billion-context 0.1.64 → 0.1.65

package/dist/index.js

@@ -50294,7 +50294,7 @@ function refNum2(ref) {
 function applyRanges(ranges, ctx) {
   if (ranges.length === 0) {
     ctx.log("[acp-proxy: compress call had no valid ranges; nothing compressed.]");
-    return "[Compression FAILED: no valid ranges parsed from the tool call. Check your startId/endId parameters.]";
+    return "[Compression FAILED: no valid ranges parsed. compress requires a non-empty 'content' array of {startId, endId, summary} ranges, where startId/endId are mNNNNN message refs from the conversation. Re-issue the compress call with a valid content array.]";
   }
   ctx.log(`[acp-proxy: compress requested ${ranges.length} range(s): ${ranges.map((r) => `${r.startRef}\u2013${r.endRef}`).join(", ")}]`);
   ctx.log(`[acp-proxy: ctx has ${ctx.messages.length} message(s), state has ${ctx.session.state.messageRefs?.byRef?.size ?? "?"} ref(s) mapped]`);
@@ -50626,6 +50626,153 @@ import { readFileSync as readFileSync3 } from "fs";
 import { dirname as dirname4, join as join3 } from "path";
 import { fileURLToPath } from "url";
 
+// src/web/page.ts
+import { existsSync as existsSync3 } from "fs";
+
+// src/ca.ts
+var import_node_forge = __toESM(require_lib(), 1);
+import fs2 from "fs";
+import path6 from "path";
+import tls2 from "tls";
+var ROOT_CERT_FILE = "root-ca.pem";
+var ROOT_KEY_FILE = "root-ca-key.pem";
+var COMBINED_CA_FILE = "combined-ca.pem";
+var ROOT_CN = "billion-context MITM Root CA";
+var PLATFORM_CA_CANDIDATES = process.platform === "darwin" ? ["/etc/ssl/cert.pem", "/private/etc/ssl/cert.pem"] : [
+  "/etc/ssl/certs/ca-certificates.crt",
+  "/etc/pki/tls/certs/ca-bundle.crt",
+  "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem",
+  "/etc/ssl/ca-bundle.pem",
+  "/etc/ssl/cert.pem"
+];
+var rootCertPem;
+var rootKeyPem;
+var rootCert;
+var rootKey;
+var secureContextCache = /* @__PURE__ */ new Map();
+var SECURE_CONTEXT_CACHE_MAX = 64;
+function rootCaPath() {
+  return path6.join(caDir(), ROOT_CERT_FILE);
+}
+function collectSystemCaPems(env = process.env) {
+  const pems = [];
+  const seen = /* @__PURE__ */ new Set();
+  const pushFile = (file) => {
+    try {
+      const text = fs2.readFileSync(file, "utf8");
+      if (!text.includes("BEGIN CERTIFICATE") || seen.has(text)) return false;
+      seen.add(text);
+      pems.push(text);
+      return true;
+    } catch {
+    }
+    return false;
+  };
+  const userBundle = env.SSL_CERT_FILE?.trim();
+  if (userBundle && pushFile(userBundle)) return pems;
+  for (const candidate of PLATFORM_CA_CANDIDATES) {
+    if (pushFile(candidate)) break;
+  }
+  return pems;
+}
+function writeCombinedBundle() {
+  const certs = /* @__PURE__ */ new Set();
+  for (const pem of collectSystemCaPems()) certs.add(pem.trim());
+  for (const pem of tls2.rootCertificates) certs.add(pem.trim());
+  certs.add(rootCertPem.trim());
+  const body = [...certs].map((pem) => pem.endsWith("\n") ? pem : pem + "\n").join("");
+  fs2.writeFileSync(path6.join(caDir(), COMBINED_CA_FILE), body, { mode: 420 });
+}
+function generateRootCA() {
+  const keys = import_node_forge.default.pki.rsa.generateKeyPair({ bits: 2048 });
+  const cert = import_node_forge.default.pki.createCertificate();
+  cert.publicKey = keys.publicKey;
+  cert.serialNumber = "01";
+  cert.validity.notBefore = /* @__PURE__ */ new Date();
+  cert.validity.notAfter = /* @__PURE__ */ new Date();
+  cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10);
+  const attrs = [
+    { name: "commonName", value: ROOT_CN },
+    { name: "organizationName", value: "billion-context" }
+  ];
+  cert.setSubject(attrs);
+  cert.setIssuer(attrs);
+  cert.setExtensions([
+    { name: "basicConstraints", cA: true },
+    { name: "keyUsage", keyCertSign: true, cRLSign: true, digitalSignature: true },
+    { name: "subjectKeyIdentifier" }
+  ]);
+  cert.sign(keys.privateKey, import_node_forge.default.md.sha256.create());
+  return {
+    cert: import_node_forge.default.pki.certificateToPem(cert),
+    key: import_node_forge.default.pki.privateKeyToPem(keys.privateKey)
+  };
+}
+function ensureRootCA() {
+  if (rootCertPem && rootKeyPem) {
+    writeCombinedBundle();
+    return;
+  }
+  const dir = caDir();
+  fs2.mkdirSync(dir, { recursive: true });
+  const certPath = path6.join(dir, ROOT_CERT_FILE);
+  const keyPath = path6.join(dir, ROOT_KEY_FILE);
+  if (fs2.existsSync(certPath) && fs2.existsSync(keyPath)) {
+    rootCertPem = fs2.readFileSync(certPath, "utf8");
+    rootKeyPem = fs2.readFileSync(keyPath, "utf8");
