@hermespilot/link 0.7.9 → 0.8.1-beta.0

package/dist/{chunk-LUGNDJU3.js → chunk-HBRTCPIG.js}

@@ -4,8 +4,8 @@ import Router from "@koa/router";
 
 // src/conversations/conversation-service.ts
 import { EventEmitter } from "events";
-import { createHash as createHash7, randomUUID as randomUUID12 } from "crypto";
-import path25 from "path";
+import { createHash as createHash8, randomUUID as randomUUID12 } from "crypto";
+import path26 from "path";
 
 // src/database/link-database.ts
 import { mkdir } from "fs/promises";
@@ -151,6 +151,62 @@ var MIGRATIONS = [
         OR message_count > 0
         OR run_count > 0;
     `
+  },
+  {
+    version: 4,
+    name: "live_activity_registry",
+    sql: `
+      CREATE TABLE IF NOT EXISTS live_activities (
+        activity_id TEXT PRIMARY KEY,
+        activity_token TEXT NOT NULL,
+        apns_environment TEXT NOT NULL CHECK (apns_environment IN ('sandbox', 'production')),
+        apns_topic TEXT NOT NULL,
+        link_id TEXT NOT NULL,
+        account_id TEXT,
+        app_instance_id TEXT NOT NULL,
+        conversation_id TEXT NOT NULL,
+        conversation_title TEXT,
+        target_kind TEXT NOT NULL CHECK (target_kind IN ('run', 'context_compression')),
+        target_id TEXT NOT NULL,
+        run_id TEXT,
+        operation_id TEXT,
+        status TEXT NOT NULL CHECK (status IN ('active', 'ended', 'expired', 'invalid')),
+        language TEXT CHECK (language IS NULL OR language IN ('zh', 'en')),
+        privacy_level TEXT NOT NULL DEFAULT 'summary'
+          CHECK (privacy_level IN ('minimal', 'summary', 'detailed')),
+        last_phase TEXT,
+        last_summary_hash TEXT,
+        last_pushed_at TEXT,
+        push_count INTEGER NOT NULL DEFAULT 0,
+        started_at TEXT NOT NULL,
+        ended_at TEXT,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL,
+        CHECK (
+          (target_kind = 'run' AND run_id IS NOT NULL AND operation_id IS NULL)
+          OR
+          (target_kind = 'context_compression' AND operation_id IS NOT NULL AND run_id IS NULL)
+        )
+      );
+
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_live_activities_target_active
+        ON live_activities(app_instance_id, conversation_id, target_kind, target_id)
+        WHERE status = 'active';
+      CREATE INDEX IF NOT EXISTS idx_live_activities_target_lookup
+        ON live_activities(conversation_id, target_kind, target_id, status);
+      CREATE INDEX IF NOT EXISTS idx_live_activities_status_updated
+        ON live_activities(status, updated_at);
+    `
+  },
+  {
+    version: 5,
+    name: "live_activity_visible_state",
+    sql: `
+      ALTER TABLE live_activities ADD COLUMN last_status_label TEXT;
+      ALTER TABLE live_activities ADD COLUMN last_progress_text TEXT;
+      ALTER TABLE live_activities ADD COLUMN last_detail_text TEXT;
+      ALTER TABLE live_activities ADD COLUMN last_visible_updated_at TEXT;
+    `
   }
 ];
 async function migrateLinkDatabase(paths) {
@@ -229,6 +285,245 @@ async function upsertConversationStats(paths, record) {
     db.close();
   }
 }
+async function upsertLiveActivity(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    db.exec("BEGIN IMMEDIATE");
+    try {
+      const restoreState = readLiveActivityRestoreStateForTarget(db, {
+        accountId: input.accountId,
+        appInstanceId: input.appInstanceId,
+        conversationId: input.conversationId,
+        targetKind: input.targetKind,
+        targetId: input.targetId
+      });
+      db.prepare(
+        `
+        UPDATE live_activities
+        SET status = 'expired',
+            ended_at = COALESCE(ended_at, ?),
+            updated_at = ?
+        WHERE app_instance_id = ?
+          AND activity_id != ?
+          AND status = 'active'
+      `
+      ).run(now, now, input.appInstanceId, input.activityId);
+      db.prepare(
+        `
+        INSERT INTO live_activities (
+          activity_id,
+          activity_token,
+          apns_environment,
+          apns_topic,
+          link_id,
+          account_id,
+          app_instance_id,
+          conversation_id,
+          conversation_title,
+          target_kind,
+          target_id,
+          run_id,
+          operation_id,
+          status,
+          language,
+          privacy_level,
+          last_phase,
+          last_summary_hash,
+          last_pushed_at,
+          last_status_label,
+          last_progress_text,
+          last_detail_text,
+          last_visible_updated_at,
+          push_count,
+          started_at,
+          ended_at,
+          created_at,
+          updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active', ?, ?, ?, NULL, NULL, ?, ?, ?, ?, 0, ?, NULL, ?, ?)
+        ON CONFLICT(activity_id) DO UPDATE SET
+          activity_token = excluded.activity_token,
+          apns_environment = excluded.apns_environment,
+          apns_topic = excluded.apns_topic,
+          link_id = excluded.link_id,
+          account_id = excluded.account_id,
+          app_instance_id = excluded.app_instance_id,
+          conversation_id = excluded.conversation_id,
+          conversation_title = excluded.conversation_title,
+          target_kind = excluded.target_kind,
+          target_id = excluded.target_id,
+          run_id = excluded.run_id,
+          operation_id = excluded.operation_id,
+          status = 'active',
+          language = excluded.language,
+          privacy_level = excluded.privacy_level,
+          last_phase = excluded.last_phase,
+          last_summary_hash = NULL,
+          last_pushed_at = NULL,
+          last_status_label = excluded.last_status_label,
+          last_progress_text = excluded.last_progress_text,
+          last_detail_text = excluded.last_detail_text,
+          last_visible_updated_at = excluded.last_visible_updated_at,
+          push_count = 0,
+          started_at = excluded.started_at,
+          ended_at = NULL,
+          updated_at = excluded.updated_at
+      `
+      ).run(
+        input.activityId,
+        input.activityToken,
+        input.apnsEnvironment,
+        input.apnsTopic,
+        input.linkId,
+        input.accountId ?? null,
+        input.appInstanceId,
+        input.conversationId,
+        input.conversationTitle ?? null,
+        input.targetKind,
+        input.targetId,
+        input.runId ?? null,
+        input.operationId ?? null,
+        input.language ?? null,
+        input.privacyLevel ?? "summary",
+        restoreState?.phase ?? "connecting",
+        restoreState?.statusLabel ?? null,
+        restoreState?.progressText ?? null,
+        restoreState?.detailText ?? null,
+        restoreState?.updatedAt ?? null,
+        input.startedAt,
+        now,
+        now
+      );
+      db.exec("COMMIT");
+    } catch (error) {
+      rollback(db);
+      throw error;
+    }
+    const row = readLiveActivityRow(db, input.activityId);
+    if (!row) {
+      throw new Error("Live Activity was not persisted");
+    }
+    return row;
+  } finally {
+    db.close();
+  }
+}
+async function findActiveLiveActivityForTarget(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  try {
+    const accountFilter = input.accountId ? "AND account_id = ?" : "";
+    const appInstanceFilter = input.appInstanceId ? "AND app_instance_id = ?" : "";
+    const row = db.prepare(
+      `
+        SELECT *
+        FROM live_activities
+        WHERE conversation_id = ?
+          AND target_kind = ?
+          AND target_id = ?
+          AND status = 'active'
+          ${accountFilter}
+          ${appInstanceFilter}
+        ORDER BY datetime(started_at) DESC
+        LIMIT 1
+      `
+    ).get(
+      input.conversationId,
+      input.targetKind,
+      input.targetId,
+      ...input.accountId ? [input.accountId] : [],
+      ...input.appInstanceId ? [input.appInstanceId] : []
+    );
+    return liveActivityFromRow(row);
+  } finally {
+    db.close();
+  }
+}
+async function findLiveActivityRestoreState(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  try {
+    return readLiveActivityRestoreStateForTarget(db, input);
+  } finally {
+    db.close();
+  }
+}
+async function endLiveActivity(paths, activityId) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    const result = db.prepare(
+      `
+        UPDATE live_activities
+        SET status = 'ended',
+            ended_at = COALESCE(ended_at, ?),
+            updated_at = ?
+        WHERE activity_id = ?
+      `
+    ).run(now, now, activityId);
+    return result.changes > 0;
+  } finally {
+    db.close();
+  }
+}
+async function updateLiveActivityPushState(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  try {
+    db.prepare(
+      `
+      UPDATE live_activities
+      SET last_phase = ?,
+          last_summary_hash = ?,
+          last_pushed_at = ?,
+          last_status_label = ?,
+          last_progress_text = ?,
+          last_detail_text = ?,
+          last_visible_updated_at = ?,
+          push_count = push_count + 1,
+          status = CASE WHEN ? THEN 'ended' ELSE status END,
+          ended_at = CASE WHEN ? THEN COALESCE(ended_at, ?) ELSE ended_at END,
+          updated_at = ?
+      WHERE activity_id = ?
+    `
+    ).run(
+      input.phase,
+      input.summaryHash,
+      input.pushedAt,
+      normalizeNullableText(input.statusLabel),
+      normalizeNullableText(input.progressText),
+      normalizeNullableText(input.detailText),
+      input.visibleUpdatedAt,
+      input.terminal ? 1 : 0,
+      input.terminal ? 1 : 0,
+      input.pushedAt,
+      input.pushedAt,
+      input.activityId
+    );
+  } finally {
+    db.close();
+  }
+}
+async function invalidateLiveActivity(paths, activityId) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    db.prepare(
+      `
+      UPDATE live_activities
+      SET status = 'invalid',
+          ended_at = COALESCE(ended_at, ?),
+          updated_at = ?
+      WHERE activity_id = ?
+    `
+    ).run(now, now, activityId);
+  } finally {
+    db.close();
+  }
+}
 async function listConversationStatsPage(paths, input) {
   await migrateLinkDatabase(paths);
   const rawLimit = Number.isFinite(input.limit) ? Math.trunc(input.limit) : 25;
@@ -975,6 +1270,109 @@ function runUsageFactParams(record) {
     record.updatedAt
   ];
 }
+function readLiveActivityRow(db, activityId) {
+  const row = db.prepare("SELECT * FROM live_activities WHERE activity_id = ? LIMIT 1").get(activityId);
+  return liveActivityFromRow(row);
+}
+function readLiveActivityRestoreStateForTarget(db, input) {
+  const accountFilter = input.accountId ? "AND (account_id = ? OR account_id IS NULL)" : "";
+  const row = db.prepare(
+    `
+      SELECT *
+      FROM live_activities
+      WHERE app_instance_id = ?
+        AND conversation_id = ?
+        AND target_kind = ?
+        AND target_id = ?
+        AND status IN ('active', 'ended', 'expired')
+        AND last_phase IS NOT NULL
+        AND last_status_label IS NOT NULL
+        AND last_progress_text IS NOT NULL
+        ${accountFilter}
+      ORDER BY datetime(COALESCE(last_visible_updated_at, updated_at)) DESC
+      LIMIT 1
+    `
+  ).get(
+    input.appInstanceId,
+    input.conversationId,
+    input.targetKind,
+    input.targetId,
+    ...input.accountId ? [input.accountId] : []
+  );
+  return liveActivityRestoreStateFromRow(row);
+}
+function liveActivityFromRow(row) {
+  const activityId = readString(row, "activity_id");
+  const activityToken = readString(row, "activity_token");
+  const apnsEnvironment = readString(row, "apns_environment");
+  const apnsTopic = readString(row, "apns_topic");
+  const linkId = readString(row, "link_id");
+  const appInstanceId = readString(row, "app_instance_id");
+  const conversationId = readString(row, "conversation_id");
+  const targetKind = readString(row, "target_kind");
+  const targetId = readString(row, "target_id");
+  const status = readString(row, "status");
+  const startedAt = readString(row, "started_at");
+  const createdAt = readString(row, "created_at");
+  const updatedAt = readString(row, "updated_at");
+  if (!activityId || !activityToken || apnsEnvironment !== "sandbox" && apnsEnvironment !== "production" || !apnsTopic || !linkId || !appInstanceId || !conversationId || targetKind !== "run" && targetKind !== "context_compression" || !targetId || !isLiveActivityStatus(status) || !startedAt || !createdAt || !updatedAt) {
+    return null;
+  }
+  const language = readString(row, "language");
+  const privacyLevel = readString(row, "privacy_level");
+  return {
+    activityId,
+    activityToken,
+    apnsEnvironment,
+    apnsTopic,
+    linkId,
+    accountId: readNullableString(row, "account_id"),
+    appInstanceId,
+    conversationId,
+    conversationTitle: readNullableString(row, "conversation_title"),
+    targetKind,
+    targetId,
+    runId: readNullableString(row, "run_id"),
+    operationId: readNullableString(row, "operation_id"),
+    status,
+    language: language === "zh" || language === "en" ? language : null,
+    privacyLevel: privacyLevel === "minimal" || privacyLevel === "summary" || privacyLevel === "detailed" ? privacyLevel : "summary",
+    lastPhase: readNullableString(row, "last_phase"),
+    lastSummaryHash: readNullableString(row, "last_summary_hash"),
+    lastPushedAt: readNullableString(row, "last_pushed_at"),
+    lastStatusLabel: readNullableString(row, "last_status_label"),
+    lastProgressText: readNullableString(row, "last_progress_text"),
+    lastDetailText: readNullableString(row, "last_detail_text"),
+    lastVisibleUpdatedAt: readNullableString(row, "last_visible_updated_at"),
+    pushCount: readNumber(row, "push_count"),
+    startedAt,
+    endedAt: readNullableString(row, "ended_at"),
+    createdAt,
+    updatedAt
+  };
+}
+function liveActivityRestoreStateFromRow(row) {
+  const phase = readString(row, "last_phase");
+  const statusLabel = readString(row, "last_status_label");
+  const progressText = readString(row, "last_progress_text");
+  if (!phase || !statusLabel || !progressText) {
+    return null;
+  }
+  return {
+    phase,
+    statusLabel,
+    progressText,
+    detailText: readNullableString(row, "last_detail_text"),
+    updatedAt: readNullableString(row, "last_visible_updated_at") ?? readNullableString(row, "updated_at")
+  };
+}
+function isLiveActivityStatus(value) {
+  return value === "active" || value === "ended" || value === "expired" || value === "invalid";
+}
+function normalizeNullableText(value) {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : null;
+}
 function rollback(db) {
   try {
     db.exec("ROLLBACK");
@@ -1544,7 +1942,7 @@ var messages = {
     "autostart.enabled": "Boot autostart enabled via {method}: {path}",
     "autostart.disabled": "Boot autostart disabled.",
     "autostart.status.enabled": "Boot autostart: enabled via {method}: {path}",
-    "autostart.status.disabled": "Boot autostart: disabled. Method: {method}. File: {path}",
+    "autostart.status.disabled": "Boot autostart: disabled. Method: {method}. Target: {path}",
     "autostart.unsupported": "Boot autostart is not supported on this platform yet.",
     "autostart.alreadyEnabled": "Boot autostart is already enabled via {method}: {path}",
     "pair.description": "Create a Hermes Link pairing session",
@@ -1787,12 +2185,12 @@ var messages = {
     "autostart.on.description": "\u542F\u7528\u5F00\u673A\u81EA\u542F",
     "autostart.off.description": "\u5173\u95ED\u5F00\u673A\u81EA\u542F",
     "autostart.status.description": "\u67E5\u770B\u5F00\u673A\u81EA\u542F\u72B6\u6001",
-    "autostart.enabled": "\u5DF2\u542F\u7528\u5F00\u673A\u81EA\u542F\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
+    "autostart.enabled": "\u5DF2\u542F\u7528\u5F00\u673A\u81EA\u542F\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u4F4D\u7F6E\uFF1A{path}",
     "autostart.disabled": "\u5DF2\u5173\u95ED\u5F00\u673A\u81EA\u542F\u3002",
-    "autostart.status.enabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
-    "autostart.status.disabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u672A\u542F\u7528\u3002\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
+    "autostart.status.enabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u4F4D\u7F6E\uFF1A{path}",
+    "autostart.status.disabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u672A\u542F\u7528\u3002\u65B9\u5F0F\uFF1A{method}\uFF0C\u76EE\u6807\uFF1A{path}",
     "autostart.unsupported": "\u5F53\u524D\u5E73\u53F0\u6682\u4E0D\u652F\u6301\u5F00\u673A\u81EA\u542F\u3002",
-    "autostart.alreadyEnabled": "\u5F00\u673A\u81EA\u542F\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
+    "autostart.alreadyEnabled": "\u5F00\u673A\u81EA\u542F\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u4F4D\u7F6E\uFF1A{path}",
     "pair.description": "\u521B\u5EFA Hermes Link \u914D\u5BF9\u4F1A\u8BDD",
     "pair.preflight": "\u6B63\u5728\u914D\u5BF9\u524D\u68C0\u67E5\u672C\u673A Hermes \u914D\u7F6E...",
     "pair.preflight.hermesFiles": "\u6B63\u5728\u68C0\u67E5 Hermes \u6570\u636E\u76EE\u5F55\u3001\u914D\u7F6E\u6587\u4EF6\u548C\u73AF\u5883\u6587\u4EF6...",
@@ -2068,6 +2466,22 @@ function parseLanguage(value) {
 }
 
 // src/hermes/config.ts
+function filterHermesModelConfigsByProviderKeys(result, hiddenProviderKeys) {
+  if (hiddenProviderKeys.size === 0) {
+    return result;
+  }
+  const models = result.models.filter(
+    (model) => !hiddenProviderKeys.has(model.provider)
+  );
+  const compressionModel = result.compressionModel && !hiddenProviderKeys.has(result.compressionModel.provider) ? result.compressionModel : null;
+  return {
+    ...result,
+    defaultModel: models.some((model) => model.isDefault) ? result.defaultModel : null,
+    compressionModelId: compressionModel ? result.compressionModelId : null,
+    compressionModel,
+    models
+  };
+}
 var DEFAULT_HERMES_API_SERVER_HOST = "127.0.0.1";
 var DEFAULT_HERMES_API_SERVER_PORT = 8642;
 var PROFILE_API_SERVER_PORT_START = DEFAULT_HERMES_API_SERVER_PORT + 1;
@@ -2628,7 +3042,12 @@ async function importHermesModelConfig(input, targetProfileName = "default", tar
   const sourceApiKey = sourceKeyEnv ? source.env[sourceKeyEnv]?.trim() : source.inlineApiKey;
   let keyEnv = existingKeyEnv;
   if (!keyEnv && !existingInlineApiKey) {
-    keyEnv = sourceKeyEnv ?? (sourceApiKey ? buildApiKeyEnvName(source.model.providerName, source.model.id) : void 0);
+    keyEnv = (sourceKeyEnv && !reservedHermesEnvKeys(targetEnv, config).has(sourceKeyEnv) ? sourceKeyEnv : void 0) ?? (sourceApiKey ? await buildUniqueApiKeyEnvName(targetProfileName, config, targetEnv, {
+      providerName: source.model.providerName,
+      modelId: source.model.id,
+      providerKey: targetProviderKey,
+      apiKey: sourceApiKey
+    }) : void 0);
   }
   if (sourceApiKey && keyEnv && !existingInlineApiKey && (!existingKeyEnv || !targetEnv[keyEnv]?.trim())) {
     await writeHermesEnvValue(targetProfileName, keyEnv, sourceApiKey);
@@ -2771,7 +3190,12 @@ async function saveHermesModelConfig(input, profileName = "default", configPath
   );
   const entry = toRecord(providers[providerKey]);
   const existingKeyEnv = readString2(entry.key_env) ?? parseEnvReference(readString2(entry.api_key));
-  const keyEnv = normalized.keyEnv ?? existingKeyEnv ?? (normalized.apiKey ? buildApiKeyEnvName(normalized.providerName, normalized.id) : void 0);
+  const keyEnv = normalized.keyEnv ?? existingKeyEnv ?? (normalized.apiKey ? await buildUniqueApiKeyEnvName(profileName, config, void 0, {
+    providerName: normalized.providerName,
+    modelId: normalized.id,
+    providerKey,
+    apiKey: normalized.apiKey
+  }) : void 0);
   if (normalized.apiKey && keyEnv) {
     await writeHermesEnvValue(profileName, keyEnv, normalized.apiKey);
   }
@@ -2963,22 +3387,28 @@ async function saveHermesModelProviderConfig(input, profileName = "default", con
   const { document, config, existingRaw } = await readHermesConfigDocument(configPath);
   const providers = ensureProvidersRecordWithLegacyMigration(config);
   const requestedProviderKey = input.providerKey?.trim();
+  const apiKey = input.apiKey?.trim();
   if (requestedProviderKey && !Object.prototype.hasOwnProperty.call(providers, requestedProviderKey)) {
     throw new Error(`provider "${requestedProviderKey}" is not configured`);
   }
-  const providerKey = requestedProviderKey ?? findProviderConfigKeyByVisibleEndpoint(providers, {
+  const canReuseVisibleEndpoint = Boolean(requestedProviderKey) || !apiKey || Boolean(input.keyEnv?.trim());
+  const providerKey = requestedProviderKey ?? (canReuseVisibleEndpoint ? findProviderConfigKeyByVisibleEndpoint(providers, {
     providerName,
     baseUrl,
     apiMode,
     keyEnv: input.keyEnv
-  }) ?? uniqueProviderConfigKey(
+  }) : null) ?? uniqueProviderConfigKey(
     providerConfigKeyBase(void 0, providerName, baseUrl),
     providers
   );
   const entry = toRecord(providers[providerKey]);
   const existingKeyEnv = readString2(entry.key_env) ?? parseEnvReference(readString2(entry.api_key));
-  const apiKey = input.apiKey?.trim();
-  const keyEnv = input.keyEnv?.trim() || existingKeyEnv || (apiKey ? buildApiKeyEnvName(providerName, "PROVIDER") : void 0);
+  const keyEnv = input.keyEnv?.trim() || existingKeyEnv || (apiKey ? await buildUniqueApiKeyEnvName(profileName, config, void 0, {
+    providerName,
+    modelId: "PROVIDER",
+    providerKey,
+    apiKey
+  }) : void 0);
   if (apiKey && keyEnv) {
     await writeHermesEnvValue(profileName, keyEnv, apiKey);
   }
@@ -3020,6 +3450,9 @@ async function deleteHermesModelProviderConfig(providerKey, profileName = "defau
   if (!Object.prototype.hasOwnProperty.call(providers, normalizedProviderKey)) {
     throw new Error(`provider "${normalizedProviderKey}" is not configured`);
   }
+  const removedKeyEnv = providerCredentialEnvKey(
+    toRecord(providers[normalizedProviderKey])
+  );
   delete providers[normalizedProviderKey];
   const backupPath = await writeHermesConfigDocument({
     configPath,
@@ -3027,6 +3460,7 @@ async function deleteHermesModelProviderConfig(providerKey, profileName = "defau
     config,
     existingRaw
   });
+  await deleteHermesEnvValueIfUnreferenced(profileName, config, removedKeyEnv);
   return {
     ...await listHermesModelConfigs(profileName, configPath),
     backupPath,
@@ -3146,6 +3580,7 @@ async function deleteHermesModelConfig(input, profileName = "default", configPat
     );
   }
   const providers = ensureProvidersRecordWithLegacyMigration(config);
+  const removedProviderKeyEnvs = /* @__PURE__ */ new Set();
   for (const [key, rawEntry] of Object.entries(providers)) {
     const entry = providerConfigToLegacyEntry(key, toRecord(rawEntry));
     if (!entry || !providerEntryMatchesManagedModel(entry, deletingModel)) {
@@ -3155,6 +3590,10 @@ async function deleteHermesModelConfig(input, profileName = "default", configPat
     if (nextEntry) {
       providers[key] = nextEntry;
     } else {
+      const keyEnv = providerCredentialEnvKey(toRecord(rawEntry));
+      if (keyEnv) {
+        removedProviderKeyEnvs.add(keyEnv);
+      }
       delete providers[key];
     }
   }
@@ -3200,6 +3639,9 @@ async function deleteHermesModelConfig(input, profileName = "default", configPat
     config,
     existingRaw
   });
+  for (const keyEnv of removedProviderKeyEnvs) {
+    await deleteHermesEnvValueIfUnreferenced(profileName, config, keyEnv);
+  }
   const listed = await listHermesModelConfigs(profileName, configPath);
   return {
     ...listed,
@@ -6694,10 +7136,72 @@ function parseEnvReference(value) {
   const match = /^\$\{(?<key>[A-Za-z_][A-Za-z0-9_]*)\}$/u.exec(value.trim());
   return match?.groups?.key;
 }
+function providerCredentialEnvKey(entry) {
+  return readString2(entry.key_env) ?? parseEnvReference(readString2(entry.api_key));
+}
 function buildApiKeyEnvName(providerName, modelId) {
   const base = `${providerName || modelId}`.trim().toUpperCase().replace(/[^A-Z0-9]+/gu, "_").replace(/^_+|_+$/gu, "");
   return `HERMES_${base || "MODEL"}_API_KEY`;
 }
+async function buildUniqueApiKeyEnvName(profileName, config, env, input) {
+  const envValues = env ?? await readHermesEnvFile(profileName);
+  const configReferences = collectEnvReferenceKeys(config);
+  const reserved = /* @__PURE__ */ new Set([...Object.keys(envValues), ...configReferences]);
+  const candidates = [
+    buildApiKeyEnvName(input.providerName, input.modelId),
+    buildApiKeyEnvName(input.providerKey, input.modelId)
+  ];
+  for (const candidate of uniqueStrings(candidates)) {
+    if (input.apiKey && !configReferences.has(candidate) && envValues[candidate]?.trim() === input.apiKey.trim()) {
+      return candidate;
+    }
+    if (!reserved.has(candidate)) {
+      return candidate;
+    }
+  }
+  const base = buildApiKeyEnvName(input.providerKey, input.modelId);
+  let index = 2;
+  while (reserved.has(apiKeyEnvNameWithSuffix(base, index))) {
+    index += 1;
+  }
+  return apiKeyEnvNameWithSuffix(base, index);
+}
+function reservedHermesEnvKeys(env, config) {
+  return /* @__PURE__ */ new Set([...Object.keys(env), ...collectEnvReferenceKeys(config)]);
+}
+function collectEnvReferenceKeys(value, keys = /* @__PURE__ */ new Set()) {
+  if (typeof value === "string") {
+    const key = parseEnvReference(value);
+    if (key) {
+      keys.add(key);
+    }
+    return keys;
+  }
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      collectEnvReferenceKeys(item, keys);
+    }
+    return keys;
+  }
+  if (value && typeof value === "object") {
+    for (const item of Object.values(value)) {
+      collectEnvReferenceKeys(item, keys);
+    }
+  }
+  return keys;
+}
+function uniqueStrings(values) {
+  return [...new Set(values.filter((value) => value.trim()))];
+}
+function apiKeyEnvNameWithSuffix(base, index) {
+  return base.endsWith("_API_KEY") ? `${base.slice(0, -"_API_KEY".length)}_${index}_API_KEY` : `${base}_${index}`;
+}
+async function deleteHermesEnvValueIfUnreferenced(profileName, config, key) {
+  if (!key || collectEnvReferenceKeys(config).has(key)) {
+    return;
+  }
+  await deleteHermesEnvValue(profileName, key);
+}
 function formatEnvValue(value) {
   return `"${value.replace(/\\/gu, "\\\\").replace(/"/gu, '\\"').replace(/\n/gu, "\\n")}"`;
 }
@@ -7109,7 +7613,7 @@ function isConversationMissingError(error) {
 }
 
