billion-context 0.1.41 → 0.1.43

package/dist/index.js

@@ -1141,14 +1141,14 @@ var require_util = __commonJS({
         }
         const port = url.port != null ? url.port : url.protocol === "https:" ? 443 : 80;
         let origin = url.origin != null ? url.origin : `${url.protocol || ""}//${url.hostname || ""}:${port}`;
-        let path11 = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
+        let path12 = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
         if (origin[origin.length - 1] === "/") {
           origin = origin.slice(0, origin.length - 1);
         }
-        if (path11 && path11[0] !== "/") {
-          path11 = `/${path11}`;
+        if (path12 && path12[0] !== "/") {
+          path12 = `/${path12}`;
         }
-        return new URL(`${origin}${path11}`);
+        return new URL(`${origin}${path12}`);
       }
       if (!isHttpOrHttpsPrefixed(url.origin || url.protocol)) {
         throw new InvalidArgumentError("Invalid URL protocol: the URL must start with `http:` or `https:`.");
@@ -1969,9 +1969,9 @@ var require_diagnostics = __commonJS({
         "undici:client:sendHeaders",
         (evt) => {
           const {
-            request: { method, path: path11, origin }
+            request: { method, path: path12, origin }
           } = evt;
-          debugLog("sending request to %s %s%s", method, origin, path11);
+          debugLog("sending request to %s %s%s", method, origin, path12);
         }
       );
     }
@@ -1989,14 +1989,14 @@ var require_diagnostics = __commonJS({
         "undici:request:headers",
         (evt) => {
           const {
-            request: { method, path: path11, origin },
+            request: { method, path: path12, origin },
             response: { statusCode }
           } = evt;
           debugLog(
             "received response to %s %s%s - HTTP %d",
             method,
             origin,
-            path11,
+            path12,
             statusCode
           );
         }
@@ -2005,23 +2005,23 @@ var require_diagnostics = __commonJS({
         "undici:request:trailers",
         (evt) => {
           const {
-            request: { method, path: path11, origin }
+            request: { method, path: path12, origin }
           } = evt;
-          debugLog("trailers received from %s %s%s", method, origin, path11);
+          debugLog("trailers received from %s %s%s", method, origin, path12);
         }
       );
       diagnosticsChannel.subscribe(
         "undici:request:error",
         (evt) => {
           const {
-            request: { method, path: path11, origin },
+            request: { method, path: path12, origin },
             error
           } = evt;
           debugLog(
             "request to %s %s%s errored - %s",
             method,
             origin,
-            path11,
+            path12,
             error.message
           );
         }
@@ -2136,7 +2136,7 @@ var require_request = __commonJS({
     var kHandler = /* @__PURE__ */ Symbol("handler");
     var Request = class {
       constructor(origin, {
-        path: path11,
+        path: path12,
         method,
         body,
         headers,
@@ -2153,11 +2153,11 @@ var require_request = __commonJS({
         maxRedirections,
         typeOfService
       }, handler) {
-        if (typeof path11 !== "string") {
+        if (typeof path12 !== "string") {
           throw new InvalidArgumentError("path must be a string");
-        } else if (path11[0] !== "/" && !(path11.startsWith("http://") || path11.startsWith("https://")) && method !== "CONNECT") {
+        } else if (path12[0] !== "/" && !(path12.startsWith("http://") || path12.startsWith("https://")) && method !== "CONNECT") {
           throw new InvalidArgumentError("path must be an absolute URL or start with a slash");
-        } else if (invalidPathRegex.test(path11)) {
+        } else if (invalidPathRegex.test(path12)) {
           throw new InvalidArgumentError("invalid request path");
         }
         if (typeof method !== "string") {
@@ -2232,7 +2232,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? serializePathWithQuery(path11, query) : path11;
+        this.path = query ? serializePathWithQuery(path12, query) : path12;
         this.origin = origin;
         this.protocol = getProtocolFromUrlString(origin);
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
@@ -7415,7 +7415,7 @@ var require_client_h1 = __commonJS({
       return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && method !== "TRACE" && method !== "CONNECT";
     }
     function writeH1(client, request) {
-      const { method, path: path11, host, upgrade, blocking, reset } = request;
+      const { method, path: path12, host, upgrade, blocking, reset } = request;
       let { body, headers, contentLength } = request;
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH" || method === "QUERY" || method === "PROPFIND" || method === "PROPPATCH";
       if (util.isFormDataLike(body)) {
@@ -7493,7 +7493,7 @@ var require_client_h1 = __commonJS({
       if (socket.setTypeOfService) {
         socket.setTypeOfService(request.typeOfService);
       }
-      let header = `${method} ${path11} HTTP/1.1\r
+      let header = `${method} ${path12} HTTP/1.1\r
 `;
       if (typeof host === "string") {
         header += `host: ${host}\r
@@ -8146,7 +8146,7 @@ var require_client_h2 = __commonJS({
     function writeH2(client, request) {
       const requestTimeout = request.bodyTimeout ?? client[kBodyTimeout];
       const session = client[kHTTP2Session];
-      const { method, path: path11, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request;
+      const { method, path: path12, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request;
       let { body } = request;
       if (upgrade != null && upgrade !== "websocket") {
         util.errorRequest(client, request, new InvalidArgumentError(`Custom upgrade "${upgrade}" not supported over HTTP/2`));
@@ -8214,7 +8214,7 @@ var require_client_h2 = __commonJS({
           }
           headers[HTTP2_HEADER_METHOD] = "CONNECT";
           headers[HTTP2_HEADER_PROTOCOL] = "websocket";
-          headers[HTTP2_HEADER_PATH] = path11;
+          headers[HTTP2_HEADER_PATH] = path12;
           if (protocol === "ws:" || protocol === "wss:") {
             headers[HTTP2_HEADER_SCHEME] = protocol === "ws:" ? "http" : "https";
           } else {
@@ -8255,7 +8255,7 @@ var require_client_h2 = __commonJS({
         stream2.setTimeout(requestTimeout);
         return true;
       }
-      headers[HTTP2_HEADER_PATH] = path11;
+      headers[HTTP2_HEADER_PATH] = path12;
       headers[HTTP2_HEADER_SCHEME] = protocol === "http:" ? "http" : "https";
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH";
       if (body && typeof body.read === "function") {
@@ -10598,10 +10598,10 @@ var require_proxy_agent = __commonJS({
         };
         const {
           origin,
-          path: path11 = "/",
+          path: path12 = "/",
           headers = {}
         } = opts;
-        opts.path = origin + path11;
+        opts.path = origin + path12;
         if (!("host" in headers) && !("Host" in headers)) {
           const { host } = new URL(origin);
           headers.host = host;
@@ -12684,20 +12684,20 @@ var require_mock_utils = __commonJS({
       }
       return normalizedQp;
     }
-    function safeUrl(path11) {
-      if (typeof path11 !== "string") {
-        return path11;
+    function safeUrl(path12) {
+      if (typeof path12 !== "string") {
+        return path12;
       }
-      const pathSegments = path11.split("?", 3);
+      const pathSegments = path12.split("?", 3);
       if (pathSegments.length !== 2) {
-        return path11;
+        return path12;
       }
       const qp = new URLSearchParams(pathSegments.pop());
       qp.sort();
       return [...pathSegments, qp.toString()].join("?");
     }
-    function matchKey(mockDispatch2, { path: path11, method, body, headers }) {
-      const pathMatch = matchValue(mockDispatch2.path, path11);
+    function matchKey(mockDispatch2, { path: path12, method, body, headers }) {
+      const pathMatch = matchValue(mockDispatch2.path, path12);
       const methodMatch = matchValue(mockDispatch2.method, method);
       const bodyMatch = typeof mockDispatch2.body !== "undefined" ? matchValue(mockDispatch2.body, body) : true;
       const headersMatch = matchHeaders(mockDispatch2, headers);
@@ -12722,8 +12722,8 @@ var require_mock_utils = __commonJS({
       const basePath = key.query ? serializePathWithQuery(key.path, key.query) : key.path;
       const resolvedPath = typeof basePath === "string" ? safeUrl(basePath) : basePath;
       const resolvedPathWithoutTrailingSlash = removeTrailingSlash(resolvedPath);
-      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path11, ignoreTrailingSlash }) => {
-        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path11)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path11), resolvedPath);
+      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path12, ignoreTrailingSlash }) => {
+        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path12)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path12), resolvedPath);
       });
       if (matchedMockDispatches.length === 0) {
         throw new MockNotMatchedError(`Mock dispatch not matched for path '${resolvedPath}'`);
@@ -12762,19 +12762,19 @@ var require_mock_utils = __commonJS({
         mockDispatches.splice(index, 1);
       }
     }
-    function removeTrailingSlash(path11) {
-      while (path11.endsWith("/")) {
-        path11 = path11.slice(0, -1);
+    function removeTrailingSlash(path12) {
+      while (path12.endsWith("/")) {
+        path12 = path12.slice(0, -1);
       }
-      if (path11.length === 0) {
-        path11 = "/";
+      if (path12.length === 0) {
+        path12 = "/";
       }
-      return path11;
+      return path12;
     }
     function buildKey(opts) {
-      const { path: path11, method, body, headers, query } = opts;
+      const { path: path12, method, body, headers, query } = opts;
       return {
-        path: path11,
+        path: path12,
         method,
         body,
         headers,
@@ -13464,10 +13464,10 @@ var require_pending_interceptors_formatter = __commonJS({
       }
       format(pendingInterceptors) {
         const withPrettyHeaders = pendingInterceptors.map(
-          ({ method, path: path11, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
+          ({ method, path: path12, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
             Method: method,
             Origin: origin,
-            Path: path11,
+            Path: path12,
             "Status code": statusCode,
             Persistent: persist ? PERSISTENT : NOT_PERSISTENT,
             Invocations: timesInvoked,
@@ -13549,9 +13549,9 @@ var require_mock_agent = __commonJS({
         const acceptNonStandardSearchParameters = this[kMockAgentAcceptsNonStandardSearchParameters];
         const dispatchOpts = { ...opts };
         if (acceptNonStandardSearchParameters && dispatchOpts.path) {
-          const [path11, searchParams] = dispatchOpts.path.split("?");
+          const [path12, searchParams] = dispatchOpts.path.split("?");
           const normalizedSearchParams = normalizeSearchParams(searchParams, acceptNonStandardSearchParameters);
-          dispatchOpts.path = `${path11}?${normalizedSearchParams}`;
+          dispatchOpts.path = `${path12}?${normalizedSearchParams}`;
         }
         return this[kAgent].dispatch(dispatchOpts, handler);
       }
@@ -13679,8 +13679,8 @@ var require_snapshot_utils = __commonJS({
         match: new Set(matchHeaders.map((header) => caseSensitive ? header : header.toLowerCase()))
       };
     }
-    var crypto = runtimeFeatures.has("crypto") ? __require("crypto") : null;
-    var hashId2 = crypto?.hash ? (value) => crypto.hash("sha256", value, "base64url") : (value) => Buffer.from(value).toString("base64url");
+    var crypto2 = runtimeFeatures.has("crypto") ? __require("crypto") : null;
+    var hashId3 = crypto2?.hash ? (value) => crypto2.hash("sha256", value, "base64url") : (value) => Buffer.from(value).toString("base64url");
     function isUndiciHeaders(headers) {
       return Array.isArray(headers) && (headers.length & 1) === 0;
     }
@@ -13742,7 +13742,7 @@ var require_snapshot_utils = __commonJS({
     }
     module.exports = {
       createHeaderFilters,
-      hashId: hashId2,
+      hashId: hashId3,
       isUndiciHeaders,
       normalizeHeaders,
       isUrlExcludedFactory,
@@ -13759,7 +13759,7 @@ var require_snapshot_recorder = __commonJS({
     var { dirname: dirname6, resolve } = __require("path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = __require("timers");
     var { InvalidArgumentError, UndiciError } = require_errors();
-    var { hashId: hashId2, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
+    var { hashId: hashId3, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
     function formatRequestKey(opts, headerFilters, matchOptions = {}) {
       const url = new URL(opts.path, opts.origin);
       const normalized = opts._normalizedHeaders || normalizeHeaders(opts.headers);
@@ -13822,7 +13822,7 @@ var require_snapshot_recorder = __commonJS({
       }
       parts.push(formattedRequest.body);
       const content = parts.join("|");
-      return hashId2(content);
+      return hashId3(content);
     }
     var SnapshotRecorder = class {
       /** @type {NodeJS.Timeout | null} */
@@ -13952,12 +13952,12 @@ var require_snapshot_recorder = __commonJS({
        * @return {Promise<void>} - Resolves when snapshots are loaded
        */
       async loadSnapshots(filePath) {
-        const path11 = filePath || this.#snapshotPath;
-        if (!path11) {
+        const path12 = filePath || this.#snapshotPath;
+        if (!path12) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile3(resolve(path11), "utf8");
+          const data = await readFile3(resolve(path12), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -13971,7 +13971,7 @@ var require_snapshot_recorder = __commonJS({
           if (error.code === "ENOENT") {
             this.#snapshots.clear();
           } else {
-            throw new UndiciError(`Failed to load snapshots from ${path11}`, { cause: error });
+            throw new UndiciError(`Failed to load snapshots from ${path12}`, { cause: error });
           }
         }
       }
@@ -13982,11 +13982,11 @@ var require_snapshot_recorder = __commonJS({
        * @returns {Promise<void>} - Resolves when snapshots are saved
        */
       async saveSnapshots(filePath) {
-        const path11 = filePath || this.#snapshotPath;
-        if (!path11) {
+        const path12 = filePath || this.#snapshotPath;
+        if (!path12) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
-        const resolvedPath = resolve(path11);
+        const resolvedPath = resolve(path12);
         await mkdir3(dirname6(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash, snapshot]) => ({
           hash,
@@ -14618,15 +14618,15 @@ var require_redirect_handler = __commonJS({
           return;
         }
         const { origin, pathname, search } = util.parseURL(new URL(this.location, this.opts.origin && new URL(this.opts.path, this.opts.origin)));
-        const path11 = search ? `${pathname}${search}` : pathname;
-        const redirectUrlString = `${origin}${path11}`;
+        const path12 = search ? `${pathname}${search}` : pathname;
+        const redirectUrlString = `${origin}${path12}`;
         for (const historyUrl of this.history) {
           if (historyUrl.toString() === redirectUrlString) {
             throw new InvalidArgumentError(`Redirect loop detected. Cannot redirect to ${origin}. This typically happens when using a Client or Pool with cross-origin redirects. Use an Agent for cross-origin redirects.`);
           }
         }
         this.opts.headers = cleanRequestHeaders(this.opts.headers, statusCode === 303, this.opts.origin !== origin);
-        this.opts.path = path11;
+        this.opts.path = path12;
         this.opts.origin = origin;
         this.opts.query = null;
       }
@@ -16395,10 +16395,10 @@ var require_cache_handler = __commonJS({
       }
       return locationUrl.pathname + locationUrl.search;
     }
-    function deleteCachedUri(store, cacheKey, path11) {
+    function deleteCachedUri(store, cacheKey, path12) {
       deleteCachedValue(store, {
         ...cacheKey,
-        path: path11
+        path: path12
       });
       for (let i = 0; i < util.safeHTTPMethods.length; i++) {
         const method = util.safeHTTPMethods[i];
@@ -16406,7 +16406,7 @@ var require_cache_handler = __commonJS({
           deleteCachedValue(store, {
             ...cacheKey,
             method,
-            path: path11
+            path: path12
           });
         }
       }
@@ -16417,9 +16417,9 @@ var require_cache_handler = __commonJS({
       }
       const values = Array.isArray(headerValue2) ? headerValue2 : [headerValue2];
       for (let i = 0; i < values.length; i++) {
-        const path11 = getSameOriginPath(cacheKey, values[i]);
-        if (path11 !== void 0) {
-          deleteCachedUri(store, cacheKey, path11);
+        const path12 = getSameOriginPath(cacheKey, values[i]);
+        if (path12 !== void 0) {
+          deleteCachedUri(store, cacheKey, path12);
         }
       }
     }
@@ -20209,10 +20209,10 @@ var require_subresource_integrity = __commonJS({
     var assert = __require("assert");
     var { runtimeFeatures } = require_runtime_features();
     var validSRIHashAlgorithmTokenSet = /* @__PURE__ */ new Map([["sha256", 0], ["sha384", 1], ["sha512", 2]]);
-    var crypto;
+    var crypto2;
     if (runtimeFeatures.has("crypto")) {
-      crypto = __require("crypto");
-      const cryptoHashes = crypto.getHashes();
+      crypto2 = __require("crypto");
+      const cryptoHashes = crypto2.getHashes();
       if (cryptoHashes.length === 0) {
         validSRIHashAlgorithmTokenSet.clear();
       }
@@ -20302,7 +20302,7 @@ var require_subresource_integrity = __commonJS({
       return result;
     }
     var applyAlgorithmToBytes = (algorithm, bytes) => {
-      return crypto.hash(algorithm, bytes, "base64");
+      return crypto2.hash(algorithm, bytes, "base64");
     };
     function caseSensitiveMatch(actualValue, expectedValue) {
       let actualValueLength = actualValue.length;
@@ -21297,11 +21297,11 @@ var require_fetch = __commonJS({
       function dispatch({ body }) {
         const url = requestCurrentURL(request);
         const agent = fetchParams.controller.dispatcher;
-        const path11 = url.pathname + url.search;
+        const path12 = url.pathname + url.search;
         const hasTrailingQuestionMark = url.search.length === 0 && url.href[url.href.length - url.hash.length - 1] === "?";
         return new Promise((resolve, reject) => agent.dispatch(
           {
-            path: hasTrailingQuestionMark ? `${path11}?` : path11,
+            path: hasTrailingQuestionMark ? `${path12}?` : path12,
             origin: url.origin,
             method: request.method,
             body: agent.isMockActive ? request.body && (request.body.source || request.body.stream) : body,
@@ -22248,9 +22248,9 @@ var require_util4 = __commonJS({
         }
       }
     }
-    function validateCookiePath(path11) {
-      for (let i = 0; i < path11.length; ++i) {
-        const code = path11.charCodeAt(i);
+    function validateCookiePath(path12) {
+      for (let i = 0; i < path12.length; ++i) {
