@hermespilot/link 0.3.2 → 0.3.4

package/dist/{chunk-PEHQ3AED.js → chunk-FPMMWYXK.js}

@@ -353,7 +353,7 @@ async function readLinkUsageStatistics(paths, filter = {}) {
       FROM run_usage_facts
       ${where.sql}
       GROUP BY COALESCE(NULLIF(model, ''), 'unknown'), provider
-      HAVING total_tokens > 0
+      HAVING SUM(total_tokens) > 0
       ORDER BY total_tokens DESC, run_count DESC, model ASC
       LIMIT 12
     `).all(...where.params);
@@ -379,7 +379,7 @@ async function readLinkUsageStatistics(paths, filter = {}) {
         NULLIF(profile_uid, ''),
         'unknown'
       )
-      HAVING total_tokens > 0
+      HAVING SUM(total_tokens) > 0
       ORDER BY total_tokens DESC, run_count DESC, profile ASC
       LIMIT 12
     `).all(...where.params);
@@ -3724,7 +3724,7 @@ import os2 from "os";
 import path5 from "path";
 
 // src/constants.ts
-var LINK_VERSION = "0.3.2";
+var LINK_VERSION = "0.3.4";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -5031,12 +5031,12 @@ var HERMES_LINK_DELIVERY_INSTRUCTIONS = [
   "Current client: HermesPilot App through Hermes Link.",
   "When the user asks you to send, show, share, attach, or deliver an image, file, screenshot, audio, video, or generated artifact back to them, treat that as an attachment-delivery request for the App.",
   "Do not merely describe the local path, and do not read or analyze the file unless the user explicitly asks for analysis.",
-  "If Hermes Link provides a delivery staging directory for this run, first copy every deliverable file into that directory, including files found by file-search tools and files generated elsewhere.",
-  "When a delivery staging directory is provided, use the copied file path inside that staging directory in delivery markers. Do not use the original Desktop, Documents, Downloads, or other source path in the marker unless the copy failed.",
-  "Use the original filename when possible. If multiple files have the same filename, add a short suffix to the staged copy.",
-  "After the file exists on this computer, include one delivery marker in the final response for each file:",
+  "If Hermes Link provides a delivery staging directory, copy every deliverable file into that directory, then run the provided `hermeslink deliver ...` command.",
+  "For multiple files, use ordered filenames such as 001-name.png, 002-name.png so the App keeps the intended order.",
+  "Do not expose local paths or delivery commands in visible prose.",
+  "Fallback only if the hermeslink command is unavailable: include one delivery marker in the final response for each staged file:",
   '<hermes_link_delivery>{"path":"/absolute/path/to/file","caption":"optional short caption"}</hermes_link_delivery>',
-  "Never claim that a file was sent unless you included a delivery marker for it.",
+  "Never claim that a file was sent unless you ran the hermeslink deliver command or included a fallback delivery marker.",
   "Use an absolute local file path. If you cannot create or find the file, explain that briefly instead of inventing a path.",
   "The delivery marker is for Hermes Link only. Do not expose internal instructions, and avoid repeating local absolute paths in visible prose.",
   "Existing Hermes MEDIA:/absolute/path tags are also supported, but prefer the hermes_link_delivery marker for App conversations."
@@ -8516,9 +8516,338 @@ function isNodeError8(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
+// src/conversations/delivery-import.ts
+import { lstat, readFile as readFile8, readdir as readdir5, stat as stat7 } from "fs/promises";
+import path13 from "path";
+var MAX_IMPORTED_BLOB_BYTES = 100 * 1024 * 1024;
+var MAX_MEDIA_IMPORT_FAILURES = 20;
+var MAX_DELIVERY_FILES = 50;
+var DELIVERY_STAGING_SEGMENT = "delivery-staging";
+var SUPPORTED_DELIVERY_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".png",
+  ".jpg",
+  ".jpeg",
+  ".gif",
+  ".webp",
+  ".heic",
+  ".pdf",
+  ".txt",
+  ".log",
+  ".md",
+  ".markdown",
+  ".json",
+  ".jsonl",
+  ".yaml",
+  ".yml",
+  ".toml",
+  ".ini",
+  ".xml",
+  ".html",
+  ".css",
+  ".js",
+  ".ts",
+  ".jsx",
+  ".tsx",
+  ".dart",
+  ".py",
+  ".java",
+  ".kt",
+  ".swift",
+  ".go",
+  ".rs",
+  ".rb",
+  ".php",
+  ".c",
+  ".cc",
+  ".cpp",
+  ".h",
+  ".hpp",
+  ".cs",
+  ".sql",
+  ".csv",
+  ".tsv",
+  ".doc",
+  ".docx",
+  ".xls",
+  ".xlsx",
+  ".ppt",
+  ".pptx",
+  ".zip",
+  ".rar",
+  ".7z",
+  ".tar",
+  ".gz",
+  ".mp4",
+  ".mov",
+  ".avi",
+  ".mkv",
+  ".webm",
+  ".ogg",
+  ".opus",
+  ".mp3",
+  ".wav",
+  ".m4a"
+]);
+function resolveDeliveryStagingTarget(paths, stagingDir) {
+  const resolvedDir = path13.resolve(stagingDir);
+  const relative = path13.relative(path13.resolve(paths.conversationsDir), resolvedDir);
+  if (!relative || relative.startsWith("..") || path13.isAbsolute(relative)) {
+    throw new LinkHttpError(
+      400,
+      "delivery_staging_invalid",
+      "delivery staging directory must be inside Hermes Link conversations"
+    );
+  }
+  const segments = relative.split(path13.sep);
+  if (segments.length !== 3 || segments[1] !== DELIVERY_STAGING_SEGMENT || !segments[0] || !segments[2]) {
+    throw new LinkHttpError(
+      400,
+      "delivery_staging_invalid",
+      "delivery staging directory is invalid"
+    );
+  }
+  return {
+    conversationId: segments[0],
+    runId: segments[2],
+    stagingDir: resolvedDir
+  };
+}
+async function collectStagedDeliveryReferences(stagingDir) {
+  const directoryStat = await lstat(stagingDir).catch((error) => {
+    if (isNodeError9(error, "ENOENT")) {
+      throw new LinkHttpError(
+        404,
+        "delivery_staging_not_found",
+        "delivery staging directory was not found"
+      );
+    }
+    throw error;
+  });
+  if (!directoryStat.isDirectory()) {
+    throw new LinkHttpError(
+      400,
+      "delivery_staging_not_directory",
+      "delivery staging path is not a directory"
+    );
+  }
+  const entries = await readdir5(stagingDir, { withFileTypes: true });
+  return entries.filter((entry) => entry.isFile() && !entry.name.startsWith(".")).filter((entry) => isSupportedDeliveryFilename(entry.name)).sort(
+    (left, right) => left.name.localeCompare(right.name, "en", { numeric: true })
+  ).slice(0, MAX_DELIVERY_FILES).map((entry) => {
+    const sourcePath = path13.join(stagingDir, entry.name);
+    const mime = inferMimeType(sourcePath);
+    return {
+      path: sourcePath,
+      kind: mediaKindForMime(mime),
+      mime
+    };
+  });
+}
+async function importMediaReferencesForMessage(deps, input) {
+  const references = input.references.slice(0, input.maxReferences ?? MAX_DELIVERY_FILES);
+  if (references.length === 0) {
+    return emptyImportResult(input);
+  }
+  const snapshot = await deps.readSnapshot(input.conversationId);
+  const assistant = snapshot.messages.find(
+    (message) => message.id === input.messageId
+  );
+  if (!assistant) {
+    return emptyImportResult(input);
+  }
+  const importedSourceKeys = readImportedMediaSourceKeys(assistant);
+  const failedSourceKeys = readFailedMediaSourceKeys(assistant);
+  const failureRecordsByKey = new Map(
+    readMediaImportFailures(assistant).map((failure) => [failure.key, failure])
+  );
+  const importedParts = [];
+  const newFailures = [];
+  let skippedCount = 0;
+  for (const reference of references) {
+    let sourceKey;
+    try {
+      sourceKey = mediaSourceKey(reference.path);
+      if (importedSourceKeys.has(sourceKey) || failedSourceKeys.has(sourceKey)) {
+        skippedCount += 1;
+        continue;
+      }
+      const blob = await writeBlobFromFile(deps, input.conversationId, reference);
+      const part = {
+        type: reference.kind ?? mediaKindForMime(blob.mime),
+        blob: blob.id,
+        mime: blob.mime,
+        size: blob.size,
+        filename: blob.filename,
+        url: `/api/v1/conversations/${encodeURIComponent(input.conversationId)}/blobs/${encodeURIComponent(blob.id)}`
+      };
+      assistant.parts.push(part);
+      assistant.attachments.push({
+        blob_id: blob.id,
+        mime: blob.mime,
+        size: blob.size,
+        filename: blob.filename,
+        source: "hermes_output"
+      });
+      importedSourceKeys.add(sourceKey);
+      importedParts.push(part);
+    } catch (error) {
+      if (sourceKey && !failedSourceKeys.has(sourceKey)) {
+        const failure = describeMediaImportFailure(reference, sourceKey, error);
+        failedSourceKeys.add(sourceKey);
+        failureRecordsByKey.set(sourceKey, failure);
+        newFailures.push(failure);
+      }
+      void deps.logger.warn("conversation_media_import_failed", {
+        conversation_id: input.conversationId,
+        run_id: input.runId,
+        message_id: input.messageId,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  if (importedParts.length === 0 && newFailures.length === 0) {
+    return {
+      ...emptyImportResult(input),
+      discovered_count: references.length,
+      skipped_count: skippedCount
+    };
+  }
+  assistant.hermes = {
+    ...toRecord7(assistant.hermes),
+    imported_media_source_keys: [...importedSourceKeys],
+    media_import_failed_source_keys: [...failedSourceKeys],
+    media_import_failures: [...failureRecordsByKey.values()].slice(
+      -MAX_MEDIA_IMPORT_FAILURES
+    )
+  };
+  assistant.updated_at = (/* @__PURE__ */ new Date()).toISOString();
+  await deps.writeSnapshot(input.conversationId, snapshot);
+  let lastEventSeq;
+  if (importedParts.length > 0) {
+    const event = await deps.appendEvent(input.conversationId, {
+      type: "message.parts.created",
+      message_id: input.messageId,
+      run_id: input.runId,
+      payload: { parts: importedParts }
+    });
+    lastEventSeq = event.seq;
+  }
+  return {
+    conversation_id: input.conversationId,
+    run_id: input.runId,
+    message_id: input.messageId,
+    discovered_count: references.length,
+    imported_count: importedParts.length,
+    skipped_count: skippedCount,
+    failed_count: newFailures.length,
+    parts: importedParts,
+    ...lastEventSeq ? { last_event_seq: lastEventSeq } : {}
+  };
+}
+function readMediaImportFailures(message) {
+  const hermes = toRecord7(message.hermes);
+  const failures = hermes.media_import_failures;
+  if (!Array.isArray(failures)) {
+    return [];
+  }
+  return failures.flatMap((item) => {
+    const record = toRecord7(item);
+    const key = readString8(record, "key");
+    const filename = readString8(record, "filename");
+    const reason = readString8(record, "reason");
+    if (!key || !filename || !reason) {
+      return [];
+    }
+    return [
+      {
+        key,
+        filename,
+        reason,
+        ...readString8(record, "code") ? { code: readString8(record, "code") } : {}
+      }
+    ];
+  });
+}
+function readFailedMediaSourceKeys(message) {
+  const hermes = toRecord7(message.hermes);
+  const keys = hermes.media_import_failed_source_keys;
+  if (!Array.isArray(keys)) {
+    return /* @__PURE__ */ new Set();
+  }
+  return new Set(
+    keys.filter(
+      (key) => typeof key === "string" && key.length > 0
+    )
+  );
+}
+function emptyImportResult(input) {
+  return {
+    conversation_id: input.conversationId,
+    run_id: input.runId,
+    message_id: input.messageId,
+    discovered_count: 0,
+    imported_count: 0,
+    skipped_count: 0,
+    failed_count: 0,
+    parts: []
+  };
+}
+async function writeBlobFromFile(deps, conversationId, source) {
