billion-context 0.1.135-pr.1107.995 → 0.1.135

package/dist/index.js

@@ -52435,8 +52435,8 @@ import { createHash as createHash5 } from "crypto";
 
 // src/persist.ts
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, writeFileSync as writeFileSync2 } from "fs";
-import { readdir, rm } from "fs/promises";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "fs";
+import { open, readdir, readFile as readFile2, rm } from "fs/promises";
 import * as path7 from "path";
 
 // node_modules/acp-kernel/dist/persist/index.js
@@ -52878,1855 +52878,1183 @@ function rel(p2, base) {
 // src/encrypt.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
 import * as zlib from "zlib";
-
-// node_modules/fzstd/esm/index.mjs
-var ab = ArrayBuffer;
-var u8 = Uint8Array;
-var u16 = Uint16Array;
-var i16 = Int16Array;
-var i32 = Int32Array;
-var slc = function(v2, s3, e) {
-  if (u8.prototype.slice)
-    return u8.prototype.slice.call(v2, s3, e);
-  if (s3 == null || s3 < 0)
-    s3 = 0;
-  if (e == null || e > v2.length)
-    e = v2.length;
-  var n = new u8(e - s3);
-  n.set(v2.subarray(s3, e));
-  return n;
-};
-var fill = function(v2, n, s3, e) {
-  if (u8.prototype.fill)
-    return u8.prototype.fill.call(v2, n, s3, e);
-  if (s3 == null || s3 < 0)
-    s3 = 0;
-  if (e == null || e > v2.length)
-    e = v2.length;
-  for (; s3 < e; ++s3)
-    v2[s3] = n;
-  return v2;
-};
-var cpw = function(v2, t, s3, e) {
-  if (u8.prototype.copyWithin)
-    return u8.prototype.copyWithin.call(v2, t, s3, e);
-  if (s3 == null || s3 < 0)
-    s3 = 0;
-  if (e == null || e > v2.length)
-    e = v2.length;
-  while (s3 < e) {
-    v2[t++] = v2[s3++];
+var ENCRYPT_MAGIC = Buffer.from("BILIENC1", "utf8");
+var FORMAT_VERSION = 1;
+var MODE_RAW = 0;
+var MODE_ZSTD = 1;
+var NONCE_LEN = 12;
+var TAG_LEN = 16;
+var HEADER_LEN = ENCRYPT_MAGIC.length + 2 + NONCE_LEN;
+var MIN_ENCRYPTED_LEN = HEADER_LEN + TAG_LEN;
+function parseEncryptionKey(value) {
+  const v2 = value.trim();
+  let buf = null;
+  if (/^[0-9a-fA-F]+$/.test(v2) && v2.length % 2 === 0) {
+    buf = Buffer.from(v2, "hex");
+  } else if (/^[A-Za-z0-9+/]+={0,2}$/.test(v2)) {
+    buf = Buffer.from(v2, "base64");
   }
-};
-var ec = [
-  "invalid zstd data",
-  "window size too large (>2046MB)",
-  "invalid block type",
-  "FSE accuracy too high",
-  "match distance too far back",
-  "unexpected EOF"
-];
-var err = function(ind, msg, nt2) {
-  var e = new Error(msg || ec[ind]);
-  e.code = ind;
-  if (Error.captureStackTrace)
-    Error.captureStackTrace(e, err);
-  if (!nt2)
-    throw e;
-  return e;
-};
-var rb = function(d, b2, n) {
-  var i = 0, o = 0;
-  for (; i < n; ++i)
-    o |= d[b2++] << (i << 3);
-  return o;
-};
-var b4 = function(d, b2) {
-  return (d[b2] | d[b2 + 1] << 8 | d[b2 + 2] << 16 | d[b2 + 3] << 24) >>> 0;
-};
-var rzfh = function(dat, w2) {
-  var n3 = dat[0] | dat[1] << 8 | dat[2] << 16;
-  if (n3 == 3126568 && dat[3] == 253) {
-    var flg = dat[4];
-    var ss2 = flg >> 5 & 1, cc = flg >> 2 & 1, df = flg & 3, fcf = flg >> 6;
-    if (flg & 8)
-      err(0);
-    var bt2 = 6 - ss2;
-    var db = df == 3 ? 4 : df;
-    var di2 = rb(dat, bt2, db);
-    bt2 += db;
-    var fsb = fcf ? 1 << fcf : ss2;
-    var fss = rb(dat, bt2, fsb) + (fcf == 1 && 256);
-    var ws2 = fss;
-    if (!ss2) {
-      var wb = 1 << 10 + (dat[5] >> 3);
-      ws2 = wb + (wb >> 3) * (dat[5] & 7);
-    }
-    if (ws2 > 2145386496)
-      err(1);
-    var buf = new u8((w2 == 1 ? fss || ws2 : w2 ? 0 : ws2) + 12);
-    buf[0] = 1, buf[4] = 4, buf[8] = 8;
-    return {
-      b: bt2 + fsb,
-      y: 0,
-      l: 0,
-      d: di2,
-      w: w2 && w2 != 1 ? w2 : buf.subarray(12),
-      e: ws2,
-      o: new i32(buf.buffer, 0, 3),
-      u: fss,
-      c: cc,
-      m: Math.min(131072, ws2)
-    };
-  } else if ((n3 >> 4 | dat[3] << 20) == 25481893) {
-    return b4(dat, 4) + 8;
+  if (!buf || buf.length !== 32) {
+    const got = buf ? `${buf.length} bytes` : "an undecodable value";
+    throw new Error(
+      `[encrypt] BILI_ENCRYPTION_KEY must be exactly 32 bytes encoded as hex (64 chars) or base64 \u2014 got ${got}`
+    );
   }
-  err(0);
-};
-var msb = function(val) {
-  var bits = 0;
-  for (; 1 << bits <= val; ++bits)
-    ;
-  return bits - 1;
-};
-var rfse = function(dat, bt2, mal) {
-  var tpos = (bt2 << 3) + 4;
-  var al = (dat[bt2] & 15) + 5;
-  if (al > mal)
-    err(3);
-  var sz = 1 << al;
-  var probs = sz, sym = -1, re2 = -1, i = -1, ht2 = sz;
-  var buf = new ab(512 + (sz << 2));
-  var freq = new i16(buf, 0, 256);
-  var dstate = new u16(buf, 0, 256);
-  var nstate = new u16(buf, 512, sz);
-  var bb1 = 512 + (sz << 1);
-  var syms = new u8(buf, bb1, sz);
-  var nbits = new u8(buf, bb1 + sz);
-  while (sym < 255 && probs > 0) {
-    var bits = msb(probs + 1);
-    var cbt = tpos >> 3;
-    var msk = (1 << bits + 1) - 1;
-    var val = (dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (tpos & 7) & msk;
-    var msk1fb = (1 << bits) - 1;
-    var msv = msk - probs - 1;
-    var sval = val & msk1fb;
-    if (sval < msv)
-      tpos += bits, val = sval;
-    else {
-      tpos += bits + 1;
-      if (val > msk1fb)
-        val -= msv;
-    }
-    freq[++sym] = --val;
-    if (val == -1) {
-      probs += val;
-      syms[--ht2] = sym;
-    } else
-      probs -= val;
-    if (!val) {
-      do {
-        var rbt = tpos >> 3;
-        re2 = (dat[rbt] | dat[rbt + 1] << 8) >> (tpos & 7) & 3;
-        tpos += 2;
-        sym += re2;
-      } while (re2 == 3);
+  return buf;
+}
+function zstdAvailable() {
+  return typeof zlib.zstdCompressSync === "function" && typeof zlib.zstdDecompressSync === "function";
+}
+function createSessionCodec(key) {
+  return {
+    encode(data) {
+      const plain = Buffer.from(data, "utf8");
+      const useZstd = zstdAvailable();
+      const body = useZstd ? zlib.zstdCompressSync(plain) : plain;
+      const nonce = randomBytes(NONCE_LEN);
+      const cipher = createCipheriv("aes-256-gcm", key, nonce);
+      const ct2 = Buffer.concat([cipher.update(body), cipher.final()]);
+      return Buffer.concat([
+        ENCRYPT_MAGIC,
+        Buffer.from([FORMAT_VERSION, useZstd ? MODE_ZSTD : MODE_RAW]),
+        nonce,
+        ct2,
+        cipher.getAuthTag()
+      ]);
+    },
+    decode(buf) {
+      if (buf.length < ENCRYPT_MAGIC.length || !buf.subarray(0, ENCRYPT_MAGIC.length).equals(ENCRYPT_MAGIC)) {
+        return buf.toString("utf8");
+      }
+      if (buf.length < MIN_ENCRYPTED_LEN || buf[ENCRYPT_MAGIC.length] !== FORMAT_VERSION) {
+        throw new Error(`[encrypt] unsupported session file format version ${buf[ENCRYPT_MAGIC.length]}`);
+      }
+      const mode = buf[ENCRYPT_MAGIC.length + 1];
+      const nonce = buf.subarray(HEADER_LEN - NONCE_LEN, HEADER_LEN);
+      const tag = buf.subarray(buf.length - TAG_LEN);
+      const ct2 = buf.subarray(HEADER_LEN, buf.length - TAG_LEN);
+      const decipher = createDecipheriv("aes-256-gcm", key, nonce);
+      decipher.setAuthTag(tag);
+      const body = Buffer.concat([decipher.update(ct2), decipher.final()]);
+      const plain = mode === MODE_ZSTD ? zlib.zstdDecompressSync(body) : body;
+      return plain.toString("utf8");
     }
+  };
+}
+
+// src/persist-eperm.ts
+var LOCK_CODES = /\b(EPERM|EBUSY|EACCES)\b/;
+var WRITE_FAIL_RE = /^\[persist\] write failed for (.+?) \(total (\d+)x\): (.+)$/;
+var PersistEpermAlert = class {
+  dir;
+  threshold;
+  repeatMs;
+  platform;
+  now;
+  onAlert;
+  hasAlerted = false;
+  alertedAt = 0;
+  constructor(opts) {
+    this.dir = opts.dir;
+    this.threshold = opts.threshold ?? 5;
+    this.repeatMs = opts.repeatMs ?? 0;
+    this.platform = opts.platform ?? process.platform;
+    this.now = opts.now ?? Date.now;
+    this.onAlert = opts.onAlert ?? ((d, c) => log("warn", buildAlertMessage(d, c)));
   }
-  if (sym > 255 || probs)
-    err(0);
-  var sympos = 0;
-  var sstep = (sz >> 1) + (sz >> 3) + 3;
-  var smask = sz - 1;
-  for (var s3 = 0; s3 <= sym; ++s3) {
-    var sf = freq[s3];
-    if (sf < 1) {
-      dstate[s3] = -sf;
-      continue;
-    }
-    for (i = 0; i < sf; ++i) {
-      syms[sympos] = s3;
-      do {
-        sympos = sympos + sstep & smask;
-      } while (sympos >= ht2);
-    }
+  // Returns true iff an alert was emitted. Runs on every kernel log line, so
+  // the non-matching cases bail before any allocation.
+  observe(level, msg) {
+    if (this.platform !== "win32") return false;
+    if (level !== "error" && level !== "warn") return false;
+    const m2 = WRITE_FAIL_RE.exec(msg);
+    if (!m2) return false;
+    const count = Number(m2[2]);
+    if (count < this.threshold) return false;
+    if (!LOCK_CODES.test(m2[3])) return false;
+    if (!this.shouldAlert()) return false;
+    this.hasAlerted = true;
+    this.alertedAt = this.now();
+    this.onAlert(this.dir, count);
+    return true;
   }
-  if (sympos)
-    err(0);
-  for (i = 0; i < sz; ++i) {
-    var ns2 = dstate[syms[i]]++;
-    var nb = nbits[i] = al - msb(ns2);
-    nstate[i] = (ns2 << nb) - sz;
+  shouldAlert() {
+    if (!this.hasAlerted) return true;
+    if (this.repeatMs <= 0) return false;
+    return this.now() - this.alertedAt >= this.repeatMs;
   }
-  return [tpos + 7 >> 3, {
-    b: al,
-    s: syms,
-    n: nbits,
-    t: nstate
-  }];
 };
-var rhu = function(dat, bt2) {
-  var i = 0, wc = -1;
-  var buf = new u8(292), hb = dat[bt2];
-  var hw = buf.subarray(0, 256);
-  var rc = buf.subarray(256, 268);
-  var ri2 = new u16(buf.buffer, 268);
-  if (hb < 128) {
-    var _a = rfse(dat, bt2 + 1, 6), ebt = _a[0], fdt = _a[1];
-    bt2 += hb;
-    var epos = ebt << 3;
-    var lb = dat[bt2];
-    if (!lb)
-      err(0);
-    var st1 = 0, st2 = 0, btr1 = fdt.b, btr2 = btr1;
-    var fpos = (++bt2 << 3) - 8 + msb(lb);
-    for (; ; ) {
-      fpos -= btr1;
-      if (fpos < epos)
-        break;
-      var cbt = fpos >> 3;
-      st1 += (dat[cbt] | dat[cbt + 1] << 8) >> (fpos & 7) & (1 << btr1) - 1;
-      hw[++wc] = fdt.s[st1];
-      fpos -= btr2;
-      if (fpos < epos)
-        break;
-      cbt = fpos >> 3;
-      st2 += (dat[cbt] | dat[cbt + 1] << 8) >> (fpos & 7) & (1 << btr2) - 1;
-      hw[++wc] = fdt.s[st2];
-      btr1 = fdt.n[st1];
-      st1 = fdt.t[st1];
-      btr2 = fdt.n[st2];
-      st2 = fdt.t[st2];
+function buildAlertMessage(dir, count) {
+  return [
+    `[persist] session dir ${dir} failed ${count} consecutive writes (EPERM \u2014 rename is locked).`,
+    "Likely cause: Windows Defender / antivirus / indexer / a sync tool is locking the directory.",
+    `Fix: add ${dir} to Windows Defender exclusions (Settings \u2192 Virus & threat protection \u2192 Manage settings \u2192 Exclusions \u2192 Add an exclusion),`,
+    "and make sure no OneDrive / sync tool is syncing this path."
+  ].join("\n");
+}
+
+// src/persist.ts
+var PERSIST_VERSION = 3;
+var MIGRATION_MARKER = ".bili-migration-286.done";
+var STALE_WARN_THROTTLE_MS = 6e4;
+function mergeState(parsed) {
+  const fresh = createInitialState();
+  return {
+    blocks: parsed.blocks ?? fresh.blocks,
+    messageRefs: parsed.messageRefs ?? fresh.messageRefs,
+    nudge: { ...fresh.nudge, ...parsed.nudge ?? {} },
+    stats: { ...fresh.stats, ...parsed.stats ?? {} },
+    nextBlockId: parsed.nextBlockId ?? fresh.nextBlockId,
+    nextRunId: parsed.nextRunId ?? fresh.nextRunId,
+    tokenSnapshot: parsed.tokenSnapshot ?? fresh.tokenSnapshot,
+    // Without this, a restart re-exposes absorbed tool outputs: state
+    // resurrects with absorbed=[] and hideAbsorbedMessages has nothing to hide.
+    absorbed: parsed.absorbed ?? fresh.absorbed,
+    rules: parsed.rules ?? fresh.rules
+  };
+}
+function hostLabel(upstreamOrigin) {
+  if (!upstreamOrigin) return "unknown";
+  try {
+    const host = new URL(upstreamOrigin).hostname || "unknown";
+    return host.replace(/[^a-zA-Z0-9.-]/g, "-").slice(0, 48) || "unknown";
+  } catch {
+    return "unknown-" + createHash4("sha256").update(upstreamOrigin, "utf8").digest("hex").slice(0, 6);
+  }
+}
+function relPathFor(id, protocol, upstreamOrigin) {
+  const proto = protocol ?? "_unknown";
+  const host = protocol ? hostLabel(upstreamOrigin) + "_" : "";
+  return path7.join(proto, `${host}${createHash4("sha256").update(id, "utf8").digest("hex").slice(0, 24)}.json`);
+}
+var SessionStore = class {
+  enabled;
+  dir;
+  store;
+  log;
+  staleWarnAt = /* @__PURE__ */ new Map();
+  codec;
+  constructor(opts) {
+    const debounceMs = opts?.debounceMs ?? defaultDebounce();
+    this.enabled = (opts?.enabled ?? true) && debounceMs >= 0;
+    this.dir = opts?.dir ?? defaultDir();
+    const baseLog = opts?.log ?? defaultLogger;
+    this.log = baseLog;
+    const keyEnv = process.env.BILI_ENCRYPTION_KEY;
+    if (keyEnv) {
+      this.codec = createSessionCodec(parseEncryptionKey(keyEnv));
+      baseLog("info", "[persist] session-file encryption enabled (AES-256-GCM)");
     }
-    if (++wc > 255)
-      err(0);
-  } else {
-    wc = hb - 127;
-    for (; i < wc; i += 2) {
-      var byte = dat[++bt2];
-      hw[i] = byte >> 4;
-      hw[i + 1] = byte & 15;
+    const epermAlert = new PersistEpermAlert({
+      dir: this.dir,
+      threshold: epermAlertThreshold(),
+      repeatMs: epermAlertRepeatMs()
+    });
+    this.store = new StateStore({
+      dir: this.dir,
+      version: PERSIST_VERSION,
+      debounceMs: Math.max(0, debounceMs),
+      enabled: this.enabled,
+      codec: this.codec,
+      log: (level, msg) => {
+        epermAlert.observe(level, msg);
+        baseLog(level, msg);
+      },
+      relPath: (id, payload) => relPathFor(id, payload.meta?.protocol ?? payload.protocol, payload.meta?.upstreamOrigin ?? payload.upstreamOrigin),
+      // Adopt the pre-envelope flat format this store itself wrote
+      // before the kernel extraction (and every v1/v2 file before it).
