billion-context 0.1.34 → 0.1.35

package/dist/index.js

@@ -1029,7 +1029,7 @@ var require_util = __commonJS({
     var { kDestroyed, kBodyUsed, kListeners, kBody } = require_symbols();
     var { IncomingMessage } = __require("http");
     var stream2 = __require("stream");
-    var net2 = __require("net");
+    var net3 = __require("net");
     var { stringify } = __require("querystring");
     var { EventEmitter: EE } = __require("events");
     var timers = require_timers();
@@ -1141,14 +1141,14 @@ var require_util = __commonJS({
         }
         const port = url.port != null ? url.port : url.protocol === "https:" ? 443 : 80;
         let origin = url.origin != null ? url.origin : `${url.protocol || ""}//${url.hostname || ""}:${port}`;
-        let path8 = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
+        let path9 = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
         if (origin[origin.length - 1] === "/") {
           origin = origin.slice(0, origin.length - 1);
         }
-        if (path8 && path8[0] !== "/") {
-          path8 = `/${path8}`;
+        if (path9 && path9[0] !== "/") {
+          path9 = `/${path9}`;
         }
-        return new URL(`${origin}${path8}`);
+        return new URL(`${origin}${path9}`);
       }
       if (!isHttpOrHttpsPrefixed(url.origin || url.protocol)) {
         throw new InvalidArgumentError("Invalid URL protocol: the URL must start with `http:` or `https:`.");
@@ -1178,7 +1178,7 @@ var require_util = __commonJS({
       }
       assert(typeof host === "string");
       const servername = getHostname(host);
-      if (net2.isIP(servername)) {
+      if (net3.isIP(servername)) {
         return "";
       }
       return servername;
@@ -1969,9 +1969,9 @@ var require_diagnostics = __commonJS({
         "undici:client:sendHeaders",
         (evt) => {
           const {
-            request: { method, path: path8, origin }
+            request: { method, path: path9, origin }
           } = evt;
-          debugLog("sending request to %s %s%s", method, origin, path8);
+          debugLog("sending request to %s %s%s", method, origin, path9);
         }
       );
     }
@@ -1989,14 +1989,14 @@ var require_diagnostics = __commonJS({
         "undici:request:headers",
         (evt) => {
           const {
-            request: { method, path: path8, origin },
+            request: { method, path: path9, origin },
             response: { statusCode }
           } = evt;
           debugLog(
             "received response to %s %s%s - HTTP %d",
             method,
             origin,
-            path8,
+            path9,
             statusCode
           );
         }
@@ -2005,23 +2005,23 @@ var require_diagnostics = __commonJS({
         "undici:request:trailers",
         (evt) => {
           const {
-            request: { method, path: path8, origin }
+            request: { method, path: path9, origin }
           } = evt;
-          debugLog("trailers received from %s %s%s", method, origin, path8);
+          debugLog("trailers received from %s %s%s", method, origin, path9);
         }
       );
       diagnosticsChannel.subscribe(
         "undici:request:error",
         (evt) => {
           const {
-            request: { method, path: path8, origin },
+            request: { method, path: path9, origin },
             error
           } = evt;
           debugLog(
             "request to %s %s%s errored - %s",
             method,
             origin,
-            path8,
+            path9,
             error.message
           );
         }
@@ -2136,7 +2136,7 @@ var require_request = __commonJS({
     var kHandler = /* @__PURE__ */ Symbol("handler");
     var Request = class {
       constructor(origin, {
-        path: path8,
+        path: path9,
         method,
         body,
         headers,
@@ -2153,11 +2153,11 @@ var require_request = __commonJS({
         maxRedirections,
         typeOfService
       }, handler) {
-        if (typeof path8 !== "string") {
+        if (typeof path9 !== "string") {
           throw new InvalidArgumentError("path must be a string");
-        } else if (path8[0] !== "/" && !(path8.startsWith("http://") || path8.startsWith("https://")) && method !== "CONNECT") {
+        } else if (path9[0] !== "/" && !(path9.startsWith("http://") || path9.startsWith("https://")) && method !== "CONNECT") {
           throw new InvalidArgumentError("path must be an absolute URL or start with a slash");
-        } else if (invalidPathRegex.test(path8)) {
+        } else if (invalidPathRegex.test(path9)) {
           throw new InvalidArgumentError("invalid request path");
         }
         if (typeof method !== "string") {
@@ -2232,7 +2232,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? serializePathWithQuery(path8, query) : path8;
+        this.path = query ? serializePathWithQuery(path9, query) : path9;
         this.origin = origin;
         this.protocol = getProtocolFromUrlString(origin);
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
@@ -2841,7 +2841,7 @@ var require_dispatcher_base = __commonJS({
 var require_connect = __commonJS({
   "node_modules/undici/lib/core/connect.js"(exports, module) {
     "use strict";
-    var net2 = __require("net");
+    var net3 = __require("net");
     var assert = __require("assert");
     var util = require_util();
     var { InvalidArgumentError } = require_errors();
@@ -2924,7 +2924,7 @@ var require_connect = __commonJS({
         } else {
           assert(!httpSocket, "httpSocket can only be sent on TLS update");
           port = port || 80;
-          socket = net2.connect({
+          socket = net3.connect({
             highWaterMark: 64 * 1024,
             // Same as nodejs fs streams.
             ...options,
@@ -7415,7 +7415,7 @@ var require_client_h1 = __commonJS({
       return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && method !== "TRACE" && method !== "CONNECT";
     }
     function writeH1(client, request) {
-      const { method, path: path8, host, upgrade, blocking, reset } = request;
+      const { method, path: path9, host, upgrade, blocking, reset } = request;
       let { body, headers, contentLength } = request;
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH" || method === "QUERY" || method === "PROPFIND" || method === "PROPPATCH";
       if (util.isFormDataLike(body)) {
@@ -7493,7 +7493,7 @@ var require_client_h1 = __commonJS({
       if (socket.setTypeOfService) {
         socket.setTypeOfService(request.typeOfService);
       }
-      let header = `${method} ${path8} HTTP/1.1\r
+      let header = `${method} ${path9} HTTP/1.1\r
 `;
       if (typeof host === "string") {
         header += `host: ${host}\r
@@ -8146,7 +8146,7 @@ var require_client_h2 = __commonJS({
     function writeH2(client, request) {
       const requestTimeout = request.bodyTimeout ?? client[kBodyTimeout];
       const session = client[kHTTP2Session];
-      const { method, path: path8, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request;
+      const { method, path: path9, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request;
       let { body } = request;
       if (upgrade != null && upgrade !== "websocket") {
         util.errorRequest(client, request, new InvalidArgumentError(`Custom upgrade "${upgrade}" not supported over HTTP/2`));
@@ -8214,7 +8214,7 @@ var require_client_h2 = __commonJS({
           }
           headers[HTTP2_HEADER_METHOD] = "CONNECT";
           headers[HTTP2_HEADER_PROTOCOL] = "websocket";
-          headers[HTTP2_HEADER_PATH] = path8;
+          headers[HTTP2_HEADER_PATH] = path9;
           if (protocol === "ws:" || protocol === "wss:") {
             headers[HTTP2_HEADER_SCHEME] = protocol === "ws:" ? "http" : "https";
           } else {
@@ -8255,7 +8255,7 @@ var require_client_h2 = __commonJS({
         stream2.setTimeout(requestTimeout);
         return true;
       }
-      headers[HTTP2_HEADER_PATH] = path8;
+      headers[HTTP2_HEADER_PATH] = path9;
       headers[HTTP2_HEADER_SCHEME] = protocol === "http:" ? "http" : "https";
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH";
       if (body && typeof body.read === "function") {
@@ -8571,7 +8571,7 @@ var require_client = __commonJS({
   "node_modules/undici/lib/dispatcher/client.js"(exports, module) {
     "use strict";
     var assert = __require("assert");
-    var net2 = __require("net");
+    var net3 = __require("net");
     var http2 = __require("http");
     var util = require_util();
     var { ClientStats } = require_stats();
@@ -8726,7 +8726,7 @@ var require_client = __commonJS({
         if (maxRequestsPerClient != null && (!Number.isInteger(maxRequestsPerClient) || maxRequestsPerClient < 0)) {
           throw new InvalidArgumentError("maxRequestsPerClient must be a positive number");
         }
-        if (localAddress != null && (typeof localAddress !== "string" || net2.isIP(localAddress) === 0)) {
+        if (localAddress != null && (typeof localAddress !== "string" || net3.isIP(localAddress) === 0)) {
           throw new InvalidArgumentError("localAddress must be valid string IP address");
         }
         if (maxResponseSize != null && (!Number.isInteger(maxResponseSize) || maxResponseSize < -1)) {
@@ -8902,7 +8902,7 @@ var require_client = __commonJS({
         const idx = hostname.indexOf("]");
         assert(idx !== -1);
         const ip = hostname.substring(1, idx);
-        assert(net2.isIPv6(ip));
+        assert(net3.isIPv6(ip));
         hostname = ip;
       }
       client[kConnecting] = true;
@@ -9845,10 +9845,10 @@ var require_socks5_utils = __commonJS({
   "node_modules/undici/lib/core/socks5-utils.js"(exports, module) {
     "use strict";
     var { Buffer: Buffer2 } = __require("buffer");
-    var net2 = __require("net");
+    var net3 = __require("net");
     var { InvalidArgumentError } = require_errors();
     function parseAddress(address) {
-      if (net2.isIPv4(address)) {
+      if (net3.isIPv4(address)) {
         const parts = address.split(".").map(Number);
         return {
           type: 1,
@@ -9856,7 +9856,7 @@ var require_socks5_utils = __commonJS({
           buffer: Buffer2.from(parts)
         };
       }
-      if (net2.isIPv6(address)) {
+      if (net3.isIPv6(address)) {
         return {
           type: 4,
           // IPv6
@@ -9879,7 +9879,7 @@ var require_socks5_utils = __commonJS({
       if (address.includes(".")) {
         const lastColonIndex = address.lastIndexOf(":");
         const ipv4Part = address.slice(lastColonIndex + 1);
-        if (net2.isIPv4(ipv4Part)) {
+        if (net3.isIPv4(ipv4Part)) {
           const octets = ipv4Part.split(".").map(Number);
           const high = (octets[0] << 8 | octets[1]).toString(16);
           const low = (octets[2] << 8 | octets[3]).toString(16);
@@ -10598,10 +10598,10 @@ var require_proxy_agent = __commonJS({
         };
         const {
           origin,
-          path: path8 = "/",
+          path: path9 = "/",
           headers = {}
         } = opts;
-        opts.path = origin + path8;
+        opts.path = origin + path9;
         if (!("host" in headers) && !("Host" in headers)) {
           const { host } = new URL(origin);
           headers.host = host;
@@ -12684,20 +12684,20 @@ var require_mock_utils = __commonJS({
       }
       return normalizedQp;
     }
-    function safeUrl(path8) {
-      if (typeof path8 !== "string") {
-        return path8;
+    function safeUrl(path9) {
+      if (typeof path9 !== "string") {
+        return path9;
       }
-      const pathSegments = path8.split("?", 3);
+      const pathSegments = path9.split("?", 3);
       if (pathSegments.length !== 2) {
-        return path8;
+        return path9;
       }
       const qp = new URLSearchParams(pathSegments.pop());
       qp.sort();
       return [...pathSegments, qp.toString()].join("?");
     }
-    function matchKey(mockDispatch2, { path: path8, method, body, headers }) {
-      const pathMatch = matchValue(mockDispatch2.path, path8);
+    function matchKey(mockDispatch2, { path: path9, method, body, headers }) {
+      const pathMatch = matchValue(mockDispatch2.path, path9);
       const methodMatch = matchValue(mockDispatch2.method, method);
       const bodyMatch = typeof mockDispatch2.body !== "undefined" ? matchValue(mockDispatch2.body, body) : true;
       const headersMatch = matchHeaders(mockDispatch2, headers);
@@ -12722,8 +12722,8 @@ var require_mock_utils = __commonJS({
       const basePath = key.query ? serializePathWithQuery(key.path, key.query) : key.path;
       const resolvedPath = typeof basePath === "string" ? safeUrl(basePath) : basePath;
       const resolvedPathWithoutTrailingSlash = removeTrailingSlash(resolvedPath);
-      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path8, ignoreTrailingSlash }) => {
-        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path8)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path8), resolvedPath);
+      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path9, ignoreTrailingSlash }) => {
+        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path9)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path9), resolvedPath);
       });
       if (matchedMockDispatches.length === 0) {
         throw new MockNotMatchedError(`Mock dispatch not matched for path '${resolvedPath}'`);
@@ -12762,19 +12762,19 @@ var require_mock_utils = __commonJS({
         mockDispatches.splice(index, 1);
       }
     }
-    function removeTrailingSlash(path8) {
-      while (path8.endsWith("/")) {
-        path8 = path8.slice(0, -1);
+    function removeTrailingSlash(path9) {
+      while (path9.endsWith("/")) {
+        path9 = path9.slice(0, -1);
       }
-      if (path8.length === 0) {
-        path8 = "/";
+      if (path9.length === 0) {
+        path9 = "/";
       }
-      return path8;
+      return path9;
     }
     function buildKey(opts) {
-      const { path: path8, method, body, headers, query } = opts;
+      const { path: path9, method, body, headers, query } = opts;
       return {
-        path: path8,
+        path: path9,
         method,
         body,
         headers,
@@ -13464,10 +13464,10 @@ var require_pending_interceptors_formatter = __commonJS({
       }
       format(pendingInterceptors) {
         const withPrettyHeaders = pendingInterceptors.map(
-          ({ method, path: path8, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
+          ({ method, path: path9, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
             Method: method,
             Origin: origin,
-            Path: path8,
+            Path: path9,
             "Status code": statusCode,
             Persistent: persist ? PERSISTENT : NOT_PERSISTENT,
             Invocations: timesInvoked,
@@ -13549,9 +13549,9 @@ var require_mock_agent = __commonJS({
         const acceptNonStandardSearchParameters = this[kMockAgentAcceptsNonStandardSearchParameters];
         const dispatchOpts = { ...opts };
         if (acceptNonStandardSearchParameters && dispatchOpts.path) {
-          const [path8, searchParams] = dispatchOpts.path.split("?");
+          const [path9, searchParams] = dispatchOpts.path.split("?");
           const normalizedSearchParams = normalizeSearchParams(searchParams, acceptNonStandardSearchParameters);
-          dispatchOpts.path = `${path8}?${normalizedSearchParams}`;
+          dispatchOpts.path = `${path9}?${normalizedSearchParams}`;
         }
         return this[kAgent].dispatch(dispatchOpts, handler);
       }
@@ -13952,12 +13952,12 @@ var require_snapshot_recorder = __commonJS({
        * @return {Promise<void>} - Resolves when snapshots are loaded
        */
       async loadSnapshots(filePath) {
-        const path8 = filePath || this.#snapshotPath;
-        if (!path8) {
+        const path9 = filePath || this.#snapshotPath;
+        if (!path9) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile3(resolve(path8), "utf8");
+          const data = await readFile3(resolve(path9), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -13971,7 +13971,7 @@ var require_snapshot_recorder = __commonJS({
           if (error.code === "ENOENT") {
             this.#snapshots.clear();
           } else {
-            throw new UndiciError(`Failed to load snapshots from ${path8}`, { cause: error });
+            throw new UndiciError(`Failed to load snapshots from ${path9}`, { cause: error });
           }
         }
       }
@@ -13982,11 +13982,11 @@ var require_snapshot_recorder = __commonJS({
        * @returns {Promise<void>} - Resolves when snapshots are saved
        */
       async saveSnapshots(filePath) {
-        const path8 = filePath || this.#snapshotPath;
-        if (!path8) {
+        const path9 = filePath || this.#snapshotPath;
+        if (!path9) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
-        const resolvedPath = resolve(path8);
+        const resolvedPath = resolve(path9);
         await mkdir3(dirname6(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash, snapshot]) => ({
           hash,
@@ -14618,15 +14618,15 @@ var require_redirect_handler = __commonJS({
           return;
         }
         const { origin, pathname, search } = util.parseURL(new URL(this.location, this.opts.origin && new URL(this.opts.path, this.opts.origin)));
-        const path8 = search ? `${pathname}${search}` : pathname;
-        const redirectUrlString = `${origin}${path8}`;
+        const path9 = search ? `${pathname}${search}` : pathname;
+        const redirectUrlString = `${origin}${path9}`;
         for (const historyUrl of this.history) {
           if (historyUrl.toString() === redirectUrlString) {
             throw new InvalidArgumentError(`Redirect loop detected. Cannot redirect to ${origin}. This typically happens when using a Client or Pool with cross-origin redirects. Use an Agent for cross-origin redirects.`);
           }
         }
         this.opts.headers = cleanRequestHeaders(this.opts.headers, statusCode === 303, this.opts.origin !== origin);
-        this.opts.path = path8;
+        this.opts.path = path9;
         this.opts.origin = origin;
         this.opts.query = null;
       }
@@ -16395,10 +16395,10 @@ var require_cache_handler = __commonJS({
       }
       return locationUrl.pathname + locationUrl.search;
     }
-    function deleteCachedUri(store, cacheKey, path8) {
+    function deleteCachedUri(store, cacheKey, path9) {
       deleteCachedValue(store, {
         ...cacheKey,
-        path: path8
+        path: path9
       });
       for (let i = 0; i < util.safeHTTPMethods.length; i++) {
         const method = util.safeHTTPMethods[i];
@@ -16406,7 +16406,7 @@ var require_cache_handler = __commonJS({
           deleteCachedValue(store, {
             ...cacheKey,
             method,
-            path: path8
+            path: path9
           });
         }
       }
@@ -16417,9 +16417,9 @@ var require_cache_handler = __commonJS({
       }
       const values = Array.isArray(headerValue2) ? headerValue2 : [headerValue2];
       for (let i = 0; i < values.length; i++) {
-        const path8 = getSameOriginPath(cacheKey, values[i]);
-        if (path8 !== void 0) {
-          deleteCachedUri(store, cacheKey, path8);
+        const path9 = getSameOriginPath(cacheKey, values[i]);
+        if (path9 !== void 0) {
+          deleteCachedUri(store, cacheKey, path9);
         }
       }
     }
@@ -21297,11 +21297,11 @@ var require_fetch = __commonJS({
       function dispatch({ body }) {
         const url = requestCurrentURL(request);
         const agent = fetchParams.controller.dispatcher;
-        const path8 = url.pathname + url.search;
+        const path9 = url.pathname + url.search;
         const hasTrailingQuestionMark = url.search.length === 0 && url.href[url.href.length - url.hash.length - 1] === "?";
         return new Promise((resolve, reject) => agent.dispatch(
           {
-            path: hasTrailingQuestionMark ? `${path8}?` : path8,
+            path: hasTrailingQuestionMark ? `${path9}?` : path9,
             origin: url.origin,
             method: request.method,
             body: agent.isMockActive ? request.body && (request.body.source || request.body.stream) : body,
@@ -22248,9 +22248,9 @@ var require_util4 = __commonJS({
         }
       }
     }
-    function validateCookiePath(path8) {
-      for (let i = 0; i < path8.length; ++i) {
-        const code = path8.charCodeAt(i);
+    function validateCookiePath(path9) {
+      for (let i = 0; i < path9.length; ++i) {
+        const code = path9.charCodeAt(i);
         if (code < 32 || // exclude CTLs (0-31)
         code > 126 || // exclude DEL and non-ascii
         code === 59) {
@@ -25487,11 +25487,11 @@ var require_undici = __commonJS({
           if (typeof opts.path !== "string") {
             throw new InvalidArgumentError("invalid opts.path");
           }
-          let path8 = opts.path;
+          let path9 = opts.path;
           if (!opts.path.startsWith("/")) {
-            path8 = `/${path8}`;
+            path9 = `/${path9}`;
           }
-          url = new URL(util.parseOrigin(url).origin + path8);
+          url = new URL(util.parseOrigin(url).origin + path9);
         } else {
           if (!opts) {
             opts = typeof url === "object" ? url : {};
@@ -45886,7 +45886,7 @@ var log = (level, msg2) => {
     process.stderr.write(line);
   } catch {
   }
-  const s3 = getStream();
+  let s3 = getStream();
   if (s3) {
     if (bytesWritten >= MAX_BYTES) {
       try {
@@ -45894,6 +45894,7 @@ var log = (level, msg2) => {
       } catch {
       }
       stream = openStream(logPath);
+      s3 = stream;
     }
     try {
       s3.write(line);
@@ -46251,13 +46252,13 @@ function getUpstreamConnectionStatus() {
 }
 