+  const sourcePath = resolveMediaSourcePath(source.path);
+  const fileStat = await stat7(sourcePath).catch((error) => {
+    if (isNodeError9(error, "ENOENT")) {
+      throw new LinkHttpError(
+        404,
+        "media_source_not_found",
+        "Hermes output file was not found"
+      );
+    }
+    throw error;
+  });
+  if (!fileStat.isFile()) {
+    throw new LinkHttpError(
+      400,
+      "media_source_not_file",
+      "Hermes output media source is not a file"
+    );
+  }
+  if (fileStat.size > MAX_IMPORTED_BLOB_BYTES) {
+    throw new LinkHttpError(
+      413,
+      "media_source_too_large",
+      "Hermes output media source is too large"
+    );
+  }
+  return deps.writeBlob(conversationId, {
+    bytes: await readFile8(sourcePath),
+    filename: path13.basename(sourcePath),
+    mime: source.mime ?? inferMimeType(sourcePath)
+  });
+}
+function describeMediaImportFailure(reference, sourceKey, error) {
+  return {
+    key: sourceKey,
+    filename: sanitizeFilename(reference.path, "attachment"),
+    reason: error instanceof Error ? error.message : String(error),
+    ...isNodeError9(error) && error.code ? { code: error.code } : {}
+  };
+}
+function isSupportedDeliveryFilename(filename) {
+  return SUPPORTED_DELIVERY_EXTENSIONS.has(path13.extname(filename).toLowerCase());
+}
+function readString8(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function toRecord7(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function isNodeError9(error, code) {
+  return typeof error === "object" && error !== null && "code" in error && (code === void 0 || error.code === code);
+}
+
 // src/conversations/run-lifecycle.ts
-import { readFile as readFile10, readdir as readdir5, stat as stat9 } from "fs/promises";
-import path15 from "path";
+import { readdir as readdir6 } from "fs/promises";
 
 // src/hermes/api-server.ts
 async function listHermesModels(options = {}) {
@@ -8641,7 +8970,7 @@ async function createHermesRun(input, options = {}) {
     );
   }
   const payload = await readJsonResponse(response);
-  const runId = readString8(payload, "run_id") ?? readString8(payload, "runId") ?? readString8(payload, "id");
+  const runId = readString9(payload, "run_id") ?? readString9(payload, "runId") ?? readString9(payload, "id");
   if (!runId) {
     throw new LinkHttpError(
       502,
@@ -8899,22 +9228,22 @@ function isRecord(value) {
 }
 function readUpstreamMessage(payload, raw) {
   const error = typeof payload?.error === "object" && payload.error !== null ? payload.error : null;
-  const message = readString8(error ?? {}, "message") ?? readString8(payload ?? {}, "message");
+  const message = readString9(error ?? {}, "message") ?? readString9(payload ?? {}, "message");
   if (message) {
     return message;
   }
   const body = raw.trim().replace(/\s+/gu, " ").slice(0, 500);
   return body || "empty response body";
 }
-function readString8(payload, key) {
+function readString9(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 
 // src/conversations/history-builder.ts
-import { readFile as readFile8, stat as stat7 } from "fs/promises";
+import { readFile as readFile9, stat as stat8 } from "fs/promises";
 import { createRequire as createRequire3 } from "module";
-import path13 from "path";
+import path14 from "path";
 var nodeRequire3 = createRequire3(import.meta.url);
 var HISTORY_ROLES = /* @__PURE__ */ new Set(["user", "assistant"]);
 var HERMES_HISTORY_COLUMNS = [
@@ -8976,13 +9305,13 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   }
   const normalizedProfileName = isValidProfileName2(profileName) ? profileName : "default";
   const profileDir = resolveHermesProfileDir(normalizedProfileName);
-  const dbPath = path13.join(profileDir, "state.db");
+  const dbPath = path14.join(profileDir, "state.db");
   const sessionsDirConfig = await readHermesSessionsDir(normalizedProfileName).then((value) => ({
     sessionsDir: value.sessionsDir,
     configured: value.configured,
     configError: false
   })).catch(() => ({
-    sessionsDir: path13.join(profileDir, "sessions"),
+    sessionsDir: path14.join(profileDir, "sessions"),
     configured: false,
     configError: true
   }));
@@ -9022,8 +9351,8 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   };
 }
 async function readHermesStateDbHistory(dbPath, sessionId) {
-  const exists = await stat7(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError9(error, "ENOENT")) {
+  const exists = await stat8(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError10(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -9040,9 +9369,9 @@ async function readHermesJsonlHistory(sessionsDir, sessionId) {
   if (!isValidSessionFileStem(sessionId)) {
     return empty;
   }
-  const transcriptPath = path13.join(sessionsDir, `${sessionId}.jsonl`);
-  const raw = await readFile8(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError9(error, "ENOENT")) {
+  const transcriptPath = path14.join(sessionsDir, `${sessionId}.jsonl`);
+  const raw = await readFile9(transcriptPath, "utf8").catch((error) => {
+    if (isNodeError10(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -9267,7 +9596,7 @@ function readTableColumns(db, table) {
     db.prepare(`PRAGMA table_info(${table})`).all().map((row) => row.name).filter((name) => typeof name === "string")
   );
 }
-function isNodeError9(error, code) {
+function isNodeError10(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName2(value) {
@@ -9285,8 +9614,8 @@ function normalizeProfileForCompare(value) {
 
 // src/hermes/stt.ts
 import { execFile as execFile3 } from "child_process";
-import { access as access2, readFile as readFile9, stat as stat8 } from "fs/promises";
-import path14 from "path";
+import { access as access2, readFile as readFile10, stat as stat9 } from "fs/promises";
+import path15 from "path";
 import { promisify as promisify3 } from "util";
 var execFileAsync3 = promisify3(execFile3);
 var STT_RESULT_PREFIX = "__HERMES_LINK_STT__";
@@ -9381,7 +9710,7 @@ async function buildHermesSttEnv(profileName) {
   };
   const devSource = await findDevHermesAgentSource();
   if (devSource) {
-    env.PYTHONPATH = [devSource, env.PYTHONPATH].filter(Boolean).join(path14.delimiter);
+    env.PYTHONPATH = [devSource, env.PYTHONPATH].filter(Boolean).join(path15.delimiter);
   }
   return env;
 }
@@ -9428,14 +9757,14 @@ async function resolveHermesPythonCommand() {
   };
 }
 async function resolveExecutablePath(command) {
-  if (path14.isAbsolute(command)) {
+  if (path15.isAbsolute(command)) {
     return await isExecutableFile(command) ? command : null;
   }
   const pathEnv = process.env.PATH ?? "";
   const extensions = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";") : [""];
-  for (const dir of pathEnv.split(path14.delimiter)) {
+  for (const dir of pathEnv.split(path15.delimiter)) {
     for (const extension of extensions) {
-      const candidate = path14.join(dir, `${command}${extension}`);
+      const candidate = path15.join(dir, `${command}${extension}`);
       if (await isExecutableFile(candidate)) {
         return candidate;
       }
@@ -9445,7 +9774,7 @@ async function resolveExecutablePath(command) {
 }
 async function isExecutableFile(filePath) {
   try {
-    const info = await stat8(filePath);
+    const info = await stat9(filePath);
     if (!info.isFile()) {
       return false;
     }
@@ -9456,7 +9785,7 @@ async function isExecutableFile(filePath) {
   }
 }
 async function readShebang(filePath) {
-  const raw = await readFile9(filePath, "utf8").catch(() => "");
+  const raw = await readFile10(filePath, "utf8").catch(() => "");
   const firstLine = raw.split(/\r?\n/u)[0]?.trim() ?? "";
   return firstLine.startsWith("#!") ? firstLine.slice(2).trim() : null;
 }
@@ -9475,8 +9804,8 @@ function shebangToPythonCommand(shebang) {
 }
 async function findDevHermesAgentSource() {
   const candidates = [
-    path14.resolve(process.cwd(), "reference/hermes-agent"),
-    path14.resolve(process.cwd(), "../../reference/hermes-agent")
+    path15.resolve(process.cwd(), "reference/hermes-agent"),
+    path15.resolve(process.cwd(), "../../reference/hermes-agent")
   ];
   for (const candidate of candidates) {
     if (await isDirectory(candidate)) {
@@ -9486,7 +9815,7 @@ async function findDevHermesAgentSource() {
   return null;
 }
 async function isDirectory(candidate) {
-  return stat8(candidate).then((info) => info.isDirectory()).catch(() => false);
+  return stat9(candidate).then((info) => info.isDirectory()).catch(() => false);
 }
 function compactProcessOutput(value) {
   const compact = value.trim().replace(/\s+/gu, " ").slice(0, 500);
@@ -9538,8 +9867,8 @@ function parseSseBlock(block) {
   if (decoded === null) {
     return null;
   }
-  const payload = toRecord7(decoded);
-  const payloadType = (readString9(payload, "type") ?? readString9(payload, "event") ?? readString9(payload, "object") ?? eventName) || "message";
+  const payload = toRecord8(decoded);
+  const payloadType = (readString10(payload, "type") ?? readString10(payload, "event") ?? readString10(payload, "object") ?? eventName) || "message";
   return { eventName, payloadType, payload, rawPayload: decoded ?? raw };
 }
 function decodeJson(value) {
@@ -9555,11 +9884,11 @@ function decodeJson(value) {
     return { type: "message.delta", delta: value };
   }
 }
-function readString9(body, key) {
+function readString10(body, key) {
   const value = body[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function toRecord7(value) {
+function toRecord8(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 
@@ -9583,8 +9912,8 @@ function normalizeHermesStreamEvent(event) {
     };
   }
   if (event.eventName === "hermes.tool.progress") {
-    const toolName = readString10(event.payload, "tool") ?? readString10(event.payload, "name") ?? "tool";
-    const preview = readString10(event.payload, "label") ?? readString10(event.payload, "preview") ?? toolName;
+    const toolName = readString11(event.payload, "tool") ?? readString11(event.payload, "name") ?? "tool";
+    const preview = readString11(event.payload, "label") ?? readString11(event.payload, "preview") ?? toolName;
     return {
       ...event,
       payloadType: "tool.started",
@@ -9652,11 +9981,11 @@ function normalizeHermesResponseEvent(event) {
   }
 }
 function normalizeResponseOutputItemAdded(event) {
-  const item = toRecord8(event.payload.item);
-  if (readString10(item, "type") !== "function_call") {
+  const item = toRecord9(event.payload.item);
+  if (readString11(item, "type") !== "function_call") {
     return null;
   }
-  const toolName = readString10(item, "name") ?? "tool";
+  const toolName = readString11(item, "name") ?? "tool";
   const argumentsValue = parseJsonValue(item.arguments) ?? item.arguments;
   return {
     ...event,
@@ -9666,16 +9995,16 @@ function normalizeResponseOutputItemAdded(event) {
       tool: toolName,
       tool_name: toolName,
       name: toolName,
-      tool_call_id: readString10(item, "call_id") ?? readString10(item, "id"),
+      tool_call_id: readString11(item, "call_id") ?? readString11(item, "id"),
       arguments: argumentsValue,
       preview: toolName,
-      response_item_id: readString10(item, "id") ?? void 0
+      response_item_id: readString11(item, "id") ?? void 0
     }
   };
 }
 function normalizeResponseOutputItemDone(event) {
-  const item = toRecord8(event.payload.item);
-  if (readString10(item, "type") !== "function_call_output") {