 // src/constants.ts
-var LINK_VERSION = "0.7.9";
+var LINK_VERSION = "0.8.1-beta.0";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -7420,6 +7924,271 @@ function readErrorMessage(payload) {
   return typeof message === "string" ? message : null;
 }
 
+// src/link/live-activity-events.ts
+import { createHash } from "crypto";
+var MIN_LIVE_ACTIVITY_PUSH_INTERVAL_MS = 1e3;
+var liveActivityReportQueues = /* @__PURE__ */ new Map();
+async function reportLiveActivityEventToServer(options) {
+  const queueKey = liveActivityReportQueueKey(options.event);
+  const previous = liveActivityReportQueues.get(queueKey) ?? Promise.resolve();
+  const next = previous.catch(() => void 0).then(() => reportLiveActivityEventToServerNow(options));
+  liveActivityReportQueues.set(queueKey, next);
+  try {
+    await next;
+  } finally {
+    if (liveActivityReportQueues.get(queueKey) === next) {
+      liveActivityReportQueues.delete(queueKey);
+    }
+  }
+}
+async function reportLiveActivityEventToServerNow(options) {
+  const [identity, config] = await Promise.all([
+    loadIdentity(options.paths),
+    loadConfig(options.paths)
+  ]);
+  if (!identity?.link_id) {
+    return;
+  }
+  const activity = await findActiveLiveActivityForTarget(options.paths, {
+    conversationId: options.event.conversationId,
+    targetKind: options.event.targetKind,
+    targetId: options.event.targetId,
+    accountId: options.event.accountId,
+    appInstanceId: options.event.appInstanceId
+  });
+  if (!activity) {
+    return;
+  }
+  const event = liveActivityEventWithInheritedDetail(activity, options.event);
+  const occurredAt = normalizeIso2(options.event.occurredAt) ?? (/* @__PURE__ */ new Date()).toISOString();
+  const summaryHash = hashLiveActivitySummary(event);
+  const skipReason = resolveSkipReason(activity, event, summaryHash);
+  if (skipReason) {
+    await options.logger.debug("live_activity_event_skipped", {
+      activity_id: activity.activityId,
+      conversation_id: event.conversationId,
+      target_kind: event.targetKind,
+      target_id: event.targetId,
+      phase: event.phase,
+      reason: skipReason
+    });
+    return;
+  }
+  const reportedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const payload = {
+    type: "hermes_link_live_activity_push",
+    link_id: identity.link_id,
+    install_id: identity.install_id,
+    source_event_id: event.sourceEventId,
+    event_kind: event.eventKind,
+    activity_id: activity.activityId,
+    activity_token: activity.activityToken,
+    apns_environment: activity.apnsEnvironment,
+    apns_topic: activity.apnsTopic,
+    conversation_id: event.conversationId,
+    target_kind: event.targetKind,
+    target_id: event.targetId,
+    phase: event.phase,
+    terminal: event.terminal === true,
+    occurred_at: occurredAt,
+    reported_at: reportedAt
+  };
+  addOptional2(payload, "account_id", activity.accountId ?? event.accountId, 128);
+  addOptional2(payload, "app_instance_id", activity.appInstanceId ?? event.appInstanceId, 128);
+  addOptional2(payload, "run_id", event.runId ?? activity.runId, 128);
+  addOptional2(payload, "operation_id", event.operationId ?? activity.operationId, 128);
+  addOptional2(payload, "conversation_title", event.conversationTitle ?? activity.conversationTitle, 80);
+  addOptional2(payload, "status_label", event.statusLabel, 24);
+  addOptional2(payload, "progress_text", event.progressText, 120);
+  addOptional2(payload, "detail_text", event.detailText, 240);
+  addOptional2(payload, "language", activity.language, 16);
+  addOptional2(payload, "privacy_level", activity.privacyLevel, 32);
+  if (typeof event.requiresUserAction === "boolean") {
+    payload.requires_user_action = event.requiresUserAction;
+  }
+  const signature = signIdentityPayload(identity, canonicalJson2(payload));
+  const fetcher = options.fetchImpl ?? fetch;
+  const response = await fetcher(
+    `${config.serverBaseUrl.replace(/\/+$/u, "")}/api/v1/links/${encodeURIComponent(identity.link_id)}/live-activity-pushes`,
+    {
+      method: "POST",
+      headers: {
+        accept: "application/json",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify({
+        ...payload,
+        public_key_pem: identity.public_key_pem,
+        signature
+      })
+    }
+  );
+  const body = await response.json().catch(() => null);
+  if (!response.ok) {
+    const message = readErrorMessage2(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    throw new LinkHttpError(response.status, "server_request_failed", message);
+  }
+  await updateLiveActivityPushState(options.paths, {
+    activityId: activity.activityId,
+    phase: event.phase,
+    summaryHash,
+    pushedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    visibleUpdatedAt: occurredAt,
+    terminal: event.terminal === true,
+    statusLabel: event.statusLabel,
+    progressText: event.progressText,
+    detailText: event.detailText
+  });
+  const apnsReason = readApnsReason(body);
+  if (apnsReason && shouldInvalidateLiveActivity(apnsReason)) {
+    await invalidateLiveActivity(options.paths, activity.activityId);
+  }
+}
+function liveActivityEventWithInheritedDetail(activity, event) {
+  if (isLiveActivityTitleUpdateEvent(event)) {
+    const phase = isLiveActivityPhase(activity.lastPhase) ? activity.lastPhase : event.phase;
+    return {
+      ...event,
+      phase,
+      statusLabel: activity.lastStatusLabel?.trim() || event.statusLabel,
+      progressText: activity.lastProgressText?.trim() || event.progressText,
+      detailText: activity.lastDetailText?.trim() || event.detailText
+    };
+  }
+  if (event.detailText?.trim() || !isToolPhase(event.phase)) {
+    return event;
+  }
+  const detailText = activity.lastDetailText?.trim();
+  return detailText ? { ...event, detailText } : event;
+}
+function resolveSkipReason(activity, event, summaryHash) {
+  if (shouldThrottleLiveActivityEvent(activity, event)) {
+    return "push_interval_throttled";
+  }
+  if (activity.pushCount >= 60 && event.terminal !== true) {
+    return "push_count_exceeded";
+  }
+  if (activity.lastSummaryHash === summaryHash && event.terminal !== true) {
+    return "duplicate_summary";
+  }
+  if (activity.lastPhase === "context_compression_timed_out" && event.phase === "context_compressed" && activity.targetKind === "context_compression") {
+    return "late_context_compression_completed_after_timeout";
+  }
+  return null;
+}
+function shouldThrottleLiveActivityEvent(activity, event) {
+  if (event.terminal === true || event.requiresUserAction === true || event.phase === "needs_input" || event.phase === "needs_approval") {
+    return false;
+  }
+  if (isLiveActivityTitleUpdateEvent(event)) {
+    return false;
+  }
+  const lastVisibleAt = liveActivityLastVisibleTimeMs(activity);
+  if (!Number.isFinite(lastVisibleAt)) {
+    return false;
+  }
+  if (isAssistantProgressEvent(event) && isToolPhase(activity.lastPhase)) {
+    return false;
+  }
+  return liveActivityEventTimeMs(event) - lastVisibleAt < MIN_LIVE_ACTIVITY_PUSH_INTERVAL_MS;
+}
+function liveActivityEventTimeMs(event) {
+  const parsed = Date.parse(event.occurredAt ?? "");
+  return Number.isFinite(parsed) ? parsed : Date.now();
+}
+function liveActivityLastVisibleTimeMs(activity) {
+  const visible = Date.parse(activity.lastVisibleUpdatedAt ?? "");
+  if (Number.isFinite(visible)) {
+    return visible;
+  }
+  return Date.parse(activity.lastPushedAt ?? "");
+}
+function liveActivityReportQueueKey(event) {
+  return [
+    event.accountId?.trim() ?? "",
+    event.appInstanceId?.trim() ?? "",
+    event.conversationId,
+    event.targetKind,
+    event.targetId
+  ].join(":");
+}
+function isAssistantProgressEvent(event) {
+  return event.eventKind === "reasoning_available";
+}
+function isLiveActivityTitleUpdateEvent(event) {
+  return event.eventKind === "conversation_updated" && Boolean(event.conversationTitle?.trim());
+}
+function isToolPhase(phase) {
+  return phase === "using_tool" || phase === "tool_completed";
+}
+function isLiveActivityPhase(value) {
+  return value === "connecting" || value === "accepted" || value === "running" || value === "using_tool" || value === "tool_completed" || value === "needs_input" || value === "needs_approval" || value === "goal_running" || value === "goal_paused" || value === "context_compressing" || value === "context_compressed" || value === "context_compression_failed" || value === "context_compression_timed_out" || value === "paused" || value === "recovering" || value === "completed" || value === "failed" || value === "cancelled";
+}
+function hashLiveActivitySummary(event) {
+  return createHash("sha256").update(
+    [
+      event.phase,
+      event.conversationTitle?.trim() ?? "",
+      event.statusLabel?.trim() ?? "",
+      event.progressText?.trim() ?? "",
+      event.detailText?.trim() ?? "",
+      event.terminal === true ? "terminal" : "update"
+    ].join("|")
+  ).digest("hex");
+}
+function addOptional2(payload, key, value, maxLength) {
+  const normalized = value?.trim();
+  if (normalized) {
+    payload[key] = normalized.slice(0, maxLength);
+  }
+}
+function normalizeIso2(value) {
+  const normalized = value?.trim();
+  if (!normalized) {
+    return null;
+  }
+  const date = new Date(normalized);
+  return Number.isNaN(date.getTime()) ? null : date.toISOString();
+}
+function canonicalJson2(value) {
+  return JSON.stringify(sortJsonValue2(value));
+}
+function sortJsonValue2(value) {
+  if (Array.isArray(value)) {
+    return value.map(sortJsonValue2);
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const sorted = {};
+    for (const key of Object.keys(record).sort()) {
+      sorted[key] = sortJsonValue2(record[key]);
+    }
+    return sorted;
+  }
+  return value;
+}
+function readErrorMessage2(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return null;
+  }
+  const error = payload.error;
+  if (typeof error !== "object" || error === null) {
+    return null;
+  }
+  const message = error.message;
+  return typeof message === "string" ? message : null;
+}
+function readApnsReason(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return null;
+  }
+  const reason = payload.apnsReason ?? payload.apns_reason;
+  return typeof reason === "string" ? reason : null;
+}
+function shouldInvalidateLiveActivity(reason) {
+  return ["BadDeviceToken", "Unregistered", "DeviceTokenNotForTopic", "TopicDisallowed"].includes(reason);
+}
+
 // src/hermes/gateway.ts
 import { execFile as execFile2, spawn } from "child_process";
 import { access, readFile as readFile5, stat as stat4 } from "fs/promises";
@@ -11359,7 +12128,7 @@ function toRecord3(value) {
 }
 
 // src/conversations/approvals.ts
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 var LINK_APPROVAL_RESUME_HINT_ZH = "Hermes \u5F53\u524D\u8FD8\u672A\u63D0\u4F9B\u53EF\u8C03\u7528\u7684\u5BA1\u6279\u7EED\u8DD1\u63A5\u53E3\uFF0C\u60A8\u53EF\u4EE5\u70B9\u51FB\u201C\u59CB\u7EC8\u5141\u8BB8\u201D\uFF0C\u7136\u540E\u91CD\u65B0\u53D1\u51FA\u547D\u4EE4\uFF0C\u6216\u5728\u201CProfile \u6743\u9650\u201D\u8BBE\u7F6E\u9875\u9762\u4FEE\u6539\u5BA1\u6279\u7B56\u7565\u3002";
 var LINK_APPROVAL_RESUME_HINT_EN = "Hermes does not yet provide a callable approval-resume API. Tap \u201CAlways allow\u201D, then send the command again, or change the approval policy on the \u201CProfile permissions\u201D settings page.";
 var LINK_APPROVAL_CONFIRM_HINT_ZH = "\u8BF7\u786E\u8BA4\u662F\u5426\u5141\u8BB8 Hermes \u7EE7\u7EED\u6267\u884C\u8FD9\u6761\u547D\u4EE4\u3002";
@@ -11459,7 +12228,7 @@ function coerceRecord(value) {
   return toRecord4(value);
 }
 function createApprovalId(input) {
-  const digest = createHash("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.command).update("\0").update(input.patternKey ?? "").digest("hex").slice(0, 24);
+  const digest = createHash2("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.command).update("\0").update(input.patternKey ?? "").digest("hex").slice(0, 24);
   return `approval_${digest}`;
 }
 function readString6(payload, key) {
@@ -11477,7 +12246,7 @@ function toRecord4(value) {
 }
 
 // src/conversations/input-requests.ts
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 function extractInputRequestFromEvent(input) {
   const kind = readInputRequestKind(input.event.payloadType);
   if (!kind) {
@@ -11625,7 +12394,7 @@ function readInputRequestKind(payloadType) {
   return null;
 }
 function createInputRequestId(input) {
-  const digest = createHash2("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.kind).update("\0").update(input.hermesRequestId).digest("hex").slice(0, 24);
+  const digest = createHash3("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.kind).update("\0").update(input.hermesRequestId).digest("hex").slice(0, 24);
   return `input_${digest}`;
 }
 function readString7(payload, key) {
@@ -12101,7 +12870,7 @@ import { mkdir as mkdir6, readFile as readFile7, readdir as readdir4, rm as rm3,
 import path11 from "path";
 
 // src/conversations/media.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import path10 from "path";
 
 // src/conversations/delivery-contract.ts
@@ -12313,7 +13082,7 @@ function readImportedMediaSourceKeys(message) {
   );
 }
 function mediaSourceKey(sourcePath) {
-  return createHash3("sha256").update(resolveMediaSourcePath(sourcePath)).digest("hex").slice(0, 32);
+  return createHash4("sha256").update(resolveMediaSourcePath(sourcePath)).digest("hex").slice(0, 32);
 }
 function sanitizeFilename(value, fallback) {
   const base = path10.basename((value ?? "").replace(/[\r\n\t]/gu, " ").trim());
@@ -12697,9 +13466,115 @@ function isNodeError6(error, code) {
 }
 
 // src/conversations/profile-runtime.ts
+import { stat as stat8 } from "fs/promises";
+
+// src/hermes/model-provider-disconnects.ts
 import { stat as stat7 } from "fs/promises";
-var PROFILE_NAME_PATTERN3 = /^[a-zA-Z0-9._-]{1,64}$/u;
+import os5 from "os";
+import path12 from "path";
+async function markAuthBackedModelProviderDisconnected(paths, profileName, providerKey) {
+  const profileKey = normalizeProfileName3(profileName);
+  const provider = providerKey.trim();
+  if (!provider) {
+    return;
+  }
+  const credentialMtimeMs = await readProviderCredentialMtimeMs(
+    profileKey,
+    provider
+  );
+  await updateJsonFile(
+    disconnectedProvidersPath(paths),
+    (current) => {
+      const store = normalizeStore(current);
+      const profiles = { ...store.profiles ?? {} };
+      const profile = profiles[profileKey] ?? {};
+      profiles[profileKey] = {
+        ...profile,
+        providers: {
+          ...profile.providers ?? {},
+          [provider]: {
+            disconnectedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            credentialMtimeMs
+          }
+        }
+      };
+      return { ...store, profiles };
+    }
+  );
+}
+async function readDisconnectedAuthBackedModelProviderKeys(paths, profileName) {
+  const store = normalizeStore(
+    await readJsonFile(
+      disconnectedProvidersPath(paths)
+    ).catch(() => null)
+  );
+  const profile = store.profiles?.[normalizeProfileName3(profileName)];
+  const providers = profile?.providers ?? {};
+  const active = /* @__PURE__ */ new Set();
+  for (const [provider, entry] of Object.entries(providers)) {
+    if (await isDisconnectMarkerActive(profileName, provider, entry)) {
+      active.add(provider);
+    }
+  }
+  return active;
+}
+async function isDisconnectMarkerActive(profileName, providerKey, entry) {
+  const currentMtimeMs = await readProviderCredentialMtimeMs(
+    profileName,
+    providerKey
+  );
+  if (entry.credentialMtimeMs === null || !Number.isFinite(entry.credentialMtimeMs)) {
+    return currentMtimeMs === null;
+  }
+  if (currentMtimeMs === null || !Number.isFinite(currentMtimeMs)) {
+    return true;
+  }
+  return currentMtimeMs <= entry.credentialMtimeMs + 1e3;
+}
+async function readProviderCredentialMtimeMs(profileName, providerKey) {
+  for (const filePath of credentialFilesForProvider(profileName, providerKey)) {
+    const stats = await stat7(filePath).catch((error) => {
+      if (isNodeError7(error, "ENOENT")) {
+        return null;
+      }
+      throw error;
+    });
+    if (stats) {
+      return stats.mtimeMs;
+    }
+  }
+  return null;
+}
+function credentialFilesForProvider(profileName, providerKey) {
+  const profileDir = resolveHermesProfileDir(normalizeProfileName3(profileName));
+  switch (providerKey) {
+    case "qwen-oauth":
+      return [path12.join(os5.homedir(), ".qwen", "oauth_creds.json")];
+    case "google-gemini-cli":
+      return [path12.join(profileDir, "auth", "google_oauth.json")];
+    default:
+      return [path12.join(profileDir, "auth.json")];
+  }
+}
+function disconnectedProvidersPath(paths) {
+  return path12.join(paths.homeDir, "model-provider-disconnects.json");
+}
+function normalizeStore(value) {
+  return {
+    version: 1,
+    profiles: value?.profiles && typeof value.profiles === "object" ? value.profiles : {}
+  };
+}
 function normalizeProfileName3(profileName) {
+  return profileName.trim() || "default";
+}
+function isNodeError7(error, code) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+
+// src/conversations/profile-runtime.ts
+var PROFILE_NAME_PATTERN3 = /^[a-zA-Z0-9._-]{1,64}$/u;
+function normalizeProfileName4(profileName) {
   const value = profileName?.trim() || "default";
   if (!PROFILE_NAME_PATTERN3.test(value)) {
     throw new Error("invalid profile name");
@@ -12710,7 +13585,7 @@ function fallbackProfileDisplayName(profileName) {
   return profileName === "default" ? "Default" : profileName;
 }
 async function resolveConversationProfileTarget(paths, profileName) {
-  const normalized = normalizeProfileName3(profileName);
+  const normalized = normalizeProfileName4(profileName);
   const identity = await ensureProfileIdentityForRuntime(paths, normalized);
   return {
     profileUid: identity.profileUid,
@@ -12720,7 +13595,7 @@ async function resolveConversationProfileTarget(paths, profileName) {
   };
 }
 async function readCurrentConversationRuntime(paths, manifest) {
-  const profileName = normalizeProfileName3(
+  const profileName = normalizeProfileName4(
     manifest?.profile_name_snapshot ?? manifest?.profile
   );
   const identity = await ensureProfileIdentityForRuntime(paths, profileName);
@@ -12732,7 +13607,7 @@ async function readCurrentConversationRuntime(paths, manifest) {
     contextLength: void 0,
     reasoningEffort: void 0
   }));
-  const configuredDefaultModel = modelConfig.model ? await findConfiguredModel(profileName, modelConfig.model) : void 0;
+  const configuredDefaultModel = modelConfig.model ? await findConfiguredModel(profileName, modelConfig.model, {}, paths) : void 0;
   const override = manifest?.model_override;
   const overrideModel = override?.id?.trim();
   const overrideProvider = override?.provider_name?.trim() || override?.provider?.trim();
@@ -12760,7 +13635,7 @@ async function readProfilePresentation(paths, profileName) {
   };
 }
 async function readConversationProfileSummary(paths, manifest) {
-  const profileName = normalizeProfileName3(
+  const profileName = normalizeProfileName4(
     manifest.profile_name_snapshot ?? manifest.profile
   );
   const presentation = await readProfilePresentation(paths, profileName).catch(
@@ -12831,8 +13706,8 @@ async function buildConversationRuntimeMetadata(paths, manifest, snapshot) {
 async function ensureProfileIdentityForRuntime(paths, profileName) {
   const profilePath = resolveHermesProfileDir(profileName);
   if (profileName !== "default") {
-    const exists = await stat7(profilePath).then((value) => value.isDirectory()).catch((error) => {
-      if (isNodeError7(error, "ENOENT")) {
+    const exists = await stat8(profilePath).then((value) => value.isDirectory()).catch((error) => {
+      if (isNodeError8(error, "ENOENT")) {
         return false;
       }
       throw error;
@@ -12850,12 +13725,18 @@ async function ensureProfileIdentityForRuntime(paths, profileName) {
     profilePath
   });
 }
-async function findConfiguredModel(profileName, modelId, selector = {}) {
+async function findConfiguredModel(profileName, modelId, selector = {}, paths) {
   const result = await listHermesModelConfigs(profileName).catch(() => null);
+  const disconnectedProviders = paths ? await readDisconnectedAuthBackedModelProviderKeys(paths, profileName).catch(
+    () => /* @__PURE__ */ new Set()
+  ) : /* @__PURE__ */ new Set();
   return result?.models.find((model) => {
     if (model.id !== modelId) {
       return false;
     }
+    if (disconnectedProviders.has(model.provider)) {
+      return false;
+    }
     if (selector.provider && model.provider !== selector.provider) {
       return false;
     }
@@ -12875,7 +13756,7 @@ function displayNameForProfile(profile) {
   const custom = profile.displayName?.trim();
   return custom || fallbackProfileDisplayName(profile.profileName);
 }
-function isNodeError7(error, code) {
+function isNodeError8(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -13295,9 +14176,15 @@ var ConversationCommandHandlers = class {
   }
   async modelStatusMessage(manifest, language = "zh-CN") {
     const runtime = await readCurrentConversationRuntime(this.deps.paths, manifest);
-    const configured = await listHermesModelConfigs(runtime.profileName).catch(
-      () => null
-    );
+    const configured = await listHermesModelConfigs(runtime.profileName).then(
+      async (result) => filterHermesModelConfigsByProviderKeys(
+        result,
+        await readDisconnectedAuthBackedModelProviderKeys(
+          this.deps.paths,
+          runtime.profileName
+        )
+      )
+    ).catch(() => null);
     const lines = [
       commandText(
         language,
@@ -13408,7 +14295,12 @@ var ConversationCommandHandlers = class {
         response: await this.modelStatusMessage(input.manifest, input.language)
       });
     }
-    const configuredModel = await findConfiguredModel(runtime.profileName, model);
+    const configuredModel = await findConfiguredModel(
+      runtime.profileName,
+      model,
+      {},
+      this.deps.paths
+    );
     if (!configuredModel) {
       return this.deps.appendCommandResult({
         manifest: input.manifest,
@@ -13606,7 +14498,9 @@ var ConversationCommandHandlers = class {
     const reasoningEffort = arg;
     const configuredModel = await findConfiguredModel(
       runtime.profileName,
-      runtime.model
+      runtime.model,
+      {},
+      this.deps.paths
     );
     if (!isReasoningEffortSupported(configuredModel, reasoningEffort)) {
       return this.deps.appendCommandResult({
@@ -13794,7 +14688,7 @@ function commandText(language, zh, en) {
 
 // src/conversations/delivery-staging.ts
 import { mkdir as mkdir7, rm as rm4 } from "fs/promises";
-import path12 from "path";
+import path13 from "path";
 async function prepareDeliveryStagingRunDir(paths, conversationId, runId) {
   const directory = deliveryStagingRunDir(paths, conversationId, runId);
   await mkdir7(directory, { recursive: true, mode: 448 });
@@ -13807,14 +14701,14 @@ async function removeConversationDeliveryStaging(paths, conversationId) {
   });
 }
 function deliveryStagingRunDir(paths, conversationId, runId) {
-  return path12.join(
+  return path13.join(
     deliveryStagingConversationDir(paths, conversationId),
     safePathSegment(runId, "run")
   );
 }
 function deliveryStagingConversationDir(paths, conversationId) {
   assertValidConversationId(conversationId);
-  return path12.join(paths.conversationsDir, conversationId, "delivery-staging");
+  return path13.join(paths.conversationsDir, conversationId, "delivery-staging");
 }
 function safePathSegment(value, fallback) {
   const safe = value.trim().replaceAll(/[^a-zA-Z0-9._-]/gu, "_");
@@ -13824,7 +14718,7 @@ function safePathSegment(value, fallback) {
 // src/conversations/conversation-archive-plans.ts
 import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir8 } from "fs/promises";
-import path13 from "path";
+import path14 from "path";
 var PLAN_ID_PATTERN = /^archive_[a-f0-9]{32}$/u;
 var ConversationArchivePlanStore = class {
   constructor(paths) {
@@ -13867,10 +14761,10 @@ var ConversationArchivePlanStore = class {
     await writeJsonFile(this.planPath(normalizedPlanId), plan);
   }
   plansDir() {
-    return path13.join(this.paths.indexesDir, "conversation-archive-plans");
+    return path14.join(this.paths.indexesDir, "conversation-archive-plans");
   }
   planPath(planId) {
-    return path13.join(this.plansDir(), `${planId}.json`);
+    return path14.join(this.plansDir(), `${planId}.json`);
   }
 };
 function normalizePlanId(planId) {
@@ -13888,7 +14782,7 @@ function normalizePlanId(planId) {
 // src/conversations/conversation-clear-plans.ts
 import { randomUUID as randomUUID8 } from "crypto";
 import { mkdir as mkdir9 } from "fs/promises";
-import path14 from "path";
+import path15 from "path";
 var PLAN_ID_PATTERN2 = /^clear_[a-f0-9]{32}$/u;
 var ConversationClearPlanStore = class {
   constructor(paths) {
@@ -13932,10 +14826,10 @@ var ConversationClearPlanStore = class {
     await writeJsonFile(this.planPath(normalizedPlanId), plan);
   }
   plansDir() {
-    return path14.join(this.paths.indexesDir, "conversation-clear-plans");
+    return path15.join(this.paths.indexesDir, "conversation-clear-plans");
   }
   planPath(planId) {
-    return path14.join(this.plansDir(), `${planId}.json`);
+    return path15.join(this.plansDir(), `${planId}.json`);
   }
 };
 function normalizePlanId2(planId) {
@@ -14789,20 +15683,20 @@ function readAttachmentWaveform(attachment) {
 }
 
