@hermespilot/link 0.6.7 → 0.6.9

package/dist/{chunk-FWX7ZUP4.js → chunk-DOSXOXOS.js}

@@ -4,7 +4,7 @@ import Router from "@koa/router";
 
 // src/conversations/conversation-service.ts
 import { EventEmitter } from "events";
-import { randomUUID as randomUUID10 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID10 } from "crypto";
 
 // src/database/link-database.ts
 import { mkdir } from "fs/promises";
@@ -1359,6 +1359,7 @@ function isNodeError(error, code) {
 }
 
 // src/storage/atomic-json.ts
+var jsonUpdateQueues = /* @__PURE__ */ new Map();
 async function readJsonFile(filePath) {
   try {
     const raw = await readFile(filePath, "utf8");
@@ -1375,6 +1376,24 @@ async function writeJsonFile(filePath, value, mode = 384) {
 `;
   await atomicWriteFilePreservingMetadata(filePath, payload, { mode });
 }
+async function updateJsonFile(filePath, update, mode = 384) {
+  const previous = jsonUpdateQueues.get(filePath) ?? Promise.resolve();
+  let next;
+  const operation = previous.catch(() => void 0).then(async () => {
+    const current = await readJsonFile(filePath);
+    next = await update(current);
+    await writeJsonFile(filePath, next, mode);
+  });
+  const queued = operation.catch(() => void 0);
+  jsonUpdateQueues.set(filePath, queued);
+  void queued.finally(() => {
+    if (jsonUpdateQueues.get(filePath) === queued) {
+      jsonUpdateQueues.delete(filePath);
+    }
+  });
+  await operation;
+  return next;
+}
 function isNodeError2(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
@@ -5275,6 +5294,10 @@ async function bindCronJobToHermesLink(paths, input) {
   if (existing) {
     existing.conversationId = input.conversationId;
     existing.source = input.source;
+    if (input.ownerAccountId) {
+      existing.ownerAccountId = input.ownerAccountId;
+      existing.ownerAppInstanceId = input.ownerAppInstanceId;
+    }
   } else {
     registry.bindings.push({
       ...input,
@@ -5284,6 +5307,26 @@ async function bindCronJobToHermesLink(paths, input) {
   }
   await writeRegistry(paths, registry);
 }
+async function backfillHermesLinkCronDeliveryOwner(paths, input) {
+  const accountId = input.accountId.trim();
+  if (!accountId) {
+    return 0;
+  }
+  const registry = await readRegistry(paths);
+  let changed = 0;
+  for (const binding of registry.bindings) {
+    if (binding.ownerAccountId) {
+      continue;
+    }
+    binding.ownerAccountId = accountId;
+    binding.ownerAppInstanceId = input.appInstanceId;
+    changed += 1;
+  }
+  if (changed > 0) {
+    await writeRegistry(paths, registry);
+  }
+  return changed;
+}
 async function bindNewCronJobsToHermesLink(paths, input) {
   for (const job of input.jobs) {
     const jobId = readString3(job, "id") ?? readString3(job, "job_id");
@@ -5298,7 +5341,9 @@ async function bindNewCronJobsToHermesLink(paths, input) {
       profileName: input.profileName,
       jobId,
       conversationId: input.conversationId,
-      source: "natural_language"
+      source: "natural_language",
+      ownerAccountId: input.ownerAccountId,
+      ownerAppInstanceId: input.ownerAppInstanceId
     });
   }
 }
@@ -5323,6 +5368,28 @@ async function decorateHermesLinkCronJob(paths, profileName, job) {
   );
   return binding ? { ...job, deliver: HERMES_LINK_CRON_DELIVER } : job;
 }
+async function listHermesLinkCronOutputWatchDirs(paths) {
+  const registry = await readRegistry(paths);
+  const dirs = /* @__PURE__ */ new Set();
+  for (const binding of registry.bindings) {
+    dirs.add(
+      path4.join(resolveHermesProfileDir(binding.profileName), "cron", "output")
+    );
+  }
+  const existing = [];
+  for (const dir of dirs) {
+    const dirStat = await stat2(dir).catch((error) => {
+      if (isNodeError4(error, "ENOENT")) {
+        return null;
+      }
+      throw error;
+    });
+    if (dirStat?.isDirectory()) {
+      existing.push(dir);
+    }
+  }
+  return existing;
+}
 async function syncHermesLinkCronDeliveries(paths, runtime, logger) {
   const registry = await readRegistry(paths);
   let touched = false;
@@ -5339,15 +5406,27 @@ async function syncHermesLinkCronDeliveries(paths, runtime, logger) {
       }
       try {
         const content = await readCronOutput(output.path);
-        await runtime.appendCronDelivery({
+        const handled = await runtime.appendCronDelivery({
           conversationId: binding.conversationId,
           profileName: binding.profileName,
           jobId: binding.jobId,
+          source: binding.source,
           jobName: await readCronJobNameFromOutput(content),
           outputPath: output.path,
           content,
-          runAt: output.mtime
+          failed: isFailedCronOutput(content),
+          runAt: output.mtime,
+          accountId: binding.ownerAccountId,
+          appInstanceId: binding.ownerAppInstanceId
         });
+        if (!handled) {
+          void logger.warn("cron_link_delivery_pending", {
+            profile: binding.profileName,
+            job_id: binding.jobId,
+            output_path: output.path
+          });
+          continue;
+        }
         delivered.add(output.path);
         touched = true;
       } catch (error) {
@@ -5423,6 +5502,9 @@ async function readCronJobNameFromOutput(content) {
   const match = content.match(/^#\s*Cron Job:\s*(.+)$/mu);
   return match?.[1]?.trim() || void 0;
 }
+function isFailedCronOutput(content) {
+  return /^#\s*Cron Job:\s*.+\(FAILED\)\s*$/imu.test(content) || /^\*\*Status:\*\*\s*(?:script\s+)?failed\s*$/imu.test(content) || /^##\s+Error\s*$/imu.test(content);
+}
 async function readRegistry(paths) {
   const existing = await readJsonFile(registryPath(paths));
   if (existing?.version === REGISTRY_VERSION && Array.isArray(existing.bindings)) {
@@ -5449,7 +5531,7 @@ function normalizeDeliverValue(value) {
 }
 function isValidBinding(value) {
   const binding = value;
-  return typeof binding?.profileName === "string" && typeof binding.jobId === "string" && typeof binding.conversationId === "string" && (binding.source === "app" || binding.source === "natural_language");
+  return typeof binding?.profileName === "string" && typeof binding.jobId === "string" && (binding.conversationId === void 0 || typeof binding.conversationId === "string") && (binding.source === "app" || binding.source === "natural_language");
 }
 function readString3(record, ...keys) {
   for (const key of keys) {
@@ -5467,30 +5549,15 @@ function isConversationMissingError(error) {
   return isLinkHttpError(error) && error.status === 404 && error.code === "conversation_not_found";
 }
 
-// src/hermes/gateway.ts
-import { execFile as execFile2, spawn } from "child_process";
-import { constants as fsConstants } from "fs";
-import { access, readFile as readFile5, realpath, stat as stat4 } from "fs/promises";
-import path7 from "path";
-import { setTimeout as delay2 } from "timers/promises";
-import { promisify as promisify2 } from "util";
-
-// src/runtime/logger.ts
-import { appendFile, mkdir as mkdir4, open as open2, readFile as readFile4, rename as rename2, rm as rm2, stat as stat3, truncate } from "fs/promises";
-import os3 from "os";
-import path6 from "path";
-
-// src/runtime/paths.ts
-import os2 from "os";
-import path5 from "path";
-
 // src/constants.ts
-var LINK_VERSION = "0.6.7";
+var LINK_VERSION = "0.6.9";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
 
 // src/runtime/paths.ts
+import os2 from "os";
+import path5 from "path";
 function resolveRuntimeHome() {
   return process.env.HERMESLINK_HOME?.trim() ? path5.resolve(process.env.HERMESLINK_HOME) : path5.join(os2.homedir(), LINK_RUNTIME_DIR_NAME);
 }
@@ -5511,7 +5578,255 @@ function resolveRuntimePaths(homeDir = resolveRuntimeHome()) {
   };
 }
 
+// src/config/config.ts
+var defaultLinkConfig = {
+  port: LINK_DEFAULT_PORT,
+  lanHost: null,
+  serverBaseUrl: "https://hermes-server.clawpilot.me",
+  relayBaseUrl: "https://hermes-relay.clawpilot.me",
+  appConnectTokenIssuer: "https://hermes-server.clawpilot.me",
+  appConnectTokenAudience: "hermes-link",
+  language: "auto",
+  logLevel: "warn"
+};
+async function loadConfig(paths = resolveRuntimePaths()) {
+  const existing = await readJsonFile(paths.configFile);
+  const language = normalizeConfiguredLanguage(existing?.language);
+  const lanHost = normalizeLanHost(existing?.lanHost);
+  const logLevel = normalizeLogLevel(
+    existing?.logLevel ?? process.env.HERMESLINK_LOG_LEVEL
+  );
+  return {
+    ...defaultLinkConfig,
+    ...existing ?? {},
+    language,
+    lanHost,
+    logLevel
+  };
+}
+async function saveConfig(patch, paths = resolveRuntimePaths()) {
+  const current = await loadConfig(paths);
+  const next = {
+    ...current,
+    ...patch,
+    logLevel: patch.logLevel === void 0 ? current.logLevel : normalizeLogLevel(patch.logLevel)
+  };
+  await writeJsonFile(paths.configFile, next);
+  return next;
+}
+function normalizeConfiguredLanguage(language) {
+  if (language === "zh-CN" || language === "en" || language === "auto") {
+    return language;
+  }
+  return defaultLinkConfig.language;
+}
+function normalizeLogLevel(level) {
+  if (level === "debug" || level === "info" || level === "warn" || level === "error") {
+    return level;
+  }
+  return defaultLinkConfig.logLevel;
+}
+function parseLogLevel(value) {
+  if (value === "debug" || value === "info" || value === "warn" || value === "error") {
+    return value;
+  }
+  return null;
+}
+function normalizeLanHost(value) {
+  if (value === null || value === void 0) {
+    return null;
+  }
+  if (typeof value !== "string") {
+    return null;
+  }
+  const host = value.trim().replace(/^\[/u, "").replace(/\]$/u, "");
+  if (!host) {
+    return null;
+  }
+  if (!isUsableLanIpv4(host)) {
+    return null;
+  }
+  return host;
+}
+function isUsableLanIpv4(value) {
+  const parts = value.split(".").map((part) => Number.parseInt(part, 10));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  const [first, second, , fourth] = parts;
+  const privateRange = first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168;
+  return privateRange && fourth !== 0 && fourth !== 255;
+}
+
+// src/identity/identity.ts
+import { generateKeyPairSync, randomUUID as randomUUID3, sign } from "crypto";
+import { mkdir as mkdir4, chmod as chmod2 } from "fs/promises";
+import { z } from "zod";
+var linkIdentitySchema = z.object({
+  install_id: z.string().min(1),
+  link_id: z.string().min(1).nullable().optional(),
+  public_key_pem: z.string().min(1),
+  private_key_pem: z.string().min(1),
+  created_at: z.string().min(1),
+  updated_at: z.string().min(1)
+});
+async function loadIdentity(paths = resolveRuntimePaths()) {
+  const value = await readJsonFile(paths.identityFile);
+  if (value === null) {
+    return null;
+  }
+  return linkIdentitySchema.parse(value);
+}
+async function ensureIdentity(paths = resolveRuntimePaths()) {
+  const existing = await loadIdentity(paths);
+  if (existing) {
+    return existing;
+  }
+  await mkdir4(paths.homeDir, { recursive: true, mode: 448 });
+  await chmod2(paths.homeDir, 448).catch(() => void 0);
+  const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const identity = {
+    install_id: `install_${randomUUID3().replaceAll("-", "")}`,
+    link_id: null,
+    public_key_pem: publicKey.export({ type: "spki", format: "pem" }).toString(),
+    private_key_pem: privateKey.export({ type: "pkcs8", format: "pem" }).toString(),
+    created_at: now,
+    updated_at: now
+  };
+  await writeJsonFile(paths.identityFile, identity);
+  return identity;
+}
+async function saveAssignedLinkId(linkId, paths = resolveRuntimePaths()) {
+  const identity = await ensureIdentity(paths);
+  const next = {
+    ...identity,
+    link_id: linkId,
+    updated_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await writeJsonFile(paths.identityFile, next);
+  return next;
+}
+function signRelayNonce(identity, nonce) {
+  return signIdentityPayload(identity, nonce);
+}
+function signIdentityPayload(identity, payload) {
+  const signature = sign(null, Buffer.from(payload, "utf8"), identity.private_key_pem);
+  return signature.toString("base64url");
+}
+function getIdentityStatus(identity) {
+  return {
+    installId: identity.install_id,
+    linkId: identity.link_id ?? null,
+    hasPrivateKey: identity.private_key_pem.trim().length > 0,
+    publicKeyPem: identity.public_key_pem
+  };
+}
+
+// src/link/notification-events.ts
+async function reportNotificationEventToServer(options) {
+  const [identity, config] = await Promise.all([
+    loadIdentity(options.paths),
+    loadConfig(options.paths)
+  ]);
+  if (!identity?.link_id) {
+    return;
+  }
+  const occurredAt = normalizeIso(options.event.occurredAt) ?? (/* @__PURE__ */ new Date()).toISOString();
+  const reportedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const payload = {
+    type: "hermes_link_notification_event",
+    link_id: identity.link_id,
+    install_id: identity.install_id,
+    source_event_id: options.event.sourceEventId,
+    event_kind: options.event.eventKind,
+    conversation_id: options.event.conversationId,
+    occurred_at: occurredAt,
+    reported_at: reportedAt
+  };
+  addOptional(payload, "account_id", options.event.accountId, 128);
+  addOptional(payload, "message_id", options.event.messageId, 128);
+  addOptional(payload, "run_id", options.event.runId, 128);
+  addOptional(payload, "body_preview", options.event.bodyPreview, 512);
+  addOptional(payload, "conversation_title", options.event.conversationTitle, 128);
+  const signature = signIdentityPayload(identity, canonicalJson(payload));
+  const fetcher = options.fetchImpl ?? fetch;
+  const response = await fetcher(
+    `${config.serverBaseUrl.replace(/\/+$/u, "")}/api/v1/links/${encodeURIComponent(identity.link_id)}/notification-events`,
+    {
+      method: "POST",
+      headers: {
+        accept: "application/json",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify({
+        ...payload,
+        public_key_pem: identity.public_key_pem,
+        signature
+      })
+    }
+  );
+  if (!response.ok) {
+    const body = await response.json().catch(() => null);
+    const message = readErrorMessage(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    throw new LinkHttpError(response.status, "server_request_failed", message);
+  }
+}
+function addOptional(payload, key, value, maxLength) {
+  const normalized = value?.trim();
+  if (normalized) {
+    payload[key] = normalized.slice(0, maxLength);
+  }
+}
+function normalizeIso(value) {
+  const normalized = value?.trim();
+  if (!normalized) {
+    return null;
+  }
+  const date = new Date(normalized);
+  return Number.isNaN(date.getTime()) ? null : date.toISOString();
+}
+function canonicalJson(value) {
+  return JSON.stringify(sortJsonValue(value));
+}
+function sortJsonValue(value) {
+  if (Array.isArray(value)) {
+    return value.map(sortJsonValue);
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const sorted = {};
+    for (const key of Object.keys(record).sort()) {
+      sorted[key] = sortJsonValue(record[key]);
+    }
+    return sorted;
+  }
+  return value;
+}
+function readErrorMessage(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return null;
+  }
+  const error = payload.error;
+  if (typeof error !== "object" || error === null) {
+    return null;
+  }
+  const message = error.message;
+  return typeof message === "string" ? message : null;
+}
+
+// src/hermes/gateway.ts
+import { execFile as execFile2, spawn } from "child_process";
+import { constants as fsConstants } from "fs";
+import { access, readFile as readFile5, realpath, stat as stat4 } from "fs/promises";
+import path7 from "path";
+import { setTimeout as delay2 } from "timers/promises";
+import { promisify as promisify2 } from "util";
+
 // src/runtime/logger.ts
+import { appendFile, mkdir as mkdir5, open as open2, readFile as readFile4, rename as rename2, rm as rm2, stat as stat3, truncate } from "fs/promises";
+import os3 from "os";
+import path6 from "path";
 var DEFAULT_LOG_FILE = "hermeslink.log";
 var DEFAULT_MAX_FILE_BYTES = 1024 * 1024;
 var DEFAULT_MAX_FILES = 5;
@@ -5572,7 +5887,7 @@ var FileLogger = class {
     return this.queue;
   }
   async appendEntry(entry) {
-    await mkdir4(this.paths.logsDir, { recursive: true, mode: 448 });
+    await mkdir5(this.paths.logsDir, { recursive: true, mode: 448 });
     const line = `${JSON.stringify(entry)}
 `;
     await this.rotateIfNeeded(Buffer.byteLength(line, "utf8"));
@@ -5608,7 +5923,7 @@ function createRotatingTextLogWriter(options) {
         return queue;
       }
       const next = queue.then(async () => {
-        await mkdir4(paths.logsDir, { recursive: true, mode: 448 });
+        await mkdir5(paths.logsDir, { recursive: true, mode: 448 });
         await rotateLogFileIfNeeded(filePath, buffer.length, maxFileBytes, maxFiles);
         await appendFile(filePath, buffer, { mode: 384 });
       }).catch(() => void 0);
@@ -7546,8 +7861,8 @@ function firstRecord(...values) {
 }
 
