@hermespilot/link 0.7.7-beta.0 → 0.7.7

package/dist/{chunk-RFZ4SQV4.js → chunk-JQYZZDVU.js}

@@ -4,7 +4,8 @@ import Router from "@koa/router";
 
 // src/conversations/conversation-service.ts
 import { EventEmitter } from "events";
-import { createHash as createHash6, randomUUID as randomUUID10 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID11 } from "crypto";
+import path24 from "path";
 
 // src/database/link-database.ts
 import { mkdir } from "fs/promises";
@@ -35,6 +36,7 @@ var MIGRATIONS = [
         title TEXT NOT NULL,
         status TEXT NOT NULL,
         hermes_session_id TEXT NOT NULL,
+        workspace_id TEXT,
         profile TEXT,
         model TEXT,
         provider TEXT,
@@ -58,6 +60,8 @@ var MIGRATIONS = [
         ON conversation_stats(model);
       CREATE INDEX IF NOT EXISTS idx_conversation_stats_profile
         ON conversation_stats(profile);
+      CREATE INDEX IF NOT EXISTS idx_conversation_stats_workspace_status_updated
+        ON conversation_stats(workspace_id, status, updated_at);
     `
   },
   {
@@ -234,6 +238,7 @@ async function listConversationStatsPage(paths, input) {
   try {
     const conditions = ["status = ?"];
     const params = [status];
+    appendWorkspaceFilter(conditions, params, input.workspace);
     if (input.cursor) {
       conditions.push(`(
         updated_at < ?
@@ -276,7 +281,8 @@ async function searchConversationStatsPage(paths, input) {
     return listConversationStatsPage(paths, {
       limit,
       cursor: input.cursor,
-      status
+      status,
+      workspace: input.workspace
     });
   }
   const db = openDatabase(paths);
@@ -286,6 +292,7 @@ async function searchConversationStatsPage(paths, input) {
       status,
       `%${escapeSqlLike(query.toLowerCase())}%`
     ];
+    appendWorkspaceFilter(conditions, params, input.workspace);
     if (input.cursor) {
       conditions.push(`(
         updated_at < ?
@@ -818,7 +825,12 @@ function ensureProfileIdentitySchema(db) {
       "ALTER TABLE conversation_stats ADD COLUMN profile_name_snapshot TEXT;"
     );
   }
+  if (!conversationColumns.has("workspace_id")) {
+    db.exec("ALTER TABLE conversation_stats ADD COLUMN workspace_id TEXT;");
+  }
   db.exec(`
+    CREATE INDEX IF NOT EXISTS idx_conversation_stats_workspace_status_updated
+      ON conversation_stats(workspace_id, status, updated_at);
     CREATE INDEX IF NOT EXISTS idx_conversation_stats_profile_uid
       ON conversation_stats(profile_uid);
     CREATE INDEX IF NOT EXISTS idx_conversation_stats_profile_name_snapshot
@@ -835,6 +847,7 @@ function conversationStatsUpsertSql() {
       title,
       status,
       hermes_session_id,
+      workspace_id,
       profile_uid,
       profile_name_snapshot,
       profile,
@@ -850,12 +863,13 @@ function conversationStatsUpsertSql() {
       updated_at,
       deleted_at,
       stats_updated_at
-    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     ON CONFLICT(conversation_id) DO UPDATE SET
       kind = excluded.kind,
       title = excluded.title,
       status = excluded.status,
       hermes_session_id = excluded.hermes_session_id,
+      workspace_id = excluded.workspace_id,
       profile_uid = excluded.profile_uid,
       profile_name_snapshot = excluded.profile_name_snapshot,
       profile = excluded.profile,
@@ -880,6 +894,7 @@ function conversationStatsParams(record) {
     record.title,
     record.status,
     record.hermesSessionId,
+    record.workspaceId ?? null,
     record.profileUid ?? null,
     record.profileNameSnapshot ?? record.profile ?? null,
     record.profile ?? record.profileNameSnapshot ?? null,
@@ -897,6 +912,17 @@ function conversationStatsParams(record) {
     record.statsUpdatedAt
   ];
 }
+function appendWorkspaceFilter(conditions, params, filter) {
+  if (!filter || filter.kind === "all") {
+    return;
+  }
+  if (filter.kind === "default") {
+    conditions.push("(workspace_id IS NULL OR workspace_id = '')");
+    return;
+  }
+  conditions.push("workspace_id = ?");
+  params.push(filter.workspaceId);
+}
 function runUsageFactUpsertSql() {
   return `
     INSERT INTO run_usage_facts (
@@ -1642,6 +1668,11 @@ var messages = {
     "error.relayChallengeInvalid": "Relay did not return a valid install challenge.",
     "error.relayLinkInvalid": "Relay did not return a valid link_id.",
     "error.relayEmpty": "Relay returned an empty response.",
+    "error.workspaceNameConflict": "A workspace with this name already exists.",
+    "error.workspaceNameRequired": "Workspace name is required.",
+    "error.workspaceNameTooLong": "Workspace name is too long.",
+    "error.workspaceNotFound": "Workspace was not found.",
+    "error.workspaceIdInvalid": "Workspace id is invalid.",
     "error.serverHttp": "HermesPilot Server request failed with HTTP {status}.",
     "error.pairingServerUnreachable": "Could not reach HermesPilot Server while creating the pairing session. Check whether {url} is reachable, then try again. If you use a proxy network, add hermes-server.clawpilot.me and hermes-relay.clawpilot.me to the proxy exclusion list, or temporarily turn off VPN/proxy and retry.",
     "error.pairingRelayUnreachable": "Could not reach Hermes Relay while creating the pairing session. Check whether {url} is reachable, then try again. If you use a proxy network, add hermes-server.clawpilot.me and hermes-relay.clawpilot.me to the proxy exclusion list, or temporarily turn off VPN/proxy and retry.",
@@ -1883,6 +1914,11 @@ var messages = {
     "error.relayChallengeInvalid": "Relay \u6CA1\u6709\u8FD4\u56DE\u6709\u6548\u7684\u5B89\u88C5\u6311\u6218\u3002",
     "error.relayLinkInvalid": "Relay \u6CA1\u6709\u8FD4\u56DE\u6709\u6548\u7684 link_id\u3002",
     "error.relayEmpty": "Relay \u8FD4\u56DE\u4E86\u7A7A\u54CD\u5E94\u3002",
+    "error.workspaceNameConflict": "\u5DF2\u5B58\u5728\u540C\u540D\u5DE5\u4F5C\u533A\u3002",
+    "error.workspaceNameRequired": "\u8BF7\u8F93\u5165\u5DE5\u4F5C\u533A\u540D\u79F0\u3002",
+    "error.workspaceNameTooLong": "\u5DE5\u4F5C\u533A\u540D\u79F0\u592A\u957F\u3002",
+    "error.workspaceNotFound": "\u5DE5\u4F5C\u533A\u4E0D\u5B58\u5728\u3002",
+    "error.workspaceIdInvalid": "\u5DE5\u4F5C\u533A\u6807\u8BC6\u65E0\u6548\u3002",
     "error.serverHttp": "HermesPilot Server \u8BF7\u6C42\u5931\u8D25\uFF0CHTTP \u72B6\u6001\u7801\uFF1A{status}\u3002",
     "error.pairingServerUnreachable": "\u521B\u5EFA\u914D\u5BF9\u4F1A\u8BDD\u65F6\u65E0\u6CD5\u8FDE\u63A5 HermesPilot Server\u3002\u8BF7\u5148\u786E\u8BA4 {url} \u53EF\u4EE5\u8BBF\u95EE\uFF0C\u7136\u540E\u91CD\u8BD5\u3002\u91CD\u70B9\u63D0\u9192\uFF1A\u5982\u679C\u4F60\u4F7F\u7528\u4E86\u4EE3\u7406\u7F51\u7EDC\uFF0C\u53EF\u4EE5\u628A hermes-server.clawpilot.me \u548C hermes-relay.clawpilot.me \u52A0\u5165\u4EE3\u7406\u6392\u9664\u540D\u5355\uFF0C\u6216\u4E34\u65F6\u5173\u95ED VPN/\u4EE3\u7406\u540E\u518D\u8BD5\u3002",
     "error.pairingRelayUnreachable": "\u521B\u5EFA\u914D\u5BF9\u4F1A\u8BDD\u65F6\u65E0\u6CD5\u8FDE\u63A5 Hermes Relay\u3002\u8BF7\u5148\u786E\u8BA4 {url} \u53EF\u4EE5\u8BBF\u95EE\uFF0C\u7136\u540E\u91CD\u8BD5\u3002\u91CD\u70B9\u63D0\u9192\uFF1A\u5982\u679C\u4F60\u4F7F\u7528\u4E86\u4EE3\u7406\u7F51\u7EDC\uFF0C\u53EF\u4EE5\u628A hermes-server.clawpilot.me \u548C hermes-relay.clawpilot.me \u52A0\u5165\u4EE3\u7406\u6392\u9664\u540D\u5355\uFF0C\u6216\u4E34\u65F6\u5173\u95ED VPN/\u4EE3\u7406\u540E\u518D\u8BD5\u3002",
@@ -1944,6 +1980,21 @@ function translateKnownError(message, language) {
   if (message === "Relay returned an empty response") {
     return translate(language, "error.relayEmpty");
   }
+  if (message === "workspace name already exists") {
+    return translate(language, "error.workspaceNameConflict");
+  }
+  if (message === "workspace name is required") {
+    return translate(language, "error.workspaceNameRequired");
+  }
+  if (message === "workspace name is too long") {
+    return translate(language, "error.workspaceNameTooLong");
+  }
+  if (message === "workspace was not found") {
+    return translate(language, "error.workspaceNotFound");
+  }
+  if (message === "workspace_id is invalid") {
+    return translate(language, "error.workspaceIdInvalid");
+  }
   const portInUse = /^listen EADDRINUSE: address already in use .*:(?<port>\d+)$/u.exec(message);
   if (portInUse?.groups?.port) {
     return translate(language, "error.portInUse", { port: portInUse.groups.port });
@@ -6496,7 +6547,7 @@ async function listCronOutputFiles(profileName, jobId) {
       orderTimeMs: fileStat.mtimeMs
     });
   }
-  return files.sort((left, right) => left.orderTimeMs - right.orderTimeMs).map(({ path: path33, mtime }) => ({ path: path33, mtime }));
+  return files.sort((left, right) => left.orderTimeMs - right.orderTimeMs).map(({ path: path34, mtime }) => ({ path: path34, mtime }));
 }
 function readCronOutputTimestamp(fileName) {
   const match = fileName.match(
@@ -6585,7 +6636,7 @@ function isConversationMissingError(error) {
 }
 
