billion-context 0.1.53 → 0.1.54-pr.246.90

package/README.md

@@ -67,7 +67,7 @@ Two ways to use it — pick one:
 - **URL change (persistent):** prefix your client's baseURL with the proxy
   origin + `/bili/`.
 
-### Option 1 — Launcher (`bili pi` / `bili codex` / `bili claude` / `bili omp` / `bili opencode` / `bili hermes`)
+### Option 1 — Launcher (`bili pi` / `bili codex` / `bili claude` / `bili omp` / `bili opencode` / `bili hermes` / `bili dsh`)
 
 The launcher wraps a client in one command: it starts a proxy on an
 independent port (a fresh instance is always spawned — a port is never
@@ -85,6 +85,7 @@ bili claude                           # launch claude through the proxy
 bili omp                              # pi-style: MITM env + persistent overlay home (~/.omp/agent-bili, real config untouched)
 bili opencode                         # MITM for HTTPS + temp opencode.json (/bili/ for HTTP) + thin /acp plugin
 bili hermes                           # no MITM possible (certifi CA) — persistent overlay home (~/.hermes-bili), all traffic /bili/
+bili dsh                              # deepseek-harness: built-in deepseek route via DEEPSEEK_BASE_URL + overlay DSH_HOME (~/.dsh-bili), all traffic /bili/
 bili pi --mitm-domain api.foo.com     # add a domain to the MITM whitelist
 ```
 
@@ -148,6 +149,23 @@ bili --no-auto-update        # disable self-update for this run
 
 Flags override env vars and the config file. `bili --help` lists them all.
 
+### Remote agents (`--host`)
+
+By default the proxy binds `127.0.0.1` and only accepts loopback
+connections. To serve agents on other machines, bind a non-loopback host:
+
+```bash
+bili --host 0.0.0.0           # all interfaces (or use your LAN IP)
+```
+
+- Remote agents point their model `baseURL` at `http://<this-host>:<port>/bili/…`.
+- MITM-mode `CONNECT` then also accepts remote clients — for **whitelisted
+  model hosts only**. Blind tunnels to arbitrary hosts stay loopback-only, so
+  the proxy can never be used as an open relay.
+- There is **no authentication**: only do this on a trusted LAN or behind a
+  firewall. The `/__bili/` management endpoints remain loopback-only.
+- A startup `[security]` warning reminds you of the above.
+
 ### Debugging
 
 Three ways to enable verbose logging (priority: flag > env > config):

package/README.zh-CN.md

@@ -67,7 +67,7 @@ npm install -g billion-context
 
 
 
-### 方式 1 —— 启动器(`bili pi` / `bili codex` / `bili claude` / `bili omp` / `bili opencode` / `bili hermes`)
+### 方式 1 —— 启动器(`bili pi` / `bili codex` / `bili claude` / `bili omp` / `bili opencode` / `bili hermes` / `bili dsh`)
 
 启动器把客户端包进一条命令:在独立端口拉起一个代理(总是全新实例,绝不复用端口),再按客户端支持的机制把它指向代理 —— 能吃代理/CA 环境变量的走**证书 MITM**,不吃的走隔离的**`/bili/` 配置重写**。真实配置文件从不被修改;客户端自己的配置只被**读取**,用来发现它实际连接的 HTTPS 上游主机,把这些主机加入 MITM 白名单 —— 代理只 TLS 终结它们,其余流量盲透传。
 
@@ -78,6 +78,7 @@ bili claude                           # 拉起 claude
 bili omp                              # pi 同款 MITM 环境变量 + 隔离临时 models.yml
 bili opencode                         # HTTPS 走 MITM + 临时 opencode.json(HTTP 走 /bili/)+ 轻量 /acp 插件
 bili hermes                           # 无法 MITM(certifi CA)—— 隔离 HERMES_HOME,全部流量 /bili/
+bili dsh                              # deepseek-harness:内置 deepseek 路由走 DEEPSEEK_BASE_URL + 隔离 DSH_HOME(~/.dsh-bili),全部流量 /bili/