 // src/conversations/blob-store.ts
-import { randomUUID as randomUUID3 } from "crypto";
-import { mkdir as mkdir5, readFile as readFile6, readdir as readdir4, rm as rm3, stat as stat5, writeFile } from "fs/promises";
+import { randomUUID as randomUUID4 } from "crypto";
+import { mkdir as mkdir6, readFile as readFile6, readdir as readdir4, rm as rm3, stat as stat5, writeFile } from "fs/promises";
 import path9 from "path";
 
 // src/conversations/media.ts
@@ -8000,9 +8315,9 @@ async function writeConversationBlob(paths, conversationId, input, options) {
   if (input.bytes.byteLength > options.maxBytes) {
     throw new LinkHttpError(413, "blob_too_large", "Blob is too large");
   }
-  const id = `blob_${randomUUID3().replaceAll("-", "")}`;
+  const id = `blob_${randomUUID4().replaceAll("-", "")}`;
   const filePath = blobPath(paths, id);
-  await mkdir5(path9.dirname(filePath), { recursive: true, mode: 448 });
+  await mkdir6(path9.dirname(filePath), { recursive: true, mode: 448 });
   await writeFile(filePath, input.bytes, { mode: 384 });
   const blob = {
     id,
@@ -8082,7 +8397,7 @@ async function materializeConversationBlob(paths, conversationId, blobId, manife
     targetDir,
     materializedAttachmentFilename(blobId, manifest.filename ?? blobId)
   );
-  await mkdir5(targetDir, { recursive: true, mode: 448 });
+  await mkdir6(targetDir, { recursive: true, mode: 448 });
   await writeFile(targetPath, await readFile6(blobPath(paths, blobId)), {
     mode: 384
   });
@@ -8112,7 +8427,7 @@ async function pruneConversationBlobReference(paths, conversationId, blobId) {
 }
 async function listConversationBlobIds(paths, conversationId) {
   assertValidConversationId(conversationId);
-  await mkdir5(paths.blobsDir, { recursive: true, mode: 448 });
+  await mkdir6(paths.blobsDir, { recursive: true, mode: 448 });
   const entries = await readdir4(paths.blobsDir, {
     withFileTypes: true
   }).catch((error) => {
@@ -8340,6 +8655,9 @@ function hasRunningRuns(snapshot) {
 function hasQueuedRuns(snapshot) {
   return snapshot.runs.some((run) => run.status === "queued");
 }
+function queuedRunCount(snapshot) {
+  return snapshot.runs.filter((run) => run.status === "queued").length;
+}
 function buildConversationEventStreamState(snapshot) {
   const pendingApprovalRunIds = /* @__PURE__ */ new Set();
   let hasPendingApproval = false;
@@ -8437,7 +8755,7 @@ function isRealtimeRunStatus(status) {
 }
 
 // src/conversations/slash-commands.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 var MODEL_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/@+-]{0,127}$/u;
 function isValidModelId(value) {
   return MODEL_ID_PATTERN.test(value);
@@ -8534,7 +8852,7 @@ function parseSlashCommandInput(content) {
 }
 function createSlashCommandUserMessage(input) {
   return {
-    id: `msg_${randomUUID4().replaceAll("-", "")}`,
+    id: `msg_${randomUUID5().replaceAll("-", "")}`,
     schema_version: 1,
     conversation_id: input.conversationId,
     role: "user",
@@ -8568,7 +8886,7 @@ function slashHelpMessage() {
   ].join("\n");
 }
 function freshHermesSessionId(conversationId) {
-  return `hp_${conversationId}_${randomUUID4().replaceAll("-", "").slice(0, 12)}`;
+  return `hp_${conversationId}_${randomUUID5().replaceAll("-", "").slice(0, 12)}`;
 }
 function nextVerboseMode(current) {
   const modes = [
@@ -8909,11 +9227,11 @@ function formatContextUsageLines(runtime) {
 }
 
 // src/conversations/delivery-staging.ts
-import { mkdir as mkdir6, rm as rm4 } from "fs/promises";
+import { mkdir as mkdir7, rm as rm4 } from "fs/promises";
 import path10 from "path";
 async function prepareDeliveryStagingRunDir(paths, conversationId, runId) {
   const directory = deliveryStagingRunDir(paths, conversationId, runId);
-  await mkdir6(directory, { recursive: true, mode: 448 });
+  await mkdir7(directory, { recursive: true, mode: 448 });
   return directory;
 }
 async function removeConversationDeliveryStaging(paths, conversationId) {
@@ -8938,8 +9256,8 @@ function safePathSegment(value, fallback) {
 }
 
 // src/conversations/conversation-archive-plans.ts
-import { randomUUID as randomUUID5 } from "crypto";
-import { mkdir as mkdir7 } from "fs/promises";
+import { randomUUID as randomUUID6 } from "crypto";
+import { mkdir as mkdir8 } from "fs/promises";
 import path11 from "path";
 var PLAN_ID_PATTERN = /^archive_[a-f0-9]{32}$/u;
 var ConversationArchivePlanStore = class {
@@ -8950,7 +9268,7 @@ var ConversationArchivePlanStore = class {
   async create(conversationIds) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const plan = {
-      id: `archive_${randomUUID5().replaceAll("-", "")}`,
+      id: `archive_${randomUUID6().replaceAll("-", "")}`,
       status: "prepared",
       created_at: now,
       updated_at: now,
@@ -8979,7 +9297,7 @@ var ConversationArchivePlanStore = class {
   }
   async write(plan) {
     const normalizedPlanId = normalizePlanId(plan.id);
-    await mkdir7(this.plansDir(), { recursive: true, mode: 448 });
+    await mkdir8(this.plansDir(), { recursive: true, mode: 448 });
     await writeJsonFile(this.planPath(normalizedPlanId), plan);
   }
   plansDir() {
@@ -9002,8 +9320,8 @@ function normalizePlanId(planId) {
 }
 
 // src/conversations/conversation-clear-plans.ts
-import { randomUUID as randomUUID6 } from "crypto";
-import { mkdir as mkdir8 } from "fs/promises";
+import { randomUUID as randomUUID7 } from "crypto";
+import { mkdir as mkdir9 } from "fs/promises";
 import path12 from "path";
 var PLAN_ID_PATTERN2 = /^clear_[a-f0-9]{32}$/u;
 var ConversationClearPlanStore = class {
@@ -9014,7 +9332,7 @@ var ConversationClearPlanStore = class {
   async create(conversationIds, targetStatus = "active") {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const plan = {
-      id: `clear_${randomUUID6().replaceAll("-", "")}`,
+      id: `clear_${randomUUID7().replaceAll("-", "")}`,
       status: "prepared",
       target_status: targetStatus,
       created_at: now,
@@ -9044,7 +9362,7 @@ var ConversationClearPlanStore = class {
   }
   async write(plan) {
     const normalizedPlanId = normalizePlanId2(plan.id);
-    await mkdir8(this.plansDir(), { recursive: true, mode: 448 });
+    await mkdir9(this.plansDir(), { recursive: true, mode: 448 });
     await writeJsonFile(this.planPath(normalizedPlanId), plan);
   }
   plansDir() {
@@ -9123,6 +9441,7 @@ var ConversationMaintenanceCoordinator = class {
   clearPlans;
   archivePlans;
   async prepareClearAllConversationPlan(targetStatus = "active") {
+    assertArchivedClearPlanTarget(targetStatus);
     const targets = [];
     for (const conversationId of await this.deps.store.listConversationIds()) {
       const manifest = await this.deps.store.readManifest(conversationId).catch(() => null);
@@ -9145,6 +9464,7 @@ var ConversationMaintenanceCoordinator = class {
   }
   async executeClearAllConversationPlan(planId) {
     let plan = await this.clearPlans.read(planId);
+    assertArchivedClearPlanTarget(plan.target_status ?? "active");
     if (plan.status === "completed") {
       return plan;
     }
@@ -9207,6 +9527,7 @@ var ConversationMaintenanceCoordinator = class {
   }
   async startClearAllConversationPlan(planId) {
     const plan = await this.clearPlans.read(planId);
+    assertArchivedClearPlanTarget(plan.target_status ?? "active");
     if (plan.status === "completed" || plan.status === "executing") {
       return plan;
     }
@@ -9688,6 +10009,16 @@ var ConversationMaintenanceCoordinator = class {
     return plan;
   }
 };
+function assertArchivedClearPlanTarget(targetStatus) {
+  if (targetStatus === "archived") {
+    return;
+  }
+  throw new LinkHttpError(
+    409,
+    "active_conversation_clear_plan_disabled",
+    "Bulk deletion of active conversations is disabled. Archive active conversations first, or delete explicitly selected conversations."
+  );
+}
 function isVoiceAttachmentInput(attachment) {
   return attachment.kind === "voice" || attachment.type === "voice" || attachment.is_voice_note === true || attachment.isVoiceNote === true;
 }
@@ -9705,86 +10036,6 @@ function readAttachmentWaveform(attachment) {
   ).filter((item) => item !== void 0).slice(0, 96);
 }
 
-// src/config/config.ts
-var defaultLinkConfig = {
-  port: LINK_DEFAULT_PORT,
-  lanHost: null,
-  serverBaseUrl: "https://hermes-server.clawpilot.me",
-  relayBaseUrl: "https://hermes-relay.clawpilot.me",
-  appConnectTokenIssuer: "https://hermes-server.clawpilot.me",
-  appConnectTokenAudience: "hermes-link",
-  language: "auto",
-  logLevel: "warn"
-};
-async function loadConfig(paths = resolveRuntimePaths()) {
-  const existing = await readJsonFile(paths.configFile);
-  const language = normalizeConfiguredLanguage(existing?.language);
-  const lanHost = normalizeLanHost(existing?.lanHost);
-  const logLevel = normalizeLogLevel(
-    existing?.logLevel ?? process.env.HERMESLINK_LOG_LEVEL
-  );
-  return {
-    ...defaultLinkConfig,
-    ...existing ?? {},
-    language,
-    lanHost,
-    logLevel
-  };
-}
-async function saveConfig(patch, paths = resolveRuntimePaths()) {
-  const current = await loadConfig(paths);
-  const next = {
-    ...current,
-    ...patch,
-    logLevel: patch.logLevel === void 0 ? current.logLevel : normalizeLogLevel(patch.logLevel)
-  };
-  await writeJsonFile(paths.configFile, next);
-  return next;
-}
-function normalizeConfiguredLanguage(language) {
-  if (language === "zh-CN" || language === "en" || language === "auto") {
-    return language;
-  }
-  return defaultLinkConfig.language;
-}
-function normalizeLogLevel(level) {
-  if (level === "debug" || level === "info" || level === "warn" || level === "error") {
-    return level;
-  }
-  return defaultLinkConfig.logLevel;
-}
-function parseLogLevel(value) {
-  if (value === "debug" || value === "info" || value === "warn" || value === "error") {
-    return value;
-  }
-  return null;
-}
-function normalizeLanHost(value) {
-  if (value === null || value === void 0) {
-    return null;
-  }
-  if (typeof value !== "string") {
-    return null;
-  }
-  const host = value.trim().replace(/^\[/u, "").replace(/\]$/u, "");
-  if (!host) {
-    return null;
-  }
-  if (!isUsableLanIpv4(host)) {
-    return null;
-  }
-  return host;
-}
-function isUsableLanIpv4(value) {
-  const parts = value.split(".").map((part) => Number.parseInt(part, 10));
-  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
-    return false;
-  }
-  const [first, second, , fourth] = parts;
-  const privateRange = first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168;
-  return privateRange && fourth !== 0 && fourth !== 255;
-}
-
 // src/hermes/session-title.ts
 import { stat as stat7 } from "fs/promises";
 import path13 from "path";
@@ -10247,7 +10498,7 @@ function stripCompressionTitleSuffix(value) {
 }
 