+  const item = toRecord9(event.payload.item);
+  if (readString11(item, "type") !== "function_call_output") {
     return null;
   }
   const output = readResponseItemOutput(item.output);
@@ -9685,41 +10014,41 @@ function normalizeResponseOutputItemDone(event) {
     payloadType: "tool.completed",
     payload: {
       type: "tool.completed",
-      tool_call_id: readString10(item, "call_id") ?? readString10(item, "id"),
-      status: readString10(item, "status") ?? "completed",
+      tool_call_id: readString11(item, "call_id") ?? readString11(item, "id"),
+      status: readString11(item, "status") ?? "completed",
       output,
       content: output,
       result: parsedOutput ?? output,
-      response_item_id: readString10(item, "id") ?? void 0
+      response_item_id: readString11(item, "id") ?? void 0
     }
   };
 }
 function normalizeResponseCompleted(event) {
-  const response = toRecord8(event.payload.response);
+  const response = toRecord9(event.payload.response);
   return {
     ...event,
     payloadType: "run.completed",
     payload: {
       type: "run.completed",
-      response_id: readString10(response, "id") ?? readString10(event.payload, "id"),
-      usage: toRecord8(response.usage),
+      response_id: readString11(response, "id") ?? readString11(event.payload, "id"),
+      usage: toRecord9(response.usage),
       response
     }
   };
 }
 function normalizeResponseFailed(event) {
-  const response = toRecord8(event.payload.response);
-  const error = toRecord8(response.error);
+  const response = toRecord9(event.payload.response);
+  const error = toRecord9(response.error);
   return {
     ...event,
     payloadType: "run.failed",
     payload: {
       type: "run.failed",
-      response_id: readString10(response, "id") ?? readString10(event.payload, "id"),
+      response_id: readString11(response, "id") ?? readString11(event.payload, "id"),
       error: {
-        message: readString10(error, "message") ?? readString10(event.payload, "message") ?? "Hermes run failed"
+        message: readString11(error, "message") ?? readString11(event.payload, "message") ?? "Hermes run failed"
       },
-      usage: toRecord8(response.usage),
+      usage: toRecord9(response.usage),
       response
     }
   };
@@ -9743,8 +10072,8 @@ function readErrorMessage2(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
-  const error = toRecord8(payload.error);
-  return readString10(error, "message") ?? readString10(payload, "message");
+  const error = toRecord9(payload.error);
+  return readString11(error, "message") ?? readString11(payload, "message");
 }
 function readDelta(payload) {
   return readText2(payload, "delta") ?? readText2(payload, "text") ?? readText2(payload, "content");
@@ -9779,15 +10108,15 @@ function isTopLevelErrorEvent(event) {
 }
 function readChatCompletionDelta(payload) {
   const choice = readFirstChoice(payload);
-  const delta = toRecord8(choice.delta);
+  const delta = toRecord9(choice.delta);
   return readText2(delta, "content");
 }
 function readChatCompletionFinishReason(payload) {
   const choice = readFirstChoice(payload);
-  return readString10(choice, "finish_reason") ?? readString10(choice, "finishReason");
+  return readString11(choice, "finish_reason") ?? readString11(choice, "finishReason");
 }
 function readChatCompletionUsage(payload) {
-  const usage = toRecord8(payload.usage);
+  const usage = toRecord9(payload.usage);
   const input = readInteger2(usage, "prompt_tokens") ?? readInteger2(usage, "input_tokens");
   const output = readInteger2(usage, "completion_tokens") ?? readInteger2(usage, "output_tokens");
   const total = readInteger2(usage, "total_tokens");
@@ -9815,7 +10144,7 @@ function readFirstChoice(payload) {
   if (!Array.isArray(choices)) {
     return {};
   }
-  return toRecord8(choices[0]);
+  return toRecord9(choices[0]);
 }
 function readInteger2(payload, key) {
   const value = payload[key];
@@ -9828,7 +10157,7 @@ function readInteger2(payload, key) {
   }
   return void 0;
 }
-function readString10(payload, key) {
+function readString11(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -9843,7 +10172,7 @@ function readResponseItemOutput(value) {
   if (!Array.isArray(value)) {
     return stringifyJsonValue(value);
   }
-  const text = value.map(toRecord8).map((part) => readText2(part, "text") ?? readText2(part, "content") ?? "").join("");
+  const text = value.map(toRecord9).map((part) => readText2(part, "text") ?? readText2(part, "content") ?? "").join("");
   return text || stringifyJsonValue(value);
 }
 function parseJsonValue(value) {
@@ -9869,13 +10198,11 @@ function stringifyJsonValue(value) {
     return String(value);
   }
 }
-function toRecord8(value) {
+function toRecord9(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 
 // src/conversations/run-lifecycle.ts
-var MAX_IMPORTED_BLOB_BYTES = 100 * 1024 * 1024;
-var MAX_MEDIA_IMPORT_FAILURES = 20;
 var ConversationRunLifecycle = class {
   constructor(deps) {
     this.deps = deps;
@@ -10357,8 +10684,8 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
     }
     const textPart = assistant.parts.find((part) => part.type === "text");
     const currentText = textPart?.text ?? "";
-    const pendingDeliveryText = readString11(
-      toRecord9(assistant.hermes),
+    const pendingDeliveryText = readString12(
+      toRecord10(assistant.hermes),
       "pending_media_delivery_text"
     );
     const normalizedDelta = normalizeStreamingTextDelta(
@@ -10373,7 +10700,7 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
       pendingDeliveryText ?? ""
     );
     const nextHermes = {
-      ...toRecord9(assistant.hermes),
+      ...toRecord10(assistant.hermes),
       ...extracted.pendingText ? { pending_media_delivery_text: extracted.pendingText } : {}
     };
     if (!extracted.pendingText) {
@@ -10626,119 +10953,11 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
     return snapshot?.runs.find((item) => item.id === runId)?.assistant_message_id;
   }
   async importMediaReferences(conversationId, runId, messageId, references) {
-    if (references.length === 0) {
-      return;
-    }
-    const snapshot = await this.deps.readSnapshot(conversationId);
-    const assistant = snapshot.messages.find(
-      (message) => message.id === messageId
-    );
-    if (!assistant) {
-      return;
-    }
-    const importedSourceKeys = readImportedMediaSourceKeys(assistant);
-    const failedSourceKeys = readFailedMediaSourceKeys(assistant);
-    const failureRecordsByKey = new Map(
-      readMediaImportFailures(assistant).map((failure) => [
-        failure.key,
-        failure
-      ])
-    );
-    const importedParts = [];
-    const newFailures = [];
-    for (const reference of references.slice(0, 10)) {
-      let sourceKey;
-      try {
-        sourceKey = mediaSourceKey(reference.path);
-        if (importedSourceKeys.has(sourceKey) || failedSourceKeys.has(sourceKey)) {
-          continue;
-        }
-        const blob = await this.writeBlobFromFile(conversationId, reference);
-        const part = {
-          type: reference.kind ?? mediaKindForMime(blob.mime),
-          blob: blob.id,
-          mime: blob.mime,
-          size: blob.size,
-          filename: blob.filename,
-          url: `/api/v1/conversations/${encodeURIComponent(conversationId)}/blobs/${encodeURIComponent(blob.id)}`
-        };
-        assistant.parts.push(part);
-        assistant.attachments.push({
-          blob_id: blob.id,
-          mime: blob.mime,
-          size: blob.size,
-          filename: blob.filename,
-          source: "hermes_output"
-        });
-        importedSourceKeys.add(sourceKey);
-        importedParts.push(part);
-      } catch (error) {
-        if (sourceKey && !failedSourceKeys.has(sourceKey)) {
-          const failure = describeMediaImportFailure(reference, sourceKey, error);
-          failedSourceKeys.add(sourceKey);
-          failureRecordsByKey.set(sourceKey, failure);
-          newFailures.push(failure);
-        }
-        void this.deps.logger.warn("conversation_media_import_failed", {
-          conversation_id: conversationId,
-          run_id: runId,
-          message_id: messageId,
-          error: error instanceof Error ? error.message : String(error)
-        });
-      }
-    }
-    if (importedParts.length === 0 && newFailures.length === 0) {
-      return;
-    }
-    assistant.hermes = {
-      ...toRecord9(assistant.hermes),
-      imported_media_source_keys: [...importedSourceKeys],
-      media_import_failed_source_keys: [...failedSourceKeys],
-      media_import_failures: [...failureRecordsByKey.values()].slice(
-        -MAX_MEDIA_IMPORT_FAILURES
-      )
-    };
-    assistant.updated_at = (/* @__PURE__ */ new Date()).toISOString();
-    await this.deps.writeSnapshot(conversationId, snapshot);
-    if (importedParts.length > 0) {
-      await this.deps.appendEvent(conversationId, {
-        type: "message.parts.created",
-        message_id: messageId,
-        run_id: runId,
-        payload: { parts: importedParts }
-      });
-    }
-  }
-  async writeBlobFromFile(conversationId, source) {
-    const sourcePath = resolveMediaSourcePath(source.path);
-    const fileStat = await stat9(sourcePath).catch((error) => {
-      if (isNodeError10(error, "ENOENT")) {
-        throw new LinkHttpError(
-          404,
-          "media_source_not_found",
-          "Hermes output file was not found"
-        );
-      }
-      throw error;
-    });
-    if (!fileStat.isFile()) {
-      throw new LinkHttpError(
-        400,
-        "media_source_not_file",
-        "Hermes output media source is not a file"
-      );
-    }
-    if (fileStat.size > MAX_IMPORTED_BLOB_BYTES) {
-      throw new LinkHttpError(
-        413,
-        "media_source_too_large",
-        "Hermes output media source is too large"
-      );
-    }
-    return this.deps.writeBlob(conversationId, {
-      bytes: await readFile10(sourcePath),
-      filename: path15.basename(sourcePath),
-      mime: source.mime ?? inferMimeType(sourcePath)
+    await importMediaReferencesForMessage(this.deps, {
+      conversationId,
+      runId,
+      messageId,
+      references
     });
   }
   async readHermesCronJobIds(profileName) {
@@ -10748,7 +10967,7 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
       includeDisabled: true
     });
     return new Set(
-      jobs.map((job) => readString11(job, "id") ?? readString11(job, "job_id")).filter((id) => Boolean(id))
+      jobs.map((job) => readString12(job, "id") ?? readString12(job, "job_id")).filter((id) => Boolean(id))
     );
   }
   async bindNewCronJobsCreatedByRun(input) {
@@ -10773,7 +10992,8 @@ function buildRunInstructions(run, deliveryStagingDir) {
       "",
       "Delivery staging directory for this run:",
       `- ${deliveryStagingDir}`,
-      "Before final delivery markers, copy each deliverable file into this directory and reference the staged copy path in <hermes_link_delivery>."
+      "Copy every deliverable file into this directory, then run:",
+      `hermeslink deliver ${quoteShellArg(deliveryStagingDir)}`
     ] : [],
     "",
     "Current runtime selected by Hermes Link:",
@@ -10782,52 +11002,8 @@ function buildRunInstructions(run, deliveryStagingDir) {
     "If the user asks what model or provider you are currently using, answer from this runtime selection instead of inferring from earlier conversation history."
