agent-purge 0.2.10 → 0.2.12

package/lib/restore.mjs

@@ -1,114 +1,131 @@
-// 崩溃安全的文件交换。
-//
-// 为什么需要它：bench / launch 会临时改写 harness 自己的配置（hermes 的 config.yaml、
-// opencode 插件、codex 的 config.toml）。如果进程被 Ctrl-C、OOM 或超时杀掉，
-// 只在内存里保存"原内容"是回不去的 —— 实测中 hermes 的 config.yaml 就被留在了半改状态，
-// 下一次启动直接 duplicate key 报错。
-//
-// 做法：每次改写前把原文落到 journal 目录（os.tmpdir()/agent-purge-restore），
-// 进程正常退出 / 收到信号 / 下次启动时统一回滚。undo() 幂等。
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const JOURNAL_DIR = path.join(os.tmpdir(), "agent-purge-restore");
-const ENTRY = "restore.json";
-
-let installed = false;
-const live = new Set();
-
-function ensureDir() {
-	try {
-		fs.mkdirSync(JOURNAL_DIR, { recursive: true });
-	} catch {}
-}
-
-function entryPath(file) {
-	// 同一文件在 journal 里只应有一条；用稳定 hash 命名，避免路径分隔符
-	const h = Buffer.from(file.toLowerCase()).toString("base64url").slice(0, 40);
-	return path.join(JOURNAL_DIR, h + ".json");
-}
-
-/**
- * 原子写 + 记录 journal。返回幂等的 undo()。
- * @param {string} file 绝对路径
- * @param {string} content 新内容
- */
-export function swapFile(file, content) {
-	ensureDir();
-	const exists = fs.existsSync(file);
-	const backup = exists ? fs.readFileSync(file, "utf8") : null;
-	const record = { file, exists, backup, at: new Date().toISOString() };
-	fs.writeFileSync(entryPath(file), JSON.stringify(record), "utf8");
-
-	const tmp = file + ".purge-tmp";
-	fs.writeFileSync(tmp, content, "utf8");
-	fs.renameSync(tmp, file);
-
-	let done = false;
-	const undo = () => {
-		if (done) return;
-		done = true;
-		live.delete(undo);
-		try {
-			if (record.exists) fs.writeFileSync(file, record.backup, "utf8");
-			else if (fs.existsSync(file)) fs.unlinkSync(file);
-		} catch {}
-		try {
-			fs.rmSync(entryPath(file), { force: true });
-		} catch {}
-	};
-	live.add(undo);
-	return undo;
-}
-
-/** 回滚所有 journal 里残留的条目（上次进程没来得及 undo）。返回恢复的文件数。 */
-export function recover() {
-	ensureDir();
-	let n = 0;
-	for (const name of fs.readdirSync(JOURNAL_DIR)) {
-		if (!name.endsWith(".json")) continue;
-		const p = path.join(JOURNAL_DIR, name);
-		try {
-			const r = JSON.parse(fs.readFileSync(p, "utf8"));
-			if (r.exists) fs.writeFileSync(r.file, r.backup, "utf8");
-			else if (fs.existsSync(r.file)) fs.unlinkSync(r.file);
-			fs.rmSync(p, { force: true });
-			n++;
-		} catch {}
-	}
-	return n;
-}
-
-/** 安装信号钩子：SIGINT/SIGTERM/SIGHUP/uncaughtException/exit 都回滚。幂等。 */
-export function installCrashHandlers() {
-	if (installed) return;
-	installed = true;
-	const flush = (code) => {
-		for (const u of [...live]) {
-			try {
-				u();
-			} catch {}
-		}
-		recover();
-		process.exit(code);
-	};
-	for (const sig of ["SIGINT", "SIGTERM", "SIGHUP", "SIGBREAK"]) {
-		try {
-			process.on(sig, () => flush(sig === "SIGINT" ? 130 : 143));
-		} catch {}
-	}
-	process.on("uncaughtException", (e) => {
-		console.error("[restore] 未捕获异常，回滚配置：", e?.message ?? e);
-		flush(1);
-	});
-	process.on("exit", () => {
-		for (const u of [...live]) {
-			try {
-				u();
-			} catch {}
-		}
-	});
-}
-
-export const journalDir = JOURNAL_DIR;
+// 临时文件交换：独占 journal + 所有者存活检查 + 写后指纹。
+// 冲突或恢复失败保留 journal，不覆盖用户在测试期间的修改。
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createHash, randomUUID } from "node:crypto";
+
+const JOURNAL_DIR = process.env.AGENT_PURGE_JOURNAL_DIR || path.join(os.tmpdir(), "agent-purge-restore");
+let installed = false;
+const live = new Set();
+const hash = (bytes) => bytes === null ? null : createHash("sha256").update(bytes).digest("hex");
+const read = (file) => { try { return fs.readFileSync(file); } catch (e) { if (e.code === "ENOENT") return null; throw e; } };
+function canonical(file) {
+	const full = path.resolve(file);
+	// 同一目录的符号链接也应指向同一把锁；不跟随不存在的目标。