 // src/conversations/conversation-turns.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 var MESSAGE_ORDER_STEP_MS = 10;
 var ASSISTANT_ORDER_OFFSET_MS = 1;
 function createAgentTurnDraft(input) {
@@ -10262,6 +10513,7 @@ function createAgentTurnDraft(input) {
     conversation_id: input.manifest.id,
     role: "user",
     status: shouldQueue ? "queued" : "completed",
+    run_id: runId,
     client_message_id: input.idempotencyKey,
     created_at: userCreatedAt,
     updated_at: now,
@@ -10305,6 +10557,8 @@ function createAgentTurnDraft(input) {
     profile_uid: input.runtime.profileUid,
     profile_name_snapshot: input.runtime.profileName,
     profile: input.runtime.profileName,
+    owner_account_id: input.accountId,
+    owner_app_instance_id: input.appInstanceId,
     model: input.runtime.model,
     provider: input.runtime.provider,
     context_window: input.runtime.contextWindow
@@ -10481,10 +10735,10 @@ function createAssistantMessage(input) {
   };
 }
 function createMessageId() {
-  return `msg_${randomUUID7().replaceAll("-", "")}`;
+  return `msg_${randomUUID8().replaceAll("-", "")}`;
 }
 function createRunId() {
-  return `run_${randomUUID7().replaceAll("-", "")}`;
+  return `run_${randomUUID8().replaceAll("-", "")}`;
 }
 function hasActiveOrQueuedRuns(snapshot) {
   return snapshot.runs.some(
@@ -10496,6 +10750,9 @@ function validTimestampOrNow(value) {
   return Number.isFinite(timestamp) ? timestamp : Date.now();
 }
 
+// src/conversations/queue-policy.ts
+var MAX_CONVERSATION_QUEUED_RUNS = 10;
+
 // src/conversations/conversation-orchestration.ts
 var ConversationOrchestrationCoordinator = class {
   constructor(deps) {
@@ -10526,6 +10783,47 @@ var ConversationOrchestrationCoordinator = class {
   async appendCommandResult(input) {
     return this.appendCommandResultLocked(input);
   }
+  async guideQueuedRun(conversationId, runId) {
+    const result = await this.deps.withConversationLock(
+      conversationId,
+      () => this.guideQueuedRunLocked(conversationId, runId)
+    );
+    if (result.runningRunId) {
+      void this.deps.runLifecycle.cancelRun(conversationId, result.runningRunId, {
+        abortUpstream: true,
+        reason: "interrupted by guided queued message"
+      }).then((cancelResult) => {
+        if (cancelResult.run.status === "cancelled") {
+          return this.startNextQueuedRun(conversationId);
+        }
+      }).catch((error) => {
+        void this.deps.logger.warn("conversation_guided_interrupt_failed", {
+          conversation_id: conversationId,
+          queued_run_id: runId,
+          running_run_id: result.runningRunId,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      });
+    } else {
+      void this.startNextQueuedRun(conversationId).catch((error) => {
+        void this.deps.logger.warn("conversation_queue_drain_failed", {
+          conversation_id: conversationId,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      });
+    }
+    return {
+      conversation_id: result.conversation_id,
+      queued_run: result.queued_run,
+      last_event_seq: result.last_event_seq
+    };
+  }
+  async cancelQueuedRun(conversationId, runId) {
+    return this.deps.withConversationLock(
+      conversationId,
+      () => this.cancelQueuedRunLocked(conversationId, runId)
+    );
+  }
   startRunWorkerAndDrain(conversationId, runId, input) {
     void this.deps.runLifecycle.startRunWorker(conversationId, runId, input).catch(async (error) => {
       if (isConversationNotFoundError(error)) {
@@ -10695,6 +10993,13 @@ var ConversationOrchestrationCoordinator = class {
       }
     }
     const runtime = await readCurrentConversationRuntime(this.deps.paths, manifest);
+    if ((hasRunningRuns(snapshot) || queuedRunCount(snapshot) > 0) && queuedRunCount(snapshot) >= MAX_CONVERSATION_QUEUED_RUNS) {
+      throw new LinkHttpError(
+        409,
+        "conversation_queue_limit_reached",
+        `conversation queue can contain at most ${MAX_CONVERSATION_QUEUED_RUNS} messages`
+      );
+    }
     const { userMessage, assistantMessage, run, shouldQueue } = createAgentTurnDraft({
       manifest,
       snapshot,
@@ -10702,14 +11007,27 @@ var ConversationOrchestrationCoordinator = class {
       content,
       attachments: userAttachmentParts,
       rawAttachments: input.attachments ?? [],
-      idempotencyKey
+      idempotencyKey,
+      accountId: input.accountId,
+      appInstanceId: input.appInstanceId
     });
+    if (input.accountId) {
+      manifest = {
+        ...manifest,
+        owner_account_id: input.accountId,
+        owner_app_instance_id: input.appInstanceId,
+        updated_at: (/* @__PURE__ */ new Date()).toISOString()
+      };
+    }
     const assistantMessageId = run.assistant_message_id;
     snapshot.messages.push(
       ...assistantMessage ? [userMessage, assistantMessage] : [userMessage]
     );
     snapshot.runs.push(run);
     await this.deps.store.writeSnapshot(manifest.id, snapshot);
+    if (input.accountId) {
+      await this.deps.store.writeManifest(manifest);
+    }
     manifest = await this.deps.metadata.applyTemporaryTitleFromFirstMessage(
       manifest,
       snapshot,
@@ -10847,6 +11165,137 @@ var ConversationOrchestrationCoordinator = class {
         return this.deps.commandHandlers.restartGatewayFromCommand(input);
     }
   }
+  async guideQueuedRunLocked(conversationId, runId) {
+    const manifest = await this.deps.store.readRunnableManifest(conversationId);
+    const snapshot = await this.deps.store.readSnapshot(conversationId);
+    const run = snapshot.runs.find((item) => item.id === runId);
+    if (!run) {
+      throw new LinkHttpError(404, "run_not_found", "Run was not found");
+    }
+    if (run.status === "running") {
+      throw new LinkHttpError(
+        409,
+        "queued_run_already_started",
+        "Queued run has already started"
+      );
+    }
+    if (run.status !== "queued") {
+      throw new LinkHttpError(
+        409,
+        "queued_run_not_active",
+        "Queued run is no longer active"
+      );
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const runningRun = snapshot.runs.find((item) => item.status === "running");
+    run.queue_mode = "guided_interrupt";
+    run.queue_promoted_at = now;
+    if (runningRun) {
+      run.guided_after_run_id = runningRun.id;
+    }
+    const user = snapshot.messages.find(
+      (message) => message.id === run.trigger_message_id
+    );
+    if (user) {
+      user.updated_at = now;
+      user.hermes = {
+        ...user.hermes ?? {},
+        queue_mode: "guided_interrupt",
+        queue_promoted_at: now,
+        ...runningRun ? { guided_after_run_id: runningRun.id } : {}
+      };
+    }
+    const currentIndex = snapshot.runs.findIndex((item) => item.id === run.id);
+    if (currentIndex >= 0) {
+      snapshot.runs.splice(currentIndex, 1);
+      const firstQueuedIndex = snapshot.runs.findIndex(
+        (item) => item.status === "queued"
+      );
+      snapshot.runs.splice(
+        firstQueuedIndex === -1 ? snapshot.runs.length : firstQueuedIndex,
+        0,
+        run
+      );
+    }
+    await this.deps.store.writeSnapshot(conversationId, snapshot);
+    const event = await this.deps.appendEvent(conversationId, {
+      type: "run.queue_promoted",
+      message_id: user?.id,
+      run_id: run.id,
+      payload: {
+        run,
+        queued_run: run,
+        mode: "guided_interrupt",
+        guided_after_run_id: runningRun?.id
+      }
+    });
+    await this.deps.metadata.persistConversationStats(conversationId, snapshot);
+    return {
+      conversation_id: manifest.id,
+      queued_run: { id: run.id, status: run.status },
+      last_event_seq: event.seq,
+      ...runningRun ? { runningRunId: runningRun.id } : {}
+    };
+  }
+  async cancelQueuedRunLocked(conversationId, runId) {
+    const manifest = await this.deps.store.readRunnableManifest(conversationId);
+    const snapshot = await this.deps.store.readSnapshot(conversationId);
+    const run = snapshot.runs.find((item) => item.id === runId);
+    if (!run) {
+      throw new LinkHttpError(404, "run_not_found", "Run was not found");
+    }
+    if (run.status === "running") {
+      throw new LinkHttpError(
+        409,
+        "queued_run_already_started",
+        "Queued run has already started"
+      );
+    }
+    if (run.status !== "queued") {
+      return {
+        conversation_id: manifest.id,
+        queued_run: { id: run.id, status: run.status },
+        last_event_seq: manifest.last_event_seq
+      };
+    }
+    const cancelledAt = (/* @__PURE__ */ new Date()).toISOString();
+    run.status = "cancelled";
+    run.completed_at = cancelledAt;
+    run.error_message = "cancelled while queued";
+    const user = snapshot.messages.find(
+      (message) => message.id === run.trigger_message_id
+    );
+    if (user) {
+      user.status = "cancelled";
+      user.updated_at = cancelledAt;
+      user.hermes = {
+        ...user.hermes ?? {},
+        queue_cancelled_at: cancelledAt
+      };
+    }
+    await this.deps.store.writeSnapshot(conversationId, snapshot);
+    let eventSeq = manifest.last_event_seq;
+    if (user) {
+      const userEvent = await this.deps.appendEvent(conversationId, {
+        type: "message.completed",
+        message_id: user.id,
+        run_id: run.id,
+        payload: { message: user, cancelled: true }
+      });
+      eventSeq = userEvent.seq;
+    }
+    const runEvent = await this.deps.appendEvent(conversationId, {
+      type: "run.cancelled",
+      run_id: run.id,
+      payload: { run, reason: "cancelled while queued" }
+    });
+    await this.deps.metadata.persistConversationStats(conversationId, snapshot);
+    return {
+      conversation_id: manifest.id,
+      queued_run: { id: run.id, status: run.status },
+      last_event_seq: Math.max(eventSeq, runEvent.seq)
+    };
+  }
   async resetConversationContextLocked(input) {
     if (hasRunningRuns(input.snapshot)) {
       return this.appendCommandResultLocked({
@@ -11133,7 +11582,7 @@ function projectAgentEvent(input) {
     summary,
     args
   });
-  const detail = status === "failed" ? readErrorMessage(input.payload) ?? actionSummary ?? void 0 : actionSummary ?? void 0;
+  const detail = status === "failed" ? readErrorMessage2(input.payload) ?? actionSummary ?? void 0 : actionSummary ?? void 0;
   const subtitle = actionSummary ?? (status === "running" ? `\u6B63\u5728\u8C03\u7528 ${name}` : status === "completed" ? `${name} \u5DF2\u5B8C\u6210` : `${name} \u6267\u884C\u5931\u8D25`);
   return {
     id,
@@ -11430,7 +11879,7 @@ function stableStringify(value) {
 function hashAgentEventKey(value) {
   return createHash3("sha256").update(value).digest("hex").slice(0, 16);
 }
-function readErrorMessage(payload) {
+function readErrorMessage2(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
@@ -11785,7 +12234,7 @@ function hydrateAgentEventBlocks(blocks, agentEvents) {
 // src/conversations/conversation-store.ts
 import {
   appendFile as appendFile2,
-  mkdir as mkdir9,
+  mkdir as mkdir10,
   readdir as readdir5,
   readFile as readFile7,
   rm as rm5,
@@ -11798,7 +12247,7 @@ var ConversationStore = class {
   }
   paths;
   async ensureConversationsDir() {
-    await mkdir9(this.paths.conversationsDir, { recursive: true, mode: 448 });
+    await mkdir10(this.paths.conversationsDir, { recursive: true, mode: 448 });
   }
   async listConversationIds() {
     await this.ensureConversationsDir();
@@ -11813,7 +12262,7 @@ var ConversationStore = class {
     return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
   }
   async createConversation(manifest, snapshot = createEmptySnapshot2()) {
-    await mkdir9(this.conversationDir(manifest.id), {
+    await mkdir10(this.conversationDir(manifest.id), {
       recursive: true,
       mode: 448
     });
@@ -11853,7 +12302,7 @@ var ConversationStore = class {
       conversation_id: conversationId,
       created_at: now
     };
-    await mkdir9(this.conversationDir(conversationId), {
+    await mkdir10(this.conversationDir(conversationId), {
       recursive: true,
       mode: 448
     });
@@ -11949,7 +12398,7 @@ function isNodeError9(error, code) {
 }
 
 // src/conversations/hermes-session-sync.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 import { readdir as readdir7, readFile as readFile9, stat as stat9 } from "fs/promises";
 import path16 from "path";
 