 bili pi --mitm-domain api.foo.com     # 向 MITM 白名单追加域名
 ```
 
@@ -133,6 +134,21 @@ bili --no-auto-update        # 本次启动禁用自动更新
 
 参数优先级高于环境变量和配置文件。`bili --help` 列出全部。
 
+### 远程 agent（`--host`）
+
+默认绑定 `127.0.0.1`，只接受本机连接。要给其他机器上的 agent 用，绑定非 loopback 地址:
+
+```bash
+bili --host 0.0.0.0           # 所有网卡(或直接用局域网 IP)
+```
+
+- 远程 agent 把模型 `baseURL` 指向 `http://<本机IP>:<端口>/bili/…`。
+- MITM 模式的 `CONNECT` 也会接受远程客户端 —— 但仅限**白名单内的模型域名**;
+  到任意主机的盲隧道仍仅限本机，代理不会沦为开放中继。
+- **没有任何鉴权**: 只应在可信局域网或防火墙内使用。`/__bili/` 管理
+  端点仍仅限本机访问。
+- 启动时的 `[security]` 警告会提醒上述事项。
+
 ### 调试
 
 三种方式打开详细日志(优先级:参数 > 环境变量 > 配置):

package/dist/index.js

@@ -50295,6 +50295,7 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
       const calls = [];
       let usage = {};
       let finishReason;
+      let sawDone = false;
       let suppressCompletion = false;
       for await (const ev of adapter.parseStream(currentUpstream, round)) {
         if (signal?.aborted) break;
@@ -50332,6 +50333,7 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
             cachedTokens: ev.cachedTokens
           };
         } else if (ev.kind === "done") {
+          sawDone = true;
           finishReason = ev.finishReason;
           suppressCompletion = ev.suppressCompletion === true;
         } else if (ev.kind === "meta") {
@@ -50453,6 +50455,15 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
       }
       const reRequest = proxyResults.length > 0 && realCalls === 0;
       if (!reRequest) {
+        if (!sawDone) {
+          const partialText = assistantText.length;
+          const partialReasoning = assistantReasoning.length;
+          const msg = `upstream stream truncated (no completion event; round ${round}, ${partialText} text chars + ${partialReasoning} reasoning chars received)`;
+          ctx.log(`[acp-loop] round ${round}: ${msg}`);
+          log("error", `[acp-loop] ${msg}`);
+          yield adapter.emitError(msg);
+          return;
+        }
         if (!suppressCompletion) {
           yield adapter.emitCompletion({ finishReason, usage });
         }
@@ -50534,7 +50545,91 @@ async function* runCompressLoop(upstream, ctx, requestBody, requestOptions, adap
   }
 }
 
+// src/util.ts
+import { createHash as createHash4 } from "crypto";
+function hashId2(s3) {
+  return createHash4("sha256").update(s3, "utf8").digest("hex").slice(0, 16);
+}
+function isLoopbackAddress(addr) {
+  return !!addr && (addr.startsWith("127.") || addr === "::1" || addr.startsWith("::ffff:127."));
+}
+function usageTotals(protocol, usage) {
+  const num3 = (v2) => typeof v2 === "number" && Number.isFinite(v2) ? v2 : void 0;
+  if (protocol === "anthropic") {
+    const fresh = num3(usage["input_tokens"]);
+    const read = num3(usage["cache_read_input_tokens"]);
+    const creation = num3(usage["cache_creation_input_tokens"]);
+    const any = fresh !== void 0 || read !== void 0 || creation !== void 0;
+    return {
+      total: any ? (fresh ?? 0) + (read ?? 0) + (creation ?? 0) : void 0,
+      cached: read
+    };
+  }
+  if (protocol === "openai") {
+    return {
+      total: num3(usage["prompt_tokens"]),
+      cached: num3(usage["prompt_tokens_details"]?.["cached_tokens"])
+    };
+  }
+  return {
+    total: num3(usage["input_tokens"]),
+    cached: num3(usage["input_tokens_details"]?.["cached_tokens"])
