@hermespilot/link 0.3.1 → 0.3.3

package/dist/{chunk-PSHYSZAP.js → chunk-IJTQ6YVR.js}

@@ -353,7 +353,7 @@ async function readLinkUsageStatistics(paths, filter = {}) {
       FROM run_usage_facts
       ${where.sql}
       GROUP BY COALESCE(NULLIF(model, ''), 'unknown'), provider
-      HAVING total_tokens > 0
+      HAVING SUM(total_tokens) > 0
       ORDER BY total_tokens DESC, run_count DESC, model ASC
       LIMIT 12
     `).all(...where.params);
@@ -379,7 +379,7 @@ async function readLinkUsageStatistics(paths, filter = {}) {
         NULLIF(profile_uid, ''),
         'unknown'
       )
-      HAVING total_tokens > 0
+      HAVING SUM(total_tokens) > 0
       ORDER BY total_tokens DESC, run_count DESC, profile ASC
       LIMIT 12
     `).all(...where.params);
@@ -3724,7 +3724,7 @@ import os2 from "os";
 import path5 from "path";
 
 // src/constants.ts
-var LINK_VERSION = "0.3.1";
+var LINK_VERSION = "0.3.3";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -4091,7 +4091,8 @@ import { execFile } from "child_process";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
 async function deleteHermesSession(sessionId, profileName = "default") {
-  if (!sessionId.trim()) {
+  const normalizedSessionId = sessionId.trim();
+  if (!normalizedSessionId) {
     throw new LinkHttpError(
       400,
       "hermes_session_id_required",
@@ -4099,15 +4100,31 @@ async function deleteHermesSession(sessionId, profileName = "default") {
     );
   }
   try {
-    await execFileAsync(
+    const output = await execFileAsync(
       resolveHermesBin(),
-      [...profileArgs(profileName), "sessions", "delete", sessionId, "--yes"],
+      [
+        ...profileArgs(profileName),
+        "sessions",
+        "delete",
+        normalizedSessionId,
+        "--yes"
+      ],
       {
         timeout: 1e4,
         windowsHide: true
       }
     );
+    return {
+      session_id: normalizedSessionId,
+      status: readSessionDeleteStatus(output.stdout, output.stderr)
+    };
   } catch (error) {
+    if (isSessionNotFoundOutput(readExecErrorOutput(error))) {
+      return {
+        session_id: normalizedSessionId,
+        status: "not_found"
+      };
+    }
     throw new LinkHttpError(
       502,
       "hermes_session_delete_failed",
@@ -4158,6 +4175,29 @@ async function renameHermesSession(sessionId, title, profileName = "default") {
 function resolveHermesBin() {
   return process.env.HERMES_BIN?.trim() || "hermes";
 }
+function readSessionDeleteStatus(stdout, stderr) {
+  const output = `${stdout.toString()}
+${stderr.toString()}`;
+  if (isSessionNotFoundOutput(output)) {
+    return "not_found";
+  }
+  if (/deleted session\b/i.test(output)) {
+    return "deleted";
+  }
+  return "unknown";
+}
+function isSessionNotFoundOutput(output) {
+  return /\bsession\b[\s\S]*\bnot found\b/i.test(output);
+}
+function readExecErrorOutput(error) {
+  if (typeof error !== "object" || error === null) {
+    return "";
+  }
+  const stdout = "stdout" in error && error.stdout != null ? String(error.stdout) : "";
+  const stderr = "stderr" in error && error.stderr != null ? String(error.stderr) : "";
+  return `${stdout}
+${stderr}`;
+}
 function profileArgs(profileName) {
   const normalized = profileName.trim() || "default";
   return normalized === "default" ? [] : ["-p", normalized];
@@ -6327,6 +6367,51 @@ function safePathSegment(value, fallback) {
   return safe.length > 0 ? safe.slice(0, 120) : fallback;
 }
 
+// src/conversations/conversation-session-ids.ts
+function normalizeHermesSessionIds(values) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    const sessionId = value?.trim();
+    if (!sessionId || seen.has(sessionId)) {
+      continue;
+    }
+    seen.add(sessionId);
+  }
+  return [...seen];
+}
+function addHermesSessionIdToManifest(manifest, sessionId) {
+  const normalizedSessionId = sessionId.trim();
+  if (!normalizedSessionId) {
+    return manifest;
+  }
+  const hermesSessionIds = normalizeHermesSessionIds([
+    ...manifest.hermes_session_ids ?? [],
+    manifest.hermes_session_id,