+    rootCert = import_node_forge.default.pki.certificateFromPem(rootCertPem);
+    rootKey = import_node_forge.default.pki.privateKeyFromPem(rootKeyPem);
+    writeCombinedBundle();
+    return;
+  }
+  const { cert, key } = generateRootCA();
+  fs2.writeFileSync(certPath, cert, { mode: 420 });
+  fs2.writeFileSync(keyPath, key, { mode: 384 });
+  rootCertPem = cert;
+  rootKeyPem = key;
+  rootCert = import_node_forge.default.pki.certificateFromPem(cert);
+  rootKey = import_node_forge.default.pki.privateKeyFromPem(key);
+  writeCombinedBundle();
+}
+function getSecureContext(host) {
+  if (!rootCertPem || !rootKeyPem || !rootCert || !rootKey) {
+    throw new Error("CA not initialized \u2014 call ensureRootCA() first");
+  }
+  const cached = secureContextCache.get(host);
+  if (cached) {
+    secureContextCache.delete(host);
+    secureContextCache.set(host, cached);
+    return cached;
+  }
+  const keys = import_node_forge.default.pki.rsa.generateKeyPair({ bits: 2048 });
+  const cert = import_node_forge.default.pki.createCertificate();
+  cert.publicKey = keys.publicKey;
+  cert.serialNumber = Date.now().toString() + Math.floor(Math.random() * 1e6).toString();
+  cert.validity.notBefore = /* @__PURE__ */ new Date();
+  cert.validity.notAfter = /* @__PURE__ */ new Date();
+  cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 2);
+  cert.setSubject([{ name: "commonName", value: host }]);
+  cert.setIssuer(rootCert.subject.attributes);
+  cert.setExtensions([
+    { name: "basicConstraints", cA: false },
+    { name: "keyUsage", digitalSignature: true, keyEncipherment: true },
+    { name: "extKeyUsage", serverAuth: true },
+    { name: "subjectAltName", altNames: [{ type: 2, value: host }] }
+  ]);
+  cert.sign(rootKey, import_node_forge.default.md.sha256.create());
+  const ctx = tls2.createSecureContext({
+    cert: import_node_forge.default.pki.certificateToPem(cert),
+    key: import_node_forge.default.pki.privateKeyToPem(keys.privateKey),
+    ca: rootCertPem
+  });
+  secureContextCache.set(host, ctx);
+  if (secureContextCache.size > SECURE_CONTEXT_CACHE_MAX) {
+    const oldest = secureContextCache.keys().next().value;
+    if (oldest !== void 0) secureContextCache.delete(oldest);
+  }
+  return ctx;
+}
+
 // src/web/client.ts
 var WEB_CLIENT = `
 const byId=(id)=>document.getElementById(id);
@@ -50658,7 +50805,13 @@ var WEB_STYLES = `
 `;
 
 // src/web/page.ts
+function escapeHtml(value) {
+  return value.replace(/[&<>"']/g, (char) => char === "&" ? "&amp;" : char === "<" ? "&lt;" : char === ">" ? "&gt;" : char === '"' ? "&quot;" : "&#39;");
+}
 function renderPage(origin, version2) {
+  const caPath = rootCaPath();
+  const caPathEsc = escapeHtml(caPath);
+  const caReady = existsSync3(caPath);
   return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>billion-context</title><style>${WEB_STYLES}</style></head><body>
 <div class="app"><aside class="sidebar"><div class="brand"><div class="brand-title">billion<span>-context</span></div><div class="version">v${version2}</div></div><a class="fork-ribbon" href="https://github.com/ranxianglei/billion-context" target="_blank" rel="noopener">\u2605 Fork me on GitHub</a><nav class="nav"><button class="active" data-page="overview">\u6982\u89C8</button><button data-page="routing">\u63A5\u5165</button><button data-page="upstream">\u4E0A\u6E38</button><button data-page="sessions">\u4F1A\u8BDD</button><button data-page="settings">\u8BBE\u7F6E</button></nav></aside>
 <main class="main"><section id="page-overview" class="page active"><h1>\u6982\u89C8</h1><p class="lead">\u672C\u5730\u8DEF\u7531\u4E0E\u4E0A\u6E38\u7F51\u7EDC\u76F8\u4E92\u72EC\u7ACB\uFF0CACP \u538B\u7F29\u8FD0\u884C\u5728\u4E24\u8005\u4E4B\u95F4\u3002</p><div class="grid"><div class="card"><h2>\u670D\u52A1\u5730\u5740</h2><p class="mono">${origin}</p></div><div class="card"><h2>\u5BA2\u6237\u7AEF\u63A5\u5165</h2><p class="status">\u5728"\u63A5\u5165"\u9875\u5C06\u5404\u5BA2\u6237\u7AEF\uFF08Codex / Claude Code / OpenCode / Pi \u7B49\uFF09\u7684\u6D41\u91CF\u8DEF\u7531\u5230 bili\u3002</p></div></div></section>
@@ -50673,14 +50826,14 @@ function renderPage(origin, version2) {
 <div class="card"><div class="card-head"><h2>\u5176\u4ED6\uFF08Cursor / Aider / Continue\uFF09</h2><button class="btn small copy-btn" data-copy="${origin}/bili/">\u590D\u5236</button></div><dl class="kv"><dt>\u89C4\u5219</dt><dd>\u4EFB\u610F baseURL \u524D\u52A0 <span class="mono">${origin}/bili/</span></dd><dt>\u793A\u4F8B</dt><dd class="mono">${origin}/bili/https://api.openai.com/v1</dd></dl></div>