+	try { return fs.realpathSync(full); } catch (e) {
+		if (e.code !== "ENOENT") throw e;
+		return path.join(fs.realpathSync(path.dirname(full)), path.basename(full));
+	}
+}
+function entryPath(file) {
+	const key = process.platform === "win32" ? file.toLowerCase() : file;
+	return path.join(JOURNAL_DIR, createHash("sha256").update(key).digest("hex") + ".json");
+}
+function alive(pid) {
+	if (!Number.isInteger(pid) || pid <= 0) return true;
+	try { process.kill(pid, 0); return true; } catch (e) { return e.code !== "ESRCH"; }
+}
+function atomicWrite(file, bytes, mode) {
+	const tmp = file + ".purge-" + randomUUID() + ".tmp";
+	try {
+		fs.writeFileSync(tmp, bytes, { flag: "wx", mode: mode ?? 0o600 });
+		fs.renameSync(tmp, file);
+	} finally { fs.rmSync(tmp, { force: true }); }
+}
+function restore(record, journal) {
+	let currentRecord;
+	try {
+		const source = fs.readFileSync(journal, "utf8");
+		currentRecord = JSON.parse(source);
+	} catch (error) {
+		throw new Error(`无法读取恢复凭据，文件未改动：${journal}`, { cause: error });
+	}
+	if (currentRecord.operation !== record.operation) throw new Error(`恢复所有权已改变：${record.file}`);
+	const current = hash(read(record.file));
+	if (current !== record.beforeHash && current !== record.afterHash) {
+		throw new Error(`文件在交换后被修改，保留 journal 等待处理：${record.file}`);
+	}
+	if (current !== record.beforeHash) {
+		if (record.backup === null) fs.rmSync(record.file, { force: true });
+		else atomicWrite(record.file, Buffer.from(record.backup, "base64"), record.mode);
+	}
+	fs.rmSync(journal);
+}
+
+/** 独占交换；返回可重试、幂等的 undo。恢复失败会抛错且保留原始备份。 */
+export function swapFile(file, content) {
+	file = canonical(file);
+	fs.mkdirSync(JOURNAL_DIR, { recursive: true });
+	const journal = entryPath(file);
+	let fd;
+	try { fd = fs.openSync(journal, "wx", 0o600); }
+	catch (e) {
+		if (e.code === "EEXIST") throw new Error(`文件存在未结束的交换，请先处理 journal：${file}`);
+		throw e;
+	}
+	let record;
+	try {
+		const backup = read(file);
+		const next = Buffer.isBuffer(content) ? content : Buffer.from(content, "utf8");
+		record = { version: 2, file, pid: process.pid, operation: randomUUID(), at: new Date().toISOString(),
+			backup: backup === null ? null : backup.toString("base64"), beforeHash: hash(backup), afterHash: hash(next),
+			mode: backup === null ? undefined : fs.statSync(file).mode & 0o777 };
+		fs.writeFileSync(fd, JSON.stringify(record));
+		fs.fsyncSync(fd);
+		fs.closeSync(fd); fd = undefined;
+		atomicWrite(file, next, record.mode);
+	} catch (e) {
+		if (fd !== undefined) fs.closeSync(fd);
+		if (record) { try { restore(record, journal); } catch {} }
+		else fs.rmSync(journal, { force: true });
+		throw e;
+	}
+	let done = false;
+	const undo = () => {
+		if (done) return;
+		restore(record, journal);
+		done = true;
+		live.delete(undo);
+	};
+	live.add(undo);
+	return undo;
+}
+
+/** 只恢复已死亡的 v2 所有者；旧格式无法证明所有权，保留并报告。 */
+export function recover({ onWarning = (message) => console.error(`[restore] ${message}`) } = {}) {
+	fs.mkdirSync(JOURNAL_DIR, { recursive: true });
+	let n = 0;
+	for (const name of fs.readdirSync(JOURNAL_DIR)) {
+		if (!name.endsWith(".json")) continue;
+		const journal = path.join(JOURNAL_DIR, name);
+		try {
+			const record = JSON.parse(fs.readFileSync(journal, "utf8"));
+			if (record.version !== 2 || !record.operation || !path.isAbsolute(record.file || "")) {
+				onWarning(`旧版或不完整 journal，未自动覆盖文件：${journal}`); continue;
+			}
+			if (alive(record.pid)) continue;
+			restore(record, journal); n++;
+		} catch (e) { onWarning(`${journal}: ${e.message}`); }
+	}
+	return n;
+}
+
+export function installCrashHandlers() {
+	if (installed) return;
+	installed = true;
+	const flush = () => {
+		for (const undo of [...live]) {