+  };
+}
+var CONTEXT_OVERFLOW_PATTERNS = [
+  /context_length_exceeded/i,
+  /context length exceeded/i,
+  /maximum context length/i,
+  /max context length/i,
+  /maximum context size/i,
+  /exceeds the context window/i,
+  /exceeded model token limit/i,
+  /prompt is too long/i,
+  /prompt_too_long/i,
+  /prompt_is_too_long/i,
+  /request_too_large/i,
+  /token limit exceeded/i
+];
+function toTokenNumber(s3) {
+  const n = parseInt(s3.replace(/,/g, ""), 10);
+  return Number.isFinite(n) && n >= 1e3 ? n : void 0;
+}
+function parseOverflowWindow(text) {
+  let m2 = text.match(/>\s*(\d[\d,]*)\s*maximum/i);
+  if (m2) return toTokenNumber(m2[1]);
+  m2 = text.match(/maximum context length is (\d[\d,]*)/i) ?? text.match(/maximum context length of (\d[\d,]*)/i) ?? text.match(/maximum context size (?:is|of) (\d[\d,]*)/i) ?? text.match(/(?:maximum|max)\s+(?:context\s+)?length\s+(?:is\s+)?(\d[\d,]*)/i) ?? text.match(/limit of (\d[\d,]*)\s*token/i) ?? text.match(/(\d[\d,]*)\s*maximum\b/i);
+  if (m2) return toTokenNumber(m2[1]);
+  return void 0;
+}
+function inspectContextOverflow(status, bodyText) {
+  const message = (bodyText ?? "").slice(0, 300);
+  if (status !== 400 && status !== 413) return { isOverflow: false, message };
+  if (!bodyText) return { isOverflow: false, message };
+  const isOverflow = CONTEXT_OVERFLOW_PATTERNS.some((p2) => p2.test(bodyText));
+  if (!isOverflow) return { isOverflow: false, message };
+  return { isOverflow: true, window: parseOverflowWindow(bodyText), message };
+}
+function reserveOutputHeadroom(window2, maxOutput) {
+  if (Number.isFinite(window2) && window2 > 0 && Number.isFinite(maxOutput) && maxOutput > 0 && maxOutput < window2) {
+    return window2 - maxOutput;
+  }
+  return window2;
+}
+function shouldReserveOutputHeadroom(protocol) {
+  return protocol !== "anthropic";
+}
+
 // src/loop/adapter-responses.ts
+var RESPONSES_ITEM_ID_MAX = 64;
+function sanitizeResponsesInputIds(input) {
+  if (!Array.isArray(input)) return;
+  for (const item of input) {
+    const rec = item;
+    if (typeof rec?.id === "string" && rec.id.length > RESPONSES_ITEM_ID_MAX) {
+      rec.id = `msg-fix-${hashId2(rec.id)}`;
+    }
+  }
+}
 function rewriteItemEvent(type, obj, mapped) {
   const item = { ...obj.item ?? {}, id: mapped.id };
   return Buffer.from(`event: ${type}
@@ -50766,7 +50861,7 @@ function createResponsesAdapter(textProtocol, projection) {
             yield { kind: "meta", chunk: rawBuf, firstRoundOnly: false };
           } else if (item?.type === "message" && round > 1 && !suppressTextLifecycle) {
             const origId = typeof item.id === "string" ? item.id : "";
-            const mapped = { id: `msg-proxy-${round}-${origId || outputIndex}`, index: outputIndex++ };
+            const mapped = { id: `msg-proxy-${round}-${hashId2(origId || String(outputIndex))}`, index: outputIndex++ };
             if (origId) remapped.set(origId, mapped);
             yield { kind: "meta", chunk: rewriteItemEvent(type, obj, mapped), firstRoundOnly: false };
           } else if (item?.type !== "message" || !suppressTextLifecycle) {
@@ -51317,8 +51412,8 @@ function createOpenaiAdapter(requestBody, clientSystem) {
     emitCompletion(opts) {
       const finishReason = opts?.finishReason ?? "stop";