+        const code = path12.charCodeAt(i);
         if (code < 32 || // exclude CTLs (0-31)
         code > 126 || // exclude DEL and non-ascii
         code === 59) {
@@ -23285,7 +23285,7 @@ var require_connection = __commonJS({
     var { WebsocketFrameSend } = require_frame();
     var assert = __require("assert");
     var { runtimeFeatures } = require_runtime_features();
-    var crypto = runtimeFeatures.has("crypto") ? __require("crypto") : null;
+    var crypto2 = runtimeFeatures.has("crypto") ? __require("crypto") : null;
     var warningEmitted = false;
     function establishWebSocketConnection(url, protocols, client, handler, options) {
       const requestURL = url;
@@ -23305,7 +23305,7 @@ var require_connection = __commonJS({
         const headersList = getHeadersList(new Headers(options.headers));
         request.headersList = headersList;
       }
-      const keyValue = crypto.randomBytes(16).toString("base64");
+      const keyValue = crypto2.randomBytes(16).toString("base64");
       request.headersList.append("sec-websocket-key", keyValue, true);
       request.headersList.append("sec-websocket-version", "13", true);
       for (const protocol of protocols) {
@@ -23345,7 +23345,7 @@ var require_connection = __commonJS({
             return;
           }
           const secWSAccept = response.headersList.get("Sec-WebSocket-Accept");
-          const digest = crypto.hash("sha1", keyValue + uid, "base64");
+          const digest = crypto2.hash("sha1", keyValue + uid, "base64");
           if (secWSAccept !== digest) {
             failWebsocketConnection(handler, 1002, "Incorrect hash received in Sec-WebSocket-Accept header.");
             return;
@@ -25487,11 +25487,11 @@ var require_undici = __commonJS({
           if (typeof opts.path !== "string") {
             throw new InvalidArgumentError("invalid opts.path");
           }
-          let path11 = opts.path;
+          let path12 = opts.path;
           if (!opts.path.startsWith("/")) {
-            path11 = `/${path11}`;
+            path12 = `/${path12}`;
           }
-          url = new URL(util.parseOrigin(url).origin + path11);
+          url = new URL(util.parseOrigin(url).origin + path12);
         } else {
           if (!opts) {
             opts = typeof url === "object" ? url : {};
@@ -29907,36 +29907,36 @@ var require_pbkdf2 = __commonJS({
     require_md();
     require_util7();
     var pkcs5 = forge2.pkcs5 = forge2.pkcs5 || {};
-    var crypto;
+    var crypto2;
     if (forge2.util.isNodejs && !forge2.options.usePureJavaScript) {
-      crypto = __require("crypto");
+      crypto2 = __require("crypto");
     }
     module.exports = forge2.pbkdf2 = pkcs5.pbkdf2 = function(p2, s3, c, dkLen, md, callback) {
       if (typeof md === "function") {
         callback = md;
         md = null;
       }
-      if (forge2.util.isNodejs && !forge2.options.usePureJavaScript && crypto.pbkdf2 && (md === null || typeof md !== "object") && (crypto.pbkdf2Sync.length > 4 || (!md || md === "sha1"))) {
+      if (forge2.util.isNodejs && !forge2.options.usePureJavaScript && crypto2.pbkdf2 && (md === null || typeof md !== "object") && (crypto2.pbkdf2Sync.length > 4 || (!md || md === "sha1"))) {
         if (typeof md !== "string") {
           md = "sha1";
         }
         p2 = Buffer.from(p2, "binary");
         s3 = Buffer.from(s3, "binary");
         if (!callback) {
-          if (crypto.pbkdf2Sync.length === 4) {
-            return crypto.pbkdf2Sync(p2, s3, c, dkLen).toString("binary");
+          if (crypto2.pbkdf2Sync.length === 4) {
+            return crypto2.pbkdf2Sync(p2, s3, c, dkLen).toString("binary");
           }
-          return crypto.pbkdf2Sync(p2, s3, c, dkLen, md).toString("binary");
+          return crypto2.pbkdf2Sync(p2, s3, c, dkLen, md).toString("binary");
         }
-        if (crypto.pbkdf2Sync.length === 4) {
-          return crypto.pbkdf2(p2, s3, c, dkLen, function(err3, key) {
+        if (crypto2.pbkdf2Sync.length === 4) {
+          return crypto2.pbkdf2(p2, s3, c, dkLen, function(err3, key) {
             if (err3) {
               return callback(err3);
             }
             callback(null, key.toString("binary"));
           });
         }
-        return crypto.pbkdf2(p2, s3, c, dkLen, md, function(err3, key) {
+        return crypto2.pbkdf2(p2, s3, c, dkLen, md, function(err3, key) {
           if (err3) {
             return callback(err3);
           }
@@ -43539,6 +43539,7 @@ function createInitialState() {
   return {
     blocks: [],
     messageRefs: { byRaw: {}, byRef: {} },
+    tokenSnapshot: {},
     nudge: {
       lastPerMessageNudgeTokens: 0,
       lastNudgeShownTokens: 0,
@@ -43708,11 +43709,23 @@ function syncBlocks(messages, state) {
       byRaw: { ...state.messageRefs.byRaw },
       byRef: { ...state.messageRefs.byRef }
     },
+    // Snapshot is keyed by ref with primitive values — shallow copy suffices.
+    tokenSnapshot: { ...state.tokenSnapshot ?? {} },
     nudge: { ...state.nudge, anchors: { ...state.nudge.anchors } },
     stats: { ...state.stats },
     nextBlockId: state.nextBlockId,
     nextRunId: state.nextRunId
   };
+  const liveRefs = new Set(
+    messages.map((m2) => result.messageRefs.byRaw[m2.id]).filter((r) => typeof r === "string")
+  );
+  if (Object.keys(result.tokenSnapshot).length !== liveRefs.size) {
+    const pruned = {};
+    for (const [ref, n] of Object.entries(result.tokenSnapshot)) {
+      if (liveRefs.has(ref)) pruned[ref] = n;
+    }
+    result.tokenSnapshot = pruned;
+  }
   const consumedBlockIds = /* @__PURE__ */ new Set();
   for (const block of result.blocks) {
     for (const consumedId of block.directBlockIds) {
@@ -43760,7 +43773,8 @@ function defaultConfig(modelContextLimit, overrides = {}) {
       growthCap: 5e4,
       minGrowthFloor: 2e4,
       minGrowthRatio: 0.45,
-      emergencyThresholdPct: 0.95
+      emergencyThresholdPct: 0.95,
+      tier2GrowthMultiplier: 1.5
     },
     promotionThreshold: 5,
     truncate: { threshold: 0.95 },
@@ -44190,7 +44204,7 @@ var TAG_CLOSE = LT + "/acp" + GT;
 function acpTag(ref, tokens, type) {
   return TAG_OPEN + 'tokens="' + formatTokens(tokens) + '" type="' + type + '"' + GT + ref + TAG_CLOSE;
 }
-function renderMessage(message, map, countTokens, strategy) {
+function renderMessage(message, map, countTokens, strategy, snapshot = null) {
   const ref = refForRaw(map, message.id);
   if (!ref || ref === BLOCKED_REF) return message;
   if (strategy === "none") return message;
@@ -44201,26 +44215,33 @@ function renderMessage(message, map, countTokens, strategy) {
     "^" + escapeRegex(TAG_OPEN) + "[^>]*" + GT + escapeRegex(ref) + escapeRegex(TAG_CLOSE) + "\\n?"
   );
   const cleanText = (message.text || "").replace(ownTagRe, "");
-  const tokens = countTokens(cleanText);
+  const tokens = snapshot ? snapshot[ref] ?? (snapshot[ref] = countTokens(cleanText)) : countTokens(cleanText);
   const type = classifyType(message);
   const prefix = acpTag(ref, tokens, type) + "\n";
   if (!cleanText) return { ...message, text: prefix };
   return { ...message, text: prefix + cleanText };
 }
-function renderVisibleRefs(messages, state, countTokens = (text) => Math.ceil(text.length / 4), strategy = "all") {
+function renderWithSnapshot(messages, state, countTokens = (text) => Math.ceil(text.length / 4), strategy = "all") {
   const map = state.messageRefs;
-  return messages.map(
-    (message) => renderMessage(message, map, countTokens, strategy)
+  const snapshot = { ...state.tokenSnapshot ?? {} };
+  const rendered = messages.map(
+    (message) => renderMessage(message, map, countTokens, strategy, snapshot)
   );
+  return { messages: rendered, tokenSnapshot: snapshot };
 }
 function createRenderRefsNode(strategy) {
   return {
     name: "render-refs",
     run(io2, ctx) {
-      return {
-        ...io2,
-        messages: renderVisibleRefs(io2.messages, io2.state, ctx.countTokens, strategy)
-      };
+      const { messages, tokenSnapshot } = renderWithSnapshot(
+        io2.messages,
+        io2.state,
+        ctx.countTokens,
+        strategy
+      );
+      const prev = io2.state.tokenSnapshot;
+      const changed = !prev || Object.keys(tokenSnapshot).length !== Object.keys(prev).length;
+      return changed ? { ...io2, messages, state: { ...io2.state, tokenSnapshot } } : { ...io2, messages };
     }
   };
 }
@@ -44416,6 +44437,7 @@ function buildCompressibleRanges(messages, state, config, protectedZoneRefs, cou
       ref,
       refNum: rn2,
       tokens: countTokens(msg2.text ?? ""),
+      chars: (msg2.text ?? "").length,
       isTool: isToolMessage(msg2),
       isUser: msg2.role === "user"
     });
@@ -44436,6 +44458,7 @@ function buildCompressibleRanges(messages, state, config, protectedZoneRefs, cou
         endRef: info.ref,
         count: 1,
         tokens: info.tokens,
+        chars: info.chars,
         toolPct: info.isTool ? 100 : 0,
         textPct: info.isTool ? 0 : 100
       };
@@ -44443,6 +44466,7 @@ function buildCompressibleRanges(messages, state, config, protectedZoneRefs, cou
       cur.endRef = info.ref;
       cur.count++;
       cur.tokens += info.tokens;
+      cur.chars = (cur.chars ?? 0) + info.chars;
       if (info.isTool) {
         cur.toolPct = Math.round((cur.toolPct * (cur.count - 1) + 100) / cur.count);
       } else {
@@ -44485,6 +44509,51 @@ function buildCompressibleRanges(messages, state, config, protectedZoneRefs, cou
     protected: protectedRanges
   };
 }
+function mergeBatch(batch) {
+  const first = batch[0];
+  const last = batch[batch.length - 1];
+  const count = batch.reduce((s3, r) => s3 + r.count, 0);
+  const tokens = batch.reduce((s3, r) => s3 + r.tokens, 0);
+  const chars = batch.reduce((s3, r) => s3 + rangeChars(r), 0);
+  const toolPct = Math.round(
+    batch.reduce((s3, r) => s3 + r.toolPct * r.count, 0) / count
+  );
+  const merged = {
+    startRef: first.startRef,
+    endRef: last.endRef,
+    count,
+    tokens,
+    chars,
+    toolPct,
+    textPct: 100 - toolPct
+  };
+  if (batch.some((r) => r.dangerous === true)) {
+    merged.dangerous = true;
+  }
+  return merged;
+}
+function rangeChars(r) {
+  return r.chars ?? r.tokens * 4;
+}
+function mergeRangesToThreshold(ranges, minChars) {
+  if (minChars <= 0 || ranges.length === 0) return ranges;
+  const result = [];
+  let batch = [];
+  let batchChars = 0;
+  for (const r of ranges) {
+    batch.push(r);
+    batchChars += rangeChars(r);
+    if (batchChars >= minChars) {
+      result.push(mergeBatch(batch));
+      batch = [];
+      batchChars = 0;
+    }
+  }
+  if (batch.length > 0) {
+    result.push(mergeBatch(batch));
+  }
+  return result;
+}
 function runPipeline(nodes, initial, ctx) {
   let io2 = initial;
   for (const node of nodes) {
@@ -44764,7 +44833,10 @@ var recommendNode = {
     const nothingToCompress = contextRanges.compressible.length === 0;
     const recommendation = {
       contextRanges,
-      recommendedRanges: contextRanges.compressible,
+      recommendedRanges: mergeRangesToThreshold(
+        contextRanges.compressible,
+        ctx.config.compress.minCompressRange
+      ),
       nothingToCompress
     };
     return { ...io2, effects: { ...io2.effects, recommendation } };
@@ -44790,6 +44862,7 @@ var nudgeNode = {
     if (baseline > 0 && ctx.tokenCount < baseline - nudgeGrowthTokens) {
       stamped.lastPerMessageNudgeTokens = ctx.tokenCount;
       stamped.lastNudgeShownTokens = 0;
+      stamped.lastShownByTier = {};
     }
     if (stamped.lastPerMessageNudgeTokens === 0) {
       stamped.lastPerMessageNudgeTokens = ctx.tokenCount;
@@ -45058,10 +45131,11 @@ function resolveAdaptiveGrowth(modelContextLimit, nudge) {
     )
   );
 }
-function pendingByTier(state, recommendation, countTokens) {
+function pendingByTier(state, recommendation, countTokens, minCompressRange) {
   const out = {};
-  const compressible = recommendation?.contextRanges.compressible ?? [];
-  out[1] = { pending: compressible.reduce((s3, r) => s3 + r.tokens, 0), targetBlocks: [] };
+  const merged = recommendation?.recommendedRanges ?? [];
+  const effective = minCompressRange > 0 ? merged.filter((r) => (r.chars ?? r.tokens * 4) >= minCompressRange) : merged;
+  out[1] = { pending: effective.reduce((s3, r) => s3 + r.tokens, 0), targetBlocks: [] };
   const active = activeBlocks(state);
   const t1 = active.filter((b2) => b2.tier === 1);
   const t2 = active.filter((b2) => b2.tier === 2);
@@ -45076,6 +45150,7 @@ function decideNudge(input) {
   const nudgeGrowthTokens = resolveAdaptiveGrowth(limit, config.nudge);
   const overLimit = usage >= config.nudge.maxContextLimitPct;
   const emergencyOverride = usage >= config.nudge.emergencyThresholdPct;
+  const pressure = overLimit || emergencyOverride;
   const baseline = state.nudge.lastPerMessageNudgeTokens;
   const hadPendingNudge = state.nudge.lastNudgeShownTokens > 0;
   const hasPendingNudge = hadPendingNudge;
@@ -45087,44 +45162,67 @@ function decideNudge(input) {
   );
   const growthSinceReference = tokenCount - growthReference;
   const rec = recommendation;
-  const tiers = pendingByTier(state, rec, countTokens);
+  const tiers = pendingByTier(
+    state,
+    rec,
+    countTokens,
+    config.compress.minCompressRange
+  );
+  const tier2Threshold = Math.round(
+    nudgeGrowthTokens * (config.nudge.tier2GrowthMultiplier ?? 1.5)
+  );
   let injectedTier = null;
   let injectedReason = "";
   const growthReady = growthSinceReference >= growthFloor;
-  if (!overLimit && growthReady) {
-    for (const tier of [1, 2, 3]) {
-      if (!config.tiers.enabled && tier > 1) break;
-      const info = tiers[tier];
-      if (!info || info.pending < nudgeGrowthTokens) continue;
-      const lastShown = state.nudge.lastShownByTier[tier] ?? 0;
+  const t1Eff = tiers[1]?.pending ?? 0;
+  const t2Pen = tiers[2]?.pending ?? 0;
+  const t3Pen = tiers[3]?.pending ?? 0;
+  if (pressure) {
+    const candidates = [1];
+    if (config.tiers.enabled) {
+      candidates.push(2, 3);
+    }
+    let best = null;
+    let bestPending = 0;
+    for (const t of candidates) {
+      const p2 = tiers[t]?.pending ?? 0;
+      if (p2 > bestPending) {
+        bestPending = p2;
+        best = t;
+      }
+    }
+    if (best !== null && bestPending > 0) {
+      injectedTier = best;
+      const label = emergencyOverride ? "EMERGENCY" : "OVER-LIMIT";
+      injectedReason = best === 1 ? `${label} T1: max effective pending ${bestPending}, usage ${Math.round(usage * 100)}%` : `${label} T${best} distill: max pending ${bestPending} (T1 effective ${t1Eff}, T2 ${t2Pen}, T3 ${t3Pen}), usage ${Math.round(usage * 100)}%`;
+    }
+  } else if (growthReady) {
+    if (t1Eff >= nudgeGrowthTokens) {
+      injectedTier = 1;
+      injectedReason = `T1 effective ${t1Eff} >= ${nudgeGrowthTokens}, growth ${growthSinceReference}, usage ${Math.round(usage * 100)}%`;
+    } else if (config.tiers.enabled && t2Pen >= tier2Threshold && t2Pen > t1Eff) {
+      const lastShown = state.nudge.lastShownByTier[2] ?? 0;
       const cadenceMet = lastShown === 0 || tokenCount - lastShown >= growthFloor;
-      if (!cadenceMet) continue;
-      injectedTier = tier;
-      injectedReason = tier === 1 ? `T1 compressible ${info.pending} >= ${nudgeGrowthTokens}, growth ${growthSinceReference}, usage ${Math.round(usage * 100)}%` : `T${tier} distill ready: ${info.targetBlocks.length} tier-${tier - 1} blocks (${info.pending} tokens) >= ${nudgeGrowthTokens}, usage ${Math.round(usage * 100)}%`;
-      break;
-    }
-  } else if (overLimit) {
-    for (const tier of [1, 2, 3]) {
-      if (!config.tiers.enabled && tier > 1) break;
-      const info = tiers[tier];
-      if (!info || info.pending < config.compress.minCompressRange) continue;
-      injectedTier = tier;
-      injectedReason = emergencyOverride ? `EMERGENCY: usage ${Math.round(usage * 100)}% >= ${Math.round(config.nudge.emergencyThresholdPct * 100)}%, T${tier} pending ${info.pending}` : `OVER-LIMIT: usage ${Math.round(usage * 100)}% >= ${Math.round(config.nudge.maxContextLimitPct * 100)}%, T${tier} pending ${info.pending}`;
-      break;
+      if (cadenceMet) {
+        injectedTier = 2;
+        injectedReason = `T2 distill ready: ${tiers[2].targetBlocks.length} tier-1 blocks (${t2Pen} tokens) >= ${tier2Threshold} (1.5x) and > T1 effective ${t1Eff}, usage ${Math.round(usage * 100)}%`;
+      }
+    } else if (config.tiers.enabled && t3Pen >= tier2Threshold && t3Pen > t2Pen && t3Pen > t1Eff) {
+      const lastShown = state.nudge.lastShownByTier[3] ?? 0;
+      const cadenceMet = lastShown === 0 || tokenCount - lastShown >= growthFloor;
+      if (cadenceMet) {
+        injectedTier = 3;
+        injectedReason = `T3 condense ready: ${tiers[3].targetBlocks.length} tier-2 blocks (${t3Pen} tokens) >= ${tier2Threshold} (1.5x) and > T2 ${t2Pen} and > T1 effective ${t1Eff}, usage ${Math.round(usage * 100)}%`;
+      }
     }
   }
-  const shouldInject = injectedTier !== null || overLimit && (rec?.recommendedRanges?.length ?? 0) > 0;
+  const shouldInject = injectedTier !== null;
   let reason;
-  if (emergencyOverride && injectedTier !== null) {
-    reason = injectedReason;
-  } else if (emergencyOverride) {
-    reason = `EMERGENCY: usage ${Math.round(usage * 100)}% >= ${Math.round(config.nudge.emergencyThresholdPct * 100)}% (no compressible content)`;
-  } else if (overLimit && injectedTier !== null) {
-    reason = injectedReason;
-  } else if (overLimit) {
-    reason = `OVER-LIMIT: usage ${Math.round(usage * 100)}% >= ${Math.round(config.nudge.maxContextLimitPct * 100)}% (no compressible content)`;
-  } else if (injectedTier !== null) {
+  if (injectedTier !== null) {
     reason = injectedReason;
+  } else if (pressure) {
+    const label = emergencyOverride ? "EMERGENCY" : "OVER-LIMIT";
+    reason = `${label}: usage ${Math.round(usage * 100)}% but no tier has effective compressible content (T1 effective ${t1Eff}, T2 ${t2Pen}, T3 ${t3Pen}) \u2014 nudge suppressed to avoid offering ranges below minCompressRange`;
   } else {
     const tiersList = [1, 2, 3];
     const eligible = tiersList.filter((t) => config.tiers.enabled || t === 1);
@@ -45198,6 +45296,7 @@ function cloneState(state) {
       byRaw: { ...state.messageRefs.byRaw },
       byRef: { ...state.messageRefs.byRef }
     },
+    tokenSnapshot: { ...state.tokenSnapshot ?? {} },
     nudge: { ...state.nudge, anchors: { ...state.nudge.anchors } },
     stats: { ...state.stats },
     nextBlockId: state.nextBlockId,
@@ -45336,6 +45435,23 @@ var defaultPrompts = Object.freeze({
   tier2DistillRules: TIER2_DISTILL_RULES,
   tier3CondenseRules: TIER3_CONDENSE_RULES
 });
+function resolvePrompts(overrides, options = {}) {
+  const clean = {};
+  if (overrides) {
+    for (const [key, value] of Object.entries(overrides)) {
+      if (typeof value === "string") {
+        clean[key] = value;
+      }
+    }
+  }
+  const keys = Object.keys(clean);
+  if (keys.length > 0 && !options.acknowledgeRisk) {
+    throw new Error(
+      `resolvePrompts: overriding compression rules requires { acknowledgeRisk: true }. Overridden keys: ${keys.join(", ")}. These rules are quality-critical (tuned over months of production use); changing them can degrade summary quality and break retrieval (summaries may lose paths, signatures, decisions).`
+    );
+  }
+  return { ...defaultPrompts, ...clean };
+}
 function efficiencyNote(prompts) {
   return `This is an efficiency nudge to compress early and keep context lean \u2014 not an overflow warning. A separate, stronger alert will appear if the context is actually full.
 
