feat: profile-aware routes, provider sync, channel settings improvements

- Add hermes-profile.ts for dynamic profile path resolution (all backend
  routes now read from active profile directory instead of hardcoded ~/.hermes/)
- Add profile switcher dropdown in sidebar, reload page on switch
- Sync PROVIDER_PRESETS with Hermes CLI (fix keys: kimi-coding→kimi-for-coding,
  kilocode→kilo, ai-gateway→vercel, opencode-zen→opencode; remove moonshot)
- Sync PROVIDER_ENV_MAP with Hermes models.dev + overlays (correct env var names)
- Add gateway restart after adding model provider
- Don't write GLM_BASE_URL/KIMI_BASE_URL for zai/kimi (let Hermes auto-detect)
- Write API keys to .env and credential_pool for all providers
- Built-in providers skip custom_providers in config.yaml
- Add debounce + per-field loading state for channel settings inputs
- Run hermes setup --reset for profiles without config.yaml
- Create empty .env for new profiles (not copied from default)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

packages/server/src/index.ts

@@ -5,6 +5,7 @@ import serve from 'koa-static'
 import send from 'koa-send'
 import { resolve } from 'path'
 import { mkdir } from 'fs/promises'
+import { readFileSync } from 'fs'
 import { config } from './config'
 import { hermesRoutes, setupTerminalWebSocket, proxyMiddleware } from './routes/hermes'
 import { uploadRoutes } from './routes/upload'
@@ -12,6 +13,43 @@ import { webhookRoutes } from './routes/webhook'
 import * as hermesCli from './services/hermes-cli'
 import { getToken, authMiddleware } from './services/auth'
 
+function getLocalVersion(): string {
+  // production: dist/server → ../../package.json
+  // dev: packages/server/src → ../../../package.json
+  const candidates = [
+    resolve(__dirname, '../../package.json'),
+    resolve(__dirname, '../../../package.json'),
+  ]
+  for (const p of candidates) {
+    try {
+      return JSON.parse(readFileSync(p, 'utf-8')).version
+    } catch { }
+  }
+  return '0.0.0'
+}
+
+const LOCAL_VERSION = getLocalVersion()
+
+let cachedLatestVersion = ''
+
+async function checkLatestVersion(): Promise<void> {
+  try {
+    const res = await fetch('https://registry.npmjs.org/hermes-web-ui/latest', {
+      signal: AbortSignal.timeout(5000),
+    })
+    if (res.ok) {
+      const data = await res.json()
+      const latest = data.version || ''
+      if (latest && latest !== cachedLatestVersion) {
+        cachedLatestVersion = latest
+        if (latest !== LOCAL_VERSION) {
+          console.log(`⬆ New version available: v${LOCAL_VERSION} → v${latest}`)
+        }
+      }
+    }
+  } catch { }
+}
+
 const app = new Koa()
 const { restartGateway, startGateway, startGatewayBackground, getVersion } = hermesCli
 
@@ -40,6 +78,32 @@ export async function bootstrap() {
 
   app.use(webhookRoutes.routes())
   app.use(uploadRoutes.routes())
+
+  // update (must be before hermesRoutes which includes proxy routes)
+  app.use(async (ctx, next) => {
+    if (ctx.path === '/api/hermes/update' && ctx.method === 'POST') {
+      const isWin = process.platform === 'win32'
+      const cmd = isWin
+        ? 'cmd /c hermes-web-ui update'
+        : 'hermes-web-ui update'
+
+      try {
+        const { execSync } = await import('child_process')
+        const output = execSync(cmd, {
+          encoding: 'utf-8',
+          timeout: 120000,
+          stdio: ['pipe', 'pipe', 'pipe'],
+        })
+        ctx.body = { success: true, message: output.trim() }
+      } catch (err: any) {
+        ctx.status = 500
+        ctx.body = { success: false, message: err.stderr || err.message }
+      }
+      return
+    }
+    await next()
+  })
+
   app.use(hermesRoutes.routes())
   app.use(proxyMiddleware)
 
