@hermespilot/link 0.5.8 → 0.5.9

package/dist/{chunk-M64JBORD.js → chunk-52SUJB7K.js}

@@ -4425,7 +4425,7 @@ async function listCronOutputFiles(profileName, jobId) {
       mtimeMs: fileStat.mtimeMs
     });
   }
-  return files.sort((left, right) => left.mtimeMs - right.mtimeMs).map(({ path: path27, mtime }) => ({ path: path27, mtime }));
+  return files.sort((left, right) => left.mtimeMs - right.mtimeMs).map(({ path: path28, mtime }) => ({ path: path28, mtime }));
 }
 async function readCronOutput(outputPath) {
   const content = await readFile3(outputPath, "utf8");
@@ -4502,7 +4502,7 @@ import os2 from "os";
 import path5 from "path";
 
 // src/constants.ts
-var LINK_VERSION = "0.5.8";
+var LINK_VERSION = "0.5.9";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -6375,6 +6375,27 @@ function estimateContextUsage(input) {
     context_source: "estimated"
   };
 }
+function resolveRuntimeContextUsage(input) {
+  const usage = input.usage;
+  const contextWindow = input.contextWindow ?? usage?.context_window;
+  if (!usage) {
+    return { source: "unknown", contextWindow };
+  }
+  const explicitContextTokens = usage.context_tokens !== void 0 && usage.context_source !== "estimated" ? usage.context_tokens : void 0;
+  const estimatedContextTokens = usage.context_tokens !== void 0 && usage.context_source === "estimated" ? usage.context_tokens : void 0;
+  const contextTokens = explicitContextTokens ?? (usage.total_tokens > 0 ? usage.total_tokens : void 0) ?? estimatedContextTokens;
+  if (contextTokens === void 0) {
+    return { source: "unknown", contextWindow };
+  }
+  const source = explicitContextTokens !== void 0 || usage.total_tokens > 0 ? "explicit" : "estimated";
+  const computedPercent = contextWindow && contextWindow > 0 ? Math.min(100, Math.round(contextTokens / contextWindow * 100)) : void 0;
+  return {
+    contextTokens,
+    contextWindow,
+    source,
+    usagePercent: explicitContextTokens !== void 0 || source === "estimated" ? usage.usage_percent ?? computedPercent : computedPercent
+  };
+}
 function isAgentRun(run) {
   return run.kind !== "command";
 }
@@ -7116,9 +7137,12 @@ async function buildConversationRuntimeMetadata(paths, manifest, snapshot) {
     output_tokens: 0,
     total_tokens: 0
   };
-  const contextWindow = current.contextWindow ?? usage.context_window ?? usageRun?.context_window;
-  const contextTokens = usage.context_tokens;
-  const contextSource = contextTokens === void 0 ? "unknown" : usage.context_source ?? "explicit";
+  const runtimeContext = resolveRuntimeContextUsage({
+    usage: usageRun?.usage,
+    contextWindow: current.contextWindow ?? usage.context_window ?? usageRun?.context_window
+  });
+  const contextTokens = runtimeContext.contextTokens;
+  const contextWindow = runtimeContext.contextWindow;
   const provider = current.provider ?? usageRun?.provider;
   const reasoningEffort = current.reasoningEffort;
   return {
@@ -7141,13 +7165,8 @@ async function buildConversationRuntimeMetadata(paths, manifest, snapshot) {
       ...contextWindow ? { context_window: contextWindow } : {},
       ...contextTokens !== void 0 ? { used_tokens: contextTokens } : {},
       ...contextWindow ? { window_tokens: contextWindow } : {},
-      source: contextSource,
-      ...contextWindow && contextTokens !== void 0 ? {
-        usage_percent: Math.min(
-          100,
-          usage.usage_percent ?? Math.round(contextTokens / contextWindow * 100)
-        )
-      } : {},
+      source: runtimeContext.source,
+      ...runtimeContext.usagePercent !== void 0 ? { usage_percent: runtimeContext.usagePercent } : {},
       ...usageRun?.completed_at ? { updated_at: usageRun.completed_at } : {}
     }
   };
@@ -9998,10 +10017,12 @@ function upsertAgentEventProjection(events, next) {
     next.subtitle,
     next.title
   );
+  const status = next.status === "running" && previous.status !== "running" ? previous.status : next.status;
   const merged = {
     ...previous,
     ...next,
     id: previous.id,
+    status,
     title: isGenericToolTitle(next.title) ? previous.title : next.title,
     created_at: earliestTimestamp(previous.created_at, next.created_at),
     subtitle: nextSubtitleIsFallback ? previous.subtitle ?? next.subtitle : next.subtitle ?? previous.subtitle,
@@ -12629,7 +12650,7 @@ function isNodeError11(error, code) {
 }
 
 // src/conversations/run-lifecycle.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 import { readdir as readdir8 } from "fs/promises";
 
 // src/hermes/api-server.ts
@@ -12755,16 +12776,38 @@ async function runHermesCronJobAction(jobId, action, options = {}) {
 }
 async function createHermesRun(input, options = {}) {
   const headers = new Headers({ "content-type": "application/json" });
-  await applySessionKeyHeader(headers, input.session_key, options);
-  const response = await callHermesApi(
+  const sessionKeyHeader = await applySessionKeyHeader(
+    headers,
+    input.session_key,
+    options
+  );
+  const requestBody = buildHermesRunRequestBody(input);
+  let response = await callHermesApi(
     "/v1/runs",
     {
       method: "POST",
-      body: JSON.stringify(input),
-      headers
+      body: JSON.stringify(requestBody),
+      headers,
+      signal: options.signal
     },
     options
   );
+  if (response.status === 403 && sessionKeyHeader && await isSessionKeyRejected(response.clone())) {
+    void options.logger?.warn("hermes_session_key_rejected_downgrading", {
+      profile: options.profileName ?? "default"
+    });
+    headers.delete(sessionKeyHeader);
+    response = await callHermesApi(
+      "/v1/runs",
+      {
+        method: "POST",
+        body: JSON.stringify(requestBody),
+        headers,
+        signal: options.signal
+      },
+      options
+    );
+  }
   if (response.status === 404 || response.status === 503) {
     assertHermesRunsApiSupported(
       await readHermesVersion({ logger: options.logger }).catch(() => null),
@@ -12787,6 +12830,53 @@ async function createHermesRun(input, options = {}) {
   }
   return { run_id: runId, fallback: false };
 }
+function buildHermesRunRequestBody(input) {
+  return {
+    input: input.input,
+    ...input.instructions ? { instructions: input.instructions } : {},
+    ...input.conversation_history && input.conversation_history.length > 0 ? { conversation_history: input.conversation_history } : {},
+    ...input.session_id ? { session_id: input.session_id } : {},
+    ...input.model ? { model: input.model } : {}
+  };
+}
+async function readHermesRunStatus(runId, options = {}) {
+  const response = await callHermesApi(
+    `/v1/runs/${encodeURIComponent(runId)}`,
+    { method: "GET", signal: options.signal },
+    options
+  );
+  if (response.status === 404) {
+    return null;
+  }
+  assertHermesRunsApiSupported(
+    await readHermesVersion({ logger: options.logger }).catch(() => null),
+    response.status
+  );
+  const payload = await readJsonResponse(response);
+  const status = readString10(payload, "status");
+  const resolvedRunId = readString10(payload, "run_id") ?? readString10(payload, "runId") ?? runId;
+  if (!status) {
+    throw new LinkHttpError(
+      502,
+      "hermes_run_status_invalid",
+      "Hermes API Server did not return a run status"
+    );
+  }
+  return {
+    object: readString10(payload, "object") ?? void 0,
+    run_id: resolvedRunId,
+    status,
+    output: payload.output,
+    usage: payload.usage,
+    error: payload.error,
+    last_event: readString10(payload, "last_event") ?? void 0,
+    session_id: readString10(payload, "session_id") ?? void 0,
+    model: readString10(payload, "model") ?? void 0,
+    created_at: payload.created_at,
+    updated_at: payload.updated_at,
+    raw: payload
+  };
+}
 async function streamHermesRunEvents(runId, options = {}) {
   const response = await callHermesApi(
     `/v1/runs/${encodeURIComponent(runId)}/events`,
@@ -12995,10 +13085,10 @@ function parseHermesApiCapabilities(payload) {
     sessionKeyHeader: readString10(features, "session_key_header")
   };
 }
-async function callHermesApi(path27, init, options) {
+async function callHermesApi(path28, init, options) {
   const method = init.method ?? "GET";
   const startedAt = Date.now();
-  void options.logger?.debug("hermes_api_request_started", { method, path: path27 });
+  void options.logger?.debug("hermes_api_request_started", { method, path: path28 });
   const availability = await ensureHermesApiServerAvailable({
     fetchImpl: options.fetchImpl,
     logger: options.logger,
@@ -13006,7 +13096,7 @@ async function callHermesApi(path27, init, options) {
   });
   let config = availability.configResult.apiServer;
   const fetcher = options.fetchImpl ?? fetch;
-  const request = () => fetchHermesApi(fetcher, config, path27, init, options);
+  const request = () => fetchHermesApi(fetcher, config, path28, init, options);
   let response;
   try {
     response = await request();
@@ -13014,7 +13104,7 @@ async function callHermesApi(path27, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path27,
+      path28,
       options.profileName,
       startedAt,
       error
@@ -13025,7 +13115,7 @@ async function callHermesApi(path27, init, options) {
     logHermesApiResponse(
       options.logger,
       method,
-      path27,
+      path28,
       options.profileName,
       startedAt,
       response
@@ -13034,7 +13124,7 @@ async function callHermesApi(path27, init, options) {
   }
   void options.logger?.warn("hermes_api_request_retrying_after_401", {
     method,
-    path: path27,
+    path: path28,
     profile: options.profileName ?? "default",
     port: config.port ?? null,
     duration_ms: Date.now() - startedAt
@@ -13052,7 +13142,7 @@ async function callHermesApi(path27, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path27,
+      path28,
       options.profileName,
       startedAt,
       error
@@ -13062,7 +13152,7 @@ async function callHermesApi(path27, init, options) {
   logHermesApiResponse(
     options.logger,
     method,
-    path27,
+    path28,
     options.profileName,
     startedAt,
     response
@@ -13072,7 +13162,7 @@ async function callHermesApi(path27, init, options) {
   }
   void options.logger?.warn("hermes_api_request_repairing_after_401", {
     method,
-    path: path27,
+    path: path28,
     profile: options.profileName ?? "default",
     port: config.port ?? null,
     duration_ms: Date.now() - startedAt
@@ -13092,7 +13182,7 @@ async function callHermesApi(path27, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path27,
+      path28,
       options.profileName,
       startedAt,
       error
@@ -13102,21 +13192,21 @@ async function callHermesApi(path27, init, options) {
   logHermesApiResponse(
     options.logger,
     method,
-    path27,
+    path28,
     options.profileName,
     startedAt,
     response
   );
   return response;
 }
-async function fetchHermesApi(fetcher, config, path27, init, options) {
+async function fetchHermesApi(fetcher, config, path28, init, options) {
   const headers = new Headers(init.headers);
   headers.set("accept", headers.get("accept") ?? "application/json");
   if (config.key) {
     headers.set("x-api-key", config.key);
     headers.set("authorization", `Bearer ${config.key}`);
   }
-  return await fetcher(`http://127.0.0.1:${config.port}${path27}`, {
+  return await fetcher(`http://127.0.0.1:${config.port}${path28}`, {
     ...init,
     headers
   }).catch((error) => {
@@ -13125,10 +13215,10 @@ async function fetchHermesApi(fetcher, config, path27, init, options) {
     }
     void options.logger?.warn("hermes_api_server_connect_failed", {
       method: String(init.method ?? "GET").toUpperCase(),
-      path: path27,
+      path: path28,
       profile: options.profileName ?? "default",
       port: config.port ?? null,
-      url: `http://127.0.0.1:${config.port}${path27}`,
+      url: `http://127.0.0.1:${config.port}${path28}`,
       error: error instanceof Error ? error.message : String(error)
     });
     throw new LinkHttpError(
@@ -13138,10 +13228,10 @@ async function fetchHermesApi(fetcher, config, path27, init, options) {
     );
   });
 }
-function logHermesApiResponse(logger, method, path27, profileName, startedAt, response) {
+function logHermesApiResponse(logger, method, path28, profileName, startedAt, response) {
   const fields = {
     method,
-    path: path27,
+    path: path28,
     profile: profileName ?? "default",
     status: response.status,
     duration_ms: Date.now() - startedAt
@@ -13162,10 +13252,10 @@ async function logHermesApiFailureResponse(logger, fields, response) {
     ...upstreamError ? { upstream_error: upstreamError } : {}
   });
 }
-function logHermesApiError(logger, method, path27, profileName, startedAt, error) {
+function logHermesApiError(logger, method, path28, profileName, startedAt, error) {
   void logger?.warn("hermes_api_request_failed", {
     method,
-    path: path27,
+    path: path28,
     profile: profileName ?? "default",
     duration_ms: Date.now() - startedAt,
     ...error instanceof LinkHttpError ? { status: error.status, code: error.code } : {},
@@ -13943,6 +14033,587 @@ function toRecord9(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 
+// src/conversations/run-backend.ts
+var RUNS_BACKEND_VALUES = /* @__PURE__ */ new Set(["run", "runs", "v1/runs", "/v1/runs"]);
+var RESPONSES_BACKEND_VALUES = /* @__PURE__ */ new Set([
+  "response",
+  "responses",
+  "v1/responses",
+  "/v1/responses"
+]);
+function resolveConversationRunBackend(env = process.env) {
+  const raw = (env.HERMESLINK_CONVERSATION_BACKEND ?? env.HERMESLINK_CHAT_BACKEND ?? "").trim().toLowerCase();
+  if (RESPONSES_BACKEND_VALUES.has(raw)) {
+    return "responses";
+  }
+  if (RUNS_BACKEND_VALUES.has(raw)) {
+    return "runs";
+  }
+  return "runs";
+}
+function isRunToolResultCompensationEnabled(env = process.env) {
+  const raw = env.HERMESLINK_RUN_TOOL_RESULT_COMPENSATION?.trim().toLowerCase();
+  return raw === "1" || raw === "true" || raw === "yes" || raw === "on";
+}
+
+// src/conversations/run-transcript-enrichment.ts
+import { readFile as readFile12, stat as stat12 } from "fs/promises";
+import path19 from "path";
+var MESSAGE_COLUMNS2 = [
+  "id",
+  "session_id",
+  "role",
+  "content",
+  "tool_call_id",
+  "tool_calls",
+  "tool_name",
+  "timestamp"
+];
+async function buildRunTranscriptEvents(input) {
+  const sessionId = input.hermesSessionId.trim();
+  if (!sessionId) {
+    return [];
+  }
+  const profileName = isValidProfileName3(input.profileName) ? input.profileName : "default";
+  const rows = await readHermesTranscriptRows(profileName, sessionId);
+  if (rows.length === 0) {
+    return [];
+  }
+  const lowerBoundSeconds = runStartedLowerBoundSeconds(input.runStartedAt);
+  const reusableEventIds = groupReusableToolEventIds(
+    input.assistant?.agent_events ?? []
+  );
+  const events = [];
+  const pendingToolCalls = [];
+  const toolCallsById = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    if (!isRunRow(row, lowerBoundSeconds)) {
+      continue;
+    }
+    const role = normalizeRole(row.role);
+    if (role === "assistant") {
+      for (const toolCall of readHermesToolCalls2(row)) {
+        const pending = { toolCall };
+        pendingToolCalls.push(pending);
+        if (toolCall.id) {
+          toolCallsById.set(toolCall.id, pending);
+        }
+      }
+      continue;
+    }
+    if (role === "tool") {
+      const pending = consumePendingToolCall2({
+        toolMessage: row,
+        pendingToolCalls,
+        toolCallsById
+      });
+      if (!pending) {
+        continue;
+      }
+      events.push(
+        toolCompletedEvent(
+          row,
+          pending,
+          consumeReusableToolEventId(reusableEventIds, pending, row)
+        )
+      );
+    }
+  }
+  return events;
+}
+async function readHermesTranscriptRows(profileName, sessionId) {
+  const profileDir = resolveHermesProfileDir(profileName);
+  const dbPath = path19.join(profileDir, "state.db");
+  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path19.join(profileDir, "sessions"));
+  const [dbRows, jsonlRows] = await Promise.all([
+    readStateDbMessages2(dbPath, sessionId),
+    readJsonlMessages2(sessionsDir, sessionId)
+  ]);
+  return selectTranscriptRows(dbRows, jsonlRows);
+}
+function selectTranscriptRows(dbRows, jsonlRows) {
+  if (jsonlRows.length === 0) {
+    return dbRows;
+  }
+  if (dbRows.length === 0) {
+    return jsonlRows;
+  }
+  if (jsonlRows.length <= dbRows.length) {
+    return dbRows;
+  }
+  const jsonlTimestampedRows = jsonlRows.filter(
+    (row) => hasUsableTimestamp(row.timestamp)
+  ).length;
+  const dbTimestampedRows = dbRows.filter(
+    (row) => hasUsableTimestamp(row.timestamp)
+  ).length;
+  if (jsonlTimestampedRows === 0 && dbTimestampedRows > 0) {
+    return dbRows;
+  }
+  return jsonlRows;
+}
+async function readStateDbMessages2(dbPath, sessionId) {
+  if (!await isFile2(dbPath)) {
+    return [];
+  }
+  let db = null;
+  try {
+    db = openSqliteDatabase(dbPath, {
+      readonly: true,
+      timeout: 1e3
+    });
+    const columns = readTableColumns3(db, "messages");
+    if (!columns.has("session_id") || !columns.has("role")) {
+      return [];
+    }
+    const selectColumns = MESSAGE_COLUMNS2.map(
+      (column) => columns.has(column) ? quoteIdentifier2(column) : `NULL AS ${column}`
+    ).join(", ");
+    return db.prepare(
+      `
+        SELECT ${selectColumns}
+        FROM messages
+        WHERE session_id = ?