 // src/constants.ts
-var LINK_VERSION = "0.7.7-beta.0";
+var LINK_VERSION = "0.7.7";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -6605,6 +6656,7 @@ function resolveRuntimePaths(homeDir = resolveRuntimeHome()) {
     credentialsFile: path5.join(homeDir, "credentials.json"),
     databaseFile: path5.join(homeDir, "link.db"),
     conversationsDir: path5.join(homeDir, "conversations"),
+    workspacesFile: path5.join(homeDir, "workspaces.json"),
     blobsDir: path5.join(homeDir, "blobs"),
     indexesDir: path5.join(homeDir, "indexes"),
     logsDir: path5.join(homeDir, "logs"),
@@ -7266,7 +7318,14 @@ async function deleteHermesSession(sessionId, profileName = "default") {
       status: readSessionDeleteStatus(output.stdout, output.stderr)
     };
   } catch (error) {
-    if (isSessionNotFoundOutput(readExecErrorOutput(error))) {
+    const output = readExecErrorOutput(error);
+    if (isProfileNotFoundOutput(output)) {
+      return {
+        session_id: normalizedSessionId,
+        status: "profile_not_found"
+      };
+    }
+    if (isSessionNotFoundOutput(output)) {
       return {
         session_id: normalizedSessionId,
         status: "not_found"
@@ -7328,6 +7387,9 @@ ${stderr.toString()}`;
   if (isSessionNotFoundOutput(output)) {
     return "not_found";
   }
+  if (isProfileNotFoundOutput(output)) {
+    return "profile_not_found";
+  }
   if (/deleted session\b/i.test(output)) {
     return "deleted";
   }
@@ -7336,6 +7398,9 @@ ${stderr.toString()}`;
 function isSessionNotFoundOutput(output) {
   return /\bsession\b[\s\S]*\bnot found\b/i.test(output);
 }
+function isProfileNotFoundOutput(output) {
+  return /\bprofile\b[\s\S]*\bdoes not exist\b/i.test(output);
+}
 function readExecErrorOutput(error) {
   if (typeof error !== "object" || error === null) {
     return "";
@@ -8641,6 +8706,61 @@ async function respondTuiGatewayApproval(input) {
   );
   return { resolved: readNumber2(result, "resolved") ?? 0 };
 }
+async function setTuiGatewaySessionArchived(input) {
+  const sessionId = input.sessionId.trim();
+  if (!sessionId) {
+    throw new LinkHttpError(
+      400,
+      "hermes_session_id_required",
+      "Hermes session id is required"
+    );
+  }
+  if (sessionId.startsWith("hp_")) {
+    return;
+  }
+  const profileName = normalizeProfileName2(input.profileName);
+  const backend = await ensureTuiGatewayBackend({
+    profileName,
+    paths: input.paths,
+    logger: input.logger
+  });
+  const response = await fetch(
+    `${backend.baseUrl}/api/sessions/${encodeURIComponent(sessionId)}`,
+    {
+      method: "PATCH",
+      headers: {
+        "content-type": "application/json",
+        "X-Hermes-Session-Token": backend.token
+      },
+      body: JSON.stringify({ archived: input.archived })
+    }
+  ).catch((error) => {
+    throw new LinkHttpError(
+      502,
+      "hermes_session_archive_failed",
+      error instanceof Error ? error.message : "Hermes session archive request failed"
+    );
+  });
+  touchBackend(profileName);
+  if (response.ok) {
+    return;
+  }
+  const detail = await response.text().catch(() => "");
+  if (response.status === 404) {
+    void input.logger?.debug("hermes_session_archive_missing", {
+      profile: profileName,
+      session_id: sessionId,
+      archived: input.archived,
+      detail
+    });
+    return;
+  }
+  throw new LinkHttpError(
+    502,
+    "hermes_session_archive_failed",
+    `Hermes session archive request failed with HTTP ${response.status}${detail ? `: ${detail}` : ""}`
+  );
+}
 async function readTuiGatewayStatus(input = {}) {
   const profile = normalizeProfileName2(input.profileName);
   const client = clients.get(profile);
@@ -9850,6 +9970,7 @@ function toStatsIndexRecord(manifest, stats = manifest.stats ?? buildConversatio
     title: manifest.title,
     status: manifest.status,
     hermesSessionId: manifest.hermes_session_id,
+    workspaceId: manifest.workspace_id ?? null,
     profileUid: stats.profile_uid ?? null,
     profileNameSnapshot: stats.profile_name_snapshot ?? stats.profile ?? null,
     profile: stats.profile ?? stats.profile_name_snapshot ?? null,
@@ -9999,8 +10120,204 @@ function firstRecord(...values) {
   return {};
 }
 
-// src/conversations/blob-store.ts
+// src/conversations/workspaces.ts
 import { randomUUID as randomUUID4 } from "crypto";
+var MAX_WORKSPACE_NAME_LENGTH = 40;
+var DEFAULT_WORKSPACE_ICON = "grid";
+var WORKSPACE_ICON_KEYS = /* @__PURE__ */ new Set([
+  "grid",
+  "folder",
+  "briefcase",
+  "code",
+  "cube",
+  "rocket",
+  "albums",
+  "bookmark",
+  "heart",
+  "library",
+  "planet",
+  "school"
+]);
+async function listWorkspaces(paths) {
+  const store = await readWorkspaceStore(paths);
+  return sortWorkspaces(store.workspaces);
+}
+async function createWorkspace(paths, input) {
+  const name = normalizeWorkspaceName(input.name);
+  const icon = normalizeWorkspaceIcon(input.icon);
+  let created;
+  await updateWorkspaceStore(paths, (store) => {
+    assertUniqueWorkspaceName(store.workspaces, name);
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    created = {
+      id: `ws_${randomUUID4().replaceAll("-", "")}`,
+      name,
+      icon,
+      created_at: now,
+      updated_at: now
+    };
+    return {
+      ...store,
+      workspaces: [...store.workspaces, created]
+    };
+  });
+  return created;
+}
+async function renameWorkspace(paths, workspaceId, input) {
+  const id = normalizeWorkspaceId(workspaceId);
+  const name = normalizeWorkspaceName(input.name);
+  const icon = normalizeWorkspaceIcon(input.icon);
+  let renamed;
+  await updateWorkspaceStore(paths, (store) => {
+    assertUniqueWorkspaceName(store.workspaces, name, id);
+    const index = store.workspaces.findIndex((workspace) => workspace.id === id);
+    if (index < 0) {
+      throw workspaceNotFound();
+    }
+    const next = [...store.workspaces];
+    renamed = {
+      ...next[index],
+      name,
+      icon,
+      updated_at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    next[index] = renamed;
+    return { ...store, workspaces: next };
+  });
+  return renamed;
+}
+async function deleteWorkspace(paths, workspaceId) {
+  const id = normalizeWorkspaceId(workspaceId);
+  let deleted;
+  await updateWorkspaceStore(paths, (store) => {
+    const next = store.workspaces.filter((workspace) => {
+      if (workspace.id === id) {
+        deleted = workspace;
+        return false;
+      }
+      return true;
+    });
+    if (!deleted) {
+      throw workspaceNotFound();
+    }
+    return { ...store, workspaces: next };
+  });
+  return deleted;
+}
+async function assertWorkspaceExists(paths, workspaceId) {
+  const id = normalizeOptionalWorkspaceId(workspaceId);
+  if (!id) {
+    return void 0;
+  }
+  const store = await readWorkspaceStore(paths);
+  if (!store.workspaces.some((workspace) => workspace.id === id)) {
+    throw workspaceNotFound();
+  }
+  return id;
+}
+function normalizeOptionalWorkspaceId(value) {
+  if (value == null) {
+    return void 0;
+  }
+  const normalized = value.trim();
+  if (!normalized || normalized === "default") {
+    return void 0;
+  }
+  return normalizeWorkspaceId(normalized);
+}
+function normalizeWorkspaceId(value) {
+  const normalized = value.trim();
+  if (!/^ws_[a-zA-Z0-9]+$/u.test(normalized)) {
+    throw new LinkHttpError(400, "workspace_id_invalid", "workspace_id is invalid");
+  }
+  return normalized;
+}
+function normalizeWorkspaceName(value) {
+  const normalized = value.replace(/\s+/gu, " ").trim();
+  if (!normalized) {
+    throw new LinkHttpError(
+      400,
+      "workspace_name_required",
+      "workspace name is required"
+    );
+  }
+  if (Array.from(normalized).length > MAX_WORKSPACE_NAME_LENGTH) {
+    throw new LinkHttpError(
+      400,
+      "workspace_name_too_long",
+      "workspace name is too long"
+    );
+  }
+  return normalized;
+}
+function normalizeWorkspaceIcon(value) {
+  const normalized = value?.trim() ?? "";
+  if (!normalized) {
+    return DEFAULT_WORKSPACE_ICON;
+  }
+  return WORKSPACE_ICON_KEYS.has(normalized) ? normalized : DEFAULT_WORKSPACE_ICON;
+}
+function assertUniqueWorkspaceName(workspaces, name, exceptWorkspaceId) {
+  const normalized = name.toLocaleLowerCase();
+  if (workspaces.some(
+    (workspace) => workspace.id !== exceptWorkspaceId && workspace.name.toLocaleLowerCase() === normalized
+  )) {
+    throw new LinkHttpError(
+      409,
+      "workspace_name_conflict",
+      "workspace name already exists"
+    );
+  }
+}
+async function readWorkspaceStore(paths) {
+  return normalizeWorkspaceStore(await readJsonFile(paths.workspacesFile));
+}
+async function updateWorkspaceStore(paths, update) {
+  return updateJsonFile(
+    paths.workspacesFile,
+    (current) => update(normalizeWorkspaceStore(current)),
+    384
+  );
+}
+function normalizeWorkspaceStore(store) {
+  if (!store || !Array.isArray(store.workspaces)) {
+    return { schema_version: 1, workspaces: [] };
+  }
+  return {
+    schema_version: 1,
+    workspaces: store.workspaces.map(normalizeWorkspaceRecord).filter(
+      (workspace) => Boolean(workspace)
+    )
+  };
+}
+function normalizeWorkspaceRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return null;
+  }
+  const record = value;
+  const id = typeof record.id === "string" ? record.id.trim() : "";
+  const name = typeof record.name === "string" ? record.name.trim() : "";
+  const icon = normalizeWorkspaceIcon(
+    typeof record.icon === "string" ? record.icon : void 0
+  );
+  const createdAt = typeof record.created_at === "string" ? record.created_at.trim() : "";
+  const updatedAt = typeof record.updated_at === "string" ? record.updated_at.trim() : "";
+  if (!id || !name || !createdAt || !updatedAt) {
+    return null;
+  }
+  return { id, name, icon, created_at: createdAt, updated_at: updatedAt };
+}
+function sortWorkspaces(workspaces) {
+  return [...workspaces].sort(
+    (left, right) => left.created_at.localeCompare(right.created_at) || left.id.localeCompare(right.id)
+  );
+}
+function workspaceNotFound() {
+  return new LinkHttpError(404, "workspace_not_found", "workspace was not found");
+}
+
+// src/conversations/blob-store.ts
+import { randomUUID as randomUUID5 } from "crypto";
 import { mkdir as mkdir6, readFile as readFile7, readdir as readdir4, rm as rm3, stat as stat6, writeFile } from "fs/promises";
 import path10 from "path";
 