 <h2 class="section-title">B. \u8BC1\u4E66\u63A5\u5165\u65B9\u5F0F\uFF08zcode \u7B49\u7C7B\u578B\uFF09</h2>
 <p class="hint">\u4E0D\u652F\u6301\u6539 URL \u7684\u5BA2\u6237\u7AEF\uFF08endpoint \u786C\u7F16\u7801\uFF09\u9700 MITM \u900F\u660E\u4EE3\u7406\uFF0C\u8BBE HTTPS_PROXY + \u4FE1\u4EFB CA \u8BC1\u4E66\u3002</p>
-<div class="card"><div class="card-head"><h2>ZCode\uFF08\u7F16\u7A0B\u5957\u9910\uFF09</h2><span class="badge">MITM</span></div><dl class="kv"><dt>\u65B9\u5F0F</dt><dd>MITM \u900F\u660E\u4EE3\u7406</dd><dt>\u8BBE\u7F6E</dt><dd>Settings \u2192 Network \u2192 HTTP Proxy = <span class="mono">${origin}</span></dd><dt>CA \u8BC1\u4E66</dt><dd class="mono">~/.local/share/billion-context/ca/root-ca.pem</dd></dl></div></section>
+<div class="card"><div class="card-head"><h2>ZCode\uFF08\u7F16\u7A0B\u5957\u9910\uFF09</h2><span class="badge">MITM</span><button class="btn small copy-btn" data-copy="${caPathEsc}">\u590D\u5236 CA \u8DEF\u5F84</button></div><dl class="kv"><dt>\u65B9\u5F0F</dt><dd>MITM \u900F\u660E\u4EE3\u7406</dd><dt>\u8BBE\u7F6E</dt><dd>Settings \u2192 Network \u2192 HTTP Proxy = <span class="mono">${origin}</span></dd><dt>CA \u8BC1\u4E66</dt><dd class="mono">${caPathEsc}${caReady ? "" : "\uFF08\u5C1A\u672A\u751F\u6210\uFF0C\u542F\u52A8\u4EE3\u7406\u540E\u81EA\u52A8\u521B\u5EFA\uFF09"}</dd></dl><p class="hint">CA \u8DEF\u5F84\u662F\u672C\u673A bili \u5B9E\u9645\u751F\u6210\u7684\u7EDD\u5BF9\u8DEF\u5F84\uFF0C\u70B9"\u590D\u5236 CA \u8DEF\u5F84"\u540E\u76F4\u63A5\u7C98\u8D34\u8FDB ZCode\u3002\u26A0\uFE0F Windows \u4E0A ZCode \u4E0D\u4F1A\u5C55\u5F00 <span class="mono">~</span>\uFF0C\u8BF7\u52FF\u624B\u586B <span class="mono">~/\u2026</span> \u5F62\u5F0F\u7684\u8DEF\u5F84\u3002</p></div></section>
 <section id="page-upstream" class="page"><h1>\u4E0A\u6E38\u7F51\u7EDC</h1><p class="lead">\u63A7\u5236 bili \u5982\u4F55\u8BBF\u95EE\u771F\u5B9E Provider\uFF0C\u4E0D\u4F1A\u6539\u53D8\u5BA2\u6237\u7AEF\u7684\u672C\u5730\u8DEF\u7531\u5730\u5740\u3002</p><div class="card"><div class="card-head"><h2>\u5168\u5C40\u4EE3\u7406</h2></div><div class="modes"><label><input type="radio" name="proxy-mode" value="direct" checked>\u76F4\u8FDE\uFF08\u9ED8\u8BA4\uFF09</label><label><input type="radio" name="proxy-mode" value="manual">\u624B\u52A8\u4EE3\u7406</label><label><input type="radio" name="proxy-mode" value="auto">\u81EA\u52A8\uFF08\u8DDF\u968F\u7CFB\u7EDF\uFF09</label></div><div class="field"><label>HTTP / HTTPS Proxy</label><input id="proxy-url" class="mono" placeholder="http://127.0.0.1:7897"></div><dl class="kv"><dt>\u5F53\u524D\u6765\u6E90</dt><dd id="upstream-source">\u76F4\u8FDE</dd><dt>\u6709\u6548\u4EE3\u7406</dt><dd id="upstream-effective" class="mono">direct</dd><dt>\u7CFB\u7EDF PAC</dt><dd id="upstream-pac" class="mono">\u2014</dd><dt>\u72B6\u6001</dt><dd id="upstream-state" class="status">\u5C1A\u672A\u6D4B\u8BD5</dd></dl><div class="actions"><button id="save-upstream" class="btn primary">\u4FDD\u5B58\u5E76\u70ED\u66F4\u65B0</button><button id="test-upstream" class="btn">\u6D4B\u8BD5\u8FDE\u63A5</button></div></div><div class="card"><div class="card-head"><h2>\u6309 URL \u8986\u76D6</h2></div><p class="status">\u4E3A\u7279\u5B9A Provider \u5355\u72EC\u8BBE\u7F6E\u4E0A\u6E38\u4EE3\u7406\uFF0C\u8986\u76D6\u5168\u5C40\u8BBE\u7F6E\u3002\u7559\u7A7A = \u7EE7\u627F\u5168\u5C40\u3002</p><div id="upstream-overrides" class="status">\u52A0\u8F7D\u4E2D</div><div class="actions"><button id="save-overrides" class="btn primary">\u4FDD\u5B58\u8986\u76D6\u5E76\u70ED\u66F4\u65B0</button></div></div></section>
 <section id="page-sessions" class="page"><div class="card-head"><div><h1>\u4F1A\u8BDD</h1><p class="lead">ACP \u538B\u7F29\u72B6\u6001\u4E0E\u4E0A\u6E38\u7528\u91CF\u3002</p></div><button id="refresh-sessions" class="btn">\u5237\u65B0</button></div><div class="card"><table><thead><tr><th>\u6807\u9898</th><th>\u534F\u8BAE</th><th>\u6807\u8BC6</th><th>\u8BF7\u6C42</th><th>\u4E0A\u4E0B\u6587</th><th>\u6700\u540E\u6D3B\u52A8</th></tr></thead><tbody id="sessions-body"></tbody></table></div></section>
