agent-purge 0.2.0 → 0.2.1

package/bin/agent-purge.mjs

@@ -115,10 +115,22 @@ async function launch(name) {
 		console.log(`[auto] 裸敲 pi ${autoFlag === "on" ? "会" : "不会"}自动注入（已写入 state.json）`);
 	}
 
+	// pi 的人设落在哪一层：sys（默认，真系统提示词）或 user（塞进用户消息，给忽略 system 的模型）
+	const layerFlag = name === "pi" ? flag("--layer", null) : null;
+	if (layerFlag !== null) {
+		if (layerFlag !== "sys" && layerFlag !== "user") die("--layer 只能是 sys / user");
+		const { setPiUserLayer } = await import("../lib/state.mjs");
+		setPiUserLayer(DATA, layerFlag === "user");
+		console.log(
+			layerFlag === "user"
+				? "[layer] 人设额外塞进用户消息（给忽略 system 的模型用；代价是每条消息多一段）"
+				: "[layer] 人设走 system 层（默认）",
+		);
+	}
+
 	// 实测策略：该 harness 的哪一层真的能注入（数据来自 matrix.json armor 段）
 	const { plan } = await import("../lib/armor.mjs");
-	const strategy = plan(matrix, name);
-	if (!strategy.error) {
+	const strategy = plan(matrix, name);	if (!strategy.error) {
 		if (strategy.requiresSeed) console.log(`[策略] ${name}：裸注入 sys 层实测 ${strategy.bare.sys}%，带人设词种子 ${strategy.persona.sys}% —— 需要 seed 层`);
 		const noSys = strategy.blocked.find((b) => b.layer === "sys");
 		if (noSys && mode !== "off") console.log(`[策略] ${name}：sys 层不可用（${noSys.reason}），本次只能靠 user 层`);

package/lib/slashes.mjs

@@ -186,7 +186,7 @@ function loadPersona(): { id: string | null; body: string } {
 	}
 }
 
-function loadState(): { persona: string | null; mode: string; shim: boolean } {
+function loadState(): { persona: string | null; mode: string; shim: boolean; piAuto: boolean; piUserLayer: boolean } {
 	// 启动器会用环境变量告知本次运行用的 persona/mode（--persona / --mode 覆盖）；
 	// 否则读 state.json —— 注意 mode 存在 default.mode，不是顶层。
 	const envPersona = process.env.AGENT_PURGE_PERSONA;
@@ -197,15 +197,17 @@ function loadState(): { persona: string | null; mode: string; shim: boolean } {
 			default?: { harness?: string; mode?: string };
 			armed?: Record<string, string[]>;
 			piAuto?: boolean;
+			piUserLayer?: boolean;
 		};
 		return {
 			persona: envPersona ?? st.persona ?? null,
 			mode: envMode ?? st.default?.mode ?? "replace",
 			shim: Array.isArray(st.armed?.pi) && st.armed.pi.includes("shim"),
 			piAuto: st.piAuto === true,
+			piUserLayer: st.piUserLayer === true,
 		};
 	} catch {
-		return { persona: envPersona ?? null, mode: envMode ?? "replace", shim: false, piAuto: process.env.AGENT_PURGE_FORCE === "1" };
+		return { persona: envPersona ?? null, mode: envMode ?? "replace", shim: false, piAuto: process.env.AGENT_PURGE_FORCE === "1", piUserLayer: false };
 	}
 }
 
@@ -248,6 +250,55 @@ export default function agentPurge(pi: ExtensionAPI) {
 		return { systemPrompt: host.length > 0 ? cache.body + "\\n\\n" + host : cache.body };
 	});
 
+	// 真正保证“会话中途热切也生效”的是这个拦截面：每个模型请求前重写 transcript 里的
+	// system 消恵。before_agent_start 的返回值在部分 pi 版本上只对首轮生效（会话已有上下文时
+	// 会被 transcript 覆盖），所以这里再兜一层；两层同时生效时靠 body 前缀去重。
+	try {
+		pi.on("context_with_system", async (event: any) => {
+			const st = loadState();
+			const m = st.mode === "strict" || st.mode === "append" ? st.mode : "replace";
+			const on = st.mode === "off" ? "off" : (forced ?? (st.persona && autoOn(st) ? "on" : "off"));
+			if (on !== "on") return;
+			const p = loadPersona();
+			if (!p.body) return;
+			const messages: any[] = Array.isArray(event?.messages) ? event.messages : [];
+			if (messages.length === 0) return;
+			const textOf = (msg: any): string => {
+				const c = msg?.content;
+				if (typeof c === "string") return c;
+				if (Array.isArray(c)) return c.map((b: any) => (b && typeof b.text === "string" ? b.text : "")).join("");
+				return "";
+			};
+			// pi 1.4 约定：这个钩子的返回值会被忽略，必须原地改 event.messages
+			const out = messages;
+			const at = out.findIndex((msg: any) => msg?.role === "system");
+			const host = at >= 0 ? textOf(out[at]) : "";
+			if (!host.includes(p.body.slice(0, 40))) {
+				let next: string;
+				if (m === "strict") next = p.body;
+				else if (m === "append") next = (host ? host + "\\n\\n" : "") + p.body;
+				else next = host ? p.body + "\\n\\n" + cutHostIdentity(host) : p.body;
+				if (at >= 0) out[at].content = next;
+				else out.unshift({ role: "system", content: next });
+			}
+
+			// 有些模型（实测 deepseek-v4.1-flash 走 mg 网关）直接无视 system 角色：
+			// 再往最后一条用户消息前面贴一份，让指令一定被看到。
+			if (st.piUserLayer) {
+				for (let i = out.length - 1; i >= 0; i--) {
+					if (out[i]?.role !== "user") continue;
+					const shown = textOf(out[i]);
+					if (shown.includes(p.body.slice(0, 40))) break;
+					out[i].content = "<agent-purge>\\n" + p.body + "\\n</agent-purge>\\n\\n" + shown;
+					break;
+				}
+			}
+			return;
+		});
+	} catch {
+		// 老版本 pi 没有 context_with_system：退回 before_agent_start 的返回值
+	}
+
 	pi.registerCommand("purge", {
 		description: "会话级接管开关（人设跟随 agent-purge 的 state.json）",
 		getArgumentCompletions: (prefix: string) =>