+			try { undo(); } catch (e) { console.error(`[restore] ${e.message}`); }
+		}
+	};
+	for (const sig of ["SIGINT", "SIGTERM", "SIGHUP", "SIGBREAK"]) {
+		try { process.on(sig, () => { flush(); process.exit(sig === "SIGINT" ? 130 : 143); }); } catch {}
+	}
+	process.on("uncaughtException", (e) => {
+		console.error("[restore] 未捕获异常：", e?.stack ?? e);
+		flush(); process.exit(1);
+	});
+	process.on("exit", flush);
+}
+export const journalDir = JOURNAL_DIR;

package/lib/rewrite.mjs

@@ -0,0 +1,124 @@
+// 模式语义与生成插件共享实现；运行时只还原有来源记录的完整变换。
+import { activationRuntime } from "./activation.mjs";
+export function stripIdentity(text) {
+	const self = /^\s*(?:You are|You're|你是|您是|我(?:是|现在扮演|就是))/i;
+	const named = /(Claude|ChatGPT|GPT-?[45]|Gemini|Codex|Copilot|DeepSeek|Qwen|Kimi|GLM|Cursor|Windsurf|OpenCode|ZCode|CodeBuddy|Hermes|Grok|Antigravity|AI (?:assistant|model)|coding (?:assistant|agent)|语言模型|助手)/i;
+	return String(text ?? "").split(/\r?\n/).filter(line => !(self.test(line) && named.test(line))).join("\n").trim();
+}
+
+export function cleanManaged(text, bodies = []) {
+	let out = String(text ?? "").replace(/^# >>> agent-purge[^\S\r\n]*\r?\n[\s\S]*?^# <<< agent-purge[^\S\r\n]*(?:\r?\n|$)/gm, "");
+	for (const body of bodies) {
+		if (!body) continue;
+		// 只删除独立完整正文；共享前40字符的另一份人设/用户规则不匹配。
+		const literal = String(body).trim().replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+		out = out.replace(new RegExp("(^|\\n)" + literal + "(?=\\n|$)", "g"), "$1");
+	}
+	return out.trim();
+}
+
+export function rewriteTexts(hostTexts, persona, mode) {
+	if (mode === "off" || !persona) return hostTexts;
+	const host = (Array.isArray(hostTexts) ? hostTexts : []).map(t => String(t ?? "")).filter(t => t.trim());
+	if (mode === "strict") return [persona];
+	if (mode === "append") return [...host, persona];
+	return [persona, ...host.map(stripIdentity).filter(Boolean)];
+}
+
+export function rewriteSections(sections, persona, mode, name = "agent-purge") {
+	const list = Array.isArray(sections) ? sections : [];
+	if (mode === "off" || !persona) return list;
+	if (mode === "strict") return [{ name, text: persona, interpolate: false }];
+	if (mode === "append") return [...list, { name, text: persona, interpolate: false }];
+	const kept = list.map(s => typeof s?.text === "string" ? { ...s, text: stripIdentity(s.text) } : s)
+		.filter(s => typeof s?.text !== "string" || s.text.trim());
+	return [{ name, text: persona, interpolate: false }, ...kept];
+}
+
+/** 有界完整变换记录：无凭据或歧义时原样保留，不按标签/人设文本猜测删除。 */
+export function createProvenance(limit = 64) {
+	const values = new Map();
+	const objects = new WeakMap();
+	const key = value => JSON.stringify(value);
+	function remember(before, after, aliases = []) {
+		const beforeKey = key(before), afterKey = key(after);
+		if (beforeKey === afterKey) return after;
+		const entry = { before: structuredClone(before), beforeKey, afterKey };
+		if (after && typeof after === "object") objects.set(after, entry);
+		for (const candidate of [after, ...aliases]) {
+			const id = key(candidate), previous = values.get(id);
+			values.set(id, previous && previous.beforeKey !== beforeKey ? { ambiguous: true } : previous?.ambiguous ? previous : entry);
+		}
+		while (values.size > limit) values.delete(values.keys().next().value);
+		return after;
+	}
+	function restore(value) {
+		const id = key(value);
+		const direct = value && typeof value === "object" ? objects.get(value) : null;
+		const entry = direct?.afterKey === id ? direct : values.get(id);
+		return entry && !entry.ambiguous ? structuredClone(entry.before) : value;
+	}
+	return { remember, restore };
+}
+
+export function createTextRewriter() {
+	const provenance = createProvenance();
+	return (texts, persona, mode) => {
