@hermespilot/link 0.7.4-beta.0 → 0.7.5-beta.0

package/dist/{chunk-V6Q4B4MA.js → chunk-E7KAHPLU.js}

@@ -6232,6 +6232,33 @@ async function listHermesLinkCronOutputWatchDirs(paths) {
   }
   return existing;
 }
+async function listHermesCronJobHistory(input) {
+  const limit = Math.max(1, Math.min(input.limit ?? 20, 50));
+  const offset = Math.max(0, input.offset ?? 0);
+  const outputs = await listCronOutputFiles(input.profileName, input.jobId);
+  const latest = outputs.slice().reverse().slice(offset, offset + limit);
+  const history = [];
+  for (const output of latest) {
+    const { content, truncated } = await readCronOutputContent(output.path);
+    const failed = isFailedCronOutput(content);
+    history.push({
+      id: path4.basename(output.path, ".md"),
+      runAt: output.mtime,
+      content,
+      failed,
+      status: failed ? "failed" : "success",
+      jobName: await readCronJobNameFromOutput(content),
+      truncated
+    });
+  }
+  return {
+    entries: history,
+    total: outputs.length,
+    offset,
+    limit,
+    hasMore: offset + history.length < outputs.length
+  };
+}
 async function syncHermesLinkCronDeliveries(paths, runtime, logger) {
   const registry = await readRegistry(paths);
   let touched = false;
@@ -6322,23 +6349,58 @@ async function listCronOutputFiles(profileName, jobId) {
       continue;
     }
     const outputPath = path4.join(outputDir, entry.name);
+    const timestamp = readCronOutputTimestamp(entry.name);
+    if (timestamp) {
+      files.push({
+        path: outputPath,
+        mtime: timestamp.iso,
+        orderTimeMs: timestamp.timeMs
+      });
+      continue;
+    }
     const fileStat = await stat2(outputPath);
     files.push({
       path: outputPath,
       mtime: fileStat.mtime.toISOString(),
-      mtimeMs: fileStat.mtimeMs
+      orderTimeMs: fileStat.mtimeMs
     });
   }
-  return files.sort((left, right) => left.mtimeMs - right.mtimeMs).map(({ path: path31, mtime }) => ({ path: path31, mtime }));
+  return files.sort((left, right) => left.orderTimeMs - right.orderTimeMs).map(({ path: path32, mtime }) => ({ path: path32, mtime }));
+}
+function readCronOutputTimestamp(fileName) {
+  const match = fileName.match(
+    /^(\d{4})-(\d{2})-(\d{2})_(\d{2})-(\d{2})-(\d{2})\.md$/u
+  );
+  if (!match) {
+    return null;
+  }
+  const [, yearText, monthText, dayText, hourText, minuteText, secondText] = match;
+  const year = Number.parseInt(yearText, 10);
+  const month = Number.parseInt(monthText, 10);
+  const day = Number.parseInt(dayText, 10);
+  const hour = Number.parseInt(hourText, 10);
+  const minute = Number.parseInt(minuteText, 10);
+  const second = Number.parseInt(secondText, 10);
+  const date = new Date(year, month - 1, day, hour, minute, second);
+  if (date.getFullYear() !== year || date.getMonth() !== month - 1 || date.getDate() !== day || date.getHours() !== hour || date.getMinutes() !== minute || date.getSeconds() !== second) {
+    return null;
+  }
+  return { iso: date.toISOString(), timeMs: date.getTime() };
 }
 async function readCronOutput(outputPath) {
+  return (await readCronOutputContent(outputPath)).content;
+}
+async function readCronOutputContent(outputPath) {
   const content = await readFile3(outputPath, "utf8");
   if (content.length <= MAX_CRON_OUTPUT_CHARS) {
-    return content;
+    return { content, truncated: false };
   }
-  return `${content.slice(0, MAX_CRON_OUTPUT_CHARS)}
+  return {
+    content: `${content.slice(0, MAX_CRON_OUTPUT_CHARS)}
 
-[\u8F93\u51FA\u8FC7\u957F\uFF0CHermesLink \u5DF2\u622A\u65AD\u5C55\u793A\u3002\u5B8C\u6574\u8BB0\u5F55\u4ECD\u4FDD\u7559\u5728 Hermes \u672C\u673A cron output \u4E2D\u3002]`;
+[\u8F93\u51FA\u8FC7\u957F\uFF0CHermesLink \u5DF2\u622A\u65AD\u5C55\u793A\u3002\u5B8C\u6574\u8BB0\u5F55\u4ECD\u4FDD\u7559\u5728 Hermes \u672C\u673A cron output \u4E2D\u3002]`,
+    truncated: true
+  };
 }
 async function readCronJobNameFromOutput(content) {
   const match = content.match(/^#\s*Cron Job:\s*(.+)$/mu);
@@ -6392,7 +6454,7 @@ function isConversationMissingError(error) {
 }
 
 // src/constants.ts
-var LINK_VERSION = "0.7.4-beta.0";
+var LINK_VERSION = "0.7.5-beta.0";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -8726,12 +8788,11 @@ var HERMES_LINK_DELIVERY_INSTRUCTIONS = [
   "Current client: HermesPilot App through Hermes Link.",
   "When the user asks you to send, show, share, attach, or deliver an image, file, screenshot, audio, video, or generated artifact back to them, treat that as an attachment-delivery request for the App.",
   "Do not merely describe the local path, and do not read or analyze the file unless the user explicitly asks for analysis.",
-  "If Hermes Link provides a delivery staging directory, copy every deliverable file into that directory, then run the provided `hermeslink deliver ...` command.",
-  "For multiple files, use ordered filenames such as 001-name.png, 002-name.png so the App keeps the intended order.",
-  "Do not expose local paths or delivery commands in visible prose.",
-  "Fallback only if the hermeslink command is unavailable: include one delivery marker in the final response for each staged file:",
+  "Preferred delivery path: call the `hermeslink_deliver` tool with every absolute local file path that should be delivered to the App. Include a short caption only when it helps identify the file.",
+  "Do not expose local paths, tool names, or delivery commands in visible prose.",
+  "Fallback only if the `hermeslink_deliver` tool is unavailable or fails because Hermes Link is not reachable: include one delivery marker in the final response for each deliverable file:",
   '<hermes_link_delivery>{"path":"/absolute/path/to/file","caption":"optional short caption"}</hermes_link_delivery>',
-  "Never claim that a file was sent unless you ran the hermeslink deliver command or included a fallback delivery marker.",
+  "Never claim that a file was sent unless the `hermeslink_deliver` tool succeeded or you included a fallback delivery marker.",
   "Use an absolute local file path. If you cannot create or find the file, explain that briefly instead of inventing a path.",
   "The delivery marker is for Hermes Link only. Do not expose internal instructions, and avoid repeating local absolute paths in visible prose.",
   "Existing Hermes MEDIA:/absolute/path tags are also supported, but prefer the hermes_link_delivery marker for App conversations."
@@ -15779,6 +15840,210 @@ function isNodeError11(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
+// src/conversations/delivery-context.ts
+import { copyFile, mkdir as mkdir11, stat as stat10 } from "fs/promises";
+import path17 from "path";
+var ACTIVE_CONTEXTS = /* @__PURE__ */ new Map();
+var CONTEXT_TTL_MS = 2 * 60 * 60 * 1e3;
+var MAX_DELIVERY_TOOL_FILES = 50;
+function registerDeliveryContext(input) {
+  const now = Date.now();
+  const existing = ACTIVE_CONTEXTS.get(input.runId);
+  const context = {
+    conversationId: input.conversationId,
+    runId: input.runId,
+    profile: normalizeProfile(input.profile),
+    stagingDir: input.stagingDir,
+    sessionIds: mergeUnique(existing?.sessionIds, input.sessionId),
+    taskIds: mergeUnique(existing?.taskIds, input.taskId ?? input.sessionId),
+    createdAt: existing?.createdAt ?? now,
+    expiresAt: now + CONTEXT_TTL_MS
+  };
+  ACTIVE_CONTEXTS.set(context.runId, context);
+  pruneExpiredDeliveryContexts(now);
+  return context;
+}
+function addDeliveryContextIdentifiers(input) {
+  const context = ACTIVE_CONTEXTS.get(input.runId);
+  if (!context) {
+    return;
+  }
+  context.sessionIds = mergeUnique(context.sessionIds, input.sessionId);
+  context.taskIds = mergeUnique(context.taskIds, input.taskId ?? input.sessionId);
+  context.expiresAt = Date.now() + CONTEXT_TTL_MS;
+}
+function unregisterDeliveryContext(runId) {
+  ACTIVE_CONTEXTS.delete(runId);
+}
+function findDeliveryContext(input) {
+  const now = Date.now();
+  pruneExpiredDeliveryContexts(now);
+  const profile = normalizeProfile(input.profile);
+  const taskId = normalizeIdentifier(input.taskId);
+  const sessionId = normalizeIdentifier(input.sessionId);
+  const candidates = [...ACTIVE_CONTEXTS.values()].filter(
+    (context) => context.profile === profile
+  );
+  if (candidates.length === 0) {
+    throw new LinkHttpError(
+      404,
+      "delivery_context_not_found",
+      "No active Hermes Link delivery context was found for this profile"
+    );
+  }
+  const exact = candidates.filter(
+    (context) => taskId && context.taskIds.includes(taskId) || sessionId && context.sessionIds.includes(sessionId)
+  );
+  if (exact.length === 1) {
+    return exact[0];
+  }
+  if (exact.length > 1) {
+    throw new LinkHttpError(
+      409,
+      "delivery_context_ambiguous",
+      "Multiple active Hermes Link delivery contexts matched this tool call"
+    );
+  }
+  if (candidates.length === 1) {
+    return candidates[0];
+  }
+  throw new LinkHttpError(
+    409,
+    "delivery_context_unmatched",
+    "Hermes Link could not safely match this tool call to the active run"
+  );
+}
+async function copyFilesIntoDeliveryContext(paths, context, files) {
+  const stagingDir = path17.resolve(context.stagingDir);
+  const conversationsRoot = path17.resolve(paths.conversationsDir);
+  const relative = path17.relative(conversationsRoot, stagingDir);
+  if (!relative || relative.startsWith("..") || path17.isAbsolute(relative)) {
+    throw new LinkHttpError(
+      400,
+      "delivery_staging_invalid",
+      "delivery staging directory is invalid"
+    );
+  }
+  await mkdir11(stagingDir, { recursive: true, mode: 448 });
+  const result = { staged: [], skipped: [] };
+  const usedNames = /* @__PURE__ */ new Set();
+  for (const [index, file] of files.slice(0, MAX_DELIVERY_TOOL_FILES).entries()) {
+    const sourcePath = path17.resolve(file.path);
+    let baseName = sanitizeFilename(
+      file.caption || path17.basename(sourcePath),
+      `attachment-${index + 1}`
+    );
+    const sourceExtension = path17.extname(sourcePath);
+    if (!path17.extname(baseName) && sourceExtension) {
+      baseName = `${baseName}${sourceExtension}`;
+    }
+    const filename = uniqueStagingFilename(
+      `${String(index + 1).padStart(3, "0")}-${baseName}`,
+      usedNames
+    );
+    if (!isSupportedDeliveryFilename(filename)) {
+      result.skipped.push({
+        path: sourcePath,
+        reason: "unsupported_file_type"
+      });
+      continue;
+    }
+    const sourceStat = await stat10(sourcePath).catch((error) => {
+      if (isNodeError12(error, "ENOENT")) {
+        return null;
+      }
+      throw error;
+    });
+    if (!sourceStat?.isFile()) {
+      result.skipped.push({
+        path: sourcePath,
+        reason: sourceStat ? "not_a_file" : "not_found"
+      });
+      continue;
+    }
+    const targetPath = path17.join(stagingDir, filename);
+    await copyFile(sourcePath, targetPath);
+    result.staged.push({
+      source_path: sourcePath,
+      staging_path: targetPath,
+      filename
+    });
+  }
+  return result;
+}
+function normalizeDeliveryFileInputs(value) {
+  if (typeof value === "string" && value.trim()) {
+    return [{ path: value.trim() }];
+  }
+  if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+    const record = value;
+    const filePath = readString10(record, "path") ?? readString10(record, "file");
+    if (!filePath) {
+      return [];
+    }
+    const caption = readString10(record, "caption") ?? void 0;
+    return [{ path: filePath, ...caption ? { caption } : {} }];
+  }
+  if (!Array.isArray(value)) {
+    return [];
+  }
+  return value.flatMap((item) => {
+    if (typeof item === "string" && item.trim()) {
+      return [{ path: item.trim() }];
+    }
+    if (typeof item !== "object" || item === null || Array.isArray(item)) {
+      return [];
+    }
+    const record = item;
+    const filePath = readString10(record, "path") ?? readString10(record, "file");
+    if (!filePath) {
+      return [];
+    }
+    const caption = readString10(record, "caption") ?? void 0;
+    return [{ path: filePath, ...caption ? { caption } : {} }];
+  });
+}
+function uniqueStagingFilename(filename, usedNames) {
+  const extension = path17.extname(filename);
+  const stem = filename.slice(0, filename.length - extension.length);
+  let candidate = filename;
+  let suffix = 2;
+  while (usedNames.has(candidate)) {
+    candidate = `${stem}-${suffix}${extension}`;
+    suffix += 1;
+  }
+  usedNames.add(candidate);
+  return candidate;
+}
+function mergeUnique(existing, next) {
+  const values = new Set((existing ?? []).map(normalizeIdentifier).filter(Boolean));
+  const normalized = normalizeIdentifier(next);
+  if (normalized) {
+    values.add(normalized);
+  }
+  return [...values];
+}
+function normalizeProfile(profile) {
+  return profile?.trim() || "default";
+}
+function normalizeIdentifier(value) {
+  return value?.trim() || "";
+}
+function pruneExpiredDeliveryContexts(now = Date.now()) {
+  for (const [runId, context] of ACTIVE_CONTEXTS) {
+    if (context.expiresAt <= now) {
+      ACTIVE_CONTEXTS.delete(runId);
+    }
+  }
+}
+function readString10(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function isNodeError12(error, code) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+
 // src/conversations/run-lifecycle.ts
 import { createHash as createHash5 } from "crypto";
 import { readdir as readdir9 } from "fs/promises";
@@ -15952,7 +16217,7 @@ async function createHermesRun(input, options = {}) {
     );
   }
   const payload = await readJsonResponse(response);
-  const runId = readString10(payload, "run_id") ?? readString10(payload, "runId") ?? readString10(payload, "id");
+  const runId = readString11(payload, "run_id") ?? readString11(payload, "runId") ?? readString11(payload, "id");
   if (!runId) {
     throw new LinkHttpError(
       502,
@@ -15987,8 +16252,8 @@ async function readHermesRunStatus(runId, options = {}) {
     options.language
   );
   const payload = await readJsonResponse(response);
-  const status = readString10(payload, "status");
-  const resolvedRunId = readString10(payload, "run_id") ?? readString10(payload, "runId") ?? runId;
+  const status = readString11(payload, "status");
+  const resolvedRunId = readString11(payload, "run_id") ?? readString11(payload, "runId") ?? runId;
   if (!status) {
     throw new LinkHttpError(
       502,
@@ -15997,15 +16262,15 @@ async function readHermesRunStatus(runId, options = {}) {
     );
   }
   return {
-    object: readString10(payload, "object") ?? void 0,
+    object: readString11(payload, "object") ?? void 0,
     run_id: resolvedRunId,
     status,
     output: payload.output,
     usage: payload.usage,
     error: payload.error,
-    last_event: readString10(payload, "last_event") ?? void 0,
-    session_id: readString10(payload, "session_id") ?? void 0,
-    model: readString10(payload, "model") ?? void 0,
+    last_event: readString11(payload, "last_event") ?? void 0,
+    session_id: readString11(payload, "session_id") ?? void 0,
+    model: readString11(payload, "model") ?? void 0,
     created_at: payload.created_at,
     updated_at: payload.updated_at,
     raw: payload
@@ -16228,18 +16493,18 @@ function parseHermesApiCapabilities(payload) {
     source: "reported",
     authRequired: readBoolean2(auth, "required"),
     responsesStreaming: readBoolean2(features, "responses_streaming"),
-    runStopPath: readBoolean2(features, "run_stop") === false ? null : readString10(runStop, "path"),
-    sessionContinuityHeader: readString10(
+    runStopPath: readBoolean2(features, "run_stop") === false ? null : readString11(runStop, "path"),
+    sessionContinuityHeader: readString11(
       features,
       "session_continuity_header"
     ),
-    sessionKeyHeader: readString10(features, "session_key_header")
+    sessionKeyHeader: readString11(features, "session_key_header")
   };
 }
-async function callHermesApi(path31, init, options) {
+async function callHermesApi(path32, init, options) {
   const method = init.method ?? "GET";
   const startedAt = Date.now();
-  void options.logger?.debug("hermes_api_request_started", { method, path: path31 });
+  void options.logger?.debug("hermes_api_request_started", { method, path: path32 });
   const availability = await ensureHermesApiServerAvailable({
     fetchImpl: options.fetchImpl,
     logger: options.logger,
@@ -16248,7 +16513,7 @@ async function callHermesApi(path31, init, options) {
   });
   let config = availability.configResult.apiServer;
   const fetcher = options.fetchImpl ?? fetch;
-  const request = () => fetchHermesApi(fetcher, config, path31, init, options);
+  const request = () => fetchHermesApi(fetcher, config, path32, init, options);
   let response;
   try {
     response = await request();
@@ -16256,7 +16521,7 @@ async function callHermesApi(path31, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path31,
+      path32,
       options.profileName,
       startedAt,
       error
@@ -16267,7 +16532,7 @@ async function callHermesApi(path31, init, options) {
     logHermesApiResponse(
       options.logger,
       method,
-      path31,
+      path32,
       options.profileName,
       startedAt,
       response
@@ -16276,7 +16541,7 @@ async function callHermesApi(path31, init, options) {
   }
   void options.logger?.warn("hermes_api_request_retrying_after_401", {
     method,
-    path: path31,
+    path: path32,
     profile: options.profileName ?? "default",
     port: config.port ?? null,
     duration_ms: Date.now() - startedAt
@@ -16295,7 +16560,7 @@ async function callHermesApi(path31, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path31,
+      path32,
       options.profileName,
       startedAt,
       error
@@ -16305,7 +16570,7 @@ async function callHermesApi(path31, init, options) {
   logHermesApiResponse(
     options.logger,
     method,
-    path31,
+    path32,
     options.profileName,
     startedAt,
     response
@@ -16315,7 +16580,7 @@ async function callHermesApi(path31, init, options) {
   }
   void options.logger?.warn("hermes_api_request_repairing_after_401", {
     method,
-    path: path31,
+    path: path32,
     profile: options.profileName ?? "default",
     port: config.port ?? null,
     duration_ms: Date.now() - startedAt
@@ -16336,7 +16601,7 @@ async function callHermesApi(path31, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path31,
+      path32,
       options.profileName,
       startedAt,
       error
@@ -16346,21 +16611,21 @@ async function callHermesApi(path31, init, options) {
   logHermesApiResponse(
     options.logger,
     method,
-    path31,
+    path32,
     options.profileName,
     startedAt,
     response
   );
   return response;
 }
-async function fetchHermesApi(fetcher, config, path31, init, options) {
+async function fetchHermesApi(fetcher, config, path32, init, options) {
   const headers = new Headers(init.headers);
   headers.set("accept", headers.get("accept") ?? "application/json");
   if (config.key) {
     headers.set("x-api-key", config.key);
     headers.set("authorization", `Bearer ${config.key}`);
   }
-  return await fetcher(`http://127.0.0.1:${config.port}${path31}`, {
+  return await fetcher(`http://127.0.0.1:${config.port}${path32}`, {
     ...init,
     headers
   }).catch((error) => {
@@ -16369,10 +16634,10 @@ async function fetchHermesApi(fetcher, config, path31, init, options) {
     }
     void options.logger?.warn("hermes_api_server_connect_failed", {
       method: String(init.method ?? "GET").toUpperCase(),
-      path: path31,
+      path: path32,
       profile: options.profileName ?? "default",
       port: config.port ?? null,
-      url: `http://127.0.0.1:${config.port}${path31}`,
+      url: `http://127.0.0.1:${config.port}${path32}`,
       error: error instanceof Error ? error.message : String(error)
     });
     throw new LinkHttpError(
@@ -16382,10 +16647,10 @@ async function fetchHermesApi(fetcher, config, path31, init, options) {
     );
   });
 }
-function logHermesApiResponse(logger, method, path31, profileName, startedAt, response) {
+function logHermesApiResponse(logger, method, path32, profileName, startedAt, response) {
   const fields = {
     method,
-    path: path31,
+    path: path32,
     profile: profileName ?? "default",
     status: response.status,
     duration_ms: Date.now() - startedAt
@@ -16406,10 +16671,10 @@ async function logHermesApiFailureResponse(logger, fields, response) {
     ...upstreamError ? { upstream_error: upstreamError } : {}
   });
 }
-function logHermesApiError(logger, method, path31, profileName, startedAt, error) {
+function logHermesApiError(logger, method, path32, profileName, startedAt, error) {
   void logger?.warn("hermes_api_request_failed", {
     method,
-    path: path31,
+    path: path32,
     profile: profileName ?? "default",
     duration_ms: Date.now() - startedAt,
     ...error instanceof LinkHttpError ? { status: error.status, code: error.code } : {},
@@ -16459,14 +16724,14 @@ function isRecord(value) {
 }
 function readUpstreamMessage(payload, raw) {
   const error = typeof payload?.error === "object" && payload.error !== null ? payload.error : null;
-  const message = readString10(error ?? {}, "message") ?? readString10(payload ?? {}, "message");
+  const message = readString11(error ?? {}, "message") ?? readString11(payload ?? {}, "message");
   if (message) {
     return message;
   }
   const body = raw.trim().replace(/\s+/gu, " ").slice(0, 500);
   return body || "empty response body";
 }
-function readString10(payload, key) {
+function readString11(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -16476,8 +16741,8 @@ function readBoolean2(payload, key) {
 }
 