@@ -10453,7 +10770,7 @@ async function writeConversationBlob(paths, conversationId, input, options) {
   if (input.bytes.byteLength > options.maxBytes) {
     throw new LinkHttpError(413, "blob_too_large", "Blob is too large");
   }
-  const id = `blob_${randomUUID4().replaceAll("-", "")}`;
+  const id = `blob_${randomUUID5().replaceAll("-", "")}`;
   const filePath = blobPath(paths, id);
   await mkdir6(path10.dirname(filePath), { recursive: true, mode: 448 });
   await writeFile(filePath, input.bytes, { mode: 384 });
@@ -10592,13 +10909,6 @@ async function listConversationBlobIds(paths, conversationId) {
   }
   return blobIds;
 }
-async function removeConversationFiles(paths, conversationId) {
-  assertValidConversationId(conversationId);
-  await rm3(path10.join(paths.conversationsDir, conversationId), {
-    recursive: true,
-    force: true
-  });
-}
 function conversationAttachmentsDir(paths, conversationId) {
   assertValidConversationId(conversationId);
   return path10.join(paths.conversationsDir, conversationId, "attachments");
@@ -10828,6 +11138,7 @@ function toSummary(manifest, snapshot, profile) {
     id: manifest.id,
     title: manifest.title,
     title_source: manifest.title_source,
+    workspace_id: manifest.workspace_id ?? null,
     created_at: manifest.created_at,
     updated_at: manifest.updated_at,
     last_event_seq: manifest.last_event_seq,
@@ -10878,7 +11189,7 @@ function isRealtimeRunStatus(status) {
 }
 
 // src/conversations/slash-commands.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 var MODEL_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/@+-]{0,127}$/u;
 function isValidModelId(value) {
   return MODEL_ID_PATTERN.test(value);
@@ -10975,7 +11286,7 @@ function parseSlashCommandInput(content, language = "zh-CN") {
 }
 function createSlashCommandUserMessage(input) {
   return {
-    id: `msg_${randomUUID5().replaceAll("-", "")}`,
+    id: `msg_${randomUUID6().replaceAll("-", "")}`,
     schema_version: 1,
     conversation_id: input.conversationId,
     role: "user",
@@ -11025,7 +11336,7 @@ function slashHelpMessage(language = "zh-CN") {
   ].join("\n");
 }
 function freshHermesSessionId(conversationId) {
-  return `hp_${conversationId}_${randomUUID5().replaceAll("-", "").slice(0, 12)}`;
+  return `hp_${conversationId}_${randomUUID6().replaceAll("-", "").slice(0, 12)}`;
 }
 function nextVerboseMode(current) {
   const modes = [
@@ -11663,7 +11974,7 @@ function safePathSegment(value, fallback) {
 }
 
 // src/conversations/conversation-archive-plans.ts
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir8 } from "fs/promises";
 import path12 from "path";
 var PLAN_ID_PATTERN = /^archive_[a-f0-9]{32}$/u;
@@ -11675,7 +11986,7 @@ var ConversationArchivePlanStore = class {
   async create(conversationIds) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const plan = {
-      id: `archive_${randomUUID6().replaceAll("-", "")}`,
+      id: `archive_${randomUUID7().replaceAll("-", "")}`,
       status: "prepared",
       created_at: now,
       updated_at: now,
@@ -11727,7 +12038,7 @@ function normalizePlanId(planId) {
 }
 
 // src/conversations/conversation-clear-plans.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 import { mkdir as mkdir9 } from "fs/promises";
 import path13 from "path";
 var PLAN_ID_PATTERN2 = /^clear_[a-f0-9]{32}$/u;
@@ -11739,7 +12050,7 @@ var ConversationClearPlanStore = class {
   async create(conversationIds, targetStatus = "active") {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const plan = {
-      id: `clear_${randomUUID7().replaceAll("-", "")}`,
+      id: `clear_${randomUUID8().replaceAll("-", "")}`,
       status: "prepared",
       target_status: targetStatus,
       created_at: now,
@@ -11940,6 +12251,11 @@ function collectHermesSessionDeleteTargets(manifest, snapshot) {
   }
   return targets;
 }
+function collectHermesSessionMutationTargets(manifest, snapshot) {
+  return collectHermesSessionDeleteTargets(manifest, snapshot).filter(
+    (target) => !target.sessionId.startsWith("hp_")
+  );
+}
 function arraysEqual(left, right) {
   if (left.length !== right.length) {
     return false;
@@ -12389,6 +12705,7 @@ var ConversationMaintenanceCoordinator = class {
     }
     const archivedAt = (/* @__PURE__ */ new Date()).toISOString();
     const snapshot = await this.deps.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
+    await this.setHermesSessionsArchived(manifest, snapshot, true);
     await this.deps.store.writeManifest({
       ...manifest,
       status: "archived",
@@ -12429,6 +12746,7 @@ var ConversationMaintenanceCoordinator = class {
     }
     const unarchivedAt = (/* @__PURE__ */ new Date()).toISOString();
     const snapshot = await this.deps.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
+    await this.setHermesSessionsArchived(manifest, snapshot, false);
     const next = {
       ...manifest,
       status: "active",
@@ -12532,6 +12850,18 @@ var ConversationMaintenanceCoordinator = class {
     }
     return results;
   }
+  async setHermesSessionsArchived(manifest, snapshot, archived) {
+    const targets = collectHermesSessionMutationTargets(manifest, snapshot);
+    for (const target of targets) {
+      await setTuiGatewaySessionArchived({
+        paths: this.deps.paths,
+        logger: this.deps.logger,
+        profileName: target.profileName,
+        sessionId: target.sessionId,
+        archived
+      });
+    }
+  }
   async pruneConversationBlobReferences(conversationId, blobIds) {
     for (const blobId of blobIds) {
       try {
@@ -13056,7 +13386,7 @@ function stripCompressionTitleSuffix(value) {
 }
 
