@saleso.innovations/bridge 0.1.6 → 0.1.8

package/INTEGRATION.md

@@ -55,14 +55,28 @@ export async function resumeCleosConnection() {
 
 ## Cron job delivery
 
-When a Hermes cron job completes and should appear in the Cleos **Jobs** tab (not chat), deliver the result over the existing agent WebSocket:
+Hermes writes every cron run to `~/.hermes/cron/output/{job_id}/{timestamp}.md`. The bridge watches that folder automatically and forwards new results to Cleos as Jobs (not chat).
+
+No Hermes changes are required. Keep `cleos-bridge start` running on the VPS.
+
+When a cron job completes:
+
+1. Hermes saves output under `~/.hermes/cron/output/`
+2. The bridge detects the new file
+3. The bridge sends `agent.message` with `metadata.cron` over the Cleos WebSocket
+4. Cleos routes it to the Jobs tab
+
+The bridge resolves the Cleos `conversationId` from saved credentials or Convex (`/bridge/active-conversation`).
+
+### Manual delivery (optional)
+
+For custom integrations you can still call:
 
 ```typescript
 import { reconnectHermesAgent } from "@saleso.innovations/bridge";
 
 const connection = await reconnectHermesAgent({ onUserMessage: handleCleosMessage });
 
-// On cron completion — conversationId is the active Cleos conversation for this agent.
 connection.deliverCronResult(finalText, {
   conversationId: "<convex-conversation-id>",
   jobId: job.id,
@@ -71,10 +85,6 @@ connection.deliverCronResult(finalText, {
 });
 ```
 
-Cleos routes messages with `metadata.cron` directly to the Jobs inbox. Hermes default cron wrappers (`Cronjob Response: ...`) are also detected automatically.
-
-Store the Cleos `conversationId` when pairing (fetch via Convex `conversations:getActive` for the new `agentId`) so cron delivery has a valid target.
-
 ## What Hermes handles
 
 - Pairing UI (code entry)
@@ -94,7 +104,7 @@ Codes expire after 10 minutes. Each code links **one** Hermes instance to **one*
 
 ## Credentials
 
-After first pairing, credentials are saved to `~/.cleos/agent.json`. Use `reconnectHermesAgent()` on restart — no new code required.
+After first pairing, credentials are saved to `~/.cleos/agent.json`. Delivered cron files are tracked in `~/.cleos/cron-delivered.json` so restarts do not duplicate Jobs. Use `reconnectHermesAgent()` on restart — no new pairing code required.
 
 ## Self-hosting Cleos
 

package/README.md

@@ -15,9 +15,25 @@ Requirements:
 - Node.js 20+
 - Hermes installed on the same machine (`hermes gateway` — the install script configures the API automatically)
 
+## Update
+
+After the first install, updates are one command:
+
+```bash
+cleos-bridge update
+```
+
+The install script links `cleos-bridge` to `/usr/local/bin` (root) or `~/.local/bin` (non-root). If that command is not found yet, use:
+
+```bash
+curl -fsSL https://amicable-elephant-407.convex.site/update-bridge.sh | bash
+```
+
+This installs the latest package, refreshes the CLI symlink, and restarts `cleos-bridge.service` when present.
+
 ## Manual usage
 
-The install script puts the bridge in `~/.cleos/bridge` (no PATH setup needed). To run manually:
+The install script puts the bridge in `~/.cleos/bridge`. To run without the symlink:
 
 ```bash
 node ~/.cleos/bridge/node_modules/@saleso.innovations/bridge/dist/cli.js pair ABCD1234
@@ -34,6 +50,8 @@ cleos-bridge start              # reconnecting daemon (systemd)
 
 Credentials are saved to `~/.cleos/agent.json`.
 
+The daemon watches `~/.hermes/cron/output/` and forwards new cron results to the Cleos Jobs tab automatically.
+
 ## Hermes API
 
 By default the bridge forwards chat to Hermes at `http://127.0.0.1:8642/v1/chat/completions`.

