agent-purge 0.1.0 → 0.2.1

package/README.md

@@ -28,6 +28,14 @@ npm i -g agent-purge     # 或 npx agent-purge web
 
 要求 Node ≥ 20，零依赖。
 
+**数据独立存放**，升级不会被覆盖：默认 `~/.agent-purge/`（Windows `C:\Users\<你>\.agent-purge\`），里面是 `state.json` 和 `personas/`。想换位置就设环境变量：
+
+```bash
+export AGENT_PURGE_HOME=/path/to/your/data     # Windows: setx AGENT_PURGE_HOME D:\ap-data
+```
+
+旧版本（0.1.x）把数据放在包目录里，首次运行会自动搬到新家，原文件不动。
+
 ## 人设
 
 `personas/<id>.md` = frontmatter（`id` / `name` / `description` / `harness` / `model`）+ 正文。正文就是会被写进系统提示词的那一段。

package/bin/agent-purge.mjs

@@ -14,9 +14,12 @@ import { resolveBin, spawnBin } from "../lib/spawn.mjs";
 import { installCrashHandlers, recover } from "../lib/restore.mjs";
 import { capsFor } from "../lib/caps.mjs";
 import { MODES, armedOf, loadState, patchState, setArmed, setDefault } from "../lib/state.mjs";
+import { ensureDataHome } from "../lib/home.mjs";
 
 // bun --compile 产物：资源目录 = exe 所在目录；普通 node：包根
 const ROOT = process.versions.bun ? dirname(process.execPath) : dirname(dirname(fileURLToPath(import.meta.url)));
+// 数据（state.json + personas/）放用户目录，npm 升级不会连人设一起清掉
+const DATA = ensureDataHome(ROOT).home;
 const matrix = JSON.parse(readFileSync(join(ROOT, "matrix.json"), "utf8"));
 
 const argv = process.argv.slice(2);
@@ -82,7 +85,7 @@ switch (cmd) {
 
 /** 无参：state.default 说跑谁就跑谁；没有默认就跑到 Web 去选 */
 async function defaultHarness() {
-	const { state } = loadState(ROOT);
+	const { state } = loadState(DATA);
 	const harness = state.default?.harness;
 	if (!harness) {
 		console.log("还没有默认 harness。两种办法：\n  agent-purge web           在浏览器里选，再点“设为默认执行器”\n  agent-purge <harness>     直接点名跑（如 agent-purge codex）");
@@ -97,7 +100,7 @@ async function launch(name) {
 	if (!spec) die(`未知 harness: ${name}（可用: ${Object.keys(matrix.harnesses).join(", ")}；子命令见 --help）`);
 	if (spec.class === "unsupported") die(`${name} 做不到：${spec.reason}`);
 
-	const { state } = loadState(ROOT);
+	const { state } = loadState(DATA);
 	// 由 state.json 决定注入方式；显式 --mode 永远压过它
 	const explicitMode = flag("--mode", null);
 	if (explicitMode !== null && !MODES.includes(explicitMode)) die(`--mode 只能是 ${MODES.join(" / ")}`);
@@ -108,14 +111,26 @@ async function launch(name) {
 	if (autoFlag !== null) {
 		if (autoFlag !== "on" && autoFlag !== "off") die("--auto 只能是 on / off");
 		const { setPiAuto } = await import("../lib/state.mjs");
-		setPiAuto(ROOT, autoFlag === "on");
+		setPiAuto(DATA, autoFlag === "on");
 		console.log(`[auto] 裸敲 pi ${autoFlag === "on" ? "会" : "不会"}自动注入（已写入 state.json）`);
 	}
 
+	// pi 的人设落在哪一层：sys（默认，真系统提示词）或 user（塞进用户消息，给忽略 system 的模型）
+	const layerFlag = name === "pi" ? flag("--layer", null) : null;
+	if (layerFlag !== null) {
+		if (layerFlag !== "sys" && layerFlag !== "user") die("--layer 只能是 sys / user");
+		const { setPiUserLayer } = await import("../lib/state.mjs");
+		setPiUserLayer(DATA, layerFlag === "user");
+		console.log(
+			layerFlag === "user"
+				? "[layer] 人设额外塞进用户消息（给忽略 system 的模型用；代价是每条消息多一段）"
+				: "[layer] 人设走 system 层（默认）",
+		);
+	}
+
 	// 实测策略：该 harness 的哪一层真的能注入（数据来自 matrix.json armor 段）
 	const { plan } = await import("../lib/armor.mjs");
-	const strategy = plan(matrix, name);
-	if (!strategy.error) {
+	const strategy = plan(matrix, name);	if (!strategy.error) {
 		if (strategy.requiresSeed) console.log(`[策略] ${name}：裸注入 sys 层实测 ${strategy.bare.sys}%，带人设词种子 ${strategy.persona.sys}% —— 需要 seed 层`);
 		const noSys = strategy.blocked.find((b) => b.layer === "sys");
 		if (noSys && mode !== "off") console.log(`[策略] ${name}：sys 层不可用（${noSys.reason}），本次只能靠 user 层`);
@@ -131,7 +146,7 @@ async function launch(name) {
 	}
 