 // src/conversations/conversation-turns.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 var MESSAGE_ORDER_STEP_MS = 10;
 var ASSISTANT_ORDER_OFFSET_MS = 1;
 function createAgentTurnDraft(input) {
@@ -13305,10 +13635,10 @@ function createAssistantMessage(input) {
   };
 }
 function createMessageId() {
-  return `msg_${randomUUID8().replaceAll("-", "")}`;
+  return `msg_${randomUUID9().replaceAll("-", "")}`;
 }
 function createRunId() {
-  return `run_${randomUUID8().replaceAll("-", "")}`;
+  return `run_${randomUUID9().replaceAll("-", "")}`;
 }
 function hasActiveOrQueuedRuns(snapshot) {
   return snapshot.runs.some(
@@ -14600,11 +14930,17 @@ var ConversationQueryCoordinator = class {
       status,
       limit,
       cursor,
-      fallback: () => this.listConversationPageFromStore({ status, limit, cursor }),
+      fallback: () => this.listConversationPageFromStore({
+        status,
+        limit,
+        cursor,
+        workspace: options.workspace
+      }),
       listPage: (pageCursor) => listConversationStatsPage(this.deps.paths, {
         status,
         limit,
-        cursor: pageCursor
+        cursor: pageCursor,
+        workspace: options.workspace
       })
     });
   }
@@ -14693,11 +15029,11 @@ var ConversationQueryCoordinator = class {
       }
     };
   }
-  async listConversationsFromStore(status = "active") {
+  async listConversationsFromStore(status = "active", workspace) {
     const summaries = [];
     for (const conversationId of await this.deps.store.listConversationIds()) {
       const manifest = await this.deps.store.readManifest(conversationId).catch(() => null);
-      if (!manifest || manifest.status !== status) {
+      if (!manifest || manifest.status !== status || !matchesWorkspaceFilter(manifest, workspace)) {
         continue;
       }
       const snapshot = await this.deps.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
@@ -14709,7 +15045,10 @@ var ConversationQueryCoordinator = class {
     );
   }
   async listConversationPageFromStore(input) {
-    const all = await this.listConversationsFromStore(input.status);
+    const all = await this.listConversationsFromStore(
+      input.status,
+      input.workspace
+    );
     const startIndex = input.cursor ? all.findIndex(
       (summary) => isAfterConversationListCursor(summary, input.cursor)
     ) : 0;
@@ -14914,6 +15253,16 @@ function readNonEmptyString(value) {
 function normalizeConversationSearchQuery(value) {
   return typeof value === "string" ? value.trim() : "";
 }
+function matchesWorkspaceFilter(manifest, filter) {
+  if (!filter || filter.kind === "all") {
+    return true;
+  }
+  const workspaceId = manifest.workspace_id?.trim() ?? "";
+  if (filter.kind === "default") {
+    return workspaceId === "";
+  }
+  return workspaceId === filter.workspaceId;
+}
 function isAfterConversationListCursor(summary, cursor) {
   return summary.updated_at < cursor.updatedAt || summary.updated_at === cursor.updatedAt && summary.id < cursor.conversationId;
 }
@@ -15106,7 +15455,7 @@ function isNodeError9(error, code) {
 }
 
 // src/conversations/hermes-session-sync.ts
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 import { readdir as readdir7, readFile as readFile10, stat as stat10 } from "fs/promises";
 import path17 from "path";
 
@@ -17068,7 +17417,7 @@ function toLinkMessage(input) {
   const sessionId = readString10(input.message, "session_id") ?? input.sessionId;
   const createdAt = isoFromHermesTime(input.message.timestamp) ?? new Date(Date.now() + input.index).toISOString();
   return {
-    id: `msg_${randomUUID9().replaceAll("-", "")}`,
+    id: `msg_${randomUUID10().replaceAll("-", "")}`,
     schema_version: 1,
     conversation_id: input.conversationId,
     role,
@@ -17251,7 +17600,7 @@ async function isFile(filePath) {
   });
 }
 function createConversationId() {
-  return `conv_${randomUUID9().replaceAll("-", "")}`;
+  return `conv_${randomUUID10().replaceAll("-", "")}`;
 }
 function isoFromHermesTime(value) {
   const numeric = readNumber3(value);
@@ -17942,10 +18291,10 @@ function parseHermesApiCapabilities(payload) {
     sessionKeyHeader: readString12(features, "session_key_header")
   };
 }
-async function callHermesApi(path33, init, options) {
+async function callHermesApi(path34, init, options) {
   const method = init.method ?? "GET";
   const startedAt = Date.now();
-  void options.logger?.debug("hermes_api_request_started", { method, path: path33 });
+  void options.logger?.debug("hermes_api_request_started", { method, path: path34 });
   const availability = await ensureHermesApiServerAvailable({
     fetchImpl: options.fetchImpl,
     logger: options.logger,
@@ -17954,7 +18303,7 @@ async function callHermesApi(path33, init, options) {
   });
   let config = availability.configResult.apiServer;
   const fetcher = options.fetchImpl ?? fetch;
-  const request = () => fetchHermesApi(fetcher, config, path33, init, options);
+  const request = () => fetchHermesApi(fetcher, config, path34, init, options);
   let response;
   try {
     response = await request();
@@ -17962,7 +18311,7 @@ async function callHermesApi(path33, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path33,
+      path34,
       options.profileName,
       startedAt,
       error
@@ -17973,7 +18322,7 @@ async function callHermesApi(path33, init, options) {
     logHermesApiResponse(
       options.logger,
       method,
-      path33,
+      path34,
       options.profileName,
       startedAt,
       response
@@ -17982,7 +18331,7 @@ async function callHermesApi(path33, init, options) {
   }
   void options.logger?.warn("hermes_api_request_retrying_after_401", {
     method,
-    path: path33,
+    path: path34,
     profile: options.profileName ?? "default",
     port: config.port ?? null,
     duration_ms: Date.now() - startedAt
@@ -18001,7 +18350,7 @@ async function callHermesApi(path33, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path33,
+      path34,
       options.profileName,
       startedAt,
       error
@@ -18011,7 +18360,7 @@ async function callHermesApi(path33, init, options) {
   logHermesApiResponse(
     options.logger,
     method,
-    path33,
+    path34,
     options.profileName,
     startedAt,
     response
@@ -18021,7 +18370,7 @@ async function callHermesApi(path33, init, options) {
   }
   void options.logger?.warn("hermes_api_request_repairing_after_401", {
     method,
-    path: path33,
+    path: path34,
     profile: options.profileName ?? "default",
     port: config.port ?? null,
     duration_ms: Date.now() - startedAt
@@ -18042,7 +18391,7 @@ async function callHermesApi(path33, init, options) {
     logHermesApiError(
       options.logger,
       method,
-      path33,
+      path34,
       options.profileName,
       startedAt,
       error
@@ -18052,21 +18401,21 @@ async function callHermesApi(path33, init, options) {
   logHermesApiResponse(
     options.logger,
     method,
-    path33,
+    path34,
     options.profileName,
     startedAt,
     response
   );
   return response;
 }
-async function fetchHermesApi(fetcher, config, path33, init, options) {
+async function fetchHermesApi(fetcher, config, path34, init, options) {
   const headers = new Headers(init.headers);
   headers.set("accept", headers.get("accept") ?? "application/json");
   if (config.key) {
     headers.set("x-api-key", config.key);
     headers.set("authorization", `Bearer ${config.key}`);
   }
-  return await fetcher(`http://127.0.0.1:${config.port}${path33}`, {
+  return await fetcher(`http://127.0.0.1:${config.port}${path34}`, {
     ...init,
     headers
   }).catch((error) => {
@@ -18075,10 +18424,10 @@ async function fetchHermesApi(fetcher, config, path33, init, options) {
     }
     void options.logger?.warn("hermes_api_server_connect_failed", {
       method: String(init.method ?? "GET").toUpperCase(),
-      path: path33,
+      path: path34,
       profile: options.profileName ?? "default",
       port: config.port ?? null,
-      url: `http://127.0.0.1:${config.port}${path33}`,
+      url: `http://127.0.0.1:${config.port}${path34}`,
       error: error instanceof Error ? error.message : String(error)
     });
     throw new LinkHttpError(
@@ -18088,10 +18437,10 @@ async function fetchHermesApi(fetcher, config, path33, init, options) {
     );
   });
 }
-function logHermesApiResponse(logger, method, path33, profileName, startedAt, response) {
+function logHermesApiResponse(logger, method, path34, profileName, startedAt, response) {
   const fields = {
     method,
-    path: path33,
+    path: path34,
     profile: profileName ?? "default",
     status: response.status,
     duration_ms: Date.now() - startedAt
@@ -18112,10 +18461,10 @@ async function logHermesApiFailureResponse(logger, fields, response) {
     ...upstreamError ? { upstream_error: upstreamError } : {}
   });
 }
-function logHermesApiError(logger, method, path33, profileName, startedAt, error) {
+function logHermesApiError(logger, method, path34, profileName, startedAt, error) {
   void logger?.warn("hermes_api_request_failed", {
     method,
-    path: path33,
+    path: path34,
     profile: profileName ?? "default",
     duration_ms: Date.now() - startedAt,
     ...error instanceof LinkHttpError ? { status: error.status, code: error.code } : {},
@@ -23989,6 +24338,7 @@ function isNodeError17(error, code) {
 
