
-      await closeServer(server);
-      await logger.info("service_stopped");
-      await logger.flush();
-      if (options.writePidFile) {
-        await rm9(pidFilePath(paths), { force: true }).catch(() => void 0);
-      }
+  if (platform === "linux") {
+    return readLinuxOsRelease() ?? `Linux ${os5.release()}`;
+  }
+  if (platform === "win32") {
+    return `Windows ${os5.release()}`;
+  }
+  return `${os5.type()} ${os5.release()}`.trim();
+}
+function readLinuxOsRelease() {
+  for (const file of ["/etc/os-release", "/usr/lib/os-release"]) {
+    try {
+      return parseLinuxOsRelease(readFileSync(file, "utf8"));
+    } catch {
     }
-  };
+  }
+  return null;
 }
-function pidFilePath(paths = resolveRuntimePaths()) {
-  return `${paths.runDir}/hermeslink.pid`;
+function readCommandOutput(command, args) {
+  try {
+    const output = execFileSync(command, args, {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 1e3
+    });
+    return normalizeText(output);
+  } catch {
+    return null;
+  }
 }
-async function writePidFile(paths) {
-  await mkdir15(paths.runDir, { recursive: true, mode: 448 });
-  await writeFile7(pidFilePath(paths), `${process.pid}
-`, { mode: 384 });
+function buildLinuxName(values) {
+  const name = normalizeText(values.get("NAME"));
+  const version = normalizeText(values.get("VERSION_ID")) ?? normalizeText(values.get("VERSION"));
+  if (name && version) {
+    return `${name} ${version}`;
+  }
+  return name ?? version;
 }
-async function closeServer(server) {
-  await new Promise((resolve, reject) => {
-    let settled = false;
-    let forceCloseTimer;
-    let timeoutTimer;
-    const settle = (error) => {
-      if (settled) {
-        return;
-      }
-      settled = true;
-      clearTimeout(forceCloseTimer);
-      clearTimeout(timeoutTimer);
-      if (error) {
-        reject(error);
-        return;
-      }
-      resolve();
-    };
-    forceCloseTimer = setTimeout(() => {
-      server.closeIdleConnections?.();
-      server.closeAllConnections?.();
-    }, 250);
-    timeoutTimer = setTimeout(() => {
-      server.closeAllConnections?.();
-      settle();
-    }, 5e3);
-    server.close((error) => {
-      if (error) {
-        settle(error);
-        return;
-      }
-      settle();
-    });
-    server.closeIdleConnections?.();
-  });
+function unquoteOsReleaseValue(value) {
+  const trimmed = value.trim();
+  if (trimmed.length >= 2 && (trimmed.startsWith('"') && trimmed.endsWith('"') || trimmed.startsWith("'") && trimmed.endsWith("'"))) {
+    return trimmed.slice(1, -1).replace(/\\(["'`$\\])/gu, "$1");
+  }
+  return trimmed;
 }
-async function listenServer(server, port) {
-  await new Promise((resolve, reject) => {
-    const cleanup = () => {
-      server.off("error", onError);
-      server.off("listening", onListening);
-    };
-    const onError = (error) => {
-      cleanup();
-      reject(error);
-    };
-    const onListening = () => {
-      cleanup();
-      resolve();
-    };
-    server.once("error", onError);
-    server.once("listening", onListening);
-    server.listen(port);
-  });
+function normalizeText(value) {
+  const normalized = value?.replace(/\s+/gu, " ").trim();
+  return normalized ? normalized : null;
+}
+function truncateText(value, maxLength) {
+  return value.length > maxLength ? value.slice(0, maxLength).trimEnd() : value;
 }
 
-// src/daemon/process.ts
-async function startDaemonProcess(paths = resolveRuntimePaths()) {
-  const config = await loadConfig(paths);
-  let status = await getDaemonStatus(paths);
-  if (status.running) {
-    const probe = await probeLocalLinkService({ port: config.port, timeoutMs: 500 });
-    if (probe.reachable) {
-      return status;
-    }
-    await stopDaemonProcess(paths);
-    status = await getDaemonStatus(paths);
-    if (status.running) {
-      return status;
-    }
+// src/topology/network.ts
+import os7 from "os";
+
+// src/topology/environment.ts
+import { existsSync, readFileSync as readFileSync2 } from "fs";
+import os6 from "os";
+function detectRuntimeEnvironment(env = process.env) {
+  if (isWsl(env)) {
+    return {
+      kind: "wsl",
+      lanAutoDiscoveryUsable: false,
+      warning: "Detected WSL. The LAN IP found inside WSL is usually a private VM address and is not reachable from your phone. Use Relay or set `hermeslink config set lan-host <Windows LAN IP>`."
+    };
   }
-  await mkdir16(paths.logsDir, { recursive: true, mode: 448 });
-  await mkdir16(paths.runDir, { recursive: true, mode: 448 });
-  const scriptPath = currentCliScriptPath();
-  const child = spawn4(process.execPath, [scriptPath, "daemon-supervisor"], {
-    detached: true,
-    stdio: "ignore",
-    env: process.env
-  });
-  child.unref();
-  for (let index = 0; index < 12; index += 1) {
-    await wait(250);
-    const next = await getDaemonStatus(paths);
-    if (next.running && (await probeLocalLinkService({ port: config.port, timeoutMs: 500 })).reachable) {
-      return next;
-    }
+  if (isContainer(env)) {
+    return {
+      kind: "container",
+      lanAutoDiscoveryUsable: false,
+      warning: "Detected a container environment. Container LAN IPs are usually not reachable from your phone. Use Relay or set `hermeslink config set lan-host <host LAN IP>`."
