billion-context 0.1.85 → 0.1.86

package/README.md

@@ -389,6 +389,23 @@ recommended** for many concurrent conversations because of the collision
 risk — until pi grows its own session-id signal. For pi multi-agent use,
 pass an explicit `x-acp-session` header per conversation to avoid collisions.
 
+### Windows: exclude the sessions dir from antivirus (#362)
+
+The proxy persists each session's compression state to the sessions dir
+(`%USERPROFILE%\.local\share\billion-context\` by default) and rewrites the
+file every turn of a long session. On Windows, real-time antivirus (Windows
+Defender), the search indexer, or a sync tool (OneDrive) can lock that
+directory mid-write, so the rename fails with `EPERM` and every persist for
+that session fails until the lock clears.
+
+When the same session fails N consecutive writes (default `5`), the proxy
+logs a one-time, actionable alert naming the directory to exclude. To fix it
+at the root: add `%USERPROFILE%\.local\share\billion-context\` to your
+antivirus **exclusions** (Windows Defender: Settings → Virus & threat
+protection → Manage settings → Exclusions → Add an exclusion → Folder) and
+make sure no sync tool (OneDrive / Dropbox / …) is syncing that path. Full
+steps in [CONFIGURATION.md](CONFIGURATION.md#windows-exclude-the-sessions-dir-from-antivirus-362).
+
 ## Status
 
 Early. Protocol handling and compression work against mock tests (500+ passing). Real-model integration testing is the next milestone. Expect rough edges.

package/README.zh-CN.md

@@ -265,6 +265,12 @@ Windows 下会自动发现常见 Clash/Mihomo 静态系统代理;Web UI 会显
 
 **建议:** Codex 和 OpenCode 可以安全地通过代理并发跑很多会话。pi 单个 agent 没问题,但因碰撞风险**不建议**并发多会话 —— 直到 pi 自己长出 session-id 信号。pi 多 agent 场景下,每个会话发一个显式 `x-acp-session` header 来避免碰撞。
 
+### Windows：把会话目录加入杀软排除项（#362）
+
+代理把每个会话的压缩状态持久化到会话目录（默认 `%USERPROFILE%\.local\share\billion-context\`），长会话每一轮都会重写该文件。在 Windows 上，实时杀毒（Windows Defender）、搜索索引器或同步工具（OneDrive）可能在写入中途锁住该目录，导致 rename 以 `EPERM` 失败，在锁解除前该会话的每次持久化都会失败。
+
+当同一会话连续 N 次写失败（默认 `5`）时，代理会打一条一次性、可操作的告警，明确指出要排除的目录。要从根上修复：把 `%USERPROFILE%\.local\share\billion-context\` 加入杀软**排除项**（Windows Defender：设置 → 病毒和威胁防护 → 管理设置 → 排除项 → 添加排除 → 文件夹），并确认没有同步工具（OneDrive / Dropbox / …）在同步该路径。完整步骤见 [CONFIGURATION.zh-CN.md](CONFIGURATION.zh-CN.md) 的「Windows：把会话目录加入杀软排除项」章节。
+
 ## 状态
 
