@hermespilot/link 0.8.0 → 0.8.1-beta.1

package/dist/{chunk-GHZLIFQF.js → chunk-WYVLVDXH.js}

@@ -4,7 +4,7 @@ import Router from "@koa/router";
 
 // src/conversations/conversation-service.ts
 import { EventEmitter } from "events";
-import { createHash as createHash7, randomUUID as randomUUID12 } from "crypto";
+import { createHash as createHash8, randomUUID as randomUUID12 } from "crypto";
 import path26 from "path";
 
 // src/database/link-database.ts
@@ -151,6 +151,62 @@ var MIGRATIONS = [
         OR message_count > 0
         OR run_count > 0;
     `
+  },
+  {
+    version: 4,
+    name: "live_activity_registry",
+    sql: `
+      CREATE TABLE IF NOT EXISTS live_activities (
+        activity_id TEXT PRIMARY KEY,
+        activity_token TEXT NOT NULL,
+        apns_environment TEXT NOT NULL CHECK (apns_environment IN ('sandbox', 'production')),
+        apns_topic TEXT NOT NULL,
+        link_id TEXT NOT NULL,
+        account_id TEXT,
+        app_instance_id TEXT NOT NULL,
+        conversation_id TEXT NOT NULL,
+        conversation_title TEXT,
+        target_kind TEXT NOT NULL CHECK (target_kind IN ('run', 'context_compression')),
+        target_id TEXT NOT NULL,
+        run_id TEXT,
+        operation_id TEXT,
+        status TEXT NOT NULL CHECK (status IN ('active', 'ended', 'expired', 'invalid')),
+        language TEXT CHECK (language IS NULL OR language IN ('zh', 'en')),
+        privacy_level TEXT NOT NULL DEFAULT 'summary'
+          CHECK (privacy_level IN ('minimal', 'summary', 'detailed')),
+        last_phase TEXT,
+        last_summary_hash TEXT,
+        last_pushed_at TEXT,
+        push_count INTEGER NOT NULL DEFAULT 0,
+        started_at TEXT NOT NULL,
+        ended_at TEXT,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL,
+        CHECK (
+          (target_kind = 'run' AND run_id IS NOT NULL AND operation_id IS NULL)
+          OR
+          (target_kind = 'context_compression' AND operation_id IS NOT NULL AND run_id IS NULL)
+        )
+      );
+
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_live_activities_target_active
+        ON live_activities(app_instance_id, conversation_id, target_kind, target_id)
+        WHERE status = 'active';
+      CREATE INDEX IF NOT EXISTS idx_live_activities_target_lookup
+        ON live_activities(conversation_id, target_kind, target_id, status);
+      CREATE INDEX IF NOT EXISTS idx_live_activities_status_updated
+        ON live_activities(status, updated_at);
+    `
+  },
+  {
+    version: 5,
+    name: "live_activity_visible_state",
+    sql: `
+      ALTER TABLE live_activities ADD COLUMN last_status_label TEXT;
+      ALTER TABLE live_activities ADD COLUMN last_progress_text TEXT;
+      ALTER TABLE live_activities ADD COLUMN last_detail_text TEXT;
+      ALTER TABLE live_activities ADD COLUMN last_visible_updated_at TEXT;
+    `
   }
 ];
 async function migrateLinkDatabase(paths) {
@@ -229,6 +285,245 @@ async function upsertConversationStats(paths, record) {
     db.close();
   }
 }
+async function upsertLiveActivity(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    db.exec("BEGIN IMMEDIATE");
+    try {
+      const restoreState = readLiveActivityRestoreStateForTarget(db, {
+        accountId: input.accountId,
+        appInstanceId: input.appInstanceId,
+        conversationId: input.conversationId,
+        targetKind: input.targetKind,
+        targetId: input.targetId
+      });
+      db.prepare(
+        `
+        UPDATE live_activities
+        SET status = 'expired',
+            ended_at = COALESCE(ended_at, ?),
+            updated_at = ?
+        WHERE app_instance_id = ?
+          AND activity_id != ?
+          AND status = 'active'
+      `
+      ).run(now, now, input.appInstanceId, input.activityId);
+      db.prepare(
+        `
+        INSERT INTO live_activities (
+          activity_id,
+          activity_token,
+          apns_environment,
+          apns_topic,
+          link_id,
+          account_id,
+          app_instance_id,
+          conversation_id,
+          conversation_title,
+          target_kind,
+          target_id,
+          run_id,
+          operation_id,
+          status,
+          language,
+          privacy_level,
+          last_phase,
+          last_summary_hash,
+          last_pushed_at,
+          last_status_label,
+          last_progress_text,
+          last_detail_text,
+          last_visible_updated_at,
+          push_count,
+          started_at,
+          ended_at,
+          created_at,
+          updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active', ?, ?, ?, NULL, NULL, ?, ?, ?, ?, 0, ?, NULL, ?, ?)
+        ON CONFLICT(activity_id) DO UPDATE SET
+          activity_token = excluded.activity_token,
+          apns_environment = excluded.apns_environment,
+          apns_topic = excluded.apns_topic,
+          link_id = excluded.link_id,
+          account_id = excluded.account_id,
+          app_instance_id = excluded.app_instance_id,
+          conversation_id = excluded.conversation_id,
+          conversation_title = excluded.conversation_title,
+          target_kind = excluded.target_kind,
+          target_id = excluded.target_id,
+          run_id = excluded.run_id,
+          operation_id = excluded.operation_id,
+          status = 'active',
+          language = excluded.language,
+          privacy_level = excluded.privacy_level,
+          last_phase = excluded.last_phase,
+          last_summary_hash = NULL,
+          last_pushed_at = NULL,
+          last_status_label = excluded.last_status_label,
+          last_progress_text = excluded.last_progress_text,
+          last_detail_text = excluded.last_detail_text,
+          last_visible_updated_at = excluded.last_visible_updated_at,
+          push_count = 0,
+          started_at = excluded.started_at,
+          ended_at = NULL,
+          updated_at = excluded.updated_at
+      `
+      ).run(
+        input.activityId,
+        input.activityToken,
+        input.apnsEnvironment,
+        input.apnsTopic,
+        input.linkId,
+        input.accountId ?? null,
+        input.appInstanceId,
+        input.conversationId,
+        input.conversationTitle ?? null,
+        input.targetKind,
+        input.targetId,
+        input.runId ?? null,
+        input.operationId ?? null,
+        input.language ?? null,
+        input.privacyLevel ?? "summary",
+        restoreState?.phase ?? "connecting",
+        restoreState?.statusLabel ?? null,
+        restoreState?.progressText ?? null,
+        restoreState?.detailText ?? null,
+        restoreState?.updatedAt ?? null,
+        input.startedAt,
+        now,
+        now
+      );
+      db.exec("COMMIT");
+    } catch (error) {
+      rollback(db);
+      throw error;
+    }
+    const row = readLiveActivityRow(db, input.activityId);
+    if (!row) {
+      throw new Error("Live Activity was not persisted");
+    }
+    return row;
+  } finally {
+    db.close();
+  }
+}
+async function findActiveLiveActivityForTarget(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  try {
+    const accountFilter = input.accountId ? "AND account_id = ?" : "";
+    const appInstanceFilter = input.appInstanceId ? "AND app_instance_id = ?" : "";
+    const row = db.prepare(
+      `
+        SELECT *
+        FROM live_activities
+        WHERE conversation_id = ?
+          AND target_kind = ?
+          AND target_id = ?
+          AND status = 'active'
+          ${accountFilter}
+          ${appInstanceFilter}
+        ORDER BY datetime(started_at) DESC
+        LIMIT 1
+      `
+    ).get(
+      input.conversationId,
+      input.targetKind,
+      input.targetId,
+      ...input.accountId ? [input.accountId] : [],
+      ...input.appInstanceId ? [input.appInstanceId] : []
+    );
+    return liveActivityFromRow(row);
+  } finally {
+    db.close();
+  }
+}
+async function findLiveActivityRestoreState(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  try {
+    return readLiveActivityRestoreStateForTarget(db, input);
+  } finally {
+    db.close();
+  }
+}
+async function endLiveActivity(paths, activityId) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    const result = db.prepare(
+      `
+        UPDATE live_activities
+        SET status = 'ended',
+            ended_at = COALESCE(ended_at, ?),
+            updated_at = ?
+        WHERE activity_id = ?
+      `
+    ).run(now, now, activityId);
+    return result.changes > 0;
+  } finally {
+    db.close();
+  }
+}
+async function updateLiveActivityPushState(paths, input) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  try {
+    db.prepare(
+      `
+      UPDATE live_activities
+      SET last_phase = ?,
+          last_summary_hash = ?,
+          last_pushed_at = ?,
+          last_status_label = ?,
+          last_progress_text = ?,
+          last_detail_text = ?,
+          last_visible_updated_at = ?,
+          push_count = push_count + 1,
+          status = CASE WHEN ? THEN 'ended' ELSE status END,
+          ended_at = CASE WHEN ? THEN COALESCE(ended_at, ?) ELSE ended_at END,
+          updated_at = ?
+      WHERE activity_id = ?
+    `
+    ).run(
+      input.phase,
+      input.summaryHash,
+      input.pushedAt,
+      normalizeNullableText(input.statusLabel),
+      normalizeNullableText(input.progressText),
+      normalizeNullableText(input.detailText),
+      input.visibleUpdatedAt,
+      input.terminal ? 1 : 0,
+      input.terminal ? 1 : 0,
+      input.pushedAt,
+      input.pushedAt,
+      input.activityId
+    );
+  } finally {
+    db.close();
+  }
+}
+async function invalidateLiveActivity(paths, activityId) {
+  await migrateLinkDatabase(paths);
+  const db = openDatabase(paths);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    db.prepare(
+      `
+      UPDATE live_activities
+      SET status = 'invalid',
+          ended_at = COALESCE(ended_at, ?),
+          updated_at = ?
+      WHERE activity_id = ?
+    `
+    ).run(now, now, activityId);
+  } finally {
+    db.close();
+  }
+}
 async function listConversationStatsPage(paths, input) {
   await migrateLinkDatabase(paths);
   const rawLimit = Number.isFinite(input.limit) ? Math.trunc(input.limit) : 25;
@@ -975,6 +1270,109 @@ function runUsageFactParams(record) {
     record.updatedAt
   ];
 }
+function readLiveActivityRow(db, activityId) {
+  const row = db.prepare("SELECT * FROM live_activities WHERE activity_id = ? LIMIT 1").get(activityId);
+  return liveActivityFromRow(row);
+}
+function readLiveActivityRestoreStateForTarget(db, input) {
+  const accountFilter = input.accountId ? "AND (account_id = ? OR account_id IS NULL)" : "";
+  const row = db.prepare(
+    `
+      SELECT *
+      FROM live_activities
+      WHERE app_instance_id = ?
+        AND conversation_id = ?
+        AND target_kind = ?
+        AND target_id = ?
+        AND status IN ('active', 'ended', 'expired')
+        AND last_phase IS NOT NULL
+        AND last_status_label IS NOT NULL
+        AND last_progress_text IS NOT NULL
+        ${accountFilter}
+      ORDER BY datetime(COALESCE(last_visible_updated_at, updated_at)) DESC
+      LIMIT 1
+    `
+  ).get(
+    input.appInstanceId,
+    input.conversationId,
+    input.targetKind,
+    input.targetId,
+    ...input.accountId ? [input.accountId] : []
+  );
+  return liveActivityRestoreStateFromRow(row);
+}
+function liveActivityFromRow(row) {
+  const activityId = readString(row, "activity_id");
+  const activityToken = readString(row, "activity_token");
+  const apnsEnvironment = readString(row, "apns_environment");
+  const apnsTopic = readString(row, "apns_topic");
+  const linkId = readString(row, "link_id");
+  const appInstanceId = readString(row, "app_instance_id");
+  const conversationId = readString(row, "conversation_id");
+  const targetKind = readString(row, "target_kind");
+  const targetId = readString(row, "target_id");
+  const status = readString(row, "status");
+  const startedAt = readString(row, "started_at");
+  const createdAt = readString(row, "created_at");
+  const updatedAt = readString(row, "updated_at");
+  if (!activityId || !activityToken || apnsEnvironment !== "sandbox" && apnsEnvironment !== "production" || !apnsTopic || !linkId || !appInstanceId || !conversationId || targetKind !== "run" && targetKind !== "context_compression" || !targetId || !isLiveActivityStatus(status) || !startedAt || !createdAt || !updatedAt) {
+    return null;
+  }
+  const language = readString(row, "language");
+  const privacyLevel = readString(row, "privacy_level");
+  return {
+    activityId,
+    activityToken,
+    apnsEnvironment,
+    apnsTopic,
+    linkId,
+    accountId: readNullableString(row, "account_id"),
+    appInstanceId,
+    conversationId,
+    conversationTitle: readNullableString(row, "conversation_title"),
+    targetKind,
+    targetId,
+    runId: readNullableString(row, "run_id"),
+    operationId: readNullableString(row, "operation_id"),
+    status,
+    language: language === "zh" || language === "en" ? language : null,
+    privacyLevel: privacyLevel === "minimal" || privacyLevel === "summary" || privacyLevel === "detailed" ? privacyLevel : "summary",
+    lastPhase: readNullableString(row, "last_phase"),
+    lastSummaryHash: readNullableString(row, "last_summary_hash"),
+    lastPushedAt: readNullableString(row, "last_pushed_at"),
+    lastStatusLabel: readNullableString(row, "last_status_label"),
+    lastProgressText: readNullableString(row, "last_progress_text"),
+    lastDetailText: readNullableString(row, "last_detail_text"),
+    lastVisibleUpdatedAt: readNullableString(row, "last_visible_updated_at"),
+    pushCount: readNumber(row, "push_count"),
+    startedAt,
+    endedAt: readNullableString(row, "ended_at"),
+    createdAt,
+    updatedAt
+  };
+}
+function liveActivityRestoreStateFromRow(row) {
+  const phase = readString(row, "last_phase");
+  const statusLabel = readString(row, "last_status_label");
+  const progressText = readString(row, "last_progress_text");
+  if (!phase || !statusLabel || !progressText) {
+    return null;
+  }
+  return {
+    phase,
+    statusLabel,
+    progressText,
+    detailText: readNullableString(row, "last_detail_text"),
+    updatedAt: readNullableString(row, "last_visible_updated_at") ?? readNullableString(row, "updated_at")
+  };
+}
+function isLiveActivityStatus(value) {
+  return value === "active" || value === "ended" || value === "expired" || value === "invalid";
+}
+function normalizeNullableText(value) {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : null;
+}
 function rollback(db) {
   try {
     db.exec("ROLLBACK");
@@ -1544,7 +1942,7 @@ var messages = {
     "autostart.enabled": "Boot autostart enabled via {method}: {path}",
     "autostart.disabled": "Boot autostart disabled.",
     "autostart.status.enabled": "Boot autostart: enabled via {method}: {path}",
-    "autostart.status.disabled": "Boot autostart: disabled. Method: {method}. File: {path}",
+    "autostart.status.disabled": "Boot autostart: disabled. Method: {method}. Target: {path}",
     "autostart.unsupported": "Boot autostart is not supported on this platform yet.",
     "autostart.alreadyEnabled": "Boot autostart is already enabled via {method}: {path}",
     "pair.description": "Create a Hermes Link pairing session",
@@ -1787,12 +2185,12 @@ var messages = {
     "autostart.on.description": "\u542F\u7528\u5F00\u673A\u81EA\u542F",
     "autostart.off.description": "\u5173\u95ED\u5F00\u673A\u81EA\u542F",
     "autostart.status.description": "\u67E5\u770B\u5F00\u673A\u81EA\u542F\u72B6\u6001",
-    "autostart.enabled": "\u5DF2\u542F\u7528\u5F00\u673A\u81EA\u542F\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
+    "autostart.enabled": "\u5DF2\u542F\u7528\u5F00\u673A\u81EA\u542F\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u4F4D\u7F6E\uFF1A{path}",
     "autostart.disabled": "\u5DF2\u5173\u95ED\u5F00\u673A\u81EA\u542F\u3002",
-    "autostart.status.enabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
-    "autostart.status.disabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u672A\u542F\u7528\u3002\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
+    "autostart.status.enabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u4F4D\u7F6E\uFF1A{path}",
+    "autostart.status.disabled": "\u5F00\u673A\u81EA\u542F\uFF1A\u672A\u542F\u7528\u3002\u65B9\u5F0F\uFF1A{method}\uFF0C\u76EE\u6807\uFF1A{path}",
     "autostart.unsupported": "\u5F53\u524D\u5E73\u53F0\u6682\u4E0D\u652F\u6301\u5F00\u673A\u81EA\u542F\u3002",
-    "autostart.alreadyEnabled": "\u5F00\u673A\u81EA\u542F\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u6587\u4EF6\uFF1A{path}",
+    "autostart.alreadyEnabled": "\u5F00\u673A\u81EA\u542F\u5DF2\u542F\u7528\uFF0C\u65B9\u5F0F\uFF1A{method}\uFF0C\u4F4D\u7F6E\uFF1A{path}",
     "pair.description": "\u521B\u5EFA Hermes Link \u914D\u5BF9\u4F1A\u8BDD",
     "pair.preflight": "\u6B63\u5728\u914D\u5BF9\u524D\u68C0\u67E5\u672C\u673A Hermes \u914D\u7F6E...",
     "pair.preflight.hermesFiles": "\u6B63\u5728\u68C0\u67E5 Hermes \u6570\u636E\u76EE\u5F55\u3001\u914D\u7F6E\u6587\u4EF6\u548C\u73AF\u5883\u6587\u4EF6...",
@@ -7215,7 +7613,7 @@ function isConversationMissingError(error) {
 }
 