+    };
   }
-  return await getDaemonStatus(paths);
+  return {
+    kind: "native",
+    lanAutoDiscoveryUsable: true,
+    warning: null
+  };
 }
-async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
-  await mkdir16(paths.logsDir, { recursive: true, mode: 448 });
+function isWsl(env) {
+  if (process.platform !== "linux") {
+    return false;
+  }
+  if (env.WSL_DISTRO_NAME || env.WSL_INTEROP) {
+    return true;
+  }
+  const release = os6.release().toLowerCase();
+  return release.includes("microsoft") || release.includes("wsl");
+}
+function isContainer(env) {
+  if (env.container || env.CONTAINER || env.KUBERNETES_SERVICE_HOST) {
+    return true;
+  }
+  if (existsSync("/.dockerenv")) {
+    return true;
+  }
+  try {
+    const cgroup = readFileSync2("/proc/1/cgroup", "utf8").toLowerCase();
+    return /docker|containerd|kubepods|libpod|podman/u.test(cgroup);
+  } catch {
+    return false;
+  }
+}
+
+// src/topology/network.ts
+var VIRTUAL_INTERFACE_NAME_PATTERN = /(docker|veth|vmnet|vmenet|vbox|virtualbox|vmware|tailscale|zerotier|wireguard|utun|virbr|hyper-v|vethernet|loopback|\blo\b|^lo\d*$|^br-|^bridge\d+$|^zt|^tun|^tap|awdl|llw|anpi|gif|stf|ipsec|ppp)/iu;
+var MAX_LAN_IPS = 4;
+var MAX_PUBLIC_IPV4S = 2;
+var MAX_PUBLIC_IPV6S = 2;
+async function discoverRouteCandidates(options) {
+  const environment = detectRuntimeEnvironment();
+  const configuredLanHost = normalizeLanHost(options.configuredLanHost);
+  const lanIps = configuredLanHost ? [configuredLanHost] : environment.lanAutoDiscoveryUsable ? discoverLanIps() : [];
+  const publicIps = options.relayBootstrapToken ? await observePublicRoute(options).catch(() => ({ publicIpv4s: [], publicIpv6s: [] })) : { publicIpv4s: [], publicIpv6s: [] };
+  const publicIpv4s = unique(publicIps.publicIpv4s.filter(isUsablePublicIpv4)).slice(0, MAX_PUBLIC_IPV4S);
+  const publicIpv6s = unique(publicIps.publicIpv6s.filter(isUsablePublicIpv6)).slice(0, MAX_PUBLIC_IPV6S);
+  const preferredUrls = [
+    ...lanIps.map((ip) => buildDirectUrl(ip, options.port)),
+    ...publicIpv4s.map((ip) => buildDirectUrl(ip, options.port)),
+    ...publicIpv6s.map((ip) => buildDirectUrl(ip, options.port)),
+    `${options.relayBaseUrl.replace(/\/+$/u, "")}/api/v1/relay/links/${options.linkId}`
+  ];
+  return {
+    lanIps,
+    publicIpv4s,
+    publicIpv6s,
+    preferredUrls,
+    environment
+  };
+}
+function discoverLanIps() {
+  return discoverLanIpsFromInterfaces(os7.networkInterfaces());
+}
+function discoverLanIpsFromInterfaces(interfaces) {
+  const result = /* @__PURE__ */ new Set();
+  const candidates = [];
+  for (const [name, items] of Object.entries(interfaces)) {
+    if (shouldIgnoreInterface(name)) {
+      continue;
+    }
+    for (const item of items ?? []) {
+      if (!item.internal && item.address && item.family === "IPv4" && isUsableLanIpv42(item.address, item.netmask)) {
+        candidates.push({ name, address: item.address });
+      }
+    }
+  }
+  for (const candidate of candidates.sort(compareLanCandidate)) {
+    result.add(candidate.address);
+  }
+  return [...result].slice(0, MAX_LAN_IPS);
+}
+async function observePublicRoute(options) {
+  const fetcher = options.fetchImpl ?? fetch;
+  const response = await fetcher(`${options.relayBaseUrl.replace(/\/+$/u, "")}/api/v1/relay/public-route/observe`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${options.relayBootstrapToken}`,
+      "content-type": "application/json"
+    },
+    body: JSON.stringify({
+      install_id: options.installId,
+      link_id: options.linkId,
+      public_key_pem: options.publicKeyPem
+    })
+  });
+  const payload = await response.json().catch(() => null);
+  const record = typeof payload?.record === "object" && payload.record !== null ? payload.record : null;
+  const observed = typeof payload?.observed === "object" && payload.observed !== null ? payload.observed : null;
+  const values = [
+    readIpRecord(record?.ipv4),
+    readIpRecord(record?.ipv6),
+    typeof observed?.ip === "string" ? observed.ip : null
+  ].filter((value) => Boolean(value));
+  return {
+    publicIpv4s: unique(values.filter(isUsablePublicIpv4)),
+    publicIpv6s: unique(values.filter(isUsablePublicIpv6))
+  };
+}
+function readIpRecord(value) {
+  if (typeof value !== "object" || value === null) {
+    return null;
+  }
+  const ip = value.ip;
+  return typeof ip === "string" && ip.trim() ? ip.trim() : null;
+}
+function buildDirectUrl(ip, port) {
+  return `http://${ip.includes(":") ? `[${ip}]` : ip}:${port}`;
+}
+function shouldIgnoreInterface(name) {
+  return !name.trim() || VIRTUAL_INTERFACE_NAME_PATTERN.test(name);
+}
+function compareLanCandidate(left, right) {
+  const priority = interfacePriority(left.name) - interfacePriority(right.name);
+  return priority || left.name.localeCompare(right.name) || left.address.localeCompare(right.address);
+}
+function interfacePriority(name) {
+  if (/^(en|eth|wlan|wi-fi|wifi)/iu.test(name)) {