+        ORDER BY timestamp, id
+      `
+    ).all(sessionId);
+  } catch {
+    return [];
+  } finally {
+    db?.close();
+  }
+}
+async function readJsonlMessages2(sessionsDir, sessionId) {
+  if (!/^[A-Za-z0-9._:-]{1,160}$/u.test(sessionId)) {
+    return [];
+  }
+  const transcriptPath = path19.join(sessionsDir, `${sessionId}.jsonl`);
+  const raw = await readFile12(transcriptPath, "utf8").catch((error) => {
+    if (isNodeError13(error, "ENOENT")) {
+      return "";
+    }
+    throw error;
+  });
+  if (!raw.trim()) {
+    return [];
+  }
+  const rows = [];
+  for (const line of raw.split(/\r?\n/u)) {
+    if (!line.trim()) {
+      continue;
+    }
+    try {
+      const parsed = JSON.parse(line);
+      const role = readString12(parsed, "role");
+      if (!role) {
+        continue;
+      }
+      rows.push({
+        ...parsed,
+        role,
+        content: normalizeContent3(parsed.content),
+        timestamp: readNumber3(parsed.timestamp) ?? readNumber3(parsed.created_at) ?? readNumber3(parsed.createdAt) ?? void 0
+      });
+    } catch {
+      continue;
+    }
+  }
+  return rows;
+}
+function readHermesToolCalls2(row) {
+  const decoded = parseJsonValue2(row.tool_calls) ?? row.tool_calls;
+  const values = Array.isArray(decoded) ? decoded : decoded ? [decoded] : [];
+  return values.map((value) => normalizeHermesToolCall2(value)).filter(
+    (toolCall) => Boolean(toolCall)
+  );
+}
+function normalizeHermesToolCall2(value) {
+  const record = toRecord10(value);
+  if (Object.keys(record).length === 0) {
+    return null;
+  }
+  const fn = toRecord10(record.function);
+  const id = readString12(record, "id") ?? readString12(record, "call_id") ?? readString12(record, "tool_call_id") ?? readString12(fn, "id") ?? void 0;
+  const name = readString12(fn, "name") ?? readString12(record, "name") ?? readString12(record, "tool_name") ?? readString12(record, "tool") ?? "tool";
+  const rawArguments = fn.arguments ?? record.arguments ?? record.args ?? record.input;
+  return {
+    ...id ? { id } : {},
+    name,
+    ...rawArguments === void 0 ? {} : { arguments: parseJsonValue2(rawArguments) ?? rawArguments },
+    raw: value
+  };
+}
+function consumePendingToolCall2(input) {
+  const toolCallId = readString12(input.toolMessage, "tool_call_id");
+  const toolName = readString12(input.toolMessage, "tool_name");
+  let pending = toolCallId ? input.toolCallsById.get(toolCallId) : void 0;
+  if (!pending && toolName) {
+    pending = input.pendingToolCalls.find(
+      (item) => item.toolCall.name === toolName
+    );
+  }
+  pending ??= input.pendingToolCalls[0];
+  if (!pending) {
+    return void 0;
+  }
+  const index = input.pendingToolCalls.indexOf(pending);
+  if (index >= 0) {
+    input.pendingToolCalls.splice(index, 1);
+  }
+  if (pending.toolCall.id) {
+    input.toolCallsById.delete(pending.toolCall.id);
+  }
+  return pending;
+}
+function toolCompletedEvent(row, pending, existingEventId) {
+  const output = normalizeContent3(row.content);
+  const parsedOutput = parseJsonValue2(output);
+  const toolCallId = readString12(row, "tool_call_id") ?? pending?.toolCall.id;
+  const toolName = readString12(row, "tool_name") ?? pending?.toolCall.name ?? "tool";
+  const payload = {
+    type: "tool.completed",
+    event: "tool.completed",
+    tool: toolName,
+    tool_name: toolName,
+    name: toolName,
+    ...existingEventId ? {
+      id: existingEventId,
+      ...toolCallId ? { hermes_tool_call_id: toolCallId } : {}
+    } : toolCallId ? { tool_call_id: toolCallId, id: toolCallId } : {},
+    ...pending?.toolCall.arguments === void 0 ? {} : { arguments: pending.toolCall.arguments },
+    output,
+    content: output,
+    result: parsedOutput ?? output,
+    ...pending ? { tool_call: pending.toolCall.raw } : {},
+    timestamp: row.timestamp
+  };
+  return {
+    eventName: "tool.completed",
+    payloadType: "tool.completed",
+    payload,
+    rawPayload: {
+      format: "hermes-message",
+      message: row,
+      ...pending ? { tool_call: pending.toolCall.raw } : {}
+    }
+  };
+}
+function groupReusableToolEventIds(events) {
+  const grouped = /* @__PURE__ */ new Map();
+  for (const event of events) {
+    if (event.kind && event.kind !== "tool") {
+      continue;
+    }
+    const key = normalizeToolTitle(event.title);
+    if (!key) {
+      continue;
+    }
+    grouped.set(key, [...grouped.get(key) ?? [], event.id]);
+  }
+  return grouped;
+}
+function consumeReusableToolEventId(grouped, pending, row) {
+  const toolName = pending?.toolCall.name ?? readString12(row, "tool_name") ?? "tool";
+  const key = normalizeToolTitle(humanizeToolName2(toolName));
+  const ids = grouped.get(key);
+  const id = ids?.shift();
+  if (ids && ids.length === 0) {
+    grouped.delete(key);
+  }
+  return id;
+}
+function humanizeToolName2(value) {
+  const normalized = value.trim().replace(/([a-z0-9])([A-Z])/gu, "$1 $2").replace(/[_-]+/gu, " ").replace(/\s+/gu, " ");
+  if (!normalized) {
+    return "\u5DE5\u5177\u8C03\u7528";
+  }
+  return normalized.split(" ").map(
+    (part) => part ? `${part[0]?.toUpperCase() ?? ""}${part.slice(1)}` : part
+  ).join(" ");
+}
+function normalizeToolTitle(value) {
+  return value.trim().toLowerCase().replace(/[\s_-]+/gu, "");
+}
+function isRunRow(row, lowerBoundSeconds) {
+  if (lowerBoundSeconds === null) {
+    return true;
+  }
+  const timestamp = readNumber3(row.timestamp);
+  if (!timestamp) {
+    return false;
+  }
+  const seconds = timestamp > 1e10 ? timestamp / 1e3 : timestamp;
+  return seconds >= lowerBoundSeconds;
+}
+function hasUsableTimestamp(value) {
+  return readNumber3(value) !== null;
+}
+function runStartedLowerBoundSeconds(value) {
+  const millis = Date.parse(value);
+  if (Number.isNaN(millis)) {
+    return null;
+  }
+  return millis / 1e3 - 1;
+}
+function normalizeRole(value) {
+  return typeof value === "string" ? value.trim().toLowerCase() : "";
+}
+function normalizeContent3(value) {
+  if (typeof value === "string") {
+    return value;
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => {
+      if (typeof item === "string") {
+        return item;
+      }
+      if (typeof item === "object" && item !== null) {
+        return readString12(item, "text") ?? "";
+      }
+      return "";
+    }).filter(Boolean).join("");
+  }
+  return "";
+}
+function parseJsonValue2(value) {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const trimmed = value.trim();
+  if (!trimmed) {
+    return void 0;
+  }
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return void 0;
+  }
+}
+function readTableColumns3(db, tableName) {
+  try {
+    const rows = db.prepare(`PRAGMA table_info(${quoteIdentifier2(tableName)})`).all();
+    return new Set(
+      rows.map((row) => typeof row.name === "string" ? row.name : "").filter(Boolean)
+    );
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+function quoteIdentifier2(value) {
+  return `"${value.replaceAll('"', '""')}"`;
+}
+async function isFile2(filePath) {
+  return stat12(filePath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError13(error, "ENOENT")) {
+      return false;
+    }
+    throw error;
+  });
+}
+function isValidProfileName3(value) {
+  return typeof value === "string" && /^[a-zA-Z0-9._-]{1,64}$/u.test(value);
+}
+function readString12(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function readNumber3(value) {
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return value;
+  }
+  if (typeof value !== "string" || !value.trim()) {
+    return null;
+  }
+  const numeric = Number(value);
+  if (Number.isFinite(numeric)) {
+    return numeric;
+  }
+  const millis = Date.parse(value);
+  return Number.isNaN(millis) ? null : millis;
+}
+function toRecord10(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function isNodeError13(error, code) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+
+// src/conversations/run-tool-event-ids.ts
+import { createHash as createHash4 } from "crypto";
+var RunToolEventIdCoalescer = class {
+  scope;
+  ordinal = 0;
+  pendingByToolKey = /* @__PURE__ */ new Map();
+  startedByFingerprint = /* @__PURE__ */ new Map();
+  completedByFingerprint = /* @__PURE__ */ new Map();
+  constructor(options) {
+    this.scope = `${options.runId}:${options.hermesRunId ?? ""}`;
+  }
+  normalize(event) {
+    const type = readToolEventType(event);
+    if (!type || hasStableToolEventId(event.payload)) {
+      return event;
+    }
+    const toolKey = normalizeToolKey(readToolName(event.payload));
+    if (type === "tool.started") {
+      return withGeneratedToolEventId(
+        event,
+        this.idForStartedToolEvent(toolKey, event.payload)
+      );
+    }
+    if (isTerminalToolEvent(type)) {
+      return withGeneratedToolEventId(
+        event,
+        this.idForTerminalToolEvent(type, toolKey, event.payload)
+      );
+    }
+    return event;
+  }
+  idForStartedToolEvent(toolKey, payload) {
+    const fingerprint = startedToolEventFingerprint(toolKey, payload);
+    if (fingerprint) {
+      const existing = this.startedByFingerprint.get(fingerprint);
+      if (existing) {
+        return existing.id;
+      }
+    }
+    const pending = {
+      id: this.nextId(toolKey),
+      toolKey
+    };
+    const pendingForTool = this.pendingByToolKey.get(toolKey) ?? [];
+    pendingForTool.push(pending);
+    this.pendingByToolKey.set(toolKey, pendingForTool);
+    if (fingerprint) {
+      this.startedByFingerprint.set(fingerprint, pending);
+    }
+    return pending.id;
+  }
+  idForTerminalToolEvent(type, toolKey, payload) {
+    const pending = this.shiftPendingToolEvent(toolKey);
+    const fingerprint = terminalToolEventFingerprint(type, toolKey, payload);
+    if (pending) {
+      this.completedByFingerprint.set(fingerprint, pending.id);
+      return pending.id;
+    }
+    const existing = this.completedByFingerprint.get(fingerprint);
+    if (existing) {
+      return existing;
+    }
+    const id = this.nextId(toolKey);
+    this.completedByFingerprint.set(fingerprint, id);
+    return id;
+  }
+  shiftPendingToolEvent(toolKey) {
+    const exact = this.shiftPendingByToolKey(toolKey);
+    if (exact) {
+      return exact;
+    }
+    for (const [candidateToolKey] of this.pendingByToolKey) {
+      const pending = this.shiftPendingByToolKey(candidateToolKey);
+      if (pending) {
+        return pending;
+      }
+    }
+    return void 0;
+  }
+  shiftPendingByToolKey(toolKey) {
+    const pendingForTool = this.pendingByToolKey.get(toolKey);
+    const pending = pendingForTool?.shift();
+    if (pendingForTool && pendingForTool.length === 0) {
+      this.pendingByToolKey.delete(toolKey);
+    }
+    return pending;
+  }
+  nextId(toolKey) {
+    this.ordinal += 1;
+    return `tool_${hashStableValue(`${this.scope}:${this.ordinal}:${toolKey}`)}`;
+  }
+};
+function readToolEventType(event) {
+  const type = readString13(event.payload, "type") ?? readString13(event.payload, "event") ?? event.payloadType;
+  return type.startsWith("tool.") ? type : null;
+}
+function isTerminalToolEvent(type) {
+  return type === "tool.completed" || type === "tool.failed" || type === "tool.error";
+}
+function hasStableToolEventId(payload) {
+  const tool = toRecord11(payload.tool);
+  const call = toRecord11(payload.tool_call ?? payload.toolCall);
+  const fn = toRecord11(call.function ?? payload.function);
+  return Boolean(
+    readString13(payload, "tool_call_id") ?? readString13(payload, "toolCallId") ?? readString13(payload, "call_id") ?? readString13(payload, "id") ?? readString13(tool, "id") ?? readString13(call, "id") ?? readString13(fn, "id")
+  );
+}
+function readToolName(payload) {
+  const tool = toRecord11(payload.tool);
+  const call = toRecord11(payload.tool_call ?? payload.toolCall);
+  const fn = toRecord11(call.function ?? payload.function);
+  return readString13(payload, "tool_name") ?? readString13(payload, "toolName") ?? readString13(payload, "name") ?? readString13(payload, "tool") ?? readString13(tool, "name") ?? readString13(call, "name") ?? readString13(fn, "name") ?? "tool";
+}
+function withGeneratedToolEventId(event, id) {
+  return {
+    ...event,
+    payload: {
+      ...event.payload,
+      id,
+      link_tool_event_id: id,
+      link_generated_tool_event_id: true
+    }
+  };
+}
+function startedToolEventFingerprint(toolKey, payload) {
+  const timestamp = payload.timestamp ?? payload.started_at ?? payload.created_at;
+  if (timestamp === void 0 || timestamp === null) {
+    return null;
+  }
+  return stableStringify2({
+    toolKey,
+    timestamp,
+    preview: payload.preview,
+    arguments: payload.arguments ?? payload.args ?? payload.input
+  });
+}
+function terminalToolEventFingerprint(type, toolKey, payload) {
+  return stableStringify2({
+    type,
+    toolKey,
+    timestamp: payload.timestamp ?? payload.completed_at ?? payload.created_at,
+    duration: payload.duration,
+    error: payload.error,
+    output: payload.output ?? payload.content ?? payload.result ?? payload.message ?? null
+  });
+}
+function normalizeToolKey(value) {
+  return value.trim().toLowerCase().replace(/[\s-]+/gu, "_") || "tool";
+}
+function stableStringify2(value) {
+  try {
+    return JSON.stringify(value, (_key, data) => {
+      if (!data || typeof data !== "object" || Array.isArray(data)) {
+        return data;
+      }
+      return Object.fromEntries(
+        Object.entries(data).sort(
+          ([left], [right]) => left.localeCompare(right)
+        )
+      );
+    });
+  } catch {
+    return String(value);
+  }
+}
+function hashStableValue(value) {
+  return createHash4("sha256").update(value).digest("hex").slice(0, 16);
+}
+function readString13(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function toRecord11(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+
 // src/conversations/stream-events.ts
 function normalizeHermesStreamEvent(event) {
   const responseEvent = normalizeHermesResponseEvent(event);
@@ -13963,8 +14634,8 @@ function normalizeHermesStreamEvent(event) {
     };
   }
   if (event.eventName === "hermes.tool.progress") {
-    const toolName = readString12(event.payload, "tool") ?? readString12(event.payload, "name") ?? "tool";
-    const preview = readString12(event.payload, "label") ?? readString12(event.payload, "preview") ?? toolName;
+    const toolName = readString14(event.payload, "tool") ?? readString14(event.payload, "name") ?? "tool";
+    const preview = readString14(event.payload, "label") ?? readString14(event.payload, "preview") ?? toolName;
     return {
       ...event,
       payloadType: "tool.started",
@@ -14039,12 +14710,12 @@ function normalizeHermesResponseEvent(event) {
   }
 }
 function normalizeResponseOutputItemAdded(event) {
-  const item = toRecord10(event.payload.item);
-  if (readString12(item, "type") !== "function_call") {
+  const item = toRecord12(event.payload.item);
+  if (readString14(item, "type") !== "function_call") {
     return null;
   }
-  const toolName = readString12(item, "name") ?? "tool";
-  const argumentsValue = parseJsonValue2(item.arguments) ?? item.arguments;
+  const toolName = readString14(item, "name") ?? "tool";
+  const argumentsValue = parseJsonValue3(item.arguments) ?? item.arguments;
   return {
     ...event,
     payloadType: "tool.started",
@@ -14053,16 +14724,16 @@ function normalizeResponseOutputItemAdded(event) {
       tool: toolName,
       tool_name: toolName,
       name: toolName,
-      tool_call_id: readString12(item, "call_id") ?? readString12(item, "id"),
+      tool_call_id: readString14(item, "call_id") ?? readString14(item, "id"),
       arguments: argumentsValue,
       preview: toolName,
-      response_item_id: readString12(item, "id") ?? void 0
+      response_item_id: readString14(item, "id") ?? void 0
     }
   };
 }
 function normalizeResponseOutputItemDone(event) {
-  const item = toRecord10(event.payload.item);
-  if (readString12(item, "type") === "message") {
+  const item = toRecord12(event.payload.item);
+  if (readString14(item, "type") === "message") {
     const delta = extractResponseAssistantText({ output: [item] });
     return delta ? {
       ...event,
@@ -14070,51 +14741,51 @@ function normalizeResponseOutputItemDone(event) {
       payload: { type: "message.delta", delta }
     } : null;
   }
-  if (readString12(item, "type") !== "function_call_output") {
+  if (readString14(item, "type") !== "function_call_output") {
     return null;
   }
   const output = readResponseItemOutput(item.output);
-  const parsedOutput = parseJsonValue2(output);
+  const parsedOutput = parseJsonValue3(output);
   return {
     ...event,
     payloadType: "tool.completed",
     payload: {
       type: "tool.completed",
-      tool_call_id: readString12(item, "call_id") ?? readString12(item, "id"),
-      status: readString12(item, "status") ?? "completed",
+      tool_call_id: readString14(item, "call_id") ?? readString14(item, "id"),
+      status: readString14(item, "status") ?? "completed",
       output,
       content: output,
       result: parsedOutput ?? output,
-      response_item_id: readString12(item, "id") ?? void 0
+      response_item_id: readString14(item, "id") ?? void 0
     }
   };
 }
 function normalizeResponseCompleted(event) {
-  const response = toRecord10(event.payload.response);
+  const response = toRecord12(event.payload.response);
   return {
     ...event,
     payloadType: "run.completed",
     payload: {
       type: "run.completed",
-      response_id: readString12(response, "id") ?? readString12(event.payload, "id"),
-      usage: toRecord10(response.usage),
+      response_id: readString14(response, "id") ?? readString14(event.payload, "id"),
+      usage: toRecord12(response.usage),
       response
     }
   };
 }
 function normalizeResponseFailed(event) {
-  const response = toRecord10(event.payload.response);
-  const error = toRecord10(response.error);
+  const response = toRecord12(event.payload.response);
+  const error = toRecord12(response.error);
   return {
     ...event,
     payloadType: "run.failed",
     payload: {
       type: "run.failed",
-      response_id: readString12(response, "id") ?? readString12(event.payload, "id"),
+      response_id: readString14(response, "id") ?? readString14(event.payload, "id"),
       error: {
-        message: readString12(error, "message") ?? readString12(event.payload, "message") ?? "Hermes run failed"
+        message: readString14(error, "message") ?? readString14(event.payload, "message") ?? "Hermes run failed"
       },
-      usage: toRecord10(response.usage),
+      usage: toRecord12(response.usage),
       response
     }
   };
@@ -14138,8 +14809,8 @@ function readErrorMessage2(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
-  const error = toRecord10(payload.error);
-  return readString12(error, "message") ?? readString12(payload, "message");
+  const error = toRecord12(payload.error);
+  return readString14(error, "message") ?? readString14(payload, "message");
 }
 function readDelta(payload) {
   return readText2(payload, "delta") ?? readText2(payload, "text") ?? readText2(payload, "content");
@@ -14148,8 +14819,12 @@ function extractResponseAssistantText(value) {