 早期。协议处理和压缩已通过 mock 测试(500+ 项通过)。真实模型集成测试是下一里程碑。预期会有粗糙的地方。

package/dist/index.js

@@ -47078,7 +47078,7 @@ function caDir() {
 }
 
 // src/logger.ts
-import { createWriteStream, fstatSync, mkdirSync, statSync, renameSync } from "fs";
+import { createWriteStream, fstatSync, mkdirSync, statSync, renameSync, unlinkSync } from "fs";
 import path2 from "path";
 var MAX_BYTES = 10 * 1024 * 1024;
 var stream;
@@ -47094,6 +47094,10 @@ function openStream(file) {
     existingSize = statSync(file).size;
     if (existingSize >= MAX_BYTES) {
       try {
+        try {
+          unlinkSync(file + ".old");
+        } catch {
+        }
         renameSync(file, file + ".old");
         existingSize = 0;
       } catch {
@@ -47738,6 +47742,11 @@ function loadRoutes(env = process.env) {
   }
   return routes;
 }
+function passthroughState(env) {
+  const filePassthrough = loadConfigFile().passthrough === true;
+  if (env.ACP_PASSTHROUGH !== void 0) return { enabled: env.ACP_PASSTHROUGH === "1", source: "env" };
+  return { enabled: filePassthrough, source: filePassthrough ? "file" : null };
+}
 function loadOptions(env = process.env) {
   const fileConfig = loadConfigFile();
   const port = parseInt(env.ACP_PORT ?? env.PORT ?? `${fileConfig.port ?? 8787}`, 10);
@@ -47748,6 +47757,7 @@ function loadOptions(env = process.env) {
   const host = rawHost === "localhost" ? "127.0.0.1" : rawHost;
   const upstream = (env.ACP_UPSTREAM ?? fileConfig.upstream ?? "https://api.anthropic.com").replace(/\/$/, "");
   const routes = loadRoutes(env);
+  const passthrough = passthroughState(env);
   const modelContextLimit = parseInt(env.ACP_MODEL_CONTEXT_LIMIT ?? `${fileConfig.modelContextLimit ?? 2e5}`, 10);
   const biliProxy = nonEmpty(env.BILI_UPSTREAM_PROXY);
   const webProxy = nonEmpty(fileConfig.upstreamProxy);
@@ -47802,7 +47812,8 @@ function loadOptions(env = process.env) {
     log: env.ACP_LOG !== "0" && fileConfig.log !== false,
     debug: (env.ACP_DEBUG ?? (fileConfig.debug ? "1" : "0")) === "1",
     dumpSse: env.ACP_DUMP_SSE || fileConfig.dumpSse || void 0,
-    passthrough: (env.ACP_PASSTHROUGH ?? (fileConfig.passthrough ? "1" : "0")) === "1",
+    passthrough: passthrough.enabled,
+    passthroughSource: passthrough.source,
     autoUpdate: (env.ACP_AUTO_UPDATE ?? (fileConfig.autoUpdate === false ? "0" : "1")) !== "0",
     logFile: env.ACP_LOG_FILE !== void 0 ? env.ACP_LOG_FILE || void 0 : fileConfig.logFile,
     mitm: {
@@ -49475,15 +49486,11 @@ var StateStore = class {
     }
     const file = this.resolvePath(id, payload);
     const data = JSON.stringify(this.envelope(id, payload));
-    try {
-      fs.mkdirSync(path4.dirname(file), { recursive: true });
-    } catch (e) {
-      this.log("warn", `[persist] could not create dir ${path4.dirname(file)}: ${errText(e)}`);
-    }
     let lastErr;
     for (let attempt = 0; attempt < this.retryAttempts; attempt++) {
       const tmp = this.tempPath(file);
       try {
+        fs.mkdirSync(path4.dirname(file), { recursive: true });
         fs.writeFileSync(tmp, data, "utf8");
         fs.renameSync(tmp, file);
         lastErr = void 0;
@@ -49494,9 +49501,7 @@ var StateStore = class {
           fs.unlinkSync(tmp);
         } catch {
         }
-        const code = e.code;
-        if (code !== "EPERM" && code !== "EBUSY" && code !== "EACCES") break;
-        if (attempt === this.retryAttempts - 1) break;
+        if (!isTransientFsError(e) || attempt === this.retryAttempts - 1) break;
         Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, this.backoffMs(attempt));
       }
     }
@@ -49506,14 +49511,19 @@ var StateStore = class {
       this.removeSpillSync(file);
       return true;
     }
+    const spill = this.spillPathFor(file);
     let spillPath = null;
-    try {
-      const spill = this.spillPathFor(file);
-      fs.writeFileSync(spill, data, "utf8");
-      spillPath = spill;
-      this.discovered.set(id, spill);
-    } catch {
+    for (let attempt = 0; attempt < this.retryAttempts && spillPath === null; attempt++) {
+      try {
+        fs.mkdirSync(path4.dirname(spill), { recursive: true });
+        fs.writeFileSync(spill, data, "utf8");
+        spillPath = spill;
+      } catch (e) {
+        if (!isTransientFsError(e) || attempt === this.retryAttempts - 1) break;
+        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, this.backoffMs(attempt));