+      legacy: (parsed) => isValidRecord(parsed) ? { id: parsed.id, payload: parsed, version: parsed.version, savedAt: parsed.savedAt } : null,
+      validate: (envelope) => isValidRecord(envelope.payload)
+    });
+  }
+  /** Bulk-load every persisted session from disk into a map keyed by the
+   *  REAL session id (read from the file body, not the filename). Called once
+   *  at startup before the server accepts traffic. Corrupt individual files
+   *  are skipped (logged) — one bad file never blocks boot. */
+  async loadAll() {
+    const out = /* @__PURE__ */ new Map();
+    if (!this.enabled) return out;
+    let clamped = 0;
+    for (const [id, envelope] of await this.store.loadAll()) {
+      const session = buildSession(envelope.payload);
+      if (hasNegativePersistedTokens(envelope.payload)) {
+        await this.store.writeNow(id, () => buildRecord(session));
+        clamped++;
+      }
+      out.set(id, session);
     }
-    ++bt2;
+    if (clamped > 0) {
+      log("info", `[persist] one-time migration (#408): clamped negative lastInputTokens/contextTokens in ${clamped} session(s) to 0`);
+    }
+    return out;
   }
-  var wes = 0;
-  for (i = 0; i < wc; ++i) {
-    var wt2 = hw[i];
-    if (wt2 > 11)
-      err(0);
-    wes += wt2 && 1 << wt2 - 1;
+  /** Single-pass boot (#401): ONE loadAll walk+parse, then the #286
+   *  identity migration over the SAME parsed map (no extra directory
+   *  walk), then hydration into Sessions. initSessions calls this instead
+   *  of migrateLegacyIds()+loadAll(), which walked and parsed the whole
+   *  tree twice per start. */
+  async boot() {
+    if (!this.enabled) return /* @__PURE__ */ new Map();
+    await this.migrateLegacyFiles();
+    const loaded = await this.store.loadAll();
+    await this.applyLegacyMigration(loaded);
+    const out = /* @__PURE__ */ new Map();
+    for (const [id, envelope] of loaded) {
+      out.set(id, buildSession(envelope.payload));
+    }
+    return out;
   }
-  var mb = msb(wes) + 1;
-  var ts2 = 1 << mb;
-  var rem = ts2 - wes;
-  if (rem & rem - 1)
-    err(0);
-  hw[wc++] = msb(rem) + 1;
-  for (i = 0; i < wc; ++i) {
-    var wt2 = hw[i];
-    ++rc[hw[i] = wt2 && mb + 1 - wt2];
+  /** #708: when encryption is enabled, take over legacy plaintext files:
+   * every .json under the sessions dir lacking the BILIENC1 magic is
+   * re-encoded in place — temp write + rename onto the SAME path, so the
+   * atomic replace IS the old-file deletion (no window where both, or
+   *  neither, copy exists). A crash mid-run leaves each file either old or
+   *  new; the next boot finishes the job and sweeps the crashed run's
+   *  orphaned temps. Self-terminating: the 8-byte magic peek decides per
+   *  file, so later boots cost O(files × 8 bytes). */
+  async migrateLegacyFiles() {
+    if (!this.codec) return;
+    let files;
+    try {
+      files = await walkJsonFiles(this.dir);
+    } catch {
+      return;
+    }
+    let migrated = 0;
+    let failed = 0;
+    for (const file of files) {
+      if (STALE_ENC_TEMP_RE.test(path7.basename(file))) {
+        await rm(file, { force: true }).catch(() => {
+        });
+        continue;
+      }
+      let head;
+      try {
+        head = await readFileHead(file);
+      } catch {
+        continue;
+      }
+      if (head.equals(ENCRYPT_MAGIC)) continue;
+      let parsed;
+      try {
+        parsed = JSON.parse(await readFile2(file, "utf8"));
+      } catch {
+        failed++;
+        this.log("warn", `[persist] encryption migration (#708): leaving unreadable file in place: ${file}`);
+        continue;
+      }
+      const tmp = `${file}.tmp-enc-${process.pid}-${Date.now()}`;
+      try {
+        writeFileSync2(tmp, this.codec.encode(JSON.stringify(parsed)));
+        renameSync2(tmp, file);
+        migrated++;
+      } catch {
+        failed++;
+        this.log("warn", `[persist] encryption migration (#708): failed to re-encode: ${file}`);
+        await rm(tmp, { force: true }).catch(() => {
+        });
+      }
+    }
+    if (migrated > 0 || failed > 0) {
+      this.log(
+        failed > 0 ? "warn" : "info",
+        `[persist] encryption migration (#708): re-encoded ${migrated} legacy session file(s)${failed > 0 ? `, ${failed} failed` : ""}`
+      );
+    }
   }
-  var hbuf = new u8(ts2 << 1);
-  var syms = hbuf.subarray(0, ts2), nb = hbuf.subarray(ts2);
-  ri2[mb] = 0;
-  for (i = mb; i > 0; --i) {
-    var pv = ri2[i];
-    fill(nb, i, pv, ri2[i - 1] = pv + rc[i] * (1 << mb - i));
+  /** One-time migration for the #286 identity change: sessions persisted
+   *  under the old derived hash id are re-keyed to the client-provided
+   *  conversation value stored in meta.label (which is now the session id
+   *  itself). Collisions on the same label keep the most recently saved
+   *  record; the losers, and any label already claimed by a new-format
+   *  session, are deleted. Records without a label cannot be mapped and are
+   *  left in place (they load under their old id but are never requested
+   *  again — the new proxy 400s anonymous requests). Self-terminating:
+   *  after one pass no loaded id differs from its label. A completion
+   *  marker makes it run ONCE EVER (#401): the old code re-scanned the tree
+   *  on every boot because unlabeled files are intentionally kept, so the
+   *  "one-time" log line repeated forever. */
+  async migrateLegacyIds() {
+    if (!this.enabled) return;
+    if (existsSync3(this.markerPath())) return;
+    const loaded = await this.store.loadAll();
+    await this.applyLegacyMigration(loaded);
   }
-  if (ri2[0] != ts2)
-    err(0);
-  for (i = 0; i < wc; ++i) {
-    var bits = hw[i];
-    if (bits) {
-      var code = ri2[bits];
-      fill(syms, i, code, ri2[bits] = code + (1 << mb - bits));
-    }
+  markerPath() {
+    return path7.join(this.dir, MIGRATION_MARKER);
   }
-  return [bt2, {
-    n: nb,
-    b: mb,
-    s: syms
-  }];
-};
-var dllt = rfse(/* @__PURE__ */ new u8([
-  81,
-  16,
-  99,
-  140,
-  49,
-  198,
-  24,
-  99,
-  12,
-  33,
-  196,
-  24,
-  99,
-  102,
-  102,
-  134,
-  70,
-  146,
-  4
-]), 0, 6)[1];
-var dmlt = rfse(/* @__PURE__ */ new u8([
-  33,
-  20,
-  196,
-  24,
-  99,
-  140,
-  33,
-  132,
-  16,
-  66,
-  8,
-  33,
-  132,
-  16,
-  66,
-  8,
-  33,
-  68,
-  68,
-  68,
-  68,
-  68,
-  68,
-  68,
-  68,
-  36,
-  9
-]), 0, 6)[1];
-var doct = rfse(/* @__PURE__ */ new u8([
-  32,
-  132,
-  16,
-  66,
-  102,
-  70,
-  68,
-  68,
-  68,
-  68,
-  36,
-  73,
-  2
-]), 0, 5)[1];
-var b2bl = function(b2, s3) {
-  var len = b2.length, bl = new i32(len);
-  for (var i = 0; i < len; ++i) {
-    bl[i] = s3;
-    s3 += 1 << b2[i];
-  }
-  return bl;
-};
-var llb = /* @__PURE__ */ new u8((/* @__PURE__ */ new i32([
-  0,
-  0,
-  0,
-  0,
-  16843009,
-  50528770,
-  134678020,
-  202050057,
-  269422093
-])).buffer, 0, 36);
-var llbl = /* @__PURE__ */ b2bl(llb, 0);
-var mlb = /* @__PURE__ */ new u8((/* @__PURE__ */ new i32([
-  0,
-  0,
-  0,
-  0,
-  0,
-  0,
-  0,
-  0,
-  16843009,
-  50528770,
-  117769220,
-  185207048,
-  252579084,
-  16
-])).buffer, 0, 53);
-var mlbl = /* @__PURE__ */ b2bl(mlb, 3);
-var dhu = function(dat, out, hu) {
-  var len = dat.length, ss2 = out.length, lb = dat[len - 1], msk = (1 << hu.b) - 1, eb = -hu.b;
-  if (!lb)
-    err(0);
-  var st2 = 0, btr = hu.b, pos = (len << 3) - 8 + msb(lb) - btr, i = -1;
-  for (; pos > eb && i < ss2; ) {
-    var cbt = pos >> 3;
-    var val = (dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (pos & 7);
-    st2 = (st2 << btr | val) & msk;
-    out[++i] = hu.s[st2];
-    pos -= btr = hu.n[st2];
-  }
-  if (pos != eb || i + 1 != ss2)
-    err(0);
-};
-var dhu4 = function(dat, out, hu) {
-  var bt2 = 6;
-  var ss2 = out.length, sz1 = ss2 + 3 >> 2, sz2 = sz1 << 1, sz3 = sz1 + sz2;
-  dhu(dat.subarray(bt2, bt2 += dat[0] | dat[1] << 8), out.subarray(0, sz1), hu);
-  dhu(dat.subarray(bt2, bt2 += dat[2] | dat[3] << 8), out.subarray(sz1, sz2), hu);
-  dhu(dat.subarray(bt2, bt2 += dat[4] | dat[5] << 8), out.subarray(sz2, sz3), hu);
-  dhu(dat.subarray(bt2), out.subarray(sz3), hu);
-};
-var rzb = function(dat, st2, out) {
-  var _a;
-  var bt2 = st2.b;
-  var b0 = dat[bt2], btype = b0 >> 1 & 3;
-  st2.l = b0 & 1;
-  var sz = b0 >> 3 | dat[bt2 + 1] << 5 | dat[bt2 + 2] << 13;
-  var ebt = (bt2 += 3) + sz;
-  if (btype == 1) {
-    if (bt2 >= dat.length)
-      return;
-    st2.b = bt2 + 1;
-    if (out) {
-      fill(out, dat[bt2], st2.y, st2.y += sz);
-      return out;
+  async applyLegacyMigration(loaded) {
+    if (existsSync3(this.markerPath())) return;
+    const claimed = /* @__PURE__ */ new Set();
+    const byLabel = /* @__PURE__ */ new Map();
+    let unlabeled = 0;
+    for (const [id, envelope] of loaded) {
+      if (id.startsWith("pfa-")) continue;
+      const session = buildSession(envelope.payload);
+      const label = session.meta.label;
+      if (!label) {
+        unlabeled++;
+        continue;
+      }
+      if (label === id) {
+        claimed.add(id);
+        continue;
+      }
+      const prev = byLabel.get(label);
+      if (!prev || envelope.savedAt >= prev.savedAt) {
+        if (prev) {
+          await this.removeLegacyFile(prev.id, prev.session);
+          loaded.delete(prev.id);
+        }
+        byLabel.set(label, { id, savedAt: envelope.savedAt, session });
+      } else {
+        await this.removeLegacyFile(id, session);
+        loaded.delete(id);
+      }
+    }
+    let rekeyed = 0;
+    for (const [label, { id, session }] of byLabel) {
+      if (claimed.has(label)) {
+        await this.removeLegacyFile(id, session);
+        loaded.delete(id);
+        continue;
+      }
+      session.id = label;
+      await this.store.writeNow(label, () => buildRecord(session));
+      await this.removeLegacyFile(id, session);
+      const envelope = loaded.get(id);
+      if (envelope) {
+        loaded.set(label, { ...envelope, id: label, payload: { ...envelope.payload, id: label } });
+      }
+      loaded.delete(id);
+      claimed.add(label);
+      rekeyed++;
+    }
+    try {
+      mkdirSync3(this.dir, { recursive: true });
+      writeFileSync2(this.markerPath(), String(Date.now()), "utf8");
+    } catch {
+    }
+    if (rekeyed || unlabeled) {
+      log("info", `[persist] one-time migration (#286): rekeyed ${rekeyed} legacy session(s), left ${unlabeled} unlabeled legacy file(s) in place`);
     }
-    return fill(new u8(sz), dat[bt2]);
   }
-  if (ebt > dat.length)
-    return;
-  if (btype == 0) {
-    st2.b = ebt;
-    if (out) {
-      out.set(dat.subarray(bt2, ebt), st2.y);
-      st2.y += sz;
-      return out;
+  /** Remove a legacy session file. The kernel store never deletes (cleanup
+   *  is downstream policy), so the path is recomputed here: the namespaced
+   *  layout for v2+/v3 files, the _unknown/ fallback, and the flat default
+   *  name for pre-envelope v1 files. */
+  async removeLegacyFile(id, session) {
+    const candidates = /* @__PURE__ */ new Set([
+      relPathFor(id, session.meta.protocol, session.meta.upstreamOrigin),
+      relPathFor(id),
+      flatFileNameFor(id)
+    ]);
+    for (const rel2 of candidates) {
+      await rm(path7.join(this.dir, rel2), { force: true }).catch(() => {
+      });
     }
-    return slc(dat, bt2, ebt);
   }
-  if (btype == 2) {
-    var b3 = dat[bt2], lbt = b3 & 3, sf = b3 >> 2 & 3;
-    var lss = b3 >> 4, lcs = 0, s4 = 0;
-    if (lbt < 2) {
-      if (sf & 1)
-        lss |= dat[++bt2] << 4 | (sf & 2 && dat[++bt2] << 12);
-      else
-        lss = b3 >> 3;
-    } else {
-      s4 = sf;
-      if (sf < 2)
-        lss |= (dat[++bt2] & 63) << 4, lcs = dat[bt2] >> 6 | dat[++bt2] << 2;
-      else if (sf == 2)
-        lss |= dat[++bt2] << 4 | (dat[++bt2] & 3) << 12, lcs = dat[bt2] >> 2 | dat[++bt2] << 6;
-      else
-        lss |= dat[++bt2] << 4 | (dat[++bt2] & 63) << 12, lcs = dat[bt2] >> 6 | dat[++bt2] << 2 | dat[++bt2] << 10;
+  /** Shared envelope probe for the sync read paths: namespaced path
+   *  first, then the _unknown/ location, letting the kernel store layer
+   *  also check its discovered map and the flat legacy name. */
+  loadEnvelope(id, meta) {
+    const envelopes = [
+      this.store.loadSync(id, relPathFor(id, meta?.protocol, meta?.upstreamOrigin)),
+      meta?.protocol ? this.store.loadSync(id, relPathFor(id)) : null
+    ];
+    for (const envelope of envelopes) {
+      if (envelope) return envelope;
     }
-    ++bt2;
-    var buf = out ? out.subarray(st2.y, st2.y + st2.m) : new u8(st2.m);
-    var spl = buf.length - lss;
-    if (lbt == 0)
-      buf.set(dat.subarray(bt2, bt2 += lss), spl);
-    else if (lbt == 1)
-      fill(buf, dat[bt2++], spl);
-    else {
-      var hu = st2.h;
-      if (lbt == 2) {
-        var hud = rhu(dat, bt2);
-        lcs += bt2 - (bt2 = hud[0]);
-        st2.h = hu = hud[1];
-      } else if (!hu)
-        err(0);
-      (s4 ? dhu4 : dhu)(dat.subarray(bt2, bt2 += lcs), buf.subarray(spl), hu);
+    return null;
+  }
+  /** Synchronous reload of a single session. Used on a memory miss (after
+   *  LRU eviction). Sync fs is acceptable here because a miss is rare and
+   *  reads a single small file (~1ms). Returns null if missing/corrupt or the
+   *  body id does not match what we asked for. */
+  loadSync(id, meta) {
+    if (!this.enabled) return null;
+    const envelope = this.loadEnvelope(id, meta);
+    if (!envelope) return null;
+    const session = buildSession(envelope.payload);
+    if (hasNegativePersistedTokens(envelope.payload)) {
+      this.scheduleSave(session);
+      log("info", `[persist] clamped negative token stats on reload for ${id} (#408)`);
     }
-    var ns2 = dat[bt2++];
-    if (ns2) {
-      if (ns2 == 255)
-        ns2 = (dat[bt2++] | dat[bt2++] << 8) + 32512;
-      else if (ns2 > 127)
-        ns2 = ns2 - 128 << 8 | dat[bt2++];
-      var scm = dat[bt2++];
-      if (scm & 3)
-        err(0);
-      var dts = [dmlt, doct, dllt];
-      for (var i = 2; i > -1; --i) {
-        var md = scm >> (i << 1) + 2 & 3;
-        if (md == 1) {
-          var rbuf = new u8([0, 0, dat[bt2++]]);
-          dts[i] = {
-            s: rbuf.subarray(2, 3),
-            n: rbuf.subarray(0, 1),
-            t: new u16(rbuf.buffer, 0, 1),
-            b: 0
-          };
-        } else if (md == 2) {
-          _a = rfse(dat, bt2, 9 - (i & 1)), bt2 = _a[0], dts[i] = _a[1];
-        } else if (md == 3) {
-          if (!st2.t)
-            err(0);
-          dts[i] = st2.t[i];
-        }
-      }
-      var _b = st2.t = dts, mlt = _b[0], oct = _b[1], llt = _b[2];
-      var lb = dat[ebt - 1];
-      if (!lb)
-        err(0);
-      var spos = (ebt << 3) - 8 + msb(lb) - llt.b, cbt = spos >> 3, oubt = 0;
-      var lst = (dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << llt.b) - 1;
-      cbt = (spos -= oct.b) >> 3;
-      var ost = (dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << oct.b) - 1;
-      cbt = (spos -= mlt.b) >> 3;
-      var mst = (dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << mlt.b) - 1;
-      for (++ns2; --ns2; ) {
-        var llc = llt.s[lst];
-        var lbtr = llt.n[lst];
-        var mlc = mlt.s[mst];
-        var mbtr = mlt.n[mst];
-        var ofc = oct.s[ost];
-        var obtr = oct.n[ost];
-        cbt = (spos -= ofc) >> 3;
-        var ofp = 1 << ofc;
-        var off = ofp + ((dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16 | dat[cbt + 3] << 24) >>> (spos & 7) & ofp - 1);
-        cbt = (spos -= mlb[mlc]) >> 3;
-        var ml = mlbl[mlc] + ((dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (spos & 7) & (1 << mlb[mlc]) - 1);
-        cbt = (spos -= llb[llc]) >> 3;
-        var ll = llbl[llc] + ((dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (spos & 7) & (1 << llb[llc]) - 1);
-        cbt = (spos -= lbtr) >> 3;
-        lst = llt.t[lst] + ((dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << lbtr) - 1);
-        cbt = (spos -= mbtr) >> 3;
-        mst = mlt.t[mst] + ((dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << mbtr) - 1);
-        cbt = (spos -= obtr) >> 3;
-        ost = oct.t[ost] + ((dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << obtr) - 1);
-        if (off > 3) {
-          st2.o[2] = st2.o[1];
-          st2.o[1] = st2.o[0];
-          st2.o[0] = off -= 3;
-        } else {
-          var idx = off - (ll != 0);
-          if (idx) {
-            off = idx == 3 ? st2.o[0] - 1 : st2.o[idx];
-            if (idx > 1)
-              st2.o[2] = st2.o[1];
-            st2.o[1] = st2.o[0];
-            st2.o[0] = off;
-          } else
-            off = st2.o[0];
-        }
-        for (var i = 0; i < ll; ++i) {
-          buf[oubt + i] = buf[spl + i];
-        }
-        oubt += ll, spl += ll;
-        var stin = oubt - off;
-        if (stin < 0) {
-          var len = -stin;
-          var bs2 = st2.e + stin;
-          if (len > ml)
-            len = ml;
-          for (var i = 0; i < len; ++i) {
-            buf[oubt + i] = st2.w[bs2 + i];
-          }
-          oubt += len, ml -= len, stin = 0;
-        }
-        for (var i = 0; i < ml; ++i) {
-          buf[oubt + i] = buf[stin + i];
-        }
-        oubt += ml;
-      }
-      if (oubt != spl) {
-        while (spl < buf.length) {
-          buf[oubt++] = buf[spl++];
-        }
-      } else
-        oubt = buf.length;
-      if (out)
-        st2.y += oubt;
-      else
-        buf = slc(buf, 0, oubt);
-    } else if (out) {
-      st2.y += lss;
-      if (spl) {
-        for (var i = 0; i < lss; ++i) {
-          buf[i] = buf[spl + i];
-        }
+    return session;
+  }
+  /** Read-only state load for cross-session search (#841): unlike loadSync,
+   *  never schedules a save (no #408 clamp-rewrite side effect). */
+  loadStateForSearch(id) {
+    if (!this.enabled) return null;
+    const envelope = this.loadEnvelope(id);
+    if (!envelope) return null;
+    return mergeState(envelope.payload.state);
+  }
+  /** #405 fix #4: dual-instance rollback guard. When two proxy processes
+   *  share BILI_SESSIONS_DIR, whoever saves last used to win — an instance
+   *  holding a STALE in-memory copy would roll counters back (requests:3 →
+   *  2). Both signals below are monotonic per session id, so either being
+   *  strictly smaller proves staleness. Returns the fresher-on-disk payload
+   *  when the incoming record is stale, else null. */
+  staleDiskPayload(incoming) {
+    const envelope = this.loadEnvelope(incoming.id, incoming.meta);
+    if (!envelope) return null;
+    const disk = envelope.payload;
+    const diskRequests = disk.stats?.requests ?? disk.requests ?? 0;
+    const incRequests = incoming.stats?.requests ?? incoming.requests ?? 0;
+    if (incRequests < diskRequests) return disk;
+    if (incRequests === diskRequests) {
+      const diskBlocks = disk.state?.nextBlockId ?? 0;
+      const incBlocks = incoming.state?.nextBlockId ?? 0;
+      if (incBlocks < diskBlocks) return disk;
+    }
+    return null;
+  }
+  guardedBuild(session) {
+    return () => {
+      const record = buildRecord(session);
+      const disk = this.staleDiskPayload(record);
+      if (disk === null) return record;
+      const now = Date.now();
+      const last = this.staleWarnAt.get(record.id) ?? 0;
+      if (now - last >= STALE_WARN_THROTTLE_MS) {
+        this.staleWarnAt.set(record.id, now);
+        this.log(
+          "warn",
+          `[persist] rejected stale snapshot for session ${record.id}: in-memory copy is older than the on-disk one (another bili instance holds newer state) \u2014 keeping disk state, no rollback (#405)`
+        );
       }
-    } else if (spl)
-      buf = slc(buf, spl);
-    st2.b = ebt;
-    return buf;
+      return disk;
+    };
   }
-  err(2);
-};
-var cct = function(bufs, ol) {
-  if (bufs.length == 1)
-    return bufs[0];
-  var buf = new u8(ol);
-  for (var i = 0, b2 = 0; i < bufs.length; ++i) {
-    var chk = bufs[i];
-    buf.set(chk, b2);
-    b2 += chk.length;
+  /** Schedule a debounced write for a session. Multiple calls within the
+   *  window coalesce; the record is built at WRITE time, so the freshest
+   *  session state is persisted. Safe to call on the hot path. No-op if
+   *  disabled. */
+  scheduleSave(session) {
+    this.store.scheduleSave(session.id, this.guardedBuild(session));
+  }
+  /** Asynchronously persist a session right now (skips the debounce). Throws
+   *  on write failure so callers can react (e.g. avoid evicting). Serialized
+   *  per-session by the kernel store's write chains. */
+  async writeNow(session) {
+    await this.store.writeNow(session.id, this.guardedBuild(session));
+  }
+  /** Synchronous flush for a single session. Used on memory eviction so a
+   *  dirty evicted session is not lost. Sync because eviction runs in the
+   *  sync getSession path; a single small write is acceptable.