       const usage = opts?.usage ? {
-        prompt_tokens: opts.usage.inputTokens,
-        completion_tokens: opts.usage.outputTokens,
+        prompt_tokens: opts.usage.inputTokens ?? 0,
+        completion_tokens: opts.usage.outputTokens ?? 0,
         total_tokens: (opts.usage.inputTokens ?? 0) + (opts.usage.outputTokens ?? 0),
         ...typeof opts.usage.cachedTokens === "number" ? { prompt_tokens_details: { cached_tokens: opts.usage.cachedTokens } } : {}
       } : null;
@@ -52017,80 +52112,6 @@ data: ${JSON.stringify({ type: "message_stop" })}
   }
 }
 
-// src/util.ts
-import { createHash as createHash4 } from "crypto";
-function hashId2(s3) {
-  return createHash4("sha256").update(s3, "utf8").digest("hex").slice(0, 16);
-}
-function isLoopbackAddress(addr) {
-  return !!addr && (addr.startsWith("127.") || addr === "::1" || addr.startsWith("::ffff:127."));
-}
-function usageTotals(protocol, usage) {
-  const num3 = (v2) => typeof v2 === "number" && Number.isFinite(v2) ? v2 : void 0;
-  if (protocol === "anthropic") {
-    const fresh = num3(usage["input_tokens"]);
-    const read = num3(usage["cache_read_input_tokens"]);
-    const creation = num3(usage["cache_creation_input_tokens"]);
-    const any = fresh !== void 0 || read !== void 0 || creation !== void 0;
-    return {
-      total: any ? (fresh ?? 0) + (read ?? 0) + (creation ?? 0) : void 0,
-      cached: read
-    };
-  }
-  if (protocol === "openai") {
-    return {
-      total: num3(usage["prompt_tokens"]),
-      cached: num3(usage["prompt_tokens_details"]?.["cached_tokens"])
-    };
-  }
-  return {
-    total: num3(usage["input_tokens"]),
-    cached: num3(usage["input_tokens_details"]?.["cached_tokens"])
-  };
-}
-var CONTEXT_OVERFLOW_PATTERNS = [
-  /context_length_exceeded/i,
-  /context length exceeded/i,
-  /maximum context length/i,
-  /max context length/i,
-  /maximum context size/i,
-  /exceeds the context window/i,
-  /exceeded model token limit/i,
-  /prompt is too long/i,
-  /prompt_too_long/i,
-  /prompt_is_too_long/i,
-  /request_too_large/i,
-  /token limit exceeded/i
-];
-function toTokenNumber(s3) {
-  const n = parseInt(s3.replace(/,/g, ""), 10);
-  return Number.isFinite(n) && n >= 1e3 ? n : void 0;
-}
-function parseOverflowWindow(text) {
-  let m2 = text.match(/>\s*(\d[\d,]*)\s*maximum/i);
-  if (m2) return toTokenNumber(m2[1]);
-  m2 = text.match(/maximum context length is (\d[\d,]*)/i) ?? text.match(/maximum context length of (\d[\d,]*)/i) ?? text.match(/maximum context size (?:is|of) (\d[\d,]*)/i) ?? text.match(/(?:maximum|max)\s+(?:context\s+)?length\s+(?:is\s+)?(\d[\d,]*)/i) ?? text.match(/limit of (\d[\d,]*)\s*token/i) ?? text.match(/(\d[\d,]*)\s*maximum\b/i);
-  if (m2) return toTokenNumber(m2[1]);
-  return void 0;
-}
-function inspectContextOverflow(status, bodyText) {
-  const message = (bodyText ?? "").slice(0, 300);
-  if (status !== 400 && status !== 413) return { isOverflow: false, message };
-  if (!bodyText) return { isOverflow: false, message };
-  const isOverflow = CONTEXT_OVERFLOW_PATTERNS.some((p2) => p2.test(bodyText));
-  if (!isOverflow) return { isOverflow: false, message };
-  return { isOverflow: true, window: parseOverflowWindow(bodyText), message };
-}
-function reserveOutputHeadroom(window2, maxOutput) {