 // src/hermes/session-title.ts
-import { stat as stat8 } from "fs/promises";
-import path15 from "path";
+import { stat as stat9 } from "fs/promises";
+import path16 from "path";
 async function readHermesSessionTitle(sessionId, paths, profileName) {
   const trimmedSessionId = sessionId.trim();
   if (!trimmedSessionId) {
     return void 0;
   }
   const resolvedProfileName = isValidProfileName(profileName) ? profileName : "default";
-  const dbPath = path15.join(
+  const dbPath = path16.join(
     resolveHermesProfileDir(resolvedProfileName),
     "state.db"
   );
-  const exists = await stat8(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError8(error, "ENOENT")) {
+  const exists = await stat9(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError9(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -14818,12 +15712,12 @@ async function readHermesCompressionTip(sessionId, paths, profileName) {
     return void 0;
   }
   const resolvedProfileName = isValidProfileName(profileName) ? profileName : "default";
-  const dbPath = path15.join(
+  const dbPath = path16.join(
     resolveHermesProfileDir(resolvedProfileName),
     "state.db"
   );
-  const exists = await stat8(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError8(error, "ENOENT")) {
+  const exists = await stat9(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError9(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -14886,7 +15780,7 @@ function readCompressionTipFromStateDb(dbPath, sessionId) {
     db?.close();
   }
 }
-function isNodeError8(error, code) {
+function isNodeError9(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName(value) {
@@ -15250,8 +16144,8 @@ function stripCompressionTitleSuffix(value) {
 }
 
 // src/conversations/history-builder.ts
-import { readFile as readFile8, stat as stat9 } from "fs/promises";
-import path16 from "path";
+import { readFile as readFile8, stat as stat10 } from "fs/promises";
+import path17 from "path";
 var HISTORY_ROLES = /* @__PURE__ */ new Set(["user", "assistant"]);
 var HERMES_HISTORY_COLUMNS = [
   "role",
@@ -15323,13 +16217,13 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   }
   const normalizedProfileName = isValidProfileName2(profileName) ? profileName : "default";
   const profileDir = resolveHermesProfileDir(normalizedProfileName);
-  const dbPath = path16.join(profileDir, "state.db");
+  const dbPath = path17.join(profileDir, "state.db");
   const sessionsDirConfig = await readHermesSessionsDir(normalizedProfileName).then((value) => ({
     sessionsDir: value.sessionsDir,
     configured: value.configured,
     configError: false
   })).catch(() => ({
-    sessionsDir: path16.join(profileDir, "sessions"),
+    sessionsDir: path17.join(profileDir, "sessions"),
     configured: false,
     configError: true
   }));
@@ -15374,8 +16268,8 @@ async function readHermesTranscriptHistory(sessionId, profileName) {
   };
 }
 async function readHermesStateDbHistory(dbPath, sessionId) {
-  const exists = await stat9(dbPath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError9(error, "ENOENT")) {
+  const exists = await stat10(dbPath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError10(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -15492,7 +16386,7 @@ async function readHermesTranscriptFilesHistory(sessionsDir, sessionId) {
 async function readFirstExistingFile(paths) {
   for (const filePath of paths) {
     const raw = await readFile8(filePath, "utf8").catch((error) => {
-      if (isNodeError9(error, "ENOENT")) {
+      if (isNodeError10(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -15505,8 +16399,8 @@ async function readFirstExistingFile(paths) {
 }
 function candidateTranscriptPaths(sessionsDir, sessionId, extension) {
   return [
-    path16.join(sessionsDir, `session_${sessionId}.${extension}`),
-    path16.join(sessionsDir, `${sessionId}.${extension}`)
+    path17.join(sessionsDir, `session_${sessionId}.${extension}`),
+    path17.join(sessionsDir, `${sessionId}.${extension}`)
   ];
 }
 function readHistoryRows(dbPath, sessionId) {
@@ -15706,7 +16600,7 @@ function readTableColumns(db, table) {
     db.prepare(`PRAGMA table_info(${table})`).all().map((row) => row.name).filter((name) => typeof name === "string")
   );
 }
-function isNodeError9(error, code) {
+function isNodeError10(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function isValidProfileName2(value) {
@@ -17361,13 +18255,13 @@ var ConversationOrchestrationCoordinator = class {
     };
   }
   async ensureManifestProfile(manifest, requestedProfileName) {
-    const existingProfileName = normalizeProfileName3(
+    const existingProfileName = normalizeProfileName4(
       manifest.profile_name_snapshot ?? manifest.profile
     );
     const hasExistingProfile = Boolean(
       manifest.profile_name_snapshot ?? manifest.profile
     );
-    const nextProfileName = requestedProfileName ? normalizeProfileName3(requestedProfileName) : existingProfileName;
+    const nextProfileName = requestedProfileName ? normalizeProfileName4(requestedProfileName) : existingProfileName;
     if ((!requestedProfileName || nextProfileName === existingProfileName) && hasExistingProfile && manifest.profile_uid) {
       return manifest;
     }
@@ -17454,7 +18348,7 @@ function isConversationNotFoundError(error) {
 }
 
 // src/conversations/agent-events.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 var APP_TOOL_EVENT_FIELDS_TO_DROP = /* @__PURE__ */ new Set([
   "output",
   "content",
@@ -17495,7 +18389,7 @@ function projectAgentEvent(input) {
     summary,
     args
   });
-  const detail = status === "failed" ? readErrorMessage2(input.payload) ?? actionSummary ?? void 0 : actionSummary ?? void 0;
+  const detail = status === "failed" ? readErrorMessage3(input.payload) ?? actionSummary ?? void 0 : actionSummary ?? void 0;
   const subtitle = actionSummary ?? (status === "running" ? agentEventText(input.language, `\u6B63\u5728\u8C03\u7528 ${name}`, `Running ${name}`) : status === "completed" ? agentEventText(input.language, `${name} \u5DF2\u5B8C\u6210`, `${name} done`) : agentEventText(input.language, `${name} \u6267\u884C\u5931\u8D25`, `${name} failed`));
   return {
     id,
@@ -17837,9 +18731,9 @@ function stableStringify(value) {
   }
 }
 function hashAgentEventKey(value) {
-  return createHash4("sha256").update(value).digest("hex").slice(0, 16);
+  return createHash5("sha256").update(value).digest("hex").slice(0, 16);
 }
-function readErrorMessage2(payload) {
+function readErrorMessage3(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
@@ -18697,7 +19591,7 @@ var ContextCompressionCoordinator = class {
         continue;
       }
       if (snapshot.runs.some(
-        (run) => run.status === "running" && run.kind !== "command" && normalizeProfileName4(run.profile_name_snapshot ?? run.profile) === profileName
+        (run) => run.status === "running" && run.kind !== "command" && normalizeProfileName5(run.profile_name_snapshot ?? run.profile) === profileName
       )) {
         return true;
       }
@@ -18707,7 +19601,7 @@ var ContextCompressionCoordinator = class {
   async profileNameForRun(conversationId, runId) {
     const snapshot = await this.deps.store.readSnapshot(conversationId).catch(() => null);
     const run = snapshot?.runs.find((item) => item.id === runId);
-    return normalizeProfileName4(run?.profile_name_snapshot ?? run?.profile);
+    return normalizeProfileName5(run?.profile_name_snapshot ?? run?.profile);
   }
 };
 function createContextCompressionMarker(input) {
@@ -18908,7 +19802,7 @@ function normalizeFocus(value) {
 function normalizeLanguage2(value) {
   return value === "en" ? "en" : "zh-CN";
 }
-function normalizeProfileName4(value) {
+function normalizeProfileName5(value) {
   return value?.trim() || "default";
 }
 function localizedText(language, zh, en) {
@@ -18936,7 +19830,7 @@ import {
   rm as rm5,
   writeFile as writeFile2
 } from "fs/promises";
-import path17 from "path";
+import path18 from "path";
 var ConversationStore = class {
   constructor(paths) {
     this.paths = paths;
@@ -18950,7 +19844,7 @@ var ConversationStore = class {
     const entries = await readdir5(this.paths.conversationsDir, {
       withFileTypes: true
     }).catch((error) => {
-      if (isNodeError10(error, "ENOENT")) {
+      if (isNodeError11(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -19019,7 +19913,7 @@ var ConversationStore = class {
     await this.readManifest(conversationId);
     const raw = await readFile9(this.eventsPath(conversationId), "utf8").catch(
       (error) => {
-        if (isNodeError10(error, "ENOENT")) {
+        if (isNodeError11(error, "ENOENT")) {
           return "";
         }
         throw error;
@@ -19067,40 +19961,40 @@ var ConversationStore = class {
     return manifest != null && manifest.status !== "deleted_soft";
   }
   removeConversationAttachments(conversationId) {
-    return rm5(path17.join(this.conversationDir(conversationId), "attachments"), {
+    return rm5(path18.join(this.conversationDir(conversationId), "attachments"), {
       recursive: true,
       force: true
     });
   }
   conversationDir(conversationId) {
     assertValidConversationId(conversationId);
-    return path17.join(this.paths.conversationsDir, conversationId);
+    return path18.join(this.paths.conversationsDir, conversationId);
   }
   manifestPath(conversationId) {
-    return path17.join(this.conversationDir(conversationId), "manifest.json");
+    return path18.join(this.conversationDir(conversationId), "manifest.json");
   }
   snapshotPath(conversationId) {
-    return path17.join(this.conversationDir(conversationId), "snapshot.json");
+    return path18.join(this.conversationDir(conversationId), "snapshot.json");
   }
   eventsPath(conversationId) {
-    return path17.join(this.conversationDir(conversationId), "events.ndjson");
+    return path18.join(this.conversationDir(conversationId), "events.ndjson");
   }
 };
 function createEmptySnapshot2() {
   return { schema_version: 1, messages: [], runs: [] };
 }
-function isNodeError10(error, code) {
+function isNodeError11(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/hermes-session-sync.ts
 import { randomUUID as randomUUID11 } from "crypto";
-import { readdir as readdir7, readFile as readFile11, stat as stat11 } from "fs/promises";
-import path19 from "path";
+import { readdir as readdir7, readFile as readFile11, stat as stat12 } from "fs/promises";
+import path20 from "path";
 
 // src/conversations/delivery-import.ts
-import { lstat as lstat2, readFile as readFile10, readdir as readdir6, stat as stat10 } from "fs/promises";
-import path18 from "path";
+import { lstat as lstat2, readFile as readFile10, readdir as readdir6, stat as stat11 } from "fs/promises";
+import path19 from "path";
 var MAX_IMPORTED_BLOB_BYTES = 100 * 1024 * 1024;
 var MAX_MEDIA_IMPORT_FAILURES = 20;
 var MAX_DELIVERY_FILES = 50;
@@ -19171,16 +20065,16 @@ var SUPPORTED_DELIVERY_EXTENSIONS = /* @__PURE__ */ new Set([
   ".m4a"
 ]);
 function resolveDeliveryStagingTarget(paths, stagingDir) {
-  const resolvedDir = path18.resolve(stagingDir);
-  const relative = path18.relative(path18.resolve(paths.conversationsDir), resolvedDir);
-  if (!relative || relative.startsWith("..") || path18.isAbsolute(relative)) {
+  const resolvedDir = path19.resolve(stagingDir);
+  const relative = path19.relative(path19.resolve(paths.conversationsDir), resolvedDir);
+  if (!relative || relative.startsWith("..") || path19.isAbsolute(relative)) {
     throw new LinkHttpError(
       400,
       "delivery_staging_invalid",
       "delivery staging directory must be inside Hermes Link conversations"
     );
   }
-  const segments = relative.split(path18.sep);
+  const segments = relative.split(path19.sep);
   if (segments.length !== 3 || segments[1] !== DELIVERY_STAGING_SEGMENT || !segments[0] || !segments[2]) {
     throw new LinkHttpError(
       400,
@@ -19196,7 +20090,7 @@ function resolveDeliveryStagingTarget(paths, stagingDir) {
 }
 async function collectStagedDeliveryReferences(stagingDir) {
   const directoryStat = await lstat2(stagingDir).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+    if (isNodeError12(error, "ENOENT")) {
       throw new LinkHttpError(
         404,
         "delivery_staging_not_found",
@@ -19216,7 +20110,7 @@ async function collectStagedDeliveryReferences(stagingDir) {
   return entries.filter((entry) => entry.isFile() && !entry.name.startsWith(".")).filter((entry) => isSupportedDeliveryFilename(entry.name)).sort(
     (left, right) => left.name.localeCompare(right.name, "en", { numeric: true })
   ).slice(0, MAX_DELIVERY_FILES).map((entry) => {
-    const sourcePath = path18.join(stagingDir, entry.name);
+    const sourcePath = path19.join(stagingDir, entry.name);
     const mime = inferMimeType(sourcePath);
     return {
       path: sourcePath,
@@ -19376,8 +20270,8 @@ function emptyImportResult(input) {
 }
 async function writeBlobFromFile(deps, conversationId, source) {
   const sourcePath = resolveMediaSourcePath(source.path);
-  const fileStat = await stat10(sourcePath).catch((error) => {
-    if (isNodeError11(error, "ENOENT")) {
+  const fileStat = await stat11(sourcePath).catch((error) => {
+    if (isNodeError12(error, "ENOENT")) {
       throw new LinkHttpError(
         404,
         "media_source_not_found",
@@ -19402,7 +20296,7 @@ async function writeBlobFromFile(deps, conversationId, source) {
   }
   return deps.writeBlob(conversationId, {
     bytes: await readFile10(sourcePath),
-    filename: path18.basename(sourcePath),
+    filename: path19.basename(sourcePath),
     mime: source.mime ?? inferMimeType(sourcePath)
   });
 }
@@ -19411,11 +20305,11 @@ function describeMediaImportFailure(reference, sourceKey, error) {
     key: sourceKey,
     filename: sanitizeFilename(reference.path, "attachment"),
     reason: error instanceof Error ? error.message : String(error),
-    ...isNodeError11(error) && error.code ? { code: error.code } : {}
+    ...isNodeError12(error) && error.code ? { code: error.code } : {}
   };
 }
 function isSupportedDeliveryFilename(filename) {
-  return SUPPORTED_DELIVERY_EXTENSIONS.has(path18.extname(filename).toLowerCase());
+  return SUPPORTED_DELIVERY_EXTENSIONS.has(path19.extname(filename).toLowerCase());
 }
 function readString10(payload, key) {
   const value = payload[key];
@@ -19424,7 +20318,7 @@ function readString10(payload, key) {
 function toRecord10(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
-function isNodeError11(error, code) {
+function isNodeError12(error, code) {
   return typeof error === "object" && error !== null && "code" in error && (code === void 0 || error.code === code);
 }
 
@@ -19473,7 +20367,7 @@ async function syncHermesSessionsIntoConversations(paths, logger, options = {})
   const candidates = [];
   for (const profileName of profileNames) {
     const profileDir = resolveHermesProfileDir(profileName);
-    const dbPath = path19.join(profileDir, "state.db");
+    const dbPath = path20.join(profileDir, "state.db");
     const sessions = await listProfileSessions(dbPath).catch((error) => {
       result.errors.push({
         profile: profileName,
@@ -19589,7 +20483,7 @@ async function syncHermesCronSessionIntoConversations(paths, logger, input) {
   const knownHermesSessions = await readKnownHermesSessions(store);
   const profileName = input.profileName.trim() || DEFAULT_PROFILE_NAME;
   const profileDir = resolveHermesProfileDir(profileName);
-  const dbPath = path19.join(profileDir, "state.db");
+  const dbPath = path20.join(profileDir, "state.db");
   const sessions = await listProfileSessionsByIdPrefix(
     dbPath,
     `cron_${jobId}_`
@@ -20604,7 +21498,7 @@ async function discoverHermesProfileNames() {
   const profilesDir = resolveHermesProfilesDir();
   const entries = await readdir7(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError12(error, "ENOENT")) {
+      if (isNodeError13(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -20900,10 +21794,10 @@ async function readJsonlMessages(profileName, sessionId) {
     return [];
   }
   const profileDir = resolveHermesProfileDir(profileName);
-  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path19.join(profileDir, "sessions"));
-  const transcriptPath = path19.join(sessionsDir, `${sessionId}.jsonl`);
+  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path20.join(profileDir, "sessions"));
+  const transcriptPath = path20.join(sessionsDir, `${sessionId}.jsonl`);
   const raw = await readFile11(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+    if (isNodeError13(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -21231,8 +22125,8 @@ function quoteIdentifier(value) {
   return `"${value.replaceAll('"', '""')}"`;
 }
 async function isFile(filePath) {
-  return stat11(filePath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError12(error, "ENOENT")) {
+  return stat12(filePath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError13(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -21265,13 +22159,13 @@ function readBoolean(value) {
   }
   return false;
 }
-function isNodeError12(error, code) {
+function isNodeError13(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/delivery-context.ts
-import { copyFile, mkdir as mkdir11, stat as stat12 } from "fs/promises";
-import path20 from "path";
+import { copyFile, mkdir as mkdir11, stat as stat13 } from "fs/promises";
+import path21 from "path";
 var ACTIVE_CONTEXTS = /* @__PURE__ */ new Map();
 var CONTEXT_TTL_MS = 2 * 60 * 60 * 1e3;
 var MAX_DELIVERY_TOOL_FILES = 50;
@@ -21343,10 +22237,10 @@ function findDeliveryContext(input) {
   );
 }
 async function copyFilesIntoDeliveryContext(paths, context, files) {
-  const stagingDir = path20.resolve(context.stagingDir);
-  const conversationsRoot = path20.resolve(paths.conversationsDir);
-  const relative = path20.relative(conversationsRoot, stagingDir);
-  if (!relative || relative.startsWith("..") || path20.isAbsolute(relative)) {
+  const stagingDir = path21.resolve(context.stagingDir);
+  const conversationsRoot = path21.resolve(paths.conversationsDir);
+  const relative = path21.relative(conversationsRoot, stagingDir);
+  if (!relative || relative.startsWith("..") || path21.isAbsolute(relative)) {
     throw new LinkHttpError(
       400,
       "delivery_staging_invalid",
@@ -21357,13 +22251,13 @@ async function copyFilesIntoDeliveryContext(paths, context, files) {
   const result = { staged: [], skipped: [] };
   const usedNames = /* @__PURE__ */ new Set();
   for (const [index, file] of files.slice(0, MAX_DELIVERY_TOOL_FILES).entries()) {
-    const sourcePath = path20.resolve(file.path);
+    const sourcePath = path21.resolve(file.path);
     let baseName = sanitizeFilename(
-      file.caption || path20.basename(sourcePath),
+      file.caption || path21.basename(sourcePath),
       `attachment-${index + 1}`
     );
-    const sourceExtension = path20.extname(sourcePath);
-    if (!path20.extname(baseName) && sourceExtension) {
+    const sourceExtension = path21.extname(sourcePath);
+    if (!path21.extname(baseName) && sourceExtension) {
       baseName = `${baseName}${sourceExtension}`;
     }
     const filename = uniqueStagingFilename(
@@ -21377,8 +22271,8 @@ async function copyFilesIntoDeliveryContext(paths, context, files) {
       });
       continue;
     }
-    const sourceStat = await stat12(sourcePath).catch((error) => {
-      if (isNodeError13(error, "ENOENT")) {
+    const sourceStat = await stat13(sourcePath).catch((error) => {
+      if (isNodeError14(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -21390,7 +22284,7 @@ async function copyFilesIntoDeliveryContext(paths, context, files) {
       });
       continue;
     }
-    const targetPath = path20.join(stagingDir, filename);
+    const targetPath = path21.join(stagingDir, filename);
     await copyFile(sourcePath, targetPath);
     result.staged.push({
       source_path: sourcePath,
@@ -21433,7 +22327,7 @@ function normalizeDeliveryFileInputs(value) {
   });
 }
 function uniqueStagingFilename(filename, usedNames) {
-  const extension = path20.extname(filename);
+  const extension = path21.extname(filename);
   const stem = filename.slice(0, filename.length - extension.length);
   let candidate = filename;
   let suffix = 2;
@@ -21469,12 +22363,12 @@ function readString12(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function isNodeError13(error, code) {
+function isNodeError14(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/run-lifecycle.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import { readdir as readdir9 } from "fs/promises";
 
 // src/hermes/api-server.ts
@@ -22175,9 +23069,9 @@ function readBoolean2(payload, key) {
 
 // src/hermes/stt.ts
 import { execFile as execFile3 } from "child_process";
-import { access as access2, readFile as readFile12, stat as stat13 } from "fs/promises";
-import os5 from "os";
-import path21 from "path";
+import { access as access2, readFile as readFile12, stat as stat14 } from "fs/promises";
+import os6 from "os";
+import path22 from "path";
 import { promisify as promisify3 } from "util";
 var execFileAsync3 = promisify3(execFile3);
 var STT_RESULT_PREFIX = "__HERMES_LINK_STT__";
@@ -22272,7 +23166,7 @@ async function buildHermesSttEnv(profileName, hermesSourceRoot) {
   };
   const sourceRoot = hermesSourceRoot ?? await findDevHermesAgentSource();
   if (sourceRoot) {
-    env.PYTHONPATH = [sourceRoot, env.PYTHONPATH].filter(Boolean).join(path21.delimiter);
+    env.PYTHONPATH = [sourceRoot, env.PYTHONPATH].filter(Boolean).join(path22.delimiter);
   }
   return env;
 }
@@ -22367,14 +23261,14 @@ async function resolveHermesPythonRuntime() {
   };
 }
 async function resolveExecutablePath(command) {
-  if (path21.isAbsolute(command)) {
+  if (path22.isAbsolute(command)) {
     return await isExecutableFile2(command) ? command : null;
   }
   const pathEnv = process.env.PATH ?? "";
   const extensions = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";") : [""];
-  for (const dir of pathEnv.split(path21.delimiter)) {
+  for (const dir of pathEnv.split(path22.delimiter)) {
     for (const extension of extensions) {
-      const candidate = path21.join(dir, `${command}${extension}`);
+      const candidate = path22.join(dir, `${command}${extension}`);
       if (await isExecutableFile2(candidate)) {
         return candidate;
       }
@@ -22384,7 +23278,7 @@ async function resolveExecutablePath(command) {
 }
 async function isExecutableFile2(filePath) {
   try {
-    const info = await stat13(filePath);
+    const info = await stat14(filePath);
     if (!info.isFile()) {
       return false;
     }
@@ -22396,11 +23290,11 @@ async function isExecutableFile2(filePath) {
 }
 async function findHermesVenvPython(sourceRoot) {
   const candidates = process.platform === "win32" ? [
-    path21.join(sourceRoot, "venv", "Scripts", "python.exe"),
-    path21.join(sourceRoot, ".venv", "Scripts", "python.exe")
+    path22.join(sourceRoot, "venv", "Scripts", "python.exe"),
+    path22.join(sourceRoot, ".venv", "Scripts", "python.exe")
   ] : [
-    path21.join(sourceRoot, "venv", "bin", "python"),
-    path21.join(sourceRoot, ".venv", "bin", "python")
+    path22.join(sourceRoot, "venv", "bin", "python"),
+    path22.join(sourceRoot, ".venv", "bin", "python")
   ];
   for (const candidate of candidates) {
     if (await isExecutableFile2(candidate)) {
@@ -22429,8 +23323,8 @@ function shebangToPythonCommand(shebang) {
 }
 async function findDevHermesAgentSource() {
   const candidates = [
-    path21.resolve(process.cwd(), "reference/hermes-agent"),
-    path21.resolve(process.cwd(), "../../reference/hermes-agent")
+    path22.resolve(process.cwd(), "reference/hermes-agent"),
+    path22.resolve(process.cwd(), "../../reference/hermes-agent")
   ];
   for (const candidate of candidates) {
     if (await isHermesAgentSourceRoot(candidate)) {
@@ -22446,7 +23340,7 @@ async function readHermesLauncherTarget(filePath) {
       line
     );
     const rawTarget = quoted?.groups?.target ?? /^\s*exec\s+(?<target>\S+)\s+(?:"\$@"|'\$@')/.exec(line)?.groups?.target;
-    if (!rawTarget || !path21.isAbsolute(rawTarget)) {
+    if (!rawTarget || !path22.isAbsolute(rawTarget)) {
       continue;
     }
     if (await isExecutableFile2(rawTarget)) {
@@ -22476,12 +23370,12 @@ async function resolveHermesEntrypointRuntime(entrypointPath) {
   return null;
 }
 async function findHermesSourceRoot(executablePath) {
-  let cursor = path21.dirname(path21.resolve(executablePath));
+  let cursor = path22.dirname(path22.resolve(executablePath));
   for (let index = 0; index < 6; index += 1) {
     if (await isHermesAgentSourceRoot(cursor)) {
       return cursor;
     }
-    const parent = path21.dirname(cursor);
+    const parent = path22.dirname(cursor);
     if (parent === cursor) {
       break;
     }
@@ -22492,14 +23386,14 @@ async function findHermesSourceRoot(executablePath) {
 function hermesSourceRootCandidates() {
   const candidates = [
     process.env.HERMES_PYTHON_SRC_ROOT?.trim(),
-    path21.join(os5.homedir(), ".hermes", "hermes-agent"),
+    path22.join(os6.homedir(), ".hermes", "hermes-agent"),
     "/usr/local/lib/hermes-agent",
     "/opt/hermes"
   ].filter((candidate) => Boolean(candidate));
   if (process.platform === "win32") {
     const localAppData = process.env.LOCALAPPDATA?.trim();
     if (localAppData) {
-      candidates.unshift(path21.join(localAppData, "hermes", "hermes-agent"));
+      candidates.unshift(path22.join(localAppData, "hermes", "hermes-agent"));
     }
   }
   return candidates;
@@ -22509,10 +23403,10 @@ async function findExplicitHermesSourceRoot() {
   return explicit && await isHermesAgentSourceRoot(explicit) ? explicit : null;
 }
 async function isHermesAgentSourceRoot(candidate) {
-  return await isDirectory(candidate) && await isDirectory(path21.join(candidate, "tools")) && await isDirectory(path21.join(candidate, "hermes_cli"));
+  return await isDirectory(candidate) && await isDirectory(path22.join(candidate, "tools")) && await isDirectory(path22.join(candidate, "hermes_cli"));
 }
 async function isDirectory(candidate) {
-  return stat13(candidate).then((info) => info.isDirectory()).catch(() => false);
+  return stat14(candidate).then((info) => info.isDirectory()).catch(() => false);
 }
 function compactProcessOutput(value) {
   const compact = value.trim().replace(/\s+/gu, " ").slice(0, 500);
@@ -22520,14 +23414,14 @@ function compactProcessOutput(value) {
 }
 