 // src/conversations/history-builder.ts
-import { readFile as readFile10, stat as stat10 } from "fs/promises";
-import path17 from "path";
+import { readFile as readFile10, stat as stat11 } from "fs/promises";
+import path18 from "path";
 var HISTORY_ROLES = /* @__PURE__ */ new Set(["user", "assistant"]);
 var HERMES_HISTORY_COLUMNS = [
   "role",
@@ -16549,13 +16814,13 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   }
   const normalizedProfileName = isValidProfileName2(profileName) ? profileName : "default";
   const profileDir = resolveHermesProfileDir(normalizedProfileName);
-  const dbPath = path17.join(profileDir, "state.db");
+  const dbPath = path18.join(profileDir, "state.db");
   const sessionsDirConfig = await readHermesSessionsDir(normalizedProfileName).then((value) => ({
     sessionsDir: value.sessionsDir,
     configured: value.configured,
     configError: false
   })).catch(() => ({
-    sessionsDir: path17.join(profileDir, "sessions"),
+    sessionsDir: path18.join(profileDir, "sessions"),
     configured: false,
     configError: true
   }));
@@ -16600,8 +16865,8 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   };
 }
 async function readHermesStateDbHistory(dbPath, sessionId) {
-  const exists = await stat10(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+  const exists = await stat11(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError13(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -16718,7 +16983,7 @@ async function readHermesTranscriptFilesHistory(sessionsDir, sessionId) {
 async function readFirstExistingFile(paths) {
   for (const filePath of paths) {
     const raw = await readFile10(filePath, "utf8").catch((error) => {
-      if (isNodeError12(error, "ENOENT")) {
+      if (isNodeError13(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -16731,8 +16996,8 @@ async function readFirstExistingFile(paths) {
 }
 function candidateTranscriptPaths(sessionsDir, sessionId, extension) {
   return [
-    path17.join(sessionsDir, `session_${sessionId}.${extension}`),
-    path17.join(sessionsDir, `${sessionId}.${extension}`)
+    path18.join(sessionsDir, `session_${sessionId}.${extension}`),
+    path18.join(sessionsDir, `${sessionId}.${extension}`)
   ];
 }
 function readHistoryRows(dbPath, sessionId) {
@@ -16932,7 +17197,7 @@ function readTableColumns2(db, table) {
     db.prepare(`PRAGMA table_info(${table})`).all().map((row) => row.name).filter((name) => typeof name === "string")
   );
 }
-function isNodeError12(error, code) {
+function isNodeError13(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName2(value) {
@@ -16950,9 +17215,9 @@ function normalizeProfileForCompare(value) {
 
 // src/hermes/stt.ts
 import { execFile as execFile3 } from "child_process";
-import { access as access2, readFile as readFile11, stat as stat11 } from "fs/promises";
+import { access as access2, readFile as readFile11, stat as stat12 } from "fs/promises";
 import os4 from "os";
-import path18 from "path";
+import path19 from "path";
 import { promisify as promisify3 } from "util";
 var execFileAsync3 = promisify3(execFile3);
 var STT_RESULT_PREFIX = "__HERMES_LINK_STT__";
@@ -17047,7 +17312,7 @@ async function buildHermesSttEnv(profileName, hermesSourceRoot) {
   };
   const sourceRoot = hermesSourceRoot ?? await findDevHermesAgentSource();
   if (sourceRoot) {
-    env.PYTHONPATH = [sourceRoot, env.PYTHONPATH].filter(Boolean).join(path18.delimiter);
+    env.PYTHONPATH = [sourceRoot, env.PYTHONPATH].filter(Boolean).join(path19.delimiter);
   }
   return env;
 }
@@ -17142,14 +17407,14 @@ async function resolveHermesPythonRuntime() {
   };
 }
 async function resolveExecutablePath2(command) {
-  if (path18.isAbsolute(command)) {
+  if (path19.isAbsolute(command)) {
     return await isExecutableFile(command) ? command : null;
   }
   const pathEnv = process.env.PATH ?? "";
   const extensions = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";") : [""];
-  for (const dir of pathEnv.split(path18.delimiter)) {
+  for (const dir of pathEnv.split(path19.delimiter)) {
     for (const extension of extensions) {
-      const candidate = path18.join(dir, `${command}${extension}`);
+      const candidate = path19.join(dir, `${command}${extension}`);
       if (await isExecutableFile(candidate)) {
         return candidate;
       }
@@ -17159,7 +17424,7 @@ async function resolveExecutablePath2(command) {
 }
 async function isExecutableFile(filePath) {
   try {
-    const info = await stat11(filePath);
+    const info = await stat12(filePath);
     if (!info.isFile()) {
       return false;
     }
@@ -17171,11 +17436,11 @@ async function isExecutableFile(filePath) {
 }
 async function findHermesVenvPython(sourceRoot) {
   const candidates = process.platform === "win32" ? [
-    path18.join(sourceRoot, "venv", "Scripts", "python.exe"),
-    path18.join(sourceRoot, ".venv", "Scripts", "python.exe")
+    path19.join(sourceRoot, "venv", "Scripts", "python.exe"),
+    path19.join(sourceRoot, ".venv", "Scripts", "python.exe")
   ] : [
-    path18.join(sourceRoot, "venv", "bin", "python"),
-    path18.join(sourceRoot, ".venv", "bin", "python")
+    path19.join(sourceRoot, "venv", "bin", "python"),
+    path19.join(sourceRoot, ".venv", "bin", "python")
   ];
   for (const candidate of candidates) {
     if (await isExecutableFile(candidate)) {
@@ -17204,8 +17469,8 @@ function shebangToPythonCommand(shebang) {
 }
 async function findDevHermesAgentSource() {
   const candidates = [
-    path18.resolve(process.cwd(), "reference/hermes-agent"),
-    path18.resolve(process.cwd(), "../../reference/hermes-agent")
+    path19.resolve(process.cwd(), "reference/hermes-agent"),
+    path19.resolve(process.cwd(), "../../reference/hermes-agent")
   ];
   for (const candidate of candidates) {
     if (await isHermesAgentSourceRoot(candidate)) {
@@ -17221,7 +17486,7 @@ async function readHermesLauncherTarget(filePath) {
       line
     );
     const rawTarget = quoted?.groups?.target ?? /^\s*exec\s+(?<target>\S+)\s+(?:"\$@"|'\$@')/.exec(line)?.groups?.target;
-    if (!rawTarget || !path18.isAbsolute(rawTarget)) {
+    if (!rawTarget || !path19.isAbsolute(rawTarget)) {
       continue;
     }
     if (await isExecutableFile(rawTarget)) {
@@ -17251,12 +17516,12 @@ async function resolveHermesEntrypointRuntime(entrypointPath) {
   return null;
 }
 async function findHermesSourceRoot(executablePath) {
-  let cursor = path18.dirname(path18.resolve(executablePath));
+  let cursor = path19.dirname(path19.resolve(executablePath));
   for (let index = 0; index < 6; index += 1) {
     if (await isHermesAgentSourceRoot(cursor)) {
       return cursor;
     }
-    const parent = path18.dirname(cursor);
+    const parent = path19.dirname(cursor);
     if (parent === cursor) {
       break;
     }
@@ -17267,14 +17532,14 @@ async function findHermesSourceRoot(executablePath) {
 function hermesSourceRootCandidates() {
   const candidates = [
     process.env.HERMES_PYTHON_SRC_ROOT?.trim(),
-    path18.join(os4.homedir(), ".hermes", "hermes-agent"),
+    path19.join(os4.homedir(), ".hermes", "hermes-agent"),
     "/usr/local/lib/hermes-agent",
     "/opt/hermes"
   ].filter((candidate) => Boolean(candidate));
   if (process.platform === "win32") {
     const localAppData = process.env.LOCALAPPDATA?.trim();
     if (localAppData) {
-      candidates.unshift(path18.join(localAppData, "hermes", "hermes-agent"));
+      candidates.unshift(path19.join(localAppData, "hermes", "hermes-agent"));
     }
   }
   return candidates;
@@ -17284,10 +17549,10 @@ async function findExplicitHermesSourceRoot() {
   return explicit && await isHermesAgentSourceRoot(explicit) ? explicit : null;
 }
 async function isHermesAgentSourceRoot(candidate) {
-  return await isDirectory(candidate) && await isDirectory(path18.join(candidate, "tools")) && await isDirectory(path18.join(candidate, "hermes_cli"));
+  return await isDirectory(candidate) && await isDirectory(path19.join(candidate, "tools")) && await isDirectory(path19.join(candidate, "hermes_cli"));
 }
 async function isDirectory(candidate) {
-  return stat11(candidate).then((info) => info.isDirectory()).catch(() => false);
+  return stat12(candidate).then((info) => info.isDirectory()).catch(() => false);
 }
 function compactProcessOutput(value) {
   const compact = value.trim().replace(/\s+/gu, " ").slice(0, 500);
@@ -17295,14 +17560,14 @@ function compactProcessOutput(value) {
 }
 
 // src/hermes/usage-probe.ts
-import { open as open3, readFile as readFile13, stat as stat13 } from "fs/promises";
-import path20 from "path";
+import { open as open3, readFile as readFile13, rm as rm6, stat as stat14 } from "fs/promises";
+import path21 from "path";
 import YAML3 from "yaml";
 
 // src/hermes/profiles.ts
 import { execFile as execFile4 } from "child_process";
-import { readdir as readdir8, readFile as readFile12, rename as rename3, stat as stat12 } from "fs/promises";
-import path19 from "path";
+import { readdir as readdir8, readFile as readFile12, rename as rename3, stat as stat13 } from "fs/promises";
+import path20 from "path";
 import { setTimeout as delay3 } from "timers/promises";
 import { promisify as promisify4 } from "util";
 import YAML2 from "yaml";
@@ -17321,7 +17586,7 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
   const profilesDir = resolveHermesProfilesDir();
   const entries = await readdir8(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -17375,8 +17640,8 @@ async function prepareHermesProfilesForUse(paths = resolveRuntimePaths()) {
 async function getHermesProfileStatus(name, paths = resolveRuntimePaths()) {
   assertProfileName(name);
   const profile = await profileInfo(name, paths);
-  const exists = await stat12(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+  const exists = await stat13(profile.path).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError14(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -17445,7 +17710,7 @@ async function readHermesProfileCapabilities(name) {
   return {
     defaultModel: listedModels?.defaultModel ?? null,
     modelCount: listedModels?.models.length ?? 0,
-    skillCount: await countSkills(path19.join(profileDir, "skills")).catch(
+    skillCount: await countSkills(path20.join(profileDir, "skills")).catch(
       () => 0
     ),
     toolCount: await countConfiguredTools(name).catch(() => 0)
@@ -17488,8 +17753,8 @@ function assertProfileName(name) {
   }
 }
 async function pathExists(targetPath) {
-  return await stat12(targetPath).then(() => true).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+  return await stat13(targetPath).then(() => true).catch((error) => {
+    if (isNodeError14(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -17497,8 +17762,8 @@ async function pathExists(targetPath) {
 }
 async function hasDefaultProfileConfigSource() {
   const profilePath = resolveHermesProfileDir(DEFAULT_PROFILE);
-  const profileStat = await stat12(profilePath).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+  const profileStat = await stat13(profilePath).catch((error) => {
+    if (isNodeError14(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -17506,7 +17771,7 @@ async function hasDefaultProfileConfigSource() {
   if (!profileStat?.isDirectory()) {
     return false;
   }
-  return await pathExists(resolveHermesConfigPath(DEFAULT_PROFILE)) || await pathExists(path19.join(profilePath, ".env"));
+  return await pathExists(resolveHermesConfigPath(DEFAULT_PROFILE)) || await pathExists(path20.join(profilePath, ".env"));
 }
 async function deleteHermesProfileWithCli(name) {
   try {
@@ -17619,7 +17884,7 @@ function isProcessRunning(pid) {
     process.kill(pid, 0);
     return true;
   } catch (error) {
-    return isNodeError13(error, "EPERM");
+    return isNodeError14(error, "EPERM");
   }
 }
 async function waitForProfilePathToRemainAbsent(profilePath) {
@@ -17656,7 +17921,7 @@ function readExecErrorOutput2(error) {
   }
   return parts.join("\n");
 }
-function isNodeError13(error, code) {
+function isNodeError14(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function errorMessage(error) {
@@ -17668,7 +17933,7 @@ function escapeRegExp2(value) {
 async function countSkills(root) {
   const entries = await readdir8(root, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError13(error, "ENOENT")) {
+      if (isNodeError14(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -17676,7 +17941,7 @@ async function countSkills(root) {
   );
   let count = 0;
   for (const entry of entries) {
-    const entryPath = path19.join(root, entry.name);
+    const entryPath = path20.join(root, entry.name);
     if (entry.name === ".git" || entry.name === ".hub") {
       continue;
     }
@@ -17695,7 +17960,7 @@ async function countConfiguredTools(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError13(error, "ENOENT")) {
+    if (isNodeError14(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -17729,9 +17994,14 @@ function toRecord9(value) {
 }
 