+    normalizedSessionId
+  ]);
+  if (manifest.hermes_session_id === normalizedSessionId && arraysEqual(manifest.hermes_session_ids ?? [], hermesSessionIds)) {
+    return manifest;
+  }
+  return {
+    ...manifest,
+    hermes_session_id: normalizedSessionId,
+    hermes_session_ids: hermesSessionIds
+  };
+}
+function collectHermesSessionIds(manifest, snapshot) {
+  return normalizeHermesSessionIds([
+    manifest.hermes_session_id,
+    ...manifest.hermes_session_ids ?? [],
+    ...snapshot.runs.map((run) => run.hermes_session_id)
+  ]);
+}
+function arraysEqual(left, right) {
+  if (left.length !== right.length) {
+    return false;
+  }
+  return left.every((item, index) => item === right[index]);
+}
+
 // src/conversations/conversation-maintenance.ts
 var MAX_UPLOADED_BLOB_BYTES = 50 * 1024 * 1024;
 var ConversationMaintenanceCoordinator = class {
@@ -6447,10 +6532,18 @@ var ConversationMaintenanceCoordinator = class {
       ...collectBlobIds(snapshot),
       ...await this.listConversationBlobIds(conversationId)
     ]);
-    await deleteHermesSession(
-      manifest.hermes_session_id,
+    const hermesSessionIds = collectHermesSessionIds(manifest, snapshot);
+    const hermesDeleteResults = await this.deleteHermesSessions(
+      hermesSessionIds,
       manifest.profile_name_snapshot ?? manifest.profile ?? "default"
     );
+    if (snapshot.runs.length > 0 && hermesDeleteResults.every((result) => result.status === "not_found")) {
+      throw new LinkHttpError(
+        502,
+        "hermes_session_delete_not_confirmed",
+        "Hermes session deletion was not confirmed"
+      );
+    }
     const deletedAt = (/* @__PURE__ */ new Date()).toISOString();
     const stats = buildConversationStats(
       {
@@ -6464,6 +6557,7 @@ var ConversationMaintenanceCoordinator = class {
     const next = {
       ...manifest,
       status: "deleted_soft",
+      hermes_session_ids: hermesSessionIds,
       updated_at: deletedAt,
       deleted_at: deletedAt,
       stats
@@ -6473,7 +6567,9 @@ var ConversationMaintenanceCoordinator = class {
       type: "conversation.deleted",
       payload: {
         deleted_at: deletedAt,
-        hermes_session_id: manifest.hermes_session_id
+        hermes_session_id: manifest.hermes_session_id,
+        hermes_session_ids: hermesSessionIds,
+        hermes_delete_results: hermesDeleteResults
       }
     });
     await this.deps.store.writeSnapshot(conversationId, emptySnapshot2());
@@ -6491,9 +6587,17 @@ var ConversationMaintenanceCoordinator = class {
     return {
       conversation_id: conversationId,
       hermes_deleted: true,
+      hermes_session_ids: hermesSessionIds,
       deleted_at: deletedAt
     };
   }
+  async deleteHermesSessions(sessionIds, profileName) {
+    const results = [];
+    for (const sessionId of sessionIds) {
+      results.push(await deleteHermesSession(sessionId, profileName));
+    }
+    return results;
+  }
   async pruneConversationBlobReferences(conversationId, blobIds) {
     for (const blobId of blobIds) {
       try {
@@ -7640,8 +7744,12 @@ var ConversationOrchestrationCoordinator = class {
     const resetAt = (/* @__PURE__ */ new Date()).toISOString();
     const previousSessionId = input.manifest.hermes_session_id;
     const nextSessionId = freshHermesSessionId(input.manifest.id);
+    const nextManifest = addHermesSessionIdToManifest(
+      input.manifest,
+      nextSessionId
+    );
     await this.deps.store.writeManifest({
-      ...input.manifest,
+      ...nextManifest,
       hermes_session_id: nextSessionId,
       command_state: {
         ...input.manifest.command_state,
@@ -9787,9 +9895,11 @@ var ConversationRunLifecycle = class {
         this.deps.paths,
         run.profile
       ).catch(() => void 0) ?? run.hermes_session_id;
-      await this.updateRun(conversationId, runId, {
-        hermes_session_id: hermesSessionId
-      });
+      await this.rememberRunHermesSessionId(
+        conversationId,
+        runId,
+        hermesSessionId
+      );
       const conversationHistory = await buildConversationHistory({