+   *  Returns true on success, false on failure (caller must NOT evict on
+   *  failure for a never-persisted session or it is lost permanently). */
+  flushSync(session) {
+    return this.store.flushSync(session.id, this.guardedBuild(session));
+  }
+  /** Flush all dirty sessions with a pending debounce timer. Called on
+   *  SIGTERM/SIGINT for graceful shutdown. The kernel store flushes its own
+   *  pending set (builders read the live Session objects at write time, so
+   *  no session list is needed) and drains in-flight write chains. */
+  async flushAll(_sessions) {
+    await this.store.flushAll();
+  }
+  /** Whether a write is currently pending (debounce timer armed) for a id. */
+  hasPending(id) {
+    return this.store.hasPending(id);
+  }
+  /** Cancel all pending writes without flushing (e.g. for tests). */
+  cancelAll() {
+    this.store.cancelAll();
   }
-  return buf;
 };
-var Decompress = /* @__PURE__ */ (function() {
-  function Decompress2(ondata) {
-    this.ondata = ondata;
-    this.c = [];
-    this.l = 0;
-    this.z = 0;
+function buildRecord(session) {
+  const snapshot = boundedFoldedSnapshot(session);
+  return {
+    version: PERSIST_VERSION,
+    savedAt: Date.now(),
+    id: session.id,
+    meta: { ...session.meta },
+    stats: { ...session.stats },
+    messages: snapshot,
+    messagesFolded: snapshot ? true : void 0,
+    metadata: { ...session.metadata },
+    state: session.state,
+    blockContents: Object.fromEntries(session.blockContents),
+    createdAt: session.createdAt
+  };
+}
+function isBlockView(v2) {
+  return !!v2 && typeof v2 === "object" && typeof v2.text === "string" && typeof v2.count === "number";
+}
+function buildSession(parsed) {
+  const blockContents = /* @__PURE__ */ new Map();
+  for (const [bid, content] of Object.entries(parsed.blockContents ?? {})) {
+    if (!content || typeof content !== "object") continue;
+    const full = content.full;
+    if (!isBlockView(full)) continue;
+    const one = content.one;
+    const oneView = isBlockView(one) ? one : null;
+    blockContents.set(bid, {
+      one: oneView && !(oneView.text === full.text && oneView.count === full.count) ? oneView : null,
+      full
+    });
   }
-  Decompress2.prototype.push = function(chunk, final) {
-    if (typeof this.s == "number") {
-      var sub = Math.min(chunk.length, this.s);
-      chunk = chunk.subarray(sub);
-      this.s -= sub;
-    }
-    var sl = chunk.length;
-    var ncs = sl + this.l;
-    if (!this.s) {
-      if (final) {
-        if (!ncs) {
-          this.ondata(new u8(0), true);
-          return;
-        }
-        if (ncs < 5)
-          err(5);
-      } else if (ncs < 18) {
-        this.c.push(chunk);
-        this.l = ncs;
-        return;
-      }
-      if (this.l) {
-        this.c.push(chunk);
-        chunk = cct(this.c, ncs);
-        this.c = [];
-        this.l = 0;
-      }
-      if (typeof (this.s = rzfh(chunk)) == "number")
-        return this.push(chunk, final);
-    }
-    if (typeof this.s != "number") {
-      if (ncs < (this.z || 3)) {
-        if (final)
-          err(5);
-        this.c.push(chunk);
-        this.l = ncs;
-        return;
-      }
-      if (this.l) {
-        this.c.push(chunk);
-        chunk = cct(this.c, ncs);
-        this.c = [];
-        this.l = 0;
-      }
-      if (!this.z && ncs < (this.z = chunk[this.s.b] & 2 ? 4 : 3 + (chunk[this.s.b] >> 3 | chunk[this.s.b + 1] << 5 | chunk[this.s.b + 2] << 13))) {
-        if (final)
-          err(5);
-        this.c.push(chunk);
-        this.l = ncs;
-        return;
-      } else
-        this.z = 0;
-      for (; ; ) {
-        var blk = rzb(chunk, this.s);
-        if (!blk) {
-          if (final)
-            err(5);
-          var adc = chunk.subarray(this.s.b);
-          this.s.b = 0;
-          this.c.push(adc), this.l += adc.length;
-          return;
-        } else {
-          this.ondata(blk, false);
-          cpw(this.s.w, 0, blk.length);
-          this.s.w.set(blk, this.s.w.length - blk.length);
-        }
-        if (this.s.l) {
-          var rest = chunk.subarray(this.s.b);
-          this.s = this.s.c * 4;
-          this.push(rest, final);
-          return;
-        }
-      }
-    } else if (final)
-      err(5);
+  const meta = parsed.meta ?? {};
+  const stats = parsed.stats ?? {};
+  return {
+    id: parsed.id,
+    meta: {
+      protocol: meta.protocol ?? parsed.protocol,
+      upstreamOrigin: meta.upstreamOrigin ?? parsed.upstreamOrigin,
+      label: meta.label ?? parsed.label,
+      title: meta.title
+    },
+    stats: {
+      requests: stats.requests ?? parsed.requests ?? 0,
+      tokensSaved: stats.tokensSaved ?? parsed.tokensSaved ?? 0,
+      inputTokens: stats.inputTokens ?? parsed.inputTokens ?? 0,
+      cachedTokens: stats.cachedTokens ?? parsed.cachedTokens ?? 0,
+      outputTokens: stats.outputTokens ?? parsed.outputTokens ?? 0,
+      cacheSamples: stats.cacheSamples ?? parsed.cacheSamples ?? 0,
+      // #408: clamp at restore — pre-clamp versions persisted negative
+      // values (lastInputTokens = total − credit before the Math.max
+      // guard existed) which would otherwise revive after upgrade and
+      // feed the /acp panel + web stats as negative percentages.
+      lastInputTokens: Math.max(0, stats.lastInputTokens ?? parsed.lastInputTokens ?? 0),
+      // #857: provenance — legacy files lack it; absent stays absent and
+      // evidence-grade consumers treat absent as untrusted.
+      lastInputTokensSource: stats.lastInputTokensSource === "usage" || stats.lastInputTokensSource === "estimate" ? stats.lastInputTokensSource : void 0,
+      // In-memory only — a fresh process has no pending compress fold.
+      compressCreditTokens: 0,
+      contextTokens: Math.max(0, stats.contextTokens ?? parsed.contextTokens ?? 0)
+    },
+    metadata: parsed.metadata ?? {},
+    state: mergeState(parsed.state),
+    createdAt: parsed.createdAt ?? Date.now(),
+    // #404: lastSeen reflects the on-disk savedAt (the last real
+    // activity), NOT the restore moment — a restart must not fabricate
+    // activity for every session (broke fallback=latest ties, panel
+    // freshness, and eviction ordering). Consumers that need "has this
+    // session been used since boot" read the restored flag.
+    lastSeen: parsed.savedAt ?? Date.now(),
+    restored: true,
+    blockContents,
+    lastMessages: Array.isArray(parsed.messages) ? parsed.messages : void 0,
+    lastMessagesFolded: parsed.messagesFolded === true,
+    inFlight: 0,
+    persisted: true
   };
-  return Decompress2;
-})();
-
-// src/encrypt.ts
-var ENCRYPT_MAGIC = Buffer.from("BILIENC1", "utf8");
-var ZSTD_MAGIC = Buffer.from("BILIZSTD1", "utf8");
-var FORMAT_VERSION = 1;
-var MODE_RAW = 0;
-var MODE_ZSTD = 1;
-var NONCE_LEN = 12;
-var TAG_LEN = 16;
-var ENCRYPT_HEADER_LEN = ENCRYPT_MAGIC.length + 2 + NONCE_LEN;
-var MIN_ENCRYPTED_LEN = ENCRYPT_HEADER_LEN + TAG_LEN;
-var PLAIN_HEADER_LEN = ZSTD_MAGIC.length + 2;
-function parseEncryptionKey(value) {
-  const v2 = value.trim();
-  let buf = null;
-  if (/^[0-9a-fA-F]+$/.test(v2) && v2.length % 2 === 0) {
-    buf = Buffer.from(v2, "hex");
-  } else if (/^[A-Za-z0-9+/]+={0,2}$/.test(v2)) {
-    buf = Buffer.from(v2, "base64");
+}
+function isValidRecord(parsed) {
+  if (!parsed || typeof parsed !== "object") return false;
+  const r = parsed;
+  return typeof r.id === "string" && typeof r.state === "object" && r.state !== null && Array.isArray(r.state.blocks);
+}
+function hasNegativePersistedTokens(parsed) {
+  const stats = parsed.stats ?? {};
+  const last = stats.lastInputTokens ?? parsed.lastInputTokens;
+  const ctx = stats.contextTokens ?? parsed.contextTokens;
+  return typeof last === "number" && last < 0 || typeof ctx === "number" && ctx < 0;
+}
+function defaultDir() {
+  return sessionsDir();
+}
+function defaultDebounce() {
+  const env = process.env.BILI_PERSIST_DEBOUNCE_MS;
+  if (env) {
+    const n = Number.parseInt(env, 10);
+    if (Number.isFinite(n) && n >= 0) return n;
   }
-  if (!buf || buf.length !== 32) {
-    const got = buf ? `${buf.length} bytes` : "an undecodable value";
-    throw new Error(
-      `[encrypt] BILI_ENCRYPTION_KEY must be exactly 32 bytes encoded as hex (64 chars) or base64 \u2014 got ${got}`
-    );
+  return 500;
+}
+function persistEnabled() {
+  const env = process.env.BILI_PERSIST;
+  if (env === "0" || env === "false") return false;
+  return true;
+}
+var STALE_ENC_TEMP_RE = /\.tmp-enc-\d+-\d+$/;
+async function walkJsonFiles(dir) {
+  const entries = await readdir(dir, { withFileTypes: true });
+  const out = [];
+  for (const e of entries) {
+    const full = path7.join(dir, e.name);
+    if (e.isDirectory()) {
+      out.push(...await walkJsonFiles(full));
+    } else if (e.isFile() && (STALE_ENC_TEMP_RE.test(e.name) || e.name.endsWith(".json") && !e.name.startsWith(".tmp-"))) {
+      out.push(full);
+    }
   }
-  return buf;
+  return out;
 }
-var zstdOverride = null;
-function zstdAvailable() {
-  if (zstdOverride === false) return false;
-  return typeof zlib.zstdCompressSync === "function" && typeof zlib.zstdDecompressSync === "function";
+async function readFileHead(file, len = ENCRYPT_MAGIC.length) {
+  const fh = await open(file, "r");
+  try {
+    const buf = Buffer.alloc(len);
+    const { bytesRead } = await fh.read(buf, 0, len, 0);
+    return buf.subarray(0, bytesRead);
+  } finally {
+    await fh.close();
+  }
 }
-function inflateZstd(body) {
-  if (zstdAvailable()) return zlib.zstdDecompressSync(body);
-  const chunks = [];
-  new Decompress((chunk) => chunks.push(Buffer.from(chunk))).push(body, true);
-  return Buffer.concat(chunks);
+function persistTailTokens() {
+  const env = process.env.BILI_PERSIST_TAIL_TOKENS;
+  if (env) {
+    const n = Number.parseInt(env, 10);
+    if (Number.isFinite(n) && n >= 0) return n;
+  }
+  return 16384;
 }
-function createStorageCodec(opts = {}) {
-  const key = opts.key ?? null;
-  const compress = opts.compress ?? false;
-  if (!key && !compress) return void 0;
-  return {
-    encode(data) {
-      const plain = Buffer.from(data, "utf8");
-      const useZstd = compress && zstdAvailable();
-      let body = plain;
-      let mode = MODE_RAW;
-      if (useZstd) {
-        const z2 = zlib.zstdCompressSync(plain);
-        if (z2.length < plain.length) {
-          body = z2;
-          mode = MODE_ZSTD;
-        }
-      }
-      if (!key && mode === MODE_RAW) return plain;
-      const header = Buffer.from([FORMAT_VERSION, mode]);
-      if (!key) {
-        return Buffer.concat([ZSTD_MAGIC, header, body]);
-      }
-      const nonce = randomBytes(NONCE_LEN);
-      const cipher = createCipheriv("aes-256-gcm", key, nonce);
-      const ct2 = Buffer.concat([cipher.update(body), cipher.final()]);
-      return Buffer.concat([ENCRYPT_MAGIC, header, nonce, ct2, cipher.getAuthTag()]);
-    },
-    decode(buf) {
-      if (buf.length >= ENCRYPT_MAGIC.length && buf.subarray(0, ENCRYPT_MAGIC.length).equals(ENCRYPT_MAGIC)) {
-        return decryptEnvelope(buf, key);
-      }
-      if (buf.length >= ZSTD_MAGIC.length && buf.subarray(0, ZSTD_MAGIC.length).equals(ZSTD_MAGIC)) {
-        return decompressEnvelope(buf);
+function boundedFoldedSnapshot(session) {
+  const msgs = session.lastMessages;
+  if (!msgs || msgs.length === 0) return void 0;
+  const budget = persistTailTokens();
+  if (budget === 0) return void 0;
+  let view = prune(msgs, session.state);
+  let total = 0;
+  for (const m2 of view) total += defaultCountTokens(m2.text ?? "");
+  if (total > budget) {
+    let acc = 0;
+    let start = 0;
+    for (let i = view.length - 1; i >= 0; i--) {
+      acc += defaultCountTokens(view[i].text ?? "");
+      if (acc > budget) {
+        start = Math.min(i + 1, view.length - 1);
+        break;
       }
-      return buf.toString("utf8");
     }
-  };
+    if (start > 0) view = view.slice(start);
+  }
+  return view;
 }
-function decryptEnvelope(buf, key) {
-  if (!key) {
-    throw new Error("[storage] session file is BILIENC1-encrypted but no BILI_ENCRYPTION_KEY is set \u2014 cannot read it");
+function epermAlertThreshold() {
+  const env = process.env.BILI_PERSIST_EPERM_ALERT_THRESHOLD;
+  if (env) {
+    const n = Number.parseInt(env, 10);
+    if (Number.isFinite(n) && n > 0) return n;
   }
-  if (buf.length < MIN_ENCRYPTED_LEN || buf[ENCRYPT_MAGIC.length] !== FORMAT_VERSION) {
-    throw new Error(`[encrypt] unsupported session file format version ${buf[ENCRYPT_MAGIC.length]}`);
+  return 5;
+}
+function epermAlertRepeatMs() {
+  const env = process.env.BILI_PERSIST_EPERM_ALERT_REPEAT_MS;
+  if (env) {
+    const n = Number.parseInt(env, 10);
+    if (Number.isFinite(n) && n >= 0) return n;
   }
-  const mode = buf[ENCRYPT_MAGIC.length + 1];
-  const nonce = buf.subarray(ENCRYPT_HEADER_LEN - NONCE_LEN, ENCRYPT_HEADER_LEN);
-  const tag = buf.subarray(buf.length - TAG_LEN);
-  const ct2 = buf.subarray(ENCRYPT_HEADER_LEN, buf.length - TAG_LEN);
-  const decipher = createDecipheriv("aes-256-gcm", key, nonce);
-  decipher.setAuthTag(tag);
-  const body = Buffer.concat([decipher.update(ct2), decipher.final()]);
-  const plain = mode === MODE_ZSTD ? inflateZstd(body) : body;
-  return plain.toString("utf8");
+  return 0;
+}
+function defaultLogger(level, m2) {
+  log(level, m2);
 }
-function decompressEnvelope(buf) {
-  if (buf.length < PLAIN_HEADER_LEN || buf[ZSTD_MAGIC.length] !== FORMAT_VERSION) {
-    throw new Error(`[storage] unsupported session file format version ${buf[ZSTD_MAGIC.length]}`);
+var _store = null;
+function getStore() {
+  if (!_store) {
+    _store = new SessionStore({ enabled: persistEnabled(), log: defaultLogger });
   }
-  const mode = buf[ZSTD_MAGIC.length + 1];
-  const body = buf.subarray(PLAIN_HEADER_LEN);
-  const plain = mode === MODE_ZSTD ? inflateZstd(body) : body;
-  return plain.toString("utf8");
+  return _store;
 }
 
-// src/persist-eperm.ts
-var LOCK_CODES = /\b(EPERM|EBUSY|EACCES)\b/;
-var WRITE_FAIL_RE = /^\[persist\] write failed for (.+?) \(total (\d+)x\): (.+)$/;
-var PersistEpermAlert = class {
-  dir;
-  threshold;
-  repeatMs;
-  platform;
-  now;
-  onAlert;
-  hasAlerted = false;
-  alertedAt = 0;
-  constructor(opts) {
-    this.dir = opts.dir;
-    this.threshold = opts.threshold ?? 5;
-    this.repeatMs = opts.repeatMs ?? 0;
-    this.platform = opts.platform ?? process.platform;
-    this.now = opts.now ?? Date.now;
-    this.onAlert = opts.onAlert ?? ((d, c) => log("warn", buildAlertMessage(d, c)));
-  }
-  // Returns true iff an alert was emitted. Runs on every kernel log line, so
-  // the non-matching cases bail before any allocation.
-  observe(level, msg) {
-    if (this.platform !== "win32") return false;
-    if (level !== "error" && level !== "warn") return false;
-    const m2 = WRITE_FAIL_RE.exec(msg);
-    if (!m2) return false;
-    const count = Number(m2[2]);
-    if (count < this.threshold) return false;
-    if (!LOCK_CODES.test(m2[3])) return false;
-    if (!this.shouldAlert()) return false;
-    this.hasAlerted = true;
-    this.alertedAt = this.now();
-    this.onAlert(this.dir, count);
-    return true;
-  }
-  shouldAlert() {
-    if (!this.hasAlerted) return true;
-    if (this.repeatMs <= 0) return false;
-    return this.now() - this.alertedAt >= this.repeatMs;
+// src/session.ts
+function lastCompressSuffix(info) {
+  if (!info) return "";
+  return ` [after compress: shrink ${Math.round(info.shrinkRatio * 100)}% foldPoint=${info.foldPoint} blocks=${info.blocks} ~${info.tokensCompressed}tok]`;
+}
+function storeEffectiveConfig(session, config) {
+  session.metadata["effectiveConfig"] = config;
+}
+function effectiveConfig(session, fallback) {
+  const stored = session?.metadata["effectiveConfig"];
+  if (stored && typeof stored === "object") return { ...fallback, ...stored };
+  return fallback;
+}
+var sessions = /* @__PURE__ */ new Map();
+var MAX_SESSIONS = Math.max(1, Number.parseInt(process.env.BILI_MAX_SESSIONS ?? "256", 10) || 256);
+var initialized = false;
+async function initSessions() {
+  if (initialized) return;
+  initialized = true;
+  const store = getStore();
+  if (!store.enabled) return;
+  const loaded = await store.boot();
+  if (loaded.size > MAX_SESSIONS) {
+    const freshness = (s3) => Math.max(s3.createdAt ?? 0, s3.lastSeen ?? 0);
+    const entries = [...loaded.entries()].sort((a, b2) => freshness(b2[1]) - freshness(a[1]));
+    for (const [id, s3] of entries) {
+      if (sessions.size >= MAX_SESSIONS) break;
+      sessions.set(id, s3);
+    }
+  } else {
+    for (const [id, s3] of loaded) sessions.set(id, s3);
   }
-};
-function buildAlertMessage(dir, count) {
-  return [
-    `[persist] session dir ${dir} failed ${count} consecutive writes (EPERM \u2014 rename is locked).`,
-    "Likely cause: Windows Defender / antivirus / indexer / a sync tool is locking the directory.",
-    `Fix: add ${dir} to Windows Defender exclusions (Settings \u2192 Virus & threat protection \u2192 Manage settings \u2192 Exclusions \u2192 Add an exclusion),`,
-    "and make sure no OneDrive / sync tool is syncing this path."
-  ].join("\n");
 }
-
-// src/persist.ts
-var PERSIST_VERSION = 3;
-var MIGRATION_MARKER = ".bili-migration-286.done";
-var STALE_WARN_THROTTLE_MS = 6e4;
-function mergeState(parsed) {
-  const fresh = createInitialState();
-  return {
-    blocks: parsed.blocks ?? fresh.blocks,
-    messageRefs: parsed.messageRefs ?? fresh.messageRefs,
-    nudge: { ...fresh.nudge, ...parsed.nudge ?? {} },
-    stats: { ...fresh.stats, ...parsed.stats ?? {} },
-    nextBlockId: parsed.nextBlockId ?? fresh.nextBlockId,
-    nextRunId: parsed.nextRunId ?? fresh.nextRunId,
-    tokenSnapshot: parsed.tokenSnapshot ?? fresh.tokenSnapshot,
-    // Without this, a restart re-exposes absorbed tool outputs: state
-    // resurrects with absorbed=[] and hideAbsorbedMessages has nothing to hide.
-    absorbed: parsed.absorbed ?? fresh.absorbed,
-    rules: parsed.rules ?? fresh.rules
+function getSession(id, meta) {
+  const existing = sessions.get(id);
+  if (existing) {
+    existing.lastSeen = Date.now();
+    existing.restored = false;
+    if (meta?.protocol && !existing.meta.protocol) existing.meta.protocol = meta.protocol;
+    if (meta?.upstreamOrigin && !existing.meta.upstreamOrigin) existing.meta.upstreamOrigin = meta.upstreamOrigin;
+    if (meta?.label && !existing.meta.label) existing.meta.label = meta.label;
+    return existing;
+  }
+  const store = getStore();
+  const reloaded = store.loadSync(id, meta);
+  if (reloaded) {
+    reloaded.lastSeen = Date.now();
+    reloaded.restored = false;
+    reloaded.persisted = true;
+    sessions.set(id, reloaded);
+    return reloaded;
+  }
+  if (sessions.size >= MAX_SESSIONS) {
+    const evicted = evictOldest();
+    if (!evicted) {
+      throw new Error(`session pool exhausted (MAX_SESSIONS=${MAX_SESSIONS}; all in-flight)`);
+    }
+  }
+  const session = {
+    id,
+    meta: { protocol: meta?.protocol, upstreamOrigin: meta?.upstreamOrigin, label: meta?.label },
+    stats: { requests: 0, tokensSaved: 0, inputTokens: 0, cachedTokens: 0, outputTokens: 0, cacheSamples: 0, lastInputTokens: 0, compressCreditTokens: 0, contextTokens: 0 },
+    metadata: {},
+    state: createInitialState(),
+    createdAt: Date.now(),
+    lastSeen: Date.now(),
+    blockContents: /* @__PURE__ */ new Map(),
+    inFlight: 0,
+    persisted: false
   };
+  sessions.set(id, session);
+  return session;
 }
-function hostLabel(upstreamOrigin) {
-  if (!upstreamOrigin) return "unknown";
+function acquireInFlight(session) {
+  session.inFlight++;
+}
+function releaseInFlight(session) {
+  if (session.inFlight > 0) session.inFlight--;
+}
+function totalInFlight() {
+  let n = 0;
+  for (const s3 of sessions.values()) n += s3.inFlight;
+  return n;
+}
+async function withSessionLock(session, fn) {
+  const prev = session.lockChain ?? Promise.resolve();
+  let release;
+  const done = new Promise((resolve) => {
+    release = resolve;
+  });
+  session.lockChain = prev.then(() => done);
+  await prev;
   try {
-    const host = new URL(upstreamOrigin).hostname || "unknown";
-    return host.replace(/[^a-zA-Z0-9.-]/g, "-").slice(0, 48) || "unknown";
-  } catch {
-    return "unknown-" + createHash4("sha256").update(upstreamOrigin, "utf8").digest("hex").slice(0, 6);
+    return await fn();
+  } finally {
+    release();
   }
 }
-function relPathFor(id, protocol, upstreamOrigin) {
-  const proto = protocol ?? "_unknown";
-  const host = protocol ? hostLabel(upstreamOrigin) + "_" : "";
-  return path7.join(proto, `${host}${createHash4("sha256").update(id, "utf8").digest("hex").slice(0, 24)}.json`);
+function listSessions() {
+  return [...sessions.values()].sort((a, b2) => b2.lastSeen - a.lastSeen);
 }
-var SessionStore = class {
-  enabled;
-  dir;
-  store;
-  log;
-  staleWarnAt = /* @__PURE__ */ new Map();
-  codec;
-  constructor(opts) {
-    const debounceMs = opts?.debounceMs ?? defaultDebounce();
-    this.enabled = (opts?.enabled ?? true) && debounceMs >= 0;
-    this.dir = opts?.dir ?? defaultDir();
-    const baseLog = opts?.log ?? defaultLogger;
-    this.log = baseLog;
-    const keyEnv = process.env.BILI_ENCRYPTION_KEY;
-    let key = null;
-    if (keyEnv) key = parseEncryptionKey(keyEnv);
-    this.codec = createStorageCodec({ key, compress: persistZstdEnabled() });
-    if (key) {
-      baseLog("info", "[persist] session-file encryption enabled (AES-256-GCM)");
-    } else if (this.codec) {
-      baseLog("info", "[persist] session-file compression enabled (zstd, BILIZSTD1)");
-    }
-    const epermAlert = new PersistEpermAlert({
-      dir: this.dir,
-      threshold: epermAlertThreshold(),
-      repeatMs: epermAlertRepeatMs()
-    });
-    this.store = new StateStore({
-      dir: this.dir,
-      version: PERSIST_VERSION,
-      debounceMs: Math.max(0, debounceMs),
-      enabled: this.enabled,
-      codec: this.codec,
-      log: (level, msg) => {
-        epermAlert.observe(level, msg);
-        baseLog(level, msg);
-      },
-      relPath: (id, payload) => relPathFor(id, payload.meta?.protocol ?? payload.protocol, payload.meta?.upstreamOrigin ?? payload.upstreamOrigin),
-      // Adopt the pre-envelope flat format this store itself wrote
-      // before the kernel extraction (and every v1/v2 file before it).