@@ -12391,7 +12840,7 @@ async function syncHermesSessionsIntoConversations(paths, logger, options = {})
       result.skipped_existing += 1;
       continue;
     }
-    const imported = await importHermesSession({
+    const importedConversationId = await importHermesSession({
       paths,
       store,
       logger,
@@ -12401,9 +12850,9 @@ async function syncHermesSessionsIntoConversations(paths, logger, options = {})
         profile: candidate.profileName,
         message: error instanceof Error ? error.message : String(error)
       });
-      return false;
+      return null;
     });
-    if (imported) {
+    if (importedConversationId) {
       result.imported_count += 1;
       for (const sessionId of candidateSessionIds) {
         knownHermesSessions.sessionIds.add(sessionId);
@@ -12417,6 +12866,80 @@ async function syncHermesSessionsIntoConversations(paths, logger, options = {})
   }
   return result;
 }
+async function syncHermesCronSessionIntoConversations(paths, logger, input) {
+  const jobId = input.jobId.trim();
+  if (!jobId) {
+    return { conversation_id: null, imported: false, reprojected: false };
+  }
+  const store = new ConversationStore(paths);
+  const knownHermesSessions = await readKnownHermesSessions(store);
+  const profileName = input.profileName.trim() || DEFAULT_PROFILE_NAME;
+  const profileDir = resolveHermesProfileDir(profileName);
+  const dbPath = path16.join(profileDir, "state.db");
+  const sessions = await listProfileSessionsByIdPrefix(
+    dbPath,
+    `cron_${jobId}_`
+  ).catch((error) => {
+    void logger.warn("hermes_cron_session_query_failed", {
+      profile: profileName,
+      job_id: jobId,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return [];
+  });
+  const candidate = selectCronSessionCandidate(
+    sessions.filter((session) => !isDeletedSession(session) && !isHiddenSession(session)).map((session) => ({ profileName, profileDir, dbPath, session })),
+    input.runAt
+  );
+  if (!candidate) {
+    return { conversation_id: null, imported: false, reprojected: false };
+  }
+  const knownConversationIds = findKnownConversationIdsForCandidate(
+    knownHermesSessions,
+    candidate
+  );
+  if (knownConversationIds.length > 0) {
+    const reprojected = await mergeExistingHermesConversation({
+      paths,
+      store,
+      logger,
+      candidate,
+      conversationIds: knownConversationIds
+    });
+    const canonical = await findCanonicalConversationForCandidate(
+      store,
+      knownConversationIds
+    );
+    return {
+      conversation_id: canonical?.conversationId ?? knownConversationIds[0] ?? null,
+      hermes_session_id: candidate.session.id,
+      imported: false,
+      reprojected
+    };
+  }
+  if (lineageSessionIds(candidate).some(
+    (sessionId) => knownHermesSessions.sessionIds.has(sessionId)
+  )) {
+    return {
+      conversation_id: null,
+      hermes_session_id: candidate.session.id,
+      imported: false,
+      reprojected: false
+    };
+  }
+  const conversationId = await importHermesSession({
+    paths,
+    store,
+    logger,
+    candidate
+  });
+  return {
+    conversation_id: conversationId,
+    hermes_session_id: candidate.session.id,
+    imported: conversationId != null,
+    reprojected: false
+  };
+}
 async function importHermesSession(input) {
   const { paths, store, logger, candidate } = input;
   const profile = await resolveConversationProfileTarget(
@@ -12442,7 +12965,7 @@ async function importHermesSession(input) {
     }),
     runs: []
   };
-  const title = lineageTitle(candidate) ?? readString9(candidate.session, "title") ?? firstUserText(snapshot);
+  const title = deriveHermesConversationTitle(candidate, snapshot);
   const importedStats = buildImportedHermesStats({
     candidate,
     snapshot,
@@ -12509,7 +13032,7 @@ async function importHermesSession(input) {
     paths,
     toStatsIndexRecord(await store.readManifest(conversationId), stats)
   );
-  return true;
+  return conversationId;
 }
 async function mergeExistingHermesConversation(input) {
   const conversations = await readExistingHermesConversations(
@@ -12618,7 +13141,17 @@ function lineageSessionIds(candidate) {
   ]);
 }
 function lineageTitle(candidate) {
-  return candidate.session._lineage_title ?? stripCompressionTitleSuffix2(readString9(candidate.session, "title") ?? "");
+  const explicitLineageTitle = normalizeOptionalTitle(
+    candidate.session._lineage_title
+  );
+  if (explicitLineageTitle) {
+    return explicitLineageTitle;
+  }
+  const sessionTitle = readString9(candidate.session, "title") ?? "";
+  return isDefaultConversationTitle(sessionTitle) ? void 0 : stripCompressionTitleSuffix2(sessionTitle);
+}
+function deriveHermesConversationTitle(candidate, snapshot) {
+  return lineageTitle(candidate) ?? normalizeHermesSourceTitle(readString9(candidate.session, "title")) ?? firstUserText(snapshot);
 }
 function lineageManifestPatch(candidate) {
   const sessionIds = lineageSessionIds(candidate);
@@ -12771,7 +13304,7 @@ function mergeHermesLineageIntoManifest(input) {
     profile: input.manifest.profile ?? input.manifest.profile_name_snapshot ?? input.profileName,
     updated_at: latestTimestamp(input.manifest.updated_at, input.updatedAt)
   };
-  const title = lineageTitle(input.candidate);
+  const title = deriveHermesConversationTitle(input.candidate, input.snapshot);
   if (title && canSyncHermesTitle(input.manifest)) {
     nextBase.title = normalizeTitle(title);
     nextBase.title_source = "hermes";
@@ -13338,6 +13871,15 @@ async function discoverHermesProfileNames() {
   });
 }
 async function listProfileSessions(dbPath) {
+  return listProfileSessionsWhere(dbPath);
+}
+async function listProfileSessionsByIdPrefix(dbPath, sessionIdPrefix) {
+  return listProfileSessionsWhere(dbPath, {
+    whereSql: "WHERE s.id LIKE ?",
+    params: [`${sessionIdPrefix}%`]
+  });
+}
+async function listProfileSessionsWhere(dbPath, filter = null) {
   if (!await isFile(dbPath)) {
     return [];
   }
@@ -13362,14 +13904,54 @@ async function listProfileSessions(dbPath) {
       `
         SELECT ${selectColumns}, ${lastActiveSql}
         FROM sessions s
+        ${filter?.whereSql ?? ""}
         ORDER BY last_active DESC
       `
-    ).all();
+    ).all(...filter?.params ?? []);
     return projectCompressionTips(rows);
   } finally {
     db?.close();
   }
 }
+function selectCronSessionCandidate(candidates, runAt) {
+  if (candidates.length === 0) {
+    return null;
+  }
+  const targetTime = Date.parse(runAt ?? "");
+  return [...candidates].sort((left, right) => {
+    const leftTime = cronCandidateTime(left);
+    const rightTime = cronCandidateTime(right);
+    if (!Number.isNaN(targetTime)) {
+      const leftFuture = leftTime > targetTime + 6e4 ? 1 : 0;
+      const rightFuture = rightTime > targetTime + 6e4 ? 1 : 0;
+      if (leftFuture !== rightFuture) {
+        return leftFuture - rightFuture;
+      }
+      const leftDistance = Number.isNaN(leftTime) ? Number.POSITIVE_INFINITY : Math.abs(leftTime - targetTime);
+      const rightDistance = Number.isNaN(rightTime) ? Number.POSITIVE_INFINITY : Math.abs(rightTime - targetTime);
+      if (leftDistance !== rightDistance) {
+        return leftDistance - rightDistance;
+      }
+    }
+    return rightTime - leftTime;
+  })[0] ?? null;
+}
+function cronCandidateTime(candidate) {
+  return hermesTimestampMs(candidate.session.last_active) ?? hermesTimestampMs(candidate.session.ended_at) ?? hermesTimestampMs(candidate.session.started_at) ?? Number.NaN;
+}
+function hermesTimestampMs(value) {
+  const seconds = readNumber2(value);
+  return seconds == null ? null : seconds * 1e3;
+}
+async function findCanonicalConversationForCandidate(store, conversationIds) {
+  const conversations = await readExistingHermesConversations(
+    store,
+    conversationIds
+  );
+  return selectCanonicalHermesConversation(
+    conversations.filter((item) => item.manifest.status === "active")
+  );
+}
 function appendHermesRawMessage(message, row) {
   const rows = readHermesRawMessageRows(message.raw);
   message.raw = rows.length === 0 ? {
@@ -13719,7 +14301,7 @@ function toLinkMessage(input) {
   const sessionId = readString9(input.message, "session_id") ?? input.sessionId;
   const createdAt = isoFromHermesTime(input.message.timestamp) ?? new Date(Date.now() + input.index).toISOString();
   return {
-    id: `msg_${randomUUID8().replaceAll("-", "")}`,
+    id: `msg_${randomUUID9().replaceAll("-", "")}`,
     schema_version: 1,
     conversation_id: input.conversationId,
     role,
@@ -13771,6 +14353,17 @@ function normalizeTitle(value) {
   const normalized = value?.replace(/\s+/gu, " ").trim();
   return normalized || DEFAULT_CONVERSATION_TITLE;
 }
+function normalizeOptionalTitle(value) {
+  const normalized = value?.replace(/\s+/gu, " ").trim();
+  return normalized ? normalized : void 0;
+}
+function normalizeHermesSourceTitle(value) {
+  const normalized = normalizeOptionalTitle(value);
+  if (!normalized || isDefaultConversationTitle(normalized)) {
+    return void 0;
+  }
+  return normalized;
+}
 function canSyncHermesTitle(manifest) {
   return manifest.title_source !== "manual" && manifest.title_source !== "generated" && manifest.title_source !== "temporary_user_message" && manifest.title_source !== "temporary_fallback";
 }
@@ -13891,7 +14484,7 @@ async function isFile(filePath) {
   });
 }
 function createConversationId() {
-  return `conv_${randomUUID8().replaceAll("-", "")}`;
+  return `conv_${randomUUID9().replaceAll("-", "")}`;
 }
 function isoFromHermesTime(value) {
   const numeric = readNumber2(value);
@@ -15290,71 +15883,6 @@ function compactProcessOutput(value) {
   return compact || null;
 }
 
-// src/identity/identity.ts
-import { generateKeyPairSync, randomUUID as randomUUID9, sign } from "crypto";
-import { mkdir as mkdir10, chmod as chmod2 } from "fs/promises";
-import { z } from "zod";
-var linkIdentitySchema = z.object({
-  install_id: z.string().min(1),
-  link_id: z.string().min(1).nullable().optional(),
-  public_key_pem: z.string().min(1),
-  private_key_pem: z.string().min(1),
-  created_at: z.string().min(1),
-  updated_at: z.string().min(1)
-});
-async function loadIdentity(paths = resolveRuntimePaths()) {
-  const value = await readJsonFile(paths.identityFile);
-  if (value === null) {
-    return null;
-  }
-  return linkIdentitySchema.parse(value);
-}
-async function ensureIdentity(paths = resolveRuntimePaths()) {
-  const existing = await loadIdentity(paths);
-  if (existing) {
-    return existing;
-  }
-  await mkdir10(paths.homeDir, { recursive: true, mode: 448 });
-  await chmod2(paths.homeDir, 448).catch(() => void 0);
-  const { publicKey, privateKey } = generateKeyPairSync("ed25519");
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const identity = {
-    install_id: `install_${randomUUID9().replaceAll("-", "")}`,
-    link_id: null,
-    public_key_pem: publicKey.export({ type: "spki", format: "pem" }).toString(),
-    private_key_pem: privateKey.export({ type: "pkcs8", format: "pem" }).toString(),
-    created_at: now,
-    updated_at: now
-  };
-  await writeJsonFile(paths.identityFile, identity);
-  return identity;
-}
-async function saveAssignedLinkId(linkId, paths = resolveRuntimePaths()) {
-  const identity = await ensureIdentity(paths);
-  const next = {
-    ...identity,
-    link_id: linkId,
-    updated_at: (/* @__PURE__ */ new Date()).toISOString()
-  };
-  await writeJsonFile(paths.identityFile, next);
-  return next;
-}
-function signRelayNonce(identity, nonce) {
-  return signIdentityPayload(identity, nonce);
-}
-function signIdentityPayload(identity, payload) {
-  const signature = sign(null, Buffer.from(payload, "utf8"), identity.private_key_pem);
-  return signature.toString("base64url");
-}
-function getIdentityStatus(identity) {
-  return {
-    installId: identity.install_id,
-    linkId: identity.link_id ?? null,
-    hasPrivateKey: identity.private_key_pem.trim().length > 0,
-    publicKeyPem: identity.public_key_pem
-  };
-}
-
 // src/conversations/hermes-sse.ts
 async function* parseSseResponse(response) {
   if (!response.body) {
@@ -16036,7 +16564,7 @@ function normalizeHermesStreamEvent(event) {
         ...event.payload,
         type: "run.failed",
         error: {
-          message: readErrorMessage2(event.payload) ?? readDelta(event.payload) ?? "Hermes run failed"
+          message: readErrorMessage3(event.payload) ?? readDelta(event.payload) ?? "Hermes run failed"
         }
       }
     };
@@ -16112,11 +16640,24 @@ function normalizeHermesResponseEvent(event) {
       } : null;
     }
     case "response.created":
-      return null;
+      return normalizeResponseCreated(event);
     default:
       return null;
   }
 }
+function normalizeResponseCreated(event) {
+  const response = toRecord12(event.payload.response ?? event.payload);
+  const responseId = readString14(response, "id") ?? readString14(event.payload, "id");
+  return responseId ? {
+    ...event,
+    payloadType: "response.created",
+    payload: {
+      type: "response.created",
+      response_id: responseId,
+      response
+    }
+  } : null;
+}
 function normalizeResponseOutputItemAdded(event) {
   const item = toRecord12(event.payload.item);
   if (readString14(item, "type") !== "function_call") {
@@ -16213,7 +16754,7 @@ function normalizeStreamingTextDelta(currentText, nextChunk) {
   }
   return nextChunk;
 }
-function readErrorMessage2(payload) {
+function readErrorMessage3(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
@@ -16277,7 +16818,7 @@ function isTopLevelErrorEvent(event) {
   if (type.startsWith("tool.")) {
     return false;
   }
-  return type === "error" || type === "run.error" || event.eventName === "error" || Boolean(readErrorMessage2(event.payload));
+  return type === "error" || type === "run.error" || event.eventName === "error" || Boolean(readErrorMessage3(event.payload));
 }
 function readChatCompletionDelta(payload) {
   const choice = readFirstChoice(payload);
@@ -16863,12 +17404,27 @@ var ConversationRunLifecycle = class {
     this.deps.scheduleTitleRefresh(input.conversationId);
   }
   async handleNormalizedHermesEvent(input) {
+    if (input.event.payloadType === "response.created") {
+      const responseId = readResponseId(input.event.payload);
+      if (responseId) {
+        await this.updateRun(input.conversationId, input.runId, {
+          hermes_response_id: responseId
+        });
+      }
+      await this.persistHermesEvent(input.conversationId, input.runId, input.event);
+      return false;
+    }
     if (input.event.payloadType === "run.completed") {
       if (input.cronJobIdsBeforeRun) {
+        const snapshot = await this.deps.readSnapshot(input.conversationId).catch(() => null);
+        const run = snapshot?.runs.find((item) => item.id === input.runId) ?? null;
+        const manifest = await this.deps.readActiveManifest(input.conversationId).catch(() => null);
         await this.bindNewCronJobsCreatedByRun({
           profileName: input.profileName,
           conversationId: input.conversationId,
-          beforeJobIds: input.cronJobIdsBeforeRun
+          beforeJobIds: input.cronJobIdsBeforeRun,
+          ownerAccountId: run?.owner_account_id ?? manifest?.owner_account_id,
+          ownerAppInstanceId: run?.owner_app_instance_id ?? manifest?.owner_app_instance_id
         });
       }
       await this.deps.syncCronDeliveries().catch((error) => {
@@ -16926,7 +17482,7 @@ var ConversationRunLifecycle = class {
       await this.failRun(
         input.conversationId,
         input.runId,
-        readErrorMessage2(input.event.payload) ?? "Hermes run failed",
+        readErrorMessage3(input.event.payload) ?? "Hermes run failed",
         input.event
       );
       return true;
@@ -17176,8 +17732,11 @@ var ConversationRunLifecycle = class {
     const userMessage = input.snapshot.messages.find(
       (message) => message.id === input.run.trigger_message_id
     );
+    const prefix = guidedInterruptInputPrefix(input.run);
     if (!userMessage || !userMessage.parts.some(isVoicePart)) {
-      return input.fallbackInput;
+      return prefix ? `${prefix}
+
+${input.fallbackInput}` : input.fallbackInput;
     }
     const content = messageText(userMessage);
     const voiceLines = [];
@@ -17209,11 +17768,16 @@ ${attachmentLines.join("\n")}`
       );
     }
     if (sections.length === 0) {
-      return content;
+      return prefix ? `${prefix}
+
+${content}` : content;
     }
-    return `${content ? `${content}
+    const resolved = `${content ? `${content}
 
