@hermespilot/link 0.7.9 → 0.8.0

package/dist/{chunk-LUGNDJU3.js → chunk-GHZLIFQF.js}

@@ -5,7 +5,7 @@ import Router from "@koa/router";
 // src/conversations/conversation-service.ts
 import { EventEmitter } from "events";
 import { createHash as createHash7, randomUUID as randomUUID12 } from "crypto";
-import path25 from "path";
+import path26 from "path";
 
 // src/database/link-database.ts
 import { mkdir } from "fs/promises";
@@ -2068,6 +2068,22 @@ function parseLanguage(value) {
 }
 
 // src/hermes/config.ts
+function filterHermesModelConfigsByProviderKeys(result, hiddenProviderKeys) {
+  if (hiddenProviderKeys.size === 0) {
+    return result;
+  }
+  const models = result.models.filter(
+    (model) => !hiddenProviderKeys.has(model.provider)
+  );
+  const compressionModel = result.compressionModel && !hiddenProviderKeys.has(result.compressionModel.provider) ? result.compressionModel : null;
+  return {
+    ...result,
+    defaultModel: models.some((model) => model.isDefault) ? result.defaultModel : null,
+    compressionModelId: compressionModel ? result.compressionModelId : null,
+    compressionModel,
+    models
+  };
+}
 var DEFAULT_HERMES_API_SERVER_HOST = "127.0.0.1";
 var DEFAULT_HERMES_API_SERVER_PORT = 8642;
 var PROFILE_API_SERVER_PORT_START = DEFAULT_HERMES_API_SERVER_PORT + 1;
@@ -2628,7 +2644,12 @@ async function importHermesModelConfig(input, targetProfileName = "default", tar
   const sourceApiKey = sourceKeyEnv ? source.env[sourceKeyEnv]?.trim() : source.inlineApiKey;
   let keyEnv = existingKeyEnv;
   if (!keyEnv && !existingInlineApiKey) {
-    keyEnv = sourceKeyEnv ?? (sourceApiKey ? buildApiKeyEnvName(source.model.providerName, source.model.id) : void 0);
+    keyEnv = (sourceKeyEnv && !reservedHermesEnvKeys(targetEnv, config).has(sourceKeyEnv) ? sourceKeyEnv : void 0) ?? (sourceApiKey ? await buildUniqueApiKeyEnvName(targetProfileName, config, targetEnv, {
+      providerName: source.model.providerName,
+      modelId: source.model.id,
+      providerKey: targetProviderKey,
+      apiKey: sourceApiKey
+    }) : void 0);
   }
   if (sourceApiKey && keyEnv && !existingInlineApiKey && (!existingKeyEnv || !targetEnv[keyEnv]?.trim())) {
     await writeHermesEnvValue(targetProfileName, keyEnv, sourceApiKey);
@@ -2771,7 +2792,12 @@ async function saveHermesModelConfig(input, profileName = "default", configPath
   );
   const entry = toRecord(providers[providerKey]);
   const existingKeyEnv = readString2(entry.key_env) ?? parseEnvReference(readString2(entry.api_key));
-  const keyEnv = normalized.keyEnv ?? existingKeyEnv ?? (normalized.apiKey ? buildApiKeyEnvName(normalized.providerName, normalized.id) : void 0);
+  const keyEnv = normalized.keyEnv ?? existingKeyEnv ?? (normalized.apiKey ? await buildUniqueApiKeyEnvName(profileName, config, void 0, {
+    providerName: normalized.providerName,
+    modelId: normalized.id,
+    providerKey,
+    apiKey: normalized.apiKey
+  }) : void 0);
   if (normalized.apiKey && keyEnv) {
     await writeHermesEnvValue(profileName, keyEnv, normalized.apiKey);
   }
@@ -2963,22 +2989,28 @@ async function saveHermesModelProviderConfig(input, profileName = "default", con
   const { document, config, existingRaw } = await readHermesConfigDocument(configPath);
   const providers = ensureProvidersRecordWithLegacyMigration(config);
   const requestedProviderKey = input.providerKey?.trim();
+  const apiKey = input.apiKey?.trim();
   if (requestedProviderKey && !Object.prototype.hasOwnProperty.call(providers, requestedProviderKey)) {
     throw new Error(`provider "${requestedProviderKey}" is not configured`);
   }
-  const providerKey = requestedProviderKey ?? findProviderConfigKeyByVisibleEndpoint(providers, {
+  const canReuseVisibleEndpoint = Boolean(requestedProviderKey) || !apiKey || Boolean(input.keyEnv?.trim());
+  const providerKey = requestedProviderKey ?? (canReuseVisibleEndpoint ? findProviderConfigKeyByVisibleEndpoint(providers, {
     providerName,
     baseUrl,
     apiMode,
     keyEnv: input.keyEnv
-  }) ?? uniqueProviderConfigKey(
+  }) : null) ?? uniqueProviderConfigKey(
     providerConfigKeyBase(void 0, providerName, baseUrl),
     providers
   );
   const entry = toRecord(providers[providerKey]);
   const existingKeyEnv = readString2(entry.key_env) ?? parseEnvReference(readString2(entry.api_key));
-  const apiKey = input.apiKey?.trim();
-  const keyEnv = input.keyEnv?.trim() || existingKeyEnv || (apiKey ? buildApiKeyEnvName(providerName, "PROVIDER") : void 0);
+  const keyEnv = input.keyEnv?.trim() || existingKeyEnv || (apiKey ? await buildUniqueApiKeyEnvName(profileName, config, void 0, {
+    providerName,
+    modelId: "PROVIDER",
+    providerKey,
+    apiKey
+  }) : void 0);
   if (apiKey && keyEnv) {
     await writeHermesEnvValue(profileName, keyEnv, apiKey);
   }
@@ -3020,6 +3052,9 @@ async function deleteHermesModelProviderConfig(providerKey, profileName = "defau
   if (!Object.prototype.hasOwnProperty.call(providers, normalizedProviderKey)) {
     throw new Error(`provider "${normalizedProviderKey}" is not configured`);
   }
+  const removedKeyEnv = providerCredentialEnvKey(
+    toRecord(providers[normalizedProviderKey])
+  );
   delete providers[normalizedProviderKey];
   const backupPath = await writeHermesConfigDocument({
     configPath,
@@ -3027,6 +3062,7 @@ async function deleteHermesModelProviderConfig(providerKey, profileName = "defau
     config,
     existingRaw
   });
+  await deleteHermesEnvValueIfUnreferenced(profileName, config, removedKeyEnv);
   return {
     ...await listHermesModelConfigs(profileName, configPath),
     backupPath,
@@ -3146,6 +3182,7 @@ async function deleteHermesModelConfig(input, profileName = "default", configPat
     );
   }
   const providers = ensureProvidersRecordWithLegacyMigration(config);
+  const removedProviderKeyEnvs = /* @__PURE__ */ new Set();
   for (const [key, rawEntry] of Object.entries(providers)) {
     const entry = providerConfigToLegacyEntry(key, toRecord(rawEntry));
     if (!entry || !providerEntryMatchesManagedModel(entry, deletingModel)) {
@@ -3155,6 +3192,10 @@ async function deleteHermesModelConfig(input, profileName = "default", configPat
     if (nextEntry) {
       providers[key] = nextEntry;
     } else {
+      const keyEnv = providerCredentialEnvKey(toRecord(rawEntry));
+      if (keyEnv) {
+        removedProviderKeyEnvs.add(keyEnv);
+      }
       delete providers[key];
     }
   }
@@ -3200,6 +3241,9 @@ async function deleteHermesModelConfig(input, profileName = "default", configPat
     config,
     existingRaw
   });
+  for (const keyEnv of removedProviderKeyEnvs) {
+    await deleteHermesEnvValueIfUnreferenced(profileName, config, keyEnv);
+  }
   const listed = await listHermesModelConfigs(profileName, configPath);
   return {
     ...listed,
@@ -6694,10 +6738,72 @@ function parseEnvReference(value) {
   const match = /^\$\{(?<key>[A-Za-z_][A-Za-z0-9_]*)\}$/u.exec(value.trim());
   return match?.groups?.key;
 }
+function providerCredentialEnvKey(entry) {
+  return readString2(entry.key_env) ?? parseEnvReference(readString2(entry.api_key));
+}
 function buildApiKeyEnvName(providerName, modelId) {
   const base = `${providerName || modelId}`.trim().toUpperCase().replace(/[^A-Z0-9]+/gu, "_").replace(/^_+|_+$/gu, "");
   return `HERMES_${base || "MODEL"}_API_KEY`;
 }
+async function buildUniqueApiKeyEnvName(profileName, config, env, input) {
+  const envValues = env ?? await readHermesEnvFile(profileName);
+  const configReferences = collectEnvReferenceKeys(config);
+  const reserved = /* @__PURE__ */ new Set([...Object.keys(envValues), ...configReferences]);
+  const candidates = [
+    buildApiKeyEnvName(input.providerName, input.modelId),
+    buildApiKeyEnvName(input.providerKey, input.modelId)
+  ];
+  for (const candidate of uniqueStrings(candidates)) {
+    if (input.apiKey && !configReferences.has(candidate) && envValues[candidate]?.trim() === input.apiKey.trim()) {
+      return candidate;
+    }
+    if (!reserved.has(candidate)) {
+      return candidate;
+    }
+  }
+  const base = buildApiKeyEnvName(input.providerKey, input.modelId);
+  let index = 2;
+  while (reserved.has(apiKeyEnvNameWithSuffix(base, index))) {
+    index += 1;
+  }
+  return apiKeyEnvNameWithSuffix(base, index);
+}
+function reservedHermesEnvKeys(env, config) {
+  return /* @__PURE__ */ new Set([...Object.keys(env), ...collectEnvReferenceKeys(config)]);
+}
+function collectEnvReferenceKeys(value, keys = /* @__PURE__ */ new Set()) {
+  if (typeof value === "string") {
+    const key = parseEnvReference(value);
+    if (key) {
+      keys.add(key);
+    }
+    return keys;
+  }
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      collectEnvReferenceKeys(item, keys);
+    }
+    return keys;
+  }
+  if (value && typeof value === "object") {
+    for (const item of Object.values(value)) {
+      collectEnvReferenceKeys(item, keys);
+    }
+  }
+  return keys;
+}
+function uniqueStrings(values) {
+  return [...new Set(values.filter((value) => value.trim()))];
+}
+function apiKeyEnvNameWithSuffix(base, index) {
+  return base.endsWith("_API_KEY") ? `${base.slice(0, -"_API_KEY".length)}_${index}_API_KEY` : `${base}_${index}`;
+}
+async function deleteHermesEnvValueIfUnreferenced(profileName, config, key) {
+  if (!key || collectEnvReferenceKeys(config).has(key)) {
+    return;
+  }
+  await deleteHermesEnvValue(profileName, key);
+}
 function formatEnvValue(value) {
   return `"${value.replace(/\\/gu, "\\\\").replace(/"/gu, '\\"').replace(/\n/gu, "\\n")}"`;
 }
@@ -7109,7 +7215,7 @@ function isConversationMissingError(error) {
 }
 