+    return 0;
+  }
+  return 1;
+}
+function isUsableLanIpv42(address, netmask) {
+  return isPrivateIpv4(address) && !isNetworkOrBroadcastIpv4Address(address, netmask);
+}
+function isUsablePublicIpv4(address) {
+  return isValidIpv4(address) && !isSpecialIpv4(address);
+}
+function isUsablePublicIpv6(address) {
+  const normalized = address.toLowerCase();
+  return normalized.includes(":") && !normalized.startsWith("fe80:") && !normalized.startsWith("fc") && !normalized.startsWith("fd") && !normalized.startsWith("ff") && normalized !== "::" && normalized !== "::1";
+}
+function isPrivateIpv4(address) {
+  const parts = parseIpv4Segments(address);
+  if (!parts) {
+    return false;
+  }
+  const [first, second] = parts;
+  return first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168;
+}
+function isSpecialIpv4(address) {
+  const parts = parseIpv4Segments(address);
+  if (!parts) {
+    return true;
+  }
+  const [first, second, third, fourth] = parts;
+  return first === 0 || first === 10 || first === 127 || first >= 224 || first === 100 && second >= 64 && second <= 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168 || first === 192 && second === 0 && third === 2 || first === 198 && (second === 18 || second === 19) || first === 198 && second === 51 && third === 100 || first === 203 && second === 0 && third === 113 || first === 255 && second === 255 && third === 255 && fourth === 255;
+}
+function isNetworkOrBroadcastIpv4Address(address, netmask) {
+  const addressParts = parseIpv4Segments(address);
+  const netmaskParts = netmask ? parseIpv4Segments(netmask) : null;
+  if (!addressParts) {
+    return true;
+  }
+  if (!netmaskParts) {
+    const last = addressParts[3];
+    return last === 0 || last === 255;
+  }
+  const addressInt = ipv4SegmentsToInt(addressParts);
+  const netmaskInt = ipv4SegmentsToInt(netmaskParts);
+  const hostMask = ~netmaskInt >>> 0;
+  if (hostMask === 0) {
+    return false;
+  }
+  const networkInt = addressInt & netmaskInt;
+  const broadcastInt = (networkInt | hostMask) >>> 0;
+  return addressInt === networkInt || addressInt === broadcastInt;
+}
+function isValidIpv4(address) {
+  return Boolean(parseIpv4Segments(address));
+}
+function parseIpv4Segments(address) {
+  if (!/^\d{1,3}(?:\.\d{1,3}){3}$/u.test(address)) {
+    return null;
+  }
+  const parts = address.split(".").map((part) => Number.parseInt(part, 10));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return null;
+  }
+  return parts;
+}
+function ipv4SegmentsToInt(parts) {
+  return (parts[0] << 24 >>> 0 | parts[1] << 16 | parts[2] << 8 | parts[3]) >>> 0;
+}
+function unique(values) {
+  return [...new Set(values)];
+}
+
+// src/link/network-report-state.ts
+var DEFAULT_AUTO_DAILY_LIMIT = 20;
+async function markNetworkStatusReported(paths, lanIps, reportedAt = /* @__PURE__ */ new Date()) {
+  await updateNetworkReportState(paths, (current) => ({
+    ...current,
+    lastReportedLanIps: normalizeLanIps(lanIps),
+    lastReportedAt: reportedAt.toISOString(),
+    lastAutoAttempt: current.lastAutoAttempt ? { ...current.lastAutoAttempt, success: true } : null
+  }));
+}
+async function reserveAutomaticNetworkReport(paths, lanIps, options = {}) {
+  const snapshot = normalizeLanIps(lanIps);
+  const now = options.now ?? /* @__PURE__ */ new Date();
+  const dailyLimit = Math.max(0, Math.floor(options.dailyLimit ?? DEFAULT_AUTO_DAILY_LIMIT));
+  let reservation = { allowed: false, reason: "unchanged" };
+  await updateNetworkReportState(paths, (current) => {
+    if (sameLanIps(current.lastReportedLanIps, snapshot)) {
+      reservation = { allowed: false, reason: "unchanged" };
+      return current;
+    }
+    if (current.lastAutoAttempt && !current.lastAutoAttempt.success && sameLanIps(current.lastAutoAttempt.lanIps, snapshot)) {
+      reservation = { allowed: false, reason: "failed_snapshot_not_retried" };
+      return current;
+    }
+    const quotaDay = formatUtcDay(now);
+    const reportsToday = current.autoQuotaDay === quotaDay ? current.autoReportsToday : 0;
+    if (reportsToday >= dailyLimit) {
+      reservation = { allowed: false, reason: "daily_limit_reached" };
+      return current;
+    }
+    reservation = { allowed: true };
+    return {
+      ...current,
+      autoQuotaDay: quotaDay,
+      autoReportsToday: reportsToday + 1,
+      lastAutoAttempt: {
+        lanIps: snapshot,
+        attemptedAt: now.toISOString(),
+        success: false
+      }
+    };
+  });
+  return reservation;
+}
+async function updateNetworkReportState(paths, update) {
+  const state = await readLinkState(paths);
+  const next = {
+    ...state,
+    networkReport: update(normalizeNetworkReportState(state.networkReport))
+  };
+  await writeJsonFile(paths.stateFile, next);
+}
+async function readLinkState(paths) {
+  const state = await readJsonFile(paths.stateFile);
+  return state && typeof state === "object" ? state : {};
+}
+function normalizeNetworkReportState(value) {