+      }
     }
+    if (spillPath) this.discovered.set(id, spillPath);
     this.recordFailure(id, lastErr, spillPath);
     return spillPath !== null;
   }
@@ -49617,33 +49627,45 @@ var StateStore = class {
       throw e;
     }
     const file = this.resolvePath(id, payload);
-    try {
-      await fsp.mkdir(path4.dirname(file), { recursive: true });
-    } catch (e) {
-      this.log("warn", `[persist] could not create dir ${path4.dirname(file)}: ${errText(e)}`);
+    const data = JSON.stringify(this.envelope(id, payload));
+    let lastErr;
+    for (let attempt = 0; attempt < this.retryAttempts; attempt++) {
+      const tmp = this.tempPath(file);
+      try {
+        await fsp.mkdir(path4.dirname(file), { recursive: true });
+        await fsp.writeFile(tmp, data, "utf8");
+        await fsp.rename(tmp, file);
+        this.discovered.set(id, file);
+        this.clearFailure(id);
+        await this.removeSpill(file);
+        return;
+      } catch (e) {
+        lastErr = e;
+        await fsp.unlink(tmp).catch(() => {
+        });
+        if (!isTransientFsError(e) || attempt === this.retryAttempts - 1) break;
+        const { promise, resolve } = Promise.withResolvers();
+        setTimeout(resolve, this.backoffMs(attempt));
+        await promise;
+      }
     }
-    const tmp = this.tempPath(file);
-    const env = this.envelope(id, payload);
-    try {
-      await fsp.writeFile(tmp, JSON.stringify(env), "utf8");
-      await this.renameWithRetry(tmp, file);
-      this.discovered.set(id, file);
-      this.clearFailure(id);
-      await this.removeSpill(file);
-    } catch (e) {
-      await fsp.unlink(tmp).catch(() => {
-      });
-      let spillPath = null;
+    const spill = this.spillPathFor(file);
+    let spillPath = null;
+    for (let attempt = 0; attempt < this.retryAttempts && spillPath === null; attempt++) {
       try {
-        const spill = this.spillPathFor(file);
-        await fsp.writeFile(spill, JSON.stringify(env), "utf8");
+        await fsp.mkdir(path4.dirname(spill), { recursive: true });
+        await fsp.writeFile(spill, data, "utf8");
         spillPath = spill;
-        this.discovered.set(id, spill);
-      } catch {
+      } catch (e) {
+        if (!isTransientFsError(e) || attempt === this.retryAttempts - 1) break;
+        const { promise, resolve } = Promise.withResolvers();
+        setTimeout(resolve, this.backoffMs(attempt));
+        await promise;
       }
-      this.recordFailure(id, e, spillPath);
-      throw e;
     }
+    if (spillPath) this.discovered.set(id, spillPath);
+    this.recordFailure(id, lastErr, spillPath);
+    throw lastErr;
   }
   envelope(id, payload) {
     return { version: this.version, savedAt: Date.now(), id, payload };
@@ -49709,27 +49731,6 @@ var StateStore = class {
   clearFailure(id) {
     this.failCounts.delete(id);
   }
-  /** fs.rename with exponential-backoff retries on Windows transient locks
-   *  (EPERM/EBUSY/EACCES from AV scan, search indexer, SMB). Other errors
-   *  are real and rethrown immediately. */
-  async renameWithRetry(src, dest) {
-    let lastErr;
-    for (let attempt = 0; attempt < this.retryAttempts; attempt++) {
-      try {
-        await fsp.rename(src, dest);
-        return;
-      } catch (e) {
-        lastErr = e;
-        const code = e.code;
-        if (code !== "EPERM" && code !== "EBUSY" && code !== "EACCES") throw e;
-        if (attempt === this.retryAttempts - 1) throw e;
-        const { promise, resolve } = Promise.withResolvers();
-        setTimeout(resolve, this.backoffMs(attempt));
-        await promise;
-      }
-    }
-    throw lastErr;
-  }
   /** Parse + validate one file. Corrupt or invalid records return null
    *  (logged) instead of throwing — load paths must never block boot. */
   readEnvelope(file) {
@@ -49805,6 +49806,10 @@ function isEnvelopeLike(value) {
 function flatFileNameFor(id) {
   return createHash2("sha256").update(id, "utf8").digest("hex").slice(0, 24) + ".json";
 }
+function isTransientFsError(e) {
+  const code = e.code;
+  return code === "EPERM" || code === "EBUSY" || code === "EACCES" || code === "ENOENT" || code === "ENOTDIR";
+}
 function errText(e) {
   return e instanceof Error ? e.message : String(e);
 }
@@ -49813,6 +49818,57 @@ function rel(p2, base) {
   return r && !r.startsWith("..") ? r : p2;
 }
 