@@ -45456,20 +45572,23 @@ ${lines.join("\n")}`;
 function renderNudgeText(decision, prompts = defaultPrompts) {
   const breakdownStr = formatBreakdown(decision.contextBreakdown);
   const rangesStr = formatRanges(decision.compressibleRanges, decision.protectedRanges ?? []);
+  const isEmergency = !!decision.breakdown?.emergencyOverride || !!decision.breakdown?.overLimit;
   if (decision.tier !== null && decision.tier >= 2) {
     const isT2 = decision.tier === 2;
     const targets = decision.tierTargetBlocks ?? [];
     const blockList = formatTierTargetBlocks(targets);
     const startId = targets[0]?.blockId ?? "b1";
     const endId = targets[targets.length - 1]?.blockId ?? "b5";
+    const voice = isEmergency ? "emergency" : "gentle";
+    const triggerLine = isEmergency ? `[EMERGENCY \u2014 TIER ${decision.tier} ${isT2 ? "DISTILLATION" : "CONDENSATION"}] Context limit reached \u2014 distill NOW into a denser summary to reclaim tokens.` : `[TIER ${decision.tier} ${isT2 ? "DISTILLATION" : "CONDENSATION"} TRIGGER]`;
     return {
-      voice: "gentle",
+      voice,
       text: [
         efficiencyNote(prompts),
         "",
         breakdownStr,
         "",
-        `[TIER ${decision.tier} ${isT2 ? "DISTILLATION" : "CONDENSATION"} TRIGGER]`,
+        triggerLine,
         isT2 ? `Your tier-1 compression summaries have accumulated. Distill them into a single denser tier-2 summary. Use block IDs as boundaries (startId and endId as bN). Any raw (uncompressed) messages sitting between the boundary blocks are absorbed into the tier-2 block as well \u2014 apply HOW TO COMPRESS to those raw messages and the TIER 2 distillation rules to the existing summaries, so the whole span is covered and nothing is lost.` : `Your tier-2 compression summaries have accumulated. Condense them further into a tier-3 ultra-condensed summary. Use block IDs as boundaries (startId and endId as bN). Any raw (uncompressed) messages sitting between the boundary blocks are absorbed into the tier-3 block as well \u2014 apply HOW TO COMPRESS to those raw messages and the TIER 3 condensation rules to the existing summaries, so the whole span is covered and nothing is lost.`,
         blockList,
         `Example: compress({ content: [{ startId: "${startId}", endId: "${endId}", summary: "..." }] })`,
@@ -45480,7 +45599,6 @@ function renderNudgeText(decision, prompts = defaultPrompts) {
       ].join("\n")
     };
   }
-  const isEmergency = !!decision.breakdown?.emergencyOverride || !!decision.breakdown?.overLimit;
   if (isEmergency) {
     return {
       voice: "emergency",
@@ -46420,13 +46538,13 @@ function getUpstreamConnectionStatus() {
 }
 
 // src/config.ts
-function safeReadJson(path11) {
+function safeReadJson(path12) {
   try {
-    const raw = readFileSync(path11, "utf8").replace(/^\uFEFF/, "");
+    const raw = readFileSync(path12, "utf8").replace(/^\uFEFF/, "");
     return JSON.parse(raw);
   } catch (e) {
     if (e.code !== "ENOENT") {
-      log("error", `[acp-config] failed to parse ${path11}: ${String(e)}`);
+      log("error", `[acp-config] failed to parse ${path12}: ${String(e)}`);
     }
     return void 0;
   }
@@ -46637,6 +46755,65 @@ function parsePromptCacheRouting(value) {
 function parseUpstreamProxyMode(value) {
   return value === "manual" || value === "auto" ? value : "direct";
 }
+function parseCompressSettings(v2) {
+  if (!v2 || typeof v2 !== "object" || Array.isArray(v2)) return void 0;
+  const obj = v2;
+  const out = {};
+  const numberOrPercent = (value) => typeof value === "number" && Number.isFinite(value) || typeof value === "string" && /^\d+(\.\d+)?%$/.test(value.trim());
+  let ok = true;
+  const takeNumber = (key) => {
+    if (!(key in obj)) return;
+    if (typeof obj[key] !== "number" || !Number.isFinite(obj[key])) ok = false;
+    else out[key] = obj[key];
+  };
+  for (const key of ["modelContextLimit", "maxContextLimit", "emergencyThresholdPercent"]) {
+    if (!(key in obj)) continue;
+    if (!numberOrPercent(obj[key])) {
+      ok = false;
+      continue;
+    }
+    out[key] = typeof obj[key] === "string" ? obj[key].trim() : obj[key];
+  }
+  for (const key of ["nudgeGrowthTokens", "preserveRecentMessages", "preserveRecentTokens", "minCompressRange"]) {
+    takeNumber(key);
+  }
+  if ("tiers" in obj) {
+    if (typeof obj.tiers !== "boolean") ok = false;
+    else out.tiers = obj.tiers;
+  }
+  for (const key of ["injectTool", "injectNudge"]) {
+    if (key in obj) {
+      if (typeof obj[key] !== "boolean") ok = false;
+      else out[key] = obj[key];
+    }
+  }
+  if ("acknowledgePromptsRisk" in obj) {
+    if (typeof obj.acknowledgePromptsRisk !== "boolean") ok = false;
+    else out.acknowledgePromptsRisk = obj.acknowledgePromptsRisk;
+  }
+  if ("prompts" in obj && obj.prompts !== void 0) {
+    const prompts = obj.prompts;
+    if (!prompts || typeof prompts !== "object" || Array.isArray(prompts)) {
+      ok = false;
+    } else {
+      const cleaned = {};
+      for (const [key, value] of Object.entries(prompts)) {
+        if (typeof value !== "string" || value.trim().length === 0) {
+          ok = false;
+          continue;
+        }
+        if (key !== "compressPhilosophy" && key !== "howToCompressRules" && key !== "tier2DistillRules" && key !== "tier3CondenseRules") {
+          ok = false;
+          continue;
+        }
+        cleaned[key] = value;
+      }
+      if (ok) out.prompts = cleaned;
+    }
+  }
+  if (!ok) return void 0;
+  return out;
+}
 function rejectLegacyRoute(key, value) {
   if (typeof value !== "string") return;
   throw new Error(
@@ -46661,6 +46838,7 @@ function resolveContextLimitValue(raw, nativeLimit) {
 }
 function mergeCompress(global2, provider, model) {
   const pick2 = (k2) => model?.[k2] ?? provider?.[k2] ?? global2?.[k2];
+  const promptLevels = [global2?.prompts, provider?.prompts, model?.prompts].filter(Boolean);
   return {
     modelContextLimit: pick2("modelContextLimit"),
     maxContextLimit: pick2("maxContextLimit"),
@@ -46669,13 +46847,31 @@ function mergeCompress(global2, provider, model) {
     preserveRecentMessages: pick2("preserveRecentMessages"),
     preserveRecentTokens: pick2("preserveRecentTokens"),
     minCompressRange: pick2("minCompressRange"),
-    tiers: pick2("tiers")
+    tiers: pick2("tiers"),
+    prompts: promptLevels.length > 0 ? Object.assign({}, ...promptLevels) : void 0,
+    acknowledgePromptsRisk: pick2("acknowledgePromptsRisk")
   };
 }
 function resolveCompress(routes, upstreamUrl, model, global2) {
   const route = findRoute(routes, upstreamUrl);
   return mergeCompress(global2, route?.compress, model ? route?.models?.[model]?.compress : void 0);
 }
+var warnedPromptsRisk = false;
+function resolveCompressPrompts(s3) {
+  if (!s3.prompts) return defaultPrompts;
+  if (s3.acknowledgePromptsRisk !== true) {
+    if (!warnedPromptsRisk) {
+      warnedPromptsRisk = true;
+      log("warn", "[compress] prompts override IGNORED: acknowledgePromptsRisk !== true. Set it to true to acknowledge the summary-quality risk.");
+    }
+    return defaultPrompts;
+  }
+  try {
+    return resolvePrompts(s3.prompts, { acknowledgeRisk: true });
+  } catch {
+    return defaultPrompts;
+  }
+}
 function hasCompressSettings(s3) {
   return Object.values(s3).some((v2) => v2 !== void 0);
 }
@@ -46714,6 +46910,12 @@ function parsePercent(v2) {
   if (s3.endsWith("%")) return Number(s3.slice(0, -1)) / 100;
   return Number(s3);
 }
+function resolveRequestConfig(base, routes, embeddedUrl, model, native, globalCompress) {
+  const compress = resolveCompress(routes, embeddedUrl, model, globalCompress);
+  const limit = resolveContextLimitValue(compress.modelContextLimit, native ?? base.modelContextLimit);
+  if (!hasCompressSettings(compress) && limit === base.modelContextLimit) return base;
+  return applyCompressSettings(base, limit, compress);
+}
 