 ` : ""}${sections.join("\n\n")}`;
+    return prefix ? `${prefix}
+
+${resolved}` : resolved;
   }
   async updateRun(conversationId, runId, patch) {
     return this.deps.withConversationLock(
@@ -17634,6 +18198,13 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
       ...source ? { raw: { format: "hermes-run-event", payload: source.rawPayload } } : {}
     });
     await this.deps.persistConversationStats(conversationId, snapshot);
+    void this.reportRunNotification({
+      conversationId,
+      run,
+      assistant,
+      eventKind: "run_completed",
+      occurredAt: completedAt
+    });
   }
   async failRunLocked(conversationId, runId, message, source) {
     const snapshot = await this.deps.readSnapshot(conversationId).catch(() => null);
@@ -17647,7 +18218,7 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
     run.status = "failed";
     run.completed_at = (/* @__PURE__ */ new Date()).toISOString();
     run.error_message = message;
-    run.error_detail = source ? readErrorMessage2(source.payload) ?? void 0 : void 0;
+    run.error_detail = source ? readErrorMessage3(source.payload) ?? void 0 : void 0;
     const visibleMessage = formatFailureMessage(message, run.error_detail);
     const usage = readUsage(source?.payload);
     if (usage) {
@@ -17685,12 +18256,56 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
       ...source ? { raw: { format: "hermes-run-event", payload: source.rawPayload } } : {}
     });
     await this.deps.persistConversationStats(conversationId, snapshot);
+    void this.reportRunNotification({
+      conversationId,
+      run,
+      assistant,
+      eventKind: "run_failed",
+      occurredAt: run.completed_at,
+      fallbackPreview: visibleMessage
+    });
     void this.deps.logger.warn("conversation_run_failed", {
       conversation_id: conversationId,
       run_id: runId,
       error: message
     });
   }
+  async reportRunNotification(input) {
+    const manifest = await this.deps.readActiveManifest(input.conversationId).catch(() => null);
+    if (!manifest) {
+      return;
+    }
+    const accountId = input.run.owner_account_id ?? manifest.owner_account_id;
+    if (!accountId) {
+      return;
+    }
+    await reportNotificationEventToServer({
+      paths: this.deps.paths,
+      logger: this.deps.logger,
+      event: {
+        sourceEventId: runNotificationSourceEventId(
+          input.conversationId,
+          input.run.id,
+          input.eventKind
+        ),
+        eventKind: input.eventKind,
+        conversationId: input.conversationId,
+        conversationTitle: manifest.title,
+        accountId,
+        messageId: input.assistant?.id ?? input.run.assistant_message_id,
+        runId: input.run.id,
+        bodyPreview: previewText2(input.assistant) ?? input.fallbackPreview,
+        occurredAt: input.occurredAt
+      }
+    }).catch((error) => {
+      void this.deps.logger.warn("notification_event_report_failed", {
+        conversation_id: input.conversationId,
+        run_id: input.run.id,
+        event_kind: input.eventKind,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    });
+  }
   async cancelRunLocked(conversationId, runId, options) {
     const manifest = await this.deps.readRunnableManifest(conversationId);
     const snapshot = await this.deps.readSnapshot(conversationId);
@@ -17721,6 +18336,13 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
         });
       }
     }
+    if (!run.hermes_response_id) {
+      void this.deps.logger.warn("interrupted_response_id_missing", {
+        conversation_id: conversationId,
+        run_id: runId,
+        reason: options.reason
+      });
+    }
     const cancelledAt = (/* @__PURE__ */ new Date()).toISOString();
     run.status = "cancelled";
     run.completed_at = cancelledAt;
@@ -17806,7 +18428,9 @@ ${details.join("\n")}` : emptyHermesResponseMessage();
       profileName,
       conversationId: input.conversationId,
       beforeJobIds: input.beforeJobIds,
-      jobs
+      jobs,
+      ownerAccountId: input.ownerAccountId,
+      ownerAppInstanceId: input.ownerAppInstanceId
     });
   }
 };
@@ -17824,7 +18448,19 @@ function buildRunInstructions(run, deliveryStagingDir) {
     "Current runtime selected by Hermes Link:",
     `- Model: ${run.model ?? "hermes-agent"}`,
     `- Provider: ${run.provider ?? "unknown"}`,
-    "If the user asks what model or provider you are currently using, answer from this runtime selection instead of inferring from earlier conversation history."
+    "If the user asks what model or provider you are currently using, answer from this runtime selection instead of inferring from earlier conversation history.",
+    ...run.queue_mode === "guided_interrupt" ? ["", "Guided interrupt handling:", guidedInterruptNote()] : []
+  ].join("\n");
+}
+function guidedInterruptInputPrefix(run) {
+  return run.queue_mode === "guided_interrupt" ? guidedInterruptNote() : "";
+}
+function guidedInterruptNote() {
+  return [
+    "System note from Hermes Link: The previous assistant turn was interrupted by the user.",
+    "Treat the following user message as the controlling instruction for this turn.",
+    "Do not continue, retry, or complete the interrupted task or its tool calls unless the following user message explicitly asks you to do so.",
+    "Any partial tool results from the interrupted turn are context only, not an instruction to keep working on that task."
   ].join("\n");
 }
 function appendMediaImportFailureNotice(message) {
@@ -18088,7 +18724,9 @@ function findPreviousHermesResponseId(snapshot, run) {
   if (!currentProfile) {
     return void 0;
   }
-  const candidates = snapshot.runs.filter((item) => item.id !== run.id).filter((item) => item.kind !== "command").filter((item) => item.status === "completed").filter((item) => item.hermes_response_id).filter((item) => item.hermes_session_id === run.hermes_session_id).filter(
+  const candidates = snapshot.runs.filter((item) => item.id !== run.id).filter((item) => item.kind !== "command").filter(
+    (item) => item.status === "completed" || item.status === "cancelled"
+  ).filter((item) => item.hermes_response_id).filter((item) => item.hermes_session_id === run.hermes_session_id).filter(
     (item) => normalizeRunProfileForCompare(
       item.profile_name_snapshot ?? item.profile
     ) === currentProfile
@@ -18171,6 +18809,17 @@ function readStatusErrorMessage(value) {
 function formatUnknownErrorMessage(error) {
   return error instanceof Error ? error.message : String(error);
 }
+function previewText2(message) {
+  if (!message) {
+    return null;
+  }
+  const text = messageText(message).replace(/<[^>]+>/gu, " ").replace(/\s+/gu, " ").trim();
+  return text ? text.slice(0, 512) : null;
+}
+function runNotificationSourceEventId(conversationId, runId, eventKind) {
+  const digest = createHash5("sha256").update(`${conversationId}:${runId}:${eventKind}`).digest("hex").slice(0, 24);
+  return `${conversationId}:${eventKind}:${digest}`;
+}
 async function closeSseIterator(iterator) {
   if (!iterator.return) {
     return;
@@ -18303,6 +18952,7 @@ var ConversationService = class {
   queries;
   runLifecycle;
   hermesSessionSyncPromise = null;
+  cronDeliverySyncPromise = null;
   async withConversationLock(conversationId, task) {
     const previous = this.conversationLocks.get(conversationId) ?? Promise.resolve();
     let release;
@@ -18413,6 +19063,8 @@ var ConversationService = class {
       profile_uid: profile.profileUid,
       profile_name_snapshot: profile.profileName,
       profile: profile.profileName,
+      owner_account_id: input.accountId,
+      owner_app_instance_id: input.appInstanceId,
       created_at: now,
       updated_at: now,
       last_event_seq: 0
@@ -18466,19 +19118,115 @@ var ConversationService = class {
     return created.id;
   }
   async appendCronDelivery(input) {
-    await this.withConversationLock(input.conversationId, async () => {
-      const manifest = await this.store.readActiveManifest(input.conversationId);
-      const snapshot = await this.store.readSnapshot(input.conversationId);
-      if (snapshot.messages.some(
+    if (input.source === "natural_language" && input.conversationId) {
+      return this.appendCronDeliveryToBoundConversation(input);
+    }
+    await syncHermesCronSessionIntoConversations(
+      this.paths,
+      this.logger,
+      {
+        profileName: input.profileName,
+        jobId: input.jobId,
+        runAt: input.runAt
+      }
+    ).catch((error) => {
+      void this.logger.warn("cron_notification_session_sync_failed", {
+        job_id: input.jobId,
+        output_path: input.outputPath,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return null;
+    });
+    const target = await this.findImportedCronConversation({
+      profileName: input.profileName,
+      jobId: input.jobId,
+      runAt: input.runAt
+    });
+    if (!target) {
+      void this.logger.info("cron_notification_skipped_no_conversation", {
+        profile: input.profileName,
+        job_id: input.jobId,
+        output_path: input.outputPath
+      });
+      return false;
+    }
+    return this.withConversationLock(target.manifest.id, async () => {
+      const manifest = await this.store.readActiveManifest(target.manifest.id);
+      const snapshot = await this.store.readSnapshot(target.manifest.id);
+      const now = (/* @__PURE__ */ new Date()).toISOString();
+      const ownerAccountId = input.accountId ?? manifest.owner_account_id;
+      const ownerAppInstanceId = input.appInstanceId ?? manifest.owner_app_instance_id;
+      const nextManifest = ownerAccountId && ownerAccountId !== manifest.owner_account_id ? {
+        ...manifest,
+        owner_account_id: ownerAccountId,
+        owner_app_instance_id: ownerAppInstanceId,
+        updated_at: now
+      } : manifest;
+      if (nextManifest !== manifest) {
+        await this.store.writeManifest(nextManifest);
+      }
+      const message = selectCronNotificationMessage(snapshot, input.runAt);
+      return this.reportCronNotification({
+        manifest: nextManifest,
+        message,
+        jobId: input.jobId,
+        outputPath: input.outputPath,
+        failed: input.failed === true,
+        occurredAt: input.runAt ?? now,
+        accountId: ownerAccountId,
+        appInstanceId: ownerAppInstanceId,
+        bodyPreview: message != null ? notificationPreviewText(message) : input.content
+      });
+    });
+  }
+  async appendCronDeliveryToBoundConversation(input) {
+    const conversationId = input.conversationId?.trim();
+    if (!conversationId) {
+      return true;
+    }
+    return this.withConversationLock(conversationId, async () => {
+      const manifest = await this.store.readActiveManifest(conversationId);
+      const snapshot = await this.store.readSnapshot(conversationId);
+      const existingMessage = snapshot.messages.find(
         (message2) => message2.hermes?.cron_output_path === input.outputPath
-      )) {
-        return;
+      );
+      if (existingMessage) {
+        const now2 = (/* @__PURE__ */ new Date()).toISOString();
+        const ownerAccountId2 = input.accountId ?? manifest.owner_account_id;
+        const ownerAppInstanceId2 = input.appInstanceId ?? manifest.owner_app_instance_id;
+        const nextManifest2 = ownerAccountId2 && ownerAccountId2 !== manifest.owner_account_id ? {
+          ...manifest,
+          owner_account_id: ownerAccountId2,
+          owner_app_instance_id: ownerAppInstanceId2,
+          updated_at: now2
+        } : manifest;
+        if (nextManifest2 !== manifest) {
+          await this.store.writeManifest(nextManifest2);
+        }
+        return this.reportCronNotification({
+          manifest: nextManifest2,
+          message: existingMessage,
+          jobId: input.jobId,
+          outputPath: input.outputPath,
+          failed: input.failed === true,
+          occurredAt: input.runAt ?? existingMessage.created_at,
+          accountId: ownerAccountId2,
+          appInstanceId: ownerAppInstanceId2
+        });
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const createdAt = input.runAt ?? now;
       const profileName = normalizeProfileName2(
         manifest.profile_name_snapshot ?? manifest.profile ?? input.profileName
       );
+      const ownerAccountId = input.accountId ?? manifest.owner_account_id;
+      const ownerAppInstanceId = input.appInstanceId ?? manifest.owner_app_instance_id;
+      const nextManifest = ownerAccountId && ownerAccountId !== manifest.owner_account_id ? {
+        ...manifest,
+        owner_account_id: ownerAccountId,
+        owner_app_instance_id: ownerAppInstanceId,
+        updated_at: now
+      } : manifest;
       const message = {
         id: `msg_${randomUUID10().replaceAll("-", "")}`,
         schema_version: 1,
@@ -18510,19 +19258,154 @@ var ConversationService = class {
             output_path: input.outputPath
           }
         }
-      };
-      snapshot.messages.push(message);
-      await this.store.writeSnapshot(manifest.id, snapshot);
-      await this.appendEvent(manifest.id, {
-        type: "message.created",
-        message_id: message.id,
-        payload: { message }
+      };
+      snapshot.messages.push(message);
+      await this.store.writeSnapshot(nextManifest.id, snapshot);
+      if (nextManifest !== manifest) {
+        await this.store.writeManifest(nextManifest);
+      }
+      await this.appendEvent(nextManifest.id, {
+        type: "message.created",
+        message_id: message.id,
+        payload: { message }
+      });
+      await this.persistConversationStats(nextManifest.id, snapshot);
+      return this.reportCronNotification({
+        manifest: nextManifest,
+        message,
+        jobId: input.jobId,
+        outputPath: input.outputPath,
+        failed: input.failed === true,
+        occurredAt: createdAt,
+        accountId: ownerAccountId,
+        appInstanceId: ownerAppInstanceId
+      });
+    });
+  }
+  async findImportedCronConversation(input) {
+    const profileName = normalizeProfileName2(input.profileName);
+    const outputAt = Date.parse(input.runAt ?? "");
+    const candidates = [];
+    for (const conversationId of await this.store.listConversationIds()) {
+      const manifest = await this.store.readManifest(conversationId).catch(() => null);
+      if (!manifest || manifest.status !== "active") {
+        continue;
+      }
+      if (normalizeProfileName2(manifest.profile_name_snapshot ?? manifest.profile) !== profileName) {
+        continue;
+      }
+      const sessionIds = conversationHermesSessionIds(manifest);
+      const cronSessionId = sessionIds.find(
+        (sessionId) => isCronSessionIdForJob(sessionId, input.jobId)
+      );
+      if (!cronSessionId) {
+        continue;
+      }
+      candidates.push({
+        manifest,
+        sessionStartedAt: cronSessionStartedAt(cronSessionId, input.jobId),
+        updatedAt: Date.parse(manifest.updated_at)
+      });
+    }
+    if (candidates.length === 0) {
+      return null;
+    }
+    candidates.sort((left, right) => {
+      const leftTime = Number.isNaN(left.sessionStartedAt) ? left.updatedAt : left.sessionStartedAt;
+      const rightTime = Number.isNaN(right.sessionStartedAt) ? right.updatedAt : right.sessionStartedAt;
+      if (!Number.isNaN(outputAt)) {
+        const leftFuture = leftTime > outputAt + 1e4 ? 1 : 0;
+        const rightFuture = rightTime > outputAt + 1e4 ? 1 : 0;
+        if (leftFuture !== rightFuture) {
+          return leftFuture - rightFuture;
+        }
+      }
+      return rightTime - leftTime;
+    });
+    return { manifest: candidates[0].manifest };
+  }
+  async reportCronNotification(input) {
+    const accountId = input.accountId ?? input.manifest.owner_account_id;
+    if (!accountId) {
+      return false;
+    }
+    try {
+      await reportNotificationEventToServer({
+        paths: this.paths,
+        logger: this.logger,
+        event: {
+          sourceEventId: cronNotificationSourceEventId(
+            input.manifest.id,
+            input.jobId,
+            input.outputPath,
+            input.failed ? "cron_failed" : "cron_completed"
+          ),
+          eventKind: input.failed ? "cron_failed" : "cron_completed",
+          conversationId: input.manifest.id,
+          conversationTitle: input.manifest.title,
+          accountId,
+          messageId: input.message?.id,
+          bodyPreview: input.bodyPreview ?? (input.message ? notificationPreviewText(input.message) : null),
+          occurredAt: input.occurredAt
+        }
       });
-      await this.persistConversationStats(manifest.id, snapshot);
-    });
+      return true;
+    } catch (error) {
+      void this.logger.warn("notification_event_report_failed", {
+        conversation_id: input.manifest.id,
+        job_id: input.jobId,
+        event_kind: input.failed ? "cron_failed" : "cron_completed",
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return false;
+    }
   }
   async syncCronDeliveries() {
-    await syncHermesLinkCronDeliveries(this.paths, this, this.logger);
+    if (this.cronDeliverySyncPromise) {
+      return this.cronDeliverySyncPromise;
+    }
+    const task = syncHermesLinkCronDeliveries(this.paths, this, this.logger);
+    this.cronDeliverySyncPromise = task;
+    try {
+      await task;
+    } finally {
+      if (this.cronDeliverySyncPromise === task) {
+        this.cronDeliverySyncPromise = null;
+      }
+    }
+  }
+  async backfillCronOwnership(input) {
+    const accountId = input.accountId?.trim();
+    if (!accountId) {
+      return;
+    }
+    const bindingCount = await backfillHermesLinkCronDeliveryOwner(this.paths, {
+      accountId,
+      appInstanceId: input.appInstanceId
+    });
+    let conversationCount = 0;
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    for (const conversationId of await this.store.listConversationIds()) {
+      const manifest = await this.store.readManifest(conversationId).catch(() => null);
+      if (!manifest || manifest.status === "deleted_soft" || manifest.owner_account_id || !manifestHasCronSession(manifest)) {
+        continue;
+      }
+      await this.store.writeManifest({
+        ...manifest,
+        owner_account_id: accountId,
+        owner_app_instance_id: input.appInstanceId,
+        updated_at: now
+      });
+      conversationCount += 1;
+    }
+    if (bindingCount > 0 || conversationCount > 0) {
+      void this.logger.info("cron_owner_backfilled", {
+        account_id: accountId,
+        app_instance_id: input.appInstanceId ?? null,
+        bindings: bindingCount,
+        conversations: conversationCount
+      });
+    }
   }
   async syncHermesSessions() {
     if (this.hermesSessionSyncPromise) {
@@ -18819,6 +19702,12 @@ var ConversationService = class {
     }
     return this.cancelRun(conversationId, runId);
   }
+  async guideQueuedRun(conversationId, runId) {
+    return this.orchestration.guideQueuedRun(conversationId, runId);
+  }
+  async cancelQueuedRun(conversationId, runId) {
+    return this.orchestration.cancelQueuedRun(conversationId, runId);
+  }
   async resolveApproval(input) {
     const decision = input.decision;
     if (decision === "once" || decision === "session") {
@@ -19130,9 +20019,76 @@ function findApproval(snapshot, approvalId) {
   }
   return null;
 }
+function cronNotificationSourceEventId(conversationId, jobId, outputPath, eventKind) {
+  const digest = createHash6("sha256").update(`${conversationId}:${jobId}:${outputPath}:${eventKind}`).digest("hex").slice(0, 24);
+  return `${conversationId}:${eventKind}:${digest}`;
+}
+function conversationHermesSessionIds(manifest) {
+  const ids = [
+    manifest.hermes_session_id,
+    ...manifest.hermes_session_ids ?? [],
+    manifest.hermes_lineage?.root_session_id,
+    manifest.hermes_lineage?.current_session_id,
+    ...manifest.hermes_lineage?.session_ids ?? []
+  ].map((id) => id?.trim()).filter((id) => Boolean(id));
+  return [...new Set(ids)];
+}
+function manifestHasCronSession(manifest) {
+  return conversationHermesSessionIds(manifest).some(
+    (sessionId) => sessionId.startsWith("cron_")
+  );
+}
+function isCronSessionIdForJob(sessionId, jobId) {
+  const normalizedJobId = jobId.trim();
+  return normalizedJobId.length > 0 && sessionId.startsWith(`cron_${normalizedJobId}_`);
+}
+function cronSessionStartedAt(sessionId, jobId) {
+  const normalizedJobId = jobId.trim();
+  const prefix = `cron_${normalizedJobId}_`;
+  if (!sessionId.startsWith(prefix)) {
+    return Number.NaN;
+  }
+  const stamp = sessionId.slice(prefix.length);
+  const match = /^(\d{4})(\d{2})(\d{2})_(\d{2})(\d{2})(\d{2})$/u.exec(stamp);
+  if (!match) {
+    return Number.NaN;
+  }
+  const [, year, month, day, hour, minute, second] = match;
+  return new Date(
+    Number(year),
+    Number(month) - 1,
+    Number(day),
+    Number(hour),
+    Number(minute),
+    Number(second)
+  ).getTime();
+}
+function selectCronNotificationMessage(snapshot, runAt) {
+  const messages2 = snapshot.messages.filter(
+    (message) => message.role === "assistant"
+  );
+  if (messages2.length === 0) {
+    return null;
+  }
+  const targetTime = Date.parse(runAt ?? "");
+  if (Number.isNaN(targetTime)) {
+    return messages2.at(-1) ?? null;
+  }
+  return [...messages2].sort((left, right) => {
+    const leftTime = Date.parse(left.created_at);
+    const rightTime = Date.parse(right.created_at);
+    const leftDistance = Number.isNaN(leftTime) ? Number.POSITIVE_INFINITY : Math.abs(leftTime - targetTime);
+    const rightDistance = Number.isNaN(rightTime) ? Number.POSITIVE_INFINITY : Math.abs(rightTime - targetTime);
+    return leftDistance - rightDistance;
+  })[0] ?? null;
+}
+function notificationPreviewText(message) {
+  const text = messageText(message).replace(/<[^>]+>/gu, " ").replace(/\s+/gu, " ").trim();
+  return text ? text.slice(0, 512) : null;
+}
 