 // src/config.ts
-function safeReadJson(path8) {
+function safeReadJson(path9) {
   try {
-    const raw = readFileSync(path8, "utf8").replace(/^\uFEFF/, "");
+    const raw = readFileSync(path9, "utf8").replace(/^\uFEFF/, "");
     return JSON.parse(raw);
   } catch (e) {
     if (e.code !== "ENOENT") {
-      log("error", `[acp-config] failed to parse ${path8}: ${String(e)}`);
+      log("error", `[acp-config] failed to parse ${path9}: ${String(e)}`);
     }
     return void 0;
   }
@@ -46303,6 +46304,16 @@ function resolveConfiguredContextLimit(routes, upstreamUrl, model) {
   }
   return void 0;
 }
+function resolveCompressProtocol(routes, upstreamUrl) {
+  if (!upstreamUrl) return void 0;
+  let bestKey = "";
+  for (const key of Object.keys(routes)) {
+    if (upstreamUrl === key || upstreamUrl.startsWith(key + "/")) {
+      if (key.length > bestKey.length) bestKey = key;
+    }
+  }
+  return bestKey ? routes[bestKey].compressProtocol : void 0;
+}
 function loadRoutes(env = process.env) {
   const fileConfig = loadConfigFile();
   const routes = {};
@@ -46392,7 +46403,10 @@ function loadOptions(env = process.env) {
     logFile: env.ACP_LOG_FILE !== void 0 ? env.ACP_LOG_FILE || void 0 : fileConfig.logFile,
     mitm: {
       enabled: (env.BILI_MITM ?? (fileConfig.mitm?.enabled === false ? "0" : "1")) !== "0",
-      domains: fileConfig.mitm?.domains ?? []
+      domains: dedupeDomains([
+        ...fileConfig.mitm?.domains ?? [],
+        ...splitCsv(env.BILI_MITM_DOMAINS)
+      ])
     }
   };
 }
@@ -46400,6 +46414,21 @@ function nonEmpty(value) {
   const trimmed = value?.trim();
   return trimmed ? trimmed : void 0;
 }
+function splitCsv(value) {
+  if (!value) return [];
+  return value.split(",").map((s3) => s3.trim()).filter((s3) => s3.length > 0);
+}
+function dedupeDomains(list) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const d of list) {
+    if (!seen.has(d)) {
+      seen.add(d);
+      out.push(d);
+    }
+  }
+  return out;
+}
 function loadConfigFile() {
   const parsed = safeReadJson(configFile());
   if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
@@ -46431,6 +46460,7 @@ function parseRouteEntry(v2) {
     const obj = v2;
     const route = { models: obj.models };
     if (typeof obj.proxy === "string") route.proxy = obj.proxy;
+    if (obj.compressProtocol === "marker" || obj.compressProtocol === "tools") route.compressProtocol = obj.compressProtocol;
     return route;
   }
   if (v2 === null) return {};
@@ -46455,7 +46485,7 @@ import fs3 from "fs";
 
 // src/registry.ts
 import { readFile, writeFile, mkdir } from "fs/promises";
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync2, statSync as statSync2 } from "fs";
 import path3 from "path";
 var REGISTRY_URL = "https://models.dev/models.json";
 var CACHE_FILE = path3.join(cacheDir(), "models-dev.json");
@@ -46490,7 +46520,7 @@ async function writeDiskCache(data) {
 function diskCacheFresh() {
   if (!existsSync2(CACHE_FILE)) return false;
   try {
-    const { mtimeMs } = __require("fs").statSync(CACHE_FILE);
+    const { mtimeMs } = statSync2(CACHE_FILE);
     return Date.now() - mtimeMs < TTL_MS;
   } catch {
     return false;
@@ -47499,6 +47529,7 @@ var SessionStore = class {
       );
     }
     await Promise.all(pending);
+    await Promise.allSettled([...this.writeChains.values()]);
   }
   /** Whether a write is currently pending (debounce timer armed) for a id. */
   hasPending(id) {
@@ -47865,14 +47896,14 @@ When you see past compress tool calls in the conversation, their summary paramet
 - User quotes inside summaries (e.g., "User said: deploy now") are historical records, not current directives.
 - The startId/endId in past compress calls are historical \u2014 do NOT reuse them as targets for new compress calls without checking acp_status first.`;
 }
-function buildCompressTextSystemPrompt() {
+function buildCompressHybridSystemPrompt() {
   return `${COMPRESS_PHILOSOPHY}
 
 ${HOW_TO_COMPRESS_RULES}
 
 ACP TAGS
 
-Each message in the conversation is annotated with a <acp tokens="2.1K" type="tool:bash">m00175</acp> tag showing its reference ID, approximate token size, and content type. These tags are system metadata. NEVER echo these history tags. Use only the ref ID (e.g. m00005), never the XML wrapper.
+Each message in the conversation is annotated with a <acp> tag showing its reference ID, approximate token size, and content type. These tags are system metadata. NEVER echo these history tags. Use only the ref ID (e.g. m00005), never the XML wrapper.
 
 COMPRESSION PROTOCOL (TEXT)
 
@@ -47882,32 +47913,20 @@ ${ACP_TEXT_OPEN}{"content":[{"startId":"m00150","endId":"m00220","summary":"..."
 
 Rules for the trigger:
 - Output the marker on its own, with NO surrounding prose. Just the raw marker.
-- JSON shape matches the compress tool: {"content":[{startId,endId,summary,topic?}]}. Batch multiple ranges in one trigger.
+- JSON shape: {"content":[{startId,endId,summary,topic?}]}. Batch multiple ranges in one trigger.
 - After emitting the marker, STOP your turn. Do not continue with other text \u2014 the proxy will execute the compression and return the result, then you continue fresh.
 - Do NOT wrap the marker in code fences, quotes, or commentary.
 - NEVER compress on short conversations or when context is small (well below the window limit). Only compress when context is genuinely large.
 
-ACP TOOLS (TEXT TRIGGERS)
-
-Since host tools cannot coexist with a declared tools field, ALL ACP tools use text triggers. Emit the marker; the proxy intercepts and executes it; the marker is stripped from what the user sees.
+ACP TOOLS (FUNCTION CALLS)
 
-1. acp_status \u2014 view context usage, compression state, and compressible ranges:
-   ${ACP_STATUS_OPEN}${ACP_STATUS_CLOSE}
-   No payload needed. Use this FIRST when unsure about context state.
+The proxy also provides these as real function tools you can call directly (they appear in your tool list). Call them like any other function; the proxy executes them and returns the result, then you continue.
 
-2. search_context \u2014 search compressed block summaries by keyword:
-   ${ACP_SEARCH_OPEN}{"query":"auth token refresh"}${ACP_SEARCH_CLOSE}
-   Use when you need details that may have been compressed away.
+- acp_status \u2014 view context usage, compression state, and compressible ranges. No arguments. Use this FIRST when unsure about context state.
+- search_context \u2014 search compressed block summaries by keyword. Arguments: {"query":"...","limit":5}.
+- decompress \u2014 restore compressed content for exact details. Arguments: {"blockId":"b5"} (optional "toFile":"/tmp/x.txt", "full":true).
 