 // src/hermes/usage-probe.ts
-var HERMES_USAGE_PROBE_PLUGIN_KEY = "hermespilot-usage-probe";
-var PLUGIN_VERSION = "1.0.0";
-var MANAGED_MARKER = "HERMESPILOT_USAGE_PROBE_MANAGED";
+var HERMESPILOT_LINK_PLUGIN_KEY = "hermespilot-link";
+var HERMES_USAGE_PROBE_PLUGIN_KEY = HERMESPILOT_LINK_PLUGIN_KEY;
+var PLUGIN_VERSION = "2.0.0";
+var LEGACY_PLUGIN_KEY = "hermespilot-usage-probe";
+var MANAGED_MARKER = "HERMESPILOT_LINK_PLUGIN_MANAGED";
+var LEGACY_MANAGED_MARKER = "HERMESPILOT_USAGE_PROBE_MANAGED";
+var HERMESPILOT_LINK_TOOLSET = "hermespilot_link";
+var HERMESPILOT_DELIVER_TOOL = "hermeslink_deliver";
 var USAGE_PROBE_DIR = "hermes-usage-probe";
 var USAGE_PROBE_STATE_FILE = "state.json";
 var EVENTS_FILE_NAME = "events.jsonl";
@@ -17763,7 +18033,7 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
   const normalizedProfile = normalizeProfileName3(profileName);
   const profilePath = resolveHermesProfileDir(normalizedProfile);
   const configPath = resolveHermesConfigPath(normalizedProfile);
-  const pluginPath = path20.join(
+  const pluginPath = path21.join(
     profilePath,
     "plugins",
     HERMES_USAGE_PROBE_PLUGIN_KEY
@@ -17789,7 +18059,7 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
     return { ...base(), skipped: true };
   }
   try {
-    await ensureDirectoryWithInheritedMetadata(path20.dirname(eventsPath), 448);
+    await ensureDirectoryWithInheritedMetadata(path21.dirname(eventsPath), 448);
     const state = await readUsageProbeState(paths);
     const pluginState = state.profiles[normalizedProfile];
     const currentConfig = await readUsageProbeConfigStatus({
@@ -17801,6 +18071,8 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
     if (currentConfig.disabledByUser || currentConfig.error) {
       const result2 = {
         ...base(),
+        changed: currentConfig.changed,
+        configChanged: currentConfig.changed,
         enabled: currentConfig.enabled,
         disabledByUser: currentConfig.disabledByUser,
         error: currentConfig.error
@@ -17812,11 +18084,15 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
       });
       return result2;
     }
+    const linkConfig = await loadConfig(paths).catch(() => defaultLinkConfig);
+    const internalBaseUrl = `http://127.0.0.1:${linkConfig.port || defaultLinkConfig.port}`;
     const pluginChanged = await writeUsageProbePlugin({
       profileName: normalizedProfile,
       pluginPath,
-      eventsPath
+      eventsPath,
+      internalBaseUrl
     });
+    const legacyCleanupChanged = await cleanupLegacyUsageProbePlugin(profilePath);
     const configResult = await ensurePluginEnabledInConfig({
       profileName: normalizedProfile,
       configPath,
@@ -17824,12 +18100,12 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
       language: options.language,
       retryLinkDisabled: options.retryLinkDisabled
     });
-    const changed = pluginChanged || configResult.changed;
+    const changed = pluginChanged || legacyCleanupChanged || configResult.changed;
     const needsActivation = configResult.enabled && (changed || needsUsageProbeGatewayActivation(pluginState));
     const result = {
       ...base(),
       changed,
-      pluginChanged,
+      pluginChanged: pluginChanged || legacyCleanupChanged,
       configChanged: configResult.changed,
       enabled: configResult.enabled,
       disabledByUser: configResult.disabledByUser,
@@ -17883,7 +18159,7 @@ async function findHermesUsageProbeEventForRun(input) {
   const eventsPath = resolveUsageProbeEventsPath(paths, profileName);
   const raw = await readTail2(eventsPath, MAX_EVENT_READ_BYTES).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -17916,7 +18192,7 @@ async function findHermesUsageProbeEventForRun(input) {
   return aggregateUsageProbeEvents(events.sort(compareUsageProbeEventsByTime));
 }
 function resolveUsageProbeEventsPath(paths = resolveRuntimePaths(), profileName = "default") {
-  return path20.join(
+  return path21.join(
     paths.homeDir,
     USAGE_PROBE_DIR,
     safeProfileSegment(profileName),
@@ -17940,17 +18216,21 @@ function summarizeUsageProbeEnsure(result) {
   };
 }
 async function writeUsageProbePlugin(input) {
-  const manifestPath = path20.join(input.pluginPath, "plugin.yaml");
-  const initPath = path20.join(input.pluginPath, "__init__.py");
+  const manifestPath = path21.join(input.pluginPath, "plugin.yaml");
+  const initPath = path21.join(input.pluginPath, "__init__.py");
   const manifest = usageProbeManifest();
-  const source = usageProbePythonSource(input.profileName, input.eventsPath);
+  const source = usageProbePythonSource(
+    input.profileName,
+    input.eventsPath,
+    input.internalBaseUrl
+  );
   const manifestChanged = await writeManagedFile(manifestPath, manifest);
   const sourceChanged = await writeManagedFile(initPath, source);
   return manifestChanged || sourceChanged;
 }
 async function writeManagedFile(filePath, content) {
   const existing = await readFile13(filePath, "utf8").catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+    if (isNodeError15(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -17958,7 +18238,7 @@ async function writeManagedFile(filePath, content) {
   if (existing === content) {
     return false;
   }
-  if (existing !== null && !existing.includes(MANAGED_MARKER)) {
+  if (existing !== null && !existing.includes(MANAGED_MARKER) && !existing.includes(LEGACY_MANAGED_MARKER)) {
     throw new Error(
       `Refusing to overwrite unmanaged Hermes plugin file: ${filePath}`
     );
@@ -17990,8 +18270,16 @@ async function ensurePluginEnabledInConfig(input) {
       error: `plugins.enabled in ${input.configPath} is not a list`
     };
   }
-  const enabled = enabledEntries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY);
-  const disabled = disabledEntries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY);
+  if (plugins.disabled !== void 0 && !Array.isArray(plugins.disabled)) {
+    return {
+      changed: false,
+      enabled: false,
+      disabledByUser: false,
+      error: `plugins.disabled in ${input.configPath} is not a list`
+    };
+  }
+  const enabled = hasManagedPluginEntry(enabledEntries);
+  const disabled = hasManagedPluginEntry(disabledEntries);
   const previouslyEnabled = Boolean(input.previousState?.enabled_at);
   const disabledByLinkForCurrentVersion = Boolean(input.previousState?.disabled_by_link_at) && input.previousState?.disabled_plugin_version === PLUGIN_VERSION;
   if (!enabled && disabledByLinkForCurrentVersion && !input.retryLinkDisabled) {
@@ -18004,37 +18292,111 @@ async function ensurePluginEnabledInConfig(input) {
   }
   const disabledByUser = disabled || previouslyEnabled && !enabled && !input.previousState?.disabled_by_link_at;
   if (disabledByUser) {
+    const changed2 = normalizeDisabledPluginConfig(plugins, enabledEntries, disabledEntries);
+    if (changed2) {
+      await writeHermesConfigDocument2({
+        configPath: input.configPath,
+        document,
+        config,
+        existingRaw
+      });
+    }
     return {
-      changed: false,
+      changed: changed2,
       enabled: false,
       disabledByUser: true,
       error: null
     };
   }
-  if (enabled) {
-    return {
-      changed: false,
-      enabled: true,
-      disabledByUser: false,
-      error: null
-    };
+  let changed = normalizeEnabledPluginConfig(
+    plugins,
+    enabledEntries,
+    disabledEntries
+  );
+  changed = ensureApiServerToolsetEnabled(config) || changed;
+  if (changed) {
+    await writeHermesConfigDocument2({
+      configPath: input.configPath,
+      document,
+      config,
+      existingRaw
+    });
   }
-  plugins.enabled = [...enabledEntries, HERMES_USAGE_PROBE_PLUGIN_KEY];
-  await writeHermesConfigDocument2({
-    configPath: input.configPath,
-    document,
-    config,
-    existingRaw
-  });
   return {
-    changed: true,
+    changed,
     enabled: true,
     disabledByUser: false,
     error: null
   };
 }
+function hasManagedPluginEntry(entries) {
+  return entries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY) || entries.includes(LEGACY_PLUGIN_KEY);
+}
+function normalizeEnabledPluginConfig(plugins, enabledEntries, disabledEntries) {
+  const nextEnabled = uniqueStrings([
+    ...enabledEntries.filter(
+      (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
+    ),
+    HERMES_USAGE_PROBE_PLUGIN_KEY
+  ]);
+  const nextDisabled = uniqueStrings(
+    disabledEntries.filter(
+      (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
+    )
+  );
+  const changed = !sameStringList(enabledEntries, nextEnabled) || !sameStringList(disabledEntries, nextDisabled);
+  plugins.enabled = nextEnabled;
+  if (nextDisabled.length > 0) {
+    plugins.disabled = nextDisabled;
+  } else {
+    delete plugins.disabled;
+  }
+  return changed;
+}
+function normalizeDisabledPluginConfig(plugins, enabledEntries, disabledEntries) {
+  const nextEnabled = uniqueStrings(
+    enabledEntries.filter(
+      (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
+    )
+  );
+  const nextDisabled = uniqueStrings([
+    ...disabledEntries.filter(
+      (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
+    ),
+    HERMES_USAGE_PROBE_PLUGIN_KEY
+  ]);
+  const changed = !sameStringList(enabledEntries, nextEnabled) || !sameStringList(disabledEntries, nextDisabled);
+  plugins.enabled = nextEnabled;
+  plugins.disabled = nextDisabled;
+  return changed;
+}
+function ensureApiServerToolsetEnabled(config) {
+  const platformToolsets = isRecord3(config.platform_toolsets) ? config.platform_toolsets : null;
+  const knownPluginToolsets = isRecord3(config.known_plugin_toolsets) ? config.known_plugin_toolsets : null;
+  const apiServerToolsets = readStringList3(platformToolsets?.api_server);
+  const knownApiServerToolsets = readStringList3(
+    knownPluginToolsets?.api_server
+  );
+  if (apiServerToolsets.length === 0 && !Array.isArray(platformToolsets?.api_server) && !knownApiServerToolsets.includes(HERMESPILOT_LINK_TOOLSET)) {
+    return false;
+  }
+  const nextToolsets = uniqueStrings([
+    ...Array.isArray(platformToolsets?.api_server) ? apiServerToolsets : ["hermes-api-server"],
+    HERMESPILOT_LINK_TOOLSET
+  ]);
+  const nextKnownToolsets = uniqueStrings([
+    ...knownApiServerToolsets,
+    HERMESPILOT_LINK_TOOLSET
+  ]);
+  const nextPlatformToolsets = ensureRecord2(config, "platform_toolsets");
+  const nextKnownPluginToolsets = ensureRecord2(config, "known_plugin_toolsets");
+  const changed = !sameStringList(apiServerToolsets, nextToolsets) || !sameStringList(knownApiServerToolsets, nextKnownToolsets);
+  nextPlatformToolsets.api_server = nextToolsets;
+  nextKnownPluginToolsets.api_server = nextKnownToolsets;
+  return changed;
+}
 async function readUsageProbeConfigStatus(input) {
-  const { config } = await readHermesConfigDocument2(
+  const { document, config, existingRaw } = await readHermesConfigDocument2(
     input.configPath,
     input.language
   );
@@ -18042,7 +18404,8 @@ async function readUsageProbeConfigStatus(input) {
     return {
       enabled: false,
       disabledByUser: false,
-      error: `plugins in ${input.configPath} is not an object`
+      error: `plugins in ${input.configPath} is not an object`,
+      changed: false
     };
   }
   const plugins = toRecord10(config.plugins);
@@ -18050,27 +18413,47 @@ async function readUsageProbeConfigStatus(input) {
     return {
       enabled: false,
       disabledByUser: false,
-      error: `plugins.enabled in ${input.configPath} is not a list`
+      error: `plugins.enabled in ${input.configPath} is not a list`,
+      changed: false
+    };
+  }
+  if (plugins.disabled !== void 0 && !Array.isArray(plugins.disabled)) {
+    return {
+      enabled: false,
+      disabledByUser: false,
+      error: `plugins.disabled in ${input.configPath} is not a list`,
+      changed: false
     };
   }
   const enabledEntries = readStringList3(plugins.enabled);
   const disabledEntries = readStringList3(plugins.disabled);
-  const enabled = enabledEntries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY);
-  const disabled = disabledEntries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY);
+  const enabled = hasManagedPluginEntry(enabledEntries);
+  const disabled = hasManagedPluginEntry(disabledEntries);
   const previouslyEnabled = Boolean(input.previousState?.enabled_at);
   const disabledByLinkForCurrentVersion = Boolean(input.previousState?.disabled_by_link_at) && input.previousState?.disabled_plugin_version === PLUGIN_VERSION;
   if (!enabled && disabledByLinkForCurrentVersion && !input.retryLinkDisabled) {
     return {
       enabled: false,
       disabledByUser: false,
-      error: "usage probe was disabled automatically after the last Gateway restart failure"
+      error: "usage probe was disabled automatically after the last Gateway restart failure",
+      changed: false
     };
   }
   const disabledByUser = disabled || previouslyEnabled && !enabled && !input.previousState?.disabled_by_link_at;
+  const changed = disabledByUser && disabled ? normalizeDisabledPluginConfig(plugins, enabledEntries, disabledEntries) : false;
+  if (changed) {
+    await writeHermesConfigDocument2({
+      configPath: input.configPath,
+      document,
+      config,
+      existingRaw
+    });
+  }
   return {
-    enabled,
+    enabled: disabledByUser ? false : enabled,
     disabledByUser,
-    error: null
+    error: null,
+    changed
   };
 }
 async function activateUsageProbeGateway(input) {
@@ -18159,11 +18542,11 @@ async function disableUsageProbeAfterActivationFailure(input) {
   );
   const plugins = ensureRecord2(config, "plugins");
   const enabledEntries = readStringList3(plugins.enabled);
-  if (!enabledEntries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY)) {
+  if (!hasManagedPluginEntry(enabledEntries)) {
     return;
   }
   plugins.enabled = enabledEntries.filter(
-    (entry) => entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
+    (entry) => entry !== HERMES_USAGE_PROBE_PLUGIN_KEY && entry !== LEGACY_PLUGIN_KEY
   );
   await writeHermesConfigDocument2({
     configPath: input.configPath,
@@ -18180,6 +18563,35 @@ async function disableUsageProbeAfterActivationFailure(input) {
     profile: input.profileName
   });
 }
+async function cleanupLegacyUsageProbePlugin(profilePath) {
+  const legacyPath = path21.join(profilePath, "plugins", LEGACY_PLUGIN_KEY);
+  const [manifest, init] = await Promise.all([
+    readFile13(path21.join(legacyPath, "plugin.yaml"), "utf8").catch(
+      (error) => {
+        if (isNodeError15(error, "ENOENT")) {
+          return null;
+        }
+        throw error;
+      }
+    ),
+    readFile13(path21.join(legacyPath, "__init__.py"), "utf8").catch(
+      (error) => {
+        if (isNodeError15(error, "ENOENT")) {
+          return null;
+        }
+        throw error;
+      }
+    )
+  ]);
+  if (!manifest && !init) {
+    return false;
+  }
+  if (!manifest?.includes(LEGACY_MANAGED_MARKER) && !init?.includes(LEGACY_MANAGED_MARKER)) {
+    return false;
+  }
+  await rm6(legacyPath, { recursive: true, force: true });
+  return true;
+}
 async function readUsageProbeState(paths) {
   const emptyState = {
     schema_version: 1,
@@ -18211,12 +18623,12 @@ async function rememberUsageProbeState(paths, profileName, patch) {
   }));
 }
 function usageProbeStatePath(paths) {
-  return path20.join(paths.homeDir, USAGE_PROBE_DIR, USAGE_PROBE_STATE_FILE);
+  return path21.join(paths.homeDir, USAGE_PROBE_DIR, USAGE_PROBE_STATE_FILE);
 }
 async function readHermesConfigDocument2(configPath, language) {
   const existingRaw = await readFile13(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -18247,7 +18659,7 @@ async function writeHermesConfigDocument2(input) {
   );
 }
 async function readTail2(filePath, maxBytes) {
-  const info = await stat13(filePath);
+  const info = await stat14(filePath);
   const length = Math.min(info.size, maxBytes);
   if (length <= 0) {
     return "";
@@ -18271,7 +18683,7 @@ function parseUsageProbeEvent(line) {
     if (payload.event !== "post_api_request") {
       return null;
     }
-    const profile = readString11(payload.profile);
+    const profile = readString12(payload.profile);
     const promptTokens = readInteger2(payload.prompt_tokens) ?? readInteger2(payload.input_tokens);
     if (!profile || promptTokens === void 0) {
       return null;
@@ -18279,17 +18691,17 @@ function parseUsageProbeEvent(line) {
     const completionTokens = readInteger2(payload.completion_tokens) ?? readInteger2(payload.output_tokens) ?? 0;
     return {
       profile,
-      sessionId: readString11(payload.session_id),
-      taskId: readString11(payload.task_id),
+      sessionId: readString12(payload.session_id),
+      taskId: readString12(payload.task_id),
       apiCallCount: readInteger2(payload.api_call_count) ?? 0,
       promptTokens,
       completionTokens,
       totalTokens: readInteger2(payload.total_tokens) ?? promptTokens + completionTokens,
-      model: readString11(payload.model),
-      provider: readString11(payload.provider),
-      apiMode: readString11(payload.api_mode),
-      finishReason: readString11(payload.finish_reason),
-      createdAt: readString11(payload.created_at) ?? (/* @__PURE__ */ new Date(0)).toISOString()
+      model: readString12(payload.model),
+      provider: readString12(payload.provider),
+      apiMode: readString12(payload.api_mode),
+      finishReason: readString12(payload.finish_reason),
+      createdAt: readString12(payload.created_at) ?? (/* @__PURE__ */ new Date(0)).toISOString()
     };
   } catch {
     return null;
@@ -18331,27 +18743,74 @@ function usageProbeManifest() {
     `# ${MANAGED_MARKER}`,
     `name: ${HERMES_USAGE_PROBE_PLUGIN_KEY}`,
     `version: ${JSON.stringify(PLUGIN_VERSION)}`,
-    'description: "HermesPilot context usage probe. Records metadata-only token usage from Hermes API hooks."',
+    'description: "HermesPilot Link integration. Records metadata-only token usage and delivers files to HermesPilot App."',
     "author: HermesPilot",
+    "kind: standalone",
     "hooks:",
     "  - post_api_request",
+    "provides_tools:",
+    `  - ${HERMESPILOT_DELIVER_TOOL}`,
     ""
   ].join("\n");
 }
-function usageProbePythonSource(profileName, eventsPath) {
+function usageProbePythonSource(profileName, eventsPath, internalBaseUrl) {
   return `# ${MANAGED_MARKER}
 from __future__ import annotations
 
 import json
 import os
+import urllib.error
+import urllib.request
 from datetime import datetime, timezone
 from pathlib import Path
 
 PROBE_VERSION = ${JSON.stringify(PLUGIN_VERSION)}
 PROFILE_NAME = ${JSON.stringify(profileName)}
 EVENTS_FILE = ${JSON.stringify(eventsPath)}
+HERMESLINK_INTERNAL_BASE = ${JSON.stringify(internalBaseUrl)}
 MAX_EVENT_FILE_BYTES = 5 * 1024 * 1024
 
+try:
+    from tools.registry import tool_error, tool_result
+except Exception:
+    def tool_error(message, **extra):
+        payload = {"error": str(message)}
+        payload.update(extra)
+        return json.dumps(payload, ensure_ascii=False)
+
+    def tool_result(data=None, **kwargs):
+        return json.dumps(data if data is not None else kwargs, ensure_ascii=False)
+
+
+HERMESLINK_DELIVER_SCHEMA = {
+    "name": ${JSON.stringify(HERMESPILOT_DELIVER_TOOL)},
+    "description": "Deliver one or more local files to the current HermesPilot App conversation.",
+    "parameters": {
+        "type": "object",
+        "properties": {
+            "files": {
+                "type": "array",
+                "description": "Absolute local file paths to deliver to the App.",
+                "items": {
+                    "type": "object",
+                    "properties": {
+                        "path": {
+                            "type": "string",
+                            "description": "Absolute local path of a file to deliver.",
+                        },
+                        "caption": {
+                            "type": "string",
+                            "description": "Optional short label for the file.",
+                        },
+                    },
+                    "required": ["path"],
+                },
+            },
+        },
+        "required": ["files"],
+    },
+}
+
 
 def _read_int(value):
     if isinstance(value, bool):
@@ -18405,6 +18864,116 @@ def _append_event(event):
         return
 
 
+def _normalize_file_item(item):
+    if isinstance(item, str):
+        path = item.strip()
+        return {"path": path} if path else None
+    if not isinstance(item, dict):
+        return None
+    path = _read_str(item.get("path")) or _read_str(item.get("file"))
+    if not path:
+        return None
+    result = {"path": path}
+    caption = _read_str(item.get("caption"))
+    if caption:
+        result["caption"] = caption
+    return result
+
+
+def _normalize_files(args):
+    if not isinstance(args, dict):
+        return []
+    raw = args.get("files")
+    if raw is None:
+        raw = args.get("file") or args.get("path")
+    items = raw if isinstance(raw, list) else [raw]
+    files = []
+    for item in items:
+        normalized = _normalize_file_item(item)
+        if normalized:
+            files.append(normalized)
+    return files
+
+
+def _post_json(path, payload):
+    url = HERMESLINK_INTERNAL_BASE.rstrip("/") + path
+    data = json.dumps(payload, ensure_ascii=False).encode("utf-8")
+    request = urllib.request.Request(
+        url,
+        data=data,
+        method="POST",
+        headers={"content-type": "application/json"},
+    )
+    with urllib.request.urlopen(request, timeout=30) as response:
+        raw = response.read().decode("utf-8")
+    return json.loads(raw) if raw else {}
+
+
+def _error_message_from_http_error(error):
+    try:
+        raw = error.read().decode("utf-8")
+        payload = json.loads(raw)
+        if isinstance(payload, dict):
+            message = _read_str(payload.get("message")) or _read_str(payload.get("error"))
+            code = _read_str(payload.get("code"))
+            if message and code:
+                return f"{code}: {message}"
+            if message:
+                return message
+    except Exception:
+        pass
+    return f"HTTP {getattr(error, 'code', 'error')}"
+
+
+def _handle_hermeslink_deliver(args, task_id=None, session_id=None, **kwargs):
+    files = _normalize_files(args)
+    if not files:
+        return tool_error("No deliverable file path was provided.")
+    payload = {
+        "profile": PROFILE_NAME,
+        "files": files,
+    }
+    task_id_text = _read_str(task_id)
+    session_id_text = _read_str(session_id) or task_id_text
+    if task_id_text:
+        payload["task_id"] = task_id_text
+    if session_id_text:
+        payload["session_id"] = session_id_text
+    try:
+        result = _post_json("/internal/deliver-tool", payload)
+    except urllib.error.HTTPError as error:
+        return tool_error("Hermes Link delivery failed: " + _error_message_from_http_error(error))
+    except Exception as error:
+        return tool_error("Hermes Link delivery failed: " + str(error))
+    if not isinstance(result, dict) or result.get("ok") is not True:
+        return tool_error("Hermes Link delivery failed.")
+    imported = _read_int(result.get("imported_count")) or 0
+    failed = _read_int(result.get("failed_count")) or 0
+    skipped = _read_int(result.get("skipped_count")) or 0
+    staged = _read_int(result.get("staged_count")) or imported
+    if imported <= 0 and failed > 0:
+        return tool_error(
+            "Hermes Link could not deliver any files.",
+            staged_count=staged,
+            delivered_count=imported,
+            skipped_count=skipped,
+            failed_count=failed,
+        )
+    message = "Delivered file attachments to HermesPilot App."
+    if imported <= 0 and skipped > 0:
+        message = "No new file attachments were delivered because they were already handled or skipped."
+    elif failed > 0:
+        message = "Delivered some file attachments to HermesPilot App; some files failed."
+    return tool_result(
+        success=True,
+        message=message,
+        staged_count=staged,
+        delivered_count=imported,
+        skipped_count=skipped,
+        failed_count=failed,
+    )
+
+
 def _on_post_api_request(**kwargs):
     usage = kwargs.get("usage")
     prompt_tokens = _usage_int(usage, "input_tokens", "prompt_tokens")
@@ -18434,6 +19003,13 @@ def _on_post_api_request(**kwargs):
 
 def register(ctx):
     ctx.register_hook("post_api_request", _on_post_api_request)
+    ctx.register_tool(
+        name=${JSON.stringify(HERMESPILOT_DELIVER_TOOL)},
+        toolset=${JSON.stringify(HERMESPILOT_LINK_TOOLSET)},
+        schema=HERMESLINK_DELIVER_SCHEMA,
+        handler=_handle_hermeslink_deliver,
+        description="Deliver local files to HermesPilot App through Hermes Link.",
+    )
 `;
 }
 function withDefaultProfilePlaceholder(profiles) {
@@ -18480,7 +19056,13 @@ function readStringList3(value) {
   }
   return value.filter((entry) => typeof entry === "string").map((entry) => entry.trim()).filter(Boolean);
 }
-function readString11(value) {
+function uniqueStrings(entries) {
+  return [...new Set(entries.map((entry) => entry.trim()).filter(Boolean))];
+}
+function sameStringList(left, right) {
+  return left.length === right.length && left.every((entry, index) => entry === right[index]);
+}
+function readString12(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readInteger2(value) {
@@ -18500,8 +19082,8 @@ function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function pathIsDirectory(filePath) {
-  return stat13(filePath).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  return stat14(filePath).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -18524,7 +19106,7 @@ function logEnsureResult(logger, source, profiles) {
 function errorMessage2(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isNodeError14(error, code) {
+function isNodeError15(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -18579,7 +19161,7 @@ function parseSseBlock(block) {
     return null;
   }
   const payload = toRecord11(decoded);
-  const payloadType = (readString12(payload, "type") ?? readString12(payload, "event") ?? readString12(payload, "object") ?? eventName) || "message";
+  const payloadType = (readString13(payload, "type") ?? readString13(payload, "event") ?? readString13(payload, "object") ?? eventName) || "message";
   return { eventName, payloadType, payload, rawPayload: decoded ?? raw };
 }
 function decodeJson(value) {
@@ -18595,7 +19177,7 @@ function decodeJson(value) {
     return { type: "message.delta", delta: value };
   }
 }
-function readString12(body, key) {
+function readString13(body, key) {
   const value = body[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -18627,8 +19209,8 @@ function isRunToolResultCompensationEnabled(env = process.env) {
 }
 