 // src/registry.ts
 import { readFile, writeFile, mkdir } from "fs/promises";
@@ -46866,20 +47068,11 @@ async function fetchWithTimeout(url, opts, timeoutMs = UPSTREAM_TIMEOUT_MS, exte
   }
 }
 
-// src/util.ts
+// node_modules/acp-kernel/dist/wire/index.js
 import { createHash } from "crypto";
 function hashId(s3) {
   return createHash("sha256").update(s3, "utf8").digest("hex").slice(0, 16);
 }
-function safeJsonParse(s3) {
-  try {
-    return s3 ? JSON.parse(s3) : {};
-  } catch {
-    return {};
-  }
-}
-
-// src/message-id.ts
 function deriveMessageId(role, contentType, text, options = {}) {
   const seed = `${role}|${contentType}|${options.toolCallId ?? ""}|${options.toolName ?? ""}|${text}`;
   return "h_" + hashId(seed);
@@ -46892,8 +47085,6 @@ var ClusterCounter = class {
     return n === 0 ? baseId : `${baseId}_${n}`;
   }
 };
-
-// src/anthropic.ts
 function extractSystem(system) {
   if (!system) return "";
   if (typeof system === "string") return system;
@@ -47041,7 +47232,7 @@ function coreToAnthropic(messages, cacheControls) {
 function conversationSignalAnthropic(body, headerValue2) {
   if (headerValue2 && headerValue2.trim()) return headerValue2.trim();
   const firstUser = body.messages.find((m2) => m2.role === "user");
-  const seed = firstUser ? JSON.stringify(firstUser.content).slice(0, 200) : "default";
+  const seed = firstUser ? JSON.stringify(firstUser.content) : "default";
   return hashId(seed);
 }
 function safeStringify(v2) {
@@ -47059,15 +47250,11 @@ function safeParse(s3) {
     return {};
   }
 }
-
-// src/bili-message.ts
 function parseDataUrl(url) {
   const m2 = /^data:([^;,]+)(?:;base64)?,(.+)$/i.exec(url);
   if (!m2) return void 0;
   return { mediaType: m2[1], base64: m2[2] };
 }
-
-// src/openai.ts
 function openaiToCore(body) {
   const msgs = [];
   const clusters = new ClusterCounter();
@@ -47221,7 +47408,7 @@ ${extra}` : extra;
 function conversationSignalOpenai(body, headerValue2) {
   if (headerValue2 && headerValue2.trim()) return headerValue2.trim();
   const firstUser = body.messages.find((m2) => m2.role === "user");
-  const seed = firstUser ? stringContent(firstUser.content).slice(0, 200) : "default";
+  const seed = firstUser ? stringContent(firstUser.content) : "default";
   return hashId(seed);
 }
 function stringContent(content) {
@@ -47246,8 +47433,6 @@ function firstImagePart(content) {
   }
   return void 0;
 }
-
-// src/responses.ts
 var OPAQUE_ITEM_TYPES = /* @__PURE__ */ new Set([
   "additional_tools",
   "mcp_list_tools"
@@ -47523,13 +47708,32 @@ function conversationIdentityResponses(body, headerValue2) {
 function conversationSignalResponses(body, headerValue2) {
   return conversationIdentityResponses(body, headerValue2).value;
 }
+function createSubagentNamespaces() {
+  const anchors = /* @__PURE__ */ new Map();
+  return {
+    namespaceFor(identityValue, instructions) {
+      if (typeof instructions !== "string" || instructions.trim().length === 0) return identityValue;
+      const fp = hashId(instructions);
+      const anchor = anchors.get(identityValue);
+      if (anchor === void 0) {
+        anchors.set(identityValue, fp);
+        return identityValue;
+      }
+      return anchor === fp ? identityValue : `${identityValue}|sub:${fp}`;
+    }
+  };
+}
+var defaultNamespaces = createSubagentNamespaces();
+function subagentNamespace(identityValue, instructions) {
+  return defaultNamespaces.namespaceFor(identityValue, instructions);
+}
 
 // src/persist.ts
 import { promises as fs } from "fs";
 import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync2, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
 import { createHash as createHash2 } from "crypto";
 import * as path4 from "path";
-var PERSIST_VERSION = 2;
+var PERSIST_VERSION = 3;
 function mergeState(parsed) {
   const fresh = createInitialState();
   return {
@@ -47538,7 +47742,8 @@ function mergeState(parsed) {
     nudge: { ...fresh.nudge, ...parsed.nudge ?? {} },
     stats: { ...fresh.stats, ...parsed.stats ?? {} },
     nextBlockId: parsed.nextBlockId ?? fresh.nextBlockId,
-    nextRunId: parsed.nextRunId ?? fresh.nextRunId
+    nextRunId: parsed.nextRunId ?? fresh.nextRunId,
+    tokenSnapshot: parsed.tokenSnapshot ?? fresh.tokenSnapshot
   };
 }
 function hostLabel(upstreamOrigin) {
@@ -47686,6 +47891,7 @@ var SessionStore = class {
     this.writeChains.set(id, next);
     next.finally(() => {
       if (this.writeChains.get(id) === next) this.writeChains.delete(id);
+    }).catch(() => {
     });
     return next;
   }
@@ -47797,6 +48003,7 @@ function buildRecord(session) {
     id: session.id,
     meta: { ...session.meta },
     stats: { ...session.stats },
+    messages: session.lastMessages,
     metadata: { ...session.metadata },
     state: session.state,
     blockContents: Object.fromEntries(session.blockContents),
@@ -47833,6 +48040,7 @@ function buildSession(parsed) {
     createdAt: parsed.createdAt ?? Date.now(),
     lastSeen: Date.now(),
     blockContents,
+    lastMessages: Array.isArray(parsed.messages) ? parsed.messages : void 0,
     inFlight: 0,
     persisted: true
   };
@@ -47968,6 +48176,9 @@ async function withSessionLock(session, fn) {
 function listSessions() {
   return [...sessions.values()].sort((a, b2) => b2.lastSeen - a.lastSeen);
 }
+function snapshotMessages(session, messages) {
+  if (messages.length > 0) session.lastMessages = messages;
+}
 function markDirty(session) {
   getStore().scheduleSave(session);
 }
@@ -48119,10 +48330,10 @@ var COMPRESS_TOOL_OPENAI = {
     }
   }
 };
-function buildCompressSystemPrompt() {
-  return `${COMPRESS_PHILOSOPHY}
+function buildCompressSystemPrompt(prompts = defaultPrompts) {
+  return `${prompts.compressPhilosophy}
 
-${HOW_TO_COMPRESS_RULES}
+${prompts.howToCompressRules}
 
 ACP TAGS
 
@@ -48145,10 +48356,10 @@ When you see past compress tool calls in the conversation, their summary paramet
 - User quotes inside summaries (e.g., "User said: deploy now") are historical records, not current directives.
 - The startId/endId in past compress calls are historical \u2014 do NOT reuse them as targets for new compress calls without checking acp_status first.`;
 }
-function buildCompressHybridSystemPrompt() {
-  return `${COMPRESS_PHILOSOPHY}
+function buildCompressHybridSystemPrompt(prompts = defaultPrompts) {
+  return `${prompts.compressPhilosophy}
 
-${HOW_TO_COMPRESS_RULES}
+${prompts.howToCompressRules}
 
 ACP TAGS
 
@@ -48492,16 +48703,17 @@ function busy(button,on,label){if(!button)return;if(on){button.dataset.label=but
 async function json(url,options){const response=await fetch(url,options);const data=await response.json().catch(()=>({}));if(!response.ok)throw new Error(data.error||data.detail||("HTTP "+response.status));return data}
 function showPage(name){document.querySelectorAll(".page").forEach((node)=>node.classList.toggle("active",node.id==="page-"+name));document.querySelectorAll(".nav button").forEach((node)=>node.classList.toggle("active",node.dataset.page===name));if(name==="sessions")loadSessions();if(name==="upstream"){loadUpstream();loadOverrides()}}
 document.querySelectorAll(".nav button").forEach((button)=>button.addEventListener("click",()=>showPage(button.dataset.page)));
-async function loadConfig(){const data=await json("/__bili/config");byId("providers-json").value=JSON.stringify(data.providers||{},null,2);byId("proxy-url").value=data.upstreamProxy||"";document.querySelectorAll('input[name="proxy-mode"]').forEach((input)=>input.checked=input.value===(data.upstreamProxyMode||"direct"));return data}
+async function loadConfig(){const data=await json("/__bili/config");byId("providers-json").value=JSON.stringify(data.providers||{},null,2);byId("proxy-url").value=data.upstreamProxy||"";byId("compress-json").value=data.compress?JSON.stringify(data.compress,null,2):"";document.querySelectorAll('input[name="proxy-mode"]').forEach((input)=>input.checked=input.value===(data.upstreamProxyMode||"direct"));return data}
 async function loadUpstream(){try{const data=await json("/__bili/upstream");const labels={"provider":"Provider \u5355\u72EC\u4EE3\u7406","provider-direct":"Provider \u76F4\u8FDE","bili-env":"BILI_UPSTREAM_PROXY","web-manual":"Web \u624B\u52A8\u4EE3\u7406","config":"\u914D\u7F6E\u6587\u4EF6\u4EE3\u7406","HTTPS_PROXY":"HTTPS_PROXY","HTTP_PROXY":"HTTP_PROXY","ALL_PROXY":"ALL_PROXY","windows-system":"Windows \u7CFB\u7EDF\u4EE3\u7406","windows-bypass":"Windows \u7ED5\u8FC7\u5217\u8868","no-proxy":"NO_PROXY","direct":"\u76F4\u8FDE"};byId("upstream-source").textContent=labels[data.source]||data.source||"\u76F4\u8FDE";byId("upstream-effective").textContent=data.proxy||"direct";byId("upstream-pac").textContent=data.autoConfigUrl||"\u2014";const state=byId("upstream-state");state.className="status "+(data.connected===true?"ok":data.connected===false?"err":"");state.textContent=data.connected===true?"CONNECT \u6B63\u5E38":data.connected===false?(data.error||"\u8FDE\u63A5\u5931\u8D25"):"\u5C1A\u672A\u89C2\u5BDF\u5230\u4E0A\u6E38\u8FDE\u63A5"}catch(error){byId("upstream-state").textContent=String(error)}}
 async function saveUpstream(){const button=byId("save-upstream");busy(button,true,"\u4FDD\u5B58\u4E2D\u2026");const mode=document.querySelector('input[name="proxy-mode"]:checked').value;try{await json("/__bili/config",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify({upstreamProxyMode:mode,upstreamProxy:byId("proxy-url").value.trim()||null})});toast("\u4E0A\u6E38\u8BBE\u7F6E\u5DF2\u70ED\u66F4\u65B0");await loadUpstream()}catch(error){toast(String(error),true)}finally{busy(button,false)}}
 async function testUpstream(){const button=byId("test-upstream");busy(button,true,"\u6D4B\u8BD5\u4E2D\u2026");try{const data=await json("/__bili/upstream/test",{method:"POST"});toast("\u8FDE\u63A5\u6210\u529F\uFF0CHTTP "+data.status);await loadUpstream()}catch(error){toast(String(error),true);await loadUpstream()}finally{busy(button,false)}}
 async function saveProviders(){const button=byId("save-providers");busy(button,true,"\u4FDD\u5B58\u4E2D\u2026");try{const providers=JSON.parse(byId("providers-json").value);await json("/__bili/config",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify({providers})});await json("/__bili/config/reload",{method:"POST"});toast("Provider \u914D\u7F6E\u5DF2\u70ED\u66F4\u65B0")}catch(error){toast(String(error),true)}finally{busy(button,false)}}
+async function saveCompress(){const button=byId("save-compress");busy(button,true,"\u4FDD\u5B58\u4E2D\u2026");try{const text=byId("compress-json").value.trim();const compress=text?JSON.parse(text):null;await json("/__bili/config",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify({compress})});toast("\u538B\u7F29\u53C2\u6570\u5DF2\u70ED\u66F4\u65B0")}catch(error){toast(String(error),true)}finally{busy(button,false)}}
 async function loadOverrides(){try{const data=await loadConfig();const providers=data.providers||{};const box=byId("upstream-overrides");const entries=Object.entries(providers);if(entries.length===0){box.innerHTML='<p class="status">\u6682\u65E0 Provider\u3002\u5728"\u9AD8\u7EA7\u8BBE\u7F6E"\u9875\u6DFB\u52A0 Provider \u540E\u53EF\u5728\u6B64\u6309 URL \u914D\u7F6E\u4EE3\u7406\u3002</p>';return}box.innerHTML='<table><thead><tr><th>Provider URL</th><th>\u4E0A\u6E38\u4EE3\u7406\uFF08\u7A7A=\u7EE7\u627F\u5168\u5C40\uFF09</th></tr></thead><tbody>'+entries.map(([url,route])=>'<tr><td class="mono">'+escapeHtml(url)+'</td><td><input class="mono override-proxy" data-url="'+escapeHtml(url)+'" value="'+escapeHtml((route&&route.proxy)||"")+'" placeholder="\u7EE7\u627F\u5168\u5C40"></td></tr>').join("")+'</tbody></table>'}catch(error){byId("upstream-overrides").textContent=String(error)}}
 async function saveOverrides(){const button=byId("save-overrides");busy(button,true,"\u4FDD\u5B58\u4E2D\u2026");try{const data=await loadConfig();const providers=data.providers||{};document.querySelectorAll(".override-proxy").forEach((input)=>{const url=input.dataset.url;if(!url)return;if(!providers[url])providers[url]={};const val=input.value.trim();if(val)providers[url].proxy=val;else delete providers[url].proxy});await json("/__bili/config",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify({providers})});await json("/__bili/config/reload",{method:"POST"});toast("\u6309 URL \u8986\u76D6\u5DF2\u70ED\u66F4\u65B0");await loadOverrides()}catch(error){toast(String(error),true)}finally{busy(button,false)}}
 async function loadSessions(){try{const data=await json("/__bili/stats");const rows=(data.sessions||[]).map((item)=>"<tr><td>"+escapeHtml(item.title||"\u2014")+"</td><td>"+escapeHtml(item.protocol||"\u2014")+"</td><td class=mono>"+escapeHtml(item.label||"\u2014")+"</td><td>"+escapeHtml(item.requests)+"</td><td>"+escapeHtml(item.contextTokens)+"</td><td>"+escapeHtml(new Date(item.lastSeen).toLocaleString())+"</td></tr>").join("");byId("sessions-body").innerHTML=rows||'<tr><td colspan="6">\u6682\u65E0\u4F1A\u8BDD</td></tr>'}catch(error){toast(String(error),true);throw error}}
 async function refreshSessions(){const button=byId("refresh-sessions");busy(button,true,"\u5237\u65B0\u4E2D\u2026");try{await loadSessions();toast("\u4F1A\u8BDD\u5217\u8868\u5DF2\u5237\u65B0")}catch{}finally{busy(button,false)}}
-document.querySelectorAll(".copy-btn").forEach((btn)=>btn.addEventListener("click",async()=>{busy(btn,true,"\u590D\u5236\u4E2D\u2026");try{await navigator.clipboard.writeText(btn.dataset.copy||"");toast("\u5DF2\u590D\u5236")}catch(e){toast(String(e),true)}finally{busy(btn,false)}}));byId("save-upstream").addEventListener("click",saveUpstream);byId("test-upstream").addEventListener("click",testUpstream);byId("save-providers").addEventListener("click",saveProviders);byId("save-overrides").addEventListener("click",saveOverrides);byId("refresh-sessions").addEventListener("click",refreshSessions);
+document.querySelectorAll(".copy-btn").forEach((btn)=>btn.addEventListener("click",async()=>{busy(btn,true,"\u590D\u5236\u4E2D\u2026");try{await navigator.clipboard.writeText(btn.dataset.copy||"");toast("\u5DF2\u590D\u5236")}catch(e){toast(String(e),true)}finally{busy(btn,false)}}));byId("save-upstream").addEventListener("click",saveUpstream);byId("test-upstream").addEventListener("click",testUpstream);byId("save-providers").addEventListener("click",saveProviders);byId("save-compress").addEventListener("click",saveCompress);byId("save-overrides").addEventListener("click",saveOverrides);byId("refresh-sessions").addEventListener("click",refreshSessions);
 Promise.all([loadConfig(),loadUpstream()]).catch((error)=>toast(String(error),true));setInterval(()=>{if(byId("page-sessions").classList.contains("active"))loadSessions().catch(()=>{})},5000);
 `;
 
