@hermespilot/link 0.3.6 → 0.3.8

package/dist/{chunk-773L37RF.js → chunk-RJB5VUT4.js}

@@ -9,8 +9,21 @@ import { randomUUID as randomUUID7 } from "crypto";
 // src/database/link-database.ts
 import { mkdir } from "fs/promises";
 import { randomUUID } from "crypto";
-import { createRequire } from "module";
 import path from "path";
+
+// src/database/sqlite.ts
+import Database from "better-sqlite3";
+function openSqliteDatabase(filePath, options = {}) {
+  return new Database(filePath, {
+    ...options.readonly === void 0 ? {} : {
+      readonly: options.readonly,
+      fileMustExist: options.readonly
+    },
+    ...options.timeout === void 0 ? {} : { timeout: options.timeout }
+  });
+}
+
+// src/database/link-database.ts
 var MIGRATIONS = [
   {
     version: 1,
@@ -136,7 +149,6 @@ var MIGRATIONS = [
     `
   }
 ];
-var nodeRequire = createRequire(import.meta.url);
 async function migrateLinkDatabase(paths) {
   await mkdir(path.dirname(paths.databaseFile), { recursive: true, mode: 448 });
   const db = openDatabase(paths);
@@ -210,6 +222,92 @@ async function upsertConversationStats(paths, record) {
     db.close();
   }
 }
+async function listConversationStatsPage(paths, input) {
+  await migrateLinkDatabase(paths);
+  const rawLimit = Number.isFinite(input.limit) ? Math.trunc(input.limit) : 25;
+  const limit = Math.max(1, Math.min(100, rawLimit));
+  const db = openDatabase(paths);
+  try {
+    const conditions = ["status = ?"];
+    const params = ["active"];
+    if (input.cursor) {
+      conditions.push(`(
+        updated_at < ?
+        OR (updated_at = ? AND conversation_id < ?)
+      )`);
+      params.push(
+        input.cursor.updatedAt,
+        input.cursor.updatedAt,
+        input.cursor.conversationId
+      );
+    }
+    const rows = db.prepare(`
+      SELECT conversation_id, updated_at
+      FROM conversation_stats
+      WHERE ${conditions.join(" AND ")}
+      ORDER BY updated_at DESC, conversation_id DESC
+      LIMIT ?
+    `).all(...params, limit + 1);
+    const records = rows.slice(0, limit).map((row) => ({
+      conversationId: readString(row, "conversation_id") ?? "",
+      updatedAt: readString(row, "updated_at") ?? ""
+    })).filter((row) => row.conversationId && row.updatedAt);
+    return {
+      records,
+      hasMore: rows.length > limit
+    };
+  } finally {
+    db.close();
+  }
+}
+async function searchConversationStatsPage(paths, input) {
+  await migrateLinkDatabase(paths);
+  const rawLimit = Number.isFinite(input.limit) ? Math.trunc(input.limit) : 25;
+  const limit = Math.max(1, Math.min(100, rawLimit));
+  const query = input.query.trim();
+  if (!query) {
+    return listConversationStatsPage(paths, {
+      limit,
+      cursor: input.cursor
+    });
+  }
+  const db = openDatabase(paths);
+  try {
+    const conditions = ["status = ?", "LOWER(title) LIKE ? ESCAPE '\\'"];
+    const params = [
+      "active",
+      `%${escapeSqlLike(query.toLowerCase())}%`
+    ];
+    if (input.cursor) {
+      conditions.push(`(
+        updated_at < ?
+        OR (updated_at = ? AND conversation_id < ?)
+      )`);
+      params.push(
+        input.cursor.updatedAt,
+        input.cursor.updatedAt,
+        input.cursor.conversationId
+      );
+    }
+    const rows = db.prepare(`
+      SELECT conversation_id, updated_at
+      FROM conversation_stats
+      WHERE ${conditions.join(" AND ")}
+      ORDER BY updated_at DESC, conversation_id DESC
+      LIMIT ?
+    `).all(...params, limit + 1);
+    const records = rows.slice(0, limit).map((row) => ({
+      conversationId: readString(row, "conversation_id") ?? "",
+      updatedAt: readString(row, "updated_at") ?? ""
+    })).filter((row) => row.conversationId && row.updatedAt);
+    return {
+      records,
+      hasMore: rows.length > limit
+    };
+  } finally {
+    db.close();
+  }
+}
 async function replaceRunUsageFactsForConversation(paths, conversationId, records) {
   await migrateLinkDatabase(paths);
   const db = openDatabase(paths);
@@ -618,8 +716,7 @@ async function deleteConversationStatsForProfile(paths, input) {
   }
 }
 function openDatabase(paths) {
-  const { DatabaseSync } = nodeRequire("node:sqlite");
-  const db = new DatabaseSync(paths.databaseFile, {
+  const db = openSqliteDatabase(paths.databaseFile, {
     timeout: 5e3
   });
   db.exec(`
@@ -826,6 +923,9 @@ function readString(row, key) {
   const value = row?.[key];
   return typeof value === "string" && value.trim() ? value : void 0;
 }
+function escapeSqlLike(value) {
+  return value.replace(/[\\%_]/gu, (match) => `\\${match}`);
+}
 function statisticsWhereClause(filter) {
   const profileUid = filter.profileUid?.trim();
   const profileName = filter.profileName?.trim();
@@ -999,58 +1099,200 @@ function readProfileAvatarType(row) {
 }
 
 // src/hermes/cron-link-delivery.ts
-import { mkdir as mkdir4, readdir as readdir2, readFile as readFile3, stat } from "fs/promises";
+import { mkdir as mkdir3, readdir as readdir3, readFile as readFile3, stat as stat2 } from "fs/promises";
 import path4 from "path";
 