 // src/constants.ts
-var LINK_VERSION = "0.8.0";
+var LINK_VERSION = "0.8.1-beta.1";
 var LINK_COMMAND = "hermeslink";
 var LINK_DEFAULT_PORT = 52379;
 var LINK_RUNTIME_DIR_NAME = ".hermeslink";
@@ -7526,6 +7924,271 @@ function readErrorMessage(payload) {
   return typeof message === "string" ? message : null;
 }
 
+// src/link/live-activity-events.ts
+import { createHash } from "crypto";
+var MIN_LIVE_ACTIVITY_PUSH_INTERVAL_MS = 1e3;
+var liveActivityReportQueues = /* @__PURE__ */ new Map();
+async function reportLiveActivityEventToServer(options) {
+  const queueKey = liveActivityReportQueueKey(options.event);
+  const previous = liveActivityReportQueues.get(queueKey) ?? Promise.resolve();
+  const next = previous.catch(() => void 0).then(() => reportLiveActivityEventToServerNow(options));
+  liveActivityReportQueues.set(queueKey, next);
+  try {
+    await next;
+  } finally {
+    if (liveActivityReportQueues.get(queueKey) === next) {
+      liveActivityReportQueues.delete(queueKey);
+    }
+  }
+}
+async function reportLiveActivityEventToServerNow(options) {
+  const [identity, config] = await Promise.all([
+    loadIdentity(options.paths),
+    loadConfig(options.paths)
+  ]);
+  if (!identity?.link_id) {
+    return;
+  }
+  const activity = await findActiveLiveActivityForTarget(options.paths, {
+    conversationId: options.event.conversationId,
+    targetKind: options.event.targetKind,
+    targetId: options.event.targetId,
+    accountId: options.event.accountId,
+    appInstanceId: options.event.appInstanceId
+  });
+  if (!activity) {
+    return;
+  }
+  const event = liveActivityEventWithInheritedDetail(activity, options.event);
+  const occurredAt = normalizeIso2(options.event.occurredAt) ?? (/* @__PURE__ */ new Date()).toISOString();
+  const summaryHash = hashLiveActivitySummary(event);
+  const skipReason = resolveSkipReason(activity, event, summaryHash);
+  if (skipReason) {
+    await options.logger.debug("live_activity_event_skipped", {
+      activity_id: activity.activityId,
+      conversation_id: event.conversationId,
+      target_kind: event.targetKind,
+      target_id: event.targetId,
+      phase: event.phase,
+      reason: skipReason
+    });
+    return;
+  }
+  const reportedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const payload = {
+    type: "hermes_link_live_activity_push",
+    link_id: identity.link_id,
+    install_id: identity.install_id,
+    source_event_id: event.sourceEventId,
+    event_kind: event.eventKind,
+    activity_id: activity.activityId,
+    activity_token: activity.activityToken,
+    apns_environment: activity.apnsEnvironment,
+    apns_topic: activity.apnsTopic,
+    conversation_id: event.conversationId,
+    target_kind: event.targetKind,
+    target_id: event.targetId,
+    phase: event.phase,
+    terminal: event.terminal === true,
+    occurred_at: occurredAt,
+    reported_at: reportedAt
+  };
+  addOptional2(payload, "account_id", activity.accountId ?? event.accountId, 128);
+  addOptional2(payload, "app_instance_id", activity.appInstanceId ?? event.appInstanceId, 128);
+  addOptional2(payload, "run_id", event.runId ?? activity.runId, 128);
+  addOptional2(payload, "operation_id", event.operationId ?? activity.operationId, 128);
+  addOptional2(payload, "conversation_title", event.conversationTitle ?? activity.conversationTitle, 80);
+  addOptional2(payload, "status_label", event.statusLabel, 24);
+  addOptional2(payload, "progress_text", event.progressText, 120);
+  addOptional2(payload, "detail_text", event.detailText, 240);
+  addOptional2(payload, "language", activity.language, 16);
+  addOptional2(payload, "privacy_level", activity.privacyLevel, 32);
+  if (typeof event.requiresUserAction === "boolean") {
+    payload.requires_user_action = event.requiresUserAction;
+  }
+  const signature = signIdentityPayload(identity, canonicalJson2(payload));
+  const fetcher = options.fetchImpl ?? fetch;
+  const response = await fetcher(
+    `${config.serverBaseUrl.replace(/\/+$/u, "")}/api/v1/links/${encodeURIComponent(identity.link_id)}/live-activity-pushes`,
+    {
+      method: "POST",
+      headers: {
+        accept: "application/json",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify({
+        ...payload,
+        public_key_pem: identity.public_key_pem,
+        signature
+      })
+    }
+  );
+  const body = await response.json().catch(() => null);
+  if (!response.ok) {
+    const message = readErrorMessage2(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    throw new LinkHttpError(response.status, "server_request_failed", message);
+  }
+  await updateLiveActivityPushState(options.paths, {
+    activityId: activity.activityId,
+    phase: event.phase,
+    summaryHash,
+    pushedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    visibleUpdatedAt: occurredAt,
+    terminal: event.terminal === true,
+    statusLabel: event.statusLabel,
+    progressText: event.progressText,
+    detailText: event.detailText
+  });
+  const apnsReason = readApnsReason(body);
+  if (apnsReason && shouldInvalidateLiveActivity(apnsReason)) {
+    await invalidateLiveActivity(options.paths, activity.activityId);
+  }
+}
+function liveActivityEventWithInheritedDetail(activity, event) {
+  if (isLiveActivityTitleUpdateEvent(event)) {
+    const phase = isLiveActivityPhase(activity.lastPhase) ? activity.lastPhase : event.phase;
+    return {
+      ...event,
+      phase,
+      statusLabel: activity.lastStatusLabel?.trim() || event.statusLabel,
+      progressText: activity.lastProgressText?.trim() || event.progressText,
+      detailText: activity.lastDetailText?.trim() || event.detailText
+    };
+  }
+  if (event.detailText?.trim() || !isToolPhase(event.phase)) {
+    return event;
+  }
+  const detailText = activity.lastDetailText?.trim();
+  return detailText ? { ...event, detailText } : event;
+}
+function resolveSkipReason(activity, event, summaryHash) {
+  if (shouldThrottleLiveActivityEvent(activity, event)) {
+    return "push_interval_throttled";
+  }
+  if (activity.pushCount >= 60 && event.terminal !== true) {
+    return "push_count_exceeded";
+  }
+  if (activity.lastSummaryHash === summaryHash && event.terminal !== true) {
+    return "duplicate_summary";
+  }
+  if (activity.lastPhase === "context_compression_timed_out" && event.phase === "context_compressed" && activity.targetKind === "context_compression") {
+    return "late_context_compression_completed_after_timeout";
+  }
+  return null;
+}
+function shouldThrottleLiveActivityEvent(activity, event) {
+  if (event.terminal === true || event.requiresUserAction === true || event.phase === "needs_input" || event.phase === "needs_approval") {
+    return false;
+  }
+  if (isLiveActivityTitleUpdateEvent(event)) {
+    return false;
+  }
+  const lastVisibleAt = liveActivityLastVisibleTimeMs(activity);
+  if (!Number.isFinite(lastVisibleAt)) {
+    return false;
+  }
+  if (isAssistantProgressEvent(event) && isToolPhase(activity.lastPhase)) {
+    return false;
+  }
+  return liveActivityEventTimeMs(event) - lastVisibleAt < MIN_LIVE_ACTIVITY_PUSH_INTERVAL_MS;
+}
+function liveActivityEventTimeMs(event) {
+  const parsed = Date.parse(event.occurredAt ?? "");
+  return Number.isFinite(parsed) ? parsed : Date.now();
+}
+function liveActivityLastVisibleTimeMs(activity) {
+  const visible = Date.parse(activity.lastVisibleUpdatedAt ?? "");
+  if (Number.isFinite(visible)) {
+    return visible;
+  }
+  return Date.parse(activity.lastPushedAt ?? "");
+}
+function liveActivityReportQueueKey(event) {
+  return [
+    event.accountId?.trim() ?? "",
+    event.appInstanceId?.trim() ?? "",
+    event.conversationId,
+    event.targetKind,
+    event.targetId
+  ].join(":");
+}
+function isAssistantProgressEvent(event) {
+  return event.eventKind === "reasoning_available";
+}
+function isLiveActivityTitleUpdateEvent(event) {
+  return event.eventKind === "conversation_updated" && Boolean(event.conversationTitle?.trim());
+}
+function isToolPhase(phase) {
+  return phase === "using_tool" || phase === "tool_completed";
+}
+function isLiveActivityPhase(value) {
+  return value === "connecting" || value === "accepted" || value === "running" || value === "using_tool" || value === "tool_completed" || value === "needs_input" || value === "needs_approval" || value === "goal_running" || value === "goal_paused" || value === "context_compressing" || value === "context_compressed" || value === "context_compression_failed" || value === "context_compression_timed_out" || value === "paused" || value === "recovering" || value === "completed" || value === "failed" || value === "cancelled";
+}
+function hashLiveActivitySummary(event) {
+  return createHash("sha256").update(
+    [
+      event.phase,
+      event.conversationTitle?.trim() ?? "",
+      event.statusLabel?.trim() ?? "",
+      event.progressText?.trim() ?? "",
+      event.detailText?.trim() ?? "",
+      event.terminal === true ? "terminal" : "update"
+    ].join("|")
+  ).digest("hex");
+}
+function addOptional2(payload, key, value, maxLength) {
+  const normalized = value?.trim();
+  if (normalized) {
+    payload[key] = normalized.slice(0, maxLength);
+  }
+}
+function normalizeIso2(value) {
+  const normalized = value?.trim();
+  if (!normalized) {
+    return null;
+  }
+  const date = new Date(normalized);
+  return Number.isNaN(date.getTime()) ? null : date.toISOString();
+}
+function canonicalJson2(value) {
+  return JSON.stringify(sortJsonValue2(value));
+}
+function sortJsonValue2(value) {
+  if (Array.isArray(value)) {
+    return value.map(sortJsonValue2);
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const sorted = {};
+    for (const key of Object.keys(record).sort()) {
+      sorted[key] = sortJsonValue2(record[key]);
+    }
+    return sorted;
+  }
+  return value;
+}
+function readErrorMessage2(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return null;
+  }
+  const error = payload.error;
+  if (typeof error !== "object" || error === null) {
+    return null;
+  }
+  const message = error.message;
+  return typeof message === "string" ? message : null;
+}
+function readApnsReason(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return null;
+  }
+  const reason = payload.apnsReason ?? payload.apns_reason;
+  return typeof reason === "string" ? reason : null;
+}
+function shouldInvalidateLiveActivity(reason) {
+  return ["BadDeviceToken", "Unregistered", "DeviceTokenNotForTopic", "TopicDisallowed"].includes(reason);
+}
+
 // src/hermes/gateway.ts
 import { execFile as execFile2, spawn } from "child_process";
 import { access, readFile as readFile5, stat as stat4 } from "fs/promises";
@@ -11465,7 +12128,7 @@ function toRecord3(value) {
 }
 
 // src/conversations/approvals.ts
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 var LINK_APPROVAL_RESUME_HINT_ZH = "Hermes \u5F53\u524D\u8FD8\u672A\u63D0\u4F9B\u53EF\u8C03\u7528\u7684\u5BA1\u6279\u7EED\u8DD1\u63A5\u53E3\uFF0C\u60A8\u53EF\u4EE5\u70B9\u51FB\u201C\u59CB\u7EC8\u5141\u8BB8\u201D\uFF0C\u7136\u540E\u91CD\u65B0\u53D1\u51FA\u547D\u4EE4\uFF0C\u6216\u5728\u201CProfile \u6743\u9650\u201D\u8BBE\u7F6E\u9875\u9762\u4FEE\u6539\u5BA1\u6279\u7B56\u7565\u3002";
 var LINK_APPROVAL_RESUME_HINT_EN = "Hermes does not yet provide a callable approval-resume API. Tap \u201CAlways allow\u201D, then send the command again, or change the approval policy on the \u201CProfile permissions\u201D settings page.";
 var LINK_APPROVAL_CONFIRM_HINT_ZH = "\u8BF7\u786E\u8BA4\u662F\u5426\u5141\u8BB8 Hermes \u7EE7\u7EED\u6267\u884C\u8FD9\u6761\u547D\u4EE4\u3002";
@@ -11565,7 +12228,7 @@ function coerceRecord(value) {
   return toRecord4(value);
 }
 function createApprovalId(input) {
-  const digest = createHash("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.command).update("\0").update(input.patternKey ?? "").digest("hex").slice(0, 24);
+  const digest = createHash2("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.command).update("\0").update(input.patternKey ?? "").digest("hex").slice(0, 24);
   return `approval_${digest}`;
 }
 function readString6(payload, key) {
@@ -11583,7 +12246,7 @@ function toRecord4(value) {
 }
 
 // src/conversations/input-requests.ts
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 function extractInputRequestFromEvent(input) {
   const kind = readInputRequestKind(input.event.payloadType);
   if (!kind) {
@@ -11731,7 +12394,7 @@ function readInputRequestKind(payloadType) {
   return null;
 }
 function createInputRequestId(input) {
-  const digest = createHash2("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.kind).update("\0").update(input.hermesRequestId).digest("hex").slice(0, 24);
+  const digest = createHash3("sha256").update(input.runId).update("\0").update(input.messageId).update("\0").update(input.kind).update("\0").update(input.hermesRequestId).digest("hex").slice(0, 24);
   return `input_${digest}`;
 }
 function readString7(payload, key) {
@@ -12207,7 +12870,7 @@ import { mkdir as mkdir6, readFile as readFile7, readdir as readdir4, rm as rm3,
 import path11 from "path";
 
 // src/conversations/media.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import path10 from "path";
 
 // src/conversations/delivery-contract.ts
@@ -12419,7 +13082,7 @@ function readImportedMediaSourceKeys(message) {
   );
 }
 function mediaSourceKey(sourcePath) {
-  return createHash3("sha256").update(resolveMediaSourcePath(sourcePath)).digest("hex").slice(0, 32);
+  return createHash4("sha256").update(resolveMediaSourcePath(sourcePath)).digest("hex").slice(0, 32);
 }
 function sanitizeFilename(value, fallback) {
   const base = path10.basename((value ?? "").replace(/[\r\n\t]/gu, " ").trim());
@@ -17685,7 +18348,7 @@ function isConversationNotFoundError(error) {
 }
 