 	const { createStore } = await import("../lib/personas.mjs");
-	const store = createStore(ROOT);
+	const store = createStore(DATA);
 	const personaName = flag("--persona", "active");
 	let pickedName = personaName === "active" ? store.activeId() : personaName;
 	let picked = store.read(pickedName);
@@ -216,7 +231,7 @@ async function launch(name) {
 			// 不装、不喊注入：扩展就算在盘上，也会因为 mode=off + 没 FORCE 而沉默
 			built.env = { ...built.env, AGENT_PURGE_MODE: "off" };
 		} else {
-			installSlash("pi", ROOT, { personaId: picked.id, personaBody: personaText });
+			installSlash("pi", DATA, { personaId: picked.id, personaBody: personaText });
 			built.env = { ...built.env, AGENT_PURGE_PERSONA: picked.id, AGENT_PURGE_MODE: mode, AGENT_PURGE_FORCE: "1" };
 		}
 	}
@@ -244,9 +259,9 @@ async function launch(name) {
 
 async function useCmd() {
 	const { createStore } = await import("../lib/personas.mjs");
-	const store = createStore(ROOT);
+	const store = createStore(DATA);
 	const arg = argv[1];
-	const { state, migrated } = loadState(ROOT);
+	const { state, migrated } = loadState(DATA);
 	migrated.forEach((m) => console.log(`[migrate] ${m}`));
 
 	const id = arg && !arg.startsWith("-") ? arg : state.persona;
@@ -259,7 +274,7 @@ async function useCmd() {
 
 	// user 层的 /purge 命令文件是烘焙进去的，换人设必须重渲染
 	const { refreshSlashes } = await import("../lib/slashes.mjs");
-	const refreshed = refreshSlashes(ROOT, state.armed ? Object.entries(state.armed).filter(([, a]) => a.includes("slash")).map(([k]) => k) : [], {
+	const refreshed = refreshSlashes(DATA, state.armed ? Object.entries(state.armed).filter(([, a]) => a.includes("slash")).map(([k]) => k) : [], {
 		personaId: id,
 		personaBody: store.read(id).body.trim(),
 	});
@@ -272,7 +287,7 @@ async function useCmd() {
 
 function modeCmd() {
 	const want = argv[1];
-	const { state } = loadState(ROOT);
+	const { state } = loadState(DATA);
 	const current = state.default?.mode ?? "replace";
 	if (!want) {
 		console.log(
@@ -287,7 +302,7 @@ function modeCmd() {
 		return;
 	}
 	if (!MODES.includes(want)) die(`mode 只能是 ${MODES.join(" / ")}`);
-	setDefault(ROOT, { harness: state.default?.harness ?? "codex", mode: want });
+	setDefault(DATA, { harness: state.default?.harness ?? "codex", mode: want });
 	console.log(`mode ← ${want}（state.json；下次启动生效，--mode 可临时覆盖）`);
 }
 
@@ -305,12 +320,12 @@ async function installCmd(verb, rest) {
 		}
 		const spec = matrix.harnesses[h];
 		const { createStore } = await import("../lib/personas.mjs");
-		const store = createStore(ROOT);
+		const store = createStore(DATA);
 		const pid = store.activeId();
-		const r = fn({ personaPath: store.materialize(pid), personaText: store.read(pid).body.trim(), root: ROOT, reason: spec.reason }) ?? {};
+		const r = fn({ personaPath: store.materialize(pid), personaText: store.read(pid).body.trim(), root: DATA, reason: spec.reason }) ?? {};
 		const ok = verb === "install" ? r.ok !== false : r.ok !== false;
 		console.log(`${ok ? "✓" : "✗"} ${verb} ${h}${r.file ? ` → ${r.file}` : ""}${r.note ? `  (${r.note})` : ""}`);
-		if (ok) setArmed(ROOT, h, "install", verb === "install");
+		if (ok) setArmed(DATA, h, "install", verb === "install");
 	}
 }
 
@@ -320,7 +335,7 @@ async function armCmd(verb, rest) {
 	const { install, uninstall } = await import("../lib/persist.mjs");
 	const { capsFor } = await import("../lib/caps.mjs");
 	const { createStore } = await import("../lib/personas.mjs");
-	const store = createStore(ROOT);
+	const store = createStore(DATA);
 	const pid = store.activeId();
 	if (!pid) die("还没有 persona：先 agent-purge use <id>");
 
@@ -332,15 +347,15 @@ async function armCmd(verb, rest) {
 	// 否则 `agent-purge <h>` 这条入口照样注入（实测：关了总开关还能接管，就是这里漏的）。
 	// 开的时候把上次的 mode 还回去。单家操作不动 mode。
 	if (rest.includes("--all")) {
-		const { state: cur } = loadState(ROOT);
+		const { state: cur } = loadState(DATA);
 		const m = cur.default?.mode ?? "off";
 		if (verb === "disarm" && m !== "off" && cur.default?.harness) {
-			setDefault(ROOT, { harness: cur.default.harness, mode: "off" });
-			patchState(ROOT, { prevMode: m });
+			setDefault(DATA, { harness: cur.default.harness, mode: "off" });
+			patchState(DATA, { prevMode: m });
 		}
 		if (verb === "arm" && m === "off" && cur.default?.harness) {
 			const back = MODES.includes(cur.prevMode) && cur.prevMode !== "off" ? cur.prevMode : "replace";
-			setDefault(ROOT, { harness: cur.default.harness, mode: back });
+			setDefault(DATA, { harness: cur.default.harness, mode: back });
 		}
 	}
 