 // src/security/devices.ts
-import { randomBytes as randomBytes2, randomUUID as randomUUID11, timingSafeEqual, createHash as createHash6 } from "crypto";
+import { randomBytes as randomBytes2, randomUUID as randomUUID11, timingSafeEqual, createHash as createHash7 } from "crypto";
 var ACCESS_TOKEN_TTL_MS = 15 * 60 * 1e3;
 var REFRESH_TOKEN_TTL_MS = 90 * 24 * 60 * 60 * 1e3;
 var DEVICE_SEEN_WRITE_INTERVAL_MS = 60 * 60 * 1e3;
@@ -19428,7 +20384,7 @@ function randomToken(prefix) {
   return `${prefix}${randomBytes2(24).toString("base64url")}`;
 }
 function sha256(value) {
-  return createHash6("sha256").update(value).digest("hex");
+  return createHash7("sha256").update(value).digest("hex");
 }
 function safeEqual(left, right) {
   const leftBytes = Buffer.from(left);
@@ -19508,7 +20464,8 @@ async function authenticateRequest(ctx, paths) {
   }
   const device = await authenticateDeviceAccessToken(token, paths);
   if (device) {
-    return { kind: "device", device };
+    const owner = await readOptionalAppConnectOwner(ctx, paths);
+    return { kind: "device", device, ...owner };
   }
   if (token.startsWith("hpat_")) {
     throw new LinkHttpError(
@@ -19532,6 +20489,31 @@ async function authenticateRequest(ctx, paths) {
     appInstanceId: normalizeAppInstanceId2(claims.app_instance_id)
   };
 }
+async function readOptionalAppConnectOwner(ctx, paths) {
+  const token = readOptionalHeaderToken(
+    ctx.get("x-hermespilot-app-connect-token")
+  );
+  if (!token) {
+    return {};
+  }
+  try {
+    const [identity, config] = await Promise.all([
+      loadRequiredIdentity(paths),
+      loadConfig(paths)
+    ]);
+    const claims = await verifyAppConnectToken(token, {
+      config,
+      linkId: identity.link_id
+    });
+    return {
+      accountId: claims.sub,
+      scopes: normalizeScopes(claims.scope),
+      appInstanceId: normalizeAppInstanceId2(claims.app_instance_id)
+    };
+  } catch {
+    return {};
+  }
+}
 async function loadRequiredIdentity(paths) {
   const identity = await loadIdentity(paths);
   if (!identity?.link_id) {
@@ -19547,6 +20529,16 @@ function readBearerToken(value) {
   const token = trimmed.slice(7).trim();
   return token || null;
 }
+function readOptionalHeaderToken(value) {
+  const trimmed = value.trim();
+  if (!trimmed) {
+    return null;
+  }
+  if (trimmed.toLowerCase().startsWith("bearer ")) {
+    return readBearerToken(trimmed);
+  }
+  return trimmed;
+}
 function normalizeScopes(value) {
   if (Array.isArray(value)) {
     return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
@@ -19979,9 +20971,10 @@ function isExpectedClientDisconnectError(error) {
 