+  const record = value && typeof value === "object" ? value : {};
+  return {
+    lastReportedLanIps: normalizeLanIps(record.lastReportedLanIps),
+    lastReportedAt: typeof record.lastReportedAt === "string" ? record.lastReportedAt : null,
+    autoQuotaDay: typeof record.autoQuotaDay === "string" ? record.autoQuotaDay : null,
+    autoReportsToday: Number.isFinite(record.autoReportsToday) ? Math.max(0, Math.floor(record.autoReportsToday ?? 0)) : 0,
+    lastAutoAttempt: normalizeAttempt(record.lastAutoAttempt)
+  };
+}
+function normalizeAttempt(value) {
+  if (!value || typeof value !== "object") {
+    return null;
+  }
+  const record = value;
+  if (typeof record.attemptedAt !== "string") {
+    return null;
+  }
+  return {
+    lanIps: normalizeLanIps(record.lanIps),
+    attemptedAt: record.attemptedAt,
+    success: record.success === true
+  };
+}
+function normalizeLanIps(value) {
+  if (!Array.isArray(value)) {
+    return [];
+  }
+  return [
+    ...new Set(
+      value.filter((item) => typeof item === "string" && item.trim().length > 0).map((item) => item.trim())
+    )
+  ];
+}
+function sameLanIps(left, right) {
+  if (left.length !== right.length) {
+    return false;
+  }
+  return left.every((value, index) => value === right[index]);
+}
+function formatUtcDay(date) {
+  return date.toISOString().slice(0, 10);
+}
+
+// src/link/server-report.ts
+async function reportLinkStatusToServer(options = {}) {
+  const paths = options.paths ?? resolveRuntimePaths();
+  const [identity, config] = await Promise.all([loadIdentity(paths), loadConfig(paths)]);
+  if (!identity?.link_id) {
+    return null;
+  }
+  const routes = await discoverRouteCandidates({
+    port: config.port,
+    relayBaseUrl: config.relayBaseUrl,
+    linkId: identity.link_id,
+    installId: identity.install_id,
+    publicKeyPem: identity.public_key_pem,
+    configuredLanHost: config.lanHost,
+    fetchImpl: options.fetchImpl
+  });
+  const systemInfo = readLinkSystemInfo();
+  const payload = {
+    type: "hermes_link_status_report",
+    link_id: identity.link_id,
+    install_id: identity.install_id,
+    link_version: LINK_VERSION,
+    display_name: systemInfo.defaultDisplayName,
+    platform: systemInfo.platform,
+    hostname: systemInfo.hostname ?? void 0,
+    lan_ips: routes.lanIps,
+    public_ipv4s: routes.publicIpv4s,
+    public_ipv6s: routes.publicIpv6s,
+    reported_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const signature = signIdentityPayload(identity, canonicalJson(payload));
+  const fetcher = options.fetchImpl ?? fetch;
+  const response = await fetcher(
+    `${config.serverBaseUrl.replace(/\/+$/u, "")}/api/v1/links/${encodeURIComponent(identity.link_id)}/report`,
+    {
+      method: "POST",
+      headers: {
+        accept: "application/json",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify({
+        ...payload,
+        public_key_pem: identity.public_key_pem,
+        signature
+      })
+    }
+  );
+  const body = await response.json().catch(() => null);
+  if (!response.ok || !body) {
+    const message = readErrorMessage3(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    throw new LinkHttpError(response.status, "server_request_failed", message);
+  }
+  await markNetworkStatusReported(paths, routes.lanIps);
+  return body;
+}
+function canonicalJson(value) {
+  return JSON.stringify(sortJsonValue(value));
+}
+function sortJsonValue(value) {
+  if (Array.isArray(value)) {
+    return value.map(sortJsonValue);
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const sorted = {};
+    for (const key of Object.keys(record).sort()) {
+      sorted[key] = sortJsonValue(record[key]);
+    }
+    return sorted;
+  }
+  return value;
+}
+function readErrorMessage3(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return null;
+  }
+  const error = payload.error;
+  if (typeof error !== "object" || error === null) {
+    return null;
+  }
+  const message = error.message;
+  return typeof message === "string" ? message : null;
+}
+
+// src/daemon/lan-ip-monitor.ts
+var DEFAULT_INTERVAL_MS = 5 * 6e4;
+var DEFAULT_DAILY_REPORT_LIMIT = 20;
+function startLanIpMonitor(options) {
+  let running = false;
+  let closed = false;
+  const check = async () => {
+    if (running || closed) {
+      return;
+    }
+    running = true;
+    try {
+      await checkLanIpChange(options);
+    } catch (error) {
+      void options.logger.warn("lan_ip_monitor_failed", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+    } finally {
+      running = false;
+    }
+  };
+  void check();
+  const timer = setInterval(() => {
+    void check();
+  }, options.intervalMs ?? DEFAULT_INTERVAL_MS);
+  timer.unref?.();
+  return {
+    close() {
+      closed = true;
+      clearInterval(timer);
+    }
+  };
+}
+async function checkLanIpChange(options) {
+  const [identity, config] = await Promise.all([
+    loadIdentity(options.paths),
+    loadConfig(options.paths)