@@ -47,7 +111,7 @@ export async function bootstrap() {
   app.use(async (ctx, next) => {
     if (ctx.path === '/health') {
       const raw = await getVersion()
-      const version = raw.split('\n')[0].replace('Hermes Agent ', '') || ''
+      const hermesVersion = raw.split('\n')[0].replace('Hermes Agent ', '') || ''
 
       let gatewayOk = false
       try {
@@ -60,8 +124,11 @@ export async function bootstrap() {
       ctx.body = {
         status: gatewayOk ? 'ok' : 'error',
         platform: 'hermes-agent',
-        version,
+        version: hermesVersion,
         gateway: gatewayOk ? 'running' : 'stopped',
+        webui_version: LOCAL_VERSION,
+        webui_latest: cachedLatestVersion,
+        webui_update_available: cachedLatestVersion && cachedLatestVersion !== LOCAL_VERSION,
       }
       return
     }
@@ -97,6 +164,10 @@ export async function bootstrap() {
 
   // 👇 绑定退出信号
   bindShutdown()
+
+  // Check for updates every 4 hours
+  checkLatestVersion()
+  setInterval(checkLatestVersion, 4 * 60 * 60 * 1000)
 }
 
 // ============================
@@ -159,10 +230,10 @@ function bindShutdown() {
 // ============================
 
 async function ensureApiServerConfig() {
-  const { homedir } = await import('os')
   const { readFileSync, writeFileSync, existsSync, copyFileSync } = await import('fs')
   const yaml = (await import('js-yaml')).default
-  const configPath = resolve(homedir(), '.hermes/config.yaml')
+  const { getActiveConfigPath } = await import('./services/hermes-profile')
+  const configPath = getActiveConfigPath()
 
   const defaults: Record<string, any> = {
     enabled: true,

packages/server/src/routes/hermes/config.ts

@@ -1,10 +1,10 @@
 import Router from '@koa/router'
 import { readFile, writeFile, copyFile } from 'fs/promises'
 import { chmod } from 'fs/promises'
-import { resolve } from 'path'
-import { homedir } from 'os'
+import { join } from 'path'
 import YAML from 'js-yaml'
 import { restartGateway } from '../../services/hermes-cli'
+import { getActiveConfigPath, getActiveEnvPath, getActiveProfileDir } from '../../services/hermes-profile'
 
 // Platform sections that require gateway restart after config change
 const PLATFORM_SECTIONS = new Set([
@@ -12,8 +12,8 @@ const PLATFORM_SECTIONS = new Set([
   'weixin', 'wecom', 'feishu', 'dingtalk',
 ])
 
-const configPath = resolve(homedir(), '.hermes/config.yaml')
-const envPath = resolve(homedir(), '.hermes/.env')
+const configPath = () => getActiveConfigPath()
+const envPath = () => getActiveEnvPath()
 
 // Env var → (platform, configPath in PlatformConfig) mapping
 // Matches hermes _apply_env_overrides() in gateway/config.py
@@ -81,7 +81,7 @@ function getNested(obj: Record<string, any>, path: string): any {
 
 async function readEnvPlatforms(): Promise<Record<string, any>> {
   try {
-    const raw = await readFile(envPath, 'utf-8')
+    const raw = await readFile(envPath(), 'utf-8')
     const env = parseEnv(raw)
     const platforms: Record<string, any> = {}
     for (const [envKey, [platform, cfgPath]] of Object.entries(envPlatformMap)) {
@@ -103,7 +103,7 @@ async function readEnvPlatforms(): Promise<Record<string, any>> {
 async function saveEnvValue(key: string, value: string): Promise<void> {
   let raw: string
   try {
-    raw = await readFile(envPath, 'utf-8')
+    raw = await readFile(envPath(), 'utf-8')
   } catch {
     raw = ''
   }
@@ -144,25 +144,26 @@ async function saveEnvValue(key: string, value: string): Promise<void> {
 