+// src/persist-eperm.ts
+var LOCK_CODES = /\b(EPERM|EBUSY|EACCES)\b/;
+var WRITE_FAIL_RE = /^\[persist\] write failed for (.+?) \(total (\d+)x\): (.+)$/;
+var PersistEpermAlert = class {
+  dir;
+  threshold;
+  repeatMs;
+  platform;
+  now;
+  onAlert;
+  hasAlerted = false;
+  alertedAt = 0;
+  constructor(opts) {
+    this.dir = opts.dir;
+    this.threshold = opts.threshold ?? 5;
+    this.repeatMs = opts.repeatMs ?? 0;
+    this.platform = opts.platform ?? process.platform;
+    this.now = opts.now ?? Date.now;
+    this.onAlert = opts.onAlert ?? ((d, c) => log("warn", buildAlertMessage(d, c)));
+  }
+  // Returns true iff an alert was emitted. Runs on every kernel log line, so
+  // the non-matching cases bail before any allocation.
+  observe(level, msg) {
+    if (this.platform !== "win32") return false;
+    if (level !== "error" && level !== "warn") return false;
+    const m2 = WRITE_FAIL_RE.exec(msg);
+    if (!m2) return false;
+    const count = Number(m2[2]);
+    if (count < this.threshold) return false;
+    if (!LOCK_CODES.test(m2[3])) return false;
+    if (!this.shouldAlert()) return false;
+    this.hasAlerted = true;
+    this.alertedAt = this.now();
+    this.onAlert(this.dir, count);
+    return true;
+  }
+  shouldAlert() {
+    if (!this.hasAlerted) return true;
+    if (this.repeatMs <= 0) return false;
+    return this.now() - this.alertedAt >= this.repeatMs;
+  }
+};
+function buildAlertMessage(dir, count) {
+  return [
+    `[persist] session dir ${dir} failed ${count} consecutive writes (EPERM \u2014 rename is locked).`,
+    "Likely cause: Windows Defender / antivirus / indexer / a sync tool is locking the directory.",
+    `Fix: add ${dir} to Windows Defender exclusions (Settings \u2192 Virus & threat protection \u2192 Manage settings \u2192 Exclusions \u2192 Add an exclusion),`,
+    "and make sure no OneDrive / sync tool is syncing this path."
+  ].join("\n");
+}
+
 // src/persist.ts
 var PERSIST_VERSION = 3;
 var MIGRATION_MARKER = ".bili-migration-286.done";
@@ -49850,12 +49906,21 @@ var SessionStore = class {
     const debounceMs = opts?.debounceMs ?? defaultDebounce();
     this.enabled = (opts?.enabled ?? true) && debounceMs >= 0;
     this.dir = opts?.dir ?? defaultDir();
+    const baseLog = opts?.log ?? defaultLogger;
+    const epermAlert = new PersistEpermAlert({
+      dir: this.dir,
+      threshold: epermAlertThreshold(),
+      repeatMs: epermAlertRepeatMs()
+    });
     this.store = new StateStore({
       dir: this.dir,
       version: PERSIST_VERSION,
       debounceMs: Math.max(0, debounceMs),
       enabled: this.enabled,
-      log: opts?.log ?? defaultLogger,
+      log: (level, msg) => {
+        epermAlert.observe(level, msg);
+        baseLog(level, msg);
+      },
       relPath: (id, payload) => relPathFor(id, payload.meta?.protocol ?? payload.protocol, payload.meta?.upstreamOrigin ?? payload.upstreamOrigin),
       // Adopt the pre-envelope flat format this store itself wrote
       // before the kernel extraction (and every v1/v2 file before it).
@@ -50123,6 +50188,22 @@ function persistEnabled() {
   if (env === "0" || env === "false") return false;
   return true;
 }
+function epermAlertThreshold() {
+  const env = process.env.BILI_PERSIST_EPERM_ALERT_THRESHOLD;
+  if (env) {
+    const n = Number.parseInt(env, 10);
+    if (Number.isFinite(n) && n > 0) return n;
+  }
+  return 5;
+}
+function epermAlertRepeatMs() {
+  const env = process.env.BILI_PERSIST_EPERM_ALERT_REPEAT_MS;
+  if (env) {
+    const n = Number.parseInt(env, 10);
+    if (Number.isFinite(n) && n >= 0) return n;
+  }
+  return 0;
+}
 function defaultLogger(level, m2) {
   log(level, m2);
 }
@@ -50353,7 +50434,7 @@ function withStagedCompressGuidance(text) {
 }
 