-      legacy: (parsed) => isValidRecord(parsed) ? { id: parsed.id, payload: parsed, version: parsed.version, savedAt: parsed.savedAt } : null,
-      validate: (envelope) => isValidRecord(envelope.payload)
-    });
-  }
-  /** Bulk-load every persisted session from disk into a map keyed by the
-   *  REAL session id (read from the file body, not the filename). Called once
-   *  at startup before the server accepts traffic. Corrupt individual files
-   *  are skipped (logged) — one bad file never blocks boot. */
-  async loadAll() {
-    const out = /* @__PURE__ */ new Map();
-    if (!this.enabled) return out;
-    let clamped = 0;
-    for (const [id, envelope] of await this.store.loadAll()) {
-      const session = buildSession(envelope.payload);
-      if (hasNegativePersistedTokens(envelope.payload)) {
-        await this.store.writeNow(id, () => buildRecord(session));
-        clamped++;
-      }
-      out.set(id, session);
-    }
-    if (clamped > 0) {
-      log("info", `[persist] one-time migration (#408): clamped negative lastInputTokens/contextTokens in ${clamped} session(s) to 0`);
-    }
-    return out;
+function peekSession(id) {
+  return sessions.get(id);
+}
+function derivedLegacyCanonicalId(sessionId) {
+  return `pfa-${createHash5("sha256").update(`legacy:${sessionId}`).digest("hex").slice(0, 16)}`;
+}
+function canonicalIdOf(session) {
+  if (session.id.startsWith("pfa-")) return session.id;
+  const c = session.metadata.canonicalId;
+  if (typeof c === "string" && c.length > 0) return c;
+  return derivedLegacyCanonicalId(session.id);
+}
+function ensureCanonicalId(session) {
+  const id = canonicalIdOf(session);
+  if (!session.id.startsWith("pfa-") && session.metadata.canonicalId !== id) {
+    session.metadata.canonicalId = id;
+    markDirty(session);
   }
-  /** Single-pass boot (#401): ONE loadAll walk+parse, then the #286
-   *  identity migration over the SAME parsed map (no extra directory
-   *  walk), then hydration into Sessions. initSessions calls this instead
-   *  of migrateLegacyIds()+loadAll(), which walked and parsed the whole
-   *  tree twice per start. */
-  async boot() {
-    if (!this.enabled) return /* @__PURE__ */ new Map();
-    await this.sweepStaleTemps();
-    const loaded = await this.store.loadAll();
-    await this.applyLegacyMigration(loaded);
-    const out = /* @__PURE__ */ new Map();
-    for (const [id, envelope] of loaded) {
-      out.set(id, buildSession(envelope.payload));
-    }
-    return out;
+  return id;
+}
+function findSessionByCanonicalId(canonicalId) {
+  for (const s3 of sessions.values()) {
+    if (canonicalIdOf(s3) === canonicalId) return s3;
   }
-  /** #708/#1080 review: boot NEVER rewrites session file CONTENT. The first
-   *  draft re-encoded every legacy plaintext file in place at boot — a mass
-   *  format flip that a downgrade (rollback during incident triage) would
-   *  meet with "skipping corrupt file" + empty-session resume + overwrite,
-   *  silently destroying history. Legacy plaintext files keep loading via
-   *  the codec's magic dispatch and convert organically on their next save;
-   *  the only thing boot touches is orphaned `.tmp-enc-*` temps from crashed
-   *  writes of previous runs (pure deletion of garbage, never content). */
-  async sweepStaleTemps() {
-    let files;
-    try {
-      files = await walkJsonFiles(this.dir);
-    } catch {
-      return;
-    }
-    for (const file of files) {
-      if (STALE_ENC_TEMP_RE.test(path7.basename(file))) {
-        await rm(file, { force: true }).catch(() => {
-        });
-      }
-    }
+  return void 0;
+}
+function snapshotMessages(session, messages) {
+  if (messages.length > 0) {
+    session.lastMessages = messages;
+    session.lastMessagesFolded = false;
   }
-  /** One-time migration for the #286 identity change: sessions persisted
-   *  under the old derived hash id are re-keyed to the client-provided
-   *  conversation value stored in meta.label (which is now the session id
-   *  itself). Collisions on the same label keep the most recently saved
-   *  record; the losers, and any label already claimed by a new-format
-   *  session, are deleted. Records without a label cannot be mapped and are
-   *  left in place (they load under their old id but are never requested
-   *  again — the new proxy 400s anonymous requests). Self-terminating:
-   *  after one pass no loaded id differs from its label. A completion
-   *  marker makes it run ONCE EVER (#401): the old code re-scanned the tree
-   *  on every boot because unlabeled files are intentionally kept, so the
-   *  "one-time" log line repeated forever. */
-  async migrateLegacyIds() {
-    if (!this.enabled) return;
-    if (existsSync3(this.markerPath())) return;
-    const loaded = await this.store.loadAll();
-    await this.applyLegacyMigration(loaded);
+}
+function markDirty(session) {
+  getStore().scheduleSave(session);
+}
+function cacheBlockContent(session, blockId, content) {
+  session.blockContents.set(blockId, content);
+}
+function resetSessionCompression(session) {
+  session.state = createInitialState();
+  session.blockContents.clear();
+  session.stats.lastInputTokens = 0;
+  delete session.stats.lastInputTokensSource;
+  session.stats.localInputEstimate = 0;
+  session.stats.contextTokens = 0;
+  session.metadata.nativeCompactionAt = Date.now();
+  markDirty(session);
+}
+function markNativeCompactionBoundary(session) {
+  session.metadata.nativeCompactionBoundary = {
+    at: Date.now(),
+    pendingRebase: true
+  };
+  markDirty(session);
+}
+function reconcileNativeCompactionBoundary(session) {
+  const boundary = session.metadata.nativeCompactionBoundary;
+  if (!boundary || typeof boundary !== "object" || !boundary.pendingRebase) {
+    return false;
   }
-  markerPath() {
-    return path7.join(this.dir, MIGRATION_MARKER);
+  resetSessionCompression(session);
+  session.metadata.nativeCompactionBoundary = {
+    ...boundary,
+    pendingRebase: false,
+    rebasedAt: Date.now()
+  };
+  markDirty(session);
+  return true;
+}
+function markCompactionBoundary(session) {
+  session.metadata.compactionBoundary = {
+    at: Date.now(),
+    pending: true
+  };
+  markDirty(session);
+}
+function readPreCompactionArchive(session) {
+  const raw = session.metadata.preCompactionArchive;
+  if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+    return raw;
   }
-  async applyLegacyMigration(loaded) {
-    if (existsSync3(this.markerPath())) return;
-    const claimed = /* @__PURE__ */ new Set();
-    const byLabel = /* @__PURE__ */ new Map();
-    let unlabeled = 0;
-    for (const [id, envelope] of loaded) {
-      if (id.startsWith("pfa-")) continue;
-      const session = buildSession(envelope.payload);
-      const label = session.meta.label;
-      if (!label) {
-        unlabeled++;
-        continue;
-      }
-      if (label === id) {
-        claimed.add(id);
-        continue;
-      }
-      const prev = byLabel.get(label);
-      if (!prev || envelope.savedAt >= prev.savedAt) {
-        if (prev) {
-          await this.removeLegacyFile(prev.id, prev.session);
-          loaded.delete(prev.id);
-        }
-        byLabel.set(label, { id, savedAt: envelope.savedAt, session });
-      } else {
-        await this.removeLegacyFile(id, session);
-        loaded.delete(id);
-      }
-    }
-    let rekeyed = 0;
-    for (const [label, { id, session }] of byLabel) {
-      if (claimed.has(label)) {
-        await this.removeLegacyFile(id, session);
-        loaded.delete(id);
-        continue;
-      }
-      session.id = label;
-      await this.store.writeNow(label, () => buildRecord(session));
-      await this.removeLegacyFile(id, session);
-      const envelope = loaded.get(id);
-      if (envelope) {
-        loaded.set(label, { ...envelope, id: label, payload: { ...envelope.payload, id: label } });
-      }
-      loaded.delete(id);
-      claimed.add(label);
-      rekeyed++;
-    }
-    try {
-      mkdirSync3(this.dir, { recursive: true });
-      writeFileSync2(this.markerPath(), String(Date.now()), "utf8");
-    } catch {
-    }
-    if (rekeyed || unlabeled) {
-      log("info", `[persist] one-time migration (#286): rekeyed ${rekeyed} legacy session(s), left ${unlabeled} unlabeled legacy file(s) in place`);
-    }
+  return {};
+}
+function preCompactionArchiveOf(session) {
+  return readPreCompactionArchive(session);
+}
+function applyCompactionArchive(session, activeBefore, liveRawIds, log2) {
+  const boundary = session.metadata.compactionBoundary;
+  if (!boundary || typeof boundary !== "object" || !boundary.pending) {
+    return;
   }
-  /** Remove a legacy session file. The kernel store never deletes (cleanup
-   *  is downstream policy), so the path is recomputed here: the namespaced
-   *  layout for v2+/v3 files, the _unknown/ fallback, and the flat default
-   *  name for pre-envelope v1 files. */
-  async removeLegacyFile(id, session) {
-    const candidates = /* @__PURE__ */ new Set([
-      relPathFor(id, session.meta.protocol, session.meta.upstreamOrigin),
-      relPathFor(id),
-      flatFileNameFor(id)
-    ]);
-    for (const rel2 of candidates) {
-      await rm(path7.join(this.dir, rel2), { force: true }).catch(() => {
-      });
+  const activeAfter = new Set(session.state.blocks.filter((b2) => b2.active).map((b2) => b2.blockId));
+  const deactivated = [...activeBefore].filter((id) => !activeAfter.has(id));
+  if (deactivated.length > 0) {
+    const archive = readPreCompactionArchive(session);
+    const at2 = Date.now();
+    for (const id of deactivated) {
+      archive[id] = { at: at2, reason: "content replaced by client native compaction summary" };
     }
+    session.metadata.preCompactionArchive = archive;
   }
-  /** Shared envelope probe for the sync read paths: namespaced path
-   *  first, then the _unknown/ location, letting the kernel store layer
-   *  also check its discovered map and the flat legacy name. */
-  loadEnvelope(id, meta) {
-    const envelopes = [
-      this.store.loadSync(id, relPathFor(id, meta?.protocol, meta?.upstreamOrigin)),
-      meta?.protocol ? this.store.loadSync(id, relPathFor(id)) : null
-    ];
-    for (const envelope of envelopes) {
-      if (envelope) return envelope;
-    }
-    return null;
+  const { byRaw, byRef } = session.state.messageRefs;
+  const prunedByRaw = {};
+  for (const [rawId, ref] of Object.entries(byRaw)) {
+    if (liveRawIds.has(rawId)) prunedByRaw[rawId] = ref;
   }
-  /** Synchronous reload of a single session. Used on a memory miss (after
-   *  LRU eviction). Sync fs is acceptable here because a miss is rare and
-   *  reads a single small file (~1ms). Returns null if missing/corrupt or the
-   *  body id does not match what we asked for. */
-  loadSync(id, meta) {
-    if (!this.enabled) return null;
-    const envelope = this.loadEnvelope(id, meta);
-    if (!envelope) return null;
-    const session = buildSession(envelope.payload);
-    if (hasNegativePersistedTokens(envelope.payload)) {
-      this.scheduleSave(session);
-      log("info", `[persist] clamped negative token stats on reload for ${id} (#408)`);
-    }
-    return session;
+  const prunedByRef = {};
+  for (const [ref, rawId] of Object.entries(byRef)) {
+    if (liveRawIds.has(rawId)) prunedByRef[ref] = rawId;
   }
-  /** Read-only state load for cross-session search (#841): unlike loadSync,
-   *  never schedules a save (no #408 clamp-rewrite side effect). */
-  loadStateForSearch(id) {
-    if (!this.enabled) return null;
-    const envelope = this.loadEnvelope(id);
-    if (!envelope) return null;
-    return mergeState(envelope.payload.state);
+  session.state.messageRefs.byRaw = prunedByRaw;
+  session.state.messageRefs.byRef = prunedByRef;
+  session.metadata.compactionBoundary = {
+    ...boundary,
+    pending: false,
+    archivedAt: Date.now(),
+    archivedBlocks: deactivated
+  };
+  markDirty(session);
+  log2("info", `[${session.id}] native compaction boundary: archived ${deactivated.length} pre-compaction block(s)${deactivated.length > 0 ? ` (${deactivated.join(", ")})` : ""}; pruned ref maps to ${prunedByRaw.length} live raw id(s)`);
+}
+var REWRITE_MIN_KNOWN_REFS = 20;
+var REWRITE_MAX_KNOWN_RATIO = 0.5;
+var REWRITE_MIN_INCOMING_TOTAL = 10;
+function detectUnannouncedHistoryRewrite(session, knownRefsBefore, liveRawIds) {
+  const knownBefore = knownRefsBefore.size;
+  let incomingTotal = 0;
+  let knownIncoming = 0;
+  for (const id of liveRawIds) {
+    incomingTotal++;
+    if (knownRefsBefore.has(id)) knownIncoming++;
   }
-  /** #405 fix #4: dual-instance rollback guard. When two proxy processes
-   *  share BILI_SESSIONS_DIR, whoever saves last used to win — an instance
-   *  holding a STALE in-memory copy would roll counters back (requests:3 →
-   *  2). Both signals below are monotonic per session id, so either being
-   *  strictly smaller proves staleness. Returns the fresher-on-disk payload
-   *  when the incoming record is stale, else null. */
-  staleDiskPayload(incoming) {
-    const envelope = this.loadEnvelope(incoming.id, incoming.meta);
-    if (!envelope) return null;
-    const disk = envelope.payload;
-    const diskRequests = disk.stats?.requests ?? disk.requests ?? 0;
-    const incRequests = incoming.stats?.requests ?? incoming.requests ?? 0;
-    if (incRequests < diskRequests) return disk;
-    if (incRequests === diskRequests) {
-      const diskBlocks = disk.state?.nextBlockId ?? 0;
-      const incBlocks = incoming.state?.nextBlockId ?? 0;
-      if (incBlocks < diskBlocks) return disk;
+  const detected = knownBefore >= REWRITE_MIN_KNOWN_REFS && session.state.blocks.length > 0 && incomingTotal >= REWRITE_MIN_INCOMING_TOTAL && knownIncoming > 0 && knownIncoming / incomingTotal < REWRITE_MAX_KNOWN_RATIO;
+  return { detected, knownBefore, incomingTotal, knownIncoming };
+}
+function evictOldest() {
+  let oldestId;
+  let oldestSeen = Infinity;
+  for (const [id, s4] of sessions) {
+    if (s4.inFlight > 0) continue;
+    if (s4.lastSeen < oldestSeen) {
+      oldestSeen = s4.lastSeen;
+      oldestId = id;
     }
-    return null;
-  }
-  guardedBuild(session) {
-    return () => {
-      const record = buildRecord(session);
-      const disk = this.staleDiskPayload(record);
-      if (disk === null) return record;
-      const now = Date.now();
-      const last = this.staleWarnAt.get(record.id) ?? 0;
-      if (now - last >= STALE_WARN_THROTTLE_MS) {
-        this.staleWarnAt.set(record.id, now);
-        this.log(
-          "warn",
-          `[persist] rejected stale snapshot for session ${record.id}: in-memory copy is older than the on-disk one (another bili instance holds newer state) \u2014 keeping disk state, no rollback (#405)`
-        );
-      }
-      return disk;
-    };
   }
-  /** Schedule a debounced write for a session. Multiple calls within the
-   *  window coalesce; the record is built at WRITE time, so the freshest
-   *  session state is persisted. Safe to call on the hot path. No-op if
-   *  disabled. */
-  scheduleSave(session) {
-    this.store.scheduleSave(session.id, this.guardedBuild(session));
-  }
-  /** Asynchronously persist a session right now (skips the debounce). Throws
-   *  on write failure so callers can react (e.g. avoid evicting). Serialized
-   *  per-session by the kernel store's write chains. */
-  async writeNow(session) {
-    await this.store.writeNow(session.id, this.guardedBuild(session));
+  if (!oldestId) return false;
+  const s3 = sessions.get(oldestId);
+  const ok = getStore().flushSync(s3);
+  if (!ok && !s3.persisted) {
+    return false;
   }
-  /** Synchronous flush for a single session. Used on memory eviction so a
-   *  dirty evicted session is not lost. Sync because eviction runs in the
-   *  sync getSession path; a single small write is acceptable.