 // src/storage/atomic-json.ts
-import { mkdir as mkdir2, open, readFile, rename, rm } from "fs/promises";
+import { readFile } from "fs/promises";
+
+// src/storage/atomic-file.ts
 import { randomUUID as randomUUID2 } from "crypto";
+import {
+  chmod,
+  chown,
+  lstat,
+  mkdir as mkdir2,
+  open,
+  readdir,
+  rename,
+  rm,
+  stat
+} from "fs/promises";
 import path2 from "path";
-async function readJsonFile(filePath) {
+async function atomicWriteFilePreservingMetadata(filePath, value, options = {}) {
+  const resolvedPath = path2.resolve(filePath);
+  const directory = path2.dirname(resolvedPath);
+  await ensureDirectoryWithInheritedMetadata(
+    directory,
+    options.directoryMode ?? 448
+  );
+  const existingMetadata = await readExistingFileMetadata(resolvedPath) ?? (options.metadataSourcePath ? await readExistingFileMetadata(path2.resolve(options.metadataSourcePath)) : null);
+  const directoryMetadata = await readPathMetadata(directory);
+  const metadata = {
+    uid: existingMetadata?.uid ?? directoryMetadata.uid,
+    gid: existingMetadata?.gid ?? directoryMetadata.gid,
+    mode: existingMetadata?.mode ?? options.mode ?? 384
+  };
+  const tempPath = path2.join(
+    directory,
+    `.${path2.basename(resolvedPath)}.${process.pid}.${Date.now()}.${randomUUID2()}.tmp`
+  );
   try {
-    const raw = await readFile(filePath, "utf8");
-    return JSON.parse(raw);
+    const handle = await open(tempPath, "wx", metadata.mode);
+    try {
+      if (typeof value === "string") {
+        await handle.writeFile(value, options.encoding ?? "utf8");
+      } else {
+        await handle.writeFile(value);
+      }
+      await handle.sync();
+    } finally {
+      await handle.close();
+    }
+    await applyMetadata(tempPath, metadata);
+    await rename(tempPath, resolvedPath);
   } catch (error) {
+    await rm(tempPath, { force: true });
+    throw error;
+  }
+}
+async function ensureDirectoryWithInheritedMetadata(directory, mode) {
+  const { source, missing } = await findExistingAncestor(directory);
+  await mkdir2(directory, { recursive: true, mode });
+  for (const missingDirectory of missing) {
+    await applyMetadata(missingDirectory, {
+      uid: source.uid,
+      gid: source.gid,
+      mode
+    });
+  }
+}
+async function inheritOwnerRecursively(targetPath, sourcePath) {
+  if (process.platform === "win32") {
+    return;
+  }
+  const source = await readPathMetadata(sourcePath);
+  await applyOwnerRecursively(targetPath, source);
+}
+async function findExistingAncestor(directory) {
+  const missing = [];
+  let current = path2.resolve(directory);
+  while (true) {
+    const currentStat = await stat(current).catch((error) => {
+      if (isNodeError(error, "ENOENT")) {
+        return null;
+      }
+      throw error;
+    });
+    if (currentStat) {
+      if (!currentStat.isDirectory()) {
+        throw new Error(`${current} is not a directory`);
+      }
+      return {
+        source: metadataFromStats(currentStat),
+        missing: missing.reverse()
+      };
+    }
+    missing.push(current);
+    const parent = path2.dirname(current);
+    if (parent === current) {
+      throw new Error(`No existing parent directory for ${directory}`);
+    }
+    current = parent;
+  }
+}
+async function readExistingFileMetadata(filePath) {
+  const fileStat = await stat(filePath).catch((error) => {
     if (isNodeError(error, "ENOENT")) {
       return null;
     }
     throw error;
+  });
+  if (!fileStat) {
+    return null;
+  }
+  if (!fileStat.isFile()) {
+    throw new Error(`${filePath} is not a file`);
   }
+  return metadataFromStats(fileStat);
 }
-async function writeJsonFile(filePath, value, mode = 384) {
-  await mkdir2(path2.dirname(filePath), { recursive: true, mode: 448 });
-  const tmpPath = `${filePath}.${process.pid}.${Date.now()}.${randomUUID2()}.tmp`;
-  const payload = `${JSON.stringify(value, null, 2)}
-`;
-  const handle = await open(tmpPath, "w", mode);
+async function readPathMetadata(filePath) {
+  return metadataFromStats(await stat(filePath));
+}
+async function applyMetadata(filePath, metadata) {
+  await applyOwner(filePath, metadata);
+  await chmod(filePath, metadata.mode);
+}
+async function applyOwnerRecursively(filePath, metadata) {
+  const current = await lstat(filePath);
+  if (current.isSymbolicLink()) {
+    return;
+  }
+  await applyOwner(filePath, metadata);
+  if (!current.isDirectory()) {
+    return;
+  }
+  const entries = await readdir(filePath, { withFileTypes: true });
+  await Promise.all(
+    entries.map(
+      (entry) => applyOwnerRecursively(path2.join(filePath, entry.name), metadata)
+    )
+  );
+}
+async function applyOwner(filePath, metadata) {
+  if (process.platform === "win32") {
+    return;
+  }
+  const currentUid = typeof process.getuid === "function" ? process.getuid() : void 0;
+  const currentGid = typeof process.getgid === "function" ? process.getgid() : void 0;
+  if (metadata.uid === currentUid && metadata.gid === currentGid) {
+    return;
+  }
   try {
-    await handle.writeFile(payload, "utf8");
-    await handle.sync();
-  } finally {
-    await handle.close();
+    await chown(filePath, metadata.uid, metadata.gid);
+  } catch (error) {
+    const current = await stat(filePath);
+    if (current.uid !== metadata.uid || current.gid !== metadata.gid) {
+      throw error;
+    }
   }
+}
+function metadataFromStats(statsValue) {
+  return {
+    uid: statsValue.uid,
+    gid: statsValue.gid,
+    mode: statsValue.mode & 511
+  };
+}
+function isNodeError(error, code) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+
+// src/storage/atomic-json.ts
+async function readJsonFile(filePath) {
   try {
-    await rename(tmpPath, filePath);
+    const raw = await readFile(filePath, "utf8");
+    return JSON.parse(raw);
   } catch (error) {
-    await rm(tmpPath, { force: true });
+    if (isNodeError2(error, "ENOENT")) {
+      return null;
+    }
     throw error;
   }
 }
-function isNodeError(error, code) {
+async function writeJsonFile(filePath, value, mode = 384) {
+  const payload = `${JSON.stringify(value, null, 2)}
+`;
+  await atomicWriteFilePreservingMetadata(filePath, payload, { mode });
+}
+function isNodeError2(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/hermes/config.ts
 import { randomBytes } from "crypto";
 import net from "net";
-import {
-  copyFile,
-  mkdir as mkdir3,
-  readFile as readFile2,
-  readdir,
-  rename as rename2,
-  writeFile
-} from "fs/promises";
+import { readFile as readFile2, readdir as readdir2 } from "fs/promises";
 import os from "os";
 import path3 from "path";
 import YAML from "yaml";
@@ -1274,7 +1516,7 @@ async function readHermesSessionsDir(profileName = "default", configPath = resol
 async function readHermesApiServerConfig(profileName = "default", configPath = resolveHermesConfigPath(profileName)) {
   const existingRaw = await readFile2(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError2(error, "ENOENT")) {
+      if (isNodeError3(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -1299,7 +1541,7 @@ async function readHermesApiServerConfig(profileName = "default", configPath = r
 async function readHermesModelConfig(profileName = "default", configPath = resolveHermesConfigPath(profileName)) {
   const existingRaw = await readFile2(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError2(error, "ENOENT")) {
+      if (isNodeError3(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -1820,7 +2062,7 @@ async function ensureHermesApiServerConfig(profileName = "default", configPath =
 async function ensureHermesApiServerConfigUnlocked(profileName = "default", configPath = resolveHermesConfigPath(profileName)) {
   const existingRaw = await readFile2(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError2(error, "ENOENT")) {
+      if (isNodeError3(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -1886,12 +2128,13 @@ async function ensureHermesApiServerConfigUnlocked(profileName = "default", conf
     };
   }
   const backupPath = existingRaw ? `${configPath}.bak.${Date.now()}` : null;
-  await mkdir3(path3.dirname(configPath), { recursive: true, mode: 448 });
-  if (backupPath) {
-    await copyFile(configPath, backupPath);
+  if (backupPath && existingRaw !== null) {
+    await atomicWriteFilePreservingMetadata(backupPath, existingRaw, {
+      metadataSourcePath: configPath
+    });
   }
   document.contents = document.createNode(config);
-  await writeFile(configPath, document.toString(), { mode: 384 });
+  await atomicWriteFilePreservingMetadata(configPath, document.toString());
   return {
     configPath,
     apiServer: applyEnvOverrides(
@@ -1917,7 +2160,7 @@ async function ensureHermesApiServerConfigUnlocked(profileName = "default", conf
 async function readHermesConfigDocument(configPath) {
   const existingRaw = await readFile2(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError2(error, "ENOENT")) {
+      if (isNodeError3(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -1932,14 +2175,16 @@ async function readHermesConfigDocument(configPath) {
 }
 async function writeHermesConfigDocument(input) {
   const backupPath = input.existingRaw ? `${input.configPath}.bak.${Date.now()}` : null;
-  await mkdir3(path3.dirname(input.configPath), { recursive: true, mode: 448 });
   if (backupPath) {
-    await copyFile(input.configPath, backupPath);
+    await atomicWriteFilePreservingMetadata(backupPath, input.existingRaw, {
+      metadataSourcePath: input.configPath
+    });
   }
   input.document.contents = input.document.createNode(input.config);
-  const tempPath = `${input.configPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile(tempPath, input.document.toString(), { mode: 384 });
-  await rename2(tempPath, input.configPath);
+  await atomicWriteFilePreservingMetadata(
+    input.configPath,
+    input.document.toString()
+  );
   return backupPath;
 }
 function readManagedModelConfigs(config, env, defaultModel, defaultReasoningEffort) {
@@ -3261,9 +3506,9 @@ async function readConfiguredApiServerPorts(excludedProfileName) {
     resolveDefaultHermesRoot(resolveHermesProfileDir("default")),
     "profiles"
   );
-  const entries = await readdir(profilesRoot, { withFileTypes: true }).catch(
+  const entries = await readdir2(profilesRoot, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError2(error, "ENOENT")) {
+      if (isNodeError3(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -3285,7 +3530,7 @@ async function addConfiguredApiServerPort(ports, profileName, excludedProfileNam
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError2(error, "ENOENT")) {
+    if (isNodeError3(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -3358,7 +3603,7 @@ async function readHermesApiServerEnvOverrides(profileName) {
 async function readHermesEnvFile(profileName) {
   const envPath = path3.join(resolveHermesProfileDir(profileName), ".env");
   const raw = await readFile2(envPath, "utf8").catch((error) => {
-    if (isNodeError2(error, "ENOENT")) {
+    if (isNodeError3(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -3383,7 +3628,7 @@ async function writeHermesEnvValue(profileName, key, value) {
   const envPath = path3.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile2(envPath, "utf8").catch(
     (error) => {
-      if (isNodeError2(error, "ENOENT")) {
+      if (isNodeError3(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -3406,13 +3651,14 @@ async function writeHermesEnvValue(profileName, key, value) {
     nextLines.push(`${key}=${formatEnvValue(value)}`);
   }
   const nextRaw = nextLines.join("\n").replace(/\n*$/u, "\n");
-  await mkdir3(path3.dirname(envPath), { recursive: true, mode: 448 });
   if (existingRaw) {
-    await copyFile(envPath, `${envPath}.bak.${Date.now()}`);
+    await atomicWriteFilePreservingMetadata(
+      `${envPath}.bak.${Date.now()}`,
+      existingRaw,
+      { metadataSourcePath: envPath }
+    );
   }
-  const tempPath = `${envPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile(tempPath, nextRaw, { mode: 384 });
-  await rename2(tempPath, envPath);
+  await atomicWriteFilePreservingMetadata(envPath, nextRaw);
 }
 function applyEnvOverrides(config, env, withDefaults) {
   const host = config.host ?? env.host;
@@ -3491,7 +3737,7 @@ function ensureRecord(parent, key) {
 function resolveHermesConfiguredPath(value, baseDir) {
   return path3.isAbsolute(value) ? path3.normalize(value) : path3.resolve(baseDir, value);
 }
-function isNodeError2(error, code) {
+function isNodeError3(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function resolveDefaultHermesRoot(hermesHome) {
@@ -3616,9 +3862,9 @@ async function listCronOutputFiles(profileName, jobId) {
     "output",
     jobId
   );
-  const entries = await readdir2(outputDir, { withFileTypes: true }).catch(
+  const entries = await readdir3(outputDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError3(error, "ENOENT")) {
+      if (isNodeError4(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -3630,7 +3876,7 @@ async function listCronOutputFiles(profileName, jobId) {
       continue;
     }
     const outputPath = path4.join(outputDir, entry.name);
-    const fileStat = await stat(outputPath);
+    const fileStat = await stat2(outputPath);
     files.push({
       path: outputPath,
       mtime: fileStat.mtime.toISOString(),
@@ -3663,7 +3909,7 @@ async function readRegistry(paths) {
   return { version: REGISTRY_VERSION, bindings: [] };
 }
 async function writeRegistry(paths, registry) {
-  await mkdir4(paths.indexesDir, { recursive: true, mode: 448 });
+  await mkdir3(paths.indexesDir, { recursive: true, mode: 448 });
   await writeJsonFile(registryPath(paths), registry);
 }
 function registryPath(paths) {
@@ -3689,13 +3935,13 @@ function readString3(record, ...keys) {
   }
   return void 0;
 }
-function isNodeError3(error, code) {
+function isNodeError4(error, code) {
   return error instanceof Error && error.code === code;
 }
 