   if (typeof value === "string") {
     return value.trim().length > 0 ? value : null;
   }
-  const payload = toRecord10(value);
-  const response = toRecord10(payload.response ?? value);
+  const payload = toRecord12(value);
+  const response = toRecord12(payload.response ?? value);
+  const directOutput = readText2(response, "output");
+  if (directOutput?.trim()) {
+    return directOutput;
+  }
   const directText = readText2(response, "output_text");
   if (directText?.trim()) {
     return directText;
@@ -14198,15 +14873,15 @@ function isTopLevelErrorEvent(event) {
 }
 function readChatCompletionDelta(payload) {
   const choice = readFirstChoice(payload);
-  const delta = toRecord10(choice.delta);
+  const delta = toRecord12(choice.delta);
   return readText2(delta, "content");
 }
 function readChatCompletionFinishReason(payload) {
   const choice = readFirstChoice(payload);
-  return readString12(choice, "finish_reason") ?? readString12(choice, "finishReason");
+  return readString14(choice, "finish_reason") ?? readString14(choice, "finishReason");
 }
 function readChatCompletionUsage(payload) {
-  const usage = toRecord10(payload.usage);
+  const usage = toRecord12(payload.usage);
   const input = readInteger2(usage, "prompt_tokens") ?? readInteger2(usage, "input_tokens");
   const output = readInteger2(usage, "completion_tokens") ?? readInteger2(usage, "output_tokens");
   const total = readInteger2(usage, "total_tokens");
@@ -14235,15 +14910,15 @@ function readFirstChoice(payload) {
   if (!Array.isArray(choices)) {
     return {};
   }
-  return toRecord10(choices[0]);
+  return toRecord12(choices[0]);
 }
 function readAssistantTextFromChoices(payload) {
   const choices = payload.choices;
   if (!Array.isArray(choices)) {
     return null;
   }
-  const messages = choices.map(toRecord10).map((choice) => toRecord10(choice.message ?? choice.delta)).filter((message) => {
-    const role = readString12(message, "role");
+  const messages = choices.map(toRecord12).map((choice) => toRecord12(choice.message ?? choice.delta)).filter((message) => {
+    const role = readString14(message, "role");
     return !role || role === "assistant";
   }).map(readResponseMessageText).filter((text) => Boolean(text?.trim()));
   return messages.length > 0 ? messages.join("\n\n") : null;
@@ -14259,7 +14934,7 @@ function readInteger2(payload, key) {
   }
   return void 0;
 }
-function readString12(payload, key) {
+function readString14(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -14271,9 +14946,9 @@ function readResponseOutputItemText(value) {
   if (typeof value === "string") {
     return value;
   }
-  const item = toRecord10(value);
-  const type = readString12(item, "type");
-  const role = readString12(item, "role");
+  const item = toRecord12(value);
+  const type = readString14(item, "type");
+  const role = readString14(item, "role");
   if (type && type !== "message" && type !== "output_text" && type !== "text") {
     return null;
   }
@@ -14291,15 +14966,15 @@ function readResponseContentText(value) {
     return value;
   }
   if (!Array.isArray(value)) {
-    const record = toRecord10(value);
+    const record = toRecord12(value);
     return readText2(record, "text") ?? readText2(record, "content") ?? readText2(record, "output_text") ?? readText2(record, "refusal");
   }
   const chunks = value.map((partValue) => {
     if (typeof partValue === "string") {
       return partValue;
     }
-    const part = toRecord10(partValue);
-    const type = readString12(part, "type");
+    const part = toRecord12(partValue);
+    const type = readString14(part, "type");
     if (type && !isVisibleResponseTextPart(type)) {
       return null;
     }
@@ -14318,10 +14993,10 @@ function readResponseItemOutput(value) {
   if (!Array.isArray(value)) {
     return stringifyJsonValue(value);
   }
-  const text = value.map(toRecord10).map((part) => readText2(part, "text") ?? readText2(part, "content") ?? "").join("");
+  const text = value.map(toRecord12).map((part) => readText2(part, "text") ?? readText2(part, "content") ?? "").join("");
   return text || stringifyJsonValue(value);
 }
-function parseJsonValue2(value) {
+function parseJsonValue3(value) {
   if (typeof value !== "string" || !value.trim()) {
     return null;
   }
@@ -14344,11 +15019,14 @@ function stringifyJsonValue(value) {
     return String(value);
   }
 }
-function toRecord10(value) {
+function toRecord12(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 
 // src/conversations/run-lifecycle.ts
+var RUN_STATUS_RECOVERY_TIMEOUT_MS = 10 * 60 * 1e3;
+var RUN_STATUS_RECOVERY_INITIAL_DELAY_MS = 500;
+var RUN_STATUS_RECOVERY_MAX_DELAY_MS = 2500;
 var ConversationRunLifecycle = class {
   constructor(deps) {
     this.deps = deps;
@@ -14363,6 +15041,7 @@ var ConversationRunLifecycle = class {
     const controller = new AbortController();
     this.deps.activeRunControllers.set(runId, { conversationId, controller });
     try {
+      const backend = resolveConversationRunBackend();
       const hermesSessionId = await readHermesCompressionTip(
         run.hermes_session_id,
         this.deps.paths,
@@ -14407,7 +15086,7 @@ var ConversationRunLifecycle = class {
         fallbackInput: input,
         snapshot
       });
-      const previousResponseId = findPreviousHermesResponseId(snapshot, run);
+      const previousResponseId = backend === "responses" ? findPreviousHermesResponseId(snapshot, run) : void 0;
       if (previousResponseId) {
         await this.updateRun(conversationId, runId, {
           previous_response_id: previousResponseId
@@ -14435,99 +15114,98 @@ var ConversationRunLifecycle = class {
       if (estimatedUsage) {
         await this.updateRun(conversationId, runId, { usage: estimatedUsage });
       }
-      const response = await streamHermesResponses(
-        {
-          input: resolvedInput,
-          instructions,
-          session_id: hermesSessionId,
-          session_key: await this.buildHermesSessionKey(
-            conversationId,
-            run.profile ?? "default"
-          ),
-          model: run.model,
-          ...previousResponseId ? { previous_response_id: previousResponseId } : {},
-          ...conversationHistory.messages.length > 0 ? { conversation_history: conversationHistory.messages } : {}
-        },
-        {
-          logger: this.deps.logger,
-          profileName: run.profile,
-          signal: controller.signal
-        }
+      const sessionKey = await this.buildHermesSessionKey(
+        conversationId,
+        run.profile ?? "default"
       );
-      const responseSessionId = response.headers.get("x-hermes-session-id")?.trim();
-      if (responseSessionId) {
-        await this.rememberRunHermesSessionId(
-          conversationId,
-          runId,
-          responseSessionId
+      if (backend === "responses") {
+        const response = await streamHermesResponses(
+          {
+            input: resolvedInput,
+            instructions,
+            session_id: hermesSessionId,
+            session_key: sessionKey,
+            model: run.model,
+            ...previousResponseId ? { previous_response_id: previousResponseId } : {},
+            ...conversationHistory.messages.length > 0 ? { conversation_history: conversationHistory.messages } : {}
+          },
+          {
+            logger: this.deps.logger,
+            profileName: run.profile,
+            signal: controller.signal
+          }
         );
-      }
-      for await (const rawEvent of parseSseResponse(response)) {
-        if (controller.signal.aborted) {
-          await this.deps.withConversationLock(
+        const responseSessionId = response.headers.get("x-hermes-session-id")?.trim();
+        if (responseSessionId) {
+          await this.rememberRunHermesSessionId(
             conversationId,
-            () => this.cancelRunLocked(conversationId, runId, {
-              abortUpstream: false,
-              reason: "cancelled by app"
-            })
+            runId,
+            responseSessionId
           );
-          return;
-        }
-        if (!await this.deps.isConversationRunnable(conversationId)) {
-          return;
         }
-        const event = normalizeHermesStreamEvent(rawEvent);
-        if (!event) {
-          continue;
-        }
-        if (event.payloadType === "run.completed") {
-          if (cronJobIdsBeforeRun) {
-            await this.bindNewCronJobsCreatedByRun({
-              profileName: run.profile,
-              conversationId,
-              beforeJobIds: cronJobIdsBeforeRun
-            });
+        await this.consumeHermesEventStream({
+          backend,
+          conversationId,
+          runId,
+          response,
+          controller,
+          profileName: run.profile,
+          cronJobIdsBeforeRun
+        });
+      } else {
+        const hermesRun = await createHermesRun(
+          {
+            input: resolvedInput,
+            instructions,
+            session_id: hermesSessionId,
+            session_key: sessionKey,
+            model: run.model,
+            ...conversationHistory.messages.length > 0 ? { conversation_history: conversationHistory.messages } : {}
+          },
+          {
+            logger: this.deps.logger,
+            profileName: run.profile,
+            signal: controller.signal
           }
-          await this.deps.syncCronDeliveries().catch((error) => {
-            void this.deps.logger.warn("cron_link_delivery_sync_failed", {
-              conversation_id: conversationId,
-              run_id: runId,
-              error: error instanceof Error ? error.message : String(error)
-            });
-          });
-          await this.appendAssistantTextFromCompletedResponse(
-            conversationId,
-            runId,
-            event
-          );
-          await this.importMediaReferencesForEvent(conversationId, runId, event);
-          if (!await this.runHasAssistantOutput(conversationId, runId)) {
-            await this.failRun(
-              conversationId,
-              runId,
-              await this.buildEmptyHermesResponseMessage({
-                source: "final-empty-response"
-              }),
-              event
-            );
-            return;
+        );
+        await this.updateRun(conversationId, runId, {
+          hermes_run_id: hermesRun.run_id
+        });
+        const response = await streamHermesRunEvents(hermesRun.run_id, {
+          logger: this.deps.logger,
+          profileName: run.profile,
+          signal: controller.signal
+        }).catch(async (error) => {
+          if (controller.signal.aborted) {
+            throw error;
           }
-          await this.completeRun(conversationId, runId, event);
-          this.deps.scheduleTitleRefresh(conversationId);
-          return;
-        }
-        if (event.payloadType === "run.failed") {
-          await this.importMediaReferencesForEvent(conversationId, runId, event);
-          await this.failRun(
+          await this.recoverRunAfterEventStreamOpenFailure({
+            backend,
             conversationId,
             runId,
-            readErrorMessage2(event.payload) ?? "Hermes run failed",
-            event
-          );
+            hermesRunId: hermesRun.run_id,
+            controller,
+            profileName: run.profile,
+            cronJobIdsBeforeRun,
+            error
+          });
+          return null;
+        });
+        if (!response) {
           return;
         }
-        await this.persistHermesEvent(conversationId, runId, event);
+        await this.consumeHermesEventStream({
+          backend,
+          conversationId,
+          runId,
+          response,
+          controller,
+          profileName: run.profile,
+          hermesRunId: hermesRun.run_id,
+          cronJobIdsBeforeRun
+        });
       }
+    } catch (error) {
       if (controller.signal.aborted) {
         await this.deps.withConversationLock(
           conversationId,
@@ -14538,60 +15216,381 @@ var ConversationRunLifecycle = class {
         );
         return;
       }
-      if (await this.runHasAssistantOutput(conversationId, runId)) {
-        await this.completeRun(conversationId, runId);
-      } else {
+      throw error;
+    } finally {
+      if (this.deps.activeRunControllers.get(runId)?.controller === controller) {
+        this.deps.activeRunControllers.delete(runId);
+      }
+    }
+  }
+  async cancelRun(conversationId, runId, options) {
+    return this.deps.withConversationLock(
+      conversationId,
+      () => this.cancelRunLocked(conversationId, runId, options)
+    );
+  }
+  async failRun(conversationId, runId, message, source) {
+    return this.deps.withConversationLock(
+      conversationId,
+      () => this.failRunLocked(conversationId, runId, message, source)
+    );
+  }
+  async findConversationIdForRun(runId) {
+    const entries = await readdirWithDirs(this.deps.paths.conversationsDir);
+    for (const entry of entries) {
+      if (!entry.isDirectory()) {
+        continue;
+      }
+      const snapshot = await this.deps.readSnapshot(entry.name).catch(() => null);
+      if (snapshot?.runs.some((run) => run.id === runId)) {
+        return entry.name;
+      }
+    }
+    return void 0;
+  }
+  async consumeHermesEventStream(input) {
+    let streamError;
+    const iterator = parseSseResponse(input.response)[Symbol.asyncIterator]();
+    const toolEventIds = input.backend === "runs" ? new RunToolEventIdCoalescer({
+      runId: input.runId,
+      hermesRunId: input.hermesRunId
+    }) : null;
+    while (true) {
+      let next;
+      try {
+        next = await iterator.next();
+      } catch (error) {
+        if (input.controller.signal.aborted) {
+          await this.cancelRunAfterAbort(input.conversationId, input.runId);
+          return;
+        }
+        streamError = error;
+        await this.deps.logger.warn("hermes_event_stream_interrupted", {
+          backend: input.backend,
+          conversation_id: input.conversationId,
+          run_id: input.runId,
+          ...input.hermesRunId ? { hermes_run_id: input.hermesRunId } : {},
+          error: error instanceof Error ? error.message : String(error)
+        });
+        break;
+      }
+      if (next.done) {
+        break;
+      }
+      if (input.controller.signal.aborted) {
+        await closeSseIterator(iterator);
+        await this.cancelRunAfterAbort(input.conversationId, input.runId);
+        return;
+      }
+      if (!await this.deps.isConversationRunnable(input.conversationId)) {
+        await closeSseIterator(iterator);
+        return;
+      }
+      const event = normalizeHermesStreamEvent(next.value);
+      if (!event) {
+        continue;
+      }
+      const normalizedEvent = toolEventIds?.normalize(event) ?? event;
+      const handled = await this.handleNormalizedHermesEvent({
+        ...input,
+        event: normalizedEvent
+      });
+      if (handled) {
+        await closeSseIterator(iterator);
+        return;
+      }
+    }
+    if (input.controller.signal.aborted) {
+      await this.cancelRunAfterAbort(input.conversationId, input.runId);
+      return;
+    }
+    if (!await this.deps.isConversationRunnable(input.conversationId)) {
+      return;
+    }
+    const recoveredEvent = input.backend === "runs" && input.hermesRunId ? await this.recoverRunTerminalEvent({
+      conversationId: input.conversationId,
+      runId: input.runId,
+      hermesRunId: input.hermesRunId,
+      profileName: input.profileName,
+      signal: input.controller.signal
+    }) : null;
+    if (recoveredEvent) {
+      const handled = await this.handleNormalizedHermesEvent({
+        ...input,
+        event: recoveredEvent
+      });
+      if (handled) {
+        return;
+      }
+    }
+    if (input.controller.signal.aborted) {
+      await this.cancelRunAfterAbort(input.conversationId, input.runId);
+      return;
+    }
+    if (input.backend === "responses" && !streamError && await this.runHasAssistantOutput(input.conversationId, input.runId)) {
+      await this.completeRun(input.conversationId, input.runId);
+    } else {
+      await this.failRun(
+        input.conversationId,
+        input.runId,
+        await this.buildEmptyHermesResponseMessage({
+          source: streamError ? "stream-error" : "stream-ended-without-terminal-event",
+          ...streamError ? { eventError: formatUnknownErrorMessage(streamError) } : {}
+        })
+      );
+    }
+    this.deps.scheduleTitleRefresh(input.conversationId);
+  }
+  async handleNormalizedHermesEvent(input) {
+    if (input.event.payloadType === "run.completed") {
+      if (input.cronJobIdsBeforeRun) {
+        await this.bindNewCronJobsCreatedByRun({
+          profileName: input.profileName,
+          conversationId: input.conversationId,
+          beforeJobIds: input.cronJobIdsBeforeRun
+        });
+      }
+      await this.deps.syncCronDeliveries().catch((error) => {
+        void this.deps.logger.warn("cron_link_delivery_sync_failed", {
+          conversation_id: input.conversationId,
+          run_id: input.runId,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      });
+      if (input.backend === "runs" && isRunToolResultCompensationEnabled()) {
+        await this.enrichRunFromHermesTranscript({
+          conversationId: input.conversationId,
+          runId: input.runId,
+          profileName: input.profileName
+        });
+      }
+      await this.appendAssistantTextFromCompletedResponse(
+        input.conversationId,
+        input.runId,
+        input.event
+      );
+      await this.importMediaReferencesForEvent(
+        input.conversationId,
+        input.runId,
+        input.event
+      );
+      if (!await this.runHasAssistantOutput(input.conversationId, input.runId)) {
         await this.failRun(
-          conversationId,
-          runId,
+          input.conversationId,
+          input.runId,
           await this.buildEmptyHermesResponseMessage({
-            source: "stream-ended-without-terminal-event"
-          })
+            source: "final-empty-response"
+          }),
+          input.event
         );
+        return true;
       }
-      this.deps.scheduleTitleRefresh(conversationId);
-    } catch (error) {
-      if (controller.signal.aborted) {
-        await this.deps.withConversationLock(
-          conversationId,
-          () => this.cancelRunLocked(conversationId, runId, {
-            abortUpstream: false,
-            reason: "cancelled by app"
-          })
-        );
-        return;
+      await this.completeRun(input.conversationId, input.runId, input.event);
+      this.deps.scheduleTitleRefresh(input.conversationId);
+      return true;
+    }
+    if (input.event.payloadType === "run.failed") {
+      if (input.backend === "runs" && isRunToolResultCompensationEnabled()) {
+        await this.enrichRunFromHermesTranscript({
+          conversationId: input.conversationId,
+          runId: input.runId,
+          profileName: input.profileName
+        });
       }
-      throw error;
-    } finally {
-      if (this.deps.activeRunControllers.get(runId)?.controller === controller) {