 // src/conversations/run-transcript-enrichment.ts
-import { readFile as readFile14, stat as stat14 } from "fs/promises";
-import path21 from "path";
+import { readFile as readFile14, stat as stat15 } from "fs/promises";
+import path22 from "path";
 var MESSAGE_COLUMNS2 = [
   "id",
   "session_id",
@@ -18704,8 +19286,8 @@ async function readRunFinalAssistantText(input) {
 }
 async function readHermesTranscriptRows(profileName, sessionId) {
   const profileDir = resolveHermesProfileDir(profileName);
-  const dbPath = path21.join(profileDir, "state.db");
-  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path21.join(profileDir, "sessions"));
+  const dbPath = path22.join(profileDir, "state.db");
+  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path22.join(profileDir, "sessions"));
   const [dbRows, jsonlRows] = await Promise.all([
     readStateDbMessages2(dbPath, sessionId),
     readJsonlMessages2(sessionsDir, sessionId)
@@ -18768,9 +19350,9 @@ async function readJsonlMessages2(sessionsDir, sessionId) {
   if (!/^[A-Za-z0-9._:-]{1,160}$/u.test(sessionId)) {
     return [];
   }
-  const transcriptPath = path21.join(sessionsDir, `${sessionId}.jsonl`);
+  const transcriptPath = path22.join(sessionsDir, `${sessionId}.jsonl`);
   const raw = await readFile14(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -18785,7 +19367,7 @@ async function readJsonlMessages2(sessionsDir, sessionId) {
     }
     try {
       const parsed = JSON.parse(line);
-      const role = readString13(parsed, "role");
+      const role = readString14(parsed, "role");
       if (!role) {
         continue;
       }
@@ -18814,8 +19396,8 @@ function normalizeHermesToolCall2(value) {
     return null;
   }
   const fn = toRecord12(record.function);
-  const id = readString13(record, "id") ?? readString13(record, "call_id") ?? readString13(record, "tool_call_id") ?? readString13(fn, "id") ?? void 0;
-  const name = readString13(fn, "name") ?? readString13(record, "name") ?? readString13(record, "tool_name") ?? readString13(record, "tool") ?? "tool";
+  const id = readString14(record, "id") ?? readString14(record, "call_id") ?? readString14(record, "tool_call_id") ?? readString14(fn, "id") ?? void 0;
+  const name = readString14(fn, "name") ?? readString14(record, "name") ?? readString14(record, "tool_name") ?? readString14(record, "tool") ?? "tool";
   const rawArguments = fn.arguments ?? record.arguments ?? record.args ?? record.input;
   return {
     ...id ? { id } : {},
@@ -18825,8 +19407,8 @@ function normalizeHermesToolCall2(value) {
   };
 }
 function consumePendingToolCall2(input) {
-  const toolCallId = readString13(input.toolMessage, "tool_call_id");
-  const toolName = readString13(input.toolMessage, "tool_name");
+  const toolCallId = readString14(input.toolMessage, "tool_call_id");
+  const toolName = readString14(input.toolMessage, "tool_name");
   let pending = toolCallId ? input.toolCallsById.get(toolCallId) : void 0;
   if (!pending && toolName) {
     pending = input.pendingToolCalls.find(
@@ -18849,8 +19431,8 @@ function consumePendingToolCall2(input) {
 function toolCompletedEvent(row, pending, existingEventId) {
   const output = normalizeContent3(row.content);
   const parsedOutput = parseJsonValue2(output);
-  const toolCallId = readString13(row, "tool_call_id") ?? pending?.toolCall.id;
-  const toolName = readString13(row, "tool_name") ?? pending?.toolCall.name ?? "tool";
+  const toolCallId = readString14(row, "tool_call_id") ?? pending?.toolCall.id;
+  const toolName = readString14(row, "tool_name") ?? pending?.toolCall.name ?? "tool";
   const payload = {
     type: "tool.completed",
     event: "tool.completed",
@@ -18894,7 +19476,7 @@ function groupReusableToolEventIds(events) {
   return grouped;
 }
 function consumeReusableToolEventId(grouped, pending, row) {
-  const toolName = pending?.toolCall.name ?? readString13(row, "tool_name") ?? "tool";
+  const toolName = pending?.toolCall.name ?? readString14(row, "tool_name") ?? "tool";
   const key = normalizeToolTitle(humanizeToolName2(toolName));
   const ids = grouped.get(key);
   const id = ids?.shift();
@@ -18949,7 +19531,7 @@ function normalizeContent3(value) {
         return item;
       }
       if (typeof item === "object" && item !== null) {
-        return readString13(item, "text") ?? "";
+        return readString14(item, "text") ?? "";
       }
       return "";
     }).filter(Boolean).join("");
@@ -18984,8 +19566,8 @@ function quoteIdentifier2(value) {
   return `"${value.replaceAll('"', '""')}"`;
 }
 async function isFile2(filePath) {
-  return stat14(filePath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+  return stat15(filePath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError16(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -18994,7 +19576,7 @@ async function isFile2(filePath) {
 function isValidProfileName3(value) {
   return typeof value === "string" && /^[a-zA-Z0-9._-]{1,64}$/u.test(value);
 }
-function readString13(payload, key) {
+function readString14(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -19015,7 +19597,7 @@ function readNumber3(value) {
 function toRecord12(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
-function isNodeError15(error, code) {
+function isNodeError16(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -19112,7 +19694,7 @@ var RunToolEventIdCoalescer = class {
   }
 };
 function readToolEventType(event) {
-  const type = readString14(event.payload, "type") ?? readString14(event.payload, "event") ?? event.payloadType;
+  const type = readString15(event.payload, "type") ?? readString15(event.payload, "event") ?? event.payloadType;
   return type.startsWith("tool.") ? type : null;
 }
 function isTerminalToolEvent(type) {
@@ -19123,14 +19705,14 @@ function hasStableToolEventId(payload) {
   const call = toRecord13(payload.tool_call ?? payload.toolCall);
   const fn = toRecord13(call.function ?? payload.function);
   return Boolean(
-    readString14(payload, "tool_call_id") ?? readString14(payload, "toolCallId") ?? readString14(payload, "call_id") ?? readString14(payload, "id") ?? readString14(tool, "id") ?? readString14(call, "id") ?? readString14(fn, "id")
+    readString15(payload, "tool_call_id") ?? readString15(payload, "toolCallId") ?? readString15(payload, "call_id") ?? readString15(payload, "id") ?? readString15(tool, "id") ?? readString15(call, "id") ?? readString15(fn, "id")
   );
 }
 function readToolName(payload) {
   const tool = toRecord13(payload.tool);
   const call = toRecord13(payload.tool_call ?? payload.toolCall);
   const fn = toRecord13(call.function ?? payload.function);
-  return readString14(payload, "tool_name") ?? readString14(payload, "toolName") ?? readString14(payload, "name") ?? readString14(payload, "tool") ?? readString14(tool, "name") ?? readString14(call, "name") ?? readString14(fn, "name") ?? "tool";
+  return readString15(payload, "tool_name") ?? readString15(payload, "toolName") ?? readString15(payload, "name") ?? readString15(payload, "tool") ?? readString15(tool, "name") ?? readString15(call, "name") ?? readString15(fn, "name") ?? "tool";
 }
 function withGeneratedToolEventId(event, id) {
   return {
@@ -19187,7 +19769,7 @@ function stableStringify2(value) {
 function hashStableValue(value) {
   return createHash4("sha256").update(value).digest("hex").slice(0, 16);
 }
-function readString14(payload, key) {
+function readString15(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -19215,8 +19797,8 @@ function normalizeHermesStreamEvent(event) {
     };
   }
   if (event.eventName === "hermes.tool.progress") {
-    const toolName = readString15(event.payload, "tool") ?? readString15(event.payload, "name") ?? "tool";
-    const preview = readString15(event.payload, "label") ?? readString15(event.payload, "preview") ?? toolName;
+    const toolName = readString16(event.payload, "tool") ?? readString16(event.payload, "name") ?? "tool";
+    const preview = readString16(event.payload, "label") ?? readString16(event.payload, "preview") ?? toolName;
     return {
       ...event,
       payloadType: "tool.started",
@@ -19292,7 +19874,7 @@ function normalizeHermesResponseEvent(event) {
 }
 function normalizeResponseCreated(event) {
   const response = toRecord14(event.payload.response ?? event.payload);
-  const responseId = readString15(response, "id") ?? readString15(event.payload, "id");
+  const responseId = readString16(response, "id") ?? readString16(event.payload, "id");
   return responseId ? {
     ...event,
     payloadType: "response.created",
@@ -19305,10 +19887,10 @@ function normalizeResponseCreated(event) {
 }
 function normalizeResponseOutputItemAdded(event) {
   const item = toRecord14(event.payload.item);
-  if (readString15(item, "type") !== "function_call") {
+  if (readString16(item, "type") !== "function_call") {
     return null;
   }
-  const toolName = readString15(item, "name") ?? "tool";
+  const toolName = readString16(item, "name") ?? "tool";
   const argumentsValue = parseJsonValue3(item.arguments) ?? item.arguments;
   return {
     ...event,
@@ -19318,16 +19900,16 @@ function normalizeResponseOutputItemAdded(event) {
       tool: toolName,
       tool_name: toolName,
       name: toolName,
-      tool_call_id: readString15(item, "call_id") ?? readString15(item, "id"),
+      tool_call_id: readString16(item, "call_id") ?? readString16(item, "id"),
       arguments: argumentsValue,
       preview: toolName,
-      response_item_id: readString15(item, "id") ?? void 0
+      response_item_id: readString16(item, "id") ?? void 0
     }
   };
 }
 function normalizeResponseOutputItemDone(event) {
   const item = toRecord14(event.payload.item);
-  if (readString15(item, "type") === "message") {
+  if (readString16(item, "type") === "message") {
     const delta = extractResponseAssistantText({ output: [item] });
     return delta ? {
       ...event,
@@ -19335,7 +19917,7 @@ function normalizeResponseOutputItemDone(event) {
       payload: { type: "message.delta", delta }
     } : null;
   }
-  if (readString15(item, "type") !== "function_call_output") {
+  if (readString16(item, "type") !== "function_call_output") {
     return null;
   }
   const output = readResponseItemOutput(item.output);
@@ -19345,12 +19927,12 @@ function normalizeResponseOutputItemDone(event) {
     payloadType: "tool.completed",
     payload: {
       type: "tool.completed",
-      tool_call_id: readString15(item, "call_id") ?? readString15(item, "id"),
-      status: readString15(item, "status") ?? "completed",
+      tool_call_id: readString16(item, "call_id") ?? readString16(item, "id"),
+      status: readString16(item, "status") ?? "completed",
       output,
       content: output,
       result: parsedOutput ?? output,
-      response_item_id: readString15(item, "id") ?? void 0
+      response_item_id: readString16(item, "id") ?? void 0
     }
   };
 }
@@ -19361,7 +19943,7 @@ function normalizeResponseCompleted(event) {
     payloadType: "run.completed",
     payload: {
       type: "run.completed",
-      response_id: readString15(response, "id") ?? readString15(event.payload, "id"),
+      response_id: readString16(response, "id") ?? readString16(event.payload, "id"),
       usage: toRecord14(response.usage),
       response
     }
@@ -19375,9 +19957,9 @@ function normalizeResponseFailed(event) {
     payloadType: "run.failed",
     payload: {
       type: "run.failed",
-      response_id: readString15(response, "id") ?? readString15(event.payload, "id"),
+      response_id: readString16(response, "id") ?? readString16(event.payload, "id"),
       error: {
-        message: readString15(error, "message") ?? readString15(event.payload, "message") ?? "Hermes run failed"
+        message: readString16(error, "message") ?? readString16(event.payload, "message") ?? "Hermes run failed"
       },
       usage: toRecord14(response.usage),
       response
@@ -19404,7 +19986,7 @@ function readErrorMessage3(payload) {
     return payload.error.trim();
   }
   const error = toRecord14(payload.error);
-  return readString15(error, "message") ?? readString15(payload, "message");
+  return readString16(error, "message") ?? readString16(payload, "message");
 }
 function readDelta(payload) {
   return readText2(payload, "delta") ?? readText2(payload, "text") ?? readText2(payload, "content");
@@ -19451,7 +20033,7 @@ function readChatCompletionDelta(payload) {
 }
 function readChatCompletionFinishReason(payload) {
   const choice = readFirstChoice(payload);
-  return readString15(choice, "finish_reason") ?? readString15(choice, "finishReason");
+  return readString16(choice, "finish_reason") ?? readString16(choice, "finishReason");
 }
 function readChatCompletionUsage(payload) {
   const usage = toRecord14(payload.usage);
@@ -19491,7 +20073,7 @@ function readAssistantTextFromChoices(payload) {
     return null;
   }
   const messages2 = choices.map(toRecord14).map((choice) => toRecord14(choice.message ?? choice.delta)).filter((message) => {
-    const role = readString15(message, "role");
+    const role = readString16(message, "role");
     return !role || role === "assistant";
   }).map(readResponseMessageText).filter((text) => Boolean(text?.trim()));
   return messages2.length > 0 ? messages2.join("\n\n") : null;
@@ -19507,7 +20089,7 @@ function readInteger3(payload, key) {
   }
   return void 0;
 }
-function readString15(payload, key) {
+function readString16(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -19520,8 +20102,8 @@ function readResponseOutputItemText(value) {
     return value;
   }
   const item = toRecord14(value);
-  const type = readString15(item, "type");
-  const role = readString15(item, "role");
+  const type = readString16(item, "type");
+  const role = readString16(item, "role");
   if (type && type !== "message" && type !== "output_text" && type !== "text") {
     return null;
   }
@@ -19547,7 +20129,7 @@ function readResponseContentText(value) {
       return partValue;
     }
     const part = toRecord14(partValue);
-    const type = readString15(part, "type");
+    const type = readString16(part, "type");
     if (type && !isVisibleResponseTextPart(type)) {
       return null;
     }
@@ -19695,7 +20277,17 @@ var ConversationRunLifecycle = class {
         });
         return void 0;
       });
-      const instructions = buildRunInstructions(run, deliveryStagingDir);
+      if (deliveryStagingDir) {
+        registerDeliveryContext({
+          conversationId,
+          runId,
+          profile: run.profile,
+          stagingDir: deliveryStagingDir,
+          sessionId: hermesSessionId,
+          taskId: hermesSessionId
+        });
+      }
+      const instructions = buildRunInstructions(run);
       let estimateConversationHistory = conversationHistory;
       if (!shouldBuildConversationHistory) {
         estimateConversationHistory = await buildConversationHistory({
@@ -19829,6 +20421,11 @@ var ConversationRunLifecycle = class {
         }
         const responseSessionId = response.headers.get("x-hermes-session-id")?.trim();
         if (responseSessionId) {
+          addDeliveryContextIdentifiers({
+            runId,
+            sessionId: responseSessionId,
+            taskId: responseSessionId
+          });
           await this.rememberRunHermesSessionId(
             conversationId,
             runId,
@@ -19864,6 +20461,11 @@ var ConversationRunLifecycle = class {
         await this.updateRun(conversationId, runId, {
           hermes_run_id: hermesRun.run_id
         });
+        addDeliveryContextIdentifiers({
+          runId,
+          sessionId: hermesSessionId,
+          taskId: hermesRun.run_id
+        });
         const response = await streamHermesRunEvents(hermesRun.run_id, {
           logger: this.deps.logger,
           profileName: run.profile,
@@ -19915,6 +20517,7 @@ var ConversationRunLifecycle = class {
       if (this.deps.activeRunControllers.get(runId)?.controller === controller) {
         this.deps.activeRunControllers.delete(runId);
       }
+      unregisterDeliveryContext(runId);
     }
   }
   async ensureUsageProbeBeforeRun(input) {
@@ -20780,7 +21383,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     }
     const textPart = assistant.parts.find((part) => part.type === "text");
     const currentText = textPart?.text ?? "";
-    const pendingDeliveryText = readString16(
+    const pendingDeliveryText = readString17(
       toRecord15(assistant.hermes),
       "pending_media_delivery_text"
     );
@@ -21195,7 +21798,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
       includeDisabled: true
     });
     return new Set(
-      jobs.map((job) => readString16(job, "id") ?? readString16(job, "job_id")).filter((id) => Boolean(id))
+      jobs.map((job) => readString17(job, "id") ?? readString17(job, "job_id")).filter((id) => Boolean(id))
     );
   }
   async bindNewCronJobsCreatedByRun(input) {
@@ -21215,16 +21818,9 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     });
   }
 };
-function buildRunInstructions(run, deliveryStagingDir) {
+function buildRunInstructions(run) {
   return [
     HERMES_LINK_DELIVERY_INSTRUCTIONS,
-    ...deliveryStagingDir ? [
-      "",
-      "Delivery staging directory for this run:",
-      `- ${deliveryStagingDir}`,
-      "Copy every deliverable file into this directory, then run:",
-      `hermeslink deliver ${quoteShellArg(deliveryStagingDir)}`
-    ] : [],
     "",
     "Current runtime selected by Hermes Link:",
     `- Model: ${run.model ?? "hermes-agent"}`,
@@ -21268,9 +21864,6 @@ function appendMediaImportFailureNotice(message) {
     media_import_failure_notice_appended: true
   };
 }
-function quoteShellArg(value) {
-  return `'${value.replaceAll("'", "'\\''")}'`;
-}
 function formatMediaImportFailureNotice(failures, language = "zh-CN") {
   const filenames = failures.map((failure) => failure.filename);
   const target = language === "en" ? filenames.length === 1 ? `"${filenames[0]}"` : `${filenames.length} files (${formatFilenameList(filenames, language)})` : filenames.length === 1 ? `\u6587\u4EF6\u201C${filenames[0]}\u201D` : `${filenames.length} \u4E2A\u6587\u4EF6\uFF08${formatFilenameList(filenames, language)}\uFF09`;
@@ -21299,13 +21892,13 @@ function formatFilenameList(filenames, language = "zh-CN") {
 }
 async function readdirWithDirs(directory) {
   return readdir9(directory, { withFileTypes: true }).catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+    if (isNodeError17(error, "ENOENT")) {
       return [];
     }
     throw error;
   });
 }
-function readString16(payload, key) {
+function readString17(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -21402,13 +21995,13 @@ function isFileSearchCompletion(payloadType, payload) {
   const toolCall = toRecord15(payload.tool_call ?? payload.toolCall);
   const fn = toRecord15(toolCall.function ?? payload.function);
   const candidates = [
-    readString16(payload, "tool_name"),
-    readString16(payload, "toolName"),
-    readString16(payload, "name"),
-    readString16(payload, "tool"),
-    readString16(tool, "name"),
-    readString16(toolCall, "name"),
-    readString16(fn, "name")
+    readString17(payload, "tool_name"),
+    readString17(payload, "toolName"),
+    readString17(payload, "name"),
+    readString17(payload, "tool"),
+    readString17(tool, "name"),
+    readString17(toolCall, "name"),
+    readString17(fn, "name")
   ].filter((value) => Boolean(value)).map(normalizeToolName);
   return candidates.some(
     (name) => [
@@ -21646,13 +22239,13 @@ function readResponseId(payload) {
     return null;
   }
   const response = toRecord15(payload.response);
-  return readString16(payload, "response_id") ?? readString16(response, "id");
+  return readString17(payload, "response_id") ?? readString17(response, "id");
 }
 function readRunId(payload) {
   if (!payload) {
     return null;
   }
-  return readString16(payload, "run_id") ?? readString16(payload, "runId");
+  return readString17(payload, "run_id") ?? readString17(payload, "runId");
 }
 function isCompletedRunStatus(status) {
   return status === "completed" || status === "complete" || status === "succeeded" || status === "success" || status === "done";
@@ -21668,7 +22261,7 @@ function readStatusErrorMessage(value) {
     return value.trim();
   }
   const record = toRecord15(value);
-  return readString16(record, "message") ?? readString16(record, "error");
+  return readString17(record, "message") ?? readString17(record, "error");
 }
 function formatUnknownErrorMessage(error) {
   return error instanceof Error ? error.message : String(error);
@@ -21706,7 +22299,7 @@ async function sleep(ms, signal) {
     );
   });
 }
-function isNodeError16(error, code) {
+function isNodeError17(error, code) {
   if (typeof error !== "object" || error === null || !("code" in error)) {
     return false;
   }
@@ -22331,6 +22924,38 @@ var ConversationService = class {
       );
     });
   }
+  async deliverFilesFromTool(input) {
+    const files = normalizeDeliveryFileInputs(input.files);
+    if (files.length === 0) {
+      throw new LinkHttpError(
+        400,
+        "delivery_files_required",
+        "At least one deliverable file path is required"
+      );
+    }
+    const context = findDeliveryContext({
+      profile: input.profile,
+      taskId: input.taskId,
+      sessionId: input.sessionId
+    });
+    const staged = await copyFilesIntoDeliveryContext(
+      this.paths,
+      context,
+      files
+    );
+    if (staged.staged.length === 0) {
+      throw new LinkHttpError(
+        400,
+        "delivery_files_not_staged",
+        "No deliverable files could be staged"
+      );
+    }
+    return {
+      ...await this.deliverStagedFiles(context.stagingDir),
+      staged_count: staged.staged.length,
+      skipped_files: staged.skipped
+    };
+  }
   async getMessages(conversationId, options = {}) {
     return this.queries.getMessages(conversationId, options);
   }
@@ -23488,7 +24113,7 @@ async function readRawBody(request, maxBytes) {
   }
   return Buffer.concat(chunks);
 }
-function readString17(body, key) {
+function readString18(body, key) {
   const value = body[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -23523,7 +24148,7 @@ function readSupportedLanguage(value) {
   return null;
 }
 function readOptionalProfileName(body) {
-  return readString17(body, "profile") ?? readString17(body, "profile_name") ?? readString17(body, "profileName") ?? void 0;
+  return readString18(body, "profile") ?? readString18(body, "profile_name") ?? readString18(body, "profileName") ?? void 0;
 }
 function readStringArray(body, ...keys) {
   for (const key of keys) {
@@ -23872,11 +24497,15 @@ function registerConversationRoutes(router, options) {
   router.get("/api/v1/conversations", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
-    await prepareConversationListRead(conversations, logger, auth);
+    const cursor = readConversationListCursor(ctx.query);
+    const forceSync = readConversationListForce(ctx.query);
+    await prepareConversationListRead(conversations, logger, auth, {
+      syncHermesSessions: forceSync || !cursor
+    });
     ctx.set("cache-control", "no-store");
     const result = await conversations.listConversationPage({
       limit: readLimit(ctx.query.limit),
-      cursor: readQueryString(ctx.query.cursor) ?? readQueryString(ctx.query.after) ?? readQueryString(ctx.query.page_cursor)
+      cursor
     });
     const localized = localizeConversationListPage(result, language);
     ctx.body = {
@@ -23942,7 +24571,7 @@ function registerConversationRoutes(router, options) {
       ok: true,
       conversation: localizeConversationSummary(
         await conversations.createConversation({
-          title: readString17(body, "title") ?? void 0,
+          title: readString18(body, "title") ?? void 0,
           profileName: readOptionalProfileName(body),
           accountId: auth.accountId,
           appInstanceId: auth.appInstanceId
@@ -24021,7 +24650,7 @@ function registerConversationRoutes(router, options) {
     const auth = await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const content = readString17(body, "content") ?? readString17(body, "text") ?? readString17(body, "input") ?? "";
+    const content = readString18(body, "content") ?? readString18(body, "text") ?? readString18(body, "input") ?? "";
     const attachments = readMessageAttachments(body.attachments ?? body.blobs);
     if (!content && attachments.length === 0) {
       throw new LinkHttpError(
@@ -24038,7 +24667,7 @@ function registerConversationRoutes(router, options) {
           conversationId: ctx.params.conversationId,
           content,
           attachments,
-          clientMessageId: readString17(body, "client_message_id") ?? readString17(body, "clientMessageId") ?? void 0,
+          clientMessageId: readString18(body, "client_message_id") ?? readString18(body, "clientMessageId") ?? void 0,
           idempotencyKey: readHeader(ctx, "idempotency-key") ?? void 0,
           profileName: readOptionalProfileName(body),
           accountId: auth.accountId,
@@ -24052,7 +24681,7 @@ function registerConversationRoutes(router, options) {
   router.patch("/api/v1/conversations/:conversationId/model", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString17(body, "model_id") ?? readString17(body, "modelId") ?? readString17(body, "model");
+    const modelId = readString18(body, "model_id") ?? readString18(body, "modelId") ?? readString18(body, "model");
     if (!modelId) {
       throw new LinkHttpError(400, "model_id_required", "model_id is required");
     }
@@ -24087,7 +24716,7 @@ function registerConversationRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const title = readString17(body, "title") ?? readString17(body, "name") ?? readString17(body, "display_name");
+    const title = readString18(body, "title") ?? readString18(body, "name") ?? readString18(body, "display_name");
     if (!title) {
       throw new LinkHttpError(400, "title_required", "title is required");
     }
@@ -24281,7 +24910,7 @@ function registerConversationRoutes(router, options) {
     async (ctx) => {
       await authenticateRequest(ctx, paths);
       const body = await readJsonBody(ctx.req);
-      const scope = readString17(body, "scope") ?? "always";
+      const scope = readString18(body, "scope") ?? "always";
       ctx.body = {
         ok: true,
         ...await conversations.resolveApproval({
@@ -24389,7 +25018,15 @@ function registerConversationRoutes(router, options) {
     }
   );
 }
-async function prepareConversationListRead(conversations, logger, auth) {
+async function prepareConversationListRead(conversations, logger, auth, options = {}) {
+  if (options.syncHermesSessions) {
+    await conversations.syncHermesSessions().catch((error) => {
+      void logger.warn("hermes_session_sync_failed", {
+        source: "conversation_list_read",
+        error: error instanceof Error ? error.message : String(error)
+      });
+    });
+  }
   await conversations.backfillCronOwnership({
     accountId: auth.accountId,
     appInstanceId: auth.appInstanceId
@@ -24405,6 +25042,13 @@ async function prepareConversationListRead(conversations, logger, auth) {
     });
   });
 }
+function readConversationListCursor(query) {
+  return readQueryString(query.cursor) ?? readQueryString(query.after) ?? readQueryString(query.page_cursor);
+}
+function readConversationListForce(query) {
+  const raw = Array.isArray(query.force) ? query.force[0] : query.force;
+  return readBoolean3(raw) === true;
+}
 function localizeConversationListPage(page, language) {
   return {
     ...page,
@@ -24492,7 +25136,7 @@ function resolveConversationEventCursor(input) {
   return Math.max(queryAfter, headerAfter);
 }
 function readConversationClearPlanTargetStatus(body) {
-  const raw = readString17(body, "target_status") ?? readString17(body, "targetStatus") ?? "active";
+  const raw = readString18(body, "target_status") ?? readString18(body, "targetStatus") ?? "active";
   if (raw === "active" || raw === "archived") {
     return raw;
   }
@@ -24618,11 +25262,11 @@ function isSseRequestContext(ctx) {
   }
   return isSseRequestPath(ctx.path) || isActiveSseSocket(ctx.req.socket);
 }
-function isSseRequestPath(path31) {
-  if (!path31) {
+function isSseRequestPath(path32) {
+  if (!path32) {
     return false;
   }
-  return path31 === "/api/v1/conversations/events" || path31 === "/api/v1/profile-creation/events" || path31 === "/api/v1/hermes/update/events" || path31 === "/api/v1/link/update/events" || /^\/api\/v1\/conversations\/[^/]+\/events$/u.test(path31) || /^\/api\/v1\/runs\/[^/]+\/events$/u.test(path31);
+  return path32 === "/api/v1/conversations/events" || path32 === "/api/v1/profile-creation/events" || path32 === "/api/v1/hermes/update/events" || path32 === "/api/v1/link/update/events" || /^\/api\/v1\/conversations\/[^/]+\/events$/u.test(path32) || /^\/api\/v1\/runs\/[^/]+\/events$/u.test(path32);
 }
 function isExpectedClientDisconnectError2(error, options = {}) {
   if (!(error instanceof Error)) {
@@ -24723,6 +25367,7 @@ function registerCronJobRoutes(router, options) {
   router.get("/api/v1/profiles/:name/cron-jobs/:jobId", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
+    assertCronJobId(ctx.params.jobId);
     ctx.set("cache-control", "no-store");
     const job = await getHermesCronJob(ctx.params.jobId, {
       logger,
@@ -24736,9 +25381,46 @@ function registerCronJobRoutes(router, options) {
       )
     };
   });
+  router.get("/api/v1/profiles/:name/cron-jobs/:jobId/history", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    const profile = await getHermesProfileStatus(ctx.params.name, paths);
+    assertCronJobId(ctx.params.jobId);
+    ctx.set("cache-control", "no-store");
+    await getHermesCronJob(ctx.params.jobId, {
+      logger,
+      profileName: profile.name
+    });
+    const historyPage = await listHermesCronJobHistory({
+      profileName: profile.name,
+      jobId: ctx.params.jobId,
+      limit: readPositiveInteger2(ctx.query.limit),
+      offset: readPositiveInteger2(ctx.query.offset)
+    });
+    const history = historyPage.entries.map((entry) => ({
+      id: entry.id,
+      run_at: entry.runAt,
+      content: entry.content,
+      failed: entry.failed,
+      status: entry.status,
+      job_name: entry.jobName ?? null,
+      truncated: entry.truncated
+    }));
+    ctx.body = {
+      ok: true,
+      profile,
+      history,
+      pagination: {
+        total: historyPage.total,
+        offset: historyPage.offset,
+        limit: historyPage.limit,
+        has_more: historyPage.hasMore
+      }
+    };
+  });
   router.patch("/api/v1/profiles/:name/cron-jobs/:jobId", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
+    assertCronJobId(ctx.params.jobId);
     const body = await readJsonBody(ctx.req);
     const input = readCronJobUpdateInput(body);
     const deliverTouched = readOptionalCronText(body, "deliver").present;
@@ -24771,6 +25453,7 @@ function registerCronJobRoutes(router, options) {
   router.delete("/api/v1/profiles/:name/cron-jobs/:jobId", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
+    assertCronJobId(ctx.params.jobId);
     await deleteHermesCronJob(ctx.params.jobId, {
       logger,
       profileName: profile.name
@@ -24781,6 +25464,7 @@ function registerCronJobRoutes(router, options) {
   router.post("/api/v1/profiles/:name/cron-jobs/:jobId/pause", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
+    assertCronJobId(ctx.params.jobId);
     const job = await runHermesCronJobAction(ctx.params.jobId, "pause", {
       logger,
       profileName: profile.name
@@ -24796,6 +25480,7 @@ function registerCronJobRoutes(router, options) {
   router.post("/api/v1/profiles/:name/cron-jobs/:jobId/resume", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
+    assertCronJobId(ctx.params.jobId);
     const job = await runHermesCronJobAction(ctx.params.jobId, "resume", {
       logger,
       profileName: profile.name
@@ -24811,6 +25496,7 @@ function registerCronJobRoutes(router, options) {
   router.post("/api/v1/profiles/:name/cron-jobs/:jobId/run", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const profile = await getHermesProfileStatus(ctx.params.name, paths);
+    assertCronJobId(ctx.params.jobId);
     const job = await runHermesCronJobAction(ctx.params.jobId, "run", {
       logger,
       profileName: profile.name
@@ -24844,7 +25530,7 @@ function toHermesCronJobInput(input) {
   };
 }
 async function bindAndDecorateCronJobForHermesLink(input) {
-  const jobId = readString17(input.job, "id") ?? readString17(input.job, "job_id");
+  const jobId = readString18(input.job, "id") ?? readString18(input.job, "job_id");
   if (!jobId) {
     return input.job;
   }
@@ -24863,9 +25549,9 @@ async function bindAndDecorateCronJobForHermesLink(input) {
 }
 function readCronJobCreateInput(body) {
   const input = {};
-  const name = readString17(body, "name") ?? readString17(body, "title");
-  const prompt = readString17(body, "prompt") ?? readString17(body, "description") ?? readString17(body, "task");
-  const schedule = readString17(body, "schedule");
+  const name = readString18(body, "name") ?? readString18(body, "title");
+  const prompt = readString18(body, "prompt") ?? readString18(body, "description") ?? readString18(body, "task");
+  const schedule = readString18(body, "schedule");
   if (!name) {
     throw new LinkHttpError(400, "cron_job_name_required", "name is required");
   }
@@ -24886,7 +25572,7 @@ function readCronJobCreateInput(body) {
   input.name = name;
   input.prompt = prompt;
   input.schedule = schedule;
-  input.deliver = readString17(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
+  input.deliver = readString18(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
   const skills = readOptionalCronSkills(body);
   if (skills) {
     input.skills = skills;
@@ -25006,6 +25692,12 @@ function attachCronJobProfile(job, profile) {
     }
   };
 }
+function assertCronJobId(jobId) {
+  if (/^[a-f0-9]{12}$/u.test(jobId)) {
+    return;
+  }
+  throw new LinkHttpError(400, "cron_job_id_invalid", "Invalid cron job id");
+}
 