-  if (Number.isFinite(window2) && window2 > 0 && Number.isFinite(maxOutput) && maxOutput > 0 && maxOutput < window2) {
-    return window2 - maxOutput;
-  }
-  return window2;
-}
-function shouldReserveOutputHeadroom(protocol) {
-  return protocol !== "anthropic";
-}
-
 // src/session-id.ts
 function extractKey(headers) {
   const auth = headers["authorization"];
@@ -52846,6 +52867,33 @@ function resolveHermesHome(env) {
   const h = os.homedir();
   return nonEmpty2(env.HERMES_HOME) ? env.HERMES_HOME : path8.join(h, ".hermes");
 }
+function resolveDshHome(env) {
+  const h = os.homedir();
+  return nonEmpty2(env.DSH_HOME) ? env.DSH_HOME : path8.join(h, ".dsh");
+}
+function parseDshSettingsYaml(text) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const rawLine of text.split(/\r?\n/)) {
+    const m2 = /^\s*(?:baseURL|baseUrl|base_url):\s*(\S+)(?:\s+#.*)?$/.exec(rawLine);
+    if (!m2) continue;
+    const url = m2[1].replace(/^["']|["']$/g, "");
+    if (!/^https?:\/\//i.test(url)) continue;
+    if (seen.has(url)) continue;
+    seen.add(url);
+    out.push(url);
+  }
+  return out;
+}
+function readDshConfig(dshHome) {
+  let text;
+  try {
+    text = fs4.readFileSync(path8.join(dshHome, "settings.yaml"), "utf8");
+  } catch {
+    return { baseUrls: [] };
+  }
+  return { baseUrls: parseDshSettingsYaml(text) };
+}
 function readClaudeSettings(homeDir, cwd, env = process.env) {
   const files = [
     path8.join(homeDir, ".claude", "settings.json"),
@@ -53112,6 +53160,7 @@ function loadClientConfig(env, cwd) {
   config.omp = readOmpConfig(resolveOmpHome(env));
   config.opencode = readOpencodeConfig(resolveOpencodeConfigFile(env));
   config.hermes = readHermesConfig(resolveHermesHome(env));
+  config.dsh = readDshConfig(resolveDshHome(env));
   return config;
 }
 
@@ -53217,17 +53266,23 @@ function isMitmHost(host, extraDomains = []) {
   return all.some((d) => h === d || h.endsWith("." + d));
 }
 function setupMitm(server, extraDomains = [], log2 = () => {
-}, resolveProxyUrl) {
+}, resolveProxyUrl, allowRemoteClients = false) {
   ensureRootCA();
   server.on("connect", (req, clientSocket, head) => {
-    if (!isLoopbackAddress(clientSocket.remoteAddress)) {
-      log2(`CONNECT ${req.url} rejected: non-loopback client ${clientSocket.remoteAddress}`);
+    const remote = !isLoopbackAddress(clientSocket.remoteAddress);
+    if (remote && !allowRemoteClients) {
+      log2(`CONNECT ${req.url} rejected: non-loopback client ${clientSocket.remoteAddress} (bind a non-loopback --host to allow remote clients)`);
       clientSocket.end("HTTP/1.1 403 Forbidden\r\n\r\n");
       return;
     }
     const { hostname, port } = parseHostPort(req.url ?? "");
     const targetPort = port || 443;
     if (!isMitmHost(hostname, extraDomains)) {
+      if (remote) {
+        log2(`CONNECT ${req.url} rejected: remote client ${clientSocket.remoteAddress} tunneling non-whitelisted host`);
+        clientSocket.end("HTTP/1.1 403 Forbidden\r\n\r\n");
+        return;
+      }
       const proxyUrl = resolveProxyUrl?.(hostname);
       tunnelThrough(clientSocket, hostname, targetPort, head, log2, proxyUrl);
       return;
@@ -54147,10 +54202,12 @@ Content-Length: ${Buffer.byteLength(body)}\r
     );
   });
   if (opts.mitm.enabled) {