package/dist/activeConversation.d.ts

@@ -0,0 +1,4 @@
+import { type SavedAgentCredentials } from "./credentials.js";
+export declare function resolveActiveConversationId(credentials?: SavedAgentCredentials): Promise<string>;
+export declare function rememberConversationId(conversationId: string): void;
+//# sourceMappingURL=activeConversation.d.ts.map

package/dist/activeConversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activeConversation.d.ts","sourceRoot":"","sources":["../src/activeConversation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqC,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEjG,wBAAsB,2BAA2B,CAC/C,WAAW,CAAC,EAAE,qBAAqB,GAClC,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAED,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAEnE"}

package/dist/activeConversation.js

@@ -0,0 +1,34 @@
+import { convexSiteUrlFromEnv } from "./resolve.js";
+import { hashToken } from "./token.js";
+import { loadCredentials, patchCredentials } from "./credentials.js";
+export async function resolveActiveConversationId(credentials) {
+    const resolved = credentials ?? loadCredentials();
+    if (!resolved) {
+        throw new Error("No saved Cleos agent credentials");
+    }
+    if (resolved.conversationId) {
+        return resolved.conversationId;
+    }
+    const convexSiteUrl = resolved.convexSiteUrl ?? convexSiteUrlFromEnv();
+    const response = await fetch(`${convexSiteUrl.replace(/\/$/, "")}/bridge/active-conversation`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+            agentId: resolved.agentId,
+            tokenHash: hashToken(resolved.agentToken),
+        }),
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`Active conversation lookup failed (${response.status}): ${body}`);
+    }
+    const payload = (await response.json());
+    if (!payload.conversationId) {
+        throw new Error("Active conversation lookup returned no conversationId");
+    }
+    patchCredentials({ conversationId: payload.conversationId });
+    return payload.conversationId;
+}
+export function rememberConversationId(conversationId) {
+    patchCredentials({ conversationId });
+}

package/dist/bridgePaths.d.ts

@@ -0,0 +1,7 @@
+export declare const BRIDGE_PACKAGE = "@saleso.innovations/bridge";
+export declare function defaultBridgeInstallDir(): string;
+export declare function bridgeCliPath(bridgeDir: string): string;
+/** Directory used by `npm install --prefix` (usually ~/.cleos/bridge). */
+export declare function resolveBridgeInstallDir(): string;
+export declare function readInstalledBridgeVersion(bridgeDir: string): string | null;
+//# sourceMappingURL=bridgePaths.d.ts.map

package/dist/bridgePaths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridgePaths.d.ts","sourceRoot":"","sources":["../src/bridgePaths.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,cAAc,+BAA+B,CAAC;AAE3D,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvD;AAwBD,0EAA0E;AAC1E,wBAAgB,uBAAuB,IAAI,MAAM,CAMhD;AAED,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ3E"}

package/dist/bridgePaths.js

@@ -0,0 +1,51 @@
+import { execFileSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+export const BRIDGE_PACKAGE = "@saleso.innovations/bridge";
+export function defaultBridgeInstallDir() {
+    return join(homedir(), ".cleos", "bridge");
+}
+export function bridgeCliPath(bridgeDir) {
+    return join(bridgeDir, "node_modules", BRIDGE_PACKAGE, "dist", "cli.js");
+}
+function inferBridgeDirFromCliPath(cliPath) {
+    const marker = `${sep}node_modules${sep}${BRIDGE_PACKAGE.replace("/", sep)}${sep}`;
+    const idx = cliPath.indexOf(marker);
+    if (idx < 0)
+        return null;
+    const nodeModulesDir = join(cliPath.slice(0, idx), "node_modules");
+    return dirname(nodeModulesDir);
+}
+function readBridgeDirFromSystemd() {
+    try {
+        const unit = execFileSync("systemctl", ["cat", "cleos-bridge.service"], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+        const match = unit.match(/ExecStart=\S+\s+(\S+\/dist\/cli\.js)/);
+        if (!match?.[1])
+            return null;
+        return inferBridgeDirFromCliPath(match[1]);
+    }
+    catch {
+        return null;
+    }
+}
+/** Directory used by `npm install --prefix` (usually ~/.cleos/bridge). */
+export function resolveBridgeInstallDir() {
+    return (readBridgeDirFromSystemd() ??