   // Remove trailing empty lines, keep exactly one trailing newline
   let output = result.join('\n').replace(/\n{3,}/g, '\n\n').replace(/\n+$/, '') + '\n'
-  await writeFile(envPath, output, 'utf-8')
+  await writeFile(envPath(), output, 'utf-8')
   // Set permissions to 0600 (owner only), matching hermes behavior
-  try { await chmod(envPath, 0o600) } catch { /* ignore */ }
+  try { await chmod(envPath(), 0o600) } catch { /* ignore */ }
 }
 
 async function readConfig(): Promise<Record<string, any>> {
-  const raw = await readFile(configPath, 'utf-8')
+  const raw = await readFile(configPath(), 'utf-8')
   return (YAML.load(raw) as Record<string, any>) || {}
 }
 
 async function writeConfig(data: Record<string, any>): Promise<void> {
-  await copyFile(configPath, configPath + '.bak')
+  const cp = configPath()
+  await copyFile(cp, cp + '.bak')
   const yamlStr = YAML.dump(data, {
     lineWidth: -1,
     noRefs: true,
     quotingType: '"',
     forceQuotes: false,
   })
-  await writeFile(configPath, yamlStr, 'utf-8')
+  await writeFile(cp, yamlStr, 'utf-8')
 }
 
 export const configRoutes = new Router()

packages/server/src/routes/hermes/filesystem.ts

@@ -1,8 +1,64 @@
 import Router from '@koa/router'
 import { readdir, readFile, stat, writeFile, mkdir, copyFile } from 'fs/promises'
 import { join, resolve } from 'path'
-import { homedir } from 'os'
 import YAML from 'js-yaml'
+import { getActiveProfileDir, getActiveConfigPath, getActiveAuthPath, getActiveEnvPath } from '../../services/hermes-profile'
+import * as hermesCli from '../../services/hermes-cli'
+
+// --- Provider env var mapping (from hermes providers.py HERMES_OVERLAYS + config.py) ---
+// Maps provider key → { api_key_envs: all env var aliases for API key, base_url_env: env var for base URL }
+const PROVIDER_ENV_MAP: Record<string, { api_key_env: string; base_url_env: string }> = {
+  openrouter: { api_key_env: 'OPENROUTER_API_KEY', base_url_env: 'OPENROUTER_BASE_URL' },
+  zai: { api_key_env: 'ZAI_API_KEY', base_url_env: '' },
+  'kimi-for-coding': { api_key_env: 'KIMI_API_KEY', base_url_env: '' },
+  minimax: { api_key_env: 'MINIMAX_API_KEY', base_url_env: 'MINIMAX_BASE_URL' },
+  'minimax-cn': { api_key_env: 'MINIMAX_API_KEY', base_url_env: 'MINIMAX_CN_BASE_URL' },
+  deepseek: { api_key_env: 'DEEPSEEK_API_KEY', base_url_env: 'DEEPSEEK_BASE_URL' },
+  alibaba: { api_key_env: 'DASHSCOPE_API_KEY', base_url_env: 'DASHSCOPE_BASE_URL' },
+  anthropic: { api_key_env: 'ANTHROPIC_API_KEY', base_url_env: '' },
+  xai: { api_key_env: 'XAI_API_KEY', base_url_env: 'XAI_BASE_URL' },
+  xiaomi: { api_key_env: 'XIAOMI_API_KEY', base_url_env: 'XIAOMI_BASE_URL' },
+  gemini: { api_key_env: 'GEMINI_API_KEY', base_url_env: '' },
+  kilo: { api_key_env: 'KILO_API_KEY', base_url_env: 'KILOCODE_BASE_URL' },
+  vercel: { api_key_env: 'AI_GATEWAY_API_KEY', base_url_env: '' },
+  opencode: { api_key_env: 'OPENCODE_API_KEY', base_url_env: 'OPENCODE_ZEN_BASE_URL' },
+  'opencode-go': { api_key_env: 'OPENCODE_API_KEY', base_url_env: 'OPENCODE_GO_BASE_URL' },
+  huggingface: { api_key_env: 'HF_TOKEN', base_url_env: 'HF_BASE_URL' },
+}
+
+async function saveEnvValue(key: string, value: string): Promise<void> {
+  const envPath = getActiveEnvPath()
+  let raw: string
+  try {
+    raw = await readFile(envPath, 'utf-8')
+  } catch {
+    raw = ''
+  }
+  const remove = !value
+  const lines = raw.split('\n')
+  let found = false
+  const result: string[] = []
+  for (const line of lines) {
+    const trimmed = line.trim()
+    if (trimmed.startsWith('#') && trimmed.startsWith(`# ${key}=`)) {
+      if (!remove) result.push(`${key}=${value}`)
+      found = true
+    } else {
+      const eqIdx = trimmed.indexOf('=')
+      if (eqIdx !== -1 && trimmed.slice(0, eqIdx).trim() === key) {
+        if (!remove) result.push(`${key}=${value}`)
+        found = true
+      } else {
+        result.push(line)
+      }
+    }
+  }
+  if (!found && !remove) {
+    result.push(`${key}=${value}`)
+  }
+  let output = result.join('\n').replace(/\n{3,}/g, '\n\n').replace(/\n+$/, '') + '\n'
+  await writeFile(envPath, output, 'utf-8')
+}
 