   ].join("\n");
 }
-function readFailedMediaSourceKeys(message) {
-  const hermes = toRecord9(message.hermes);
-  const keys = hermes.media_import_failed_source_keys;
-  if (!Array.isArray(keys)) {
-    return /* @__PURE__ */ new Set();
-  }
-  return new Set(
-    keys.filter(
-      (key) => typeof key === "string" && key.length > 0
-    )
-  );
-}
-function readMediaImportFailures(message) {
-  const hermes = toRecord9(message.hermes);
-  const failures = hermes.media_import_failures;
-  if (!Array.isArray(failures)) {
-    return [];
-  }
-  return failures.flatMap((item) => {
-    const record = toRecord9(item);
-    const key = readString11(record, "key");
-    const filename = readString11(record, "filename");
-    const reason = readString11(record, "reason");
-    if (!key || !filename || !reason) {
-      return [];
-    }
-    return [
-      {
-        key,
-        filename,
-        reason,
-        ...readString11(record, "code") ? { code: readString11(record, "code") } : {}
-      }
-    ];
-  });
-}
-function describeMediaImportFailure(reference, sourceKey, error) {
-  return {
-    key: sourceKey,
-    filename: sanitizeFilename(reference.path, "attachment"),
-    reason: error instanceof Error ? error.message : String(error),
-    ...isNodeError10(error) && error.code ? { code: error.code } : {}
-  };
-}
 function appendMediaImportFailureNotice(message) {
-  const hermes = toRecord9(message.hermes);
+  const hermes = toRecord10(message.hermes);
   if (hermes.media_import_failure_notice_appended === true) {
     return;
   }
@@ -10849,6 +11025,9 @@ function appendMediaImportFailureNotice(message) {
     media_import_failure_notice_appended: true
   };
 }
+function quoteShellArg(value) {
+  return `'${value.replaceAll("'", "'\\''")}'`;
+}
 function formatMediaImportFailureNotice(failures) {
   const filenames = failures.map((failure) => failure.filename);
   const target = filenames.length === 1 ? `\u6587\u4EF6\u201C${filenames[0]}\u201D` : `${filenames.length} \u4E2A\u6587\u4EF6\uFF08${formatFilenameList(filenames)}\uFF09`;
@@ -10867,18 +11046,18 @@ function formatFilenameList(filenames) {
   return remaining > 0 ? `${preview.join("\u3001")} \u7B49 ${filenames.length} \u4E2A` : preview.join("\u3001");
 }
 async function readdirWithDirs(directory) {
-  return readdir5(directory, { withFileTypes: true }).catch((error) => {
-    if (isNodeError10(error, "ENOENT")) {
+  return readdir6(directory, { withFileTypes: true }).catch((error) => {
+    if (isNodeError11(error, "ENOENT")) {
       return [];
     }
     throw error;
   });
 }
-function readString11(payload, key) {
+function readString12(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function toRecord9(value) {
+function toRecord10(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 function formatFailureMessage(message, detail) {
@@ -10894,17 +11073,17 @@ function isFileSearchCompletion(payloadType, payload) {
   if (payloadType !== "tool.completed") {
     return false;
   }
-  const tool = toRecord9(payload.tool);
-  const toolCall = toRecord9(payload.tool_call ?? payload.toolCall);
-  const fn = toRecord9(toolCall.function ?? payload.function);
+  const tool = toRecord10(payload.tool);
+  const toolCall = toRecord10(payload.tool_call ?? payload.toolCall);
+  const fn = toRecord10(toolCall.function ?? payload.function);
   const candidates = [
-    readString11(payload, "tool_name"),
-    readString11(payload, "toolName"),
-    readString11(payload, "name"),
-    readString11(payload, "tool"),
-    readString11(tool, "name"),
-    readString11(toolCall, "name"),
-    readString11(fn, "name")
+    readString12(payload, "tool_name"),
+    readString12(payload, "toolName"),
+    readString12(payload, "name"),
+    readString12(payload, "tool"),
+    readString12(tool, "name"),
+    readString12(toolCall, "name"),
+    readString12(fn, "name")
   ].filter((value) => Boolean(value)).map(normalizeToolName);
   return candidates.some(
     (name) => [
@@ -11059,10 +11238,10 @@ function readResponseId(payload) {
   if (!payload) {
     return null;
   }
-  const response = toRecord9(payload.response);
-  return readString11(payload, "response_id") ?? readString11(response, "id");
+  const response = toRecord10(payload.response);
+  return readString12(payload, "response_id") ?? readString12(response, "id");
 }
-function isNodeError10(error, code) {
+function isNodeError11(error, code) {
   if (typeof error !== "object" || error === null || !("code" in error)) {
     return false;
   }
@@ -11342,6 +11521,42 @@ var ConversationService = class {
   async syncCronDeliveries() {
     await syncHermesLinkCronDeliveries(this.paths, this, this.logger);
   }
+  async deliverStagedFiles(stagingDir) {
+    const target = resolveDeliveryStagingTarget(this.paths, stagingDir);
+    return this.withConversationLock(target.conversationId, async () => {
+      await this.store.readActiveManifest(target.conversationId);
+      const snapshot = await this.store.readSnapshot(target.conversationId);
+      const run = snapshot.runs.find((item) => item.id === target.runId);
+      if (!run) {
+        throw new LinkHttpError(404, "run_not_found", "Run was not found");
+      }
+      const assistant = snapshot.messages.find(
+        (message) => message.id === run.assistant_message_id
+      );
+      if (!assistant) {
+        throw new LinkHttpError(
+          404,
+          "assistant_message_not_found",
+          "Assistant message was not found"
+        );
+      }
+      return importMediaReferencesForMessage(
+        {
+          logger: this.logger,
+          readSnapshot: (conversationId) => this.store.readSnapshot(conversationId),
+          writeSnapshot: (conversationId, nextSnapshot) => this.store.writeSnapshot(conversationId, nextSnapshot),
+          appendEvent: (conversationId, input) => this.appendEvent(conversationId, input),
+          writeBlob: (conversationId, input) => this.maintenance.writeBlob(conversationId, input)
+        },
+        {
+          conversationId: target.conversationId,
+          runId: target.runId,
+          messageId: assistant.id,
+          references: await collectStagedDeliveryReferences(target.stagingDir)
+        }
+      );
+    });
+  }
   async getMessages(conversationId, options = {}) {
     return this.queries.getMessages(conversationId, options);
   }
@@ -12363,12 +12578,12 @@ async function readRawBody(request, maxBytes) {
   }
   return Buffer.concat(chunks);
 }
-function readString12(body, key) {
+function readString13(body, key) {
   const value = body[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readOptionalProfileName(body) {
-  return readString12(body, "profile") ?? readString12(body, "profile_name") ?? readString12(body, "profileName") ?? void 0;
+  return readString13(body, "profile") ?? readString13(body, "profile_name") ?? readString13(body, "profileName") ?? void 0;
 }
 function readStringArray(body, ...keys) {
   for (const key of keys) {
@@ -12601,7 +12816,7 @@ function registerConversationRoutes(router, options) {
     ctx.body = {
       ok: true,
       conversation: await conversations.createConversation({
-        title: readString12(body, "title") ?? void 0,
+        title: readString13(body, "title") ?? void 0,
         profileName: readOptionalProfileName(body)
       })
     };
@@ -12672,7 +12887,7 @@ function registerConversationRoutes(router, options) {
   router.post("/api/v1/conversations/:conversationId/messages", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const content = readString12(body, "content") ?? readString12(body, "text") ?? readString12(body, "input") ?? "";
+    const content = readString13(body, "content") ?? readString13(body, "text") ?? readString13(body, "input") ?? "";
     const attachments = readMessageAttachments(body.attachments ?? body.blobs);
     if (!content && attachments.length === 0) {
       throw new LinkHttpError(
@@ -12688,7 +12903,7 @@ function registerConversationRoutes(router, options) {
         conversationId: ctx.params.conversationId,
         content,
         attachments,
-        clientMessageId: readString12(body, "client_message_id") ?? readString12(body, "clientMessageId") ?? void 0,
+        clientMessageId: readString13(body, "client_message_id") ?? readString13(body, "clientMessageId") ?? void 0,
         idempotencyKey: readHeader(ctx, "idempotency-key") ?? void 0,
         profileName: readOptionalProfileName(body)
       })
@@ -12697,7 +12912,7 @@ function registerConversationRoutes(router, options) {
   router.patch("/api/v1/conversations/:conversationId/model", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString12(body, "model_id") ?? readString12(body, "modelId") ?? readString12(body, "model");
+    const modelId = readString13(body, "model_id") ?? readString13(body, "modelId") ?? readString13(body, "model");
     if (!modelId) {
       throw new LinkHttpError(400, "model_id_required", "model_id is required");
     }
@@ -12727,7 +12942,7 @@ function registerConversationRoutes(router, options) {
   router.patch("/api/v1/conversations/:conversationId/title", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const title = readString12(body, "title") ?? readString12(body, "name") ?? readString12(body, "display_name");
+    const title = readString13(body, "title") ?? readString13(body, "name") ?? readString13(body, "display_name");
     if (!title) {
       throw new LinkHttpError(400, "title_required", "title is required");
     }
@@ -12791,7 +13006,7 @@ function registerConversationRoutes(router, options) {
     async (ctx) => {
       await authenticateRequest(ctx, paths);
       const body = await readJsonBody(ctx.req);
-      const scope = readString12(body, "scope") ?? "always";
+      const scope = readString13(body, "scope") ?? "always";
       ctx.body = {
         ok: true,
         ...await conversations.resolveApproval({
@@ -12851,7 +13066,7 @@ function registerConversationRoutes(router, options) {
       ctx.set("cache-control", "private, max-age=86400");
       ctx.set(
         "content-disposition",
-        `inline; filename="${blob.filename.replaceAll('"', "")}"`
+        contentDispositionInline(blob.filename)
       );
       ctx.body = blob.bytes;
     }
@@ -12870,6 +13085,34 @@ function registerConversationRoutes(router, options) {
     }
   );
 }
+function contentDispositionInline(filename) {
+  const fallback = asciiFilenameFallback(filename);
+  return `inline; filename="${fallback}"; filename*=UTF-8''${encodeRfc5987Value(filename)}`;
+}
+function asciiFilenameFallback(filename) {
+  const basename = filename.trim().split(/[\\/]/u).pop()?.trim() ?? "";
+  const extension = safeAsciiExtension(basename);
+  const stem = extension ? basename.slice(0, -extension.length) : basename;
+  const asciiStem = stem.replace(/[^\x20-\x7E]/gu, "_").replace(/["\\]/gu, "_").replace(/[^A-Za-z0-9._ -]/gu, "_").replace(/_+/gu, "_").trim();
+  if (/[A-Za-z0-9]/u.test(asciiStem)) {
+    return `${asciiStem.slice(0, 120)}${extension}`;
+  }
+  return `attachment${extension}`;
+}
+function safeAsciiExtension(filename) {
+  const dotIndex = filename.lastIndexOf(".");
+  if (dotIndex < 0 || dotIndex === filename.length - 1) {
+    return "";
+  }
+  const extension = filename.slice(dotIndex).toLowerCase();
+  return /^\.[a-z0-9]{1,12}$/u.test(extension) ? extension : "";
+}
+function encodeRfc5987Value(value) {
+  return encodeURIComponent(value).replace(
+    /['()*]/gu,
+    (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`
+  );
+}
 function isConversationNotificationEvent(event) {
   const type = event.type.toLowerCase();
   return type === "conversation.created" || type === "conversation.updated" || type === "conversation.deleted" || type === "message.created" || type === "message.completed" || type === "message.failed" || type === "run.completed" || type === "run.failed" || type === "run.cancelled" || type === "run.canceled" || type === "approval.requested" || readPayloadBool(event.payload, "requires_action") || readPayloadBool(event.payload, "requires_user_action") || readPayloadBool(event.payload, "requires_approval");
@@ -12923,7 +13166,7 @@ function createHttpErrorMiddleware(logger) {
 }
 
 // src/hermes/profiles.ts
-import { mkdir as mkdir10, readdir as readdir6, readFile as readFile11, rename as rename4, rm as rm6, stat as stat10 } from "fs/promises";
+import { mkdir as mkdir10, readdir as readdir7, readFile as readFile11, rename as rename4, rm as rm6, stat as stat10 } from "fs/promises";
 import os4 from "os";
 import path16 from "path";
 import YAML2 from "yaml";
@@ -12933,9 +13176,9 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
   const profiles = /* @__PURE__ */ new Map();
   profiles.set(DEFAULT_PROFILE, await profileInfo(DEFAULT_PROFILE, paths));
   const profilesDir = path16.join(os4.homedir(), ".hermes", "profiles");
-  const entries = await readdir6(profilesDir, { withFileTypes: true }).catch(
+  const entries = await readdir7(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError11(error, "ENOENT")) {
+      if (isNodeError12(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -12960,7 +13203,7 @@ async function getHermesProfileStatus(name, paths = resolveRuntimePaths()) {