+        inferBridgeDirFromCliPath(fileURLToPath(import.meta.url)) ??
+        defaultBridgeInstallDir());
+}
+export function readInstalledBridgeVersion(bridgeDir) {
+    const pkgJson = join(bridgeDir, "node_modules", BRIDGE_PACKAGE, "package.json");
+    try {
+        const parsed = JSON.parse(readFileSync(pkgJson, "utf8"));
+        return parsed.version ?? null;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/cli.js

@@ -1,7 +1,9 @@
 #!/usr/bin/env node
 import { credentialsPathForDisplay, loadCredentials } from "./credentials.js";
 import { connectHermesAgent, pairCleosAgent, reconnectHermesAgent } from "./client.js";
+import { startCronWatcher } from "./cronWatcher.js";
 import { runBridgeDaemon } from "./daemon.js";
+import { runBridgeUpdate } from "./update.js";
 import { prepareHermesForBridge } from "./ensureHermesApi.js";
 import { createHermesMessageHandler } from "./hermesForwarder.js";
 import { convexSiteUrlFromEnv } from "./resolve.js";
@@ -38,7 +40,7 @@ async function main() {
         console.log(`Connected agent ${session.agentId}.`);
         console.log(`Credentials saved to ${credentialsPathForDisplay()}`);
         console.log("Press Ctrl+C to exit.");
-        await waitForExit(session);
+        await waitForExit(session, () => startCronWatcher({ session }));
         return;
     }
     if (command === "start") {
@@ -61,7 +63,11 @@ async function main() {
         });
         console.log(`Reconnected agent ${session.agentId}.`);
         console.log("Press Ctrl+C to exit.");
-        await waitForExit(session);
+        await waitForExit(session, () => startCronWatcher({ session }));
+        return;
+    }
+    if (command === "update") {
+        runBridgeUpdate({ tag: codeArg || "latest" });
         return;
     }
     printUsage();
@@ -73,10 +79,13 @@ function printUsage() {
     console.error("  cleos-bridge connect <CODE>   Pair and stay connected in the foreground");
     console.error("  cleos-bridge start [CODE]     Run as a reconnecting daemon (systemd)");
     console.error("  cleos-bridge reconnect        Reconnect once using saved credentials");
+    console.error("  cleos-bridge update [TAG]     Update package and restart systemd service");
 }
-async function waitForExit(session) {
+async function waitForExit(session, onStart) {
+    const stop = onStart?.();
     await new Promise((resolve) => {
         const onSignal = () => {
+            stop?.();
             session.close();
             resolve();
             process.exit(0);

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoC,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAIhG,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrG,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACtE,CAAC;AAwLF,wBAAsB,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,GAAG,OAAO,CAAC;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CA0BD;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAcxF;AAED,wBAAsB,oBAAoB,CAAC,OAAO,GAAE;IAClD,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CAC5C,GAAG,OAAO,CAAC,aAAa,CAAC,CAc9B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoC,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAKhG,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrG,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACtE,CAAC;AA2LF,wBAAsB,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,GAAG,OAAO,CAAC;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CA2BD;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAcxF;AAED,wBAAsB,oBAAoB,CAAC,OAAO,GAAE;IAClD,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CAC5C,GAAG,OAAO,CAAC,aAAa,CAAC,CAc9B"}

package/dist/client.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import WebSocket from "ws";
 import { saveCredentials, loadCredentials } from "./credentials.js";
+import { rememberConversationId } from "./activeConversation.js";
 import { convexSiteUrlFromEnv, resolvePairingCode } from "./resolve.js";
 import { normalizePairingCode } from "./normalizePairingCode.js";