-        this.deps.activeRunControllers.delete(runId);
+      await this.importMediaReferencesForEvent(
+        input.conversationId,
+        input.runId,
+        input.event
+      );
+      await this.failRun(
+        input.conversationId,
+        input.runId,
+        readErrorMessage2(input.event.payload) ?? "Hermes run failed",
+        input.event
+      );
+      return true;
+    }
+    if (input.event.payloadType === "run.cancelled") {
+      await this.completeCancelledRun(input.conversationId, input.runId);
+      return true;
+    }
+    await this.persistHermesEvent(input.conversationId, input.runId, input.event);
+    return false;
+  }
+  async recoverRunAfterEventStreamOpenFailure(input) {
+    await this.deps.logger.warn("hermes_event_stream_open_failed", {
+      backend: input.backend,
+      conversation_id: input.conversationId,
+      run_id: input.runId,
+      hermes_run_id: input.hermesRunId,
+      error: input.error instanceof Error ? input.error.message : String(input.error)
+    });
+    const recoveredEvent = await this.recoverRunTerminalEvent({
+      conversationId: input.conversationId,
+      runId: input.runId,
+      hermesRunId: input.hermesRunId,
+      profileName: input.profileName,
+      signal: input.controller.signal
+    });
+    if (recoveredEvent) {
+      const handled = await this.handleNormalizedHermesEvent({
+        backend: input.backend,
+        conversationId: input.conversationId,
+        runId: input.runId,
+        event: recoveredEvent,
+        profileName: input.profileName,
+        cronJobIdsBeforeRun: input.cronJobIdsBeforeRun
+      });
+      if (handled) {
+        return;
       }
     }
+    if (input.controller.signal.aborted) {
+      await this.cancelRunAfterAbort(input.conversationId, input.runId);
+      return;
+    }
+    await this.failRun(
+      input.conversationId,
+      input.runId,
+      await this.buildEmptyHermesResponseMessage({
+        source: "stream-error",
+        eventError: formatUnknownErrorMessage(input.error)
+      })
+    );
   }
-  async cancelRun(conversationId, runId, options) {
-    return this.deps.withConversationLock(
+  async cancelRunAfterAbort(conversationId, runId) {
+    await this.deps.withConversationLock(
       conversationId,
-      () => this.cancelRunLocked(conversationId, runId, options)
+      () => this.cancelRunLocked(conversationId, runId, {
+        abortUpstream: false,
+        reason: "cancelled by app"
+      })
     );
   }
-  async failRun(conversationId, runId, message, source) {
-    return this.deps.withConversationLock(
+  async completeCancelledRun(conversationId, runId) {
+    await this.deps.withConversationLock(
       conversationId,
-      () => this.failRunLocked(conversationId, runId, message, source)
+      () => this.cancelRunLocked(conversationId, runId, {
+        abortUpstream: false,
+        reason: "cancelled by Hermes"
+      })
     );
   }
-  async findConversationIdForRun(runId) {
-    const entries = await readdirWithDirs(this.deps.paths.conversationsDir);
-    for (const entry of entries) {
-      if (!entry.isDirectory()) {
+  async recoverRunTerminalEvent(input) {
+    const deadline = Date.now() + RUN_STATUS_RECOVERY_TIMEOUT_MS;
+    let delayMs = RUN_STATUS_RECOVERY_INITIAL_DELAY_MS;
+    while (!input.signal.aborted) {
+      let status;
+      try {
+        status = await readHermesRunStatus(input.hermesRunId, {
+          logger: this.deps.logger,
+          profileName: input.profileName,
+          signal: input.signal
+        });
+      } catch (error) {
+        if (input.signal.aborted) {
+          return null;
+        }
+        await this.deps.logger.warn("hermes_run_status_recovery_failed", {
+          conversation_id: input.conversationId,
+          run_id: input.runId,
+          hermes_run_id: input.hermesRunId,
+          error: error instanceof Error ? error.message : String(error)
+        });
+        if (Date.now() >= deadline) {
+          return null;
+        }
+        await sleep(Math.min(delayMs, deadline - Date.now()), input.signal);
+        delayMs = Math.min(RUN_STATUS_RECOVERY_MAX_DELAY_MS, delayMs + 250);
         continue;
       }
-      const snapshot = await this.deps.readSnapshot(entry.name).catch(() => null);
-      if (snapshot?.runs.some((run) => run.id === runId)) {
-        return entry.name;
+      if (!status) {
+        return null;
+      }
+      if (status.session_id) {
+        await this.rememberRunHermesSessionId(
+          input.conversationId,
+          input.runId,
+          status.session_id
+        );
+      }
+      const normalizedStatus = status.status.trim().toLowerCase();
+      if (isCompletedRunStatus(normalizedStatus)) {
+        return {
+          eventName: "run.completed",
+          payloadType: "run.completed",
+          payload: {
+            type: "run.completed",
+            run_id: status.run_id,
+            output: status.output,
+            usage: status.usage,
+            status: status.status
+          },
+          rawPayload: status.raw
+        };
+      }
+      if (isFailedRunStatus(normalizedStatus)) {
+        return {
+          eventName: "run.failed",
+          payloadType: "run.failed",
+          payload: {
+            type: "run.failed",
+            run_id: status.run_id,
+            error: {
+              message: readStatusErrorMessage(status.error) ?? "Hermes run failed"
+            },
+            status: status.status,
+            usage: status.usage
+          },
+          rawPayload: status.raw
+        };
+      }
+      if (isCancelledRunStatus(normalizedStatus)) {
+        return {
+          eventName: "run.cancelled",
+          payloadType: "run.cancelled",
+          payload: {
+            type: "run.cancelled",
+            run_id: status.run_id,
+            status: status.status
+          },
+          rawPayload: status.raw
+        };
       }
+      if (Date.now() >= deadline) {
+        return null;
+      }
+      await sleep(Math.min(delayMs, deadline - Date.now()), input.signal);
+      delayMs = Math.min(RUN_STATUS_RECOVERY_MAX_DELAY_MS, delayMs + 250);
+    }
+    return null;
+  }
+  async enrichRunFromHermesTranscript(input) {
+    const snapshot = await this.deps.readSnapshot(input.conversationId).catch(() => null);
+    const run = snapshot?.runs.find((item) => item.id === input.runId);
+    const assistant = snapshot?.messages.find(
+      (message) => message.id === run?.assistant_message_id
+    );
+    if (!snapshot || !run) {
+      return;
+    }
+    const events = await buildRunTranscriptEvents({
+      profileName: input.profileName,
+      hermesSessionId: run.hermes_session_id,
+      runStartedAt: run.started_at,
+      assistant
+    }).catch(async (error) => {
+      await this.deps.logger.warn("hermes_run_transcript_enrichment_failed", {
+        conversation_id: input.conversationId,
+        run_id: input.runId,
+        hermes_session_id: run.hermes_session_id,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return [];
+    });
+    for (const event of events) {
+      await this.persistHermesEvent(input.conversationId, input.runId, event);
     }
-    return void 0;
   }
   async resolveRunInput(input) {
     const userMessage = input.snapshot.messages.find(
@@ -14738,6 +15737,12 @@ ${attachmentLines.join("\n")}`
         "\u8FD9\u66F4\u50CF\u662F Gateway \u6216 provider \u7684\u6D41\u5F0F\u4E8B\u4EF6\u4E2D\u65AD\uFF0C\u4E0D\u662F\u6A21\u578B\u660E\u786E\u5B8C\u6210\u4E86\u7A7A\u56DE\u590D\u3002"
       );
     }
+    if (input?.source === "stream-error") {
+      details.unshift("Hermes \u7684\u8FD0\u884C\u4E8B\u4EF6\u6D41\u8BFB\u53D6\u8FC7\u7A0B\u4E2D\u65AD\u3002");
+      details.push(
+        "Link \u5DF2\u5C1D\u8BD5\u67E5\u8BE2 Hermes run \u7EC8\u6001\uFF0C\u4F46\u4ECD\u6CA1\u6709\u6062\u590D\u5230\u5B8C\u6210\u6216\u5931\u8D25\u4E8B\u4EF6\u3002"
+      );
+    }
     return details.length > 0 ? `Hermes \u6CA1\u6709\u8FD4\u56DE\u6709\u6548\u5185\u5BB9\u3002
 ${details.join("\n")}` : emptyHermesResponseMessage();
   }
@@ -14882,8 +15887,8 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
     }
     const textPart = assistant.parts.find((part) => part.type === "text");
     const currentText = textPart?.text ?? "";
-    const pendingDeliveryText = readString13(
-      toRecord11(assistant.hermes),
+    const pendingDeliveryText = readString15(
+      toRecord13(assistant.hermes),
       "pending_media_delivery_text"
     );
     const normalizedDelta = normalizeStreamingTextDelta(
@@ -14898,7 +15903,7 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
       pendingDeliveryText ?? ""
     );
     const nextHermes = {
-      ...toRecord11(assistant.hermes),
+      ...toRecord13(assistant.hermes),
       ...extracted.pendingText ? { pending_media_delivery_text: extracted.pendingText } : {}
     };
     if (!extracted.pendingText) {
@@ -14977,11 +15982,15 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
     const completedAt = (/* @__PURE__ */ new Date()).toISOString();
     const usage = readUsage(source?.payload);
     const responseId = readResponseId(source?.payload);
+    const hermesRunId = readRunId(source?.payload);
     run.status = "completed";
     run.completed_at = completedAt;
     if (responseId) {
       run.hermes_response_id = responseId;
     }
+    if (hermesRunId) {
+      run.hermes_run_id = hermesRunId;
+    }
     if (usage) {
       run.usage = mergeRunUsage(run.usage, usage);
     }
@@ -15155,7 +16164,7 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
     if (raw.length <= 200) {
       return raw;
     }
-    return `hermespilot:${createHash4("sha256").update(raw).digest("hex")}`;
+    return `hermespilot:${createHash5("sha256").update(raw).digest("hex")}`;
   }
   async assistantMessageIdForRun(conversationId, runId) {
     const snapshot = await this.deps.readSnapshot(conversationId).catch(() => null);
@@ -15176,7 +16185,7 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
       includeDisabled: true
     });
     return new Set(
-      jobs.map((job) => readString13(job, "id") ?? readString13(job, "job_id")).filter((id) => Boolean(id))
+      jobs.map((job) => readString15(job, "id") ?? readString15(job, "job_id")).filter((id) => Boolean(id))
     );
   }
   async bindNewCronJobsCreatedByRun(input) {
@@ -15212,7 +16221,7 @@ function buildRunInstructions(run, deliveryStagingDir) {
   ].join("\n");
 }
 function appendMediaImportFailureNotice(message) {
-  const hermes = toRecord11(message.hermes);
+  const hermes = toRecord13(message.hermes);
   if (hermes.media_import_failure_notice_appended === true) {
     return;
   }
@@ -15256,17 +16265,17 @@ function formatFilenameList(filenames) {
 }
 async function readdirWithDirs(directory) {
   return readdir8(directory, { withFileTypes: true }).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return [];
     }
     throw error;
   });
 }
-function readString13(payload, key) {
+function readString15(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function toRecord11(value) {
+function toRecord13(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 function formatFailureMessage(message, detail) {
@@ -15282,17 +16291,17 @@ function isFileSearchCompletion(payloadType, payload) {
   if (payloadType !== "tool.completed") {
     return false;
   }
-  const tool = toRecord11(payload.tool);
-  const toolCall = toRecord11(payload.tool_call ?? payload.toolCall);
-  const fn = toRecord11(toolCall.function ?? payload.function);
+  const tool = toRecord13(payload.tool);
+  const toolCall = toRecord13(payload.tool_call ?? payload.toolCall);
+  const fn = toRecord13(toolCall.function ?? payload.function);
   const candidates = [
-    readString13(payload, "tool_name"),
-    readString13(payload, "toolName"),
-    readString13(payload, "name"),
-    readString13(payload, "tool"),
-    readString13(tool, "name"),
-    readString13(toolCall, "name"),
-    readString13(fn, "name")
+    readString15(payload, "tool_name"),
+    readString15(payload, "toolName"),
+    readString15(payload, "name"),
+    readString15(payload, "tool"),
+    readString15(tool, "name"),
+    readString15(toolCall, "name"),
+    readString15(fn, "name")
   ].filter((value) => Boolean(value)).map(normalizeToolName);
   return candidates.some(
     (name) => [
@@ -15412,22 +16421,15 @@ function appendAgentEventBlock2(message, event, updatedAt) {
 }
 function contextUsagePayload(run) {
   const usage = run.usage;
-  if (!usage) {
+  const runtimeContext = resolveRuntimeContextUsage({
+    usage,
+    contextWindow: run.context_window
+  });
+  const contextTokens = runtimeContext.contextTokens;
+  const contextWindow = runtimeContext.contextWindow;
+  if (!usage || contextTokens === void 0) {
     return null;
   }
-  const contextTokens = usage?.context_tokens;
-  const contextWindow = usage?.context_window ?? run.context_window;
-  if (contextTokens === void 0) {
-    return {
-      input_tokens: 0,
-      output_tokens: usage.output_tokens ?? 0,
-      total_tokens: usage.total_tokens ?? 0,
-      ...contextWindow ? { context_window: contextWindow } : {},
-      ...contextWindow ? { window_tokens: contextWindow } : {},
-      source: "unknown"
-    };
-  }
-  const contextSource = usage.context_source ?? "explicit";
   return {
     input_tokens: contextTokens,
     output_tokens: usage?.output_tokens ?? 0,
@@ -15435,13 +16437,8 @@ function contextUsagePayload(run) {
     ...contextWindow ? { context_window: contextWindow } : {},
     used_tokens: contextTokens,
     ...contextWindow ? { window_tokens: contextWindow } : {},
-    source: contextSource,
-    ...usage?.usage_percent !== void 0 ? { usage_percent: usage.usage_percent } : contextWindow ? {
-      usage_percent: Math.min(
-        100,
-        Math.round(contextTokens / contextWindow * 100)
-      )
-    } : {}
+    source: runtimeContext.source,
+    ...runtimeContext.usagePercent !== void 0 ? { usage_percent: runtimeContext.usagePercent } : {}
   };
 }
 function mergeRunUsage(previous, next) {
@@ -15506,10 +16503,57 @@ function readResponseId(payload) {
   if (!payload) {
     return null;
   }
-  const response = toRecord11(payload.response);
-  return readString13(payload, "response_id") ?? readString13(response, "id");
+  const response = toRecord13(payload.response);
+  return readString15(payload, "response_id") ?? readString15(response, "id");
 }
-function isNodeError13(error, code) {
+function readRunId(payload) {
+  if (!payload) {
+    return null;
+  }
+  return readString15(payload, "run_id") ?? readString15(payload, "runId");
+}
+function isCompletedRunStatus(status) {
+  return status === "completed" || status === "complete" || status === "succeeded" || status === "success" || status === "done";
+}
+function isFailedRunStatus(status) {
+  return status === "failed" || status === "failure" || status === "error";
+}
+function isCancelledRunStatus(status) {
+  return status === "cancelled" || status === "canceled" || status === "stopped" || status === "aborted";
+}
+function readStatusErrorMessage(value) {
+  if (typeof value === "string" && value.trim()) {
+    return value.trim();
+  }
+  const record = toRecord13(value);
+  return readString15(record, "message") ?? readString15(record, "error");
+}
+function formatUnknownErrorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+async function closeSseIterator(iterator) {
+  if (!iterator.return) {
+    return;
+  }
+  await iterator.return().catch(() => void 0);
+}
+async function sleep(ms, signal) {
+  if (ms <= 0 || signal.aborted) {
+    return;
+  }
+  await new Promise((resolve) => {
+    const timeout = setTimeout(resolve, ms);
+    signal.addEventListener(
+      "abort",
+      () => {
+        clearTimeout(timeout);
+        resolve();
+      },
+      { once: true }
+    );
+  });
+}
+function isNodeError14(error, code) {
   if (typeof error !== "object" || error === null || !("code" in error)) {
     return false;
   }
@@ -16433,7 +17477,7 @@ function findApproval(snapshot, approvalId) {
 }
 
 // src/security/devices.ts
-import { randomBytes as randomBytes2, randomUUID as randomUUID11, timingSafeEqual, createHash as createHash5 } from "crypto";
+import { randomBytes as randomBytes2, randomUUID as randomUUID11, timingSafeEqual, createHash as createHash6 } from "crypto";
 var ACCESS_TOKEN_TTL_MS = 15 * 60 * 1e3;
 var REFRESH_TOKEN_TTL_MS = 90 * 24 * 60 * 60 * 1e3;
 var DEVICE_SEEN_WRITE_INTERVAL_MS = 60 * 60 * 1e3;
@@ -16729,7 +17773,7 @@ function randomToken(prefix) {
   return `${prefix}${randomBytes2(24).toString("base64url")}`;
 }
 function sha256(value) {
-  return createHash5("sha256").update(value).digest("hex");
+  return createHash6("sha256").update(value).digest("hex");
 }
 function safeEqual(left, right) {
   const leftBytes = Buffer.from(left);
@@ -16900,12 +17944,12 @@ async function readRawBody(request, maxBytes) {
   }
   return Buffer.concat(chunks);
 }
-function readString14(body, key) {
+function readString16(body, key) {
   const value = body[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readOptionalProfileName(body) {
-  return readString14(body, "profile") ?? readString14(body, "profile_name") ?? readString14(body, "profileName") ?? void 0;
+  return readString16(body, "profile") ?? readString16(body, "profile_name") ?? readString16(body, "profileName") ?? void 0;
 }
 function readStringArray(body, ...keys) {
   for (const key of keys) {
@@ -17273,7 +18317,7 @@ function registerConversationRoutes(router, options) {
     ctx.body = {
       ok: true,
       conversation: await conversations.createConversation({
-        title: readString14(body, "title") ?? void 0,
+        title: readString16(body, "title") ?? void 0,
         profileName: readOptionalProfileName(body)
       })
     };
@@ -17345,7 +18389,7 @@ function registerConversationRoutes(router, options) {
   router.post("/api/v1/conversations/:conversationId/messages", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const content = readString14(body, "content") ?? readString14(body, "text") ?? readString14(body, "input") ?? "";
+    const content = readString16(body, "content") ?? readString16(body, "text") ?? readString16(body, "input") ?? "";
     const attachments = readMessageAttachments(body.attachments ?? body.blobs);
     if (!content && attachments.length === 0) {
       throw new LinkHttpError(
@@ -17361,7 +18405,7 @@ function registerConversationRoutes(router, options) {
         conversationId: ctx.params.conversationId,
         content,
         attachments,
-        clientMessageId: readString14(body, "client_message_id") ?? readString14(body, "clientMessageId") ?? void 0,
+        clientMessageId: readString16(body, "client_message_id") ?? readString16(body, "clientMessageId") ?? void 0,
         idempotencyKey: readHeader(ctx, "idempotency-key") ?? void 0,
         profileName: readOptionalProfileName(body)
       })
@@ -17370,7 +18414,7 @@ function registerConversationRoutes(router, options) {
   router.patch("/api/v1/conversations/:conversationId/model", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString14(body, "model_id") ?? readString14(body, "modelId") ?? readString14(body, "model");