 // src/constants.ts
-var LINK_VERSION = "0.7.9";
+var LINK_VERSION = "0.8.0";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -12697,9 +12803,115 @@ function isNodeError6(error, code) {
 }
 
 // src/conversations/profile-runtime.ts
+import { stat as stat8 } from "fs/promises";
+
+// src/hermes/model-provider-disconnects.ts
 import { stat as stat7 } from "fs/promises";
-var PROFILE_NAME_PATTERN3 = /^[a-zA-Z0-9._-]{1,64}$/u;
+import os5 from "os";
+import path12 from "path";
+async function markAuthBackedModelProviderDisconnected(paths, profileName, providerKey) {
+  const profileKey = normalizeProfileName3(profileName);
+  const provider = providerKey.trim();
+  if (!provider) {
+    return;
+  }
+  const credentialMtimeMs = await readProviderCredentialMtimeMs(
+    profileKey,
+    provider
+  );
+  await updateJsonFile(
+    disconnectedProvidersPath(paths),
+    (current) => {
+      const store = normalizeStore(current);
+      const profiles = { ...store.profiles ?? {} };
+      const profile = profiles[profileKey] ?? {};
+      profiles[profileKey] = {
+        ...profile,
+        providers: {
+          ...profile.providers ?? {},
+          [provider]: {
+            disconnectedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            credentialMtimeMs
+          }
+        }
+      };
+      return { ...store, profiles };
+    }
+  );
+}
+async function readDisconnectedAuthBackedModelProviderKeys(paths, profileName) {
+  const store = normalizeStore(
+    await readJsonFile(
+      disconnectedProvidersPath(paths)
+    ).catch(() => null)
+  );
+  const profile = store.profiles?.[normalizeProfileName3(profileName)];
+  const providers = profile?.providers ?? {};
+  const active = /* @__PURE__ */ new Set();
+  for (const [provider, entry] of Object.entries(providers)) {
+    if (await isDisconnectMarkerActive(profileName, provider, entry)) {
+      active.add(provider);
+    }
+  }
+  return active;
+}
+async function isDisconnectMarkerActive(profileName, providerKey, entry) {
+  const currentMtimeMs = await readProviderCredentialMtimeMs(
+    profileName,
+    providerKey
+  );
+  if (entry.credentialMtimeMs === null || !Number.isFinite(entry.credentialMtimeMs)) {
+    return currentMtimeMs === null;
+  }
+  if (currentMtimeMs === null || !Number.isFinite(currentMtimeMs)) {
+    return true;
+  }
+  return currentMtimeMs <= entry.credentialMtimeMs + 1e3;
+}
+async function readProviderCredentialMtimeMs(profileName, providerKey) {
+  for (const filePath of credentialFilesForProvider(profileName, providerKey)) {
+    const stats = await stat7(filePath).catch((error) => {
+      if (isNodeError7(error, "ENOENT")) {
+        return null;
+      }
+      throw error;
+    });
+    if (stats) {
+      return stats.mtimeMs;
+    }
+  }
+  return null;
+}
+function credentialFilesForProvider(profileName, providerKey) {
+  const profileDir = resolveHermesProfileDir(normalizeProfileName3(profileName));
+  switch (providerKey) {
+    case "qwen-oauth":
+      return [path12.join(os5.homedir(), ".qwen", "oauth_creds.json")];
+    case "google-gemini-cli":
+      return [path12.join(profileDir, "auth", "google_oauth.json")];
+    default:
+      return [path12.join(profileDir, "auth.json")];
+  }
+}
+function disconnectedProvidersPath(paths) {
+  return path12.join(paths.homeDir, "model-provider-disconnects.json");
+}
+function normalizeStore(value) {
+  return {
+    version: 1,
+    profiles: value?.profiles && typeof value.profiles === "object" ? value.profiles : {}
+  };
+}
 function normalizeProfileName3(profileName) {
+  return profileName.trim() || "default";
+}
+function isNodeError7(error, code) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+
+// src/conversations/profile-runtime.ts
+var PROFILE_NAME_PATTERN3 = /^[a-zA-Z0-9._-]{1,64}$/u;
+function normalizeProfileName4(profileName) {
   const value = profileName?.trim() || "default";
   if (!PROFILE_NAME_PATTERN3.test(value)) {
     throw new Error("invalid profile name");
@@ -12710,7 +12922,7 @@ function fallbackProfileDisplayName(profileName) {
   return profileName === "default" ? "Default" : profileName;
 }
 async function resolveConversationProfileTarget(paths, profileName) {
-  const normalized = normalizeProfileName3(profileName);
+  const normalized = normalizeProfileName4(profileName);
   const identity = await ensureProfileIdentityForRuntime(paths, normalized);
   return {
     profileUid: identity.profileUid,
@@ -12720,7 +12932,7 @@ async function resolveConversationProfileTarget(paths, profileName) {
   };
 }
 async function readCurrentConversationRuntime(paths, manifest) {
-  const profileName = normalizeProfileName3(
+  const profileName = normalizeProfileName4(
     manifest?.profile_name_snapshot ?? manifest?.profile
   );
   const identity = await ensureProfileIdentityForRuntime(paths, profileName);
@@ -12732,7 +12944,7 @@ async function readCurrentConversationRuntime(paths, manifest) {
     contextLength: void 0,
     reasoningEffort: void 0
   }));
-  const configuredDefaultModel = modelConfig.model ? await findConfiguredModel(profileName, modelConfig.model) : void 0;
+  const configuredDefaultModel = modelConfig.model ? await findConfiguredModel(profileName, modelConfig.model, {}, paths) : void 0;
   const override = manifest?.model_override;
   const overrideModel = override?.id?.trim();
   const overrideProvider = override?.provider_name?.trim() || override?.provider?.trim();
@@ -12760,7 +12972,7 @@ async function readProfilePresentation(paths, profileName) {
   };
 }
 async function readConversationProfileSummary(paths, manifest) {
-  const profileName = normalizeProfileName3(
+  const profileName = normalizeProfileName4(
     manifest.profile_name_snapshot ?? manifest.profile
   );
   const presentation = await readProfilePresentation(paths, profileName).catch(
@@ -12831,8 +13043,8 @@ async function buildConversationRuntimeMetadata(paths, manifest, snapshot) {
 async function ensureProfileIdentityForRuntime(paths, profileName) {
   const profilePath = resolveHermesProfileDir(profileName);
   if (profileName !== "default") {
-    const exists = await stat7(profilePath).then((value) => value.isDirectory()).catch((error) => {
-      if (isNodeError7(error, "ENOENT")) {
+    const exists = await stat8(profilePath).then((value) => value.isDirectory()).catch((error) => {
+      if (isNodeError8(error, "ENOENT")) {
         return false;
       }
       throw error;
@@ -12850,12 +13062,18 @@ async function ensureProfileIdentityForRuntime(paths, profileName) {
     profilePath
   });
 }
-async function findConfiguredModel(profileName, modelId, selector = {}) {
+async function findConfiguredModel(profileName, modelId, selector = {}, paths) {
   const result = await listHermesModelConfigs(profileName).catch(() => null);
+  const disconnectedProviders = paths ? await readDisconnectedAuthBackedModelProviderKeys(paths, profileName).catch(
+    () => /* @__PURE__ */ new Set()
+  ) : /* @__PURE__ */ new Set();
   return result?.models.find((model) => {
     if (model.id !== modelId) {
       return false;
     }
+    if (disconnectedProviders.has(model.provider)) {
+      return false;
+    }
     if (selector.provider && model.provider !== selector.provider) {
       return false;
     }
@@ -12875,7 +13093,7 @@ function displayNameForProfile(profile) {
   const custom = profile.displayName?.trim();
   return custom || fallbackProfileDisplayName(profile.profileName);
 }
-function isNodeError7(error, code) {
+function isNodeError8(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -13295,9 +13513,15 @@ var ConversationCommandHandlers = class {
   }
   async modelStatusMessage(manifest, language = "zh-CN") {
     const runtime = await readCurrentConversationRuntime(this.deps.paths, manifest);
-    const configured = await listHermesModelConfigs(runtime.profileName).catch(
-      () => null
-    );
+    const configured = await listHermesModelConfigs(runtime.profileName).then(
+      async (result) => filterHermesModelConfigsByProviderKeys(
+        result,
+        await readDisconnectedAuthBackedModelProviderKeys(
+          this.deps.paths,
+          runtime.profileName
+        )
+      )
+    ).catch(() => null);
     const lines = [
       commandText(
         language,
@@ -13408,7 +13632,12 @@ var ConversationCommandHandlers = class {
         response: await this.modelStatusMessage(input.manifest, input.language)
       });
     }
-    const configuredModel = await findConfiguredModel(runtime.profileName, model);
+    const configuredModel = await findConfiguredModel(
+      runtime.profileName,
+      model,
+      {},
+      this.deps.paths
+    );
     if (!configuredModel) {
       return this.deps.appendCommandResult({
         manifest: input.manifest,
@@ -13606,7 +13835,9 @@ var ConversationCommandHandlers = class {
     const reasoningEffort = arg;
     const configuredModel = await findConfiguredModel(
       runtime.profileName,
-      runtime.model
+      runtime.model,
+      {},
+      this.deps.paths
     );
     if (!isReasoningEffortSupported(configuredModel, reasoningEffort)) {
       return this.deps.appendCommandResult({
@@ -13794,7 +14025,7 @@ function commandText(language, zh, en) {
 