 // src/decompress-shared.ts
-import { mkdirSync as mkdirSync4, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { mkdirSync as mkdirSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname2, join as join2 } from "path";
 import { tmpdir } from "os";
 var trackedTempFiles = [];
@@ -50369,7 +50450,7 @@ function reapTempFiles() {
     const oldest = trackedTempFiles.shift();
     if (!oldest) break;
     try {
-      unlinkSync(oldest.path);
+      unlinkSync2(oldest.path);
     } catch {
     }
   }
@@ -50377,7 +50458,7 @@ function reapTempFiles() {
 process.on("beforeExit", () => {
   for (const f2 of trackedTempFiles) {
     try {
-      unlinkSync(f2.path);
+      unlinkSync2(f2.path);
     } catch {
     }
   }
@@ -51262,7 +51343,7 @@ function busy(button,on,label){if(!button)return;if(on){button.dataset.label=but
 async function json(url,options){const response=await fetch(url,options);const data=await response.json().catch(()=>({}));if(!response.ok)throw new Error(data.error||data.detail||("HTTP "+response.status));return data}
 function showPage(name){document.querySelectorAll(".page").forEach((node)=>node.classList.toggle("active",node.id==="page-"+name));document.querySelectorAll(".nav button").forEach((node)=>node.classList.toggle("active",node.dataset.page===name));if(name==="sessions")loadSessions();if(name==="upstream"){loadUpstream();loadOverrides()}}
 document.querySelectorAll(".nav button").forEach((button)=>button.addEventListener("click",()=>showPage(button.dataset.page)));
-async function loadConfig(){const data=await json("/__bili/config");if(data.parseError)toast(String(data.parseError),true);byId("providers-json").value=JSON.stringify(data.providers||{},null,2);byId("proxy-url").value=data.upstreamProxy||"";byId("compress-json").value=data.compress?JSON.stringify(data.compress,null,2):"";document.querySelectorAll('input[name="proxy-mode"]').forEach((input)=>input.checked=input.value===(data.upstreamProxyMode||"direct"));return data}
+async function loadConfig(){const data=await json("/__bili/config");if(data.parseError)toast(String(data.parseError),true);byId("providers-json").value=JSON.stringify(data.providers||{},null,2);byId("proxy-url").value=data.upstreamProxy||"";byId("compress-json").value=data.compress?JSON.stringify(data.compress,null,2):"";document.querySelectorAll('input[name="proxy-mode"]').forEach((input)=>input.checked=input.value===(data.upstreamProxyMode||"direct"));const pt=data.passthrough||{enabled:false};const banner=byId("passthrough-banner");if(banner){if(pt.enabled){banner.hidden=false;byId("passthrough-source").textContent=pt.source==="env"?"\u73AF\u5883\u53D8\u91CF ACP_PASSTHROUGH\uFF08\u6216 --passthrough \u53C2\u6570\uFF09":"\u914D\u7F6E\u6587\u4EF6 passthrough: true";const btn=byId("clear-passthrough");btn.disabled=pt.source==="env";btn.title=pt.source==="env"?"\u9700\u5148 unset ACP_PASSTHROUGH \u5E76\u91CD\u542F":""}else{banner.hidden=true}}return data}
 async function loadUpstream(){try{const data=await json("/__bili/upstream");const labels={"provider":"Provider \u5355\u72EC\u4EE3\u7406","provider-direct":"Provider \u76F4\u8FDE","bili-env":"BILI_UPSTREAM_PROXY","web-manual":"Web \u624B\u52A8\u4EE3\u7406","config":"\u914D\u7F6E\u6587\u4EF6\u4EE3\u7406","HTTPS_PROXY":"HTTPS_PROXY","HTTP_PROXY":"HTTP_PROXY","ALL_PROXY":"ALL_PROXY","windows-system":"Windows \u7CFB\u7EDF\u4EE3\u7406","windows-bypass":"Windows \u7ED5\u8FC7\u5217\u8868","no-proxy":"NO_PROXY","direct":"\u76F4\u8FDE"};byId("upstream-source").textContent=labels[data.source]||data.source||"\u76F4\u8FDE";byId("upstream-effective").textContent=data.proxy||"direct";byId("upstream-pac").textContent=data.autoConfigUrl||"\u2014";const state=byId("upstream-state");state.className="status "+(data.connected===true?"ok":data.connected===false?"err":"");state.textContent=data.connected===true?"CONNECT \u6B63\u5E38":data.connected===false?(data.error||"\u8FDE\u63A5\u5931\u8D25"):"\u5C1A\u672A\u89C2\u5BDF\u5230\u4E0A\u6E38\u8FDE\u63A5"}catch(error){byId("upstream-state").textContent=String(error)}}
 async function saveUpstream(){const button=byId("save-upstream");busy(button,true,"\u4FDD\u5B58\u4E2D\u2026");const mode=document.querySelector('input[name="proxy-mode"]:checked').value;try{await json("/__bili/config",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify({upstreamProxyMode:mode,upstreamProxy:byId("proxy-url").value.trim()||null})});toast("\u4E0A\u6E38\u8BBE\u7F6E\u5DF2\u70ED\u66F4\u65B0");await loadUpstream()}catch(error){toast(String(error),true)}finally{busy(button,false)}}
 async function testUpstream(){const button=byId("test-upstream");busy(button,true,"\u6D4B\u8BD5\u4E2D\u2026");try{const data=await json("/__bili/upstream/test",{method:"POST"});toast("\u8FDE\u63A5\u6210\u529F\uFF0CHTTP "+data.status);await loadUpstream()}catch(error){toast(String(error),true);await loadUpstream()}finally{busy(button,false)}}
@@ -51272,7 +51353,9 @@ async function loadOverrides(){try{const data=await loadConfig();const providers
 async function saveOverrides(){const button=byId("save-overrides");busy(button,true,"\u4FDD\u5B58\u4E2D\u2026");try{const data=await loadConfig();const providers=data.providers||{};document.querySelectorAll(".override-proxy").forEach((input)=>{const url=input.dataset.url;if(!url)return;if(!providers[url])providers[url]={};const val=input.value.trim();if(val)providers[url].proxy=val;else delete providers[url].proxy});await json("/__bili/config",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify({providers})});await json("/__bili/config/reload",{method:"POST"});toast("\u6309 URL \u8986\u76D6\u5DF2\u70ED\u66F4\u65B0");await loadOverrides()}catch(error){toast(String(error),true)}finally{busy(button,false)}}
 async function loadSessions(){try{const data=await json("/__bili/stats");const rows=(data.sessions||[]).map((item)=>"<tr><td>"+escapeHtml(item.title||"\u2014")+"</td><td>"+escapeHtml(item.protocol||"\u2014")+"</td><td class=mono>"+escapeHtml(item.label||"\u2014")+"</td><td>"+escapeHtml(item.requests)+"</td><td>"+escapeHtml(item.contextTokens)+"</td><td>"+escapeHtml(new Date(item.lastSeen).toLocaleString())+(item.restored?" <span class=muted>(\u6062\u590D\uFF0C\u5F00\u673A\u540E\u672A\u6D3B\u52A8)</span>":"")+"</td></tr>").join("");byId("sessions-body").innerHTML=rows||'<tr><td colspan="6">\u6682\u65E0\u4F1A\u8BDD</td></tr>'}catch(error){toast(String(error),true);throw error}}
 async function refreshSessions(){const button=byId("refresh-sessions");busy(button,true,"\u5237\u65B0\u4E2D\u2026");try{await loadSessions();toast("\u4F1A\u8BDD\u5217\u8868\u5DF2\u5237\u65B0")}catch{}finally{busy(button,false)}}
-document.querySelectorAll(".copy-btn").forEach((btn)=>btn.addEventListener("click",async()=>{busy(btn,true,"\u590D\u5236\u4E2D\u2026");try{await navigator.clipboard.writeText(btn.dataset.copy||"");toast("\u5DF2\u590D\u5236")}catch(e){toast(String(e),true)}finally{busy(btn,false)}}));byId("save-upstream").addEventListener("click",saveUpstream);byId("test-upstream").addEventListener("click",testUpstream);byId("save-providers").addEventListener("click",saveProviders);byId("save-compress").addEventListener("click",saveCompress);byId("save-overrides").addEventListener("click",saveOverrides);byId("refresh-sessions").addEventListener("click",refreshSessions);
+document.querySelectorAll(".copy-btn").forEach((btn)=>btn.addEventListener("click",async()=>{busy(btn,true,"\u590D\u5236\u4E2D\u2026");try{await navigator.clipboard.writeText(btn.dataset.copy||"");toast("\u5DF2\u590D\u5236")}catch(e){toast(String(e),true)}finally{busy(btn,false)}}));async function clearPassthrough(){const button=byId("clear-passthrough");busy(button,true,"\u5904\u7406\u4E2D\u2026");try{await json("/__bili/config",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify({passthrough:null})});toast("\u5DF2\u6062\u590D\u538B\u7F29");await loadConfig()}catch(error){toast(String(error),true)}finally{busy(button,false)}}
+byId("clear-passthrough").addEventListener("click",clearPassthrough);
+byId("save-upstream").addEventListener("click",saveUpstream);byId("test-upstream").addEventListener("click",testUpstream);byId("save-providers").addEventListener("click",saveProviders);byId("save-compress").addEventListener("click",saveCompress);byId("save-overrides").addEventListener("click",saveOverrides);byId("refresh-sessions").addEventListener("click",refreshSessions);
 Promise.all([loadConfig(),loadUpstream()]).catch((error)=>toast(String(error),true));setInterval(()=>{if(byId("page-sessions").classList.contains("active"))loadSessions().catch(()=>{})},5000);
 `;
 