 function parseUserMessageAttachments(raw) {
@@ -93,6 +94,9 @@ async function openAgentConnection(options) {
             const content = typeof envelope.content === "string" ? envelope.content : "";
             const agentId = typeof envelope.agentId === "string" ? envelope.agentId : options.agentId;
             const conversationId = typeof envelope.conversationId === "string" ? envelope.conversationId : "unknown";
+            if (conversationId !== "unknown") {
+                rememberConversationId(conversationId);
+            }
             const attachments = parseUserMessageAttachments(envelope.attachments);
             const replyMessageId = randomUUID();
             const reply = createReplySender(ws, agentId, conversationId, replyMessageId);
@@ -164,6 +168,7 @@ export async function pairCleosAgent(options) {
         agentToken: payload.agentToken,
         relayHttpUrl: pairing.relayHttpUrl,
         relayWsUrl: pairing.relayWsUrl,
+        convexSiteUrl: options.convexSiteUrl ?? convexSiteUrlFromEnv(),
         agentName: options.agentName ?? "Hermes",
         savedAt: Date.now(),
     });

package/dist/constants.d.ts

@@ -4,5 +4,8 @@ export declare const DEFAULT_CLEOS_CONVEX_SITE_URL = "https://amicable-elephant-
 export declare const DEFAULT_HERMES_API_URL = "http://127.0.0.1:8642/v1/chat/completions";
 /** VPS one-line installer (served from public Convex HTTP). */
 export declare const DEFAULT_BRIDGE_INSTALL_URL = "https://amicable-elephant-407.convex.site/install-bridge.sh";
+/** VPS one-line updater (served from public Convex HTTP). */
+export declare const DEFAULT_BRIDGE_UPDATE_URL = "https://amicable-elephant-407.convex.site/update-bridge.sh";
 export declare function bridgeInstallCommand(code: string): string;
+export declare function bridgeUpdateCommand(): string;
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,eAAO,MAAM,6BAA6B,8CAA8C,CAAC;AAEzF,6FAA6F;AAC7F,eAAO,MAAM,sBAAsB,8CAA8C,CAAC;AAElF,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,gEACwB,CAAC;AAEhE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,eAAO,MAAM,6BAA6B,8CAA8C,CAAC;AAEzF,6FAA6F;AAC7F,eAAO,MAAM,sBAAsB,8CAA8C,CAAC;AAElF,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,gEACwB,CAAC;AAEhE,6DAA6D;AAC7D,eAAO,MAAM,yBAAyB,+DACwB,CAAC;AAE/D,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/constants.js

@@ -4,6 +4,11 @@ export const DEFAULT_CLEOS_CONVEX_SITE_URL = "https://amicable-elephant-407.conv
 export const DEFAULT_HERMES_API_URL = "http://127.0.0.1:8642/v1/chat/completions";
 /** VPS one-line installer (served from public Convex HTTP). */
 export const DEFAULT_BRIDGE_INSTALL_URL = "https://amicable-elephant-407.convex.site/install-bridge.sh";
+/** VPS one-line updater (served from public Convex HTTP). */
+export const DEFAULT_BRIDGE_UPDATE_URL = "https://amicable-elephant-407.convex.site/update-bridge.sh";
 export function bridgeInstallCommand(code) {
     return `curl -fsSL ${DEFAULT_BRIDGE_INSTALL_URL} | bash -s -- ${code}`;
 }
+export function bridgeUpdateCommand() {
+    return `curl -fsSL ${DEFAULT_BRIDGE_UPDATE_URL} | bash`;
+}

package/dist/credentials.d.ts

@@ -3,10 +3,13 @@ export type SavedAgentCredentials = {
     agentToken: string;
     relayHttpUrl: string;
     relayWsUrl: string;
+    convexSiteUrl?: string;
+    conversationId?: string;
     agentName?: string;
     savedAt: number;
 };
 export declare function loadCredentials(): SavedAgentCredentials | null;
 export declare function saveCredentials(credentials: SavedAgentCredentials): void;
+export declare function patchCredentials(patch: Partial<SavedAgentCredentials>): SavedAgentCredentials | null;
 export declare function credentialsPathForDisplay(): string;
 //# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAIF,wBAAgB,eAAe,IAAI,qBAAqB,GAAG,IAAI,CAS9D;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAGxE;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAIF,wBAAgB,eAAe,IAAI,qBAAqB,GAAG,IAAI,CAS9D;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAGxE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,qBAAqB,GAAG,IAAI,CAMpG;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD"}