 // src/conversations/delivery-staging.ts
 import { mkdir as mkdir7, rm as rm4 } from "fs/promises";
-import path12 from "path";
+import path13 from "path";
 async function prepareDeliveryStagingRunDir(paths, conversationId, runId) {
   const directory = deliveryStagingRunDir(paths, conversationId, runId);
   await mkdir7(directory, { recursive: true, mode: 448 });
@@ -13807,14 +14038,14 @@ async function removeConversationDeliveryStaging(paths, conversationId) {
   });
 }
 function deliveryStagingRunDir(paths, conversationId, runId) {
-  return path12.join(
+  return path13.join(
     deliveryStagingConversationDir(paths, conversationId),
     safePathSegment(runId, "run")
   );
 }
 function deliveryStagingConversationDir(paths, conversationId) {
   assertValidConversationId(conversationId);
-  return path12.join(paths.conversationsDir, conversationId, "delivery-staging");
+  return path13.join(paths.conversationsDir, conversationId, "delivery-staging");
 }
 function safePathSegment(value, fallback) {
   const safe = value.trim().replaceAll(/[^a-zA-Z0-9._-]/gu, "_");
@@ -13824,7 +14055,7 @@ function safePathSegment(value, fallback) {
 // src/conversations/conversation-archive-plans.ts
 import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir8 } from "fs/promises";
-import path13 from "path";
+import path14 from "path";
 var PLAN_ID_PATTERN = /^archive_[a-f0-9]{32}$/u;
 var ConversationArchivePlanStore = class {
   constructor(paths) {
@@ -13867,10 +14098,10 @@ var ConversationArchivePlanStore = class {
     await writeJsonFile(this.planPath(normalizedPlanId), plan);
   }
   plansDir() {
-    return path13.join(this.paths.indexesDir, "conversation-archive-plans");
+    return path14.join(this.paths.indexesDir, "conversation-archive-plans");
   }
   planPath(planId) {
-    return path13.join(this.plansDir(), `${planId}.json`);
+    return path14.join(this.plansDir(), `${planId}.json`);
   }
 };
 function normalizePlanId(planId) {
@@ -13888,7 +14119,7 @@ function normalizePlanId(planId) {
 // src/conversations/conversation-clear-plans.ts
 import { randomUUID as randomUUID8 } from "crypto";
 import { mkdir as mkdir9 } from "fs/promises";
-import path14 from "path";
+import path15 from "path";
 var PLAN_ID_PATTERN2 = /^clear_[a-f0-9]{32}$/u;
 var ConversationClearPlanStore = class {
   constructor(paths) {
@@ -13932,10 +14163,10 @@ var ConversationClearPlanStore = class {
     await writeJsonFile(this.planPath(normalizedPlanId), plan);
   }
   plansDir() {
-    return path14.join(this.paths.indexesDir, "conversation-clear-plans");
+    return path15.join(this.paths.indexesDir, "conversation-clear-plans");
   }
   planPath(planId) {
-    return path14.join(this.plansDir(), `${planId}.json`);
+    return path15.join(this.plansDir(), `${planId}.json`);
   }
 };
 function normalizePlanId2(planId) {
@@ -14789,20 +15020,20 @@ function readAttachmentWaveform(attachment) {
 }
 
 // src/hermes/session-title.ts
-import { stat as stat8 } from "fs/promises";
-import path15 from "path";
+import { stat as stat9 } from "fs/promises";
+import path16 from "path";
 async function readHermesSessionTitle(sessionId, paths, profileName) {
   const trimmedSessionId = sessionId.trim();
   if (!trimmedSessionId) {
     return void 0;
   }
   const resolvedProfileName = isValidProfileName(profileName) ? profileName : "default";
-  const dbPath = path15.join(
+  const dbPath = path16.join(
     resolveHermesProfileDir(resolvedProfileName),
     "state.db"
   );
-  const exists = await stat8(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError8(error, "ENOENT")) {
+  const exists = await stat9(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError9(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -14818,12 +15049,12 @@ async function readHermesCompressionTip(sessionId, paths, profileName) {
     return void 0;
   }
   const resolvedProfileName = isValidProfileName(profileName) ? profileName : "default";
-  const dbPath = path15.join(
+  const dbPath = path16.join(
     resolveHermesProfileDir(resolvedProfileName),
     "state.db"
   );
-  const exists = await stat8(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError8(error, "ENOENT")) {
+  const exists = await stat9(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError9(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -14886,7 +15117,7 @@ function readCompressionTipFromStateDb(dbPath, sessionId) {
     db?.close();
   }
 }
-function isNodeError8(error, code) {
+function isNodeError9(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName(value) {
@@ -15250,8 +15481,8 @@ function stripCompressionTitleSuffix(value) {
 }
 
 // src/conversations/history-builder.ts
-import { readFile as readFile8, stat as stat9 } from "fs/promises";
-import path16 from "path";
+import { readFile as readFile8, stat as stat10 } from "fs/promises";
+import path17 from "path";
 var HISTORY_ROLES = /* @__PURE__ */ new Set(["user", "assistant"]);
 var HERMES_HISTORY_COLUMNS = [
   "role",
@@ -15323,13 +15554,13 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   }
   const normalizedProfileName = isValidProfileName2(profileName) ? profileName : "default";
   const profileDir = resolveHermesProfileDir(normalizedProfileName);
-  const dbPath = path16.join(profileDir, "state.db");
+  const dbPath = path17.join(profileDir, "state.db");
   const sessionsDirConfig = await readHermesSessionsDir(normalizedProfileName).then((value) => ({
     sessionsDir: value.sessionsDir,
     configured: value.configured,
     configError: false
   })).catch(() => ({
-    sessionsDir: path16.join(profileDir, "sessions"),
+    sessionsDir: path17.join(profileDir, "sessions"),
     configured: false,
     configError: true
   }));
@@ -15374,8 +15605,8 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   };
 }
 async function readHermesStateDbHistory(dbPath, sessionId) {
-  const exists = await stat9(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError9(error, "ENOENT")) {
+  const exists = await stat10(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError10(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -15492,7 +15723,7 @@ async function readHermesTranscriptFilesHistory(sessionsDir, sessionId) {
 async function readFirstExistingFile(paths) {
   for (const filePath of paths) {
     const raw = await readFile8(filePath, "utf8").catch((error) => {
-      if (isNodeError9(error, "ENOENT")) {
+      if (isNodeError10(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -15505,8 +15736,8 @@ async function readFirstExistingFile(paths) {
 }
 function candidateTranscriptPaths(sessionsDir, sessionId, extension) {
   return [
-    path16.join(sessionsDir, `session_${sessionId}.${extension}`),
-    path16.join(sessionsDir, `${sessionId}.${extension}`)
+    path17.join(sessionsDir, `session_${sessionId}.${extension}`),
+    path17.join(sessionsDir, `${sessionId}.${extension}`)
   ];
 }
 function readHistoryRows(dbPath, sessionId) {
@@ -15706,7 +15937,7 @@ function readTableColumns(db, table) {
     db.prepare(`PRAGMA table_info(${table})`).all().map((row) => row.name).filter((name) => typeof name === "string")
   );
 }
-function isNodeError9(error, code) {
+function isNodeError10(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName2(value) {
@@ -17361,13 +17592,13 @@ var ConversationOrchestrationCoordinator = class {
     };
   }
   async ensureManifestProfile(manifest, requestedProfileName) {
-    const existingProfileName = normalizeProfileName3(
+    const existingProfileName = normalizeProfileName4(
       manifest.profile_name_snapshot ?? manifest.profile
     );
     const hasExistingProfile = Boolean(
       manifest.profile_name_snapshot ?? manifest.profile
     );
-    const nextProfileName = requestedProfileName ? normalizeProfileName3(requestedProfileName) : existingProfileName;
+    const nextProfileName = requestedProfileName ? normalizeProfileName4(requestedProfileName) : existingProfileName;
     if ((!requestedProfileName || nextProfileName === existingProfileName) && hasExistingProfile && manifest.profile_uid) {
       return manifest;
     }
@@ -18697,7 +18928,7 @@ var ContextCompressionCoordinator = class {
         continue;
       }
       if (snapshot.runs.some(
-        (run) => run.status === "running" && run.kind !== "command" && normalizeProfileName4(run.profile_name_snapshot ?? run.profile) === profileName
+        (run) => run.status === "running" && run.kind !== "command" && normalizeProfileName5(run.profile_name_snapshot ?? run.profile) === profileName
       )) {
         return true;
       }
@@ -18707,7 +18938,7 @@ var ContextCompressionCoordinator = class {
   async profileNameForRun(conversationId, runId) {
     const snapshot = await this.deps.store.readSnapshot(conversationId).catch(() => null);
     const run = snapshot?.runs.find((item) => item.id === runId);
-    return normalizeProfileName4(run?.profile_name_snapshot ?? run?.profile);
+    return normalizeProfileName5(run?.profile_name_snapshot ?? run?.profile);
   }
 };
 function createContextCompressionMarker(input) {
@@ -18908,7 +19139,7 @@ function normalizeFocus(value) {
 function normalizeLanguage2(value) {
   return value === "en" ? "en" : "zh-CN";
 }
-function normalizeProfileName4(value) {
+function normalizeProfileName5(value) {
   return value?.trim() || "default";
 }
 function localizedText(language, zh, en) {
@@ -18936,7 +19167,7 @@ import {
   rm as rm5,
   writeFile as writeFile2
 } from "fs/promises";
-import path17 from "path";
+import path18 from "path";
 var ConversationStore = class {
   constructor(paths) {
     this.paths = paths;
@@ -18950,7 +19181,7 @@ var ConversationStore = class {
     const entries = await readdir5(this.paths.conversationsDir, {
       withFileTypes: true
     }).catch((error) => {
-      if (isNodeError10(error, "ENOENT")) {
+      if (isNodeError11(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -19019,7 +19250,7 @@ var ConversationStore = class {
     await this.readManifest(conversationId);
     const raw = await readFile9(this.eventsPath(conversationId), "utf8").catch(
       (error) => {
-        if (isNodeError10(error, "ENOENT")) {
+        if (isNodeError11(error, "ENOENT")) {
           return "";
         }
         throw error;
@@ -19067,40 +19298,40 @@ var ConversationStore = class {
     return manifest != null && manifest.status !== "deleted_soft";
   }
   removeConversationAttachments(conversationId) {
-    return rm5(path17.join(this.conversationDir(conversationId), "attachments"), {
+    return rm5(path18.join(this.conversationDir(conversationId), "attachments"), {
       recursive: true,
       force: true
     });
   }
   conversationDir(conversationId) {
     assertValidConversationId(conversationId);
-    return path17.join(this.paths.conversationsDir, conversationId);
+    return path18.join(this.paths.conversationsDir, conversationId);
   }
   manifestPath(conversationId) {
-    return path17.join(this.conversationDir(conversationId), "manifest.json");
+    return path18.join(this.conversationDir(conversationId), "manifest.json");
   }
   snapshotPath(conversationId) {
-    return path17.join(this.conversationDir(conversationId), "snapshot.json");
+    return path18.join(this.conversationDir(conversationId), "snapshot.json");
   }
   eventsPath(conversationId) {
-    return path17.join(this.conversationDir(conversationId), "events.ndjson");
+    return path18.join(this.conversationDir(conversationId), "events.ndjson");
   }
 };
 function createEmptySnapshot2() {
   return { schema_version: 1, messages: [], runs: [] };
 }
-function isNodeError10(error, code) {
+function isNodeError11(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/hermes-session-sync.ts
 import { randomUUID as randomUUID11 } from "crypto";
-import { readdir as readdir7, readFile as readFile11, stat as stat11 } from "fs/promises";
-import path19 from "path";
+import { readdir as readdir7, readFile as readFile11, stat as stat12 } from "fs/promises";
+import path20 from "path";
 