 // src/http/routes/conversations.ts
 function registerConversationRoutes(router, options) {
-  const { paths, conversations } = options;
+  const { paths, logger, conversations } = options;
   router.get("/api/v1/conversations", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
+    await prepareConversationListRead(conversations, logger, auth);
     ctx.set("cache-control", "no-store");
     const result = await conversations.listConversationPage({
       limit: readLimit(ctx.query.limit),
@@ -20008,7 +21001,8 @@ function registerConversationRoutes(router, options) {
     };
   });
   router.get("/api/v1/conversations/archived", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
+    await prepareConversationListRead(conversations, logger, auth);
     ctx.set("cache-control", "no-store");
     const result = await conversations.listArchivedConversationPage({
       limit: readLimit(ctx.query.limit),
@@ -20035,14 +21029,16 @@ function registerConversationRoutes(router, options) {
     };
   });
   router.post("/api/v1/conversations", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
     ctx.status = 201;
     ctx.body = {
       ok: true,
       conversation: await conversations.createConversation({
         title: readString16(body, "title") ?? void 0,
-        profileName: readOptionalProfileName(body)
+        profileName: readOptionalProfileName(body),
+        accountId: auth.accountId,
+        appInstanceId: auth.appInstanceId
       })
     };
   });
@@ -20111,7 +21107,7 @@ function registerConversationRoutes(router, options) {
     );
   });
   router.post("/api/v1/conversations/:conversationId/messages", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
     const content = readString16(body, "content") ?? readString16(body, "text") ?? readString16(body, "input") ?? "";
     const attachments = readMessageAttachments(body.attachments ?? body.blobs);
@@ -20131,7 +21127,9 @@ function registerConversationRoutes(router, options) {
         attachments,
         clientMessageId: readString16(body, "client_message_id") ?? readString16(body, "clientMessageId") ?? void 0,
         idempotencyKey: readHeader(ctx, "idempotency-key") ?? void 0,
-        profileName: readOptionalProfileName(body)
+        profileName: readOptionalProfileName(body),
+        accountId: auth.accountId,
+        appInstanceId: auth.appInstanceId
       })
     };
   });
@@ -20185,12 +21183,20 @@ function registerConversationRoutes(router, options) {
     ctx.body = { ok: true };
   });
   router.post("/api/v1/conversations/clear-plans", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
     const targetStatus = readConversationClearPlanTargetStatus(body);
     const plan = await conversations.prepareClearAllConversationPlan(
       targetStatus
     );
+    void logger.warn(
+      "conversation_clear_plan_prepared",
+      conversationMutationAuditFields(ctx, auth, {
+        plan_id: plan.id,
+        target_status: plan.target_status,
+        total_count: plan.total_count
+      })
+    );
     ctx.status = 201;
     ctx.body = {
       ok: true,
@@ -20208,10 +21214,19 @@ function registerConversationRoutes(router, options) {
   router.post(
     "/api/v1/conversations/clear-plans/:planId/execute",
     async (ctx) => {
-      await authenticateRequest(ctx, paths);
+      const auth = await authenticateRequest(ctx, paths);
       const plan = await conversations.startClearAllConversationPlan(
         ctx.params.planId
       );
+      void logger.warn(
+        "conversation_clear_plan_execute_requested",
+        conversationMutationAuditFields(ctx, auth, {
+          plan_id: plan.id,
+          target_status: plan.target_status,
+          total_count: plan.total_count,
+          status: plan.status
+        })
+      );
       ctx.status = plan.status === "completed" ? 200 : 202;
       ctx.body = {
         ok: true,
@@ -20260,7 +21275,7 @@ function registerConversationRoutes(router, options) {
     }
   );
   router.delete("/api/v1/conversations", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
     const conversationIds = readStringArray(
       body,
@@ -20275,6 +21290,14 @@ function registerConversationRoutes(router, options) {
       );
     }
     const deleted = await conversations.deleteConversations(conversationIds);
+    void logger.warn(
+      "conversation_bulk_delete_requested",
+      conversationMutationAuditFields(ctx, auth, {
+        requested_count: conversationIds.length,
+        deleted_count: deleted.deleted_count,
+        failed_count: deleted.failed_count
+      })
+    );
     const ok = deleted.failed_count === 0;
     ctx.status = ok ? 200 : 409;
     ctx.body = {
@@ -20302,6 +21325,33 @@ function registerConversationRoutes(router, options) {
       };
     }
   );
+  router.post(
+    "/api/v1/conversations/:conversationId/queued-runs/:runId/guide",
+    async (ctx) => {
+      await authenticateRequest(ctx, paths);
+      ctx.status = 202;
+      ctx.body = {
+        ok: true,
+        ...await conversations.guideQueuedRun(
+          ctx.params.conversationId,
+          ctx.params.runId
+        )
+      };
+    }
+  );
+  router.post(
+    "/api/v1/conversations/:conversationId/queued-runs/:runId/cancel",
+    async (ctx) => {
+      await authenticateRequest(ctx, paths);
+      ctx.body = {
+        ok: true,
+        ...await conversations.cancelQueuedRun(
+          ctx.params.conversationId,
+          ctx.params.runId
+        )
+      };
+    }
+  );
   router.post(
     "/api/v1/conversations/:conversationId/approvals/:approvalId/approve",
     async (ctx) => {
@@ -20354,10 +21404,21 @@ function registerConversationRoutes(router, options) {
     }
   );
   router.delete("/api/v1/conversations/:conversationId", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
+    const result = await conversations.deleteConversation(
+      ctx.params.conversationId
+    );
+    void logger.warn(
+      "conversation_delete_requested",
+      conversationMutationAuditFields(ctx, auth, {
+        conversation_id: result.conversation_id,
+        hermes_deleted: result.hermes_deleted,
+        hermes_session_count: result.hermes_session_ids?.length ?? 0
+      })
+    );
     ctx.body = {
       ok: true,
-      ...await conversations.deleteConversation(ctx.params.conversationId),
+      ...result,
       blob_gc_completed: true
     };
   });
@@ -20404,6 +21465,22 @@ function registerConversationRoutes(router, options) {
     }
   );
 }
+async function prepareConversationListRead(conversations, logger, auth) {
+  await conversations.backfillCronOwnership({
+    accountId: auth.accountId,
+    appInstanceId: auth.appInstanceId
+  }).catch((error) => {
+    void logger.warn("cron_owner_backfill_failed", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+  await conversations.syncCronDeliveries().catch((error) => {
+    void logger.warn("cron_link_delivery_sync_failed", {
+      source: "conversation_list_read",
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+}
 function resolveConversationEventCursor(input) {
   const queryAfter = readInteger3(input.queryAfter) ?? 0;
   const headerAfter = readNonNegativeIntegerHeader(input.lastEventIdHeader) ?? 0;
@@ -20420,6 +21497,21 @@ function readConversationClearPlanTargetStatus(body) {
     "Conversation clear plan target status is invalid"
   );
 }
+function conversationMutationAuditFields(ctx, auth, fields) {
+  return {
+    method: ctx.method,
+    path: ctx.path,
+    auth_kind: auth.kind,
+    device_id: auth.device?.id ?? null,
+    device_label: auth.device?.label ?? null,
+    device_platform: auth.device?.platform ?? null,
+    device_model: auth.device?.model ?? null,
+    account_id: auth.accountId ?? null,
+    app_instance_id: auth.appInstanceId ?? null,
+    user_agent: ctx.get("user-agent") || null,
+    ...fields
+  };
+}
 function readNonNegativeIntegerHeader(value) {
   const raw = Array.isArray(value) ? value[0] : value;
   if (!raw) {
@@ -20971,8 +22063,8 @@ function toRecord14(value) {
 function registerCronJobRoutes(router, options) {
   const { paths, logger, conversations, syncCronDeliveries } = options;
   router.get("/api/v1/cron-jobs", async (ctx) => {
-    await authenticateRequest(ctx, paths);
-    await syncCronDeliveries();
+    const auth = await authenticateRequest(ctx, paths);
+    await prepareCronJobRead(conversations, logger, auth, syncCronDeliveries);
     ctx.set("cache-control", "no-store");
     const includeDisabled = readQueryString(ctx.query.include_disabled)?.toLowerCase() === "true" || readQueryString(ctx.query.includeDisabled)?.toLowerCase() === "true";
     const profiles = await listHermesProfiles(paths);
@@ -21011,8 +22103,8 @@ function registerCronJobRoutes(router, options) {
     ctx.body = { ok: failures.length === 0, jobs, failures };
   });
   router.get("/api/v1/profiles/:name/cron-jobs", async (ctx) => {
-    await authenticateRequest(ctx, paths);
-    await syncCronDeliveries();
+    const auth = await authenticateRequest(ctx, paths);
+    await prepareCronJobRead(conversations, logger, auth, syncCronDeliveries);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
     ctx.set("cache-control", "no-store");
     const includeDisabled = readQueryString(ctx.query.include_disabled)?.toLowerCase() === "true" || readQueryString(ctx.query.includeDisabled)?.toLowerCase() === "true";
@@ -21031,7 +22123,7 @@ function registerCronJobRoutes(router, options) {
     };
   });
   router.post("/api/v1/profiles/:name/cron-jobs", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
     const body = await readJsonBody(ctx.req);
     const input = readCronJobCreateInput(body);
@@ -21045,7 +22137,9 @@ function registerCronJobRoutes(router, options) {
       conversations,
       profileName: profile.name,
       job,
-      source: "app"
+      source: "app",
+      accountId: auth.accountId,
+      appInstanceId: auth.appInstanceId
     }) : job;
     ctx.status = 201;
     ctx.body = { ok: true, job: attachCronJobProfile(decoratedJob, profile) };
@@ -21067,7 +22161,7 @@ function registerCronJobRoutes(router, options) {
     };
   });
   router.patch("/api/v1/profiles/:name/cron-jobs/:jobId", async (ctx) => {
-    await authenticateRequest(ctx, paths);
+    const auth = await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
     const body = await readJsonBody(ctx.req);
     const input = readCronJobUpdateInput(body);
@@ -21088,7 +22182,9 @@ function registerCronJobRoutes(router, options) {
         conversations,
         profileName: profile.name,
         job,
-        source: "app"
+        source: "app",
+        accountId: auth.accountId,
+        appInstanceId: auth.appInstanceId
       });
     } else if (deliverTouched) {
       await unbindCronJobFromHermesLink(paths, profile.name, ctx.params.jobId);
@@ -21153,6 +22249,18 @@ function registerCronJobRoutes(router, options) {
     };
   });
 }
+async function prepareCronJobRead(conversations, logger, auth, syncCronDeliveries) {
+  await conversations.backfillCronOwnership({
+    accountId: auth.accountId,
+    appInstanceId: auth.appInstanceId
+  }).catch((error) => {
+    void logger.warn("cron_owner_backfill_failed", {
+      source: "cron_job_read",
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+  await syncCronDeliveries();
+}
 function toHermesCronJobInput(input) {
   return {
     ...input,
@@ -21164,14 +22272,16 @@ async function bindAndDecorateCronJobForHermesLink(input) {
   if (!jobId) {
     return input.job;
   }
-  const conversationId = await input.conversations.ensureCronInboxConversation({
+  const conversationId = input.source === "natural_language" ? await input.conversations.ensureCronInboxConversation({
     profileName: input.profileName
-  });
+  }) : void 0;
   await bindCronJobToHermesLink(input.paths, {
     profileName: input.profileName,
     jobId,
     conversationId,
-    source: input.source
+    source: input.source,
+    ownerAccountId: input.accountId,
+    ownerAppInstanceId: input.appInstanceId
   });
   return { ...input.job, deliver: HERMES_LINK_CRON_DELIVER };
 }
@@ -26263,12 +27373,10 @@ function computeRelayBackoffMs(attempt, options = {}) {
   return exponential + Math.floor(exponential * ratio);
 }
 async function updateRelayReconnectState(paths, update) {
-  const state = await readLinkState(paths);
-  const next = {
+  await updateJsonFile(paths.stateFile, (state) => ({
     ...state,
-    relayReconnect: update(normalizeRelayReconnectState(state.relayReconnect))
-  };
-  await writeJsonFile(paths.stateFile, next);
+    relayReconnect: update(normalizeRelayReconnectState(state?.relayReconnect))
+  }));
 }
 async function readLinkState(paths) {
   const state = await readJsonFile(paths.stateFile);
@@ -26375,6 +27483,9 @@ function readInteger4(value) {
 }
 
