agent-purge 0.2.10 → 0.2.12

package/web/server.mjs

@@ -1,24 +1,31 @@
 // 零依赖 Web 服务：配置台。选默认 harness/mode、管理 persona、常驻安装、探测。
 // 刻意不做"运行"：交互式 harness 属于终端/桌面，Web 只负责选（见 ARCHITECTURE.md）。
-import { createServer } from "node:http";import { readFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { createServer } from "node:http";
+import { readFileSync, existsSync, rmSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { detect } from "../lib/detect.mjs";
 import { oneshots } from "../backends/index.mjs";
-import { createStore } from "../lib/personas.mjs";
-import { MODES, armedOf, dshProfilesOf, loadState, patchState, setArmed, setDefault, setPersona, setPiAuto, setOmpAuto, setDshProfile } from "../lib/state.mjs";
-import { install, status as persistStatus, uninstall } from "../lib/persist.mjs";
-import { plans, summary as armorSummary } from "../lib/armor.mjs";
-import { installShim, shimStatus, uninstallShim } from "../lib/shim.mjs";
-import { installSlash, refreshSlashes, slashStatus, uninstallSlash } from "../lib/slashes.mjs";
+import { createStore, isValidId } from "../lib/personas.mjs";
+import { MODES, ARMS, armedOf, dshProfilesOf, loadState, resolveFor, resolveActivation, setPiAuto, setOmpAuto, setDshProfile } from "../lib/state.mjs";
+import { withControlLock } from "../lib/control.mjs";
+import { status as persistStatus } from "../lib/persist.mjs";
+import { projectStatus, projectDirectories } from "../lib/project.mjs";
+import { plans } from "../lib/armor.mjs";
+import { shimStatus } from "../lib/shim.mjs";
+import { slashStatus } from "../lib/slashes.mjs";
 import { reconcileArmed } from "../lib/armed.mjs";
 import { capsFor } from "../lib/caps.mjs";
-import { ensureDataHome } from "../lib/home.mjs";
+import { dataHome, ensureDataHome } from "../lib/home.mjs";
 import { DSH_PROFILES } from "../lib/dsh.mjs";
+import { applyConfiguration, changeChannel, configureHarness, disableHarness } from "../lib/apply.mjs";
+import { ROOT, isCompiled, readResource } from "../lib/root.mjs";
+import { currentVersion } from "../lib/update.mjs";
+import { verificationEvidence } from "../lib/evidence.mjs";
 
-const ROOT = process.versions.bun ? dirname(process.execPath) : dirname(dirname(fileURLToPath(import.meta.url)));
 // 数据（state.json + personas/）在用户目录，不在安装目录
-const DATA = ensureDataHome(ROOT).home;
+const DATA = dataHome();
 // 运行期真正被改写的层（≠ bench 能测到的层）：每家只有它自己暴露的那一个写入点。
 // sys = 系统提示/配置文件/插件 splice；user = 只落在用户消息里（zcode 的 hook）。
 const LAYER = {
@@ -27,15 +34,25 @@ const LAYER = {
 	// zcode 只有文档说它会读 AGENTS.md，桌面版闭源、无法复核，层就不claim（UI 显示“—”+「文档」）
 	zcode: "",
 };
-const matrix = JSON.parse(readFileSync(join(ROOT, "matrix.json"), "utf8"));
-const store = createStore(DATA);
+const matrix = (() => {
+	try {
+		return JSON.parse(readResource("matrix.json").toString("utf8"));
+	} catch (error) {
+		throw new Error(`无法加载执行器矩阵 matrix.json：${error.message}`, { cause: error });
+	}
+})();
+let store = null;
+// 同一次实测会拉起真 harness 子进程：同一家同时只能跑一份。
+const verifying = new Set();
 
 export function serveWeb(port = 7788) {
+	ensureDataHome(isCompiled() ? null : ROOT);
+	store ??= createStore(DATA);
 	// handle 是 async：任何异常都在这里收口，否则请求会挂着不响应
 	const server = createServer((req, res) => {
 		handle(req, res).catch((e) => {
 			try {
-				send(res, 500, { error: `服务端错误: ${e.message}` });
+				send(res, e.statusCode ?? (/另一个配置操作|锁/.test(e.message) ? 409 : 500), { error: e.message });
 			} catch {}
 		});
 	});
@@ -50,11 +67,13 @@ export function serveWeb(port = 7788) {
 		process.exit(1);
 	});
 	server.listen(port, "127.0.0.1", () => {
-		console.log(`agent-purge web → http://127.0.0.1:${port}`);
+		console.log(`agent-purge web → http://127.0.0.1:${server.address().port}`);
 	});
+	return server;
 }
 