 // src/conversations/delivery-import.ts
-import { lstat as lstat2, readFile as readFile10, readdir as readdir6, stat as stat10 } from "fs/promises";
-import path18 from "path";
+import { lstat as lstat2, readFile as readFile10, readdir as readdir6, stat as stat11 } from "fs/promises";
+import path19 from "path";
 var MAX_IMPORTED_BLOB_BYTES = 100 * 1024 * 1024;
 var MAX_MEDIA_IMPORT_FAILURES = 20;
 var MAX_DELIVERY_FILES = 50;
@@ -19171,16 +19402,16 @@ var SUPPORTED_DELIVERY_EXTENSIONS = /* @__PURE__ */ new Set([
   ".m4a"
 ]);
 function resolveDeliveryStagingTarget(paths, stagingDir) {
-  const resolvedDir = path18.resolve(stagingDir);
-  const relative = path18.relative(path18.resolve(paths.conversationsDir), resolvedDir);
-  if (!relative || relative.startsWith("..") || path18.isAbsolute(relative)) {
+  const resolvedDir = path19.resolve(stagingDir);
+  const relative = path19.relative(path19.resolve(paths.conversationsDir), resolvedDir);
+  if (!relative || relative.startsWith("..") || path19.isAbsolute(relative)) {
     throw new LinkHttpError(
       400,
       "delivery_staging_invalid",
       "delivery staging directory must be inside Hermes Link conversations"
     );
   }
-  const segments = relative.split(path18.sep);
+  const segments = relative.split(path19.sep);
   if (segments.length !== 3 || segments[1] !== DELIVERY_STAGING_SEGMENT || !segments[0] || !segments[2]) {
     throw new LinkHttpError(
       400,
@@ -19196,7 +19427,7 @@ function resolveDeliveryStagingTarget(paths, stagingDir) {
 }
 async function collectStagedDeliveryReferences(stagingDir) {
   const directoryStat = await lstat2(stagingDir).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+    if (isNodeError12(error, "ENOENT")) {
       throw new LinkHttpError(
         404,
         "delivery_staging_not_found",
@@ -19216,7 +19447,7 @@ async function collectStagedDeliveryReferences(stagingDir) {
   return entries.filter((entry) => entry.isFile() && !entry.name.startsWith(".")).filter((entry) => isSupportedDeliveryFilename(entry.name)).sort(
     (left, right) => left.name.localeCompare(right.name, "en", { numeric: true })
   ).slice(0, MAX_DELIVERY_FILES).map((entry) => {
-    const sourcePath = path18.join(stagingDir, entry.name);
+    const sourcePath = path19.join(stagingDir, entry.name);
     const mime = inferMimeType(sourcePath);
     return {
       path: sourcePath,
@@ -19376,8 +19607,8 @@ function emptyImportResult(input) {
 }
 async function writeBlobFromFile(deps, conversationId, source) {
   const sourcePath = resolveMediaSourcePath(source.path);
-  const fileStat = await stat10(sourcePath).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+  const fileStat = await stat11(sourcePath).catch((error) => {
+    if (isNodeError12(error, "ENOENT")) {
       throw new LinkHttpError(
         404,
         "media_source_not_found",
@@ -19402,7 +19633,7 @@ async function writeBlobFromFile(deps, conversationId, source) {
   }
   return deps.writeBlob(conversationId, {
     bytes: await readFile10(sourcePath),
-    filename: path18.basename(sourcePath),
+    filename: path19.basename(sourcePath),
     mime: source.mime ?? inferMimeType(sourcePath)
   });
 }
@@ -19411,11 +19642,11 @@ function describeMediaImportFailure(reference, sourceKey, error) {
     key: sourceKey,
     filename: sanitizeFilename(reference.path, "attachment"),
     reason: error instanceof Error ? error.message : String(error),
-    ...isNodeError11(error) && error.code ? { code: error.code } : {}
+    ...isNodeError12(error) && error.code ? { code: error.code } : {}
   };
 }
 function isSupportedDeliveryFilename(filename) {
-  return SUPPORTED_DELIVERY_EXTENSIONS.has(path18.extname(filename).toLowerCase());
+  return SUPPORTED_DELIVERY_EXTENSIONS.has(path19.extname(filename).toLowerCase());
 }
 function readString10(payload, key) {
   const value = payload[key];
@@ -19424,7 +19655,7 @@ function readString10(payload, key) {
 function toRecord10(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
-function isNodeError11(error, code) {
+function isNodeError12(error, code) {
   return typeof error === "object" && error !== null && "code" in error && (code === void 0 || error.code === code);
 }
 
@@ -19473,7 +19704,7 @@ async function syncHermesSessionsIntoConversations(paths, logger, options = {})
   const candidates = [];
   for (const profileName of profileNames) {
     const profileDir = resolveHermesProfileDir(profileName);
-    const dbPath = path19.join(profileDir, "state.db");
+    const dbPath = path20.join(profileDir, "state.db");
     const sessions = await listProfileSessions(dbPath).catch((error) => {
       result.errors.push({
         profile: profileName,
@@ -19589,7 +19820,7 @@ async function syncHermesCronSessionIntoConversations(paths, logger, input) {
   const knownHermesSessions = await readKnownHermesSessions(store);
   const profileName = input.profileName.trim() || DEFAULT_PROFILE_NAME;
   const profileDir = resolveHermesProfileDir(profileName);
-  const dbPath = path19.join(profileDir, "state.db");
+  const dbPath = path20.join(profileDir, "state.db");
   const sessions = await listProfileSessionsByIdPrefix(
     dbPath,
     `cron_${jobId}_`
@@ -20604,7 +20835,7 @@ async function discoverHermesProfileNames() {
   const profilesDir = resolveHermesProfilesDir();
   const entries = await readdir7(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError12(error, "ENOENT")) {
+      if (isNodeError13(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -20900,10 +21131,10 @@ async function readJsonlMessages(profileName, sessionId) {
     return [];
   }
   const profileDir = resolveHermesProfileDir(profileName);
-  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path19.join(profileDir, "sessions"));
-  const transcriptPath = path19.join(sessionsDir, `${sessionId}.jsonl`);
+  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path20.join(profileDir, "sessions"));
+  const transcriptPath = path20.join(sessionsDir, `${sessionId}.jsonl`);
   const raw = await readFile11(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+    if (isNodeError13(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -21231,8 +21462,8 @@ function quoteIdentifier(value) {
   return `"${value.replaceAll('"', '""')}"`;
 }
 async function isFile(filePath) {
-  return stat11(filePath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+  return stat12(filePath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError13(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -21265,13 +21496,13 @@ function readBoolean(value) {
   }
   return false;
 }
-function isNodeError12(error, code) {
+function isNodeError13(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/delivery-context.ts
-import { copyFile, mkdir as mkdir11, stat as stat12 } from "fs/promises";
-import path20 from "path";
+import { copyFile, mkdir as mkdir11, stat as stat13 } from "fs/promises";
+import path21 from "path";
 var ACTIVE_CONTEXTS = /* @__PURE__ */ new Map();
 var CONTEXT_TTL_MS = 2 * 60 * 60 * 1e3;
 var MAX_DELIVERY_TOOL_FILES = 50;
@@ -21343,10 +21574,10 @@ function findDeliveryContext(input) {
   );
 }
 async function copyFilesIntoDeliveryContext(paths, context, files) {
-  const stagingDir = path20.resolve(context.stagingDir);
-  const conversationsRoot = path20.resolve(paths.conversationsDir);
-  const relative = path20.relative(conversationsRoot, stagingDir);
-  if (!relative || relative.startsWith("..") || path20.isAbsolute(relative)) {
+  const stagingDir = path21.resolve(context.stagingDir);
+  const conversationsRoot = path21.resolve(paths.conversationsDir);
+  const relative = path21.relative(conversationsRoot, stagingDir);
+  if (!relative || relative.startsWith("..") || path21.isAbsolute(relative)) {
     throw new LinkHttpError(
       400,
       "delivery_staging_invalid",
@@ -21357,13 +21588,13 @@ async function copyFilesIntoDeliveryContext(paths, context, files) {
   const result = { staged: [], skipped: [] };
   const usedNames = /* @__PURE__ */ new Set();
   for (const [index, file] of files.slice(0, MAX_DELIVERY_TOOL_FILES).entries()) {
-    const sourcePath = path20.resolve(file.path);
+    const sourcePath = path21.resolve(file.path);
     let baseName = sanitizeFilename(
-      file.caption || path20.basename(sourcePath),
+      file.caption || path21.basename(sourcePath),
       `attachment-${index + 1}`
     );
-    const sourceExtension = path20.extname(sourcePath);
-    if (!path20.extname(baseName) && sourceExtension) {
+    const sourceExtension = path21.extname(sourcePath);
+    if (!path21.extname(baseName) && sourceExtension) {
       baseName = `${baseName}${sourceExtension}`;
     }
     const filename = uniqueStagingFilename(
@@ -21377,8 +21608,8 @@ async function copyFilesIntoDeliveryContext(paths, context, files) {
       });
       continue;
     }
-    const sourceStat = await stat12(sourcePath).catch((error) => {
-      if (isNodeError13(error, "ENOENT")) {
+    const sourceStat = await stat13(sourcePath).catch((error) => {
+      if (isNodeError14(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -21390,7 +21621,7 @@ async function copyFilesIntoDeliveryContext(paths, context, files) {
       });
       continue;
     }
-    const targetPath = path20.join(stagingDir, filename);
+    const targetPath = path21.join(stagingDir, filename);
     await copyFile(sourcePath, targetPath);
     result.staged.push({
       source_path: sourcePath,
@@ -21433,7 +21664,7 @@ function normalizeDeliveryFileInputs(value) {
   });
 }
 function uniqueStagingFilename(filename, usedNames) {
-  const extension = path20.extname(filename);
+  const extension = path21.extname(filename);
   const stem = filename.slice(0, filename.length - extension.length);
   let candidate = filename;
   let suffix = 2;
@@ -21469,7 +21700,7 @@ function readString12(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function isNodeError13(error, code) {
+function isNodeError14(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -22175,9 +22406,9 @@ function readBoolean2(payload, key) {
 