package/lib/state.mjs

@@ -33,7 +33,7 @@ export function statePath(root) {
 }
 
 function emptyState() {
-	return { v: 1, persona: null, default: null, armed: {}, piAuto: false };
+	return { v: 1, persona: null, default: null, armed: {}, piAuto: false, piUserLayer: false };
 }
 
 /**
@@ -115,6 +115,12 @@ export function setPiAuto(root, on) {
 	return saveState(root, { ...state, piAuto: on === true }).piAuto;
 }
 
+/** pi 的人设走哪一层：false = system（默认），true = 额外塞进用户消息（给忽略 system 的模型用） */
+export function setPiUserLayer(root, on) {
+	const { state } = loadState(root);
+	return saveState(root, { ...state, piUserLayer: on === true }).piUserLayer;
+}
+
 /** armed 变成 {codex: ["shim","install"]}；空数组即删键 */
 export function setArmed(root, id, arm, on) {
 	const { state } = loadState(root);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-purge",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "One persona, many coding agents: replace or inject system prompts across codex, claude, opencode, grok, omp, hermes, pi, zcode.",
   "type": "module",
   "bin": {

package/web/server.mjs

@@ -6,7 +6,7 @@ import { fileURLToPath } from "node:url";
 import { detect } from "../lib/detect.mjs";
 import { oneshots } from "../backends/index.mjs";
 import { createStore } from "../lib/personas.mjs";
-import { MODES, armedOf, loadState, patchState, setArmed, setDefault, setPersona } from "../lib/state.mjs";
+import { MODES, armedOf, loadState, patchState, setArmed, setDefault, setPersona, setPiAuto } from "../lib/state.mjs";
 import { install, status as persistStatus, uninstall } from "../lib/persist.mjs";
 import { plans, summary as armorSummary } from "../lib/armor.mjs";
 import { installShim, shimStatus, uninstallShim } from "../lib/shim.mjs";
@@ -54,6 +54,7 @@ async function handle(req, res) {
 	if (req.method === "GET" && p === "/api/state") return send(res, 200, await state(url.searchParams.get("versions") === "1"));
 	if (req.method === "GET" && p === "/api/armor") return send(res, 200, armorState());
 	if (req.method === "POST" && p === "/api/defaults") return send(res, 200, saveDefaults(await body(req)));
+	if (req.method === "POST" && p === "/api/pi-auto") return send(res, 200, { piAuto: setPiAuto(DATA, (await body(req)).on === true) });
 	if (req.method === "POST" && p === "/api/persona") return send(res, 200, savePersona(await body(req)));
 	if (req.method === "DELETE" && p === "/api/persona") return send(res, 200, deletePersona(url.searchParams.get("id")));
 	if (req.method === "POST" && p === "/api/use") return send(res, 200, usePersona(await body(req)));
@@ -134,6 +135,7 @@ async function state(withVersions) {
 		defaults: st.default,
 		armed: st.armed ?? {},
 		modes: MODES,
+		piAuto: st.piAuto === true,
 		shimDir: shimStatus()[0]?.dir ?? null,
 		slashes: slashes,
 	};

package/web/ui.html

@@ -399,7 +399,12 @@ textarea{resize:vertical;min-height:340px;font-family:var(--font-mono);font-size
   *,*::before,*::after{animation-duration:.01ms!important;transition-duration:.01ms!important;
     transform:none!important}
 }
-</style>
+.pirow{display:flex;align-items:center;justify-content:space-between;gap:18px;border:1px solid var(--line);border-radius:12px;padding:11px 14px;margin:12px 0 4px;background:var(--field)}
+.pirow b{display:block;font-size:13px;font-weight:600}
+.pirow .tiny{display:block;margin-top:3px;line-height:1.5}
+.pirow .switch{background:var(--line);border:1px solid var(--line)}
+.pirow.on .switch{background:var(--accent);border-color:var(--accent)}
+.pirow.on .switch::after{left:23px;background:#fff}</style>
 </head>
 <body>
 