-    setupMitm(server, opts.mitm.domains, (msg) => log2("info", msg), (host) => resolveProxy(opts.routes, opts.proxy, `https://${host}`, opts.proxyFallback));
+    const allowRemoteConnect = opts.host === "0.0.0.0" || opts.host === "::" || !isLoopbackAddress(opts.host);
+    setupMitm(server, opts.mitm.domains, (msg) => log2("info", msg), (host) => resolveProxy(opts.routes, opts.proxy, `https://${host}`, opts.proxyFallback), allowRemoteConnect);
   }
   server.listen(opts.port, opts.host, () => {
-    const displayHost = opts.host === "0.0.0.0" ? "localhost" : opts.host;
+    const nonLoopbackBind = opts.host === "0.0.0.0" || opts.host === "::" || !isLoopbackAddress(opts.host);
+    const displayHost = nonLoopbackBind ? opts.host : opts.host === "0.0.0.0" ? "localhost" : opts.host;
     try {
       fs6.mkdirSync(stateDir(), { recursive: true });
       const originHost = opts.host === "0.0.0.0" || opts.host === "::" || opts.host === "localhost" ? "127.0.0.1" : opts.host.includes(":") && !opts.host.startsWith("[") ? `[${opts.host}]` : opts.host;
@@ -54163,6 +54220,12 @@ Content-Length: ${Buffer.byteLength(body)}\r
       "info",
       `acp-proxy listening on http://${displayHost}:${opts.port} \u2014 web UI: http://${displayHost}:${opts.port}/__bili/ \u2014 zero-config: prefix any baseURL with http://${displayHost}:${opts.port}/bili/` + (nOverrides ? ` \u2014 context overrides for ${nOverrides} upstream URL(s)` : "") + (opts.mitm.enabled ? ` \u2014 MITM proxy on (whitelist)${opts.mitm.domains.length ? ` +${opts.mitm.domains.join(",")}` : ""}` : "")
     );
+    if (nonLoopbackBind) {
+      log2(
+        "warn",
+        `[security] bound to ${opts.host} \u2014 proxy endpoints (/bili/, CONNECT for whitelisted model hosts) are reachable from the network with NO authentication; /__bili/ management endpoints stay loopback-only. Restrict access with a firewall on untrusted networks. Remote agents: point baseURL at http://<this-host>:${opts.port}/bili/`
+      );
+    }
     if (opts.debug) {
       log2("info", `[debug] build features: raw-HTTP-capture(on) | remote_compaction_v2-strip(on) | cert-MITM-launcher(on) | strip-acp-summary(on) \u2014 seeing this line confirms the launcher build (not registry 0.1.34)`);
     }
@@ -54684,6 +54747,7 @@ function prepareResponses(parsed, req, opts, core, config, prompts, log2, sessio
   let responsesProjection;
   let rebuiltInput = parsed.input;
   let toolsOut = parsed.tools;
+  sanitizeResponsesInputIds(parsed.input);
   const shouldInject = opts.compress.injectTool;
   const injectTools = shouldInject && !pluginMode;
   const responsesTextProtocol = FORCE_TEXT_PROTOCOL || resolveCompressProtocol(opts.routes, session.meta.upstreamOrigin) === "marker";
@@ -59207,7 +59271,7 @@ function selfDistFile(name) {
 }
 var LAUNCHER_DEFAULT_HOST = "127.0.0.1";
 var LAUNCHER_DEFAULT_PORT = 8787;
-var LAUNCH_CLIENTS = ["pi", "codex", "claude", "omp", "opencode", "hermes", "pi-test"];
+var LAUNCH_CLIENTS = ["pi", "codex", "claude", "omp", "opencode", "hermes", "dsh", "pi-test"];
 var HEALTH_PATH = "/__bili/health";
 var HEALTH_POLL_INTERVAL_MS = 200;
 var SPAWN_WAIT_MS = 2e4;
@@ -59316,6 +59380,22 @@ function discoverRoutes(client, config) {
       } catch {
       }
     }
+  } else if (client === "dsh") {