 // src/conversations/agent-events.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 var APP_TOOL_EVENT_FIELDS_TO_DROP = /* @__PURE__ */ new Set([
   "output",
   "content",
@@ -17726,7 +18389,7 @@ function projectAgentEvent(input) {
     summary,
     args
   });
-  const detail = status === "failed" ? readErrorMessage2(input.payload) ?? actionSummary ?? void 0 : actionSummary ?? void 0;
+  const detail = status === "failed" ? readErrorMessage3(input.payload) ?? actionSummary ?? void 0 : actionSummary ?? void 0;
   const subtitle = actionSummary ?? (status === "running" ? agentEventText(input.language, `\u6B63\u5728\u8C03\u7528 ${name}`, `Running ${name}`) : status === "completed" ? agentEventText(input.language, `${name} \u5DF2\u5B8C\u6210`, `${name} done`) : agentEventText(input.language, `${name} \u6267\u884C\u5931\u8D25`, `${name} failed`));
   return {
     id,
@@ -18068,9 +18731,9 @@ function stableStringify(value) {
   }
 }
 function hashAgentEventKey(value) {
-  return createHash4("sha256").update(value).digest("hex").slice(0, 16);
+  return createHash5("sha256").update(value).digest("hex").slice(0, 16);
 }
-function readErrorMessage2(payload) {
+function readErrorMessage3(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
@@ -21705,7 +22368,7 @@ function isNodeError14(error, code) {
 }
 
 // src/conversations/run-lifecycle.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import { readdir as readdir9 } from "fs/promises";
 
 // src/hermes/api-server.ts
@@ -24775,7 +25438,7 @@ function isNodeError17(error, code) {
 }
 
 // src/conversations/run-tool-event-ids.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 var RunToolEventIdCoalescer = class {
   scope;
   ordinal = 0;
@@ -24940,7 +25603,7 @@ function stableStringify2(value) {
   }
 }
 function hashStableValue(value) {
-  return createHash5("sha256").update(value).digest("hex").slice(0, 16);
+  return createHash6("sha256").update(value).digest("hex").slice(0, 16);
 }
 function readString17(payload, key) {
   const value = payload[key];
@@ -24964,7 +25627,7 @@ function normalizeHermesStreamEvent(event) {
         ...event.payload,
         type: "run.failed",
         error: {
-          message: readErrorMessage3(event.payload) ?? readDelta(event.payload) ?? "Hermes run failed"
+          message: readErrorMessage4(event.payload) ?? readDelta(event.payload) ?? "Hermes run failed"
         }
       }
     };
@@ -25154,7 +25817,7 @@ function normalizeStreamingTextDelta(currentText, nextChunk) {
   }
   return nextChunk;
 }
-function readErrorMessage3(payload) {
+function readErrorMessage4(payload) {
   if (typeof payload.error === "string" && payload.error.trim()) {
     return payload.error.trim();
   }
@@ -25197,7 +25860,7 @@ function isTopLevelErrorEvent(event) {
   if (type.startsWith("tool.")) {
     return false;
   }
-  return type === "error" || type === "run.error" || event.eventName === "error" || Boolean(readErrorMessage3(event.payload));
+  return type === "error" || type === "run.error" || event.eventName === "error" || Boolean(readErrorMessage4(event.payload));
 }
 function readChatCompletionDelta(payload) {
   const choice = readFirstChoice(payload);
@@ -26173,7 +26836,7 @@ var ConversationRunLifecycle = class {
       await this.failRun(
         input.conversationId,
         input.runId,
-        readErrorMessage3(input.event.payload) ?? "Hermes run failed",
+        readErrorMessage4(input.event.payload) ?? "Hermes run failed",
         input.event
       );
       return true;
@@ -27375,7 +28038,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     run.status = "failed";
     run.completed_at = (/* @__PURE__ */ new Date()).toISOString();
     run.error_message = message;
-    run.error_detail = source ? readErrorMessage3(source.payload) ?? void 0 : void 0;
+    run.error_detail = source ? readErrorMessage4(source.payload) ?? void 0 : void 0;
     const language = run.language === "en" ? "en" : "zh-CN";
     const visibleMessage = formatFailureMessage(
       message,
@@ -27728,7 +28391,7 @@ ${details.join("\n")}` : localizedEmptyHermesResponseMessage(language);
     if (raw.length <= 200) {
       return raw;
     }
-    return `hermespilot:${createHash6("sha256").update(raw).digest("hex")}`;
+    return `hermespilot:${createHash7("sha256").update(raw).digest("hex")}`;
   }
   async assistantMessageIdForRun(conversationId, runId) {
     const snapshot = await this.deps.readSnapshot(conversationId).catch(() => null);
@@ -28345,15 +29008,15 @@ function previewText2(message) {
   return text ? text.slice(0, 512) : null;
 }
 function runNotificationSourceEventId(conversationId, runId, eventKind) {
-  const digest = createHash6("sha256").update(`${conversationId}:${runId}:${eventKind}`).digest("hex").slice(0, 24);
+  const digest = createHash7("sha256").update(`${conversationId}:${runId}:${eventKind}`).digest("hex").slice(0, 24);
   return `${conversationId}:${eventKind}:${digest}`;
 }
 function approvalNotificationSourceEventId(conversationId, runId, approvalId) {
-  const digest = createHash6("sha256").update(`${conversationId}:${runId}:${approvalId}:approval_required`).digest("hex").slice(0, 24);
+  const digest = createHash7("sha256").update(`${conversationId}:${runId}:${approvalId}:approval_required`).digest("hex").slice(0, 24);
   return `${conversationId}:approval_required:${digest}`;
 }
 function inputRequestNotificationSourceEventId(conversationId, runId, inputRequestId) {
-  const digest = createHash6("sha256").update(`${conversationId}:${runId}:${inputRequestId}:input_required`).digest("hex").slice(0, 24);
+  const digest = createHash7("sha256").update(`${conversationId}:${runId}:${inputRequestId}:input_required`).digest("hex").slice(0, 24);
   return `${conversationId}:input_required:${digest}`;
 }
 async function closeSseIterator(iterator) {
@@ -30084,8 +30747,40 @@ var ConversationService = class {
     const event = await this.store.appendEvent(conversationId, input);
     this.emitter.emit(this.liveEventName(conversationId), event);
     this.emitter.emit(ALL_CONVERSATION_EVENTS, event);
+    void this.reportLiveActivityEvent(conversationId, event);
     return event;
   }
+  async reportLiveActivityEvent(conversationId, event) {
+    try {
+      const [manifest, snapshot] = await Promise.all([
+        this.store.readManifest(conversationId),
+        this.store.readSnapshot(conversationId)
+      ]);
+      if (manifest.status !== "active" || !manifest.owner_account_id) {
+        return;
+      }
+      const liveActivityEvent = buildLiveActivityEvent({
+        manifest,
+        snapshot,
+        event
+      });
+      if (!liveActivityEvent) {
+        return;
+      }
+      await reportLiveActivityEventToServer({
+        paths: this.paths,
+        logger: this.logger,
+        event: liveActivityEvent
+      });
+    } catch (error) {
+      void this.logger.warn("live_activity_event_report_failed", {
+        conversation_id: conversationId,
+        event_type: event.type,
+        event_seq: event.seq,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
   abortActiveRunsForConversation(conversationId) {
     for (const [runId, active] of this.activeRunControllers) {
       if (active.conversationId !== conversationId) {
@@ -30123,7 +30818,7 @@ function findApproval(snapshot, approvalId) {
   return null;
 }
 function cronNotificationSourceEventId(conversationId, jobId, outputPath, eventKind) {
-  const digest = createHash7("sha256").update(`${conversationId}:${jobId}:${outputPath}:${eventKind}`).digest("hex").slice(0, 24);
+  const digest = createHash8("sha256").update(`${conversationId}:${jobId}:${outputPath}:${eventKind}`).digest("hex").slice(0, 24);
   return `${conversationId}:${eventKind}:${digest}`;
 }
 function conversationHermesSessionIds(manifest) {
@@ -30189,12 +30884,315 @@ function notificationPreviewText(message) {
   const text = messageText(message).replace(/<[^>]+>/gu, " ").replace(/\s+/gu, " ").trim();
   return text ? text.slice(0, 512) : null;
 }
+function buildLiveActivityEvent(input) {
+  const run = liveActivityRunForEvent(input.event, input.snapshot);
+  const contextOperation = readContextCompressionOperation(input.event.payload);
+  const target = resolveLiveActivityTarget({ event: input.event, run, contextOperation });
+  if (!target) {
+    return null;
+  }
+  const phase = liveActivityPhaseForEvent(input.event, run, contextOperation);
+  if (!phase) {
+    return null;
+  }
+  const language = run?.language === "en" ? "en" : "zh";
+  const text = liveActivityTextForEvent({
+    event: input.event,
+    snapshot: input.snapshot,
+    run,
+    phase,
+    language,
+    contextOperation
+  });
+  return {
+    sourceEventId: `${input.manifest.id}:${input.event.seq}:${input.event.type}`,
+    eventKind: input.event.type.replace(/\./gu, "_"),
+    conversationId: input.manifest.id,
+    conversationTitle: liveActivityConversationTitle(input.manifest, input.event, phase, language),
+    accountId: input.manifest.owner_account_id,
+    appInstanceId: input.manifest.owner_app_instance_id,
+    targetKind: target.kind,
+    targetId: target.id,
+    runId: target.kind === "run" ? target.id : void 0,
+    operationId: target.kind === "context_compression" ? target.id : contextOperation?.operation_id,
+    phase,
+    statusLabel: text.statusLabel,
+    progressText: text.progressText,
+    detailText: text.detailText,
+    requiresUserAction: phase === "needs_input" || phase === "needs_approval",
+    terminal: isLiveActivityTerminalEvent(phase, target.kind),
+    occurredAt: input.event.created_at
+  };
+}
+function liveActivityConversationTitle(manifest, event, phase, language) {
+  if (phase === "goal_running" || phase === "goal_paused") {
+    const goal = manifest.command_state?.goal;
+    const rawTitle = goal?.title?.trim() || goal?.content?.trim() || "";
+    if (!rawTitle) {
+      return null;
+    }
+    const title = truncateLiveActivityTitle(rawTitle, 18);
+    return language === "en" ? `Goal: ${title}` : `\u76EE\u6807\uFF1A${title}`;
+  }
+  const eventTitle = liveActivityTitleFromConversationUpdate(event);
+  if (eventTitle !== void 0) {
+    return eventTitle;
+  }
+  return liveActivityTitleFromManifest(manifest);
+}
+function liveActivityTitleFromConversationUpdate(event) {
+  if (event.type.toLowerCase() !== "conversation.updated") {
+    return void 0;
+  }
+  const titleSource = readString20(event.payload, "title_source");
+  if (titleSource === "default" || titleSource === "temporary_fallback") {
+    return null;
+  }
+  const title = readString20(event.payload, "title");
+  return title ? truncateLiveActivityTitle(title, 24) : null;
+}
+function liveActivityTitleFromManifest(manifest) {
+  if (manifest.title_source === "default" || manifest.title_source === "temporary_fallback") {
+    return null;
+  }
+  if (isDefaultConversationTitle(manifest.title)) {
+    return null;
+  }
+  return truncateLiveActivityTitle(manifest.title, 24);
+}
+function truncateLiveActivityTitle(value, maxLength) {
+  const normalized = value.replace(/\s+/gu, " ").trim();
+  if (!normalized) {
+    return null;
+  }
+  const chars = Array.from(normalized);
+  if (chars.length <= maxLength) {
+    return normalized;
+  }
+  return `${chars.slice(0, maxLength).join("")}...`;
+}
+function liveActivityRunForEvent(event, snapshot) {
+  if (event.run_id) {
+    return snapshot.runs.find((item) => item.id === event.run_id) ?? null;
+  }
+  if (!isConversationTitleUpdateEvent(event)) {
+    return null;
+  }
+  return latestTrackableLiveActivityRun(snapshot);
+}
+function latestTrackableLiveActivityRun(snapshot) {
+  const candidates = snapshot.runs.filter((run) => run.status === "running" || run.status === "queued").sort((left, right) => Date.parse(right.started_at) - Date.parse(left.started_at));
+  return candidates[0] ?? null;
+}
+function isConversationTitleUpdateEvent(event) {
+  if (event.type.toLowerCase() !== "conversation.updated") {
+    return false;
+  }
+  return Boolean(readString20(event.payload, "title")?.trim());
+}
+function resolveLiveActivityTarget(input) {
+  if (input.run?.kind === "compression") {
+    const operationId = input.contextOperation?.operation_id ?? input.run.context_compression?.operation_id;
+    return operationId ? { kind: "context_compression", id: operationId } : null;
+  }
+  if (input.run?.id) {
+    return { kind: "run", id: input.run.id };
+  }
+  if (input.contextOperation?.operation_id) {
+    return { kind: "context_compression", id: input.contextOperation.operation_id };
+  }
+  return null;
+}
+function liveActivityPhaseForEvent(event, run, contextOperation) {
+  const type = event.type.toLowerCase();
+  if (type === "run.started" || type === "run.queued") {
+    return run?.mode === "goal" ? "goal_running" : "accepted";
+  }
+  if (type === "conversation.goal.updated") {
+    const goal = readRecord(event.payload).goal;
+    const status = readString20(goal, "status");
+    return status === "paused" ? "goal_paused" : "goal_running";
+  }
+  if (isConversationTitleUpdateEvent(event)) {
+    return run?.mode === "goal" ? "goal_running" : "running";
+  }
+  if (type === "tool.started") {
+    return "using_tool";
+  }
+  if (type === "tool.completed") {
+    return "tool_completed";
+  }
+  if (type === "input_request.created") {
+    return "needs_input";
+  }
+  if (type === "approval.requested") {
+    return "needs_approval";
+  }
+  if (type === "reasoning.available") {
+    return run?.mode === "goal" ? "goal_running" : "running";
+  }
+  if (type === "context_compression.started") {
+    return "context_compressing";
+  }
+  if (type === "context_compression.completed") {
+    return "context_compressed";
+  }
+  if (type === "context_compression.failed") {
+    return contextOperation?.status === "timed_out" ? "context_compression_timed_out" : "context_compression_failed";
+  }
+  if (type === "context_compression.timed_out") {
+    return "context_compression_timed_out";
+  }
+  if (type === "run.completed") {
+    return "completed";
+  }
+  if (type === "run.failed") {
+    return "failed";
+  }
+  if (type === "run.cancelled" || type === "run.canceled") {
+    return "cancelled";
+  }
+  return null;
+}
+function liveActivityTextForEvent(input) {
+  const toolName = readToolName2(input.event.payload);
+  const assistantText = input.event.message_id ? input.snapshot.messages.find((message) => message.id === input.event.message_id) : null;
+  const preview = input.event.type.toLowerCase() === "reasoning.available" ? liveActivityReasoningPreview(input.event.payload) : isLiveActivityTerminalEvent(input.phase, input.run?.kind === "compression" ? "context_compression" : "run") && assistantText ? notificationPreviewText(assistantText) : null;
+  if (input.language === "en") {
+    return liveActivityTextEn(input.phase, toolName, preview, input.contextOperation);
+  }
+  return liveActivityTextZh(input.phase, toolName, preview, input.contextOperation);
+}
+function liveActivityTextZh(phase, toolName, preview, contextOperation) {
+  switch (phase) {
+    case "using_tool":
+      return { statusLabel: "\u8C03\u7528\u5DE5\u5177", progressText: toolName ? `\u6B63\u5728\u4F7F\u7528 ${toolName}` : "Hermes \u6B63\u5728\u8C03\u7528\u5DE5\u5177", detailText: preview ?? void 0 };
+    case "tool_completed":
+      return { statusLabel: "\u5DE5\u5177\u5B8C\u6210", progressText: toolName ? `${toolName} \u5DF2\u5B8C\u6210` : "\u5DE5\u5177\u8C03\u7528\u5DF2\u5B8C\u6210", detailText: preview ?? void 0 };
+    case "needs_input":
+      return { statusLabel: "\u9700\u56DE\u590D", progressText: "Hermes \u9700\u8981\u4F60\u8865\u5145\u4FE1\u606F", detailText: "\u70B9\u51FB\u56DE\u5230 App \u7EE7\u7EED\u3002" };
+    case "needs_approval":
+      return { statusLabel: "\u9700\u6388\u6743", progressText: "Hermes \u8BF7\u6C42\u6267\u884C\u6743\u9650", detailText: "\u70B9\u51FB\u56DE\u5230 App \u67E5\u770B\u3002" };
+    case "goal_running":
+      return { statusLabel: "\u76EE\u6807\u4E2D", progressText: "Hermes \u6B63\u5728\u63A8\u8FDB\u76EE\u6807", detailText: preview ?? "\u6B63\u5728\u6267\u884C\u4E0B\u4E00\u6B65\u3002" };
+    case "goal_paused":
+      return { statusLabel: "\u5F85\u6307\u5F15", progressText: "\u76EE\u6807\u4EFB\u52A1\u7B49\u5F85\u4F60\u7684\u6307\u5F15", detailText: "\u70B9\u51FB\u56DE\u5230 App \u7EE7\u7EED\u3002" };
+    case "context_compressing":
+      return {
+        statusLabel: contextOperation?.source === "auto" ? "\u6574\u7406\u4E2D" : "\u538B\u7F29\u4E2D",
+        progressText: contextOperation?.source === "auto" ? "Hermes \u6B63\u5728\u81EA\u52A8\u6574\u7406\u4E0A\u4E0B\u6587" : "Hermes \u6B63\u5728\u6574\u7406\u4E0A\u4E0B\u6587",
+        detailText: contextOperation?.source === "auto" ? "\u6211\u5148\u6574\u7406\u4E0A\u4E0B\u6587\uFF0C\u518D\u7EE7\u7EED\u6267\u884C\u3002" : "\u6211\u6B63\u5728\u538B\u7F29\u5F53\u524D\u4F1A\u8BDD\u4E0A\u4E0B\u6587\u3002"
+      };
+    case "context_compressed":
+      return { statusLabel: "\u5DF2\u6574\u7406", progressText: "\u4E0A\u4E0B\u6587\u5DF2\u6574\u7406", detailText: "\u53EF\u4EE5\u7EE7\u7EED\u5F53\u524D\u4EFB\u52A1\u3002" };
+    case "context_compression_failed":
+      return { statusLabel: "\u538B\u7F29\u5931\u8D25", progressText: "\u4E0A\u4E0B\u6587\u538B\u7F29\u5931\u8D25", detailText: "\u70B9\u51FB\u56DE\u5230 App \u67E5\u770B\u8BE6\u60C5\u3002" };
+    case "context_compression_timed_out":
+      return { statusLabel: "\u538B\u7F29\u8D85\u65F6", progressText: "\u6B63\u5728\u6062\u590D Hermes", detailText: "\u6267\u884C\u540E\u7AEF\u6B63\u5728\u6062\u590D\u3002" };
+    case "completed":
+      return { statusLabel: "\u5B8C\u6210", progressText: "\u4EFB\u52A1\u5DF2\u5B8C\u6210", detailText: preview ?? "\u70B9\u51FB\u67E5\u770B\u7ED3\u679C\u3002" };
+    case "failed":
+      return { statusLabel: "\u5931\u8D25", progressText: "\u4EFB\u52A1\u8FD0\u884C\u5931\u8D25", detailText: "\u70B9\u51FB\u67E5\u770B\u5931\u8D25\u8BE6\u60C5\u3002" };
+    case "cancelled":
+      return { statusLabel: "\u5DF2\u53D6\u6D88", progressText: "\u4EFB\u52A1\u5DF2\u53D6\u6D88", detailText: "\u70B9\u51FB\u56DE\u5230 App \u67E5\u770B\u3002" };
+    default:
+      return { statusLabel: "\u6267\u884C\u4E2D", progressText: "\u6B63\u5728\u5904\u7406\u4F60\u7684\u8BF7\u6C42", detailText: preview ?? void 0 };
+  }
+}
+function liveActivityTextEn(phase, toolName, preview, contextOperation) {
+  switch (phase) {
+    case "using_tool":
+      return { statusLabel: "Tool", progressText: toolName ? `Using ${toolName}` : "Hermes is using a tool", detailText: preview ?? void 0 };
+    case "tool_completed":
+      return { statusLabel: "Tool done", progressText: toolName ? `${toolName} completed` : "Tool completed", detailText: preview ?? void 0 };
+    case "needs_input":
+      return { statusLabel: "Reply", progressText: "Hermes needs your response", detailText: "Open the app to continue." };
+    case "needs_approval":
+      return { statusLabel: "Approve", progressText: "Hermes needs approval", detailText: "Open the app to review it." };
+    case "goal_running":
+      return { statusLabel: "Goal", progressText: "Hermes is working on the goal", detailText: preview ?? "Working through the next step." };
+    case "goal_paused":
+      return { statusLabel: "Guide", progressText: "Goal needs guidance", detailText: "Open the app to continue." };
+    case "context_compressing":
+      return {
+        statusLabel: contextOperation?.source === "auto" ? "Tidying" : "Compact",
+        progressText: contextOperation?.source === "auto" ? "Hermes is reorganizing context" : "Hermes is compacting context",
+        detailText: contextOperation?.source === "auto" ? "Tidying context before continuing." : "Compacting this conversation context."
+      };
+    case "context_compressed":
+      return { statusLabel: "Ready", progressText: "Context compacted", detailText: "You can continue this task." };
+    case "context_compression_failed":
+      return { statusLabel: "Failed", progressText: "Context compression failed", detailText: "Open the app for details." };
+    case "context_compression_timed_out":
+      return { statusLabel: "Timeout", progressText: "Restoring Hermes", detailText: "The execution backend is recovering." };
+    case "completed":
+      return { statusLabel: "Done", progressText: "Task completed", detailText: preview ?? "Open the app to view the result." };
+    case "failed":
+      return { statusLabel: "Failed", progressText: "Task failed", detailText: "Open the app for details." };
+    case "cancelled":
+      return { statusLabel: "Canceled", progressText: "Task canceled", detailText: "Open the app for details." };
+    default:
+      return { statusLabel: "Running", progressText: "Working on your request", detailText: preview ?? void 0 };
+  }
+}
+function liveActivityReasoningPreview(payload) {
+  const text = readString20(payload, "text")?.replace(/<[^>]+>/gu, " ").replace(/\s+/gu, " ").trim();
+  return liveActivityCleanAssistantPreview(text);
+}
+function liveActivityCleanAssistantPreview(text) {
+  const normalized = text?.replace(/\s+/gu, " ").trim();
+  if (!normalized || normalized.length < 4) {
+    return null;
+  }
+  if (looksUnsafeForLockScreen(normalized)) {
+    return null;
+  }
+  return normalized.length > 90 ? `${normalized.slice(0, 90)}...` : normalized;
+}
+function looksUnsafeForLockScreen(text) {
+  return /(?:^|\s)(?:https?:\/\/|\/[A-Za-z0-9_.-]+\/|[A-Za-z]:\\|[A-Z_]{8,}=)/u.test(text) || /(?:```|<\?xml|BEGIN [A-Z ]+KEY|token|api[_ -]?key|password|secret)/iu.test(text);
+}
+function isLiveActivityTerminalEvent(phase, targetKind) {
+  if (phase === "completed" || phase === "failed" || phase === "cancelled") {
+    return true;
+  }
+  return targetKind === "context_compression" && (phase === "context_compressed" || phase === "context_compression_failed" || phase === "context_compression_timed_out");
+}
+function readContextCompressionOperation(payload) {
+  const operation = readRecord(payload).operation;
+  if (!operation || typeof operation !== "object") {
+    return null;
+  }
+  const operationId = readString20(operation, "operation_id");
+  if (!operationId) {
+    return null;
+  }
+  const record = operation;
+  return {
+    operation_id: operationId,
+    generation: typeof record.generation === "number" ? record.generation : 0,
+    status: readString20(record, "status") === "completed" ? "completed" : readString20(record, "status") === "failed" ? "failed" : readString20(record, "status") === "timed_out" ? "timed_out" : readString20(record, "status") === "cancelled" ? "cancelled" : "compressing",
+    started_at: readString20(record, "started_at") ?? (/* @__PURE__ */ new Date()).toISOString(),
+    source: readString20(record, "source") === "manual" ? "manual" : "auto"
+  };
+}
+function readToolName2(payload) {
+  const record = readRecord(payload);
+  return readString20(record, "tool_name") ?? readString20(record, "tool") ?? readString20(record, "name") ?? readString20(readRecord(record.tool), "name");
+}
+function readRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
+}
+function readString20(value, key) {
+  const raw = readRecord(value)[key];
+  return typeof raw === "string" && raw.trim() ? raw.trim() : null;
+}
 function approvalRestartText(language, zh, en) {
   return language === "en" ? en : zh;
 }
 