+  ]);
+  if (!identity?.link_id) {
+    return;
+  }
+  const routes = await discoverRouteCandidates({
+    port: config.port,
+    relayBaseUrl: config.relayBaseUrl,
+    linkId: identity.link_id,
+    installId: identity.install_id,
+    publicKeyPem: identity.public_key_pem,
+    configuredLanHost: config.lanHost,
+    fetchImpl: options.fetchImpl
+  });
+  const reservation = await reserveAutomaticNetworkReport(options.paths, routes.lanIps, {
+    dailyLimit: options.dailyReportLimit ?? DEFAULT_DAILY_REPORT_LIMIT
+  });
+  if (!reservation.allowed) {
+    const logFields = { lan_ips: routes.lanIps, reason: reservation.reason };
+    if (reservation.reason === "daily_limit_reached") {
+      void options.logger.warn("lan_ip_report_skipped", logFields);
+    } else {
+      void options.logger.debug("lan_ip_report_skipped", logFields);
+    }
+    return;
+  }
+  try {
+    const result = await reportLinkStatusToServer({
+      paths: options.paths,
+      fetchImpl: options.fetchImpl
+    });
+    if (result) {
+      void options.logger.info("lan_ip_change_reported", {
+        link_id: result.linkId,
+        lan_ips: routes.lanIps
+      });
+    }
+  } catch (error) {
+    void options.logger.warn("lan_ip_change_report_failed", {
+      lan_ips: routes.lanIps,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
+}
+
+// src/daemon/scheduler.ts
+function startCronDeliveryScheduler(options) {
+  let running = false;
+  const syncCronDeliveries = async () => {
+    if (running) {
+      return;
+    }
+    running = true;
+    try {
+      await syncHermesLinkCronDeliveries(
+        options.paths,
+        options.conversations,
+        options.logger
+      );
+    } catch (error) {
+      void options.logger.warn("cron_link_delivery_sync_failed", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+    } finally {
+      running = false;
+    }
+  };
+  const timer = setInterval(() => {
+    void syncCronDeliveries();
+  }, options.intervalMs ?? 3e4);
+  timer.unref?.();
+  return {
+    close() {
+      clearInterval(timer);
+    }
+  };
+}
+
+// src/daemon/service.ts
+async function startLinkService(options = {}) {
+  const paths = options.paths ?? resolveRuntimePaths();
+  const logger = createFileLogger({ paths });
+  const [identity, config] = await Promise.all([loadIdentity(paths), loadConfig(paths)]);
+  await logger.info("service_starting", {
+    port: config.port,
+    mode: identity?.link_id ? "paired" : "local-only"
+  });
+  const migration = await migrateLinkDatabase(paths);
+  if (migration.appliedVersions.length > 0) {
+    await logger.info("database_migrated", {
+      database_file: migration.databaseFile,
+      applied_versions: migration.appliedVersions,
+      current_version: migration.currentVersion
+    });
+  }
+  const conversations = new ConversationService(paths, logger);
+  await conversations.rebuildStatisticsIndex();
+  const app = await createApp({
+    paths,
+    logger,
+    conversations,
+    onPairingClaimed: options.onPairingClaimed
+  });
+  const server = createServer(app.callback());
+  try {
+    await listenServer(server, config.port);
+  } catch (error) {
+    await logger.error("service_start_failed", {
+      port: config.port,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    await logger.flush();
+    throw error;
+  }
+  server.on("error", (error) => {
+    void logger.error("service_error", { error: error.message });
+  });
+  void logger.info("service_started", {
+    port: config.port,
+    link_id: identity?.link_id ?? null
+  });
+  const scheduler = startCronDeliveryScheduler({
+    paths,
+    conversations,
+    logger
+  });
+  const lanIpMonitor = startLanIpMonitor({
+    paths,
+    logger,
+    intervalMs: options.lanIpMonitorIntervalMs,
+    dailyReportLimit: options.lanIpMonitorDailyReportLimit,
+    fetchImpl: options.lanIpMonitorFetchImpl
+  });
+  let relay = null;
+  if (identity?.link_id) {
+    relay = connectRelayControl({
+      relayBaseUrl: config.relayBaseUrl,
+      linkId: identity.link_id,
+      localPort: config.port,
+      maxReconnectAttempts: options.relayMaxReconnectAttempts ?? 5,
+      backoffBaseMs: 1e3,
+      backoffMaxMs: 3e4,
+      onStatus: (status) => {
+        void logger.info("relay_status", status);
+      }
+    });
+  } else {
+    void logger.info("relay_skipped", { reason: "link_not_paired" });
+  }
+  if (options.writePidFile) {
+    await writePidFile(paths);
+  }
+  return {
+    async close() {
+      scheduler.close();
+      lanIpMonitor.close();
+      relay?.close();
+      await closeServer(server);
+      await logger.info("service_stopped");
+      await logger.flush();
+      if (options.writePidFile) {
+        await rm9(pidFilePath(paths), { force: true }).catch(() => void 0);
+      }
+    }
+  };
+}
+function pidFilePath(paths = resolveRuntimePaths()) {
+  return `${paths.runDir}/hermeslink.pid`;
+}
+async function writePidFile(paths) {