 // src/hermes/usage-probe.ts
-import { open as open3, readFile as readFile14, rm as rm6, stat as stat15 } from "fs/promises";
-import path23 from "path";
+import { open as open3, readFile as readFile14, rm as rm6, stat as stat16 } from "fs/promises";
+import path24 from "path";
 import YAML3 from "yaml";
 
 // src/hermes/profiles.ts
 import { execFile as execFile4 } from "child_process";
-import { readdir as readdir8, readFile as readFile13, rename as rename3, stat as stat14 } from "fs/promises";
-import path22 from "path";
+import { readdir as readdir8, readFile as readFile13, rename as rename3, stat as stat15 } from "fs/promises";
+import path23 from "path";
 import { setTimeout as delay4 } from "timers/promises";
 import { promisify as promisify4 } from "util";
 import YAML2 from "yaml";
@@ -22546,7 +23440,7 @@ async function listHermesProfiles(paths = resolveRuntimePaths()) {
   const profilesDir = resolveHermesProfilesDir();
   const entries = await readdir8(profilesDir, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -22600,8 +23494,8 @@ async function prepareHermesProfilesForUse(paths = resolveRuntimePaths()) {
 async function getHermesProfileStatus(name, paths = resolveRuntimePaths()) {
   assertProfileName(name);
   const profile = await profileInfo(name, paths);
-  const exists = await stat14(profile.path).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  const exists = await stat15(profile.path).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -22670,7 +23564,7 @@ async function readHermesProfileCapabilities(name) {
   return {
     defaultModel: listedModels?.defaultModel ?? null,
     modelCount: listedModels?.models.length ?? 0,
-    skillCount: await countSkills(path22.join(profileDir, "skills")).catch(
+    skillCount: await countSkills(path23.join(profileDir, "skills")).catch(
       () => 0
     ),
     toolCount: await countConfiguredTools(name).catch(() => 0)
@@ -22713,8 +23607,8 @@ function assertProfileName(name) {
   }
 }
 async function pathExists(targetPath) {
-  return await stat14(targetPath).then(() => true).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  return await stat15(targetPath).then(() => true).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -22722,8 +23616,8 @@ async function pathExists(targetPath) {
 }
 async function hasDefaultProfileConfigSource() {
   const profilePath = resolveHermesProfileDir(DEFAULT_PROFILE);
-  const profileStat = await stat14(profilePath).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+  const profileStat = await stat15(profilePath).catch((error) => {
+    if (isNodeError15(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -22731,7 +23625,7 @@ async function hasDefaultProfileConfigSource() {
   if (!profileStat?.isDirectory()) {
     return false;
   }
-  return await pathExists(resolveHermesConfigPath(DEFAULT_PROFILE)) || await pathExists(path22.join(profilePath, ".env"));
+  return await pathExists(resolveHermesConfigPath(DEFAULT_PROFILE)) || await pathExists(path23.join(profilePath, ".env"));
 }
 async function deleteHermesProfileWithCli(name) {
   try {
@@ -22844,7 +23738,7 @@ function isProcessRunning(pid) {
     process.kill(pid, 0);
     return true;
   } catch (error) {
-    return isNodeError14(error, "EPERM");
+    return isNodeError15(error, "EPERM");
   }
 }
 async function waitForProfilePathToRemainAbsent(profilePath) {
@@ -22881,7 +23775,7 @@ function readExecErrorOutput2(error) {
   }
   return parts.join("\n");
 }
-function isNodeError14(error, code) {
+function isNodeError15(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function errorMessage(error) {
@@ -22893,7 +23787,7 @@ function escapeRegExp2(value) {
 async function countSkills(root) {
   const entries = await readdir8(root, { withFileTypes: true }).catch(
     (error) => {
-      if (isNodeError14(error, "ENOENT")) {
+      if (isNodeError15(error, "ENOENT")) {
         return [];
       }
       throw error;
@@ -22901,7 +23795,7 @@ async function countSkills(root) {
   );
   let count = 0;
   for (const entry of entries) {
-    const entryPath = path22.join(root, entry.name);
+    const entryPath = path23.join(root, entry.name);
     if (entry.name === ".git" || entry.name === ".hub") {
       continue;
     }
@@ -22920,7 +23814,7 @@ async function countConfiguredTools(profileName) {
     resolveHermesConfigPath(profileName),
     "utf8"
   ).catch((error) => {
-    if (isNodeError14(error, "ENOENT")) {
+    if (isNodeError15(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -22991,10 +23885,10 @@ async function ensureHermesUsageProbeForProfiles(options = {}) {
 }
 async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
   const paths = options.paths ?? resolveRuntimePaths();
-  const normalizedProfile = normalizeProfileName5(profileName);
+  const normalizedProfile = normalizeProfileName6(profileName);
   const profilePath = resolveHermesProfileDir(normalizedProfile);
   const configPath = resolveHermesConfigPath(normalizedProfile);
-  const pluginPath = path23.join(
+  const pluginPath = path24.join(
     profilePath,
     "plugins",
     HERMES_USAGE_PROBE_PLUGIN_KEY
@@ -23020,7 +23914,7 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
     return { ...base(), skipped: true };
   }
   try {
-    await ensureDirectoryWithInheritedMetadata(path23.dirname(eventsPath), 448);
+    await ensureDirectoryWithInheritedMetadata(path24.dirname(eventsPath), 448);
     const state = await readUsageProbeState(paths);
     const pluginState = state.profiles[normalizedProfile];
     const currentConfig = await readUsageProbeConfigStatus({
@@ -23116,11 +24010,11 @@ async function ensureHermesUsageProbeForProfile(profileName, options = {}) {
 }
 async function findHermesUsageProbeEventForRun(input) {
   const paths = input.paths ?? resolveRuntimePaths();
-  const profileName = normalizeProfileName5(input.profileName);
+  const profileName = normalizeProfileName6(input.profileName);
   const eventsPath = resolveUsageProbeEventsPath(paths, profileName);
   const raw = await readTail2(eventsPath, MAX_EVENT_READ_BYTES).catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return "";
       }
       throw error;
@@ -23153,7 +24047,7 @@ async function findHermesUsageProbeEventForRun(input) {
   return aggregateUsageProbeEvents(events.sort(compareUsageProbeEventsByTime));
 }
 function resolveUsageProbeEventsPath(paths = resolveRuntimePaths(), profileName = "default") {
-  return path23.join(
+  return path24.join(
     paths.homeDir,
     USAGE_PROBE_DIR,
     safeProfileSegment(profileName),
@@ -23177,8 +24071,8 @@ function summarizeUsageProbeEnsure(result) {
   };
 }
 async function writeUsageProbePlugin(input) {
-  const manifestPath = path23.join(input.pluginPath, "plugin.yaml");
-  const initPath = path23.join(input.pluginPath, "__init__.py");
+  const manifestPath = path24.join(input.pluginPath, "plugin.yaml");
+  const initPath = path24.join(input.pluginPath, "__init__.py");
   const manifest = usageProbeManifest();
   const source = usageProbePythonSource(
     input.profileName,
@@ -23191,7 +24085,7 @@ async function writeUsageProbePlugin(input) {
 }
 async function writeManagedFile(filePath, content) {
   const existing = await readFile14(filePath, "utf8").catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+    if (isNodeError16(error, "ENOENT")) {
       return null;
     }
     throw error;
@@ -23294,13 +24188,13 @@ function hasManagedPluginEntry(entries) {
   return entries.includes(HERMES_USAGE_PROBE_PLUGIN_KEY) || entries.includes(LEGACY_PLUGIN_KEY);
 }
 function normalizeEnabledPluginConfig(plugins, enabledEntries, disabledEntries) {
-  const nextEnabled = uniqueStrings([
+  const nextEnabled = uniqueStrings2([
     ...enabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     ),
     HERMES_USAGE_PROBE_PLUGIN_KEY
   ]);
-  const nextDisabled = uniqueStrings(
+  const nextDisabled = uniqueStrings2(
     disabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     )
@@ -23315,12 +24209,12 @@ function normalizeEnabledPluginConfig(plugins, enabledEntries, disabledEntries)
   return changed;
 }
 function normalizeDisabledPluginConfig(plugins, enabledEntries, disabledEntries) {
-  const nextEnabled = uniqueStrings(
+  const nextEnabled = uniqueStrings2(
     enabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     )
   );
-  const nextDisabled = uniqueStrings([
+  const nextDisabled = uniqueStrings2([
     ...disabledEntries.filter(
       (entry) => entry !== LEGACY_PLUGIN_KEY && entry !== HERMES_USAGE_PROBE_PLUGIN_KEY
     ),
@@ -23341,11 +24235,11 @@ function ensureApiServerToolsetEnabled(config) {
   if (apiServerToolsets.length === 0 && !Array.isArray(platformToolsets?.api_server) && !knownApiServerToolsets.includes(HERMESPILOT_LINK_TOOLSET)) {
     return false;
   }
-  const nextToolsets = uniqueStrings([
+  const nextToolsets = uniqueStrings2([
     ...Array.isArray(platformToolsets?.api_server) ? apiServerToolsets : ["hermes-api-server"],
     HERMESPILOT_LINK_TOOLSET
   ]);
-  const nextKnownToolsets = uniqueStrings([
+  const nextKnownToolsets = uniqueStrings2([
     ...knownApiServerToolsets,
     HERMESPILOT_LINK_TOOLSET
   ]);
@@ -23525,19 +24419,19 @@ async function disableUsageProbeAfterActivationFailure(input) {
   });
 }
 async function cleanupLegacyUsageProbePlugin(profilePath) {
-  const legacyPath = path23.join(profilePath, "plugins", LEGACY_PLUGIN_KEY);
+  const legacyPath = path24.join(profilePath, "plugins", LEGACY_PLUGIN_KEY);
   const [manifest, init] = await Promise.all([
-    readFile14(path23.join(legacyPath, "plugin.yaml"), "utf8").catch(
+    readFile14(path24.join(legacyPath, "plugin.yaml"), "utf8").catch(
       (error) => {
-        if (isNodeError15(error, "ENOENT")) {
+        if (isNodeError16(error, "ENOENT")) {
           return null;
         }
         throw error;
       }
     ),
-    readFile14(path23.join(legacyPath, "__init__.py"), "utf8").catch(
+    readFile14(path24.join(legacyPath, "__init__.py"), "utf8").catch(
       (error) => {
-        if (isNodeError15(error, "ENOENT")) {
+        if (isNodeError16(error, "ENOENT")) {
           return null;
         }
         throw error;
@@ -23584,12 +24478,12 @@ async function rememberUsageProbeState(paths, profileName, patch) {
   }));
 }
 function usageProbeStatePath(paths) {
-  return path23.join(paths.homeDir, USAGE_PROBE_DIR, USAGE_PROBE_STATE_FILE);
+  return path24.join(paths.homeDir, USAGE_PROBE_DIR, USAGE_PROBE_STATE_FILE);
 }
 async function readHermesConfigDocument2(configPath, language) {
   const existingRaw = await readFile14(configPath, "utf8").catch(
     (error) => {
-      if (isNodeError15(error, "ENOENT")) {
+      if (isNodeError16(error, "ENOENT")) {
         return null;
       }
       throw error;
@@ -23620,7 +24514,7 @@ async function writeHermesConfigDocument2(input) {
   );
 }
 async function readTail2(filePath, maxBytes) {
-  const info = await stat15(filePath);
+  const info = await stat16(filePath);
   const length = Math.min(info.size, maxBytes);
   if (length <= 0) {
     return "";
@@ -23996,7 +24890,7 @@ function withDefaultProfilePlaceholder(profiles) {
     ...profiles
   ];
 }
-function normalizeProfileName5(profileName) {
+function normalizeProfileName6(profileName) {
   const value = profileName?.trim() || "default";
   if (!/^[a-zA-Z0-9._-]{1,64}$/u.test(value)) {
     throw new Error("invalid profile name");
@@ -24004,7 +24898,7 @@ function normalizeProfileName5(profileName) {
   return value;
 }
 function safeProfileSegment(profileName) {
-  return encodeURIComponent(normalizeProfileName5(profileName));
+  return encodeURIComponent(normalizeProfileName6(profileName));
 }
 function ensureRecord2(target, key) {
   const existing = target[key];
@@ -24021,7 +24915,7 @@ function readStringList5(value) {
   }
   return value.filter((entry) => typeof entry === "string").map((entry) => entry.trim()).filter(Boolean);
 }
-function uniqueStrings(entries) {
+function uniqueStrings2(entries) {
   return [...new Set(entries.map((entry) => entry.trim()).filter(Boolean))];
 }
 function sameStringList(left, right) {
@@ -24047,8 +24941,8 @@ function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function pathIsDirectory(filePath) {
-  return stat15(filePath).then((value) => value.isDirectory()).catch((error) => {
-    if (isNodeError15(error, "ENOENT")) {
+  return stat16(filePath).then((value) => value.isDirectory()).catch((error) => {
+    if (isNodeError16(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -24071,7 +24965,7 @@ function logEnsureResult(logger, source, profiles) {
 function errorMessage2(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isNodeError15(error, code) {
+function isNodeError16(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
@@ -24151,8 +25045,8 @@ function toRecord14(value) {
 }
 