 // src/conversations/conversation-service.ts
 var ALL_CONVERSATION_EVENTS = "conversation:*";
+var HERMES_ARCHIVE_STATE_SYNC_ID = "hermes-agent-archive-state-v1";
 function isConversationNotificationEvent(event) {
   const type = event.type.toLowerCase();
   return type === "conversation.created" || type === "conversation.updated" || isAlwaysPublishedNotificationEvent(type) || type === "message.created" || type === "message.completed" || type === "message.failed" || type === "run.started" || type === "run.queued" || type === "run.completed" || type === "run.failed" || type === "run.cancelled" || type === "run.canceled" || type === "approval.requested" || readPayloadBool(event.payload, "requires_action") || readPayloadBool(event.payload, "requires_user_action") || readPayloadBool(event.payload, "requires_approval");
@@ -24115,6 +24465,7 @@ var ConversationService = class {
       return manifest;
     }
     const snapshot = await this.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
+    await this.setHermesSessionsArchived(manifest, snapshot, false);
     const unarchivedAt = (/* @__PURE__ */ new Date()).toISOString();
     const next = {
       ...manifest,
@@ -24183,12 +24534,16 @@ var ConversationService = class {
   async createConversation(input = {}) {
     await this.store.ensureConversationsDir();
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const id = `conv_${randomUUID10().replaceAll("-", "")}`;
+    const id = `conv_${randomUUID11().replaceAll("-", "")}`;
     const title = input.title?.trim() || DEFAULT_CONVERSATION_TITLE;
     const profile = await resolveConversationProfileTarget(
       this.paths,
       input.profileName
     );
+    const workspaceId = await assertWorkspaceExists(
+      this.paths,
+      input.workspaceId
+    );
     const manifest = {
       id,
       schema_version: 1,
@@ -24204,6 +24559,7 @@ var ConversationService = class {
       profile: profile.profileName,
       owner_account_id: input.accountId,
       owner_app_instance_id: input.appInstanceId,
+      workspace_id: workspaceId ?? null,
       created_at: now,
       updated_at: now,
       last_event_seq: 0
@@ -24214,6 +24570,7 @@ var ConversationService = class {
       payload: {
         title,
         title_source: manifest.title_source,
+        workspace_id: workspaceId ?? null,
         profile: {
           uid: profile.profileUid,
           name: profile.profileName,
@@ -24368,7 +24725,7 @@ var ConversationService = class {
         updated_at: now
       } : manifest;
       const message = {
-        id: `msg_${randomUUID10().replaceAll("-", "")}`,
+        id: `msg_${randomUUID11().replaceAll("-", "")}`,
         schema_version: 1,
         conversation_id: manifest.id,
         role: "assistant",
@@ -24559,6 +24916,7 @@ var ConversationService = class {
       if (result.imported_count > 0 || result.reprojected_count > 0) {
         await this.rebuildStatisticsIndex();
       }
+      await this.syncHermesArchiveStatesBestEffort();
       return result;
     })();
     this.hermesSessionSyncPromise = task;
@@ -25126,6 +25484,136 @@ var ConversationService = class {
   async unarchiveConversation(conversationId) {
     return this.maintenance.unarchiveConversation(conversationId);
   }
+  listWorkspaces() {
+    return listWorkspaces(this.paths);
+  }
+  createWorkspace(input) {
+    return createWorkspace(this.paths, input);
+  }
+  renameWorkspace(workspaceId, input) {
+    return renameWorkspace(this.paths, workspaceId, input);
+  }
+  async deleteWorkspace(workspaceId) {
+    const workspace = await deleteWorkspace(this.paths, workspaceId);
+    const movedConversationCount = await this.clearWorkspaceFromConversations(workspace.id);
+    return { workspace, movedConversationCount };
+  }
+  async setConversationWorkspace(conversationId, workspaceId) {
+    const normalizedWorkspaceId = await assertWorkspaceExists(
+      this.paths,
+      workspaceId
+    );
+    return this.withConversationLock(conversationId, async () => {
+      const manifest = await this.store.readRunnableManifest(conversationId);
+      const currentWorkspaceId = manifest.workspace_id ?? null;
+      const nextWorkspaceId = normalizedWorkspaceId ?? null;
+      const snapshot = await this.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
+      if (currentWorkspaceId !== nextWorkspaceId) {
+        const nextManifest = {
+          ...manifest,
+          workspace_id: nextWorkspaceId
+        };
+        await this.store.writeManifest(nextManifest);
+        await this.persistConversationStatsWithoutManifestRewrite(
+          nextManifest,
+          snapshot
+        );
+        const conversation = await this.queries.summarizeConversation(
+          nextManifest,
+          snapshot
+        );
+        return {
+          conversation_id: conversationId,
+          workspace_id: nextWorkspaceId,
+          conversation
+        };
+      }
+      return {
+        conversation_id: conversationId,
+        workspace_id: currentWorkspaceId,
+        conversation: await this.queries.summarizeConversation(
+          manifest,
+          snapshot
+        )
+      };
+    });
+  }
+  async clearWorkspaceFromConversations(workspaceId) {
+    const normalizedWorkspaceId = normalizeOptionalWorkspaceId(workspaceId);
+    if (!normalizedWorkspaceId) {
+      return 0;
+    }
+    let movedConversationCount = 0;
+    for (const conversationId of await this.store.listConversationIds()) {
+      await this.withConversationLock(conversationId, async () => {
+        const manifest = await this.store.readManifest(conversationId).catch(() => null);
+        if (!manifest || manifest.workspace_id !== normalizedWorkspaceId) {
+          return;
+        }
+        const nextManifest = {
+          ...manifest,
+          workspace_id: null
+        };
+        await this.store.writeManifest(nextManifest);
+        const snapshot = await this.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
+        await this.persistConversationStatsWithoutManifestRewrite(
+          nextManifest,
+          snapshot
+        );
+        movedConversationCount += 1;
+      });
+    }
+    return movedConversationCount;
+  }
+  async syncHermesArchiveStatesBestEffort() {
+    const markerPath = this.hermesArchiveStateSyncMarkerPath();
+    const marker = await readJsonFile(
+      markerPath
+    ).catch(() => null);
+    if (marker?.id === HERMES_ARCHIVE_STATE_SYNC_ID) {
+      return;
+    }
+    let failedCount = 0;
+    for (const conversationId of await this.store.listConversationIds()) {
+      const manifest = await this.store.readManifest(conversationId).catch(() => null);
+      if (!manifest || manifest.status !== "archived") {
+        continue;
+      }
+      const snapshot = await this.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
+      await this.setHermesSessionsArchived(manifest, snapshot, true).catch(
+        (error) => {
+          failedCount += 1;
+          void this.logger.debug("hermes_archive_state_sync_failed", {
+            conversation_id: conversationId,
+            archived: true,
+            error: error instanceof Error ? error.message : String(error)
+          });
+        }
+      );
+    }
+    if (failedCount > 0) {
+      return;
+    }
+    await writeJsonFile(markerPath, {
+      id: HERMES_ARCHIVE_STATE_SYNC_ID,
+      completed_at: (/* @__PURE__ */ new Date()).toISOString()
+    });
+  }
+  async setHermesSessionsArchived(manifest, snapshot, archived) {
+    const targets = collectHermesSessionMutationTargets(manifest, snapshot);
+    for (const target of targets) {
+      await setTuiGatewaySessionArchived({
+        paths: this.paths,
+        logger: this.logger,
+        profileName: target.profileName,
+        sessionId: target.sessionId,
+        archived
+      });
+    }
+  }
+  hermesArchiveStateSyncMarkerPath() {
+    return path24.join(this.paths.indexesDir, "hermes-archive-state-sync.json");
+  }
   prepareClearAllConversationPlan(targetStatus) {
     return this.maintenance.prepareClearAllConversationPlan(targetStatus);
   }
@@ -25162,45 +25650,15 @@ var ConversationService = class {
       if (!manifest || !conversationMatchesProfile(manifest, profileName, profileUid)) {
         continue;
       }
-      const deleted = await this.withConversationLock(
-        conversationId,
-        async () => {
-          const lockedManifest = await this.store.readManifest(conversationId).catch(() => null);
-          if (!lockedManifest || !conversationMatchesProfile(lockedManifest, profileName, profileUid)) {
-            return false;
-          }
-          this.abortActiveRunsForConversation(conversationId);
-          const snapshot = await this.store.readSnapshot(conversationId).catch(() => emptySnapshot2());
-          const blobIds = /* @__PURE__ */ new Set([
-            ...collectBlobIds(snapshot),
-            ...await listConversationBlobIds(this.paths, conversationId).catch(
-              () => []
-            )
-          ]);
-          for (const blobId of blobIds) {
-            await pruneConversationBlobReference(
-              this.paths,
-              conversationId,
-              blobId
-            ).catch((error) => {
-              void this.logger.warn("profile_delete_blob_gc_failed", {
-                profile: profileName,
-                conversation_id: conversationId,
-                blob_id: blobId,
-                error: error instanceof Error ? error.message : String(error)
-              });
-            });
-          }
-          await removeConversationFiles(this.paths, conversationId);
-          await removeConversationDeliveryStaging(
-            this.paths,
-            conversationId
-          ).catch(() => void 0);
-          return true;
-        }
-      );
-      if (deleted) {
+      try {
+        await this.deleteConversation(conversationId);
         deletedConversationIds.push(conversationId);
+      } catch (error) {
+        void this.logger.warn("profile_delete_conversation_cleanup_failed", {
+          profile: profileName,
+          conversation_id: conversationId,
+          error: error instanceof Error ? error.message : String(error)
+        });
       }
     }
     await deleteConversationStatsForProfile(this.paths, {
@@ -25231,6 +25689,13 @@ var ConversationService = class {
       statsOverride
     );
   }
+  async persistConversationStatsWithoutManifestRewrite(manifest, snapshot) {
+    const stats = manifest.stats ?? buildConversationStats(manifest, snapshot);
+    await upsertConversationStats(
+      this.paths,
+      toStatsIndexRecord({ ...manifest, stats }, stats)
+    );
+  }
   async appendEvent(conversationId, input) {
     const event = await this.store.appendEvent(conversationId, input);
     this.emitter.emit(this.liveEventName(conversationId), event);
@@ -25345,7 +25810,7 @@ function approvalRestartText(language, zh, en) {
 }
 