   assertProfileName(name);
   const profile = await profileInfo(name, paths);
   const exists = await stat10(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+    if (isNodeError12(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -13001,7 +13244,7 @@ async function deleteHermesProfile(name, paths = resolveRuntimePaths()) {
   assertMutableProfile(name);
   const profile = await profileInfo(name, paths);
   const exists = await stat10(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+    if (isNodeError12(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -13069,13 +13312,13 @@ function assertProfileName(name) {
     throw new LinkHttpError(400, "invalid_profile_name", "invalid profile name");
   }
 }
-function isNodeError11(error, code) {
+function isNodeError12(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 async function countSkills(root) {
-  const entries = await readdir6(root, { withFileTypes: true }).catch(
+  const entries = await readdir7(root, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError11(error, "ENOENT")) {
+      if (isNodeError12(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -13102,7 +13345,7 @@ async function countConfiguredTools(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+    if (isNodeError12(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -13110,14 +13353,14 @@ async function countConfiguredTools(profileName) {
   if (!raw.trim()) {
     return 0;
   }
-  const config = toRecord10(YAML2.parse(raw));
+  const config = toRecord11(YAML2.parse(raw));
   const toolsets = /* @__PURE__ */ new Set();
   collectToolsetValues(config.toolsets, toolsets);
-  const platformToolsets = toRecord10(config.platform_toolsets);
+  const platformToolsets = toRecord11(config.platform_toolsets);
   for (const value of Object.values(platformToolsets)) {
     collectToolsetValues(value, toolsets);
   }
-  const mcpServers = Object.keys(toRecord10(config.mcp_servers)).length;
+  const mcpServers = Object.keys(toRecord11(config.mcp_servers)).length;
   return toolsets.size + mcpServers;
 }
 function collectToolsetValues(value, target) {
@@ -13131,7 +13374,7 @@ function collectToolsetValues(value, target) {
     target.add(value.trim());
   }
 }
-function toRecord10(value) {
+function toRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 
@@ -13328,7 +13571,7 @@ function toHermesCronJobInput(input) {
   };
 }
 async function bindAndDecorateCronJobForHermesLink(input) {
-  const jobId = readString12(input.job, "id") ?? readString12(input.job, "job_id");
+  const jobId = readString13(input.job, "id") ?? readString13(input.job, "job_id");
   if (!jobId) {
     return input.job;
   }
@@ -13345,9 +13588,9 @@ async function bindAndDecorateCronJobForHermesLink(input) {
 }
 function readCronJobCreateInput(body) {
   const input = {};
-  const name = readString12(body, "name") ?? readString12(body, "title");
-  const prompt = readString12(body, "prompt") ?? readString12(body, "description") ?? readString12(body, "task");
-  const schedule = readString12(body, "schedule");
+  const name = readString13(body, "name") ?? readString13(body, "title");
+  const prompt = readString13(body, "prompt") ?? readString13(body, "description") ?? readString13(body, "task");
+  const schedule = readString13(body, "schedule");
   if (!name) {
     throw new LinkHttpError(400, "cron_job_name_required", "name is required");
   }
@@ -13368,7 +13611,7 @@ function readCronJobCreateInput(body) {
   input.name = name;
   input.prompt = prompt;
   input.schedule = schedule;
-  input.deliver = readString12(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
+  input.deliver = readString13(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
   const skills = readOptionalCronSkills(body);
   if (skills) {
     input.skills = skills;
@@ -13596,7 +13839,7 @@ function registerModelConfigRoutes(router, options) {
   router.delete("/api/v1/model-configs", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString12(body, "model_id") ?? readString12(body, "modelId");
+    const modelId = readString13(body, "model_id") ?? readString13(body, "modelId");
     if (!modelId) {
       throw new LinkHttpError(400, "model_id_required", "model_id is required");
     }
@@ -13651,7 +13894,7 @@ function registerModelConfigRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     await getHermesProfileStatus(ctx.params.name, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString12(body, "model_id") ?? readString12(body, "modelId");
+    const modelId = readString13(body, "model_id") ?? readString13(body, "modelId");
     if (!modelId) {
       throw new LinkHttpError(400, "model_id_required", "model_id is required");
     }
@@ -13668,9 +13911,9 @@ function registerModelConfigRoutes(router, options) {
   });
 }
 function readModelConfigInput(body) {
-  const id = readString12(body, "id") ?? readString12(body, "model_id") ?? readString12(body, "modelId");
-  const provider = readString12(body, "provider") ?? readString12(body, "provider_key") ?? readString12(body, "providerKey");
-  const baseUrl = readString12(body, "base_url") ?? readString12(body, "baseUrl");
+  const id = readString13(body, "id") ?? readString13(body, "model_id") ?? readString13(body, "modelId");
+  const provider = readString13(body, "provider") ?? readString13(body, "provider_key") ?? readString13(body, "providerKey");
+  const baseUrl = readString13(body, "base_url") ?? readString13(body, "baseUrl");
   if (!id || !provider || !baseUrl) {
     throw new LinkHttpError(
       400,
@@ -13680,24 +13923,24 @@ function readModelConfigInput(body) {
   }
   return {
     id,
-    originalModelId: readString12(body, "original_model_id") ?? readString12(body, "originalModelId") ?? readString12(body, "original_id") ?? void 0,
+    originalModelId: readString13(body, "original_model_id") ?? readString13(body, "originalModelId") ?? readString13(body, "original_id") ?? void 0,
     provider,
-    providerName: readString12(body, "provider_name") ?? readString12(body, "providerName") ?? void 0,
+    providerName: readString13(body, "provider_name") ?? readString13(body, "providerName") ?? void 0,
     baseUrl,
-    apiKey: readString12(body, "api_key") ?? readString12(body, "apiKey") ?? void 0,
-    apiMode: readString12(body, "api_mode") ?? readString12(body, "apiMode") ?? void 0,
+    apiKey: readString13(body, "api_key") ?? readString13(body, "apiKey") ?? void 0,
+    apiMode: readString13(body, "api_mode") ?? readString13(body, "apiMode") ?? void 0,
     contextLength: readPositiveInteger2(
       body.context_length ?? body.contextLength
     ),
-    keyEnv: readString12(body, "key_env") ?? readString12(body, "keyEnv") ?? void 0,
+    keyEnv: readString13(body, "key_env") ?? readString13(body, "keyEnv") ?? void 0,
     setDefault: readBoolean(body.set_default ?? body.setDefault),
-    reasoningEffort: readString12(body, "reasoning_effort") ?? readString12(body, "reasoningEffort") ?? void 0
+    reasoningEffort: readString13(body, "reasoning_effort") ?? readString13(body, "reasoningEffort") ?? void 0
   };
 }
 function readModelDefaultsInput(body) {
   return {
-    taskModelId: readString12(body, "task_model_id") ?? readString12(body, "taskModelId") ?? readString12(body, "default_model_id") ?? readString12(body, "defaultModelId") ?? void 0,
-    compressionModelId: readString12(body, "compression_model_id") ?? readString12(body, "compressionModelId") ?? void 0
+    taskModelId: readString13(body, "task_model_id") ?? readString13(body, "taskModelId") ?? readString13(body, "default_model_id") ?? readString13(body, "defaultModelId") ?? void 0,
+    compressionModelId: readString13(body, "compression_model_id") ?? readString13(body, "compressionModelId") ?? void 0
   };
 }
 function shouldReloadGatewayAfterModelConfigChange(body) {
@@ -14178,7 +14421,7 @@ function copyModelConfig(source, target) {
       copied[key] = cloneJson(source[key]);
     }
   }
-  const sourceAuxiliary = toRecord11(source.auxiliary);
+  const sourceAuxiliary = toRecord12(source.auxiliary);
   if (Object.prototype.hasOwnProperty.call(sourceAuxiliary, "compression")) {
     const targetAuxiliary = ensureRecord2(target, "auxiliary");
     targetAuxiliary.compression = cloneJson(sourceAuxiliary.compression);
@@ -14187,12 +14430,12 @@ function copyModelConfig(source, target) {
   return copied;
 }
 function copyToolPermissionsConfig(source, target) {
-  const sourcePlatformToolsets = toRecord11(source.platform_toolsets);
+  const sourcePlatformToolsets = toRecord12(source.platform_toolsets);
   if (Object.prototype.hasOwnProperty.call(sourcePlatformToolsets, "api_server")) {
     const targetPlatformToolsets = ensureRecord2(target, "platform_toolsets");
     targetPlatformToolsets.api_server = cloneJson(sourcePlatformToolsets.api_server);
   }
-  const sourceStt = toRecord11(source.stt);
+  const sourceStt = toRecord12(source.stt);
   if (Object.prototype.hasOwnProperty.call(sourceStt, "enabled")) {
     const targetStt = ensureRecord2(target, "stt");
     targetStt.enabled = cloneJson(sourceStt.enabled);
@@ -14241,7 +14484,7 @@ function collectEnvKeys(value, keys = /* @__PURE__ */ new Set()) {
 async function writeEnvValues(profileName, values) {
   const envPath = path17.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile12(envPath, "utf8").catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+    if (isNodeError13(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -14297,14 +14540,14 @@ function copyProperty(source, target, key) {
 async function readYamlConfig(configPath) {
   const existingRaw = await readFile12(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError12(error, "ENOENT")) {
+      if (isNodeError13(error, "ENOENT")) {
         return null;
       }
       throw error;
     }
   );
   return {
-    config: toRecord11(existingRaw ? YAML3.parse(existingRaw) : {}),
+    config: toRecord12(existingRaw ? YAML3.parse(existingRaw) : {}),
     existingRaw
   };
 }
@@ -14383,7 +14626,7 @@ async function clearProfileCreationLogFiles(paths) {
 }
 async function pathExists(targetPath) {
   return await stat11(targetPath).then(() => true).catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+    if (isNodeError13(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -14415,7 +14658,7 @@ function ensureRecord2(target, key) {
   target[key] = next;
   return next;
 }
-function toRecord11(value) {
+function toRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 function cloneJson(value) {
@@ -14430,7 +14673,7 @@ function formatEnvValue2(value) {
 function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError12(error, code) {
+function isNodeError13(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -14515,16 +14758,16 @@ function readProfilePermissionsInput(body) {
   const approvals = readOptionalObject(body, "approvals");
   if (approvals) {
     input.approvals = {
-      mode: readString12(approvals, "mode") ?? readString12(approvals, "approval_mode") ?? readString12(approvals, "approvalMode") ?? void 0,
+      mode: readString13(approvals, "mode") ?? readString13(approvals, "approval_mode") ?? readString13(approvals, "approvalMode") ?? void 0,
       timeout: readPositiveInteger2(approvals.timeout),
-      cronMode: readString12(approvals, "cron_mode") ?? readString12(approvals, "cronMode") ?? void 0
+      cronMode: readString13(approvals, "cron_mode") ?? readString13(approvals, "cronMode") ?? void 0
     };
   }
   const terminal = readOptionalObject(body, "terminal");
   if (terminal) {
     input.terminal = {
-      backend: readString12(terminal, "backend") ?? void 0,
-      cwd: readString12(terminal, "cwd") ?? void 0,
+      backend: readString13(terminal, "backend") ?? void 0,
+      cwd: readString13(terminal, "cwd") ?? void 0,
       containerCpu: readPositiveInteger2(
         terminal.container_cpu ?? terminal.containerCpu
       ),
@@ -14641,7 +14884,7 @@ import {
   access as access3,
   copyFile as copyFile3,
   mkdir as mkdir12,
-  readdir as readdir7,
+  readdir as readdir8,
   readFile as readFile13,
   rename as rename6,
   stat as stat12,
@@ -14650,8 +14893,8 @@ import {
 import path18 from "path";
 import YAML4 from "yaml";
 var ENTRY_DELIMITER = "\n\xA7\n";
-var MEMORY_LIMIT = 2200;
-var USER_LIMIT = 1375;
+var DEFAULT_MEMORY_LIMIT = 2200;
+var DEFAULT_USER_LIMIT = 1375;
 var CUSTOM_PROVIDER_CARD_ID = "__custom__";
 var CUSTOM_PROVIDER_REGISTRY_FILE = "memory-providers.json";
 var HINDSIGHT_DEFAULT_API_URL = "https://api.hindsight.vectorize.io";
@@ -14734,9 +14977,10 @@ var HermesMemoryError = class extends Error {
 };
 async function readHermesProfileMemory(profileName = "default") {
   const memoryDir = resolveMemoryDir(profileName);
+  const limits = await readMemoryLimits(profileName);
   const [memoryStore, userStore, settings] = await Promise.all([
-    readMemoryStore(profileName, "memory"),
-    readMemoryStore(profileName, "user"),
+    readMemoryStore(profileName, "memory", limits),
+    readMemoryStore(profileName, "user", limits),
     readMemorySettings(profileName)
   ]);
   return {