 // src/hermes/gateway.ts
 import { execFile as execFile2, spawn } from "child_process";
-import { access, readFile as readFile5, stat as stat3 } from "fs/promises";
+import { access, readFile as readFile5, stat as stat4 } from "fs/promises";
 import path7 from "path";
 import { setTimeout as delay } from "timers/promises";
 import { promisify as promisify2 } from "util";
@@ -3715,7 +3961,7 @@ function isLinkHttpError(error) {
 }
 
 // src/runtime/logger.ts
-import { appendFile, mkdir as mkdir5, open as open2, readFile as readFile4, rename as rename3, rm as rm2, stat as stat2 } from "fs/promises";
+import { appendFile, mkdir as mkdir4, open as open2, readFile as readFile4, rename as rename2, rm as rm2, stat as stat3 } from "fs/promises";
 import os3 from "os";
 import path6 from "path";
 
@@ -3724,7 +3970,7 @@ import os2 from "os";
 import path5 from "path";
 
 // src/constants.ts
-var LINK_VERSION = "0.3.6";
+var LINK_VERSION = "0.3.8";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -3800,7 +4046,7 @@ var FileLogger = class {
     return this.queue;
   }
   async appendEntry(entry) {
-    await mkdir5(this.paths.logsDir, { recursive: true, mode: 448 });
+    await mkdir4(this.paths.logsDir, { recursive: true, mode: 448 });
     const line = `${JSON.stringify(entry)}
 `;
     await this.rotateIfNeeded(Buffer.byteLength(line, "utf8"));
@@ -3836,7 +4082,7 @@ function createRotatingTextLogWriter(options) {
         return queue;
       }
       const next = queue.then(async () => {
-        await mkdir5(paths.logsDir, { recursive: true, mode: 448 });
+        await mkdir4(paths.logsDir, { recursive: true, mode: 448 });
         await rotateLogFileIfNeeded(filePath, buffer.length, maxFileBytes, maxFiles);
         await appendFile(filePath, buffer, { mode: 384 });
       }).catch(() => void 0);
@@ -3937,7 +4183,7 @@ function clampLimit(value) {
   return Math.min(MAX_READ_LIMIT, Math.max(1, Math.floor(value)));
 }
 async function rotateLogFileIfNeeded(filePath, nextBytes, maxFileBytes, maxFiles) {
-  const current = await stat2(filePath).catch(() => null);
+  const current = await stat3(filePath).catch(() => null);
   if (!current || current.size === 0 || current.size + nextBytes <= maxFileBytes) {
     return;
   }
@@ -4052,7 +4298,7 @@ async function readTail(filePath, maxBytes) {
   return tail?.content ?? null;
 }
 async function readTailWithMetadata(filePath, maxBytes) {
-  const info = await stat2(filePath).catch(() => null);
+  const info = await stat3(filePath).catch(() => null);
   if (!info || info.size <= 0) {
     return null;
   }
@@ -4076,7 +4322,7 @@ async function readTailWithMetadata(filePath, maxBytes) {
 }
 async function moveIfExists(from, to) {
   await rm2(to, { force: true }).catch(() => void 0);
-  await rename3(from, to).catch((error) => {
+  await rename2(from, to).catch((error) => {
     if (error.code !== "ENOENT") {
       throw error;
     }
@@ -4499,8 +4745,8 @@ async function assertProfileExists(profileName) {
   if (profileName === "default") {
     return;
   }
-  const exists = await stat3(resolveHermesProfileDir(profileName)).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError4(error, "ENOENT")) {
+  const exists = await stat4(resolveHermesProfileDir(profileName)).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError5(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -4700,7 +4946,7 @@ function isHealthyPlatformState(value) {
 function toRecord2(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
-function isNodeError4(error, code) {
+function isNodeError5(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function readString4(payload, key) {
@@ -5068,7 +5314,7 @@ function firstRecord(...values) {
 
 // src/conversations/blob-store.ts
 import { randomUUID as randomUUID3 } from "crypto";
-import { mkdir as mkdir6, readFile as readFile6, readdir as readdir3, rm as rm3, stat as stat4, writeFile as writeFile2 } from "fs/promises";
+import { mkdir as mkdir5, readFile as readFile6, readdir as readdir4, rm as rm3, stat as stat5, writeFile } from "fs/promises";
 import path9 from "path";
 
 // src/conversations/media.ts
@@ -5523,8 +5769,8 @@ async function writeConversationBlob(paths, conversationId, input, options) {
   }
   const id = `blob_${randomUUID3().replaceAll("-", "")}`;
   const filePath = blobPath(paths, id);
-  await mkdir6(path9.dirname(filePath), { recursive: true, mode: 448 });
-  await writeFile2(filePath, input.bytes, { mode: 384 });
+  await mkdir5(path9.dirname(filePath), { recursive: true, mode: 448 });
+  await writeFile(filePath, input.bytes, { mode: 384 });
   const blob = {
     id,
     size: input.bytes.byteLength,
@@ -5551,7 +5797,7 @@ async function readConversationBlob(paths, conversationId, blobId) {
   const filePath = blobPath(paths, blobId);
   const manifest = await readConversationBlobManifest(paths, conversationId, blobId);
   const bytes = await readFile6(filePath).catch((error) => {
-    if (isNodeError5(error, "ENOENT")) {
+    if (isNodeError6(error, "ENOENT")) {
       throw new LinkHttpError(404, "blob_not_found", "Blob was not found");
     }
     throw error;
@@ -5593,7 +5839,7 @@ async function deleteConversationBlobIfUnreferenced(paths, conversationId, blobI
 async function materializeConversationBlob(paths, conversationId, blobId, manifest) {
   const existingPath = manifest.materialized_path;
   if (existingPath) {
-    const exists = await stat4(existingPath).then((value) => value.isFile()).catch(() => false);
+    const exists = await stat5(existingPath).then((value) => value.isFile()).catch(() => false);
     if (exists) {
       return existingPath;
     }
@@ -5603,8 +5849,8 @@ async function materializeConversationBlob(paths, conversationId, blobId, manife
     targetDir,
     materializedAttachmentFilename(blobId, manifest.filename ?? blobId)
   );
-  await mkdir6(targetDir, { recursive: true, mode: 448 });
-  await writeFile2(targetPath, await readFile6(blobPath(paths, blobId)), {
+  await mkdir5(targetDir, { recursive: true, mode: 448 });
+  await writeFile(targetPath, await readFile6(blobPath(paths, blobId)), {
     mode: 384
   });
   await writeJsonFile(`${blobPath(paths, blobId)}.json`, {
@@ -5633,11 +5879,11 @@ async function pruneConversationBlobReference(paths, conversationId, blobId) {
 }
 async function listConversationBlobIds(paths, conversationId) {
   assertValidConversationId(conversationId);
-  await mkdir6(paths.blobsDir, { recursive: true, mode: 448 });
-  const entries = await readdir3(paths.blobsDir, {
+  await mkdir5(paths.blobsDir, { recursive: true, mode: 448 });
+  const entries = await readdir4(paths.blobsDir, {
     withFileTypes: true
   }).catch((error) => {
-    if (isNodeError5(error, "ENOENT")) {
+    if (isNodeError6(error, "ENOENT")) {
       return [];
     }
     throw error;
@@ -5671,12 +5917,12 @@ function conversationAttachmentsDir(paths, conversationId) {
   assertValidConversationId(conversationId);
   return path9.join(paths.conversationsDir, conversationId, "attachments");
 }
-function isNodeError5(error, code) {
+function isNodeError6(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/profile-runtime.ts
-import { stat as stat5 } from "fs/promises";
+import { stat as stat6 } from "fs/promises";
 var PROFILE_NAME_PATTERN2 = /^[a-zA-Z0-9._-]{1,64}$/u;
 function normalizeProfileName2(profileName) {
   const value = profileName?.trim() || "default";
@@ -5817,8 +6063,8 @@ async function buildConversationRuntimeMetadata(paths, manifest, snapshot) {
 async function ensureProfileIdentityForRuntime(paths, profileName) {
   const profilePath = resolveHermesProfileDir(profileName);
   if (profileName !== "default") {
-    const exists = await stat5(profilePath).then((value) => value.isDirectory()).catch((error) => {
-      if (isNodeError6(error, "ENOENT")) {
+    const exists = await stat6(profilePath).then((value) => value.isDirectory()).catch((error) => {
+      if (isNodeError7(error, "ENOENT")) {
         return false;
       }
       throw error;
@@ -5844,7 +6090,7 @@ function displayNameForProfile(profile) {
   const custom = profile.displayName?.trim();
   return custom || fallbackProfileDisplayName(profile.profileName);
 }
-function isNodeError6(error, code) {
+function isNodeError7(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -6389,11 +6635,11 @@ function formatContextUsageLines(runtime) {
 }
 
 // src/conversations/delivery-staging.ts
-import { mkdir as mkdir7, rm as rm4 } from "fs/promises";
+import { mkdir as mkdir6, rm as rm4 } from "fs/promises";
 import path10 from "path";
 async function prepareDeliveryStagingRunDir(paths, conversationId, runId) {
   const directory = deliveryStagingRunDir(paths, conversationId, runId);
-  await mkdir7(directory, { recursive: true, mode: 448 });
+  await mkdir6(directory, { recursive: true, mode: 448 });
   return directory;
 }
 async function removeConversationDeliveryStaging(paths, conversationId) {
@@ -6752,10 +6998,8 @@ function isUsableLanIpv4(value) {
 }
 