-   *  Returns true on success, false on failure (caller must NOT evict on
-   *  failure for a never-persisted session or it is lost permanently). */
-  flushSync(session) {
-    return this.store.flushSync(session.id, this.guardedBuild(session));
+  sessions.delete(oldestId);
+  return true;
+}
+async function flushAllSessions() {
+  await getStore().flushAll(sessions.values());
+}
+
+// src/update.ts
+import { readFile as readFile3, writeFile as writeFile2, mkdir as mkdir2, access, constants, rm as rm2, cp, unlink } from "fs/promises";
+import { execFile as execFile2 } from "child_process";
+import { realpathSync } from "fs";
+import crypto from "crypto";
+
+// node_modules/tar/dist/esm/index.min.js
+import Qr from "events";
+import I from "fs";
+import { EventEmitter as Di } from "events";
+import Cs from "stream";
+import { StringDecoder as Hr } from "string_decoder";
+import cr from "path";
+import Kt from "fs";
+import { dirname as Fn, parse as kn } from "path";
+import { EventEmitter as Dn } from "events";
+import zi from "assert";
+import { Buffer as Ot } from "buffer";
+import * as Ps from "zlib";
+import en from "zlib";
+import { posix as Zt } from "path";
+import { basename as _n } from "path";
+import mi from "fs";
+import X from "fs";
+import js from "path";
+import { win32 as Pn } from "path";
+import ar from "path";
+import Br from "fs";
+import co from "assert";
+import { randomBytes as Mr } from "crypto";
+import u from "fs";
+import R from "path";
+import pr from "fs";
+import wi from "fs";
+import we from "path";
+import k from "fs";
+import ro from "fs/promises";
+import Si from "path";
+import { join as xr } from "path";
+import v from "fs";
+import Pr from "path";
+var zr = Object.defineProperty;
+var Ur = (s3, t) => {
+  for (var e in t) zr(s3, e, { get: t[e], enumerable: true });
+};
+var Ds = typeof process == "object" && process ? process : { stdout: null, stderr: null };
+var Wr = (s3) => !!s3 && typeof s3 == "object" && (s3 instanceof A || s3 instanceof Cs || Gr(s3) || Zr(s3));
+var Gr = (s3) => !!s3 && typeof s3 == "object" && s3 instanceof Di && typeof s3.pipe == "function" && s3.pipe !== Cs.Writable.prototype.pipe;
+var Zr = (s3) => !!s3 && typeof s3 == "object" && s3 instanceof Di && typeof s3.write == "function" && typeof s3.end == "function";
+var Q = /* @__PURE__ */ Symbol("EOF");
+var J = /* @__PURE__ */ Symbol("maybeEmitEnd");
+var nt = /* @__PURE__ */ Symbol("emittedEnd");
+var De = /* @__PURE__ */ Symbol("emittingEnd");
+var qt = /* @__PURE__ */ Symbol("emittedError");
+var Ne = /* @__PURE__ */ Symbol("closed");
+var Ns = /* @__PURE__ */ Symbol("read");
+var Ae = /* @__PURE__ */ Symbol("flush");
+var As = /* @__PURE__ */ Symbol("flushChunk");
+var z = /* @__PURE__ */ Symbol("encoding");
+var Mt = /* @__PURE__ */ Symbol("decoder");
+var g = /* @__PURE__ */ Symbol("flowing");
+var Qt = /* @__PURE__ */ Symbol("paused");
+var Bt = /* @__PURE__ */ Symbol("resume");
+var b = /* @__PURE__ */ Symbol("buffer");
+var N = /* @__PURE__ */ Symbol("pipes");
+var _ = /* @__PURE__ */ Symbol("bufferLength");
+var bi = /* @__PURE__ */ Symbol("bufferPush");
+var Ie = /* @__PURE__ */ Symbol("bufferShift");
+var L = /* @__PURE__ */ Symbol("objectMode");
+var S = /* @__PURE__ */ Symbol("destroyed");
+var _i = /* @__PURE__ */ Symbol("error");
+var Oi = /* @__PURE__ */ Symbol("emitData");
+var Is = /* @__PURE__ */ Symbol("emitEnd");
+var Ti = /* @__PURE__ */ Symbol("emitEnd2");
+var Z = /* @__PURE__ */ Symbol("async");
+var xi = /* @__PURE__ */ Symbol("abort");
+var Ce = /* @__PURE__ */ Symbol("aborted");
+var Jt = /* @__PURE__ */ Symbol("signal");
+var Rt = /* @__PURE__ */ Symbol("dataListeners");
+var C = /* @__PURE__ */ Symbol("discarded");
+var jt = (s3) => Promise.resolve().then(s3);
+var Yr = (s3) => s3();
+var Kr = (s3) => s3 === "end" || s3 === "finish" || s3 === "prefinish";
+var Vr = (s3) => s3 instanceof ArrayBuffer || !!s3 && typeof s3 == "object" && s3.constructor && s3.constructor.name === "ArrayBuffer" && s3.byteLength >= 0;
+var $r = (s3) => !Buffer.isBuffer(s3) && ArrayBuffer.isView(s3);
+var Fe = class {
+  src;
+  dest;
+  opts;
+  ondrain;
+  constructor(t, e, i) {
+    this.src = t, this.dest = e, this.opts = i, this.ondrain = () => t[Bt](), this.dest.on("drain", this.ondrain);
   }
-  /** Flush all dirty sessions with a pending debounce timer. Called on
-   *  SIGTERM/SIGINT for graceful shutdown. The kernel store flushes its own
-   *  pending set (builders read the live Session objects at write time, so
-   *  no session list is needed) and drains in-flight write chains. */
-  async flushAll(_sessions) {
-    await this.store.flushAll();
+  unpipe() {
+    this.dest.removeListener("drain", this.ondrain);
   }
-  /** Whether a write is currently pending (debounce timer armed) for a id. */
-  hasPending(id) {
-    return this.store.hasPending(id);
+  proxyErrors(t) {
   }
-  /** Cancel all pending writes without flushing (e.g. for tests). */
-  cancelAll() {
-    this.store.cancelAll();
+  end() {
+    this.unpipe(), this.opts.end && this.dest.end();
   }
 };
-function buildRecord(session) {
-  const snapshot = boundedFoldedSnapshot(session);
-  return {
-    version: PERSIST_VERSION,
-    savedAt: Date.now(),
-    id: session.id,
-    meta: { ...session.meta },
-    stats: { ...session.stats },
-    messages: snapshot,
-    messagesFolded: snapshot ? true : void 0,
-    metadata: { ...session.metadata },
-    state: session.state,
-    blockContents: Object.fromEntries(session.blockContents),
-    createdAt: session.createdAt
-  };
-}
-function isBlockView(v2) {
-  return !!v2 && typeof v2 === "object" && typeof v2.text === "string" && typeof v2.count === "number";
-}
-function buildSession(parsed) {
-  const blockContents = /* @__PURE__ */ new Map();
-  for (const [bid, content] of Object.entries(parsed.blockContents ?? {})) {
-    if (!content || typeof content !== "object") continue;
-    const full = content.full;
-    if (!isBlockView(full)) continue;
-    const one = content.one;
-    const oneView = isBlockView(one) ? one : null;
-    blockContents.set(bid, {
-      one: oneView && !(oneView.text === full.text && oneView.count === full.count) ? oneView : null,
-      full
-    });
+var Li = class extends Fe {
+  unpipe() {
+    this.src.removeListener("error", this.proxyErrors), super.unpipe();
   }
-  const meta = parsed.meta ?? {};
-  const stats = parsed.stats ?? {};
-  return {
-    id: parsed.id,
-    meta: {
-      protocol: meta.protocol ?? parsed.protocol,
-      upstreamOrigin: meta.upstreamOrigin ?? parsed.upstreamOrigin,
-      label: meta.label ?? parsed.label,
-      title: meta.title
-    },
-    stats: {
-      requests: stats.requests ?? parsed.requests ?? 0,
-      tokensSaved: stats.tokensSaved ?? parsed.tokensSaved ?? 0,
-      inputTokens: stats.inputTokens ?? parsed.inputTokens ?? 0,
-      cachedTokens: stats.cachedTokens ?? parsed.cachedTokens ?? 0,
-      outputTokens: stats.outputTokens ?? parsed.outputTokens ?? 0,
-      cacheSamples: stats.cacheSamples ?? parsed.cacheSamples ?? 0,
-      // #408: clamp at restore — pre-clamp versions persisted negative
-      // values (lastInputTokens = total − credit before the Math.max
-      // guard existed) which would otherwise revive after upgrade and
-      // feed the /acp panel + web stats as negative percentages.
-      lastInputTokens: Math.max(0, stats.lastInputTokens ?? parsed.lastInputTokens ?? 0),
-      // #857: provenance — legacy files lack it; absent stays absent and
-      // evidence-grade consumers treat absent as untrusted.
-      lastInputTokensSource: stats.lastInputTokensSource === "usage" || stats.lastInputTokensSource === "estimate" ? stats.lastInputTokensSource : void 0,
-      // In-memory only — a fresh process has no pending compress fold.
-      compressCreditTokens: 0,
-      contextTokens: Math.max(0, stats.contextTokens ?? parsed.contextTokens ?? 0)
-    },
-    metadata: parsed.metadata ?? {},
-    state: mergeState(parsed.state),
-    createdAt: parsed.createdAt ?? Date.now(),
-    // #404: lastSeen reflects the on-disk savedAt (the last real
-    // activity), NOT the restore moment — a restart must not fabricate
-    // activity for every session (broke fallback=latest ties, panel
-    // freshness, and eviction ordering). Consumers that need "has this
-    // session been used since boot" read the restored flag.
-    lastSeen: parsed.savedAt ?? Date.now(),
-    restored: true,
-    blockContents,
-    lastMessages: Array.isArray(parsed.messages) ? parsed.messages : void 0,
-    lastMessagesFolded: parsed.messagesFolded === true,
-    inFlight: 0,
-    persisted: true
-  };
-}
-function isValidRecord(parsed) {
-  if (!parsed || typeof parsed !== "object") return false;
-  const r = parsed;
-  return typeof r.id === "string" && typeof r.state === "object" && r.state !== null && Array.isArray(r.state.blocks);
-}
-function hasNegativePersistedTokens(parsed) {
-  const stats = parsed.stats ?? {};
-  const last = stats.lastInputTokens ?? parsed.lastInputTokens;
-  const ctx = stats.contextTokens ?? parsed.contextTokens;
-  return typeof last === "number" && last < 0 || typeof ctx === "number" && ctx < 0;
-}
-function defaultDir() {
-  return sessionsDir();
-}
-function defaultDebounce() {
-  const env = process.env.BILI_PERSIST_DEBOUNCE_MS;
-  if (env) {
-    const n = Number.parseInt(env, 10);
-    if (Number.isFinite(n) && n >= 0) return n;
+  constructor(t, e, i) {
+    super(t, e, i), this.proxyErrors = (r) => this.dest.emit("error", r), t.on("error", this.proxyErrors);
   }
-  return 500;
-}
-function persistEnabled() {
-  const env = process.env.BILI_PERSIST;
-  if (env === "0" || env === "false") return false;
-  return true;
-}
-function persistZstdEnabled() {
-  const env = process.env.BILI_PERSIST_ZSTD;
-  return env === "1" || env === "true";
-}
-var STALE_ENC_TEMP_RE = /\.tmp-enc-\d+-\d+$/;
-async function walkJsonFiles(dir) {
-  const entries = await readdir(dir, { withFileTypes: true });
-  const out = [];
-  for (const e of entries) {
-    const full = path7.join(dir, e.name);
-    if (e.isDirectory()) {
-      out.push(...await walkJsonFiles(full));
-    } else if (e.isFile() && (STALE_ENC_TEMP_RE.test(e.name) || e.name.endsWith(".json") && !e.name.startsWith(".tmp-"))) {
-      out.push(full);
-    }
+};
+var Xr = (s3) => !!s3.objectMode;
+var qr = (s3) => !s3.objectMode && !!s3.encoding && s3.encoding !== "buffer";
+var A = class extends Di {
+  [g] = false;
+  [Qt] = false;
+  [N] = [];
+  [b] = [];
+  [L];
+  [z];
+  [Z];
+  [Mt];
+  [Q] = false;
+  [nt] = false;
+  [De] = false;
+  [Ne] = false;
+  [qt] = null;
+  [_] = 0;
+  [S] = false;
+  [Jt];
+  [Ce] = false;
+  [Rt] = 0;
+  [C] = false;
+  writable = true;
+  readable = true;
+  constructor(...t) {
+    let e = t[0] || {};
+    if (super(), e.objectMode && typeof e.encoding == "string") throw new TypeError("Encoding and objectMode may not be used together");
+    Xr(e) ? (this[L] = true, this[z] = null) : qr(e) ? (this[z] = e.encoding, this[L] = false) : (this[L] = false, this[z] = null), this[Z] = !!e.async, this[Mt] = this[z] ? new Hr(this[z]) : null, e && e.debugExposeBuffer === true && Object.defineProperty(this, "buffer", { get: () => this[b] }), e && e.debugExposePipes === true && Object.defineProperty(this, "pipes", { get: () => this[N] });
+    let { signal: i } = e;
+    i && (this[Jt] = i, i.aborted ? this[xi]() : i.addEventListener("abort", () => this[xi]()));
   }
-  return out;
-}
-function persistTailTokens() {
-  const env = process.env.BILI_PERSIST_TAIL_TOKENS;
-  if (env) {
-    const n = Number.parseInt(env, 10);
-    if (Number.isFinite(n) && n >= 0) return n;
+  get bufferLength() {
+    return this[_];
   }
-  return 16384;
-}
-function boundedFoldedSnapshot(session) {
-  const msgs = session.lastMessages;
-  if (!msgs || msgs.length === 0) return void 0;
-  const budget = persistTailTokens();
-  if (budget === 0) return void 0;
-  let view = prune(msgs, session.state);
-  let total = 0;
-  for (const m2 of view) total += defaultCountTokens(m2.text ?? "");
-  if (total > budget) {
-    let acc = 0;
-    let start = 0;
-    for (let i = view.length - 1; i >= 0; i--) {
-      acc += defaultCountTokens(view[i].text ?? "");
-      if (acc > budget) {
-        start = Math.min(i + 1, view.length - 1);
-        break;
-      }
-    }
-    if (start > 0) view = view.slice(start);
+  get encoding() {
+    return this[z];
   }
-  return view;
-}
-function epermAlertThreshold() {
-  const env = process.env.BILI_PERSIST_EPERM_ALERT_THRESHOLD;
-  if (env) {
-    const n = Number.parseInt(env, 10);
-    if (Number.isFinite(n) && n > 0) return n;
+  set encoding(t) {
+    throw new Error("Encoding must be set at instantiation time");
   }
-  return 5;
-}
-function epermAlertRepeatMs() {
-  const env = process.env.BILI_PERSIST_EPERM_ALERT_REPEAT_MS;
-  if (env) {
-    const n = Number.parseInt(env, 10);
-    if (Number.isFinite(n) && n >= 0) return n;
+  setEncoding(t) {
+    throw new Error("Encoding must be set at instantiation time");
   }
-  return 0;
-}
-function defaultLogger(level, m2) {
-  log(level, m2);
-}
-var _store = null;
-function getStore() {
-  if (!_store) {
-    _store = new SessionStore({ enabled: persistEnabled(), log: defaultLogger });
+  get objectMode() {
+    return this[L];
   }
-  return _store;
-}
-
-// src/session.ts
-function lastCompressSuffix(info) {
-  if (!info) return "";
-  return ` [after compress: shrink ${Math.round(info.shrinkRatio * 100)}% foldPoint=${info.foldPoint} blocks=${info.blocks} ~${info.tokensCompressed}tok]`;
-}
-function storeEffectiveConfig(session, config) {
-  session.metadata["effectiveConfig"] = config;
-}
-function effectiveConfig(session, fallback) {
-  const stored = session?.metadata["effectiveConfig"];
-  if (stored && typeof stored === "object") return { ...fallback, ...stored };
-  return fallback;
-}
-var sessions = /* @__PURE__ */ new Map();
-var MAX_SESSIONS = Math.max(1, Number.parseInt(process.env.BILI_MAX_SESSIONS ?? "256", 10) || 256);
-var initialized = false;
-async function initSessions() {
-  if (initialized) return;
-  initialized = true;
-  const store = getStore();
-  if (!store.enabled) return;
-  const loaded = await store.boot();
-  if (loaded.size > MAX_SESSIONS) {
-    const freshness = (s3) => Math.max(s3.createdAt ?? 0, s3.lastSeen ?? 0);
-    const entries = [...loaded.entries()].sort((a, b2) => freshness(b2[1]) - freshness(a[1]));
-    for (const [id, s3] of entries) {
-      if (sessions.size >= MAX_SESSIONS) break;
-      sessions.set(id, s3);
-    }
-  } else {
-    for (const [id, s3] of loaded) sessions.set(id, s3);
+  set objectMode(t) {
+    throw new Error("objectMode must be set at instantiation time");
   }
-}
-function getSession(id, meta) {
-  const existing = sessions.get(id);
-  if (existing) {
-    existing.lastSeen = Date.now();
-    existing.restored = false;
-    if (meta?.protocol && !existing.meta.protocol) existing.meta.protocol = meta.protocol;
-    if (meta?.upstreamOrigin && !existing.meta.upstreamOrigin) existing.meta.upstreamOrigin = meta.upstreamOrigin;
-    if (meta?.label && !existing.meta.label) existing.meta.label = meta.label;
-    return existing;
+  get async() {
+    return this[Z];
   }
-  const store = getStore();
-  const reloaded = store.loadSync(id, meta);
-  if (reloaded) {
-    reloaded.lastSeen = Date.now();
-    reloaded.restored = false;
-    reloaded.persisted = true;
-    sessions.set(id, reloaded);
-    return reloaded;
+  set async(t) {
+    this[Z] = this[Z] || !!t;
   }
-  if (sessions.size >= MAX_SESSIONS) {
-    const evicted = evictOldest();
-    if (!evicted) {
-      throw new Error(`session pool exhausted (MAX_SESSIONS=${MAX_SESSIONS}; all in-flight)`);
-    }
+  [xi]() {
+    this[Ce] = true, this.emit("abort", this[Jt]?.reason), this.destroy(this[Jt]?.reason);
   }
-  const session = {
-    id,
-    meta: { protocol: meta?.protocol, upstreamOrigin: meta?.upstreamOrigin, label: meta?.label },
-    stats: { requests: 0, tokensSaved: 0, inputTokens: 0, cachedTokens: 0, outputTokens: 0, cacheSamples: 0, lastInputTokens: 0, compressCreditTokens: 0, contextTokens: 0 },
-    metadata: {},
-    state: createInitialState(),
-    createdAt: Date.now(),
-    lastSeen: Date.now(),
-    blockContents: /* @__PURE__ */ new Map(),
-    inFlight: 0,
-    persisted: false
-  };
-  sessions.set(id, session);
-  return session;
-}
-function acquireInFlight(session) {
-  session.inFlight++;
-}
-function releaseInFlight(session) {
-  if (session.inFlight > 0) session.inFlight--;
-}
-function totalInFlight() {
-  let n = 0;
-  for (const s3 of sessions.values()) n += s3.inFlight;
-  return n;
-}
-async function withSessionLock(session, fn) {
-  const prev = session.lockChain ?? Promise.resolve();
-  let release;
-  const done = new Promise((resolve) => {
-    release = resolve;
-  });
-  session.lockChain = prev.then(() => done);
-  await prev;
-  try {
-    return await fn();
-  } finally {
-    release();
+  get aborted() {
+    return this[Ce];
   }
-}
-function listSessions() {
-  return [...sessions.values()].sort((a, b2) => b2.lastSeen - a.lastSeen);
-}
-function peekSession(id) {
-  return sessions.get(id);
-}
-function derivedLegacyCanonicalId(sessionId) {
-  return `pfa-${createHash5("sha256").update(`legacy:${sessionId}`).digest("hex").slice(0, 16)}`;
-}
-function canonicalIdOf(session) {
-  if (session.id.startsWith("pfa-")) return session.id;
-  const c = session.metadata.canonicalId;
-  if (typeof c === "string" && c.length > 0) return c;
-  return derivedLegacyCanonicalId(session.id);
-}
-function ensureCanonicalId(session) {
-  const id = canonicalIdOf(session);
-  if (!session.id.startsWith("pfa-") && session.metadata.canonicalId !== id) {
-    session.metadata.canonicalId = id;
-    markDirty(session);
+  set aborted(t) {
   }
-  return id;
-}
-function findSessionByCanonicalId(canonicalId) {
-  for (const s3 of sessions.values()) {
-    if (canonicalIdOf(s3) === canonicalId) return s3;
+  write(t, e, i) {
+    if (this[Ce]) return false;
+    if (this[Q]) throw new Error("write after end");
+    if (this[S]) return this.emit("error", Object.assign(new Error("Cannot call write after a stream was destroyed"), { code: "ERR_STREAM_DESTROYED" })), true;
+    typeof e == "function" && (i = e, e = "utf8"), e || (e = "utf8");
+    let r = this[Z] ? jt : Yr;
+    if (!this[L] && !Buffer.isBuffer(t)) {
+      if ($r(t)) t = Buffer.from(t.buffer, t.byteOffset, t.byteLength);
+      else if (Vr(t)) t = Buffer.from(t);
+      else if (typeof t != "string") throw new Error("Non-contiguous data written to non-objectMode stream");
+    }