 // --- Auth / Credential Pool ---
 
@@ -18,11 +74,11 @@ interface AuthJson {
   credential_pool?: Record<string, CredentialPoolEntry[]>
 }
 
-const authPath = resolve(homedir(), '.hermes', 'auth.json')
+const authPath = () => getActiveAuthPath()
 
 async function loadAuthJson(): Promise<AuthJson | null> {
   try {
-    const raw = await readFile(authPath, 'utf-8')
+    const raw = await readFile(authPath(), 'utf-8')
     return JSON.parse(raw) as AuthJson
   } catch {
     return null
@@ -30,7 +86,7 @@ async function loadAuthJson(): Promise<AuthJson | null> {
 }
 
 async function saveAuthJson(auth: AuthJson): Promise<void> {
-  await writeFile(authPath, JSON.stringify(auth, null, 2) + '\n', 'utf-8')
+  await writeFile(authPath(), JSON.stringify(auth, null, 2) + '\n', 'utf-8')
 }
 
 async function fetchProviderModels(baseUrl: string, apiKey: string): Promise<string[]> {
@@ -62,7 +118,7 @@ const PROVIDER_MODEL_CATALOG = buildProviderModelMap()
 
 export const fsRoutes = new Router()
 
-const hermesDir = resolve(homedir(), '.hermes')
+const hermesDir = () => getActiveProfileDir()
 
 // --- Types ---
 
@@ -123,29 +179,30 @@ async function safeStat(filePath: string): Promise<{ mtime: number } | null> {
 
 // --- Config YAML helpers ---
 
-const configPath = resolve(homedir(), '.hermes/config.yaml')
+const configPath = () => getActiveConfigPath()
 
 async function readConfigYaml(): Promise<Record<string, any>> {
-  const raw = await safeReadFile(configPath)
+  const raw = await safeReadFile(configPath())
   if (!raw) return {}
   return (YAML.load(raw) as Record<string, any>) || {}
 }
 
 async function writeConfigYaml(config: Record<string, any>): Promise<void> {
-  await copyFile(configPath, configPath + '.bak')
+  const cp = configPath()
+  await copyFile(cp, cp + '.bak')
   const yamlStr = YAML.dump(config, {
     lineWidth: -1,
     noRefs: true,
     quotingType: '"',
   })
-  await writeFile(configPath, yamlStr, 'utf-8')
+  await writeFile(cp, yamlStr, 'utf-8')
 }
 
 // --- Skills Routes ---
 
 // List all skills grouped by category
 fsRoutes.get('/api/hermes/skills', async (ctx) => {
-  const skillsDir = join(hermesDir, 'skills')
+  const skillsDir = join(hermesDir(), 'skills')
 
   try {
     // Read disabled skills list from config.yaml
@@ -250,7 +307,7 @@ async function listFilesRecursive(dir: string, prefix: string): Promise<{ path:
 
 fsRoutes.get('/api/hermes/skills/:category/:skill/files', async (ctx) => {
   const { category, skill } = ctx.params
-  const skillDir = join(hermesDir, 'skills', category, skill)
+  const skillDir = join(hermesDir(), 'skills', category, skill)
 
   try {
     const allFiles = await listFilesRecursive(skillDir, '')
@@ -265,9 +322,10 @@ fsRoutes.get('/api/hermes/skills/:category/:skill/files', async (ctx) => {
 // Read a specific file under skills/ (must be registered after the /files route)
 fsRoutes.get('/api/hermes/skills/{*path}', async (ctx) => {
   const filePath = (ctx.params as any).path
-  const fullPath = resolve(join(hermesDir, 'skills', filePath))
+  const hd = hermesDir()
+  const fullPath = resolve(join(hd, 'skills', filePath))
 