 // src/http/routes/gateway-reload.ts
 async function reloadGatewayAfterModelConfigChange(result, options) {
@@ -25213,9 +25905,9 @@ function registerModelConfigRoutes(router, options) {
   });
 }
 function readModelConfigInput(body) {
-  const id = readString17(body, "id") ?? readString17(body, "model_id") ?? readString17(body, "modelId");
-  const provider = readString17(body, "provider") ?? readString17(body, "provider_key") ?? readString17(body, "providerKey");
-  const baseUrl = readString17(body, "base_url") ?? readString17(body, "baseUrl");
+  const id = readString18(body, "id") ?? readString18(body, "model_id") ?? readString18(body, "modelId");
+  const provider = readString18(body, "provider") ?? readString18(body, "provider_key") ?? readString18(body, "providerKey");
+  const baseUrl = readString18(body, "base_url") ?? readString18(body, "baseUrl");
   if (!id || !provider || !baseUrl) {
     throw new LinkHttpError(
       400,
@@ -25225,21 +25917,21 @@ function readModelConfigInput(body) {
   }
   return {
     id,
-    originalModelId: readString17(body, "original_model_id") ?? readString17(body, "originalModelId") ?? readString17(body, "original_id") ?? void 0,
-    originalProvider: readString17(body, "original_provider") ?? readString17(body, "originalProvider") ?? readString17(body, "original_provider_key") ?? readString17(body, "originalProviderKey") ?? void 0,
-    originalBaseUrl: readString17(body, "original_base_url") ?? readString17(body, "originalBaseUrl") ?? void 0,
-    originalApiMode: readString17(body, "original_api_mode") ?? readString17(body, "originalApiMode") ?? void 0,
+    originalModelId: readString18(body, "original_model_id") ?? readString18(body, "originalModelId") ?? readString18(body, "original_id") ?? void 0,
+    originalProvider: readString18(body, "original_provider") ?? readString18(body, "originalProvider") ?? readString18(body, "original_provider_key") ?? readString18(body, "originalProviderKey") ?? void 0,
+    originalBaseUrl: readString18(body, "original_base_url") ?? readString18(body, "originalBaseUrl") ?? void 0,
+    originalApiMode: readString18(body, "original_api_mode") ?? readString18(body, "originalApiMode") ?? void 0,
     provider,
-    providerName: readString17(body, "provider_name") ?? readString17(body, "providerName") ?? void 0,
+    providerName: readString18(body, "provider_name") ?? readString18(body, "providerName") ?? void 0,
     baseUrl,
-    apiKey: readString17(body, "api_key") ?? readString17(body, "apiKey") ?? void 0,
-    apiMode: readString17(body, "api_mode") ?? readString17(body, "apiMode") ?? void 0,
+    apiKey: readString18(body, "api_key") ?? readString18(body, "apiKey") ?? void 0,
+    apiMode: readString18(body, "api_mode") ?? readString18(body, "apiMode") ?? void 0,
     contextLength: readPositiveInteger2(
       body.context_length ?? body.contextLength
     ),
-    keyEnv: readString17(body, "key_env") ?? readString17(body, "keyEnv") ?? void 0,
+    keyEnv: readString18(body, "key_env") ?? readString18(body, "keyEnv") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault),
-    reasoningEffort: readString17(body, "reasoning_effort") ?? readString17(body, "reasoningEffort") ?? void 0,
+    reasoningEffort: readString18(body, "reasoning_effort") ?? readString18(body, "reasoningEffort") ?? void 0,
     supportsVision: readNullableBoolean(
       body.supports_vision ?? body.supportsVision
     )
@@ -25247,28 +25939,28 @@ function readModelConfigInput(body) {
 }
 function readModelDefaultsInput(body) {
   return {
-    taskModelId: readString17(body, "task_model_id") ?? readString17(body, "taskModelId") ?? readString17(body, "default_model_id") ?? readString17(body, "defaultModelId") ?? void 0,
-    taskModelProvider: readString17(body, "task_model_provider") ?? readString17(body, "taskModelProvider") ?? readString17(body, "default_model_provider") ?? readString17(body, "defaultModelProvider") ?? void 0,
-    taskModelBaseUrl: readString17(body, "task_model_base_url") ?? readString17(body, "taskModelBaseUrl") ?? readString17(body, "default_model_base_url") ?? readString17(body, "defaultModelBaseUrl") ?? void 0,
-    taskModelApiMode: readString17(body, "task_model_api_mode") ?? readString17(body, "taskModelApiMode") ?? readString17(body, "default_model_api_mode") ?? readString17(body, "defaultModelApiMode") ?? void 0,
-    compressionModelId: readString17(body, "compression_model_id") ?? readString17(body, "compressionModelId") ?? void 0,
-    compressionModelProvider: readString17(body, "compression_model_provider") ?? readString17(body, "compressionModelProvider") ?? void 0,
-    compressionModelBaseUrl: readString17(body, "compression_model_base_url") ?? readString17(body, "compressionModelBaseUrl") ?? void 0,
-    compressionModelApiMode: readString17(body, "compression_model_api_mode") ?? readString17(body, "compressionModelApiMode") ?? void 0,
-    reasoningEffort: readString17(body, "reasoning_effort") ?? readString17(body, "reasoningEffort") ?? readString17(body, "default_reasoning_effort") ?? readString17(body, "defaultReasoningEffort") ?? void 0,
-    imageInputMode: readString17(body, "image_input_mode") ?? readString17(body, "imageInputMode") ?? void 0
+    taskModelId: readString18(body, "task_model_id") ?? readString18(body, "taskModelId") ?? readString18(body, "default_model_id") ?? readString18(body, "defaultModelId") ?? void 0,
+    taskModelProvider: readString18(body, "task_model_provider") ?? readString18(body, "taskModelProvider") ?? readString18(body, "default_model_provider") ?? readString18(body, "defaultModelProvider") ?? void 0,
+    taskModelBaseUrl: readString18(body, "task_model_base_url") ?? readString18(body, "taskModelBaseUrl") ?? readString18(body, "default_model_base_url") ?? readString18(body, "defaultModelBaseUrl") ?? void 0,
+    taskModelApiMode: readString18(body, "task_model_api_mode") ?? readString18(body, "taskModelApiMode") ?? readString18(body, "default_model_api_mode") ?? readString18(body, "defaultModelApiMode") ?? void 0,
+    compressionModelId: readString18(body, "compression_model_id") ?? readString18(body, "compressionModelId") ?? void 0,
+    compressionModelProvider: readString18(body, "compression_model_provider") ?? readString18(body, "compressionModelProvider") ?? void 0,
+    compressionModelBaseUrl: readString18(body, "compression_model_base_url") ?? readString18(body, "compressionModelBaseUrl") ?? void 0,
+    compressionModelApiMode: readString18(body, "compression_model_api_mode") ?? readString18(body, "compressionModelApiMode") ?? void 0,
+    reasoningEffort: readString18(body, "reasoning_effort") ?? readString18(body, "reasoningEffort") ?? readString18(body, "default_reasoning_effort") ?? readString18(body, "defaultReasoningEffort") ?? void 0,
+    imageInputMode: readString18(body, "image_input_mode") ?? readString18(body, "imageInputMode") ?? void 0
   };
 }
 function readModelDeleteInput(body) {
-  const id = readString17(body, "model_id") ?? readString17(body, "modelId");
+  const id = readString18(body, "model_id") ?? readString18(body, "modelId");
   if (!id) {
     throw new LinkHttpError(400, "model_id_required", "model_id is required");
   }
   return {
     id,
-    provider: readString17(body, "provider") ?? readString17(body, "provider_key") ?? readString17(body, "providerKey") ?? void 0,
-    baseUrl: readString17(body, "base_url") ?? readString17(body, "baseUrl") ?? void 0,
-    apiMode: readString17(body, "api_mode") ?? readString17(body, "apiMode") ?? void 0
+    provider: readString18(body, "provider") ?? readString18(body, "provider_key") ?? readString18(body, "providerKey") ?? void 0,
+    baseUrl: readString18(body, "base_url") ?? readString18(body, "baseUrl") ?? void 0,
+    apiMode: readString18(body, "api_mode") ?? readString18(body, "apiMode") ?? void 0
   };
 }
 function readNullableBoolean(value) {
@@ -25291,8 +25983,8 @@ function readNullableBoolean(value) {
   return void 0;
 }
 function readModelConfigImportInput(body) {
-  const sourceProfileName = readString17(body, "source_profile") ?? readString17(body, "sourceProfile") ?? readString17(body, "source_profile_name") ?? readString17(body, "sourceProfileName");
-  const modelId = readString17(body, "model_id") ?? readString17(body, "modelId") ?? readString17(body, "id");
+  const sourceProfileName = readString18(body, "source_profile") ?? readString18(body, "sourceProfile") ?? readString18(body, "source_profile_name") ?? readString18(body, "sourceProfileName");
+  const modelId = readString18(body, "model_id") ?? readString18(body, "modelId") ?? readString18(body, "id");
   if (!sourceProfileName || !modelId) {
     throw new LinkHttpError(
       400,
@@ -25303,9 +25995,9 @@ function readModelConfigImportInput(body) {
   return {
     sourceProfileName,
     modelId,
-    provider: readString17(body, "provider") ?? readString17(body, "provider_key") ?? readString17(body, "providerKey") ?? void 0,
-    baseUrl: readString17(body, "base_url") ?? readString17(body, "baseUrl") ?? void 0,
-    apiMode: readString17(body, "api_mode") ?? readString17(body, "apiMode") ?? void 0,
+    provider: readString18(body, "provider") ?? readString18(body, "provider_key") ?? readString18(body, "providerKey") ?? void 0,
+    baseUrl: readString18(body, "base_url") ?? readString18(body, "baseUrl") ?? void 0,
+    apiMode: readString18(body, "api_mode") ?? readString18(body, "apiMode") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault)
   };
 }
@@ -25396,20 +26088,20 @@ function errorMessage3(error) {
 }
 
 // src/hermes/profile-identity.ts
-import { readFile as readFile15, stat as stat15 } from "fs/promises";
-import path22 from "path";
+import { readFile as readFile15, stat as stat16 } from "fs/promises";
+import path23 from "path";
 var MAX_SOUL_MD_LENGTH = 2e4;
 async function readHermesProfileIdentity(profileName, paths) {
   await assertProfileExists2(profileName, paths);
   const soulPath = resolveSoulPath(profileName);
   const content = await readFile15(soulPath, "utf8").catch((error) => {
-    if (isNodeError17(error, "ENOENT")) {
+    if (isNodeError18(error, "ENOENT")) {
       return null;
     }
     throw error;
   });
-  const fileStat = content === null ? null : await stat15(soulPath).catch((error) => {
-    if (isNodeError17(error, "ENOENT")) {
+  const fileStat = content === null ? null : await stat16(soulPath).catch((error) => {
+    if (isNodeError18(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -25454,9 +26146,9 @@ async function assertProfileExists2(profileName, paths) {
   }
 }
 function resolveSoulPath(profileName) {
-  return path22.join(resolveHermesProfileDir(profileName), "SOUL.md");
+  return path23.join(resolveHermesProfileDir(profileName), "SOUL.md");
 }
-function isNodeError17(error, code) {
+function isNodeError18(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
 }
 
@@ -25465,18 +26157,18 @@ import { spawn as spawn2 } from "child_process";
 import { EventEmitter as EventEmitter2 } from "events";
 import {
   cp,
-  mkdir as mkdir11,
+  mkdir as mkdir12,
   readFile as readFile17,
-  rm as rm6,
-  stat as stat17
+  rm as rm7,
+  stat as stat18
 } from "fs/promises";
-import path24 from "path";
+import path25 from "path";
 import YAML5 from "yaml";
 
 // src/hermes/link-skill.ts
-import { readFile as readFile16, stat as stat16 } from "fs/promises";
+import { readFile as readFile16, stat as stat17 } from "fs/promises";
 import os5 from "os";
-import path23 from "path";
+import path24 from "path";
 import YAML4 from "yaml";
 var HERMES_LINK_SKILL_ROOT_DIR = "hermes-skills";
 var HERMES_LINK_SKILL_DIR = "hermes-link";
@@ -25561,7 +26253,7 @@ Do not modify Hermes profiles, delete user data, edit config files, or kill proc
 async function ensureHermesLinkSkillInstalledForProfiles(options = {}) {
   const paths = options.paths ?? resolveRuntimePaths();
   const externalDir = resolveHermesLinkSkillExternalDir(paths);
-  const skillPath = path23.join(
+  const skillPath = path24.join(
     externalDir,
     HERMES_LINK_SKILL_DIR,
     HERMES_LINK_SKILL_FILE
@@ -25643,11 +26335,11 @@ function withDefaultProfilePlaceholder2(profiles) {
   ];
 }
 function resolveHermesLinkSkillExternalDir(paths = resolveRuntimePaths()) {
-  return path23.join(paths.homeDir, HERMES_LINK_SKILL_ROOT_DIR);
+  return path24.join(paths.homeDir, HERMES_LINK_SKILL_ROOT_DIR);
 }
 async function writeHermesLinkSkill(skillPath) {
   const existing = await readFile16(skillPath, "utf8").catch((error) => {
-    if (isNodeError18(error, "ENOENT")) {
+    if (isNodeError19(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -25706,7 +26398,7 @@ async function ensureProfileUsesExternalSkillDir(profile, externalDir) {
 async function readHermesConfigDocument3(configPath) {
   const existingRaw = await readFile16(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError18(error, "ENOENT")) {
+      if (isNodeError19(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -25738,11 +26430,11 @@ function appendExternalDir(current, externalDir, hermesHome) {
   const seen = new Set(
     entries.map((entry) => resolveExternalDirEntry(entry, hermesHome))
   );
-  const normalizedExternalDir = path23.resolve(externalDir);
+  const normalizedExternalDir = path24.resolve(externalDir);
   return seen.has(normalizedExternalDir) ? entries : [...entries, normalizedExternalDir];
 }
 function externalDirsInclude(current, externalDir, hermesHome) {
-  const normalizedExternalDir = path23.resolve(externalDir);
+  const normalizedExternalDir = path24.resolve(externalDir);
   return readExternalDirEntries(current).some(
     (entry) => resolveExternalDirEntry(entry, hermesHome) === normalizedExternalDir
   );
@@ -25753,14 +26445,14 @@ function readExternalDirEntries(value) {
 }
 function resolveExternalDirEntry(entry, hermesHome) {
   const expanded = expandHome(expandEnvVars(entry));
-  return path23.resolve(path23.isAbsolute(expanded) ? expanded : path23.join(hermesHome, expanded));
+  return path24.resolve(path24.isAbsolute(expanded) ? expanded : path24.join(hermesHome, expanded));
 }
 function expandHome(value) {
   if (value === "~") {
     return os5.homedir();
   }
-  if (value.startsWith(`~${path23.sep}`) || value.startsWith("~/")) {
-    return path23.join(os5.homedir(), value.slice(2));
+  if (value.startsWith(`~${path24.sep}`) || value.startsWith("~/")) {
+    return path24.join(os5.homedir(), value.slice(2));
   }
   return value;
 }
@@ -25771,8 +26463,8 @@ function expandEnvVars(value) {
   );
 }
 async function pathIsDirectory2(filePath) {
-  return stat16(filePath).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError18(error, "ENOENT")) {
+  return stat17(filePath).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError19(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -25793,7 +26485,7 @@ function toRecord16(value) {
 function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function isNodeError18(error, code) {
+function isNodeError19(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
 }
 