@@ -48532,7 +48744,7 @@ function renderPage(origin, version2) {
 <div class="card"><div class="card-head"><h2>ZCode\uFF08\u7F16\u7A0B\u5957\u9910\uFF09</h2><span class="badge">MITM</span></div><dl class="kv"><dt>\u65B9\u5F0F</dt><dd>MITM \u900F\u660E\u4EE3\u7406</dd><dt>\u8BBE\u7F6E</dt><dd>Settings \u2192 Network \u2192 HTTP Proxy = <span class="mono">${origin}</span></dd><dt>CA \u8BC1\u4E66</dt><dd class="mono">~/.local/share/billion-context/ca/root-ca.pem</dd></dl></div></section>
 <section id="page-upstream" class="page"><h1>\u4E0A\u6E38\u7F51\u7EDC</h1><p class="lead">\u63A7\u5236 bili \u5982\u4F55\u8BBF\u95EE\u771F\u5B9E Provider\uFF0C\u4E0D\u4F1A\u6539\u53D8\u5BA2\u6237\u7AEF\u7684\u672C\u5730\u8DEF\u7531\u5730\u5740\u3002</p><div class="card"><div class="card-head"><h2>\u5168\u5C40\u4EE3\u7406</h2></div><div class="modes"><label><input type="radio" name="proxy-mode" value="direct" checked>\u76F4\u8FDE\uFF08\u9ED8\u8BA4\uFF09</label><label><input type="radio" name="proxy-mode" value="manual">\u624B\u52A8\u4EE3\u7406</label><label><input type="radio" name="proxy-mode" value="auto">\u81EA\u52A8\uFF08\u8DDF\u968F\u7CFB\u7EDF\uFF09</label></div><div class="field"><label>HTTP / HTTPS Proxy</label><input id="proxy-url" class="mono" placeholder="http://127.0.0.1:7897"></div><dl class="kv"><dt>\u5F53\u524D\u6765\u6E90</dt><dd id="upstream-source">\u76F4\u8FDE</dd><dt>\u6709\u6548\u4EE3\u7406</dt><dd id="upstream-effective" class="mono">direct</dd><dt>\u7CFB\u7EDF PAC</dt><dd id="upstream-pac" class="mono">\u2014</dd><dt>\u72B6\u6001</dt><dd id="upstream-state" class="status">\u5C1A\u672A\u6D4B\u8BD5</dd></dl><div class="actions"><button id="save-upstream" class="btn primary">\u4FDD\u5B58\u5E76\u70ED\u66F4\u65B0</button><button id="test-upstream" class="btn">\u6D4B\u8BD5\u8FDE\u63A5</button></div></div><div class="card"><div class="card-head"><h2>\u6309 URL \u8986\u76D6</h2></div><p class="status">\u4E3A\u7279\u5B9A Provider \u5355\u72EC\u8BBE\u7F6E\u4E0A\u6E38\u4EE3\u7406\uFF0C\u8986\u76D6\u5168\u5C40\u8BBE\u7F6E\u3002\u7559\u7A7A = \u7EE7\u627F\u5168\u5C40\u3002</p><div id="upstream-overrides" class="status">\u52A0\u8F7D\u4E2D</div><div class="actions"><button id="save-overrides" class="btn primary">\u4FDD\u5B58\u8986\u76D6\u5E76\u70ED\u66F4\u65B0</button></div></div></section>
 <section id="page-sessions" class="page"><div class="card-head"><div><h1>\u4F1A\u8BDD</h1><p class="lead">ACP \u538B\u7F29\u72B6\u6001\u4E0E\u4E0A\u6E38\u7528\u91CF\u3002</p></div><button id="refresh-sessions" class="btn">\u5237\u65B0</button></div><div class="card"><table><thead><tr><th>\u6807\u9898</th><th>\u534F\u8BAE</th><th>\u6807\u8BC6</th><th>\u8BF7\u6C42</th><th>\u4E0A\u4E0B\u6587</th><th>\u6700\u540E\u6D3B\u52A8</th></tr></thead><tbody id="sessions-body"></tbody></table></div></section>
-<section id="page-settings" class="page"><h1>\u9AD8\u7EA7\u8BBE\u7F6E</h1><p class="lead">\u76F4\u63A5\u7F16\u8F91 providers JSON\uFF08\u6DFB\u52A0\u65B0 Provider\u3001\u914D\u7F6E\u6A21\u578B\u4E0A\u4E0B\u6587\u7A97\u53E3\u3001\u6309 URL \u4EE3\u7406\u7B49\uFF09\uFF1B\u4FDD\u5B58\u540E\u7ACB\u5373\u70ED\u66F4\u65B0\u3002</p><div class="card"><div class="field"><label>providers JSON</label><textarea id="providers-json">{}</textarea></div><div class="actions"><button id="save-providers" class="btn primary">\u4FDD\u5B58\u5E76\u5E94\u7528</button></div></div></section></main></div><div id="toast" class="toast"></div><script>${WEB_CLIENT}</script></body></html>`;
+<section id="page-settings" class="page"><h1>\u9AD8\u7EA7\u8BBE\u7F6E</h1><p class="lead">\u76F4\u63A5\u7F16\u8F91 providers JSON\uFF08\u6DFB\u52A0\u65B0 Provider\u3001\u914D\u7F6E\u6A21\u578B\u4E0A\u4E0B\u6587\u7A97\u53E3\u3001\u6309 URL \u4EE3\u7406\u7B49\uFF09\uFF1B\u4FDD\u5B58\u540E\u7ACB\u5373\u70ED\u66F4\u65B0\u3002</p><div class="card"><div class="field"><label>providers JSON</label><textarea id="providers-json">{}</textarea></div><div class="actions"><button id="save-providers" class="btn primary">\u4FDD\u5B58\u5E76\u5E94\u7528</button></div></div><div class="card"><div class="card-head"><h2>\u538B\u7F29\u53C2\u6570\uFF08\u5168\u5C40\uFF09</h2></div><p class="status">\u5168\u5C40 compress \u914D\u7F6E\uFF08modelContextLimit / maxContextLimit / emergencyThresholdPercent / nudgeGrowthTokens / preserveRecentMessages / preserveRecentTokens / minCompressRange / tiers / injectTool / injectNudge\uFF09\u3002\u4FDD\u5B58\u540E\u70ED\u66F4\u65B0\uFF0C\u65E0\u9700\u91CD\u542F\u3002\u7F6E\u7A7A = \u6062\u590D\u9ED8\u8BA4\u3002</p><div class="field"><label>compress JSON</label><textarea id="compress-json" placeholder='{"modelContextLimit": 200000}'></textarea></div><div class="actions"><button id="save-compress" class="btn primary">\u4FDD\u5B58\u5E76\u70ED\u66F4\u65B0</button></div></div></section></main></div><div id="toast" class="toast"></div><script>${WEB_CLIENT}</script></body></html>`;
 }
 
 // src/web/api.ts
@@ -48577,12 +48789,14 @@ function atomicWriteConfig(config) {
 }
 async function handleConfigGet(res) {
   const upstream = readUpstreamSettings();
+  const config = readConfig();
   res.writeHead(200, { "content-type": "application/json" });
   res.end(JSON.stringify({
     path: configFile(),
     providers: readProviders(),
     upstreamProxy: upstream.proxy ?? null,
-    upstreamProxyMode: upstream.mode
+    upstreamProxyMode: upstream.mode,
+    compress: config.compress ?? null
   }, null, 2));
 }
 async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
@@ -48592,7 +48806,8 @@ async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
   const hasProviders = Object.prototype.hasOwnProperty.call(body, "providers");
   const hasProxy = Object.prototype.hasOwnProperty.call(body, "upstreamProxy");
   const hasMode = Object.prototype.hasOwnProperty.call(body, "upstreamProxyMode");
-  if (!hasProviders && !hasProxy && !hasMode) return sendError(res, 400, "expected providers or upstream proxy settings");
+  const hasCompress = Object.prototype.hasOwnProperty.call(body, "compress");
+  if (!hasProviders && !hasProxy && !hasMode && !hasCompress) return sendError(res, 400, "expected providers, upstream proxy, or compress settings");
   const routes = {};
   if (hasProviders) {
     if (!body.providers || typeof body.providers !== "object" || Array.isArray(body.providers)) {
@@ -48631,6 +48846,11 @@ async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
   if (mode === "manual" && !proxy && !readUpstreamSettings().proxy) {
     return sendError(res, 400, "manual mode requires an upstream proxy URL");
   }
+  let compress;
+  if (hasCompress) {
+    compress = body.compress === null ? {} : parseCompressSettings(body.compress);
+    if (compress === void 0) return sendError(res, 400, "invalid compress settings");
+  }
   const config = readConfig();
   if (hasProviders) config.providers = routes;
   if (hasProxy) {
@@ -48638,13 +48858,21 @@ async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
     else delete config.upstreamProxy;
   }
   if (hasMode && mode) config.upstreamProxyMode = mode;
+  if (hasCompress) {
+    if (compress && Object.keys(compress).length > 0) config.compress = compress;
+    else delete config.compress;
+  }
   try {
     atomicWriteConfig(config);
     onChanged?.();
   } catch (error) {
     return sendError(res, 500, `failed to apply config: ${String(error)}`);
   }
-  log("info", `[acp-web] configuration updated (${hasProviders ? `${Object.keys(routes).length} routes` : "network only"})`);
+  const changed = [];
+  if (hasProviders) changed.push(`${Object.keys(routes).length} routes`);
+  if (hasProxy || hasMode) changed.push("network");
+  if (hasCompress) changed.push("compress");
+  log("info", `[acp-web] configuration updated (${changed.join(", ") || "none"})`);
   res.writeHead(200, { "content-type": "application/json" });
   res.end(JSON.stringify({ ok: true, providers: hasProviders ? Object.keys(routes).length : void 0 }));
 }
@@ -48819,6 +49047,8 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
       if (signal?.aborted) break;
       let assistantText = "";
       let assistantReasoning = "";
+      const reasoningSegments = [];
+      let reasoningSealed = true;
       const calls = [];
       let usage = {};
       let finishReason;
@@ -48833,6 +49063,15 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
           }
         } else if (ev.kind === "reasoning") {
           assistantReasoning += ev.delta;
+          let seg = reasoningSegments[reasoningSegments.length - 1];
+          if (reasoningSealed || !seg) {
+            seg = { text: "", signature: "" };
+            reasoningSegments.push(seg);
+            reasoningSealed = false;
+          }
+          seg.text += ev.delta;
+          if (ev.signature) seg.signature += ev.signature;
+          if (ev.blockEnd) reasoningSealed = true;
           if (!ctx.textProtocol) {
             if (ev.raw) {
               yield ev.raw;
@@ -48902,15 +49141,20 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
         if (realCalls > 0) ctx.log(`[acp-loop] round ${round}: ${realCalls} real tool call(s) forwarded to client`);
       }
       if (proxyResults.length > 0) {
-        if (assistantReasoning.length > 0) {
-          const reasoningMsg = {
-            id: `acp_loop_r${round}_reasoning`,
-            role: "assistant",
-            contentType: "reasoning",
-            text: assistantReasoning,
-            reasoningContent: assistantReasoning
-          };
-          coreMessages.push(reasoningMsg);
+        if (reasoningSegments.length > 0) {
+          for (let i = 0; i < reasoningSegments.length; i++) {
+            const seg = reasoningSegments[i];
+            if (seg.text.length === 0 && seg.signature.length === 0) continue;
+            const reasoningMsg = {
+              id: i === 0 ? `acp_loop_r${round}_reasoning` : `acp_loop_r${round}_reasoning_${i + 1}`,
+              role: "assistant",
+              contentType: "reasoning",
+              text: seg.text,
+              reasoningContent: seg.text,
+              ...seg.signature.length > 0 ? { thinkingSignature: seg.signature } : {}
+            };
+            coreMessages.push(reasoningMsg);
+          }
         }
         if (assistantText.length > 0) {
           coreMessages.push({
@@ -49774,6 +50018,7 @@ ${systemPrompt}` : systemPrompt;
       let stopReason;
       let usageYielded = false;
       const indexMap = /* @__PURE__ */ new Map();
+      const thinkingIndexes = /* @__PURE__ */ new Set();
       for await (const eventStr of iterSseEvents2(upstream)) {
         const parsed = parseAnthropicSse(eventStr);
         if (!parsed) continue;
@@ -49798,6 +50043,7 @@ ${systemPrompt}` : systemPrompt;
             const id = typeof block.id === "string" ? block.id : `toolu_${upstreamIndex}`;
             pending.set(upstreamIndex, { id, name, json: "" });
           } else {
+            if (block.type === "thinking" || block.type === "redacted_thinking") thinkingIndexes.add(upstreamIndex);
             const ci2 = clientIndex++;
             indexMap.set(upstreamIndex, ci2);
             yield { kind: "meta", chunk: remapIndexInEvent(eventStr, ci2), firstRoundOnly: round === 1 };
@@ -49812,6 +50058,21 @@ ${systemPrompt}` : systemPrompt;
           } else if (delta.type === "text_delta" && typeof delta.text === "string") {
             const ci2 = indexMap.get(upstreamIndex) ?? upstreamIndex;
             yield { kind: "text", delta: delta.text, raw: remapIndexInEvent(eventStr, ci2) };
+          } else if (delta.type === "thinking_delta" && typeof delta.thinking === "string" && delta.thinking.length > 0) {
+            const ci2 = indexMap.get(upstreamIndex) ?? upstreamIndex;
+            yield {
+              kind: "reasoning",
+              delta: delta.thinking,
+              ...round === 1 ? { raw: remapIndexInEvent(eventStr, ci2) } : {}
+            };
+          } else if (delta.type === "signature_delta" && typeof delta.signature === "string") {
+            const ci2 = indexMap.get(upstreamIndex) ?? upstreamIndex;
+            yield {
+              kind: "reasoning",
+              delta: "",
+              signature: delta.signature,
+              ...round === 1 ? { raw: remapIndexInEvent(eventStr, ci2) } : {}
+            };
           } else if (round === 1) {
             const ci2 = indexMap.get(upstreamIndex) ?? upstreamIndex;
             yield { kind: "meta", chunk: remapIndexInEvent(eventStr, ci2), firstRoundOnly: true };
@@ -49827,6 +50088,12 @@ ${systemPrompt}` : systemPrompt;
               callId: tb.id,
               arguments: tb.json
             };
+          } else if (thinkingIndexes.delete(upstreamIndex)) {
+            if (round === 1) {
+              const ci2 = indexMap.get(upstreamIndex) ?? upstreamIndex;
+              yield { kind: "meta", chunk: remapIndexInEvent(eventStr, ci2), firstRoundOnly: true };
+            }
+            yield { kind: "reasoning", delta: "", blockEnd: true };
           } else {
             const ci2 = indexMap.get(upstreamIndex) ?? upstreamIndex;
             yield { kind: "meta", chunk: remapIndexInEvent(eventStr, ci2), firstRoundOnly: round === 1 };
@@ -49867,6 +50134,22 @@ ${systemPrompt}` : systemPrompt;
     emitText(delta) {
       return buildTextBlock(clientIndex++, delta);
     },
+    emitReasoning(delta) {
+      const index = clientIndex++;
+      return Buffer.from(
+        `event: content_block_start
+data: ${JSON.stringify({ type: "content_block_start", index, content_block: { type: "thinking", thinking: "" } })}
+
+event: content_block_delta
+data: ${JSON.stringify({ type: "content_block_delta", index, delta: { type: "thinking_delta", thinking: delta } })}
+
+event: content_block_stop
+data: ${JSON.stringify({ type: "content_block_stop", index })}
+
+`,
+        "utf8"
+      );
+    },
     emitToolCall(call) {
       return buildToolUseBlock(clientIndex++, call);
     },
@@ -50069,6 +50352,22 @@ async function compressLoopResponsesJson(initialResponse, ctx, requestBody, requ
   return current;
 }
 