 // src/hermes/session-title.ts
-import { stat as stat6 } from "fs/promises";
-import { createRequire as createRequire2 } from "module";
+import { stat as stat7 } from "fs/promises";
 import path11 from "path";
-var nodeRequire2 = createRequire2(import.meta.url);
 async function readHermesSessionTitle(sessionId, paths, profileName) {
   const trimmedSessionId = sessionId.trim();
   if (!trimmedSessionId) {
@@ -6766,8 +7010,8 @@ async function readHermesSessionTitle(sessionId, paths, profileName) {
     resolveHermesProfileDir(resolvedProfileName),
     "state.db"
   );
-  const exists = await stat6(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError7(error, "ENOENT")) {
+  const exists = await stat7(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError8(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -6787,8 +7031,8 @@ async function readHermesCompressionTip(sessionId, paths, profileName) {
     resolveHermesProfileDir(resolvedProfileName),
     "state.db"
   );
-  const exists = await stat6(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError7(error, "ENOENT")) {
+  const exists = await stat7(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError8(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -6801,11 +7045,8 @@ async function readHermesCompressionTip(sessionId, paths, profileName) {
 function readSessionTitleFromStateDb(dbPath, sessionId) {
   let db = null;
   try {
-    const { DatabaseSync } = nodeRequire2(
-      "node:sqlite"
-    );
-    db = new DatabaseSync(dbPath, {
-      readOnly: true,
+    db = openSqliteDatabase(dbPath, {
+      readonly: true,
       timeout: 1e3
     });
     const row = db.prepare("SELECT title FROM sessions WHERE id = ? LIMIT 1").get(sessionId);
@@ -6820,11 +7061,8 @@ function readSessionTitleFromStateDb(dbPath, sessionId) {
 function readCompressionTipFromStateDb(dbPath, sessionId) {
   let db = null;
   try {
-    const { DatabaseSync } = nodeRequire2(
-      "node:sqlite"
-    );
-    db = new DatabaseSync(dbPath, {
-      readOnly: true,
+    db = openSqliteDatabase(dbPath, {
+      readonly: true,
       timeout: 1e3
     });
     let current = sessionId;
@@ -6857,7 +7095,7 @@ function readCompressionTipFromStateDb(dbPath, sessionId) {
     db?.close();
   }
 }
-function isNodeError7(error, code) {
+function isNodeError8(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName(value) {
@@ -8284,12 +8522,63 @@ function toRecord6(value) {
 }
 
 // src/conversations/conversation-queries.ts
+var DEFAULT_CONVERSATION_LIST_PAGE_SIZE = 25;
+var MAX_CONVERSATION_LIST_PAGE_SIZE = 100;
 var ConversationQueryCoordinator = class {
   constructor(deps) {
     this.deps = deps;
   }
   deps;
   async listConversations() {
+    return this.listConversationsFromStore();
+  }
+  async listConversationPage(options = {}) {
+    const limit = normalizeConversationListPageLimit(options.limit);
+    const cursor = decodeConversationListCursor(options.cursor);
+    const indexedPage = await listConversationStatsPage(this.deps.paths, {
+      limit,
+      cursor
+    });
+    if (indexedPage.records.length === 0) {
+      return this.listConversationPageFromStore({ limit, cursor });
+    }
+    const summaries = await this.summarizeIndexedConversations(
+      indexedPage.records
+    );
+    return {
+      conversations: summaries,
+      page: {
+        limit,
+        has_more: indexedPage.hasMore,
+        next_cursor: indexedPage.hasMore && indexedPage.records.length > 0 ? encodeConversationListCursor(indexedPage.records.at(-1)) : null
+      }
+    };
+  }
+  async searchConversationPage(options = {}) {
+    const query = normalizeConversationSearchQuery(options.query);
+    if (!query) {
+      return this.listConversationPage(options);
+    }
+    const limit = normalizeConversationListPageLimit(options.limit);
+    const cursor = decodeConversationListCursor(options.cursor);
+    const indexedPage = await searchConversationStatsPage(this.deps.paths, {
+      limit,
+      cursor,
+      query
+    });
+    const summaries = await this.summarizeIndexedConversations(
+      indexedPage.records
+    );
+    return {
+      conversations: summaries,
+      page: {
+        limit,
+        has_more: indexedPage.hasMore,
+        next_cursor: indexedPage.hasMore && indexedPage.records.length > 0 ? encodeConversationListCursor(indexedPage.records.at(-1)) : null
+      }
+    };
+  }
+  async listConversationsFromStore() {
     const summaries = [];
     for (const conversationId of await this.deps.store.listConversationIds()) {
       const manifest = await this.deps.store.readManifest(conversationId).catch(
@@ -8305,9 +8594,41 @@ var ConversationQueryCoordinator = class {
       summaries.push(await this.summarizeConversation(refreshed, snapshot));
     }
     return summaries.sort(
-      (left, right) => Date.parse(right.updated_at) - Date.parse(left.updated_at)
+      (left, right) => Date.parse(right.updated_at) - Date.parse(left.updated_at) || right.id.localeCompare(left.id)
     );
   }
+  async listConversationPageFromStore(input) {
+    const all = await this.listConversationsFromStore();
+    const startIndex = input.cursor ? all.findIndex((summary) => isAfterConversationListCursor(summary, input.cursor)) : 0;
+    const safeStartIndex = startIndex < 0 ? all.length : startIndex;
+    const conversations = all.slice(safeStartIndex, safeStartIndex + input.limit);
+    const hasMore = safeStartIndex + input.limit < all.length;
+    return {
+      conversations,
+      page: {
+        limit: input.limit,
+        has_more: hasMore,
+        next_cursor: hasMore && conversations.length > 0 ? encodeConversationListCursorFromSummary(conversations.at(-1)) : null
+      }
+    };
+  }
+  async summarizeIndexedConversations(records) {
+    const summaries = [];
+    for (const record of records) {
+      const manifest = await this.deps.store.readManifest(record.conversationId).catch(
+        () => null
+      );
+      if (!manifest || manifest.status !== "active") {
+        continue;
+      }
+      const snapshot = await this.deps.store.readSnapshot(record.conversationId).catch(
+        () => emptySnapshot2()
+      );
+      const refreshed = await this.deps.metadata.refreshTitleFromHermes(manifest, { snapshot }).catch(() => manifest);
+      summaries.push(await this.summarizeConversation(refreshed, snapshot));
+    }
+    return summaries;
+  }
   async getMessages(conversationId, options = {}) {
     const manifest = await this.deps.store.readActiveManifest(conversationId);
     const snapshot = await this.deps.store.readSnapshot(conversationId);
@@ -8394,6 +8715,61 @@ var ConversationQueryCoordinator = class {
     });
   }
 };
+function normalizeConversationListPageLimit(value) {
+  if (value === void 0 || !Number.isFinite(value)) {
+    return DEFAULT_CONVERSATION_LIST_PAGE_SIZE;
+  }
+  return Math.max(
+    1,
+    Math.min(MAX_CONVERSATION_LIST_PAGE_SIZE, Math.floor(value))
+  );
+}
+function encodeConversationListCursor(record) {
+  return Buffer.from(
+    JSON.stringify({
+      updated_at: record.updatedAt,
+      conversation_id: record.conversationId
+    }),
+    "utf8"
+  ).toString("base64url");
+}
+function encodeConversationListCursorFromSummary(summary) {
+  return encodeConversationListCursor({
+    conversationId: summary.id,
+    updatedAt: summary.updated_at
+  });
+}
+function decodeConversationListCursor(value) {
+  if (!value) {
+    return null;
+  }
+  try {
+    const decoded = JSON.parse(
+      Buffer.from(value, "base64url").toString("utf8")
+    );
+    const updatedAt = readNonEmptyString(decoded.updated_at);
+    const conversationId = readNonEmptyString(decoded.conversation_id);
+    if (!updatedAt || !conversationId) {
+      throw new Error("invalid cursor");
+    }
+    return { updatedAt, conversationId };
+  } catch {
+    throw new LinkHttpError(
+      400,
+      "conversation_cursor_invalid",
+      "Conversation list cursor is invalid"
+    );
+  }
+}
+function readNonEmptyString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function normalizeConversationSearchQuery(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function isAfterConversationListCursor(summary, cursor) {
+  return summary.updated_at < cursor.updatedAt || summary.updated_at === cursor.updatedAt && summary.id < cursor.conversationId;
+}
 function hydrateAgentEventBlocks(blocks, agentEvents) {
   if (!blocks?.length || agentEvents.length === 0) {
     return blocks;
@@ -8418,11 +8794,11 @@ function hydrateAgentEventBlocks(blocks, agentEvents) {
 // src/conversations/conversation-store.ts
 import {
   appendFile as appendFile2,
-  mkdir as mkdir8,
-  readdir as readdir4,
+  mkdir as mkdir7,
+  readdir as readdir5,
   readFile as readFile7,
   rm as rm5,
-  writeFile as writeFile3
+  writeFile as writeFile2
 } from "fs/promises";
 import path12 from "path";
 var ConversationStore = class {
@@ -8431,14 +8807,14 @@ var ConversationStore = class {
   }
   paths;
   async ensureConversationsDir() {
-    await mkdir8(this.paths.conversationsDir, { recursive: true, mode: 448 });
+    await mkdir7(this.paths.conversationsDir, { recursive: true, mode: 448 });
   }
   async listConversationIds() {
     await this.ensureConversationsDir();
-    const entries = await readdir4(this.paths.conversationsDir, {
+    const entries = await readdir5(this.paths.conversationsDir, {
       withFileTypes: true
     }).catch((error) => {
-      if (isNodeError8(error, "ENOENT")) {
+      if (isNodeError9(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -8446,7 +8822,7 @@ var ConversationStore = class {
     return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
   }
   async createConversation(manifest, snapshot = createEmptySnapshot2()) {
-    await mkdir8(this.conversationDir(manifest.id), {
+    await mkdir7(this.conversationDir(manifest.id), {
       recursive: true,
       mode: 448
     });
@@ -8486,7 +8862,7 @@ var ConversationStore = class {
       conversation_id: conversationId,
       created_at: now
     };
-    await mkdir8(this.conversationDir(conversationId), {
+    await mkdir7(this.conversationDir(conversationId), {
       recursive: true,
       mode: 448
     });
@@ -8507,7 +8883,7 @@ var ConversationStore = class {
     await this.readManifest(conversationId);
     const raw = await readFile7(this.eventsPath(conversationId), "utf8").catch(
       (error) => {
-        if (isNodeError8(error, "ENOENT")) {
+        if (isNodeError9(error, "ENOENT")) {
           return "";
         }
         throw error;
@@ -8517,7 +8893,7 @@ var ConversationStore = class {
   }
   overwriteEvents(conversationId, events) {
     const content = events.map((event) => JSON.stringify(event)).join("\n");
-    return writeFile3(
+    return writeFile2(
       this.eventsPath(conversationId),
       content ? `${content}
 ` : "",
@@ -8562,19 +8938,18 @@ var ConversationStore = class {
 function createEmptySnapshot2() {
   return { schema_version: 1, messages: [], runs: [] };
 }
-function isNodeError8(error, code) {
+function isNodeError9(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/hermes-session-sync.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { readdir as readdir6, readFile as readFile9, stat as stat8 } from "fs/promises";
-import { createRequire as createRequire3 } from "module";
+import { readdir as readdir7, readFile as readFile9, stat as stat9 } from "fs/promises";
 import os4 from "os";
 import path14 from "path";
 