 <section id="page-settings" class="page"><h1>\u9AD8\u7EA7\u8BBE\u7F6E</h1><p class="lead">\u76F4\u63A5\u7F16\u8F91 providers JSON\uFF08\u6DFB\u52A0\u65B0 Provider\u3001\u914D\u7F6E\u6A21\u578B\u4E0A\u4E0B\u6587\u7A97\u53E3\u3001\u6309 URL \u4EE3\u7406\u7B49\uFF09\uFF1B\u4FDD\u5B58\u540E\u7ACB\u5373\u70ED\u66F4\u65B0\u3002</p><div class="card"><div class="field"><label>providers JSON</label><textarea id="providers-json">{}</textarea></div><div class="actions"><button id="save-providers" class="btn primary">\u4FDD\u5B58\u5E76\u5E94\u7528</button></div></div><div class="card"><div class="card-head"><h2>\u538B\u7F29\u53C2\u6570\uFF08\u5168\u5C40\uFF09</h2></div><p class="status">\u5168\u5C40 compress \u914D\u7F6E\uFF08modelContextLimit / maxContextLimit / emergencyThresholdPercent / nudgeGrowthTokens / preserveRecentMessages / preserveRecentTokens / minCompressRange / tiers / injectTool / injectNudge\uFF09\u3002\u4FDD\u5B58\u540E\u70ED\u66F4\u65B0\uFF0C\u65E0\u9700\u91CD\u542F\u3002\u7F6E\u7A7A = \u6062\u590D\u9ED8\u8BA4\u3002</p><div class="field"><label>compress JSON</label><textarea id="compress-json" placeholder='{"modelContextLimit": 200000}'></textarea></div><div class="actions"><button id="save-compress" class="btn primary">\u4FDD\u5B58\u5E76\u70ED\u66F4\u65B0</button></div></div></section></main></div><div id="toast" class="toast"></div><script>${WEB_CLIENT}</script></body></html>`;
 }
 
 // src/web/api.ts
-import { closeSync, existsSync as existsSync3, fsyncSync, mkdirSync as mkdirSync4, openSync, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
+import { closeSync, existsSync as existsSync4, fsyncSync, mkdirSync as mkdirSync4, openSync, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname3 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 function readConfig() {
@@ -50688,7 +50841,7 @@ function readConfig() {
   return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
 }
 function configParseError() {
-  if (!existsSync3(configFile())) return null;
+  if (!existsSync4(configFile())) return null;
   const parsed = safeReadJson(configFile());
   if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return null;
   return `config file is not valid JSON: ${configFile()}`;
@@ -51327,6 +51480,26 @@ function reserveOutputHeadroom(window2, maxOutput) {
   }
   return window2;
 }
+function hoistMidSystemMessages(messages) {
+  let lead = 0;
+  while (lead < messages.length && (messages[lead].role === "system" || messages[lead].role === "developer")) lead++;
+  if (lead === messages.length) return messages;
+  let midCount = 0;
+  for (let i = lead; i < messages.length; i++) {
+    const r = messages[i].role;
+    if (r === "system" || r === "developer") midCount++;
+  }
+  if (midCount === 0) return messages;
+  const head = messages.slice(0, lead);
+  const mid = [];
+  const rest = [];
+  for (let i = lead; i < messages.length; i++) {
+    const r = messages[i].role;
+    if (r === "system" || r === "developer") mid.push(messages[i]);
+    else rest.push(messages[i]);
+  }
+  return [...head, ...mid, ...rest];
+}
 function shouldReserveOutputHeadroom(protocol) {
   return protocol !== "anthropic";
 }
@@ -51988,7 +52161,7 @@ function createOpenaiAdapter(requestBody, clientSystem) {
   );
   return {
     buildRequest(coreMessages, systemPrompt, body) {
-      const messages = coreToOpenai(coreMessages);
+      const messages = hoistMidSystemMessages(coreToOpenai(coreMessages));
       const withSys = injectOpenaiSystem(messages, [clientSystem, systemPrompt].filter((p2) => typeof p2 === "string" && p2.length > 0));
       return { ...body, messages: withSys };
     },
@@ -52134,7 +52307,8 @@ function createOpenaiAdapter(requestBody, clientSystem) {
             const fn = tc.function;
             const name = typeof fn?.name === "string" ? fn.name : "";
             const id = typeof tc.id === "string" ? tc.id : "";
-            const args = typeof fn?.arguments === "string" ? fn.arguments : "";
+            const rawArgs = fn?.arguments;
+            const args = typeof rawArgs === "string" ? rawArgs : rawArgs !== null && typeof rawArgs === "object" ? JSON.stringify(rawArgs) : "";
             let buf = pending.get(idx);
             if (!buf) {
               buf = { index: idx, id, name, arguments: args };
@@ -53345,13 +53519,13 @@ function buildStatusPanel(input) {
 
 // src/plugin.ts
 import { fileURLToPath as fileURLToPath2 } from "url";
-import fs2 from "fs";
-import path6 from "path";
+import fs3 from "fs";
+import path7 from "path";
 var PROXY_VERSION = (() => {
   try {
     const here = fileURLToPath2(import.meta.url);
-    const pkg = path6.join(path6.dirname(here), "..", "package.json");
-    return JSON.parse(fs2.readFileSync(pkg, "utf8")).version ?? "dev";
+    const pkg = path7.join(path7.dirname(here), "..", "package.json");
+    return JSON.parse(fs3.readFileSync(pkg, "utf8")).version ?? "dev";
   } catch {
     return "dev";
   }