         paths: this.deps.paths,
         profileName: run.profile,
@@ -9859,9 +9969,11 @@ var ConversationRunLifecycle = class {
       );
       const responseSessionId = response.headers.get("x-hermes-session-id")?.trim();
       if (responseSessionId) {
-        await this.updateRun(conversationId, runId, {
-          hermes_session_id: responseSessionId
-        });
+        await this.rememberRunHermesSessionId(
+          conversationId,
+          runId,
+          responseSessionId
+        );
       }
       for await (const rawEvent of parseSseResponse(response)) {
         if (controller.signal.aborted) {
@@ -10047,6 +10159,29 @@ ${attachmentLines.join("\n")}`
     Object.assign(run, patch);
     await this.deps.writeSnapshot(conversationId, snapshot);
   }
+  async rememberRunHermesSessionId(conversationId, runId, sessionId) {
+    const normalizedSessionId = sessionId.trim();
+    if (!normalizedSessionId) {
+      return;
+    }
+    return this.deps.withConversationLock(conversationId, async () => {
+      const snapshot = await this.deps.readSnapshot(conversationId);
+      const run = snapshot.runs.find((item) => item.id === runId);
+      if (!run) {
+        return;
+      }
+      run.hermes_session_id = normalizedSessionId;
+      await this.deps.writeSnapshot(conversationId, snapshot);
+      const manifest = await this.deps.readActiveManifest(conversationId);
+      const nextManifest = addHermesSessionIdToManifest(
+        manifest,
+        normalizedSessionId
+      );
+      if (nextManifest !== manifest) {
+        await this.deps.writeManifest(nextManifest);
+      }
+    });
+  }
   async runHasAssistantOutput(conversationId, runId) {
     const snapshot = await this.deps.readSnapshot(conversationId).catch(() => null);
     const run = snapshot?.runs.find((item) => item.id === runId);
@@ -10984,6 +11119,7 @@ var ConversationService = class {
         statsOverride
       ),
       readActiveManifest: (conversationId) => this.store.readActiveManifest(conversationId),
+      writeManifest: (manifest) => this.store.writeManifest(manifest),
       isConversationActive: (conversationId) => this.store.isConversationActive(conversationId),
       writeBlob: (conversationId, input) => this.maintenance.writeBlob(conversationId, input),
       syncCronDeliveries: () => this.syncCronDeliveries(),
@@ -11089,6 +11225,7 @@ var ConversationService = class {
       title_source: isDefaultConversationTitle(title) ? "default" : "hermes",
       status: "active",
       hermes_session_id: `hp_${id}`,
+      hermes_session_ids: [`hp_${id}`],
       profile_uid: profile.profileUid,
       profile_name_snapshot: profile.profileName,
       profile: profile.profileName,
@@ -12714,7 +12851,7 @@ function registerConversationRoutes(router, options) {
       ctx.set("cache-control", "private, max-age=86400");
       ctx.set(
         "content-disposition",
-        `inline; filename="${blob.filename.replaceAll('"', "")}"`
+        contentDispositionInline(blob.filename)
       );
       ctx.body = blob.bytes;
     }
@@ -12733,6 +12870,34 @@ function registerConversationRoutes(router, options) {
     }
   );
 }
+function contentDispositionInline(filename) {
+  const fallback = asciiFilenameFallback(filename);
+  return `inline; filename="${fallback}"; filename*=UTF-8''${encodeRfc5987Value(filename)}`;
+}
+function asciiFilenameFallback(filename) {
+  const basename = filename.trim().split(/[\\/]/u).pop()?.trim() ?? "";
+  const extension = safeAsciiExtension(basename);
+  const stem = extension ? basename.slice(0, -extension.length) : basename;
+  const asciiStem = stem.replace(/[^\x20-\x7E]/gu, "_").replace(/["\\]/gu, "_").replace(/[^A-Za-z0-9._ -]/gu, "_").replace(/_+/gu, "_").trim();
+  if (/[A-Za-z0-9]/u.test(asciiStem)) {
+    return `${asciiStem.slice(0, 120)}${extension}`;
+  }
+  return `attachment${extension}`;
+}
+function safeAsciiExtension(filename) {
+  const dotIndex = filename.lastIndexOf(".");
+  if (dotIndex < 0 || dotIndex === filename.length - 1) {