 async function handle(req, res) {
+	if (!localHost(req)) return send(res, 403, { error: "只接受本机 Host" });
 	const url = new URL(req.url, "http://127.0.0.1");
 	const p = url.pathname;
 
@@ -63,18 +82,119 @@ async function handle(req, res) {
 	if (isMutating(req.method) && !sameOrigin(req)) return send(res, 403, { error: "只接受本机同源请求" });
 
 	if (req.method === "GET" && (p === "/" || p === "/index.html")) return html(res);
+	const assets = { '/app.js': 'text/javascript', '/model.mjs': 'text/javascript', '/evidence.mjs': 'text/javascript', '/styles.css': 'text/css' };
+	if (req.method === "GET" && Object.hasOwn(assets, p)) {
+		res.writeHead(200, { 'content-type': `${assets[p]}; charset=utf-8`, 'cache-control': 'no-store', 'x-content-type-options': 'nosniff' });
+		return res.end(readResource(p === '/evidence.mjs' ? 'lib/evidence.mjs' : `web/${p.slice(1)}`));
+	}
+	// web/assets/ 下的真实品牌图标（png/jpg/webp/ico），固定白名单后缀 + 只认单层文件名，不走路径拼接。
+	if (req.method === "GET" && p.startsWith("/assets/")) {
+		const name = p.slice("/assets/".length);
+		const mime = { '.png': 'image/png', '.jpg': 'image/jpeg', '.webp': 'image/webp', '.ico': 'image/x-icon' };
+		const ext = name.slice(name.lastIndexOf('.'));
+		if (!name.includes('/') && !name.includes('..') && Object.hasOwn(mime, ext)) {
+			try {
+				// 图标会被换（官方图源改了/我改错了），一律 no-store：本地工具不值得为 24h 缓存换来“改了看不到”。
+				res.writeHead(200, { 'content-type': mime[ext], 'cache-control': 'no-store', 'x-content-type-options': 'nosniff' });
+				return res.end(readResource(`web/assets/${name}`));
+			} catch { /* 落到 404 */ }
+		}
+		return send(res, 404, { error: "not found" });
+	}
+	if (req.method === "GET" && p === "/api/verification") {
+		const file = join(DATA, 'verification', 'latest.json');
+		try {
+			if (!existsSync(file)) return send(res, 200, { report: null });
+			const report = JSON.parse(readFileSync(file, 'utf8'));
+			if (!report || !Array.isArray(report.results)) throw new Error('缺少 results 数组');
+			return send(res, 200, { report });
+		} catch (error) {
+			return send(res, 500, { error: `验证报告读取失败：${error.message}` });
+		}
+	}
 	if (req.method === "GET" && p === "/api/state") return send(res, 200, await state(url.searchParams.get("versions") === "1"));
 	if (req.method === "GET" && p === "/api/armor") return send(res, 200, armorState());
+	if (req.method === "POST" && p === "/api/apply") return send(res, 200, applyChanges(await body(req)));
+	if (req.method === "POST" && p === "/api/power") return send(res, 200, applyConfiguration(DATA, { enabled: booleanField(await body(req), "on") }));
+	if (req.method === "POST" && p === "/api/sync") { const payload = await body(req); return send(res, 200, applyConfiguration(DATA, { onlyFailed: booleanField(payload, "onlyFailed", false) })); }
 	if (req.method === "POST" && p === "/api/defaults") return send(res, 200, saveDefaults(await body(req)));
-	if (req.method === "POST" && p === "/api/pi-auto") return send(res, 200, { piAuto: setPiAuto(DATA, (await body(req)).on === true) });
-	if (req.method === "POST" && p === "/api/omp-auto") return send(res, 200, { ompAuto: setOmpAuto(DATA, (await body(req)).on === true) });
+	if (req.method === "POST" && p === "/api/pi-auto") return send(res, 200, { piAuto: setPiAuto(DATA, booleanField(await body(req), "on")) });
+	if (req.method === "POST" && p === "/api/omp-auto") return send(res, 200, { ompAuto: setOmpAuto(DATA, booleanField(await body(req), "on")) });