+    const modelId = readString16(body, "model_id") ?? readString16(body, "modelId") ?? readString16(body, "model");
     if (!modelId) {
       throw new LinkHttpError(400, "model_id_required", "model_id is required");
     }
@@ -17400,7 +18444,7 @@ function registerConversationRoutes(router, options) {
   router.patch("/api/v1/conversations/:conversationId/title", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const title = readString14(body, "title") ?? readString14(body, "name") ?? readString14(body, "display_name");
+    const title = readString16(body, "title") ?? readString16(body, "name") ?? readString16(body, "display_name");
     if (!title) {
       throw new LinkHttpError(400, "title_required", "title is required");
     }
@@ -17539,7 +18583,7 @@ function registerConversationRoutes(router, options) {
     async (ctx) => {
       await authenticateRequest(ctx, paths);
       const body = await readJsonBody(ctx.req);
-      const scope = readString14(body, "scope") ?? "always";
+      const scope = readString16(body, "scope") ?? "always";
       ctx.body = {
         ok: true,
         ...await conversations.resolveApproval({
@@ -17640,7 +18684,7 @@ function resolveConversationEventCursor(input) {
   return Math.max(queryAfter, headerAfter);
 }
 function readConversationClearPlanTargetStatus(body) {
-  const raw = readString14(body, "target_status") ?? readString14(body, "targetStatus") ?? "active";
+  const raw = readString16(body, "target_status") ?? readString16(body, "targetStatus") ?? "active";
   if (raw === "active" || raw === "archived") {
     return raw;
   }
@@ -17731,8 +18775,8 @@ function createHttpErrorMiddleware(logger) {
 
 // src/hermes/profiles.ts
 import { execFile as execFile4 } from "child_process";
-import { readdir as readdir9, readFile as readFile12, rename as rename3, stat as stat12 } from "fs/promises";
-import path19 from "path";
+import { readdir as readdir9, readFile as readFile13, rename as rename3, stat as stat13 } from "fs/promises";
+import path20 from "path";
 import { setTimeout as delay2 } from "timers/promises";
 import { promisify as promisify4 } from "util";
 import YAML2 from "yaml";
@@ -17749,7 +18793,7 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
   const profilesDir = resolveHermesProfilesDir();
   const entries = await readdir9(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -17773,8 +18817,8 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
 async function getHermesProfileStatus(name, paths = resolveRuntimePaths()) {
   assertProfileName(name);
   const profile = await profileInfo(name, paths);
-  const exists = await stat12(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  const exists = await stat13(profile.path).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -17843,7 +18887,7 @@ async function readHermesProfileCapabilities(name) {
   return {
     defaultModel: listedModels?.defaultModel ?? null,
     modelCount: listedModels?.models.length ?? 0,
-    skillCount: await countSkills(path19.join(profileDir, "skills")).catch(
+    skillCount: await countSkills(path20.join(profileDir, "skills")).catch(
       () => 0
     ),
     toolCount: await countConfiguredTools(name).catch(() => 0)
@@ -17886,8 +18930,8 @@ function assertProfileName(name) {
   }
 }
 async function pathExists(targetPath) {
-  return await stat12(targetPath).then(() => true).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  return await stat13(targetPath).then(() => true).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -18004,7 +19048,7 @@ function isProcessRunning(pid) {
     process.kill(pid, 0);
     return true;
   } catch (error) {
-    return isNodeError14(error, "EPERM");
+    return isNodeError15(error, "EPERM");
   }
 }
 async function waitForProfilePathToRemainAbsent(profilePath) {
@@ -18041,7 +19085,7 @@ function readExecErrorOutput2(error) {
   }
   return parts.join("\n");
 }
-function isNodeError14(error, code) {
+function isNodeError15(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function escapeRegExp2(value) {
@@ -18050,7 +19094,7 @@ function escapeRegExp2(value) {
 async function countSkills(root) {
   const entries = await readdir9(root, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -18058,7 +19102,7 @@ async function countSkills(root) {
   );
   let count = 0;
   for (const entry of entries) {
-    const entryPath = path19.join(root, entry.name);
+    const entryPath = path20.join(root, entry.name);
     if (entry.name === ".git" || entry.name === ".hub") {
       continue;
     }
@@ -18073,11 +19117,11 @@ async function countSkills(root) {
   return count;
 }
 async function countConfiguredTools(profileName) {
-  const raw = await readFile12(
+  const raw = await readFile13(
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+    if (isNodeError15(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -18085,14 +19129,14 @@ async function countConfiguredTools(profileName) {
   if (!raw.trim()) {
     return 0;
   }
-  const config = toRecord12(YAML2.parse(raw));
+  const config = toRecord14(YAML2.parse(raw));
   const toolsets = /* @__PURE__ */ new Set();
   collectToolsetValues(config.toolsets, toolsets);
-  const platformToolsets = toRecord12(config.platform_toolsets);
+  const platformToolsets = toRecord14(config.platform_toolsets);
   for (const value of Object.values(platformToolsets)) {
     collectToolsetValues(value, toolsets);
   }
-  const mcpServers = Object.keys(toRecord12(config.mcp_servers)).length;
+  const mcpServers = Object.keys(toRecord14(config.mcp_servers)).length;
   return toolsets.size + mcpServers;
 }
 function collectToolsetValues(value, target) {
@@ -18106,7 +19150,7 @@ function collectToolsetValues(value, target) {
     target.add(value.trim());
   }
 }
-function toRecord12(value) {
+function toRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 
@@ -18303,7 +19347,7 @@ function toHermesCronJobInput(input) {
   };
 }
 async function bindAndDecorateCronJobForHermesLink(input) {
-  const jobId = readString14(input.job, "id") ?? readString14(input.job, "job_id");
+  const jobId = readString16(input.job, "id") ?? readString16(input.job, "job_id");
   if (!jobId) {
     return input.job;
   }
@@ -18320,9 +19364,9 @@ async function bindAndDecorateCronJobForHermesLink(input) {
 }
 function readCronJobCreateInput(body) {
   const input = {};
-  const name = readString14(body, "name") ?? readString14(body, "title");
-  const prompt = readString14(body, "prompt") ?? readString14(body, "description") ?? readString14(body, "task");
-  const schedule = readString14(body, "schedule");
+  const name = readString16(body, "name") ?? readString16(body, "title");
+  const prompt = readString16(body, "prompt") ?? readString16(body, "description") ?? readString16(body, "task");
+  const schedule = readString16(body, "schedule");
   if (!name) {
     throw new LinkHttpError(400, "cron_job_name_required", "name is required");
   }
@@ -18343,7 +19387,7 @@ function readCronJobCreateInput(body) {
   input.name = name;
   input.prompt = prompt;
   input.schedule = schedule;
-  input.deliver = readString14(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
+  input.deliver = readString16(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
   const skills = readOptionalCronSkills(body);
   if (skills) {
     input.skills = skills;
@@ -18587,7 +19631,7 @@ function registerModelConfigRoutes(router, options) {
   router.delete("/api/v1/model-configs", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString14(body, "model_id") ?? readString14(body, "modelId");
+    const modelId = readString16(body, "model_id") ?? readString16(body, "modelId");
     if (!modelId) {
       throw new LinkHttpError(400, "model_id_required", "model_id is required");
     }
@@ -18659,7 +19703,7 @@ function registerModelConfigRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     await getHermesProfileStatus(ctx.params.name, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString14(body, "model_id") ?? readString14(body, "modelId");
+    const modelId = readString16(body, "model_id") ?? readString16(body, "modelId");
     if (!modelId) {
       throw new LinkHttpError(400, "model_id_required", "model_id is required");
     }
@@ -18676,9 +19720,9 @@ function registerModelConfigRoutes(router, options) {
   });
 }
 function readModelConfigInput(body) {
-  const id = readString14(body, "id") ?? readString14(body, "model_id") ?? readString14(body, "modelId");
-  const provider = readString14(body, "provider") ?? readString14(body, "provider_key") ?? readString14(body, "providerKey");
-  const baseUrl = readString14(body, "base_url") ?? readString14(body, "baseUrl");
+  const id = readString16(body, "id") ?? readString16(body, "model_id") ?? readString16(body, "modelId");
+  const provider = readString16(body, "provider") ?? readString16(body, "provider_key") ?? readString16(body, "providerKey");
+  const baseUrl = readString16(body, "base_url") ?? readString16(body, "baseUrl");
   if (!id || !provider || !baseUrl) {
     throw new LinkHttpError(
       400,
@@ -18688,29 +19732,29 @@ function readModelConfigInput(body) {
   }
   return {
     id,
-    originalModelId: readString14(body, "original_model_id") ?? readString14(body, "originalModelId") ?? readString14(body, "original_id") ?? void 0,
+    originalModelId: readString16(body, "original_model_id") ?? readString16(body, "originalModelId") ?? readString16(body, "original_id") ?? void 0,
     provider,
-    providerName: readString14(body, "provider_name") ?? readString14(body, "providerName") ?? void 0,
+    providerName: readString16(body, "provider_name") ?? readString16(body, "providerName") ?? void 0,
     baseUrl,
-    apiKey: readString14(body, "api_key") ?? readString14(body, "apiKey") ?? void 0,
-    apiMode: readString14(body, "api_mode") ?? readString14(body, "apiMode") ?? void 0,
+    apiKey: readString16(body, "api_key") ?? readString16(body, "apiKey") ?? void 0,
+    apiMode: readString16(body, "api_mode") ?? readString16(body, "apiMode") ?? void 0,
     contextLength: readPositiveInteger2(
       body.context_length ?? body.contextLength
     ),
-    keyEnv: readString14(body, "key_env") ?? readString14(body, "keyEnv") ?? void 0,
+    keyEnv: readString16(body, "key_env") ?? readString16(body, "keyEnv") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault),
-    reasoningEffort: readString14(body, "reasoning_effort") ?? readString14(body, "reasoningEffort") ?? void 0
+    reasoningEffort: readString16(body, "reasoning_effort") ?? readString16(body, "reasoningEffort") ?? void 0
   };
 }
 function readModelDefaultsInput(body) {
   return {
-    taskModelId: readString14(body, "task_model_id") ?? readString14(body, "taskModelId") ?? readString14(body, "default_model_id") ?? readString14(body, "defaultModelId") ?? void 0,
-    compressionModelId: readString14(body, "compression_model_id") ?? readString14(body, "compressionModelId") ?? void 0
+    taskModelId: readString16(body, "task_model_id") ?? readString16(body, "taskModelId") ?? readString16(body, "default_model_id") ?? readString16(body, "defaultModelId") ?? void 0,
+    compressionModelId: readString16(body, "compression_model_id") ?? readString16(body, "compressionModelId") ?? void 0
   };
 }
 function readModelConfigImportInput(body) {
-  const sourceProfileName = readString14(body, "source_profile") ?? readString14(body, "sourceProfile") ?? readString14(body, "source_profile_name") ?? readString14(body, "sourceProfileName");
-  const modelId = readString14(body, "model_id") ?? readString14(body, "modelId") ?? readString14(body, "id");
+  const sourceProfileName = readString16(body, "source_profile") ?? readString16(body, "sourceProfile") ?? readString16(body, "source_profile_name") ?? readString16(body, "sourceProfileName");
+  const modelId = readString16(body, "model_id") ?? readString16(body, "modelId") ?? readString16(body, "id");
   if (!sourceProfileName || !modelId) {
     throw new LinkHttpError(
       400,
@@ -18721,9 +19765,9 @@ function readModelConfigImportInput(body) {
   return {
     sourceProfileName,
     modelId,
-    provider: readString14(body, "provider") ?? readString14(body, "provider_key") ?? readString14(body, "providerKey") ?? void 0,
-    baseUrl: readString14(body, "base_url") ?? readString14(body, "baseUrl") ?? void 0,
-    apiMode: readString14(body, "api_mode") ?? readString14(body, "apiMode") ?? void 0,
+    provider: readString16(body, "provider") ?? readString16(body, "provider_key") ?? readString16(body, "providerKey") ?? void 0,
+    baseUrl: readString16(body, "base_url") ?? readString16(body, "baseUrl") ?? void 0,
+    apiMode: readString16(body, "api_mode") ?? readString16(body, "apiMode") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault)
   };
 }
@@ -18808,11 +19852,11 @@ import { EventEmitter as EventEmitter2 } from "events";
 import {
   cp,
   mkdir as mkdir11,
-  readFile as readFile13,
+  readFile as readFile14,
   rm as rm6,
-  stat as stat13
+  stat as stat14
 } from "fs/promises";
-import path20 from "path";
+import path21 from "path";
 import YAML3 from "yaml";
 var PROFILE_CREATE_LOG_FILE = "profile-create.log";
 var PROFILE_CREATE_LOG_MAX_FILES = 3;
@@ -19202,7 +20246,7 @@ function copyModelConfig(source, target) {
       copied[key] = cloneJson(source[key]);
     }
   }
-  const sourceAuxiliary = toRecord13(source.auxiliary);
+  const sourceAuxiliary = toRecord15(source.auxiliary);
   if (Object.prototype.hasOwnProperty.call(sourceAuxiliary, "compression")) {
     const targetAuxiliary = ensureRecord2(target, "auxiliary");
     targetAuxiliary.compression = cloneJson(sourceAuxiliary.compression);
@@ -19211,12 +20255,12 @@ function copyModelConfig(source, target) {
   return copied;
 }
 function copyToolPermissionsConfig(source, target) {
-  const sourcePlatformToolsets = toRecord13(source.platform_toolsets);
+  const sourcePlatformToolsets = toRecord15(source.platform_toolsets);
   if (Object.prototype.hasOwnProperty.call(sourcePlatformToolsets, "api_server")) {
     const targetPlatformToolsets = ensureRecord2(target, "platform_toolsets");
     targetPlatformToolsets.api_server = cloneJson(sourcePlatformToolsets.api_server);
   }
-  const sourceStt = toRecord13(source.stt);
+  const sourceStt = toRecord15(source.stt);
   if (Object.prototype.hasOwnProperty.call(sourceStt, "enabled")) {
     const targetStt = ensureRecord2(target, "stt");
     targetStt.enabled = cloneJson(sourceStt.enabled);
@@ -19263,9 +20307,9 @@ function collectEnvKeys(value, keys = /* @__PURE__ */ new Set()) {
   return keys;
 }
 async function writeEnvValues(profileName, values) {
-  const envPath = path20.join(resolveHermesProfileDir(profileName), ".env");
-  const existingRaw = await readFile13(envPath, "utf8").catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+  const envPath = path21.join(resolveHermesProfileDir(profileName), ".env");
+  const existingRaw = await readFile14(envPath, "utf8").catch((error) => {
+    if (isNodeError16(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -19300,8 +20344,8 @@ async function writeEnvValues(profileName, values) {
   await atomicWriteFilePreservingMetadata(envPath, nextRaw);
 }
 async function copySkills(sourceProfile, targetProfile) {
-  const sourceSkills = path20.join(resolveHermesProfileDir(sourceProfile), "skills");
-  const targetSkills = path20.join(resolveHermesProfileDir(targetProfile), "skills");
+  const sourceSkills = path21.join(resolveHermesProfileDir(sourceProfile), "skills");
+  const targetSkills = path21.join(resolveHermesProfileDir(targetProfile), "skills");
   if (!await pathExists2(sourceSkills)) {
     return;
   }
@@ -19324,16 +20368,16 @@ function copyProperty(source, target, key) {
   }
 }
 async function readYamlConfig(configPath) {
-  const existingRaw = await readFile13(configPath, "utf8").catch(
+  const existingRaw = await readFile14(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return null;
       }
       throw error;
     }
   );
   return {
-    config: toRecord13(existingRaw ? YAML3.parse(existingRaw) : {}),
+    config: toRecord15(existingRaw ? YAML3.parse(existingRaw) : {}),
     existingRaw
   };
 }
@@ -19387,7 +20431,7 @@ async function writeProfileCreationState(paths, state) {
   await writeJsonFile(profileCreationStatePath(paths), state);
 }
 async function readProfileCreationLogLines(paths) {
-  const raw = await readFile13(profileCreationLogPath(paths), "utf8").catch(() => "");
+  const raw = await readFile14(profileCreationLogPath(paths), "utf8").catch(() => "");
   if (!raw.trim()) {
     return [];
   }
@@ -19396,10 +20440,10 @@ async function readProfileCreationLogLines(paths) {
   );
 }
 function profileCreationStatePath(paths) {
-  return path20.join(paths.runDir, "profile-create-state.json");
+  return path21.join(paths.runDir, "profile-create-state.json");
 }
 function profileCreationLogPath(paths) {
-  return path20.join(paths.logsDir, PROFILE_CREATE_LOG_FILE);
+  return path21.join(paths.logsDir, PROFILE_CREATE_LOG_FILE);
 }
 async function clearProfileCreationLogFiles(paths) {
   const primary = profileCreationLogPath(paths);
@@ -19412,8 +20456,8 @@ async function clearProfileCreationLogFiles(paths) {
   ]);
 }
 async function pathExists2(targetPath) {
-  return await stat13(targetPath).then(() => true).catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+  return await stat14(targetPath).then(() => true).catch((error) => {
+    if (isNodeError16(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -19445,7 +20489,7 @@ function ensureRecord2(target, key) {
   target[key] = next;
   return next;
 }
-function toRecord13(value) {
+function toRecord15(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 function cloneJson(value) {
@@ -19460,7 +20504,7 @@ function formatEnvValue2(value) {
 function escapeRegExp3(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError15(error, code) {
+function isNodeError16(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -19545,16 +20589,16 @@ function readProfilePermissionsInput(body) {
   const approvals = readOptionalObject(body, "approvals");
   if (approvals) {
     input.approvals = {
-      mode: readString14(approvals, "mode") ?? readString14(approvals, "approval_mode") ?? readString14(approvals, "approvalMode") ?? void 0,
+      mode: readString16(approvals, "mode") ?? readString16(approvals, "approval_mode") ?? readString16(approvals, "approvalMode") ?? void 0,
       timeout: readPositiveInteger2(approvals.timeout),
-      cronMode: readString14(approvals, "cron_mode") ?? readString14(approvals, "cronMode") ?? void 0
+      cronMode: readString16(approvals, "cron_mode") ?? readString16(approvals, "cronMode") ?? void 0
     };
   }
   const terminal = readOptionalObject(body, "terminal");
   if (terminal) {
     input.terminal = {
-      backend: readString14(terminal, "backend") ?? void 0,
-      cwd: readString14(terminal, "cwd") ?? void 0,
+      backend: readString16(terminal, "backend") ?? void 0,
+      cwd: readString16(terminal, "cwd") ?? void 0,
       containerCpu: readPositiveInteger2(
         terminal.container_cpu ?? terminal.containerCpu
       ),
@@ -19670,10 +20714,10 @@ function toProfileToolConfigHttpError(error) {