+  await mkdir15(paths.runDir, { recursive: true, mode: 448 });
+  await writeFile7(pidFilePath(paths), `${process.pid}
+`, { mode: 384 });
+}
+async function closeServer(server) {
+  await new Promise((resolve, reject) => {
+    let settled = false;
+    let forceCloseTimer;
+    let timeoutTimer;
+    const settle = (error) => {
+      if (settled) {
+        return;
+      }
+      settled = true;
+      clearTimeout(forceCloseTimer);
+      clearTimeout(timeoutTimer);
+      if (error) {
+        reject(error);
+        return;
+      }
+      resolve();
+    };
+    forceCloseTimer = setTimeout(() => {
+      server.closeIdleConnections?.();
+      server.closeAllConnections?.();
+    }, 250);
+    timeoutTimer = setTimeout(() => {
+      server.closeAllConnections?.();
+      settle();
+    }, 5e3);
+    server.close((error) => {
+      if (error) {
+        settle(error);
+        return;
+      }
+      settle();
+    });
+    server.closeIdleConnections?.();
+  });
+}
+async function listenServer(server, port) {
+  await new Promise((resolve, reject) => {
+    const cleanup = () => {
+      server.off("error", onError);
+      server.off("listening", onListening);
+    };
+    const onError = (error) => {
+      cleanup();
+      reject(error);
+    };
+    const onListening = () => {
+      cleanup();
+      resolve();
+    };
+    server.once("error", onError);
+    server.once("listening", onListening);
+    server.listen(port);
+  });
+}
+
+// src/daemon/process.ts
+async function startDaemonProcess(paths = resolveRuntimePaths()) {
+  const config = await loadConfig(paths);
+  let status = await getDaemonStatus(paths);
+  if (status.running) {
+    const probe = await probeLocalLinkService({ port: config.port, timeoutMs: 500 });
+    if (probe.reachable) {
+      return status;
+    }
+    await stopDaemonProcess(paths);
+    status = await getDaemonStatus(paths);
+    if (status.running) {
+      return status;
+    }
+  }
+  await mkdir16(paths.logsDir, { recursive: true, mode: 448 });
+  await mkdir16(paths.runDir, { recursive: true, mode: 448 });
+  const scriptPath = currentCliScriptPath();
+  const child = spawn4(process.execPath, [scriptPath, "daemon-supervisor"], {
+    detached: true,
+    stdio: "ignore",
+    env: process.env
+  });
+  child.unref();
+  for (let index = 0; index < 12; index += 1) {
+    await wait(250);
+    const next = await getDaemonStatus(paths);
+    if (next.running && (await probeLocalLinkService({ port: config.port, timeoutMs: 500 })).reachable) {
+      return next;
+    }
+  }
+  return await getDaemonStatus(paths);
+}
+async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
+  await mkdir16(paths.logsDir, { recursive: true, mode: 448 });
   const log = createRotatingTextLogWriter({
     paths,
     fileName: path21.basename(daemonLogFile(paths))
@@ -18435,7 +19088,7 @@ async function postJson(fetcher, url, token, body) {
   });
   const payload = await response.json().catch(() => null);
   if (!response.ok) {
-    const message = readErrorMessage3(payload) ?? `Relay request failed with HTTP ${response.status}`;
+    const message = readErrorMessage4(payload) ?? `Relay request failed with HTTP ${response.status}`;
     throw new Error(message);
   }
   if (!payload) {
@@ -18443,7 +19096,7 @@ async function postJson(fetcher, url, token, body) {
   }
   return payload;
 }
-function readErrorMessage3(payload) {
+function readErrorMessage4(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -18455,175 +19108,17 @@ function readErrorMessage3(payload) {
   return typeof message === "string" ? message : null;
 }
 
-// src/topology/network.ts
-import os5 from "os";
-var VIRTUAL_INTERFACE_NAME_PATTERN = /(docker|veth|vmnet|vmenet|vbox|virtualbox|vmware|tailscale|zerotier|wireguard|utun|virbr|hyper-v|vethernet|loopback|\blo\b|^lo\d*$|^br-|^bridge\d+$|^zt|^tun|^tap|awdl|llw|anpi|gif|stf|ipsec|ppp)/iu;
-var MAX_LAN_IPS = 4;
-var MAX_PUBLIC_IPV4S = 2;
-var MAX_PUBLIC_IPV6S = 2;
-async function discoverRouteCandidates(options) {
-  const lanIps = discoverLanIps();
-  const publicIps = options.relayBootstrapToken ? await observePublicRoute(options).catch(() => ({ publicIpv4s: [], publicIpv6s: [] })) : { publicIpv4s: [], publicIpv6s: [] };
-  const publicIpv4s = unique(publicIps.publicIpv4s.filter(isUsablePublicIpv4)).slice(0, MAX_PUBLIC_IPV4S);
-  const publicIpv6s = unique(publicIps.publicIpv6s.filter(isUsablePublicIpv6)).slice(0, MAX_PUBLIC_IPV6S);
-  const preferredUrls = [
-    ...lanIps.map((ip) => buildDirectUrl(ip, options.port)),
-    ...publicIpv4s.map((ip) => buildDirectUrl(ip, options.port)),
-    ...publicIpv6s.map((ip) => buildDirectUrl(ip, options.port)),
-    `${options.relayBaseUrl.replace(/\/+$/u, "")}/api/v1/relay/links/${options.linkId}`
-  ];
-  return {
-    lanIps,
-    publicIpv4s,
-    publicIpv6s,
-    preferredUrls
-  };
-}
-function discoverLanIps() {
-  return discoverLanIpsFromInterfaces(os5.networkInterfaces());
-}