 // src/security/devices.ts
-import { randomBytes as randomBytes3, randomUUID as randomUUID11, timingSafeEqual, createHash as createHash7 } from "crypto";
+import { randomBytes as randomBytes3, randomUUID as randomUUID12, timingSafeEqual, createHash as createHash7 } from "crypto";
 var ACCESS_TOKEN_TTL_MS = 15 * 60 * 1e3;
 var REFRESH_TOKEN_TTL_MS = 90 * 24 * 60 * 60 * 1e3;
 var DEVICE_SEEN_WRITE_INTERVAL_MS = 60 * 60 * 1e3;
@@ -25363,7 +25828,7 @@ async function createDeviceSession(input, paths = resolveRuntimePaths()) {
     }
   }
   const device = {
-    id: `dev_${randomUUID11().replaceAll("-", "")}`,
+    id: `dev_${randomUUID12().replaceAll("-", "")}`,
     label: normalizeDeviceLabel(input.label),
     platform: normalizeDevicePlatform(input.platform),
     model: normalizeDeviceModel(input.model),
@@ -26240,7 +26705,8 @@ function registerConversationRoutes(router, options) {
     ctx.set("cache-control", "no-store");
     const result = await conversations.listConversationPage({
       limit: readLimit(ctx.query.limit),
-      cursor
+      cursor,
+      workspace: readConversationWorkspaceFilter(ctx.query)
     });
     const localized = localizeConversationListPage(result, language);
     ctx.body = {
@@ -26309,7 +26775,8 @@ function registerConversationRoutes(router, options) {
           title: readString19(body, "title") ?? void 0,
           profileName: readOptionalProfileName(body),
           accountId: auth.accountId,
-          appInstanceId: auth.appInstanceId
+          appInstanceId: auth.appInstanceId,
+          workspaceId: readConversationWorkspaceId(body)
         }),
         language
       )
@@ -26691,6 +27158,21 @@ function registerConversationRoutes(router, options) {
       };
     }
   );
+  router.patch("/api/v1/conversations/:conversationId/workspace", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    const language = readPreferredLanguage(ctx);
+    const body = await readJsonBody(ctx.req);
+    ctx.body = {
+      ok: true,
+      ...localizeConversationResult(
+        await conversations.setConversationWorkspace(
+          ctx.params.conversationId,
+          readConversationWorkspaceId(body)
+        ),
+        language
+      )
+    };
+  });
   router.delete("/api/v1/conversations/:conversationId", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const result = await conversations.deleteConversation(
@@ -26784,6 +27266,25 @@ function readConversationListForce(query) {
   const raw = Array.isArray(query.force) ? query.force[0] : query.force;
   return readBoolean3(raw) === true;
 }
+function readConversationWorkspaceFilter(query) {
+  const workspace = readQueryString(query.workspace) ?? readQueryString(query.workspace_id);
+  if (!workspace || workspace === "all") {
+    return { kind: "all" };
+  }
+  if (workspace === "default") {
+    return { kind: "default" };
+  }
+  return { kind: "workspace", workspaceId: workspace };
+}
+function readConversationWorkspaceId(body) {
+  if (Object.prototype.hasOwnProperty.call(body, "workspace_id") || Object.prototype.hasOwnProperty.call(body, "workspaceId")) {
+    return readString19(body, "workspace_id") ?? readString19(body, "workspaceId");
+  }
+  if (Object.prototype.hasOwnProperty.call(body, "workspace")) {
+    return readString19(body, "workspace");
+  }
+  return void 0;
+}
 function localizeConversationListPage(page, language) {
   return {
     ...page,
@@ -26997,11 +27498,11 @@ function isSseRequestContext(ctx) {
   }
   return isSseRequestPath(ctx.path) || isActiveSseSocket(ctx.req.socket);
 }
-function isSseRequestPath(path33) {
-  if (!path33) {
+function isSseRequestPath(path34) {
+  if (!path34) {
     return false;
   }
-  return path33 === "/api/v1/conversations/events" || path33 === "/api/v1/profile-creation/events" || path33 === "/api/v1/hermes/update/events" || path33 === "/api/v1/link/update/events" || /^\/api\/v1\/conversations\/[^/]+\/events$/u.test(path33) || /^\/api\/v1\/runs\/[^/]+\/events$/u.test(path33);
+  return path34 === "/api/v1/conversations/events" || path34 === "/api/v1/profile-creation/events" || path34 === "/api/v1/hermes/update/events" || path34 === "/api/v1/link/update/events" || /^\/api\/v1\/conversations\/[^/]+\/events$/u.test(path34) || /^\/api\/v1\/runs\/[^/]+\/events$/u.test(path34);
 }
 function isExpectedClientDisconnectError2(error, options = {}) {
   if (!(error instanceof Error)) {
@@ -27833,7 +28334,7 @@ function errorMessage3(error) {
 
 // src/hermes/profile-identity.ts
 import { readFile as readFile16, stat as stat17 } from "fs/promises";
-import path24 from "path";
+import path25 from "path";
 var MAX_SOUL_MD_LENGTH = 2e4;
 async function readHermesProfileIdentity(profileName, paths) {
   await assertProfileExists3(profileName, paths);
@@ -27890,7 +28391,7 @@ async function assertProfileExists3(profileName, paths) {
   }
 }
 function resolveSoulPath(profileName) {
-  return path24.join(resolveHermesProfileDir(profileName), "SOUL.md");
+  return path25.join(resolveHermesProfileDir(profileName), "SOUL.md");
 }
 function isNodeError18(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
@@ -27906,13 +28407,13 @@ import {
   rm as rm7,
   stat as stat19
 } from "fs/promises";
-import path26 from "path";
+import path27 from "path";
 import YAML5 from "yaml";
 