+    return this[L] ? (this[g] && this[_] !== 0 && this[Ae](true), this[g] ? this.emit("data", t) : this[bi](t), this[_] !== 0 && this.emit("readable"), i && r(i), this[g]) : t.length ? (typeof t == "string" && !(e === this[z] && !this[Mt]?.lastNeed) && (t = Buffer.from(t, e)), Buffer.isBuffer(t) && this[z] && (t = this[Mt].write(t)), this[g] && this[_] !== 0 && this[Ae](true), this[g] ? this.emit("data", t) : this[bi](t), this[_] !== 0 && this.emit("readable"), i && r(i), this[g]) : (this[_] !== 0 && this.emit("readable"), i && r(i), this[g]);
   }
-  return void 0;
-}
-function snapshotMessages(session, messages) {
-  if (messages.length > 0) {
-    session.lastMessages = messages;
-    session.lastMessagesFolded = false;
+  read(t) {
+    if (this[S]) return null;
+    if (this[C] = false, this[_] === 0 || t === 0 || t && t > this[_]) return this[J](), null;
+    this[L] && (t = null), this[b].length > 1 && !this[L] && (this[b] = [this[z] ? this[b].join("") : Buffer.concat(this[b], this[_])]);
+    let e = this[Ns](t || null, this[b][0]);
+    return this[J](), e;
   }
-}
-function markDirty(session) {
-  getStore().scheduleSave(session);
-}
-function cacheBlockContent(session, blockId, content) {
-  session.blockContents.set(blockId, content);
-}
-function resetSessionCompression(session) {
-  session.state = createInitialState();
-  session.blockContents.clear();
-  session.stats.lastInputTokens = 0;
-  delete session.stats.lastInputTokensSource;
-  session.stats.localInputEstimate = 0;
-  session.stats.contextTokens = 0;
-  session.metadata.nativeCompactionAt = Date.now();
-  markDirty(session);
-}
-function markNativeCompactionBoundary(session) {
-  session.metadata.nativeCompactionBoundary = {
-    at: Date.now(),
-    pendingRebase: true
-  };
-  markDirty(session);
-}
-function reconcileNativeCompactionBoundary(session) {
-  const boundary = session.metadata.nativeCompactionBoundary;
-  if (!boundary || typeof boundary !== "object" || !boundary.pendingRebase) {
-    return false;
+  [Ns](t, e) {
+    if (this[L]) this[Ie]();
+    else {
+      let i = e;
+      t === i.length || t === null ? this[Ie]() : typeof i == "string" ? (this[b][0] = i.slice(t), e = i.slice(0, t), this[_] -= t) : (this[b][0] = i.subarray(t), e = i.subarray(0, t), this[_] -= t);
+    }
+    return this.emit("data", e), !this[b].length && !this[Q] && this.emit("drain"), e;
   }
-  resetSessionCompression(session);
-  session.metadata.nativeCompactionBoundary = {
-    ...boundary,
-    pendingRebase: false,
-    rebasedAt: Date.now()
-  };
-  markDirty(session);
-  return true;
-}
-function markCompactionBoundary(session) {
-  session.metadata.compactionBoundary = {
-    at: Date.now(),
-    pending: true
-  };
-  markDirty(session);
-}
-function readPreCompactionArchive(session) {
-  const raw = session.metadata.preCompactionArchive;
-  if (raw && typeof raw === "object" && !Array.isArray(raw)) {
-    return raw;
+  end(t, e, i) {
+    return typeof t == "function" && (i = t, t = void 0), typeof e == "function" && (i = e, e = "utf8"), t !== void 0 && this.write(t, e), i && this.once("end", i), this[Q] = true, this.writable = false, (this[g] || !this[Qt]) && this[J](), this;
   }
-  return {};
-}
-function preCompactionArchiveOf(session) {
-  return readPreCompactionArchive(session);
-}
-function applyCompactionArchive(session, activeBefore, liveRawIds, log2) {
-  const boundary = session.metadata.compactionBoundary;
-  if (!boundary || typeof boundary !== "object" || !boundary.pending) {
-    return;
+  [Bt]() {
+    this[S] || (!this[Rt] && !this[N].length && (this[C] = true), this[Qt] = false, this[g] = true, this.emit("resume"), this[b].length ? this[Ae]() : this[Q] ? this[J]() : this.emit("drain"));
   }
-  const activeAfter = new Set(session.state.blocks.filter((b2) => b2.active).map((b2) => b2.blockId));
-  const deactivated = [...activeBefore].filter((id) => !activeAfter.has(id));
-  if (deactivated.length > 0) {
-    const archive = readPreCompactionArchive(session);
-    const at2 = Date.now();
-    for (const id of deactivated) {
-      archive[id] = { at: at2, reason: "content replaced by client native compaction summary" };
-    }
-    session.metadata.preCompactionArchive = archive;
+  resume() {
+    return this[Bt]();
   }
-  const { byRaw, byRef } = session.state.messageRefs;
-  const prunedByRaw = {};
-  for (const [rawId, ref] of Object.entries(byRaw)) {
-    if (liveRawIds.has(rawId)) prunedByRaw[rawId] = ref;
+  pause() {
+    this[g] = false, this[Qt] = true, this[C] = false;
   }
-  const prunedByRef = {};
-  for (const [ref, rawId] of Object.entries(byRef)) {
-    if (liveRawIds.has(rawId)) prunedByRef[ref] = rawId;
+  get destroyed() {
+    return this[S];
   }
-  session.state.messageRefs.byRaw = prunedByRaw;
-  session.state.messageRefs.byRef = prunedByRef;
-  session.metadata.compactionBoundary = {
-    ...boundary,
-    pending: false,
-    archivedAt: Date.now(),
-    archivedBlocks: deactivated
-  };
-  markDirty(session);
-  log2("info", `[${session.id}] native compaction boundary: archived ${deactivated.length} pre-compaction block(s)${deactivated.length > 0 ? ` (${deactivated.join(", ")})` : ""}; pruned ref maps to ${prunedByRaw.length} live raw id(s)`);
-}
-var REWRITE_MIN_KNOWN_REFS = 20;
-var REWRITE_MAX_KNOWN_RATIO = 0.5;
-var REWRITE_MIN_INCOMING_TOTAL = 10;
-function detectUnannouncedHistoryRewrite(session, knownRefsBefore, liveRawIds) {
-  const knownBefore = knownRefsBefore.size;
-  let incomingTotal = 0;
-  let knownIncoming = 0;
-  for (const id of liveRawIds) {
-    incomingTotal++;
-    if (knownRefsBefore.has(id)) knownIncoming++;
+  get flowing() {
+    return this[g];
   }
-  const detected = knownBefore >= REWRITE_MIN_KNOWN_REFS && session.state.blocks.length > 0 && incomingTotal >= REWRITE_MIN_INCOMING_TOTAL && knownIncoming > 0 && knownIncoming / incomingTotal < REWRITE_MAX_KNOWN_RATIO;
-  return { detected, knownBefore, incomingTotal, knownIncoming };
-}
-function evictOldest() {
-  let oldestId;
-  let oldestSeen = Infinity;
-  for (const [id, s4] of sessions) {
-    if (s4.inFlight > 0) continue;
-    if (s4.lastSeen < oldestSeen) {
-      oldestSeen = s4.lastSeen;
-      oldestId = id;
-    }
+  get paused() {
+    return this[Qt];
   }
-  if (!oldestId) return false;
-  const s3 = sessions.get(oldestId);
-  const ok = getStore().flushSync(s3);
-  if (!ok && !s3.persisted) {
-    return false;
+  [bi](t) {
+    this[L] ? this[_] += 1 : this[_] += t.length, this[b].push(t);
   }
-  sessions.delete(oldestId);
-  return true;
-}
-async function flushAllSessions() {
-  await getStore().flushAll(sessions.values());
-}
-
-// src/update.ts
-import { readFile as readFile3, writeFile as writeFile2, mkdir as mkdir2, access, constants, rm as rm2, cp, unlink } from "fs/promises";
-import { execFile as execFile2 } from "child_process";
-import { realpathSync } from "fs";
-import crypto from "crypto";
-
-// node_modules/tar/dist/esm/index.min.js
-import Qr from "events";
-import I from "fs";
-import { EventEmitter as Di } from "events";
-import Cs from "stream";
-import { StringDecoder as Hr } from "string_decoder";
-import cr from "path";
-import Kt from "fs";
-import { dirname as Fn, parse as kn } from "path";
-import { EventEmitter as Dn } from "events";
-import zi from "assert";
-import { Buffer as Ot } from "buffer";
-import * as Ps from "zlib";
-import en from "zlib";
-import { posix as Zt } from "path";
-import { basename as _n } from "path";
-import mi from "fs";
-import X from "fs";
-import js from "path";
-import { win32 as Pn } from "path";
-import ar from "path";
-import Br from "fs";
-import co from "assert";
-import { randomBytes as Mr } from "crypto";
-import u from "fs";
-import R from "path";
-import pr from "fs";
-import wi from "fs";
-import we from "path";
-import k from "fs";
-import ro from "fs/promises";
-import Si from "path";
-import { join as xr } from "path";
-import v from "fs";
-import Pr from "path";
-var zr = Object.defineProperty;
-var Ur = (s3, t) => {
-  for (var e in t) zr(s3, e, { get: t[e], enumerable: true });
-};
-var Ds = typeof process == "object" && process ? process : { stdout: null, stderr: null };
-var Wr = (s3) => !!s3 && typeof s3 == "object" && (s3 instanceof A || s3 instanceof Cs || Gr(s3) || Zr(s3));
-var Gr = (s3) => !!s3 && typeof s3 == "object" && s3 instanceof Di && typeof s3.pipe == "function" && s3.pipe !== Cs.Writable.prototype.pipe;
-var Zr = (s3) => !!s3 && typeof s3 == "object" && s3 instanceof Di && typeof s3.write == "function" && typeof s3.end == "function";
-var Q = /* @__PURE__ */ Symbol("EOF");
-var J = /* @__PURE__ */ Symbol("maybeEmitEnd");
-var nt = /* @__PURE__ */ Symbol("emittedEnd");
-var De = /* @__PURE__ */ Symbol("emittingEnd");
-var qt = /* @__PURE__ */ Symbol("emittedError");
-var Ne = /* @__PURE__ */ Symbol("closed");
-var Ns = /* @__PURE__ */ Symbol("read");
-var Ae = /* @__PURE__ */ Symbol("flush");
-var As = /* @__PURE__ */ Symbol("flushChunk");
-var z = /* @__PURE__ */ Symbol("encoding");
-var Mt = /* @__PURE__ */ Symbol("decoder");
-var g = /* @__PURE__ */ Symbol("flowing");
-var Qt = /* @__PURE__ */ Symbol("paused");
-var Bt = /* @__PURE__ */ Symbol("resume");
-var b = /* @__PURE__ */ Symbol("buffer");
-var N = /* @__PURE__ */ Symbol("pipes");
-var _ = /* @__PURE__ */ Symbol("bufferLength");
-var bi = /* @__PURE__ */ Symbol("bufferPush");
-var Ie = /* @__PURE__ */ Symbol("bufferShift");
-var L = /* @__PURE__ */ Symbol("objectMode");
-var S = /* @__PURE__ */ Symbol("destroyed");
-var _i = /* @__PURE__ */ Symbol("error");
-var Oi = /* @__PURE__ */ Symbol("emitData");
-var Is = /* @__PURE__ */ Symbol("emitEnd");
-var Ti = /* @__PURE__ */ Symbol("emitEnd2");
-var Z = /* @__PURE__ */ Symbol("async");
-var xi = /* @__PURE__ */ Symbol("abort");
-var Ce = /* @__PURE__ */ Symbol("aborted");
-var Jt = /* @__PURE__ */ Symbol("signal");
-var Rt = /* @__PURE__ */ Symbol("dataListeners");
-var C = /* @__PURE__ */ Symbol("discarded");
-var jt = (s3) => Promise.resolve().then(s3);
-var Yr = (s3) => s3();
-var Kr = (s3) => s3 === "end" || s3 === "finish" || s3 === "prefinish";
-var Vr = (s3) => s3 instanceof ArrayBuffer || !!s3 && typeof s3 == "object" && s3.constructor && s3.constructor.name === "ArrayBuffer" && s3.byteLength >= 0;
-var $r = (s3) => !Buffer.isBuffer(s3) && ArrayBuffer.isView(s3);
-var Fe = class {
-  src;
-  dest;
-  opts;
-  ondrain;
-  constructor(t, e, i) {
-    this.src = t, this.dest = e, this.opts = i, this.ondrain = () => t[Bt](), this.dest.on("drain", this.ondrain);
+  [Ie]() {
+    return this[L] ? this[_] -= 1 : this[_] -= this[b][0].length, this[b].shift();
   }
-  unpipe() {
-    this.dest.removeListener("drain", this.ondrain);
+  [Ae](t = false) {
+    do
+      ;
+    while (this[As](this[Ie]()) && this[b].length);
+    !t && !this[b].length && !this[Q] && this.emit("drain");
   }
-  proxyErrors(t) {
+  [As](t) {
+    return this.emit("data", t), this[g];
   }
-  end() {
-    this.unpipe(), this.opts.end && this.dest.end();
+  pipe(t, e) {
+    if (this[S]) return t;
+    this[C] = false;
+    let i = this[nt];
+    return e = e || {}, t === Ds.stdout || t === Ds.stderr ? e.end = false : e.end = e.end !== false, e.proxyErrors = !!e.proxyErrors, i ? e.end && t.end() : (this[N].push(e.proxyErrors ? new Li(this, t, e) : new Fe(this, t, e)), this[Z] ? jt(() => this[Bt]()) : this[Bt]()), t;
   }
-};
-var Li = class extends Fe {
-  unpipe() {
-    this.src.removeListener("error", this.proxyErrors), super.unpipe();
-  }
-  constructor(t, e, i) {
-    super(t, e, i), this.proxyErrors = (r) => this.dest.emit("error", r), t.on("error", this.proxyErrors);
-  }
-};
-var Xr = (s3) => !!s3.objectMode;
-var qr = (s3) => !s3.objectMode && !!s3.encoding && s3.encoding !== "buffer";
-var A = class extends Di {
-  [g] = false;
-  [Qt] = false;
-  [N] = [];
-  [b] = [];
-  [L];
-  [z];
-  [Z];
-  [Mt];
-  [Q] = false;
-  [nt] = false;
-  [De] = false;
-  [Ne] = false;
-  [qt] = null;
-  [_] = 0;
-  [S] = false;
-  [Jt];
-  [Ce] = false;
-  [Rt] = 0;
-  [C] = false;
-  writable = true;
-  readable = true;
-  constructor(...t) {
-    let e = t[0] || {};
-    if (super(), e.objectMode && typeof e.encoding == "string") throw new TypeError("Encoding and objectMode may not be used together");
-    Xr(e) ? (this[L] = true, this[z] = null) : qr(e) ? (this[z] = e.encoding, this[L] = false) : (this[L] = false, this[z] = null), this[Z] = !!e.async, this[Mt] = this[z] ? new Hr(this[z]) : null, e && e.debugExposeBuffer === true && Object.defineProperty(this, "buffer", { get: () => this[b] }), e && e.debugExposePipes === true && Object.defineProperty(this, "pipes", { get: () => this[N] });
-    let { signal: i } = e;
-    i && (this[Jt] = i, i.aborted ? this[xi]() : i.addEventListener("abort", () => this[xi]()));
-  }
-  get bufferLength() {
-    return this[_];
-  }
-  get encoding() {
-    return this[z];
-  }
-  set encoding(t) {
-    throw new Error("Encoding must be set at instantiation time");
-  }
-  setEncoding(t) {
-    throw new Error("Encoding must be set at instantiation time");
-  }
-  get objectMode() {
-    return this[L];
-  }
-  set objectMode(t) {
-    throw new Error("objectMode must be set at instantiation time");
-  }
-  get async() {
-    return this[Z];
-  }
-  set async(t) {
-    this[Z] = this[Z] || !!t;
-  }
-  [xi]() {
-    this[Ce] = true, this.emit("abort", this[Jt]?.reason), this.destroy(this[Jt]?.reason);
-  }
-  get aborted() {
-    return this[Ce];
-  }
-  set aborted(t) {
-  }
-  write(t, e, i) {
-    if (this[Ce]) return false;
-    if (this[Q]) throw new Error("write after end");
-    if (this[S]) return this.emit("error", Object.assign(new Error("Cannot call write after a stream was destroyed"), { code: "ERR_STREAM_DESTROYED" })), true;
-    typeof e == "function" && (i = e, e = "utf8"), e || (e = "utf8");
-    let r = this[Z] ? jt : Yr;
-    if (!this[L] && !Buffer.isBuffer(t)) {
-      if ($r(t)) t = Buffer.from(t.buffer, t.byteOffset, t.byteLength);
-      else if (Vr(t)) t = Buffer.from(t);
-      else if (typeof t != "string") throw new Error("Non-contiguous data written to non-objectMode stream");
-    }
-    return this[L] ? (this[g] && this[_] !== 0 && this[Ae](true), this[g] ? this.emit("data", t) : this[bi](t), this[_] !== 0 && this.emit("readable"), i && r(i), this[g]) : t.length ? (typeof t == "string" && !(e === this[z] && !this[Mt]?.lastNeed) && (t = Buffer.from(t, e)), Buffer.isBuffer(t) && this[z] && (t = this[Mt].write(t)), this[g] && this[_] !== 0 && this[Ae](true), this[g] ? this.emit("data", t) : this[bi](t), this[_] !== 0 && this.emit("readable"), i && r(i), this[g]) : (this[_] !== 0 && this.emit("readable"), i && r(i), this[g]);
-  }
-  read(t) {
-    if (this[S]) return null;
-    if (this[C] = false, this[_] === 0 || t === 0 || t && t > this[_]) return this[J](), null;
-    this[L] && (t = null), this[b].length > 1 && !this[L] && (this[b] = [this[z] ? this[b].join("") : Buffer.concat(this[b], this[_])]);
-    let e = this[Ns](t || null, this[b][0]);
-    return this[J](), e;
-  }
-  [Ns](t, e) {
-    if (this[L]) this[Ie]();
-    else {
-      let i = e;
-      t === i.length || t === null ? this[Ie]() : typeof i == "string" ? (this[b][0] = i.slice(t), e = i.slice(0, t), this[_] -= t) : (this[b][0] = i.subarray(t), e = i.subarray(0, t), this[_] -= t);
-    }
-    return this.emit("data", e), !this[b].length && !this[Q] && this.emit("drain"), e;
-  }
-  end(t, e, i) {
-    return typeof t == "function" && (i = t, t = void 0), typeof e == "function" && (i = e, e = "utf8"), t !== void 0 && this.write(t, e), i && this.once("end", i), this[Q] = true, this.writable = false, (this[g] || !this[Qt]) && this[J](), this;
-  }
-  [Bt]() {
-    this[S] || (!this[Rt] && !this[N].length && (this[C] = true), this[Qt] = false, this[g] = true, this.emit("resume"), this[b].length ? this[Ae]() : this[Q] ? this[J]() : this.emit("drain"));
-  }
-  resume() {
-    return this[Bt]();
-  }
-  pause() {
-    this[g] = false, this[Qt] = true, this[C] = false;
-  }
-  get destroyed() {
-    return this[S];
-  }
-  get flowing() {
-    return this[g];
-  }
-  get paused() {
-    return this[Qt];
-  }
-  [bi](t) {
-    this[L] ? this[_] += 1 : this[_] += t.length, this[b].push(t);
-  }
-  [Ie]() {
-    return this[L] ? this[_] -= 1 : this[_] -= this[b][0].length, this[b].shift();
-  }
-  [Ae](t = false) {
-    do
-      ;
-    while (this[As](this[Ie]()) && this[b].length);
-    !t && !this[b].length && !this[Q] && this.emit("drain");
-  }
-  [As](t) {
-    return this.emit("data", t), this[g];
-  }
-  pipe(t, e) {
-    if (this[S]) return t;
-    this[C] = false;
-    let i = this[nt];
-    return e = e || {}, t === Ds.stdout || t === Ds.stderr ? e.end = false : e.end = e.end !== false, e.proxyErrors = !!e.proxyErrors, i ? e.end && t.end() : (this[N].push(e.proxyErrors ? new Li(this, t, e) : new Fe(this, t, e)), this[Z] ? jt(() => this[Bt]()) : this[Bt]()), t;
-  }
-  unpipe(t) {
-    let e = this[N].find((i) => i.dest === t);
-    e && (this[N].length === 1 ? (this[g] && this[Rt] === 0 && (this[g] = false), this[N] = []) : this[N].splice(this[N].indexOf(e), 1), e.unpipe());
+  unpipe(t) {
+    let e = this[N].find((i) => i.dest === t);
+    e && (this[N].length === 1 ? (this[g] && this[Rt] === 0 && (this[g] = false), this[N] = []) : this[N].splice(this[N].indexOf(e), 1), e.unpipe());
   }
   addListener(t, e) {
     return this.on(t, e);
@@ -61424,8 +60752,8 @@ function getCacheLedger(session) {
   return led;
 }
 function pushFold(led, f2) {
-  for (const open of led.folds) {
-    if (open.k === null) open.k = open.requestsAfter;
+  for (const open2 of led.folds) {
+    if (open2.k === null) open2.k = open2.requestsAfter;
   }
   led.foldSeqCounter += 1;
   led.folds.push({ ...f2, seq: led.foldSeqCounter, T: 0, hPct: null, requestsAfter: 0, k: null });
@@ -61739,11 +61067,11 @@ function looseCloseEnd(s3) {
 }
 function wrappedSpan(s3) {
   const broken = BROKEN_ATTRS.exec(s3);
-  const open = LONE_OPEN.exec(s3);
+  const open2 = LONE_OPEN.exec(s3);
   const spans = [];
   if (broken) spans.push({ start: broken.index, end: broken.index + broken[0].length });
-  if (open && OPEN_WITH_ATTRS.test(open[0]) && ((open[0].match(/"/g) ?? []).length & 1) === 1) {
-    spans.push({ start: open.index, end: open.index + open[0].length });
+  if (open2 && OPEN_WITH_ATTRS.test(open2[0]) && ((open2[0].match(/"/g) ?? []).length & 1) === 1) {
+    spans.push({ start: open2.index, end: open2.index + open2[0].length });
   }
   if (spans.length === 0) return null;
   const first = spans.reduce((a, b2) => b2.start < a.start ? b2 : a);
@@ -66904,16 +66232,16 @@ function extractTextTriggers(text) {
   let i = 0;
   let n = 0;
   while (i < text.length) {
-    const open = text.indexOf(ACP_TEXT_OPEN, i);