 // src/hermes/stt.ts
 import { execFile as execFile3 } from "child_process";
-import { access as access2, readFile as readFile12, stat as stat13 } from "fs/promises";
-import os5 from "os";
-import path21 from "path";
+import { access as access2, readFile as readFile12, stat as stat14 } from "fs/promises";
+import os6 from "os";
+import path22 from "path";
 import { promisify as promisify3 } from "util";
 var execFileAsync3 = promisify3(execFile3);
 var STT_RESULT_PREFIX = "__HERMES_LINK_STT__";
@@ -22272,7 +22503,7 @@ async function buildHermesSttEnv(profileName, hermesSourceRoot) {
   };
   const sourceRoot = hermesSourceRoot ?? await findDevHermesAgentSource();
   if (sourceRoot) {
-    env.PYTHONPATH = [sourceRoot, env.PYTHONPATH].filter(Boolean).join(path21.delimiter);
+    env.PYTHONPATH = [sourceRoot, env.PYTHONPATH].filter(Boolean).join(path22.delimiter);
   }
   return env;
 }
@@ -22367,14 +22598,14 @@ async function resolveHermesPythonRuntime() {
   };
 }
 async function resolveExecutablePath(command) {
-  if (path21.isAbsolute(command)) {
+  if (path22.isAbsolute(command)) {
     return await isExecutableFile2(command) ? command : null;
   }
   const pathEnv = process.env.PATH ?? "";
   const extensions = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";") : [""];
-  for (const dir of pathEnv.split(path21.delimiter)) {
+  for (const dir of pathEnv.split(path22.delimiter)) {
     for (const extension of extensions) {
-      const candidate = path21.join(dir, `${command}${extension}`);
+      const candidate = path22.join(dir, `${command}${extension}`);
       if (await isExecutableFile2(candidate)) {
         return candidate;
       }
@@ -22384,7 +22615,7 @@ async function resolveExecutablePath(command) {
 }
 async function isExecutableFile2(filePath) {
   try {
-    const info = await stat13(filePath);
+    const info = await stat14(filePath);
     if (!info.isFile()) {
       return false;
     }
@@ -22396,11 +22627,11 @@ async function isExecutableFile2(filePath) {
 }
 async function findHermesVenvPython(sourceRoot) {
   const candidates = process.platform === "win32" ? [
-    path21.join(sourceRoot, "venv", "Scripts", "python.exe"),
-    path21.join(sourceRoot, ".venv", "Scripts", "python.exe")
+    path22.join(sourceRoot, "venv", "Scripts", "python.exe"),
+    path22.join(sourceRoot, ".venv", "Scripts", "python.exe")
   ] : [
-    path21.join(sourceRoot, "venv", "bin", "python"),
-    path21.join(sourceRoot, ".venv", "bin", "python")
+    path22.join(sourceRoot, "venv", "bin", "python"),
+    path22.join(sourceRoot, ".venv", "bin", "python")
   ];
   for (const candidate of candidates) {
     if (await isExecutableFile2(candidate)) {
@@ -22429,8 +22660,8 @@ function shebangToPythonCommand(shebang) {
 }
 async function findDevHermesAgentSource() {
   const candidates = [
-    path21.resolve(process.cwd(), "reference/hermes-agent"),
-    path21.resolve(process.cwd(), "../../reference/hermes-agent")
+    path22.resolve(process.cwd(), "reference/hermes-agent"),
+    path22.resolve(process.cwd(), "../../reference/hermes-agent")
   ];
   for (const candidate of candidates) {
     if (await isHermesAgentSourceRoot(candidate)) {
@@ -22446,7 +22677,7 @@ async function readHermesLauncherTarget(filePath) {
       line
     );
     const rawTarget = quoted?.groups?.target ?? /^\s*exec\s+(?<target>\S+)\s+(?:"\$@"|'\$@')/.exec(line)?.groups?.target;
-    if (!rawTarget || !path21.isAbsolute(rawTarget)) {
+    if (!rawTarget || !path22.isAbsolute(rawTarget)) {
       continue;
     }
     if (await isExecutableFile2(rawTarget)) {
@@ -22476,12 +22707,12 @@ async function resolveHermesEntrypointRuntime(entrypointPath) {
   return null;
 }
 async function findHermesSourceRoot(executablePath) {
-  let cursor = path21.dirname(path21.resolve(executablePath));
+  let cursor = path22.dirname(path22.resolve(executablePath));
   for (let index = 0; index < 6; index += 1) {
     if (await isHermesAgentSourceRoot(cursor)) {
       return cursor;
     }
-    const parent = path21.dirname(cursor);
+    const parent = path22.dirname(cursor);
     if (parent === cursor) {
       break;
     }
@@ -22492,14 +22723,14 @@ async function findHermesSourceRoot(executablePath) {
 function hermesSourceRootCandidates() {
   const candidates = [
     process.env.HERMES_PYTHON_SRC_ROOT?.trim(),
-    path21.join(os5.homedir(), ".hermes", "hermes-agent"),
+    path22.join(os6.homedir(), ".hermes", "hermes-agent"),
     "/usr/local/lib/hermes-agent",
     "/opt/hermes"
   ].filter((candidate) => Boolean(candidate));
   if (process.platform === "win32") {
     const localAppData = process.env.LOCALAPPDATA?.trim();
     if (localAppData) {
-      candidates.unshift(path21.join(localAppData, "hermes", "hermes-agent"));
+      candidates.unshift(path22.join(localAppData, "hermes", "hermes-agent"));
     }
   }
   return candidates;
@@ -22509,10 +22740,10 @@ async function findExplicitHermesSourceRoot() {
   return explicit && await isHermesAgentSourceRoot(explicit) ? explicit : null;
 }
 async function isHermesAgentSourceRoot(candidate) {
-  return await isDirectory(candidate) && await isDirectory(path21.join(candidate, "tools")) && await isDirectory(path21.join(candidate, "hermes_cli"));
+  return await isDirectory(candidate) && await isDirectory(path22.join(candidate, "tools")) && await isDirectory(path22.join(candidate, "hermes_cli"));
 }
 async function isDirectory(candidate) {
-  return stat13(candidate).then((info) => info.isDirectory()).catch(() => false);
+  return stat14(candidate).then((info) => info.isDirectory()).catch(() => false);
 }
 function compactProcessOutput(value) {
   const compact = value.trim().replace(/\s+/gu, " ").slice(0, 500);
@@ -22520,14 +22751,14 @@ function compactProcessOutput(value) {
 }
 
 // src/hermes/usage-probe.ts
-import { open as open3, readFile as readFile14, rm as rm6, stat as stat15 } from "fs/promises";
-import path23 from "path";
+import { open as open3, readFile as readFile14, rm as rm6, stat as stat16 } from "fs/promises";
+import path24 from "path";
 import YAML3 from "yaml";
 