 // src/security/devices.ts
-import { randomBytes as randomBytes3, randomUUID as randomUUID13, timingSafeEqual, createHash as createHash8 } from "crypto";
+import { randomBytes as randomBytes3, randomUUID as randomUUID13, timingSafeEqual, createHash as createHash9 } from "crypto";
 var ACCESS_TOKEN_TTL_MS = 15 * 60 * 1e3;
 var REFRESH_TOKEN_TTL_MS = 90 * 24 * 60 * 60 * 1e3;
 var DEVICE_SEEN_WRITE_INTERVAL_MS = 60 * 60 * 1e3;
@@ -30490,7 +31488,7 @@ function randomToken(prefix) {
   return `${prefix}${randomBytes3(24).toString("base64url")}`;
 }
 function sha256(value) {
-  return createHash8("sha256").update(value).digest("hex");
+  return createHash9("sha256").update(value).digest("hex");
 }
 function safeEqual(left, right) {
   const leftBytes = Buffer.from(left);
@@ -30697,7 +31695,7 @@ async function readRawBody(request, maxBytes) {
   }
   return Buffer.concat(chunks);
 }
-function readString20(body, key) {
+function readString21(body, key) {
   const value = body[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -30732,7 +31730,7 @@ function readSupportedLanguage(value) {
   return null;
 }
 function readOptionalProfileName(body) {
-  return readString20(body, "profile") ?? readString20(body, "profile_name") ?? readString20(body, "profileName") ?? void 0;
+  return readString21(body, "profile") ?? readString21(body, "profile_name") ?? readString21(body, "profileName") ?? void 0;
 }
 function readStringArray(body, ...keys) {
   for (const key of keys) {
@@ -31152,7 +32150,7 @@ function registerConversationRoutes(router, options) {
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
     ctx.status = 201;
-    const rawReasoningEffort = readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? readString20(body, "default_reasoning_effort") ?? readString20(body, "defaultReasoningEffort");
+    const rawReasoningEffort = readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? readString21(body, "default_reasoning_effort") ?? readString21(body, "defaultReasoningEffort");
     const reasoningEffort = normalizeReasoningEffort(rawReasoningEffort);
     if (rawReasoningEffort && !reasoningEffort) {
       throw new LinkHttpError(
@@ -31165,15 +32163,15 @@ function registerConversationRoutes(router, options) {
       ok: true,
       conversation: localizeConversationSummary(
         await conversations.createConversation({
-          title: readString20(body, "title") ?? void 0,
+          title: readString21(body, "title") ?? void 0,
           profileName: readOptionalProfileName(body),
           accountId: auth.accountId,
           appInstanceId: auth.appInstanceId,
           workspaceId: readConversationWorkspaceId(body),
-          modelId: readString20(body, "model_id") ?? readString20(body, "modelId") ?? readString20(body, "model") ?? void 0,
-          modelProvider: readString20(body, "model_provider") ?? readString20(body, "modelProvider") ?? readString20(body, "provider") ?? void 0,
-          modelBaseUrl: readString20(body, "model_base_url") ?? readString20(body, "modelBaseUrl") ?? readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0,
-          modelApiMode: readString20(body, "model_api_mode") ?? readString20(body, "modelApiMode") ?? readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0,
+          modelId: readString21(body, "model_id") ?? readString21(body, "modelId") ?? readString21(body, "model") ?? void 0,
+          modelProvider: readString21(body, "model_provider") ?? readString21(body, "modelProvider") ?? readString21(body, "provider") ?? void 0,
+          modelBaseUrl: readString21(body, "model_base_url") ?? readString21(body, "modelBaseUrl") ?? readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0,
+          modelApiMode: readString21(body, "model_api_mode") ?? readString21(body, "modelApiMode") ?? readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0,
           reasoningEffort
         }),
         language
@@ -31250,9 +32248,9 @@ function registerConversationRoutes(router, options) {
     const auth = await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const content = readString20(body, "content") ?? readString20(body, "text") ?? readString20(body, "input") ?? "";
+    const content = readString21(body, "content") ?? readString21(body, "text") ?? readString21(body, "input") ?? "";
     const attachments = readMessageAttachments(body.attachments ?? body.blobs);
-    const mode = readString20(body, "mode") ?? readString20(body, "send_mode");
+    const mode = readString21(body, "mode") ?? readString21(body, "send_mode");
     if (mode && mode !== "message" && mode !== "goal") {
       throw new LinkHttpError(
         400,
@@ -31275,7 +32273,7 @@ function registerConversationRoutes(router, options) {
           conversationId: ctx.params.conversationId,
           content,
           attachments,
-          clientMessageId: readString20(body, "client_message_id") ?? readString20(body, "clientMessageId") ?? void 0,
+          clientMessageId: readString21(body, "client_message_id") ?? readString21(body, "clientMessageId") ?? void 0,
           idempotencyKey: readHeader(ctx, "idempotency-key") ?? void 0,
           profileName: readOptionalProfileName(body),
           mode: mode === "goal" ? "goal" : "message",
@@ -31342,8 +32340,8 @@ function registerConversationRoutes(router, options) {
         ...localizeConversationResult(
           await conversations.startContextCompression({
             conversationId: ctx.params.conversationId,
-            focus: readString20(body, "focus") ?? readString20(body, "focus_topic") ?? readString20(body, "focusTopic") ?? void 0,
-            clientOperationId: readString20(body, "client_operation_id") ?? readString20(body, "clientOperationId") ?? readHeader(ctx, "idempotency-key") ?? void 0,
+            focus: readString21(body, "focus") ?? readString21(body, "focus_topic") ?? readString21(body, "focusTopic") ?? void 0,
+            clientOperationId: readString21(body, "client_operation_id") ?? readString21(body, "clientOperationId") ?? readHeader(ctx, "idempotency-key") ?? void 0,
             createUserMessage: false,
             accountId: auth.accountId,
             appInstanceId: auth.appInstanceId,
@@ -31357,11 +32355,11 @@ function registerConversationRoutes(router, options) {
   router.patch("/api/v1/conversations/:conversationId/model", async (ctx) => {
     await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const modelId = readString20(body, "model_id") ?? readString20(body, "modelId") ?? readString20(body, "model");
-    const modelProvider = readString20(body, "model_provider") ?? readString20(body, "modelProvider") ?? readString20(body, "provider") ?? void 0;
-    const modelBaseUrl = readString20(body, "model_base_url") ?? readString20(body, "modelBaseUrl") ?? readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0;
-    const modelApiMode = readString20(body, "model_api_mode") ?? readString20(body, "modelApiMode") ?? readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0;
-    const rawReasoningEffort = readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? readString20(body, "default_reasoning_effort") ?? readString20(body, "defaultReasoningEffort");
+    const modelId = readString21(body, "model_id") ?? readString21(body, "modelId") ?? readString21(body, "model");
+    const modelProvider = readString21(body, "model_provider") ?? readString21(body, "modelProvider") ?? readString21(body, "provider") ?? void 0;
+    const modelBaseUrl = readString21(body, "model_base_url") ?? readString21(body, "modelBaseUrl") ?? readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0;
+    const modelApiMode = readString21(body, "model_api_mode") ?? readString21(body, "modelApiMode") ?? readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0;
+    const rawReasoningEffort = readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? readString21(body, "default_reasoning_effort") ?? readString21(body, "defaultReasoningEffort");
     const reasoningEffort = normalizeReasoningEffort(rawReasoningEffort);
     if (rawReasoningEffort && !reasoningEffort) {
       throw new LinkHttpError(
@@ -31411,7 +32409,7 @@ function registerConversationRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const title = readString20(body, "title") ?? readString20(body, "name") ?? readString20(body, "display_name");
+    const title = readString21(body, "title") ?? readString21(body, "name") ?? readString21(body, "display_name");
     if (!title) {
       throw new LinkHttpError(400, "title_required", "title is required");
     }
@@ -31603,7 +32601,7 @@ function registerConversationRoutes(router, options) {
     async (ctx) => {
       await authenticateRequest(ctx, paths);
       const body = await readJsonBody(ctx.req);
-      const scope = readString20(body, "scope") ?? "always";
+      const scope = readString21(body, "scope") ?? "always";
       ctx.body = {
         ok: true,
         ...await conversations.resolveApproval({
@@ -31653,7 +32651,7 @@ function registerConversationRoutes(router, options) {
           conversationId: ctx.params.conversationId,
           requestId: ctx.params.requestId,
           kind,
-          answer: readString20(body, "answer") ?? void 0,
+          answer: readString21(body, "answer") ?? void 0,
           password: readRawString(body, "password"),
           value: readRawString(body, "value")
         })
@@ -31815,10 +32813,10 @@ function readConversationWorkspaceFilter(query) {
 }
 function readConversationWorkspaceId(body) {
   if (Object.prototype.hasOwnProperty.call(body, "workspace_id") || Object.prototype.hasOwnProperty.call(body, "workspaceId")) {
-    return readString20(body, "workspace_id") ?? readString20(body, "workspaceId");
+    return readString21(body, "workspace_id") ?? readString21(body, "workspaceId");
   }
   if (Object.prototype.hasOwnProperty.call(body, "workspace")) {
-    return readString20(body, "workspace");
+    return readString21(body, "workspace");
   }
   return void 0;
 }
@@ -31912,7 +32910,7 @@ function resolveConversationEventCursor(input) {
   return Math.max(queryAfter, headerAfter);
 }
 function readConversationClearPlanTargetStatus(body) {
-  const raw = readString20(body, "target_status") ?? readString20(body, "targetStatus") ?? "active";
+  const raw = readString21(body, "target_status") ?? readString21(body, "targetStatus") ?? "active";
   if (raw === "active" || raw === "archived") {
     return raw;
   }
@@ -31923,7 +32921,7 @@ function readConversationClearPlanTargetStatus(body) {
   );
 }
 function readInputRequestKind2(body) {
-  const kind = readString20(body, "kind") ?? readString20(body, "type");
+  const kind = readString21(body, "kind") ?? readString21(body, "type");
   if (kind === "clarify" || kind === "sudo" || kind === "secret") {
     return kind;
   }
@@ -32321,7 +33319,7 @@ function toHermesCronJobInput(input) {
   };
 }
 async function bindAndDecorateCronJobForHermesLink(input) {
-  const jobId = readString20(input.job, "id") ?? readString20(input.job, "job_id");
+  const jobId = readString21(input.job, "id") ?? readString21(input.job, "job_id");
   if (!jobId) {
     return input.job;
   }
@@ -32340,9 +33338,9 @@ async function bindAndDecorateCronJobForHermesLink(input) {
 }
 function readCronJobCreateInput(body) {
   const input = {};
-  const name = readString20(body, "name") ?? readString20(body, "title");
-  const prompt = readString20(body, "prompt") ?? readString20(body, "description") ?? readString20(body, "task");
-  const schedule = readString20(body, "schedule");
+  const name = readString21(body, "name") ?? readString21(body, "title");
+  const prompt = readString21(body, "prompt") ?? readString21(body, "description") ?? readString21(body, "task");
+  const schedule = readString21(body, "schedule");
   if (!name) {
     throw new LinkHttpError(400, "cron_job_name_required", "name is required");
   }
@@ -32363,7 +33361,7 @@ function readCronJobCreateInput(body) {
   input.name = name;
   input.prompt = prompt;
   input.schedule = schedule;
-  input.deliver = readString20(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
+  input.deliver = readString21(body, "deliver") ?? HERMES_LINK_CRON_DELIVER;
   const skills = readOptionalCronSkills(body);
   if (skills) {
     input.skills = skills;
@@ -32491,7 +33489,7 @@ function assertCronJobId(jobId) {
 }
 