@@ -53363,8 +53537,8 @@ var PLUGIN_PROTOCOL_VERSION = 1;
 var VERSION = (() => {
   try {
     const here = fileURLToPath2(import.meta.url);
-    const pkg = path6.join(path6.dirname(here), "..", "package.json");
-    return JSON.parse(fs2.readFileSync(pkg, "utf8")).version ?? "dev";
+    const pkg = path7.join(path7.dirname(here), "..", "package.json");
+    return JSON.parse(fs3.readFileSync(pkg, "utf8")).version ?? "dev";
   } catch {
     return "dev";
   }
@@ -53393,14 +53567,14 @@ function pluginReportedContextWindow(headers) {
 var MAX_PLUGIN_CONVERSATIONS = 1024;
 var conversations = /* @__PURE__ */ new Map();
 var remembered = /* @__PURE__ */ new Map();
-var conversationsFile = () => path6.join(stateDir(), "plugin-conversations.json");
+var conversationsFile = () => path7.join(stateDir(), "plugin-conversations.json");
 var conversationsSaveTimer;
 function writeConversationsFile() {
   try {
     const obj = {};
     for (const [k2, v2] of conversations) obj[k2] = v2;
-    fs2.mkdirSync(stateDir(), { recursive: true });
-    fs2.writeFileSync(conversationsFile(), JSON.stringify(obj));
+    fs3.mkdirSync(stateDir(), { recursive: true });
+    fs3.writeFileSync(conversationsFile(), JSON.stringify(obj));
   } catch {
   }
 }
@@ -53420,7 +53594,7 @@ function flushConversations() {
 }
 function loadConversations() {
   try {
-    const raw = fs2.readFileSync(conversationsFile(), "utf8");
+    const raw = fs3.readFileSync(conversationsFile(), "utf8");
     const obj = JSON.parse(raw);
     for (const [k2, v2] of Object.entries(obj)) {
       if (v2 && typeof v2.sessionId === "string" && v2.sessionId.length > 0) {
@@ -53881,147 +54055,6 @@ async function pipePluginJson(stream2, res, session, protocol) {
 // src/mitm.ts
 import tls3 from "tls";
 
-// src/ca.ts
-var import_node_forge = __toESM(require_lib(), 1);
-import fs3 from "fs";
-import path7 from "path";
-import tls2 from "tls";
-var ROOT_CERT_FILE = "root-ca.pem";
-var ROOT_KEY_FILE = "root-ca-key.pem";
-var COMBINED_CA_FILE = "combined-ca.pem";
-var ROOT_CN = "billion-context MITM Root CA";
-var PLATFORM_CA_CANDIDATES = process.platform === "darwin" ? ["/etc/ssl/cert.pem", "/private/etc/ssl/cert.pem"] : [
-  "/etc/ssl/certs/ca-certificates.crt",
-  "/etc/pki/tls/certs/ca-bundle.crt",
-  "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem",
-  "/etc/ssl/ca-bundle.pem",
-  "/etc/ssl/cert.pem"
-];
-var rootCertPem;
-var rootKeyPem;
-var rootCert;
-var rootKey;
-var secureContextCache = /* @__PURE__ */ new Map();
-var SECURE_CONTEXT_CACHE_MAX = 64;
-function collectSystemCaPems(env = process.env) {
-  const pems = [];
-  const seen = /* @__PURE__ */ new Set();
-  const pushFile = (file) => {
-    try {
-      const text = fs3.readFileSync(file, "utf8");
-      if (!text.includes("BEGIN CERTIFICATE") || seen.has(text)) return false;
-      seen.add(text);
-      pems.push(text);
-      return true;
-    } catch {
-    }
-    return false;
-  };
-  const userBundle = env.SSL_CERT_FILE?.trim();
-  if (userBundle && pushFile(userBundle)) return pems;
-  for (const candidate of PLATFORM_CA_CANDIDATES) {
-    if (pushFile(candidate)) break;
-  }
-  return pems;
-}
-function writeCombinedBundle() {
-  const certs = /* @__PURE__ */ new Set();
-  for (const pem of collectSystemCaPems()) certs.add(pem.trim());
-  for (const pem of tls2.rootCertificates) certs.add(pem.trim());
-  certs.add(rootCertPem.trim());
-  const body = [...certs].map((pem) => pem.endsWith("\n") ? pem : pem + "\n").join("");
-  fs3.writeFileSync(path7.join(caDir(), COMBINED_CA_FILE), body, { mode: 420 });
-}
-function generateRootCA() {
-  const keys = import_node_forge.default.pki.rsa.generateKeyPair({ bits: 2048 });
-  const cert = import_node_forge.default.pki.createCertificate();
-  cert.publicKey = keys.publicKey;
-  cert.serialNumber = "01";
-  cert.validity.notBefore = /* @__PURE__ */ new Date();
-  cert.validity.notAfter = /* @__PURE__ */ new Date();
-  cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10);
-  const attrs = [
-    { name: "commonName", value: ROOT_CN },
-    { name: "organizationName", value: "billion-context" }
-  ];
-  cert.setSubject(attrs);
-  cert.setIssuer(attrs);
-  cert.setExtensions([
-    { name: "basicConstraints", cA: true },
-    { name: "keyUsage", keyCertSign: true, cRLSign: true, digitalSignature: true },
-    { name: "subjectKeyIdentifier" }
-  ]);
-  cert.sign(keys.privateKey, import_node_forge.default.md.sha256.create());
-  return {
-    cert: import_node_forge.default.pki.certificateToPem(cert),