-3. decompress \u2014 restore compressed content for exact details:
-   ${ACP_DECOMPRESS_OPEN}{"blockId":"b5"}${ACP_DECOMPRESS_CLOSE}
-   Optional: {"blockId":"b5","toFile":"/tmp/b5.txt"} to write to file instead.
-   Optional: {"blockId":"b5","full":true} to restore all the way to original messages.
-
-Rules for ALL triggers:
-- Output on its own, NO surrounding prose. Just the raw marker.
-- After emitting, STOP your turn. The proxy executes and returns the result.
-- Do NOT wrap in code fences, quotes, or commentary.`;
+Note: compress is ONLY available via the text marker above (it needs batch ranges + an immediate stop), NOT as a function tool.`;
 }
 var DECOMPRESS_TOOL_NAME = "decompress";
 var DECOMPRESS_TOOL_OPENAI = {
@@ -48011,6 +48030,11 @@ var ACP_TOOLS_RESPONSES = [
   SEARCH_CONTEXT_TOOL_RESPONSES,
   ACP_STATUS_TOOL_RESPONSES
 ];
+var ACP_READONLY_TOOLS_RESPONSES = [
+  DECOMPRESS_TOOL_RESPONSES,
+  SEARCH_CONTEXT_TOOL_RESPONSES,
+  ACP_STATUS_TOOL_RESPONSES
+];
 var PROXY_TOOL_NAMES = /* @__PURE__ */ new Set([
   COMPRESS_TOOL_NAME,
   DECOMPRESS_TOOL_NAME,
@@ -48165,7 +48189,7 @@ function applyRanges(ranges, ctx) {
     if (r.blocksCreated === 0) {
       const errs = r.errors.join("; ") || "no blocks created";
       ctx.log(`[acp-proxy: compress FAILED ${detail} \u2192 0 blocks. ${errs}]`);
-      return `[Compression FAILED: ${errs} Do not retry the same range.]`;
+      return `[Compression FAILED: ${errs}]`;
     }
     const warn = r.warnings.length > 0 ? ` ${r.warnings.join("; ")}` : "";
     const msg2 = `[Compressed ${detail} \u2192 ${r.blocksCreated} block(s), ~${r.tokensCompressed} tokens saved.${warn}]`;
@@ -48173,7 +48197,7 @@ function applyRanges(ranges, ctx) {
     return msg2;
   } catch (err2) {
     ctx.log(`[acp-proxy: compress failed: ${String(err2)}]`);
-    return `[Compression FAILED: ${String(err2)} Do not retry the same range.]`;
+    return `[Compression FAILED: ${String(err2)}]`;
   }
 }
 function rewriteJsonResponse(body, ctx) {
@@ -48581,6 +48605,7 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
         resolvedText = extracted.clean;
         allCalls = [...calls, ...extracted.calls];
       }
+      const functionCallIds = new Set(calls.map((c) => c.callId));
       if (ctx.textProtocol && resolvedText.length > 0) {
         yield adapter.emitText(resolvedText);
       } else if (!ctx.textProtocol && round > 1 && resolvedText.length > 0) {
@@ -48618,23 +48643,16 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
         if (realCalls > 0) ctx.log(`[acp-loop] round ${round}: ${realCalls} real tool call(s) forwarded to client`);
       }
       if (proxyResults.length > 0) {
-        if (resolvedText.length > 0) {
+        if (assistantText.length > 0) {
           coreMessages.push({
             id: `acp_loop_r${round}_asst`,
             role: "assistant",
             contentType: "text",
-            text: resolvedText
+            text: assistantText
           });
         }
         for (const pr2 of proxyResults) {
-          if (ctx.textProtocol) {
-            coreMessages.push({
-              id: `acp_loop_r${round}_marker_${pr2.callId}`,
-              role: "system",
-              contentType: "text",
-              text: buildVisibilityMarker(pr2.name, pr2.result)
-            });
-          } else {
+          if (functionCallIds.has(pr2.callId)) {
             coreMessages.push({
               id: `acp_loop_r${round}_asst_tc_${pr2.callId}`,
               role: "assistant",
@@ -48650,9 +48668,19 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
               toolCallId: pr2.callId,
               text: pr2.result
             });
+          } else {
+            coreMessages.push({
+              id: `acp_loop_r${round}_marker_${pr2.callId}`,
+              role: "system",
+              contentType: "text",
+              text: buildVisibilityMarker(pr2.name, pr2.result)
+            });
           }
         }
-        if (!ctx.textProtocol) {
+        const anyCompressFailed = proxyResults.some(
+          (pr2) => (pr2.name === "compress" || pr2.name === "decompress") && pr2.result.includes("FAILED")
+        );
+        if (!ctx.textProtocol && !anyCompressFailed) {
           const hidden = hideConsumedCompressCalls(ctx.session.state, coreMessages);
           if (hidden.hidden > 0) {
             ctx.log(`[acp-loop] round ${round} hideConsumed hid ${hidden.hidden} compress record(s)`);
@@ -48675,16 +48703,16 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
         yield adapter.emitCompletion({ finishReason: "length", usage });
         return;
       }
-      ctx.log(`[acp-loop] round ${round} saw mutating proxy tool; re-requesting`);
+      ctx.log(`[acp-loop] round ${round}: proxy tool executed; re-requesting so the model sees the result`);
       if (signal?.aborted) break;
       const newBody = adapter.buildRequest(coreMessages, systemPrompt, requestBody);
       if (process.env.ACP_DUMP_REQ !== "0" && ctx.debug) {
         try {
-          const fs5 = await import("fs");
+          const fs6 = await import("fs");
           const dumpDir = process.env.ACP_DUMP_DIR || `${process.env.HOME}/.local/state/billion-context/dumps`;
-          fs5.mkdirSync(dumpDir, { recursive: true });
+          fs6.mkdirSync(dumpDir, { recursive: true });
           const sid = ctx.session.id ?? "unknown";
-          fs5.writeFileSync(`${dumpDir}/req-${Date.now()}-${sid}-REREQUEST.json`, JSON.stringify(newBody, null, 2));
+          fs6.writeFileSync(`${dumpDir}/req-${Date.now()}-${sid}-REREQUEST.json`, JSON.stringify(newBody, null, 2));
         } catch {
         }
       }
@@ -48879,7 +48907,7 @@ function createResponsesAdapter(textProtocol, projection) {
       const devParts = projection && projection.systemParts.length > 0 ? [...projection.systemParts, systemPrompt] : [systemPrompt];
       const withDev = injectResponsesDeveloperMessage(inputItems, devParts.join("\n\n---\n\n"));
       const rebuilt = { ...requestBody, input: withDev };
-      delete rebuilt.previous_response_id;
+      if (process.env.ACP_KEEP_RESPONSE_ID !== "1") delete rebuilt.previous_response_id;
       delete rebuilt.instructions;
       return rebuilt;
     },
@@ -49703,7 +49731,6 @@ async function compressLoopResponsesJson(initialResponse, ctx, requestBody, requ
     if (extracted.clean.trim()) {
       inputItems.push({ type: "message", role: "assistant", content: [{ type: "output_text", text: extracted.clean }] });
     }
-    let mutatedThisTurn = false;
     for (const call of proxyCalls) {
       let args = {};
       try {
@@ -49711,15 +49738,8 @@ async function compressLoopResponsesJson(initialResponse, ctx, requestBody, requ
       } catch (error) {
         log("warn", `[acp-compress-args] ${call.name} JSON.parse failed: ${String(error)}`);
       }
-      let result;
-      if (MUTATING_PROXY_TOOLS.has(call.name) && mutatedThisTurn) {
-        result = `Already ${call.name}ed once this turn. Do not ${call.name} again; generate your normal response now.`;
-        ctx.log(`[acp-proxy: responses JSON ${call.name} skipped (state already mutated this turn)]`);
-      } else {
-        result = executeProxyTool2(call.name, args, ctx);
-        if (MUTATING_PROXY_TOOLS.has(call.name)) mutatedThisTurn = true;
-        ctx.log(`[acp-proxy: responses JSON ${call.name} \u2192 ${result.slice(0, 120).replace(/\n/g, " ")}]`);
-      }
+      const result = executeProxyTool2(call.name, args, ctx);
+      ctx.log(`[acp-proxy: responses JSON ${call.name} \u2192 ${result.slice(0, 120).replace(/\n/g, " ")}]`);
       inputItems.push({ type: "message", role: "developer", content: buildVisibilityMarker(call.name, result) });
     }
     requestBody.input = inputItems;
@@ -50891,6 +50911,9 @@ async function startServer(opts) {
       "info",
       `acp-proxy listening on http://${displayHost}:${opts.port} \u2014 web UI: http://${displayHost}:${opts.port}/__bili/ \u2014 zero-config: prefix any baseURL with http://${displayHost}:${opts.port}/bili/` + (nOverrides ? ` \u2014 context overrides for ${nOverrides} upstream URL(s)` : "") + (opts.mitm.enabled ? ` \u2014 MITM proxy on (whitelist)${opts.mitm.domains.length ? ` +${opts.mitm.domains.join(",")}` : ""}` : "")
     );
+    if (opts.debug) {
+      log2("info", `[debug] build features: raw-HTTP-capture(on) | remote_compaction_v2-strip(on) | cert-MITM-launcher(on) | strip-acp-summary(on) \u2014 seeing this line confirms the launcher build (not registry 0.1.34)`);
+    }
   });
   server.on("error", (err2) => {
     const hint = err2.code === "EADDRINUSE" ? ` \u2014 port ${opts.port} is already in use. Stop the other process or use --port <N>.` : err2.code === "EACCES" ? ` \u2014 port ${opts.port} requires privileges. Use a port >= 1024.` : "";
@@ -51089,6 +51112,25 @@ async function handle(req, res, opts, core, config, log2) {
       parsed = null;
     }
   }
+  if (opts.debug && parsed && typeof parsed === "object") {
+    try {
+      const p2 = parsed;
+      const hasPrev = p2.previous_response_id !== void 0;
+      const inLen = Array.isArray(p2.input) ? p2.input.length : 0;
+      log2("info", `[debug] INCOMING previous_response_id=${hasPrev ? String(p2.previous_response_id).slice(0, 16) : "absent"} input_items=${inLen} instructions=${p2.instructions !== void 0 ? "present" : "absent"}`);
+      const rawDir = `${stateDir()}/raw`;
+      try {
+        fs3.mkdirSync(rawDir, { recursive: true });
+      } catch {
+      }
+      const hdrs = Object.entries(req.headers).filter(([k2]) => !/authorization|x-api-key|cookie/i.test(k2)).map(([k2, v2]) => `${k2}: ${Array.isArray(v2) ? v2.join(",") : v2}`).join("\n");
+      fs3.writeFileSync(`${rawDir}/${Date.now()}-INCOMING.txt`, `${req.method} ${req.url}
+${hdrs}
+
+${bodyBuffer.toString("utf8")}`);
+    } catch {
+    }
+  }
   let reqConfig = config;
   if (parsed && typeof parsed === "object") {
     const model = parsed.model;
@@ -51143,6 +51185,9 @@ async function handle(req, res, opts, core, config, log2) {
   }
 }
 var ACP_TAG_MARK = "<acp ";
+function stripKernelSummaries(messages) {
+  return messages.filter((m2) => !(m2.id ?? "").startsWith("acp_summary_"));
+}
 function diagTagSummary(messages, sessionId, strategy) {
   let textTagged = 0;
   let toolTagged = 0;
@@ -51192,7 +51237,7 @@ function prepareAnthropic(parsed, req, opts, core, config, log2, session) {
     }
     log2("info", diagTagSummary(turn.messages, sessionId, "text-only"));
     log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit));
-    processedMessages = turn.messages;
+    processedMessages = stripKernelSummaries(turn.messages);
     reapOrphanBlocks(session, msgs, deactivateBlock);