 import {
   access as access3,
   readdir as readdir10,
-  readFile as readFile14,
-  stat as stat14
+  readFile as readFile15,
+  stat as stat15
 } from "fs/promises";
-import path21 from "path";
+import path22 from "path";
 import YAML4 from "yaml";
 var ENTRY_DELIMITER = "\n\xA7\n";
 var DEFAULT_MEMORY_LIMIT = 2200;
@@ -19861,9 +20905,9 @@ async function testHindsightProviderSettings(profileName, patch) {
   const mode = normalizeHindsightMode(
     patch.mode ?? config.mode ?? env.HINDSIGHT_MODE
   );
-  const apiUrl = readString15(patch.apiUrl) ?? readString15(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
-  const bankId = readString15(patch.bankId) ?? readString15(config.bank_id) ?? "hermes";
-  const apiKey = readString15(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString15(config.apiKey) ?? readString15(config.api_key);
+  const apiUrl = readString17(patch.apiUrl) ?? readString17(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
+  const bankId = readString17(patch.bankId) ?? readString17(config.bank_id) ?? "hermes";
+  const apiKey = readString17(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString17(config.apiKey) ?? readString17(config.api_key);
   const baseUrl = normalizeHttpUrl(apiUrl);
   if (!baseUrl) {
     return {
@@ -19995,7 +21039,7 @@ async function saveProviderSettings(profileName, provider, patch) {
     });
     await patchJsonProviderConfig(
       profileName,
-      path21.join("hindsight", "config.json"),
+      path22.join("hindsight", "config.json"),
       {
         mode: patch.mode,
         api_url: patch.apiUrl,
@@ -20052,7 +21096,7 @@ async function patchCustomProviderConfig(profileName, provider, patch) {
       "\u81EA\u5B9A\u4E49 memory provider \u914D\u7F6E\u5FC5\u987B\u662F\u6709\u6548\u7684 JSON object\u3002"
     );
   }
-  const config = toRecord14(parsed);
+  const config = toRecord16(parsed);
   if (Object.keys(config).length === 0 && parsed !== null) {
     throw new HermesMemoryError(
       "memory_provider_config_invalid",
@@ -20143,17 +21187,17 @@ function normalizeCustomProviderId(provider) {
 }
 async function patchHermesMemoryProvider(profileName, provider) {
   const configPath = resolveHermesConfigPath(profileName);
-  const existingRaw = await readFile14(configPath, "utf8").catch(
+  const existingRaw = await readFile15(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return null;
       }
       throw error;
     }
   );
   const document = existingRaw ? YAML4.parseDocument(existingRaw) : new YAML4.Document({});
-  const config = toRecord14(document.toJSON());
-  const memory = toRecord14(config.memory);
+  const config = toRecord16(document.toJSON());
+  const memory = toRecord16(config.memory);
   memory.provider = provider === "built-in" ? "" : provider;
   config.memory = memory;
   const backupPath = existingRaw ? `${configPath}.bak.${Date.now()}` : null;
@@ -20166,13 +21210,13 @@ async function patchHermesMemoryProvider(profileName, provider) {
   await atomicWriteFilePreservingMetadata(configPath, document.toString());
 }
 function resolveMemoryDir(profileName) {
-  return path21.join(resolveHermesProfileDir(profileName), "memories");
+  return path22.join(resolveHermesProfileDir(profileName), "memories");
 }
 async function readMemoryStore(profileName, target, limits) {
   const filePath = memoryFilePath(profileName, target);
   const entries = await readMemoryEntries(filePath);
-  const fileStat = await stat14(filePath).catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+  const fileStat = await stat15(filePath).catch((error) => {
+    if (isNodeError17(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -20200,8 +21244,8 @@ async function readMemoryStore(profileName, target, limits) {
   };
 }
 async function readMemoryEntries(filePath) {
-  const raw = await readFile14(filePath, "utf8").catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+  const raw = await readFile15(filePath, "utf8").catch((error) => {
+    if (isNodeError17(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -20227,7 +21271,7 @@ async function writeMemoryEntries(profileName, target, entries) {
   );
 }
 function memoryFilePath(profileName, target) {
-  return path21.join(
+  return path22.join(
     resolveMemoryDir(profileName),
     target === "user" ? "USER.md" : "MEMORY.md"
   );
@@ -20287,7 +21331,7 @@ async function readCustomProviderSetupSummary(profileName) {
     configurable: true,
     configured: true,
     configurationIssue: null,
-    providerConfigPath: path21.join(
+    providerConfigPath: path22.join(
       resolveHermesProfileDir(profileName),
       "<provider>.json"
     ),
@@ -20365,7 +21409,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "honcho") ?? ""
     );
-    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString15(config2.apiKey)) || isConfiguredEnvValue(readString15(config2.api_key)) || isConfiguredEnvValue(readString15(config2.baseUrl)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString17(config2.apiKey)) || isConfiguredEnvValue(readString17(config2.api_key)) || isConfiguredEnvValue(readString17(config2.baseUrl)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Honcho \u9700\u8981\u5148\u586B\u5199 API Key\uFF0C\u6216\u5728 honcho.json \u914D\u7F6E self-hosted baseUrl\u3002"
     };
@@ -20374,7 +21418,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "mem0") ?? ""
     );
-    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString15(config2.api_key)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString17(config2.api_key)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Mem0 \u9700\u8981\u5148\u5728\u672C\u9875\u586B\u5199 API Key\uFF0CLink \u4F1A\u5199\u5165\u5F53\u524D Profile \u7684 .env\u3002"
     };
@@ -20416,7 +21460,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     memoryProviderConfigPath(profileName, provider) ?? ""
   );
   const mode = normalizeHindsightMode(config.mode ?? env.HINDSIGHT_MODE);
-  const apiKey = readString15(config.apiKey) ?? readString15(config.api_key) ?? env.HINDSIGHT_API_KEY;
+  const apiKey = readString17(config.apiKey) ?? readString17(config.api_key) ?? env.HINDSIGHT_API_KEY;
   if (mode === "cloud") {
     return isConfiguredEnvValue(apiKey) ? { configured: true, issue: null } : {
       configured: false,
@@ -20424,15 +21468,15 @@ async function readProviderConfigurationStatus(profileName, provider) {
     };
   }
   if (mode === "local_external") {
-    const apiUrl = readString15(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
+    const apiUrl = readString17(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
     return isConfiguredEnvValue(apiUrl) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Hindsight local_external \u9700\u8981\u914D\u7F6E\u53EF\u8BBF\u95EE\u7684 API URL\u3002"
     };
   }
   if (mode === "local_embedded") {
-    const llmProvider = readString15(config.llm_provider) ?? "openai";
-    const llmModel = readString15(config.llm_model);
+    const llmProvider = readString17(config.llm_provider) ?? "openai";
+    const llmModel = readString17(config.llm_model);
     if (!llmModel) {
       return {
         configured: false,
@@ -20440,7 +21484,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (llmProvider === "openai_compatible" && !isConfiguredEnvValue(
-      readString15(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
+      readString17(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
     )) {
       return {
         configured: false,
@@ -20448,7 +21492,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (!["ollama", "lmstudio", "openai_compatible"].includes(llmProvider) && !isConfiguredEnvValue(
-      readString15(config.llmApiKey) ?? readString15(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
+      readString17(config.llmApiKey) ?? readString17(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
     )) {
       return {
         configured: false,
@@ -20504,8 +21548,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.HONCHO_API_KEY ?? readString15(config.apiKey) ?? readString15(config.api_key),
-        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString15(config.apiKey)) || isConfiguredEnvValue(readString15(config.api_key))
+        env.HONCHO_API_KEY ?? readString17(config.apiKey) ?? readString17(config.api_key),
+        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString17(config.apiKey)) || isConfiguredEnvValue(readString17(config.api_key))
       ),
       stringSetting("workspace", "Workspace", config.workspace ?? "hermes"),
       stringSetting("peerName", "\u7528\u6237 Peer", config.peerName ?? ""),
@@ -20547,8 +21591,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.MEM0_API_KEY ?? readString15(config.apiKey) ?? readString15(config.api_key),
-        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString15(config.apiKey)) || isConfiguredEnvValue(readString15(config.api_key))
+        env.MEM0_API_KEY ?? readString17(config.apiKey) ?? readString17(config.api_key),
+        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString17(config.apiKey)) || isConfiguredEnvValue(readString17(config.api_key))
       ),
       stringSetting("userId", "User ID", config.user_id ?? "hermes-user"),
       stringSetting("agentId", "Agent ID", config.agent_id ?? "hermes"),
@@ -20616,8 +21660,8 @@ async function readProviderSettings(profileName, provider) {
       memoryProviderConfigPath(profileName, provider) ?? ""
     );
     const env = await readHermesMemoryEnv(profileName);
-    const banks = toRecord14(config.banks);
-    const hermesBank = toRecord14(banks.hermes);
+    const banks = toRecord16(config.banks);
+    const hermesBank = toRecord16(banks.hermes);
     const mode = normalizeHindsightMode(config.mode);
     return [
       selectSetting("mode", "\u8FDE\u63A5\u6A21\u5F0F", mode, [
@@ -20633,8 +21677,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "Hindsight API Key",
-        env.HINDSIGHT_API_KEY ?? readString15(config.apiKey) ?? readString15(config.api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString15(config.apiKey)) || isConfiguredEnvValue(readString15(config.api_key))
+        env.HINDSIGHT_API_KEY ?? readString17(config.apiKey) ?? readString17(config.api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString17(config.apiKey)) || isConfiguredEnvValue(readString17(config.api_key))
       ),
       stringSetting(
         "bankId",
@@ -20656,8 +21700,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "llmApiKey",
         "LLM API Key",
-        env.HINDSIGHT_LLM_API_KEY ?? readString15(config.llmApiKey) ?? readString15(config.llm_api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString15(config.llmApiKey)) || isConfiguredEnvValue(readString15(config.llm_api_key))
+        env.HINDSIGHT_LLM_API_KEY ?? readString17(config.llmApiKey) ?? readString17(config.llm_api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString17(config.llmApiKey)) || isConfiguredEnvValue(readString17(config.llm_api_key))
       ),
       booleanSetting("autoRecall", "\u81EA\u52A8\u56DE\u5FC6", config.auto_recall ?? true),
       booleanSetting("autoRetain", "\u81EA\u52A8\u6C89\u6DC0", config.auto_retain ?? true),
@@ -20681,7 +21725,7 @@ async function readProviderSettings(profileName, provider) {
       stringSetting(
         "dbPath",
         "SQLite \u6570\u636E\u5E93\u8DEF\u5F84",
-        config.db_path ?? path21.join(resolveHermesProfileDir(profileName), "memory_store.db")
+        config.db_path ?? path22.join(resolveHermesProfileDir(profileName), "memory_store.db")
       ),
       booleanSetting("autoExtract", "\u4F1A\u8BDD\u7ED3\u675F\u81EA\u52A8\u62BD\u53D6", config.auto_extract ?? false),
       numberSetting("defaultTrust", "\u9ED8\u8BA4\u4FE1\u4EFB\u5206", config.default_trust ?? 0.5),
@@ -20717,7 +21761,7 @@ async function readProviderSettings(profileName, provider) {
       stringSetting(
         "workingDirectory",
         "\u5DE5\u4F5C\u76EE\u5F55",
-        path21.join(resolveHermesProfileDir(profileName), "byterover"),
+        path22.join(resolveHermesProfileDir(profileName), "byterover"),
         false
       )
     ];
@@ -20726,16 +21770,16 @@ async function readProviderSettings(profileName, provider) {
 }
 function memoryProviderConfigPath(profileName, provider) {
   if (provider === "honcho") {
-    return path21.join(resolveHermesProfileDir(profileName), "honcho.json");
+    return path22.join(resolveHermesProfileDir(profileName), "honcho.json");
   }
   if (provider === "mem0") {
-    return path21.join(resolveHermesProfileDir(profileName), "mem0.json");
+    return path22.join(resolveHermesProfileDir(profileName), "mem0.json");
   }
   if (provider === "supermemory") {
-    return path21.join(resolveHermesProfileDir(profileName), "supermemory.json");
+    return path22.join(resolveHermesProfileDir(profileName), "supermemory.json");
   }
   if (provider === "hindsight") {
-    return path21.join(
+    return path22.join(
       resolveHermesProfileDir(profileName),
       "hindsight",
       "config.json"
@@ -20744,21 +21788,21 @@ function memoryProviderConfigPath(profileName, provider) {
   return null;
 }
 function customProviderConfigPath(profileName, provider) {
-  return path21.join(
+  return path22.join(
     resolveHermesProfileDir(profileName),
     `${normalizeCustomProviderId(provider)}.json`
   );
 }
 function customProviderRegistryPath(profileName) {
-  return path21.join(
+  return path22.join(
     resolveHermesProfileDir(profileName),
     CUSTOM_PROVIDER_REGISTRY_FILE
   );
 }
 async function readCustomProviderRegistry(profileName) {
-  const raw = await readFile14(customProviderRegistryPath(profileName), "utf8").catch(
+  const raw = await readFile15(customProviderRegistryPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -20769,18 +21813,18 @@ async function readCustomProviderRegistry(profileName) {
   }
   try {
     const parsed = JSON.parse(raw);
-    const providers = Array.isArray(parsed) ? parsed : Array.isArray(toRecord14(parsed).providers) ? toRecord14(parsed).providers : [];
+    const providers = Array.isArray(parsed) ? parsed : Array.isArray(toRecord16(parsed).providers) ? toRecord16(parsed).providers : [];
     return providers.map((item) => {
       if (typeof item === "string") {
         const id2 = normalizeCustomProviderId(item);
         return { id: id2, label: id2, description: "\u81EA\u5B9A\u4E49 memory provider\u3002" };
       }
-      const record = toRecord14(item);
-      const id = normalizeCustomProviderId(readString15(record.id) ?? "");
+      const record = toRecord16(item);
+      const id = normalizeCustomProviderId(readString17(record.id) ?? "");
       return {
         id,
-        label: readString15(record.label) ?? id,
-        description: readString15(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+        label: readString17(record.label) ?? id,
+        description: readString17(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
       };
     }).filter((item) => item.id);
   } catch {
@@ -20802,10 +21846,10 @@ async function saveCustomProviderRegistryEntry(profileName, provider) {
   );
 }
 async function discoverUserMemoryProviderDescriptors(profileName) {
-  const pluginsDir = path21.join(resolveHermesProfileDir(profileName), "plugins");
+  const pluginsDir = path22.join(resolveHermesProfileDir(profileName), "plugins");
   const entries = await readdir10(pluginsDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -20822,21 +21866,21 @@ async function discoverUserMemoryProviderDescriptors(profileName) {
     } catch {
       continue;
     }
-    const providerDir = path21.join(pluginsDir, entry.name);
+    const providerDir = path22.join(pluginsDir, entry.name);
     if (!await isMemoryProviderPluginDir(providerDir)) {
       continue;
     }
     const meta = await readPluginMetadata(providerDir);
     descriptors.push({
       id: providerId,
-      label: readString15(meta.name) ?? providerId,
-      description: readString15(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+      label: readString17(meta.name) ?? providerId,
+      description: readString17(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
     });
   }
   return descriptors;
 }
 async function isUserMemoryProviderInstalled(profileName, provider) {
-  const providerDir = path21.join(
+  const providerDir = path22.join(
     resolveHermesProfileDir(profileName),
     "plugins",
     normalizeCustomProviderId(provider)
@@ -20844,9 +21888,9 @@ async function isUserMemoryProviderInstalled(profileName, provider) {
   return isMemoryProviderPluginDir(providerDir);
 }
 async function isMemoryProviderPluginDir(providerDir) {
-  const source = await readFile14(path21.join(providerDir, "__init__.py"), "utf8").catch(
+  const source = await readFile15(path22.join(providerDir, "__init__.py"), "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -20856,22 +21900,22 @@ async function isMemoryProviderPluginDir(providerDir) {
   return sample.includes("register_memory_provider") || sample.includes("MemoryProvider");
 }
 async function readPluginMetadata(providerDir) {
-  const raw = await readFile14(path21.join(providerDir, "plugin.yaml"), "utf8").catch(
+  const raw = await readFile15(path22.join(providerDir, "plugin.yaml"), "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return "";
       }
       throw error;
     }
   );
-  return raw ? toRecord14(YAML4.parse(raw)) : {};
+  return raw ? toRecord16(YAML4.parse(raw)) : {};
 }
 async function resolveByteRoverCli() {
   const candidates = [
-    ...(process.env.PATH ?? "").split(path21.delimiter).filter(Boolean).map((dir) => path21.join(dir, "brv")),
-    path21.join(process.env.HOME ?? "", ".brv-cli", "bin", "brv"),
+    ...(process.env.PATH ?? "").split(path22.delimiter).filter(Boolean).map((dir) => path22.join(dir, "brv")),
+    path22.join(process.env.HOME ?? "", ".brv-cli", "bin", "brv"),
     "/usr/local/bin/brv",
-    path21.join(process.env.HOME ?? "", ".npm-global", "bin", "brv")
+    path22.join(process.env.HOME ?? "", ".npm-global", "bin", "brv")
   ].filter(Boolean);
   for (const candidate of candidates) {
     const found = await access3(candidate).then(() => true).catch(() => false);
@@ -20882,32 +21926,32 @@ async function resolveByteRoverCli() {
   return null;
 }
 async function readHolographicProviderConfig(profileName) {
-  const raw = await readFile14(resolveHermesConfigPath(profileName), "utf8").catch(
+  const raw = await readFile15(resolveHermesConfigPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return "";
       }
       throw error;
     }
   );
-  const config = raw ? toRecord14(YAML4.parse(raw)) : {};
-  const plugins = toRecord14(config.plugins);
-  return toRecord14(plugins["hermes-memory-store"]);
+  const config = raw ? toRecord16(YAML4.parse(raw)) : {};
+  const plugins = toRecord16(config.plugins);
+  return toRecord16(plugins["hermes-memory-store"]);
 }
 async function patchHolographicProviderConfig(profileName, patch) {
   const configPath = resolveHermesConfigPath(profileName);
-  const existingRaw = await readFile14(configPath, "utf8").catch(
+  const existingRaw = await readFile15(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError16(error, "ENOENT")) {