@@ -25848,7 +26540,7 @@ async function startHermesProfileCreation(input, options) {
     identity_error: null,
     identity_template_id: normalized.identityTemplateId
   };
-  await mkdir11(options.paths.runDir, { recursive: true, mode: 448 });
+  await mkdir12(options.paths.runDir, { recursive: true, mode: 448 });
   await writeProfileCreationState(options.paths, started);
   await writer.write(`
 === profile creation started ${startedAt} ===
@@ -26312,9 +27004,9 @@ function collectEnvKeys(value, keys = /* @__PURE__ */ new Set()) {
   return keys;
 }
 async function writeEnvValues(profileName, values) {
-  const envPath = path24.join(resolveHermesProfileDir(profileName), ".env");
+  const envPath = path25.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile17(envPath, "utf8").catch((error) => {
-    if (isNodeError19(error, "ENOENT")) {
+    if (isNodeError20(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -26349,12 +27041,12 @@ async function writeEnvValues(profileName, values) {
   await atomicWriteFilePreservingMetadata(envPath, nextRaw);
 }
 async function copySkills(sourceProfile, targetProfile) {
-  const sourceSkills = path24.join(resolveHermesProfileDir(sourceProfile), "skills");
-  const targetSkills = path24.join(resolveHermesProfileDir(targetProfile), "skills");
+  const sourceSkills = path25.join(resolveHermesProfileDir(sourceProfile), "skills");
+  const targetSkills = path25.join(resolveHermesProfileDir(targetProfile), "skills");
   if (!await pathExists2(sourceSkills)) {
     return;
   }
-  await rm6(targetSkills, { recursive: true, force: true });
+  await rm7(targetSkills, { recursive: true, force: true });
   await cp(sourceSkills, targetSkills, {
     recursive: true,
     force: true,
@@ -26375,7 +27067,7 @@ function copyProperty(source, target, key) {
 async function readYamlConfig(configPath) {
   const existingRaw = await readFile17(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError19(error, "ENOENT")) {
+      if (isNodeError20(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -26402,7 +27094,7 @@ async function failProfileCreation(input) {
     await input.writer.write(`
 Rolling back ${input.rollbackProfileName}...
 `);
-    await rm6(resolveHermesProfileDir(input.rollbackProfileName), {
+    await rm7(resolveHermesProfileDir(input.rollbackProfileName), {
       recursive: true,
       force: true
     }).catch(() => void 0);
@@ -26445,24 +27137,24 @@ async function readProfileCreationLogLines(paths) {
   );
 }
 function profileCreationStatePath(paths) {
-  return path24.join(paths.runDir, "profile-create-state.json");
+  return path25.join(paths.runDir, "profile-create-state.json");
 }
 function profileCreationLogPath(paths) {
-  return path24.join(paths.logsDir, PROFILE_CREATE_LOG_FILE);
+  return path25.join(paths.logsDir, PROFILE_CREATE_LOG_FILE);
 }
 async function clearProfileCreationLogFiles(paths) {
   const primary = profileCreationLogPath(paths);
   await Promise.all([
-    rm6(primary, { force: true }).catch(() => void 0),
+    rm7(primary, { force: true }).catch(() => void 0),
     ...Array.from(
       { length: PROFILE_CREATE_LOG_MAX_FILES },
-      (_, index) => rm6(`${primary}.${index + 1}`, { force: true }).catch(() => void 0)
+      (_, index) => rm7(`${primary}.${index + 1}`, { force: true }).catch(() => void 0)
     )
   ]);
 }
 async function pathExists2(targetPath) {
-  return await stat17(targetPath).then(() => true).catch((error) => {
-    if (isNodeError19(error, "ENOENT")) {
+  return await stat18(targetPath).then(() => true).catch((error) => {
+    if (isNodeError20(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -26509,7 +27201,7 @@ function formatEnvValue2(value) {
 function escapeRegExp3(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError19(error, code) {
+function isNodeError20(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -26594,16 +27286,16 @@ function readProfilePermissionsInput(body) {
   const approvals = readOptionalObject(body, "approvals");
   if (approvals) {
     input.approvals = {
-      mode: readString17(approvals, "mode") ?? readString17(approvals, "approval_mode") ?? readString17(approvals, "approvalMode") ?? void 0,
+      mode: readString18(approvals, "mode") ?? readString18(approvals, "approval_mode") ?? readString18(approvals, "approvalMode") ?? void 0,
       timeout: readPositiveInteger2(approvals.timeout),
-      cronMode: readString17(approvals, "cron_mode") ?? readString17(approvals, "cronMode") ?? void 0
+      cronMode: readString18(approvals, "cron_mode") ?? readString18(approvals, "cronMode") ?? void 0
     };
   }
   const terminal = readOptionalObject(body, "terminal");
   if (terminal) {
     input.terminal = {
-      backend: readString17(terminal, "backend") ?? void 0,
-      cwd: readString17(terminal, "cwd") ?? void 0,
+      backend: readString18(terminal, "backend") ?? void 0,
+      cwd: readString18(terminal, "cwd") ?? void 0,
       containerCpu: readPositiveInteger2(
         terminal.container_cpu ?? terminal.containerCpu
       ),
@@ -26720,9 +27412,9 @@ import {
   access as access3,
   readdir as readdir10,
   readFile as readFile18,
-  stat as stat18
+  stat as stat19
 } from "fs/promises";
-import path25 from "path";
+import path26 from "path";
 import YAML6 from "yaml";
 var ENTRY_DELIMITER = "\n\xA7\n";
 var DEFAULT_MEMORY_LIMIT = 2200;
@@ -26866,14 +27558,23 @@ async function resetHermesMemoryStore(profileName, target) {
   return readHermesProfileMemory(profileName);
 }
 async function saveHermesMemorySettings(profileName, patch) {
-  const provider = await readActiveMemoryProvider(profileName);
-  if (!provider) {
-    throw new HermesMemoryError(
-      "memory_settings_builtin_only",
-      "\u5F53\u524D Profile \u4F7F\u7528 built-in memory\uFF0C\u6CA1\u6709\u53EF\u4FDD\u5B58\u7684\u5916\u90E8 provider \u8BBE\u7F6E\u3002"
-    );
+  const hasLimitPatch = patch.memoryCharLimit !== void 0 || patch.userCharLimit !== void 0;
+  const hasProviderPatch = Object.keys(patch).some(
+    (key) => key !== "memoryCharLimit" && key !== "userCharLimit"
+  );
+  if (hasProviderPatch) {
+    const provider = await readActiveMemoryProvider(profileName);
+    if (!provider) {
+      throw new HermesMemoryError(
+        "memory_settings_builtin_only",
+        "\u5F53\u524D Profile \u4F7F\u7528 built-in memory\uFF0C\u6CA1\u6709\u53EF\u4FDD\u5B58\u7684\u5916\u90E8 provider \u8BBE\u7F6E\u3002"
+      );
+    }
+    await saveProviderSettings(profileName, provider, patch);
+  }
+  if (hasLimitPatch) {
+    await patchHermesMemoryLimits(profileName, patch);
   }
-  await saveProviderSettings(profileName, provider, patch);
   return readHermesProfileMemory(profileName);
 }
 async function saveHermesMemoryProviderSettings(profileName, provider, patch) {
@@ -26910,9 +27611,9 @@ async function testHindsightProviderSettings(profileName, patch) {
   const mode = normalizeHindsightMode(
     patch.mode ?? config.mode ?? env.HINDSIGHT_MODE
   );
-  const apiUrl = readString18(patch.apiUrl) ?? readString18(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
-  const bankId = readString18(patch.bankId) ?? readString18(config.bank_id) ?? "hermes";
-  const apiKey = readString18(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString18(config.apiKey) ?? readString18(config.api_key);
+  const apiUrl = readString19(patch.apiUrl) ?? readString19(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
+  const bankId = readString19(patch.bankId) ?? readString19(config.bank_id) ?? "hermes";
+  const apiKey = readString19(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString19(config.apiKey) ?? readString19(config.api_key);
   const baseUrl = normalizeHttpUrl(apiUrl);
   if (!baseUrl) {
     return {
@@ -27044,7 +27745,7 @@ async function saveProviderSettings(profileName, provider, patch) {
     });
     await patchJsonProviderConfig(
       profileName,
-      path25.join("hindsight", "config.json"),
+      path26.join("hindsight", "config.json"),
       {
         mode: patch.mode,
         api_url: patch.apiUrl,
@@ -27194,7 +27895,7 @@ async function patchHermesMemoryProvider(profileName, provider) {
   const configPath = resolveHermesConfigPath(profileName);
   const existingRaw = await readFile18(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError20(error, "ENOENT")) {
+      if (isNodeError21(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -27214,14 +27915,46 @@ async function patchHermesMemoryProvider(profileName, provider) {
   document.contents = document.createNode(config);
   await atomicWriteFilePreservingMetadata(configPath, document.toString());
 }
+async function patchHermesMemoryLimits(profileName, patch) {
+  const configPath = resolveHermesConfigPath(profileName);
+  const existingRaw = await readFile18(configPath, "utf8").catch(
+    (error) => {
+      if (isNodeError21(error, "ENOENT")) {
+        return null;
+      }
+      throw error;
+    }
+  );
+  const document = existingRaw ? YAML6.parseDocument(existingRaw) : new YAML6.Document({});
+  const config = toRecord18(document.toJSON());
+  const memory = toRecord18(config.memory);
+  if (patch.memoryCharLimit !== void 0) {
+    memory.memory_char_limit = patch.memoryCharLimit;
+  }
+  if (patch.userCharLimit !== void 0) {
+    memory.user_char_limit = patch.userCharLimit;
+  }
+  config.memory = memory;
+  if (existingRaw) {
+    await atomicWriteFilePreservingMetadata(
+      `${configPath}.bak.${Date.now()}`,
+      existingRaw,
+      {
+        metadataSourcePath: configPath
+      }
+    );
+  }
+  document.contents = document.createNode(config);
+  await atomicWriteFilePreservingMetadata(configPath, document.toString());
+}
 function resolveMemoryDir(profileName) {
-  return path25.join(resolveHermesProfileDir(profileName), "memories");
+  return path26.join(resolveHermesProfileDir(profileName), "memories");
 }
 async function readMemoryStore(profileName, target, limits) {
   const filePath = memoryFilePath(profileName, target);
   const entries = await readMemoryEntries(filePath);
-  const fileStat = await stat18(filePath).catch((error) => {
-    if (isNodeError20(error, "ENOENT")) {
+  const fileStat = await stat19(filePath).catch((error) => {
+    if (isNodeError21(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -27250,7 +27983,7 @@ async function readMemoryStore(profileName, target, limits) {
 }
 async function readMemoryEntries(filePath) {
   const raw = await readFile18(filePath, "utf8").catch((error) => {
-    if (isNodeError20(error, "ENOENT")) {
+    if (isNodeError21(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -27276,7 +28009,7 @@ async function writeMemoryEntries(profileName, target, entries) {
   );
 }
 function memoryFilePath(profileName, target) {
-  return path25.join(
+  return path26.join(
     resolveMemoryDir(profileName),
     target === "user" ? "USER.md" : "MEMORY.md"
   );
@@ -27336,7 +28069,7 @@ async function readCustomProviderSetupSummary(profileName) {
     configurable: true,
     configured: true,
     configurationIssue: null,
-    providerConfigPath: path25.join(
+    providerConfigPath: path26.join(
       resolveHermesProfileDir(profileName),
       "<provider>.json"
     ),
@@ -27414,7 +28147,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "honcho") ?? ""
     );
-    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString18(config2.apiKey)) || isConfiguredEnvValue(readString18(config2.api_key)) || isConfiguredEnvValue(readString18(config2.baseUrl)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString19(config2.apiKey)) || isConfiguredEnvValue(readString19(config2.api_key)) || isConfiguredEnvValue(readString19(config2.baseUrl)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Honcho \u9700\u8981\u5148\u586B\u5199 API Key\uFF0C\u6216\u5728 honcho.json \u914D\u7F6E self-hosted baseUrl\u3002"
     };
@@ -27423,7 +28156,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "mem0") ?? ""
     );
-    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString18(config2.api_key)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString19(config2.api_key)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Mem0 \u9700\u8981\u5148\u5728\u672C\u9875\u586B\u5199 API Key\uFF0CLink \u4F1A\u5199\u5165\u5F53\u524D Profile \u7684 .env\u3002"
     };
@@ -27465,7 +28198,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     memoryProviderConfigPath(profileName, provider) ?? ""
   );
   const mode = normalizeHindsightMode(config.mode ?? env.HINDSIGHT_MODE);
-  const apiKey = readString18(config.apiKey) ?? readString18(config.api_key) ?? env.HINDSIGHT_API_KEY;
+  const apiKey = readString19(config.apiKey) ?? readString19(config.api_key) ?? env.HINDSIGHT_API_KEY;
   if (mode === "cloud") {
     return isConfiguredEnvValue(apiKey) ? { configured: true, issue: null } : {
       configured: false,
@@ -27473,15 +28206,15 @@ async function readProviderConfigurationStatus(profileName, provider) {
     };
   }
   if (mode === "local_external") {
-    const apiUrl = readString18(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
+    const apiUrl = readString19(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
     return isConfiguredEnvValue(apiUrl) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Hindsight local_external \u9700\u8981\u914D\u7F6E\u53EF\u8BBF\u95EE\u7684 API URL\u3002"
     };
   }
   if (mode === "local_embedded") {
-    const llmProvider = readString18(config.llm_provider) ?? "openai";
-    const llmModel = readString18(config.llm_model);
+    const llmProvider = readString19(config.llm_provider) ?? "openai";
+    const llmModel = readString19(config.llm_model);
     if (!llmModel) {
       return {
         configured: false,
@@ -27489,7 +28222,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (llmProvider === "openai_compatible" && !isConfiguredEnvValue(
-      readString18(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
+      readString19(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
     )) {
       return {
         configured: false,
@@ -27497,7 +28230,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (!["ollama", "lmstudio", "openai_compatible"].includes(llmProvider) && !isConfiguredEnvValue(
-      readString18(config.llmApiKey) ?? readString18(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
+      readString19(config.llmApiKey) ?? readString19(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
     )) {
       return {
         configured: false,
@@ -27553,8 +28286,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.HONCHO_API_KEY ?? readString18(config.apiKey) ?? readString18(config.api_key),
-        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString18(config.apiKey)) || isConfiguredEnvValue(readString18(config.api_key))
+        env.HONCHO_API_KEY ?? readString19(config.apiKey) ?? readString19(config.api_key),
+        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString19(config.apiKey)) || isConfiguredEnvValue(readString19(config.api_key))
       ),
       stringSetting("workspace", "Workspace", config.workspace ?? "hermes"),
       stringSetting("peerName", "\u7528\u6237 Peer", config.peerName ?? ""),
@@ -27596,8 +28329,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.MEM0_API_KEY ?? readString18(config.apiKey) ?? readString18(config.api_key),
-        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString18(config.apiKey)) || isConfiguredEnvValue(readString18(config.api_key))
+        env.MEM0_API_KEY ?? readString19(config.apiKey) ?? readString19(config.api_key),
+        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString19(config.apiKey)) || isConfiguredEnvValue(readString19(config.api_key))
       ),
       stringSetting("userId", "User ID", config.user_id ?? "hermes-user"),
       stringSetting("agentId", "Agent ID", config.agent_id ?? "hermes"),
@@ -27682,8 +28415,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "Hindsight API Key",
-        env.HINDSIGHT_API_KEY ?? readString18(config.apiKey) ?? readString18(config.api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString18(config.apiKey)) || isConfiguredEnvValue(readString18(config.api_key))
+        env.HINDSIGHT_API_KEY ?? readString19(config.apiKey) ?? readString19(config.api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString19(config.apiKey)) || isConfiguredEnvValue(readString19(config.api_key))
       ),
       stringSetting(
         "bankId",
@@ -27705,8 +28438,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "llmApiKey",
         "LLM API Key",
-        env.HINDSIGHT_LLM_API_KEY ?? readString18(config.llmApiKey) ?? readString18(config.llm_api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString18(config.llmApiKey)) || isConfiguredEnvValue(readString18(config.llm_api_key))
+        env.HINDSIGHT_LLM_API_KEY ?? readString19(config.llmApiKey) ?? readString19(config.llm_api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString19(config.llmApiKey)) || isConfiguredEnvValue(readString19(config.llm_api_key))
       ),
       booleanSetting("autoRecall", "\u81EA\u52A8\u56DE\u5FC6", config.auto_recall ?? true),
       booleanSetting("autoRetain", "\u81EA\u52A8\u6C89\u6DC0", config.auto_retain ?? true),
@@ -27730,7 +28463,7 @@ async function readProviderSettings(profileName, provider) {
       stringSetting(
         "dbPath",
         "SQLite \u6570\u636E\u5E93\u8DEF\u5F84",
-        config.db_path ?? path25.join(resolveHermesProfileDir(profileName), "memory_store.db")
+        config.db_path ?? path26.join(resolveHermesProfileDir(profileName), "memory_store.db")
       ),
       booleanSetting("autoExtract", "\u4F1A\u8BDD\u7ED3\u675F\u81EA\u52A8\u62BD\u53D6", config.auto_extract ?? false),
       numberSetting("defaultTrust", "\u9ED8\u8BA4\u4FE1\u4EFB\u5206", config.default_trust ?? 0.5),
@@ -27766,7 +28499,7 @@ async function readProviderSettings(profileName, provider) {
       stringSetting(
         "workingDirectory",
         "\u5DE5\u4F5C\u76EE\u5F55",
-        path25.join(resolveHermesProfileDir(profileName), "byterover"),
+        path26.join(resolveHermesProfileDir(profileName), "byterover"),
         false
       )
     ];
@@ -27775,16 +28508,16 @@ async function readProviderSettings(profileName, provider) {
 }
 function memoryProviderConfigPath(profileName, provider) {
   if (provider === "honcho") {
-    return path25.join(resolveHermesProfileDir(profileName), "honcho.json");
+    return path26.join(resolveHermesProfileDir(profileName), "honcho.json");
   }
   if (provider === "mem0") {
-    return path25.join(resolveHermesProfileDir(profileName), "mem0.json");
+    return path26.join(resolveHermesProfileDir(profileName), "mem0.json");
   }
   if (provider === "supermemory") {
-    return path25.join(resolveHermesProfileDir(profileName), "supermemory.json");
+    return path26.join(resolveHermesProfileDir(profileName), "supermemory.json");
   }
   if (provider === "hindsight") {
-    return path25.join(
+    return path26.join(
       resolveHermesProfileDir(profileName),
       "hindsight",
       "config.json"
@@ -27793,13 +28526,13 @@ function memoryProviderConfigPath(profileName, provider) {
   return null;
 }
 function customProviderConfigPath(profileName, provider) {
-  return path25.join(
+  return path26.join(
     resolveHermesProfileDir(profileName),
     `${normalizeCustomProviderId(provider)}.json`
   );
 }
 function customProviderRegistryPath(profileName) {
-  return path25.join(
+  return path26.join(
     resolveHermesProfileDir(profileName),
     CUSTOM_PROVIDER_REGISTRY_FILE
   );
@@ -27807,7 +28540,7 @@ function customProviderRegistryPath(profileName) {
 async function readCustomProviderRegistry(profileName) {
   const raw = await readFile18(customProviderRegistryPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError20(error, "ENOENT")) {
+      if (isNodeError21(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -27825,11 +28558,11 @@ async function readCustomProviderRegistry(profileName) {
         return { id: id2, label: id2, description: "\u81EA\u5B9A\u4E49 memory provider\u3002" };
       }
       const record = toRecord18(item);
-      const id = normalizeCustomProviderId(readString18(record.id) ?? "");
+      const id = normalizeCustomProviderId(readString19(record.id) ?? "");
       return {
         id,
-        label: readString18(record.label) ?? id,
-        description: readString18(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+        label: readString19(record.label) ?? id,
+        description: readString19(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
       };
     }).filter((item) => item.id);
   } catch {
@@ -27851,10 +28584,10 @@ async function saveCustomProviderRegistryEntry(profileName, provider) {
   );
 }
 async function discoverUserMemoryProviderDescriptors(profileName) {
-  const pluginsDir = path25.join(resolveHermesProfileDir(profileName), "plugins");
+  const pluginsDir = path26.join(resolveHermesProfileDir(profileName), "plugins");
   const entries = await readdir10(pluginsDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError20(error, "ENOENT")) {
+      if (isNodeError21(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -27871,21 +28604,21 @@ async function discoverUserMemoryProviderDescriptors(profileName) {
     } catch {
       continue;
     }
-    const providerDir = path25.join(pluginsDir, entry.name);
+    const providerDir = path26.join(pluginsDir, entry.name);
     if (!await isMemoryProviderPluginDir(providerDir)) {
       continue;
     }
     const meta = await readPluginMetadata(providerDir);
     descriptors.push({
       id: providerId,
-      label: readString18(meta.name) ?? providerId,
-      description: readString18(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+      label: readString19(meta.name) ?? providerId,
+      description: readString19(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
     });
   }
   return descriptors;
 }
 async function isUserMemoryProviderInstalled(profileName, provider) {
-  const providerDir = path25.join(
+  const providerDir = path26.join(
     resolveHermesProfileDir(profileName),
     "plugins",
     normalizeCustomProviderId(provider)
@@ -27893,9 +28626,9 @@ async function isUserMemoryProviderInstalled(profileName, provider) {
   return isMemoryProviderPluginDir(providerDir);
 }
 async function isMemoryProviderPluginDir(providerDir) {
-  const source = await readFile18(path25.join(providerDir, "__init__.py"), "utf8").catch(
+  const source = await readFile18(path26.join(providerDir, "__init__.py"), "utf8").catch(
     (error) => {
-      if (isNodeError20(error, "ENOENT")) {
+      if (isNodeError21(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -27905,9 +28638,9 @@ async function isMemoryProviderPluginDir(providerDir) {
   return sample.includes("register_memory_provider") || sample.includes("MemoryProvider");
 }
 async function readPluginMetadata(providerDir) {
-  const raw = await readFile18(path25.join(providerDir, "plugin.yaml"), "utf8").catch(
+  const raw = await readFile18(path26.join(providerDir, "plugin.yaml"), "utf8").catch(
     (error) => {
-      if (isNodeError20(error, "ENOENT")) {
+      if (isNodeError21(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -27917,10 +28650,10 @@ async function readPluginMetadata(providerDir) {
 }
 async function resolveByteRoverCli() {
   const candidates = [
-    ...(process.env.PATH ?? "").split(path25.delimiter).filter(Boolean).map((dir) => path25.join(dir, "brv")),
-    path25.join(process.env.HOME ?? "", ".brv-cli", "bin", "brv"),
+    ...(process.env.PATH ?? "").split(path26.delimiter).filter(Boolean).map((dir) => path26.join(dir, "brv")),
+    path26.join(process.env.HOME ?? "", ".brv-cli", "bin", "brv"),
     "/usr/local/bin/brv",
-    path25.join(process.env.HOME ?? "", ".npm-global", "bin", "brv")
+    path26.join(process.env.HOME ?? "", ".npm-global", "bin", "brv")
   ].filter(Boolean);
   for (const candidate of candidates) {
     const found = await access3(candidate).then(() => true).catch(() => false);
@@ -27933,7 +28666,7 @@ async function resolveByteRoverCli() {
 async function readHolographicProviderConfig(profileName) {
   const raw = await readFile18(resolveHermesConfigPath(profileName), "utf8").catch(
     (error) => {
-      if (isNodeError20(error, "ENOENT")) {
+      if (isNodeError21(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -27947,7 +28680,7 @@ async function patchHolographicProviderConfig(profileName, patch) {
   const configPath = resolveHermesConfigPath(profileName);
   const existingRaw = await readFile18(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError20(error, "ENOENT")) {
+      if (isNodeError21(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -27981,9 +28714,9 @@ async function patchHermesMemoryEnv(profileName, patch) {
   if (entries.length === 0) {
     return;
   }
-  const envPath = path25.join(resolveHermesProfileDir(profileName), ".env");
+  const envPath = path26.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile18(envPath, "utf8").catch((error) => {
-    if (isNodeError20(error, "ENOENT")) {
+    if (isNodeError21(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -28041,7 +28774,7 @@ function isMemoryEnvKeyWritable(key) {
   ].includes(key);
 }
 function normalizeHindsightMode(value) {
-  const mode = readString18(value) ?? "cloud";
+  const mode = readString19(value) ?? "cloud";
   return mode === "local" ? "local_embedded" : mode;
 }
 function normalizeHttpUrl(value) {
@@ -28110,27 +28843,27 @@ function parseJsonObject2(text) {
   }
 }
 function readHindsightError(json) {
-  const detail = readString18(json.detail) ?? readString18(json.error);
+  const detail = readString19(json.detail) ?? readString19(json.error);
   return detail ? `\uFF1A${detail}` : "";
 }
 function hindsightSemanticIssue(pathName, json) {
   if (pathName === "/health") {
-    const status = readString18(json.status);
+    const status = readString19(json.status);
     return status && ["healthy", "ok"].includes(status.toLowerCase()) ? null : `\u5065\u5EB7\u72B6\u6001\u5F02\u5E38\uFF1A${status ?? "unknown"}`;
   }
   return null;
 }
 function summarizeHindsightProbe(pathName, json) {
   if (pathName === "/health") {
-    const status = readString18(json.status) ?? "ok";
-    const database = readString18(json.database);
+    const status = readString19(json.status) ?? "ok";
+    const database = readString19(json.database);
     return database ? `${status}, database ${database}` : status;
   }
   if (pathName === "/version") {
-    const version = readString18(json.api_version);
+    const version = readString19(json.api_version);
     return version ? `API ${version}` : "version endpoint reachable";
   }
-  const bankId = readString18(json.bank_id);
+  const bankId = readString19(json.bank_id);
   return bankId ? `bank ${bankId} reachable` : "bank config reachable";
 }
 async function readActiveMemoryProvider(profileName) {
@@ -28138,21 +28871,21 @@ async function readActiveMemoryProvider(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError20(error, "ENOENT")) {
+    if (isNodeError21(error, "ENOENT")) {
       return "";
     }
     throw error;
   });
   const config = raw ? toRecord18(YAML6.parse(raw)) : {};
   const memory = toRecord18(config.memory);
-  const provider = readString18(memory.provider);
+  const provider = readString19(memory.provider);
   if (!provider || provider === "built-in" || provider === "builtin" || provider === "built_in") {
     return null;
   }
   return provider;
 }
 async function patchJsonProviderConfig(profileName, relativePath, patch) {
-  const configPath = path25.join(
+  const configPath = path26.join(
     resolveHermesProfileDir(profileName),
     relativePath
   );
@@ -28171,7 +28904,7 @@ async function patchJsonProviderConfig(profileName, relativePath, patch) {
 }
 async function readJsonObject(filePath) {
   const raw = await readFile18(filePath, "utf8").catch((error) => {
-    if (isNodeError20(error, "ENOENT")) {
+    if (isNodeError21(error, "ENOENT")) {
       return "{}";
     }
     throw error;
@@ -28181,7 +28914,7 @@ async function readJsonObject(filePath) {
   } catch {
     throw new HermesMemoryError(
       "memory_provider_config_invalid",
-      `${path25.basename(filePath)} \u4E0D\u662F\u6709\u6548\u7684 JSON \u914D\u7F6E\u6587\u4EF6\u3002`
+      `${path26.basename(filePath)} \u4E0D\u662F\u6709\u6548\u7684 JSON \u914D\u7F6E\u6587\u4EF6\u3002`
     );
   }
 }
@@ -28202,7 +28935,7 @@ function stringSetting(key, label, value, editable = true) {
   return {
     key,
     label,
-    value: readString18(value) ?? "",
+    value: readString19(value) ?? "",
     editable,
     kind: "string"
   };
@@ -28214,7 +28947,7 @@ function secretSetting(key, label, value, configured) {
     value: "",
     editable: true,
     kind: "secret",
-    configured: configured || isConfiguredEnvValue(readString18(value))
+    configured: configured || isConfiguredEnvValue(readString19(value))
   };
 }
 function textSetting(key, label, value, editable = true) {
@@ -28227,7 +28960,7 @@ function textSetting(key, label, value, editable = true) {
   };
 }
 function selectSetting(key, label, value, options, editable = true) {
-  const stringValue = readString18(value) ?? options[0] ?? null;
+  const stringValue = readString19(value) ?? options[0] ?? null;
   return { key, label, value: stringValue, editable, kind: "select", options };
 }
 async function readMemoryLimits(profileName) {
@@ -28235,7 +28968,7 @@ async function readMemoryLimits(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError20(error, "ENOENT")) {
+    if (isNodeError21(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -28300,7 +29033,7 @@ function hashString(value) {
 function toRecord18(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
-function readString18(value) {
+function readString19(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readPositiveInteger3(value) {
@@ -28328,7 +29061,7 @@ function formatEnvValue3(value) {
 function escapeRegExp4(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-function isNodeError20(error, code) {
+function isNodeError21(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
 }
 