+    return "";
+  }
+  const extension = filename.slice(dotIndex).toLowerCase();
+  return /^\.[a-z0-9]{1,12}$/u.test(extension) ? extension : "";
+}
+function encodeRfc5987Value(value) {
+  return encodeURIComponent(value).replace(
+    /['()*]/gu,
+    (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`
+  );
+}
 function isConversationNotificationEvent(event) {
   const type = event.type.toLowerCase();
   return type === "conversation.created" || type === "conversation.updated" || type === "conversation.deleted" || type === "message.created" || type === "message.completed" || type === "message.failed" || type === "run.completed" || type === "run.failed" || type === "run.cancelled" || type === "run.canceled" || type === "approval.requested" || readPayloadBool(event.payload, "requires_action") || readPayloadBool(event.payload, "requires_user_action") || readPayloadBool(event.payload, "requires_approval");
@@ -14513,8 +14678,8 @@ import {
 import path18 from "path";
 import YAML4 from "yaml";
 var ENTRY_DELIMITER = "\n\xA7\n";
-var MEMORY_LIMIT = 2200;
-var USER_LIMIT = 1375;
+var DEFAULT_MEMORY_LIMIT = 2200;
+var DEFAULT_USER_LIMIT = 1375;
 var CUSTOM_PROVIDER_CARD_ID = "__custom__";
 var CUSTOM_PROVIDER_REGISTRY_FILE = "memory-providers.json";
 var HINDSIGHT_DEFAULT_API_URL = "https://api.hindsight.vectorize.io";
@@ -14597,9 +14762,10 @@ var HermesMemoryError = class extends Error {
 };
 async function readHermesProfileMemory(profileName = "default") {
   const memoryDir = resolveMemoryDir(profileName);
+  const limits = await readMemoryLimits(profileName);
   const [memoryStore, userStore, settings] = await Promise.all([
-    readMemoryStore(profileName, "memory"),
-    readMemoryStore(profileName, "user"),
+    readMemoryStore(profileName, "memory", limits),
+    readMemoryStore(profileName, "user", limits),
     readMemorySettings(profileName)
   ]);
   return {
@@ -14617,9 +14783,7 @@ async function addHermesMemoryEntry(profileName, target, content) {
     if (entries.includes(normalized)) {
       return entries;
     }
-    const next = [...entries, normalized];
-    assertWithinLimit(target, next);
-    return next;
+    return [...entries, normalized];
   });
   return readHermesProfileMemory(profileName);
 }
@@ -14630,7 +14794,6 @@ async function replaceHermesMemoryEntry(profileName, target, oldText, content) {
     const index = findSingleMatch(entries, needle);
     const next = [...entries];
     next[index] = normalized;
-    assertWithinLimit(target, next);
     return next;
   });
   return readHermesProfileMemory(profileName);
@@ -14903,7 +15066,7 @@ async function patchHermesMemoryProvider(profileName, provider) {
 function resolveMemoryDir(profileName) {
   return path18.join(resolveHermesProfileDir(profileName), "memories");
 }
-async function readMemoryStore(profileName, target) {
+async function readMemoryStore(profileName, target, limits) {
   const filePath = memoryFilePath(profileName, target);
   const entries = await readMemoryEntries(filePath);
   const fileStat = await stat12(filePath).catch((error) => {
@@ -14913,7 +15076,7 @@ async function readMemoryStore(profileName, target) {
     throw error;
   });
   const chars = entries.length ? entries.join(ENTRY_DELIMITER).length : 0;
-  const limit = target === "user" ? USER_LIMIT : MEMORY_LIMIT;
+  const limit = memoryLimitForTarget(limits, target);
   return {
     target,
     label: target === "user" ? "\u5173\u4E8E\u7528\u6237" : "Agent \u7B14\u8BB0",
@@ -14954,7 +15117,7 @@ async function mutateMemoryEntries(profileName, target, mutate) {
   await writeMemoryEntries(profileName, target, mutate([...new Set(current)]));
 }
 async function writeMemoryEntries(profileName, target, entries) {
-  assertWithinLimit(target, entries);
+  assertWithinLimit(target, entries, await readMemoryLimits(profileName));
   const filePath = memoryFilePath(profileName, target);
   const dir = path18.dirname(filePath);
   await mkdir12(dir, { recursive: true, mode: 448 });
@@ -15767,8 +15930,28 @@ function selectSetting(key, label, value, options, editable = true) {