@@ -364,29 +379,29 @@ async function armCmd(verb, rest) {
 				}
 			}
 			if (ch === "install") {
-				const r = verb === "arm" ? install(h, { root: ROOT, active: store.refreshActive() }) : uninstall(h);
+				const r = verb === "arm" ? install(h, { root: DATA, active: store.refreshActive() }) : uninstall(h);
 				if (r.error) skip.push(`常驻: ${r.error}`);
 				else {
-					setArmed(ROOT, h, "install", verb === "arm");
+					setArmed(DATA, h, "install", verb === "arm");
 					done.push(verb === "arm" ? `常驻 ${r.action}` : `撤常驻 ${r.action}`);
 				}
 			}
 			if (ch === "shim") {
-				const r = verb === "arm" ? installShim(ROOT, h) : uninstallShim(ROOT, h);
+				const r = verb === "arm" ? installShim(DATA, h) : uninstallShim(DATA, h);
 				if (r.error) skip.push(`shim: ${r.error}`);
 				else {
-					setArmed(ROOT, h, "shim", verb === "arm");
+					setArmed(DATA, h, "shim", verb === "arm");
 					done.push(verb === "arm" ? "裸命令接管" : "撤裸命令接管");
 				}
 			}
 			if (ch === "slash") {
 				const r =
 					verb === "arm"
-						? installSlash(h, ROOT, { personaId: pid, personaBody: store.read(pid).body.trim() })
-						: uninstallSlash(h, ROOT);
+						? installSlash(h, DATA, { personaId: pid, personaBody: store.read(pid).body.trim() })
+						: uninstallSlash(h, DATA);
 				if (r.error) skip.push(`/purge: ${r.error}`);
 				else {
-					setArmed(ROOT, h, "slash", verb === "arm");
+					setArmed(DATA, h, "slash", verb === "arm");
 					done.push(verb === "arm" ? `/purge ${r.layer} 层` : "撤 /purge");
 				}
 			}
@@ -423,10 +438,10 @@ async function armCmd(verb, rest) {
 async function slashCmd(rest) {
 	const { installSlash, uninstallSlash, slashStatus } = await import("../lib/slashes.mjs");
 	const { createStore } = await import("../lib/personas.mjs");
-	const store = createStore(ROOT);
+	const store = createStore(DATA);
 	const id = rest[0];
 	if (!id || id === "status") {
-		const rows = slashStatus(ROOT);
+		const rows = slashStatus(DATA);
 		const live = rows.filter((s) => s.offered);
 		live.forEach((s) => {
 			console.log(`${s.installed ? "✓" : " "} ${s.id.padEnd(9)} ${s.layer.padEnd(4)} ${s.trigger.padEnd(22)} persona=${s.personaId ?? "-"}`);
@@ -446,47 +461,47 @@ async function slashCmd(rest) {
 		const ids =
 			target && target !== "--all"
 				? rest.slice(1).filter((x) => !x.startsWith("-"))
-				: slashStatus(ROOT).filter((s) => s.installed).map((s) => s.id);
+				: slashStatus(DATA).filter((s) => s.installed).map((s) => s.id);
 		if (!ids.length) console.log("没有装着的 /purge");
 		ids.forEach((h) => {
-			const r = uninstallSlash(h, ROOT);
+			const r = uninstallSlash(h, DATA);
 			if (!r.error) {
-				setArmed(ROOT, h, "slash", false);
+				setArmed(DATA, h, "slash", false);
 				console.log(`✓ 已移除 /purge ${h}${r.removed?.length ? " → " + r.removed.join(", ") : "（本来就没有）"}`);
 			}
 		});
 		return;
 	}
-	const targets = id === "--all" ? slashStatus(ROOT).filter((s) => s.offered).map((s) => s.id) : [id];
+	const targets = id === "--all" ? slashStatus(DATA).filter((s) => s.offered).map((s) => s.id) : [id];
 	const pid = store.activeId();
 	if (!pid) die("还没有 persona：先 agent-purge use <id>");
 	for (const h of targets) {
-		const r = installSlash(h, ROOT, { personaId: pid, personaBody: store.read(pid).body.trim() });
+		const r = installSlash(h, DATA, { personaId: pid, personaBody: store.read(pid).body.trim() });
 		if (r.error) {
 			console.log(`- ${h}: ${r.error}`);
 			continue;
 		}
-		setArmed(ROOT, h, "slash", true);
+		setArmed(DATA, h, "slash", true);
 		console.log(`✓ /purge → ${h}（${r.layer} 层）${r.file}`);
 		console.log(`   ${r.note}`);
 	}
 }
 
 async function statusCmd() {
-	const { migrated } = loadState(ROOT);
+	const { migrated } = loadState(DATA);
 	migrated.forEach((m) => console.log(`[migrate] ${m}`));
 	// armed 是缓存，磁盘才是真相：先把假记录摘掉，再报数
 	const { reconcileArmed } = await import("../lib/armed.mjs");
-	const fixed = await reconcileArmed(ROOT);
+	const fixed = await reconcileArmed(DATA);
 	if (fixed.length) console.log(`[对账] armed 纠正：${fixed.join(", ")}`);
-	const { state } = loadState(ROOT);
+	const { state } = loadState(DATA);
 	return Promise.all([import("../lib/shim.mjs"), import("../lib/slashes.mjs")]).then(([shimMod, slashMod]) => {
 		const shims = shimMod.shimStatus();
-		const slashes = slashMod.slashStatus(ROOT);
+		const slashes = slashMod.slashStatus(DATA);
 