+// src/util.ts
+import { createHash as createHash3 } from "crypto";
+function hashId2(s3) {
+  return createHash3("sha256").update(s3, "utf8").digest("hex").slice(0, 16);
+}
+function safeJsonParse(s3) {
+  try {
+    return s3 ? JSON.parse(s3) : {};
+  } catch {
+    return {};
+  }
+}
+function isLoopbackAddress(addr) {
+  return !!addr && (addr.startsWith("127.") || addr === "::1" || addr.startsWith("::ffff:127."));
+}
+
 // src/stream-openai.ts
 function rewriteOpenaiJsonResponse(body, ctx) {
   if (!body || typeof body !== "object") return body;
@@ -50112,7 +50411,6 @@ ${note}` : note;
 }
 
 // src/stream-responses.ts
-var TEXT_PROTOCOL = process.env.ACP_COMPRESS_PROTOCOL === "text";
 function rewriteResponsesJsonResponse(body, ctx) {
   if (!body || typeof body !== "object") return body;
   const b2 = body;
@@ -50165,12 +50463,35 @@ function emitStreamError(res, protocol, message, log2) {
 `);
       safeWrite(res, "data: [DONE]\n\n");
     } else if (protocol === "responses") {
+      const itemId = "msg_acp_error";
+      const oi2 = 0;
+      const errorItem = { type: "message", id: itemId, role: "assistant", content: [{ type: "output_text", text: visible }] };
+      safeWrite(res, `event: response.output_item.added
+data: ${JSON.stringify({ type: "response.output_item.added", output_index: oi2, item: { type: "message", id: itemId, role: "assistant", content: [] } })}
+
+`);
+      safeWrite(res, `event: response.content_part.added
+data: ${JSON.stringify({ type: "response.content_part.added", item_id: itemId, output_index: oi2, part: { type: "output_text", text: "" } })}
+
+`);
       safeWrite(res, `event: response.output_text.delta
-data: ${JSON.stringify({ type: "response.output_text.delta", delta: visible })}
+data: ${JSON.stringify({ type: "response.output_text.delta", item_id: itemId, output_index: oi2, delta: visible })}
+
+`);
+      safeWrite(res, `event: response.output_text.done
+data: ${JSON.stringify({ type: "response.output_text.done", item_id: itemId, output_index: oi2, text: visible })}
+
+`);
+      safeWrite(res, `event: response.content_part.done
+data: ${JSON.stringify({ type: "response.content_part.done", item_id: itemId, output_index: oi2, part: { type: "output_text", text: visible } })}
+
+`);
+      safeWrite(res, `event: response.output_item.done
+data: ${JSON.stringify({ type: "response.output_item.done", output_index: oi2, item: errorItem })}
 
 `);
       safeWrite(res, `event: response.completed
-data: ${JSON.stringify({ type: "response.completed", response: { status: "completed", output: [] } })}
+data: ${JSON.stringify({ type: "response.completed", response: { status: "completed", output: [errorItem] } })}
 
 `);
     } else {
@@ -50215,7 +50536,7 @@ function clientConversationHeader(headers) {
 function deriveSessionId(headers, protocol, upstream, conversation) {
   if (!conversation) throw new Error("deriveSessionId: conversation dimension is required (pass the conversationSignal* output)");
   const key = extractKey(headers);
-  return hashId(`${protocol}|${upstream}|${key}|${conversation}`);
+  return hashId2(`${protocol}|${upstream}|${key}|${conversation}`);
 }
 function affinityToken(identity) {
   return identity.clientProvided ? identity.value : void 0;
@@ -50231,12 +50552,50 @@ import path5 from "path";
 import tls2 from "tls";
 var ROOT_CERT_FILE = "root-ca.pem";
 var ROOT_KEY_FILE = "root-ca-key.pem";
+var COMBINED_CA_FILE = "combined-ca.pem";
 var ROOT_CN = "billion-context MITM Root CA";
+var PLATFORM_CA_CANDIDATES = process.platform === "darwin" ? ["/etc/ssl/cert.pem", "/private/etc/ssl/cert.pem"] : [
+  "/etc/ssl/certs/ca-certificates.crt",
+  "/etc/pki/tls/certs/ca-bundle.crt",
+  "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem",
+  "/etc/ssl/ca-bundle.pem",
+  "/etc/ssl/cert.pem"
+];
 var rootCertPem;
 var rootKeyPem;
 var rootCert;
 var rootKey;
 var secureContextCache = /* @__PURE__ */ new Map();
+var SECURE_CONTEXT_CACHE_MAX = 64;
+function collectSystemCaPems(env = process.env) {
+  const pems = [];
+  const seen = /* @__PURE__ */ new Set();
+  const pushFile = (file) => {
+    try {
+      const text = fs2.readFileSync(file, "utf8");
+      if (!text.includes("BEGIN CERTIFICATE") || seen.has(text)) return false;
+      seen.add(text);
+      pems.push(text);
+      return true;
+    } catch {
+    }
+    return false;
+  };
+  const userBundle = env.SSL_CERT_FILE?.trim();
+  if (userBundle && pushFile(userBundle)) return pems;
+  for (const candidate of PLATFORM_CA_CANDIDATES) {
+    if (pushFile(candidate)) break;
+  }
+  return pems;
+}
+function writeCombinedBundle() {
+  const certs = /* @__PURE__ */ new Set();
+  for (const pem of collectSystemCaPems()) certs.add(pem.trim());
+  for (const pem of tls2.rootCertificates) certs.add(pem.trim());
+  certs.add(rootCertPem.trim());
+  const body = [...certs].map((pem) => pem.endsWith("\n") ? pem : pem + "\n").join("");
+  fs2.writeFileSync(path5.join(caDir(), COMBINED_CA_FILE), body, { mode: 420 });
+}
 function generateRootCA() {
   const keys = import_node_forge.default.pki.rsa.generateKeyPair({ bits: 2048 });
   const cert = import_node_forge.default.pki.createCertificate();
@@ -50263,7 +50622,10 @@ function generateRootCA() {
   };
 }
 function ensureRootCA() {
-  if (rootCertPem && rootKeyPem) return;
+  if (rootCertPem && rootKeyPem) {
+    writeCombinedBundle();
+    return;
+  }
   const dir = caDir();
   fs2.mkdirSync(dir, { recursive: true });
   const certPath = path5.join(dir, ROOT_CERT_FILE);
@@ -50273,6 +50635,7 @@ function ensureRootCA() {
     rootKeyPem = fs2.readFileSync(keyPath, "utf8");
     rootCert = import_node_forge.default.pki.certificateFromPem(rootCertPem);
     rootKey = import_node_forge.default.pki.privateKeyFromPem(rootKeyPem);
+    writeCombinedBundle();
     return;
   }
   const { cert, key } = generateRootCA();
@@ -50282,13 +50645,18 @@ function ensureRootCA() {
   rootKeyPem = key;
   rootCert = import_node_forge.default.pki.certificateFromPem(cert);
   rootKey = import_node_forge.default.pki.privateKeyFromPem(key);
+  writeCombinedBundle();
 }
 function getSecureContext(host) {
   if (!rootCertPem || !rootKeyPem || !rootCert || !rootKey) {
     throw new Error("CA not initialized \u2014 call ensureRootCA() first");
   }
   const cached = secureContextCache.get(host);
-  if (cached) return cached;
+  if (cached) {
+    secureContextCache.delete(host);
+    secureContextCache.set(host, cached);
+    return cached;
+  }
   const keys = import_node_forge.default.pki.rsa.generateKeyPair({ bits: 2048 });
   const cert = import_node_forge.default.pki.createCertificate();
   cert.publicKey = keys.publicKey;
@@ -50311,6 +50679,10 @@ function getSecureContext(host) {
     ca: rootCertPem
   });
   secureContextCache.set(host, ctx);
+  if (secureContextCache.size > SECURE_CONTEXT_CACHE_MAX) {
+    const oldest = secureContextCache.keys().next().value;
+    if (oldest !== void 0) secureContextCache.delete(oldest);
+  }
   return ctx;
 }
 