-  if (!fullPath.startsWith(join(hermesDir, 'skills'))) {
+  if (!fullPath.startsWith(join(hd, 'skills'))) {
     ctx.status = 403
     ctx.body = { error: 'Access denied' }
     return
@@ -286,21 +344,27 @@ fsRoutes.get('/api/hermes/skills/{*path}', async (ctx) => {
 // --- Memory Routes ---
 
 fsRoutes.get('/api/hermes/memory', async (ctx) => {
-  const memoryPath = join(hermesDir, 'memories', 'MEMORY.md')
-  const userPath = join(hermesDir, 'memories', 'USER.md')
+  const hd = hermesDir()
+  const memoryPath = join(hd, 'memories', 'MEMORY.md')
+  const userPath = join(hd, 'memories', 'USER.md')
+  const soulPath = join(hd, 'SOUL.md')
 
-  const [memory, user, memoryStat, userStat] = await Promise.all([
+  const [memory, user, soul, memoryStat, userStat, soulStat] = await Promise.all([
     safeReadFile(memoryPath),
     safeReadFile(userPath),
+    safeReadFile(soulPath),
     safeStat(memoryPath),
     safeStat(userPath),
+    safeStat(soulPath),
   ])
 
   ctx.body = {
     memory: memory || '',
     user: user || '',
+    soul: soul || '',
     memory_mtime: memoryStat?.mtime || null,
     user_mtime: userStat?.mtime || null,
+    soul_mtime: soulStat?.mtime || null,
   }
 })
 
@@ -313,14 +377,19 @@ fsRoutes.post('/api/hermes/memory', async (ctx) => {
     return
   }
 
-  if (section !== 'memory' && section !== 'user') {
+  if (section !== 'memory' && section !== 'user' && section !== 'soul') {
     ctx.status = 400
-    ctx.body = { error: 'Section must be "memory" or "user"' }
+    ctx.body = { error: 'Section must be "memory", "user", or "soul"' }
     return
   }
 
-  const fileName = section === 'memory' ? 'MEMORY.md' : 'USER.md'
-  const filePath = join(hermesDir, 'memories', fileName)
+  let filePath: string
+  if (section === 'soul') {
+    filePath = join(hermesDir(), 'SOUL.md')
+  } else {
+    const fileName = section === 'memory' ? 'MEMORY.md' : 'USER.md'
+    filePath = join(hermesDir(), 'memories', fileName)
+  }
 
   try {
     await writeFile(filePath, content, 'utf-8')
@@ -532,26 +601,27 @@ fsRoutes.post('/api/hermes/config/providers', async (ctx) => {
   }
 
   try {
-    // 1. Write to config.yaml custom_providers
-    const config = await readConfigYaml()
-
-    if (!Array.isArray(config.custom_providers)) {
-      config.custom_providers = []
-    }
-
-    config.custom_providers.push({ name, base_url, api_key, model })
-    await writeConfigYaml(config)
-
-    // 2. Write to auth.json credential_pool
+    // Determine if this is a built-in provider or a custom one
     const poolKey = providerKey
       || `custom:${name.trim().toLowerCase().replace(/ /g, '-')}`
+    const isBuiltin = poolKey in PROVIDER_ENV_MAP
+
+    if (!isBuiltin) {
+      // Custom provider: write to config.yaml custom_providers
+      const config = await readConfigYaml()
+      if (!Array.isArray(config.custom_providers)) {
+        config.custom_providers = []
+      }
+      config.custom_providers.push({ name, base_url, api_key, model })
+      await writeConfigYaml(config)
+    }
+
+    // Write to auth.json credential_pool (all providers)
     const auth = await loadAuthJson() || { credential_pool: {} }
     if (!auth.credential_pool) auth.credential_pool = {}
-
     if (!auth.credential_pool[poolKey]) {
       auth.credential_pool[poolKey] = []
     }
-
     auth.credential_pool[poolKey].push({
       id: `${poolKey}-${Date.now()}`,
       label: name,
@@ -559,10 +629,18 @@ fsRoutes.post('/api/hermes/config/providers', async (ctx) => {
       access_token: api_key,
       last_status: null,
     })
-
     await saveAuthJson(auth)
 