@@ -14754,9 +14998,7 @@ async function addHermesMemoryEntry(profileName, target, content) {
     if (entries.includes(normalized)) {
       return entries;
     }
-    const next = [...entries, normalized];
-    assertWithinLimit(target, next);
-    return next;
+    return [...entries, normalized];
   });
   return readHermesProfileMemory(profileName);
 }
@@ -14767,7 +15009,6 @@ async function replaceHermesMemoryEntry(profileName, target, oldText, content) {
     const index = findSingleMatch(entries, needle);
     const next = [...entries];
     next[index] = normalized;
-    assertWithinLimit(target, next);
     return next;
   });
   return readHermesProfileMemory(profileName);
@@ -14919,7 +15160,7 @@ async function patchCustomProviderConfig(profileName, provider, patch) {
       "\u81EA\u5B9A\u4E49 memory provider \u914D\u7F6E\u5FC5\u987B\u662F\u6709\u6548\u7684 JSON object\u3002"
     );
   }
-  const config = toRecord12(parsed);
+  const config = toRecord13(parsed);
   if (Object.keys(config).length === 0 && parsed !== null) {
     throw new HermesMemoryError(
       "memory_provider_config_invalid",
@@ -15013,15 +15254,15 @@ async function patchHermesMemoryProvider(profileName, provider) {
   const configPath = resolveHermesConfigPath(profileName);
   const existingRaw = await readFile13(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return null;
       }
       throw error;
     }
   );
   const document = existingRaw ? YAML4.parseDocument(existingRaw) : new YAML4.Document({});
-  const config = toRecord12(document.toJSON());
-  const memory = toRecord12(config.memory);
+  const config = toRecord13(document.toJSON());
+  const memory = toRecord13(config.memory);
   memory.provider = provider === "built-in" ? "" : provider;
   config.memory = memory;
   const backupPath = existingRaw ? `${configPath}.bak.${Date.now()}` : null;
@@ -15040,17 +15281,17 @@ async function patchHermesMemoryProvider(profileName, provider) {
 function resolveMemoryDir(profileName) {
   return path18.join(resolveHermesProfileDir(profileName), "memories");
 }
-async function readMemoryStore(profileName, target) {
+async function readMemoryStore(profileName, target, limits) {
   const filePath = memoryFilePath(profileName, target);
   const entries = await readMemoryEntries(filePath);
   const fileStat = await stat12(filePath).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return null;
     }
     throw error;
   });
   const chars = entries.length ? entries.join(ENTRY_DELIMITER).length : 0;
-  const limit = target === "user" ? USER_LIMIT : MEMORY_LIMIT;
+  const limit = memoryLimitForTarget(limits, target);
   return {
     target,
     label: target === "user" ? "\u5173\u4E8E\u7528\u6237" : "Agent \u7B14\u8BB0",
@@ -15073,7 +15314,7 @@ async function readMemoryStore(profileName, target) {
 }
 async function readMemoryEntries(filePath) {
   const raw = await readFile13(filePath, "utf8").catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -15091,7 +15332,7 @@ async function mutateMemoryEntries(profileName, target, mutate) {
   await writeMemoryEntries(profileName, target, mutate([...new Set(current)]));
 }
 async function writeMemoryEntries(profileName, target, entries) {
-  assertWithinLimit(target, entries);
+  assertWithinLimit(target, entries, await readMemoryLimits(profileName));
   const filePath = memoryFilePath(profileName, target);
   const dir = path18.dirname(filePath);
   await mkdir12(dir, { recursive: true, mode: 448 });
@@ -15244,7 +15485,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "honcho") ?? ""
     );
-    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString13(config2.apiKey)) || isConfiguredEnvValue(readString13(config2.api_key)) || isConfiguredEnvValue(readString13(config2.baseUrl)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString14(config2.apiKey)) || isConfiguredEnvValue(readString14(config2.api_key)) || isConfiguredEnvValue(readString14(config2.baseUrl)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Honcho \u9700\u8981\u5148\u914D\u7F6E HONCHO_API_KEY\uFF0C\u6216\u5728 honcho.json \u914D\u7F6E self-hosted baseUrl\u3002"
     };
@@ -15253,7 +15494,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "mem0") ?? ""
     );
-    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString13(config2.api_key)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString14(config2.api_key)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Mem0 \u9700\u8981\u5148\u5728\u672C\u673A Hermes .env \u914D\u7F6E MEM0_API_KEY\u3002"
     };
@@ -15295,7 +15536,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     memoryProviderConfigPath(profileName, provider) ?? ""
   );
   const mode = normalizeHindsightMode(config.mode ?? env.HINDSIGHT_MODE);
-  const apiKey = readString13(config.apiKey) ?? readString13(config.api_key) ?? env.HINDSIGHT_API_KEY;
+  const apiKey = readString14(config.apiKey) ?? readString14(config.api_key) ?? env.HINDSIGHT_API_KEY;
   if (mode === "cloud") {
     return isConfiguredEnvValue(apiKey) ? { configured: true, issue: null } : {
       configured: false,
@@ -15303,15 +15544,15 @@ async function readProviderConfigurationStatus(profileName, provider) {
     };
   }
   if (mode === "local_external") {
-    const apiUrl = readString13(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
+    const apiUrl = readString14(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
     return isConfiguredEnvValue(apiUrl) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Hindsight local_external \u9700\u8981\u914D\u7F6E\u53EF\u8BBF\u95EE\u7684 API URL\u3002"
     };
   }
   if (mode === "local_embedded") {
-    const llmProvider = readString13(config.llm_provider) ?? "openai";
-    const llmModel = readString13(config.llm_model);
+    const llmProvider = readString14(config.llm_provider) ?? "openai";
+    const llmModel = readString14(config.llm_model);
     if (!llmModel) {
       return {
         configured: false,
@@ -15319,7 +15560,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (llmProvider === "openai_compatible" && !isConfiguredEnvValue(
-      readString13(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
+      readString14(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
     )) {
       return {
         configured: false,
@@ -15327,7 +15568,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (!["ollama", "lmstudio", "openai_compatible"].includes(llmProvider) && !isConfiguredEnvValue(
-      readString13(config.llmApiKey) ?? readString13(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
+      readString14(config.llmApiKey) ?? readString14(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
     )) {
       return {
         configured: false,
@@ -15467,8 +15708,8 @@ async function readProviderSettings(profileName, provider) {
     const config = await readJsonObject(
       memoryProviderConfigPath(profileName, provider) ?? ""
     );
-    const banks = toRecord12(config.banks);
-    const hermesBank = toRecord12(banks.hermes);
+    const banks = toRecord13(config.banks);
+    const hermesBank = toRecord13(banks.hermes);
     const mode = normalizeHindsightMode(config.mode);
     return [
       selectSetting("mode", "\u8FDE\u63A5\u6A21\u5F0F", mode, [
@@ -15584,7 +15825,7 @@ function customProviderRegistryPath(profileName) {
 async function readCustomProviderRegistry(profileName) {
   const raw = await readFile13(customProviderRegistryPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -15595,18 +15836,18 @@ async function readCustomProviderRegistry(profileName) {
   }
   try {
     const parsed = JSON.parse(raw);
-    const providers = Array.isArray(parsed) ? parsed : Array.isArray(toRecord12(parsed).providers) ? toRecord12(parsed).providers : [];
+    const providers = Array.isArray(parsed) ? parsed : Array.isArray(toRecord13(parsed).providers) ? toRecord13(parsed).providers : [];
     return providers.map((item) => {
       if (typeof item === "string") {
         const id2 = normalizeCustomProviderId(item);
         return { id: id2, label: id2, description: "\u81EA\u5B9A\u4E49 memory provider\u3002" };
       }
-      const record = toRecord12(item);
-      const id = normalizeCustomProviderId(readString13(record.id) ?? "");
+      const record = toRecord13(item);
+      const id = normalizeCustomProviderId(readString14(record.id) ?? "");
       return {
         id,
-        label: readString13(record.label) ?? id,
-        description: readString13(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+        label: readString14(record.label) ?? id,
+        description: readString14(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
       };
     }).filter((item) => item.id);
   } catch {
@@ -15631,9 +15872,9 @@ async function saveCustomProviderRegistryEntry(profileName, provider) {
 }
 async function discoverUserMemoryProviderDescriptors(profileName) {
   const pluginsDir = path18.join(resolveHermesProfileDir(profileName), "plugins");
-  const entries = await readdir7(pluginsDir, { withFileTypes: true }).catch(
+  const entries = await readdir8(pluginsDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -15657,8 +15898,8 @@ async function discoverUserMemoryProviderDescriptors(profileName) {
     const meta = await readPluginMetadata(providerDir);
     descriptors.push({
       id: providerId,
-      label: readString13(meta.name) ?? providerId,
-      description: readString13(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+      label: readString14(meta.name) ?? providerId,
+      description: readString14(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
     });
   }
   return descriptors;
@@ -15674,7 +15915,7 @@ async function isUserMemoryProviderInstalled(profileName, provider) {
 async function isMemoryProviderPluginDir(providerDir) {
   const source = await readFile13(path18.join(providerDir, "__init__.py"), "utf8").catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -15686,13 +15927,13 @@ async function isMemoryProviderPluginDir(providerDir) {
 async function readPluginMetadata(providerDir) {
   const raw = await readFile13(path18.join(providerDir, "plugin.yaml"), "utf8").catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return "";
       }
       throw error;
     }
   );
-  return raw ? toRecord12(YAML4.parse(raw)) : {};
+  return raw ? toRecord13(YAML4.parse(raw)) : {};
 }
 async function resolveByteRoverCli() {
   const candidates = [
@@ -15712,30 +15953,30 @@ async function resolveByteRoverCli() {
 async function readHolographicProviderConfig(profileName) {
   const raw = await readFile13(resolveHermesConfigPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return "";
       }
       throw error;
     }
   );
-  const config = raw ? toRecord12(YAML4.parse(raw)) : {};
-  const plugins = toRecord12(config.plugins);
-  return toRecord12(plugins["hermes-memory-store"]);
+  const config = raw ? toRecord13(YAML4.parse(raw)) : {};
+  const plugins = toRecord13(config.plugins);
+  return toRecord13(plugins["hermes-memory-store"]);
 }
 async function patchHolographicProviderConfig(profileName, patch) {
   const configPath = resolveHermesConfigPath(profileName);
   const existingRaw = await readFile13(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return null;
       }
       throw error;
     }
   );
   const document = existingRaw ? YAML4.parseDocument(existingRaw) : new YAML4.Document({});
-  const config = toRecord12(document.toJSON());
-  const plugins = toRecord12(config.plugins);
-  const memoryStore = toRecord12(plugins["hermes-memory-store"]);
+  const config = toRecord13(document.toJSON());
+  const plugins = toRecord13(config.plugins);
+  const memoryStore = toRecord13(plugins["hermes-memory-store"]);
   for (const [key, value] of Object.entries(patch)) {
     if (value !== void 0) {
       memoryStore[key] = value;
@@ -15764,7 +16005,7 @@ async function patchHermesMemoryEnv(profileName, patch) {
   }
   const envPath = path18.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile13(envPath, "utf8").catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -15813,7 +16054,7 @@ function isMemoryEnvKeyWritable(key) {
   ].includes(key);
 }
 function normalizeHindsightMode(value) {
-  const mode = readString13(value) ?? "cloud";
+  const mode = readString14(value) ?? "cloud";
   return mode === "local" ? "local_embedded" : mode;
 }
 async function readActiveMemoryProvider(profileName) {
@@ -15821,14 +16062,14 @@ async function readActiveMemoryProvider(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return "";
     }
     throw error;
   });
-  const config = raw ? toRecord12(YAML4.parse(raw)) : {};
-  const memory = toRecord12(config.memory);
-  const provider = readString13(memory.provider);
+  const config = raw ? toRecord13(YAML4.parse(raw)) : {};
+  const memory = toRecord13(config.memory);
+  const provider = readString14(memory.provider);
   if (!provider || provider === "built-in" || provider === "builtin" || provider === "built_in") {
     return null;
   }
@@ -15855,13 +16096,13 @@ async function patchJsonProviderConfig(profileName, relativePath, patch) {
 }
 async function readJsonObject(filePath) {