 // src/hermes/profiles.ts
 import { execFile as execFile4 } from "child_process";
-import { readdir as readdir8, readFile as readFile13, rename as rename3, stat as stat14 } from "fs/promises";
-import path22 from "path";
+import { readdir as readdir8, readFile as readFile13, rename as rename3, stat as stat15 } from "fs/promises";
+import path23 from "path";
 import { setTimeout as delay4 } from "timers/promises";
 import { promisify as promisify4 } from "util";
 import YAML2 from "yaml";
@@ -22546,7 +22777,7 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
   const profilesDir = resolveHermesProfilesDir();
   const entries = await readdir8(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -22600,8 +22831,8 @@ async function prepareHermesProfilesForUse(paths = resolveRuntimePaths()) {
 async function getHermesProfileStatus(name, paths = resolveRuntimePaths()) {
   assertProfileName(name);
   const profile = await profileInfo(name, paths);
-  const exists = await stat14(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  const exists = await stat15(profile.path).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -22670,7 +22901,7 @@ async function readHermesProfileCapabilities(name) {
   return {
     defaultModel: listedModels?.defaultModel ?? null,
     modelCount: listedModels?.models.length ?? 0,
-    skillCount: await countSkills(path22.join(profileDir, "skills")).catch(
+    skillCount: await countSkills(path23.join(profileDir, "skills")).catch(
       () => 0
     ),
     toolCount: await countConfiguredTools(name).catch(() => 0)
@@ -22713,8 +22944,8 @@ function assertProfileName(name) {
   }
 }
 async function pathExists(targetPath) {
-  return await stat14(targetPath).then(() => true).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  return await stat15(targetPath).then(() => true).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -22722,8 +22953,8 @@ async function pathExists(targetPath) {
 }
 async function hasDefaultProfileConfigSource() {
   const profilePath = resolveHermesProfileDir(DEFAULT_PROFILE);
-  const profileStat = await stat14(profilePath).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  const profileStat = await stat15(profilePath).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -22731,7 +22962,7 @@ async function hasDefaultProfileConfigSource() {
   if (!profileStat?.isDirectory()) {
     return false;
   }
-  return await pathExists(resolveHermesConfigPath(DEFAULT_PROFILE)) || await pathExists(path22.join(profilePath, ".env"));
+  return await pathExists(resolveHermesConfigPath(DEFAULT_PROFILE)) || await pathExists(path23.join(profilePath, ".env"));
 }
 async function deleteHermesProfileWithCli(name) {
   try {
@@ -22844,7 +23075,7 @@ function isProcessRunning(pid) {
     process.kill(pid, 0);
     return true;
   } catch (error) {
-    return isNodeError14(error, "EPERM");
+    return isNodeError15(error, "EPERM");
   }
 }
 async function waitForProfilePathToRemainAbsent(profilePath) {
@@ -22881,7 +23112,7 @@ function readExecErrorOutput2(error) {
   }
   return parts.join("\n");
 }
-function isNodeError14(error, code) {
+function isNodeError15(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function errorMessage(error) {
@@ -22893,7 +23124,7 @@ function escapeRegExp2(value) {
 async function countSkills(root) {
   const entries = await readdir8(root, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -22901,7 +23132,7 @@ async function countSkills(root) {
   );
   let count = 0;
   for (const entry of entries) {
-    const entryPath = path22.join(root, entry.name);
+    const entryPath = path23.join(root, entry.name);
     if (entry.name === ".git" || entry.name === ".hub") {
       continue;
     }
@@ -22920,7 +23151,7 @@ async function countConfiguredTools(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+    if (isNodeError15(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -22991,10 +23222,10 @@ async function ensureHermesUsageProbeForProfiles(options = {}) {
 }
 async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
   const paths = options.paths ?? resolveRuntimePaths();
-  const normalizedProfile = normalizeProfileName5(profileName);
+  const normalizedProfile = normalizeProfileName6(profileName);
   const profilePath = resolveHermesProfileDir(normalizedProfile);
   const configPath = resolveHermesConfigPath(normalizedProfile);
-  const pluginPath = path23.join(
+  const pluginPath = path24.join(
     profilePath,
     "plugins",
     HERMES_USAGE_PROBE_PLUGIN_KEY
@@ -23020,7 +23251,7 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
     return { ...base(), skipped: true };
   }
   try {
-    await ensureDirectoryWithInheritedMetadata(path23.dirname(eventsPath), 448);
+    await ensureDirectoryWithInheritedMetadata(path24.dirname(eventsPath), 448);
     const state = await readUsageProbeState(paths);
     const pluginState = state.profiles[normalizedProfile];
     const currentConfig = await readUsageProbeConfigStatus({
@@ -23116,11 +23347,11 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
 }
 async function findHermesUsageProbeEventForRun(input) {
   const paths = input.paths ?? resolveRuntimePaths();
-  const profileName = normalizeProfileName5(input.profileName);
+  const profileName = normalizeProfileName6(input.profileName);
   const eventsPath = resolveUsageProbeEventsPath(paths, profileName);
   const raw = await readTail2(eventsPath, MAX_EVENT_READ_BYTES).catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -23153,7 +23384,7 @@ async function findHermesUsageProbeEventForRun(input) {
   return aggregateUsageProbeEvents(events.sort(compareUsageProbeEventsByTime));
 }
 function resolveUsageProbeEventsPath(paths = resolveRuntimePaths(), profileName = "default") {
-  return path23.join(
+  return path24.join(
     paths.homeDir,
     USAGE_PROBE_DIR,
     safeProfileSegment(profileName),
@@ -23177,8 +23408,8 @@ function summarizeUsageProbeEnsure(result) {
   };
 }
 async function writeUsageProbePlugin(input) {
-  const manifestPath = path23.join(input.pluginPath, "plugin.yaml");
-  const initPath = path23.join(input.pluginPath, "__init__.py");
+  const manifestPath = path24.join(input.pluginPath, "plugin.yaml");
+  const initPath = path24.join(input.pluginPath, "__init__.py");
   const manifest = usageProbeManifest();
   const source = usageProbePythonSource(
     input.profileName,
@@ -23191,7 +23422,7 @@ async function writeUsageProbePlugin(input) {
 }
 async function writeManagedFile(filePath, content) {
   const existing = await readFile14(filePath, "utf8").catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -23294,13 +23525,13 @@ function hasManagedPluginEntry(entries) {
   return entries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY) || entries.includes(LEGACY_PLUGIN_KEY);
 }
 function normalizeEnabledPluginConfig(plugins, enabledEntries, disabledEntries) {
-  const nextEnabled = uniqueStrings([
+  const nextEnabled = uniqueStrings2([
     ...enabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     ),
     HERMES_USAGE_PROBE_PLUGIN_KEY
   ]);
-  const nextDisabled = uniqueStrings(
+  const nextDisabled = uniqueStrings2(
     disabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     )
@@ -23315,12 +23546,12 @@ function normalizeEnabledPluginConfig(plugins, enabledEntries, disabledEntries)
   return changed;
 }
 function normalizeDisabledPluginConfig(plugins, enabledEntries, disabledEntries) {
-  const nextEnabled = uniqueStrings(
+  const nextEnabled = uniqueStrings2(
     enabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     )
   );
-  const nextDisabled = uniqueStrings([
+  const nextDisabled = uniqueStrings2([
     ...disabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     ),
@@ -23341,11 +23572,11 @@ function ensureApiServerToolsetEnabled(config) {
   if (apiServerToolsets.length === 0 && !Array.isArray(platformToolsets?.api_server) && !knownApiServerToolsets.includes(HERMESPILOT_LINK_TOOLSET)) {
     return false;
   }
-  const nextToolsets = uniqueStrings([
+  const nextToolsets = uniqueStrings2([
     ...Array.isArray(platformToolsets?.api_server) ? apiServerToolsets : ["hermes-api-server"],
     HERMESPILOT_LINK_TOOLSET
   ]);
-  const nextKnownToolsets = uniqueStrings([
+  const nextKnownToolsets = uniqueStrings2([
     ...knownApiServerToolsets,
     HERMESPILOT_LINK_TOOLSET
   ]);
@@ -23525,19 +23756,19 @@ async function disableUsageProbeAfterActivationFailure(input) {
   });
 }
 async function cleanupLegacyUsageProbePlugin(profilePath) {
-  const legacyPath = path23.join(profilePath, "plugins", LEGACY_PLUGIN_KEY);
+  const legacyPath = path24.join(profilePath, "plugins", LEGACY_PLUGIN_KEY);
   const [manifest, init] = await Promise.all([
-    readFile14(path23.join(legacyPath, "plugin.yaml"), "utf8").catch(
+    readFile14(path24.join(legacyPath, "plugin.yaml"), "utf8").catch(
       (error) => {
-        if (isNodeError15(error, "ENOENT")) {
+        if (isNodeError16(error, "ENOENT")) {
           return null;
         }
         throw error;
       }
     ),
-    readFile14(path23.join(legacyPath, "__init__.py"), "utf8").catch(
+    readFile14(path24.join(legacyPath, "__init__.py"), "utf8").catch(
       (error) => {
-        if (isNodeError15(error, "ENOENT")) {
+        if (isNodeError16(error, "ENOENT")) {
           return null;
         }
         throw error;
@@ -23584,12 +23815,12 @@ async function rememberUsageProbeState(paths, profileName, patch) {
   }));
 }
 function usageProbeStatePath(paths) {
-  return path23.join(paths.homeDir, USAGE_PROBE_DIR, USAGE_PROBE_STATE_FILE);
+  return path24.join(paths.homeDir, USAGE_PROBE_DIR, USAGE_PROBE_STATE_FILE);
 }
 async function readHermesConfigDocument2(configPath, language) {
   const existingRaw = await readFile14(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -23620,7 +23851,7 @@ async function writeHermesConfigDocument2(input) {
   );
 }
 async function readTail2(filePath, maxBytes) {
-  const info = await stat15(filePath);
+  const info = await stat16(filePath);
   const length = Math.min(info.size, maxBytes);
   if (length <= 0) {
     return "";
@@ -23996,7 +24227,7 @@ function withDefaultProfilePlaceholder(profiles) {
     ...profiles
   ];
 }