 // src/conversations/delivery-import.ts
-import { lstat, readFile as readFile8, readdir as readdir5, stat as stat7 } from "fs/promises";
+import { lstat as lstat2, readFile as readFile8, readdir as readdir6, stat as stat8 } from "fs/promises";
 import path13 from "path";
 var MAX_IMPORTED_BLOB_BYTES = 100 * 1024 * 1024;
 var MAX_MEDIA_IMPORT_FAILURES = 20;
@@ -8670,8 +9045,8 @@ function resolveDeliveryStagingTarget(paths, stagingDir) {
   };
 }
 async function collectStagedDeliveryReferences(stagingDir) {
-  const directoryStat = await lstat(stagingDir).catch((error) => {
-    if (isNodeError9(error, "ENOENT")) {
+  const directoryStat = await lstat2(stagingDir).catch((error) => {
+    if (isNodeError10(error, "ENOENT")) {
       throw new LinkHttpError(
         404,
         "delivery_staging_not_found",
@@ -8687,7 +9062,7 @@ async function collectStagedDeliveryReferences(stagingDir) {
       "delivery staging path is not a directory"
     );
   }
-  const entries = await readdir5(stagingDir, { withFileTypes: true });
+  const entries = await readdir6(stagingDir, { withFileTypes: true });
   return entries.filter((entry) => entry.isFile() && !entry.name.startsWith(".")).filter((entry) => isSupportedDeliveryFilename(entry.name)).sort(
     (left, right) => left.name.localeCompare(right.name, "en", { numeric: true })
   ).slice(0, MAX_DELIVERY_FILES).map((entry) => {
@@ -8851,8 +9226,8 @@ function emptyImportResult(input) {
 }
 async function writeBlobFromFile(deps, conversationId, source) {
   const sourcePath = resolveMediaSourcePath(source.path);
-  const fileStat = await stat7(sourcePath).catch((error) => {
-    if (isNodeError9(error, "ENOENT")) {
+  const fileStat = await stat8(sourcePath).catch((error) => {
+    if (isNodeError10(error, "ENOENT")) {
       throw new LinkHttpError(
         404,
         "media_source_not_found",
@@ -8886,7 +9261,7 @@ function describeMediaImportFailure(reference, sourceKey, error) {
     key: sourceKey,
     filename: sanitizeFilename(reference.path, "attachment"),
     reason: error instanceof Error ? error.message : String(error),
-    ...isNodeError9(error) && error.code ? { code: error.code } : {}
+    ...isNodeError10(error) && error.code ? { code: error.code } : {}
   };
 }
 function isSupportedDeliveryFilename(filename) {
@@ -8899,12 +9274,11 @@ function readString8(payload, key) {
 function toRecord7(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
-function isNodeError9(error, code) {
+function isNodeError10(error, code) {
   return typeof error === "object" && error !== null && "code" in error && (code === void 0 || error.code === code);
 }
 
 // src/conversations/hermes-session-sync.ts
-var nodeRequire3 = createRequire3(import.meta.url);
 var PROFILE_NAME_PATTERN3 = /^[a-zA-Z0-9._-]{1,64}$/u;
 var DEFAULT_PROFILE_NAME = "default";
 var MAX_IMPORTABLE_SESSIONS = 100;
@@ -9667,9 +10041,9 @@ function rememberKnownHermesConversation(map, sessionId, conversationId) {
 async function discoverHermesProfileNames() {
   const names = /* @__PURE__ */ new Set([DEFAULT_PROFILE_NAME]);
   const profilesDir = path14.join(os4.homedir(), ".hermes", "profiles");
-  const entries = await readdir6(profilesDir, { withFileTypes: true }).catch(
+  const entries = await readdir7(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError10(error, "ENOENT")) {
+      if (isNodeError11(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -9696,11 +10070,8 @@ async function listProfileSessions(dbPath) {
   }
   let db = null;
   try {
-    const { DatabaseSync } = nodeRequire3(
-      "node:sqlite"
-    );
-    db = new DatabaseSync(dbPath, {
-      readOnly: true,
+    db = openSqliteDatabase(dbPath, {
+      readonly: true,
       timeout: 1e3
     });
     const sessionColumns = readTableColumns(db, "sessions");
@@ -9840,11 +10211,8 @@ async function readStateDbMessages(dbPath, sessionId) {
   }
   let db = null;
   try {
-    const { DatabaseSync } = nodeRequire3(
-      "node:sqlite"
-    );
-    db = new DatabaseSync(dbPath, {
-      readOnly: true,
+    db = openSqliteDatabase(dbPath, {
+      readonly: true,
       timeout: 1e3
     });
     const columns = readTableColumns(db, "messages");
@@ -9876,7 +10244,7 @@ async function readJsonlMessages(profileName, sessionId) {
   const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path14.join(profileDir, "sessions"));
   const transcriptPath = path14.join(sessionsDir, `${sessionId}.jsonl`);
   const raw = await readFile9(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError10(error, "ENOENT")) {
+    if (isNodeError11(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -10151,8 +10519,8 @@ function quoteIdentifier(value) {
   return `"${value.replaceAll('"', '""')}"`;
 }
 async function isFile(filePath) {
-  return stat8(filePath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError10(error, "ENOENT")) {
+  return stat9(filePath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError11(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -10185,12 +10553,12 @@ function readBoolean(value) {
   }
   return false;
 }
-function isNodeError10(error, code) {
+function isNodeError11(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/run-lifecycle.ts
-import { readdir as readdir7 } from "fs/promises";
+import { readdir as readdir8 } from "fs/promises";
 
 // src/hermes/api-server.ts
 async function listHermesModels(options = {}) {
@@ -10584,10 +10952,8 @@ function readString10(payload, key) {
 }
 
 // src/conversations/history-builder.ts
-import { readFile as readFile10, stat as stat9 } from "fs/promises";
-import { createRequire as createRequire4 } from "module";
+import { readFile as readFile10, stat as stat10 } from "fs/promises";
 import path15 from "path";
-var nodeRequire4 = createRequire4(import.meta.url);
 var HISTORY_ROLES = /* @__PURE__ */ new Set(["user", "assistant"]);
 var HERMES_HISTORY_COLUMNS = [
   "role",
@@ -10694,8 +11060,8 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   };
 }
 async function readHermesStateDbHistory(dbPath, sessionId) {
-  const exists = await stat9(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+  const exists = await stat10(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError12(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -10714,7 +11080,7 @@ async function readHermesJsonlHistory(sessionsDir, sessionId) {
   }
   const transcriptPath = path15.join(sessionsDir, `${sessionId}.jsonl`);
   const raw = await readFile10(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+    if (isNodeError12(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -10749,11 +11115,8 @@ async function readHermesJsonlHistory(sessionsDir, sessionId) {
 function readHistoryRows(dbPath, sessionId) {
   let db = null;
   try {
-    const { DatabaseSync } = nodeRequire4(
-      "node:sqlite"
-    );
-    db = new DatabaseSync(dbPath, {
-      readOnly: true,
+    db = openSqliteDatabase(dbPath, {
+      readonly: true,
       timeout: 1e3
     });
     const columns = readTableColumns2(db, "messages");
@@ -10939,7 +11302,7 @@ function readTableColumns2(db, table) {
     db.prepare(`PRAGMA table_info(${table})`).all().map((row) => row.name).filter((name) => typeof name === "string")
   );
 }
-function isNodeError11(error, code) {
+function isNodeError12(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName2(value) {
@@ -10957,7 +11320,7 @@ function normalizeProfileForCompare(value) {
 
 // src/hermes/stt.ts
 import { execFile as execFile3 } from "child_process";
-import { access as access2, readFile as readFile11, stat as stat10 } from "fs/promises";
+import { access as access2, readFile as readFile11, stat as stat11 } from "fs/promises";
 import path16 from "path";
 import { promisify as promisify3 } from "util";
 var execFileAsync3 = promisify3(execFile3);
@@ -11117,7 +11480,7 @@ async function resolveExecutablePath(command) {
 }
 async function isExecutableFile(filePath) {
   try {
-    const info = await stat10(filePath);
+    const info = await stat11(filePath);
     if (!info.isFile()) {
       return false;
     }
@@ -11158,7 +11521,7 @@ async function findDevHermesAgentSource() {
   return null;
 }
 async function isDirectory(candidate) {
-  return stat10(candidate).then((info) => info.isDirectory()).catch(() => false);
+  return stat11(candidate).then((info) => info.isDirectory()).catch(() => false);
 }
 function compactProcessOutput(value) {
   const compact = value.trim().replace(/\s+/gu, " ").slice(0, 500);
@@ -12402,8 +12765,8 @@ function formatFilenameList(filenames) {
   return remaining > 0 ? `${preview.join("\u3001")} \u7B49 ${filenames.length} \u4E2A` : preview.join("\u3001");
 }
 async function readdirWithDirs(directory) {
-  return readdir7(directory, { withFileTypes: true }).catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+  return readdir8(directory, { withFileTypes: true }).catch((error) => {
+    if (isNodeError13(error, "ENOENT")) {
       return [];
     }
     throw error;
@@ -12633,7 +12996,7 @@ function readResponseId(payload) {
   const response = toRecord11(payload.response);
   return readString13(payload, "response_id") ?? readString13(response, "id");
 }
-function isNodeError12(error, code) {
+function isNodeError13(error, code) {
   if (typeof error !== "object" || error === null || !("code" in error)) {
     return false;
   }
@@ -12744,6 +13107,12 @@ var ConversationService = class {
   async listConversations() {
     return this.queries.listConversations();
   }
+  listConversationPage(input = {}) {
+    return this.queries.listConversationPage(input);
+  }
+  searchConversationPage(input = {}) {
+    return this.queries.searchConversationPage(input);
+  }
   async getStatistics(filter = {}) {
     return readLinkStatistics(this.paths, filter);
   }
@@ -13463,7 +13832,7 @@ function findApproval(snapshot, approvalId) {
 