 // src/conversations/run-transcript-enrichment.ts
-import { readFile as readFile15, stat as stat16 } from "fs/promises";
-import path24 from "path";
+import { readFile as readFile15, stat as stat17 } from "fs/promises";
+import path25 from "path";
 var MESSAGE_COLUMNS2 = [
   "id",
   "session_id",
@@ -24228,8 +25122,8 @@ async function readRunFinalAssistantText(input) {
 }
 async function readHermesTranscriptRows(profileName, sessionId) {
   const profileDir = resolveHermesProfileDir(profileName);
-  const dbPath = path24.join(profileDir, "state.db");
-  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path24.join(profileDir, "sessions"));
+  const dbPath = path25.join(profileDir, "state.db");
+  const sessionsDir = await readHermesSessionsDir(profileName).then((value) => value.sessionsDir).catch(() => path25.join(profileDir, "sessions"));
   const [dbRows, jsonlRows] = await Promise.all([
     readStateDbMessages2(dbPath, sessionId),
     readJsonlMessages2(sessionsDir, sessionId)
@@ -24292,9 +25186,9 @@ async function readJsonlMessages2(sessionsDir, sessionId) {
   if (!/^[A-Za-z0-9._:-]{1,160}$/u.test(sessionId)) {
     return [];
   }
-  const transcriptPath = path24.join(sessionsDir, `${sessionId}.jsonl`);
+  const transcriptPath = path25.join(sessionsDir, `${sessionId}.jsonl`);
   const raw = await readFile15(transcriptPath, "utf8").catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+    if (isNodeError17(error, "ENOENT")) {
       return "";
     }
     throw error;
@@ -24508,8 +25402,8 @@ function quoteIdentifier2(value) {
   return `"${value.replaceAll('"', '""')}"`;
 }
 async function isFile2(filePath) {
-  return stat16(filePath).then((value) => value.isFile()).catch((error) => {
-    if (isNodeError16(error, "ENOENT")) {
+  return stat17(filePath).then((value) => value.isFile()).catch((error) => {
+    if (isNodeError17(error, "ENOENT")) {
       return false;
     }
     throw error;
@@ -24539,12 +25433,12 @@ function readNumber4(value) {
 function toRecord15(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
-function isNodeError16(error, code) {
+function isNodeError17(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
 // src/conversations/run-tool-event-ids.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 var RunToolEventIdCoalescer = class {
   scope;
   ordinal = 0;
@@ -24709,7 +25603,7 @@ function stableStringify2(value) {
   }
 }
 function hashStableValue(value) {
-  return createHash5("sha256").update(value).digest("hex").slice(0, 16);
+  return createHash6("sha256").update(value).digest("hex").slice(0, 16);
 }
 function readString17(payload, key) {
   const value = payload[key];
@@ -24733,7 +25627,7 @@ function normalizeHermesStreamEvent(event) {
         ...event.payload,
         type: "run.failed",
         error: {
-          message: readErrorMessage3(event.payload) ?? readDelta(event.payload) ?? "Hermes run failed"
+          message: readErrorMessage4(event.payload) ?? readDelta(event.payload) ?? "Hermes run failed"
         }
       }
     };
@@ -24923,7 +25817,7 @@ function normalizeStreamingTextDelta(currentText, nextChunk) {
   }
   return nextChunk;
 }
-function readErrorMessage3(payload) {
+function readErrorMessage4(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
@@ -24966,7 +25860,7 @@ function isTopLevelErrorEvent(event) {
   if (type.startsWith("tool.")) {
     return false;
   }
-  return type === "error" || type === "run.error" || event.eventName === "error" || Boolean(readErrorMessage3(event.payload));
+  return type === "error" || type === "run.error" || event.eventName === "error" || Boolean(readErrorMessage4(event.payload));
 }
 function readChatCompletionDelta(payload) {
   const choice = readFirstChoice(payload);
@@ -25942,7 +26836,7 @@ var ConversationRunLifecycle = class {
       await this.failRun(
         input.conversationId,
         input.runId,
-        readErrorMessage3(input.event.payload) ?? "Hermes run failed",
+        readErrorMessage4(input.event.payload) ?? "Hermes run failed",
         input.event
       );
       return true;
@@ -27144,7 +28038,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     run.status = "failed";
     run.completed_at = (/* @__PURE__ */ new Date()).toISOString();
     run.error_message = message;
-    run.error_detail = source ? readErrorMessage3(source.payload) ?? void 0 : void 0;
+    run.error_detail = source ? readErrorMessage4(source.payload) ?? void 0 : void 0;
     const language = run.language === "en" ? "en" : "zh-CN";
     const visibleMessage = formatFailureMessage(
       message,
@@ -27497,7 +28391,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     if (raw.length <= 200) {
       return raw;
     }
-    return `hermespilot:${createHash6("sha256").update(raw).digest("hex")}`;
+    return `hermespilot:${createHash7("sha256").update(raw).digest("hex")}`;
   }
   async assistantMessageIdForRun(conversationId, runId) {
     const snapshot = await this.deps.readSnapshot(conversationId).catch(() => null);
@@ -27514,7 +28408,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
   async readHermesCronJobIds(profileName) {
     const jobs = await listHermesCronJobs({
       logger: this.deps.logger,
-      profileName: normalizeProfileName3(profileName),
+      profileName: normalizeProfileName4(profileName),
       includeDisabled: true
     });
     return new Set(
@@ -27522,7 +28416,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     );
   }
   async bindNewCronJobsCreatedByRun(input) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     const jobs = await listHermesCronJobs({
       logger: this.deps.logger,
       profileName,
@@ -27612,7 +28506,7 @@ function formatFilenameList(filenames, language = "zh-CN") {
 }
 async function readdirWithDirs(directory) {
   return readdir9(directory, { withFileTypes: true }).catch((error) => {
-    if (isNodeError17(error, "ENOENT")) {
+    if (isNodeError18(error, "ENOENT")) {
       return [];
     }
     throw error;
@@ -28014,7 +28908,7 @@ function findPreviousHermesResponseId(snapshot, run) {
 }
 function normalizeRunProfileForCompare(profileName) {
   try {
-    return normalizeProfileName3(profileName);
+    return normalizeProfileName4(profileName);
   } catch {
     return null;
   }
@@ -28114,15 +29008,15 @@ function previewText2(message) {
   return text ? text.slice(0, 512) : null;
 }
 function runNotificationSourceEventId(conversationId, runId, eventKind) {
-  const digest = createHash6("sha256").update(`${conversationId}:${runId}:${eventKind}`).digest("hex").slice(0, 24);
+  const digest = createHash7("sha256").update(`${conversationId}:${runId}:${eventKind}`).digest("hex").slice(0, 24);
   return `${conversationId}:${eventKind}:${digest}`;
 }
 function approvalNotificationSourceEventId(conversationId, runId, approvalId) {
-  const digest = createHash6("sha256").update(`${conversationId}:${runId}:${approvalId}:approval_required`).digest("hex").slice(0, 24);
+  const digest = createHash7("sha256").update(`${conversationId}:${runId}:${approvalId}:approval_required`).digest("hex").slice(0, 24);
   return `${conversationId}:approval_required:${digest}`;
 }
 function inputRequestNotificationSourceEventId(conversationId, runId, inputRequestId) {
-  const digest = createHash6("sha256").update(`${conversationId}:${runId}:${inputRequestId}:input_required`).digest("hex").slice(0, 24);
+  const digest = createHash7("sha256").update(`${conversationId}:${runId}:${inputRequestId}:input_required`).digest("hex").slice(0, 24);
   return `${conversationId}:input_required:${digest}`;
 }
 async function closeSseIterator(iterator) {
@@ -28147,7 +29041,7 @@ async function sleep(ms, signal) {
     );
   });
 }
-function isNodeError17(error, code) {
+function isNodeError18(error, code) {
   if (typeof error !== "object" || error === null || !("code" in error)) {
     return false;
   }
@@ -28381,11 +29275,16 @@ var ConversationService = class {
         "model_id must be a valid model id"
       );
     }
-    const configuredModel = normalizedModelId ? await findConfiguredModel(profile.profileName, normalizedModelId, {
-      provider: input.modelProvider,
-      baseUrl: input.modelBaseUrl,
-      apiMode: input.modelApiMode
-    }) : null;
+    const configuredModel = normalizedModelId ? await findConfiguredModel(
+      profile.profileName,
+      normalizedModelId,
+      {
+        provider: input.modelProvider,
+        baseUrl: input.modelBaseUrl,
+        apiMode: input.modelApiMode
+      },
+      this.paths
+    ) : null;
     if (normalizedModelId && !configuredModel) {
       throw new LinkHttpError(
         404,
@@ -28475,10 +29374,10 @@ var ConversationService = class {
     };
   }
   async ensureCronInboxConversation(input = {}) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     for (const conversationId of await this.store.listConversationIds()) {
       const manifest = await this.store.readManifest(conversationId).catch(() => null);
-      if (manifest?.status === "active" && manifest.title === "HermesLink \u5B9A\u65F6\u4EFB\u52A1" && normalizeProfileName3(
+      if (manifest?.status === "active" && manifest.title === "HermesLink \u5B9A\u65F6\u4EFB\u52A1" && normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile
       ) === profileName) {
         return manifest.id;
@@ -28589,7 +29488,7 @@ var ConversationService = class {
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const createdAt = input.runAt ?? now;
-      const profileName = normalizeProfileName3(
+      const profileName = normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile ?? input.profileName
       );
       const ownerAccountId = input.accountId ?? manifest.owner_account_id;
@@ -28656,7 +29555,7 @@ var ConversationService = class {
     });
   }
   async findImportedCronConversation(input) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     const outputAt = Date.parse(input.runAt ?? "");
     const candidates = [];
     for (const conversationId of await this.store.listConversationIds()) {
@@ -28664,7 +29563,7 @@ var ConversationService = class {
       if (!manifest || manifest.status !== "active") {
         continue;
       }
-      if (normalizeProfileName3(
+      if (normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile
       ) !== profileName) {
         continue;
@@ -28912,7 +29811,8 @@ var ConversationService = class {
       const configuredModel = normalizedModelId ? await findConfiguredModel(
         currentRuntime.profile.name,
         normalizedModelId,
-        modelSelector
+        modelSelector,
+        this.paths
       ) : null;
       if (normalizedModelId && !configuredModel) {
         throw new LinkHttpError(
@@ -29016,7 +29916,7 @@ var ConversationService = class {
         this.paths,
         profileName
       );
-      const currentProfile = normalizeProfileName3(
+      const currentProfile = normalizeProfileName4(
         manifest.profile_name_snapshot ?? manifest.profile
       );
       if (currentProfile === profile.profileName && (!manifest.profile_uid || manifest.profile_uid === profile.profileUid)) {
@@ -29306,7 +30206,7 @@ var ConversationService = class {
             "This approval request cannot be permanently allowed because Hermes did not return a pattern key."
           );
         }
-        const profileName = normalizeProfileName3(
+        const profileName = normalizeProfileName4(
           run?.profile ?? match.message.sender.profile ?? manifest.profile_name_snapshot ?? manifest.profile
         );
         const result = await addHermesCommandAllowlistEntry(
@@ -29759,7 +30659,7 @@ var ConversationService = class {
     }
   }
   hermesArchiveStateSyncMarkerPath() {
-    return path25.join(this.paths.indexesDir, "hermes-archive-state-sync.json");
+    return path26.join(this.paths.indexesDir, "hermes-archive-state-sync.json");
   }
   prepareClearAllConversationPlan(targetStatus) {
     return this.maintenance.prepareClearAllConversationPlan(targetStatus);
@@ -29789,7 +30689,7 @@ var ConversationService = class {
     return this.maintenance.deleteConversations(conversationIds);
   }
   async deleteLocalConversationsForProfile(input) {
-    const profileName = normalizeProfileName3(input.profileName);
+    const profileName = normalizeProfileName4(input.profileName);
     const profileUid = input.profileUid?.trim() || null;
     const deletedConversationIds = [];
     for (const conversationId of await this.store.listConversationIds()) {
@@ -29847,8 +30747,40 @@ var ConversationService = class {
     const event = await this.store.appendEvent(conversationId, input);
     this.emitter.emit(this.liveEventName(conversationId), event);
     this.emitter.emit(ALL_CONVERSATION_EVENTS, event);
+    void this.reportLiveActivityEvent(conversationId, event);
     return event;
   }
+  async reportLiveActivityEvent(conversationId, event) {
+    try {
+      const [manifest, snapshot] = await Promise.all([
+        this.store.readManifest(conversationId),
+        this.store.readSnapshot(conversationId)
+      ]);
+      if (manifest.status !== "active" || !manifest.owner_account_id) {
+        return;
+      }
+      const liveActivityEvent = buildLiveActivityEvent({
+        manifest,
+        snapshot,
+        event
+      });
+      if (!liveActivityEvent) {
+        return;
+      }
+      await reportLiveActivityEventToServer({
+        paths: this.paths,
+        logger: this.logger,
+        event: liveActivityEvent
+      });
+    } catch (error) {
+      void this.logger.warn("live_activity_event_report_failed", {
+        conversation_id: conversationId,
+        event_type: event.type,
+        event_seq: event.seq,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
   abortActiveRunsForConversation(conversationId) {
     for (const [runId, active] of this.activeRunControllers) {
       if (active.conversationId !== conversationId) {
@@ -29874,7 +30806,7 @@ function conversationMatchesProfile(manifest, profileName, profileUid) {
   if (profileUid && manifest.profile_uid === profileUid) {
     return true;
   }
-  return normalizeProfileName3(manifest.profile_name_snapshot ?? manifest.profile) === profileName;
+  return normalizeProfileName4(manifest.profile_name_snapshot ?? manifest.profile) === profileName;
 }
 function findApproval(snapshot, approvalId) {
   for (const message of snapshot.messages) {
@@ -29886,7 +30818,7 @@ function findApproval(snapshot, approvalId) {
   return null;
 }
 function cronNotificationSourceEventId(conversationId, jobId, outputPath, eventKind) {
-  const digest = createHash7("sha256").update(`${conversationId}:${jobId}:${outputPath}:${eventKind}`).digest("hex").slice(0, 24);
+  const digest = createHash8("sha256").update(`${conversationId}:${jobId}:${outputPath}:${eventKind}`).digest("hex").slice(0, 24);
   return `${conversationId}:${eventKind}:${digest}`;
 }
 function conversationHermesSessionIds(manifest) {
@@ -29952,12 +30884,315 @@ function notificationPreviewText(message) {
   const text = messageText(message).replace(/<[^>]+>/gu, " ").replace(/\s+/gu, " ").trim();
   return text ? text.slice(0, 512) : null;
 }
+function buildLiveActivityEvent(input) {
+  const run = liveActivityRunForEvent(input.event, input.snapshot);
+  const contextOperation = readContextCompressionOperation(input.event.payload);
+  const target = resolveLiveActivityTarget({ event: input.event, run, contextOperation });
+  if (!target) {
+    return null;
+  }
+  const phase = liveActivityPhaseForEvent(input.event, run, contextOperation);
+  if (!phase) {
+    return null;
+  }
+  const language = run?.language === "en" ? "en" : "zh";
+  const text = liveActivityTextForEvent({
+    event: input.event,
+    snapshot: input.snapshot,
+    run,
+    phase,
+    language,
+    contextOperation
+  });
+  return {
+    sourceEventId: `${input.manifest.id}:${input.event.seq}:${input.event.type}`,
+    eventKind: input.event.type.replace(/\./gu, "_"),
+    conversationId: input.manifest.id,
+    conversationTitle: liveActivityConversationTitle(input.manifest, input.event, phase, language),
+    accountId: input.manifest.owner_account_id,
+    appInstanceId: input.manifest.owner_app_instance_id,
+    targetKind: target.kind,
+    targetId: target.id,
+    runId: target.kind === "run" ? target.id : void 0,
+    operationId: target.kind === "context_compression" ? target.id : contextOperation?.operation_id,
+    phase,
+    statusLabel: text.statusLabel,
+    progressText: text.progressText,
+    detailText: text.detailText,
+    requiresUserAction: phase === "needs_input" || phase === "needs_approval",
+    terminal: isLiveActivityTerminalEvent(phase, target.kind),
+    occurredAt: input.event.created_at
+  };
+}
+function liveActivityConversationTitle(manifest, event, phase, language) {
+  if (phase === "goal_running" || phase === "goal_paused") {
+    const goal = manifest.command_state?.goal;
+    const rawTitle = goal?.title?.trim() || goal?.content?.trim() || "";
+    if (!rawTitle) {
+      return null;
+    }
+    const title = truncateLiveActivityTitle(rawTitle, 18);
+    return language === "en" ? `Goal: ${title}` : `\u76EE\u6807\uFF1A${title}`;
+  }
+  const eventTitle = liveActivityTitleFromConversationUpdate(event);
+  if (eventTitle !== void 0) {
+    return eventTitle;
+  }
+  return liveActivityTitleFromManifest(manifest);
+}
+function liveActivityTitleFromConversationUpdate(event) {
+  if (event.type.toLowerCase() !== "conversation.updated") {
+    return void 0;
+  }
+  const titleSource = readString20(event.payload, "title_source");
+  if (titleSource === "default" || titleSource === "temporary_fallback") {
+    return null;
+  }
+  const title = readString20(event.payload, "title");
+  return title ? truncateLiveActivityTitle(title, 24) : null;
+}
+function liveActivityTitleFromManifest(manifest) {
+  if (manifest.title_source === "default" || manifest.title_source === "temporary_fallback") {
+    return null;
+  }
+  if (isDefaultConversationTitle(manifest.title)) {
+    return null;
+  }
+  return truncateLiveActivityTitle(manifest.title, 24);
+}
+function truncateLiveActivityTitle(value, maxLength) {
+  const normalized = value.replace(/\s+/gu, " ").trim();
+  if (!normalized) {
+    return null;
+  }
+  const chars = Array.from(normalized);
+  if (chars.length <= maxLength) {
+    return normalized;
+  }
+  return `${chars.slice(0, maxLength).join("")}...`;
+}
+function liveActivityRunForEvent(event, snapshot) {
+  if (event.run_id) {
+    return snapshot.runs.find((item) => item.id === event.run_id) ?? null;
+  }
+  if (!isConversationTitleUpdateEvent(event)) {
+    return null;
+  }
+  return latestTrackableLiveActivityRun(snapshot);
+}
+function latestTrackableLiveActivityRun(snapshot) {
+  const candidates = snapshot.runs.filter((run) => run.status === "running" || run.status === "queued").sort((left, right) => Date.parse(right.started_at) - Date.parse(left.started_at));
+  return candidates[0] ?? null;
+}
+function isConversationTitleUpdateEvent(event) {
+  if (event.type.toLowerCase() !== "conversation.updated") {
+    return false;
+  }
+  return Boolean(readString20(event.payload, "title")?.trim());
+}
+function resolveLiveActivityTarget(input) {
+  if (input.run?.kind === "compression") {
+    const operationId = input.contextOperation?.operation_id ?? input.run.context_compression?.operation_id;
+    return operationId ? { kind: "context_compression", id: operationId } : null;
+  }
+  if (input.run?.id) {
+    return { kind: "run", id: input.run.id };
+  }
+  if (input.contextOperation?.operation_id) {
+    return { kind: "context_compression", id: input.contextOperation.operation_id };
+  }
+  return null;
+}
+function liveActivityPhaseForEvent(event, run, contextOperation) {
+  const type = event.type.toLowerCase();
+  if (type === "run.started" || type === "run.queued") {
+    return run?.mode === "goal" ? "goal_running" : "accepted";
+  }
+  if (type === "conversation.goal.updated") {
+    const goal = readRecord(event.payload).goal;
+    const status = readString20(goal, "status");
+    return status === "paused" ? "goal_paused" : "goal_running";
+  }
+  if (isConversationTitleUpdateEvent(event)) {
+    return run?.mode === "goal" ? "goal_running" : "running";
+  }
+  if (type === "tool.started") {
+    return "using_tool";
+  }
+  if (type === "tool.completed") {
+    return "tool_completed";
+  }
+  if (type === "input_request.created") {
+    return "needs_input";
+  }
+  if (type === "approval.requested") {
+    return "needs_approval";
+  }
+  if (type === "reasoning.available") {
+    return run?.mode === "goal" ? "goal_running" : "running";
+  }
+  if (type === "context_compression.started") {
+    return "context_compressing";
+  }
+  if (type === "context_compression.completed") {
+    return "context_compressed";
+  }
+  if (type === "context_compression.failed") {
+    return contextOperation?.status === "timed_out" ? "context_compression_timed_out" : "context_compression_failed";
+  }
+  if (type === "context_compression.timed_out") {
+    return "context_compression_timed_out";
+  }
+  if (type === "run.completed") {
+    return "completed";
+  }
+  if (type === "run.failed") {
+    return "failed";
+  }
+  if (type === "run.cancelled" || type === "run.canceled") {
+    return "cancelled";
+  }
+  return null;
+}
+function liveActivityTextForEvent(input) {
+  const toolName = readToolName2(input.event.payload);
+  const assistantText = input.event.message_id ? input.snapshot.messages.find((message) => message.id === input.event.message_id) : null;
+  const preview = input.event.type.toLowerCase() === "reasoning.available" ? liveActivityReasoningPreview(input.event.payload) : isLiveActivityTerminalEvent(input.phase, input.run?.kind === "compression" ? "context_compression" : "run") && assistantText ? notificationPreviewText(assistantText) : null;
+  if (input.language === "en") {
+    return liveActivityTextEn(input.phase, toolName, preview, input.contextOperation);
+  }
+  return liveActivityTextZh(input.phase, toolName, preview, input.contextOperation);
+}
+function liveActivityTextZh(phase, toolName, preview, contextOperation) {
+  switch (phase) {
+    case "using_tool":
+      return { statusLabel: "\u8C03\u7528\u5DE5\u5177", progressText: toolName ? `\u6B63\u5728\u4F7F\u7528 ${toolName}` : "Hermes \u6B63\u5728\u8C03\u7528\u5DE5\u5177", detailText: preview ?? void 0 };
+    case "tool_completed":
+      return { statusLabel: "\u5DE5\u5177\u5B8C\u6210", progressText: toolName ? `${toolName} \u5DF2\u5B8C\u6210` : "\u5DE5\u5177\u8C03\u7528\u5DF2\u5B8C\u6210", detailText: preview ?? void 0 };
+    case "needs_input":
+      return { statusLabel: "\u9700\u56DE\u590D", progressText: "Hermes \u9700\u8981\u4F60\u8865\u5145\u4FE1\u606F", detailText: "\u70B9\u51FB\u56DE\u5230 App \u7EE7\u7EED\u3002" };
+    case "needs_approval":
+      return { statusLabel: "\u9700\u6388\u6743", progressText: "Hermes \u8BF7\u6C42\u6267\u884C\u6743\u9650", detailText: "\u70B9\u51FB\u56DE\u5230 App \u67E5\u770B\u3002" };
+    case "goal_running":
+      return { statusLabel: "\u76EE\u6807\u4E2D", progressText: "Hermes \u6B63\u5728\u63A8\u8FDB\u76EE\u6807", detailText: preview ?? "\u6B63\u5728\u6267\u884C\u4E0B\u4E00\u6B65\u3002" };
+    case "goal_paused":
+      return { statusLabel: "\u5F85\u6307\u5F15", progressText: "\u76EE\u6807\u4EFB\u52A1\u7B49\u5F85\u4F60\u7684\u6307\u5F15", detailText: "\u70B9\u51FB\u56DE\u5230 App \u7EE7\u7EED\u3002" };
+    case "context_compressing":
+      return {
+        statusLabel: contextOperation?.source === "auto" ? "\u6574\u7406\u4E2D" : "\u538B\u7F29\u4E2D",
+        progressText: contextOperation?.source === "auto" ? "Hermes \u6B63\u5728\u81EA\u52A8\u6574\u7406\u4E0A\u4E0B\u6587" : "Hermes \u6B63\u5728\u6574\u7406\u4E0A\u4E0B\u6587",
+        detailText: contextOperation?.source === "auto" ? "\u6211\u5148\u6574\u7406\u4E0A\u4E0B\u6587\uFF0C\u518D\u7EE7\u7EED\u6267\u884C\u3002" : "\u6211\u6B63\u5728\u538B\u7F29\u5F53\u524D\u4F1A\u8BDD\u4E0A\u4E0B\u6587\u3002"
+      };
+    case "context_compressed":
+      return { statusLabel: "\u5DF2\u6574\u7406", progressText: "\u4E0A\u4E0B\u6587\u5DF2\u6574\u7406", detailText: "\u53EF\u4EE5\u7EE7\u7EED\u5F53\u524D\u4EFB\u52A1\u3002" };
+    case "context_compression_failed":
+      return { statusLabel: "\u538B\u7F29\u5931\u8D25", progressText: "\u4E0A\u4E0B\u6587\u538B\u7F29\u5931\u8D25", detailText: "\u70B9\u51FB\u56DE\u5230 App \u67E5\u770B\u8BE6\u60C5\u3002" };
+    case "context_compression_timed_out":
+      return { statusLabel: "\u538B\u7F29\u8D85\u65F6", progressText: "\u6B63\u5728\u6062\u590D Hermes", detailText: "\u6267\u884C\u540E\u7AEF\u6B63\u5728\u6062\u590D\u3002" };
+    case "completed":
+      return { statusLabel: "\u5B8C\u6210", progressText: "\u4EFB\u52A1\u5DF2\u5B8C\u6210", detailText: preview ?? "\u70B9\u51FB\u67E5\u770B\u7ED3\u679C\u3002" };
+    case "failed":
+      return { statusLabel: "\u5931\u8D25", progressText: "\u4EFB\u52A1\u8FD0\u884C\u5931\u8D25", detailText: "\u70B9\u51FB\u67E5\u770B\u5931\u8D25\u8BE6\u60C5\u3002" };
+    case "cancelled":
+      return { statusLabel: "\u5DF2\u53D6\u6D88", progressText: "\u4EFB\u52A1\u5DF2\u53D6\u6D88", detailText: "\u70B9\u51FB\u56DE\u5230 App \u67E5\u770B\u3002" };
+    default:
+      return { statusLabel: "\u6267\u884C\u4E2D", progressText: "\u6B63\u5728\u5904\u7406\u4F60\u7684\u8BF7\u6C42", detailText: preview ?? void 0 };
+  }
+}
+function liveActivityTextEn(phase, toolName, preview, contextOperation) {
+  switch (phase) {
+    case "using_tool":
+      return { statusLabel: "Tool", progressText: toolName ? `Using ${toolName}` : "Hermes is using a tool", detailText: preview ?? void 0 };
+    case "tool_completed":
+      return { statusLabel: "Tool done", progressText: toolName ? `${toolName} completed` : "Tool completed", detailText: preview ?? void 0 };
+    case "needs_input":
+      return { statusLabel: "Reply", progressText: "Hermes needs your response", detailText: "Open the app to continue." };
+    case "needs_approval":
+      return { statusLabel: "Approve", progressText: "Hermes needs approval", detailText: "Open the app to review it." };
+    case "goal_running":
+      return { statusLabel: "Goal", progressText: "Hermes is working on the goal", detailText: preview ?? "Working through the next step." };
+    case "goal_paused":
+      return { statusLabel: "Guide", progressText: "Goal needs guidance", detailText: "Open the app to continue." };
+    case "context_compressing":
+      return {
+        statusLabel: contextOperation?.source === "auto" ? "Tidying" : "Compact",
+        progressText: contextOperation?.source === "auto" ? "Hermes is reorganizing context" : "Hermes is compacting context",
+        detailText: contextOperation?.source === "auto" ? "Tidying context before continuing." : "Compacting this conversation context."
+      };
+    case "context_compressed":
+      return { statusLabel: "Ready", progressText: "Context compacted", detailText: "You can continue this task." };
+    case "context_compression_failed":
+      return { statusLabel: "Failed", progressText: "Context compression failed", detailText: "Open the app for details." };
+    case "context_compression_timed_out":
+      return { statusLabel: "Timeout", progressText: "Restoring Hermes", detailText: "The execution backend is recovering." };
+    case "completed":
+      return { statusLabel: "Done", progressText: "Task completed", detailText: preview ?? "Open the app to view the result." };
+    case "failed":
+      return { statusLabel: "Failed", progressText: "Task failed", detailText: "Open the app for details." };
+    case "cancelled":
+      return { statusLabel: "Canceled", progressText: "Task canceled", detailText: "Open the app for details." };
+    default:
+      return { statusLabel: "Running", progressText: "Working on your request", detailText: preview ?? void 0 };
+  }
+}
+function liveActivityReasoningPreview(payload) {
+  const text = readString20(payload, "text")?.replace(/<[^>]+>/gu, " ").replace(/\s+/gu, " ").trim();
+  return liveActivityCleanAssistantPreview(text);
+}
+function liveActivityCleanAssistantPreview(text) {
+  const normalized = text?.replace(/\s+/gu, " ").trim();
+  if (!normalized || normalized.length < 4) {
+    return null;
+  }
+  if (looksUnsafeForLockScreen(normalized)) {
+    return null;
+  }
+  return normalized.length > 90 ? `${normalized.slice(0, 90)}...` : normalized;
+}
+function looksUnsafeForLockScreen(text) {
+  return /(?:^|\s)(?:https?:\/\/|\/[A-Za-z0-9_.-]+\/|[A-Za-z]:\\|[A-Z_]{8,}=)/u.test(text) || /(?:```|<\?xml|BEGIN [A-Z ]+KEY|token|api[_ -]?key|password|secret)/iu.test(text);
+}
+function isLiveActivityTerminalEvent(phase, targetKind) {
+  if (phase === "completed" || phase === "failed" || phase === "cancelled") {
+    return true;
+  }
+  return targetKind === "context_compression" && (phase === "context_compressed" || phase === "context_compression_failed" || phase === "context_compression_timed_out");
+}
+function readContextCompressionOperation(payload) {
+  const operation = readRecord(payload).operation;
+  if (!operation || typeof operation !== "object") {
+    return null;
+  }
+  const operationId = readString20(operation, "operation_id");
+  if (!operationId) {
+    return null;
+  }
+  const record = operation;
+  return {
+    operation_id: operationId,
+    generation: typeof record.generation === "number" ? record.generation : 0,
+    status: readString20(record, "status") === "completed" ? "completed" : readString20(record, "status") === "failed" ? "failed" : readString20(record, "status") === "timed_out" ? "timed_out" : readString20(record, "status") === "cancelled" ? "cancelled" : "compressing",
+    started_at: readString20(record, "started_at") ?? (/* @__PURE__ */ new Date()).toISOString(),
+    source: readString20(record, "source") === "manual" ? "manual" : "auto"
+  };
+}
+function readToolName2(payload) {
+  const record = readRecord(payload);
+  return readString20(record, "tool_name") ?? readString20(record, "tool") ?? readString20(record, "name") ?? readString20(readRecord(record.tool), "name");
+}
+function readRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
+}
+function readString20(value, key) {
+  const raw = readRecord(value)[key];
+  return typeof raw === "string" && raw.trim() ? raw.trim() : null;
+}
 function approvalRestartText(language, zh, en) {
   return language === "en" ? en : zh;
 }
 
 // src/security/devices.ts
-import { randomBytes as randomBytes3, randomUUID as randomUUID13, timingSafeEqual, createHash as createHash8 } from "crypto";
+import { randomBytes as randomBytes3, randomUUID as randomUUID13, timingSafeEqual, createHash as createHash9 } from "crypto";
 var ACCESS_TOKEN_TTL_MS = 15 * 60 * 1e3;
 var REFRESH_TOKEN_TTL_MS = 90 * 24 * 60 * 60 * 1e3;
 var DEVICE_SEEN_WRITE_INTERVAL_MS = 60 * 60 * 1e3;
@@ -30253,7 +31488,7 @@ function randomToken(prefix) {
   return `${prefix}${randomBytes3(24).toString("base64url")}`;
 }
 function sha256(value) {
-  return createHash8("sha256").update(value).digest("hex");
+  return createHash9("sha256").update(value).digest("hex");
 }
 function safeEqual(left, right) {
   const leftBytes = Buffer.from(left);
@@ -30460,7 +31695,7 @@ async function readRawBody(request, maxBytes) {
   }
   return Buffer.concat(chunks);
 }
-function readString20(body, key) {
+function readString21(body, key) {
   const value = body[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -30495,7 +31730,7 @@ function readSupportedLanguage(value) {
   return null;
 }
 function readOptionalProfileName(body) {
-  return readString20(body, "profile") ?? readString20(body, "profile_name") ?? readString20(body, "profileName") ?? void 0;
+  return readString21(body, "profile") ?? readString21(body, "profile_name") ?? readString21(body, "profileName") ?? void 0;
 }
 function readStringArray(body, ...keys) {
   for (const key of keys) {
@@ -30915,7 +32150,7 @@ function registerConversationRoutes(router, options) {
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
     ctx.status = 201;
-    const rawReasoningEffort = readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? readString20(body, "default_reasoning_effort") ?? readString20(body, "defaultReasoningEffort");
+    const rawReasoningEffort = readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? readString21(body, "default_reasoning_effort") ?? readString21(body, "defaultReasoningEffort");
     const reasoningEffort = normalizeReasoningEffort(rawReasoningEffort);
     if (rawReasoningEffort && !reasoningEffort) {
       throw new LinkHttpError(
@@ -30928,15 +32163,15 @@ function registerConversationRoutes(router, options) {
       ok: true,
       conversation: localizeConversationSummary(
         await conversations.createConversation({
-          title: readString20(body, "title") ?? void 0,
+          title: readString21(body, "title") ?? void 0,
           profileName: readOptionalProfileName(body),
           accountId: auth.accountId,
           appInstanceId: auth.appInstanceId,
           workspaceId: readConversationWorkspaceId(body),
-          modelId: readString20(body, "model_id") ?? readString20(body, "modelId") ?? readString20(body, "model") ?? void 0,
-          modelProvider: readString20(body, "model_provider") ?? readString20(body, "modelProvider") ?? readString20(body, "provider") ?? void 0,
-          modelBaseUrl: readString20(body, "model_base_url") ?? readString20(body, "modelBaseUrl") ?? readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0,
-          modelApiMode: readString20(body, "model_api_mode") ?? readString20(body, "modelApiMode") ?? readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0,
+          modelId: readString21(body, "model_id") ?? readString21(body, "modelId") ?? readString21(body, "model") ?? void 0,
+          modelProvider: readString21(body, "model_provider") ?? readString21(body, "modelProvider") ?? readString21(body, "provider") ?? void 0,
+          modelBaseUrl: readString21(body, "model_base_url") ?? readString21(body, "modelBaseUrl") ?? readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0,
+          modelApiMode: readString21(body, "model_api_mode") ?? readString21(body, "modelApiMode") ?? readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0,
           reasoningEffort
         }),
         language
@@ -31013,9 +32248,9 @@ function registerConversationRoutes(router, options) {
     const auth = await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const content = readString20(body, "content") ?? readString20(body, "text") ?? readString20(body, "input") ?? "";
+    const content = readString21(body, "content") ?? readString21(body, "text") ?? readString21(body, "input") ?? "";
     const attachments = readMessageAttachments(body.attachments ?? body.blobs);
-    const mode = readString20(body, "mode") ?? readString20(body, "send_mode");
+    const mode = readString21(body, "mode") ?? readString21(body, "send_mode");
     if (mode && mode !== "message" && mode !== "goal") {
       throw new LinkHttpError(
         400,
@@ -31038,7 +32273,7 @@ function registerConversationRoutes(router, options) {
           conversationId: ctx.params.conversationId,
           content,
           attachments,
-          clientMessageId: readString20(body, "client_message_id") ?? readString20(body, "clientMessageId") ?? void 0,
+          clientMessageId: readString21(body, "client_message_id") ?? readString21(body, "clientMessageId") ?? void 0,
           idempotencyKey: readHeader(ctx, "idempotency-key") ?? void 0,
           profileName: readOptionalProfileName(body),
           mode: mode === "goal" ? "goal" : "message",
@@ -31105,8 +32340,8 @@ function registerConversationRoutes(router, options) {
         ...localizeConversationResult(
           await conversations.startContextCompression({
             conversationId: ctx.params.conversationId,
-            focus: readString20(body, "focus") ?? readString20(body, "focus_topic") ?? readString20(body, "focusTopic") ?? void 0,
-            clientOperationId: readString20(body, "client_operation_id") ?? readString20(body, "clientOperationId") ?? readHeader(ctx, "idempotency-key") ?? void 0,
+            focus: readString21(body, "focus") ?? readString21(body, "focus_topic") ?? readString21(body, "focusTopic") ?? void 0,
+            clientOperationId: readString21(body, "client_operation_id") ?? readString21(body, "clientOperationId") ?? readHeader(ctx, "idempotency-key") ?? void 0,
             createUserMessage: false,
             accountId: auth.accountId,
             appInstanceId: auth.appInstanceId,
@@ -31120,11 +32355,11 @@ function registerConversationRoutes(router, options) {
   router.patch("/api/v1/conversations/:conversationId/model", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString20(body, "model_id") ?? readString20(body, "modelId") ?? readString20(body, "model");
-    const modelProvider = readString20(body, "model_provider") ?? readString20(body, "modelProvider") ?? readString20(body, "provider") ?? void 0;
-    const modelBaseUrl = readString20(body, "model_base_url") ?? readString20(body, "modelBaseUrl") ?? readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0;
-    const modelApiMode = readString20(body, "model_api_mode") ?? readString20(body, "modelApiMode") ?? readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0;
-    const rawReasoningEffort = readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? readString20(body, "default_reasoning_effort") ?? readString20(body, "defaultReasoningEffort");
+    const modelId = readString21(body, "model_id") ?? readString21(body, "modelId") ?? readString21(body, "model");
+    const modelProvider = readString21(body, "model_provider") ?? readString21(body, "modelProvider") ?? readString21(body, "provider") ?? void 0;
+    const modelBaseUrl = readString21(body, "model_base_url") ?? readString21(body, "modelBaseUrl") ?? readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0;
+    const modelApiMode = readString21(body, "model_api_mode") ?? readString21(body, "modelApiMode") ?? readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0;
+    const rawReasoningEffort = readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? readString21(body, "default_reasoning_effort") ?? readString21(body, "defaultReasoningEffort");
     const reasoningEffort = normalizeReasoningEffort(rawReasoningEffort);
     if (rawReasoningEffort && !reasoningEffort) {
       throw new LinkHttpError(
@@ -31174,7 +32409,7 @@ function registerConversationRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const title = readString20(body, "title") ?? readString20(body, "name") ?? readString20(body, "display_name");
+    const title = readString21(body, "title") ?? readString21(body, "name") ?? readString21(body, "display_name");
     if (!title) {
       throw new LinkHttpError(400, "title_required", "title is required");
     }
@@ -31366,7 +32601,7 @@ function registerConversationRoutes(router, options) {
     async (ctx) => {
       await authenticateRequest(ctx, paths);
       const body = await readJsonBody(ctx.req);
-      const scope = readString20(body, "scope") ?? "always";
+      const scope = readString21(body, "scope") ?? "always";
       ctx.body = {
         ok: true,
         ...await conversations.resolveApproval({
@@ -31416,7 +32651,7 @@ function registerConversationRoutes(router, options) {
           conversationId: ctx.params.conversationId,
           requestId: ctx.params.requestId,
           kind,
-          answer: readString20(body, "answer") ?? void 0,
+          answer: readString21(body, "answer") ?? void 0,
           password: readRawString(body, "password"),
           value: readRawString(body, "value")
         })
@@ -31578,10 +32813,10 @@ function readConversationWorkspaceFilter(query) {
 }
 function readConversationWorkspaceId(body) {
   if (Object.prototype.hasOwnProperty.call(body, "workspace_id") || Object.prototype.hasOwnProperty.call(body, "workspaceId")) {
-    return readString20(body, "workspace_id") ?? readString20(body, "workspaceId");
+    return readString21(body, "workspace_id") ?? readString21(body, "workspaceId");
   }
   if (Object.prototype.hasOwnProperty.call(body, "workspace")) {
-    return readString20(body, "workspace");
+    return readString21(body, "workspace");
   }
   return void 0;
 }
@@ -31675,7 +32910,7 @@ function resolveConversationEventCursor(input) {
   return Math.max(queryAfter, headerAfter);
 }
 function readConversationClearPlanTargetStatus(body) {
-  const raw = readString20(body, "target_status") ?? readString20(body, "targetStatus") ?? "active";
+  const raw = readString21(body, "target_status") ?? readString21(body, "targetStatus") ?? "active";
   if (raw === "active" || raw === "archived") {
     return raw;
   }
@@ -31686,7 +32921,7 @@ function readConversationClearPlanTargetStatus(body) {
   );
 }
 function readInputRequestKind2(body) {
-  const kind = readString20(body, "kind") ?? readString20(body, "type");
+  const kind = readString21(body, "kind") ?? readString21(body, "type");
   if (kind === "clarify" || kind === "sudo" || kind === "secret") {
     return kind;
   }
@@ -32084,7 +33319,7 @@ function toHermesCronJobInput(input) {
   };
 }
 async function bindAndDecorateCronJobForHermesLink(input) {
-  const jobId = readString20(input.job, "id") ?? readString20(input.job, "job_id");
+  const jobId = readString21(input.job, "id") ?? readString21(input.job, "job_id");
   if (!jobId) {
     return input.job;
   }
@@ -32103,9 +33338,9 @@ async function bindAndDecorateCronJobForHermesLink(input) {
 }
 function readCronJobCreateInput(body) {
   const input = {};
-  const name = readString20(body, "name") ?? readString20(body, "title");
-  const prompt = readString20(body, "prompt") ?? readString20(body, "description") ?? readString20(body, "task");
-  const schedule = readString20(body, "schedule");
+  const name = readString21(body, "name") ?? readString21(body, "title");
+  const prompt = readString21(body, "prompt") ?? readString21(body, "description") ?? readString21(body, "task");
+  const schedule = readString21(body, "schedule");
   if (!name) {
     throw new LinkHttpError(400, "cron_job_name_required", "name is required");
   }
@@ -32126,7 +33361,7 @@ function readCronJobCreateInput(body) {
   input.name = name;
   input.prompt = prompt;
   input.schedule = schedule;
-  input.deliver = readString20(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
+  input.deliver = readString21(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
   const skills = readOptionalCronSkills(body);
   if (skills) {
     input.skills = skills;
@@ -32254,111 +33489,7 @@ function assertCronJobId(jobId) {
 }
 