@@ -50544,6 +50916,11 @@ var DEFAULT_MITM_DOMAINS = [
   "chatgpt.com"
 ];
 var MITM_UPSTREAM_KEY = "__biliMitmUpstream";
+var MITM_HANDSHAKE_TIMEOUT_MS_DEFAULT = 1e4;
+function mitmHandshakeTimeoutMs() {
+  const v2 = Number.parseInt(process.env.BILI_MITM_HANDSHAKE_TIMEOUT_MS ?? "", 10);
+  return Number.isFinite(v2) && v2 > 0 ? v2 : MITM_HANDSHAKE_TIMEOUT_MS_DEFAULT;
+}
 function isMitmHost(host, extraDomains = []) {
   const h = host.toLowerCase();
   const all = [...DEFAULT_MITM_DOMAINS, ...extraDomains, ...discoverMitmDomains()].map((d) => d.toLowerCase());
@@ -50553,12 +50930,12 @@ function setupMitm(server, extraDomains = [], log2 = () => {
 }, resolveProxyUrl) {
   ensureRootCA();
   server.on("connect", (req, clientSocket, head) => {
-    const { hostname, port } = parseHostPort(req.url ?? "");
-    if (!hostname) {
-      clientSocket.write("HTTP/1.1 400 Bad Request\r\n\r\n");
-      clientSocket.end();
+    if (!isLoopbackAddress(clientSocket.remoteAddress)) {
+      log2(`CONNECT ${req.url} rejected: non-loopback client ${clientSocket.remoteAddress}`);
+      clientSocket.end("HTTP/1.1 403 Forbidden\r\n\r\n");
       return;
     }
+    const { hostname, port } = parseHostPort(req.url ?? "");
     const targetPort = port || 443;
     if (!isMitmHost(hostname, extraDomains)) {
       const proxyUrl = resolveProxyUrl?.(hostname);
@@ -50578,14 +50955,20 @@ function parseHostPort(s3) {
 }
 function tunnelThrough(clientSocket, host, port, head, log2, proxyUrl) {
   let established = false;
+  let aborted = false;
   const connectTimer = setTimeout(() => {
     if (!established) {
+      aborted = true;
       log2(`tunnel ${host}:${port} connect timeout`);
       clientSocket.write("HTTP/1.1 504 Gateway Timeout\r\n\r\n");
       clientSocket.destroy();
     }
   }, 15e3);
   connectThroughProxy(host, port, proxyUrl).then((upstream) => {
+    if (aborted) {
+      upstream.destroy();
+      return;
+    }
     established = true;
     clearTimeout(connectTimer);
     clientSocket.write("HTTP/1.1 200 Connection Established\r\n\r\n");
@@ -50600,6 +50983,7 @@ function tunnelThrough(clientSocket, host, port, head, log2, proxyUrl) {
     upstream.once("error", (e) => cleanup("upstream", e));
     clientSocket.once("error", (e) => cleanup("client", e));
   }).catch((err2) => {
+    if (aborted) return;
     clearTimeout(connectTimer);
     log2(`tunnel ${host}:${port} connect failed: ${err2.message}`);
     clientSocket.write("HTTP/1.1 502 Bad Gateway\r\n\r\n");
@@ -50629,6 +51013,14 @@ function doMitm(server, clientSocket, host, port, head, log2) {
     tlsSocket.destroy();
     clientSocket.destroy();
   });
+  const handshakeTimer = setTimeout(() => {
+    log2(`mitm ${host}:${port} TLS handshake timeout`);
+    tlsSocket.destroy();
+    clientSocket.destroy();
+  }, mitmHandshakeTimeoutMs());
+  tlsSocket.once("secure", () => clearTimeout(handshakeTimer));
+  tlsSocket.once("close", () => clearTimeout(handshakeTimer));
+  tlsSocket.once("error", () => clearTimeout(handshakeTimer));
   server.emit("connection", tlsSocket);
   log2(`mitm ${host}:${port} tunnel established (TLS terminated locally)`);
 }
@@ -51364,8 +51756,28 @@ var UPSTREAM_HOP_HEADERS = /* @__PURE__ */ new Set([
   // Node's fetch transparently decodes compressed responses. Do not
   // forward the upstream encoding marker when the body is rewritten or
   // streamed from fetch, otherwise clients try to decompress plain bytes.
-  "content-encoding"
+  "content-encoding",
+  // RFC 7230 §6.1 hop-by-hop headers. proxy-authorization in particular
+  // carries client→proxy credentials that must never reach the model
+  // endpoint. (#80)
+  "proxy-authenticate",
+  "proxy-authorization",
+  "proxy-connection",
+  "te",
+  "trailer",
+  "upgrade"
 ]);
+function connectionNamedHeaders(conn) {
+  const out = /* @__PURE__ */ new Set();
+  if (!conn) return out;
+  for (const part of Array.isArray(conn) ? conn : [conn]) {
+    for (const name of part.split(",")) {
+      const t = name.trim().toLowerCase();
+      if (t) out.add(t);
+    }
+  }
+  return out;
+}
 function buildForwardHeaders(headers) {
   const out = {};
   for (const [k2, v2] of Object.entries(headers)) {
@@ -51485,28 +51897,38 @@ async function startServer(opts) {
   }
   return server;
 }
-function isLoopback(addr) {
-  if (!addr) return false;
-  return addr === "::1" || addr === "127.0.0.1" || addr.startsWith("127.") || addr.startsWith("::ffff:127.");
-}
-function isTrustedAdminOrigin(origin, host) {
+function isTrustedAdminOrigin(origin, host, trustedHosts) {
+  if (!host || !trustedHosts.has(host.toLowerCase())) return false;
   if (!origin) return true;
-  if (!host) return false;
   try {
     const parsed = new URL(origin);
-    return (parsed.protocol === "http:" || parsed.protocol === "https:") && parsed.host === host;
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return false;
+    return trustedHosts.has(parsed.host.toLowerCase());
   } catch {
     return false;
   }
 }
+function adminTrustedHosts(bindHost, port) {
+  const p2 = String(port);
+  const names = ["localhost", "127.0.0.1", "[::1]"];
+  if (bindHost && bindHost !== "0.0.0.0" && bindHost !== "::" && !names.includes(bindHost)) {
+    names.push(bindHost);
+  }
+  const set = /* @__PURE__ */ new Set();
+  for (const n of names) {
+    set.add(`${n}:${p2}`.toLowerCase());
+    if (p2 === "80") set.add(n.toLowerCase());
+  }
+  return set;
+}
 async function handle(req, res, opts, core, config, log2) {
   const isAdminPath = req.url === "/__bili/" || req.url?.startsWith("/__bili/") || req.url === "/__acp/" || req.url?.startsWith("/__acp/");
-  if (isAdminPath && !isLoopback(req.socket.remoteAddress)) {
+  if (isAdminPath && !isLoopbackAddress(req.socket.remoteAddress)) {
     res.writeHead(403, { "content-type": "application/json" });
     res.end(JSON.stringify({ error: "management endpoints are loopback-only; access denied for " + (req.socket.remoteAddress ?? "unknown") }));
     return;
   }
-  if (isAdminPath && !isTrustedAdminOrigin(req.headers.origin, req.headers.host)) {
+  if (isAdminPath && !isTrustedAdminOrigin(req.headers.origin, req.headers.host, adminTrustedHosts(opts.host, req.socket.localPort ?? opts.port))) {
     res.writeHead(403, { "content-type": "application/json" });
     res.end(JSON.stringify({ error: "management request origin does not match the local bili UI" }));
     return;
@@ -51542,6 +51964,7 @@ async function handle(req, res, opts, core, config, log2) {
       opts.proxyMode = fresh.proxyMode;
       opts.proxySource = fresh.proxySource;
       opts.proxyFallback = fresh.proxyFallback;
+      opts.compress = fresh.compress;
       resetProxyCache();
       for (const k2 of Object.keys(opts.routes)) delete opts.routes[k2];
       Object.assign(opts.routes, loadRoutes());
@@ -51660,11 +52083,11 @@ ${bodyBuffer.toString("utf8")}`);
     }
   }
   let reqConfig = config;
+  let reqPrompts = defaultPrompts;
   if (parsed && typeof parsed === "object") {
     const model = parsed.model;
     if (model) {
       const embeddedUrl = route?.rewrittenUrl;
-      const compress = resolveCompress(opts.routes, embeddedUrl, model, opts.compress);
       let native = resolveContextLimit(opts.routes, embeddedUrl, model);
       if (!native && embeddedUrl) {
         const host = (() => {
@@ -51676,11 +52099,8 @@ ${bodyBuffer.toString("utf8")}`);
         })();
         native = await contextFromRegistry(model, host);
       }
-      const limit = resolveContextLimitValue(compress.modelContextLimit, native ?? config.modelContextLimit);
-      const tuned = hasCompressSettings(compress);
-      if (tuned || limit !== config.modelContextLimit) {
-        reqConfig = applyCompressSettings(config, limit, compress);
-      }
+      reqConfig = resolveRequestConfig(config, opts.routes, embeddedUrl, model, native, opts.compress);
+      reqPrompts = resolveCompressPrompts(resolveCompress(opts.routes, embeddedUrl, model, opts.compress));
     }
   }
   let prepared = null;
@@ -51689,7 +52109,10 @@ ${bodyBuffer.toString("utf8")}`);
     const clientConv = clientConversationHeader(req.headers);
     const convHeader = clientConv ?? sessionHeader;
     const responsesIdentity = protocol === "responses" ? conversationIdentityResponses(parsed, convHeader) : void 0;
-    const conversation = protocol === "anthropic" ? conversationSignalAnthropic(parsed, convHeader) : protocol === "openai" ? conversationSignalOpenai(parsed, convHeader) : responsesIdentity?.value ?? conversationSignalResponses(parsed, convHeader);
+    const conversation = protocol === "anthropic" ? conversationSignalAnthropic(parsed, convHeader) : protocol === "openai" ? conversationSignalOpenai(parsed, convHeader) : subagentNamespace(
+      responsesIdentity?.value ?? conversationSignalResponses(parsed, convHeader),
+      parsed.instructions
+    );
     const sessionId = deriveSessionId(req.headers, protocol, upstreamOrigin, conversation);
     const affinity = affinityToken(responsesIdentity ?? {
       value: clientConv ?? conversation,
@@ -51701,7 +52124,7 @@ ${bodyBuffer.toString("utf8")}`);
     acquireInFlight(session);
     try {
       await withSessionLock(session, async () => {
-        prepared = countTokens ? prepareCountTokens(parsed, core, reqConfig, log2, session) : protocol === "anthropic" ? prepareAnthropic(parsed, req, opts, core, reqConfig, log2, session) : protocol === "openai" ? prepareOpenai(parsed, req, opts, core, reqConfig, log2, session) : responsesCompact ? prepareResponsesCompact(bodyBuffer, parsed, session) : prepareResponses(parsed, req, opts, core, reqConfig, log2, session, responsesIdentity);
+        prepared = countTokens ? prepareCountTokens(parsed, core, reqConfig, log2, session) : protocol === "anthropic" ? prepareAnthropic(parsed, req, opts, core, reqConfig, reqPrompts, log2, session) : protocol === "openai" ? prepareOpenai(parsed, req, opts, core, reqConfig, reqPrompts, log2, session) : responsesCompact ? prepareResponsesCompact(bodyBuffer, parsed, session) : prepareResponses(parsed, req, opts, core, reqConfig, reqPrompts, log2, session, responsesIdentity);
         await forward(req, res, opts, prepared.body, prepared, core, reqConfig, log2, route, affinity);
       });
     } finally {
@@ -51730,7 +52153,7 @@ function diagTagSummary(messages, sessionId, strategy) {
   }
   return `[${sessionId}] processTurn: ${messages.length} msgs, renderTags=${strategy}, ${textTagged} text tagged, ${toolTagged} tool tagged (should be 0 with text-only)`;
 }
-function diagNudge(turn, sessionId, tokenCount, limit) {
+function diagNudge(turn, sessionId, tokenCount, limit, model) {
   const n = turn.nudge;
   if (!n) return `[${sessionId}] nudge: unavailable`;
   const b2 = n.breakdown ?? {};
@@ -51741,9 +52164,10 @@ function diagNudge(turn, sessionId, tokenCount, limit) {
   const pendingT1 = b2["pendingT1"] ?? 0;
   const ref = b2["growthReference"] ?? 0;
   const inject = n.shouldInject ? `INJECT T${n.tier ?? "?"}` : "idle";
-  return `[${sessionId}] nudge ${inject}: usage=${pct2} (${tokenCount}/${limit}), growth=${growth}/${floor} (ref=${ref}, interval=${interval}), pendingT1=${pendingT1}/${interval}, reason="${n.reason.slice(0, 120)}"`;
+  const modelTag = model ? ` model=${model}` : "";
+  return `[${sessionId}] nudge ${inject}: usage=${pct2} (${tokenCount}/${limit}), growth=${growth}/${floor} (ref=${ref}, interval=${interval}), pendingT1=${pendingT1}/${interval}${modelTag}, reason="${n.reason.slice(0, 120)}"`;
 }
-function prepareAnthropic(parsed, req, opts, core, config, log2, session) {
+function prepareAnthropic(parsed, req, opts, core, config, prompts, log2, session) {
   const sessionId = session.id;
   const stream2 = parsed.stream === true;
   ++session.stats.requests;
@@ -51767,17 +52191,17 @@ function prepareAnthropic(parsed, req, opts, core, config, log2, session) {
       if (t) session.meta.title = t;
     }
     log2("info", diagTagSummary(turn.messages, sessionId, "text-only"));
-    log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit));
+    log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit, parsed.model));
     processedMessages = stripKernelSummaries(turn.messages);
     reapOrphanBlocks(session, msgs, deactivateBlock);
     rebuiltMessages = coreToAnthropic(processedMessages, cacheControls);
-    systemOut = injectSystem(parsed, opts);
+    systemOut = injectSystem(parsed, opts, prompts);
     if (opts.compress.injectTool) {
       toolsOut = injectTool(parsed.tools);
     }
     if (opts.compress.injectNudge && turn.nudge?.shouldInject) {
       try {
-        const rendered = renderNudgeText(turn.nudge);
+        const rendered = renderNudgeText(turn.nudge, prompts);
         if (rendered.text) {
           rebuiltMessages = [...rebuiltMessages, { role: "user", content: rendered.text }];
         }
@@ -51788,11 +52212,12 @@ function prepareAnthropic(parsed, req, opts, core, config, log2, session) {
     log2("warn", `[${sessionId}] kernel transform failed, forwarding unchanged: ${String(err2)}`);
     processedMessages = [];
   }
-  const rebuilt = { ...parsed, messages: rebuiltMessages, system: systemOut, tools: toolsOut };
+  snapshotMessages(session, originalMessages);
   markDirty(session);
-  return { body: JSON.stringify(rebuilt), session, processedMessages, originalMessages, anthropicSystem: parsed.system, protocol: "anthropic", stream: stream2, compressInjected: opts.compress.injectTool, nudge };
+  const rebuilt = { ...parsed, messages: rebuiltMessages, system: systemOut, tools: toolsOut };
+  return { body: JSON.stringify(rebuilt), session, processedMessages, originalMessages, anthropicSystem: parsed.system, protocol: "anthropic", stream: stream2, compressInjected: opts.compress.injectTool, nudge, prompts };
 }
-function prepareOpenai(parsed, req, opts, core, config, log2, session) {
+function prepareOpenai(parsed, req, opts, core, config, prompts, log2, session) {
   const sessionId = session.id;
   const stream2 = parsed.stream === true;
   ++session.stats.requests;
@@ -51817,19 +52242,19 @@ function prepareOpenai(parsed, req, opts, core, config, log2, session) {
       if (t) session.meta.title = t;
     }
     log2("info", diagTagSummary(turn.messages, sessionId, "text-only"));
-    log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit));
+    log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit, parsed.model));
     processedMessages = stripKernelSummaries(turn.messages);
     reapOrphanBlocks(session, msgs, deactivateBlock);
     rebuiltMessages = coreToOpenai(processedMessages);
     const sysParts = [];
-    if (shouldInject) sysParts.push(buildCompressSystemPrompt());
+    if (shouldInject) sysParts.push(buildCompressSystemPrompt(prompts));
     rebuiltMessages = injectOpenaiSystem(rebuiltMessages, sysParts);
     if (shouldInject) {
       toolsOut = injectOpenaiTool(parsed.tools);
     }
     if (opts.compress.injectNudge && turn.nudge?.shouldInject && shouldInject) {
       try {
-        const rendered = renderNudgeText(turn.nudge);
+        const rendered = renderNudgeText(turn.nudge, prompts);
         if (rendered.text) {
           rebuiltMessages = [...rebuiltMessages, { role: "user", content: rendered.text }];
         }
@@ -51844,10 +52269,11 @@ function prepareOpenai(parsed, req, opts, core, config, log2, session) {
   if (stream2 && rebuilt.stream_options === void 0) {
     rebuilt.stream_options = { include_usage: true };
   }
+  snapshotMessages(session, originalMessages);
   markDirty(session);
-  return { body: JSON.stringify(rebuilt), session, processedMessages, originalMessages, protocol: "openai", stream: stream2, compressInjected: shouldInject, nudge };
+  return { body: JSON.stringify(rebuilt), session, processedMessages, originalMessages, protocol: "openai", stream: stream2, compressInjected: shouldInject, nudge, prompts };
 }
-function prepareResponses(parsed, req, opts, core, config, log2, session, identity) {
+function prepareResponses(parsed, req, opts, core, config, prompts, log2, session, identity) {
   const sessionId = session.id;
   const stream2 = parsed.stream === true;
   ++session.stats.requests;
@@ -51880,12 +52306,12 @@ function prepareResponses(parsed, req, opts, core, config, log2, session, identi
       if (t) session.meta.title = t;
     }
     log2("info", diagTagSummary(turn.messages, sessionId, "text-only"));
-    log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit));
+    log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit, parsed.model));
     processedMessages = stripKernelSummaries(turn.messages);
     reapOrphanBlocks(session, msgs, deactivateBlock);
     rebuiltInput = patchResponsesInput(projection, processedMessages);
     if (shouldInject && !process.env.ACP_NO_COMPRESS_PROMPT) {
-      const prompt = responsesTextProtocol ? buildCompressHybridSystemPrompt() : buildCompressSystemPrompt();
+      const prompt = responsesTextProtocol ? buildCompressHybridSystemPrompt(prompts) : buildCompressSystemPrompt(prompts);
       const devContent = [...projection.systemParts, prompt].join("\n\n---\n\n");
       rebuiltInput = injectResponsesDeveloperMessage(rebuiltInput, devContent);
       if (!process.env.ACP_NO_INJECT_TOOL) {
@@ -51896,7 +52322,7 @@ function prepareResponses(parsed, req, opts, core, config, log2, session, identi
     }
     if (opts.compress.injectNudge && turn.nudge?.shouldInject && shouldInject) {
       try {
-        const rendered = renderNudgeText(turn.nudge);
+        const rendered = renderNudgeText(turn.nudge, prompts);
         if (rendered.text) {
           const inputItems = typeof rebuiltInput === "string" ? [{ type: "message", role: "user", content: rebuiltInput }] : rebuiltInput;
           inputItems.push({ type: "message", role: "user", content: rendered.text });
@@ -51927,6 +52353,7 @@ function prepareResponses(parsed, req, opts, core, config, log2, session, identi
     });
     log2("info", `[${sessionId}] responses forward tools=[${fwdTools.join(",")}] injectTool=${shouldInject} NO_INJECT_TOOL=${!!process.env.ACP_NO_INJECT_TOOL} NO_COMPRESS_PROMPT=${!!process.env.ACP_NO_COMPRESS_PROMPT}`);
   }
+  snapshotMessages(session, originalMessages);
   markDirty(session);
   return {
     body: JSON.stringify(rebuilt),
@@ -51938,7 +52365,8 @@ function prepareResponses(parsed, req, opts, core, config, log2, session, identi
     stream: stream2,
     compressInjected: shouldInject,
     responsesTextProtocol,
-    nudge
+    nudge,
+    prompts
   };
 }
 function isCountTokensRequest(method, urlPath, hasBody) {
@@ -52001,10 +52429,10 @@ function resolvePromptCacheKey(explicit, identity, routing, upstream) {
   if (!identity.clientProvided || !shouldInjectPromptCacheKey(routing, upstream)) return void 0;
   return identity.value;
 }
-function injectSystem(parsed, opts) {
+function injectSystem(parsed, opts, prompts = defaultPrompts) {
   const baseText = extractSystem(parsed.system);
   const parts = [];
-  if (opts.compress.injectTool) parts.push(buildCompressSystemPrompt());
+  if (opts.compress.injectTool) parts.push(buildCompressSystemPrompt(prompts));
   if (parts.length === 0) return parsed.system;
   const full = baseText ? `${baseText}
 
@@ -52083,8 +52511,10 @@ async function forward(req, res, opts, body, prepared, core, config, log2, route
     }
   }
   const headers = {};
+  const reqConnNamed = connectionNamedHeaders(req.headers["connection"]);
   for (const [k2, v2] of Object.entries(req.headers)) {
-    if (UPSTREAM_HOP_HEADERS.has(k2.toLowerCase()) || v2 === void 0) continue;
+    const lower = k2.toLowerCase();
+    if (UPSTREAM_HOP_HEADERS.has(lower) || reqConnNamed.has(lower) || v2 === void 0) continue;
     headers[k2] = Array.isArray(v2) ? v2.join(", ") : v2;
   }
   headers["host"] = new URL(upstreamUrl).host;
@@ -52145,14 +52575,17 @@ ${bodyText}`);
   }
   const { response: upstream, clearTimer: clearUpstreamTimer } = upstreamResult;
   const respHeaders = {};
+  const respConnNamed = connectionNamedHeaders(upstream.headers.get("connection") ?? void 0);
   upstream.headers.forEach((v2, k2) => {
-    if (UPSTREAM_HOP_HEADERS.has(k2.toLowerCase())) return;
+    const lower = k2.toLowerCase();
+    if (UPSTREAM_HOP_HEADERS.has(lower) || respConnNamed.has(lower)) return;
     respHeaders[k2] = v2;
   });
   if (opts.debug) {
     const respLog = {};
     upstream.headers.forEach((v2, k2) => {
-      if (UPSTREAM_HOP_HEADERS.has(k2.toLowerCase())) return;
+      const lower = k2.toLowerCase();
+      if (UPSTREAM_HOP_HEADERS.has(lower) || respConnNamed.has(lower)) return;
       respLog[k2] = v2.length > 300 ? v2.slice(0, 300) + "..." : v2;
     });
     log2("info", `[${prepared?.session.id ?? "unknown"}] \u2190 upstream response headers: ${JSON.stringify(respLog)}`);
@@ -52215,7 +52648,7 @@ ${hdrText}
       const parsedReq = JSON.parse(typeof body === "string" ? body : body.toString("utf8"));
       const reqHeaders = buildForwardHeaders(headers);
       const textProtocol = prepared.protocol === "responses" && !!prepared.responsesTextProtocol;
-      const systemPrompt = textProtocol ? buildCompressHybridSystemPrompt() : buildCompressSystemPrompt();
+      const systemPrompt = textProtocol ? buildCompressHybridSystemPrompt(prepared.prompts ?? defaultPrompts) : buildCompressSystemPrompt(prepared.prompts ?? defaultPrompts);
       const adapter = pickAdapter(prepared.protocol, parsedReq, textProtocol, prepared.responsesProjection, prepared.anthropicSystem);
       const abortCtrl = new AbortController();
       req.on("close", () => {
@@ -52317,10 +52750,10 @@ async function pipeThrough(stream2, res) {
   }
 }
 async function dumpStreamToFile(stream2, dir, name) {
-  const { mkdirSync: mkdirSync6, createWriteStream: createWriteStream2 } = await import("fs");
+  const { mkdirSync: mkdirSync7, createWriteStream: createWriteStream2 } = await import("fs");
   const { join: join4 } = await import("path");
   try {
-    mkdirSync6(dir, { recursive: true });
+    mkdirSync7(dir, { recursive: true });
     const ws2 = createWriteStream2(join4(dir, name));
     ws2.on("error", (e) => {
       log("debug", `[dump] write stream error: ${e.message ?? e}`);
@@ -52351,6 +52784,7 @@ function handleConfigReload(opts, res, log2) {
   const fresh = loadRoutes();
   for (const k2 of Object.keys(opts.routes)) delete opts.routes[k2];
   Object.assign(opts.routes, fresh);
+  opts.compress = loadOptions().compress;
   resetProxyCache();
   const names = Object.keys(fresh);
   log2("info", `[acp-web] routes hot-reloaded (${names.length} providers): ${names.join(", ") || "(none)"}`);
@@ -52422,6 +52856,7 @@ function logMsg(opts, level, msg2) {
 