-    key: import_node_forge.default.pki.privateKeyToPem(keys.privateKey)
-  };
-}
-function ensureRootCA() {
-  if (rootCertPem && rootKeyPem) {
-    writeCombinedBundle();
-    return;
-  }
-  const dir = caDir();
-  fs3.mkdirSync(dir, { recursive: true });
-  const certPath = path7.join(dir, ROOT_CERT_FILE);
-  const keyPath = path7.join(dir, ROOT_KEY_FILE);
-  if (fs3.existsSync(certPath) && fs3.existsSync(keyPath)) {
-    rootCertPem = fs3.readFileSync(certPath, "utf8");
-    rootKeyPem = fs3.readFileSync(keyPath, "utf8");
-    rootCert = import_node_forge.default.pki.certificateFromPem(rootCertPem);
-    rootKey = import_node_forge.default.pki.privateKeyFromPem(rootKeyPem);
-    writeCombinedBundle();
-    return;
-  }
-  const { cert, key } = generateRootCA();
-  fs3.writeFileSync(certPath, cert, { mode: 420 });
-  fs3.writeFileSync(keyPath, key, { mode: 384 });
-  rootCertPem = cert;
-  rootKeyPem = key;
-  rootCert = import_node_forge.default.pki.certificateFromPem(cert);
-  rootKey = import_node_forge.default.pki.privateKeyFromPem(key);
-  writeCombinedBundle();
-}
-function getSecureContext(host) {
-  if (!rootCertPem || !rootKeyPem || !rootCert || !rootKey) {
-    throw new Error("CA not initialized \u2014 call ensureRootCA() first");
-  }
-  const cached = secureContextCache.get(host);
-  if (cached) {
-    secureContextCache.delete(host);
-    secureContextCache.set(host, cached);
-    return cached;
-  }
-  const keys = import_node_forge.default.pki.rsa.generateKeyPair({ bits: 2048 });
-  const cert = import_node_forge.default.pki.createCertificate();
-  cert.publicKey = keys.publicKey;
-  cert.serialNumber = Date.now().toString() + Math.floor(Math.random() * 1e6).toString();
-  cert.validity.notBefore = /* @__PURE__ */ new Date();
-  cert.validity.notAfter = /* @__PURE__ */ new Date();
-  cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 2);
-  cert.setSubject([{ name: "commonName", value: host }]);
-  cert.setIssuer(rootCert.subject.attributes);
-  cert.setExtensions([
-    { name: "basicConstraints", cA: false },
-    { name: "keyUsage", digitalSignature: true, keyEncipherment: true },
-    { name: "extKeyUsage", serverAuth: true },
-    { name: "subjectAltName", altNames: [{ type: 2, value: host }] }
-  ]);
-  cert.sign(rootKey, import_node_forge.default.md.sha256.create());
-  const ctx = tls2.createSecureContext({
-    cert: import_node_forge.default.pki.certificateToPem(cert),
-    key: import_node_forge.default.pki.privateKeyToPem(keys.privateKey),
-    ca: rootCertPem
-  });
-  secureContextCache.set(host, ctx);
-  if (secureContextCache.size > SECURE_CONTEXT_CACHE_MAX) {
-    const oldest = secureContextCache.keys().next().value;
-    if (oldest !== void 0) secureContextCache.delete(oldest);
-  }
-  return ctx;
-}
-
 // src/discover.ts
 import fs5 from "fs";
 import os2 from "os";
@@ -54537,6 +54570,15 @@ var DEFAULT_MITM_DOMAINS = [
   "chatgpt.com"
 ];
 var MITM_UPSTREAM_KEY = "__biliMitmUpstream";
+var warnedCertRejected = false;
+var CERT_REJECT_RE = /alert (?:certificate unknown|unknown ca|bad certificate|certificate expired|certificate revoked|unsupported certificate)/i;
+function noteMitmTlsError(host, port, message, log2) {
+  log2(`mitm ${maskHostForLog(host)}:${port} TLS error: ${message}`);
+  if (CERT_REJECT_RE.test(message) && !warnedCertRejected) {
+    warnedCertRejected = true;
+    log2(`mitm ${maskHostForLog(host)}:${port} client REJECTED the MITM certificate \u2014 it does not trust bili's root CA. Install it in the client's/system trust store, then restart the client. CA: ${rootCaPath()}`);
+  }
+}
 var MITM_HANDSHAKE_TIMEOUT_MS_DEFAULT = 1e4;
 function mitmHandshakeTimeoutMs() {
   const v2 = Number.parseInt(process.env.BILI_MITM_HANDSHAKE_TIMEOUT_MS ?? "", 10);
@@ -54602,6 +54644,7 @@ function tunnelThrough(clientSocket, host, port, head, log2, proxyUrl) {
     if (head.length > 0) upstream.write(head);
     upstream.pipe(clientSocket);
     clientSocket.pipe(upstream);
+    log2(`tunnel ${maskHostForLog(host)}:${port} established (blind TCP, not decrypted)`);
     const cleanup = (where, err2) => {
       log2(`tunnel ${maskHostForLog(host)}:${port} ${where} closed: ${maskHostInText(err2.message, host)}`);
       upstream.destroy();
@@ -54636,7 +54679,7 @@ function doMitm(server, clientSocket, host, port, head, log2) {
   }
   tlsSocket[MITM_UPSTREAM_KEY] = `https://${host}`;
   tlsSocket.on("error", (err2) => {
-    log2(`mitm ${maskHostForLog(host)}:${port} TLS error: ${err2.message}`);