+    const dshSeen = /* @__PURE__ */ new Set();
+    let anon = 0;
+    for (const raw of config.dsh?.baseUrls ?? []) {
+      const real = unwrapUpstream2(raw);
+      try {
+        const url = new URL(real);
+        if (url.protocol !== "http:" && url.protocol !== "https:") continue;
+        if (dshSeen.has(real)) continue;
+        dshSeen.add(real);
+        anon += 1;
+        rewriteKeys.add(`dsh-${anon}`);
+        httpRewrites.push({ key: `dsh-${anon}`, realUpstream: real });
+      } catch {
+      }
+    }
   } else {
     for (const [name, prov] of Object.entries(config.codex?.providers ?? {})) {
       classify(prov.baseUrl, `model_providers.${name}.base_url`);
@@ -59356,7 +59436,7 @@ function launcherDirectUrl(env) {
   return env.BILI_LAUNCHER_DIRECT === "1";
 }
 function launcherInjectMcp(env, base) {
-  return base !== "pi" && base !== "omp" && base !== "opencode" && base !== "hermes" && env.BILI_LAUNCHER_PLUGIN === "1";
+  return base !== "pi" && base !== "omp" && base !== "opencode" && base !== "hermes" && base !== "dsh" && env.BILI_LAUNCHER_PLUGIN === "1";
 }
 function buildMcpConfig(origin) {
   const script = selfDistFile("mcp.js");
@@ -59705,6 +59785,34 @@ function prepareHermesHome(hermesHome, origin, rewrites) {
   writeOverlayFileAtomic(overlay, "config.yaml", lines.join(eol));
   return overlay;
 }
+function prepareDshHome(dshHome, origin, rewrites) {
+  const cfgPath = path13.join(dshHome, "settings.yaml");
+  let txt;
+  try {
+    txt = fs10.readFileSync(cfgPath, "utf8");
+  } catch {
+    return void 0;
+  }
+  const wrapSet = new Set(rewrites.map((r) => r.realUpstream));
+  const eol = txt.includes("\r\n") ? "\r\n" : "\n";
+  const lines = txt.split(/\r?\n/);
+  let changed = false;
+  for (let i = 0; i < lines.length; i++) {
+    const m2 = /^(\s*(?:baseURL|baseUrl|base_url):\s*)(\S+)(\s+#.*)?$/.exec(lines[i]);
+    if (!m2) continue;
+    const rawUrl = m2[2].replace(/^["']|["']$/g, "");
+    if (!/^https?:\/\//i.test(rawUrl)) continue;
+    const real = unwrapUpstream2(rawUrl);
+    if (!wrapSet.has(real)) continue;
+    lines[i] = `${m2[1]}${wrapUpstream(origin, real)}${m2[3] ?? ""}`;
+    changed = true;
+  }
+  if (!changed) return void 0;
+  const overlay = `${dshHome}-bili`;
+  if (!refreshOverlayHome(dshHome, overlay, "settings.yaml")) return void 0;
+  writeOverlayFileAtomic(overlay, "settings.yaml", lines.join(eol));
+  return overlay;
+}
 function prepareOpencodeHttpRewrite(configFile2, origin, httpRewrites, httpsRewrites, pluginPath) {
   if (httpRewrites.length === 0 && httpsRewrites.length === 0 && !pluginPath) return void 0;
   let root = {};
@@ -59944,6 +60052,7 @@ async function runLaunch(params, deps = {}) {
   let ompOverlayHome;
   let opencodeTmpFile;
   let hermesOverlayHome;
+  let dshOverlayHome;
   const tmpFiles = [];
   const directUrl = launcherDirectUrl(process.env);
   if (directUrl) {
@@ -59990,6 +60099,21 @@ async function runLaunch(params, deps = {}) {
         routes.httpRewrites.length === 0 ? "bili: no hermes providers found in ~/.hermes/config.yaml \u2014 traffic will NOT go through the proxy (configure a provider first)." : "bili: hermes config.yaml could not be rewritten (unreadable or no matching provider endpoints) \u2014 traffic will NOT go through the proxy."