-    // 3. Auto-switch model to the newly added provider
+    // Write API key to .env (built-in providers only)
+    const envMapping = PROVIDER_ENV_MAP[poolKey] || PROVIDER_ENV_MAP[providerKey || '']
+    if (envMapping) {
+      await saveEnvValue(envMapping.api_key_env, api_key)
+      if (envMapping.base_url_env) {
+        await saveEnvValue(envMapping.base_url_env, base_url)
+      }
+    }
+
+    // Auto-switch model to the newly added provider
     const config2 = await readConfigYaml()
     if (typeof config2.model !== 'object' || config2.model === null) {
       config2.model = {}
@@ -571,6 +649,13 @@ fsRoutes.post('/api/hermes/config/providers', async (ctx) => {
     config2.model.provider = poolKey
     await writeConfigYaml(config2)
 
+    // Restart gateway to pick up .env and config.yaml changes
+    try {
+      await hermesCli.restartGateway()
+    } catch (e: any) {
+      console.error('[Provider] Gateway restart failed:', e.message)
+    }
+
     ctx.body = { success: true }
   } catch (err: any) {
     ctx.status = 500

packages/server/src/routes/hermes/profiles.ts

@@ -1,9 +1,40 @@
 import Router from '@koa/router'
-import { createReadStream, existsSync, unlinkSync } from 'fs'
+import { createReadStream, existsSync, unlinkSync, readFileSync, writeFileSync, mkdirSync, copyFileSync } from 'fs'
 import { basename, join } from 'path'
-import { tmpdir } from 'os'
+import { tmpdir, homedir } from 'os'
+import YAML from 'js-yaml'
 import * as hermesCli from '../../services/hermes-cli'
 
+const apiServerDefaults = {
+  enabled: true,
+  host: '127.0.0.1',
+  port: 8642,
+  key: '',
+  cors_origins: '*',
+}
+
+function ensureApiServerConfig(profilePath: string) {
+  const configPath = join(profilePath, 'config.yaml')
+  try {
+    if (!existsSync(configPath)) {
+      // Profile has no config.yaml — run hermes setup --reset to generate full defaults,
+      // then inject api_server config (setup itself doesn't add it)
+      console.log(`[Profile] No config.yaml for ${profilePath}, running setup --reset`)
+      return { needSetup: true, path: profilePath }
+    }
+    const content = readFileSync(configPath, 'utf-8')
+    const cfg = YAML.load(content) as any || {}
+    if (!cfg.platforms) cfg.platforms = {}
+    if (!cfg.platforms.api_server) {
+      cfg.platforms.api_server = { ...apiServerDefaults }
+      writeFileSync(configPath, YAML.dump(cfg), 'utf-8')
+      console.log(`[Profile] Ensured api_server config for: ${profilePath}`)
+    }
+    return { needSetup: false, path: profilePath }
+  } catch { }
+  return { needSetup: false, path: profilePath }
+}
+
 export const profileRoutes = new Router()
 
 // GET /api/profiles - List all profiles
@@ -109,10 +140,10 @@ profileRoutes.put('/api/hermes/profiles/active', async (ctx) => {
   }
 
   try {
-    // 1. Stop gateway (try launchd/systemd first, ignore if unavailable e.g. WSL)
+    // 1. Stop gateway
     try { await hermesCli.stopGateway() } catch { }
 
-    // 2. Kill gateway by port if still running (for WSL / background mode)
+    // 2. Kill gateway by port if still running
     try {
       const { execSync } = await import('child_process')
       const isWin = process.platform === 'win32'
@@ -138,11 +169,34 @@ profileRoutes.put('/api/hermes/profiles/active', async (ctx) => {
     const output = await hermesCli.useProfile(name)
     await new Promise(r => setTimeout(r, 1000))
 