+    noteMitmTlsError(host, port, err2.message, log2);
     tlsSocket.destroy();
     clientSocket.destroy();
   });
@@ -55414,7 +55457,7 @@ function anthropicBetaContextWindow(headers) {
 function safeSessionId(id) {
   return (id ?? "unknown").replace(/[^a-zA-Z0-9._-]/g, "_");
 }
-var NO_IDENTITY_MESSAGE = "Missing stable conversation identity. Send one of the headers: x-session-id, x-session-affinity, x-acp-session, x-opencode-session, x-claude-code-session-id, session-id \u2014 or body session_id / prompt_cache_key (responses/openai). Requests replaying a conversation history are matched by content prefix affinity (#309); this one carries no usable history signal.";
+var NO_IDENTITY_MESSAGE = "Missing stable conversation identity. Send one of the headers: x-session-id, x-session-affinity, x-acp-session, x-opencode-session, x-claude-code-session-id, session-id \u2014 or body session_id / prompt_cache_key (responses/openai/anthropic). Requests replaying a conversation history are matched by content prefix affinity (#309); this one carries no usable history signal.";
 var UPSTREAM_HOP_HEADERS = /* @__PURE__ */ new Set([
   "host",
   "content-length",
@@ -55753,6 +55796,11 @@ async function handle(req, res, opts, core, config, log2, instanceId) {
       return;
     }
   }
+  if (isAdminPath) {
+    res.writeHead(404, { "content-type": "application/json" });
+    res.end(JSON.stringify({ error: { type: "not_found", message: "no such management endpoint" } }));
+    return;
+  }
   let bodyBuffer;
   let urlPath;
   let responsesCompact;
@@ -55839,9 +55887,9 @@ ${bodyBuffer.toString("utf8")}`);
       const betaWindow = anthropicBetaContextWindow(req.headers);
       const pluginWindow = pluginReportedContextWindow(req.headers);
       const launcherWindow = launcherContextWindow(model);
-      const peekWindow = host ? peekRegistryContext(model, host) : void 0;
       const configuredWindow = resolveConfiguredContextLimit(opts.routes, embeddedUrl, model);
-      let native = betaWindow ?? pluginWindow ?? launcherWindow ?? peekWindow ?? configuredWindow ?? lookupContextLimit(model);
+      const peekWindow = host ? peekRegistryContext(model, host) : void 0;
+      let native = betaWindow ?? pluginWindow ?? launcherWindow ?? configuredWindow ?? peekWindow ?? lookupContextLimit(model);
       const operatorWindowTuned = resolveCompress(opts.routes, embeddedUrl, model, opts.compress).modelContextLimit !== void 0;
       nativeFromFallback = !betaWindow && !pluginWindow && !launcherWindow && !peekWindow && !configuredWindow && !operatorWindowTuned;
       if (!native && host) {
@@ -55876,11 +55924,16 @@ ${bodyBuffer.toString("utf8")}`);
       convHeader ? { value: openaiSignal, source: "header", clientProvided: true } : { value: openaiSignal, source: "content-fingerprint", clientProvided: false },
       parsed
     ) : void 0;
-    const conversation = protocol === "anthropic" ? conversationSignalAnthropic(parsed, convHeader) : protocol === "openai" ? openaiIdentity?.value ?? openaiSignal : codexTurn ? codexTurn.value : subagentNamespace(
+    const anthropicSignal = protocol === "anthropic" ? conversationSignalAnthropic(parsed, convHeader) : "";
+    const anthropicIdentity = protocol === "anthropic" ? preferPromptCacheKeyIdentity(
+      convHeader ? { value: anthropicSignal, source: "header", clientProvided: true } : { value: anthropicSignal, source: "content-fingerprint", clientProvided: false },
+      parsed
+    ) : void 0;
+    const conversation = protocol === "anthropic" ? anthropicIdentity?.value ?? anthropicSignal : protocol === "openai" ? openaiIdentity?.value ?? openaiSignal : codexTurn ? codexTurn.value : subagentNamespace(
       responsesIdentity?.value ?? conversationSignalResponses(parsed, convHeader),
       parsed.instructions
     );
-    const clientProvided = protocol === "responses" ? responsesIdentity?.clientProvided ?? false : protocol === "openai" ? openaiIdentity?.clientProvided ?? false : !!convHeader;
+    const clientProvided = protocol === "responses" ? responsesIdentity?.clientProvided ?? false : protocol === "openai" ? openaiIdentity?.clientProvided ?? false : protocol === "anthropic" ? anthropicIdentity?.clientProvided ?? false : !!convHeader;
     let anonAffinity = null;
     if (!clientProvided) {
       const anonMessages = protocol === "responses" ? parsed.input ?? [] : parsed.messages ?? [];
@@ -55904,7 +55957,7 @@ ${bodyBuffer.toString("utf8")}`);
       }
     }
     const sessionId = anonAffinity ? anonAffinity.sessionId : conversation;