-function discoverLanIpsFromInterfaces(interfaces) {
-  const result = /* @__PURE__ */ new Set();
-  const candidates = [];
-  for (const [name, items] of Object.entries(interfaces)) {
-    if (shouldIgnoreInterface(name)) {
-      continue;
-    }
-    for (const item of items ?? []) {
-      if (!item.internal && item.address && item.family === "IPv4" && isUsableLanIpv4(item.address, item.netmask)) {
-        candidates.push({ name, address: item.address });
-      }
-    }
-  }
-  for (const candidate of candidates.sort(compareLanCandidate)) {
-    result.add(candidate.address);
-  }
-  return [...result].slice(0, MAX_LAN_IPS);
-}
-async function observePublicRoute(options) {
-  const fetcher = options.fetchImpl ?? fetch;
-  const response = await fetcher(`${options.relayBaseUrl.replace(/\/+$/u, "")}/api/v1/relay/public-route/observe`, {
-    method: "POST",
-    headers: {
-      authorization: `Bearer ${options.relayBootstrapToken}`,
-      "content-type": "application/json"
-    },
-    body: JSON.stringify({
-      install_id: options.installId,
-      link_id: options.linkId,
-      public_key_pem: options.publicKeyPem
-    })
-  });
-  const payload = await response.json().catch(() => null);
-  const record = typeof payload?.record === "object" && payload.record !== null ? payload.record : null;
-  const observed = typeof payload?.observed === "object" && payload.observed !== null ? payload.observed : null;
-  const values = [
-    readIpRecord(record?.ipv4),
-    readIpRecord(record?.ipv6),
-    typeof observed?.ip === "string" ? observed.ip : null
-  ].filter((value) => Boolean(value));
-  return {
-    publicIpv4s: unique(values.filter(isUsablePublicIpv4)),
-    publicIpv6s: unique(values.filter(isUsablePublicIpv6))
-  };
-}
-function readIpRecord(value) {
-  if (typeof value !== "object" || value === null) {
-    return null;
-  }
-  const ip = value.ip;
-  return typeof ip === "string" && ip.trim() ? ip.trim() : null;
-}
-function buildDirectUrl(ip, port) {
-  return `http://${ip.includes(":") ? `[${ip}]` : ip}:${port}`;
-}
-function shouldIgnoreInterface(name) {
-  return !name.trim() || VIRTUAL_INTERFACE_NAME_PATTERN.test(name);
-}
-function compareLanCandidate(left, right) {
-  const priority = interfacePriority(left.name) - interfacePriority(right.name);
-  return priority || left.name.localeCompare(right.name) || left.address.localeCompare(right.address);
-}
-function interfacePriority(name) {
-  if (/^(en|eth|wlan|wi-fi|wifi)/iu.test(name)) {
-    return 0;
-  }
-  return 1;
-}
-function isUsableLanIpv4(address, netmask) {
-  return isPrivateIpv4(address) && !isNetworkOrBroadcastIpv4Address(address, netmask);
-}
-function isUsablePublicIpv4(address) {
-  return isValidIpv4(address) && !isSpecialIpv4(address);
-}
-function isUsablePublicIpv6(address) {
-  const normalized = address.toLowerCase();
-  return normalized.includes(":") && !normalized.startsWith("fe80:") && !normalized.startsWith("fc") && !normalized.startsWith("fd") && !normalized.startsWith("ff") && normalized !== "::" && normalized !== "::1";
-}
-function isPrivateIpv4(address) {
-  const parts = parseIpv4Segments(address);
-  if (!parts) {
-    return false;
-  }
-  const [first, second] = parts;
-  return first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168;
-}
-function isSpecialIpv4(address) {
-  const parts = parseIpv4Segments(address);
-  if (!parts) {
-    return true;
-  }
-  const [first, second, third, fourth] = parts;
-  return first === 0 || first === 10 || first === 127 || first >= 224 || first === 100 && second >= 64 && second <= 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168 || first === 192 && second === 0 && third === 2 || first === 198 && (second === 18 || second === 19) || first === 198 && second === 51 && third === 100 || first === 203 && second === 0 && third === 113 || first === 255 && second === 255 && third === 255 && fourth === 255;
-}
-function isNetworkOrBroadcastIpv4Address(address, netmask) {
-  const addressParts = parseIpv4Segments(address);
-  const netmaskParts = netmask ? parseIpv4Segments(netmask) : null;
-  if (!addressParts) {
-    return true;
-  }
-  if (!netmaskParts) {
-    const last = addressParts[3];
-    return last === 0 || last === 255;
-  }
-  const addressInt = ipv4SegmentsToInt(addressParts);
-  const netmaskInt = ipv4SegmentsToInt(netmaskParts);
-  const hostMask = ~netmaskInt >>> 0;
-  if (hostMask === 0) {
-    return false;
-  }
-  const networkInt = addressInt & netmaskInt;
-  const broadcastInt = (networkInt | hostMask) >>> 0;
-  return addressInt === networkInt || addressInt === broadcastInt;
-}
-function isValidIpv4(address) {
-  return Boolean(parseIpv4Segments(address));
-}
-function parseIpv4Segments(address) {
-  if (!/^\d{1,3}(?:\.\d{1,3}){3}$/u.test(address)) {
-    return null;
-  }
-  const parts = address.split(".").map((part) => Number.parseInt(part, 10));
-  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
-    return null;