-    // 4. Start gateway — try launchd/systemd first, fall back to background mode
+    // 4. Ensure api_server config for new profile
     try {
-      await hermesCli.restartGateway()
+      const detail = await hermesCli.getProfile(name)
+      console.log(`[Profile] detail.path = ${detail.path}`)
+      const result = ensureApiServerConfig(detail.path)
+      if (result?.needSetup) {
+        // No config.yaml — run setup --reset to create full default config,
+        // then ensure api_server is present
+        try { await hermesCli.setupReset() } catch { }
+        ensureApiServerConfig(detail.path)
+      }
+      // Create .env if target has none
+      const profileEnv = join(detail.path, '.env')
+      console.log(`[Profile] .env exists: ${existsSync(profileEnv)}, path: ${profileEnv}`)
+      if (!existsSync(profileEnv)) {
+        writeFileSync(profileEnv, '# Hermes Agent Environment Configuration\n', 'utf-8')
+        console.log(`[Profile] Created .env for: ${detail.path}`)
+      }
+    } catch (err: any) {
+      console.error(`[Profile] Ensure config failed:`, err.message)
+    }
+
+    // 5. Start gateway
+    try {
+      await hermesCli.startGateway()
+      console.log('[Profile] Gateway started')
     } catch {
-      // Fallback for WSL / environments without launchd/systemd
+      // Fallback: background mode (for WSL etc.)
       try {
         const pid = await hermesCli.startGatewayBackground()
         await new Promise(r => setTimeout(r, 3000))

packages/server/src/routes/hermes/weixin.ts

@@ -3,10 +3,10 @@ import axios from 'axios'
 import { readFile, writeFile } from 'fs/promises'
 import { chmod } from 'fs/promises'
 import { resolve } from 'path'
-import { homedir } from 'os'
 import { restartGateway } from '../../services/hermes-cli'
+import { getActiveEnvPath } from '../../services/hermes-profile'
 
-const envPath = resolve(homedir(), '.hermes/.env')
+const envPath = () => getActiveEnvPath()
 const ILINK_BASE = 'https://ilinkai.weixin.qq.com'
 
 export const weixinRoutes = new Router()
@@ -84,7 +84,7 @@ weixinRoutes.post('/api/hermes/weixin/save', async (ctx) => {
   try {
     let raw: string
     try {
-      raw = await readFile(envPath, 'utf-8')
+      raw = await readFile(envPath(), 'utf-8')
     } catch {
       raw = ''
     }
@@ -124,8 +124,9 @@ weixinRoutes.post('/api/hermes/weixin/save', async (ctx) => {
     }
 
     let output = result.join('\n').replace(/\n{3,}/g, '\n\n').replace(/\n+$/, '') + '\n'
-    await writeFile(envPath, output, 'utf-8')
-    try { await chmod(envPath, 0o600) } catch { /* ignore */ }
+    const ep = envPath()
+    await writeFile(ep, output, 'utf-8')
+    try { await chmod(ep, 0o600) } catch { /* ignore */ }
     await restartGateway()
 
     ctx.body = { success: true }

packages/server/src/services/hermes-cli.ts

@@ -507,6 +507,22 @@ export async function exportProfile(name: string, outputPath?: string): Promise<
   }
 }
 
+/**
+ * Run hermes setup --non-interactive --reset to generate default config for current profile
+ */
+export async function setupReset(): Promise<string> {
+  try {
+    const { stdout, stderr } = await execFileAsync('hermes', ['setup', '--non-interactive', '--reset'], {
+      timeout: 30000,
+      ...execOpts,
+    })
+    return stdout || stderr
+  } catch (err: any) {
+    console.error('[Hermes CLI] setup reset failed:', err.message)
+    throw new Error(`Failed to reset config: ${err.message}`)
+  }
+}
+
 /**
  * Import profile from archive
  */