   const stringValue = readString13(value) ?? options[0] ?? null;
   return { key, label, value: stringValue, editable, kind: "select", options };
 }
-function assertWithinLimit(target, entries) {
-  const limit = target === "user" ? USER_LIMIT : MEMORY_LIMIT;
+async function readMemoryLimits(profileName) {
+  const raw = await readFile13(
+    resolveHermesConfigPath(profileName),
+    "utf8"
+  ).catch((error) => {
+    if (isNodeError13(error, "ENOENT")) {
+      return "";
+    }
+    throw error;
+  });
+  const config = raw ? toRecord12(YAML4.parse(raw)) : {};
+  const memory = toRecord12(config.memory);
+  return {
+    memory: readPositiveInteger3(memory.memory_char_limit) ?? DEFAULT_MEMORY_LIMIT,
+    user: readPositiveInteger3(memory.user_char_limit) ?? DEFAULT_USER_LIMIT
+  };
+}
+function memoryLimitForTarget(limits, target) {
+  return target === "user" ? limits.user : limits.memory;
+}
+function assertWithinLimit(target, entries, limits) {
+  const limit = memoryLimitForTarget(limits, target);
   const chars = entries.length ? entries.join(ENTRY_DELIMITER).length : 0;
   if (chars > limit) {
     throw new HermesMemoryError(
@@ -15820,6 +16003,10 @@ function toRecord12(value) {
 function readString13(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
+function readPositiveInteger3(value) {
+  const numberValue = typeof value === "number" ? value : typeof value === "string" ? Number(value.trim()) : NaN;
+  return Number.isFinite(numberValue) && numberValue > 0 ? Math.floor(numberValue) : void 0;
+}
 function readBoolean2(value) {
   if (typeof value === "boolean") {
     return value;
@@ -17495,6 +17682,7 @@ function connectRelayControl(options) {
   let retryTimer = null;
   let abortControllers = /* @__PURE__ */ new Map();
   let fatalRelayRejection = null;
+  let latestNetworkRoutes = null;
   const connect = () => {
     options.onStatus?.({ state: "connecting", attempt: reconnectAttempts });
     fatalRelayRejection = null;
@@ -17506,6 +17694,10 @@ function connectRelayControl(options) {
     socket.on("open", () => {
       reconnectAttempts = 0;
       options.onStatus?.({ state: "connected", attempt: reconnectAttempts });
+      const currentSocket = socket;
+      if (currentSocket && latestNetworkRoutes) {
+        sendNetworkRoutes(currentSocket, options.linkId, latestNetworkRoutes);
+      }
     });
     socket.on("message", (raw) => {
       if (!socket || typeof raw !== "string" && !Buffer.isBuffer(raw)) {
@@ -17553,6 +17745,12 @@ function connectRelayControl(options) {
   };
   connect();
   return {
+    publishNetworkRoutes(routes) {
+      latestNetworkRoutes = routes;
+      if (socket?.readyState === WebSocket.OPEN) {
+        sendNetworkRoutes(socket, options.linkId, routes);
+      }
+    },
     close() {
       closedByUser = true;
       if (retryTimer) {
@@ -17564,6 +17762,19 @@ function connectRelayControl(options) {
     }
   };
 }
+function sendNetworkRoutes(socket, linkId, routes) {
+  socket.send(JSON.stringify({
+    type: "network.routes",
+    id: `routes_${Date.now().toString(36)}`,
+    payload: {
+      link_id: linkId,
+      lan_ips: routes.lanIps,
+      public_ipv4s: routes.publicIpv4s,
+      public_ipv6s: routes.publicIpv6s,
+      observed_at: (/* @__PURE__ */ new Date()).toISOString()
+    }
+  }));
+}
 function resolveFatalRelayRejection(message) {
   if (!/Unexpected server response:\s*(400|401|403|426)\b/u.test(message)) {
     return null;
@@ -17787,7 +17998,7 @@ async function discoverRouteCandidates(options) {
   const environment = detectRuntimeEnvironment();
   const configuredLanHost = normalizeLanHost(options.configuredLanHost);
   const lanIps = configuredLanHost ? [configuredLanHost] : environment.lanAutoDiscoveryUsable ? discoverLanIps() : [];
-  const publicIps = options.relayBootstrapToken ? await observePublicRoute(options).catch(() => ({ publicIpv4s: [], publicIpv6s: [] })) : { publicIpv4s: [], publicIpv6s: [] };