     rebuiltMessages = coreToAnthropic(processedMessages, cacheControls);
     systemOut = injectSystem(parsed, opts);
@@ -51242,7 +51287,7 @@ function prepareOpenai(parsed, req, opts, core, config, log2, session) {
     }
     log2("info", diagTagSummary(turn.messages, sessionId, "text-only"));
     log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit));
-    processedMessages = turn.messages;
+    processedMessages = stripKernelSummaries(turn.messages);
     reapOrphanBlocks(session, msgs, deactivateBlock);
     rebuiltMessages = coreToOpenai(processedMessages);
     const sysParts = [];
@@ -51285,7 +51330,7 @@ function prepareResponses(parsed, req, opts, core, config, log2, session, identi
   let rebuiltInput = parsed.input;
   let toolsOut = parsed.tools;
   const shouldInject = opts.compress.injectTool;
-  const responsesTextProtocol = FORCE_TEXT_PROTOCOL || isChatGptCodexUpstream(session.meta.upstreamOrigin) || isCodexResponsesLite(req.headers, parsed);
+  const responsesTextProtocol = FORCE_TEXT_PROTOCOL || resolveCompressProtocol(opts.routes, session.meta.upstreamOrigin) === "marker";
   try {
     const projection = responsesToCore(parsed);
     responsesProjection = projection;
@@ -51305,14 +51350,16 @@ function prepareResponses(parsed, req, opts, core, config, log2, session, identi
     }
     log2("info", diagTagSummary(turn.messages, sessionId, "text-only"));
     log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit));
-    processedMessages = turn.messages;
+    processedMessages = stripKernelSummaries(turn.messages);
     reapOrphanBlocks(session, msgs, deactivateBlock);
     rebuiltInput = patchResponsesInput(projection, processedMessages);
     if (shouldInject && !process.env.ACP_NO_COMPRESS_PROMPT) {
-      const prompt = responsesTextProtocol ? buildCompressTextSystemPrompt() : buildCompressSystemPrompt();
+      const prompt = responsesTextProtocol ? buildCompressHybridSystemPrompt() : buildCompressSystemPrompt();
       const devContent = [...projection.systemParts, prompt].join("\n\n---\n\n");
       rebuiltInput = injectResponsesDeveloperMessage(rebuiltInput, devContent);
-      if (!responsesTextProtocol && !process.env.ACP_NO_INJECT_TOOL) toolsOut = injectResponsesTool(parsed.tools);
+      if (!process.env.ACP_NO_INJECT_TOOL) {
+        toolsOut = responsesTextProtocol ? injectResponsesTool(parsed.tools, ACP_READONLY_TOOLS_RESPONSES) : injectResponsesTool(parsed.tools);
+      }
     } else if (projection.systemParts.length > 0) {
       rebuiltInput = injectResponsesDeveloperMessage(rebuiltInput, projection.systemParts.join("\n\n---\n\n"));
     }
@@ -51339,7 +51386,7 @@ function prepareResponses(parsed, req, opts, core, config, log2, session, identi
     session.meta.upstreamOrigin
   );
   if (promptCacheKey && !rebuilt.prompt_cache_key) rebuilt.prompt_cache_key = promptCacheKey;
-  delete rebuilt.previous_response_id;
+  if (process.env.ACP_KEEP_RESPONSE_ID !== "1") delete rebuilt.previous_response_id;
   delete rebuilt.instructions;
   if (process.env.ACP_DEBUG) {
     const fwdTools = (Array.isArray(toolsOut) ? toolsOut : []).map((t) => {
@@ -51371,8 +51418,9 @@ function prepareCountTokens(parsed, core, config, log2, session) {
   try {
     const { msgs, cacheControls } = anthropicToCore(parsed);
     const turn = core.processTurn({ messages: msgs, state: session.state, config, tokenCount: session.stats.lastInputTokens, renderTags: "text-only" });
-    const rebuiltMessages = coreToAnthropic(turn.messages, cacheControls);
-    log2("info", `[${sessionId}] count_tokens pruned: ${msgs.length} \u2192 ${turn.messages.length} msgs`);
+    const stripped = stripKernelSummaries(turn.messages);
+    const rebuiltMessages = coreToAnthropic(stripped, cacheControls);
+    log2("info", `[${sessionId}] count_tokens pruned: ${msgs.length} \u2192 ${stripped.length} msgs`);
     return {
       body: JSON.stringify({ ...parsed, messages: rebuiltMessages }),
       session,
@@ -51408,19 +51456,6 @@ function prepareResponsesCompact(body, parsed, session) {
     resetAfterSuccess: true
   };
 }
-function isChatGptCodexUpstream(upstream) {
-  if (!upstream) return false;
-  try {
-    return new URL(upstream).hostname.toLowerCase() === "chatgpt.com";
-  } catch {
-    return false;
-  }
-}
-function isCodexResponsesLite(headers, body) {
-  if (headers["x-openai-internal-codex-responses-lite"] !== void 0) return true;
-  if (Object.prototype.hasOwnProperty.call(body, "additional_tools")) return true;
-  return Array.isArray(body.input) && body.input.some((item) => item.type === "additional_tools");
-}
 function shouldInjectPromptCacheKey(routing, upstream) {
   if (routing === "enabled") return true;
   if (routing === "disabled" || !upstream) return false;
@@ -51462,12 +51497,12 @@ function injectOpenaiTool(tools) {
   return [...tools, ...additions];
 }
 var FORCE_TEXT_PROTOCOL = process.env.ACP_COMPRESS_PROTOCOL === "text";
-function injectResponsesTool(tools) {
-  if (!Array.isArray(tools)) return [...ACP_TOOLS_RESPONSES];
+function injectResponsesTool(tools, toolsToAdd = ACP_TOOLS_RESPONSES) {
+  if (!Array.isArray(tools)) return [...toolsToAdd];
   const present = new Set(
     tools.map((t) => t?.name).filter((n) => typeof n === "string")
   );
-  const additions = ACP_TOOLS_RESPONSES.filter((t) => !present.has(t.name));
+  const additions = toolsToAdd.filter((t) => !present.has(t.name));
   return [...tools, ...additions];
 }
 async function forward(req, res, opts, body, prepared, core, config, log2, route, affinity) {
@@ -51520,6 +51555,12 @@ async function forward(req, res, opts, body, prepared, core, config, log2, route
     headers[k2] = Array.isArray(v2) ? v2.join(", ") : v2;
   }
   headers["host"] = new URL(route ? route.upstream : opts.upstream).host;
+  const betaKey = Object.keys(headers).find((h) => h.toLowerCase() === "x-codex-beta-features");
+  if (betaKey) {
+    const kept = headers[betaKey].split(",").map((s3) => s3.trim()).filter((f2) => f2 && f2 !== "remote_compaction_v2");
+    if (kept.length > 0) headers[betaKey] = kept.join(",");
+    else delete headers[betaKey];
+  }
   if (affinity && !clientConversationHeader(req.headers)) {
     headers["x-session-id"] = affinity;
   }
@@ -51531,6 +51572,29 @@ async function forward(req, res, opts, body, prepared, core, config, log2, route
     }
     log2("info", `[${prepared?.session.id ?? "unknown"}] \u2192 upstream headers: ${JSON.stringify(hdrLog)}`);
   }
+  const rawBase = opts.debug ? (() => {
+    try {
+      const rawDir = process.env.ACP_RAW_DUMP_DIR || `${stateDir()}/raw`;
+      fs3.mkdirSync(rawDir, { recursive: true });
+      return `${rawDir}/${Date.now()}-${prepared?.session.id ?? "unknown"}`;
+    } catch {
+      return "";
+    }
+  })() : "";
+  if (rawBase) {
+    try {
+      const maskHdr = (k2, v2) => /key|auth|token/i.test(k2) ? `<masked ${v2.length} chars>` : v2;
+      const hdrText = Object.entries(headers).map(([k2, v2]) => `${k2}: ${maskHdr(k2, String(v2))}`).join("\n");
+      const bodyText = req.method === "GET" || req.method === "HEAD" ? "" : typeof body === "string" ? body : Buffer.from(body).toString("utf8");
+      const reqPath = `${rawBase}-REQ.txt`;
+      fs3.writeFileSync(reqPath, `${req.method ?? "POST"} ${upstreamUrl}
+${hdrText}
+
+${bodyText}`);
+      log2("info", `[debug] RAW request dump: ${reqPath}`);
+    } catch {
+    }
+  }
   const dispatcher = proxyDispatcher(proxyUrl);
   const init = {
     method: req.method ?? "GET",
@@ -51560,6 +51624,18 @@ async function forward(req, res, opts, body, prepared, core, config, log2, route
     });
     log2("info", `[${prepared?.session.id ?? "unknown"}] \u2190 upstream response headers: ${JSON.stringify(respLog)}`);
   }
+  if (rawBase) {
+    try {
+      const maskHdr = (k2, v2) => /key|auth|token/i.test(k2) ? `<masked ${v2.length} chars>` : v2;
+      const hdrText = Object.entries(respHeaders).map(([k2, v2]) => `${k2}: ${maskHdr(k2, v2)}`).join("\n");
+      const resPath = `${rawBase}-RES.txt`;
+      fs3.writeFileSync(resPath, `${upstream.status}
+${hdrText}
+`);
+      log2("info", `[debug] RAW response dump: ${resPath}`);
+    } catch {
+    }
+  }
   if (!upstream.ok) {
     res.writeHead(upstream.status, respHeaders);
     if (upstream.body) await pipeThrough(upstream.body, res);
@@ -51606,7 +51682,7 @@ async function forward(req, res, opts, body, prepared, core, config, log2, route
       const parsedReq = JSON.parse(typeof body === "string" ? body : body.toString("utf8"));
       const reqHeaders = buildForwardHeaders(headers);
       const textProtocol = prepared.protocol === "responses" && !!prepared.responsesTextProtocol;
-      const systemPrompt = textProtocol ? buildCompressTextSystemPrompt() : buildCompressSystemPrompt();
+      const systemPrompt = textProtocol ? buildCompressHybridSystemPrompt() : buildCompressSystemPrompt();
       const adapter = pickAdapter(prepared.protocol, parsedReq, textProtocol, prepared.responsesProjection, prepared.anthropicSystem);
       const abortCtrl = new AbortController();
       req.on("close", () => {
@@ -51713,6 +51789,9 @@ async function dumpStreamToFile(stream2, dir, name) {
   try {
     mkdirSync6(dir, { recursive: true });
     const ws2 = createWriteStream2(join4(dir, name));
+    ws2.on("error", (e) => {
+      log("debug", `[dump] write stream error: ${e.message ?? e}`);
+    });
     const reader = stream2.getReader();
     try {
       for (; ; ) {
@@ -54979,13 +55058,33 @@ async function installViaTarball(version2, tarballUrl, installDir) {
   } catch {
     return { ok: false, error: `install dir not writable: ${installDir}` };
   }
+  const MAX_TARBALL_BYTES = 100 * 1024 * 1024;
   let tgzBuffer;
   try {
     const tgzRes = await fetch(tarballUrl, { signal: AbortSignal.timeout(6e4) });
     if (!tgzRes.ok) {
       return { ok: false, error: `tarball download failed: HTTP ${tgzRes.status} ${tgzRes.statusText}` };
     }
-    tgzBuffer = Buffer.from(await tgzRes.arrayBuffer());
+    if (!tgzRes.body) {
+      return { ok: false, error: "tarball download failed: empty response body" };
+    }
+    const reader = tgzRes.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+      for (; ; ) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        total += value.byteLength;
+        if (total > MAX_TARBALL_BYTES) {
+          return { ok: false, error: `tarball exceeds ${MAX_TARBALL_BYTES} byte cap` };
+        }
+        chunks.push(value);
+      }
+    } finally {
+      reader.releaseLock();
+    }
+    tgzBuffer = Buffer.concat(chunks);
   } catch (e) {
     return { ok: false, error: `tarball download failed: ${String(e)}` };
   }
@@ -55038,14 +55137,556 @@ function startAutoUpdate(opts) {
   timer.unref?.();
 }
 