 		console.log(`persona  ${state.persona ?? "(未设置)"}`);
 		console.log(`default  ${state.default ? `${state.default.harness} · ${state.default.mode}` : "(未设置)"}   裸敲 agent-purge 用它`);
-		console.log(`state    ${join(ROOT, "state.json")}`);
+		console.log(`state    ${join(DATA, "state.json")}`);
 		console.log("");
 		console.log("harness     shim   slash  install   /purge层  常驻落点");
 		for (const [h] of Object.entries(matrix.harnesses)) {
@@ -513,8 +528,8 @@ async function statusCmd() {
 
 async function lsCmd() {
 	const { createStore } = await import("../lib/personas.mjs");
-	const store = createStore(ROOT);
-	const { state } = loadState(ROOT);
+	const store = createStore(DATA);
+	const { state } = loadState(DATA);
 	const fit = store.resolve({ harness: state.default?.harness, model: null });
 	for (const p of store.list()) {
 		const mark = p.id === store.activeId() ? "*" : " ";
@@ -532,6 +547,7 @@ function webCmd() {
 			detached: true,
 			stdio: "ignore",
 			shell: false,
+			env: { ...process.env, AGENT_PURGE_HOME: DATA },
 		});
 		child.unref();
 		console.log(`agent-purge web 已在后台启动 → http://127.0.0.1:${port}（pid ${child.pid}）`);

package/lib/home.mjs

@@ -0,0 +1,47 @@
+// 用户数据目录：state.json 与 personas/ 不跟代码走。
+//
+// 原因：npm 升级是「整个包目录替换」，数据若留在包目录里会连人设一起被清掉。
+// 所以代码认 ROOT（装在哪都行），数据认 HOME：
+//   AGENT_PURGE_HOME 显式指定 > ~/.agent-purge
+//
+// 老布局（数据躺在包目录里）在首次运行时整份拷过来，原件留着当备份，不删。
+import { copyFileSync, cpSync, existsSync, mkdirSync, readdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
+
+export function dataHome() {
+	const env = process.env.AGENT_PURGE_HOME?.trim();
+	if (!env) return join(homedir(), ".agent-purge");
+	return isAbsolute(env) ? env : resolve(env);
+}
+
+/**
+ * 确保数据目录存在，并把旧布局搬过来。
+ * @returns {{ home: string, migrated: string[] }}
+ */
+export function ensureDataHome(pkgRoot = null) {
+	const home = dataHome();
+	mkdirSync(home, { recursive: true });
+	const migrated = [];
+	// 显式指定 AGENT_PURGE_HOME = 用户自己挑的新家，不往里搬旧数据
+	if (!pkgRoot || process.env.AGENT_PURGE_HOME?.trim() || resolve(pkgRoot) === resolve(home)) {
+		return { home, migrated };
+	}
+
+	const state = [join(pkgRoot, "state.json"), join(home, "state.json")];
+	if (existsSync(state[0]) && !existsSync(state[1])) {
+		copyFileSync(state[0], state[1]);
+		migrated.push(`state: ${state[0]} → ${state[1]}`);
+	}
+
+	const from = join(pkgRoot, "personas");
+	const to = join(home, "personas");
+	if (existsSync(from) && !existsSync(to)) {
+		const md = readdirSync(from).filter((f) => f.endsWith(".md"));
+		if (md.length) {
+			cpSync(from, to, { recursive: true });
+			migrated.push(`personas: ${from} → ${to}（${md.length} 个）`);
+		}
+	}
+	return { home, migrated };
+}

package/lib/slashes.mjs

@@ -161,8 +161,10 @@ function piExtension(root) {
 import { readFileSync, writeFileSync } from "node:fs";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 
-const STATE = ${JSON.stringify(statePath)};
-const PERSONAS = ${JSON.stringify(personasDir)};
+// 数据目录跟安装目录解耦：AGENT_PURGE_HOME 优先，没有才用安装时记住的路径
+const HOME = process.env.AGENT_PURGE_HOME ? String(process.env.AGENT_PURGE_HOME).replace(/\\\\/g, "/") : null;
+const STATE = (HOME ? HOME + "/state.json" : ${JSON.stringify(statePath)});
+const PERSONAS = (HOME ? HOME + "/personas" : ${JSON.stringify(personasDir)});
 const HOST_IDENTITY = "You are an expert coding assistant operating inside pi";
 
 function stripFrontmatter(raw: string): string {
@@ -184,7 +186,7 @@ function loadPersona(): { id: string | null; body: string } {
 	}
 }
 