 // src/identity/identity.ts
 import { generateKeyPairSync, randomUUID as randomUUID8, sign } from "crypto";
-import { mkdir as mkdir9, chmod } from "fs/promises";
+import { mkdir as mkdir8, chmod as chmod2 } from "fs/promises";
 import { z } from "zod";
 var linkIdentitySchema = z.object({
   install_id: z.string().min(1),
@@ -13485,8 +13854,8 @@ async function ensureIdentity(paths = resolveRuntimePaths()) {
   if (existing) {
     return existing;
   }
-  await mkdir9(paths.homeDir, { recursive: true, mode: 448 });
-  await chmod(paths.homeDir, 448).catch(() => void 0);
+  await mkdir8(paths.homeDir, { recursive: true, mode: 448 });
+  await chmod2(paths.homeDir, 448).catch(() => void 0);
   const { publicKey, privateKey } = generateKeyPairSync("ed25519");
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const identity = {
@@ -14291,9 +14660,28 @@ function registerConversationRoutes(router, options) {
   router.get("/api/v1/conversations", async (ctx) => {
     await authenticateRequest(ctx, paths);
     ctx.set("cache-control", "no-store");
+    const result = await conversations.listConversationPage({
+      limit: readLimit(ctx.query.limit),
+      cursor: readQueryString(ctx.query.cursor) ?? readQueryString(ctx.query.after) ?? readQueryString(ctx.query.page_cursor)
+    });
     ctx.body = {
       ok: true,
-      conversations: await conversations.listConversations()
+      conversations: result.conversations,
+      page: result.page
+    };
+  });
+  router.get("/api/v1/conversations/search", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    ctx.set("cache-control", "no-store");
+    const result = await conversations.searchConversationPage({
+      limit: readLimit(ctx.query.limit),
+      cursor: readQueryString(ctx.query.cursor) ?? readQueryString(ctx.query.after) ?? readQueryString(ctx.query.page_cursor),
+      query: readQueryString(ctx.query.query) ?? readQueryString(ctx.query.q) ?? readQueryString(ctx.query.keyword) ?? ""
+    });
+    ctx.body = {
+      ok: true,
+      conversations: result.conversations,
+      page: result.page
     };
   });
   router.post("/api/v1/conversations", async (ctx) => {
@@ -14661,7 +15049,7 @@ function createHttpErrorMiddleware(logger) {
 }
 