package/dist/credentials.js

@@ -18,6 +18,14 @@ export function saveCredentials(credentials) {
     mkdirSync(dirname(credentialsPath), { recursive: true });
     writeFileSync(credentialsPath, JSON.stringify(credentials, null, 2));
 }
+export function patchCredentials(patch) {
+    const existing = loadCredentials();
+    if (!existing)
+        return null;
+    const next = { ...existing, ...patch, savedAt: Date.now() };
+    saveCredentials(next);
+    return next;
+}
 export function credentialsPathForDisplay() {
     return credentialsPath;
 }

package/dist/cronWatcher.d.ts

@@ -0,0 +1,13 @@
+import type { ConnectResult } from "./client.js";
+type CronWatcherOptions = {
+    session: ConnectResult;
+    onDelivered?: (info: {
+        jobId: string;
+        jobName: string;
+        filePath: string;
+    }) => void;
+    onError?: (message: string) => void;
+};
+export declare function startCronWatcher(options: CronWatcherOptions): () => void;
+export {};
+//# sourceMappingURL=cronWatcher.d.ts.map

package/dist/cronWatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cronWatcher.d.ts","sourceRoot":"","sources":["../src/cronWatcher.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAejD,KAAK,kBAAkB,GAAG;IACxB,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACnF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC,CAAC;AAiGF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI,CAoExE"}

package/dist/cronWatcher.js

@@ -0,0 +1,165 @@
+import { mkdirSync, readFileSync, readdirSync, statSync, existsSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, relative } from "node:path";
+import { resolveActiveConversationId } from "./activeConversation.js";
+import { loadCredentials } from "./credentials.js";
+const HERMES_CRON_OUTPUT_DIR = join(homedir(), ".hermes", "cron", "output");
+const HERMES_CRON_JOBS_FILE = join(homedir(), ".hermes", "cron", "jobs.json");
+const DELIVERED_INDEX_PATH = join(homedir(), ".cleos", "cron-delivered.json");
+const POLL_INTERVAL_MS = 5_000;
+const FILE_SETTLE_MS = 750;
+function readDeliveredIndex() {
+    try {
+        const parsed = JSON.parse(readFileSync(DELIVERED_INDEX_PATH, "utf8"));
+        if (!Array.isArray(parsed))
+            return new Set();
+        return new Set(parsed.filter((item) => typeof item === "string"));
+    }
+    catch {
+        return new Set();
+    }
+}
+function writeDeliveredIndex(delivered) {
+    mkdirSync(dirname(DELIVERED_INDEX_PATH), { recursive: true });
+    writeFileSync(DELIVERED_INDEX_PATH, JSON.stringify([...delivered].sort(), null, 2));
+}
+function listCronOutputFiles(rootDir) {
+    if (!existsSync(rootDir))
+        return [];
+    const files = [];
+    for (const jobId of readdirSync(rootDir)) {
+        const jobDir = join(rootDir, jobId);
+        let stat;
+        try {
+            stat = statSync(jobDir);
+        }
+        catch {
+            continue;
+        }
+        if (!stat.isDirectory())
+            continue;
+        for (const fileName of readdirSync(jobDir)) {
+            if (!fileName.endsWith(".md"))
+                continue;
+            files.push(join(jobDir, fileName));
+        }
+    }
+    return files.sort();
+}
+function loadHermesCronJobs() {
+    const names = new Map();
+    if (!existsSync(HERMES_CRON_JOBS_FILE))
+        return names;
+    try {
+        const parsed = JSON.parse(readFileSync(HERMES_CRON_JOBS_FILE, "utf8"));
+        const jobs = Array.isArray(parsed)
+            ? parsed
+            : parsed && typeof parsed === "object" && Array.isArray(parsed.jobs)
+                ? (parsed.jobs ?? [])
+                : [];
+        for (const job of jobs) {
+            if (!job?.id)
+                continue;
+            names.set(job.id, job.name?.trim() || job.id);
+        }
+    }
+    catch {
+        // Ignore malformed jobs file; fall back to job id as name.