 // src/http/routes/model-configs.ts
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 
 // src/model-catalog/catalog.ts
 import { randomInt } from "crypto";
@@ -32727,7 +33725,7 @@ function normalizeModelCapabilityCatalog(value) {
   const models = rawModels.map(normalizeModelCapabilityEntry).filter((entry) => entry !== null);
   return {
     schemaVersion: readPositiveInteger3(record.schemaVersion) ?? 1,
-    updatedAt: readString21(record.updatedAt),
+    updatedAt: readString22(record.updatedAt),
     models
   };
 }
@@ -32736,7 +33734,7 @@ function normalizeModelCapabilityEntry(value) {
     return null;
   }
   const record = value;
-  const canonicalId = readString21(record.canonicalId) ?? readString21(record.canonical_id) ?? readString21(record.id);
+  const canonicalId = readString22(record.canonicalId) ?? readString22(record.canonical_id) ?? readString22(record.id);
   if (!canonicalId) {
     return null;
   }
@@ -32764,12 +33762,12 @@ function normalizeModelCapabilityEntry(value) {
     outputModalities: readStringArray2(
       record.outputModalities ?? record.output_modalities
     ),
-    source: readString21(record.source),
-    updatedAt: readString21(record.updatedAt ?? record.updated_at),
-    notes: readString21(record.notes)
+    source: readString22(record.source),
+    updatedAt: readString22(record.updatedAt ?? record.updated_at),
+    notes: readString22(record.notes)
   };
 }
-function readString21(value) {
+function readString22(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readStringArray2(value) {
@@ -32779,7 +33777,7 @@ function readStringArray2(value) {
   const seen = /* @__PURE__ */ new Set();
   const values = [];
   for (const item of value) {
-    const text = readString21(item);
+    const text = readString22(item);
     if (!text || seen.has(text)) {
       continue;
     }
@@ -32796,7 +33794,7 @@ function readPositiveInteger3(value) {
   return Math.floor(number);
 }
 function readReasoningSupportPolicy(value) {
-  const normalized = readString21(value)?.toLowerCase();
+  const normalized = readString22(value)?.toLowerCase();
   if (!normalized || normalized === "unknown" || normalized === "auto") {
     return null;
   }
@@ -32827,7 +33825,7 @@ function readNullableBoolean(value) {
   if (typeof value === "boolean") {
     return value;
   }
-  const normalized = readString21(value)?.toLowerCase();
+  const normalized = readString22(value)?.toLowerCase();
   if (!normalized) {
     return null;
   }
@@ -33720,7 +34718,7 @@ function modelProviderIdFromParts(input) {
     input.keyEnv ?? "",
     input.authType ?? ""
   ].join("");
-  return `mp_${createHash9("sha256").update(identity).digest("hex").slice(0, 18)}`;
+  return `mp_${createHash10("sha256").update(identity).digest("hex").slice(0, 18)}`;
 }
 function mergeCredentialState(left, right) {
   if (left === "configured" || right === "configured") {
@@ -33976,8 +34974,8 @@ function normalizeUrlForIdentity(value) {
   return value.trim().replace(/\/+$/u, "").toLowerCase();
 }
 function readModelProviderConfigInput(body) {
-  const providerName = readString20(body, "display_name") ?? readString20(body, "displayName") ?? readString20(body, "provider_name") ?? readString20(body, "providerName") ?? readString20(body, "name");
-  const baseUrl = readString20(body, "base_url") ?? readString20(body, "baseUrl");
+  const providerName = readString21(body, "display_name") ?? readString21(body, "displayName") ?? readString21(body, "provider_name") ?? readString21(body, "providerName") ?? readString21(body, "name");
+  const baseUrl = readString21(body, "base_url") ?? readString21(body, "baseUrl");
   if (!providerName || !baseUrl) {
     throw new LinkHttpError(
       400,
@@ -33988,15 +34986,15 @@ function readModelProviderConfigInput(body) {
   return {
     providerName,
     baseUrl,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? readString20(body, "transport") ?? void 0,
-    keyEnv: readString20(body, "key_env") ?? readString20(body, "keyEnv") ?? void 0,
-    apiKey: readString20(body, "api_key") ?? readString20(body, "apiKey") ?? void 0
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? readString21(body, "transport") ?? void 0,
+    keyEnv: readString21(body, "key_env") ?? readString21(body, "keyEnv") ?? void 0,
+    apiKey: readString21(body, "api_key") ?? readString21(body, "apiKey") ?? void 0
   };
 }
 function readModelConfigInput(body) {
-  const id = readString20(body, "id") ?? readString20(body, "model_id") ?? readString20(body, "modelId");
-  const provider = readString20(body, "provider") ?? readString20(body, "provider_key") ?? readString20(body, "providerKey");
-  const baseUrl = readString20(body, "base_url") ?? readString20(body, "baseUrl");
+  const id = readString21(body, "id") ?? readString21(body, "model_id") ?? readString21(body, "modelId");
+  const provider = readString21(body, "provider") ?? readString21(body, "provider_key") ?? readString21(body, "providerKey");
+  const baseUrl = readString21(body, "base_url") ?? readString21(body, "baseUrl");
   if (!id || !provider || !baseUrl) {
     throw new LinkHttpError(
       400,
@@ -34006,22 +35004,22 @@ function readModelConfigInput(body) {
   }
   return {
     id,
-    originalModelId: readString20(body, "original_model_id") ?? readString20(body, "originalModelId") ?? readString20(body, "original_id") ?? void 0,
-    originalProvider: readString20(body, "original_provider") ?? readString20(body, "originalProvider") ?? readString20(body, "original_provider_key") ?? readString20(body, "originalProviderKey") ?? void 0,
-    originalBaseUrl: readString20(body, "original_base_url") ?? readString20(body, "originalBaseUrl") ?? void 0,
-    originalApiMode: readString20(body, "original_api_mode") ?? readString20(body, "originalApiMode") ?? void 0,
+    originalModelId: readString21(body, "original_model_id") ?? readString21(body, "originalModelId") ?? readString21(body, "original_id") ?? void 0,
+    originalProvider: readString21(body, "original_provider") ?? readString21(body, "originalProvider") ?? readString21(body, "original_provider_key") ?? readString21(body, "originalProviderKey") ?? void 0,
+    originalBaseUrl: readString21(body, "original_base_url") ?? readString21(body, "originalBaseUrl") ?? void 0,
+    originalApiMode: readString21(body, "original_api_mode") ?? readString21(body, "originalApiMode") ?? void 0,
     provider,
-    providerName: readString20(body, "provider_name") ?? readString20(body, "providerName") ?? void 0,
+    providerName: readString21(body, "provider_name") ?? readString21(body, "providerName") ?? void 0,
     baseUrl,
-    apiKey: readString20(body, "api_key") ?? readString20(body, "apiKey") ?? void 0,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0,
+    apiKey: readString21(body, "api_key") ?? readString21(body, "apiKey") ?? void 0,
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0,
     contextLength: readPositiveInteger2(
       body.context_length ?? body.contextLength
     ),
-    keyEnv: readString20(body, "key_env") ?? readString20(body, "keyEnv") ?? void 0,
+    keyEnv: readString21(body, "key_env") ?? readString21(body, "keyEnv") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault),
-    reasoningEffort: readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? void 0,
-    reasoningSupportPolicy: readString20(body, "reasoning_support_policy") ?? readString20(body, "reasoningSupportPolicy") ?? readString20(body, "reasoning_support") ?? readString20(body, "reasoningSupport") ?? void 0,
+    reasoningEffort: readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? void 0,
+    reasoningSupportPolicy: readString21(body, "reasoning_support_policy") ?? readString21(body, "reasoningSupportPolicy") ?? readString21(body, "reasoning_support") ?? readString21(body, "reasoningSupport") ?? void 0,
     supportsVision: readNullableBoolean2(
       body.supports_vision ?? body.supportsVision
     )
@@ -34029,28 +35027,28 @@ function readModelConfigInput(body) {
 }
 function readModelDefaultsInput(body) {
   return {
-    taskModelId: readString20(body, "task_model_id") ?? readString20(body, "taskModelId") ?? readString20(body, "default_model_id") ?? readString20(body, "defaultModelId") ?? void 0,
-    taskModelProvider: readString20(body, "task_model_provider") ?? readString20(body, "taskModelProvider") ?? readString20(body, "default_model_provider") ?? readString20(body, "defaultModelProvider") ?? void 0,
-    taskModelBaseUrl: readString20(body, "task_model_base_url") ?? readString20(body, "taskModelBaseUrl") ?? readString20(body, "default_model_base_url") ?? readString20(body, "defaultModelBaseUrl") ?? void 0,
-    taskModelApiMode: readString20(body, "task_model_api_mode") ?? readString20(body, "taskModelApiMode") ?? readString20(body, "default_model_api_mode") ?? readString20(body, "defaultModelApiMode") ?? void 0,
-    compressionModelId: readString20(body, "compression_model_id") ?? readString20(body, "compressionModelId") ?? void 0,
-    compressionModelProvider: readString20(body, "compression_model_provider") ?? readString20(body, "compressionModelProvider") ?? void 0,
-    compressionModelBaseUrl: readString20(body, "compression_model_base_url") ?? readString20(body, "compressionModelBaseUrl") ?? void 0,
-    compressionModelApiMode: readString20(body, "compression_model_api_mode") ?? readString20(body, "compressionModelApiMode") ?? void 0,
-    reasoningEffort: readString20(body, "reasoning_effort") ?? readString20(body, "reasoningEffort") ?? readString20(body, "default_reasoning_effort") ?? readString20(body, "defaultReasoningEffort") ?? void 0,
-    imageInputMode: readString20(body, "image_input_mode") ?? readString20(body, "imageInputMode") ?? void 0
+    taskModelId: readString21(body, "task_model_id") ?? readString21(body, "taskModelId") ?? readString21(body, "default_model_id") ?? readString21(body, "defaultModelId") ?? void 0,
+    taskModelProvider: readString21(body, "task_model_provider") ?? readString21(body, "taskModelProvider") ?? readString21(body, "default_model_provider") ?? readString21(body, "defaultModelProvider") ?? void 0,
+    taskModelBaseUrl: readString21(body, "task_model_base_url") ?? readString21(body, "taskModelBaseUrl") ?? readString21(body, "default_model_base_url") ?? readString21(body, "defaultModelBaseUrl") ?? void 0,
+    taskModelApiMode: readString21(body, "task_model_api_mode") ?? readString21(body, "taskModelApiMode") ?? readString21(body, "default_model_api_mode") ?? readString21(body, "defaultModelApiMode") ?? void 0,
+    compressionModelId: readString21(body, "compression_model_id") ?? readString21(body, "compressionModelId") ?? void 0,
+    compressionModelProvider: readString21(body, "compression_model_provider") ?? readString21(body, "compressionModelProvider") ?? void 0,
+    compressionModelBaseUrl: readString21(body, "compression_model_base_url") ?? readString21(body, "compressionModelBaseUrl") ?? void 0,
+    compressionModelApiMode: readString21(body, "compression_model_api_mode") ?? readString21(body, "compressionModelApiMode") ?? void 0,
+    reasoningEffort: readString21(body, "reasoning_effort") ?? readString21(body, "reasoningEffort") ?? readString21(body, "default_reasoning_effort") ?? readString21(body, "defaultReasoningEffort") ?? void 0,
+    imageInputMode: readString21(body, "image_input_mode") ?? readString21(body, "imageInputMode") ?? void 0
   };
 }
 function readModelDeleteInput(body) {
-  const id = readString20(body, "model_id") ?? readString20(body, "modelId");
+  const id = readString21(body, "model_id") ?? readString21(body, "modelId");
   if (!id) {
     throw new LinkHttpError(400, "model_id_required", "model_id is required");
   }
   return {
     id,
-    provider: readString20(body, "provider") ?? readString20(body, "provider_key") ?? readString20(body, "providerKey") ?? void 0,
-    baseUrl: readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0
+    provider: readString21(body, "provider") ?? readString21(body, "provider_key") ?? readString21(body, "providerKey") ?? void 0,
+    baseUrl: readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0,
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0
   };
 }
 function readNullableBoolean2(value) {
@@ -34073,8 +35071,8 @@ function readNullableBoolean2(value) {
   return void 0;
 }
 function readModelConfigImportInput(body) {
-  const sourceProfileName = readString20(body, "source_profile") ?? readString20(body, "sourceProfile") ?? readString20(body, "source_profile_name") ?? readString20(body, "sourceProfileName");
-  const modelId = readString20(body, "model_id") ?? readString20(body, "modelId") ?? readString20(body, "id");
+  const sourceProfileName = readString21(body, "source_profile") ?? readString21(body, "sourceProfile") ?? readString21(body, "source_profile_name") ?? readString21(body, "sourceProfileName");
+  const modelId = readString21(body, "model_id") ?? readString21(body, "modelId") ?? readString21(body, "id");
   if (!sourceProfileName || !modelId) {
     throw new LinkHttpError(
       400,
@@ -34085,9 +35083,9 @@ function readModelConfigImportInput(body) {
   return {
     sourceProfileName,
     modelId,
-    provider: readString20(body, "provider") ?? readString20(body, "provider_key") ?? readString20(body, "providerKey") ?? void 0,
-    baseUrl: readString20(body, "base_url") ?? readString20(body, "baseUrl") ?? void 0,
-    apiMode: readString20(body, "api_mode") ?? readString20(body, "apiMode") ?? void 0,
+    provider: readString21(body, "provider") ?? readString21(body, "provider_key") ?? readString21(body, "providerKey") ?? void 0,
+    baseUrl: readString21(body, "base_url") ?? readString21(body, "baseUrl") ?? void 0,
+    apiMode: readString21(body, "api_mode") ?? readString21(body, "apiMode") ?? void 0,
     setDefault: readBoolean3(body.set_default ?? body.setDefault)
   };
 }
@@ -35392,16 +36390,16 @@ function readProfilePermissionsInput(body) {
   const approvals = readOptionalObject(body, "approvals");
   if (approvals) {
     input.approvals = {
-      mode: readString20(approvals, "mode") ?? readString20(approvals, "approval_mode") ?? readString20(approvals, "approvalMode") ?? void 0,
+      mode: readString21(approvals, "mode") ?? readString21(approvals, "approval_mode") ?? readString21(approvals, "approvalMode") ?? void 0,
       timeout: readPositiveInteger2(approvals.timeout),
-      cronMode: readString20(approvals, "cron_mode") ?? readString20(approvals, "cronMode") ?? void 0
+      cronMode: readString21(approvals, "cron_mode") ?? readString21(approvals, "cronMode") ?? void 0
     };
   }
   const terminal = readOptionalObject(body, "terminal");
   if (terminal) {
     input.terminal = {
-      backend: readString20(terminal, "backend") ?? void 0,
-      cwd: readString20(terminal, "cwd") ?? void 0,
+      backend: readString21(terminal, "backend") ?? void 0,
+      cwd: readString21(terminal, "cwd") ?? void 0,
       containerCpu: readPositiveInteger2(
         terminal.container_cpu ?? terminal.containerCpu
       ),
@@ -35732,9 +36730,9 @@ async function testHindsightProviderSettings(profileName, patch) {
   const mode = normalizeHindsightMode(
     patch.mode ?? config.mode ?? env.HINDSIGHT_MODE
   );
-  const apiUrl = readString22(patch.apiUrl) ?? readString22(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
-  const bankId = readString22(patch.bankId) ?? readString22(config.bank_id) ?? "hermes";
-  const apiKey = readString22(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key);
+  const apiUrl = readString23(patch.apiUrl) ?? readString23(config.api_url) ?? env.HINDSIGHT_API_URL ?? (mode === "cloud" ? HINDSIGHT_DEFAULT_API_URL : HINDSIGHT_DEFAULT_LOCAL_URL);
+  const bankId = readString23(patch.bankId) ?? readString23(config.bank_id) ?? "hermes";
+  const apiKey = readString23(patch.apiKey) ?? env.HINDSIGHT_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key);
   const baseUrl = normalizeHttpUrl2(apiUrl);
   if (!baseUrl) {
     return {
@@ -36268,7 +37266,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "honcho") ?? ""
     );
-    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString22(config2.apiKey)) || isConfiguredEnvValue(readString22(config2.api_key)) || isConfiguredEnvValue(readString22(config2.baseUrl)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString23(config2.apiKey)) || isConfiguredEnvValue(readString23(config2.api_key)) || isConfiguredEnvValue(readString23(config2.baseUrl)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Honcho \u9700\u8981\u5148\u586B\u5199 API Key\uFF0C\u6216\u5728 honcho.json \u914D\u7F6E self-hosted baseUrl\u3002"
     };
@@ -36277,7 +37275,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     const config2 = await readJsonObject(
       memoryProviderConfigPath(profileName, "mem0") ?? ""
     );
-    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString22(config2.api_key)) ? { configured: true, issue: null } : {
+    return isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString23(config2.api_key)) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Mem0 \u9700\u8981\u5148\u5728\u672C\u9875\u586B\u5199 API Key\uFF0CLink \u4F1A\u5199\u5165\u5F53\u524D Profile \u7684 .env\u3002"
     };
@@ -36319,7 +37317,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
     memoryProviderConfigPath(profileName, provider) ?? ""
   );
   const mode = normalizeHindsightMode(config.mode ?? env.HINDSIGHT_MODE);
-  const apiKey = readString22(config.apiKey) ?? readString22(config.api_key) ?? env.HINDSIGHT_API_KEY;
+  const apiKey = readString23(config.apiKey) ?? readString23(config.api_key) ?? env.HINDSIGHT_API_KEY;
   if (mode === "cloud") {
     return isConfiguredEnvValue(apiKey) ? { configured: true, issue: null } : {
       configured: false,