 // src/hermes/profiles.ts
-import { mkdir as mkdir10, readdir as readdir8, readFile as readFile12, rename as rename4, rm as rm6, stat as stat11 } from "fs/promises";
+import { readdir as readdir9, readFile as readFile12, rename as rename3, rm as rm6, stat as stat12 } from "fs/promises";
 import os5 from "os";
 import path17 from "path";
 import YAML2 from "yaml";
@@ -14671,9 +15059,9 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
   const profiles = /* @__PURE__ */ new Map();
   profiles.set(DEFAULT_PROFILE, await profileInfo(DEFAULT_PROFILE, paths));
   const profilesDir = path17.join(os5.homedir(), ".hermes", "profiles");
-  const entries = await readdir8(profilesDir, { withFileTypes: true }).catch(
+  const entries = await readdir9(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -14697,8 +15085,8 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
 async function getHermesProfileStatus(name, paths = resolveRuntimePaths()) {
   assertProfileName(name);
   const profile = await profileInfo(name, paths);
-  const exists = await stat11(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+  const exists = await stat12(profile.path).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError14(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -14715,7 +15103,7 @@ async function renameHermesProfile(oldName, newName, paths = resolveRuntimePaths
   assertMutableProfile(newName);
   const oldProfile = await profileInfo(oldName, paths);
   const newProfilePath = resolveHermesProfileDir(newName);
-  await rename4(oldProfile.path, newProfilePath);
+  await rename3(oldProfile.path, newProfilePath);
   const identity = await renameProfileIdentity(paths, {
     oldProfileName: oldName,
     newProfileName: newName,
@@ -14738,8 +15126,8 @@ async function updateHermesProfileMetadata(name, metadata, paths = resolveRuntim
 async function deleteHermesProfile(name, paths = resolveRuntimePaths()) {
   assertMutableProfile(name);
   const profile = await profileInfo(name, paths);
-  const exists = await stat11(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+  const exists = await stat12(profile.path).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError14(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -14807,13 +15195,13 @@ function assertProfileName(name) {
     throw new LinkHttpError(400, "invalid_profile_name", "invalid profile name");
   }
 }
-function isNodeError13(error, code) {
+function isNodeError14(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 async function countSkills(root) {
-  const entries = await readdir8(root, { withFileTypes: true }).catch(
+  const entries = await readdir9(root, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -14840,7 +15228,7 @@ async function countConfiguredTools(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -15517,14 +15905,11 @@ function errorMessage(error) {
 import { spawn as spawn2 } from "child_process";
 import { EventEmitter as EventEmitter2 } from "events";
 import {
-  copyFile as copyFile2,
   cp,
-  mkdir as mkdir11,
+  mkdir as mkdir9,
   readFile as readFile13,
   rm as rm7,
-  stat as stat12,
-  writeFile as writeFile4,
-  rename as rename5
+  stat as stat13
 } from "fs/promises";
 import path18 from "path";
 import YAML3 from "yaml";
@@ -15574,7 +15959,7 @@ async function startHermesProfileCreation(input, options) {
     signal: null,
     error: null
   };
-  await mkdir11(options.paths.runDir, { recursive: true, mode: 448 });
+  await mkdir9(options.paths.runDir, { recursive: true, mode: 448 });
   await writeProfileCreationState(options.paths, started);
   await writer.write(`
 === profile creation started ${startedAt} ===
@@ -15851,7 +16236,7 @@ function randomSuffix(attempt) {
 async function applyProfileCreationPostSteps(input) {
   const profilePath = resolveHermesProfileDir(input.profileName);
   if (!await pathExists(profilePath)) {
-    await mkdir11(profilePath, { recursive: true, mode: 448 });
+    await ensureDirectoryWithInheritedMetadata(profilePath, 448);
   }
   if (input.sourceProfile && input.copyScopes.length > 0) {
     await copyProfileScopes({
@@ -15979,7 +16364,7 @@ function collectEnvKeys(value, keys = /* @__PURE__ */ new Set()) {
 async function writeEnvValues(profileName, values) {
   const envPath = path18.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile13(envPath, "utf8").catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+    if (isNodeError15(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -16004,13 +16389,14 @@ async function writeEnvValues(profileName, values) {
     nextLines.push(`${key}=${formatEnvValue2(value)}`);
   }
   const nextRaw = nextLines.join("\n").replace(/\n*$/u, "\n");
-  await mkdir11(path18.dirname(envPath), { recursive: true, mode: 448 });
   if (existingRaw) {
-    await copyFile2(envPath, `${envPath}.bak.${Date.now()}`);
+    await atomicWriteFilePreservingMetadata(
+      `${envPath}.bak.${Date.now()}`,
+      existingRaw,
+      { metadataSourcePath: envPath }
+    );
   }
-  const tempPath = `${envPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile4(tempPath, nextRaw, { mode: 384 });
-  await rename5(tempPath, envPath);
+  await atomicWriteFilePreservingMetadata(envPath, nextRaw);
 }
 async function copySkills(sourceProfile, targetProfile) {
   const sourceSkills = path18.join(resolveHermesProfileDir(sourceProfile), "skills");
@@ -16024,6 +16410,10 @@ async function copySkills(sourceProfile, targetProfile) {
     force: true,
     errorOnExist: false
   });
+  await inheritOwnerRecursively(
+    targetSkills,
+    resolveHermesProfileDir(targetProfile)
+  );
 }
 function copyProperty(source, target, key) {
   if (Object.prototype.hasOwnProperty.call(source, key)) {
@@ -16035,7 +16425,7 @@ function copyProperty(source, target, key) {
 async function readYamlConfig(configPath) {
   const existingRaw = await readFile13(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -16047,14 +16437,15 @@ async function readYamlConfig(configPath) {
   };
 }
 async function writeYamlConfig(configPath, input) {
-  await mkdir11(path18.dirname(configPath), { recursive: true, mode: 448 });
   if (input.existingRaw) {
-    await copyFile2(configPath, `${configPath}.bak.${Date.now()}`);
+    await atomicWriteFilePreservingMetadata(
+      `${configPath}.bak.${Date.now()}`,
+      input.existingRaw,
+      { metadataSourcePath: configPath }
+    );
   }
   const document = new YAML3.Document(input.config);
-  const tempPath = `${configPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile4(tempPath, document.toString(), { mode: 384 });
-  await rename5(tempPath, configPath);
+  await atomicWriteFilePreservingMetadata(configPath, document.toString());
 }
 async function failProfileCreation(input) {
   if (input.rollbackProfileName) {
@@ -16120,8 +16511,8 @@ async function clearProfileCreationLogFiles(paths) {
   ]);
 }
 async function pathExists(targetPath) {
-  return await stat12(targetPath).then(() => true).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  return await stat13(targetPath).then(() => true).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -16168,7 +16559,7 @@ function formatEnvValue2(value) {
 function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError14(error, code) {
+function isNodeError15(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -16377,13 +16768,9 @@ function toProfileToolConfigHttpError(error) {
 // src/hermes/memory.ts
 import {
   access as access3,
-  copyFile as copyFile3,
-  mkdir as mkdir12,
-  readdir as readdir9,
+  readdir as readdir10,
   readFile as readFile14,
-  rename as rename6,
-  stat as stat13,
-  writeFile as writeFile5
+  stat as stat14
 } from "fs/promises";
 import path19 from "path";
 import YAML4 from "yaml";
@@ -16696,12 +17083,11 @@ function isSensitiveConfigKey(key) {
 }
 async function writeCustomProviderConfig(profileName, provider, config) {
   const configPath = customProviderConfigPath(profileName, provider);
-  await mkdir12(path19.dirname(configPath), { recursive: true, mode: 448 });
-  await writeFile5(configPath, `${JSON.stringify(config, null, 2)}
-`, {
-    encoding: "utf8",
-    mode: 384
-  });
+  await atomicWriteFilePreservingMetadata(
+    configPath,
+    `${JSON.stringify(config, null, 2)}
+`
+  );
 }
 function normalizeConfigurableProvider(provider, patch) {
   if (provider === CUSTOM_PROVIDER_CARD_ID) {
@@ -16749,7 +17135,7 @@ async function patchHermesMemoryProvider(profileName, provider) {
   const configPath = resolveHermesConfigPath(profileName);
   const existingRaw = await readFile14(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -16761,17 +17147,13 @@ async function patchHermesMemoryProvider(profileName, provider) {
   memory.provider = provider === "built-in" ? "" : provider;
   config.memory = memory;
   const backupPath = existingRaw ? `${configPath}.bak.${Date.now()}` : null;
-  await mkdir12(path19.dirname(configPath), { recursive: true, mode: 448 });
-  if (backupPath) {
-    await copyFile3(configPath, backupPath);
+  if (backupPath && existingRaw !== null) {
+    await atomicWriteFilePreservingMetadata(backupPath, existingRaw, {
+      metadataSourcePath: configPath
+    });
   }
   document.contents = document.createNode(config);
-  const tempPath = `${configPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile5(tempPath, document.toString(), {
-    encoding: "utf8",
-    mode: 384
-  });
-  await rename6(tempPath, configPath);
+  await atomicWriteFilePreservingMetadata(configPath, document.toString());
 }
 function resolveMemoryDir(profileName) {
   return path19.join(resolveHermesProfileDir(profileName), "memories");
@@ -16779,8 +17161,8 @@ function resolveMemoryDir(profileName) {
 async function readMemoryStore(profileName, target, limits) {
   const filePath = memoryFilePath(profileName, target);
   const entries = await readMemoryEntries(filePath);
-  const fileStat = await stat13(filePath).catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+  const fileStat = await stat14(filePath).catch((error) => {
+    if (isNodeError16(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -16809,7 +17191,7 @@ async function readMemoryStore(profileName, target, limits) {
 }
 async function readMemoryEntries(filePath) {
   const raw = await readFile14(filePath, "utf8").catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -16829,17 +17211,10 @@ async function mutateMemoryEntries(profileName, target, mutate) {
 async function writeMemoryEntries(profileName, target, entries) {
   assertWithinLimit(target, entries, await readMemoryLimits(profileName));
   const filePath = memoryFilePath(profileName, target);
-  const dir = path19.dirname(filePath);
-  await mkdir12(dir, { recursive: true, mode: 448 });
-  const tempPath = path19.join(
-    dir,
-    `.mem_${process.pid}_${Date.now()}_${target}.tmp`
+  await atomicWriteFilePreservingMetadata(
+    filePath,
+    entries.join(ENTRY_DELIMITER)
   );
-  await writeFile5(tempPath, entries.join(ENTRY_DELIMITER), {
-    encoding: "utf8",
-    mode: 384
-  });
-  await rename6(tempPath, filePath);
 }
 function memoryFilePath(profileName, target) {
   return path19.join(
@@ -17320,7 +17695,7 @@ function customProviderRegistryPath(profileName) {
 async function readCustomProviderRegistry(profileName) {
   const raw = await readFile14(customProviderRegistryPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -17357,19 +17732,17 @@ async function saveCustomProviderRegistryEntry(profileName, provider) {
     { id: providerId, label: providerId, description: "\u81EA\u5B9A\u4E49 memory provider\u3002" }
   ].sort((left, right) => left.id.localeCompare(right.id));
   const registryPath2 = customProviderRegistryPath(profileName);
-  await mkdir12(path19.dirname(registryPath2), { recursive: true, mode: 448 });
-  await writeFile5(
+  await atomicWriteFilePreservingMetadata(
     registryPath2,
     `${JSON.stringify({ providers }, null, 2)}
-`,
-    { encoding: "utf8", mode: 384 }
+`
   );
 }
 async function discoverUserMemoryProviderDescriptors(profileName) {
   const pluginsDir = path19.join(resolveHermesProfileDir(profileName), "plugins");
-  const entries = await readdir9(pluginsDir, { withFileTypes: true }).catch(
+  const entries = await readdir10(pluginsDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -17410,7 +17783,7 @@ async function isUserMemoryProviderInstalled(profileName, provider) {
 async function isMemoryProviderPluginDir(providerDir) {
   const source = await readFile14(path19.join(providerDir, "__init__.py"), "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -17422,7 +17795,7 @@ async function isMemoryProviderPluginDir(providerDir) {
 async function readPluginMetadata(providerDir) {
   const raw = await readFile14(path19.join(providerDir, "plugin.yaml"), "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -17448,7 +17821,7 @@ async function resolveByteRoverCli() {
 async function readHolographicProviderConfig(profileName) {
   const raw = await readFile14(resolveHermesConfigPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -17462,7 +17835,7 @@ async function patchHolographicProviderConfig(profileName, patch) {
   const configPath = resolveHermesConfigPath(profileName);
   const existingRaw = await readFile14(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -17479,17 +17852,15 @@ async function patchHolographicProviderConfig(profileName, patch) {
   }
   plugins["hermes-memory-store"] = memoryStore;
   config.plugins = plugins;
-  await mkdir12(path19.dirname(configPath), { recursive: true, mode: 448 });
   if (existingRaw) {
-    await copyFile3(configPath, `${configPath}.bak.${Date.now()}`);
+    await atomicWriteFilePreservingMetadata(
+      `${configPath}.bak.${Date.now()}`,
+      existingRaw,
+      { metadataSourcePath: configPath }
+    );
   }
   document.contents = document.createNode(config);
-  const tempPath = `${configPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile5(tempPath, document.toString(), {
-    encoding: "utf8",
-    mode: 384
-  });
-  await rename6(tempPath, configPath);
+  await atomicWriteFilePreservingMetadata(configPath, document.toString());
 }
 async function patchHermesMemoryEnv(profileName, patch) {
   const entries = Object.entries(patch).filter(
@@ -17500,7 +17871,7 @@ async function patchHermesMemoryEnv(profileName, patch) {
   }
   const envPath = path19.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile14(envPath, "utf8").catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -17530,13 +17901,14 @@ async function patchHermesMemoryEnv(profileName, patch) {
     }
   }
   const nextRaw = nextLines.join("\n").replace(/\n*$/u, "\n");
-  await mkdir12(path19.dirname(envPath), { recursive: true, mode: 448 });
   if (existingRaw) {
-    await copyFile3(envPath, `${envPath}.bak.${Date.now()}`);
+    await atomicWriteFilePreservingMetadata(
+      `${envPath}.bak.${Date.now()}`,
+      existingRaw,
+      { metadataSourcePath: envPath }
+    );
   }
-  const tempPath = `${envPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile5(tempPath, nextRaw, { encoding: "utf8", mode: 384 });
-  await rename6(tempPath, envPath);
+  await atomicWriteFilePreservingMetadata(envPath, nextRaw);
 }
 function isMemoryEnvKeyWritable(key) {
   return [
@@ -17557,7 +17929,7 @@ async function readActiveMemoryProvider(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -17582,16 +17954,15 @@ async function patchJsonProviderConfig(profileName, relativePath, patch) {
       next[key] = value;
     }
   }
-  await mkdir12(path19.dirname(configPath), { recursive: true, mode: 448 });
-  await writeFile5(configPath, `${JSON.stringify(next, null, 2)}
-`, {
-    encoding: "utf8",
-    mode: 384
-  });
+  await atomicWriteFilePreservingMetadata(
+    configPath,
+    `${JSON.stringify(next, null, 2)}
+`
+  );
 }
 async function readJsonObject(filePath) {
   const raw = await readFile14(filePath, "utf8").catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return "{}";
     }
     throw error;
@@ -17645,7 +18016,7 @@ async function readMemoryLimits(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -17738,7 +18109,7 @@ function formatEnvValue3(value) {
 function escapeRegExp3(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError15(error, code) {
+function isNodeError16(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
 }
 