+  const publicIps = options.relayBootstrapToken || options.observePublicRoute ? await observePublicRoute(options).catch(() => ({ publicIpv4s: [], publicIpv6s: [] })) : { publicIpv4s: [], publicIpv6s: [] };
   const publicIpv4s = unique(publicIps.publicIpv4s.filter(isUsablePublicIpv4)).slice(0, MAX_PUBLIC_IPV4S);
   const publicIpv6s = unique(publicIps.publicIpv6s.filter(isUsablePublicIpv6)).slice(0, MAX_PUBLIC_IPV6S);
   const preferredUrls = [
@@ -17830,8 +18041,8 @@ async function observePublicRoute(options) {
   const response = await fetcher(`${options.relayBaseUrl.replace(/\/+$/u, "")}/api/v1/relay/public-route/observe`, {
     method: "POST",
     headers: {
-      authorization: `Bearer ${options.relayBootstrapToken}`,
-      "content-type": "application/json"
+      "content-type": "application/json",
+      ...options.relayBootstrapToken ? { authorization: `Bearer ${options.relayBootstrapToken}` } : {}
     },
     body: JSON.stringify({
       install_id: options.installId,
@@ -17943,25 +18154,32 @@ function unique(values) {
 
 // src/link/network-report-state.ts
 var DEFAULT_AUTO_DAILY_LIMIT = 20;
-async function markNetworkStatusReported(paths, lanIps, reportedAt = /* @__PURE__ */ new Date()) {
+async function markNetworkStatusReported(paths, snapshotInput, reportedAt = /* @__PURE__ */ new Date()) {
+  const snapshot = normalizeNetworkSnapshot(snapshotInput);
   await updateNetworkReportState(paths, (current) => ({
     ...current,
-    lastReportedLanIps: normalizeLanIps(lanIps),
+    lastReportedLanIps: snapshot.lanIps,
+    lastReportedPublicIpv4s: snapshot.publicIpv4s,
+    lastReportedPublicIpv6s: snapshot.publicIpv6s,
     lastReportedAt: reportedAt.toISOString(),
-    lastAutoAttempt: current.lastAutoAttempt ? { ...current.lastAutoAttempt, success: true } : null
+    lastAutoAttempt: current.lastAutoAttempt ? { ...current.lastAutoAttempt, ...snapshot, success: true } : null
   }));
 }
-async function reserveAutomaticNetworkReport(paths, lanIps, options = {}) {
-  const snapshot = normalizeLanIps(lanIps);
+async function reserveAutomaticNetworkReport(paths, snapshotInput, options = {}) {
+  const snapshot = normalizeNetworkSnapshot(snapshotInput);
   const now = options.now ?? /* @__PURE__ */ new Date();
   const dailyLimit = Math.max(0, Math.floor(options.dailyLimit ?? DEFAULT_AUTO_DAILY_LIMIT));
   let reservation = { allowed: false, reason: "unchanged" };
   await updateNetworkReportState(paths, (current) => {
-    if (sameLanIps(current.lastReportedLanIps, snapshot)) {
-      reservation = { allowed: false, reason: "unchanged" };
-      return current;
+    if (sameNetworkSnapshot(readReportedSnapshot(current), snapshot)) {
+      const lastReportedAt = current.lastReportedAt ? Date.parse(current.lastReportedAt) : Number.NaN;
+      const unchangedMinIntervalMs = Math.max(0, Math.floor(options.unchangedMinIntervalMs ?? 0));
+      if (!options.force || Number.isFinite(lastReportedAt) && now.getTime() - lastReportedAt < unchangedMinIntervalMs) {
+        reservation = { allowed: false, reason: "unchanged" };
+        return current;
+      }
     }
-    if (current.lastAutoAttempt && !current.lastAutoAttempt.success && sameLanIps(current.lastAutoAttempt.lanIps, snapshot)) {
+    if (current.lastAutoAttempt && !current.lastAutoAttempt.success && sameNetworkSnapshot(readAttemptSnapshot(current.lastAutoAttempt), snapshot)) {
       reservation = { allowed: false, reason: "failed_snapshot_not_retried" };
       return current;
     }
@@ -17977,7 +18195,7 @@ async function reserveAutomaticNetworkReport(paths, lanIps, options = {}) {
       autoQuotaDay: quotaDay,
       autoReportsToday: reportsToday + 1,
       lastAutoAttempt: {
-        lanIps: snapshot,
+        ...snapshot,
         attemptedAt: now.toISOString(),
         success: false
       }
@@ -18001,6 +18219,8 @@ function normalizeNetworkReportState(value) {
   const record = value && typeof value === "object" ? value : {};
   return {
     lastReportedLanIps: normalizeLanIps(record.lastReportedLanIps),
+    lastReportedPublicIpv4s: normalizeLanIps(record.lastReportedPublicIpv4s),