+// src/launcher.ts
+import fs5 from "fs";
+import net2 from "net";
+import os2 from "os";
+import path7 from "path";
+import { spawn } from "child_process";
+var LAUNCHER_DEFAULT_HOST = "127.0.0.1";
+var LAUNCHER_DEFAULT_PORT = 8787;
+var LAUNCH_CLIENTS = ["pi", "codex", "claude", "pi-test"];
+var HEALTH_PATH = "/__bili/health";
+var HEALTH_POLL_INTERVAL_MS = 200;
+var SPAWN_WAIT_MS = 2e4;
+var PROBE_TIMEOUT_MS = 1500;
+var DEFAULT_MITM_DOMAIN_SET = new Set(DEFAULT_MITM_DOMAINS.map((d) => d.toLowerCase()));
+function coveredByDefaultMitm(host) {
+  const h = host.toLowerCase();
+  return DEFAULT_MITM_DOMAINS.some((d) => h === d || h.endsWith("." + d));
+}
+function domainsNeedFreshProxy(domains) {
+  if (!domains || domains.length === 0) return false;
+  return domains.some((d) => !coveredByDefaultMitm(d));
+}
+function isLaunchClient(value) {
+  return LAUNCH_CLIENTS.includes(value);
+}
+function baseClientName(client) {
+  return client === "pi-test" ? "pi" : client;
+}
+function piTestArgs(client, clientArgs) {
+  return client === "pi-test" ? ["--no-extensions", ...clientArgs] : clientArgs;
+}
+function proxyOrigin(host, port) {
+  return `http://${host}:${port}`;
+}
+function healthUrl(origin) {
+  return origin + HEALTH_PATH;
+}
+function wrapUpstream(origin, upstream) {
+  const u2 = upstream.replace(/\/+$/, "");
+  const prefix = origin + "/bili/";
+  if (u2.startsWith(prefix)) return u2;
+  return prefix + u2;
+}
+function unwrapUpstream(url) {
+  const idx = url.indexOf("/bili/");
+  return idx >= 0 ? url.slice(idx + "/bili/".length) : url;
+}
+function nonEmpty2(s3) {
+  return typeof s3 === "string" && s3.trim().length > 0;
+}
+function resolveCaCertPath(env) {
+  const base = env.XDG_DATA_HOME || path7.join(os2.homedir(), ".local/share");
+  return path7.join(base, "billion-context", "ca", "root-ca.pem");
+}
+function resolvePiHome(env) {
+  const h = os2.homedir();
+  return nonEmpty2(env.PI_CODING_AGENT_DIR) ? env.PI_CODING_AGENT_DIR : nonEmpty2(env.PI_HOME) ? env.PI_HOME : path7.join(h, ".pi", "agent");
+}
+function discoverRoutes(client, config) {
+  const httpsDomains = [];
+  const httpRewrites = [];
+  const httpsRewrites = [];
+  const httpsSeen = /* @__PURE__ */ new Set();
+  const rewriteKeys = /* @__PURE__ */ new Set();
+  const httpsRewriteKeys = /* @__PURE__ */ new Set();
+  const classify = (raw, key) => {
+    if (!nonEmpty2(raw)) return;
+    let url;
+    try {
+      url = new URL(unwrapUpstream(raw));
+    } catch {
+      return;
+    }
+    if (url.protocol === "https:") {
+      const host = url.hostname;
+      if (host && !httpsSeen.has(host.toLowerCase())) {
+        httpsSeen.add(host.toLowerCase());
+        httpsDomains.push(host);
+      }
+      if (raw !== unwrapUpstream(raw) && !httpsRewriteKeys.has(key)) {
+        httpsRewriteKeys.add(key);
+        httpsRewrites.push({ key, realUpstream: unwrapUpstream(raw) });
+      }
+    } else if (url.protocol === "http:") {
+      if (!rewriteKeys.has(key)) {
+        rewriteKeys.add(key);
+        httpRewrites.push({ key, realUpstream: unwrapUpstream(raw) });
+      }
+    }
+  };
+  if (client === "claude") {
+    const u2 = config.claude?.anthropicBaseUrl;
+    if (nonEmpty2(u2)) classify(u2, "ANTHROPIC_BASE_URL");
+    else classify("https://api.anthropic.com", "ANTHROPIC_BASE_URL");
+  } else if (client === "pi") {
+    for (const [name, prov] of Object.entries(config.pi?.providers ?? {})) {
+      classify(prov.baseUrl, name);
+    }
+  } else {
+    for (const [name, prov] of Object.entries(config.codex?.providers ?? {})) {
+      classify(prov.baseUrl, `model_providers.${name}.base_url`);
+    }
+    classify(config.codex?.openaiBaseUrl, "openai_base_url");
+  }
+  return { httpsDomains, httpRewrites, httpsRewrites };
+}
+function discoverDomains(client, config) {
+  return discoverRoutes(client, config).httpsDomains;
+}
+function buildPiEnv(origin, caPath, baseEnv) {
+  return { ...baseEnv, HTTPS_PROXY: origin, NODE_EXTRA_CA_CERTS: caPath };
+}
+function buildCodexEnv(origin, caPath, baseEnv) {
+  return { ...baseEnv, HTTPS_PROXY: origin, SSL_CERT_FILE: caPath };
+}
+function buildCodexArgs(origin, httpRewrites, httpsRewrites, extra) {
+  const args = [];
+  for (const r of httpRewrites) {
+    args.push("-c", `${r.key}=${wrapUpstream(origin, r.realUpstream)}`);
+  }
+  for (const r of httpsRewrites) {
+    args.push("-c", `${r.key}=${r.realUpstream}`);
+  }
+  args.push(...extra);
+  return args;
+}
+function buildClaudeEnv(origin, caPath, httpRewrites, httpsRewrites, baseEnv) {
+  const env = { ...baseEnv, HTTPS_PROXY: origin, NODE_EXTRA_CA_CERTS: caPath };
+  const r = httpRewrites.find((rw) => rw.key === "ANTHROPIC_BASE_URL");
+  if (r) env.ANTHROPIC_BASE_URL = wrapUpstream(origin, r.realUpstream);
+  const hr2 = httpsRewrites.find((rw) => rw.key === "ANTHROPIC_BASE_URL");
+  if (hr2) env.ANTHROPIC_BASE_URL = hr2.realUpstream;
+  return env;
+}
+function preparePiHttpRewrite(piHome, origin, httpRewrites, httpsRewrites) {
+  if (httpRewrites.length === 0 && httpsRewrites.length === 0) return void 0;
+  const modelsPath = path7.join(piHome, "models.json");
+  let txt;
+  try {
+    txt = fs5.readFileSync(modelsPath, "utf8");
+  } catch {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(txt);
+  } catch {
+    return void 0;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
+  const root = parsed;
+  const providersVal = root.providers;
+  if (providersVal && typeof providersVal === "object" && !Array.isArray(providersVal)) {
+    const providers = providersVal;
+    for (const r of httpRewrites) {
+      const prov = providers[r.key];
+      if (prov && typeof prov === "object" && !Array.isArray(prov)) {
+        const p2 = prov;
+        const existing = typeof p2.baseUrl === "string" ? p2.baseUrl : r.realUpstream;
+        p2.baseUrl = wrapUpstream(origin, unwrapUpstream(existing));
+      }
+    }
+    for (const r of httpsRewrites) {
+      const prov = providers[r.key];
+      if (prov && typeof prov === "object" && !Array.isArray(prov)) {
+        const p2 = prov;
+        p2.baseUrl = r.realUpstream;
+      }
+    }
+  }
+  const tmp = fs5.mkdtempSync(path7.join(os2.tmpdir(), "bili-pi-"));
+  try {
+    for (const entry of fs5.readdirSync(piHome)) {
+      if (entry === "models.json") continue;
+      try {
+        fs5.symlinkSync(path7.join(piHome, entry), path7.join(tmp, entry));
+      } catch {
+      }
+    }
+  } catch {
+  }
+  fs5.writeFileSync(path7.join(tmp, "models.json"), JSON.stringify(root));
+  return tmp;
+}
+function dedupeInOrder(list) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const d of list) {
+    if (d && !seen.has(d)) {
+      seen.add(d);
+      out.push(d);
+    }
+  }
+  return out;
+}
+async function defaultFetch(url) {
+  const ctrl = new AbortController();
+  const t = setTimeout(() => ctrl.abort(), PROBE_TIMEOUT_MS);
+  try {
+    const res = await fetch(url, { signal: ctrl.signal });
+    return { ok: res.ok };
+  } catch {
+    return { ok: false };
+  } finally {
+    clearTimeout(t);
+  }
+}
+async function probeHealth(origin, fetchImpl) {
+  try {
+    const { ok } = await fetchImpl(healthUrl(origin));
+    return ok;
+  } catch {
+    return false;
+  }
+}
+function findFreePort(preferred, host = LAUNCHER_DEFAULT_HOST) {
+  const tryBind = (port) => new Promise((resolve) => {
+    const srv = net2.createServer();
+    srv.once("error", () => resolve(false));
+    srv.once("listening", () => srv.close(() => resolve(true)));
+    srv.listen(port, host);
+  });
+  return tryBind(preferred).then((free) => {
+    if (free) return preferred;
+    return new Promise((resolve, reject) => {
+      const srv = net2.createServer();
+      srv.once("error", reject);
+      srv.listen(0, host, () => {
+        const addr = srv.address();
+        srv.close(() => {
+          if (addr && typeof addr === "object") resolve(addr.port);
+          else reject(new Error("could not allocate a free port"));
+        });
+      });
+    });
+  });
+}
+var INHERITED_PROXY_VARS = ["http_proxy", "https_proxy", "all_proxy", "HTTP_PROXY", "HTTPS_PROXY", "ALL_PROXY"];
+function stripInheritedProxy(env) {
+  const cleaned = { ...env };
+  for (const key of INHERITED_PROXY_VARS) delete cleaned[key];
+  return cleaned;
+}
+function proxyStartArgs(opts) {
+  const args = ["start", "--host", opts.host, "--port", String(opts.port)];
+  if (opts.passthrough) args.push("--passthrough");
+  if (opts.debug) args.push("--debug");
+  return args;
+}
+async function ensureProxyRunning(opts, deps = {}) {
+  const fetchImpl = deps.fetchImpl ?? defaultFetch;
+  const spawnImpl = deps.spawnImpl ?? spawn;
+  const now = deps.now ?? Date.now;
+  const sleepImpl = deps.sleep ?? ((ms2) => new Promise((r) => setTimeout(r, ms2)));
+  const preferredOrigin = proxyOrigin(opts.host, opts.port);
+  if (!domainsNeedFreshProxy(opts.mitmDomains) && await probeHealth(preferredOrigin, fetchImpl)) {
+    return { origin: preferredOrigin, port: opts.port, reused: true, child: null };
+  }
+  const port = await findFreePort(opts.port, opts.host);
+  const spawnedOrigin = proxyOrigin(opts.host, port);
+  const script = process.argv[1];
+  if (!script) throw new Error("bili: cannot resolve launcher script path");
+  const logPath2 = path7.join(os2.tmpdir(), `bili-proxy-${port}.log`);
+  const logFd = fs5.openSync(logPath2, "a");
+  let child;
+  try {
+    child = spawnImpl(
+      process.execPath,
+      [script, ...proxyStartArgs({ ...opts, port, debug: true })],
+      {
+        detached: true,
+        stdio: ["ignore", logFd, logFd],
+        env: {
+          ...stripInheritedProxy(process.env),
+          ...opts.mitmDomains && opts.mitmDomains.length ? { BILI_MITM_DOMAINS: opts.mitmDomains.join(",") } : {}
+        }
+      }
+    );
+  } finally {
+    try {
+      fs5.closeSync(logFd);
+    } catch {
+    }
+  }
+  try {
+    child.unref?.();
+  } catch {
+  }
+  const deadline = now() + SPAWN_WAIT_MS;
+  while (now() < deadline) {
+    await sleepImpl(HEALTH_POLL_INTERVAL_MS);
+    if (await probeHealth(spawnedOrigin, fetchImpl)) {
+      return { origin: spawnedOrigin, port, reused: false, child, logPath: logPath2 };
+    }
+  }