 // src/relay/control-client.ts
+var DEFAULT_RELAY_HANDSHAKE_TIMEOUT_MS = 2e4;
+var DEFAULT_RELAY_PING_INTERVAL_MS = 3 * 6e4;
+var DEFAULT_RELAY_PONG_TIMEOUT_MS = 3e4;
 function connectRelayControl(options) {
   const wsUrl = new URL(`${options.relayBaseUrl.replace(/\/+$/u, "")}/api/v1/relay/link/connect`);
   wsUrl.protocol = wsUrl.protocol === "https:" ? "wss:" : "ws:";
@@ -26383,10 +27494,15 @@ function connectRelayControl(options) {
   const maxReconnectAttempts = options.maxReconnectAttempts ?? Number.POSITIVE_INFINITY;
   const backoffBaseMs = options.backoffBaseMs ?? DEFAULT_RELAY_RECONNECT_BASE_MS;
   const backoffMaxMs = options.backoffMaxMs ?? DEFAULT_RELAY_RECONNECT_MAX_MS;
+  const handshakeTimeoutMs = positiveInteger2(options.handshakeTimeoutMs, DEFAULT_RELAY_HANDSHAKE_TIMEOUT_MS);
+  const pingIntervalMs = positiveInteger2(options.pingIntervalMs, DEFAULT_RELAY_PING_INTERVAL_MS);
+  const pongTimeoutMs = positiveInteger2(options.pongTimeoutMs, DEFAULT_RELAY_PONG_TIMEOUT_MS);
   let reconnectAttempts = 0;
   let closedByUser = false;
   let socket = null;
   let retryTimer = null;
+  let pingTimer = null;
+  let pongTimer = null;
   let abortControllers = /* @__PURE__ */ new Map();
   let fatalRelayRejection = null;
   let relayRetryAfterMs = null;
@@ -26414,15 +27530,19 @@ function connectRelayControl(options) {
     });
   };
   const connect = () => {
+    clearRetryTimer();
+    clearHeartbeatTimers();
     options.onStatus?.({ state: "connecting", attempt: reconnectAttempts });
     fatalRelayRejection = null;
     relayRetryAfterMs = null;
     let closeHandled = false;
+    let localCloseReason;
     const handleConnectionClosed = (reason) => {
       if (closeHandled) {
         return;
       }
       closeHandled = true;
+      clearHeartbeatTimers();
       abortAll(abortControllers);
       abortControllers = /* @__PURE__ */ new Map();
       if (fatalRelayRejection) {
@@ -26449,30 +27569,48 @@ function connectRelayControl(options) {
         scheduleTimer(backoffMaxMs, "retrying", `Relay reconnect scheduling failed: ${message}`);
       });
     };
-    socket = new WebSocket(wsUrl, {
+    const currentSocket = new WebSocket(wsUrl, {
+      handshakeTimeout: handshakeTimeoutMs,
       headers: {
         "x-hermes-link-version": LINK_VERSION
       }
     });
-    socket.on("open", () => {
+    socket = currentSocket;
+    currentSocket.on("open", () => {
+      if (socket !== currentSocket) {
+        return;
+      }
       reconnectAttempts = 0;
       void clearRelayReconnectState(paths).catch(() => void 0);
       options.onStatus?.({ state: "connected", attempt: reconnectAttempts });
-      const currentSocket = socket;
-      if (currentSocket && latestNetworkRoutes) {
+      startHeartbeat(currentSocket, (message) => {
+        localCloseReason = message;
+        options.onStatus?.({ state: "disconnected", attempt: reconnectAttempts, message });
+        currentSocket.terminate();
+      });
+      if (latestNetworkRoutes) {
         sendNetworkRoutes(currentSocket, options.linkId, latestNetworkRoutes);
       }
     });
-    socket.on("message", (raw) => {
-      if (!socket || typeof raw !== "string" && !Buffer.isBuffer(raw)) {
+    currentSocket.on("pong", () => {
+      if (socket !== currentSocket) {
+        return;
+      }
+      clearPongTimer();
+    });
+    currentSocket.on("message", (raw) => {
+      if (socket !== currentSocket || typeof raw !== "string" && !Buffer.isBuffer(raw)) {
         return;
       }
-      void handleFrame(socket, String(raw), options.localPort, abortControllers, streamBatchPolicy).catch((error) => {
+      void handleFrame(currentSocket, String(raw), options.localPort, abortControllers, streamBatchPolicy).catch((error) => {
         const message = error instanceof Error ? error.message : "Relay request failed";
-        socket?.send(JSON.stringify({ type: "http.error", id: "unknown", status: 502, message }));
+        currentSocket.send(JSON.stringify({ type: "http.error", id: "unknown", status: 502, message }));
       });
     });
-    socket.on("unexpected-response", (request, response) => {
+    currentSocket.on("unexpected-response", (request, response) => {
+      if (socket !== currentSocket) {
+        return;
+      }
       const statusCode = response.statusCode ?? 0;
       fatalRelayRejection = resolveFatalRelayRejectionFromStatus(statusCode);
       relayRetryAfterMs = readRetryAfterMs(response);
@@ -26486,7 +27624,10 @@ function connectRelayControl(options) {
       handleConnectionClosed(message);
       request.destroy();
     });
-    socket.on("error", (error) => {
+    currentSocket.on("error", (error) => {
+      if (socket !== currentSocket) {
+        return;
+      }
       const message = error instanceof Error ? error.message : "Relay websocket error";
       fatalRelayRejection = resolveFatalRelayRejection(message);
       options.onStatus?.({
@@ -26495,8 +27636,12 @@ function connectRelayControl(options) {
         message: fatalRelayRejection ?? message
       });
     });
-    socket.on("close", () => {
-      handleConnectionClosed();
+    currentSocket.on("close", (code, reason) => {
+      if (socket !== currentSocket) {
+        return;
+      }
+      socket = null;
+      handleConnectionClosed(localCloseReason ?? formatCloseReason(code, reason));
     });
   };
   startConnect();
@@ -26526,10 +27671,59 @@ function connectRelayControl(options) {
     return await readRelayCooldownDelayMs(paths).catch(() => 0);
   }
   function scheduleTimer(delay4, state, message) {
+    clearRetryTimer();
     options.onStatus?.({ state, attempt: reconnectAttempts, message });
     retryTimer = setTimeout(connect, delay4);
     retryTimer.unref?.();
   }
+  function clearRetryTimer() {
+    if (retryTimer == null) {
+      return;
+    }
+    clearTimeout(retryTimer);
+    retryTimer = null;
+  }
+  function startHeartbeat(currentSocket, onTimeout) {
+    clearHeartbeatTimers();
+    pingTimer = setInterval(() => {
+      if (socket !== currentSocket || currentSocket.readyState !== WebSocket.OPEN) {
+        clearHeartbeatTimers();
+        return;
+      }
+      if (pongTimer != null) {
+        return;
+      }
+      try {
+        currentSocket.ping();
+      } catch {
+        onTimeout("Relay websocket ping failed");
+        return;
+      }
+      pongTimer = setTimeout(() => {
+        if (socket !== currentSocket || currentSocket.readyState !== WebSocket.OPEN) {
+          clearPongTimer();
+          return;
+        }
+        onTimeout(`Relay websocket pong timed out after ${pongTimeoutMs}ms`);
+      }, pongTimeoutMs);
+      pongTimer.unref?.();
+    }, pingIntervalMs);
+    pingTimer.unref?.();
+  }
+  function clearHeartbeatTimers() {
+    if (pingTimer != null) {
+      clearInterval(pingTimer);
+      pingTimer = null;
+    }
+    clearPongTimer();
+  }
+  function clearPongTimer() {
+    if (pongTimer == null) {
+      return;
+    }
+    clearTimeout(pongTimer);
+    pongTimer = null;
+  }
   return {
     publishNetworkRoutes(routes) {
       latestNetworkRoutes = routes;
@@ -26543,10 +27737,8 @@ function connectRelayControl(options) {
     },
     close() {
       closedByUser = true;
-      if (retryTimer) {
-        clearTimeout(retryTimer);
-        retryTimer = null;
-      }
+      clearRetryTimer();
+      clearHeartbeatTimers();
       abortAll(abortControllers);
       socket?.terminate();
     }
@@ -26598,6 +27790,16 @@ function readRetryAfterMs(response) {
   }
   return Math.max(0, dateMs - Date.now());
 }
+function formatCloseReason(code, reason) {
+  const text = reason.toString("utf8").trim();
+  if (code === 1e3 && !text) {
+    return void 0;
+  }
+  return text ? `Relay websocket closed (${code}): ${text}` : `Relay websocket closed (${code})`;
+}
+function positiveInteger2(value, fallback) {
+  return Number.isFinite(value) ? Math.max(1, Math.floor(value)) : fallback;
+}
 async function handleFrame(socket, raw, localPort, abortControllers, streamBatchPolicy) {
   const frame = JSON.parse(raw);
   if (frame.type === "relay.config.update") {
@@ -26723,8 +27925,7 @@ async function readRelayStatusSnapshot(paths) {
   return normalizeRelayStatusSnapshot(state.relayStatus);
 }
 async function writeRelayStatusSnapshot(paths, status, now = /* @__PURE__ */ new Date()) {
-  const current = await readLinkState2(paths);
-  await writeJsonFile(paths.stateFile, {
+  await updateLinkState(paths, (current) => ({
     ...current,
     relayStatus: {
       state: status.state,
@@ -26732,7 +27933,10 @@ async function writeRelayStatusSnapshot(paths, status, now = /* @__PURE__ */ new
       message: normalizeMessage(status.message),
       updatedAt: now.toISOString()
     }
-  });
+  }));
+}
+async function updateLinkState(paths, update) {
+  await updateJsonFile(paths.stateFile, (state) => update(state && typeof state === "object" ? state : {}));
 }
 async function readLinkState2(paths) {
   const state = await readJsonFile(paths.stateFile);
@@ -27151,12 +28355,10 @@ async function mergeLastReportedPublicRoutes(paths, snapshotInput) {
   };
 }
 async function updateNetworkReportState(paths, update) {
-  const state = await readLinkState3(paths);
-  const next = {
+  await updateJsonFile(paths.stateFile, (state) => ({
     ...state,
-    networkReport: update(normalizeNetworkReportState(state.networkReport))
-  };
-  await writeJsonFile(paths.stateFile, next);
+    networkReport: update(normalizeNetworkReportState(state?.networkReport))
+  }));
 }
 async function readLinkState3(paths) {
   const state = await readJsonFile(paths.stateFile);
@@ -27277,7 +28479,7 @@ async function reportLinkStatusToServer(options = {}) {
     public_ipv6s: routes.publicIpv6s,
     reported_at: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const signature = signIdentityPayload(identity, canonicalJson(payload));
+  const signature = signIdentityPayload(identity, canonicalJson2(payload));
   const fetcher = options.fetchImpl ?? fetch;
   const response = await fetcher(
     `${config.serverBaseUrl.replace(/\/+$/u, "")}/api/v1/links/${encodeURIComponent(identity.link_id)}/report`,
@@ -27296,30 +28498,30 @@ async function reportLinkStatusToServer(options = {}) {
   );
   const body = await response.json().catch(() => null);
   if (!response.ok || !body) {
-    const message = readErrorMessage3(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    const message = readErrorMessage4(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
   await markNetworkStatusReported(paths, routes);
   return body;
 }
-function canonicalJson(value) {
-  return JSON.stringify(sortJsonValue(value));
+function canonicalJson2(value) {
+  return JSON.stringify(sortJsonValue2(value));
 }
-function sortJsonValue(value) {
+function sortJsonValue2(value) {
   if (Array.isArray(value)) {
-    return value.map(sortJsonValue);
+    return value.map(sortJsonValue2);
   }
   if (value && typeof value === "object") {
     const record = value;
     const sorted = {};
     for (const key of Object.keys(record).sort()) {
-      sorted[key] = sortJsonValue(record[key]);
+      sorted[key] = sortJsonValue2(record[key]);
     }
     return sorted;
   }
   return value;
 }
-function readErrorMessage3(payload) {
+function readErrorMessage4(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -27515,20 +28717,65 @@ function wait(ms) {
 }
 
 // src/daemon/scheduler.ts
+import { watch } from "fs";
 function startCronDeliveryScheduler(options) {
   let running = false;
   let current = Promise.resolve();
+  let debounceTimer = null;
+  const watchers = /* @__PURE__ */ new Map();
+  const refreshWatchers = async () => {
+    const dirs = await listHermesLinkCronOutputWatchDirs(options.paths).catch(
+      (error) => {
+        void options.logger.warn("cron_link_delivery_watch_failed", {
+          error: error instanceof Error ? error.message : String(error)
+        });
+        return [];
+      }
+    );
+    const nextDirs = new Set(dirs);
+    for (const [dir, watcher] of watchers) {
+      if (!nextDirs.has(dir)) {
+        watcher.close();
+        watchers.delete(dir);
+      }
+    }
+    for (const dir of nextDirs) {
+      if (watchers.has(dir)) {
+        continue;
+      }
+      try {
+        const watcher = watch(
+          dir,
+          { persistent: false, recursive: true },
+          () => {
+            triggerSync();
+          }
+        );
+        watcher.on("error", (error) => {
+          void options.logger.warn("cron_link_delivery_watch_failed", {
+            dir,
+            error: error instanceof Error ? error.message : String(error)
+          });
+          watcher.close();
+          watchers.delete(dir);
+        });
+        watchers.set(dir, watcher);
+      } catch (error) {
+        void options.logger.warn("cron_link_delivery_watch_failed", {
+          dir,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      }
+    }
+  };
   const syncCronDeliveries = async () => {
     if (running) {
       return;
     }
     running = true;
     try {
-      await syncHermesLinkCronDeliveries(
-        options.paths,
-        options.conversations,
-        options.logger
-      );
+      await options.conversations.syncCronDeliveries();
+      await refreshWatchers();
     } catch (error) {
       void options.logger.warn("cron_link_delivery_sync_failed", {
         source: "daemon_scheduler",
@@ -27538,13 +28785,32 @@ function startCronDeliveryScheduler(options) {
       running = false;
     }
   };
+  const triggerSync = () => {
+    if (debounceTimer) {
+      clearTimeout(debounceTimer);
+    }
+    debounceTimer = setTimeout(() => {
+      debounceTimer = null;
+      current = syncCronDeliveries();
+    }, 500);
+    debounceTimer.unref?.();
+  };
   const timer = setInterval(() => {
     current = syncCronDeliveries();
   }, options.intervalMs ?? 3e4);
   timer.unref?.();
+  void refreshWatchers();
+  triggerSync();
   return {
     async close() {
       clearInterval(timer);
+      if (debounceTimer) {
+        clearTimeout(debounceTimer);
+      }
+      for (const watcher of watchers.values()) {
+        watcher.close();
+      }
+      watchers.clear();
       await current.catch(() => void 0);
     }
   };
@@ -29258,7 +30524,7 @@ async function postJson(fetcher, url, token, body) {
   }
   const payload = await response.json().catch(() => null);
   if (!response.ok) {
-    const message = readErrorMessage4(payload) ?? `Relay request failed with HTTP ${response.status}`;
+    const message = readErrorMessage5(payload) ?? `Relay request failed with HTTP ${response.status}`;
     throw new Error(message);
   }
   if (!payload) {
@@ -29266,7 +30532,7 @@ async function postJson(fetcher, url, token, body) {
   }
   return payload;
 }
-function readErrorMessage4(payload) {
+function readErrorMessage5(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -29600,12 +30866,12 @@ async function patchServerJson(serverBaseUrl, path29, token, body, options) {
 async function readJsonResponse2(response) {
   const payload = await response.json().catch(() => null);
   if (!response.ok || !payload) {
-    const message = readErrorMessage5(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    const message = readErrorMessage6(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
   return payload;
 }
-function readErrorMessage5(payload) {
+function readErrorMessage6(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -29689,6 +30955,9 @@ function registerSystemRoutes(router, options) {
         conversation_bulk_delete: true,
         conversation_clear_plan: true,
         conversation_cancel: true,
+        conversation_queue_controls: true,
+        conversation_queue_limit: MAX_CONVERSATION_QUEUED_RUNS,
+        responses_interrupted_previous_response: true,
         conversation_rename: true,
         blobs: true,
         devices: true,
@@ -29699,7 +30968,8 @@ function registerSystemRoutes(router, options) {
         cron_jobs: true,
         profile_skills: true,
         profile_memory: true,
-        hermes_updates: true
+        hermes_updates: true,
+        app_push_notification_events: true
       }
     };
   });
@@ -30774,7 +32044,7 @@ async function createApp(options = {}) {
     }
     cronDeliverySyncRunning = true;
     try {
-      await syncHermesLinkCronDeliveries(paths, conversations, logger);
+      await conversations.syncCronDeliveries();
     } catch (error) {
       void logger.warn("cron_link_delivery_sync_failed", {
         source: "http_app_bootstrap",
@@ -30817,7 +32087,7 @@ async function createApp(options = {}) {
     conversations,
     syncCronDeliveries
   });
-  registerConversationRoutes(router, { paths, conversations });
+  registerConversationRoutes(router, { paths, logger, conversations });
   registerRunRoutes(router, { paths, logger, conversations });
   registerProfileRoutes(router, { paths, logger, conversations });
   app.use(router.routes());
@@ -30838,6 +32108,14 @@ export {
   resolveHermesConfigPath,
   ensureHermesApiServerConfig,
   resolveRuntimePaths,
+  defaultLinkConfig,
+  loadConfig,
+  saveConfig,
+  parseLogLevel,
+  normalizeLanHost,
+  loadIdentity,
+  ensureIdentity,
+  getIdentityStatus,
   createFileLogger,
   getLinkLogFile,
   readRecentLogEntries,
@@ -30849,14 +32127,6 @@ export {
   ensureHermesApiServerAvailable,
   readHermesVersion,
   readHermesApiServerHealth,
-  defaultLinkConfig,
-  loadConfig,
-  saveConfig,
-  parseLogLevel,
-  normalizeLanHost,
-  loadIdentity,
-  ensureIdentity,
-  getIdentityStatus,
   ConversationService,
   hasActiveDevices,
   prepareHermesProfilesForUse,