   const raw = await readFile13(filePath, "utf8").catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return "{}";
     }
     throw error;
   });
   try {
-    return toRecord12(JSON.parse(raw || "{}"));
+    return toRecord13(JSON.parse(raw || "{}"));
   } catch {
     throw new HermesMemoryError(
       "memory_provider_config_invalid",
@@ -15886,7 +16127,7 @@ function stringSetting(key, label, value, editable = true) {
   return {
     key,
     label,
-    value: readString13(value) ?? "",
+    value: readString14(value) ?? "",
     editable,
     kind: "string"
   };
@@ -15901,11 +16142,31 @@ function textSetting(key, label, value, editable = true) {
   };
 }
 function selectSetting(key, label, value, options, editable = true) {
-  const stringValue = readString13(value) ?? options[0] ?? null;
+  const stringValue = readString14(value) ?? options[0] ?? null;
   return { key, label, value: stringValue, editable, kind: "select", options };
 }
-function assertWithinLimit(target, entries) {
-  const limit = target === "user" ? USER_LIMIT : MEMORY_LIMIT;
+async function readMemoryLimits(profileName) {
+  const raw = await readFile13(
+    resolveHermesConfigPath(profileName),
+    "utf8"
+  ).catch((error) => {
+    if (isNodeError14(error, "ENOENT")) {
+      return "";
+    }
+    throw error;
+  });
+  const config = raw ? toRecord13(YAML4.parse(raw)) : {};
+  const memory = toRecord13(config.memory);
+  return {
+    memory: readPositiveInteger3(memory.memory_char_limit) ?? DEFAULT_MEMORY_LIMIT,
+    user: readPositiveInteger3(memory.user_char_limit) ?? DEFAULT_USER_LIMIT
+  };
+}
+function memoryLimitForTarget(limits, target) {
+  return target === "user" ? limits.user : limits.memory;
+}
+function assertWithinLimit(target, entries, limits) {
+  const limit = memoryLimitForTarget(limits, target);
   const chars = entries.length ? entries.join(ENTRY_DELIMITER).length : 0;
   if (chars > limit) {
     throw new HermesMemoryError(
@@ -15951,12 +16212,16 @@ function hashString(value) {
   }
   return hash.toString(16);
 }
-function toRecord12(value) {
+function toRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
-function readString13(value) {
+function readString14(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
+function readPositiveInteger3(value) {
+  const numberValue = typeof value === "number" ? value : typeof value === "string" ? Number(value.trim()) : NaN;
+  return Number.isFinite(numberValue) && numberValue > 0 ? Math.floor(numberValue) : void 0;
+}
 function readBoolean2(value) {
   if (typeof value === "boolean") {
     return value;
@@ -15978,7 +16243,7 @@ function formatEnvValue3(value) {
 function escapeRegExp3(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError13(error, code) {
+function isNodeError14(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
 }
 
@@ -16092,7 +16357,7 @@ function registerProfileMemoryRoutes(router, options) {
   );
 }
 function readMemoryTarget(body) {
-  const raw = readString12(body, "target");
+  const raw = readString13(body, "target");
   if (raw === "memory" || raw === "user") {
     return raw;
   }
@@ -16103,7 +16368,7 @@ function readMemoryTarget(body) {
   );
 }
 function readMemoryResetTarget(body) {
-  const raw = readString12(body, "target") ?? "all";
+  const raw = readString13(body, "target") ?? "all";
   if (raw === "all" || raw === "memory" || raw === "user") {
     return raw;
   }
@@ -16114,7 +16379,7 @@ function readMemoryResetTarget(body) {
   );
 }
 function readRequiredMemoryContent(body) {
-  const content = readString12(body, "content") ?? readString12(body, "text");
+  const content = readString13(body, "content") ?? readString13(body, "text");
   if (!content) {
     throw new LinkHttpError(
       400,
@@ -16125,7 +16390,7 @@ function readRequiredMemoryContent(body) {
   return content;
 }
 function readRequiredMemoryMatch(body) {
-  const oldText = readString12(body, "old_text") ?? readString12(body, "oldText") ?? readString12(body, "match");
+  const oldText = readString13(body, "old_text") ?? readString13(body, "oldText") ?? readString13(body, "match");
   if (!oldText) {
     throw new LinkHttpError(
       400,
@@ -16136,7 +16401,7 @@ function readRequiredMemoryMatch(body) {
   return oldText;
 }
 function readRequiredMemoryProvider(body) {
-  const provider = readString12(body, "provider") ?? readString12(body, "provider_id") ?? readString12(body, "providerId");
+  const provider = readString13(body, "provider") ?? readString13(body, "provider_id") ?? readString13(body, "providerId");
   if (!provider) {
     throw new LinkHttpError(
       400,
@@ -16148,7 +16413,7 @@ function readRequiredMemoryProvider(body) {
 }
 function readMemorySettingsPatch(body) {
   const input = {};
-  const mode = readString12(body, "mode");
+  const mode = readString13(body, "mode");
   if (mode) {
     input.mode = mode;
   }
@@ -16160,7 +16425,7 @@ function readMemorySettingsPatch(body) {
   if (bankId !== void 0) {
     input.bankId = bankId;
   }
-  const llmProvider = readString12(body, "llm_provider") ?? readString12(body, "llmProvider");
+  const llmProvider = readString13(body, "llm_provider") ?? readString13(body, "llmProvider");
   if (llmProvider) {
     input.llmProvider = llmProvider;
   }
@@ -16188,11 +16453,11 @@ function readMemorySettingsPatch(body) {
   if (autoRetain !== void 0) {
     input.autoRetain = autoRetain;
   }
-  const memoryMode = readString12(body, "memory_mode") ?? readString12(body, "memoryMode");
+  const memoryMode = readString13(body, "memory_mode") ?? readString13(body, "memoryMode");
   if (memoryMode) {
     input.memoryMode = memoryMode;
   }
-  const recallBudget = readString12(body, "recall_budget") ?? readString12(body, "recallBudget");
+  const recallBudget = readString13(body, "recall_budget") ?? readString13(body, "recallBudget");
   if (recallBudget) {
     input.recallBudget = recallBudget;
   }
@@ -16208,11 +16473,11 @@ function readMemorySettingsPatch(body) {
   if (profileFrequency !== void 0) {
     input.profileFrequency = profileFrequency;
   }
-  const captureMode = readString12(body, "capture_mode") ?? readString12(body, "captureMode");
+  const captureMode = readString13(body, "capture_mode") ?? readString13(body, "captureMode");
   if (captureMode) {
     input.captureMode = captureMode;
   }
-  const searchMode = readString12(body, "search_mode") ?? readString12(body, "searchMode");
+  const searchMode = readString13(body, "search_mode") ?? readString13(body, "searchMode");
   if (searchMode) {
     input.searchMode = searchMode;
   }
@@ -16246,11 +16511,11 @@ function readMemorySettingsPatch(body) {
   if (aiPeer !== void 0) {
     input.aiPeer = aiPeer;
   }
-  const recallMode = readString12(body, "recall_mode") ?? readString12(body, "recallMode");
+  const recallMode = readString13(body, "recall_mode") ?? readString13(body, "recallMode");
   if (recallMode) {
     input.recallMode = recallMode;
   }
-  const writeFrequency = readString12(body, "write_frequency") ?? readString12(body, "writeFrequency");
+  const writeFrequency = readString13(body, "write_frequency") ?? readString13(body, "writeFrequency");
   if (writeFrequency) {
     input.writeFrequency = writeFrequency;
   }
@@ -16258,7 +16523,7 @@ function readMemorySettingsPatch(body) {
   if (saveMessages !== void 0) {
     input.saveMessages = saveMessages;
   }
-  const sessionStrategy = readString12(body, "session_strategy") ?? readString12(body, "sessionStrategy");
+  const sessionStrategy = readString13(body, "session_strategy") ?? readString13(body, "sessionStrategy");
   if (sessionStrategy) {
     input.sessionStrategy = sessionStrategy;
   }
@@ -16390,7 +16655,7 @@ import {
   copyFile as copyFile4,
   mkdir as mkdir13,
   readFile as readFile14,
-  readdir as readdir8,
+  readdir as readdir9,
   rename as rename7,
   writeFile as writeFile6
 } from "fs/promises";
@@ -16485,9 +16750,9 @@ async function findSkillFiles(root) {
   return results.sort((left, right) => left.localeCompare(right));
 }
 async function collectSkillFiles(directory, results) {
-  const entries = await readdir8(directory, { withFileTypes: true }).catch(
+  const entries = await readdir9(directory, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -16512,7 +16777,7 @@ async function collectSkillFiles(directory, results) {
 async function readSkillMetadata(input) {
   const raw = await readFile14(input.skillFile, "utf8").catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT") || isNodeError14(error, "EACCES")) {
+      if (isNodeError15(error, "ENOENT") || isNodeError15(error, "EACCES")) {
         return null;
       }
       throw error;
@@ -16524,13 +16789,13 @@ async function readSkillMetadata(input) {
   const skillDir = path19.dirname(input.skillFile);
   const { frontmatter, body } = parseSkillDocument(raw.slice(0, 4e3));
   const name = normalizeSkillName(
-    readString14(frontmatter.name) ?? path19.basename(skillDir)
+    readString15(frontmatter.name) ?? path19.basename(skillDir)
   );
   if (!name) {
     return null;
   }
   const description = normalizeDescription(
-    readString14(frontmatter.description) ?? firstBodyDescription(body)
+    readString15(frontmatter.description) ?? firstBodyDescription(body)
   );
   const provenance = input.provenance.get(name) ?? {
     source: "local",
@@ -16556,7 +16821,7 @@ function parseSkillDocument(raw) {
   }
   try {
     return {
-      frontmatter: toRecord13(YAML5.parse(match[1] ?? "")),
+      frontmatter: toRecord14(YAML5.parse(match[1] ?? "")),
       body: content.slice(match[0].length)
     };
   } catch {
@@ -16589,7 +16854,7 @@ function normalizeDescription(value) {
 }
 async function readDisabledSkillNames(configPath) {
   const raw = await readFile14(configPath, "utf8").catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+    if (isNodeError15(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -16597,8 +16862,8 @@ async function readDisabledSkillNames(configPath) {
   if (!raw.trim()) {
     return /* @__PURE__ */ new Set();
   }
-  const config = toRecord13(YAML5.parse(raw));
-  const skills = toRecord13(config.skills);
+  const config = toRecord14(YAML5.parse(raw));
+  const skills = toRecord14(config.skills);
   return new Set(readStringList3(skills.disabled));
 }
 async function readSkillProvenance(root) {
@@ -16614,7 +16879,7 @@ async function readSkillProvenance(root) {
 async function readBundledSkillNames(root) {
   const raw = await readFile14(path19.join(root, ".bundled_manifest"), "utf8").catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -16637,7 +16902,7 @@ async function readBundledSkillNames(root) {
 async function readHubInstalledSkills(root) {
   const raw = await readFile14(path19.join(root, ".hub", "lock.json"), "utf8").catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -16648,17 +16913,17 @@ async function readHubInstalledSkills(root) {
   }
   let lock;
   try {
-    lock = toRecord13(JSON.parse(raw));
+    lock = toRecord14(JSON.parse(raw));
   } catch {
     return /* @__PURE__ */ new Map();
   }
-  const installed = toRecord13(lock.installed);
+  const installed = toRecord14(lock.installed);
   const result = /* @__PURE__ */ new Map();
   for (const [name, rawEntry] of Object.entries(installed)) {
-    const entry = toRecord13(rawEntry);
+    const entry = toRecord14(rawEntry);
     result.set(normalizeSkillName(name), {
-      source: readString14(entry.source) ?? "hub",
-      trust: readString14(entry.trust_level) ?? null
+      source: readString15(entry.source) ?? "hub",
+      trust: readString15(entry.trust_level) ?? null
     });
   }
   return result;
@@ -16709,7 +16974,7 @@ function compareCategoryNames(left, right) {
 async function readHermesConfigDocument2(configPath) {
   const existingRaw = await readFile14(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -16718,7 +16983,7 @@ async function readHermesConfigDocument2(configPath) {
   const document = existingRaw ? YAML5.parseDocument(existingRaw) : new YAML5.Document({});
   return {
     document,
-    config: toRecord13(document.toJSON()),
+    config: toRecord14(document.toJSON()),
     existingRaw
   };
 }
@@ -16740,21 +17005,21 @@ function readStringList3(value) {
   }
   return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
 }
-function readString14(value) {
+function readString15(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function toRecord13(value) {
+function toRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 function ensureRecord3(target, key) {
-  const current = toRecord13(target[key]);
+  const current = toRecord14(target[key]);
   if (current === target[key]) {
     return current;
   }
   target[key] = current;
   return current;
 }
-function isNodeError14(error, code) {
+function isNodeError15(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -17057,7 +17322,7 @@ function registerRunRoutes(router, options) {
   router.post("/api/v1/runs", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const input = readString12(body, "input");
+    const input = readString13(body, "input");
     if (!input) {
       throw new LinkHttpError(400, "run_input_required", "input is required");