@@ -28404,7 +29137,7 @@ function registerProfileMemoryRoutes(router, options) {
     try {
       ctx.body = await saveHermesMemorySettings(
         ctx.params.name,
-        readMemorySettingsPatch(body)
+        readMemorySettingsPatch(body, { includeLimits: true })
       );
     } catch (error) {
       throw toMemoryHttpError(error);
@@ -28459,7 +29192,7 @@ function registerProfileMemoryRoutes(router, options) {
   );
 }
 function readMemoryTarget(body) {
-  const raw = readString17(body, "target");
+  const raw = readString18(body, "target");
   if (raw === "memory" || raw === "user") {
     return raw;
   }
@@ -28470,7 +29203,7 @@ function readMemoryTarget(body) {
   );
 }
 function readMemoryResetTarget(body) {
-  const raw = readString17(body, "target") ?? "all";
+  const raw = readString18(body, "target") ?? "all";
   if (raw === "all" || raw === "memory" || raw === "user") {
     return raw;
   }
@@ -28481,7 +29214,7 @@ function readMemoryResetTarget(body) {
   );
 }
 function readRequiredMemoryContent(body) {
-  const content = readString17(body, "content") ?? readString17(body, "text");
+  const content = readString18(body, "content") ?? readString18(body, "text");
   if (!content) {
     throw new LinkHttpError(
       400,
@@ -28492,7 +29225,7 @@ function readRequiredMemoryContent(body) {
   return content;
 }
 function readRequiredMemoryMatch(body) {
-  const oldText = readString17(body, "old_text") ?? readString17(body, "oldText") ?? readString17(body, "match");
+  const oldText = readString18(body, "old_text") ?? readString18(body, "oldText") ?? readString18(body, "match");
   if (!oldText) {
     throw new LinkHttpError(
       400,
@@ -28503,7 +29236,7 @@ function readRequiredMemoryMatch(body) {
   return oldText;
 }
 function readRequiredMemoryProvider(body) {
-  const provider = readString17(body, "provider") ?? readString17(body, "provider_id") ?? readString17(body, "providerId");
+  const provider = readString18(body, "provider") ?? readString18(body, "provider_id") ?? readString18(body, "providerId");
   if (!provider) {
     throw new LinkHttpError(
       400,
@@ -28513,9 +29246,27 @@ function readRequiredMemoryProvider(body) {
   }
   return provider;
 }
-function readMemorySettingsPatch(body) {
+function readMemorySettingsPatch(body, options = {}) {
   const input = {};
-  const mode = readString17(body, "mode");
+  if (options.includeLimits) {
+    const memoryCharLimit = readOptionalPositiveInteger(
+      body,
+      "memory_char_limit",
+      "memoryCharLimit"
+    );
+    if (memoryCharLimit !== void 0) {
+      input.memoryCharLimit = memoryCharLimit;
+    }
+    const userCharLimit = readOptionalPositiveInteger(
+      body,
+      "user_char_limit",
+      "userCharLimit"
+    );
+    if (userCharLimit !== void 0) {
+      input.userCharLimit = userCharLimit;
+    }
+  }
+  const mode = readString18(body, "mode");
   if (mode) {
     input.mode = mode;
   }
@@ -28531,7 +29282,7 @@ function readMemorySettingsPatch(body) {
   if (bankId !== void 0) {
     input.bankId = bankId;
   }
-  const llmProvider = readString17(body, "llm_provider") ?? readString17(body, "llmProvider");
+  const llmProvider = readString18(body, "llm_provider") ?? readString18(body, "llmProvider");
   if (llmProvider) {
     input.llmProvider = llmProvider;
   }
@@ -28567,11 +29318,11 @@ function readMemorySettingsPatch(body) {
   if (autoRetain !== void 0) {
     input.autoRetain = autoRetain;
   }
-  const memoryMode = readString17(body, "memory_mode") ?? readString17(body, "memoryMode");
+  const memoryMode = readString18(body, "memory_mode") ?? readString18(body, "memoryMode");
   if (memoryMode) {
     input.memoryMode = memoryMode;
   }
-  const recallBudget = readString17(body, "recall_budget") ?? readString17(body, "recallBudget");
+  const recallBudget = readString18(body, "recall_budget") ?? readString18(body, "recallBudget");
   if (recallBudget) {
     input.recallBudget = recallBudget;
   }
@@ -28587,11 +29338,11 @@ function readMemorySettingsPatch(body) {
   if (profileFrequency !== void 0) {
     input.profileFrequency = profileFrequency;
   }
-  const captureMode = readString17(body, "capture_mode") ?? readString17(body, "captureMode");
+  const captureMode = readString18(body, "capture_mode") ?? readString18(body, "captureMode");
   if (captureMode) {
     input.captureMode = captureMode;
   }
-  const searchMode = readString17(body, "search_mode") ?? readString17(body, "searchMode");
+  const searchMode = readString18(body, "search_mode") ?? readString18(body, "searchMode");
   if (searchMode) {
     input.searchMode = searchMode;
   }
@@ -28625,11 +29376,11 @@ function readMemorySettingsPatch(body) {
   if (aiPeer !== void 0) {
     input.aiPeer = aiPeer;
   }
-  const recallMode = readString17(body, "recall_mode") ?? readString17(body, "recallMode");
+  const recallMode = readString18(body, "recall_mode") ?? readString18(body, "recallMode");
   if (recallMode) {
     input.recallMode = recallMode;
   }
-  const writeFrequency = readString17(body, "write_frequency") ?? readString17(body, "writeFrequency");
+  const writeFrequency = readString18(body, "write_frequency") ?? readString18(body, "writeFrequency");
   if (writeFrequency) {
     input.writeFrequency = writeFrequency;
   }
@@ -28637,7 +29388,7 @@ function readMemorySettingsPatch(body) {
   if (saveMessages !== void 0) {
     input.saveMessages = saveMessages;
   }
-  const sessionStrategy = readString17(body, "session_strategy") ?? readString17(body, "sessionStrategy");
+  const sessionStrategy = readString18(body, "session_strategy") ?? readString18(body, "sessionStrategy");
   if (sessionStrategy) {
     input.sessionStrategy = sessionStrategy;
   }
@@ -28735,6 +29486,23 @@ function readOptionalNumber(value, key) {
   }
   return numberValue;
 }
+function readOptionalPositiveInteger(body, ...keys) {
+  for (const key of keys) {
+    if (!Object.prototype.hasOwnProperty.call(body, key)) {
+      continue;
+    }
+    const value = readPositiveInteger2(body[key]);
+    if (value === void 0) {
+      throw new LinkHttpError(
+        400,
+        "memory_settings_invalid",
+        `${key} must be a positive integer`
+      );
+    }
+    return value;
+  }
+  return void 0;
+}
 function readOptionalString(body, ...keys) {
   for (const key of keys) {
     if (Object.prototype.hasOwnProperty.call(body, key)) {
@@ -28770,7 +29538,7 @@ function toMemoryHttpError(error) {
 
 // src/hermes/skills.ts
 import { readFile as readFile19, readdir as readdir11 } from "fs/promises";
-import path26 from "path";
+import path27 from "path";
 import YAML7 from "yaml";
 var HermesSkillNotFoundError = class extends Error {
   constructor(skillName) {
@@ -28784,7 +29552,7 @@ var EXCLUDED_SKILL_DIRS = /* @__PURE__ */ new Set([".git", ".github", ".hub"]);
 async function listHermesProfileSkills(profileName, paths = resolveRuntimePaths()) {
   const profile = await readExistingProfile(profileName, paths);
   const profileDir = resolveHermesProfileDir(profile.name);
-  const skillsRoot = path26.join(profileDir, "skills");
+  const skillsRoot = path27.join(profileDir, "skills");
   const [skillFiles, disabled, provenance] = await Promise.all([
     findSkillFiles(skillsRoot),
     readDisabledSkillNames(resolveHermesConfigPath(profile.name)),
@@ -28863,7 +29631,7 @@ async function findSkillFiles(root) {
 async function collectSkillFiles(directory, results) {
   const entries = await readdir11(directory, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError21(error, "ENOENT")) {
+      if (isNodeError22(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -28875,7 +29643,7 @@ async function collectSkillFiles(directory, results) {
     if (EXCLUDED_SKILL_DIRS.has(entry.name)) {
       continue;
     }
-    const entryPath = path26.join(directory, entry.name);
+    const entryPath = path27.join(directory, entry.name);
     if (entry.isDirectory()) {
       await collectSkillFiles(entryPath, results);
       continue;
@@ -28888,7 +29656,7 @@ async function collectSkillFiles(directory, results) {
 async function readSkillMetadata(input) {
   const raw = await readFile19(input.skillFile, "utf8").catch(
     (error) => {
-      if (isNodeError21(error, "ENOENT") || isNodeError21(error, "EACCES")) {
+      if (isNodeError22(error, "ENOENT") || isNodeError22(error, "EACCES")) {
         return null;
       }
       throw error;
@@ -28897,16 +29665,16 @@ async function readSkillMetadata(input) {
   if (raw === null) {
     return null;
   }
-  const skillDir = path26.dirname(input.skillFile);
+  const skillDir = path27.dirname(input.skillFile);
   const { frontmatter, body } = parseSkillDocument(raw.slice(0, 4e3));
   const name = normalizeSkillName(
-    readString19(frontmatter.name) ?? path26.basename(skillDir)
+    readString20(frontmatter.name) ?? path27.basename(skillDir)
   );
   if (!name) {
     return null;
   }
   const description = normalizeDescription(
-    readString19(frontmatter.description) ?? firstBodyDescription(body)
+    readString20(frontmatter.description) ?? firstBodyDescription(body)
   );
   const provenance = input.provenance.get(name) ?? {
     source: "local",
@@ -28919,7 +29687,7 @@ async function readSkillMetadata(input) {
     enabled: !input.disabled.has(name),
     source: provenance.source,
     trust: provenance.trust,
-    relativePath: path26.relative(input.skillsRoot, skillDir)
+    relativePath: path27.relative(input.skillsRoot, skillDir)
   };
 }
 function parseSkillDocument(raw) {
@@ -28940,8 +29708,8 @@ function parseSkillDocument(raw) {
   }
 }
 function categoryFromPath(skillsRoot, skillFile) {
-  const relative = path26.relative(skillsRoot, skillFile);
-  const parts = relative.split(path26.sep).filter(Boolean);
+  const relative = path27.relative(skillsRoot, skillFile);
+  const parts = relative.split(path27.sep).filter(Boolean);
   return parts.length >= 3 ? parts[0] : null;
 }
 function firstBodyDescription(body) {
@@ -28965,7 +29733,7 @@ function normalizeDescription(value) {
 }
 async function readDisabledSkillNames(configPath) {
   const raw = await readFile19(configPath, "utf8").catch((error) => {
-    if (isNodeError21(error, "ENOENT")) {
+    if (isNodeError22(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -28988,9 +29756,9 @@ async function readSkillProvenance(root) {
   return provenance;
 }
 async function readBundledSkillNames(root) {
-  const raw = await readFile19(path26.join(root, ".bundled_manifest"), "utf8").catch(
+  const raw = await readFile19(path27.join(root, ".bundled_manifest"), "utf8").catch(
     (error) => {
-      if (isNodeError21(error, "ENOENT")) {
+      if (isNodeError22(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -29011,9 +29779,9 @@ async function readBundledSkillNames(root) {
   return names;
 }
 async function readHubInstalledSkills(root) {
-  const raw = await readFile19(path26.join(root, ".hub", "lock.json"), "utf8").catch(
+  const raw = await readFile19(path27.join(root, ".hub", "lock.json"), "utf8").catch(
     (error) => {
-      if (isNodeError21(error, "ENOENT")) {
+      if (isNodeError22(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -29033,8 +29801,8 @@ async function readHubInstalledSkills(root) {
   for (const [name, rawEntry] of Object.entries(installed2)) {
     const entry = toRecord19(rawEntry);
     result.set(normalizeSkillName(name), {
-      source: readString19(entry.source) ?? "hub",
-      trust: readString19(entry.trust_level) ?? null
+      source: readString20(entry.source) ?? "hub",
+      trust: readString20(entry.trust_level) ?? null
     });
   }
   return result;
@@ -29085,7 +29853,7 @@ function compareCategoryNames(left, right) {
 async function readHermesConfigDocument4(configPath) {
   const existingRaw = await readFile19(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError21(error, "ENOENT")) {
+      if (isNodeError22(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -29118,7 +29886,7 @@ function readStringList4(value) {
   }
   return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
 }
-function readString19(value) {
+function readString20(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function toRecord19(value) {
@@ -29132,7 +29900,7 @@ function ensureRecord5(target, key) {
   target[key] = current;
   return current;
 }
-function isNodeError21(error, code) {
+function isNodeError22(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -29489,7 +30257,7 @@ function registerRunRoutes(router, options) {
   router.post("/api/v1/runs", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const input = readString17(body, "input");
+    const input = readString18(body, "input");
     if (!input) {
       throw new LinkHttpError(400, "run_input_required", "input is required");
     }
@@ -29497,12 +30265,12 @@ function registerRunRoutes(router, options) {
     ctx.body = await createHermesRun(
       {
         input,
-        instructions: readString17(body, "instructions") ?? void 0,
+        instructions: readString18(body, "instructions") ?? void 0,
         conversation_history: readConversationHistory(
           body.conversation_history ?? body.conversationHistory
         ),
-        session_id: readString17(body, "session_id") ?? readString17(body, "sessionId") ?? void 0,
-        session_key: readString17(body, "session_key") ?? readString17(body, "sessionKey") ?? void 0
+        session_id: readString18(body, "session_id") ?? readString18(body, "sessionId") ?? void 0,
+        session_key: readString18(body, "session_key") ?? readString18(body, "sessionKey") ?? void 0
       },
       { logger, profileName: readOptionalProfileName(body) }
     );
@@ -29673,8 +30441,8 @@ function readModelList(payload) {
 // src/hermes/updates.ts
 import { EventEmitter as EventEmitter3 } from "events";
 import { spawn as spawn3 } from "child_process";
-import { mkdir as mkdir12, readFile as readFile20, rm as rm7 } from "fs/promises";
-import path27 from "path";
+import { mkdir as mkdir13, readFile as readFile20, rm as rm8 } from "fs/promises";
+import path28 from "path";
 var SERVER_HERMES_RELEASES_LATEST_PATH = "/api/v1/hermes-agent/releases/latest";
 var RELEASE_CACHE_TTL_MS = 6 * 60 * 60 * 1e3;
 var RELEASE_FETCH_TIMEOUT_MS = 5e3;
@@ -29737,7 +30505,7 @@ async function startHermesUpdate(options) {
     signal: null,
     error: null
   };
-  await mkdir12(options.paths.runDir, { recursive: true, mode: 448 });
+  await mkdir13(options.paths.runDir, { recursive: true, mode: 448 });
   await writer.write(`
 === hermes update started ${startedAt} ===
 `);
@@ -29911,20 +30679,20 @@ function normalizeServerReleaseSnapshot(payload) {
   const remote = toNullableRecord(snapshot.remote);
   return {
     remote: remote ? normalizeServerRelease(remote) : null,
-    cacheState: readString20(snapshot, "cache_state") ?? readString20(snapshot, "cacheState"),
-    issue: readString20(snapshot, "issue")
+    cacheState: readString21(snapshot, "cache_state") ?? readString21(snapshot, "cacheState"),
+    issue: readString21(snapshot, "issue")
   };
 }
 function normalizeServerRelease(payload) {
-  const tag = readString20(payload, "tag");
-  const name = readString20(payload, "name");
+  const tag = readString21(payload, "tag");
+  const name = readString21(payload, "name");
   return {
-    version: readString20(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
+    version: readString21(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
     tag,
     name,
-    releaseUrl: readString20(payload, "releaseUrl") ?? readString20(payload, "release_url"),
-    publishedAt: readString20(payload, "publishedAt") ?? readString20(payload, "published_at"),
-    fetchedAt: readString20(payload, "fetchedAt") ?? readString20(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
+    releaseUrl: readString21(payload, "releaseUrl") ?? readString21(payload, "release_url"),
+    publishedAt: readString21(payload, "publishedAt") ?? readString21(payload, "published_at"),
+    fetchedAt: readString21(payload, "fetchedAt") ?? readString21(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
   };
 }
 async function readReleaseCache(paths) {
@@ -29952,21 +30720,21 @@ async function readUpdateLogLines(paths) {
   );
 }
 function releaseCachePath(paths) {
-  return path27.join(paths.indexesDir, "hermes-release-check.json");
+  return path28.join(paths.indexesDir, "hermes-release-check.json");
 }
 function updateStatePath(paths) {
-  return path27.join(paths.runDir, "hermes-update-state.json");
+  return path28.join(paths.runDir, "hermes-update-state.json");
 }
 function updateLogPath(paths) {
-  return path27.join(paths.logsDir, UPDATE_LOG_FILE);
+  return path28.join(paths.logsDir, UPDATE_LOG_FILE);
 }
 async function clearUpdateLogFiles(paths) {
   const primary = updateLogPath(paths);
   await Promise.all([
-    rm7(primary, { force: true }).catch(() => void 0),
+    rm8(primary, { force: true }).catch(() => void 0),
     ...Array.from(
       { length: UPDATE_LOG_MAX_FILES },
-      (_, index) => rm7(`${primary}.${index + 1}`, { force: true }).catch(() => void 0)
+      (_, index) => rm8(`${primary}.${index + 1}`, { force: true }).catch(() => void 0)
     )
   ]);
 }
@@ -30050,7 +30818,7 @@ function isRecentRunningState2(state) {
   const startedAt = Date.parse(state.started_at);
   return Number.isFinite(startedAt) && Date.now() - startedAt < 3e4;
 }
-function readString20(payload, key) {
+function readString21(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -30058,17 +30826,17 @@ function readString20(payload, key) {
 // src/link/updates.ts
 import { spawn as spawn5 } from "child_process";
 import { EventEmitter as EventEmitter4 } from "events";
-import { mkdir as mkdir15, readFile as readFile22, rm as rm10 } from "fs/promises";
-import path29 from "path";
+import { mkdir as mkdir16, readFile as readFile22, rm as rm11 } from "fs/promises";
+import path30 from "path";
 