+    }
+    return names;
+}
+function relativeOutputKey(filePath) {
+    return relative(HERMES_CRON_OUTPUT_DIR, filePath).replace(/\\/g, "/");
+}
+function parseRunAtFromFileName(filePath) {
+    const base = filePath.split("/").pop()?.replace(/\.md$/i, "") ?? "";
+    if (!base)
+        return undefined;
+    const asNumber = Number(base);
+    if (Number.isFinite(asNumber) && asNumber > 0)
+        return asNumber;
+    const asDate = Date.parse(base);
+    if (Number.isFinite(asDate))
+        return asDate;
+    try {
+        return statSync(filePath).mtimeMs;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function readFileWhenStable(filePath) {
+    let lastSize = -1;
+    for (let attempt = 0; attempt < 4; attempt += 1) {
+        const content = readFileSync(filePath, "utf8");
+        if (content.length === lastSize) {
+            return content.trim();
+        }
+        lastSize = content.length;
+        await sleep(FILE_SETTLE_MS);
+    }
+    return readFileSync(filePath, "utf8").trim();
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export function startCronWatcher(options) {
+    const delivered = readDeliveredIndex();
+    let conversationId = loadCredentials()?.conversationId ?? null;
+    let stopped = false;
+    for (const filePath of listCronOutputFiles(HERMES_CRON_OUTPUT_DIR)) {
+        delivered.add(relativeOutputKey(filePath));
+    }
+    writeDeliveredIndex(delivered);
+    const tick = () => {
+        void (async () => {
+            if (stopped)
+                return;
+            try {
+                if (!conversationId) {
+                    conversationId = await resolveActiveConversationId();
+                }
+                const jobNames = loadHermesCronJobs();
+                for (const filePath of listCronOutputFiles(HERMES_CRON_OUTPUT_DIR)) {
+                    const key = relativeOutputKey(filePath);
+                    if (delivered.has(key))
+                        continue;
+                    const parts = key.split("/");
+                    const jobId = parts[0] ?? "unknown";
+                    const jobName = jobNames.get(jobId) ?? jobId;
+                    const content = await readFileWhenStable(filePath);
+                    if (!content) {
+                        delivered.add(key);
+                        continue;
+                    }
+                    options.session.deliverCronResult(content, {
+                        conversationId: conversationId,
+                        jobId,
+                        jobName,
+                        runAt: parseRunAtFromFileName(filePath),
+                    });
+                    delivered.add(key);
+                    writeDeliveredIndex(delivered);
+                    options.onDelivered?.({ jobId, jobName, filePath });
+                    console.log(JSON.stringify({
+                        event: "cleos-bridge.cron-delivered",
+                        jobId,
+                        jobName,
+                        file: key,
+                    }));
+                }
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                options.onError?.(message);
+                console.error(JSON.stringify({ event: "cleos-bridge.cron-error", message }));
+            }
+        })();
+    };
+    const timer = setInterval(tick, POLL_INTERVAL_MS);
+    tick();
+    return () => {
+        stopped = true;
+        clearInterval(timer);
+    };
+}

package/dist/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAsB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,CA8BpF"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAsB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,CAmCpF"}