-  }
-  return parts;
-}
-function ipv4SegmentsToInt(parts) {
-  return (parts[0] << 24 >>> 0 | parts[1] << 16 | parts[2] << 8 | parts[3]) >>> 0;
-}
-function unique(values) {
-  return [...new Set(values)];
-}
-
 // src/pairing/pairing.ts
 async function preparePairing(paths = resolveRuntimePaths()) {
   const config = await loadConfig(paths);
   const identity = await ensureIdentity(paths);
+  const systemInfo = readLinkSystemInfo();
   const created = await postServerJson(config.serverBaseUrl, "/api/v1/link-pairings", {
     install_id: identity.install_id,
     link_id: identity.link_id ?? void 0,
-    display_name: defaultDisplayName(),
+    display_name: systemInfo.defaultDisplayName,
+    platform: systemInfo.platform,
+    hostname: systemInfo.hostname ?? void 0,
     public_key_pem: identity.public_key_pem
   });
   const relayBaseUrl = created.relayBaseUrl || config.relayBaseUrl;
@@ -18638,6 +19133,7 @@ async function preparePairing(paths = resolveRuntimePaths()) {
     port: config.port,
     relayBaseUrl,
     relayBootstrapToken: created.relayBootstrapToken,
+    configuredLanHost: config.lanHost,
     linkId: assigned.linkId,
     installId: updatedIdentity.install_id,
     publicKeyPem: updatedIdentity.public_key_pem
@@ -18646,17 +19142,20 @@ async function preparePairing(paths = resolveRuntimePaths()) {
     install_id: updatedIdentity.install_id,
     link_id: assigned.linkId,
     link_version: LINK_VERSION,
-    display_name: defaultDisplayName(),
+    display_name: systemInfo.defaultDisplayName,
+    platform: systemInfo.platform,
+    hostname: systemInfo.hostname ?? void 0,
     lan_ips: routes.lanIps,
     public_ipv4s: routes.publicIpv4s,
     public_ipv6s: routes.publicIpv6s,
-    preferred_urls: routes.preferredUrls
+    preferred_urls: routes.preferredUrls,
+    environment: routes.environment
   });
   const qrPayload = {
     kind: "hermes_link_pairing",
     version: 1,
     link_id: assigned.linkId,
-    display_name: defaultDisplayName(),
+    display_name: systemInfo.defaultDisplayName,
     session_id: created.sessionId,
     code: created.code,
     preferred_urls: qrPreferredUrls(routes)
@@ -18667,7 +19166,7 @@ async function preparePairing(paths = resolveRuntimePaths()) {
       session_id: created.sessionId,
       code: created.code,
       link_id: assigned.linkId,
-      display_name: defaultDisplayName(),
+      display_name: systemInfo.defaultDisplayName,
       local_api_url: `http://127.0.0.1:${config.port}`,
       server_base_url: config.serverBaseUrl,
       relay_base_url: relayBaseUrl,
@@ -18683,7 +19182,7 @@ async function preparePairing(paths = resolveRuntimePaths()) {
     pairingToken: created.pairingToken,
     relayBootstrapToken: created.relayBootstrapToken,
     relayBaseUrl,
-    displayName: defaultDisplayName(),
+    displayName: systemInfo.defaultDisplayName,
     linkId: assigned.linkId,
     routes,
     qrPayload,
@@ -18765,7 +19264,7 @@ async function claimPairing(input) {
   return {
     link: {
       link_id: identity.link_id,
-      display_name: defaultDisplayName()
+      display_name: readLinkSystemInfo().defaultDisplayName
     },
     device: formatDevice(session.device),
     access_token: {
@@ -18811,12 +19310,12 @@ async function patchServerJson(serverBaseUrl, path24, token, body) {
 async function readJsonResponse2(response) {
   const payload = await response.json().catch(() => null);
   if (!response.ok || !payload) {
-    const message = readErrorMessage4(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    const message = readErrorMessage5(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
   return payload;
 }
-function readErrorMessage4(payload) {
+function readErrorMessage5(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -18827,9 +19326,6 @@ function readErrorMessage4(payload) {
   const message = error.message;
   return typeof message === "string" ? message : null;
 }
-function defaultDisplayName() {
-  return `Hermes Link ${process.platform}`;
-}
 function pairingClaimPath(sessionId, paths) {
   return path23.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.claimed.json`);
 }
@@ -18864,7 +19360,8 @@ function registerSystemRoutes(router, options) {
       relayBaseUrl: config.relayBaseUrl,
       linkId: identity.link_id,
       installId: identity.install_id,
-      publicKeyPem: identity.public_key_pem
+      publicKeyPem: identity.public_key_pem,
+      configuredLanHost: config.lanHost
     }) : null;
     ctx.set("cache-control", "no-store");
     ctx.body = {
@@ -19940,14 +20437,18 @@ export {
   getLinkLogFile,
   ensureHermesApiServerAvailable,
   loadConfig,
+  saveConfig,
+  normalizeLanHost,
   loadIdentity,
   ensureIdentity,
   getIdentityStatus,
   hasActiveDevices,
+  detectRuntimeEnvironment,
   preparePairing,
   readPairingClaim,
   clearPairingClaim,
   createApp,
+  reportLinkStatusToServer,
   startLinkService,
   startDaemonProcess,
   runDaemonSupervisor,