@@ -36327,15 +37325,15 @@ async function readProviderConfigurationStatus(profileName, provider) {
     };
   }
   if (mode === "local_external") {
-    const apiUrl = readString22(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
+    const apiUrl = readString23(config.api_url) ?? env.HINDSIGHT_API_URL ?? HINDSIGHT_DEFAULT_LOCAL_URL;
     return isConfiguredEnvValue(apiUrl) ? { configured: true, issue: null } : {
       configured: false,
       issue: "Hindsight local_external \u9700\u8981\u914D\u7F6E\u53EF\u8BBF\u95EE\u7684 API URL\u3002"
     };
   }
   if (mode === "local_embedded") {
-    const llmProvider = readString22(config.llm_provider) ?? "openai";
-    const llmModel = readString22(config.llm_model);
+    const llmProvider = readString23(config.llm_provider) ?? "openai";
+    const llmModel = readString23(config.llm_model);
     if (!llmModel) {
       return {
         configured: false,
@@ -36343,7 +37341,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (llmProvider === "openai_compatible" && !isConfiguredEnvValue(
-      readString22(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
+      readString23(config.llm_base_url) ?? env.HINDSIGHT_API_LLM_BASE_URL
     )) {
       return {
         configured: false,
@@ -36351,7 +37349,7 @@ async function readProviderConfigurationStatus(profileName, provider) {
       };
     }
     if (!["ollama", "lmstudio", "openai_compatible"].includes(llmProvider) && !isConfiguredEnvValue(
-      readString22(config.llmApiKey) ?? readString22(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
+      readString23(config.llmApiKey) ?? readString23(config.llm_api_key) ?? env.HINDSIGHT_LLM_API_KEY
     )) {
       return {
         configured: false,
@@ -36407,8 +37405,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.HONCHO_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key),
-        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString22(config.apiKey)) || isConfiguredEnvValue(readString22(config.api_key))
+        env.HONCHO_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key),
+        isConfiguredEnvValue(env.HONCHO_API_KEY) || isConfiguredEnvValue(readString23(config.apiKey)) || isConfiguredEnvValue(readString23(config.api_key))
       ),
       stringSetting("workspace", "Workspace", config.workspace ?? "hermes"),
       stringSetting("peerName", "\u7528\u6237 Peer", config.peerName ?? ""),
@@ -36450,8 +37448,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "API Key",
-        env.MEM0_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key),
-        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString22(config.apiKey)) || isConfiguredEnvValue(readString22(config.api_key))
+        env.MEM0_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key),
+        isConfiguredEnvValue(env.MEM0_API_KEY) || isConfiguredEnvValue(readString23(config.apiKey)) || isConfiguredEnvValue(readString23(config.api_key))
       ),
       stringSetting("userId", "User ID", config.user_id ?? "hermes-user"),
       stringSetting("agentId", "Agent ID", config.agent_id ?? "hermes"),
@@ -36536,8 +37534,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "apiKey",
         "Hindsight API Key",
-        env.HINDSIGHT_API_KEY ?? readString22(config.apiKey) ?? readString22(config.api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString22(config.apiKey)) || isConfiguredEnvValue(readString22(config.api_key))
+        env.HINDSIGHT_API_KEY ?? readString23(config.apiKey) ?? readString23(config.api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_API_KEY) || isConfiguredEnvValue(readString23(config.apiKey)) || isConfiguredEnvValue(readString23(config.api_key))
       ),
       stringSetting(
         "bankId",
@@ -36559,8 +37557,8 @@ async function readProviderSettings(profileName, provider) {
       secretSetting(
         "llmApiKey",
         "LLM API Key",
-        env.HINDSIGHT_LLM_API_KEY ?? readString22(config.llmApiKey) ?? readString22(config.llm_api_key),
-        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString22(config.llmApiKey)) || isConfiguredEnvValue(readString22(config.llm_api_key))
+        env.HINDSIGHT_LLM_API_KEY ?? readString23(config.llmApiKey) ?? readString23(config.llm_api_key),
+        isConfiguredEnvValue(env.HINDSIGHT_LLM_API_KEY) || isConfiguredEnvValue(readString23(config.llmApiKey)) || isConfiguredEnvValue(readString23(config.llm_api_key))
       ),
       booleanSetting("autoRecall", "\u81EA\u52A8\u56DE\u5FC6", config.auto_recall ?? true),
       booleanSetting("autoRetain", "\u81EA\u52A8\u6C89\u6DC0", config.auto_retain ?? true),
@@ -36679,11 +37677,11 @@ async function readCustomProviderRegistry(profileName) {
         return { id: id2, label: id2, description: "\u81EA\u5B9A\u4E49 memory provider\u3002" };
       }
       const record = toRecord21(item);
-      const id = normalizeCustomProviderId(readString22(record.id) ?? "");
+      const id = normalizeCustomProviderId(readString23(record.id) ?? "");
       return {
         id,
-        label: readString22(record.label) ?? id,
-        description: readString22(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+        label: readString23(record.label) ?? id,
+        description: readString23(record.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
       };
     }).filter((item) => item.id);
   } catch {
@@ -36732,8 +37730,8 @@ async function discoverUserMemoryProviderDescriptors(profileName) {
     const meta = await readPluginMetadata(providerDir);
     descriptors.push({
       id: providerId,
-      label: readString22(meta.name) ?? providerId,
-      description: readString22(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
+      label: readString23(meta.name) ?? providerId,
+      description: readString23(meta.description) ?? "\u81EA\u5B9A\u4E49 memory provider\u3002"
     });
   }
   return descriptors;
@@ -36895,7 +37893,7 @@ function isMemoryEnvKeyWritable(key) {
   ].includes(key);
 }
 function normalizeHindsightMode(value) {
-  const mode = readString22(value) ?? "cloud";
+  const mode = readString23(value) ?? "cloud";
   return mode === "local" ? "local_embedded" : mode;
 }
 function normalizeHttpUrl2(value) {
@@ -36964,27 +37962,27 @@ function parseJsonObject2(text) {
   }
 }
 function readHindsightError(json) {
-  const detail = readString22(json.detail) ?? readString22(json.error);
+  const detail = readString23(json.detail) ?? readString23(json.error);
   return detail ? `\uFF1A${detail}` : "";
 }
 function hindsightSemanticIssue(pathName, json) {
   if (pathName === "/health") {
-    const status = readString22(json.status);
+    const status = readString23(json.status);
     return status && ["healthy", "ok"].includes(status.toLowerCase()) ? null : `\u5065\u5EB7\u72B6\u6001\u5F02\u5E38\uFF1A${status ?? "unknown"}`;
   }
   return null;
 }
 function summarizeHindsightProbe(pathName, json) {
   if (pathName === "/health") {
-    const status = readString22(json.status) ?? "ok";
-    const database = readString22(json.database);
+    const status = readString23(json.status) ?? "ok";
+    const database = readString23(json.database);
     return database ? `${status}, database ${database}` : status;
   }
   if (pathName === "/version") {
-    const version = readString22(json.api_version);
+    const version = readString23(json.api_version);
     return version ? `API ${version}` : "version endpoint reachable";
   }
-  const bankId = readString22(json.bank_id);
+  const bankId = readString23(json.bank_id);
   return bankId ? `bank ${bankId} reachable` : "bank config reachable";
 }
 async function readActiveMemoryProvider(profileName) {
@@ -36999,7 +37997,7 @@ async function readActiveMemoryProvider(profileName) {
   });
   const config = raw ? toRecord21(YAML6.parse(raw)) : {};
   const memory = toRecord21(config.memory);
-  const provider = readString22(memory.provider);
+  const provider = readString23(memory.provider);
   if (!provider || provider === "built-in" || provider === "builtin" || provider === "built_in") {
     return null;
   }
@@ -37056,7 +38054,7 @@ function stringSetting(key, label, value, editable = true) {
   return {
     key,
     label,
-    value: readString22(value) ?? "",
+    value: readString23(value) ?? "",
     editable,
     kind: "string"
   };
@@ -37068,7 +38066,7 @@ function secretSetting(key, label, value, configured) {
     value: "",
     editable: true,
     kind: "secret",
-    configured: configured || isConfiguredEnvValue(readString22(value))
+    configured: configured || isConfiguredEnvValue(readString23(value))
   };
 }
 function textSetting(key, label, value, editable = true) {
@@ -37081,7 +38079,7 @@ function textSetting(key, label, value, editable = true) {
   };
 }
 function selectSetting(key, label, value, options, editable = true) {
-  const stringValue = readString22(value) ?? options[0] ?? null;
+  const stringValue = readString23(value) ?? options[0] ?? null;
   return { key, label, value: stringValue, editable, kind: "select", options };
 }
 async function readMemoryLimits(profileName) {
@@ -37154,7 +38152,7 @@ function hashString(value) {
 function toRecord21(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
-function readString22(value) {
+function readString23(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function readPositiveInteger4(value) {
@@ -37313,7 +38311,7 @@ function registerProfileMemoryRoutes(router, options) {
   );
 }
 function readMemoryTarget(body) {
-  const raw = readString20(body, "target");
+  const raw = readString21(body, "target");
   if (raw === "memory" || raw === "user") {
     return raw;
   }
@@ -37324,7 +38322,7 @@ function readMemoryTarget(body) {
   );
 }
 function readMemoryResetTarget(body) {
-  const raw = readString20(body, "target") ?? "all";
+  const raw = readString21(body, "target") ?? "all";
   if (raw === "all" || raw === "memory" || raw === "user") {
     return raw;
   }
@@ -37335,7 +38333,7 @@ function readMemoryResetTarget(body) {
   );
 }
 function readRequiredMemoryContent(body) {
-  const content = readString20(body, "content") ?? readString20(body, "text");
+  const content = readString21(body, "content") ?? readString21(body, "text");
   if (!content) {
     throw new LinkHttpError(
       400,
@@ -37346,7 +38344,7 @@ function readRequiredMemoryContent(body) {
   return content;
 }
 function readRequiredMemoryMatch(body) {
-  const oldText = readString20(body, "old_text") ?? readString20(body, "oldText") ?? readString20(body, "match");
+  const oldText = readString21(body, "old_text") ?? readString21(body, "oldText") ?? readString21(body, "match");
   if (!oldText) {
     throw new LinkHttpError(
       400,
@@ -37357,7 +38355,7 @@ function readRequiredMemoryMatch(body) {
   return oldText;
 }
 function readRequiredMemoryProvider(body) {
-  const provider = readString20(body, "provider") ?? readString20(body, "provider_id") ?? readString20(body, "providerId");
+  const provider = readString21(body, "provider") ?? readString21(body, "provider_id") ?? readString21(body, "providerId");
   if (!provider) {
     throw new LinkHttpError(
       400,
@@ -37387,7 +38385,7 @@ function readMemorySettingsPatch(body, options = {}) {
       input.userCharLimit = userCharLimit;
     }
   }
-  const mode = readString20(body, "mode");
+  const mode = readString21(body, "mode");
   if (mode) {
     input.mode = mode;
   }
@@ -37403,7 +38401,7 @@ function readMemorySettingsPatch(body, options = {}) {
   if (bankId !== void 0) {
     input.bankId = bankId;
   }
-  const llmProvider = readString20(body, "llm_provider") ?? readString20(body, "llmProvider");
+  const llmProvider = readString21(body, "llm_provider") ?? readString21(body, "llmProvider");
   if (llmProvider) {
     input.llmProvider = llmProvider;
   }
@@ -37439,11 +38437,11 @@ function readMemorySettingsPatch(body, options = {}) {
   if (autoRetain !== void 0) {
     input.autoRetain = autoRetain;
   }
-  const memoryMode = readString20(body, "memory_mode") ?? readString20(body, "memoryMode");
+  const memoryMode = readString21(body, "memory_mode") ?? readString21(body, "memoryMode");
   if (memoryMode) {
     input.memoryMode = memoryMode;
   }
-  const recallBudget = readString20(body, "recall_budget") ?? readString20(body, "recallBudget");
+  const recallBudget = readString21(body, "recall_budget") ?? readString21(body, "recallBudget");
   if (recallBudget) {
     input.recallBudget = recallBudget;
   }
@@ -37459,11 +38457,11 @@ function readMemorySettingsPatch(body, options = {}) {
   if (profileFrequency !== void 0) {
     input.profileFrequency = profileFrequency;
   }
-  const captureMode = readString20(body, "capture_mode") ?? readString20(body, "captureMode");
+  const captureMode = readString21(body, "capture_mode") ?? readString21(body, "captureMode");
   if (captureMode) {
     input.captureMode = captureMode;
   }
-  const searchMode = readString20(body, "search_mode") ?? readString20(body, "searchMode");
+  const searchMode = readString21(body, "search_mode") ?? readString21(body, "searchMode");
   if (searchMode) {
     input.searchMode = searchMode;
   }
@@ -37497,11 +38495,11 @@ function readMemorySettingsPatch(body, options = {}) {
   if (aiPeer !== void 0) {
     input.aiPeer = aiPeer;
   }
-  const recallMode = readString20(body, "recall_mode") ?? readString20(body, "recallMode");
+  const recallMode = readString21(body, "recall_mode") ?? readString21(body, "recallMode");
   if (recallMode) {
     input.recallMode = recallMode;
   }
-  const writeFrequency = readString20(body, "write_frequency") ?? readString20(body, "writeFrequency");
+  const writeFrequency = readString21(body, "write_frequency") ?? readString21(body, "writeFrequency");
   if (writeFrequency) {
     input.writeFrequency = writeFrequency;
   }
@@ -37509,7 +38507,7 @@ function readMemorySettingsPatch(body, options = {}) {
   if (saveMessages !== void 0) {
     input.saveMessages = saveMessages;
   }
-  const sessionStrategy = readString20(body, "session_strategy") ?? readString20(body, "sessionStrategy");
+  const sessionStrategy = readString21(body, "session_strategy") ?? readString21(body, "sessionStrategy");
   if (sessionStrategy) {
     input.sessionStrategy = sessionStrategy;
   }
@@ -37789,13 +38787,13 @@ async function readSkillMetadata(input) {
   const skillDir = path32.dirname(input.skillFile);
   const { frontmatter, body } = parseSkillDocument(raw.slice(0, 4e3));
   const name = normalizeSkillName(
-    readString23(frontmatter.name) ?? path32.basename(skillDir)
+    readString24(frontmatter.name) ?? path32.basename(skillDir)
   );
   if (!name) {
     return null;
   }
   const description = normalizeDescription(
-    readString23(frontmatter.description) ?? firstBodyDescription(body)
+    readString24(frontmatter.description) ?? firstBodyDescription(body)
   );
   const provenance = input.provenance.get(name) ?? {
     source: "local",
@@ -37922,8 +38920,8 @@ async function readHubInstalledSkills(root) {
   for (const [name, rawEntry] of Object.entries(installed2)) {
     const entry = toRecord22(rawEntry);
     result.set(normalizeSkillName(name), {
-      source: readString23(entry.source) ?? "hub",
-      trust: readString23(entry.trust_level) ?? null
+      source: readString24(entry.source) ?? "hub",
+      trust: readString24(entry.trust_level) ?? null
     });
   }
   return result;
@@ -38007,7 +39005,7 @@ function readStringList6(value) {
   }
   return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
 }
-function readString23(value) {
+function readString24(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function toRecord22(value) {
@@ -38379,7 +39377,7 @@ function registerRunRoutes(router, options) {
     await authenticateRequest(ctx, paths);
     const language = readPreferredLanguage(ctx);
     const body = await readJsonBody(ctx.req);
-    const input = readString20(body, "input");
+    const input = readString21(body, "input");
     if (!input) {
       throw new LinkHttpError(400, "run_input_required", "input is required");
     }
@@ -38387,12 +39385,12 @@ function registerRunRoutes(router, options) {
     ctx.body = await createHermesRun(
       {
         input,
-        instructions: readString20(body, "instructions") ?? void 0,
+        instructions: readString21(body, "instructions") ?? void 0,
         conversation_history: readConversationHistory(
           body.conversation_history ?? body.conversationHistory
         ),
-        session_id: readString20(body, "session_id") ?? readString20(body, "sessionId") ?? void 0,
-        session_key: readString20(body, "session_key") ?? readString20(body, "sessionKey") ?? void 0
+        session_id: readString21(body, "session_id") ?? readString21(body, "sessionId") ?? void 0,
+        session_key: readString21(body, "session_key") ?? readString21(body, "sessionKey") ?? void 0
       },
       { logger, profileName: readOptionalProfileName(body), language }
     );
@@ -38805,20 +39803,20 @@ function normalizeServerReleaseSnapshot(payload) {
   const remote = toNullableRecord(snapshot.remote);
   return {
     remote: remote ? normalizeServerRelease(remote) : null,
-    cacheState: readString24(snapshot, "cache_state") ?? readString24(snapshot, "cacheState"),
-    issue: readString24(snapshot, "issue")
+    cacheState: readString25(snapshot, "cache_state") ?? readString25(snapshot, "cacheState"),
+    issue: readString25(snapshot, "issue")
   };
 }
 function normalizeServerRelease(payload) {
-  const tag = readString24(payload, "tag");
-  const name = readString24(payload, "name");
+  const tag = readString25(payload, "tag");
+  const name = readString25(payload, "name");
   return {
-    version: readString24(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
+    version: readString25(payload, "version") ?? extractSemver(name) ?? extractTagSemver(tag),