 // src/hermes/link-skill.ts
 import { readFile as readFile17, stat as stat18 } from "fs/promises";
 import os5 from "os";
-import path25 from "path";
+import path26 from "path";
 import YAML4 from "yaml";
 var HERMES_LINK_SKILL_ROOT_DIR = "hermes-skills";
 var HERMES_LINK_SKILL_DIR = "hermes-link";
@@ -27997,7 +28498,7 @@ Do not modify Hermes profiles, delete user data, edit config files, or kill proc
 async function ensureHermesLinkSkillInstalledForProfiles(options = {}) {
   const paths = options.paths ?? resolveRuntimePaths();
   const externalDir = resolveHermesLinkSkillExternalDir(paths);
-  const skillPath = path25.join(
+  const skillPath = path26.join(
     externalDir,
     HERMES_LINK_SKILL_DIR,
     HERMES_LINK_SKILL_FILE
@@ -28079,7 +28580,7 @@ function withDefaultProfilePlaceholder2(profiles) {
   ];
 }
 function resolveHermesLinkSkillExternalDir(paths = resolveRuntimePaths()) {
-  return path25.join(paths.homeDir, HERMES_LINK_SKILL_ROOT_DIR);
+  return path26.join(paths.homeDir, HERMES_LINK_SKILL_ROOT_DIR);
 }
 async function writeHermesLinkSkill(skillPath) {
   const existing = await readFile17(skillPath, "utf8").catch((error) => {
@@ -28174,11 +28675,11 @@ function appendExternalDir(current, externalDir, hermesHome) {
   const seen = new Set(
     entries.map((entry) => resolveExternalDirEntry(entry, hermesHome))
   );
-  const normalizedExternalDir = path25.resolve(externalDir);
+  const normalizedExternalDir = path26.resolve(externalDir);
   return seen.has(normalizedExternalDir) ? entries : [...entries, normalizedExternalDir];
 }
 function externalDirsInclude(current, externalDir, hermesHome) {
-  const normalizedExternalDir = path25.resolve(externalDir);
+  const normalizedExternalDir = path26.resolve(externalDir);
   return readExternalDirEntries(current).some(
     (entry) => resolveExternalDirEntry(entry, hermesHome) === normalizedExternalDir
   );
@@ -28189,14 +28690,14 @@ function readExternalDirEntries(value) {
 }
 function resolveExternalDirEntry(entry, hermesHome) {
   const expanded = expandHome(expandEnvVars(entry));
-  return path25.resolve(path25.isAbsolute(expanded) ? expanded : path25.join(hermesHome, expanded));
+  return path26.resolve(path26.isAbsolute(expanded) ? expanded : path26.join(hermesHome, expanded));
 }
 function expandHome(value) {
   if (value === "~") {
     return os5.homedir();
   }
-  if (value.startsWith(`~${path25.sep}`) || value.startsWith("~/")) {
-    return path25.join(os5.homedir(), value.slice(2));
+  if (value.startsWith(`~${path26.sep}`) || value.startsWith("~/")) {
+    return path26.join(os5.homedir(), value.slice(2));
   }
   return value;
 }
@@ -28748,7 +29249,7 @@ function collectEnvKeys(value, keys = /* @__PURE__ */ new Set()) {
   return keys;
 }
 async function writeEnvValues(profileName, values) {
-  const envPath = path26.join(resolveHermesProfileDir(profileName), ".env");
+  const envPath = path27.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile18(envPath, "utf8").catch((error) => {
     if (isNodeError20(error, "ENOENT")) {
       return "";
@@ -28785,8 +29286,8 @@ async function writeEnvValues(profileName, values) {
   await atomicWriteFilePreservingMetadata(envPath, nextRaw);
 }
 async function copySkills(sourceProfile, targetProfile) {
-  const sourceSkills = path26.join(resolveHermesProfileDir(sourceProfile), "skills");
-  const targetSkills = path26.join(resolveHermesProfileDir(targetProfile), "skills");
+  const sourceSkills = path27.join(resolveHermesProfileDir(sourceProfile), "skills");
+  const targetSkills = path27.join(resolveHermesProfileDir(targetProfile), "skills");
   if (!await pathExists2(sourceSkills)) {
     return;
   }
@@ -28881,10 +29382,10 @@ async function readProfileCreationLogLines(paths) {
   );
 }
 function profileCreationStatePath(paths) {
-  return path26.join(paths.runDir, "profile-create-state.json");
+  return path27.join(paths.runDir, "profile-create-state.json");
 }
 function profileCreationLogPath(paths) {
-  return path26.join(paths.logsDir, PROFILE_CREATE_LOG_FILE);
+  return path27.join(paths.logsDir, PROFILE_CREATE_LOG_FILE);
 }
 async function clearProfileCreationLogFiles(paths) {
   const primary = profileCreationLogPath(paths);
@@ -29173,7 +29674,7 @@ import {
   readFile as readFile19,
   stat as stat20
 } from "fs/promises";
-import path27 from "path";
+import path28 from "path";
 import YAML6 from "yaml";
 var ENTRY_DELIMITER = "\n\xA7\n";
 var DEFAULT_MEMORY_LIMIT = 2200;
@@ -29504,7 +30005,7 @@ async function saveProviderSettings(profileName, provider, patch) {
     });
     await patchJsonProviderConfig(
       profileName,
-      path27.join("hindsight", "config.json"),
+      path28.join("hindsight", "config.json"),
       {
         mode: patch.mode,
         api_url: patch.apiUrl,
@@ -29707,7 +30208,7 @@ async function patchHermesMemoryLimits(profileName, patch) {
   await atomicWriteFilePreservingMetadata(configPath, document.toString());
 }
 function resolveMemoryDir(profileName) {
-  return path27.join(resolveHermesProfileDir(profileName), "memories");
+  return path28.join(resolveHermesProfileDir(profileName), "memories");
 }
 async function readMemoryStore(profileName, target, limits) {
   const filePath = memoryFilePath(profileName, target);
@@ -29768,7 +30269,7 @@ async function writeMemoryEntries(profileName, target, entries) {
   );
 }
 function memoryFilePath(profileName, target) {
-  return path27.join(
+  return path28.join(
     resolveMemoryDir(profileName),
     target === "user" ? "USER.md" : "MEMORY.md"
   );
@@ -29828,7 +30329,7 @@ async function readCustomProviderSetupSummary(profileName) {
     configurable: true,
     configured: true,
     configurationIssue: null,
-    providerConfigPath: path27.join(
+    providerConfigPath: path28.join(
       resolveHermesProfileDir(profileName),
       "<provider>.json"
     ),
@@ -30222,7 +30723,7 @@ async function readProviderSettings(profileName, provider) {
       stringSetting(
         "dbPath",
         "SQLite \u6570\u636E\u5E93\u8DEF\u5F84",
-        config.db_path ?? path27.join(resolveHermesProfileDir(profileName), "memory_store.db")
+        config.db_path ?? path28.join(resolveHermesProfileDir(profileName), "memory_store.db")
       ),
       booleanSetting("autoExtract", "\u4F1A\u8BDD\u7ED3\u675F\u81EA\u52A8\u62BD\u53D6", config.auto_extract ?? false),
       numberSetting("defaultTrust", "\u9ED8\u8BA4\u4FE1\u4EFB\u5206", config.default_trust ?? 0.5),
@@ -30258,7 +30759,7 @@ async function readProviderSettings(profileName, provider) {
       stringSetting(
         "workingDirectory",
         "\u5DE5\u4F5C\u76EE\u5F55",
-        path27.join(resolveHermesProfileDir(profileName), "byterover"),
+        path28.join(resolveHermesProfileDir(profileName), "byterover"),
         false
       )
     ];
@@ -30267,16 +30768,16 @@ async function readProviderSettings(profileName, provider) {
 }
 function memoryProviderConfigPath(profileName, provider) {
   if (provider === "honcho") {
-    return path27.join(resolveHermesProfileDir(profileName), "honcho.json");
+    return path28.join(resolveHermesProfileDir(profileName), "honcho.json");
   }
   if (provider === "mem0") {
-    return path27.join(resolveHermesProfileDir(profileName), "mem0.json");
+    return path28.join(resolveHermesProfileDir(profileName), "mem0.json");
   }
   if (provider === "supermemory") {
-    return path27.join(resolveHermesProfileDir(profileName), "supermemory.json");
+    return path28.join(resolveHermesProfileDir(profileName), "supermemory.json");
   }
   if (provider === "hindsight") {
-    return path27.join(
+    return path28.join(
       resolveHermesProfileDir(profileName),
       "hindsight",
       "config.json"
@@ -30285,13 +30786,13 @@ function memoryProviderConfigPath(profileName, provider) {
   return null;
 }
 function customProviderConfigPath(profileName, provider) {
-  return path27.join(
+  return path28.join(
     resolveHermesProfileDir(profileName),
     `${normalizeCustomProviderId(provider)}.json`
   );
 }
 function customProviderRegistryPath(profileName) {
-  return path27.join(
+  return path28.join(
     resolveHermesProfileDir(profileName),
     CUSTOM_PROVIDER_REGISTRY_FILE
   );
@@ -30343,7 +30844,7 @@ async function saveCustomProviderRegistryEntry(profileName, provider) {
   );
 }
 async function discoverUserMemoryProviderDescriptors(profileName) {
-  const pluginsDir = path27.join(resolveHermesProfileDir(profileName), "plugins");
+  const pluginsDir = path28.join(resolveHermesProfileDir(profileName), "plugins");
   const entries = await readdir10(pluginsDir, { withFileTypes: true }).catch(
     (error) => {
       if (isNodeError21(error, "ENOENT")) {
@@ -30363,7 +30864,7 @@ async function discoverUserMemoryProviderDescriptors(profileName) {
     } catch {
       continue;
     }
-    const providerDir = path27.join(pluginsDir, entry.name);
+    const providerDir = path28.join(pluginsDir, entry.name);
     if (!await isMemoryProviderPluginDir(providerDir)) {
       continue;
     }
@@ -30377,7 +30878,7 @@ async function discoverUserMemoryProviderDescriptors(profileName) {
   return descriptors;
 }
 async function isUserMemoryProviderInstalled(profileName, provider) {
-  const providerDir = path27.join(
+  const providerDir = path28.join(
     resolveHermesProfileDir(profileName),
     "plugins",
     normalizeCustomProviderId(provider)
@@ -30385,7 +30886,7 @@ async function isUserMemoryProviderInstalled(profileName, provider) {
   return isMemoryProviderPluginDir(providerDir);
 }
 async function isMemoryProviderPluginDir(providerDir) {
-  const source = await readFile19(path27.join(providerDir, "__init__.py"), "utf8").catch(
+  const source = await readFile19(path28.join(providerDir, "__init__.py"), "utf8").catch(
     (error) => {
       if (isNodeError21(error, "ENOENT")) {
         return "";
@@ -30397,7 +30898,7 @@ async function isMemoryProviderPluginDir(providerDir) {
   return sample.includes("register_memory_provider") || sample.includes("MemoryProvider");
 }
 async function readPluginMetadata(providerDir) {
-  const raw = await readFile19(path27.join(providerDir, "plugin.yaml"), "utf8").catch(
+  const raw = await readFile19(path28.join(providerDir, "plugin.yaml"), "utf8").catch(
     (error) => {
       if (isNodeError21(error, "ENOENT")) {
         return "";
@@ -30409,10 +30910,10 @@ async function readPluginMetadata(providerDir) {
 }
 async function resolveByteRoverCli() {
   const candidates = [
-    ...(process.env.PATH ?? "").split(path27.delimiter).filter(Boolean).map((dir) => path27.join(dir, "brv")),
-    path27.join(process.env.HOME ?? "", ".brv-cli", "bin", "brv"),
+    ...(process.env.PATH ?? "").split(path28.delimiter).filter(Boolean).map((dir) => path28.join(dir, "brv")),
+    path28.join(process.env.HOME ?? "", ".brv-cli", "bin", "brv"),
     "/usr/local/bin/brv",
-    path27.join(process.env.HOME ?? "", ".npm-global", "bin", "brv")
+    path28.join(process.env.HOME ?? "", ".npm-global", "bin", "brv")
   ].filter(Boolean);
   for (const candidate of candidates) {
     const found = await access3(candidate).then(() => true).catch(() => false);
@@ -30473,7 +30974,7 @@ async function patchHermesMemoryEnv(profileName, patch) {
   if (entries.length === 0) {
     return;
   }
-  const envPath = path27.join(resolveHermesProfileDir(profileName), ".env");
+  const envPath = path28.join(resolveHermesProfileDir(profileName), ".env");
   const existingRaw = await readFile19(envPath, "utf8").catch((error) => {
     if (isNodeError21(error, "ENOENT")) {
       return "";
@@ -30644,7 +31145,7 @@ async function readActiveMemoryProvider(profileName) {
   return provider;
 }
 async function patchJsonProviderConfig(profileName, relativePath, patch) {
-  const configPath = path27.join(
+  const configPath = path28.join(
     resolveHermesProfileDir(profileName),
     relativePath
   );
@@ -30673,7 +31174,7 @@ async function readJsonObject(filePath) {
   } catch {
     throw new HermesMemoryError(
       "memory_provider_config_invalid",
-      `${path27.basename(filePath)} \u4E0D\u662F\u6709\u6548\u7684 JSON \u914D\u7F6E\u6587\u4EF6\u3002`
+      `${path28.basename(filePath)} \u4E0D\u662F\u6709\u6548\u7684 JSON \u914D\u7F6E\u6587\u4EF6\u3002`
     );
   }
 }
@@ -31297,7 +31798,7 @@ function toMemoryHttpError(error) {
 