+    lastReportedPublicIpv6s: normalizeLanIps(record.lastReportedPublicIpv6s),
     lastReportedAt: typeof record.lastReportedAt === "string" ? record.lastReportedAt : null,
     autoQuotaDay: typeof record.autoQuotaDay === "string" ? record.autoQuotaDay : null,
     autoReportsToday: Number.isFinite(record.autoReportsToday) ? Math.max(0, Math.floor(record.autoReportsToday ?? 0)) : 0,
@@ -18017,10 +18237,41 @@ function normalizeAttempt(value) {
   }
   return {
     lanIps: normalizeLanIps(record.lanIps),
+    publicIpv4s: normalizeLanIps(record.publicIpv4s),
+    publicIpv6s: normalizeLanIps(record.publicIpv6s),
     attemptedAt: record.attemptedAt,
     success: record.success === true
   };
 }
+function normalizeNetworkSnapshot(value) {
+  if (Array.isArray(value)) {
+    return {
+      lanIps: normalizeLanIps(value),
+      publicIpv4s: [],
+      publicIpv6s: []
+    };
+  }
+  const record = value && typeof value === "object" ? value : {};
+  return {
+    lanIps: normalizeLanIps(record.lanIps),
+    publicIpv4s: normalizeLanIps(record.publicIpv4s),
+    publicIpv6s: normalizeLanIps(record.publicIpv6s)
+  };
+}
+function readReportedSnapshot(state) {
+  return {
+    lanIps: state.lastReportedLanIps,
+    publicIpv4s: state.lastReportedPublicIpv4s,
+    publicIpv6s: state.lastReportedPublicIpv6s
+  };
+}
+function readAttemptSnapshot(attempt) {
+  return {
+    lanIps: attempt.lanIps,
+    publicIpv4s: attempt.publicIpv4s,
+    publicIpv6s: attempt.publicIpv6s
+  };
+}
 function normalizeLanIps(value) {
   if (!Array.isArray(value)) {
     return [];
@@ -18031,7 +18282,10 @@ function normalizeLanIps(value) {
     )
   ];
 }
-function sameLanIps(left, right) {
+function sameNetworkSnapshot(left, right) {
+  return sameStringList(left.lanIps, right.lanIps) && sameStringList(left.publicIpv4s, right.publicIpv4s) && sameStringList(left.publicIpv6s, right.publicIpv6s);
+}
+function sameStringList(left, right) {
   if (left.length !== right.length) {
     return false;
   }
@@ -18048,12 +18302,13 @@ async function reportLinkStatusToServer(options = {}) {
   if (!identity?.link_id) {
     return null;
   }
-  const routes = await discoverRouteCandidates({
+  const routes = options.routes ?? await discoverRouteCandidates({
     port: config.port,
     relayBaseUrl: config.relayBaseUrl,
     linkId: identity.link_id,
     installId: identity.install_id,
     publicKeyPem: identity.public_key_pem,
+    observePublicRoute: true,
     configuredLanHost: config.lanHost,
     fetchImpl: options.fetchImpl
   });
@@ -18093,7 +18348,7 @@ async function reportLinkStatusToServer(options = {}) {
     const message = readErrorMessage3(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
-  await markNetworkStatusReported(paths, routes.lanIps);
+  await markNetworkStatusReported(paths, routes);
   return body;
 }
 function canonicalJson(value) {
@@ -18128,16 +18383,17 @@ function readErrorMessage3(payload) {
 // src/daemon/lan-ip-monitor.ts
 var DEFAULT_INTERVAL_MS = 5 * 6e4;
 var DEFAULT_DAILY_REPORT_LIMIT = 20;
+var DEFAULT_STARTUP_REPORT_MIN_INTERVAL_MS = 15 * 6e4;
 function startLanIpMonitor(options) {
   let running = false;
   let closed = false;
-  const check = async () => {
+  const check = async (context = {}) => {
     if (running || closed) {
       return;
     }
     running = true;
     try {
-      await checkLanIpChange(options);
+      await checkLanIpChange(options, context);
     } catch (error) {
       void options.logger.warn("lan_ip_monitor_failed", {
         error: error instanceof Error ? error.message : String(error)
@@ -18146,7 +18402,7 @@ function startLanIpMonitor(options) {
       running = false;
     }
   };
-  void check();
+  void check({ forceReport: true, publishToRelay: true });
   const timer = setInterval(() => {
     void check();
   }, options.intervalMs ?? DEFAULT_INTERVAL_MS);
@@ -18158,7 +18414,7 @@ function startLanIpMonitor(options) {
     }
   };
 }
-async function checkLanIpChange(options) {
+async function checkLanIpChange(options, context = {}) {
   const [identity, config] = await Promise.all([