     tag,
     name,
-    releaseUrl: readString24(payload, "releaseUrl") ?? readString24(payload, "release_url"),
-    publishedAt: readString24(payload, "publishedAt") ?? readString24(payload, "published_at"),
-    fetchedAt: readString24(payload, "fetchedAt") ?? readString24(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
+    releaseUrl: readString25(payload, "releaseUrl") ?? readString25(payload, "release_url"),
+    publishedAt: readString25(payload, "publishedAt") ?? readString25(payload, "published_at"),
+    fetchedAt: readString25(payload, "fetchedAt") ?? readString25(payload, "fetched_at") ?? (/* @__PURE__ */ new Date()).toISOString()
   };
 }
 async function readReleaseCache(paths) {
@@ -38944,7 +39942,7 @@ function isRecentRunningState2(state) {
   const startedAt = Date.parse(state.started_at);
   return Number.isFinite(startedAt) && Date.now() - startedAt < 3e4;
 }
-function readString24(payload, key) {
+function readString25(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -39119,12 +40117,12 @@ async function fetchRelayStreamBatchPolicy(serverBaseUrl, options = {}) {
   }
 }
 function readRelayStreamBatchPolicy(input) {
-  const record = readRecord(input);
-  const body = readRecord(record?.policy) ?? readRecord(record?.stream_batching) ?? record;
+  const record = readRecord2(input);
+  const body = readRecord2(record?.policy) ?? readRecord2(record?.stream_batching) ?? record;
   return normalizeRelayStreamBatchPolicy(body);
 }
 function normalizeRelayStreamBatchPolicy(input) {
-  const record = readRecord(input);
+  const record = readRecord2(input);
   if (!record) {
     return null;
   }
@@ -39138,7 +40136,7 @@ function normalizeRelayStreamBatchPolicy(input) {
     flushBytes
   };
 }
-function readRecord(value) {
+function readRecord2(value) {
   return value && typeof value === "object" ? value : null;
 }
 function readInteger5(value) {
@@ -40142,7 +41140,7 @@ async function reportLinkStatusToServer(options = {}) {
     public_ipv6s: routes.publicIpv6s,
     reported_at: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const signature = signIdentityPayload(identity, canonicalJson2(payload));
+  const signature = signIdentityPayload(identity, canonicalJson3(payload));
   const fetcher = options.fetchImpl ?? fetch;
   const response = await fetcher(
     `${config.serverBaseUrl.replace(/\/+$/u, "")}/api/v1/links/${encodeURIComponent(identity.link_id)}/report`,
@@ -40161,30 +41159,30 @@ async function reportLinkStatusToServer(options = {}) {
   );
   const body = await response.json().catch(() => null);
   if (!response.ok || !body) {
-    const message = readErrorMessage4(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    const message = readErrorMessage5(body) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
   await markNetworkStatusReported(paths, routes);
   return body;
 }
-function canonicalJson2(value) {
-  return JSON.stringify(sortJsonValue2(value));
+function canonicalJson3(value) {
+  return JSON.stringify(sortJsonValue3(value));
 }
-function sortJsonValue2(value) {
+function sortJsonValue3(value) {
   if (Array.isArray(value)) {
-    return value.map(sortJsonValue2);
+    return value.map(sortJsonValue3);
   }
   if (value && typeof value === "object") {
     const record = value;
     const sorted = {};
     for (const key of Object.keys(record).sort()) {
-      sorted[key] = sortJsonValue2(record[key]);
+      sorted[key] = sortJsonValue3(record[key]);
     }
     return sorted;
   }
   return value;
 }
-function readErrorMessage4(payload) {
+function readErrorMessage5(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -40204,20 +41202,23 @@ function startLanIpMonitor(options) {
   let running = false;
   let closed = false;
   let current = Promise.resolve();
-  const check = async (context = {}) => {
+  const check = (context = {}) => {
     if (running || closed) {
-      return;
+      return current;
     }
     running = true;
-    try {
-      await checkLanIpChange(options, context);
-    } catch (error) {
-      void options.logger.warn("lan_ip_monitor_failed", {
-        error: error instanceof Error ? error.message : String(error)
-      });
-    } finally {
-      running = false;
-    }
+    current = (async () => {
+      try {
+        await checkLanIpChange(options, context);
+      } catch (error) {
+        void options.logger.warn("lan_ip_monitor_failed", {
+          error: error instanceof Error ? error.message : String(error)
+        });
+      } finally {
+        running = false;
+      }
+    })();
+    return current;
   };
   current = check({ forceReport: true, publishToRelay: true, observePublicRoute: true });
   const timer = setInterval(() => {
@@ -40931,7 +41932,8 @@ async function startDaemonProcess(paths = resolveRuntimePaths()) {
   const child = spawn5(process.execPath, [scriptPath, "daemon-supervisor"], {
     detached: true,
     stdio: "ignore",
-    env: process.env
+    env: process.env,
+    windowsHide: true
   });
   child.unref();
   for (let index = 0; index < 12; index += 1) {
@@ -40984,7 +41986,8 @@ async function runDaemonSupervisor(paths = resolveRuntimePaths()) {
       const startedAt = Date.now();
       child = spawn5(process.execPath, [scriptPath, "daemon", "--foreground"], {
         stdio: ["ignore", "pipe", "pipe"],
-        env: process.env
+        env: process.env,
+        windowsHide: true
       });
       const childPid = child.pid ?? null;
       child.stdout?.on("data", write);
@@ -41725,16 +42728,16 @@ function normalizeServerSnapshot(payload) {
   if (!policy) {
     return {
       remote: null,
-      issue: readString25(snapshot, "issue")
+      issue: readString26(snapshot, "issue")
     };
   }
   const release = toNullableRecord2(snapshot.release);
-  const currentVersion = readString25(policy, "current_version") ?? readString25(policy, "currentVersion");
-  const minSafeVersion = readString25(policy, "min_safe_version") ?? readString25(policy, "minSafeVersion");
+  const currentVersion = readString26(policy, "current_version") ?? readString26(policy, "currentVersion");
+  const minSafeVersion = readString26(policy, "min_safe_version") ?? readString26(policy, "minSafeVersion");
   if (!currentVersion) {
     return {
       remote: null,
-      issue: readString25(snapshot, "issue")
+      issue: readString26(snapshot, "issue")
     };
   }
   return {
@@ -41742,10 +42745,10 @@ function normalizeServerSnapshot(payload) {
       current_version: currentVersion,
       min_safe_version: minSafeVersion,
       target_version: currentVersion,
-      release_url: release ? readString25(release, "release_url") ?? readString25(release, "releaseUrl") : null,
-      published_at: release ? readString25(release, "published_at") ?? readString25(release, "publishedAt") : null
+      release_url: release ? readString26(release, "release_url") ?? readString26(release, "releaseUrl") : null,
+      published_at: release ? readString26(release, "published_at") ?? readString26(release, "publishedAt") : null
     },
-    issue: readString25(snapshot, "issue")
+    issue: readString26(snapshot, "issue")
   };
 }
 async function fetchCurrentLinkReleaseFromServer(options, fetcher, channel) {
@@ -42159,7 +43162,7 @@ function toRecord25(value) {
 function toNullableRecord2(value) {
   return typeof value === "object" && value !== null ? value : null;
 }
-function readString25(payload, key) {
+function readString26(payload, key) {
   const value = payload[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -42239,7 +43242,7 @@ async function postJson(fetcher, url, token, body) {
   }
   const payload = await response.json().catch(() => null);
   if (!response.ok) {
-    const message = readErrorMessage5(payload) ?? `Relay request failed with HTTP ${response.status}`;
+    const message = readErrorMessage6(payload) ?? `Relay request failed with HTTP ${response.status}`;
     throw new Error(message);
   }
   if (!payload) {
@@ -42247,7 +43250,7 @@ async function postJson(fetcher, url, token, body) {
   }
   return payload;
 }
-function readErrorMessage5(payload) {
+function readErrorMessage6(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -42581,12 +43584,12 @@ async function patchServerJson(serverBaseUrl, path37, token, body, options) {
 async function readJsonResponse2(response) {
   const payload = await response.json().catch(() => null);
   if (!response.ok || !payload) {
-    const message = readErrorMessage6(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
+    const message = readErrorMessage7(payload) ?? `HermesPilot Server request failed with HTTP ${response.status}`;
     throw new LinkHttpError(response.status, "server_request_failed", message);
   }
   return payload;
 }
-function readErrorMessage6(payload) {
+function readErrorMessage7(payload) {
   if (typeof payload !== "object" || payload === null) {
     return null;
   }
@@ -42705,14 +43708,15 @@ function registerSystemRoutes(router, options) {
         profile_skills: true,
         profile_memory: true,
         hermes_updates: true,
-        app_push_notification_events: true
+        app_push_notification_events: true,
+        live_activity_progress_events: true
       }
     };
   });
   router.post("/api/v1/pairing/claim", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const sessionId = readString20(body, "session_id") ?? readString20(body, "sessionId");
-    const claimToken = readString20(body, "claim_token") ?? readString20(body, "claimToken");
+    const sessionId = readString21(body, "session_id") ?? readString21(body, "sessionId");
+    const claimToken = readString21(body, "claim_token") ?? readString21(body, "claimToken");
     if (!sessionId || !claimToken) {
       throw new LinkHttpError(
         400,
@@ -42723,10 +43727,10 @@ function registerSystemRoutes(router, options) {
     const claimed = await claimPairing({
       sessionId,
       claimToken,
-      deviceLabel: readString20(body, "device_label") ?? readString20(body, "deviceLabel") ?? "HermesPilot App",
-      devicePlatform: readString20(body, "device_platform") ?? readString20(body, "devicePlatform") ?? "unknown",
-      deviceModel: readString20(body, "device_model") ?? readString20(body, "deviceModel"),
-      appInstanceId: readString20(body, "app_instance_id") ?? readString20(body, "appInstanceId"),
+      deviceLabel: readString21(body, "device_label") ?? readString21(body, "deviceLabel") ?? "HermesPilot App",
+      devicePlatform: readString21(body, "device_platform") ?? readString21(body, "devicePlatform") ?? "unknown",
+      deviceModel: readString21(body, "device_model") ?? readString21(body, "deviceModel"),
+      appInstanceId: readString21(body, "app_instance_id") ?? readString21(body, "appInstanceId"),
       paths
     });
     ctx.body = claimed;
@@ -42806,9 +43810,9 @@ function registerSystemRoutes(router, options) {
     const body = await readJsonBody(ctx.req);
     const session = await createDeviceSession(
       {
-        label: readString20(body, "device_label") ?? readString20(body, "deviceLabel") ?? "HermesPilot App",
-        platform: readString20(body, "device_platform") ?? readString20(body, "devicePlatform") ?? "unknown",
-        model: readString20(body, "device_model") ?? readString20(body, "deviceModel"),
+        label: readString21(body, "device_label") ?? readString21(body, "deviceLabel") ?? "HermesPilot App",
+        platform: readString21(body, "device_platform") ?? readString21(body, "devicePlatform") ?? "unknown",
+        model: readString21(body, "device_model") ?? readString21(body, "deviceModel"),
         appInstanceId: auth.appInstanceId
       },
       paths
@@ -42837,7 +43841,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/refresh", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString20(body, "refresh_token") ?? readString20(body, "refreshToken");
+    const refreshToken = readString21(body, "refresh_token") ?? readString21(body, "refreshToken");
     if (!refreshToken) {
       throw new LinkHttpError(
         400,
@@ -42848,10 +43852,10 @@ function registerSystemRoutes(router, options) {
     const session = await refreshDeviceSession(
       refreshToken,
       {
-        appInstanceId: readString20(body, "app_instance_id") ?? readString20(body, "appInstanceId"),
-        label: readString20(body, "device_label") ?? readString20(body, "deviceLabel"),
-        platform: readString20(body, "device_platform") ?? readString20(body, "devicePlatform"),
-        model: readString20(body, "device_model") ?? readString20(body, "deviceModel")
+        appInstanceId: readString21(body, "app_instance_id") ?? readString21(body, "appInstanceId"),
+        label: readString21(body, "device_label") ?? readString21(body, "deviceLabel"),
+        platform: readString21(body, "device_platform") ?? readString21(body, "devicePlatform"),
+        model: readString21(body, "device_model") ?? readString21(body, "deviceModel")
       },
       paths
     );
@@ -42870,7 +43874,7 @@ function registerSystemRoutes(router, options) {
   });
   router.post("/api/v1/auth/logout", async (ctx) => {
     const body = await readJsonBody(ctx.req);
-    const refreshToken = readString20(body, "refresh_token") ?? readString20(body, "refreshToken");
+    const refreshToken = readString21(body, "refresh_token") ?? readString21(body, "refreshToken");
     if (refreshToken) {
       await revokeDeviceRefreshToken(refreshToken, paths);
     }
@@ -43111,7 +44115,7 @@ function registerSystemRoutes(router, options) {
   router.patch("/api/v1/devices/:deviceId", async (ctx) => {
     const auth = await authenticateRequest(ctx, paths);
     const body = await readJsonBody(ctx.req);
-    const label = readString20(body, "label") ?? readString20(body, "device_label");
+    const label = readString21(body, "label") ?? readString21(body, "device_label");
     if (!label) {
       throw new LinkHttpError(
         400,
@@ -43155,7 +44159,7 @@ function isActiveCronJob(job) {
   if (!enabled) {
     return false;
   }
-  const state = readString20(job, "state")?.toLowerCase();
+  const state = readString21(job, "state")?.toLowerCase();
   return !["paused", "disabled", "completed", "deleted"].includes(state ?? "");
 }
 function filterLogsWithinHours(logs, hours, now = Date.now()) {
@@ -43199,8 +44203,8 @@ function registerWorkspaceRoutes(router, options) {
     ctx.body = {
       ok: true,
       workspace: await conversations.createWorkspace({
-        name: readString20(body, "name") ?? "",
-        icon: readString20(body, "icon") ?? void 0
+        name: readString21(body, "name") ?? "",
+        icon: readString21(body, "icon") ?? void 0
       })
     };
   });
@@ -43210,8 +44214,8 @@ function registerWorkspaceRoutes(router, options) {
     ctx.body = {
       ok: true,
       workspace: await conversations.renameWorkspace(ctx.params.workspaceId, {
-        name: readString20(body, "name") ?? "",
-        icon: readString20(body, "icon") ?? void 0
+        name: readString21(body, "name") ?? "",
+        icon: readString21(body, "icon") ?? void 0
       })
     };
   });
@@ -43294,8 +44298,8 @@ function registerLinkUpdateRoutes(router, options) {
     ctx.body = await startLinkUpdate({
       paths,
       logger,
-      channel: readString20(body, "channel"),
-      targetVersion: readString20(body, "target_version") ?? readString20(body, "targetVersion")
+      channel: readString21(body, "channel"),
+      targetVersion: readString21(body, "target_version") ?? readString21(body, "targetVersion")
     });
   });
   router.get("/api/v1/link/update/events", async (ctx) => {
@@ -43325,7 +44329,7 @@ import QRCode from "qrcode";
 function registerPairingRoutes(router, options) {
   const { paths } = options;
   router.get("/pair", async (ctx) => {
-    const sessionId = readString20(ctx.query, "session_id");
+    const sessionId = readString21(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -43350,7 +44354,7 @@ function registerPairingRoutes(router, options) {
     ctx.body = page;
   });
   router.get("/api/v1/pairing/session", async (ctx) => {
-    const sessionId = readString20(ctx.query, "session_id");
+    const sessionId = readString21(ctx.query, "session_id");
     if (!sessionId) {
       throw new LinkHttpError(400, "pairing_session_required", "session_id is required");
     }
@@ -43820,7 +44824,7 @@ function registerInternalRoutes(router, options) {
   router.post("/internal/deliver", async (ctx) => {
     assertLoopbackRequest(ctx.req);
     const body = await readJsonBody(ctx.req);
-    const stagingDir = readString20(body, "staging_dir") ?? readString20(body, "stagingDir");
+    const stagingDir = readString21(body, "staging_dir") ?? readString21(body, "stagingDir");
     if (!stagingDir) {
       throw new LinkHttpError(
         400,
@@ -43839,9 +44843,9 @@ function registerInternalRoutes(router, options) {
     ctx.body = {
       ok: true,
       ...await options.conversations.deliverFilesFromTool({
-        profile: readString20(body, "profile") ?? readString20(body, "profile_name") ?? readString20(body, "profileName") ?? void 0,
-        taskId: readString20(body, "task_id") ?? readString20(body, "taskId") ?? void 0,
-        sessionId: readString20(body, "session_id") ?? readString20(body, "sessionId") ?? void 0,
+        profile: readString21(body, "profile") ?? readString21(body, "profile_name") ?? readString21(body, "profileName") ?? void 0,
+        taskId: readString21(body, "task_id") ?? readString21(body, "taskId") ?? void 0,
+        sessionId: readString21(body, "session_id") ?? readString21(body, "sessionId") ?? void 0,
         files: body.files ?? body.file ?? body.path
       })
     };
@@ -43859,6 +44863,178 @@ function assertLoopbackRequest(request) {
   );
 }
 