 // src/hermes/skills.ts
 import { readFile as readFile20, readdir as readdir11 } from "fs/promises";
-import path28 from "path";
+import path29 from "path";
 import YAML7 from "yaml";
 var HermesSkillNotFoundError = class extends Error {
   constructor(skillName) {
@@ -31311,7 +31812,7 @@ var EXCLUDED_SKILL_DIRS = /* @__PURE__ */ new Set([".git", ".github", ".hub"]);
 async function listHermesProfileSkills(profileName, paths = resolveRuntimePaths()) {
   const profile = await readExistingProfile(profileName, paths);
   const profileDir = resolveHermesProfileDir(profile.name);
-  const skillsRoot = path28.join(profileDir, "skills");
+  const skillsRoot = path29.join(profileDir, "skills");
   const [skillFiles, disabled, provenance] = await Promise.all([
     findSkillFiles(skillsRoot),
     readDisabledSkillNames(resolveHermesConfigPath(profile.name)),
@@ -31402,7 +31903,7 @@ async function collectSkillFiles(directory, results) {
     if (EXCLUDED_SKILL_DIRS.has(entry.name)) {
       continue;
     }
-    const entryPath = path28.join(directory, entry.name);
+    const entryPath = path29.join(directory, entry.name);
     if (entry.isDirectory()) {
       await collectSkillFiles(entryPath, results);
       continue;
@@ -31424,10 +31925,10 @@ async function readSkillMetadata(input) {
   if (raw === null) {
     return null;
   }
-  const skillDir = path28.dirname(input.skillFile);
+  const skillDir = path29.dirname(input.skillFile);
   const { frontmatter, body } = parseSkillDocument(raw.slice(0, 4e3));
   const name = normalizeSkillName(
-    readString21(frontmatter.name) ?? path28.basename(skillDir)
+    readString21(frontmatter.name) ?? path29.basename(skillDir)
   );
   if (!name) {
     return null;
@@ -31446,7 +31947,7 @@ async function readSkillMetadata(input) {
     enabled: !input.disabled.has(name),
     source: provenance.source,
     trust: provenance.trust,
-    relativePath: path28.relative(input.skillsRoot, skillDir)
+    relativePath: path29.relative(input.skillsRoot, skillDir)
   };
 }
 function parseSkillDocument(raw) {
@@ -31467,8 +31968,8 @@ function parseSkillDocument(raw) {
   }
 }
 function categoryFromPath(skillsRoot, skillFile) {
-  const relative = path28.relative(skillsRoot, skillFile);
-  const parts = relative.split(path28.sep).filter(Boolean);
+  const relative = path29.relative(skillsRoot, skillFile);
+  const parts = relative.split(path29.sep).filter(Boolean);
   return parts.length >= 3 ? parts[0] : null;
 }
 function firstBodyDescription(body) {
@@ -31515,7 +32016,7 @@ async function readSkillProvenance(root) {
   return provenance;
 }
 async function readBundledSkillNames(root) {
-  const raw = await readFile20(path28.join(root, ".bundled_manifest"), "utf8").catch(
+  const raw = await readFile20(path29.join(root, ".bundled_manifest"), "utf8").catch(
     (error) => {
       if (isNodeError22(error, "ENOENT")) {
         return "";
@@ -31538,7 +32039,7 @@ async function readBundledSkillNames(root) {
   return names;
 }
 async function readHubInstalledSkills(root) {
-  const raw = await readFile20(path28.join(root, ".hub", "lock.json"), "utf8").catch(
+  const raw = await readFile20(path29.join(root, ".hub", "lock.json"), "utf8").catch(
     (error) => {
       if (isNodeError22(error, "ENOENT")) {
         return "";
@@ -32201,7 +32702,7 @@ function readModelList(payload) {
 import { EventEmitter as EventEmitter3 } from "events";
 import { spawn as spawn4 } from "child_process";
 import { mkdir as mkdir13, readFile as readFile21, rm as rm8 } from "fs/promises";
-import path29 from "path";
+import path30 from "path";
 var SERVER_HERMES_RELEASES_LATEST_PATH = "/api/v1/hermes-agent/releases/latest";
 var RELEASE_CACHE_TTL_MS = 6 * 60 * 60 * 1e3;
 var RELEASE_FETCH_TIMEOUT_MS = 5e3;
@@ -32479,13 +32980,13 @@ async function readUpdateLogLines(paths) {
   );
 }
 function releaseCachePath(paths) {
-  return path29.join(paths.indexesDir, "hermes-release-check.json");
+  return path30.join(paths.indexesDir, "hermes-release-check.json");
 }
 function updateStatePath(paths) {
-  return path29.join(paths.runDir, "hermes-update-state.json");
+  return path30.join(paths.runDir, "hermes-update-state.json");
 }
 function updateLogPath(paths) {
-  return path29.join(paths.logsDir, UPDATE_LOG_FILE);
+  return path30.join(paths.logsDir, UPDATE_LOG_FILE);
 }
 async function clearUpdateLogFiles(paths) {
   const primary = updateLogPath(paths);
@@ -32586,12 +33087,12 @@ function readString22(payload, key) {
 import { spawn as spawn6 } from "child_process";
 import { EventEmitter as EventEmitter4 } from "events";
 import { mkdir as mkdir16, readFile as readFile23, rm as rm11 } from "fs/promises";
-import path31 from "path";
+import path32 from "path";
 
 // src/daemon/process.ts
 import { spawn as spawn5 } from "child_process";
 import { mkdir as mkdir15, readFile as readFile22, rm as rm10, writeFile as writeFile4 } from "fs/promises";
-import path30 from "path";
+import path31 from "path";
 
 // src/daemon/service.ts
 import { createServer } from "http";
@@ -34538,7 +35039,7 @@ async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
   await mkdir15(paths.logsDir, { recursive: true, mode: 448 });
   const log = createRotatingTextLogWriter({
     paths,
-    fileName: path30.basename(daemonLogFile(paths))
+    fileName: path31.basename(daemonLogFile(paths))
   });
   const scriptPath = currentCliScriptPath();
   const write = (chunk) => {
@@ -34836,7 +35337,7 @@ function terminateChild(child, previousForceKillTimer) {
   }
 }
 function supervisorStopIntentPath(paths) {
-  return path30.join(paths.runDir, "supervisor-stop-intent.json");
+  return path31.join(paths.runDir, "supervisor-stop-intent.json");
 }
 async function writeSupervisorStopIntent(paths, pid) {
   await mkdir15(paths.runDir, { recursive: true, mode: 448 });
@@ -35399,7 +35900,7 @@ async function buildOfficialInstallCommand(options, targetVersion) {
   };
 }
 function buildUnixInstallCommand(installerUrl) {
-  const nodeBinDir = path31.dirname(process.execPath);
+  const nodeBinDir = path32.dirname(process.execPath);
   const fetchScript = [
     quoteShellToken(process.execPath),
     "--input-type=module",
@@ -35669,10 +36170,10 @@ async function readUpdateLogLines2(paths) {
   );
 }
 function updateStatePath2(paths) {
-  return path31.join(paths.runDir, "link-update-state.json");
+  return path32.join(paths.runDir, "link-update-state.json");
 }
 function updateLogPath2(paths) {
-  return path31.join(paths.logsDir, UPDATE_LOG_FILE2);
+  return path32.join(paths.logsDir, UPDATE_LOG_FILE2);
 }
 async function clearUpdateLogFiles2(paths) {
   const primary = updateLogPath2(paths);
@@ -35756,7 +36257,7 @@ function readString23(payload, key) {
 }
 
 // src/pairing/pairing.ts
-import path32 from "path";
+import path33 from "path";
 import { rm as rm12 } from "fs/promises";
 
 // src/relay/bootstrap.ts
@@ -36096,10 +36597,10 @@ async function loadRequiredIdentity2(paths) {
   }
   return identity;
 }
-async function postServerJson(serverBaseUrl, path33, body, options) {
+async function postServerJson(serverBaseUrl, path34, body, options) {
   let response;
   try {
-    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path33}`, {
+    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path34}`, {
       method: "POST",
       headers: {
         accept: "application/json",
@@ -36147,10 +36648,10 @@ function pairingErrorSnapshot(stage, error) {
     occurred_at: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-async function patchServerJson(serverBaseUrl, path33, token, body, options) {
+async function patchServerJson(serverBaseUrl, path34, token, body, options) {
   let response;
   try {
-    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path33}`, {
+    response = await fetch(`${serverBaseUrl.replace(/\/+$/u, "")}${path34}`, {
       method: "PATCH",
       headers: {
         accept: "application/json",
@@ -36198,10 +36699,10 @@ function createPairingNetworkError(input) {
   );
 }
 function pairingClaimPath(sessionId, paths) {
-  return path32.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.claimed.json`);
+  return path33.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.claimed.json`);
 }
 function pairingSessionPath(sessionId, paths) {
-  return path32.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.json`);
+  return path33.join(paths.pairingDir, `${Buffer.from(sessionId).toString("base64url")}.json`);
 }
 function qrPreferredUrls(routes) {
   return routes.preferredUrls.filter((url) => !url.includes("/api/v1/relay/links/")).slice(0, 1);
@@ -36272,6 +36773,7 @@ function registerSystemRoutes(router, options) {
         conversation_queue_limit: MAX_CONVERSATION_QUEUED_RUNS,
         responses_interrupted_previous_response: true,
         conversation_rename: true,
+        conversation_workspaces: true,
         blobs: true,
         devices: true,
         device_delete: true,
@@ -36758,6 +37260,51 @@ function readDeviceModelHeader(ctx) {
   return value ? value.slice(0, 128) : null;
 }
 
+// src/http/routes/workspaces.ts
+function registerWorkspaceRoutes(router, options) {
+  const { paths, conversations } = options;
+  router.get("/api/v1/workspaces", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    ctx.set("cache-control", "no-store");
+    ctx.body = {
+      ok: true,
+      workspaces: await conversations.listWorkspaces()
+    };
+  });
+  router.post("/api/v1/workspaces", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    const body = await readJsonBody(ctx.req);
+    ctx.status = 201;
+    ctx.body = {
+      ok: true,
+      workspace: await conversations.createWorkspace({
+        name: readString19(body, "name") ?? "",
+        icon: readString19(body, "icon") ?? void 0
+      })
+    };
+  });
+  router.patch("/api/v1/workspaces/:workspaceId", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    const body = await readJsonBody(ctx.req);
+    ctx.body = {
+      ok: true,
+      workspace: await conversations.renameWorkspace(ctx.params.workspaceId, {
+        name: readString19(body, "name") ?? "",
+        icon: readString19(body, "icon") ?? void 0
+      })
+    };
+  });
+  router.delete("/api/v1/workspaces/:workspaceId", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    const result = await conversations.deleteWorkspace(ctx.params.workspaceId);
+    ctx.body = {
+      ok: true,
+      workspace: result.workspace,
+      moved_conversation_count: result.movedConversationCount
+    };
+  });
+}
+
 // src/http/routes/hermes-updates.ts
 function registerHermesUpdateRoutes(router, options) {
   const { paths, logger } = options;
@@ -37447,6 +37994,7 @@ async function createApp(options = {}) {
     conversations,
     syncCronDeliveries
   });
+  registerWorkspaceRoutes(router, { paths, conversations });
   registerConversationRoutes(router, { paths, logger, conversations });
   registerRunRoutes(router, { paths, logger, conversations });
   registerProfileRoutes(router, { paths, logger, conversations });