 // src/http/routes/model-configs.ts
-import { createHash as createHash9 } from "crypto";
-
-// src/hermes/model-provider-disconnects.ts
-import { stat as stat17 } from "fs/promises";
-import os6 from "os";
-import path26 from "path";
-async function markAuthBackedModelProviderDisconnected(paths, profileName, providerKey) {
-  const profileKey = normalizeProfileName6(profileName);
-  const provider = providerKey.trim();
-  if (!provider) {
-    return;
-  }
-  const credentialMtimeMs = await readProviderCredentialMtimeMs(
-    profileKey,
-    provider
-  );
-  await updateJsonFile(
-    disconnectedProvidersPath(paths),
-    (current) => {
-      const store = normalizeStore(current);
-      const profiles = { ...store.profiles ?? {} };
-      const profile = profiles[profileKey] ?? {};
-      profiles[profileKey] = {
-        ...profile,
-        providers: {
-          ...profile.providers ?? {},
-          [provider]: {
-            disconnectedAt: (/* @__PURE__ */ new Date()).toISOString(),
-            credentialMtimeMs
-          }
-        }
-      };
-      return { ...store, profiles };
-    }
-  );
-}
-async function readDisconnectedAuthBackedModelProviderKeys(paths, profileName) {
-  const store = normalizeStore(
-    await readJsonFile(
-      disconnectedProvidersPath(paths)
-    ).catch(() => null)
-  );
-  const profile = store.profiles?.[normalizeProfileName6(profileName)];
-  const providers = profile?.providers ?? {};
-  const active = /* @__PURE__ */ new Set();
-  for (const [provider, entry] of Object.entries(providers)) {
-    if (await isDisconnectMarkerActive(profileName, provider, entry)) {
-      active.add(provider);
-    }
-  }
-  return active;
-}
-async function isDisconnectMarkerActive(profileName, providerKey, entry) {
-  const currentMtimeMs = await readProviderCredentialMtimeMs(
-    profileName,
-    providerKey
-  );
-  if (entry.credentialMtimeMs === null || !Number.isFinite(entry.credentialMtimeMs)) {
-    return currentMtimeMs === null;
-  }
-  if (currentMtimeMs === null || !Number.isFinite(currentMtimeMs)) {
-    return true;
-  }
-  return currentMtimeMs <= entry.credentialMtimeMs + 1e3;
-}
-async function readProviderCredentialMtimeMs(profileName, providerKey) {
-  for (const filePath of credentialFilesForProvider(profileName, providerKey)) {
-    const stats = await stat17(filePath).catch((error) => {
-      if (isNodeError18(error, "ENOENT")) {
-        return null;
-      }
-      throw error;
-    });
-    if (stats) {
-      return stats.mtimeMs;
-    }
-  }
-  return null;
-}
-function credentialFilesForProvider(profileName, providerKey) {
-  const profileDir = resolveHermesProfileDir(normalizeProfileName6(profileName));
-  switch (providerKey) {
-    case "qwen-oauth":
-      return [path26.join(os6.homedir(), ".qwen", "oauth_creds.json")];
-    case "google-gemini-cli":
-      return [path26.join(profileDir, "auth", "google_oauth.json")];
-    default:
-      return [path26.join(profileDir, "auth.json")];
-  }
-}
-function disconnectedProvidersPath(paths) {
-  return path26.join(paths.homeDir, "model-provider-disconnects.json");
-}
-function normalizeStore(value) {
-  return {
-    version: 1,
-    profiles: value?.profiles && typeof value.profiles === "object" ? value.profiles : {}
-  };
-}
-function normalizeProfileName6(profileName) {
-  return profileName.trim() || "default";
-}
-function isNodeError18(error, code) {
-  return typeof error === "object" && error !== null && "code" in error && error.code === code;
-}
+import { createHash as createHash10 } from "crypto";
 