 // src/update.ts
 import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2, access, constants, rm, cp, unlink } from "fs/promises";
+import crypto from "crypto";
 
 // node_modules/tar/dist/esm/index.min.js
 import Qr from "events";
@@ -55399,7 +55834,10 @@ var REGISTRY_BASE = "https://registry.npmjs.org";
 var CHECK_INTERVAL_MS = 3 * 60 * 1e3;
 var THROTTLE_FILE = path8.join(cacheDir(), ".update-check");
 var LOCK_FILE = path8.join(cacheDir(), ".update-lock");
-var LOCK_STALE_MS = 2 * 60 * 1e3;
+var LOCK_MAX_AGE_MS = 30 * 60 * 1e3;
+function shouldStealLock(holderAlive, ageMs) {
+  return !holderAlive || ageMs >= LOCK_MAX_AGE_MS;
+}
 var timer;
 var inFlight = false;
 var firstCheckDone = false;
@@ -55477,12 +55915,12 @@ async function tryAcquireLock() {
   }
   const existing = await readLock();
   if (existing) {
-    const age = now - existing.ts;
     const holderAlive = isAlive(existing.pid);
-    if (holderAlive && age < LOCK_STALE_MS) {
+    if (!shouldStealLock(holderAlive, now - existing.ts)) {
+      log("info", `[update] lock held by live pid=${existing.pid} (age=${Math.round((now - existing.ts) / 1e3)}s), skipping update`);
       return null;
     }
-    log("info", `[update] stealing stale lock (pid=${existing.pid}, age=${Math.round(age / 1e3)}s, alive=${holderAlive})`);
+    log("info", `[update] stealing lock from pid=${existing.pid} (alive=${holderAlive}, age=${Math.round((now - existing.ts) / 1e3)}s)`);
     try {
       await unlink(LOCK_FILE);
     } catch (e) {
@@ -55556,6 +55994,8 @@ async function checkForUpdate(opts, force = false) {
       return;
     }
     const tarballUrl = data.dist?.tarball;
+    const integrity = data.dist?.integrity;
+    const shasum = data.dist?.shasum;
     if (!tarballUrl) {
       log("warn", `[update] registry response for ${latest} had no tarball URL`);
       return;
@@ -55567,7 +56007,7 @@ async function checkForUpdate(opts, force = false) {
       return;
     }
     try {
-      const result = await installViaTarball(latest, tarballUrl, installDir);
+      const result = await installViaTarball(latest, tarballUrl, installDir, integrity, shasum);
       if (result.ok) {
         log("info", `[update] installed ${currentVersion} \u2192 ${latest}. Restart to finish.`);
       } else {
@@ -55582,7 +56022,29 @@ async function checkForUpdate(opts, force = false) {
     inFlight = false;
   }
 }
-async function installViaTarball(version2, tarballUrl, installDir) {
+function verifyTarballIntegrity(buf, integrity, shasum) {
+  if (integrity) {
+    const dash = integrity.indexOf("-");
+    if (dash <= 0) return { ok: false, error: "malformed integrity field" };
+    const alg = integrity.slice(0, dash);
+    const expected = integrity.slice(dash + 1);
+    let actual;
+    try {
+      actual = crypto.createHash(alg).update(buf).digest("base64");
+    } catch {
+      return { ok: false, error: `unsupported integrity algorithm: ${alg}` };
+    }
+    if (actual !== expected) return { ok: false, error: `${alg} mismatch` };
+    return { ok: true };
+  }
+  if (shasum) {
+    const actual = crypto.createHash("sha1").update(buf).digest("hex");
+    if (actual !== shasum) return { ok: false, error: "sha1 shasum mismatch" };
+    return { ok: true };
+  }
+  return { ok: false, error: "no integrity or shasum from registry" };
+}
+async function installViaTarball(version2, tarballUrl, installDir, integrity, shasum) {
   if (!installDir) {
     return { ok: false, error: "cannot determine install directory (package.json not found walking up from running binary)" };
   }
@@ -55621,6 +56083,10 @@ async function installViaTarball(version2, tarballUrl, installDir) {
   } catch (e) {
     return { ok: false, error: `tarball download failed: ${String(e)}` };
   }
+  const v2 = verifyTarballIntegrity(tgzBuffer, integrity, shasum);
+  if (!v2.ok) {
+    return { ok: false, error: `tarball integrity verification failed: ${v2.error}` };
+  }
   const tmpFile = path8.join(cacheDir(), `.update-${version2}.tgz`);
   try {
     await mkdir2(cacheDir(), { recursive: true });
@@ -55721,6 +56187,10 @@ function resolveCaCertPath(env) {
   const base = env.XDG_DATA_HOME || path9.join(os4.homedir(), ".local/share");
   return path9.join(base, "billion-context", "ca", "root-ca.pem");
 }
+function resolveCombinedCaPath(env) {
+  const base = env.XDG_DATA_HOME || path9.join(os4.homedir(), ".local/share");
+  return path9.join(base, "billion-context", "ca", "combined-ca.pem");
+}
 function discoverRoutes(client, config) {
   const httpsDomains = [];
   const httpRewrites = [];
@@ -56050,7 +56520,7 @@ async function runLaunch(params, deps = {}) {
     piTmpHome = preparePiHttpRewrite(resolvePiHome(process.env), handle2.origin, routes.httpRewrites, routes.httpsRewrites);
     if (piTmpHome) env.PI_CODING_AGENT_DIR = piTmpHome;
   } else if (base === "codex") {
-    env = buildCodexEnv(handle2.origin, ca, process.env);
+    env = buildCodexEnv(handle2.origin, resolveCombinedCaPath(process.env), process.env);
     clientArgs = buildCodexArgs(handle2.origin, routes.httpRewrites, routes.httpsRewrites, params.clientArgs);
   } else {
     env = buildClaudeEnv(handle2.origin, ca, routes.httpRewrites, routes.httpsRewrites, process.env);
@@ -56122,14 +56592,155 @@ async function runTestPi(params, deps = {}) {
   process.exit(code ?? 0);
 }
 
+// src/export.ts
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync5 } from "fs";
+import path10 from "path";
+function fmtDate(ms2) {
+  return ms2 ? new Date(ms2).toISOString().replace("T", " ").slice(0, 19) + " UTC" : "\u2014";
+}
+async function listSessions2(opts = {}) {
+  const store = new SessionStore({ dir: opts.dir, enabled: true });
+  const sessions2 = [...(await store.loadAll()).values()];
+  sessions2.sort((a, b2) => latestBlockTime(b2) - latestBlockTime(a));
+  return sessions2.map((s3) => ({
+    id: s3.id,
+    title: s3.meta.title,
+    label: s3.meta.label,
+    protocol: s3.meta.protocol,
+    upstreamOrigin: s3.meta.upstreamOrigin,
+    savedAt: latestBlockTime(s3) || void 0,
+    contextTokens: s3.stats.contextTokens,
+    blocks: s3.state.blocks.length
+  }));
+}
+function latestBlockTime(s3) {
+  let latest = 0;
+  for (const b2 of s3.state.blocks) if (b2.createdAt > latest) latest = b2.createdAt;
+  return latest;
+}
+function renderHandoff(s3, full) {
+  const lines = [];
+  lines.push(`# billion-context session handoff`);
+  lines.push("");
+  lines.push(`- title: ${s3.meta.title ?? "(untitled)"}`);
+  if (s3.meta.label) lines.push(`- label: ${s3.meta.label}`);
+  lines.push(`- session id: ${s3.id}`);
+  if (s3.meta.protocol) lines.push(`- protocol: ${s3.meta.protocol}`);
+  if (s3.meta.upstreamOrigin) lines.push(`- upstream: ${s3.meta.upstreamOrigin}`);
+  lines.push(`- requests: ${s3.stats.requests}`);
+  if (s3.stats.contextTokens) lines.push(`- last context tokens: ~${s3.stats.contextTokens}`);
+  lines.push(`- compression blocks: ${s3.state.blocks.length} (active ${s3.state.blocks.filter((b2) => b2.active).length})`);
+  lines.push("");
+  const messages = s3.lastMessages;
+  if (messages && messages.length > 0) {
+    lines.push(full ? `## Full conversation (${messages.length} messages)` : `## Conversation (folded view as the model saw it, ${messages.length} client messages)`);
+    lines.push("");
+    let lastRole = "";
+    const view = full ? messages : prune(messages, s3.state);
+    for (const m2 of view) {
+      if (m2.role !== lastRole) {
+        lines.push(`### ${m2.role}`);
+        lines.push("");
+        lastRole = m2.role;
+      }
+      lines.push(renderMessage2(m2));
+    }
+    lines.push("");
+    return lines.join("\n");
+  }
+  const active = s3.state.blocks.filter((b2) => b2.active);
+  if (active.length === 0) {
+    lines.push("No active compression blocks and no persisted conversation snapshot (v2 session file). Original messages are only persisted when they are compressed into a block, so this session's conversation content is not available for export.");
+    lines.push("");
+  }
+  for (const b2 of active) {
+    lines.push(`## Block ${b2.blockId}${b2.topic ? ` \u2014 ${b2.topic}` : ""}`);
+    lines.push("");
+    lines.push(`tier ${b2.tier} \xB7 ~${b2.compressedTokens} tokens compressed \xB7 ${fmtDate(b2.createdAt)}`);
+    lines.push("");
+    lines.push(b2.summary.trim());
+    lines.push("");
+    const content = s3.blockContents.get(b2.blockId);
+    if (full && content) {
+      lines.push(`### Original messages (${content.full.count})`);
+      lines.push("");
+      lines.push(content.full.text.trim());
+      lines.push("");
+    }
+  }
+  if (active.length > 0) {
+    lines.push("---");
+    lines.push("");
+    lines.push("Paste the block summaries above into a new session to continue without the proxy.");
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function renderMessage2(m2) {
+  const parts = [];
+  switch (m2.contentType) {
+    case "text":
+      parts.push(m2.text ?? "");
+      break;
+    case "tool-call":
+      parts.push(`\`${m2.toolName ?? "?"}(${m2.toolCallId ?? ""})\` args: ${m2.text ?? ""}`);
+      break;
+    case "tool-result":
+      parts.push(`\`${m2.toolName ?? "?"}(${m2.toolCallId ?? ""})\` \u2192 ${m2.text ?? ""}`);
+      break;
+    case "reasoning":
+      parts.push(`_reasoning_: ${m2.text ?? ""}`);
+      break;
+  }
+  const body = parts.join("\n").trim();
+  return body === "" ? "_(empty)_" : body + "\n";
+}
+function matchSession(sessions2, selector) {
+  const exact = sessions2.filter((s3) => s3.id === selector);
+  if (exact.length > 0) return exact;
+  const byLabel = sessions2.filter((s3) => s3.meta.label === selector);
+  if (byLabel.length > 0) return byLabel;
+  const byPrefix = sessions2.filter((s3) => s3.id.startsWith(selector) || (s3.meta.label ?? "").startsWith(selector));
+  return byPrefix;
+}
+async function exportSession(selector, opts = {}) {
+  const store = new SessionStore({ dir: opts.dir, enabled: true });
+  const all = [...(await store.loadAll()).values()];
+  if (all.length === 0) {
+    return "No persisted sessions found. Sessions are written under the sessions directory once the proxy has served a request (compression state and compressed originals only \u2014 uncompressed conversation text is not persisted).";
+  }
+  if (!selector) {
+    const list = await listSessions2(opts);
+    const rows = list.map(
+      (s3) => `${s3.id}${s3.label ? `  label=${s3.label}` : ""}${s3.protocol ? `  [${s3.protocol}]` : ""}  blocks=${s3.blocks}${s3.contextTokens ? `  ctx~${s3.contextTokens}` : ""}  ${s3.title ?? ""}`
+    );
+    return ["Persisted sessions:", "", ...rows.map((r) => `  ${r}`), "", "Usage: bili export <session-id|label> [--output handoff.md] [--full]"].join("\n");
+  }
+  const matches = matchSession(all, selector);
+  if (matches.length === 0) {
+    throw new Error(`no session matches "${selector}" (run "bili export" to list sessions)`);
+  }
+  if (matches.length > 1) {
+    const ids = matches.map((s3) => s3.id).join(", ");
+    throw new Error(`selector "${selector}" matches ${matches.length} sessions (${ids}); use the full session id`);
+  }
+  const markdown = renderHandoff(matches[0], opts.full ?? false);
+  if (opts.output) {
+    mkdirSync6(path10.dirname(path10.resolve(opts.output)), { recursive: true });
+    writeFileSync5(opts.output, markdown, "utf8");
+    return `written to ${opts.output}`;
+  }
+  return markdown;
+}
+
 // src/cli.ts
 import { readFileSync as readFileSync5 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import path10 from "path";
+import path11 from "path";
 var VERSION = (() => {
   try {
     const here = fileURLToPath3(import.meta.url);
-    const pkg = path10.join(path10.dirname(here), "..", "package.json");
+    const pkg = path11.join(path11.dirname(here), "..", "package.json");
     return JSON.parse(readFileSync5(pkg, "utf8")).version ?? "dev";
   } catch {
     return "dev";
@@ -56138,7 +56749,7 @@ var VERSION = (() => {
 var PACKAGE_NAME = (() => {
   try {
     const here = fileURLToPath3(import.meta.url);
-    const pkg = path10.join(path10.dirname(here), "..", "package.json");
+    const pkg = path11.join(path11.dirname(here), "..", "package.json");
     return JSON.parse(readFileSync5(pkg, "utf8")).name ?? "billion-context";
   } catch {
     return "billion-context";
@@ -56153,6 +56764,8 @@ Usage:
   bili codex [opts --] [args]      start a proxy + launch codex against it (cert-MITM)
   bili claude [opts --] [args]     start a proxy + launch claude against it (cert-MITM)
   bili test pi                     non-polluting pi smoke test through the proxy
+  bili export [session] [--full]   list sessions / export one as a Markdown handoff
+                                    (--full includes original messages; --output FILE)
   bili update                      check for & install a newer version now
   bili --version                   print version
   bili --help                      show this help
@@ -56195,6 +56808,9 @@ function parseArgs(argv) {
   let client;
   let clientArgs = [];
   const mitmDomains = [];
+  let exportSelector;
+  let exportOutput;
+  let exportFull = false;
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     if (!client && positional.length === 0 && isLaunchClient(a)) {
@@ -56232,6 +56848,18 @@ function parseArgs(argv) {
         mitmDomains.push(val);
         break;
       }
+      case "--full":
+        exportFull = true;
+        break;
+      case "--output": {
+        const val = argv[++i];
+        if (val === void 0) {
+          console.error(`bili: ${a} requires a value`);
+          process.exit(2);
+        }
+        exportOutput = val;
+        break;
+      }
       case "--port":
       case "--host":
       case "--config": {
@@ -56267,6 +56895,9 @@ function parseArgs(argv) {
       command = command === "help" || command === "version" ? command : "start";
     } else if (cmd === "update") {
       command = "update";
+    } else if (cmd === "export") {
+      command = "export";
+      exportSelector = positional[1];
     } else if (cmd === "test") {
       const target = positional[1];
       if (target && isLaunchClient(target)) {
@@ -56281,10 +56912,10 @@ function parseArgs(argv) {
       process.exit(2);
     }
   }
-  return { command, client, clientArgs, mitmDomains, overrides };
+  return { command, client, clientArgs, mitmDomains, overrides, exportSelector, exportOutput, exportFull };
 }
 async function main() {
-  const { command, client, clientArgs, mitmDomains, overrides } = parseArgs(process.argv.slice(2));
+  const { command, client, clientArgs, mitmDomains, overrides, exportSelector, exportOutput, exportFull } = parseArgs(process.argv.slice(2));
   if (command === "help") {
     process.stdout.write(HELP);
     return;
@@ -56293,6 +56924,16 @@ async function main() {
     process.stdout.write(VERSION + "\n");
     return;
   }
+  if (command === "export") {
+    try {
+      const text = await exportSession(exportSelector, { output: exportOutput, full: exportFull });
+      process.stdout.write(text + "\n");
+    } catch (error) {
+      console.error(`bili export: ${error instanceof Error ? error.message : String(error)}`);
+      process.exit(1);
+    }
+    return;
+  }
   if (command === "update") {
     await checkForUpdate({ packageName: PACKAGE_NAME, currentVersion: VERSION, autoUpdate: true }, true);
     return;