-function loadState(): { persona: string | null; mode: string; shim: boolean } {
+function loadState(): { persona: string | null; mode: string; shim: boolean; piAuto: boolean; piUserLayer: boolean } {
 	// 启动器会用环境变量告知本次运行用的 persona/mode（--persona / --mode 覆盖）；
 	// 否则读 state.json —— 注意 mode 存在 default.mode，不是顶层。
 	const envPersona = process.env.AGENT_PURGE_PERSONA;
@@ -195,15 +197,17 @@ function loadState(): { persona: string | null; mode: string; shim: boolean } {
 			default?: { harness?: string; mode?: string };
 			armed?: Record<string, string[]>;
 			piAuto?: boolean;
+			piUserLayer?: boolean;
 		};
 		return {
 			persona: envPersona ?? st.persona ?? null,
 			mode: envMode ?? st.default?.mode ?? "replace",
 			shim: Array.isArray(st.armed?.pi) && st.armed.pi.includes("shim"),
 			piAuto: st.piAuto === true,
+			piUserLayer: st.piUserLayer === true,
 		};
 	} catch {
-		return { persona: envPersona ?? null, mode: envMode ?? "replace", shim: false, piAuto: process.env.AGENT_PURGE_FORCE === "1" };
+		return { persona: envPersona ?? null, mode: envMode ?? "replace", shim: false, piAuto: process.env.AGENT_PURGE_FORCE === "1", piUserLayer: false };
 	}
 }
 
@@ -246,6 +250,55 @@ export default function agentPurge(pi: ExtensionAPI) {
 		return { systemPrompt: host.length > 0 ? cache.body + "\\n\\n" + host : cache.body };
 	});
 
+	// 真正保证“会话中途热切也生效”的是这个拦截面：每个模型请求前重写 transcript 里的
+	// system 消恵。before_agent_start 的返回值在部分 pi 版本上只对首轮生效（会话已有上下文时
+	// 会被 transcript 覆盖），所以这里再兜一层；两层同时生效时靠 body 前缀去重。
+	try {
+		pi.on("context_with_system", async (event: any) => {
+			const st = loadState();
+			const m = st.mode === "strict" || st.mode === "append" ? st.mode : "replace";
+			const on = st.mode === "off" ? "off" : (forced ?? (st.persona && autoOn(st) ? "on" : "off"));
+			if (on !== "on") return;
+			const p = loadPersona();
+			if (!p.body) return;
+			const messages: any[] = Array.isArray(event?.messages) ? event.messages : [];
+			if (messages.length === 0) return;
+			const textOf = (msg: any): string => {
+				const c = msg?.content;
+				if (typeof c === "string") return c;
+				if (Array.isArray(c)) return c.map((b: any) => (b && typeof b.text === "string" ? b.text : "")).join("");
+				return "";
+			};
+			// pi 1.4 约定：这个钩子的返回值会被忽略，必须原地改 event.messages
+			const out = messages;
+			const at = out.findIndex((msg: any) => msg?.role === "system");
+			const host = at >= 0 ? textOf(out[at]) : "";
+			if (!host.includes(p.body.slice(0, 40))) {
+				let next: string;
+				if (m === "strict") next = p.body;
+				else if (m === "append") next = (host ? host + "\\n\\n" : "") + p.body;
+				else next = host ? p.body + "\\n\\n" + cutHostIdentity(host) : p.body;
+				if (at >= 0) out[at].content = next;
+				else out.unshift({ role: "system", content: next });
+			}
+
+			// 有些模型（实测 deepseek-v4.1-flash 走 mg 网关）直接无视 system 角色：
+			// 再往最后一条用户消息前面贴一份，让指令一定被看到。
+			if (st.piUserLayer) {
+				for (let i = out.length - 1; i >= 0; i--) {
+					if (out[i]?.role !== "user") continue;
+					const shown = textOf(out[i]);
+					if (shown.includes(p.body.slice(0, 40))) break;
+					out[i].content = "<agent-purge>\\n" + p.body + "\\n</agent-purge>\\n\\n" + shown;
+					break;
+				}
+			}
+			return;
+		});
+	} catch {
+		// 老版本 pi 没有 context_with_system：退回 before_agent_start 的返回值
+	}
+
 	pi.registerCommand("purge", {
 		description: "会话级接管开关（人设跟随 agent-purge 的 state.json）",
 		getArgumentCompletions: (prefix: string) =>

package/lib/state.mjs

@@ -33,7 +33,7 @@ export function statePath(root) {
 }
 
 function emptyState() {
-	return { v: 1, persona: null, default: null, armed: {}, piAuto: false };
+	return { v: 1, persona: null, default: null, armed: {}, piAuto: false, piUserLayer: false };
 }
 
 /**
@@ -115,6 +115,12 @@ export function setPiAuto(root, on) {
 	return saveState(root, { ...state, piAuto: on === true }).piAuto;
 }
 
+/** pi 的人设走哪一层：false = system（默认），true = 额外塞进用户消息（给忽略 system 的模型用） */
+export function setPiUserLayer(root, on) {
+	const { state } = loadState(root);
+	return saveState(root, { ...state, piUserLayer: on === true }).piUserLayer;
+}
+
 /** armed 变成 {codex: ["shim","install"]}；空数组即删键 */
 export function setArmed(root, id, arm, on) {
 	const { state } = loadState(root);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-purge",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "One persona, many coding agents: replace or inject system prompts across codex, claude, opencode, grok, omp, hermes, pi, zcode.",
   "type": "module",
   "bin": {
@@ -37,7 +37,12 @@
     "prompt-injection"
   ],
   "license": "MIT",
-  "repository": { "type": "git", "url": "git+https://github.com/ZiChuanLan/agent-purge.git" },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ZiChuanLan/agent-purge.git"
+  },
   "homepage": "https://github.com/ZiChuanLan/agent-purge#readme",
-  "bugs": { "url": "https://github.com/ZiChuanLan/agent-purge/issues" }
+  "bugs": {
+    "url": "https://github.com/ZiChuanLan/agent-purge/issues"
+  }
 }