+      if (isNodeError17(error, "ENOENT")) {
         return null;
       }
       throw error;
     }
   );
   const document = existingRaw ? YAML4.parseDocument(existingRaw) : new YAML4.Document({});
-  const config = toRecord14(document.toJSON());
-  const plugins = toRecord14(config.plugins);
-  const memoryStore = toRecord14(plugins["hermes-memory-store"]);
+  const config = toRecord16(document.toJSON());
+  const plugins = toRecord16(config.plugins);
+  const memoryStore = toRecord16(plugins["hermes-memory-store"]);
   for (const [key, value] of Object.entries(patch)) {
     if (value !== void 0) {
       memoryStore[key] = value;
@@ -20932,9 +21976,9 @@ async function patchHermesMemoryEnv(profileName, patch) {
   if (entries.length === 0) {
     return;
   }
-  const envPath = path21.join(resolveHermesProfileDir(profileName), ".env");
-  const existingRaw = await readFile14(envPath, "utf8").catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+  const envPath = path22.join(resolveHermesProfileDir(profileName), ".env");
+  const existingRaw = await readFile15(envPath, "utf8").catch((error) => {
+    if (isNodeError17(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -20992,7 +22036,7 @@ function isMemoryEnvKeyWritable(key) {
   ].includes(key);
 }
 function normalizeHindsightMode(value) {
-  const mode = readString15(value) ?? "cloud";
+  const mode = readString17(value) ?? "cloud";
   return mode === "local" ? "local_embedded" : mode;
 }
 function normalizeHttpUrl(value) {
@@ -21055,55 +22099,55 @@ function joinHindsightUrl(baseUrl, pathName) {
 }
 function parseJsonObject2(text) {
   try {
-    return toRecord14(JSON.parse(text));
+    return toRecord16(JSON.parse(text));
   } catch {
     return {};
   }
 }
 function readHindsightError(json) {
-  const detail = readString15(json.detail) ?? readString15(json.error);
+  const detail = readString17(json.detail) ?? readString17(json.error);
   return detail ? `\uFF1A${detail}` : "";
 }
 function hindsightSemanticIssue(pathName, json) {
   if (pathName === "/health") {
-    const status = readString15(json.status);
+    const status = readString17(json.status);
     return status && ["healthy", "ok"].includes(status.toLowerCase()) ? null : `\u5065\u5EB7\u72B6\u6001\u5F02\u5E38\uFF1A${status ?? "unknown"}`;
   }
   return null;
 }
 function summarizeHindsightProbe(pathName, json) {
   if (pathName === "/health") {
-    const status = readString15(json.status) ?? "ok";
-    const database = readString15(json.database);
+    const status = readString17(json.status) ?? "ok";
+    const database = readString17(json.database);
     return database ? `${status}, database ${database}` : status;
   }
   if (pathName === "/version") {
-    const version = readString15(json.api_version);
+    const version = readString17(json.api_version);
     return version ? `API ${version}` : "version endpoint reachable";
   }
-  const bankId = readString15(json.bank_id);
+  const bankId = readString17(json.bank_id);
   return bankId ? `bank ${bankId} reachable` : "bank config reachable";
 }
 async function readActiveMemoryProvider(profileName) {
-  const raw = await readFile14(
+  const raw = await readFile15(
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+    if (isNodeError17(error, "ENOENT")) {
       return "";
     }
     throw error;
   });
-  const config = raw ? toRecord14(YAML4.parse(raw)) : {};
-  const memory = toRecord14(config.memory);
-  const provider = readString15(memory.provider);
+  const config = raw ? toRecord16(YAML4.parse(raw)) : {};
+  const memory = toRecord16(config.memory);
+  const provider = readString17(memory.provider);
   if (!provider || provider === "built-in" || provider === "builtin" || provider === "built_in") {
     return null;
   }
   return provider;
 }
 async function patchJsonProviderConfig(profileName, relativePath, patch) {
-  const configPath = path21.join(
+  const configPath = path22.join(
     resolveHermesProfileDir(profileName),
     relativePath
   );
@@ -21121,18 +22165,18 @@ async function patchJsonProviderConfig(profileName, relativePath, patch) {
   );
 }
 async function readJsonObject(filePath) {
-  const raw = await readFile14(filePath, "utf8").catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+  const raw = await readFile15(filePath, "utf8").catch((error) => {
+    if (isNodeError17(error, "ENOENT")) {
       return "{}";
     }
     throw error;
   });
   try {
-    return toRecord14(JSON.parse(raw || "{}"));
+    return toRecord16(JSON.parse(raw || "{}"));
   } catch {
     throw new HermesMemoryError(
       "memory_provider_config_invalid",
-      `${path21.basename(filePath)} \u4E0D\u662F\u6709\u6548\u7684 JSON \u914D\u7F6E\u6587\u4EF6\u3002`
+      `${path22.basename(filePath)} \u4E0D\u662F\u6709\u6548\u7684 JSON \u914D\u7F6E\u6587\u4EF6\u3002`
     );
   }
 }
@@ -21153,7 +22197,7 @@ function stringSetting(key, label, value, editable = true) {
   return {
     key,
     label,
-    value: readString15(value) ?? "",
+    value: readString17(value) ?? "",
     editable,
     kind: "string"
   };
@@ -21165,7 +22209,7 @@ function secretSetting(key, label, value, configured) {
     value: "",
     editable: true,
     kind: "secret",
-    configured: configured || isConfiguredEnvValue(readString15(value))
+    configured: configured || isConfiguredEnvValue(readString17(value))
   };
 }
 function textSetting(key, label, value, editable = true) {
@@ -21178,21 +22222,21 @@ function textSetting(key, label, value, editable = true) {
   };
 }
 function selectSetting(key, label, value, options, editable = true) {
-  const stringValue = readString15(value) ?? options[0] ?? null;
+  const stringValue = readString17(value) ?? options[0] ?? null;
   return { key, label, value: stringValue, editable, kind: "select", options };
 }
 async function readMemoryLimits(profileName) {
-  const raw = await readFile14(
+  const raw = await readFile15(
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+    if (isNodeError17(error, "ENOENT")) {
       return "";
     }
     throw error;
   });
-  const config = raw ? toRecord14(YAML4.parse(raw)) : {};
-  const memory = toRecord14(config.memory);
+  const config = raw ? toRecord16(YAML4.parse(raw)) : {};
+  const memory = toRecord16(config.memory);
   return {
     memory: readPositiveInteger3(memory.memory_char_limit) ?? DEFAULT_MEMORY_LIMIT,
     user: readPositiveInteger3(memory.user_char_limit) ?? DEFAULT_USER_LIMIT
@@ -21248,10 +22292,10 @@ function hashString(value) {
   }
   return hash.toString(16);
 }
-function toRecord14(value) {
+function toRecord16(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
-function readString15(value) {
+function readString17(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readPositiveInteger3(value) {
@@ -21279,7 +22323,7 @@ function formatEnvValue3(value) {
 function escapeRegExp4(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError16(error, code) {
+function isNodeError17(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
 }
 
@@ -21410,7 +22454,7 @@ function registerProfileMemoryRoutes(router, options) {
   );
 }
 function readMemoryTarget(body) {
-  const raw = readString14(body, "target");
+  const raw = readString16(body, "target");
   if (raw === "memory" || raw === "user") {
     return raw;
   }
@@ -21421,7 +22465,7 @@ function readMemoryTarget(body) {
   );
 }
 function readMemoryResetTarget(body) {
-  const raw = readString14(body, "target") ?? "all";
+  const raw = readString16(body, "target") ?? "all";
   if (raw === "all" || raw === "memory" || raw === "user") {
     return raw;
   }
@@ -21432,7 +22476,7 @@ function readMemoryResetTarget(body) {
   );
 }
 function readRequiredMemoryContent(body) {
-  const content = readString14(body, "content") ?? readString14(body, "text");
+  const content = readString16(body, "content") ?? readString16(body, "text");
   if (!content) {
     throw new LinkHttpError(
       400,
@@ -21443,7 +22487,7 @@ function readRequiredMemoryContent(body) {
   return content;
 }
 function readRequiredMemoryMatch(body) {
-  const oldText = readString14(body, "old_text") ?? readString14(body, "oldText") ?? readString14(body, "match");
+  const oldText = readString16(body, "old_text") ?? readString16(body, "oldText") ?? readString16(body, "match");
   if (!oldText) {
     throw new LinkHttpError(
       400,
@@ -21454,7 +22498,7 @@ function readRequiredMemoryMatch(body) {
   return oldText;
 }
 function readRequiredMemoryProvider(body) {
-  const provider = readString14(body, "provider") ?? readString14(body, "provider_id") ?? readString14(body, "providerId");
+  const provider = readString16(body, "provider") ?? readString16(body, "provider_id") ?? readString16(body, "providerId");
   if (!provider) {
     throw new LinkHttpError(
       400,
@@ -21466,7 +22510,7 @@ function readRequiredMemoryProvider(body) {
 }
 function readMemorySettingsPatch(body) {
   const input = {};
-  const mode = readString14(body, "mode");
+  const mode = readString16(body, "mode");
   if (mode) {
     input.mode = mode;
   }
@@ -21482,7 +22526,7 @@ function readMemorySettingsPatch(body) {
   if (bankId !== void 0) {
     input.bankId = bankId;
   }
-  const llmProvider = readString14(body, "llm_provider") ?? readString14(body, "llmProvider");
+  const llmProvider = readString16(body, "llm_provider") ?? readString16(body, "llmProvider");
   if (llmProvider) {
     input.llmProvider = llmProvider;
   }
@@ -21518,11 +22562,11 @@ function readMemorySettingsPatch(body) {
   if (autoRetain !== void 0) {
     input.autoRetain = autoRetain;
   }
-  const memoryMode = readString14(body, "memory_mode") ?? readString14(body, "memoryMode");
+  const memoryMode = readString16(body, "memory_mode") ?? readString16(body, "memoryMode");
   if (memoryMode) {
     input.memoryMode = memoryMode;
   }
-  const recallBudget = readString14(body, "recall_budget") ?? readString14(body, "recallBudget");
+  const recallBudget = readString16(body, "recall_budget") ?? readString16(body, "recallBudget");
   if (recallBudget) {
     input.recallBudget = recallBudget;
   }
@@ -21538,11 +22582,11 @@ function readMemorySettingsPatch(body) {
   if (profileFrequency !== void 0) {
     input.profileFrequency = profileFrequency;
   }
-  const captureMode = readString14(body, "capture_mode") ?? readString14(body, "captureMode");
+  const captureMode = readString16(body, "capture_mode") ?? readString16(body, "captureMode");
   if (captureMode) {
     input.captureMode = captureMode;
   }
-  const searchMode = readString14(body, "search_mode") ?? readString14(body, "searchMode");
+  const searchMode = readString16(body, "search_mode") ?? readString16(body, "searchMode");
   if (searchMode) {
     input.searchMode = searchMode;
   }
@@ -21576,11 +22620,11 @@ function readMemorySettingsPatch(body) {
   if (aiPeer !== void 0) {
     input.aiPeer = aiPeer;
   }
-  const recallMode = readString14(body, "recall_mode") ?? readString14(body, "recallMode");
+  const recallMode = readString16(body, "recall_mode") ?? readString16(body, "recallMode");
   if (recallMode) {
     input.recallMode = recallMode;
   }
-  const writeFrequency = readString14(body, "write_frequency") ?? readString14(body, "writeFrequency");
+  const writeFrequency = readString16(body, "write_frequency") ?? readString16(body, "writeFrequency");
   if (writeFrequency) {
     input.writeFrequency = writeFrequency;
   }
@@ -21588,7 +22632,7 @@ function readMemorySettingsPatch(body) {
   if (saveMessages !== void 0) {
     input.saveMessages = saveMessages;
   }
-  const sessionStrategy = readString14(body, "session_strategy") ?? readString14(body, "sessionStrategy");
+  const sessionStrategy = readString16(body, "session_strategy") ?? readString16(body, "sessionStrategy");
   if (sessionStrategy) {
     input.sessionStrategy = sessionStrategy;
   }
@@ -21720,8 +22764,8 @@ function toMemoryHttpError(error) {
 }
 
 // src/hermes/skills.ts
-import { readFile as readFile15, readdir as readdir11 } from "fs/promises";
-import path22 from "path";
+import { readFile as readFile16, readdir as readdir11 } from "fs/promises";
+import path23 from "path";
 import YAML5 from "yaml";
 var HermesSkillNotFoundError = class extends Error {
   constructor(skillName) {
@@ -21735,7 +22779,7 @@ var EXCLUDED_SKILL_DIRS = /* @__PURE__ */ new Set([".git", ".github", ".hub"]);
 async function listHermesProfileSkills(profileName, paths = resolveRuntimePaths()) {
   const profile = await readExistingProfile(profileName, paths);
   const profileDir = resolveHermesProfileDir(profile.name);
-  const skillsRoot = path22.join(profileDir, "skills");
+  const skillsRoot = path23.join(profileDir, "skills");
   const [skillFiles, disabled, provenance] = await Promise.all([
     findSkillFiles(skillsRoot),
     readDisabledSkillNames(resolveHermesConfigPath(profile.name)),
@@ -21814,7 +22858,7 @@ async function findSkillFiles(root) {
 async function collectSkillFiles(directory, results) {
   const entries = await readdir11(directory, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError17(error, "ENOENT")) {
+      if (isNodeError18(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -21826,7 +22870,7 @@ async function collectSkillFiles(directory, results) {
     if (EXCLUDED_SKILL_DIRS.has(entry.name)) {
       continue;
     }
-    const entryPath = path22.join(directory, entry.name);
+    const entryPath = path23.join(directory, entry.name);
     if (entry.isDirectory()) {
       await collectSkillFiles(entryPath, results);
       continue;
@@ -21837,9 +22881,9 @@ async function collectSkillFiles(directory, results) {
   }
 }
 async function readSkillMetadata(input) {
-  const raw = await readFile15(input.skillFile, "utf8").catch(
+  const raw = await readFile16(input.skillFile, "utf8").catch(
     (error) => {
-      if (isNodeError17(error, "ENOENT") || isNodeError17(error, "EACCES")) {
+      if (isNodeError18(error, "ENOENT") || isNodeError18(error, "EACCES")) {
         return null;
       }
       throw error;
@@ -21848,16 +22892,16 @@ async function readSkillMetadata(input) {
   if (raw === null) {
     return null;
   }
-  const skillDir = path22.dirname(input.skillFile);
+  const skillDir = path23.dirname(input.skillFile);
   const { frontmatter, body } = parseSkillDocument(raw.slice(0, 4e3));
   const name = normalizeSkillName(
-    readString16(frontmatter.name) ?? path22.basename(skillDir)
+    readString18(frontmatter.name) ?? path23.basename(skillDir)
   );
   if (!name) {
     return null;
   }
   const description = normalizeDescription(
-    readString16(frontmatter.description) ?? firstBodyDescription(body)
+    readString18(frontmatter.description) ?? firstBodyDescription(body)
   );
   const provenance = input.provenance.get(name) ?? {
     source: "local",
@@ -21870,7 +22914,7 @@ async function readSkillMetadata(input) {
     enabled: !input.disabled.has(name),
     source: provenance.source,
     trust: provenance.trust,
-    relativePath: path22.relative(input.skillsRoot, skillDir)
+    relativePath: path23.relative(input.skillsRoot, skillDir)
   };
 }
 function parseSkillDocument(raw) {
@@ -21883,7 +22927,7 @@ function parseSkillDocument(raw) {
   }
   try {
     return {
-      frontmatter: toRecord15(YAML5.parse(match[1] ?? "")),
+      frontmatter: toRecord17(YAML5.parse(match[1] ?? "")),
       body: content.slice(match[0].length)
     };
   } catch {
@@ -21891,8 +22935,8 @@ function parseSkillDocument(raw) {
   }
 }
 function categoryFromPath(skillsRoot, skillFile) {
-  const relative = path22.relative(skillsRoot, skillFile);
-  const parts = relative.split(path22.sep).filter(Boolean);
+  const relative = path23.relative(skillsRoot, skillFile);
+  const parts = relative.split(path23.sep).filter(Boolean);
   return parts.length >= 3 ? parts[0] : null;
 }
 function firstBodyDescription(body) {
@@ -21915,8 +22959,8 @@ function normalizeDescription(value) {
   return `${description.slice(0, MAX_DESCRIPTION_LENGTH - 3)}...`;
 }
 async function readDisabledSkillNames(configPath) {
-  const raw = await readFile15(configPath, "utf8").catch((error) => {
-    if (isNodeError17(error, "ENOENT")) {
+  const raw = await readFile16(configPath, "utf8").catch((error) => {
+    if (isNodeError18(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -21924,8 +22968,8 @@ async function readDisabledSkillNames(configPath) {
   if (!raw.trim()) {
     return /* @__PURE__ */ new Set();
   }
-  const config = toRecord15(YAML5.parse(raw));
-  const skills = toRecord15(config.skills);
+  const config = toRecord17(YAML5.parse(raw));
+  const skills = toRecord17(config.skills);
   return new Set(readStringList3(skills.disabled));
 }
 async function readSkillProvenance(root) {
@@ -21939,9 +22983,9 @@ async function readSkillProvenance(root) {
   return provenance;
 }
 async function readBundledSkillNames(root) {
-  const raw = await readFile15(path22.join(root, ".bundled_manifest"), "utf8").catch(
+  const raw = await readFile16(path23.join(root, ".bundled_manifest"), "utf8").catch(
     (error) => {
-      if (isNodeError17(error, "ENOENT")) {
+      if (isNodeError18(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -21962,9 +23006,9 @@ async function readBundledSkillNames(root) {
   return names;
 }
 async function readHubInstalledSkills(root) {
-  const raw = await readFile15(path22.join(root, ".hub", "lock.json"), "utf8").catch(
+  const raw = await readFile16(path23.join(root, ".hub", "lock.json"), "utf8").catch(
     (error) => {
-      if (isNodeError17(error, "ENOENT")) {
+      if (isNodeError18(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -21975,17 +23019,17 @@ async function readHubInstalledSkills(root) {
   }
   let lock;
   try {
-    lock = toRecord15(JSON.parse(raw));
+    lock = toRecord17(JSON.parse(raw));
   } catch {
     return /* @__PURE__ */ new Map();
   }
-  const installed = toRecord15(lock.installed);
+  const installed = toRecord17(lock.installed);
   const result = /* @__PURE__ */ new Map();
   for (const [name, rawEntry] of Object.entries(installed)) {
-    const entry = toRecord15(rawEntry);
+    const entry = toRecord17(rawEntry);
     result.set(normalizeSkillName(name), {
-      source: readString16(entry.source) ?? "hub",
-      trust: readString16(entry.trust_level) ?? null
+      source: readString18(entry.source) ?? "hub",
+      trust: readString18(entry.trust_level) ?? null
     });
   }
   return result;
@@ -22034,9 +23078,9 @@ function compareCategoryNames(left, right) {
   return left.localeCompare(right);
 }
 async function readHermesConfigDocument2(configPath) {
-  const existingRaw = await readFile15(configPath, "utf8").catch(
+  const existingRaw = await readFile16(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError17(error, "ENOENT")) {
+      if (isNodeError18(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -22045,7 +23089,7 @@ async function readHermesConfigDocument2(configPath) {
   const document = existingRaw ? YAML5.parseDocument(existingRaw) : new YAML5.Document({});
   return {
     document,
-    config: toRecord15(document.toJSON()),
+    config: toRecord17(document.toJSON()),