+  throw new Error(`bili: proxy did not become healthy at ${spawnedOrigin} within ${SPAWN_WAIT_MS}ms`);
+}
+function stopProxy(handle2) {
+  const child = handle2.child;
+  if (!child || child.pid === void 0) return;
+  if (process.platform !== "win32" && child.pid > 0) {
+    try {
+      process.kill(-child.pid);
+    } catch {
+    }
+  }
+  try {
+    child.kill?.();
+  } catch {
+  }
+}
+function runClient(cmd, args, env, deps) {
+  const spawnImpl = deps?.spawnImpl ?? spawn;
+  return new Promise((resolve, reject) => {
+    const child = spawnImpl(cmd, args, { stdio: "inherit", env });
+    child.on?.("error", (...rest) => reject(rest[0]));
+    child.on?.("exit", (...rest) => {
+      const code = rest[0];
+      const signal = rest[1];
+      resolve(signal ? 130 : typeof code === "number" ? code : 0);
+    });
+  });
+}
+function isOnPath(name, env) {
+  const p2 = env.PATH;
+  if (!p2) return false;
+  return p2.split(":").some((dir) => {
+    if (!dir) return false;
+    try {
+      const f2 = path7.join(dir, name);
+      return fs5.existsSync(f2) && fs5.statSync(f2).isFile();
+    } catch {
+      return false;
+    }
+  });
+}
+function resolveClientCommand(client, env) {
+  if (client === "pi") {
+    const piBin = env.PI_BIN?.trim();
+    if (piBin) return { command: piBin, prefixArgs: [] };
+    if (isOnPath("pi", env)) return { command: "pi", prefixArgs: [] };
+    const cli = path7.join(
+      os2.homedir(),
+      ".pi/agent/npm/node_modules/@earendil-works/pi-coding-agent/dist/cli.js"
+    );
+    return { command: process.execPath, prefixArgs: [cli] };
+  }
+  return { command: client, prefixArgs: [] };
+}
+function readJsonObject(filePath) {
+  try {
+    const txt = fs5.readFileSync(filePath, "utf8");
+    const parsed = JSON.parse(txt);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function readClaudeSettings(homeDir, cwd) {
+  const files = [
+    path7.join(homeDir, ".claude", "settings.json"),
+    path7.join(cwd, ".claude", "settings.json")
+  ];
+  let anthropicBaseUrl;
+  for (const f2 of files) {
+    const obj = readJsonObject(f2);
+    const env = obj?.env;
+    if (env && typeof env === "object" && !Array.isArray(env)) {
+      const v2 = env.ANTHROPIC_BASE_URL;
+      if (nonEmpty2(v2)) anthropicBaseUrl = v2;
+    }
+  }
+  return anthropicBaseUrl ? { anthropicBaseUrl } : {};
+}
+function parseCodexToml(text) {
+  const result = { providers: {} };
+  let table = "";
+  let curProvider = null;
+  for (const rawLine of text.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line || line.startsWith("#")) continue;
+    const tableMatch = /^\[([^\]]+)\]$/.exec(line);
+    if (tableMatch) {
+      table = tableMatch[1].trim();
+      curProvider = table.startsWith("model_providers.") ? table.slice("model_providers.".length).trim() : null;
+      if (curProvider && !result.providers[curProvider]) {
+        result.providers[curProvider] = {};
+      }
+      continue;
+    }
+    const m2 = /^([A-Za-z0-9_.-]+)\s*=\s*(?:"([^"]*)"|'([^']*)')/.exec(line);
+    if (!m2) continue;
+    const key = m2[1];
+    const val = m2[2] !== void 0 ? m2[2] : m2[3];
+    if (table === "") {
+      if (key === "model_provider") result.modelProvider = val;
+      else if (key === "openai_base_url") result.openaiBaseUrl = val;
+    } else if (curProvider && key === "base_url") {
+      result.providers[curProvider].baseUrl = val;
+    }
+  }
+  return result;
+}
+function readCodexConfig(codexHome) {
+  const cfgPath = path7.join(codexHome, "config.toml");
+  let text;
+  try {
+    text = fs5.readFileSync(cfgPath, "utf8");
+  } catch {
+    return { providers: {} };
+  }
+  return parseCodexToml(text);
+}
+function readPiConfig(piHome) {
+  const cfgPath = path7.join(piHome, "models.json");
+  const obj = readJsonObject(cfgPath);
+  const providers = {};
+  const rawProviders = obj?.providers;
+  if (rawProviders && typeof rawProviders === "object" && !Array.isArray(rawProviders)) {
+    for (const [name, val] of Object.entries(rawProviders)) {
+      if (val && typeof val === "object" && !Array.isArray(val)) {
+        const baseUrl = val.baseUrl;
+        providers[name] = typeof baseUrl === "string" ? { baseUrl } : {};
+      }
+    }
+  }
+  return { providers };
+}
+function loadClientConfig(env, cwd) {
+  const home = os2.homedir();
+  const config = {};
+  config.claude = readClaudeSettings(home, cwd);
+  const codexHome = nonEmpty2(env.CODEX_HOME) ? env.CODEX_HOME : path7.join(home, ".codex");
+  config.codex = readCodexConfig(codexHome);
+  config.pi = readPiConfig(resolvePiHome(env));
+  return config;
+}
+function parsePort(raw) {
+  const port = raw && raw.trim() ? parseInt(raw, 10) : LAUNCHER_DEFAULT_PORT;
+  if (!Number.isFinite(port) || port <= 0 || port > 65535) {
+    console.error(`bili: invalid --port "${raw}"`);
+    process.exit(2);
+  }
+  return port;
+}
+async function runLaunch(params, deps = {}) {
+  const host = params.overrides.ACP_HOST?.trim() || LAUNCHER_DEFAULT_HOST;
+  const port = parsePort(params.overrides.ACP_PORT ?? process.env.ACP_PORT);
+  const passthrough = params.overrides.ACP_PASSTHROUGH === "1";
+  const debug = params.overrides.ACP_DEBUG === "1";
+  const config = loadClientConfig(process.env, process.cwd());
+  const base = baseClientName(params.client);
+  const routes = discoverRoutes(base, config);
+  const domains = dedupeInOrder([...routes.httpsDomains, ...params.mitmDomains ?? []]);
+  const handle2 = await ensureProxyRunning({ host, port, passthrough, debug, mitmDomains: domains }, deps);
+  console.error(
+    `bili: ${handle2.reused ? "reusing existing" : "started"} proxy at ${handle2.origin} (MITM domains: ${domains.length ? domains.join(", ") : "defaults"})` + (routes.httpRewrites.length > 0 ? ` (HTTP /bili/ rewrites: ${routes.httpRewrites.length})` : "") + (routes.httpsRewrites.length > 0 ? ` (HTTPS cert rewrites: ${routes.httpsRewrites.length})` : "") + (params.client === "pi-test" ? " (no extensions)" : "")
+  );
+  if (handle2.logPath) {
+    console.error(`bili: proxy log: ${handle2.logPath}`);
+  }
+  const ca = resolveCaCertPath(process.env);
+  let env;
+  let clientArgs = params.clientArgs;
+  let piTmpHome;
+  if (base === "pi") {
+    env = buildPiEnv(handle2.origin, ca, process.env);
+    piTmpHome = preparePiHttpRewrite(resolvePiHome(process.env), handle2.origin, routes.httpRewrites, routes.httpsRewrites);
+    if (piTmpHome) env.PI_CODING_AGENT_DIR = piTmpHome;
+  } else if (base === "codex") {
+    env = buildCodexEnv(handle2.origin, ca, process.env);
+    clientArgs = buildCodexArgs(handle2.origin, routes.httpRewrites, routes.httpsRewrites, params.clientArgs);
+  } else {
+    env = buildClaudeEnv(handle2.origin, ca, routes.httpRewrites, routes.httpsRewrites, process.env);
+  }
+  const { command, prefixArgs } = resolveClientCommand(base, process.env);
+  const effectiveClientArgs = piTestArgs(params.client, clientArgs);
+  let code = 0;
+  try {
+    code = await runClient(command, [...prefixArgs, ...effectiveClientArgs], env, {
+      spawnImpl: deps.spawnImpl
+    });
+  } catch (err2) {
+    console.error(`bili: failed to launch ${params.client}: ${err2 instanceof Error ? err2.message : String(err2)}`);
+    code = 1;
+  } finally {
+    if (!handle2.reused) stopProxy(handle2);
+    if (piTmpHome) {
+      try {
+        fs5.rmSync(piTmpHome, { recursive: true, force: true });
+      } catch {
+      }
+    }
+  }
+  process.exit(code ?? 0);
+}
+async function runTestPi(params, deps = {}) {
+  const host = params.overrides.ACP_HOST?.trim() || LAUNCHER_DEFAULT_HOST;
+  const port = parsePort(params.overrides.ACP_PORT ?? process.env.ACP_PORT);
+  const passthrough = params.overrides.ACP_PASSTHROUGH === "1";
+  const debug = params.overrides.ACP_DEBUG === "1";
+  const config = loadClientConfig(process.env, process.cwd());
+  const domains = dedupeInOrder([
+    ...discoverDomains("pi", config),
+    ...params.mitmDomains ?? []
+  ]);
+  const handle2 = await ensureProxyRunning({ host, port, passthrough, debug, mitmDomains: domains }, deps);
+  console.error(
+    `bili: ${handle2.reused ? "reusing existing" : "started"} proxy at ${handle2.origin} (MITM domains: ${domains.length ? domains.join(", ") : "defaults"})`
+  );
+  if (handle2.logPath) {
+    console.error(`bili: proxy log: ${handle2.logPath}`);
+  }
+  const ca = resolveCaCertPath(process.env);
+  const env = buildPiEnv(handle2.origin, ca, process.env);
+  const sessionDir = path7.join(os2.tmpdir(), `bili-pi-test-${Date.now()}`);
+  fs5.mkdirSync(sessionDir, { recursive: true });
+  const args = [
+    "-p",
+    "--no-session",
+    "--no-extensions",
+    "--no-tools",
+    "--no-context-files",
+    "--session-dir",
+    sessionDir,
+    "--mode",
+    "text",
+    "Reply with exactly: OK"
+  ];
+  const { command, prefixArgs } = resolveClientCommand("pi", process.env);
+  let code = 0;
+  try {
+    code = await runClient(command, [...prefixArgs, ...args], env, { spawnImpl: deps.spawnImpl });
+  } catch (err2) {
+    console.error(`bili: pi test failed: ${err2 instanceof Error ? err2.message : String(err2)}`);
+    code = 1;
+  } finally {
+    if (!handle2.reused) stopProxy(handle2);
+  }
+  process.exit(code ?? 0);
+}
+
 // src/cli.ts
 import { readFileSync as readFileSync5 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import path7 from "path";
+import path8 from "path";
 var VERSION = (() => {
   try {
     const here = fileURLToPath3(import.meta.url);
-    const pkg = path7.join(path7.dirname(here), "..", "package.json");
+    const pkg = path8.join(path8.dirname(here), "..", "package.json");
     return JSON.parse(readFileSync5(pkg, "utf8")).version ?? "dev";
   } catch {
     return "dev";
@@ -55054,7 +55695,7 @@ var VERSION = (() => {
 var PACKAGE_NAME = (() => {
   try {
     const here = fileURLToPath3(import.meta.url);
-    const pkg = path7.join(path7.dirname(here), "..", "package.json");
+    const pkg = path8.join(path8.dirname(here), "..", "package.json");
     return JSON.parse(readFileSync5(pkg, "utf8")).name ?? "billion-context";
   } catch {
     return "billion-context";
@@ -55063,19 +55704,40 @@ var PACKAGE_NAME = (() => {
 var HELP = `bili ${VERSION} \u2014 billion-context proxy
 