+		const host = provenance.restore(texts);
+		if (mode === "off" || !persona) return host;
+		const next = rewriteTexts(host, persona, mode);
+		return provenance.remember(host, next, [[next.join("\n\n")]]);
+	};
+}
+
+export function createSectionRewriter() {
+	const provenance = createProvenance();
+	return (sections, persona, mode, name = "agent-purge") => {
+		const host = provenance.restore(sections);
+		if (mode === "off" || !persona) return host;
+		return provenance.remember(host, rewriteSections(host, persona, mode, name));
+	};
+}
+
+/** Anthropic-style content blocks: retain non-text blocks and cache metadata. */
+export function createContentRewriter() {
+	const provenance = createProvenance();
+	return (blocks, persona, mode) => {
+		const host = provenance.restore(blocks);
+		if (mode === "off" || !persona || !Array.isArray(host)) return host;
+		let next;
+		if (mode === "strict") {
+			const text = host.find(b => b?.type === "text");
+			const own = { ...text, type: "text", text: persona };
+			next = [own, ...host.filter(b => b?.type !== "text")];
+		} else {
+			const kept = mode === "replace" ? host.map(b => typeof b?.text === "string" ? { ...b, text: stripIdentity(b.text) } : b) : host;
+			const own = { type: "text", text: persona };
+			next = mode === "append" ? [...kept, own] : [own, ...kept];
+		}
+		return provenance.remember(host, next);
+	};
+}
+
+export const rewriteRuntime = [stripIdentity, cleanManaged, rewriteTexts, rewriteSections, createProvenance, createTextRewriter, createSectionRewriter, createContentRewriter]
+	.map(fn => fn.toString()).join("\n") + `
+const apStrip = stripIdentity;
+const apRewrite = createTextRewriter();
+const apRewriteSections = createSectionRewriter();
+const apRewriteContent = createContentRewriter();
+`;
+
+export const resolveRuntime = activationRuntime;
+
+/** 覆盖指定的人设直接读 personas/<id>.md（剥掉 frontmatter）；读不到再回退嵌入的 active.md。 */
+export const personaBodyRuntime = `
+function resolvePersonaBody(personas, id, fallback) {
+  if (id && id !== "active" && /^[a-z0-9][a-z0-9_-]{0,63}$/i.test(id)) {
+    try {
+      const raw = readFileSync(personas + "/" + id + ".md", "utf8").replace(/^---\\r?\\n[\\s\\S]*?\\r?\\n---(?:\\r?\\n|$)/, "");
+      if (raw.trim()) return raw.trim();
+    } catch { return ""; }
+  }
+  return readFileSync(fallback, "utf8").trim();
+}
+`;

package/lib/root.mjs

@@ -0,0 +1,37 @@
+// 随包资源访问：源码态读磁盘，bun --compile 产物读内嵌表。
+//
+// 为什么不是「算一个 ROOT 再 join」：实测（bun 1.3.14, Windows）
+//   - `[dir]/[name].[ext]` 命名下根目录文件变成 `B:/~BUN/root/./matrix.json`，readFileSync 直接 ENOENT；
+//   - 拼接出来的 `B:/~BUN/root/matrix.json` 同样打不开；
+//   - bunfs 目录不支持 readdir。
+// 只有「原样用 import 拿到的路径」能读，所以编译态的每条路径都由 build 入口生成的表给出，
+// 键 = 仓库相对路径（posix 分隔）。源码态保持原来的 join(包根, 相对路径) 行为。
+import { readFileSync, readdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const FILES = globalThis.__AGENT_PURGE_FILES ?? null;
+
+export const ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
+
+/** 编译态：资源在 bunfs 里只读，任何「往包目录写」的逻辑都要绕开 */
+export const isCompiled = () => FILES !== null;
+
+/** 读一个随包资源（仓库相对路径，posix 分隔）：matrix.json / web/ui.html / lib/templates/... */
+export function readResource(rel) {
+	const hit = FILES?.[rel];
+	if (hit) return readFileSync(hit);
+	if (FILES) throw new Error(`exe 里没内嵌 ${rel}（scripts/build-exe.mjs 的 assets() 漏了它）`);
+	return readFileSync(join(ROOT, rel));
+}
+
+/** 列一个资源目录下的文件名（不含子目录）：编译态筛内嵌表，源码态真读目录 */
+export function listResources(prefix) {
+	const dir = prefix.endsWith("/") ? prefix : `${prefix}/`;
+	if (FILES) {
+		return Object.keys(FILES)
+			.filter((k) => k.startsWith(dir) && !k.slice(dir.length).includes("/"))
+			.map((k) => k.slice(dir.length));
+	}
+	return readdirSync(join(ROOT, dir));
+}