package/web/server.mjs

@@ -6,15 +6,18 @@ import { fileURLToPath } from "node:url";
 import { detect } from "../lib/detect.mjs";
 import { oneshots } from "../backends/index.mjs";
 import { createStore } from "../lib/personas.mjs";
-import { MODES, armedOf, loadState, patchState, setArmed, setDefault, setPersona } from "../lib/state.mjs";
+import { MODES, armedOf, loadState, patchState, setArmed, setDefault, setPersona, setPiAuto } from "../lib/state.mjs";
 import { install, status as persistStatus, uninstall } from "../lib/persist.mjs";
 import { plans, summary as armorSummary } from "../lib/armor.mjs";
 import { installShim, shimStatus, uninstallShim } from "../lib/shim.mjs";
 import { installSlash, refreshSlashes, slashStatus, uninstallSlash } from "../lib/slashes.mjs";
 import { reconcileArmed } from "../lib/armed.mjs";
 import { capsFor } from "../lib/caps.mjs";
+import { ensureDataHome } from "../lib/home.mjs";
 
 const ROOT = process.versions.bun ? dirname(process.execPath) : dirname(dirname(fileURLToPath(import.meta.url)));
+// 数据（state.json + personas/）在用户目录，不在安装目录
+const DATA = ensureDataHome(ROOT).home;
 // 运行期真正被改写的层（≠ bench 能测到的层）：每家只有它自己暴露的那一个写入点。
 // sys = 系统提示/配置文件/插件 splice；user = 只落在用户消息里（zcode 的 hook）。
 const LAYER = {
@@ -24,7 +27,7 @@ const LAYER = {
 	zcode: "",
 };
 const matrix = JSON.parse(readFileSync(join(ROOT, "matrix.json"), "utf8"));
-const store = createStore(ROOT);
+const store = createStore(DATA);
 
 export function serveWeb(port = 7788) {
 	const server = createServer(handle);
@@ -51,6 +54,7 @@ async function handle(req, res) {
 	if (req.method === "GET" && p === "/api/state") return send(res, 200, await state(url.searchParams.get("versions") === "1"));
 	if (req.method === "GET" && p === "/api/armor") return send(res, 200, armorState());
 	if (req.method === "POST" && p === "/api/defaults") return send(res, 200, saveDefaults(await body(req)));
+	if (req.method === "POST" && p === "/api/pi-auto") return send(res, 200, { piAuto: setPiAuto(DATA, (await body(req)).on === true) });
 	if (req.method === "POST" && p === "/api/persona") return send(res, 200, savePersona(await body(req)));
 	if (req.method === "DELETE" && p === "/api/persona") return send(res, 200, deletePersona(url.searchParams.get("id")));
 	if (req.method === "POST" && p === "/api/use") return send(res, 200, usePersona(await body(req)));
@@ -84,12 +88,12 @@ function armorState() {
 
 async function state(withVersions) {
 	// 先跟磁盘对账，再报数：armed 是缓存，磁盘才是真相
-	const reconciled = await reconcileArmed(ROOT);
+	const reconciled = await reconcileArmed(DATA);
 	const found = detect({ versions: withVersions });
-	const persisted = persistStatus(ROOT);
-	const { state: st } = loadState(ROOT);
+	const persisted = persistStatus(DATA);
+	const { state: st } = loadState(DATA);
 	const shims = shimStatus();
-	const slashes = slashStatus(ROOT);
+	const slashes = slashStatus(DATA);
 	const harnesses = Object.entries(matrix.harnesses).map(([id, m]) => {
 		const d = found[id] ?? {};
 		const inst = persisted.find((x) => x.name === id);
@@ -131,6 +135,7 @@ async function state(withVersions) {
 		defaults: st.default,
 		armed: st.armed ?? {},
 		modes: MODES,
+		piAuto: st.piAuto === true,
 		shimDir: shimStatus()[0]?.dir ?? null,
 		slashes: slashes,
 	};
@@ -143,7 +148,7 @@ function saveDefaults(payload) {
 	if (spec.class === "unsupported") return { error: `${harness} 做不到：${spec.reason}` };
 	if (mode && !MODES.includes(mode)) return { error: `mode 只能是 ${MODES.join(" / ")}` };
 	try {
-		return { ok: true, defaults: setDefault(ROOT, { harness, mode: mode ?? "replace" }) };
+		return { ok: true, defaults: setDefault(DATA, { harness, mode: mode ?? "replace" }) };
 	} catch (e) {
 		return { error: e.message };
 	}
@@ -173,12 +178,12 @@ function usePersona(payload) {
 	try {
 		store.setActive(payload.id);
 		// 两个指针必须一起写，否则 UI 选的“当前人设”和 `agent-purge` 实际用的不是同一个
-		setPersona(ROOT, payload.id);
-		const { state: st } = loadState(ROOT);
+		setPersona(DATA, payload.id);
+		const { state: st } = loadState(DATA);
 		const slashTargets = Object.entries(st.armed ?? {})
 			.filter(([, a]) => a.includes("slash"))
 			.map(([k]) => k);
-		const refreshed = refreshSlashes(ROOT, slashTargets, { personaId: payload.id, personaBody: store.read(payload.id).body.trim() });
+		const refreshed = refreshSlashes(DATA, slashTargets, { personaId: payload.id, personaBody: store.read(payload.id).body.trim() });
 		return { ok: true, active: payload.id, refreshed };
 	} catch (e) {
 		return { error: e.message };
@@ -194,15 +199,15 @@ function applyArmAll(payload) {
 	// 全局总闸 = 电源，不只是注册表：撤的时候把 default.mode 置 off（记下 prevMode），
 	// 否则 `agent-purge <h>` 这条入口永远注入 —— 用户实测“关了也能直接接管”就出在这。
 	// 开的时候把上次的 mode 还回去。
-	const { state: cur } = loadState(ROOT);
+	const { state: cur } = loadState(DATA);
 	const m = cur.default?.mode ?? "off";
 	if (verb === "off" && m !== "off" && cur.default?.harness) {
-		setDefault(ROOT, { harness: cur.default.harness, mode: "off" });
-		patchState(ROOT, { prevMode: m });
+		setDefault(DATA, { harness: cur.default.harness, mode: "off" });
+		patchState(DATA, { prevMode: m });
 	}
 	if (verb === "on" && m === "off" && cur.default?.harness) {
 		const back = MODES.includes(cur.prevMode) && cur.prevMode !== "off" ? cur.prevMode : "replace";
-		setDefault(ROOT, { harness: cur.default.harness, mode: back });
+		setDefault(DATA, { harness: cur.default.harness, mode: back });
 	}
 