       );
     }
+  } else if (base === "dsh") {
+    env = { ...process.env, BILLION_CONTEXT_PROXY: origin };
+    env.DEEPSEEK_BASE_URL = wrapUpstream(origin, "https://api.deepseek.com");
+    dshOverlayHome = prepareDshHome(resolveDshHome(process.env), origin, routes.httpRewrites);
+    if (dshOverlayHome) {
+      env.DSH_HOME = dshOverlayHome;
+    } else if (routes.httpRewrites.length > 0) {
+      console.error(
+        "bili: dsh settings.yaml could not be rewritten (unreadable or no matching endpoints) \u2014 custom providers will NOT go through the proxy; the built-in deepseek route still does."
+      );
+    } else {
+      console.error(
+        "bili: no custom providers found in ~/.dsh/settings.yaml \u2014 proxying the built-in deepseek route via DEEPSEEK_BASE_URL only."
+      );
+    }
   } else if (base === "codex") {
     const codexConversationId = injectMcp ? randomUUID2() : void 0;
     if (directUrl) {
@@ -60257,6 +60381,7 @@ Usage:
   bili omp [opts --] [args]        start a proxy + launch omp against it (cert-MITM)
   bili opencode [opts --] [args]   start a proxy + launch opencode against it (cert-MITM)
   bili hermes [opts --] [args]     start a proxy + launch hermes-agent against it (/bili/ rewrite)
+  bili dsh [opts --] [args]        start a proxy + launch deepseek-harness against it (/bili/ rewrite)
   bili test pi                     non-polluting pi smoke test through the proxy
   bili export [session] [--full]   list sessions / export one as a Markdown handoff
                                     (--full includes original messages; --output FILE)
@@ -60271,7 +60396,7 @@ Usage:
   bili --version                   print version
   bili --help                      show this help
 
-Launcher (bili pi / bili codex / bili claude / bili omp / bili opencode / bili hermes):
+Launcher (bili pi / bili codex / bili claude / bili omp / bili opencode / bili hermes / bili dsh):
   Brings up a proxy on an independent port (a fresh instance every launch), then runs the client pointed at it via HTTPS_PROXY + the proxy's
   MITM CA \u2014 no config-file edits. Discovered HTTPS upstream domains are
   auto-whitelisted for MITM so the proxy TLS-terminates exactly the hosts the
@@ -60284,6 +60409,7 @@ Launcher (bili pi / bili codex / bili claude / bili omp / bili opencode / bili h
     bili claude                           # launch claude through the proxy
     bili omp                              # launch omp through the proxy (pi-based; /bili/ rewrite)
     bili hermes                           # launch hermes-agent through the proxy (/bili/ rewrite of ~/.hermes/config.yaml)
+    bili dsh --profile web "task"         # launch deepseek-harness through the proxy (/bili/ rewrite of ~/.dsh/settings.yaml)
     bili test pi                          # quick end-to-end check of the pi path
     bili pi --mitm-domain api.foo.com     # add a domain to the MITM whitelist