@@ -51294,7 +51377,7 @@ function renderPage(origin, version2) {
   const caReady = existsSync4(caPath);
   return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>billion-context</title><style>${WEB_STYLES}</style></head><body>
 <div class="app"><aside class="sidebar"><div class="brand"><div class="brand-title">billion<span>-context</span></div><div class="version">v${version2}</div></div><a class="fork-ribbon" href="https://github.com/ranxianglei/billion-context" target="_blank" rel="noopener">\u2605 Fork me on GitHub</a><nav class="nav"><button class="active" data-page="overview">\u6982\u89C8</button><button data-page="routing">\u63A5\u5165</button><button data-page="upstream">\u4E0A\u6E38</button><button data-page="sessions">\u4F1A\u8BDD</button><button data-page="settings">\u8BBE\u7F6E</button></nav></aside>
-<main class="main"><section id="page-overview" class="page active"><h1>\u6982\u89C8</h1><p class="lead">\u672C\u5730\u8DEF\u7531\u4E0E\u4E0A\u6E38\u7F51\u7EDC\u76F8\u4E92\u72EC\u7ACB\uFF0CACP \u538B\u7F29\u8FD0\u884C\u5728\u4E24\u8005\u4E4B\u95F4\u3002</p><div class="grid"><div class="card"><h2>\u670D\u52A1\u5730\u5740</h2><p class="mono">${origin}</p></div><div class="card"><h2>\u5BA2\u6237\u7AEF\u63A5\u5165</h2><p class="status">\u5728"\u63A5\u5165"\u9875\u5C06\u5404\u5BA2\u6237\u7AEF\uFF08Codex / Claude Code / OpenCode / Pi \u7B49\uFF09\u7684\u6D41\u91CF\u8DEF\u7531\u5230 bili\u3002</p></div></div></section>
+<main class="main"><section id="page-overview" class="page active"><h1>\u6982\u89C8</h1><p class="lead">\u672C\u5730\u8DEF\u7531\u4E0E\u4E0A\u6E38\u7F51\u7EDC\u76F8\u4E92\u72EC\u7ACB\uFF0CACP \u538B\u7F29\u8FD0\u884C\u5728\u4E24\u8005\u4E4B\u95F4\u3002</p><div id="passthrough-banner" class="notice" hidden>\u26A0\uFE0F <strong>Passthrough \u5DF2\u542F\u7528</strong>\uFF1A\u6240\u6709\u8BF7\u6C42\u539F\u6837\u8F6C\u53D1\uFF0C\u538B\u7F29\u5B8C\u5168\u5173\u95ED\uFF0C\u4E0D\u4F1A\u8282\u7701\u4EFB\u4F55 token\u3002\u6765\u6E90\uFF1A<span id="passthrough-source" class="mono"></span>\u3002 <button id="clear-passthrough" class="btn">\u6062\u590D\u538B\u7F29</button></div><div class="grid"><div class="card"><h2>\u670D\u52A1\u5730\u5740</h2><p class="mono">${origin}</p></div><div class="card"><h2>\u5BA2\u6237\u7AEF\u63A5\u5165</h2><p class="status">\u5728"\u63A5\u5165"\u9875\u5C06\u5404\u5BA2\u6237\u7AEF\uFF08Codex / Claude Code / OpenCode / Pi \u7B49\uFF09\u7684\u6D41\u91CF\u8DEF\u7531\u5230 bili\u3002</p></div></div></section>
 <section id="page-routing" class="page"><h1>\u5BA2\u6237\u7AEF\u63A5\u5165</h1><p class="lead">\u4E24\u7C7B\u63A5\u5165\uFF1AA. \u63A8\u8350\u63A5\u5165\u65B9\u5F0F\uFF08<span class="mono">/bili/</span> \u524D\u7F00\uFF0C\u96F6\u914D\u7F6E\uFF09\uFF1BB. \u8BC1\u4E66\u63A5\u5165\u65B9\u5F0F\uFF08MITM\uFF0C\u9700\u4FE1\u4EFB CA \u8BC1\u4E66\uFF09\u3002</p>
 <h2 class="section-title">A. \u63A8\u8350\u63A5\u5165\u65B9\u5F0F\uFF08/bili/ \u524D\u7F00\uFF09</h2>
 <p class="hint">\u5728\u5BA2\u6237\u7AEF\u914D\u7F6E\u91CC\u628A\u539F baseURL \u524D\u52A0\u4E0A <span class="mono">${origin}/bili/</span> \u5373\u53EF\uFF0C\u5176\u4F59\u4E0D\u53D8\u3002</p>
@@ -51313,7 +51396,7 @@ function renderPage(origin, version2) {
 }
 