 	const perHarness = [];
@@ -217,7 +222,7 @@ function applyArmAll(payload) {
 		else perHarness.push({ harness: h, done: (r.done ?? []).map((d) => d.channel), skipped: r.skipped ?? [] });
 	}
 	if (!perHarness.length) return { error: failed.join("；") || "没有可注册的 harness" };
-	const after = loadState(ROOT).state.default;
+	const after = loadState(DATA).state.default;
 	return { ok: true, action: verb, channel, mode: after?.mode ?? null, harnesses: perHarness, failed };
 }
 
@@ -225,16 +230,16 @@ function applyInstall(payload) {
 	const { harness, action } = payload;
 	if (action === "uninstall") {
 		const r = uninstall(harness);
-		setArmed(ROOT, harness, "install", false);
+		setArmed(DATA, harness, "install", false);
 		return { ok: true, result: r };
 	}
 	// 装谁就把谁设为 active：active.md 与 install 指向始终是同一份正文
 	const wanted = payload.persona ?? store.activeId();
 	if (!store.read(wanted)) return { error: "没有可用 persona" };
 	store.setActive(wanted);
-	const r = install(harness, { root: ROOT, active: store.refreshActive() });
+	const r = install(harness, { root: DATA, active: store.refreshActive() });
 	if (r.error) return { error: r.error };
-	setArmed(ROOT, harness, "install", true);
+	setArmed(DATA, harness, "install", true);
 	return { ok: true, result: r };
 }
 
@@ -274,26 +279,26 @@ function armChannel(harness, channel, verb, id) {
 	}
 	if (channel === "shim") {
 		if (verb === "off") {
-			const r = uninstallShim(ROOT, harness);
+			const r = uninstallShim(DATA, harness);
 			if (r.error) return { error: r.error };
-			setArmed(ROOT, harness, "shim", false);
+			setArmed(DATA, harness, "shim", false);
 			return { removed: r.removed };
 		}
-		const r = installShim(ROOT, harness);
+		const r = installShim(DATA, harness);
 		if (r.error) return { error: r.error };
-		setArmed(ROOT, harness, "shim", true);
+		setArmed(DATA, harness, "shim", true);
 		return { file: r.file, real: r.real };
 	}
 	if (channel === "slash") {
 		if (verb === "off") {
-			const r = uninstallSlash(harness, ROOT);
+			const r = uninstallSlash(harness, DATA);
 			if (r.error) return { error: r.error };
-			setArmed(ROOT, harness, "slash", false);
+			setArmed(DATA, harness, "slash", false);
 			return { removed: r.removed };
 		}
-		const r = installSlash(harness, ROOT, { personaId: id, personaBody: store.read(id).body.trim() });
+		const r = installSlash(harness, DATA, { personaId: id, personaBody: store.read(id).body.trim() });
 		if (r.error) return { error: r.error };
-		setArmed(ROOT, harness, "slash", true);
+		setArmed(DATA, harness, "slash", true);
 		return { file: r.file, layer: r.layer };
 	}
 	return { error: `未知通道: ${channel}` };

package/web/ui.html

@@ -399,7 +399,12 @@ textarea{resize:vertical;min-height:340px;font-family:var(--font-mono);font-size
   *,*::before,*::after{animation-duration:.01ms!important;transition-duration:.01ms!important;
     transform:none!important}
 }
-</style>
+.pirow{display:flex;align-items:center;justify-content:space-between;gap:18px;border:1px solid var(--line);border-radius:12px;padding:11px 14px;margin:12px 0 4px;background:var(--field)}
+.pirow b{display:block;font-size:13px;font-weight:600}
+.pirow .tiny{display:block;margin-top:3px;line-height:1.5}
+.pirow .switch{background:var(--line);border:1px solid var(--line)}
+.pirow.on .switch{background:var(--accent);border-color:var(--accent)}
+.pirow.on .switch::after{left:23px;background:#fff}</style>
 </head>
 <body>
 