packages/server/src/services/hermes-profile.ts

@@ -0,0 +1,56 @@
+import { resolve, join } from 'path'
+import { homedir } from 'os'
+import { readFileSync, existsSync } from 'fs'
+
+const HERMES_BASE = resolve(homedir(), '.hermes')
+
+/**
+ * Get the active profile's home directory.
+ * default → ~/.hermes/
+ * other   → ~/.hermes/profiles/{name}/
+ */
+export function getActiveProfileDir(): string {
+  const activeFile = join(HERMES_BASE, 'active_profile')
+  try {
+    const name = readFileSync(activeFile, 'utf-8').trim()
+    if (name && name !== 'default') {
+      const dir = join(HERMES_BASE, 'profiles', name)
+      if (existsSync(dir)) return dir
+    }
+  } catch { }
+  return HERMES_BASE
+}
+
+/**
+ * Get the active profile's config.yaml path.
+ */
+export function getActiveConfigPath(): string {
+  return join(getActiveProfileDir(), 'config.yaml')
+}
+
+/**
+ * Get the active profile's auth.json path.
+ */
+export function getActiveAuthPath(): string {
+  return join(getActiveProfileDir(), 'auth.json')
+}
+
+/**
+ * Get the active profile's .env path.
+ */
+export function getActiveEnvPath(): string {
+  return join(getActiveProfileDir(), '.env')
+}
+
+/**
+ * Get the active profile name.
+ */
+export function getActiveProfileName(): string {
+  const activeFile = join(HERMES_BASE, 'active_profile')
+  try {
+    const name = readFileSync(activeFile, 'utf-8').trim()
+    return name || 'default'
+  } catch {
+    return 'default'
+  }
+}

packages/server/src/shared/providers.ts

@@ -43,7 +43,7 @@ export const PROVIDER_PRESETS: ProviderPreset[] = [
   {
     label: 'DeepSeek',
     value: 'deepseek',
-    base_url: 'https://api.deepseek.com/v1',
+    base_url: 'https://api.deepseek.com',
     models: ['deepseek-chat', 'deepseek-reasoner'],
   },
   {
@@ -53,8 +53,8 @@ export const PROVIDER_PRESETS: ProviderPreset[] = [
     models: ['glm-5', 'glm-5-turbo', 'glm-4.7', 'glm-4.5', 'glm-4.5-flash'],
   },
   {
-    label: 'Kimi Coding Plan',
-    value: 'kimi-coding',
+    label: 'Kimi for Coding',
+    value: 'kimi-for-coding',
     base_url: 'https://api.kimi.com/coding/v1',
     models: [
       'kimi-for-coding',
@@ -65,12 +65,6 @@ export const PROVIDER_PRESETS: ProviderPreset[] = [
       'kimi-k2-0905-preview',
     ],
   },
-  {
-    label: 'Moonshot (Pay-as-you-go)',
-    value: 'moonshot',
-    base_url: 'https://api.moonshot.ai/v1',
-    models: ['kimi-k2.5', 'kimi-k2-thinking', 'kimi-k2-turbo-preview', 'kimi-k2-0905-preview'],
-  },
   {
     label: 'xAI',
     value: 'xai',
@@ -91,7 +85,7 @@ export const PROVIDER_PRESETS: ProviderPreset[] = [
   {
     label: 'MiniMax',
     value: 'minimax',
-    base_url: 'https://api.minimax.io/anthropic',
+    base_url: 'https://api.minimax.io/anthropic/v1',
     models: ['MiniMax-M2.7', 'MiniMax-M2.5', 'MiniMax-M2.1', 'MiniMax-M2'],
   },
   {
@@ -137,7 +131,7 @@ export const PROVIDER_PRESETS: ProviderPreset[] = [
   },
   {
     label: 'Kilo Code',
-    value: 'kilocode',
+    value: 'kilo',
     base_url: 'https://api.kilo.ai/api/gateway',
     models: [
       'anthropic/claude-opus-4.6',
@@ -148,8 +142,8 @@ export const PROVIDER_PRESETS: ProviderPreset[] = [
     ],
   },
   {
-    label: 'AI Gateway',
-    value: 'ai-gateway',
+    label: 'Vercel AI Gateway',
+    value: 'vercel',
     base_url: 'https://ai-gateway.vercel.sh/v1',
     models: [
       'anthropic/claude-opus-4.6',
@@ -168,7 +162,7 @@ export const PROVIDER_PRESETS: ProviderPreset[] = [
   },
   {
     label: 'OpenCode Zen',
-    value: 'opencode-zen',
+    value: 'opencode',
     base_url: 'https://opencode.ai/zen/v1',
     models: [
       'gpt-5.4-pro',