package/dist/daemon.js

@@ -1,4 +1,5 @@
 import { connectHermesAgent, reconnectHermesAgent } from "./client.js";
+import { startCronWatcher } from "./cronWatcher.js";
 import { createHermesMessageHandler } from "./hermesForwarder.js";
 const RECONNECT_DELAY_MS = 5_000;
 export async function runBridgeDaemon(options = {}) {
@@ -20,7 +21,13 @@ export async function runBridgeDaemon(options = {}) {
                 session = await reconnectHermesAgent({ onUserMessage });
                 console.log(JSON.stringify({ event: "cleos-bridge.connected", agentId: session.agentId, mode: "reconnect" }));
             }
-            await session.closed;
+            const stopCronWatcher = startCronWatcher({ session });
+            try {
+                await session.closed;
+            }
+            finally {
+                stopCronWatcher();
+            }
             session.close();
             console.log(JSON.stringify({ event: "cleos-bridge.disconnected", retryInMs: RECONNECT_DELAY_MS }));
         }

package/dist/index.d.ts

@@ -7,7 +7,9 @@ export type { PairingInfo } from "./resolve.js";
 export { pairWithCleos } from "./pairWithCleos.js";
 export { createHermesMessageHandler, forwardToHermes, resolveHermesApiConfig } from "./hermesForwarder.js";
 export type { HermesForwarderOptions } from "./hermesForwarder.js";
+export { startCronWatcher } from "./cronWatcher.js";
+export { resolveActiveConversationId, rememberConversationId } from "./activeConversation.js";
 export { runBridgeDaemon } from "./daemon.js";
 export type { RunBridgeOptions } from "./daemon.js";
-export { DEFAULT_BRIDGE_INSTALL_URL, DEFAULT_CLEOS_CONVEX_SITE_URL, DEFAULT_HERMES_API_URL, bridgeInstallCommand, } from "./constants.js";
+export { DEFAULT_BRIDGE_INSTALL_URL, DEFAULT_BRIDGE_UPDATE_URL, DEFAULT_CLEOS_CONVEX_SITE_URL, DEFAULT_HERMES_API_URL, bridgeInstallCommand, bridgeUpdateCommand, } from "./constants.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACvF,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3G,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACvF,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3G,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -3,5 +3,7 @@ export { loadCredentials, saveCredentials, credentialsPathForDisplay } from "./c
 export { resolvePairingCode, convexSiteUrlFromEnv } from "./resolve.js";
 export { pairWithCleos } from "./pairWithCleos.js";
 export { createHermesMessageHandler, forwardToHermes, resolveHermesApiConfig } from "./hermesForwarder.js";
+export { startCronWatcher } from "./cronWatcher.js";
+export { resolveActiveConversationId, rememberConversationId } from "./activeConversation.js";
 export { runBridgeDaemon } from "./daemon.js";
-export { DEFAULT_BRIDGE_INSTALL_URL, DEFAULT_CLEOS_CONVEX_SITE_URL, DEFAULT_HERMES_API_URL, bridgeInstallCommand, } from "./constants.js";
+export { DEFAULT_BRIDGE_INSTALL_URL, DEFAULT_BRIDGE_UPDATE_URL, DEFAULT_CLEOS_CONVEX_SITE_URL, DEFAULT_HERMES_API_URL, bridgeInstallCommand, bridgeUpdateCommand, } from "./constants.js";

package/dist/token.d.ts

@@ -0,0 +1,2 @@
+export declare function hashToken(token: string): string;
+//# sourceMappingURL=token.d.ts.map

package/dist/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAEA,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C"}

package/dist/token.js

@@ -0,0 +1,4 @@
+import { createHash } from "node:crypto";
+export function hashToken(token) {
+    return createHash("sha256").update(token).digest("hex");
+}

package/dist/update.d.ts

@@ -0,0 +1,8 @@
+export type RunBridgeUpdateOptions = {
+    /** npm dist-tag or semver, default `latest`. */
+    tag?: string;