-    const bodyIdentity = responsesIdentity ?? openaiIdentity;
+    const bodyIdentity = responsesIdentity ?? openaiIdentity ?? anthropicIdentity;
     const affinity = affinityToken(bodyIdentity ?? {
       value: clientConv ?? conversation,
       source: clientConv ? "header" : "generated",
@@ -55942,7 +55995,7 @@ ${bodyBuffer.toString("utf8")}`);
       session.metadata.effectiveContextLimit = reqConfig.modelContextLimit;
       recordPluginSession(pluginConversation ?? conversation, session.id);
     }
-    if (protocol === "responses" || protocol === "openai") {
+    if (protocol === "responses" || protocol === "openai" || protocol === "anthropic") {
       const pck = parsed.prompt_cache_key;
       if (typeof pck === "string" && pck.trim().length > 0) {
         recordPluginSession(pck.trim(), session.id);
@@ -56065,6 +56118,10 @@ function prepareAnthropic(parsed, req, opts, core, config, prompts, log2, sessio
   const stream2 = parsed.stream === true;
   ++session.stats.requests;
   const injectTools = opts.compress.injectTool && !pluginMode;
+  if (isAutoModeClassifier(parsed)) {
+    log2("info", `[${sessionId}] auto-mode classifier passthrough (skipping compress injection)`);
+    return { body: JSON.stringify(parsed), session, processedMessages: [], originalMessages: [], anthropicSystem: parsed.system, protocol: "anthropic", stream: stream2, compressInjected: false, pluginMode, nudge: void 0, prompts };
+  }
   let processedMessages = [];
   let originalMessages = [];
   let nudge;
@@ -56111,6 +56168,7 @@ function prepareAnthropic(parsed, req, opts, core, config, prompts, log2, sessio
   snapshotMessages(session, originalMessages);
   markDirty(session);
   const rebuilt = { ...parsed, messages: rebuiltMessages, system: systemOut, tools: toolsOut };
+  delete rebuilt.prompt_cache_key;
   return { body: JSON.stringify(rebuilt), session, processedMessages, originalMessages, anthropicSystem: parsed.system, protocol: "anthropic", stream: stream2, compressInjected: injectTools, pluginMode, nudge, prompts };
 }
 function prepareOpenai(parsed, req, opts, core, config, prompts, log2, session, pluginMode) {
@@ -56146,7 +56204,7 @@ function prepareOpenai(parsed, req, opts, core, config, prompts, log2, session,
     log2("info", diagNudge(turn, sessionId, tokenCount, config.modelContextLimit, parsed.model));
     processedMessages = stripKernelSummaries(turn.messages, turn.state);
     reapOrphanBlocks(session, msgs, deactivateBlock);
-    rebuiltMessages = coreToOpenai(processedMessages);
+    rebuiltMessages = hoistMidSystemMessages(coreToOpenai(processedMessages));
     const sysParts = [];
     if (systemText) sysParts.push(systemText);
     if (shouldInject) sysParts.push(buildCompressSystemPrompt(prompts));
@@ -56330,8 +56388,10 @@ function prepareCountTokens(parsed, core, config, log2, session) {
     const stripped = stripKernelSummaries(turn.messages, turn.state);
     const rebuiltMessages = coreToAnthropic(stripped, cacheControls);
     log2("info", `[${sessionId}] count_tokens pruned: ${msgs.length} \u2192 ${stripped.length} msgs`);
+    const rebuilt = { ...parsed, messages: rebuiltMessages };
+    delete rebuilt.prompt_cache_key;
     return {
-      body: JSON.stringify({ ...parsed, messages: rebuiltMessages }),
+      body: JSON.stringify(rebuilt),
       session,
       processedMessages: [],
       originalMessages: msgs,
@@ -56341,8 +56401,10 @@ function prepareCountTokens(parsed, core, config, log2, session) {
     };
   } catch (err2) {
     log2("warn", `[${sessionId}] count_tokens prune failed, forwarding unchanged: ${String(err2)}`);
+    const fallback = { ...parsed };
+    delete fallback.prompt_cache_key;
     return {
-      body: JSON.stringify(parsed),
+      body: JSON.stringify(fallback),
       session,
       processedMessages: [],
       originalMessages: [],
@@ -56411,6 +56473,12 @@ function resolvePromptCacheKey(explicit, identity, routing, upstream) {
   if (!identity.clientProvided || !shouldInjectPromptCacheKey(routing, upstream)) return void 0;
   return identity.value;
 }
+var AUTO_MODE_CLASSIFIER_STOPS = /* @__PURE__ */ new Set(["</severity>", "</block>"]);
+function isAutoModeClassifier(parsed) {
+  const stops = parsed.stop_sequences;
+  if (!Array.isArray(stops)) return false;
+  return stops.some((s3) => typeof s3 === "string" && AUTO_MODE_CLASSIFIER_STOPS.has(s3));
+}
 function injectSystem(parsed, opts, prompts = defaultPrompts) {
   const baseText = extractSystem(parsed.system);
   const parts = [];