@@ -655,7 +660,7 @@ function renderOverview() {
   const hid = S.defaults.harness;
   const h = S.harnesses.find((x) => x.id === hid) || S.harnesses[0];
   const persona = S.personas.find((p) => p.id === (selPersona || S.persona)) || S.personas[0];
-  const hot = S.harnesses.filter((h) => (h.armed || []).length).map((h) => h.id + "(" + h.armed.join("/") + ")");
+  const hot = S.harnesses.filter((h) => (h.armed || []).length).map((h) => h.id + "(" + h.armed.join("/") + (h.id === "pi" && S.piAuto ? "+裸启动" : "") + ")");
 
   const why = mode === "off"
     ? "总电源关着 —— 下面写的都只是配置，实际一条都不会注入。"
@@ -671,7 +676,7 @@ function renderOverview() {
           const say = (c) => c === "shim"
             ? (h.id === "pi" ? "敲 pi 会注入（PATH 刚加的前置壳）" : "敲 " + h.id + " 会注入（PATH 前置壳）")
             : c === "slash"
-              ? (h.id === "pi" ? "裸敲 pi 不注入，只有会话里 /purge 才改写" : "会话里 /purge 展开成用户消息")
+              ? (h.id === "pi" ? (S.piAuto ? "裸敲 pi 也注入（扩展常驻）" : "裸敲 pi 不注入，只有会话里 /purge 才改写") : "会话里 /purge 展开成用户消息")
               : "改了它的配置文件，连别人启动的也生效";
           return chans.map(say).join("；") + "。";
         })()
@@ -736,8 +741,10 @@ function harnessCard(h) {
     ? h.armed.map((a) => `<span class="badge ok">${ARM_INFO[a]?.name || a}</span>`).join("")
     : `<span class="badge">未武装</span>`;
   const CHAN_ORDER = ["shim", "slash", "install"];
+  const isPi = h.id === "pi";
   // 只摆真能用的：能点但没反应的按钮 = 误导，理由改用一行字写在卡片下方
-  const hiddenChans = CHAN_ORDER.filter((c) => h.caps?.[c] && !h.caps[c].ok);
+  // pi 例外：它的“裸命令接管”是扩展常驻（piAuto），不是 PATH 壳，所以照样给按钮
+  const hiddenChans = CHAN_ORDER.filter((c) => !(isPi && c === "shim") && h.caps?.[c] && !h.caps[c].ok);
   const hiddenText = hiddenChans.map((c) => {
     const cap = h.caps[c];
     if (cap.hiddenLabel) return `${cap.hiddenLabel}（压不住系统提示词）`;
@@ -745,8 +752,14 @@ function harnessCard(h) {
     if (c === "slash") return null;
     return `${ARM_INFO[c].name}：${String(cap.why || "").replace(/\s+/g, " ").split(/[；。]/)[0]}`;
   }).filter(Boolean);
-  const chans = CHAN_ORDER.filter((c) => !h.caps?.[c] || h.caps[c].ok).map((c) => {
-    const on = h.armed?.includes(c);
+  const chans = CHAN_ORDER.filter((c) => (isPi && c === "shim") || !h.caps?.[c] || h.caps[c].ok).map((c) => {
+    const on = isPi && c === "shim" ? Boolean(S.piAuto) : h.armed?.includes(c);
+    // pi 的裸命令接管＝扩展常驻：点它直接切 piAuto，而不是装 PATH 壳
+    if (isPi && c === "shim") {
+      return `<button class="chan ${on ? "on" : ""}" data-piauto="${on ? "off" : "on"}" type="button" title="扩展常驻，不改 PATH：开关写在 state.json 的 piAuto">
+      <span class="dot"></span><span><b>裸命令接管${on ? " · 开" : ""}</b>
+      <small>${on ? "扩展常驻：敲 pi 就注入（每次启动）" : "关着：只有 /purge 或 agent-purge pi 才注入"}</small></span></button>`;
+    }
     // 能力由后端（lib/caps.mjs）给；UI 不再自己猜一遍，否则两处判断迟早分叉
     const cap = h.caps?.[c] ?? null;
     const avail = cap ? cap.ok : c === "install" ? !!h.persistable : c === "slash" ? !!h.slash : true;
@@ -987,6 +1000,16 @@ $("#hpick").addEventListener("click", (e) => {
   const b = e.target.closest("[data-hpick]"); if (!b) return;
   selHarness = b.dataset.hpick; renderHarness();
 });
+$("#hsel").addEventListener("click", async (e) => {
+  const b = e.target.closest("[data-piauto]"); if (!b) return;
+  await withBusy(b, async () => {
+    try {
+      await api("/api/pi-auto", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ on: b.dataset.piauto === "on" }) });
+      toast("裸启动自动注入 → " + (b.dataset.piauto === "on" ? "开" : "关"));
+      await load();
+    } catch (err) { toast("失败：" + err.message, true); }
+  });
+});
 $("#hsel").addEventListener("click", onChan);
 $("#hdeadBox").addEventListener("click", onChan);
 $("#selbar").addEventListener("click", async (e) => {