-function normalizeProfileName5(profileName) {
+function normalizeProfileName6(profileName) {
   const value = profileName?.trim() || "default";
   if (!/^[a-zA-Z0-9._-]{1,64}$/u.test(value)) {
     throw new Error("invalid profile name");
@@ -24004,7 +24235,7 @@ function normalizeProfileName5(profileName) {
   return value;
 }
 function safeProfileSegment(profileName) {
-  return encodeURIComponent(normalizeProfileName5(profileName));
+  return encodeURIComponent(normalizeProfileName6(profileName));
 }
 function ensureRecord2(target, key) {
   const existing = target[key];
@@ -24021,7 +24252,7 @@ function readStringList5(value) {
   }
   return value.filter((entry) => typeof entry === "string").map((entry) => entry.trim()).filter(Boolean);
 }
-function uniqueStrings(entries) {
+function uniqueStrings2(entries) {
   return [...new Set(entries.map((entry) => entry.trim()).filter(Boolean))];
 }
 function sameStringList(left, right) {
@@ -24047,8 +24278,8 @@ function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function pathIsDirectory(filePath) {
-  return stat15(filePath).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+  return stat16(filePath).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError16(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -24071,7 +24302,7 @@ function logEnsureResult(logger, source, profiles) {
 function errorMessage2(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isNodeError15(error, code) {
+function isNodeError16(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -24151,8 +24382,8 @@ function toRecord14(value) {
 }
 
 // src/conversations/run-transcript-enrichment.ts
-import { readFile as readFile15, stat as stat16 } from "fs/promises";
-import path24 from "path";
+import { readFile as readFile15, stat as stat17 } from "fs/promises";
+import path25 from "path";
 var MESSAGE_COLUMNS2 = [
   "id",
   "session_id",
@@ -24228,8 +24459,8 @@ async function readRunFinalAssistantText(input) {
 }
 async function readHermesTranscriptRows(profileName, sessionId) {
   const profileDir = resolveHermesProfileDir(profileName);
-  const dbPath = path24.join(profileDir, "state.db");
-  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path24.join(profileDir, "sessions"));
+  const dbPath = path25.join(profileDir, "state.db");
+  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path25.join(profileDir, "sessions"));
   const [dbRows, jsonlRows] = await Promise.all([
     readStateDbMessages2(dbPath, sessionId),
     readJsonlMessages2(sessionsDir, sessionId)
@@ -24292,9 +24523,9 @@ async function readJsonlMessages2(sessionsDir, sessionId) {
   if (!/^[A-Za-z0-9._:-]{1,160}$/u.test(sessionId)) {
     return [];
   }
-  const transcriptPath = path24.join(sessionsDir, `${sessionId}.jsonl`);
+  const transcriptPath = path25.join(sessionsDir, `${sessionId}.jsonl`);
   const raw = await readFile15(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+    if (isNodeError17(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -24508,8 +24739,8 @@ function quoteIdentifier2(value) {
   return `"${value.replaceAll('"', '""')}"`;
 }
 async function isFile2(filePath) {
-  return stat16(filePath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+  return stat17(filePath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError17(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -24539,7 +24770,7 @@ function readNumber4(value) {
 function toRecord15(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
-function isNodeError16(error, code) {
+function isNodeError17(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -27514,7 +27745,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
   async readHermesCronJobIds(profileName) {
     const jobs = await listHermesCronJobs({
       logger: this.deps.logger,
-      profileName: normalizeProfileName3(profileName),
+      profileName: normalizeProfileName4(profileName),
       includeDisabled: true
     });
     return new Set(
@@ -27522,7 +27753,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     );
   }
   async bindNewCronJobsCreatedByRun(input) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     const jobs = await listHermesCronJobs({
       logger: this.deps.logger,
       profileName,
@@ -27612,7 +27843,7 @@ function formatFilenameList(filenames, language = "zh-CN") {
 }
 async function readdirWithDirs(directory) {
   return readdir9(directory, { withFileTypes: true }).catch((error) => {
-    if (isNodeError17(error, "ENOENT")) {
+    if (isNodeError18(error, "ENOENT")) {
       return [];
     }
     throw error;
@@ -28014,7 +28245,7 @@ function findPreviousHermesResponseId(snapshot, run) {
 }
 function normalizeRunProfileForCompare(profileName) {
   try {
-    return normalizeProfileName3(profileName);
+    return normalizeProfileName4(profileName);
   } catch {
     return null;
   }
@@ -28147,7 +28378,7 @@ async function sleep(ms, signal) {
     );
   });
 }
-function isNodeError17(error, code) {
+function isNodeError18(error, code) {
   if (typeof error !== "object" || error === null || !("code" in error)) {
     return false;
   }
@@ -28381,11 +28612,16 @@ var ConversationService = class {
         "model_id must be a valid model id"
       );
     }
-    const configuredModel = normalizedModelId ? await findConfiguredModel(profile.profileName, normalizedModelId, {
-      provider: input.modelProvider,
-      baseUrl: input.modelBaseUrl,
-      apiMode: input.modelApiMode
-    }) : null;
+    const configuredModel = normalizedModelId ? await findConfiguredModel(
+      profile.profileName,
+      normalizedModelId,
+      {
+        provider: input.modelProvider,
+        baseUrl: input.modelBaseUrl,
+        apiMode: input.modelApiMode
+      },
+      this.paths
+    ) : null;
     if (normalizedModelId && !configuredModel) {
       throw new LinkHttpError(
         404,
@@ -28475,10 +28711,10 @@ var ConversationService = class {
     };
   }
   async ensureCronInboxConversation(input = {}) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     for (const conversationId of await this.store.listConversationIds()) {
       const manifest = await this.store.readManifest(conversationId).catch(() => null);
-      if (manifest?.status === "active" && manifest.title === "HermesLink \u5B9A\u65F6\u4EFB\u52A1" && normalizeProfileName3(
+      if (manifest?.status === "active" && manifest.title === "HermesLink \u5B9A\u65F6\u4EFB\u52A1" && normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile
       ) === profileName) {
         return manifest.id;
@@ -28589,7 +28825,7 @@ var ConversationService = class {
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const createdAt = input.runAt ?? now;
-      const profileName = normalizeProfileName3(
+      const profileName = normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile ?? input.profileName
       );
       const ownerAccountId = input.accountId ?? manifest.owner_account_id;
@@ -28656,7 +28892,7 @@ var ConversationService = class {
     });
   }
   async findImportedCronConversation(input) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     const outputAt = Date.parse(input.runAt ?? "");
     const candidates = [];
     for (const conversationId of await this.store.listConversationIds()) {
@@ -28664,7 +28900,7 @@ var ConversationService = class {
       if (!manifest || manifest.status !== "active") {
         continue;
       }
-      if (normalizeProfileName3(
+      if (normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile
       ) !== profileName) {
         continue;
@@ -28912,7 +29148,8 @@ var ConversationService = class {
       const configuredModel = normalizedModelId ? await findConfiguredModel(
         currentRuntime.profile.name,
         normalizedModelId,
-        modelSelector
+        modelSelector,
+        this.paths
       ) : null;
       if (normalizedModelId && !configuredModel) {
         throw new LinkHttpError(
@@ -29016,7 +29253,7 @@ var ConversationService = class {
         this.paths,
         profileName
       );
-      const currentProfile = normalizeProfileName3(
+      const currentProfile = normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile
       );
       if (currentProfile === profile.profileName && (!manifest.profile_uid || manifest.profile_uid === profile.profileUid)) {
@@ -29306,7 +29543,7 @@ var ConversationService = class {
             "This approval request cannot be permanently allowed because Hermes did not return a pattern key."
           );
         }
-        const profileName = normalizeProfileName3(
+        const profileName = normalizeProfileName4(
           run?.profile ?? match.message.sender.profile ?? manifest.profile_name_snapshot ?? manifest.profile
         );
         const result = await addHermesCommandAllowlistEntry(
@@ -29759,7 +29996,7 @@ var ConversationService = class {
     }
   }
   hermesArchiveStateSyncMarkerPath() {
-    return path25.join(this.paths.indexesDir, "hermes-archive-state-sync.json");
+    return path26.join(this.paths.indexesDir, "hermes-archive-state-sync.json");
   }
   prepareClearAllConversationPlan(targetStatus) {
     return this.maintenance.prepareClearAllConversationPlan(targetStatus);
@@ -29789,7 +30026,7 @@ var ConversationService = class {
     return this.maintenance.deleteConversations(conversationIds);
   }
   async deleteLocalConversationsForProfile(input) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     const profileUid = input.profileUid?.trim() || null;
     const deletedConversationIds = [];
     for (const conversationId of await this.store.listConversationIds()) {
@@ -29874,7 +30111,7 @@ function conversationMatchesProfile(manifest, profileName, profileUid) {
   if (profileUid && manifest.profile_uid === profileUid) {
     return true;
   }
-  return normalizeProfileName3(manifest.profile_name_snapshot ?? manifest.profile) === profileName;
+  return normalizeProfileName4(manifest.profile_name_snapshot ?? manifest.profile) === profileName;
 }
 function findApproval(snapshot, approvalId) {
   for (const message of snapshot.messages) {
@@ -32256,110 +32493,6 @@ function assertCronJobId(jobId) {
 // src/http/routes/model-configs.ts
 import { createHash as createHash9 } from "crypto";
 