 Usage:
-  bili [start] [options]        start the proxy (default: reads ${configFile()})
-  bili update                   check for & install a newer version now
-  bili --version                print version
-  bili --help                   show this help
+  bili [start] [options]           start the proxy (default: reads ${configFile()})
+  bili pi [opts --] [args]         start a proxy + launch pi against it (cert-MITM)
+  bili pi-test [opts --] [args]    like bili pi but injects --no-extensions (clean test)
+  bili codex [opts --] [args]      start a proxy + launch codex against it (cert-MITM)
+  bili claude [opts --] [args]     start a proxy + launch claude against it (cert-MITM)
+  bili test pi                     non-polluting pi smoke test through the proxy
+  bili update                      check for & install a newer version now
+  bili --version                   print version
+  bili --help                      show this help
+
+Launcher (bili pi / bili codex / bili claude):
+  Brings up a proxy on an independent port (reusing one already running on
+  that port), then runs the client pointed at it via HTTPS_PROXY + the proxy's
+  MITM CA \u2014 no config-file edits. Discovered HTTPS upstream domains are
+  auto-whitelisted for MITM so the proxy TLS-terminates exactly the hosts the
+  client uses; HTTP / localhost providers go direct. pi/claude trust the CA
+  via NODE_EXTRA_CA_CERTS, codex via SSL_CERT_FILE. Proxy killed on client exit.
+    bili pi                               # launch pi through the proxy
+    bili pi -- print "hi"                 # args after the client are passed through
+    bili pi-test                          # pi through the proxy with extensions off (proxy owns compression)
+    bili codex                            # launch codex through the proxy
+    bili claude                           # launch claude through the proxy
+    bili test pi                          # quick end-to-end check of the pi path
+    bili pi --mitm-domain api.foo.com     # add a domain to the MITM whitelist
 