     existingRaw
   };
 }
@@ -22069,21 +23113,21 @@ function readStringList3(value) {
   }
   return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
 }
-function readString16(value) {
+function readString18(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function toRecord15(value) {
+function toRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 function ensureRecord3(target, key) {
-  const current = toRecord15(target[key]);
+  const current = toRecord17(target[key]);
   if (current === target[key]) {
     return current;
   }
   target[key] = current;
   return current;
 }
-function isNodeError17(error, code) {
+function isNodeError18(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -22382,7 +23426,7 @@ function registerRunRoutes(router, options) {
   router.post("/api/v1/runs", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const input = readString14(body, "input");
+    const input = readString16(body, "input");
     if (!input) {
       throw new LinkHttpError(400, "run_input_required", "input is required");
     }
@@ -22390,12 +23434,12 @@ function registerRunRoutes(router, options) {
     ctx.body = await createHermesRun(
       {
         input,
-        instructions: readString14(body, "instructions") ?? void 0,
+        instructions: readString16(body, "instructions") ?? void 0,
         conversation_history: readConversationHistory(
           body.conversation_history ?? body.conversationHistory
         ),
-        session_id: readString14(body, "session_id") ?? readString14(body, "sessionId") ?? void 0,
-        session_key: readString14(body, "session_key") ?? readString14(body, "sessionKey") ?? void 0
+        session_id: readString16(body, "session_id") ?? readString16(body, "sessionId") ?? void 0,
+        session_key: readString16(body, "session_key") ?? readString16(body, "sessionKey") ?? void 0
       },
       { logger, profileName: readOptionalProfileName(body) }
     );
@@ -22566,8 +23610,8 @@ function readModelList(payload) {
 // src/hermes/updates.ts
 import { EventEmitter as EventEmitter3 } from "events";
 import { spawn as spawn3 } from "child_process";
-import { mkdir as mkdir12, readFile as readFile16, rm as rm7 } from "fs/promises";
-import path23 from "path";
+import { mkdir as mkdir12, readFile as readFile17, rm as rm7 } from "fs/promises";
+import path24 from "path";
 var SERVER_HERMES_RELEASES_LATEST_PATH = "/api/v1/hermes-agent/releases/latest";
 var RELEASE_CACHE_TTL_MS = 6 * 60 * 60 * 1e3;
 var RELEASE_FETCH_TIMEOUT_MS = 5e3;
@@ -22800,24 +23844,24 @@ async function readRemoteRelease(options, now) {
   }
 }
 function normalizeServerReleaseSnapshot(payload) {
-  const snapshot = toRecord16(payload);
+  const snapshot = toRecord18(payload);
   const remote = toNullableRecord(snapshot.remote);
   return {
     remote: remote ? normalizeServerRelease(remote) : null,
-    cacheState: readString17(snapshot, "cache_state") ?? readString17(snapshot, "cacheState"),
-    issue: readString17(snapshot, "issue")
+    cacheState: readString19(snapshot, "cache_state") ?? readString19(snapshot, "cacheState"),
+    issue: readString19(snapshot, "issue")
   };
 }
 function normalizeServerRelease(payload) {
-  const tag = readString17(payload, "tag");
-  const name = readString17(payload, "name");
+  const tag = readString19(payload, "tag");
+  const name = readString19(payload, "name");
   return {
-    version: readString17(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
+    version: readString19(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
     tag,
     name,
-    releaseUrl: readString17(payload, "releaseUrl") ?? readString17(payload, "release_url"),
-    publishedAt: readString17(payload, "publishedAt") ?? readString17(payload, "published_at"),
-    fetchedAt: readString17(payload, "fetchedAt") ?? readString17(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
+    releaseUrl: readString19(payload, "releaseUrl") ?? readString19(payload, "release_url"),
+    publishedAt: readString19(payload, "publishedAt") ?? readString19(payload, "published_at"),
+    fetchedAt: readString19(payload, "fetchedAt") ?? readString19(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
   };
 }
 async function readReleaseCache(paths) {
@@ -22836,7 +23880,7 @@ async function writeUpdateState(paths, state) {
   await writeJsonFile(updateStatePath(paths), state);
 }
 async function readUpdateLogLines(paths) {
-  const raw = await readFile16(updateLogPath(paths), "utf8").catch(() => "");
+  const raw = await readFile17(updateLogPath(paths), "utf8").catch(() => "");
   if (!raw.trim()) {
     return [];
   }
@@ -22845,13 +23889,13 @@ async function readUpdateLogLines(paths) {
   );
 }
 function releaseCachePath(paths) {
-  return path23.join(paths.indexesDir, "hermes-release-check.json");
+  return path24.join(paths.indexesDir, "hermes-release-check.json");
 }
 function updateStatePath(paths) {
-  return path23.join(paths.runDir, "hermes-update-state.json");
+  return path24.join(paths.runDir, "hermes-update-state.json");
 }
 function updateLogPath(paths) {
-  return path23.join(paths.logsDir, UPDATE_LOG_FILE);
+  return path24.join(paths.logsDir, UPDATE_LOG_FILE);
 }
 async function clearUpdateLogFiles(paths) {
   const primary = updateLogPath(paths);
@@ -22889,7 +23933,7 @@ function compareSemver2(left, right) {
   }
   return 0;
 }
-function toRecord16(value) {
+function toRecord18(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 function toNullableRecord(value) {
@@ -22943,7 +23987,7 @@ function isRecentRunningState2(state) {
   const startedAt = Date.parse(state.started_at);
   return Number.isFinite(startedAt) && Date.now() - startedAt < 3e4;
 }
-function readString17(payload, key) {
+function readString19(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -22951,13 +23995,13 @@ function readString17(payload, key) {
 // src/link/updates.ts
 import { spawn as spawn5 } from "child_process";
 import { EventEmitter as EventEmitter4 } from "events";
-import { mkdir as mkdir15, readFile as readFile18, rm as rm10 } from "fs/promises";
-import path25 from "path";
+import { mkdir as mkdir15, readFile as readFile19, rm as rm10 } from "fs/promises";
+import path26 from "path";
 
 // src/daemon/process.ts
 import { spawn as spawn4 } from "child_process";
-import { mkdir as mkdir14, readFile as readFile17, rm as rm9 } from "fs/promises";
-import path24 from "path";
+import { mkdir as mkdir14, readFile as readFile18, rm as rm9 } from "fs/promises";
+import path25 from "path";
 
 // src/daemon/service.ts
 import { createServer } from "http";
@@ -22968,8 +24012,8 @@ import WebSocket from "ws";
 
 // src/relay/stream-policy.ts
 var DEFAULT_RELAY_STREAM_BATCH_POLICY = {
-  flushIntervalMs: 50,
-  flushBytes: 2 * 1024
+  flushIntervalMs: 1e3,
+  flushBytes: 4 * 1024
 };
 var RELAY_STREAM_POLICY_CONSTRAINTS = {
   flushIntervalMs: {
@@ -24291,7 +25335,7 @@ async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
   await mkdir14(paths.logsDir, { recursive: true, mode: 448 });
   const log = createRotatingTextLogWriter({
     paths,
-    fileName: path24.basename(daemonLogFile(paths))
+    fileName: path25.basename(daemonLogFile(paths))
   });
   const scriptPath = currentCliScriptPath();
   const child = spawn4(process.execPath, [scriptPath, "daemon", "--foreground"], {
@@ -24420,7 +25464,7 @@ function currentCliScriptPath() {
   return process.argv[1];
 }
 async function readPid(filePath) {
-  const raw = await readFile17(filePath, "utf8").catch(() => null);
+  const raw = await readFile18(filePath, "utf8").catch(() => null);
   if (!raw) {
     return null;
   }
@@ -24849,21 +25893,21 @@ async function readRemoteLinkPolicy(options) {
   }
 }
 function normalizeServerSnapshot(payload) {
-  const snapshot = toRecord17(payload);
+  const snapshot = toRecord19(payload);
   const policy = toNullableRecord2(snapshot.policy);
   if (!policy) {
     return {
       remote: null,
-      issue: readString18(snapshot, "issue")
+      issue: readString20(snapshot, "issue")
     };
   }
   const release = toNullableRecord2(snapshot.release);
-  const currentVersion = readString18(policy, "current_version") ?? readString18(policy, "currentVersion");
-  const minSafeVersion = readString18(policy, "min_safe_version") ?? readString18(policy, "minSafeVersion");
+  const currentVersion = readString20(policy, "current_version") ?? readString20(policy, "currentVersion");
+  const minSafeVersion = readString20(policy, "min_safe_version") ?? readString20(policy, "minSafeVersion");
   if (!currentVersion) {
     return {
       remote: null,
-      issue: readString18(snapshot, "issue")
+      issue: readString20(snapshot, "issue")
     };
   }
   return {
@@ -24871,10 +25915,10 @@ function normalizeServerSnapshot(payload) {
       current_version: currentVersion,
       min_safe_version: minSafeVersion,
       target_version: currentVersion,
-      release_url: release ? readString18(release, "release_url") ?? readString18(release, "releaseUrl") : null,
-      published_at: release ? readString18(release, "published_at") ?? readString18(release, "publishedAt") : null
+      release_url: release ? readString20(release, "release_url") ?? readString20(release, "releaseUrl") : null,
+      published_at: release ? readString20(release, "published_at") ?? readString20(release, "publishedAt") : null
     },
-    issue: readString18(snapshot, "issue")
+    issue: readString20(snapshot, "issue")
   };
 }
 async function fetchCurrentLinkReleaseFromServer(options, fetcher, channel) {
@@ -25192,7 +26236,7 @@ async function writeUpdateState2(paths, state) {
   await writeJsonFile(updateStatePath2(paths), state);
 }
 async function readUpdateLogLines2(paths) {
-  const raw = await readFile18(updateLogPath2(paths), "utf8").catch(() => "");
+  const raw = await readFile19(updateLogPath2(paths), "utf8").catch(() => "");
   if (!raw.trim()) {
     return [];
   }
@@ -25201,10 +26245,10 @@ async function readUpdateLogLines2(paths) {
   );
 }
 function updateStatePath2(paths) {
-  return path25.join(paths.runDir, "link-update-state.json");
+  return path26.join(paths.runDir, "link-update-state.json");
 }
 function updateLogPath2(paths) {
-  return path25.join(paths.logsDir, UPDATE_LOG_FILE2);
+  return path26.join(paths.logsDir, UPDATE_LOG_FILE2);
 }
 async function clearUpdateLogFiles2(paths) {
   const primary = updateLogPath2(paths);
@@ -25276,19 +26320,19 @@ function isProcessAlive4(pid) {
     return false;
   }
 }
-function toRecord17(value) {
+function toRecord19(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 function toNullableRecord2(value) {
   return typeof value === "object" && value !== null ? value : null;
 }
-function readString18(payload, key) {
+function readString20(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 
 // src/pairing/pairing.ts
-import path26 from "path";
+import path27 from "path";
 import { rm as rm11 } from "fs/promises";
 
 // src/relay/bootstrap.ts
@@ -25628,10 +26672,10 @@ async function loadRequiredIdentity2(paths) {
   }
   return identity;
 }
-async function postServerJson(serverBaseUrl, path27, body, options) {
+async function postServerJson(serverBaseUrl, path28, body, options) {
   let response;
   try {
-    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path27}`, {
+    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path28}`, {
       method: "POST",
       headers: {
         accept: "application/json",
@@ -25679,10 +26723,10 @@ function pairingErrorSnapshot(stage, error) {
     occurred_at: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-async function patchServerJson(serverBaseUrl, path27, token, body, options) {
+async function patchServerJson(serverBaseUrl, path28, token, body, options) {
   let response;
   try {
-    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path27}`, {
+    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path28}`, {
       method: "PATCH",
       headers: {
         accept: "application/json",
@@ -25730,10 +26774,10 @@ function createPairingNetworkError(input) {
   );
 }
 function pairingClaimPath(sessionId, paths) {
-  return path26.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.claimed.json`);
+  return path27.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.claimed.json`);
 }
 function pairingSessionPath(sessionId, paths) {
-  return path26.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.json`);
+  return path27.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.json`);
 }
 function qrPreferredUrls(routes) {
   return routes.preferredUrls.filter((url) => !url.includes("/api/v1/relay/links/")).slice(0, 1);
@@ -25809,8 +26853,8 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/pairing/claim", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const sessionId = readString14(body, "session_id") ?? readString14(body, "sessionId");
-    const claimToken = readString14(body, "claim_token") ?? readString14(body, "claimToken");
+    const sessionId = readString16(body, "session_id") ?? readString16(body, "sessionId");
+    const claimToken = readString16(body, "claim_token") ?? readString16(body, "claimToken");
     if (!sessionId || !claimToken) {
       throw new LinkHttpError(
         400,
@@ -25821,10 +26865,10 @@ function registerSystemRoutes(router, options) {
     const claimed = await claimPairing({
       sessionId,
       claimToken,
-      deviceLabel: readString14(body, "device_label") ?? readString14(body, "deviceLabel") ?? "HermesPilot App",
-      devicePlatform: readString14(body, "device_platform") ?? readString14(body, "devicePlatform") ?? "unknown",
-      deviceModel: readString14(body, "device_model") ?? readString14(body, "deviceModel"),
-      appInstanceId: readString14(body, "app_instance_id") ?? readString14(body, "appInstanceId"),
+      deviceLabel: readString16(body, "device_label") ?? readString16(body, "deviceLabel") ?? "HermesPilot App",
+      devicePlatform: readString16(body, "device_platform") ?? readString16(body, "devicePlatform") ?? "unknown",
+      deviceModel: readString16(body, "device_model") ?? readString16(body, "deviceModel"),
+      appInstanceId: readString16(body, "app_instance_id") ?? readString16(body, "appInstanceId"),
       paths
     });
     ctx.body = claimed;
@@ -25899,9 +26943,9 @@ function registerSystemRoutes(router, options) {
     const body = await readJsonBody(ctx.req);
     const session = await createDeviceSession(
       {
-        label: readString14(body, "device_label") ?? readString14(body, "deviceLabel") ?? "HermesPilot App",
-        platform: readString14(body, "device_platform") ?? readString14(body, "devicePlatform") ?? "unknown",
-        model: readString14(body, "device_model") ?? readString14(body, "deviceModel"),
+        label: readString16(body, "device_label") ?? readString16(body, "deviceLabel") ?? "HermesPilot App",
+        platform: readString16(body, "device_platform") ?? readString16(body, "devicePlatform") ?? "unknown",
+        model: readString16(body, "device_model") ?? readString16(body, "deviceModel"),
         appInstanceId: auth.appInstanceId
       },
       paths
@@ -25930,7 +26974,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/refresh", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString14(body, "refresh_token") ?? readString14(body, "refreshToken");
+    const refreshToken = readString16(body, "refresh_token") ?? readString16(body, "refreshToken");
     if (!refreshToken) {
       throw new LinkHttpError(
         400,
@@ -25941,10 +26985,10 @@ function registerSystemRoutes(router, options) {
     const session = await refreshDeviceSession(
       refreshToken,
       {
-        appInstanceId: readString14(body, "app_instance_id") ?? readString14(body, "appInstanceId"),
-        label: readString14(body, "device_label") ?? readString14(body, "deviceLabel"),
-        platform: readString14(body, "device_platform") ?? readString14(body, "devicePlatform"),
-        model: readString14(body, "device_model") ?? readString14(body, "deviceModel")
+        appInstanceId: readString16(body, "app_instance_id") ?? readString16(body, "appInstanceId"),
+        label: readString16(body, "device_label") ?? readString16(body, "deviceLabel"),
+        platform: readString16(body, "device_platform") ?? readString16(body, "devicePlatform"),
+        model: readString16(body, "device_model") ?? readString16(body, "deviceModel")
       },
       paths
     );
@@ -25963,7 +27007,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/logout", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString14(body, "refresh_token") ?? readString14(body, "refreshToken");
+    const refreshToken = readString16(body, "refresh_token") ?? readString16(body, "refreshToken");
     if (refreshToken) {
       await revokeDeviceRefreshToken(refreshToken, paths);
     }
@@ -26189,7 +27233,7 @@ function registerSystemRoutes(router, options) {
   router.patch("/api/v1/devices/:deviceId", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const label = readString14(body, "label") ?? readString14(body, "device_label");
+    const label = readString16(body, "label") ?? readString16(body, "device_label");
     if (!label) {
       throw new LinkHttpError(
         400,
@@ -26233,7 +27277,7 @@ function isActiveCronJob(job) {
   if (!enabled) {
     return false;
   }
-  const state = readString14(job, "state")?.toLowerCase();
+  const state = readString16(job, "state")?.toLowerCase();
   return !["paused", "disabled", "completed", "deleted"].includes(state ?? "");
 }
 function filterLogsWithinHours(logs, hours, now = Date.now()) {
@@ -26327,8 +27371,8 @@ function registerLinkUpdateRoutes(router, options) {
     ctx.body = await startLinkUpdate({
       paths,
       logger,
-      channel: readString14(body, "channel"),
-      targetVersion: readString14(body, "target_version") ?? readString14(body, "targetVersion")
+      channel: readString16(body, "channel"),
+      targetVersion: readString16(body, "target_version") ?? readString16(body, "targetVersion")
     });
   });
   router.get("/api/v1/link/update/events", async (ctx) => {
@@ -26358,7 +27402,7 @@ import QRCode from "qrcode";
 function registerPairingRoutes(router, options) {
   const { paths } = options;
   router.get("/pair", async (ctx) => {
-    const sessionId = readString14(ctx.query, "session_id");
+    const sessionId = readString16(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -26383,7 +27427,7 @@ function registerPairingRoutes(router, options) {
     ctx.body = page;
   });
   router.get("/api/v1/pairing/session", async (ctx) => {
-    const sessionId = readString14(ctx.query, "session_id");
+    const sessionId = readString16(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -26834,7 +27878,7 @@ function registerInternalRoutes(router, options) {
   router.post("/internal/deliver", async (ctx) => {
     assertLoopbackRequest(ctx.req);
     const body = await readJsonBody(ctx.req);
-    const stagingDir = readString14(body, "staging_dir") ?? readString14(body, "stagingDir");
+    const stagingDir = readString16(body, "staging_dir") ?? readString16(body, "stagingDir");
     if (!stagingDir) {
       throw new LinkHttpError(
         400,