 // src/web/api.ts
-import { closeSync, existsSync as existsSync5, fsyncSync, mkdirSync as mkdirSync5, openSync, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "fs";
+import { closeSync, existsSync as existsSync5, fsyncSync, mkdirSync as mkdirSync5, openSync, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "fs";
 import { dirname as dirname3 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 function readConfig() {
@@ -51352,7 +51435,7 @@ function atomicWriteConfig(config) {
   } catch (error) {
     if (descriptor !== void 0) closeSync(descriptor);
     try {
-      unlinkSync2(tempPath);
+      unlinkSync3(tempPath);
     } catch {
     }
     throw error;
@@ -51370,6 +51453,7 @@ async function handleConfigGet(res) {
     upstreamProxy: upstream.proxy ?? null,
     upstreamProxyMode: upstream.mode,
     compress: config.compress ?? null,
+    passthrough: passthroughState(process.env),
     ...parseError ? { parseError } : {}
   }, null, 2));
 }
@@ -51383,7 +51467,8 @@ async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
   const hasProxy = Object.prototype.hasOwnProperty.call(body, "upstreamProxy");
   const hasMode = Object.prototype.hasOwnProperty.call(body, "upstreamProxyMode");
   const hasCompress = Object.prototype.hasOwnProperty.call(body, "compress");
-  if (!hasProviders && !hasProxy && !hasMode && !hasCompress) return sendError(res, 400, "expected providers, upstream proxy, or compress settings");
+  const hasPassthrough = Object.prototype.hasOwnProperty.call(body, "passthrough");
+  if (!hasProviders && !hasProxy && !hasMode && !hasCompress && !hasPassthrough) return sendError(res, 400, "expected providers, upstream proxy, compress, or passthrough settings");
   const routes = {};
   if (hasProviders) {
     if (!body.providers || typeof body.providers !== "object" || Array.isArray(body.providers)) {
@@ -51427,6 +51512,14 @@ async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
     compress = body.compress === null ? {} : parseCompressSettings(body.compress);
     if (compress === void 0) return sendError(res, 400, "invalid compress settings");
   }
+  if (hasPassthrough) {
+    if (body.passthrough !== null && typeof body.passthrough !== "boolean") {
+      return sendError(res, 400, "passthrough must be a boolean or null");
+    }
+    if (passthroughState(process.env).source === "env") {
+      return sendError(res, 409, "passthrough is forced by the ACP_PASSTHROUGH environment variable (or --passthrough flag); unset it and restart to change here");
+    }
+  }
   const config = readConfig();
   if (hasProviders) config.providers = routes;
   if (hasProxy) {
@@ -51438,6 +51531,10 @@ async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
     if (compress && Object.keys(compress).length > 0) config.compress = compress;
     else delete config.compress;
   }
+  if (hasPassthrough) {
+    if (body.passthrough === true) config.passthrough = true;
+    else delete config.passthrough;
+  }
   try {
     atomicWriteConfig(config);
     onChanged?.();
@@ -51448,6 +51545,7 @@ async function handleConfigPut(req, res, onChanged, biliPort = 8787) {
   if (hasProviders) changed.push(`${Object.keys(routes).length} routes`);
   if (hasProxy || hasMode) changed.push("network");
   if (hasCompress) changed.push("compress");
+  if (hasPassthrough) changed.push("passthrough");
   log("info", `[acp-web] configuration updated (${changed.join(", ") || "none"})`);
   res.writeHead(200, { "content-type": "application/json" });
   res.end(JSON.stringify({ ok: true, providers: hasProviders ? Object.keys(routes).length : void 0 }));
@@ -57119,8 +57217,23 @@ Content-Length: ${Buffer.byteLength(body)}\r
     const nOverrides = Object.keys(opts.routes).length;
     log2(
       "info",
-      `acp-proxy listening on http://${displayHost}:${actualPort} \u2014 web UI: http://${displayHost}:${actualPort}/__bili/ \u2014 zero-config: prefix any baseURL with http://${displayHost}:${actualPort}/bili/` + (nOverrides ? ` \u2014 context overrides for ${nOverrides} upstream URL(s)` : "") + (opts.mitm.enabled ? ` \u2014 MITM proxy on (whitelist)${opts.mitm.domains.length ? ` +${opts.mitm.domains.join(",")}` : ""}` : "")