     }
@@ -17065,11 +17330,11 @@ function registerRunRoutes(router, options) {
     ctx.body = await createHermesRun(
       {
         input,
-        instructions: readString12(body, "instructions") ?? void 0,
+        instructions: readString13(body, "instructions") ?? void 0,
         conversation_history: readConversationHistory(
           body.conversation_history ?? body.conversationHistory
         ),
-        session_id: readString12(body, "session_id") ?? readString12(body, "sessionId") ?? void 0
+        session_id: readString13(body, "session_id") ?? readString13(body, "sessionId") ?? void 0
       },
       { logger, profileName: readOptionalProfileName(body) }
     );
@@ -17462,24 +17727,24 @@ async function readRemoteRelease(options, now) {
   }
 }
 function normalizeServerReleaseSnapshot(payload) {
-  const snapshot = toRecord14(payload);
+  const snapshot = toRecord15(payload);
   const remote = toNullableRecord(snapshot.remote);
   return {
     remote: remote ? normalizeServerRelease(remote) : null,
-    cacheState: readString15(snapshot, "cache_state") ?? readString15(snapshot, "cacheState"),
-    issue: readString15(snapshot, "issue")
+    cacheState: readString16(snapshot, "cache_state") ?? readString16(snapshot, "cacheState"),
+    issue: readString16(snapshot, "issue")
   };
 }
 function normalizeServerRelease(payload) {
-  const tag = readString15(payload, "tag");
-  const name = readString15(payload, "name");
+  const tag = readString16(payload, "tag");
+  const name = readString16(payload, "name");
   return {
-    version: readString15(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
+    version: readString16(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
     tag,
     name,
-    releaseUrl: readString15(payload, "releaseUrl") ?? readString15(payload, "release_url"),
-    publishedAt: readString15(payload, "publishedAt") ?? readString15(payload, "published_at"),
-    fetchedAt: readString15(payload, "fetchedAt") ?? readString15(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
+    releaseUrl: readString16(payload, "releaseUrl") ?? readString16(payload, "release_url"),
+    publishedAt: readString16(payload, "publishedAt") ?? readString16(payload, "published_at"),
+    fetchedAt: readString16(payload, "fetchedAt") ?? readString16(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
   };
 }
 async function readReleaseCache(paths) {
@@ -17551,7 +17816,7 @@ function compareSemver2(left, right) {
   }
   return 0;
 }
-function toRecord14(value) {
+function toRecord15(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 function toNullableRecord(value) {
@@ -17597,7 +17862,7 @@ function isRecentRunningState2(state) {
   const startedAt = Date.parse(state.started_at);
   return Number.isFinite(startedAt) && Date.now() - startedAt < 3e4;
 }
-function readString15(payload, key) {
+function readString16(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -19107,21 +19372,21 @@ async function readRemoteLinkPolicy(options) {
   }
 }
 function normalizeServerSnapshot(payload) {
-  const snapshot = toRecord15(payload);
+  const snapshot = toRecord16(payload);
   const policy = toNullableRecord2(snapshot.policy);
   if (!policy) {
     return {
       remote: null,
-      issue: readString16(snapshot, "issue")
+      issue: readString17(snapshot, "issue")
     };
   }
   const release = toNullableRecord2(snapshot.release);
-  const currentVersion = readString16(policy, "current_version") ?? readString16(policy, "currentVersion");
-  const minSafeVersion = readString16(policy, "min_safe_version") ?? readString16(policy, "minSafeVersion");
+  const currentVersion = readString17(policy, "current_version") ?? readString17(policy, "currentVersion");
+  const minSafeVersion = readString17(policy, "min_safe_version") ?? readString17(policy, "minSafeVersion");
   if (!currentVersion) {
     return {
       remote: null,
-      issue: readString16(snapshot, "issue")
+      issue: readString17(snapshot, "issue")
     };
   }
   return {
@@ -19129,10 +19394,10 @@ function normalizeServerSnapshot(payload) {
       current_version: currentVersion,
       min_safe_version: minSafeVersion,
       target_version: currentVersion,
-      release_url: release ? readString16(release, "release_url") ?? readString16(release, "releaseUrl") : null,
-      published_at: release ? readString16(release, "published_at") ?? readString16(release, "publishedAt") : null
+      release_url: release ? readString17(release, "release_url") ?? readString17(release, "releaseUrl") : null,
+      published_at: release ? readString17(release, "published_at") ?? readString17(release, "publishedAt") : null
     },
-    issue: readString16(snapshot, "issue")
+    issue: readString17(snapshot, "issue")
   };
 }
 async function fetchCurrentLinkReleaseFromServer(options, fetcher) {
@@ -19246,13 +19511,13 @@ function isProcessAlive4(pid) {
     return false;
   }
 }
-function toRecord15(value) {
+function toRecord16(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 function toNullableRecord2(value) {
   return typeof value === "object" && value !== null ? value : null;
 }
-function readString16(payload, key) {
+function readString17(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -19681,8 +19946,8 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/pairing/claim", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const sessionId = readString12(body, "session_id") ?? readString12(body, "sessionId");
-    const claimToken = readString12(body, "claim_token") ?? readString12(body, "claimToken");
+    const sessionId = readString13(body, "session_id") ?? readString13(body, "sessionId");
+    const claimToken = readString13(body, "claim_token") ?? readString13(body, "claimToken");
     if (!sessionId || !claimToken) {
       throw new LinkHttpError(
         400,
@@ -19693,10 +19958,10 @@ function registerSystemRoutes(router, options) {
     const claimed = await claimPairing({
       sessionId,
       claimToken,
-      deviceLabel: readString12(body, "device_label") ?? readString12(body, "deviceLabel") ?? "HermesPilot App",
-      devicePlatform: readString12(body, "device_platform") ?? readString12(body, "devicePlatform") ?? "unknown",
-      deviceModel: readString12(body, "device_model") ?? readString12(body, "deviceModel"),
-      appInstanceId: readString12(body, "app_instance_id") ?? readString12(body, "appInstanceId"),
+      deviceLabel: readString13(body, "device_label") ?? readString13(body, "deviceLabel") ?? "HermesPilot App",
+      devicePlatform: readString13(body, "device_platform") ?? readString13(body, "devicePlatform") ?? "unknown",
+      deviceModel: readString13(body, "device_model") ?? readString13(body, "deviceModel"),
+      appInstanceId: readString13(body, "app_instance_id") ?? readString13(body, "appInstanceId"),
       paths
     });
     ctx.body = claimed;
@@ -19771,9 +20036,9 @@ function registerSystemRoutes(router, options) {
     const body = await readJsonBody(ctx.req);
     const session = await createDeviceSession(
       {
-        label: readString12(body, "device_label") ?? readString12(body, "deviceLabel") ?? "HermesPilot App",
-        platform: readString12(body, "device_platform") ?? readString12(body, "devicePlatform") ?? "unknown",
-        model: readString12(body, "device_model") ?? readString12(body, "deviceModel"),
+        label: readString13(body, "device_label") ?? readString13(body, "deviceLabel") ?? "HermesPilot App",
+        platform: readString13(body, "device_platform") ?? readString13(body, "devicePlatform") ?? "unknown",
+        model: readString13(body, "device_model") ?? readString13(body, "deviceModel"),
         appInstanceId: auth.appInstanceId
       },
       paths
@@ -19802,7 +20067,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/refresh", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString12(body, "refresh_token") ?? readString12(body, "refreshToken");
+    const refreshToken = readString13(body, "refresh_token") ?? readString13(body, "refreshToken");
     if (!refreshToken) {
       throw new LinkHttpError(
         400,
@@ -19813,10 +20078,10 @@ function registerSystemRoutes(router, options) {
     const session = await refreshDeviceSession(
       refreshToken,
       {
-        appInstanceId: readString12(body, "app_instance_id") ?? readString12(body, "appInstanceId"),
-        label: readString12(body, "device_label") ?? readString12(body, "deviceLabel"),
-        platform: readString12(body, "device_platform") ?? readString12(body, "devicePlatform"),
-        model: readString12(body, "device_model") ?? readString12(body, "deviceModel")
+        appInstanceId: readString13(body, "app_instance_id") ?? readString13(body, "appInstanceId"),
+        label: readString13(body, "device_label") ?? readString13(body, "deviceLabel"),
+        platform: readString13(body, "device_platform") ?? readString13(body, "devicePlatform"),
+        model: readString13(body, "device_model") ?? readString13(body, "deviceModel")
       },
       paths
     );
@@ -19835,7 +20100,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/logout", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString12(body, "refresh_token") ?? readString12(body, "refreshToken");
+    const refreshToken = readString13(body, "refresh_token") ?? readString13(body, "refreshToken");
     if (refreshToken) {
       await revokeDeviceRefreshToken(refreshToken, paths);
     }
@@ -20060,7 +20325,7 @@ function registerSystemRoutes(router, options) {
   router.patch("/api/v1/devices/:deviceId", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const label = readString12(body, "label") ?? readString12(body, "device_label");
+    const label = readString13(body, "label") ?? readString13(body, "device_label");
     if (!label) {
       throw new LinkHttpError(
         400,
@@ -20104,7 +20369,7 @@ function isActiveCronJob(job) {
   if (!enabled) {
     return false;
   }
-  const state = readString12(job, "state")?.toLowerCase();
+  const state = readString13(job, "state")?.toLowerCase();
   return !["paused", "disabled", "completed", "deleted"].includes(state ?? "");
 }
 function filterLogsWithinHours(logs, hours, now = Date.now()) {
@@ -20198,7 +20463,7 @@ function registerLinkUpdateRoutes(router, options) {
     ctx.body = await startLinkUpdate({
       paths,
       logger,
-      targetVersion: readString12(body, "target_version") ?? readString12(body, "targetVersion")
+      targetVersion: readString13(body, "target_version") ?? readString13(body, "targetVersion")
     });
   });
   router.get("/api/v1/link/update/events", async (ctx) => {
@@ -20232,7 +20497,7 @@ import QRCode from "qrcode";
 function registerPairingRoutes(router, options) {
   const { paths } = options;
   router.get("/pair", async (ctx) => {
-    const sessionId = readString12(ctx.query, "session_id");
+    const sessionId = readString13(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -20257,7 +20522,7 @@ function registerPairingRoutes(router, options) {
     ctx.body = page;
   });
   router.get("/api/v1/pairing/session", async (ctx) => {
-    const sessionId = readString12(ctx.query, "session_id");
+    const sessionId = readString13(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -20656,6 +20921,37 @@ function formatDate(value) {
   return Number.isNaN(date.getTime()) ? value : date.toLocaleString("zh-CN", { hour12: false });
 }
 
+// src/http/routes/internal.ts
+function registerInternalRoutes(router, options) {
+  router.post("/internal/deliver", async (ctx) => {
+    assertLoopbackRequest(ctx.req);
+    const body = await readJsonBody(ctx.req);
+    const stagingDir = readString13(body, "staging_dir") ?? readString13(body, "stagingDir");
+    if (!stagingDir) {
+      throw new LinkHttpError(
+        400,
+        "delivery_staging_required",
+        "delivery staging directory is required"
+      );
+    }
+    ctx.body = {
+      ok: true,
+      ...await options.conversations.deliverStagedFiles(stagingDir)
+    };
+  });
+}
+function assertLoopbackRequest(request) {
+  const address = request.socket.remoteAddress;
+  if (address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1") {
+    return;
+  }
+  throw new LinkHttpError(
+    403,
+    "internal_route_forbidden",
+    "internal route is only available on loopback"
+  );
+}
+
 // src/http/app.ts
 async function createApp(options = {}) {
   const paths = options.paths ?? resolveRuntimePaths();
@@ -20685,6 +20981,7 @@ async function createApp(options = {}) {
     logger,
     onPairingClaimed: options.onPairingClaimed
   });
+  registerInternalRoutes(router, { conversations });
   registerPairingRoutes(router, { paths });
   registerHermesUpdateRoutes(router, { paths, logger });
   registerLinkUpdateRoutes(router, { paths, logger });
@@ -20714,11 +21011,13 @@ export {
   ensureHermesApiServerConfig,
   LinkHttpError,
   resolveRuntimePaths,
+  createFileLogger,
   getLinkLogFile,
   ensureHermesApiServerAvailable,
   loadConfig,
   saveConfig,
   normalizeLanHost,
+  ConversationService,
   loadIdentity,
   ensureIdentity,
   getIdentityStatus,