-    if (open === -1) {
+    const open2 = text.indexOf(ACP_TEXT_OPEN, i);
+    if (open2 === -1) {
       clean += text.slice(i);
       break;
     }
-    clean += text.slice(i, open);
-    const after = open + ACP_TEXT_OPEN.length;
+    clean += text.slice(i, open2);
+    const after = open2 + ACP_TEXT_OPEN.length;
     const close = text.indexOf(ACP_TEXT_CLOSE, after);
     if (close === -1) {
-      clean += text.slice(open);
+      clean += text.slice(open2);
       break;
     }
     const payload = text.slice(after, close).trim();
@@ -68159,12 +67487,16 @@ function conversationHeaderSource(headers) {
   }
   return void 0;
 }
-function instructionsFingerprintApplies(headers) {
-  const turnMeta = headers["x-codex-turn-metadata"];
-  if (typeof turnMeta === "string" && turnMeta.trim().length > 0) return true;
-  const ua = headers["user-agent"];
-  if (typeof ua === "string" && /codex/i.test(ua)) return true;
-  return conversationHeaderSource(headers)?.name === "x-claude-code-session-id";
+function instructionsFingerprintExempt(headers) {
+  const src = conversationHeaderSource(headers);
+  if (!src) return false;
+  if (src.name === "x-opencode-session") return true;
+  if (src.name === "x-session-affinity" && src.value.startsWith("ses_")) return true;
+  if (src.name === "x-bili-plugin-conversation") {
+    const flag = headers["x-bili-plugin-instructions-mutable"];
+    return typeof flag === "string" && flag.trim() === "1";
+  }
+  return false;
 }
 function affinityToken(identity) {
   return identity.clientProvided ? identity.value : void 0;
@@ -70151,240 +69483,912 @@ async function pipePluginResponsesWithStrip(stream2, res, session, log2, refetch
       log2?.("client aborted mid-stream");
       return;
     }
-    try {
-      const rest = flushArgTails() + flushTail("");
-      if (rest.length > 0) await write(rest);
-    } catch {
-    }
-    log("warn", `[plugin] upstream stream read failed (responses): ${String(e instanceof Error ? e.message : e)} \u2014 emitting in-band truncation signal`);
-    emitUpstreamTruncation(res, "responses", false, log2);
-    return;
-  } finally {
-    reader.releaseLock();
-    res.end();
+    try {
+      const rest = flushArgTails() + flushTail("");
+      if (rest.length > 0) await write(rest);
+    } catch {
+    }
+    log("warn", `[plugin] upstream stream read failed (responses): ${String(e instanceof Error ? e.message : e)} \u2014 emitting in-band truncation signal`);
+    emitUpstreamTruncation(res, "responses", false, log2);
+    return;
+  } finally {
+    reader.releaseLock();
+    res.end();
+  }
+}
+function rebuildEvent(rawEvent, ev) {
+  const lines = rawEvent.split("\n");
+  let replaced = false;
+  const out = [];
+  for (const l of lines) {
+    if (l.startsWith("data:")) {
+      if (replaced) continue;
+      replaced = true;
+      out.push(`data: ${JSON.stringify(ev)}`);
+      continue;
+    }
+    out.push(l);
+  }
+  return replaced ? out.join("\n") + "\n\n" : `data: ${JSON.stringify(ev)}
+
+`;
+}
+function stripGoogleChunk(obj) {
+  if (!obj || typeof obj !== "object") return obj;
+  const o = obj;
+  const candidates = o["candidates"];
+  if (!Array.isArray(candidates)) return obj;
+  o["candidates"] = candidates.map((c) => {
+    if (!c || typeof c !== "object") return c;
+    const cand = c;
+    const content = cand["content"];
+    if (!content || typeof content !== "object") return c;
+    const cont = content;
+    if (!Array.isArray(cont["parts"])) return c;
+    return {
+      ...cand,
+      content: {
+        ...cont,
+        parts: cont["parts"].map(
+          (p2) => p2 && typeof p2 === "object" && typeof p2["text"] === "string" ? { ...p2, text: stripAcpTags(p2["text"]) } : p2
+        )
+      }
+    };
+  });
+  return obj;
+}
+function stripGoogleText(obj) {
+  if (Array.isArray(obj)) {
+    obj.forEach((c) => {
+      stripGoogleChunk(c);
+    });
+    return obj;
+  }
+  return stripGoogleChunk(obj);
+}
+async function pipePluginJson(stream2, res, session, protocol) {
+  const reader = stream2.getReader();
+  const chunks = [];
+  try {
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      if (value && value.length > 0) chunks.push(Buffer.from(value));
+    }
+  } catch (e) {
+    if (!res.writableEnded) res.end();
+    if (res.destroyed || res.writableEnded) return;
+    throw e;
+  }
+  reader.releaseLock();
+  const text = Buffer.concat(chunks).toString("utf8");
+  let json;
+  let mutated = false;
+  try {
+    json = JSON.parse(text);
+    const usage = json["usage"];
+    if (session && usage) {
+      const input = num3(usage["prompt_tokens"]) ?? num3(usage["input_tokens"]);
+      if (input !== void 0) {
+        const cached = num3(usage["prompt_tokens_details"]?.["cached_tokens"]) ?? num3(usage["input_tokens_details"]?.["cached_tokens"]) ?? num3(usage["cache_read_input_tokens"]) ?? // #779: DeepSeek-style top-level field (openai wire)
+        num3(usage["prompt_cache_hit_tokens"]);
+        const creation = num3(usage["cache_creation_input_tokens"]);
+        applyUsageSample(session, {
+          inputTokens: input,
+          outputTokens: num3(usage["completion_tokens"]) ?? num3(usage["output_tokens"]),
+          cachedTokens: cached,
+          creationTokens: creation
+        }, protocol);
+        markDirty(session);
+      }
+    }
+    if (session && !usage) {
+      const sample = googleUsageSample(json);
+      if (sample && sample.inputTokens !== void 0) {
+        applyUsageSample(session, sample, protocol);
+        markDirty(session);
+      }
+    }
+  } catch {
+  }
+  if (json && (containsRenderTagText(text) || containsMarkerLineText(text))) {
+    json = protocol === "responses" ? stripResponsesText(json) : protocol === "anthropic" ? stripAnthropicText(json) : protocol === "google" ? stripGoogleText(json) : stripOpenaiChatText(json);
+    mutated = true;
+  }
+  if (mutated && json) {
+    res.end(Buffer.from(JSON.stringify(json), "utf8"));
+    return;
+  }
+  res.end(text);
+}
+
+// src/tunnel-guard.ts
+import { lookup } from "dns/promises";
+import { networkInterfaces } from "os";
+var BILI_TUNNEL_HEADER = "x-bili-tunnel";
+function parseIpLiteral(s3) {
+  const t = s3.trim().toLowerCase();
+  if (/^\d{1,3}(\.\d{1,3}){3}$/.test(t)) return t;
+  if (t.includes(":")) return t;
+  return null;
+}
+function normalizeIpLiteral(ip) {
+  const t = ip.trim().toLowerCase();
+  if (!t.startsWith("::ffff:")) return t;
+  const dotted = t.match(/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/);
+  if (dotted) return dotted[1];
+  const hex = t.match(/^::ffff:0*([0-9a-f]{1,4}):0*([0-9a-f]{1,4})$/);
+  if (hex) {
+    const hi2 = parseInt(hex[1], 16);
+    const lo2 = parseInt(hex[2], 16);
+    return `${hi2 >> 8 & 255}.${hi2 & 255}.${lo2 >> 8 & 255}.${lo2 & 255}`;
+  }
+  return t;
+}
+function classifyIp(ip) {
+  const lit = normalizeIpLiteral(parseIpLiteral(ip) ?? "");
+  if (!lit) return "public";
+  if (lit.includes(":")) {
+    if (lit === "::1" || lit === "::") return "loopback";
+    if (lit.startsWith("fe8") || lit.startsWith("fe9") || lit.startsWith("fea") || lit.startsWith("feb")) return "linkLocal";
+    if (lit.startsWith("fc") || lit.startsWith("fd")) return "private";
+    return "public";
+  }
+  const parts = lit.split(".").map(Number);
+  const [a, b2] = parts;
+  if (a === 127) return "loopback";
+  if (a === 169 && b2 === 254) return "linkLocal";
+  if (a === 10 || a === 0) return "private";
+  if (a === 172 && b2 >= 16 && b2 <= 31) return "private";
+  if (a === 192 && b2 === 168) return "private";
+  if (a === 100 && b2 >= 64 && b2 <= 127) return "private";
+  return "public";
+}
+var dnsResolveHost = async (host) => {
+  const res = await lookup(host, { all: true, family: 0 });
+  return res.map((r) => r.address);
+};
+var localAddrCache;
+function localMachineIps() {
+  const now = Date.now();
+  if (!localAddrCache || now - localAddrCache.at > 3e4) {
+    const ips = /* @__PURE__ */ new Set(["127.0.0.1", "::1"]);
+    for (const list of Object.values(networkInterfaces())) {
+      for (const ni2 of list ?? []) {
+        if (ni2.address) ips.add(ni2.address.toLowerCase());
+      }
+    }
+    for (let i = 0; i <= 255; i++) ips.add(`127.0.0.${i}`);
+    localAddrCache = { at: now, ips };
+  }
+  return localAddrCache.ips;
+}
+function allowlistHit(host, port, allowlist) {
+  const h = host.toLowerCase();
+  const hp = `${h}:${port}`;
+  return allowlist.some((e) => e === h || e === hp);
+}
+async function checkTunnelDestination(origin, ctx) {
+  let u2;
+  try {
+    u2 = new URL(origin);
+  } catch {
+    return { ok: false, code: "unresolvable", message: `invalid tunnel destination ${origin}` };
+  }
+  const host = u2.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  const port = u2.port ? Number(u2.port) : u2.protocol === "https:" ? 443 : 80;
+  let ips;
+  const literal = parseIpLiteral(host);
+  if (literal) {
+    ips = [normalizeIpLiteral(literal)];
+  } else {
+    try {
+      ips = await (ctx.resolveHost ?? dnsResolveHost)(host);
+    } catch {
+      return { ok: false, code: "unresolvable", message: `cannot resolve tunnel destination ${host}` };
+    }
+    if (ips.length === 0) return { ok: false, code: "unresolvable", message: `no addresses for tunnel destination ${host}` };
+  }
+  if (ctx.selfPort !== void 0 && port === ctx.selfPort) {
+    const mine = (ctx.localIps ?? localMachineIps)();
+    if (ips.some((ip) => ip === "0.0.0.0" || ip === "::" || mine.has(ip.toLowerCase()) || mine.has(`::ffff:${ip.toLowerCase()}`))) {
+      return { ok: false, code: "self", message: "the bili tunnel may not target the proxy itself" };
+    }
+  }
+  const classes = ips.map((ip) => classifyIp(ip));
+  if (classes.includes("linkLocal")) {
+    return { ok: false, code: "linkLocal", message: "link-local / metadata destinations are blocked from the bili tunnel" };
+  }
+  if (!classes.every((c) => c === "public")) {
+    if (ctx.clientLoopback) return { ok: true };
+    if (allowlistHit(host, port, ctx.allowlist)) return { ok: true };
+    return {
+      ok: false,
+      code: "privateRemote",
+      message: `tunnel destination ${host} resolves to a loopback/private address; remote clients may only reach it via BILI_TUNNEL_ALLOWED_HOSTS`
+    };
+  }
+  return { ok: true };
+}
+function tunnelAllowlistFromEnv(env = process.env) {
+  const raw = env.BILI_TUNNEL_ALLOWED_HOSTS ?? "";
+  return raw.split(",").map((s3) => s3.trim().toLowerCase()).filter((s3) => s3.length > 0);
+}
+
+// src/content-encoding.ts
+import { createBrotliDecompress, createGunzip, createInflate, createInflateRaw } from "zlib";
+
+// node_modules/fzstd/esm/index.mjs
+var ab = ArrayBuffer;
+var u8 = Uint8Array;
+var u16 = Uint16Array;
+var i16 = Int16Array;
+var i32 = Int32Array;
+var slc = function(v2, s3, e) {
+  if (u8.prototype.slice)
+    return u8.prototype.slice.call(v2, s3, e);
+  if (s3 == null || s3 < 0)
+    s3 = 0;
+  if (e == null || e > v2.length)
+    e = v2.length;
+  var n = new u8(e - s3);
+  n.set(v2.subarray(s3, e));
+  return n;
+};
+var fill = function(v2, n, s3, e) {
+  if (u8.prototype.fill)
+    return u8.prototype.fill.call(v2, n, s3, e);
+  if (s3 == null || s3 < 0)
+    s3 = 0;
+  if (e == null || e > v2.length)
+    e = v2.length;
+  for (; s3 < e; ++s3)
+    v2[s3] = n;
+  return v2;
+};
+var cpw = function(v2, t, s3, e) {
+  if (u8.prototype.copyWithin)
+    return u8.prototype.copyWithin.call(v2, t, s3, e);
+  if (s3 == null || s3 < 0)
+    s3 = 0;
+  if (e == null || e > v2.length)
+    e = v2.length;
+  while (s3 < e) {
+    v2[t++] = v2[s3++];
+  }
+};
+var ec = [
+  "invalid zstd data",
+  "window size too large (>2046MB)",
+  "invalid block type",
+  "FSE accuracy too high",
+  "match distance too far back",
+  "unexpected EOF"
+];
+var err = function(ind, msg, nt2) {
+  var e = new Error(msg || ec[ind]);
+  e.code = ind;
+  if (Error.captureStackTrace)
+    Error.captureStackTrace(e, err);
+  if (!nt2)
+    throw e;
+  return e;
+};
+var rb = function(d, b2, n) {
+  var i = 0, o = 0;
+  for (; i < n; ++i)
+    o |= d[b2++] << (i << 3);
+  return o;
+};
+var b4 = function(d, b2) {
+  return (d[b2] | d[b2 + 1] << 8 | d[b2 + 2] << 16 | d[b2 + 3] << 24) >>> 0;
+};
+var rzfh = function(dat, w2) {
+  var n3 = dat[0] | dat[1] << 8 | dat[2] << 16;
+  if (n3 == 3126568 && dat[3] == 253) {
+    var flg = dat[4];
+    var ss2 = flg >> 5 & 1, cc = flg >> 2 & 1, df = flg & 3, fcf = flg >> 6;
+    if (flg & 8)
+      err(0);
+    var bt2 = 6 - ss2;
+    var db = df == 3 ? 4 : df;
+    var di2 = rb(dat, bt2, db);
+    bt2 += db;
+    var fsb = fcf ? 1 << fcf : ss2;
+    var fss = rb(dat, bt2, fsb) + (fcf == 1 && 256);
+    var ws2 = fss;
+    if (!ss2) {
+      var wb = 1 << 10 + (dat[5] >> 3);
+      ws2 = wb + (wb >> 3) * (dat[5] & 7);
+    }
+    if (ws2 > 2145386496)
+      err(1);
+    var buf = new u8((w2 == 1 ? fss || ws2 : w2 ? 0 : ws2) + 12);
+    buf[0] = 1, buf[4] = 4, buf[8] = 8;
+    return {
+      b: bt2 + fsb,
+      y: 0,
+      l: 0,
+      d: di2,
+      w: w2 && w2 != 1 ? w2 : buf.subarray(12),
+      e: ws2,
+      o: new i32(buf.buffer, 0, 3),
+      u: fss,
+      c: cc,
+      m: Math.min(131072, ws2)
+    };
+  } else if ((n3 >> 4 | dat[3] << 20) == 25481893) {
+    return b4(dat, 4) + 8;
+  }
+  err(0);
+};
+var msb = function(val) {
+  var bits = 0;
+  for (; 1 << bits <= val; ++bits)
+    ;
+  return bits - 1;
+};
+var rfse = function(dat, bt2, mal) {
+  var tpos = (bt2 << 3) + 4;
+  var al = (dat[bt2] & 15) + 5;
+  if (al > mal)
+    err(3);
+  var sz = 1 << al;
+  var probs = sz, sym = -1, re2 = -1, i = -1, ht2 = sz;
+  var buf = new ab(512 + (sz << 2));
+  var freq = new i16(buf, 0, 256);
+  var dstate = new u16(buf, 0, 256);
+  var nstate = new u16(buf, 512, sz);
+  var bb1 = 512 + (sz << 1);
+  var syms = new u8(buf, bb1, sz);
+  var nbits = new u8(buf, bb1 + sz);
+  while (sym < 255 && probs > 0) {
+    var bits = msb(probs + 1);
+    var cbt = tpos >> 3;
+    var msk = (1 << bits + 1) - 1;
+    var val = (dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (tpos & 7) & msk;
+    var msk1fb = (1 << bits) - 1;
+    var msv = msk - probs - 1;
+    var sval = val & msk1fb;
+    if (sval < msv)
+      tpos += bits, val = sval;
+    else {
+      tpos += bits + 1;
+      if (val > msk1fb)
+        val -= msv;
+    }
+    freq[++sym] = --val;
+    if (val == -1) {
+      probs += val;
+      syms[--ht2] = sym;
+    } else
+      probs -= val;
+    if (!val) {
+      do {
+        var rbt = tpos >> 3;
+        re2 = (dat[rbt] | dat[rbt + 1] << 8) >> (tpos & 7) & 3;
+        tpos += 2;
+        sym += re2;
+      } while (re2 == 3);
+    }
+  }
+  if (sym > 255 || probs)
+    err(0);
+  var sympos = 0;
+  var sstep = (sz >> 1) + (sz >> 3) + 3;
+  var smask = sz - 1;
+  for (var s3 = 0; s3 <= sym; ++s3) {
+    var sf = freq[s3];
+    if (sf < 1) {
+      dstate[s3] = -sf;
+      continue;
+    }
+    for (i = 0; i < sf; ++i) {
+      syms[sympos] = s3;
+      do {
+        sympos = sympos + sstep & smask;
+      } while (sympos >= ht2);
+    }
+  }
+  if (sympos)
+    err(0);
+  for (i = 0; i < sz; ++i) {
+    var ns2 = dstate[syms[i]]++;
+    var nb = nbits[i] = al - msb(ns2);
+    nstate[i] = (ns2 << nb) - sz;
+  }
+  return [tpos + 7 >> 3, {
+    b: al,
+    s: syms,
+    n: nbits,
+    t: nstate
+  }];
+};
+var rhu = function(dat, bt2) {
+  var i = 0, wc = -1;
+  var buf = new u8(292), hb = dat[bt2];
+  var hw = buf.subarray(0, 256);
+  var rc = buf.subarray(256, 268);
+  var ri2 = new u16(buf.buffer, 268);
+  if (hb < 128) {
+    var _a = rfse(dat, bt2 + 1, 6), ebt = _a[0], fdt = _a[1];
+    bt2 += hb;
+    var epos = ebt << 3;
+    var lb = dat[bt2];
+    if (!lb)
+      err(0);
+    var st1 = 0, st2 = 0, btr1 = fdt.b, btr2 = btr1;
+    var fpos = (++bt2 << 3) - 8 + msb(lb);
+    for (; ; ) {
+      fpos -= btr1;
+      if (fpos < epos)
+        break;
+      var cbt = fpos >> 3;
+      st1 += (dat[cbt] | dat[cbt + 1] << 8) >> (fpos & 7) & (1 << btr1) - 1;
+      hw[++wc] = fdt.s[st1];
+      fpos -= btr2;
+      if (fpos < epos)
+        break;
+      cbt = fpos >> 3;
+      st2 += (dat[cbt] | dat[cbt + 1] << 8) >> (fpos & 7) & (1 << btr2) - 1;
+      hw[++wc] = fdt.s[st2];
+      btr1 = fdt.n[st1];
+      st1 = fdt.t[st1];
+      btr2 = fdt.n[st2];
+      st2 = fdt.t[st2];
+    }
+    if (++wc > 255)
+      err(0);
+  } else {
+    wc = hb - 127;
+    for (; i < wc; i += 2) {
+      var byte = dat[++bt2];
+      hw[i] = byte >> 4;
+      hw[i + 1] = byte & 15;
+    }
+    ++bt2;
+  }
+  var wes = 0;
+  for (i = 0; i < wc; ++i) {
+    var wt2 = hw[i];
+    if (wt2 > 11)
+      err(0);
+    wes += wt2 && 1 << wt2 - 1;
+  }
+  var mb = msb(wes) + 1;
+  var ts2 = 1 << mb;
+  var rem = ts2 - wes;
+  if (rem & rem - 1)
+    err(0);
+  hw[wc++] = msb(rem) + 1;
+  for (i = 0; i < wc; ++i) {
+    var wt2 = hw[i];
+    ++rc[hw[i] = wt2 && mb + 1 - wt2];
+  }
+  var hbuf = new u8(ts2 << 1);
+  var syms = hbuf.subarray(0, ts2), nb = hbuf.subarray(ts2);
+  ri2[mb] = 0;
+  for (i = mb; i > 0; --i) {
+    var pv = ri2[i];
+    fill(nb, i, pv, ri2[i - 1] = pv + rc[i] * (1 << mb - i));
+  }
+  if (ri2[0] != ts2)
+    err(0);
+  for (i = 0; i < wc; ++i) {
+    var bits = hw[i];
+    if (bits) {
+      var code = ri2[bits];
+      fill(syms, i, code, ri2[bits] = code + (1 << mb - bits));
+    }
+  }
+  return [bt2, {
+    n: nb,
+    b: mb,
+    s: syms
+  }];
+};
+var dllt = rfse(/* @__PURE__ */ new u8([
+  81,
+  16,
+  99,
+  140,
+  49,
+  198,
+  24,
+  99,
+  12,
+  33,
+  196,
+  24,
+  99,
+  102,
+  102,
+  134,
+  70,
+  146,
+  4
+]), 0, 6)[1];
+var dmlt = rfse(/* @__PURE__ */ new u8([
+  33,
+  20,
+  196,
+  24,
+  99,
+  140,
+  33,
+  132,
+  16,
+  66,
+  8,
+  33,
+  132,
+  16,
+  66,
+  8,
+  33,
+  68,
+  68,
+  68,
+  68,
+  68,
+  68,
+  68,
+  68,
+  36,
+  9
+]), 0, 6)[1];
+var doct = rfse(/* @__PURE__ */ new u8([
+  32,
+  132,
+  16,
+  66,
+  102,
+  70,
+  68,
+  68,
+  68,
+  68,
+  36,
+  73,
+  2
+]), 0, 5)[1];
+var b2bl = function(b2, s3) {
+  var len = b2.length, bl = new i32(len);
+  for (var i = 0; i < len; ++i) {
+    bl[i] = s3;
+    s3 += 1 << b2[i];
+  }
+  return bl;
+};
+var llb = /* @__PURE__ */ new u8((/* @__PURE__ */ new i32([
+  0,
+  0,
+  0,
+  0,
+  16843009,
+  50528770,
+  134678020,
+  202050057,
+  269422093
+])).buffer, 0, 36);
+var llbl = /* @__PURE__ */ b2bl(llb, 0);
+var mlb = /* @__PURE__ */ new u8((/* @__PURE__ */ new i32([
+  0,
+  0,
+  0,
+  0,
+  0,
+  0,
+  0,
+  0,
+  16843009,
+  50528770,
+  117769220,
+  185207048,
+  252579084,
+  16
+])).buffer, 0, 53);
+var mlbl = /* @__PURE__ */ b2bl(mlb, 3);
+var dhu = function(dat, out, hu) {
+  var len = dat.length, ss2 = out.length, lb = dat[len - 1], msk = (1 << hu.b) - 1, eb = -hu.b;