 // src/model-catalog/catalog.ts
 import { randomInt } from "crypto";
@@ -32594,7 +33725,7 @@ function normalizeModelCapabilityCatalog(value) {
   const models = rawModels.map(normalizeModelCapabilityEntry).filter((entry) => entry !== null);
   return {
     schemaVersion: readPositiveInteger3(record.schemaVersion) ?? 1,
-    updatedAt: readString21(record.updatedAt),
+    updatedAt: readString22(record.updatedAt),
     models
   };
 }
@@ -32603,7 +33734,7 @@ function normalizeModelCapabilityEntry(value) {
     return null;
   }
   const record = value;
-  const canonicalId = readString21(record.canonicalId) ?? readString21(record.canonical_id) ?? readString21(record.id);
+  const canonicalId = readString22(record.canonicalId) ?? readString22(record.canonical_id) ?? readString22(record.id);
   if (!canonicalId) {
     return null;
   }
@@ -32631,12 +33762,12 @@ function normalizeModelCapabilityEntry(value) {
     outputModalities: readStringArray2(
       record.outputModalities ?? record.output_modalities
     ),
-    source: readString21(record.source),
-    updatedAt: readString21(record.updatedAt ?? record.updated_at),
-    notes: readString21(record.notes)
+    source: readString22(record.source),
+    updatedAt: readString22(record.updatedAt ?? record.updated_at),
+    notes: readString22(record.notes)
   };
 }
-function readString21(value) {
+function readString22(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readStringArray2(value) {
@@ -32646,7 +33777,7 @@ function readStringArray2(value) {
   const seen = /* @__PURE__ */ new Set();
   const values = [];
   for (const item of value) {
-    const text = readString21(item);
+    const text = readString22(item);
     if (!text || seen.has(text)) {
       continue;
     }
@@ -32663,7 +33794,7 @@ function readPositiveInteger3(value) {
   return Math.floor(number);
 }
 function readReasoningSupportPolicy(value) {
-  const normalized = readString21(value)?.toLowerCase();
+  const normalized = readString22(value)?.toLowerCase();
   if (!normalized || normalized === "unknown" || normalized === "auto") {
     return null;
   }
@@ -32694,7 +33825,7 @@ function readNullableBoolean(value) {
   if (typeof value === "boolean") {
     return value;
   }
-  const normalized = readString21(value)?.toLowerCase();
+  const normalized = readString22(value)?.toLowerCase();
   if (!normalized) {
     return null;
   }
@@ -32747,6 +33878,43 @@ async function reloadGatewayAfterProfileModelConfigChange(result, options) {
     label: "\u6A21\u578B\u914D\u7F6E"
   });
 }
+async function refreshRuntimeAfterModelConfigChange(result, options) {
+  const profileName = options.profileName?.trim() || "default";
+  const label = options.label ?? "\u6A21\u578B\u914D\u7F6E";
+  if (resolveConversationRunBackend() !== "tui_gateway") {
+    return profileName === "default" ? reloadGatewayAfterModelConfigChange(result, options) : reloadGatewayAfterProfileModelConfigChange(result, {
+      ...options,
+      profileName
+    });
+  }
+  try {
+    await restartTuiGatewayBackend({
+      profileName,
+      reason: "model_config_changed",
+      logger: options.logger,
+      paths: options.paths
+    });
+    return {
+      ...result,
+      tuiGatewayRestarted: true,
+      requiresGatewayReload: false,
+      restartHint: `${label}\u5DF2\u4FDD\u5B58\uFF0C${profileName} Profile \u7684 tui_gateway \u5DF2\u91CD\u542F\u3002\u65B0\u7684 Run \u4F1A\u8BFB\u53D6\u6700\u65B0\u914D\u7F6E\u3002`
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    await options.logger.warn("tui_gateway_restart_after_model_config_failed", {
+      profile: profileName,
+      error: message
+    });
+    return {
+      ...result,
+      tuiGatewayRestarted: false,
+      reloadError: message,
+      requiresGatewayReload: true,
+      restartHint: `${label}\u5DF2\u4FDD\u5B58\uFF0C\u4F46 ${profileName} Profile \u7684 tui_gateway \u81EA\u52A8\u91CD\u542F\u5931\u8D25\uFF1A${message}`
+    };
+  }
+}
 async function reloadGatewayAfterProfileConfigChange(result, options) {
   try {
     await reloadHermesGateway({
@@ -32793,7 +33961,7 @@ function registerModelConfigRoutes(router, options) {
   router.get("/api/v1/model-configs", async (ctx) => {
     await authenticateRequest(ctx, paths);
     ctx.set("cache-control", "no-store");
-    ctx.body = await listHermesModelConfigs();
+    ctx.body = await listVisibleHermesModelConfigs("default", paths);
   });
   router.get("/api/v1/model-configs/catalog", async (ctx) => {
     await authenticateRequest(ctx, paths);
@@ -32831,8 +33999,16 @@ function registerModelConfigRoutes(router, options) {
         readModelProviderConfigInput(body),
         ctx.params.name
       );
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
+        paths,
+        logger,
+        profileName: ctx.params.name,
+        label: "\u6A21\u578B Provider \u914D\u7F6E"
+      }) : markModelConfigAppliedWithoutGatewayReload(result);
       ctx.body = await enrichProviderModelConfigResult(
-        markModelConfigAppliedWithoutGatewayReload(result),
+        applied,
         ctx.params.name,
         paths
       );
@@ -32865,8 +34041,16 @@ function registerModelConfigRoutes(router, options) {
         body,
         paths
       );
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
+        paths,
+        logger,
+        profileName: ctx.params.name,
+        label: "\u6A21\u578B Provider \u914D\u7F6E"
+      }) : markModelConfigAppliedWithoutGatewayReload(result);
       ctx.body = await enrichProviderModelConfigResult(
-        markModelConfigAppliedWithoutGatewayReload(result),
+        applied,
         ctx.params.name,
         paths
       );
@@ -32947,8 +34131,16 @@ function registerModelConfigRoutes(router, options) {
           },
           ctx.params.name
         );
+        const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+          defaultReload: true
+        }) ? await refreshRuntimeAfterModelConfigChange(result, {
+          paths,
+          logger,
+          profileName: ctx.params.name,
+          label: "\u6A21\u578B Provider \u914D\u7F6E"
+        }) : markModelConfigAppliedWithoutGatewayReload(result);
         ctx.body = await enrichProviderModelConfigResult(
-          markModelConfigAppliedWithoutGatewayReload(result),
+          applied,
           ctx.params.name,
           paths
         );
@@ -32980,8 +34172,14 @@ function registerModelConfigRoutes(router, options) {
           provider.providerKey,
           ctx.params.name
         );
+        const applied = await refreshRuntimeAfterModelConfigChange(result, {
+          paths,
+          logger,
+          profileName: ctx.params.name,
+          label: "\u6A21\u578B Provider \u914D\u7F6E"
+        });
         ctx.body = await enrichProviderModelConfigResult(
-          markModelConfigAppliedWithoutGatewayReload(result),
+          applied,
           ctx.params.name,
           paths
         );
@@ -32999,7 +34197,12 @@ function registerModelConfigRoutes(router, options) {
         );
       }
       ctx.body = latest ? await enrichProviderModelConfigResult(
-        markModelConfigAppliedWithoutGatewayReload(latest),
+        await refreshRuntimeAfterModelConfigChange(latest, {
+          paths,
+          logger,
+          profileName: ctx.params.name,
+          label: "\u6A21\u578B Provider \u914D\u7F6E"
+        }),
         ctx.params.name,
         paths
       ) : await listModelProviderResponse(ctx.params.name, paths);
@@ -33012,7 +34215,7 @@ function registerModelConfigRoutes(router, options) {
       const result = await saveHermesModelConfig(readModelConfigInput(body));
       const applied = shouldReloadGatewayAfterModelConfigChange(body, {
         defaultReload: true
-      }) ? await reloadGatewayAfterModelConfigChange(result, {
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger
       }) : markModelConfigAppliedWithoutGatewayReload(result);
@@ -33028,8 +34231,10 @@ function registerModelConfigRoutes(router, options) {
   router.patch("/api/v1/model-configs/defaults", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
+    const input = readModelDefaultsInput(body);
     try {
-      const result = await saveHermesModelDefaults(readModelDefaultsInput(body));
+      await assertModelDefaultsSelectable(input, "default", paths);
+      const result = await saveHermesModelDefaults(input);
       ctx.body = await enrichProviderModelConfigResult(result, "default", paths);
     } catch (error) {
       throw toModelConfigHttpError(error);
@@ -33041,7 +34246,9 @@ function registerModelConfigRoutes(router, options) {
     const input = readModelDeleteInput(body);
     try {
       const result = await deleteHermesModelConfig(input);
-      const applied = shouldReloadGatewayAfterModelConfigChange(body) ? await reloadGatewayAfterModelConfigChange(result, {
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger
       }) : markModelConfigAppliedWithoutGatewayReload(result);
@@ -33058,7 +34265,7 @@ function registerModelConfigRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     await getHermesProfileStatus(ctx.params.name, paths);
     ctx.set("cache-control", "no-store");
-    ctx.body = await listHermesModelConfigs(ctx.params.name);
+    ctx.body = await listVisibleHermesModelConfigs(ctx.params.name, paths);
   });
   router.post("/api/v1/profiles/:name/model-configs", async (ctx) => {
     await authenticateRequest(ctx, paths);
@@ -33071,7 +34278,7 @@ function registerModelConfigRoutes(router, options) {
       );
       const applied = shouldReloadGatewayAfterModelConfigChange(body, {
         defaultReload: true
-      }) ? await reloadGatewayAfterProfileModelConfigChange(result, {
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger,
         profileName: ctx.params.name
@@ -33093,7 +34300,9 @@ function registerModelConfigRoutes(router, options) {
     await getHermesProfileStatus(input.sourceProfileName, paths);
     try {
       const result = await importHermesModelConfig(input, ctx.params.name);
-      const applied = shouldReloadGatewayAfterModelConfigChange(body) ? await reloadGatewayAfterProfileModelConfigChange(result, {
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger,
         profileName: ctx.params.name
@@ -33111,11 +34320,10 @@ function registerModelConfigRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     await getHermesProfileStatus(ctx.params.name, paths);
     const body = await readJsonBody(ctx.req);
+    const input = readModelDefaultsInput(body);
     try {
-      const result = await saveHermesModelDefaults(
-        readModelDefaultsInput(body),
-        ctx.params.name
-      );
+      await assertModelDefaultsSelectable(input, ctx.params.name, paths);
+      const result = await saveHermesModelDefaults(input, ctx.params.name);
       ctx.body = await enrichProviderModelConfigResult(
         result,
         ctx.params.name,
@@ -33132,7 +34340,9 @@ function registerModelConfigRoutes(router, options) {
     const input = readModelDeleteInput(body);
     try {
       const result = await deleteHermesModelConfig(input, ctx.params.name);
-      const applied = shouldReloadGatewayAfterModelConfigChange(body) ? await reloadGatewayAfterProfileModelConfigChange(result, {
+      const applied = shouldReloadGatewayAfterModelConfigChange(body, {
+        defaultReload: true
+      }) ? await refreshRuntimeAfterModelConfigChange(result, {
         paths,
         logger,
         profileName: ctx.params.name
@@ -33148,7 +34358,7 @@ function registerModelConfigRoutes(router, options) {
   });
 }
 async function listModelProviderResponse(profileName, paths, options = {}) {
-  const configs = await listHermesModelConfigs(profileName);
+  const configs = options.includeDisconnected ? await listHermesModelConfigs(profileName) : await listVisibleHermesModelConfigs(profileName, paths);
   const providerConfigs = await listHermesModelProviderConfigs(profileName);
   const catalog = await readModelCapabilityCatalog(paths);
   const providers = groupManagedModelsByProvider(
@@ -33172,6 +34382,92 @@ async function listModelProviderResponse(profileName, paths, options = {}) {
     providers: visibleProviders
   };
 }
+async function listVisibleHermesModelConfigs(profileName, paths) {
+  const configs = await listHermesModelConfigs(profileName);
+  const disconnectedProviders = await readDisconnectedAuthBackedModelProviderKeys(
+    paths,
+    profileName
+  );
+  return filterHermesModelConfigsByProviderKeys(configs, disconnectedProviders);
+}
+async function assertModelDefaultsSelectable(input, profileName, paths) {
+  const disconnectedProviders = await readDisconnectedAuthBackedModelProviderKeys(
+    paths,
+    profileName
+  );
+  assertProviderNotDisconnected(
+    disconnectedProviders,
+    input.taskModelProvider,
+    "task model"
+  );
+  assertProviderNotDisconnected(
+    disconnectedProviders,
+    input.compressionModelProvider,
+    "compression model"
+  );
+  if (disconnectedProviders.size === 0 || !input.taskModelId && !input.compressionModelId) {
+    return;
+  }
+  const allConfigs = await listHermesModelConfigs(profileName);
+  assertModelIdNotHiddenByDisconnect(allConfigs.models, disconnectedProviders, {
+    id: input.taskModelId,
+    provider: input.taskModelProvider,
+    baseUrl: input.taskModelBaseUrl,
+    apiMode: input.taskModelApiMode,
+    label: "task model"
+  });
+  assertModelIdNotHiddenByDisconnect(allConfigs.models, disconnectedProviders, {
+    id: input.compressionModelId,
+    provider: input.compressionModelProvider,
+    baseUrl: input.compressionModelBaseUrl,
+    apiMode: input.compressionModelApiMode,
+    label: "compression model"
+  });
+}
+function assertProviderNotDisconnected(disconnectedProviders, provider, label) {
+  if (provider && disconnectedProviders.has(provider)) {
+    throw new LinkHttpError(
+      409,
+      "model_provider_disconnected",
+      `The ${label} provider "${provider}" has been disconnected from this Profile.`
+    );
+  }
+}
+function assertModelIdNotHiddenByDisconnect(models, disconnectedProviders, selector) {
+  const id = selector.id?.trim();
+  if (!id) {
+    return;
+  }
+  const matchingModels = models.filter((model) => {
+    if (model.id !== id) {
+      return false;
+    }
+    if (selector.provider && model.provider !== selector.provider) {
+      return false;
+    }
+    if (selector.baseUrl !== void 0 && normalizeUrlForIdentity(model.baseUrl) !== normalizeUrlForIdentity(selector.baseUrl)) {
+      return false;
+    }
+    if (selector.apiMode && model.apiMode !== selector.apiMode) {
+      return false;
+    }
+    return true;
+  });
+  if (matchingModels.some((model) => !disconnectedProviders.has(model.provider))) {
+    return;
+  }
+  const hiddenMatch = matchingModels.find(
+    (model) => disconnectedProviders.has(model.provider)
+  );
+  if (!hiddenMatch) {
+    return;
+  }
+  throw new LinkHttpError(
+    409,
+    "model_provider_disconnected",
+    `The ${selector.label} "${id}" belongs to disconnected provider "${hiddenMatch.provider}".`
+  );
+}
 async function enrichProviderModelConfigResult(result, profileName, paths) {
   const providerResponse = await listModelProviderResponse(profileName, paths);
   return {
@@ -33422,7 +34718,7 @@ function modelProviderIdFromParts(input) {
     input.keyEnv ?? "",
     input.authType ?? ""
   ].join("");
-  return `mp_${createHash9("sha256").update(identity).digest("hex").slice(0, 18)}`;
+  return `mp_${createHash10("sha256").update(identity).digest("hex").slice(0, 18)}`;
 }
 function mergeCredentialState(left, right) {
   if (left === "configured" || right === "configured") {
@@ -33678,8 +34974,8 @@ function normalizeUrlForIdentity(value) {
   return value.trim().replace(/\/+$/u, "").toLowerCase();
 }
 function readModelProviderConfigInput(body) {
-  const providerName = readString20(body, "display_name") ?? readString20(body, "displayName") ?? readString20(body, "provider_name") ?? readString20(body, "providerName") ?? readString20(body, "name");
-  const baseUrl = readString20(body, "base_url") ?? readString20(body, "baseUrl");
+  const providerName = readString21(body, "display_name") ?? readString21(body, "displayName") ?? readString21(body, "provider_name") ?? readString21(body, "providerName") ?? readString21(body, "name");
+  const baseUrl = readString21(body, "base_url") ?? readString21(body, "baseUrl");
   if (!providerName || !baseUrl) {
     throw new LinkHttpError(
       400,
@@ -33690,15 +34986,15 @@ function readModelProviderConfigInput(body) {
   return {
     providerName,
     baseUrl,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? readString20(body, "transport") ?? void 0,
-    keyEnv: readString20(body, "key_env") ?? readString20(body, "keyEnv") ?? void 0,
-    apiKey: readString20(body, "api_key") ?? readString20(body, "apiKey") ?? void 0
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? readString21(body, "transport") ?? void 0,
+    keyEnv: readString21(body, "key_env") ?? readString21(body, "keyEnv") ?? void 0,
+    apiKey: readString21(body, "api_key") ?? readString21(body, "apiKey") ?? void 0
   };
 }
 function readModelConfigInput(body) {
-  const id = readString20(body, "id") ?? readString20(body, "model_id") ?? readString20(body, "modelId");
-  const provider = readString20(body, "provider") ?? readString20(body, "provider_key") ?? readString20(body, "providerKey");
-  const baseUrl = readString20(body, "base_url") ?? readString20(body, "baseUrl");
+  const id = readString21(body, "id") ?? readString21(body, "model_id") ?? readString21(body, "modelId");
+  const provider = readString21(body, "provider") ?? readString21(body, "provider_key") ?? readString21(body, "providerKey");
+  const baseUrl = readString21(body, "base_url") ?? readString21(body, "baseUrl");
   if (!id || !provider || !baseUrl) {
     throw new LinkHttpError(
       400,
@@ -33708,22 +35004,22 @@ function readModelConfigInput(body) {
   }
   return {
     id,
-    originalModelId: readString20(body, "original_model_id") ?? readString20(body, "originalModelId") ?? readString20(body, "original_id") ?? void 0,
-    originalProvider: readString20(body, "original_provider") ?? readString20(body, "originalProvider") ?? readString20(body, "original_provider_key") ?? readString20(body, "originalProviderKey") ?? void 0,
-    originalBaseUrl: readString20(body, "original_base_url") ?? readString20(body, "originalBaseUrl") ?? void 0,
-    originalApiMode: readString20(body, "original_api_mode") ?? readString20(body, "originalApiMode") ?? void 0,
+    originalModelId: readString21(body, "original_model_id") ?? readString21(body, "originalModelId") ?? readString21(body, "original_id") ?? void 0,
+    originalProvider: readString21(body, "original_provider") ?? readString21(body, "originalProvider") ?? readString21(body, "original_provider_key") ?? readString21(body, "originalProviderKey") ?? void 0,
+    originalBaseUrl: readString21(body, "original_base_url") ?? readString21(body, "originalBaseUrl") ?? void 0,
+    originalApiMode: readString21(body, "original_api_mode") ?? readString21(body, "originalApiMode") ?? void 0,
     provider,
-    providerName: readString20(body, "provider_name") ?? readString20(body, "providerName") ?? void 0,
+    providerName: readString21(body, "provider_name") ?? readString21(body, "providerName") ?? void 0,
     baseUrl,
-    apiKey: readString20(body, "api_key") ?? readString20(body, "apiKey") ?? void 0,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0,
+    apiKey: readString21(body, "api_key") ?? readString21(body, "apiKey") ?? void 0,
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0,
     contextLength: readPositiveInteger2(
       body.context_length ?? body.contextLength
     ),
-    keyEnv: readString20(body, "key_env") ?? readString20(body, "keyEnv") ?? void 0,
+    keyEnv: readString21(body, "key_env") ?? readString21(body, "keyEnv") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault),
-    reasoningEffort: readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? void 0,
-    reasoningSupportPolicy: readString20(body, "reasoning_support_policy") ?? readString20(body, "reasoningSupportPolicy") ?? readString20(body, "reasoning_support") ?? readString20(body, "reasoningSupport") ?? void 0,
+    reasoningEffort: readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? void 0,
+    reasoningSupportPolicy: readString21(body, "reasoning_support_policy") ?? readString21(body, "reasoningSupportPolicy") ?? readString21(body, "reasoning_support") ?? readString21(body, "reasoningSupport") ?? void 0,
     supportsVision: readNullableBoolean2(
       body.supports_vision ?? body.supportsVision
     )
@@ -33731,28 +35027,28 @@ function readModelConfigInput(body) {
 }
 function readModelDefaultsInput(body) {
   return {
-    taskModelId: readString20(body, "task_model_id") ?? readString20(body, "taskModelId") ?? readString20(body, "default_model_id") ?? readString20(body, "defaultModelId") ?? void 0,
-    taskModelProvider: readString20(body, "task_model_provider") ?? readString20(body, "taskModelProvider") ?? readString20(body, "default_model_provider") ?? readString20(body, "defaultModelProvider") ?? void 0,
-    taskModelBaseUrl: readString20(body, "task_model_base_url") ?? readString20(body, "taskModelBaseUrl") ?? readString20(body, "default_model_base_url") ?? readString20(body, "defaultModelBaseUrl") ?? void 0,
-    taskModelApiMode: readString20(body, "task_model_api_mode") ?? readString20(body, "taskModelApiMode") ?? readString20(body, "default_model_api_mode") ?? readString20(body, "defaultModelApiMode") ?? void 0,
-    compressionModelId: readString20(body, "compression_model_id") ?? readString20(body, "compressionModelId") ?? void 0,
-    compressionModelProvider: readString20(body, "compression_model_provider") ?? readString20(body, "compressionModelProvider") ?? void 0,
-    compressionModelBaseUrl: readString20(body, "compression_model_base_url") ?? readString20(body, "compressionModelBaseUrl") ?? void 0,
-    compressionModelApiMode: readString20(body, "compression_model_api_mode") ?? readString20(body, "compressionModelApiMode") ?? void 0,
-    reasoningEffort: readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? readString20(body, "default_reasoning_effort") ?? readString20(body, "defaultReasoningEffort") ?? void 0,
-    imageInputMode: readString20(body, "image_input_mode") ?? readString20(body, "imageInputMode") ?? void 0
+    taskModelId: readString21(body, "task_model_id") ?? readString21(body, "taskModelId") ?? readString21(body, "default_model_id") ?? readString21(body, "defaultModelId") ?? void 0,
+    taskModelProvider: readString21(body, "task_model_provider") ?? readString21(body, "taskModelProvider") ?? readString21(body, "default_model_provider") ?? readString21(body, "defaultModelProvider") ?? void 0,
+    taskModelBaseUrl: readString21(body, "task_model_base_url") ?? readString21(body, "taskModelBaseUrl") ?? readString21(body, "default_model_base_url") ?? readString21(body, "defaultModelBaseUrl") ?? void 0,
+    taskModelApiMode: readString21(body, "task_model_api_mode") ?? readString21(body, "taskModelApiMode") ?? readString21(body, "default_model_api_mode") ?? readString21(body, "defaultModelApiMode") ?? void 0,
+    compressionModelId: readString21(body, "compression_model_id") ?? readString21(body, "compressionModelId") ?? void 0,
+    compressionModelProvider: readString21(body, "compression_model_provider") ?? readString21(body, "compressionModelProvider") ?? void 0,
+    compressionModelBaseUrl: readString21(body, "compression_model_base_url") ?? readString21(body, "compressionModelBaseUrl") ?? void 0,
+    compressionModelApiMode: readString21(body, "compression_model_api_mode") ?? readString21(body, "compressionModelApiMode") ?? void 0,
+    reasoningEffort: readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? readString21(body, "default_reasoning_effort") ?? readString21(body, "defaultReasoningEffort") ?? void 0,
+    imageInputMode: readString21(body, "image_input_mode") ?? readString21(body, "imageInputMode") ?? void 0
   };
 }
 function readModelDeleteInput(body) {
-  const id = readString20(body, "model_id") ?? readString20(body, "modelId");
+  const id = readString21(body, "model_id") ?? readString21(body, "modelId");
   if (!id) {
     throw new LinkHttpError(400, "model_id_required", "model_id is required");
   }
   return {
     id,
-    provider: readString20(body, "provider") ?? readString20(body, "provider_key") ?? readString20(body, "providerKey") ?? void 0,
-    baseUrl: readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0
+    provider: readString21(body, "provider") ?? readString21(body, "provider_key") ?? readString21(body, "providerKey") ?? void 0,
+    baseUrl: readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0,
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0
   };
 }
 function readNullableBoolean2(value) {
@@ -33775,8 +35071,8 @@ function readNullableBoolean2(value) {
   return void 0;
 }
 function readModelConfigImportInput(body) {
-  const sourceProfileName = readString20(body, "source_profile") ?? readString20(body, "sourceProfile") ?? readString20(body, "source_profile_name") ?? readString20(body, "sourceProfileName");
-  const modelId = readString20(body, "model_id") ?? readString20(body, "modelId") ?? readString20(body, "id");
+  const sourceProfileName = readString21(body, "source_profile") ?? readString21(body, "sourceProfile") ?? readString21(body, "source_profile_name") ?? readString21(body, "sourceProfileName");
+  const modelId = readString21(body, "model_id") ?? readString21(body, "modelId") ?? readString21(body, "id");
   if (!sourceProfileName || !modelId) {
     throw new LinkHttpError(
       400,
@@ -33787,9 +35083,9 @@ function readModelConfigImportInput(body) {
   return {
     sourceProfileName,
     modelId,
-    provider: readString20(body, "provider") ?? readString20(body, "provider_key") ?? readString20(body, "providerKey") ?? void 0,
-    baseUrl: readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0,
+    provider: readString21(body, "provider") ?? readString21(body, "provider_key") ?? readString21(body, "providerKey") ?? void 0,
+    baseUrl: readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0,
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault)
   };
 }
@@ -33830,12 +35126,12 @@ function registerProfileCatalogRoutes(router, options) {
       ok: true,
       generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
       profiles: await Promise.all(
-        profiles.map((profile) => readProfileCatalogItem(profile))
+        profiles.map((profile) => readProfileCatalogItem(profile, paths))
       )
     };
   });
 }
-async function readProfileCatalogItem(profile) {
+async function readProfileCatalogItem(profile, paths) {
   const [apiServer, capabilities, permissions, modelConfigs] = await Promise.all([
     readCatalogField(
       "apiServer",
@@ -33849,7 +35145,10 @@ async function readProfileCatalogItem(profile) {
       "permissions",
       () => readHermesProfilePermissions(profile.name)
     ),
-    readCatalogField("modelConfigs", () => listHermesModelConfigs(profile.name))
+    readCatalogField(
+      "modelConfigs",
+      () => listVisibleHermesModelConfigs2(profile.name, paths)
+    )
   ]);
   return {
     profile,
@@ -33870,6 +35169,14 @@ async function readProfileCatalogItem(profile) {
     ]
   };
 }
+async function listVisibleHermesModelConfigs2(profileName, paths) {
+  const configs = await listHermesModelConfigs(profileName);
+  const disconnectedProviders = await readDisconnectedAuthBackedModelProviderKeys(
+    paths,
+    profileName
+  );
+  return filterHermesModelConfigsByProviderKeys(configs, disconnectedProviders);
+}
 async function readCatalogField(field, load) {
   try {
     return { value: await load(), errors: [] };
@@ -35083,16 +36390,16 @@ function readProfilePermissionsInput(body) {
   const approvals = readOptionalObject(body, "approvals");
   if (approvals) {
     input.approvals = {
-      mode: readString20(approvals, "mode") ?? readString20(approvals, "approval_mode") ?? readString20(approvals, "approvalMode") ?? void 0,
+      mode: readString21(approvals, "mode") ?? readString21(approvals, "approval_mode") ?? readString21(approvals, "approvalMode") ?? void 0,
       timeout: readPositiveInteger2(approvals.timeout),
-      cronMode: readString20(approvals, "cron_mode") ?? readString20(approvals, "cronMode") ?? void 0
+      cronMode: readString21(approvals, "cron_mode") ?? readString21(approvals, "cronMode") ?? void 0
     };
   }
   const terminal = readOptionalObject(body, "terminal");
   if (terminal) {
     input.terminal = {
-      backend: readString20(terminal, "backend") ?? void 0,
-      cwd: readString20(terminal, "cwd") ?? void 0,
+      backend: readString21(terminal, "backend") ?? void 0,
+      cwd: readString21(terminal, "cwd") ?? void 0,
       containerCpu: readPositiveInteger2(
         terminal.container_cpu ?? terminal.containerCpu
       ),
@@ -35423,9 +36730,9 @@ async function testHindsightProviderSettings(profileName, patch) {
   const mode = normalizeHindsightMode(
     patch.mode ?? config.mode ?? env.HINDSIGHT_MODE
   );
-  const apiUrl = readString22(patch.apiUrl) ?? readString22(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
-  const bankId = readString22(patch.bankId) ?? readString22(config.bank_id) ?? "hermes";
-  const apiKey = readString22(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key);
+  const apiUrl = readString23(patch.apiUrl) ?? readString23(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
+  const bankId = readString23(patch.bankId) ?? readString23(config.bank_id) ?? "hermes";
+  const apiKey = readString23(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key);
   const baseUrl = normalizeHttpUrl2(apiUrl);
   if (!baseUrl) {
     return {
@@ -35959,7 +37266,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "honcho") ?? ""
     );
-    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString22(config2.apiKey)) || isConfiguredEnvValue(readString22(config2.api_key)) || isConfiguredEnvValue(readString22(config2.baseUrl)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString23(config2.apiKey)) || isConfiguredEnvValue(readString23(config2.api_key)) || isConfiguredEnvValue(readString23(config2.baseUrl)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Honcho \u9700\u8981\u5148\u586B\u5199 API Key\uFF0C\u6216\u5728 honcho.json \u914D\u7F6E self-hosted baseUrl\u3002"
     };
@@ -35968,7 +37275,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "mem0") ?? ""
     );
-    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString22(config2.api_key)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString23(config2.api_key)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Mem0 \u9700\u8981\u5148\u5728\u672C\u9875\u586B\u5199 API Key\uFF0CLink \u4F1A\u5199\u5165\u5F53\u524D Profile \u7684 .env\u3002"
     };
@@ -36010,7 +37317,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     memoryProviderConfigPath(profileName, provider) ?? ""
   );
   const mode = normalizeHindsightMode(config.mode ?? env.HINDSIGHT_MODE);
-  const apiKey = readString22(config.apiKey) ?? readString22(config.api_key) ?? env.HINDSIGHT_API_KEY;
+  const apiKey = readString23(config.apiKey) ?? readString23(config.api_key) ?? env.HINDSIGHT_API_KEY;
   if (mode === "cloud") {
     return isConfiguredEnvValue(apiKey) ? { configured: true, issue: null } : {
       configured: false,
@@ -36018,15 +37325,15 @@ async function readProviderConfigurationStatus(profileName, provider) {
     };
   }
   if (mode === "local_external") {
-    const apiUrl = readString22(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
+    const apiUrl = readString23(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
     return isConfiguredEnvValue(apiUrl) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Hindsight local_external \u9700\u8981\u914D\u7F6E\u53EF\u8BBF\u95EE\u7684 API URL\u3002"
     };
   }
   if (mode === "local_embedded") {
-    const llmProvider = readString22(config.llm_provider) ?? "openai";
-    const llmModel = readString22(config.llm_model);
+    const llmProvider = readString23(config.llm_provider) ?? "openai";
+    const llmModel = readString23(config.llm_model);
     if (!llmModel) {
       return {
         configured: false,
@@ -36034,7 +37341,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (llmProvider === "openai_compatible" && !isConfiguredEnvValue(
-      readString22(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
+      readString23(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
     )) {
       return {
         configured: false,
@@ -36042,7 +37349,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (!["ollama", "lmstudio", "openai_compatible"].includes(llmProvider) && !isConfiguredEnvValue(
-      readString22(config.llmApiKey) ?? readString22(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
+      readString23(config.llmApiKey) ?? readString23(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
     )) {
       return {
         configured: false,
@@ -36098,8 +37405,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.HONCHO_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key),
-        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString22(config.apiKey)) || isConfiguredEnvValue(readString22(config.api_key))
+        env.HONCHO_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key),
+        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString23(config.apiKey)) || isConfiguredEnvValue(readString23(config.api_key))
       ),
       stringSetting("workspace", "Workspace", config.workspace ?? "hermes"),
       stringSetting("peerName", "\u7528\u6237 Peer", config.peerName ?? ""),
@@ -36141,8 +37448,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.MEM0_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key),
-        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString22(config.apiKey)) || isConfiguredEnvValue(readString22(config.api_key))
+        env.MEM0_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key),
+        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString23(config.apiKey)) || isConfiguredEnvValue(readString23(config.api_key))
       ),
       stringSetting("userId", "User ID", config.user_id ?? "hermes-user"),
       stringSetting("agentId", "Agent ID", config.agent_id ?? "hermes"),
@@ -36227,8 +37534,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "Hindsight API Key",
-        env.HINDSIGHT_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString22(config.apiKey)) || isConfiguredEnvValue(readString22(config.api_key))
+        env.HINDSIGHT_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString23(config.apiKey)) || isConfiguredEnvValue(readString23(config.api_key))
       ),
       stringSetting(
         "bankId",
@@ -36250,8 +37557,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "llmApiKey",
         "LLM API Key",
-        env.HINDSIGHT_LLM_API_KEY ?? readString22(config.llmApiKey) ?? readString22(config.llm_api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString22(config.llmApiKey)) || isConfiguredEnvValue(readString22(config.llm_api_key))
+        env.HINDSIGHT_LLM_API_KEY ?? readString23(config.llmApiKey) ?? readString23(config.llm_api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString23(config.llmApiKey)) || isConfiguredEnvValue(readString23(config.llm_api_key))
       ),
       booleanSetting("autoRecall", "\u81EA\u52A8\u56DE\u5FC6", config.auto_recall ?? true),
       booleanSetting("autoRetain", "\u81EA\u52A8\u6C89\u6DC0", config.auto_retain ?? true),
@@ -36370,11 +37677,11 @@ async function readCustomProviderRegistry(profileName) {
         return { id: id2, label: id2, description: "\u81EA\u5B9A\u4E49 memory provider\u3002" };
       }
       const record = toRecord21(item);
-      const id = normalizeCustomProviderId(readString22(record.id) ?? "");
+      const id = normalizeCustomProviderId(readString23(record.id) ?? "");
       return {
         id,
-        label: readString22(record.label) ?? id,
-        description: readString22(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+        label: readString23(record.label) ?? id,
+        description: readString23(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
       };
     }).filter((item) => item.id);
   } catch {
@@ -36423,8 +37730,8 @@ async function discoverUserMemoryProviderDescriptors(profileName) {
     const meta = await readPluginMetadata(providerDir);
     descriptors.push({
       id: providerId,
-      label: readString22(meta.name) ?? providerId,
-      description: readString22(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+      label: readString23(meta.name) ?? providerId,
+      description: readString23(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
     });
   }
   return descriptors;
@@ -36586,7 +37893,7 @@ function isMemoryEnvKeyWritable(key) {
   ].includes(key);
 }
 function normalizeHindsightMode(value) {
-  const mode = readString22(value) ?? "cloud";
+  const mode = readString23(value) ?? "cloud";
   return mode === "local" ? "local_embedded" : mode;
 }
 function normalizeHttpUrl2(value) {
@@ -36655,27 +37962,27 @@ function parseJsonObject2(text) {
   }
 }
 function readHindsightError(json) {
-  const detail = readString22(json.detail) ?? readString22(json.error);
+  const detail = readString23(json.detail) ?? readString23(json.error);
   return detail ? `\uFF1A${detail}` : "";
 }
 function hindsightSemanticIssue(pathName, json) {
   if (pathName === "/health") {
-    const status = readString22(json.status);
+    const status = readString23(json.status);
     return status && ["healthy", "ok"].includes(status.toLowerCase()) ? null : `\u5065\u5EB7\u72B6\u6001\u5F02\u5E38\uFF1A${status ?? "unknown"}`;
   }
   return null;
 }
 function summarizeHindsightProbe(pathName, json) {
   if (pathName === "/health") {
-    const status = readString22(json.status) ?? "ok";
-    const database = readString22(json.database);
+    const status = readString23(json.status) ?? "ok";
+    const database = readString23(json.database);
     return database ? `${status}, database ${database}` : status;
   }
   if (pathName === "/version") {
-    const version = readString22(json.api_version);
+    const version = readString23(json.api_version);
     return version ? `API ${version}` : "version endpoint reachable";
   }
-  const bankId = readString22(json.bank_id);
+  const bankId = readString23(json.bank_id);
   return bankId ? `bank ${bankId} reachable` : "bank config reachable";
 }
 async function readActiveMemoryProvider(profileName) {
@@ -36690,7 +37997,7 @@ async function readActiveMemoryProvider(profileName) {
   });
   const config = raw ? toRecord21(YAML6.parse(raw)) : {};
   const memory = toRecord21(config.memory);
-  const provider = readString22(memory.provider);
+  const provider = readString23(memory.provider);
   if (!provider || provider === "built-in" || provider === "builtin" || provider === "built_in") {
     return null;
   }
@@ -36747,7 +38054,7 @@ function stringSetting(key, label, value, editable = true) {
   return {
     key,
     label,
-    value: readString22(value) ?? "",
+    value: readString23(value) ?? "",
     editable,
     kind: "string"
   };
@@ -36759,7 +38066,7 @@ function secretSetting(key, label, value, configured) {
     value: "",
     editable: true,
     kind: "secret",
-    configured: configured || isConfiguredEnvValue(readString22(value))
+    configured: configured || isConfiguredEnvValue(readString23(value))
   };
 }
 function textSetting(key, label, value, editable = true) {
@@ -36772,7 +38079,7 @@ function textSetting(key, label, value, editable = true) {
   };
 }
 function selectSetting(key, label, value, options, editable = true) {
-  const stringValue = readString22(value) ?? options[0] ?? null;
+  const stringValue = readString23(value) ?? options[0] ?? null;
   return { key, label, value: stringValue, editable, kind: "select", options };
 }
 async function readMemoryLimits(profileName) {
@@ -36845,7 +38152,7 @@ function hashString(value) {
 function toRecord21(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
-function readString22(value) {
+function readString23(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readPositiveInteger4(value) {
@@ -37004,7 +38311,7 @@ function registerProfileMemoryRoutes(router, options) {
   );
 }
 function readMemoryTarget(body) {
-  const raw = readString20(body, "target");
+  const raw = readString21(body, "target");
   if (raw === "memory" || raw === "user") {
     return raw;
   }
@@ -37015,7 +38322,7 @@ function readMemoryTarget(body) {
   );
 }
 function readMemoryResetTarget(body) {
-  const raw = readString20(body, "target") ?? "all";
+  const raw = readString21(body, "target") ?? "all";
   if (raw === "all" || raw === "memory" || raw === "user") {
     return raw;
   }
@@ -37026,7 +38333,7 @@ function readMemoryResetTarget(body) {
   );
 }
 function readRequiredMemoryContent(body) {
-  const content = readString20(body, "content") ?? readString20(body, "text");
+  const content = readString21(body, "content") ?? readString21(body, "text");
   if (!content) {
     throw new LinkHttpError(
       400,
@@ -37037,7 +38344,7 @@ function readRequiredMemoryContent(body) {
   return content;
 }
 function readRequiredMemoryMatch(body) {
-  const oldText = readString20(body, "old_text") ?? readString20(body, "oldText") ?? readString20(body, "match");
+  const oldText = readString21(body, "old_text") ?? readString21(body, "oldText") ?? readString21(body, "match");
   if (!oldText) {
     throw new LinkHttpError(
       400,
@@ -37048,7 +38355,7 @@ function readRequiredMemoryMatch(body) {
   return oldText;
 }
 function readRequiredMemoryProvider(body) {
-  const provider = readString20(body, "provider") ?? readString20(body, "provider_id") ?? readString20(body, "providerId");
+  const provider = readString21(body, "provider") ?? readString21(body, "provider_id") ?? readString21(body, "providerId");
   if (!provider) {
     throw new LinkHttpError(
       400,
@@ -37078,7 +38385,7 @@ function readMemorySettingsPatch(body, options = {}) {
       input.userCharLimit = userCharLimit;
     }
   }
-  const mode = readString20(body, "mode");
+  const mode = readString21(body, "mode");
   if (mode) {
     input.mode = mode;
   }
@@ -37094,7 +38401,7 @@ function readMemorySettingsPatch(body, options = {}) {
   if (bankId !== void 0) {
     input.bankId = bankId;
   }
-  const llmProvider = readString20(body, "llm_provider") ?? readString20(body, "llmProvider");
+  const llmProvider = readString21(body, "llm_provider") ?? readString21(body, "llmProvider");
   if (llmProvider) {
     input.llmProvider = llmProvider;
   }
@@ -37130,11 +38437,11 @@ function readMemorySettingsPatch(body, options = {}) {
   if (autoRetain !== void 0) {
     input.autoRetain = autoRetain;
   }
-  const memoryMode = readString20(body, "memory_mode") ?? readString20(body, "memoryMode");
+  const memoryMode = readString21(body, "memory_mode") ?? readString21(body, "memoryMode");
   if (memoryMode) {
     input.memoryMode = memoryMode;
   }
-  const recallBudget = readString20(body, "recall_budget") ?? readString20(body, "recallBudget");
+  const recallBudget = readString21(body, "recall_budget") ?? readString21(body, "recallBudget");
   if (recallBudget) {
     input.recallBudget = recallBudget;
   }
@@ -37150,11 +38457,11 @@ function readMemorySettingsPatch(body, options = {}) {
   if (profileFrequency !== void 0) {
     input.profileFrequency = profileFrequency;
   }
-  const captureMode = readString20(body, "capture_mode") ?? readString20(body, "captureMode");
+  const captureMode = readString21(body, "capture_mode") ?? readString21(body, "captureMode");
   if (captureMode) {
     input.captureMode = captureMode;
   }
-  const searchMode = readString20(body, "search_mode") ?? readString20(body, "searchMode");
+  const searchMode = readString21(body, "search_mode") ?? readString21(body, "searchMode");
   if (searchMode) {
     input.searchMode = searchMode;
   }
@@ -37188,11 +38495,11 @@ function readMemorySettingsPatch(body, options = {}) {
   if (aiPeer !== void 0) {
     input.aiPeer = aiPeer;
   }
-  const recallMode = readString20(body, "recall_mode") ?? readString20(body, "recallMode");
+  const recallMode = readString21(body, "recall_mode") ?? readString21(body, "recallMode");
   if (recallMode) {
     input.recallMode = recallMode;
   }
-  const writeFrequency = readString20(body, "write_frequency") ?? readString20(body, "writeFrequency");
+  const writeFrequency = readString21(body, "write_frequency") ?? readString21(body, "writeFrequency");
   if (writeFrequency) {
     input.writeFrequency = writeFrequency;
   }
@@ -37200,7 +38507,7 @@ function readMemorySettingsPatch(body, options = {}) {
   if (saveMessages !== void 0) {
     input.saveMessages = saveMessages;
   }
-  const sessionStrategy = readString20(body, "session_strategy") ?? readString20(body, "sessionStrategy");
+  const sessionStrategy = readString21(body, "session_strategy") ?? readString21(body, "sessionStrategy");
   if (sessionStrategy) {
     input.sessionStrategy = sessionStrategy;
   }
@@ -37480,13 +38787,13 @@ async function readSkillMetadata(input) {
   const skillDir = path32.dirname(input.skillFile);
   const { frontmatter, body } = parseSkillDocument(raw.slice(0, 4e3));
   const name = normalizeSkillName(
-    readString23(frontmatter.name) ?? path32.basename(skillDir)
+    readString24(frontmatter.name) ?? path32.basename(skillDir)
   );
   if (!name) {
     return null;
   }
   const description = normalizeDescription(
-    readString23(frontmatter.description) ?? firstBodyDescription(body)
+    readString24(frontmatter.description) ?? firstBodyDescription(body)
   );
   const provenance = input.provenance.get(name) ?? {
     source: "local",
@@ -37613,8 +38920,8 @@ async function readHubInstalledSkills(root) {
   for (const [name, rawEntry] of Object.entries(installed2)) {
     const entry = toRecord22(rawEntry);
     result.set(normalizeSkillName(name), {
-      source: readString23(entry.source) ?? "hub",
-      trust: readString23(entry.trust_level) ?? null
+      source: readString24(entry.source) ?? "hub",
+      trust: readString24(entry.trust_level) ?? null
     });
   }
   return result;
@@ -37698,7 +39005,7 @@ function readStringList6(value) {
   }
   return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
 }
-function readString23(value) {
+function readString24(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function toRecord22(value) {
@@ -38070,7 +39377,7 @@ function registerRunRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const input = readString20(body, "input");
+    const input = readString21(body, "input");
     if (!input) {
       throw new LinkHttpError(400, "run_input_required", "input is required");
     }
@@ -38078,12 +39385,12 @@ function registerRunRoutes(router, options) {
     ctx.body = await createHermesRun(
       {
         input,
-        instructions: readString20(body, "instructions") ?? void 0,
+        instructions: readString21(body, "instructions") ?? void 0,
         conversation_history: readConversationHistory(
           body.conversation_history ?? body.conversationHistory
         ),
-        session_id: readString20(body, "session_id") ?? readString20(body, "sessionId") ?? void 0,
-        session_key: readString20(body, "session_key") ?? readString20(body, "sessionKey") ?? void 0
+        session_id: readString21(body, "session_id") ?? readString21(body, "sessionId") ?? void 0,
+        session_key: readString21(body, "session_key") ?? readString21(body, "sessionKey") ?? void 0
       },
       { logger, profileName: readOptionalProfileName(body), language }
     );
@@ -38496,20 +39803,20 @@ function normalizeServerReleaseSnapshot(payload) {
   const remote = toNullableRecord(snapshot.remote);
   return {
     remote: remote ? normalizeServerRelease(remote) : null,
-    cacheState: readString24(snapshot, "cache_state") ?? readString24(snapshot, "cacheState"),
-    issue: readString24(snapshot, "issue")
+    cacheState: readString25(snapshot, "cache_state") ?? readString25(snapshot, "cacheState"),
+    issue: readString25(snapshot, "issue")
   };
 }
 function normalizeServerRelease(payload) {
-  const tag = readString24(payload, "tag");
-  const name = readString24(payload, "name");
+  const tag = readString25(payload, "tag");
+  const name = readString25(payload, "name");
   return {
-    version: readString24(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
+    version: readString25(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
     tag,
     name,
-    releaseUrl: readString24(payload, "releaseUrl") ?? readString24(payload, "release_url"),
-    publishedAt: readString24(payload, "publishedAt") ?? readString24(payload, "published_at"),
-    fetchedAt: readString24(payload, "fetchedAt") ?? readString24(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
+    releaseUrl: readString25(payload, "releaseUrl") ?? readString25(payload, "release_url"),
+    publishedAt: readString25(payload, "publishedAt") ?? readString25(payload, "published_at"),
+    fetchedAt: readString25(payload, "fetchedAt") ?? readString25(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
   };
 }
 async function readReleaseCache(paths) {
@@ -38635,7 +39942,7 @@ function isRecentRunningState2(state) {
   const startedAt = Date.parse(state.started_at);
   return Number.isFinite(startedAt) && Date.now() - startedAt < 3e4;
 }
-function readString24(payload, key) {
+function readString25(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -38810,12 +40117,12 @@ async function fetchRelayStreamBatchPolicy(serverBaseUrl, options = {}) {
   }
 }
 function readRelayStreamBatchPolicy(input) {
-  const record = readRecord(input);
-  const body = readRecord(record?.policy) ?? readRecord(record?.stream_batching) ?? record;
+  const record = readRecord2(input);
+  const body = readRecord2(record?.policy) ?? readRecord2(record?.stream_batching) ?? record;
   return normalizeRelayStreamBatchPolicy(body);
 }
 function normalizeRelayStreamBatchPolicy(input) {
-  const record = readRecord(input);
+  const record = readRecord2(input);
   if (!record) {
     return null;
   }
@@ -38829,7 +40136,7 @@ function normalizeRelayStreamBatchPolicy(input) {
     flushBytes
   };
 }
-function readRecord(value) {
+function readRecord2(value) {
   return value && typeof value === "object" ? value : null;
 }
 function readInteger5(value) {
@@ -39698,11 +41005,11 @@ async function mergeLastReportedPublicRoutes(paths, snapshotInput) {
   const state = await readNetworkReportState(paths);
   return {
     ...snapshotInput,
-    publicIpv4s: uniqueStrings2([
+    publicIpv4s: uniqueStrings3([
       ...snapshotInput.publicIpv4s,
       ...state.lastReportedPublicIpv4s
     ]).slice(0, 2),
-    publicIpv6s: uniqueStrings2([
+    publicIpv6s: uniqueStrings3([
       ...snapshotInput.publicIpv6s,
       ...state.lastReportedPublicIpv6s
     ]).slice(0, 2)
@@ -39794,7 +41101,7 @@ function sameStringList2(left, right) {
   }
   return left.every((value, index) => value === right[index]);
 }
-function uniqueStrings2(values) {
+function uniqueStrings3(values) {
   return [...new Set(values)];
 }
 function formatUtcDay(date) {
@@ -39833,7 +41140,7 @@ async function reportLinkStatusToServer(options = {}) {
     public_ipv6s: routes.publicIpv6s,
     reported_at: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const signature = signIdentityPayload(identity, canonicalJson2(payload));
+  const signature = signIdentityPayload(identity, canonicalJson3(payload));
   const fetcher = options.fetchImpl ?? fetch;
   const response = await fetcher(
     `${config.serverBaseUrl.replace(/\/+$/u, "")}/api/v1/links/${encodeURIComponent(identity.link_id)}/report`,
@@ -39852,30 +41159,30 @@ async function reportLinkStatusToServer(options = {}) {
   );
   const body = await response.json().catch(() => null);
   if (!response.ok || !body) {
-    const message = readErrorMessage4(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    const message = readErrorMessage5(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
   await markNetworkStatusReported(paths, routes);
   return body;
 }
-function canonicalJson2(value) {
-  return JSON.stringify(sortJsonValue2(value));
+function canonicalJson3(value) {
+  return JSON.stringify(sortJsonValue3(value));
 }
-function sortJsonValue2(value) {
+function sortJsonValue3(value) {
   if (Array.isArray(value)) {
-    return value.map(sortJsonValue2);
+    return value.map(sortJsonValue3);
   }
   if (value && typeof value === "object") {
     const record = value;
     const sorted = {};
     for (const key of Object.keys(record).sort()) {
-      sorted[key] = sortJsonValue2(record[key]);
+      sorted[key] = sortJsonValue3(record[key]);
     }
     return sorted;
   }
   return value;
 }
-function readErrorMessage4(payload) {
+function readErrorMessage5(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -39895,20 +41202,23 @@ function startLanIpMonitor(options) {
   let running = false;
   let closed = false;
   let current = Promise.resolve();
-  const check = async (context = {}) => {
+  const check = (context = {}) => {
     if (running || closed) {
-      return;
+      return current;
     }
     running = true;
-    try {
-      await checkLanIpChange(options, context);
-    } catch (error) {
-      void options.logger.warn("lan_ip_monitor_failed", {
-        error: error instanceof Error ? error.message : String(error)
-      });
-    } finally {
-      running = false;
-    }
+    current = (async () => {
+      try {
+        await checkLanIpChange(options, context);
+      } catch (error) {
+        void options.logger.warn("lan_ip_monitor_failed", {
+          error: error instanceof Error ? error.message : String(error)
+        });
+      } finally {
+        running = false;
+      }
+    })();
+    return current;
   };
   current = check({ forceReport: true, publishToRelay: true, observePublicRoute: true });
   const timer = setInterval(() => {
@@ -40622,7 +41932,8 @@ async function startDaemonProcess(paths = resolveRuntimePaths()) {
   const child = spawn5(process.execPath, [scriptPath, "daemon-supervisor"], {
     detached: true,
     stdio: "ignore",
-    env: process.env
+    env: process.env,
+    windowsHide: true
   });
   child.unref();
   for (let index = 0; index < 12; index += 1) {
@@ -40675,7 +41986,8 @@ async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
       const startedAt = Date.now();
       child = spawn5(process.execPath, [scriptPath, "daemon", "--foreground"], {
         stdio: ["ignore", "pipe", "pipe"],
-        env: process.env
+        env: process.env,
+        windowsHide: true
       });
       const childPid = child.pid ?? null;
       child.stdout?.on("data", write);
@@ -41416,16 +42728,16 @@ function normalizeServerSnapshot(payload) {
   if (!policy) {
     return {
       remote: null,
-      issue: readString25(snapshot, "issue")
+      issue: readString26(snapshot, "issue")
     };
   }
   const release = toNullableRecord2(snapshot.release);
-  const currentVersion = readString25(policy, "current_version") ?? readString25(policy, "currentVersion");
-  const minSafeVersion = readString25(policy, "min_safe_version") ?? readString25(policy, "minSafeVersion");
+  const currentVersion = readString26(policy, "current_version") ?? readString26(policy, "currentVersion");
+  const minSafeVersion = readString26(policy, "min_safe_version") ?? readString26(policy, "minSafeVersion");
   if (!currentVersion) {
     return {
       remote: null,
-      issue: readString25(snapshot, "issue")
+      issue: readString26(snapshot, "issue")
     };
   }
   return {
@@ -41433,10 +42745,10 @@ function normalizeServerSnapshot(payload) {
       current_version: currentVersion,
       min_safe_version: minSafeVersion,
       target_version: currentVersion,
-      release_url: release ? readString25(release, "release_url") ?? readString25(release, "releaseUrl") : null,
-      published_at: release ? readString25(release, "published_at") ?? readString25(release, "publishedAt") : null
+      release_url: release ? readString26(release, "release_url") ?? readString26(release, "releaseUrl") : null,
+      published_at: release ? readString26(release, "published_at") ?? readString26(release, "publishedAt") : null
     },
-    issue: readString25(snapshot, "issue")
+    issue: readString26(snapshot, "issue")
   };
 }
 async function fetchCurrentLinkReleaseFromServer(options, fetcher, channel) {
@@ -41850,7 +43162,7 @@ function toRecord25(value) {
 function toNullableRecord2(value) {
   return typeof value === "object" && value !== null ? value : null;
 }
-function readString25(payload, key) {
+function readString26(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -41930,7 +43242,7 @@ async function postJson(fetcher, url, token, body) {
   }
   const payload = await response.json().catch(() => null);
   if (!response.ok) {
-    const message = readErrorMessage5(payload) ?? `Relay request failed with HTTP ${response.status}`;
+    const message = readErrorMessage6(payload) ?? `Relay request failed with HTTP ${response.status}`;
     throw new Error(message);
   }
   if (!payload) {
@@ -41938,7 +43250,7 @@ async function postJson(fetcher, url, token, body) {
   }
   return payload;
 }
-function readErrorMessage5(payload) {
+function readErrorMessage6(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -42272,12 +43584,12 @@ async function patchServerJson(serverBaseUrl, path37, token, body, options) {
 async function readJsonResponse2(response) {
   const payload = await response.json().catch(() => null);
   if (!response.ok || !payload) {
-    const message = readErrorMessage6(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    const message = readErrorMessage7(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
   return payload;
 }
-function readErrorMessage6(payload) {
+function readErrorMessage7(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -42396,14 +43708,15 @@ function registerSystemRoutes(router, options) {
         profile_skills: true,
         profile_memory: true,
         hermes_updates: true,
-        app_push_notification_events: true
+        app_push_notification_events: true,
+        live_activity_progress_events: true
       }
     };
   });
   router.post("/api/v1/pairing/claim", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const sessionId = readString20(body, "session_id") ?? readString20(body, "sessionId");
-    const claimToken = readString20(body, "claim_token") ?? readString20(body, "claimToken");
+    const sessionId = readString21(body, "session_id") ?? readString21(body, "sessionId");
+    const claimToken = readString21(body, "claim_token") ?? readString21(body, "claimToken");
     if (!sessionId || !claimToken) {
       throw new LinkHttpError(
         400,
@@ -42414,10 +43727,10 @@ function registerSystemRoutes(router, options) {
     const claimed = await claimPairing({
       sessionId,
       claimToken,
-      deviceLabel: readString20(body, "device_label") ?? readString20(body, "deviceLabel") ?? "HermesPilot App",
-      devicePlatform: readString20(body, "device_platform") ?? readString20(body, "devicePlatform") ?? "unknown",
-      deviceModel: readString20(body, "device_model") ?? readString20(body, "deviceModel"),
-      appInstanceId: readString20(body, "app_instance_id") ?? readString20(body, "appInstanceId"),
+      deviceLabel: readString21(body, "device_label") ?? readString21(body, "deviceLabel") ?? "HermesPilot App",
+      devicePlatform: readString21(body, "device_platform") ?? readString21(body, "devicePlatform") ?? "unknown",
+      deviceModel: readString21(body, "device_model") ?? readString21(body, "deviceModel"),
+      appInstanceId: readString21(body, "app_instance_id") ?? readString21(body, "appInstanceId"),
       paths
     });
     ctx.body = claimed;
@@ -42497,9 +43810,9 @@ function registerSystemRoutes(router, options) {
     const body = await readJsonBody(ctx.req);
     const session = await createDeviceSession(
       {
-        label: readString20(body, "device_label") ?? readString20(body, "deviceLabel") ?? "HermesPilot App",
-        platform: readString20(body, "device_platform") ?? readString20(body, "devicePlatform") ?? "unknown",
-        model: readString20(body, "device_model") ?? readString20(body, "deviceModel"),
+        label: readString21(body, "device_label") ?? readString21(body, "deviceLabel") ?? "HermesPilot App",
+        platform: readString21(body, "device_platform") ?? readString21(body, "devicePlatform") ?? "unknown",
+        model: readString21(body, "device_model") ?? readString21(body, "deviceModel"),
         appInstanceId: auth.appInstanceId
       },
       paths
@@ -42528,7 +43841,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/refresh", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString20(body, "refresh_token") ?? readString20(body, "refreshToken");
+    const refreshToken = readString21(body, "refresh_token") ?? readString21(body, "refreshToken");
     if (!refreshToken) {
       throw new LinkHttpError(
         400,
@@ -42539,10 +43852,10 @@ function registerSystemRoutes(router, options) {
     const session = await refreshDeviceSession(
       refreshToken,
       {
-        appInstanceId: readString20(body, "app_instance_id") ?? readString20(body, "appInstanceId"),
-        label: readString20(body, "device_label") ?? readString20(body, "deviceLabel"),
-        platform: readString20(body, "device_platform") ?? readString20(body, "devicePlatform"),
-        model: readString20(body, "device_model") ?? readString20(body, "deviceModel")
+        appInstanceId: readString21(body, "app_instance_id") ?? readString21(body, "appInstanceId"),
+        label: readString21(body, "device_label") ?? readString21(body, "deviceLabel"),
+        platform: readString21(body, "device_platform") ?? readString21(body, "devicePlatform"),
+        model: readString21(body, "device_model") ?? readString21(body, "deviceModel")
       },
       paths
     );
@@ -42561,7 +43874,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/logout", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString20(body, "refresh_token") ?? readString20(body, "refreshToken");
+    const refreshToken = readString21(body, "refresh_token") ?? readString21(body, "refreshToken");
     if (refreshToken) {
       await revokeDeviceRefreshToken(refreshToken, paths);
     }
@@ -42802,7 +44115,7 @@ function registerSystemRoutes(router, options) {
   router.patch("/api/v1/devices/:deviceId", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const label = readString20(body, "label") ?? readString20(body, "device_label");
+    const label = readString21(body, "label") ?? readString21(body, "device_label");
     if (!label) {
       throw new LinkHttpError(
         400,
@@ -42846,7 +44159,7 @@ function isActiveCronJob(job) {
   if (!enabled) {
     return false;
   }
-  const state = readString20(job, "state")?.toLowerCase();
+  const state = readString21(job, "state")?.toLowerCase();
   return !["paused", "disabled", "completed", "deleted"].includes(state ?? "");
 }
 function filterLogsWithinHours(logs, hours, now = Date.now()) {
@@ -42890,8 +44203,8 @@ function registerWorkspaceRoutes(router, options) {
     ctx.body = {
       ok: true,
       workspace: await conversations.createWorkspace({
-        name: readString20(body, "name") ?? "",
-        icon: readString20(body, "icon") ?? void 0
+        name: readString21(body, "name") ?? "",
+        icon: readString21(body, "icon") ?? void 0
       })
     };
   });
@@ -42901,8 +44214,8 @@ function registerWorkspaceRoutes(router, options) {
     ctx.body = {
       ok: true,
       workspace: await conversations.renameWorkspace(ctx.params.workspaceId, {
-        name: readString20(body, "name") ?? "",
-        icon: readString20(body, "icon") ?? void 0
+        name: readString21(body, "name") ?? "",
+        icon: readString21(body, "icon") ?? void 0
       })
     };
   });
@@ -42985,8 +44298,8 @@ function registerLinkUpdateRoutes(router, options) {
     ctx.body = await startLinkUpdate({
       paths,
       logger,
-      channel: readString20(body, "channel"),
-      targetVersion: readString20(body, "target_version") ?? readString20(body, "targetVersion")
+      channel: readString21(body, "channel"),
+      targetVersion: readString21(body, "target_version") ?? readString21(body, "targetVersion")
     });
   });
   router.get("/api/v1/link/update/events", async (ctx) => {
@@ -43016,7 +44329,7 @@ import QRCode from "qrcode";
 function registerPairingRoutes(router, options) {
   const { paths } = options;
   router.get("/pair", async (ctx) => {
-    const sessionId = readString20(ctx.query, "session_id");
+    const sessionId = readString21(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -43041,7 +44354,7 @@ function registerPairingRoutes(router, options) {
     ctx.body = page;
   });
   router.get("/api/v1/pairing/session", async (ctx) => {
-    const sessionId = readString20(ctx.query, "session_id");
+    const sessionId = readString21(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -43511,7 +44824,7 @@ function registerInternalRoutes(router, options) {
   router.post("/internal/deliver", async (ctx) => {
     assertLoopbackRequest(ctx.req);
     const body = await readJsonBody(ctx.req);
-    const stagingDir = readString20(body, "staging_dir") ?? readString20(body, "stagingDir");
+    const stagingDir = readString21(body, "staging_dir") ?? readString21(body, "stagingDir");
     if (!stagingDir) {
       throw new LinkHttpError(
         400,
@@ -43530,9 +44843,9 @@ function registerInternalRoutes(router, options) {
     ctx.body = {
       ok: true,
       ...await options.conversations.deliverFilesFromTool({
-        profile: readString20(body, "profile") ?? readString20(body, "profile_name") ?? readString20(body, "profileName") ?? void 0,
-        taskId: readString20(body, "task_id") ?? readString20(body, "taskId") ?? void 0,
-        sessionId: readString20(body, "session_id") ?? readString20(body, "sessionId") ?? void 0,
+        profile: readString21(body, "profile") ?? readString21(body, "profile_name") ?? readString21(body, "profileName") ?? void 0,
+        taskId: readString21(body, "task_id") ?? readString21(body, "taskId") ?? void 0,
+        sessionId: readString21(body, "session_id") ?? readString21(body, "sessionId") ?? void 0,
         files: body.files ?? body.file ?? body.path
       })
     };
@@ -43550,6 +44863,178 @@ function assertLoopbackRequest(request) {
   );
 }
 