-// src/hermes/model-provider-disconnects.ts
-import { stat as stat17 } from "fs/promises";
-import os6 from "os";
-import path26 from "path";
-async function markAuthBackedModelProviderDisconnected(paths, profileName, providerKey) {
-  const profileKey = normalizeProfileName6(profileName);
-  const provider = providerKey.trim();
-  if (!provider) {
-    return;
-  }
-  const credentialMtimeMs = await readProviderCredentialMtimeMs(
-    profileKey,
-    provider
-  );
-  await updateJsonFile(
-    disconnectedProvidersPath(paths),
-    (current) => {
-      const store = normalizeStore(current);
-      const profiles = { ...store.profiles ?? {} };
-      const profile = profiles[profileKey] ?? {};
-      profiles[profileKey] = {
-        ...profile,
-        providers: {
-          ...profile.providers ?? {},
-          [provider]: {
-            disconnectedAt: (/* @__PURE__ */ new Date()).toISOString(),
-            credentialMtimeMs
-          }
-        }
-      };
-      return { ...store, profiles };
-    }
-  );
-}
-async function readDisconnectedAuthBackedModelProviderKeys(paths, profileName) {
-  const store = normalizeStore(
-    await readJsonFile(
-      disconnectedProvidersPath(paths)
-    ).catch(() => null)
-  );
-  const profile = store.profiles?.[normalizeProfileName6(profileName)];
-  const providers = profile?.providers ?? {};
-  const active = /* @__PURE__ */ new Set();
-  for (const [provider, entry] of Object.entries(providers)) {
-    if (await isDisconnectMarkerActive(profileName, provider, entry)) {
-      active.add(provider);
-    }
-  }
-  return active;
-}
-async function isDisconnectMarkerActive(profileName, providerKey, entry) {
-  const currentMtimeMs = await readProviderCredentialMtimeMs(
-    profileName,
-    providerKey
-  );
-  if (entry.credentialMtimeMs === null || !Number.isFinite(entry.credentialMtimeMs)) {
-    return currentMtimeMs === null;
-  }
-  if (currentMtimeMs === null || !Number.isFinite(currentMtimeMs)) {
-    return true;
-  }
-  return currentMtimeMs <= entry.credentialMtimeMs + 1e3;
-}
-async function readProviderCredentialMtimeMs(profileName, providerKey) {
-  for (const filePath of credentialFilesForProvider(profileName, providerKey)) {
-    const stats = await stat17(filePath).catch((error) => {
-      if (isNodeError18(error, "ENOENT")) {
-        return null;
-      }
-      throw error;
-    });
-    if (stats) {
-      return stats.mtimeMs;
-    }
-  }
-  return null;
-}
-function credentialFilesForProvider(profileName, providerKey) {
-  const profileDir = resolveHermesProfileDir(normalizeProfileName6(profileName));
-  switch (providerKey) {
-    case "qwen-oauth":
-      return [path26.join(os6.homedir(), ".qwen", "oauth_creds.json")];
-    case "google-gemini-cli":
-      return [path26.join(profileDir, "auth", "google_oauth.json")];
-    default:
-      return [path26.join(profileDir, "auth.json")];
-  }
-}
-function disconnectedProvidersPath(paths) {
-  return path26.join(paths.homeDir, "model-provider-disconnects.json");
-}
-function normalizeStore(value) {
-  return {
-    version: 1,
-    profiles: value?.profiles && typeof value.profiles === "object" ? value.profiles : {}
-  };
-}
-function normalizeProfileName6(profileName) {
-  return profileName.trim() || "default";
-}
-function isNodeError18(error, code) {
-  return typeof error === "object" && error !== null && "code" in error && error.code === code;
-}
-
 // src/model-catalog/catalog.ts
 import { randomInt } from "crypto";
 import { mkdir as mkdir12 } from "fs/promises";
@@ -32747,6 +32880,43 @@ async function reloadGatewayAfterProfileModelConfigChange(result, options) {
     label: "\u6A21\u578B\u914D\u7F6E"
   });
 }
+async function refreshRuntimeAfterModelConfigChange(result, options) {
+  const profileName = options.profileName?.trim() || "default";
+  const label = options.label ?? "\u6A21\u578B\u914D\u7F6E";
+  if (resolveConversationRunBackend() !== "tui_gateway") {
+    return profileName === "default" ? reloadGatewayAfterModelConfigChange(result, options) : reloadGatewayAfterProfileModelConfigChange(result, {
+      ...options,
+      profileName
+    });
+  }
+  try {
+    await restartTuiGatewayBackend({
+      profileName,
+      reason: "model_config_changed",
+      logger: options.logger,
+      paths: options.paths
+    });
+    return {
+      ...result,
+      tuiGatewayRestarted: true,
+      requiresGatewayReload: false,
+      restartHint: `${label}\u5DF2\u4FDD\u5B58\uFF0C${profileName} Profile \u7684 tui_gateway \u5DF2\u91CD\u542F\u3002\u65B0\u7684 Run \u4F1A\u8BFB\u53D6\u6700\u65B0\u914D\u7F6E\u3002`
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    await options.logger.warn("tui_gateway_restart_after_model_config_failed", {
+      profile: profileName,
+      error: message
+    });
+    return {
+      ...result,
+      tuiGatewayRestarted: false,
+      reloadError: message,
+      requiresGatewayReload: true,
+      restartHint: `${label}\u5DF2\u4FDD\u5B58\uFF0C\u4F46 ${profileName} Profile \u7684 tui_gateway \u81EA\u52A8\u91CD\u542F\u5931\u8D25\uFF1A${message}`
+    };
+  }
+}
 async function reloadGatewayAfterProfileConfigChange(result, options) {
   try {
     await reloadHermesGateway({
@@ -32793,7 +32963,7 @@ function registerModelConfigRoutes(router, options) {
   router.get("/api/v1/model-configs", async (ctx) => {
     await authenticateRequest(ctx, paths);
     ctx.set("cache-control", "no-store");
-    ctx.body = await listHermesModelConfigs();
+    ctx.body = await listVisibleHermesModelConfigs("default", paths);
   });
   router.get("/api/v1/model-configs/catalog", async (ctx) => {
     await authenticateRequest(ctx, paths);
@@ -32831,8 +33001,16 @@ function registerModelConfigRoutes(router, options) {
         readModelProviderConfigInput(body),
         ctx.params.name
       );
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
+        paths,
+        logger,
+        profileName: ctx.params.name,
+        label: "\u6A21\u578B Provider \u914D\u7F6E"
+      }) : markModelConfigAppliedWithoutGatewayReload(result);
       ctx.body = await enrichProviderModelConfigResult(
-        markModelConfigAppliedWithoutGatewayReload(result),
+        applied,
         ctx.params.name,
         paths
       );
@@ -32865,8 +33043,16 @@ function registerModelConfigRoutes(router, options) {
         body,
         paths
       );
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
+        paths,
+        logger,
+        profileName: ctx.params.name,
+        label: "\u6A21\u578B Provider \u914D\u7F6E"
+      }) : markModelConfigAppliedWithoutGatewayReload(result);
       ctx.body = await enrichProviderModelConfigResult(
-        markModelConfigAppliedWithoutGatewayReload(result),
+        applied,
         ctx.params.name,
         paths
       );
@@ -32947,8 +33133,16 @@ function registerModelConfigRoutes(router, options) {
           },
           ctx.params.name
         );
+        const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+          defaultReload: true
+        }) ? await refreshRuntimeAfterModelConfigChange(result, {
+          paths,
+          logger,
+          profileName: ctx.params.name,
+          label: "\u6A21\u578B Provider \u914D\u7F6E"
+        }) : markModelConfigAppliedWithoutGatewayReload(result);
         ctx.body = await enrichProviderModelConfigResult(
-          markModelConfigAppliedWithoutGatewayReload(result),
+          applied,
           ctx.params.name,
           paths
         );
@@ -32980,8 +33174,14 @@ function registerModelConfigRoutes(router, options) {
           provider.providerKey,
           ctx.params.name
         );
+        const applied = await refreshRuntimeAfterModelConfigChange(result, {
+          paths,
+          logger,
+          profileName: ctx.params.name,
+          label: "\u6A21\u578B Provider \u914D\u7F6E"
+        });
         ctx.body = await enrichProviderModelConfigResult(
-          markModelConfigAppliedWithoutGatewayReload(result),
+          applied,
           ctx.params.name,
           paths
         );
@@ -32999,7 +33199,12 @@ function registerModelConfigRoutes(router, options) {
         );
       }
       ctx.body = latest ? await enrichProviderModelConfigResult(
-        markModelConfigAppliedWithoutGatewayReload(latest),
+        await refreshRuntimeAfterModelConfigChange(latest, {
+          paths,
+          logger,
+          profileName: ctx.params.name,
+          label: "\u6A21\u578B Provider \u914D\u7F6E"
+        }),
         ctx.params.name,
         paths
       ) : await listModelProviderResponse(ctx.params.name, paths);
@@ -33012,7 +33217,7 @@ function registerModelConfigRoutes(router, options) {
       const result = await saveHermesModelConfig(readModelConfigInput(body));
       const applied = shouldReloadGatewayAfterModelConfigChange(body, {
         defaultReload: true
-      }) ? await reloadGatewayAfterModelConfigChange(result, {
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger
       }) : markModelConfigAppliedWithoutGatewayReload(result);
@@ -33028,8 +33233,10 @@ function registerModelConfigRoutes(router, options) {
   router.patch("/api/v1/model-configs/defaults", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
+    const input = readModelDefaultsInput(body);
     try {
-      const result = await saveHermesModelDefaults(readModelDefaultsInput(body));
+      await assertModelDefaultsSelectable(input, "default", paths);
+      const result = await saveHermesModelDefaults(input);
       ctx.body = await enrichProviderModelConfigResult(result, "default", paths);
     } catch (error) {
       throw toModelConfigHttpError(error);
@@ -33041,7 +33248,9 @@ function registerModelConfigRoutes(router, options) {
     const input = readModelDeleteInput(body);
     try {
       const result = await deleteHermesModelConfig(input);
-      const applied = shouldReloadGatewayAfterModelConfigChange(body) ? await reloadGatewayAfterModelConfigChange(result, {
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger
       }) : markModelConfigAppliedWithoutGatewayReload(result);
@@ -33058,7 +33267,7 @@ function registerModelConfigRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     await getHermesProfileStatus(ctx.params.name, paths);
     ctx.set("cache-control", "no-store");
-    ctx.body = await listHermesModelConfigs(ctx.params.name);
+    ctx.body = await listVisibleHermesModelConfigs(ctx.params.name, paths);
   });
   router.post("/api/v1/profiles/:name/model-configs", async (ctx) => {
     await authenticateRequest(ctx, paths);
@@ -33071,7 +33280,7 @@ function registerModelConfigRoutes(router, options) {
       );
       const applied = shouldReloadGatewayAfterModelConfigChange(body, {
         defaultReload: true
-      }) ? await reloadGatewayAfterProfileModelConfigChange(result, {
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger,
         profileName: ctx.params.name
@@ -33093,7 +33302,9 @@ function registerModelConfigRoutes(router, options) {
     await getHermesProfileStatus(input.sourceProfileName, paths);
     try {
       const result = await importHermesModelConfig(input, ctx.params.name);
-      const applied = shouldReloadGatewayAfterModelConfigChange(body) ? await reloadGatewayAfterProfileModelConfigChange(result, {
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger,
         profileName: ctx.params.name
@@ -33111,11 +33322,10 @@ function registerModelConfigRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     await getHermesProfileStatus(ctx.params.name, paths);
     const body = await readJsonBody(ctx.req);
+    const input = readModelDefaultsInput(body);
     try {
-      const result = await saveHermesModelDefaults(
-        readModelDefaultsInput(body),
-        ctx.params.name
-      );
+      await assertModelDefaultsSelectable(input, ctx.params.name, paths);
+      const result = await saveHermesModelDefaults(input, ctx.params.name);
       ctx.body = await enrichProviderModelConfigResult(
         result,
         ctx.params.name,
@@ -33132,7 +33342,9 @@ function registerModelConfigRoutes(router, options) {
     const input = readModelDeleteInput(body);
     try {
       const result = await deleteHermesModelConfig(input, ctx.params.name);
-      const applied = shouldReloadGatewayAfterModelConfigChange(body) ? await reloadGatewayAfterProfileModelConfigChange(result, {
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger,
         profileName: ctx.params.name
@@ -33148,7 +33360,7 @@ function registerModelConfigRoutes(router, options) {
   });
 }
 async function listModelProviderResponse(profileName, paths, options = {}) {
-  const configs = await listHermesModelConfigs(profileName);
+  const configs = options.includeDisconnected ? await listHermesModelConfigs(profileName) : await listVisibleHermesModelConfigs(profileName, paths);
   const providerConfigs = await listHermesModelProviderConfigs(profileName);
   const catalog = await readModelCapabilityCatalog(paths);
   const providers = groupManagedModelsByProvider(
@@ -33172,6 +33384,92 @@ async function listModelProviderResponse(profileName, paths, options = {}) {
     providers: visibleProviders
   };
 }
+async function listVisibleHermesModelConfigs(profileName, paths) {
+  const configs = await listHermesModelConfigs(profileName);
+  const disconnectedProviders = await readDisconnectedAuthBackedModelProviderKeys(
+    paths,
+    profileName
+  );
+  return filterHermesModelConfigsByProviderKeys(configs, disconnectedProviders);
+}
+async function assertModelDefaultsSelectable(input, profileName, paths) {
+  const disconnectedProviders = await readDisconnectedAuthBackedModelProviderKeys(
+    paths,
+    profileName
+  );
+  assertProviderNotDisconnected(
+    disconnectedProviders,
+    input.taskModelProvider,
+    "task model"
+  );
+  assertProviderNotDisconnected(
+    disconnectedProviders,
+    input.compressionModelProvider,
+    "compression model"
+  );
+  if (disconnectedProviders.size === 0 || !input.taskModelId && !input.compressionModelId) {
+    return;
+  }
+  const allConfigs = await listHermesModelConfigs(profileName);
+  assertModelIdNotHiddenByDisconnect(allConfigs.models, disconnectedProviders, {
+    id: input.taskModelId,
+    provider: input.taskModelProvider,
+    baseUrl: input.taskModelBaseUrl,
+    apiMode: input.taskModelApiMode,
+    label: "task model"
+  });
+  assertModelIdNotHiddenByDisconnect(allConfigs.models, disconnectedProviders, {
+    id: input.compressionModelId,
+    provider: input.compressionModelProvider,
+    baseUrl: input.compressionModelBaseUrl,
+    apiMode: input.compressionModelApiMode,
+    label: "compression model"
+  });
+}
+function assertProviderNotDisconnected(disconnectedProviders, provider, label) {
+  if (provider && disconnectedProviders.has(provider)) {
+    throw new LinkHttpError(
+      409,
+      "model_provider_disconnected",
+      `The ${label} provider "${provider}" has been disconnected from this Profile.`
+    );
+  }
+}
+function assertModelIdNotHiddenByDisconnect(models, disconnectedProviders, selector) {
+  const id = selector.id?.trim();
+  if (!id) {
+    return;
+  }
+  const matchingModels = models.filter((model) => {
+    if (model.id !== id) {
+      return false;
+    }
+    if (selector.provider && model.provider !== selector.provider) {
+      return false;
+    }
+    if (selector.baseUrl !== void 0 && normalizeUrlForIdentity(model.baseUrl) !== normalizeUrlForIdentity(selector.baseUrl)) {
+      return false;
+    }
+    if (selector.apiMode && model.apiMode !== selector.apiMode) {
+      return false;
+    }
+    return true;
+  });
+  if (matchingModels.some((model) => !disconnectedProviders.has(model.provider))) {
+    return;
+  }
+  const hiddenMatch = matchingModels.find(
+    (model) => disconnectedProviders.has(model.provider)
+  );
+  if (!hiddenMatch) {
+    return;
+  }
+  throw new LinkHttpError(
+    409,
+    "model_provider_disconnected",
+    `The ${selector.label} "${id}" belongs to disconnected provider "${hiddenMatch.provider}".`
+  );
+}
 async function enrichProviderModelConfigResult(result, profileName, paths) {
   const providerResponse = await listModelProviderResponse(profileName, paths);
   return {
@@ -33830,12 +34128,12 @@ function registerProfileCatalogRoutes(router, options) {
       ok: true,
       generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
       profiles: await Promise.all(
-        profiles.map((profile) => readProfileCatalogItem(profile))
+        profiles.map((profile) => readProfileCatalogItem(profile, paths))
       )
     };
   });
 }
-async function readProfileCatalogItem(profile) {
+async function readProfileCatalogItem(profile, paths) {
   const [apiServer, capabilities, permissions, modelConfigs] = await Promise.all([
     readCatalogField(
       "apiServer",
@@ -33849,7 +34147,10 @@ async function readProfileCatalogItem(profile) {
       "permissions",
       () => readHermesProfilePermissions(profile.name)
     ),
-    readCatalogField("modelConfigs", () => listHermesModelConfigs(profile.name))
+    readCatalogField(
+      "modelConfigs",
+      () => listVisibleHermesModelConfigs2(profile.name, paths)
+    )
   ]);
   return {
     profile,
@@ -33870,6 +34171,14 @@ async function readProfileCatalogItem(profile) {
     ]
   };
 }
+async function listVisibleHermesModelConfigs2(profileName, paths) {
+  const configs = await listHermesModelConfigs(profileName);
+  const disconnectedProviders = await readDisconnectedAuthBackedModelProviderKeys(
+    paths,
+    profileName
+  );
+  return filterHermesModelConfigsByProviderKeys(configs, disconnectedProviders);
+}
 async function readCatalogField(field, load) {
   try {
     return { value: await load(), errors: [] };
@@ -39698,11 +40007,11 @@ async function mergeLastReportedPublicRoutes(paths, snapshotInput) {
   const state = await readNetworkReportState(paths);
   return {
     ...snapshotInput,
-    publicIpv4s: uniqueStrings2([
+    publicIpv4s: uniqueStrings3([
       ...snapshotInput.publicIpv4s,
       ...state.lastReportedPublicIpv4s
     ]).slice(0, 2),
-    publicIpv6s: uniqueStrings2([
+    publicIpv6s: uniqueStrings3([
       ...snapshotInput.publicIpv6s,
       ...state.lastReportedPublicIpv6s
     ]).slice(0, 2)
@@ -39794,7 +40103,7 @@ function sameStringList2(left, right) {
   }
   return left.every((value, index) => value === right[index]);
 }
-function uniqueStrings2(values) {
+function uniqueStrings3(values) {
   return [...new Set(values)];
 }
 function formatUtcDay(date) {