+  if (!lb)
+    err(0);
+  var st2 = 0, btr = hu.b, pos = (len << 3) - 8 + msb(lb) - btr, i = -1;
+  for (; pos > eb && i < ss2; ) {
+    var cbt = pos >> 3;
+    var val = (dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (pos & 7);
+    st2 = (st2 << btr | val) & msk;
+    out[++i] = hu.s[st2];
+    pos -= btr = hu.n[st2];
+  }
+  if (pos != eb || i + 1 != ss2)
+    err(0);
+};
+var dhu4 = function(dat, out, hu) {
+  var bt2 = 6;
+  var ss2 = out.length, sz1 = ss2 + 3 >> 2, sz2 = sz1 << 1, sz3 = sz1 + sz2;
+  dhu(dat.subarray(bt2, bt2 += dat[0] | dat[1] << 8), out.subarray(0, sz1), hu);
+  dhu(dat.subarray(bt2, bt2 += dat[2] | dat[3] << 8), out.subarray(sz1, sz2), hu);
+  dhu(dat.subarray(bt2, bt2 += dat[4] | dat[5] << 8), out.subarray(sz2, sz3), hu);
+  dhu(dat.subarray(bt2), out.subarray(sz3), hu);
+};
+var rzb = function(dat, st2, out) {
+  var _a;
+  var bt2 = st2.b;
+  var b0 = dat[bt2], btype = b0 >> 1 & 3;
+  st2.l = b0 & 1;
+  var sz = b0 >> 3 | dat[bt2 + 1] << 5 | dat[bt2 + 2] << 13;
+  var ebt = (bt2 += 3) + sz;
+  if (btype == 1) {
+    if (bt2 >= dat.length)
+      return;
+    st2.b = bt2 + 1;
+    if (out) {
+      fill(out, dat[bt2], st2.y, st2.y += sz);
+      return out;
+    }
+    return fill(new u8(sz), dat[bt2]);
   }
-}
-function rebuildEvent(rawEvent, ev) {
-  const lines = rawEvent.split("\n");
-  let replaced = false;
-  const out = [];
-  for (const l of lines) {
-    if (l.startsWith("data:")) {
-      if (replaced) continue;
-      replaced = true;
-      out.push(`data: ${JSON.stringify(ev)}`);
-      continue;
+  if (ebt > dat.length)
+    return;
+  if (btype == 0) {
+    st2.b = ebt;
+    if (out) {
+      out.set(dat.subarray(bt2, ebt), st2.y);
+      st2.y += sz;
+      return out;
     }
-    out.push(l);
-  }
-  return replaced ? out.join("\n") + "\n\n" : `data: ${JSON.stringify(ev)}
-
-`;
-}
-function stripGoogleChunk(obj) {
-  if (!obj || typeof obj !== "object") return obj;
-  const o = obj;
-  const candidates = o["candidates"];
-  if (!Array.isArray(candidates)) return obj;
-  o["candidates"] = candidates.map((c) => {
-    if (!c || typeof c !== "object") return c;
-    const cand = c;
-    const content = cand["content"];
-    if (!content || typeof content !== "object") return c;
-    const cont = content;
-    if (!Array.isArray(cont["parts"])) return c;
-    return {
-      ...cand,
-      content: {
-        ...cont,
-        parts: cont["parts"].map(
-          (p2) => p2 && typeof p2 === "object" && typeof p2["text"] === "string" ? { ...p2, text: stripAcpTags(p2["text"]) } : p2
-        )
-      }
-    };
-  });
-  return obj;
-}
-function stripGoogleText(obj) {
-  if (Array.isArray(obj)) {
-    obj.forEach((c) => {
-      stripGoogleChunk(c);
-    });
-    return obj;
+    return slc(dat, bt2, ebt);
   }
-  return stripGoogleChunk(obj);
-}
-async function pipePluginJson(stream2, res, session, protocol) {
-  const reader = stream2.getReader();
-  const chunks = [];
-  try {
-    for (; ; ) {
-      const { done, value } = await reader.read();
-      if (done) break;
-      if (value && value.length > 0) chunks.push(Buffer.from(value));
+  if (btype == 2) {
+    var b3 = dat[bt2], lbt = b3 & 3, sf = b3 >> 2 & 3;
+    var lss = b3 >> 4, lcs = 0, s4 = 0;
+    if (lbt < 2) {
+      if (sf & 1)
+        lss |= dat[++bt2] << 4 | (sf & 2 && dat[++bt2] << 12);
+      else
+        lss = b3 >> 3;
+    } else {
+      s4 = sf;
+      if (sf < 2)
+        lss |= (dat[++bt2] & 63) << 4, lcs = dat[bt2] >> 6 | dat[++bt2] << 2;
+      else if (sf == 2)
+        lss |= dat[++bt2] << 4 | (dat[++bt2] & 3) << 12, lcs = dat[bt2] >> 2 | dat[++bt2] << 6;
+      else
+        lss |= dat[++bt2] << 4 | (dat[++bt2] & 63) << 12, lcs = dat[bt2] >> 6 | dat[++bt2] << 2 | dat[++bt2] << 10;
     }
-  } catch (e) {
-    if (!res.writableEnded) res.end();
-    if (res.destroyed || res.writableEnded) return;
-    throw e;
-  }
-  reader.releaseLock();
-  const text = Buffer.concat(chunks).toString("utf8");
-  let json;
-  let mutated = false;
-  try {
-    json = JSON.parse(text);
-    const usage = json["usage"];
-    if (session && usage) {
-      const input = num3(usage["prompt_tokens"]) ?? num3(usage["input_tokens"]);
-      if (input !== void 0) {
-        const cached = num3(usage["prompt_tokens_details"]?.["cached_tokens"]) ?? num3(usage["input_tokens_details"]?.["cached_tokens"]) ?? num3(usage["cache_read_input_tokens"]) ?? // #779: DeepSeek-style top-level field (openai wire)
-        num3(usage["prompt_cache_hit_tokens"]);
-        const creation = num3(usage["cache_creation_input_tokens"]);
-        applyUsageSample(session, {
-          inputTokens: input,
-          outputTokens: num3(usage["completion_tokens"]) ?? num3(usage["output_tokens"]),
-          cachedTokens: cached,
-          creationTokens: creation
-        }, protocol);
-        markDirty(session);
+    ++bt2;
+    var buf = out ? out.subarray(st2.y, st2.y + st2.m) : new u8(st2.m);
+    var spl = buf.length - lss;
+    if (lbt == 0)
+      buf.set(dat.subarray(bt2, bt2 += lss), spl);
+    else if (lbt == 1)
+      fill(buf, dat[bt2++], spl);
+    else {
+      var hu = st2.h;
+      if (lbt == 2) {
+        var hud = rhu(dat, bt2);
+        lcs += bt2 - (bt2 = hud[0]);
+        st2.h = hu = hud[1];
+      } else if (!hu)
+        err(0);
+      (s4 ? dhu4 : dhu)(dat.subarray(bt2, bt2 += lcs), buf.subarray(spl), hu);
+    }
+    var ns2 = dat[bt2++];
+    if (ns2) {
+      if (ns2 == 255)
+        ns2 = (dat[bt2++] | dat[bt2++] << 8) + 32512;
+      else if (ns2 > 127)
+        ns2 = ns2 - 128 << 8 | dat[bt2++];
+      var scm = dat[bt2++];
+      if (scm & 3)
+        err(0);
+      var dts = [dmlt, doct, dllt];
+      for (var i = 2; i > -1; --i) {
+        var md = scm >> (i << 1) + 2 & 3;
+        if (md == 1) {
+          var rbuf = new u8([0, 0, dat[bt2++]]);
+          dts[i] = {
+            s: rbuf.subarray(2, 3),
+            n: rbuf.subarray(0, 1),
+            t: new u16(rbuf.buffer, 0, 1),
+            b: 0
+          };
+        } else if (md == 2) {
+          _a = rfse(dat, bt2, 9 - (i & 1)), bt2 = _a[0], dts[i] = _a[1];
+        } else if (md == 3) {
+          if (!st2.t)
+            err(0);
+          dts[i] = st2.t[i];
+        }
+      }
+      var _b = st2.t = dts, mlt = _b[0], oct = _b[1], llt = _b[2];
+      var lb = dat[ebt - 1];
+      if (!lb)
+        err(0);
+      var spos = (ebt << 3) - 8 + msb(lb) - llt.b, cbt = spos >> 3, oubt = 0;
+      var lst = (dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << llt.b) - 1;
+      cbt = (spos -= oct.b) >> 3;
+      var ost = (dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << oct.b) - 1;
+      cbt = (spos -= mlt.b) >> 3;
+      var mst = (dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << mlt.b) - 1;
+      for (++ns2; --ns2; ) {
+        var llc = llt.s[lst];
+        var lbtr = llt.n[lst];
+        var mlc = mlt.s[mst];
+        var mbtr = mlt.n[mst];
+        var ofc = oct.s[ost];
+        var obtr = oct.n[ost];
+        cbt = (spos -= ofc) >> 3;
+        var ofp = 1 << ofc;
+        var off = ofp + ((dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16 | dat[cbt + 3] << 24) >>> (spos & 7) & ofp - 1);
+        cbt = (spos -= mlb[mlc]) >> 3;
+        var ml = mlbl[mlc] + ((dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (spos & 7) & (1 << mlb[mlc]) - 1);
+        cbt = (spos -= llb[llc]) >> 3;
+        var ll = llbl[llc] + ((dat[cbt] | dat[cbt + 1] << 8 | dat[cbt + 2] << 16) >> (spos & 7) & (1 << llb[llc]) - 1);
+        cbt = (spos -= lbtr) >> 3;
+        lst = llt.t[lst] + ((dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << lbtr) - 1);
+        cbt = (spos -= mbtr) >> 3;
+        mst = mlt.t[mst] + ((dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << mbtr) - 1);
+        cbt = (spos -= obtr) >> 3;
+        ost = oct.t[ost] + ((dat[cbt] | dat[cbt + 1] << 8) >> (spos & 7) & (1 << obtr) - 1);
+        if (off > 3) {
+          st2.o[2] = st2.o[1];
+          st2.o[1] = st2.o[0];
+          st2.o[0] = off -= 3;
+        } else {
+          var idx = off - (ll != 0);
+          if (idx) {
+            off = idx == 3 ? st2.o[0] - 1 : st2.o[idx];
+            if (idx > 1)
+              st2.o[2] = st2.o[1];
+            st2.o[1] = st2.o[0];
+            st2.o[0] = off;
+          } else
+            off = st2.o[0];
+        }
+        for (var i = 0; i < ll; ++i) {
+          buf[oubt + i] = buf[spl + i];
+        }
+        oubt += ll, spl += ll;
+        var stin = oubt - off;
+        if (stin < 0) {
+          var len = -stin;
+          var bs2 = st2.e + stin;
+          if (len > ml)
+            len = ml;
+          for (var i = 0; i < len; ++i) {
+            buf[oubt + i] = st2.w[bs2 + i];
+          }
+          oubt += len, ml -= len, stin = 0;
+        }
+        for (var i = 0; i < ml; ++i) {
+          buf[oubt + i] = buf[stin + i];
+        }
+        oubt += ml;
       }
-    }
-    if (session && !usage) {
-      const sample = googleUsageSample(json);
-      if (sample && sample.inputTokens !== void 0) {
-        applyUsageSample(session, sample, protocol);
-        markDirty(session);
+      if (oubt != spl) {
+        while (spl < buf.length) {
+          buf[oubt++] = buf[spl++];
+        }
+      } else
+        oubt = buf.length;
+      if (out)
+        st2.y += oubt;
+      else
+        buf = slc(buf, 0, oubt);
+    } else if (out) {
+      st2.y += lss;
+      if (spl) {
+        for (var i = 0; i < lss; ++i) {
+          buf[i] = buf[spl + i];
+        }
       }
-    }
-  } catch {
-  }
-  if (json && (containsRenderTagText(text) || containsMarkerLineText(text))) {
-    json = protocol === "responses" ? stripResponsesText(json) : protocol === "anthropic" ? stripAnthropicText(json) : protocol === "google" ? stripGoogleText(json) : stripOpenaiChatText(json);
-    mutated = true;
-  }
-  if (mutated && json) {
-    res.end(Buffer.from(JSON.stringify(json), "utf8"));
-    return;
-  }
-  res.end(text);
-}
-
-// src/tunnel-guard.ts
-import { lookup } from "dns/promises";
-import { networkInterfaces } from "os";
-var BILI_TUNNEL_HEADER = "x-bili-tunnel";
-function parseIpLiteral(s3) {
-  const t = s3.trim().toLowerCase();
-  if (/^\d{1,3}(\.\d{1,3}){3}$/.test(t)) return t;
-  if (t.includes(":")) return t;
-  return null;
-}
-function normalizeIpLiteral(ip) {
-  const t = ip.trim().toLowerCase();
-  if (!t.startsWith("::ffff:")) return t;
-  const dotted = t.match(/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/);
-  if (dotted) return dotted[1];
-  const hex = t.match(/^::ffff:0*([0-9a-f]{1,4}):0*([0-9a-f]{1,4})$/);
-  if (hex) {
-    const hi2 = parseInt(hex[1], 16);
-    const lo2 = parseInt(hex[2], 16);
-    return `${hi2 >> 8 & 255}.${hi2 & 255}.${lo2 >> 8 & 255}.${lo2 & 255}`;
-  }
-  return t;
-}
-function classifyIp(ip) {
-  const lit = normalizeIpLiteral(parseIpLiteral(ip) ?? "");
-  if (!lit) return "public";
-  if (lit.includes(":")) {
-    if (lit === "::1" || lit === "::") return "loopback";
-    if (lit.startsWith("fe8") || lit.startsWith("fe9") || lit.startsWith("fea") || lit.startsWith("feb")) return "linkLocal";
-    if (lit.startsWith("fc") || lit.startsWith("fd")) return "private";
-    return "public";
+    } else if (spl)
+      buf = slc(buf, spl);
+    st2.b = ebt;
+    return buf;
   }
-  const parts = lit.split(".").map(Number);
-  const [a, b2] = parts;
-  if (a === 127) return "loopback";
-  if (a === 169 && b2 === 254) return "linkLocal";
-  if (a === 10 || a === 0) return "private";
-  if (a === 172 && b2 >= 16 && b2 <= 31) return "private";
-  if (a === 192 && b2 === 168) return "private";
-  if (a === 100 && b2 >= 64 && b2 <= 127) return "private";
-  return "public";
-}
-var dnsResolveHost = async (host) => {
-  const res = await lookup(host, { all: true, family: 0 });
-  return res.map((r) => r.address);
+  err(2);
 };
-var localAddrCache;
-function localMachineIps() {
-  const now = Date.now();
-  if (!localAddrCache || now - localAddrCache.at > 3e4) {
-    const ips = /* @__PURE__ */ new Set(["127.0.0.1", "::1"]);
-    for (const list of Object.values(networkInterfaces())) {
-      for (const ni2 of list ?? []) {
-        if (ni2.address) ips.add(ni2.address.toLowerCase());
-      }
-    }
-    for (let i = 0; i <= 255; i++) ips.add(`127.0.0.${i}`);
-    localAddrCache = { at: now, ips };
+var cct = function(bufs, ol) {
+  if (bufs.length == 1)
+    return bufs[0];
+  var buf = new u8(ol);
+  for (var i = 0, b2 = 0; i < bufs.length; ++i) {
+    var chk = bufs[i];
+    buf.set(chk, b2);
+    b2 += chk.length;
   }
-  return localAddrCache.ips;
-}
-function allowlistHit(host, port, allowlist) {
-  const h = host.toLowerCase();
-  const hp = `${h}:${port}`;
-  return allowlist.some((e) => e === h || e === hp);
-}
-async function checkTunnelDestination(origin, ctx) {
-  let u2;
-  try {
-    u2 = new URL(origin);
-  } catch {
-    return { ok: false, code: "unresolvable", message: `invalid tunnel destination ${origin}` };
+  return buf;
+};
+var Decompress = /* @__PURE__ */ (function() {
+  function Decompress2(ondata) {
+    this.ondata = ondata;
+    this.c = [];
+    this.l = 0;
+    this.z = 0;
   }
-  const host = u2.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-  const port = u2.port ? Number(u2.port) : u2.protocol === "https:" ? 443 : 80;
-  let ips;
-  const literal = parseIpLiteral(host);
-  if (literal) {
-    ips = [normalizeIpLiteral(literal)];
-  } else {
-    try {
-      ips = await (ctx.resolveHost ?? dnsResolveHost)(host);
-    } catch {
-      return { ok: false, code: "unresolvable", message: `cannot resolve tunnel destination ${host}` };
+  Decompress2.prototype.push = function(chunk, final) {
+    if (typeof this.s == "number") {
+      var sub = Math.min(chunk.length, this.s);
+      chunk = chunk.subarray(sub);
+      this.s -= sub;
     }
-    if (ips.length === 0) return { ok: false, code: "unresolvable", message: `no addresses for tunnel destination ${host}` };
-  }
-  if (ctx.selfPort !== void 0 && port === ctx.selfPort) {
-    const mine = (ctx.localIps ?? localMachineIps)();
-    if (ips.some((ip) => ip === "0.0.0.0" || ip === "::" || mine.has(ip.toLowerCase()) || mine.has(`::ffff:${ip.toLowerCase()}`))) {
-      return { ok: false, code: "self", message: "the bili tunnel may not target the proxy itself" };
+    var sl = chunk.length;
+    var ncs = sl + this.l;
+    if (!this.s) {
+      if (final) {
+        if (!ncs) {
+          this.ondata(new u8(0), true);
+          return;
+        }
+        if (ncs < 5)
+          err(5);
+      } else if (ncs < 18) {
+        this.c.push(chunk);
+        this.l = ncs;
+        return;
+      }
+      if (this.l) {
+        this.c.push(chunk);
+        chunk = cct(this.c, ncs);
+        this.c = [];
+        this.l = 0;
+      }
+      if (typeof (this.s = rzfh(chunk)) == "number")
+        return this.push(chunk, final);
     }
-  }
-  const classes = ips.map((ip) => classifyIp(ip));
-  if (classes.includes("linkLocal")) {
-    return { ok: false, code: "linkLocal", message: "link-local / metadata destinations are blocked from the bili tunnel" };
-  }
-  if (!classes.every((c) => c === "public")) {
-    if (ctx.clientLoopback) return { ok: true };
-    if (allowlistHit(host, port, ctx.allowlist)) return { ok: true };
-    return {
-      ok: false,
-      code: "privateRemote",
-      message: `tunnel destination ${host} resolves to a loopback/private address; remote clients may only reach it via BILI_TUNNEL_ALLOWED_HOSTS`
-    };
-  }
-  return { ok: true };
-}
-function tunnelAllowlistFromEnv(env = process.env) {
-  const raw = env.BILI_TUNNEL_ALLOWED_HOSTS ?? "";
-  return raw.split(",").map((s3) => s3.trim().toLowerCase()).filter((s3) => s3.length > 0);
-}
+    if (typeof this.s != "number") {
+      if (ncs < (this.z || 3)) {
+        if (final)
+          err(5);
+        this.c.push(chunk);
+        this.l = ncs;
+        return;
+      }
+      if (this.l) {
+        this.c.push(chunk);
+        chunk = cct(this.c, ncs);
+        this.c = [];
+        this.l = 0;
+      }
+      if (!this.z && ncs < (this.z = chunk[this.s.b] & 2 ? 4 : 3 + (chunk[this.s.b] >> 3 | chunk[this.s.b + 1] << 5 | chunk[this.s.b + 2] << 13))) {
+        if (final)
+          err(5);
+        this.c.push(chunk);
+        this.l = ncs;
+        return;
+      } else
+        this.z = 0;
+      for (; ; ) {
+        var blk = rzb(chunk, this.s);
+        if (!blk) {
+          if (final)
+            err(5);
+          var adc = chunk.subarray(this.s.b);
+          this.s.b = 0;
+          this.c.push(adc), this.l += adc.length;
+          return;
+        } else {
+          this.ondata(blk, false);
+          cpw(this.s.w, 0, blk.length);
+          this.s.w.set(blk, this.s.w.length - blk.length);
+        }
+        if (this.s.l) {
+          var rest = chunk.subarray(this.s.b);
+          this.s = this.s.c * 4;
+          this.push(rest, final);
+          return;
+        }
+      }
+    } else if (final)
+      err(5);
+  };
+  return Decompress2;
+})();
 
 // src/content-encoding.ts
-import { createBrotliDecompress, createGunzip, createInflate, createInflateRaw } from "zlib";
 var DecompressedTooLargeError = class extends Error {
   constructor(limit) {
     super(`decompressed request exceeds ${limit} bytes`);
@@ -71410,10 +71414,10 @@ ${bodyBuffer.toString("utf8")}`);
       // so upstream prefix caches and the UI label stay continuous
       // across main and subagent sessions.
       claudeSub !== void 0 && opts.subagentSplit !== false ? claudeSubagentSplit(anthropicIdentity?.value ?? anthropicSignal, req.headers, systemTextsForSplit) : anthropicIdentity?.value ?? anthropicSignal
-    ) : protocol === "openai" ? openaiIdentity?.value ?? openaiSignal : codexTurn ? codexTurn.value : instructionsFingerprintApplies(req.headers) ? subagentNamespace(
+    ) : protocol === "openai" ? openaiIdentity?.value ?? openaiSignal : codexTurn ? codexTurn.value : instructionsFingerprintExempt(req.headers) ? responsesIdentity?.value ?? conversationSignalResponses(parsed, convHeader) : subagentNamespace(
       responsesIdentity?.value ?? conversationSignalResponses(parsed, convHeader),
       parsed.instructions
-    ) : responsesIdentity?.value ?? conversationSignalResponses(parsed, convHeader);
+    );
     const clientProvided = protocol === "responses" ? responsesIdentity?.clientProvided ?? false : protocol === "openai" ? openaiIdentity?.clientProvided ?? false : protocol === "anthropic" ? anthropicIdentity?.clientProvided ?? false : protocol === "google" ? googleIdentity?.clientProvided ?? false : !!convHeader;
     let anonAffinity = null;
     if (!clientProvided) {