+    /** Skip systemd / service restart after install. */
+    skipRestart?: boolean;
+};
+export declare function runBridgeUpdate(options?: RunBridgeUpdateOptions): void;
+//# sourceMappingURL=update.d.ts.map

package/dist/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,sBAAsB,GAAG;IACnC,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,IAAI,CAsC1E"}

package/dist/update.js

@@ -0,0 +1,80 @@
+import { execFileSync, spawnSync } from "node:child_process";
+import { chmodSync, mkdirSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { BRIDGE_PACKAGE, bridgeCliPath, readInstalledBridgeVersion, resolveBridgeInstallDir, } from "./bridgePaths.js";
+export function runBridgeUpdate(options = {}) {
+    const tag = options.tag ?? "latest";
+    const bridgeDir = resolveBridgeInstallDir();
+    const beforeVersion = readInstalledBridgeVersion(bridgeDir);
+    mkdirSync(bridgeDir, { recursive: true });
+    console.log(`Updating ${BRIDGE_PACKAGE}@${tag} in ${bridgeDir}...`);
+    const npm = spawnSync("npm", [
+        "install",
+        "--prefix",
+        bridgeDir,
+        `${BRIDGE_PACKAGE}@${tag}`,
+        "--no-fund",
+        "--no-audit",
+        "--omit=dev",
+    ], { stdio: "inherit", env: process.env });
+    if (npm.status !== 0) {
+        throw new Error("npm install failed");
+    }
+    const cliPath = bridgeCliPath(bridgeDir);
+    linkBridgeCli(cliPath);
+    const afterVersion = readInstalledBridgeVersion(bridgeDir);
+    if (beforeVersion && afterVersion && beforeVersion === afterVersion) {
+        console.log(`Already on ${afterVersion}.`);
+    }
+    else {
+        console.log(`Updated ${beforeVersion ?? "unknown"} → ${afterVersion ?? "unknown"}.`);
+    }
+    if (!options.skipRestart) {
+        restartBridgeService();
+    }
+}
+function linkBridgeCli(cliPath) {
+    const nodeBin = process.execPath;
+    const wrapper = `#!/usr/bin/env bash\nexec "${nodeBin}" "${cliPath}" "$@"\n`;
+    const targets = process.getuid?.() === 0
+        ? ["/usr/local/bin/cleos-bridge"]
+        : [join(homedir(), ".local", "bin", "cleos-bridge")];
+    for (const target of targets) {
+        try {
+            mkdirSync(join(target, ".."), { recursive: true });
+            writeFileSync(target, wrapper, { mode: 0o755 });
+            chmodSync(target, 0o755);
+            console.log(`Linked ${target}`);
+            return;
+        }
+        catch {
+            // try next target
+        }
+    }
+}
+function restartBridgeService() {
+    const unitExists = spawnSync("systemctl", ["cat", "cleos-bridge.service"], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+    });
+    if (unitExists.status !== 0) {
+        console.log("No cleos-bridge.service found. Restart manually if the bridge is running:");
+        console.log("  cleos-bridge start");
+        return;
+    }
+    console.log("Restarting cleos-bridge.service...");
+    let restart = spawnSync("systemctl", ["restart", "cleos-bridge.service"], { stdio: "inherit" });
+    if (restart.status === 0) {
+        console.log("cleos-bridge.service restarted.");
+        return;
+    }
+    try {
+        execFileSync("sudo", ["systemctl", "restart", "cleos-bridge.service"], { stdio: "inherit" });
+        console.log("cleos-bridge.service restarted (via sudo).");
+    }
+    catch {
+        console.log("Could not restart the service. Run:");
+        console.log("  sudo systemctl restart cleos-bridge");
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saleso.innovations/bridge",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Connect your Hermes agent to the Cleos iOS app via pairing code.",
   "type": "module",
   "license": "MIT",