     loadIdentity(options.paths),
     loadConfig(options.paths)
@@ -18172,14 +18428,25 @@ async function checkLanIpChange(options) {
     linkId: identity.link_id,
     installId: identity.install_id,
     publicKeyPem: identity.public_key_pem,
+    observePublicRoute: true,
     configuredLanHost: config.lanHost,
     fetchImpl: options.fetchImpl
   });
-  const reservation = await reserveAutomaticNetworkReport(options.paths, routes.lanIps, {
-    dailyLimit: options.dailyReportLimit ?? DEFAULT_DAILY_REPORT_LIMIT
+  if (context.publishToRelay) {
+    options.onNetworkRoutes?.(routes);
+  }
+  const reservation = await reserveAutomaticNetworkReport(options.paths, routes, {
+    dailyLimit: options.dailyReportLimit ?? DEFAULT_DAILY_REPORT_LIMIT,
+    force: context.forceReport === true,
+    unchangedMinIntervalMs: options.startupReportMinIntervalMs ?? DEFAULT_STARTUP_REPORT_MIN_INTERVAL_MS
   });
   if (!reservation.allowed) {
-    const logFields = { lan_ips: routes.lanIps, reason: reservation.reason };
+    const logFields = {
+      lan_ips: routes.lanIps,
+      public_ipv4s: routes.publicIpv4s,
+      public_ipv6s: routes.publicIpv6s,
+      reason: reservation.reason
+    };
     if (reservation.reason === "daily_limit_reached") {
       void options.logger.warn("lan_ip_report_skipped", logFields);
     } else {
@@ -18190,12 +18457,16 @@ async function checkLanIpChange(options) {
   try {
     const result = await reportLinkStatusToServer({
       paths: options.paths,
-      fetchImpl: options.fetchImpl
+      fetchImpl: options.fetchImpl,
+      routes
     });
     if (result) {
+      options.onNetworkRoutes?.(routes);
       void options.logger.info("lan_ip_change_reported", {
         link_id: result.linkId,
-        lan_ips: routes.lanIps
+        lan_ips: routes.lanIps,
+        public_ipv4s: routes.publicIpv4s,
+        public_ipv6s: routes.publicIpv6s
       });
     }
   } catch (error) {
@@ -18287,13 +18558,6 @@ async function startLinkService(options = {}) {
     conversations,
     logger
   });
-  const lanIpMonitor = startLanIpMonitor({
-    paths,
-    logger,
-    intervalMs: options.lanIpMonitorIntervalMs,
-    dailyReportLimit: options.lanIpMonitorDailyReportLimit,
-    fetchImpl: options.lanIpMonitorFetchImpl
-  });
   let relay = null;
   if (identity?.link_id) {
     relay = connectRelayControl({
@@ -18310,6 +18574,16 @@ async function startLinkService(options = {}) {
   } else {
     void logger.info("relay_skipped", { reason: "link_not_paired" });
   }
+  const lanIpMonitor = startLanIpMonitor({
+    paths,
+    logger,
+    intervalMs: options.lanIpMonitorIntervalMs,
+    dailyReportLimit: options.lanIpMonitorDailyReportLimit,
+    fetchImpl: options.lanIpMonitorFetchImpl,
+    onNetworkRoutes: (routes) => {
+      relay?.publishNetworkRoutes(routes);
+    }
+  });
   if (options.writePidFile) {
     await writePidFile(paths);
   }

package/dist/cli/index.js

@@ -30,7 +30,7 @@ import {
   startDaemonProcess,
   startLinkService,
   stopDaemonProcess
-} from "../chunk-PSHYSZAP.js";
+} from "../chunk-IJTQ6YVR.js";
 
 // src/cli/index.ts
 import { Command } from "commander";

package/dist/http/app.d.ts

@@ -237,12 +237,14 @@ interface ConversationEvent {
 interface DeleteConversationResult {
     conversation_id: string;
     hermes_deleted: boolean;
+    hermes_session_ids?: string[];
     deleted_at: string;
 }
 interface BulkDeleteConversationResult {
     conversation_id: string;
     status: 'deleted' | 'failed';
     hermes_deleted?: boolean;
+    hermes_session_ids?: string[];
     deleted_at?: string;
     error?: {
         code: string;

package/dist/http/app.js

@@ -1,6 +1,6 @@
 import {
   createApp
-} from "../chunk-PSHYSZAP.js";
+} from "../chunk-IJTQ6YVR.js";
 export {
   createApp
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hermespilot/link",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "private": false,
   "description": "Hermes Link companion service and CLI for connecting hermes-agent through HermesPilot",
   "license": "MIT",