+      `acp-proxy listening on http://${displayHost}:${actualPort} \u2014 web UI: http://${displayHost}:${actualPort}/__bili/ \u2014 zero-config: prefix any baseURL with http://${displayHost}:${actualPort}/bili/` + (nOverrides ? ` \u2014 context overrides for ${nOverrides} upstream URL(s)` : "") + (opts.mitm.enabled ? ` \u2014 MITM proxy on (whitelist)${opts.mitm.domains.length ? ` +${opts.mitm.domains.join(",")}` : ""}` : "") + (opts.passthrough ? " \u2014 PASSTHROUGH (compression OFF)" : "")
     );
+    if (opts.passthrough) {
+      log2(
+        "warn",
+        `[passthrough] compression is OFF \u2014 every request is forwarded verbatim, no tokens are saved (source: ${opts.passthroughSource === "env" ? "ACP_PASSTHROUGH env var or --passthrough flag" : `config file ${configFile()}`}). ` + (opts.passthroughSource === "env" ? "Unset ACP_PASSTHROUGH (or drop --passthrough) and restart to re-enable compression." : 'Clear it in the web UI (\u6982\u89C8 page) or remove "passthrough": true from the config file to re-enable compression.')
+      );
+    }
+    const envKnobs = [];
+    if (process.env.ACP_PASSTHROUGH !== void 0) envKnobs.push(`ACP_PASSTHROUGH=${process.env.ACP_PASSTHROUGH}`);
+    if (process.env.ACP_MODEL_CONTEXT_LIMIT !== void 0) envKnobs.push(`ACP_MODEL_CONTEXT_LIMIT=${process.env.ACP_MODEL_CONTEXT_LIMIT}`);
+    if (process.env.ACP_COMPRESS_TOOL !== void 0) envKnobs.push(`ACP_COMPRESS_TOOL=${process.env.ACP_COMPRESS_TOOL}`);
+    if (process.env.ACP_COMPRESS_NUDGE !== void 0) envKnobs.push(`ACP_COMPRESS_NUDGE=${process.env.ACP_COMPRESS_NUDGE}`);
+    if (process.env.BILI_PERSIST !== void 0) envKnobs.push(`BILI_PERSIST=${process.env.BILI_PERSIST}`);
+    if (envKnobs.length > 0) {
+      log2("info", `[config] env overrides active (win over the config file): ${envKnobs.join(", ")}`);
+    }
     if (nonLoopbackBind) {
       log2(
         "warn",
@@ -57200,9 +57313,34 @@ var SIDE_REQUEST_MAX_TOKENS = 200;
 function isSideRequest(parsed) {
   if (!parsed || typeof parsed !== "object") return false;
   const p2 = parsed;
+  if (Array.isArray(p2.tools) && p2.tools.length > 0) return false;
   const raw = p2.max_tokens ?? p2.max_completion_tokens ?? p2.max_output_tokens;
   return typeof raw === "number" && raw > 0 && raw <= SIDE_REQUEST_MAX_TOKENS;
 }
+function outputBudgetField(parsed) {
+  if (!parsed || typeof parsed !== "object") return null;
+  const p2 = parsed;
+  for (const field of ["max_tokens", "max_completion_tokens", "max_output_tokens"]) {
+    if (typeof p2[field] === "number" && p2[field] > 0) return field;
+  }
+  return null;
+}
+function restoreOutputBudget(parsed, session, log2) {
+  const field = outputBudgetField(parsed);
+  if (!field) return;
+  const p2 = parsed;
+  const value = p2[field];
+  if (value > SIDE_REQUEST_MAX_TOKENS) {
+    session.metadata.outputBudgetHighWater = value;
+    return;
+  }
+  if (!Array.isArray(p2.tools) || p2.tools.length === 0) return;
+  const highWater = session.metadata.outputBudgetHighWater;
+  if (typeof highWater === "number" && highWater > SIDE_REQUEST_MAX_TOKENS) {
+    p2[field] = highWater;
+    log2("info", `[${session.id}] output budget restored ${value} -> ${highWater} (#546: client shrank it from its raw-history estimate)`);
+  }
+}
 function isTrustedAdminOrigin(origin, host, trustedHosts) {
   if (!host || !trustedHosts.has(host.toLowerCase())) return false;
   if (!origin) return true;
@@ -57271,6 +57409,14 @@ async function handle(req, res, opts, core, config, log2, instanceId, instanceSt
   if (req.method === "PUT" && req.url === "/__bili/config") {
     return handleConfigPut(req, res, () => {
       const fresh = loadOptions();
+      if (fresh.passthrough !== opts.passthrough) {
+        log2(
+          fresh.passthrough ? "warn" : "info",
+          `[passthrough] ${fresh.passthrough ? "compression turned OFF via web config \u2014 forwarding verbatim" : "compression re-enabled via web config"}`
+        );
+      }
+      opts.passthrough = fresh.passthrough;
+      opts.passthroughSource = fresh.passthroughSource;
       opts.proxy = fresh.proxy;
       opts.proxyMode = fresh.proxyMode;
       opts.proxySource = fresh.proxySource;
@@ -57593,6 +57739,7 @@ ${bodyBuffer.toString("utf8")}`);
       }
     }
     const pluginMode = pluginAgent !== void 0;
+    restoreOutputBudget(parsed, session, log2);
     if (!countTokens && !responsesCompact && protocol !== null && isSideRequest(parsed)) {
       log2("info", `[${session.id}] side request (max_tokens<=${SIDE_REQUEST_MAX_TOKENS}) \u2192 passthrough + tag strip only, kernel state untouched`);
       const sidePrepared = {