@@ -18146,14 +18517,7 @@ function toMemoryHttpError(error) {
 }
 
 // src/hermes/skills.ts
-import {
-  copyFile as copyFile4,
-  mkdir as mkdir13,
-  readFile as readFile15,
-  readdir as readdir10,
-  rename as rename7,
-  writeFile as writeFile6
-} from "fs/promises";
+import { readFile as readFile15, readdir as readdir11 } from "fs/promises";
 import path20 from "path";
 import YAML5 from "yaml";
 var HermesSkillNotFoundError = class extends Error {
@@ -18245,9 +18609,9 @@ async function findSkillFiles(root) {
   return results.sort((left, right) => left.localeCompare(right));
 }
 async function collectSkillFiles(directory, results) {
-  const entries = await readdir10(directory, { withFileTypes: true }).catch(
+  const entries = await readdir11(directory, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -18272,7 +18636,7 @@ async function collectSkillFiles(directory, results) {
 async function readSkillMetadata(input) {
   const raw = await readFile15(input.skillFile, "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT") || isNodeError16(error, "EACCES")) {
+      if (isNodeError17(error, "ENOENT") || isNodeError17(error, "EACCES")) {
         return null;
       }
       throw error;
@@ -18349,7 +18713,7 @@ function normalizeDescription(value) {
 }
 async function readDisabledSkillNames(configPath) {
   const raw = await readFile15(configPath, "utf8").catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+    if (isNodeError17(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -18374,7 +18738,7 @@ async function readSkillProvenance(root) {
 async function readBundledSkillNames(root) {
   const raw = await readFile15(path20.join(root, ".bundled_manifest"), "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -18397,7 +18761,7 @@ async function readBundledSkillNames(root) {
 async function readHubInstalledSkills(root) {
   const raw = await readFile15(path20.join(root, ".hub", "lock.json"), "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -18469,7 +18833,7 @@ function compareCategoryNames(left, right) {
 async function readHermesConfigDocument2(configPath) {
   const existingRaw = await readFile15(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -18484,14 +18848,16 @@ async function readHermesConfigDocument2(configPath) {
 }
 async function writeHermesConfigDocument2(input) {
   const backupPath = input.existingRaw ? `${input.configPath}.bak.${Date.now()}` : null;
-  await mkdir13(path20.dirname(input.configPath), { recursive: true, mode: 448 });
   if (backupPath) {
-    await copyFile4(input.configPath, backupPath);
+    await atomicWriteFilePreservingMetadata(backupPath, input.existingRaw, {
+      metadataSourcePath: input.configPath
+    });
   }
   input.document.contents = input.document.createNode(input.config);
-  const tempPath = `${input.configPath}.tmp.${process.pid}.${Date.now()}`;
-  await writeFile6(tempPath, input.document.toString(), { mode: 384 });
-  await rename7(tempPath, input.configPath);
+  await atomicWriteFilePreservingMetadata(
+    input.configPath,
+    input.document.toString()
+  );
   return backupPath;
 }
 function readStringList3(value) {
@@ -18514,7 +18880,7 @@ function ensureRecord3(target, key) {
   target[key] = current;
   return current;
 }
-function isNodeError16(error, code) {
+function isNodeError17(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -18996,7 +19362,7 @@ function readModelList(payload) {
 // src/hermes/updates.ts
 import { EventEmitter as EventEmitter3 } from "events";
 import { spawn as spawn3 } from "child_process";
-import { mkdir as mkdir14, readFile as readFile16, rm as rm8 } from "fs/promises";
+import { mkdir as mkdir10, readFile as readFile16, rm as rm8 } from "fs/promises";
 import path21 from "path";
 var SERVER_HERMES_RELEASES_LATEST_PATH = "/api/v1/hermes-agent/releases/latest";
 var RELEASE_CACHE_TTL_MS = 6 * 60 * 60 * 1e3;
@@ -19057,7 +19423,7 @@ async function startHermesUpdate(options) {
     signal: null,
     error: null
   };
-  await mkdir14(options.paths.runDir, { recursive: true, mode: 448 });
+  await mkdir10(options.paths.runDir, { recursive: true, mode: 448 });
   await writer.write(`
 === hermes update started ${startedAt} ===
 `);
@@ -19361,17 +19727,17 @@ function readString17(payload, key) {
 // src/link/updates.ts
 import { spawn as spawn5 } from "child_process";
 import { EventEmitter as EventEmitter4 } from "events";
-import { mkdir as mkdir17, readFile as readFile18, rm as rm11 } from "fs/promises";
+import { mkdir as mkdir13, readFile as readFile18, rm as rm11 } from "fs/promises";
 import path23 from "path";
 
 // src/daemon/process.ts
 import { spawn as spawn4 } from "child_process";
-import { mkdir as mkdir16, readFile as readFile17, rm as rm10 } from "fs/promises";
+import { mkdir as mkdir12, readFile as readFile17, rm as rm10 } from "fs/promises";
 import path22 from "path";
 
 // src/daemon/service.ts
 import { createServer } from "http";
-import { mkdir as mkdir15, rm as rm9, writeFile as writeFile7 } from "fs/promises";
+import { mkdir as mkdir11, rm as rm9, writeFile as writeFile3 } from "fs/promises";
 
 // src/relay/control-client.ts
 import WebSocket from "ws";
@@ -20093,6 +20459,7 @@ var DEFAULT_STARTUP_REPORT_MIN_INTERVAL_MS = 15 * 6e4;
 function startLanIpMonitor(options) {
   let running = false;
   let closed = false;
+  let current = Promise.resolve();
   const check = async (context = {}) => {
     if (running || closed) {
       return;
@@ -20108,15 +20475,16 @@ function startLanIpMonitor(options) {
       running = false;
     }
   };
-  void check({ forceReport: true, publishToRelay: true });
+  current = check({ forceReport: true, publishToRelay: true });
   const timer = setInterval(() => {
-    void check();
+    current = check();
   }, options.intervalMs ?? DEFAULT_INTERVAL_MS);
   timer.unref?.();
   return {
-    close() {
+    async close() {
       closed = true;
       clearInterval(timer);
+      await current.catch(() => void 0);
     }
   };
 }
@@ -20186,6 +20554,7 @@ async function checkLanIpChange(options, context = {}) {
 // src/daemon/scheduler.ts
 function startCronDeliveryScheduler(options) {
   let running = false;
+  let current = Promise.resolve();
   const syncCronDeliveries = async () => {
     if (running) {
       return;
@@ -20206,17 +20575,19 @@ function startCronDeliveryScheduler(options) {
     }
   };
   const timer = setInterval(() => {
-    void syncCronDeliveries();
+    current = syncCronDeliveries();
   }, options.intervalMs ?? 3e4);
   timer.unref?.();
   return {
-    close() {
+    async close() {
       clearInterval(timer);
+      await current.catch(() => void 0);
     }
   };
 }
 function startHermesSessionSyncScheduler(options) {
   let running = false;
+  let current = Promise.resolve();
   const syncSessions = async () => {
     if (running) {
       return;
@@ -20233,12 +20604,13 @@ function startHermesSessionSyncScheduler(options) {
     }
   };
   const timer = setInterval(() => {
-    void syncSessions();
+    current = syncSessions();
   }, options.intervalMs ?? 10 * 60 * 1e3);
   timer.unref?.();
   return {
-    close() {
+    async close() {
       clearInterval(timer);
+      await current.catch(() => void 0);
     }
   };
 }
@@ -20262,8 +20634,9 @@ async function startLinkService(options = {}) {
   }
   const conversations = new ConversationService(paths, logger);
   await conversations.rebuildStatisticsIndex();
+  let hermesSessionSync = Promise.resolve();
   const triggerHermesSessionSync = () => {
-    void conversations.syncHermesSessions().catch((error) => {
+    hermesSessionSync = Promise.resolve().then(() => conversations.syncHermesSessions()).then(() => void 0).catch((error) => {
       void logger.warn("hermes_session_sync_failed", {
         error: error instanceof Error ? error.message : String(error)
       });
@@ -20337,11 +20710,14 @@ async function startLinkService(options = {}) {
   }
   return {
     async close() {
-      scheduler.close();
-      hermesSessionSyncScheduler.close();
-      lanIpMonitor.close();
       relay?.close();
       await closeServer(server);
+      await Promise.all([
+        scheduler.close(),
+        hermesSessionSyncScheduler.close(),
+        lanIpMonitor.close(),
+        hermesSessionSync.catch(() => void 0)
+      ]);
       await logger.info("service_stopped");
       await logger.flush();
       if (options.writePidFile) {
@@ -20354,8 +20730,8 @@ function pidFilePath(paths = resolveRuntimePaths()) {
   return `${paths.runDir}/hermeslink.pid`;
 }
 async function writePidFile(paths) {
-  await mkdir15(paths.runDir, { recursive: true, mode: 448 });
-  await writeFile7(pidFilePath(paths), `${process.pid}
+  await mkdir11(paths.runDir, { recursive: true, mode: 448 });
+  await writeFile3(pidFilePath(paths), `${process.pid}
 `, { mode: 384 });
 }
 async function closeServer(server) {
@@ -20429,8 +20805,8 @@ async function startDaemonProcess(paths = resolveRuntimePaths()) {
       return status;
     }
   }
-  await mkdir16(paths.logsDir, { recursive: true, mode: 448 });
-  await mkdir16(paths.runDir, { recursive: true, mode: 448 });
+  await mkdir12(paths.logsDir, { recursive: true, mode: 448 });
+  await mkdir12(paths.runDir, { recursive: true, mode: 448 });
   const scriptPath = currentCliScriptPath();
   const child = spawn4(process.execPath, [scriptPath, "daemon-supervisor"], {
     detached: true,
@@ -20448,7 +20824,7 @@ async function startDaemonProcess(paths = resolveRuntimePaths()) {
   return await getDaemonStatus(paths);
 }
 async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
-  await mkdir16(paths.logsDir, { recursive: true, mode: 448 });
+  await mkdir12(paths.logsDir, { recursive: true, mode: 448 });
   const log = createRotatingTextLogWriter({
     paths,
     fileName: path22.basename(daemonLogFile(paths))
@@ -20692,7 +21068,7 @@ async function startLinkUpdate(options) {
     error: null,
     manual_command: manualCommand
   };
-  await mkdir17(options.paths.runDir, { recursive: true, mode: 448 });
+  await mkdir13(options.paths.runDir, { recursive: true, mode: 448 });
   await writer.write(
     `
 === link update started ${startedAt} target=${targetVersion} ===