+// src/http/routes/live-activities.ts
+var APP_INSTANCE_ID_PATTERN = /^appi_[A-Za-z0-9_-]{16,96}$/u;
+var LINK_ID_PATTERN = /^link_[A-Za-z0-9_-]{8,128}$/u;
+var CONVERSATION_ID_PATTERN2 = /^conv_[A-Za-z0-9_-]{8,128}$/u;
+var ACTIVITY_ID_PATTERN = /^[A-Za-z0-9._:-]{3,128}$/u;
+var TARGET_ID_PATTERN = /^[A-Za-z0-9._:-]{3,128}$/u;
+var RUN_ID_PATTERN = /^run_[A-Za-z0-9_-]{8,128}$/u;
+var OPERATION_ID_PATTERN = /^[A-Za-z0-9._:-]{3,128}$/u;
+var APNS_TOKEN_PATTERN = /^[0-9a-fA-F]{32,512}$/u;
+function registerLiveActivityRoutes(router, options) {
+  const { paths } = options;
+  router.get("/api/v1/live-activities/restore-state", async (ctx) => {
+    const auth = await authenticateRequest(ctx, paths);
+    const query = ctx.query;
+    const targetKind = readTargetKindValue(
+      readQueryValue(query, "target_kind") ?? readQueryValue(query, "targetKind")
+    );
+    const appInstanceId = auth.appInstanceId ?? readRequiredQueryPattern(query, ["app_instance_id", "appInstanceId"], APP_INSTANCE_ID_PATTERN, "app_instance_id_invalid");
+    const state = await findLiveActivityRestoreState(paths, {
+      accountId: auth.accountId ?? null,
+      appInstanceId,
+      conversationId: readRequiredQueryPattern(query, ["conversation_id", "conversationId"], CONVERSATION_ID_PATTERN2, "conversation_id_invalid"),
+      targetKind,
+      targetId: readRequiredQueryPattern(query, ["target_id", "targetId"], TARGET_ID_PATTERN, "target_id_invalid")
+    });
+    ctx.body = {
+      ok: true,
+      state: state ? {
+        phase: state.phase,
+        status_label: state.statusLabel,
+        progress_text: state.progressText,
+        detail_text: state.detailText ?? null,
+        updated_at: state.updatedAt ?? null
+      } : null
+    };
+  });
+  router.post("/api/v1/live-activities", async (ctx) => {
+    const auth = await authenticateRequest(ctx, paths);
+    const body = await readJsonBody(ctx.req);
+    const targetKind = readTargetKind(body);
+    const runId = normalizePattern(readString21(body, "run_id") ?? readString21(body, "runId"), RUN_ID_PATTERN);
+    const operationId = normalizePattern(
+      readString21(body, "operation_id") ?? readString21(body, "operationId"),
+      OPERATION_ID_PATTERN
+    );
+    if (targetKind === "run" && !runId) {
+      throw new LinkHttpError(400, "run_id_required", "run_id is required for run Live Activity");
+    }
+    if (targetKind === "context_compression" && !operationId) {
+      throw new LinkHttpError(400, "operation_id_required", "operation_id is required for context compression Live Activity");
+    }
+    const activity = await upsertLiveActivity(paths, {
+      activityId: readRequiredPattern(body, ["activity_id", "activityId"], ACTIVITY_ID_PATTERN, "activity_id_invalid"),
+      activityToken: readRequiredPattern(body, ["activity_token", "activityToken"], APNS_TOKEN_PATTERN, "activity_token_invalid").toLowerCase(),
+      apnsEnvironment: readApnsEnvironment(body),
+      apnsTopic: readRequiredString(body, ["apns_topic", "apnsTopic"], "apns_topic_required").slice(0, 160),
+      linkId: readRequiredPattern(body, ["link_id", "linkId"], LINK_ID_PATTERN, "link_id_invalid"),
+      accountId: auth.accountId ?? null,
+      appInstanceId: auth.appInstanceId ?? readRequiredPattern(body, ["app_instance_id", "appInstanceId"], APP_INSTANCE_ID_PATTERN, "app_instance_id_invalid"),
+      conversationId: readRequiredPattern(body, ["conversation_id", "conversationId"], CONVERSATION_ID_PATTERN2, "conversation_id_invalid"),
+      conversationTitle: readOptionalString2(body, ["conversation_title", "conversationTitle", "title"], 80),
+      targetKind,
+      targetId: readRequiredPattern(body, ["target_id", "targetId"], TARGET_ID_PATTERN, "target_id_invalid"),
+      runId: targetKind === "run" ? runId : null,
+      operationId: targetKind === "context_compression" ? operationId : null,
+      language: readLanguage2(body),
+      privacyLevel: readPrivacyLevel(body),
+      startedAt: readIso(body, ["started_at", "startedAt"]) ?? (/* @__PURE__ */ new Date()).toISOString()
+    });
+    ctx.status = 201;
+    ctx.body = {
+      ok: true,
+      activity_id: activity.activityId,
+      status: activity.status
+    };
+  });
+  router.post("/api/v1/live-activities/:activityId/end", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    const found = await endLiveActivity(paths, ctx.params.activityId);
+    ctx.status = found ? 200 : 404;
+    ctx.body = {
+      ok: found,
+      activity_id: ctx.params.activityId,
+      status: found ? "ended" : "not_found"
+    };
+  });
+}
+function readTargetKind(body) {
+  const value = readString21(body, "target_kind") ?? readString21(body, "targetKind");
+  return readTargetKindValue(value);
+}
+function readTargetKindValue(value) {
+  if (value === "run" || value === "context_compression") {
+    return value;
+  }
+  throw new LinkHttpError(400, "target_kind_invalid", "target_kind must be run or context_compression");
+}
+function readRequiredQueryPattern(query, keys, pattern, code) {
+  for (const key of keys) {
+    const value = readQueryValue(query, key);
+    if (value && pattern.test(value)) {
+      return value;
+    }
+  }
+  throw new LinkHttpError(400, code, `${keys[0]} is invalid`);
+}
+function readQueryValue(query, key) {
+  return readQueryString(query[key]) ?? null;
+}
+function readApnsEnvironment(body) {
+  const value = readString21(body, "apns_environment") ?? readString21(body, "apnsEnvironment");
+  if (value === "sandbox" || value === "production") {
+    return value;
+  }
+  throw new LinkHttpError(400, "apns_environment_invalid", "apns_environment must be sandbox or production");
+}
+function readLanguage2(body) {
+  const value = readString21(body, "language") ?? readString21(body, "preferred_language") ?? readString21(body, "preferredLanguage");
+  if (!value) {
+    return null;
+  }
+  return value.toLowerCase().startsWith("zh") ? "zh" : "en";
+}
+function readPrivacyLevel(body) {
+  const value = readString21(body, "privacy_level") ?? readString21(body, "privacyLevel");
+  if (value === "minimal" || value === "detailed") {
+    return value;
+  }
+  return "summary";
+}
+function readRequiredString(body, keys, code) {
+  for (const key of keys) {
+    const value = readString21(body, key);
+    if (value) {
+      return value;
+    }
+  }
+  throw new LinkHttpError(400, code, `${keys[0]} is required`);
+}
+function readRequiredPattern(body, keys, pattern, code) {
+  const value = readRequiredString(body, keys, code);
+  if (!pattern.test(value)) {
+    throw new LinkHttpError(400, code, `${keys[0]} is invalid`);
+  }
+  return value;
+}
+function readOptionalString2(body, keys, maxLength) {
+  for (const key of keys) {
+    const value = readString21(body, key);
+    if (value) {
+      return value.slice(0, maxLength);
+    }
+  }
+  return null;
+}
+function normalizePattern(value, pattern) {
+  return value && pattern.test(value) ? value : null;
+}
+function readIso(body, keys) {
+  for (const key of keys) {
+    const value = readString21(body, key);
+    if (!value) {
+      continue;
+    }
+    const timestamp = Date.parse(value);
+    if (Number.isFinite(timestamp)) {
+      return new Date(timestamp).toISOString();
+    }
+  }
+  return null;
+}
+
 // src/http/app.ts
 async function createApp(options = {}) {
   const paths = options.paths ?? resolveRuntimePaths();
@@ -43607,6 +45092,7 @@ async function createApp(options = {}) {
     syncCronDeliveries
   });
   registerWorkspaceRoutes(router, { paths, conversations });
+  registerLiveActivityRoutes(router, { paths });
   registerConversationRoutes(router, { paths, logger, conversations });
   registerRunRoutes(router, { paths, logger, conversations });
   registerProfileRoutes(router, { paths, logger, conversations });