 // src/daemon/process.ts
 import { spawn as spawn4 } from "child_process";
-import { mkdir as mkdir14, readFile as readFile21, rm as rm9, writeFile as writeFile4 } from "fs/promises";
-import path28 from "path";
+import { mkdir as mkdir15, readFile as readFile21, rm as rm10, writeFile as writeFile4 } from "fs/promises";
+import path29 from "path";
 
 // src/daemon/service.ts
 import { createServer } from "http";
-import { mkdir as mkdir13, rm as rm8, writeFile as writeFile3 } from "fs/promises";
+import { mkdir as mkdir14, rm as rm9, writeFile as writeFile3 } from "fs/promises";
 
 // src/relay/control-client.ts
 import WebSocket from "ws";
@@ -31113,11 +31881,11 @@ async function mergeLastReportedPublicRoutes(paths, snapshotInput) {
   const state = await readNetworkReportState(paths);
   return {
     ...snapshotInput,
-    publicIpv4s: uniqueStrings([
+    publicIpv4s: uniqueStrings2([
       ...snapshotInput.publicIpv4s,
       ...state.lastReportedPublicIpv4s
     ]).slice(0, 2),
-    publicIpv6s: uniqueStrings([
+    publicIpv6s: uniqueStrings2([
       ...snapshotInput.publicIpv6s,
       ...state.lastReportedPublicIpv6s
     ]).slice(0, 2)
@@ -31201,15 +31969,15 @@ function normalizeLanIps(value) {
   ];
 }
 function sameNetworkSnapshot(left, right) {
-  return sameStringList(left.lanIps, right.lanIps) && sameStringList(left.publicIpv4s, right.publicIpv4s) && sameStringList(left.publicIpv6s, right.publicIpv6s);
+  return sameStringList2(left.lanIps, right.lanIps) && sameStringList2(left.publicIpv4s, right.publicIpv4s) && sameStringList2(left.publicIpv6s, right.publicIpv6s);
 }
-function sameStringList(left, right) {
+function sameStringList2(left, right) {
   if (left.length !== right.length) {
     return false;
   }
   return left.every((value, index) => value === right[index]);
 }
-function uniqueStrings(values) {
+function uniqueStrings2(values) {
   return [...new Set(values)];
 }
 function formatUtcDay(date) {
@@ -31844,7 +32612,7 @@ async function startLinkService(options = {}) {
       await logger.info("service_stopped");
       await logger.flush();
       if (options.writePidFile) {
-        await rm8(pidFilePath(paths), { force: true }).catch(() => void 0);
+        await rm9(pidFilePath(paths), { force: true }).catch(() => void 0);
       }
     }
   };
@@ -31894,7 +32662,7 @@ function pidFilePath(paths = resolveRuntimePaths()) {
   return `${paths.runDir}/hermeslink.pid`;
 }
 async function writePidFile(paths) {
-  await mkdir13(paths.runDir, { recursive: true, mode: 448 });
+  await mkdir14(paths.runDir, { recursive: true, mode: 448 });
   await writeFile3(pidFilePath(paths), `${process.pid}
 `, { mode: 384 });
 }
@@ -31989,8 +32757,8 @@ async function startDaemonProcess(paths = resolveRuntimePaths()) {
       return status;
     }
   }
-  await mkdir14(paths.logsDir, { recursive: true, mode: 448 });
-  await mkdir14(paths.runDir, { recursive: true, mode: 448 });
+  await mkdir15(paths.logsDir, { recursive: true, mode: 448 });
+  await mkdir15(paths.runDir, { recursive: true, mode: 448 });
   const scriptPath = currentCliScriptPath();
   const child = spawn4(process.execPath, [scriptPath, "daemon-supervisor"], {
     detached: true,
@@ -32008,10 +32776,10 @@ async function startDaemonProcess(paths = resolveRuntimePaths()) {
   return await getDaemonStatus(paths);
 }
 async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
-  await mkdir14(paths.logsDir, { recursive: true, mode: 448 });
+  await mkdir15(paths.logsDir, { recursive: true, mode: 448 });
   const log = createRotatingTextLogWriter({
     paths,
-    fileName: path28.basename(daemonLogFile(paths))
+    fileName: path29.basename(daemonLogFile(paths))
   });
   const scriptPath = currentCliScriptPath();
   const write = (chunk) => {
@@ -32138,7 +32906,7 @@ async function stopDaemonProcess(paths = resolveRuntimePaths()) {
   try {
     process.kill(status.pid, "SIGTERM");
   } catch {
-    await rm9(pidFilePath(paths), { force: true }).catch(() => void 0);
+    await rm10(pidFilePath(paths), { force: true }).catch(() => void 0);
     return await getDaemonStatus(paths);
   }
   for (let index = 0; index < 20; index += 1) {
@@ -32160,7 +32928,7 @@ async function stopDaemonProcess(paths = resolveRuntimePaths()) {
     }
   }
   if (!isProcessAlive3(status.pid) || !await pidBackedServiceIsReachable(paths)) {
-    await rm9(pidFilePath(paths), { force: true }).catch(() => void 0);
+    await rm10(pidFilePath(paths), { force: true }).catch(() => void 0);
   }
   return await getDaemonStatus(paths);
 }
@@ -32168,7 +32936,7 @@ async function getDaemonStatus(paths = resolveRuntimePaths()) {
   const pidFile = pidFilePath(paths);
   const pid = await readPid(pidFile);
   if (pid && !isProcessAlive3(pid)) {
-    await rm9(pidFile, { force: true }).catch(() => void 0);
+    await rm10(pidFile, { force: true }).catch(() => void 0);
     return {
       running: false,
       pid: null,
@@ -32309,10 +33077,10 @@ function terminateChild(child, previousForceKillTimer) {
   }
 }
 function supervisorStopIntentPath(paths) {
-  return path28.join(paths.runDir, "supervisor-stop-intent.json");
+  return path29.join(paths.runDir, "supervisor-stop-intent.json");
 }
 async function writeSupervisorStopIntent(paths, pid) {
-  await mkdir14(paths.runDir, { recursive: true, mode: 448 });
+  await mkdir15(paths.runDir, { recursive: true, mode: 448 });
   await writeFile4(
     supervisorStopIntentPath(paths),
     `${JSON.stringify({ pid, created_at: (/* @__PURE__ */ new Date()).toISOString() })}
@@ -32328,14 +33096,14 @@ async function consumeSupervisorStopIntent(paths, pid) {
   }
   const payload = parseSupervisorStopIntent(raw);
   if (!isValidSupervisorStopIntent(payload)) {
-    await rm9(filePath, { force: true }).catch(() => void 0);
+    await rm10(filePath, { force: true }).catch(() => void 0);
     return false;
   }
   if (payload.pid !== pid) {
-    await rm9(filePath, { force: true }).catch(() => void 0);
+    await rm10(filePath, { force: true }).catch(() => void 0);
     return false;
   }
-  await rm9(filePath, { force: true }).catch(() => void 0);
+  await rm10(filePath, { force: true }).catch(() => void 0);
   return true;
 }
 async function clearExpiredSupervisorStopIntent(paths) {
@@ -32346,7 +33114,7 @@ async function clearExpiredSupervisorStopIntent(paths) {
   }
   const payload = parseSupervisorStopIntent(raw);
   if (!isValidSupervisorStopIntent(payload)) {
-    await rm9(filePath, { force: true }).catch(() => void 0);
+    await rm10(filePath, { force: true }).catch(() => void 0);
   }
 }
 function parseSupervisorStopIntent(raw) {
@@ -32481,7 +33249,7 @@ async function startLinkUpdate(options) {
     error: null,
     manual_command: manualCommand
   };
-  await mkdir15(options.paths.runDir, { recursive: true, mode: 448 });
+  await mkdir16(options.paths.runDir, { recursive: true, mode: 448 });
   await writer.write(
     `
 === link update started ${startedAt} target=${targetVersion} ===
@@ -32789,16 +33557,16 @@ function normalizeServerSnapshot(payload) {
   if (!policy) {
     return {
       remote: null,
-      issue: readString21(snapshot, "issue")
+      issue: readString22(snapshot, "issue")
     };
   }
   const release = toNullableRecord2(snapshot.release);
-  const currentVersion = readString21(policy, "current_version") ?? readString21(policy, "currentVersion");
-  const minSafeVersion = readString21(policy, "min_safe_version") ?? readString21(policy, "minSafeVersion");
+  const currentVersion = readString22(policy, "current_version") ?? readString22(policy, "currentVersion");
+  const minSafeVersion = readString22(policy, "min_safe_version") ?? readString22(policy, "minSafeVersion");
   if (!currentVersion) {
     return {
       remote: null,
-      issue: readString21(snapshot, "issue")
+      issue: readString22(snapshot, "issue")
     };
   }
   return {
@@ -32806,10 +33574,10 @@ function normalizeServerSnapshot(payload) {
       current_version: currentVersion,
       min_safe_version: minSafeVersion,
       target_version: currentVersion,
-      release_url: release ? readString21(release, "release_url") ?? readString21(release, "releaseUrl") : null,
-      published_at: release ? readString21(release, "published_at") ?? readString21(release, "publishedAt") : null
+      release_url: release ? readString22(release, "release_url") ?? readString22(release, "releaseUrl") : null,
+      published_at: release ? readString22(release, "published_at") ?? readString22(release, "publishedAt") : null
     },
-    issue: readString21(snapshot, "issue")
+    issue: readString22(snapshot, "issue")
   };
 }
 async function fetchCurrentLinkReleaseFromServer(options, fetcher, channel) {
@@ -32872,7 +33640,7 @@ async function buildOfficialInstallCommand(options, targetVersion) {
   };
 }
 function buildUnixInstallCommand(installerUrl) {
-  const nodeBinDir = path29.dirname(process.execPath);
+  const nodeBinDir = path30.dirname(process.execPath);
   const fetchScript = [
     quoteShellToken(process.execPath),
     "--input-type=module",
@@ -33142,18 +33910,18 @@ async function readUpdateLogLines2(paths) {
   );
 }
 function updateStatePath2(paths) {
-  return path29.join(paths.runDir, "link-update-state.json");
+  return path30.join(paths.runDir, "link-update-state.json");
 }
 function updateLogPath2(paths) {
-  return path29.join(paths.logsDir, UPDATE_LOG_FILE2);
+  return path30.join(paths.logsDir, UPDATE_LOG_FILE2);
 }
 async function clearUpdateLogFiles2(paths) {
   const primary = updateLogPath2(paths);
   await Promise.all([
-    rm10(primary, { force: true }).catch(() => void 0),
+    rm11(primary, { force: true }).catch(() => void 0),
     ...Array.from(
       { length: UPDATE_LOG_MAX_FILES2 },
-      (_, index) => rm10(`${primary}.${index + 1}`, { force: true }).catch(() => void 0)
+      (_, index) => rm11(`${primary}.${index + 1}`, { force: true }).catch(() => void 0)
     )
   ]);
 }
@@ -33223,14 +33991,14 @@ function toRecord22(value) {
 function toNullableRecord2(value) {
   return typeof value === "object" && value !== null ? value : null;
 }
-function readString21(payload, key) {
+function readString22(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 
 // src/pairing/pairing.ts
-import path30 from "path";
-import { rm as rm11 } from "fs/promises";
+import path31 from "path";
+import { rm as rm12 } from "fs/promises";
 
 // src/relay/bootstrap.ts
 var RelayNetworkError = class extends Error {
@@ -33492,7 +34260,7 @@ async function readPairingClaim(sessionId, paths = resolveRuntimePaths()) {
   };
 }
 async function clearPairingClaim(sessionId, paths = resolveRuntimePaths()) {
-  await rm11(pairingClaimPath(sessionId, paths), { force: true }).catch(() => void 0);
+  await rm12(pairingClaimPath(sessionId, paths), { force: true }).catch(() => void 0);
 }
 async function claimPairing(input) {
   const paths = input.paths ?? resolveRuntimePaths();
@@ -33569,10 +34337,10 @@ async function loadRequiredIdentity2(paths) {
   }
   return identity;
 }
-async function postServerJson(serverBaseUrl, path31, body, options) {
+async function postServerJson(serverBaseUrl, path32, body, options) {
   let response;
   try {
-    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path31}`, {
+    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path32}`, {
       method: "POST",
       headers: {
         accept: "application/json",
@@ -33620,10 +34388,10 @@ function pairingErrorSnapshot(stage, error) {
     occurred_at: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-async function patchServerJson(serverBaseUrl, path31, token, body, options) {
+async function patchServerJson(serverBaseUrl, path32, token, body, options) {
   let response;
   try {
-    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path31}`, {
+    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path32}`, {
       method: "PATCH",
       headers: {
         accept: "application/json",
@@ -33671,10 +34439,10 @@ function createPairingNetworkError(input) {
   );
 }
 function pairingClaimPath(sessionId, paths) {
-  return path30.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.claimed.json`);
+  return path31.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.claimed.json`);
 }
 function pairingSessionPath(sessionId, paths) {
-  return path30.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.json`);
+  return path31.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.json`);
 }
 function qrPreferredUrls(routes) {
   return routes.preferredUrls.filter((url) => !url.includes("/api/v1/relay/links/")).slice(0, 1);
@@ -33754,8 +34522,8 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/pairing/claim", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const sessionId = readString17(body, "session_id") ?? readString17(body, "sessionId");
-    const claimToken = readString17(body, "claim_token") ?? readString17(body, "claimToken");
+    const sessionId = readString18(body, "session_id") ?? readString18(body, "sessionId");
+    const claimToken = readString18(body, "claim_token") ?? readString18(body, "claimToken");
     if (!sessionId || !claimToken) {
       throw new LinkHttpError(
         400,
@@ -33766,10 +34534,10 @@ function registerSystemRoutes(router, options) {
     const claimed = await claimPairing({
       sessionId,
       claimToken,
-      deviceLabel: readString17(body, "device_label") ?? readString17(body, "deviceLabel") ?? "HermesPilot App",
-      devicePlatform: readString17(body, "device_platform") ?? readString17(body, "devicePlatform") ?? "unknown",
-      deviceModel: readString17(body, "device_model") ?? readString17(body, "deviceModel"),
-      appInstanceId: readString17(body, "app_instance_id") ?? readString17(body, "appInstanceId"),
+      deviceLabel: readString18(body, "device_label") ?? readString18(body, "deviceLabel") ?? "HermesPilot App",
+      devicePlatform: readString18(body, "device_platform") ?? readString18(body, "devicePlatform") ?? "unknown",
+      deviceModel: readString18(body, "device_model") ?? readString18(body, "deviceModel"),
+      appInstanceId: readString18(body, "app_instance_id") ?? readString18(body, "appInstanceId"),
       paths
     });
     ctx.body = claimed;
@@ -33849,9 +34617,9 @@ function registerSystemRoutes(router, options) {
     const body = await readJsonBody(ctx.req);
     const session = await createDeviceSession(
       {
-        label: readString17(body, "device_label") ?? readString17(body, "deviceLabel") ?? "HermesPilot App",
-        platform: readString17(body, "device_platform") ?? readString17(body, "devicePlatform") ?? "unknown",
-        model: readString17(body, "device_model") ?? readString17(body, "deviceModel"),
+        label: readString18(body, "device_label") ?? readString18(body, "deviceLabel") ?? "HermesPilot App",
+        platform: readString18(body, "device_platform") ?? readString18(body, "devicePlatform") ?? "unknown",
+        model: readString18(body, "device_model") ?? readString18(body, "deviceModel"),
         appInstanceId: auth.appInstanceId
       },
       paths
@@ -33880,7 +34648,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/refresh", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString17(body, "refresh_token") ?? readString17(body, "refreshToken");
+    const refreshToken = readString18(body, "refresh_token") ?? readString18(body, "refreshToken");
     if (!refreshToken) {
       throw new LinkHttpError(
         400,
@@ -33891,10 +34659,10 @@ function registerSystemRoutes(router, options) {
     const session = await refreshDeviceSession(
       refreshToken,
       {
-        appInstanceId: readString17(body, "app_instance_id") ?? readString17(body, "appInstanceId"),
-        label: readString17(body, "device_label") ?? readString17(body, "deviceLabel"),
-        platform: readString17(body, "device_platform") ?? readString17(body, "devicePlatform"),
-        model: readString17(body, "device_model") ?? readString17(body, "deviceModel")
+        appInstanceId: readString18(body, "app_instance_id") ?? readString18(body, "appInstanceId"),
+        label: readString18(body, "device_label") ?? readString18(body, "deviceLabel"),
+        platform: readString18(body, "device_platform") ?? readString18(body, "devicePlatform"),
+        model: readString18(body, "device_model") ?? readString18(body, "deviceModel")
       },
       paths
     );
@@ -33913,7 +34681,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/logout", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString17(body, "refresh_token") ?? readString17(body, "refreshToken");
+    const refreshToken = readString18(body, "refresh_token") ?? readString18(body, "refreshToken");
     if (refreshToken) {
       await revokeDeviceRefreshToken(refreshToken, paths);
     }
@@ -34139,7 +34907,7 @@ function registerSystemRoutes(router, options) {
   router.patch("/api/v1/devices/:deviceId", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const label = readString17(body, "label") ?? readString17(body, "device_label");
+    const label = readString18(body, "label") ?? readString18(body, "device_label");
     if (!label) {
       throw new LinkHttpError(
         400,
@@ -34183,7 +34951,7 @@ function isActiveCronJob(job) {
   if (!enabled) {
     return false;
   }
-  const state = readString17(job, "state")?.toLowerCase();
+  const state = readString18(job, "state")?.toLowerCase();
   return !["paused", "disabled", "completed", "deleted"].includes(state ?? "");
 }
 function filterLogsWithinHours(logs, hours, now = Date.now()) {
@@ -34277,8 +35045,8 @@ function registerLinkUpdateRoutes(router, options) {
     ctx.body = await startLinkUpdate({
       paths,
       logger,
-      channel: readString17(body, "channel"),
-      targetVersion: readString17(body, "target_version") ?? readString17(body, "targetVersion")
+      channel: readString18(body, "channel"),
+      targetVersion: readString18(body, "target_version") ?? readString18(body, "targetVersion")
     });
   });
   router.get("/api/v1/link/update/events", async (ctx) => {
@@ -34308,7 +35076,7 @@ import QRCode from "qrcode";
 function registerPairingRoutes(router, options) {
   const { paths } = options;
   router.get("/pair", async (ctx) => {
-    const sessionId = readString17(ctx.query, "session_id");
+    const sessionId = readString18(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -34333,7 +35101,7 @@ function registerPairingRoutes(router, options) {
     ctx.body = page;
   });
   router.get("/api/v1/pairing/session", async (ctx) => {
-    const sessionId = readString17(ctx.query, "session_id");
+    const sessionId = readString18(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -34784,7 +35552,7 @@ function registerInternalRoutes(router, options) {
   router.post("/internal/deliver", async (ctx) => {
     assertLoopbackRequest(ctx.req);
     const body = await readJsonBody(ctx.req);
-    const stagingDir = readString17(body, "staging_dir") ?? readString17(body, "stagingDir");
+    const stagingDir = readString18(body, "staging_dir") ?? readString18(body, "stagingDir");
     if (!stagingDir) {
       throw new LinkHttpError(
         400,
@@ -34797,6 +35565,19 @@ function registerInternalRoutes(router, options) {
       ...await options.conversations.deliverStagedFiles(stagingDir)
     };
   });
+  router.post("/internal/deliver-tool", async (ctx) => {
+    assertLoopbackRequest(ctx.req);
+    const body = await readJsonBody(ctx.req);
+    ctx.body = {
+      ok: true,
+      ...await options.conversations.deliverFilesFromTool({
+        profile: readString18(body, "profile") ?? readString18(body, "profile_name") ?? readString18(body, "profileName") ?? void 0,
+        taskId: readString18(body, "task_id") ?? readString18(body, "taskId") ?? void 0,
+        sessionId: readString18(body, "session_id") ?? readString18(body, "sessionId") ?? void 0,
+        files: body.files ?? body.file ?? body.path
+      })
+    };
+  });
 }
 function assertLoopbackRequest(request) {
   const address = request.socket.remoteAddress;