@@ -655,7 +660,7 @@ function renderOverview() {
   const hid = S.defaults.harness;
   const h = S.harnesses.find((x) => x.id === hid) || S.harnesses[0];
   const persona = S.personas.find((p) => p.id === (selPersona || S.persona)) || S.personas[0];
-  const hot = S.harnesses.filter((h) => (h.armed || []).length).map((h) => h.id + "(" + h.armed.join("/") + ")");
+  const hot = S.harnesses.filter((h) => (h.armed || []).length).map((h) => h.id + "(" + h.armed.join("/") + (h.id === "pi" && S.piAuto ? "+裸启动" : "") + ")");
 
   const why = mode === "off"
     ? "总电源关着 —— 下面写的都只是配置，实际一条都不会注入。"
@@ -671,7 +676,7 @@ function renderOverview() {
           const say = (c) => c === "shim"
             ? (h.id === "pi" ? "敲 pi 会注入（PATH 刚加的前置壳）" : "敲 " + h.id + " 会注入（PATH 前置壳）")
             : c === "slash"
-              ? (h.id === "pi" ? "裸敲 pi 不注入，只有会话里 /purge 才改写" : "会话里 /purge 展开成用户消息")
+              ? (h.id === "pi" ? (S.piAuto ? "裸敲 pi 也注入（扩展常驻）" : "裸敲 pi 不注入，只有会话里 /purge 才改写") : "会话里 /purge 展开成用户消息")
               : "改了它的配置文件，连别人启动的也生效";
           return chans.map(say).join("；") + "。";
         })()
@@ -736,8 +741,10 @@ function harnessCard(h) {
     ? h.armed.map((a) => `<span class="badge ok">${ARM_INFO[a]?.name || a}</span>`).join("")
     : `<span class="badge">未武装</span>`;
   const CHAN_ORDER = ["shim", "slash", "install"];
+  const isPi = h.id === "pi";
   // 只摆真能用的：能点但没反应的按钮 = 误导，理由改用一行字写在卡片下方
-  const hiddenChans = CHAN_ORDER.filter((c) => h.caps?.[c] && !h.caps[c].ok);
+  // pi 例外：它的“裸命令接管”是扩展常驻（piAuto），不是 PATH 壳，所以照样给按钮
+  const hiddenChans = CHAN_ORDER.filter((c) => !(isPi && c === "shim") && h.caps?.[c] && !h.caps[c].ok);
   const hiddenText = hiddenChans.map((c) => {
     const cap = h.caps[c];
     if (cap.hiddenLabel) return `${cap.hiddenLabel}（压不住系统提示词）`;
@@ -745,8 +752,14 @@ function harnessCard(h) {
     if (c === "slash") return null;
     return `${ARM_INFO[c].name}：${String(cap.why || "").replace(/\s+/g, " ").split(/[；。]/)[0]}`;
   }).filter(Boolean);
-  const chans = CHAN_ORDER.filter((c) => !h.caps?.[c] || h.caps[c].ok).map((c) => {
-    const on = h.armed?.includes(c);
+  const chans = CHAN_ORDER.filter((c) => (isPi && c === "shim") || !h.caps?.[c] || h.caps[c].ok).map((c) => {
+    const on = isPi && c === "shim" ? Boolean(S.piAuto) : h.armed?.includes(c);
+    // pi 的裸命令接管＝扩展常驻：点它直接切 piAuto，而不是装 PATH 壳
+    if (isPi && c === "shim") {
+      return `<button class="chan ${on ? "on" : ""}" data-piauto="${on ? "off" : "on"}" type="button" title="扩展常驻，不改 PATH：开关写在 state.json 的 piAuto">
+      <span class="dot"></span><span><b>裸命令接管${on ? " · 开" : ""}</b>
+      <small>${on ? "扩展常驻：敲 pi 就注入（每次启动）" : "关着：只有 /purge 或 agent-purge pi 才注入"}</small></span></button>`;
+    }
     // 能力由后端（lib/caps.mjs）给；UI 不再自己猜一遍，否则两处判断迟早分叉
     const cap = h.caps?.[c] ?? null;
     const avail = cap ? cap.ok : c === "install" ? !!h.persistable : c === "slash" ? !!h.slash : true;
@@ -987,6 +1000,16 @@ $("#hpick").addEventListener("click", (e) => {
   const b = e.target.closest("[data-hpick]"); if (!b) return;
   selHarness = b.dataset.hpick; renderHarness();
 });
+$("#hsel").addEventListener("click", async (e) => {
+  const b = e.target.closest("[data-piauto]"); if (!b) return;
+  await withBusy(b, async () => {
+    try {
+      await api("/api/pi-auto", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ on: b.dataset.piauto === "on" }) });
+      toast("裸启动自动注入 → " + (b.dataset.piauto === "on" ? "开" : "关"));
+      await load();
+    } catch (err) { toast("失败：" + err.message, true); }
+  });
+});
 $("#hsel").addEventListener("click", onChan);
 $("#hdeadBox").addEventListener("click", onChan);
 $("#selbar").addEventListener("click", async (e) => {