 Options (override config file / env):
-  --port <N>                    listen port (default 8787)
-  --host <ADDR>                 listen host (default 127.0.0.1)
-  --config <FILE>               path to config JSON (default: XDG location)
-  --debug                       verbose logging
-  --passthrough                 forward without compression
-  --no-passthrough              force compression on (overrides config)
-  --no-auto-update              disable background self-update this run
+  --port <N>                       listen port (default 8787)
+  --host <ADDR>                    listen host (default 127.0.0.1)
+  --mitm-domain <domain>           extra MITM domain (repeatable; launcher only)
+  --config <FILE>                  path to config JSON (default: XDG location)
+  --debug                          verbose logging
+  --passthrough                    forward without compression
+  --no-passthrough                 force compression on (overrides config)
+  --no-auto-update                 disable background self-update this run
 
 Config: ${configFile()}
   Set port/host/debug/providers/compress/autoUpdate there. See README \xA7Configuration.
@@ -55087,8 +55749,16 @@ function parseArgs(argv) {
   const overrides = {};
   let command = "start";
   const positional = [];
+  let client;
+  let clientArgs = [];
+  const mitmDomains = [];
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
+    if (!client && positional.length === 0 && isLaunchClient(a)) {
+      client = a;
+      clientArgs = argv.slice(i + 1);
+      break;
+    }
     switch (a) {
       case "--help":
       case "-h":
@@ -55110,6 +55780,15 @@ function parseArgs(argv) {
       case "--no-passthrough":
         overrides.ACP_PASSTHROUGH = "0";
         break;
+      case "--mitm-domain": {
+        const val = argv[++i];
+        if (val === void 0) {
+          console.error(`bili: ${a} requires a value`);
+          process.exit(2);
+        }
+        mitmDomains.push(val);
+        break;
+      }
       case "--port":
       case "--host":
       case "--config": {
@@ -55137,21 +55816,32 @@ function parseArgs(argv) {
         positional.push(a);
     }
   }
-  if (positional.length > 0) {
+  if (client) {
+    command = "launch";
+  } else if (positional.length > 0) {
     const cmd = positional[0];
     if (cmd === "start") {
       command = command === "help" || command === "version" ? command : "start";
     } else if (cmd === "update") {
       command = "update";
+    } else if (cmd === "test") {
+      const target = positional[1];
+      if (target && isLaunchClient(target)) {
+        command = "test";
+        client = target;
+      } else {
+        console.error(`bili test: unknown client "${target ?? ""}" (try "bili test pi")`);
+        process.exit(2);
+      }
     } else {
       console.error(`bili: unknown command "${cmd}" (try "bili --help")`);
       process.exit(2);
     }
   }
-  return { command, overrides };
+  return { command, client, clientArgs, mitmDomains, overrides };
 }
 async function main() {
-  const { command, overrides } = parseArgs(process.argv.slice(2));
+  const { command, client, clientArgs, mitmDomains, overrides } = parseArgs(process.argv.slice(2));
   if (command === "help") {
     process.stdout.write(HELP);
     return;
@@ -55164,6 +55854,18 @@ async function main() {
     await checkForUpdate({ packageName: PACKAGE_NAME, currentVersion: VERSION, autoUpdate: true }, true);
     return;
   }
+  if (command === "test") {
+    if (client === "pi") {
+      await runTestPi({ overrides, mitmDomains });
+      return;
+    }
+    console.error("bili test: only 'pi' supported for now");
+    process.exit(2);
+  }
+  if (command === "launch") {
+    await runLaunch({ client, clientArgs, mitmDomains, overrides });
+    return;
+  }
   for (const [k2, v2] of Object.entries(overrides)) {
     if (v2 !== void 0) process.env[k2] = v2;
   }