+// src/http/routes/live-activities.ts
+var APP_INSTANCE_ID_PATTERN = /^appi_[A-Za-z0-9_-]{16,96}$/u;
+var LINK_ID_PATTERN = /^link_[A-Za-z0-9_-]{8,128}$/u;
+var CONVERSATION_ID_PATTERN2 = /^conv_[A-Za-z0-9_-]{8,128}$/u;
+var ACTIVITY_ID_PATTERN = /^[A-Za-z0-9._:-]{3,128}$/u;
+var TARGET_ID_PATTERN = /^[A-Za-z0-9._:-]{3,128}$/u;
+var RUN_ID_PATTERN = /^run_[A-Za-z0-9_-]{8,128}$/u;
+var OPERATION_ID_PATTERN = /^[A-Za-z0-9._:-]{3,128}$/u;
+var APNS_TOKEN_PATTERN = /^[0-9a-fA-F]{32,512}$/u;
+function registerLiveActivityRoutes(router, options) {
+  const { paths } = options;
+  router.get("/api/v1/live-activities/restore-state", async (ctx) => {
+    const auth = await authenticateRequest(ctx, paths);
+    const query = ctx.query;
+    const targetKind = readTargetKindValue(
+      readQueryValue(query, "target_kind") ?? readQueryValue(query, "targetKind")
+    );
+    const appInstanceId = auth.appInstanceId ?? readRequiredQueryPattern(query, ["app_instance_id", "appInstanceId"], APP_INSTANCE_ID_PATTERN, "app_instance_id_invalid");
+    const state = await findLiveActivityRestoreState(paths, {
+      accountId: auth.accountId ?? null,
+      appInstanceId,
+      conversationId: readRequiredQueryPattern(query, ["conversation_id", "conversationId"], CONVERSATION_ID_PATTERN2, "conversation_id_invalid"),
+      targetKind,
+      targetId: readRequiredQueryPattern(query, ["target_id", "targetId"], TARGET_ID_PATTERN, "target_id_invalid")
+    });
+    ctx.body = {
+      ok: true,
+      state: state ? {
+        phase: state.phase,
+        status_label: state.statusLabel,
+        progress_text: state.progressText,
+        detail_text: state.detailText ?? null,
+        updated_at: state.updatedAt ?? null
+      } : null
+    };
+  });
+  router.post("/api/v1/live-activities", async (ctx) => {
+    const auth = await authenticateRequest(ctx, paths);
+    const body = await readJsonBody(ctx.req);
+    const targetKind = readTargetKind(body);
+    const runId = normalizePattern(readString21(body, "run_id") ?? readString21(body, "runId"), RUN_ID_PATTERN);
+    const operationId = normalizePattern(
+      readString21(body, "operation_id") ?? readString21(body, "operationId"),
+      OPERATION_ID_PATTERN
+    );
+    if (targetKind === "run" && !runId) {
+      throw new LinkHttpError(400, "run_id_required", "run_id is required for run Live Activity");
+    }
+    if (targetKind === "context_compression" && !operationId) {
+      throw new LinkHttpError(400, "operation_id_required", "operation_id is required for context compression Live Activity");
+    }
+    const activity = await upsertLiveActivity(paths, {
+      activityId: readRequiredPattern(body, ["activity_id", "activityId"], ACTIVITY_ID_PATTERN, "activity_id_invalid"),
+      activityToken: readRequiredPattern(body, ["activity_token", "activityToken"], APNS_TOKEN_PATTERN, "activity_token_invalid").toLowerCase(),
+      apnsEnvironment: readApnsEnvironment(body),
+      apnsTopic: readRequiredString(body, ["apns_topic", "apnsTopic"], "apns_topic_required").slice(0, 160),
+      linkId: readRequiredPattern(body, ["link_id", "linkId"], LINK_ID_PATTERN, "link_id_invalid"),
+      accountId: auth.accountId ?? null,
+      appInstanceId: auth.appInstanceId ?? readRequiredPattern(body, ["app_instance_id", "appInstanceId"], APP_INSTANCE_ID_PATTERN, "app_instance_id_invalid"),
+      conversationId: readRequiredPattern(body, ["conversation_id", "conversationId"], CONVERSATION_ID_PATTERN2, "conversation_id_invalid"),
+      conversationTitle: readOptionalString2(body, ["conversation_title", "conversationTitle", "title"], 80),
+      targetKind,
+      targetId: readRequiredPattern(body, ["target_id", "targetId"], TARGET_ID_PATTERN, "target_id_invalid"),
+      runId: targetKind === "run" ? runId : null,
+      operationId: targetKind === "context_compression" ? operationId : null,
+      language: readLanguage2(body),
+      privacyLevel: readPrivacyLevel(body),
+      startedAt: readIso(body, ["started_at", "startedAt"]) ?? (/* @__PURE__ */ new Date()).toISOString()
+    });
+    ctx.status = 201;
+    ctx.body = {
+      ok: true,
+      activity_id: activity.activityId,
+      status: activity.status
+    };
+  });
+  router.post("/api/v1/live-activities/:activityId/end", async (ctx) => {
+    await authenticateRequest(ctx, paths);
+    const found = await endLiveActivity(paths, ctx.params.activityId);
+    ctx.status = found ? 200 : 404;
+    ctx.body = {
+      ok: found,
+      activity_id: ctx.params.activityId,
+      status: found ? "ended" : "not_found"
+    };
+  });
+}
+function readTargetKind(body) {
+  const value = readString21(body, "target_kind") ?? readString21(body, "targetKind");
+  return readTargetKindValue(value);
+}
+function readTargetKindValue(value) {
+  if (value === "run" || value === "context_compression") {
+    return value;
+  }
+  throw new LinkHttpError(400, "target_kind_invalid", "target_kind must be run or context_compression");
+}
+function readRequiredQueryPattern(query, keys, pattern, code) {
+  for (const key of keys) {
+    const value = readQueryValue(query, key);
+    if (value && pattern.test(value)) {
+      return value;
+    }
+  }
+  throw new LinkHttpError(400, code, `${keys[0]} is invalid`);
+}
+function readQueryValue(query, key) {
+  return readQueryString(query[key]) ?? null;
+}
+function readApnsEnvironment(body) {
+  const value = readString21(body, "apns_environment") ?? readString21(body, "apnsEnvironment");
+  if (value === "sandbox" || value === "production") {
+    return value;
+  }
+  throw new LinkHttpError(400, "apns_environment_invalid", "apns_environment must be sandbox or production");
+}
+function readLanguage2(body) {
+  const value = readString21(body, "language") ?? readString21(body, "preferred_language") ?? readString21(body, "preferredLanguage");
+  if (!value) {
+    return null;
+  }
+  return value.toLowerCase().startsWith("zh") ? "zh" : "en";
+}
+function readPrivacyLevel(body) {
+  const value = readString21(body, "privacy_level") ?? readString21(body, "privacyLevel");
+  if (value === "minimal" || value === "detailed") {
+    return value;
+  }
+  return "summary";
+}
+function readRequiredString(body, keys, code) {
+  for (const key of keys) {
+    const value = readString21(body, key);
+    if (value) {
+      return value;
+    }
+  }
+  throw new LinkHttpError(400, code, `${keys[0]} is required`);
+}
+function readRequiredPattern(body, keys, pattern, code) {
+  const value = readRequiredString(body, keys, code);
+  if (!pattern.test(value)) {
+    throw new LinkHttpError(400, code, `${keys[0]} is invalid`);
+  }
+  return value;
+}
+function readOptionalString2(body, keys, maxLength) {
+  for (const key of keys) {
+    const value = readString21(body, key);
+    if (value) {
+      return value.slice(0, maxLength);
+    }
+  }
+  return null;
+}
+function normalizePattern(value, pattern) {
+  return value && pattern.test(value) ? value : null;
+}
+function readIso(body, keys) {
+  for (const key of keys) {
+    const value = readString21(body, key);
+    if (!value) {
+      continue;
+    }
+    const timestamp = Date.parse(value);
+    if (Number.isFinite(timestamp)) {
+      return new Date(timestamp).toISOString();
+    }
+  }
+  return null;
+}
+
 // src/http/app.ts
 async function createApp(options = {}) {
   const paths = options.paths ?? resolveRuntimePaths();
@@ -43916,6 +45092,7 @@ async function createApp(options = {}) {
     syncCronDeliveries
   });
   registerWorkspaceRoutes(router, { paths, conversations });
+  registerLiveActivityRoutes(router, { paths });
   registerConversationRoutes(router, { paths, logger, conversations });
   registerRunRoutes(router, { paths, logger, conversations });
   registerProfileRoutes(router, { paths, logger, conversations });