 	if (req.method === "POST" && p === "/api/dsh-profile") return send(res, 200, saveDshProfile(await body(req)));
 	if (req.method === "POST" && p === "/api/persona") return send(res, 200, savePersona(await body(req)));
+	if (req.method === "POST" && p === "/api/persona/import") return send(res, 200, await handleImportPersonas(await body(req)));
 	if (req.method === "DELETE" && p === "/api/persona") return send(res, 200, deletePersona(url.searchParams.get("id")));
+	if (req.method === "POST" && p === "/api/harness") return send(res, 200, saveHarnessConfig(await body(req)));
 	if (req.method === "POST" && p === "/api/use") return send(res, 200, usePersona(await body(req)));
 	if (req.method === "POST" && p === "/api/install") return send(res, 200, applyInstall(await body(req)));
 	if (req.method === "POST" && p === "/api/arm") return send(res, 200, applyArm(await body(req)));
 	if (req.method === "POST" && p === "/api/arm-all") return send(res, 200, applyArmAll(await body(req)));
+	if (req.method === "POST" && p === "/api/clean") {
+		await body(req);
+		const { clean } = await import("../lib/clean.mjs");
+		const resClean = clean(DATA, { all: false, dryRun: false });
+		return send(res, 200, resClean);
+	}
+	if (req.method === "GET" && p === "/api/update") {
+		const { checkForUpdate, canReplaceSelf } = await import("../lib/update.mjs");
+		const force = url.searchParams.get("force") === "1";
+		const cacheFile = join(DATA, "update-cache.json");
+		const info = await checkForUpdate({ force, cacheFile });
+		return send(res, 200, {
+			...info,
+			isExe: canReplaceSelf(),
+			execPath: process.execPath,
+		});
+	}
+	if (req.method === "POST" && p === "/api/update-upgrade") {
+		await body(req);
+		const { checkForUpdate, downloadFile, replaceSelfExecutable, canReplaceSelf } = await import("../lib/update.mjs");
+		const info = await checkForUpdate({ force: true });
+		if (!info.ok || !info.hasUpdate) {
+			return send(res, 400, { error: info.error || "暂无可用的新版本" });
+		}
+		const isExe = canReplaceSelf();
+		const targetExe = info.assets?.find((a) => a.name.toLowerCase() === "agent-purge.exe");
+		const targetSetup = info.assets?.find((a) => a.name.toLowerCase().endsWith("-setup.exe"));
+
+		const { tmpdir } = await import("node:os");
+		if (isExe && targetExe) {
+			const tempFile = join(tmpdir(), `agent-purge-download-${randomUUID()}.exe`);
+			try {
+				await downloadFile(targetExe.downloadUrl, tempFile, undefined, { expectedSize: targetExe.size, digest: targetExe.digest });
+				replaceSelfExecutable(tempFile);
+			} finally { rmSync(tempFile, { force: true }); }
+			return send(res, 200, { ok: true, type: "exe", version: info.latest, message: "便携版 exe 已就地升级成功！下次启动即为新版本。" });
+		} else if (process.platform === "win32" && targetSetup) {
+			const tempSetup = join(tmpdir(), `agent-purge-setup-${randomUUID()}.exe`);
+			await downloadFile(targetSetup.downloadUrl, tempSetup, undefined, { expectedSize: targetSetup.size, digest: targetSetup.digest });
+			const { spawn } = await import("node:child_process");
+			spawn(tempSetup, [], { detached: true, stdio: "ignore" }).unref();
+			return send(res, 200, { ok: true, type: "setup", version: info.latest, message: "安装程序已启动，请按界面向导完成安装。" });
+		}
+		return send(res, 400, { error: "未在 Release 中找到适配 Windows 的升级安装文件，请前往页面手动下载。" });
+	}
+	if (req.method === "POST" && p === "/api/verify") {
+		const { harness } = await body(req);
+		if (!Object.hasOwn(matrix.harnesses ?? {}, harness)) return send(res, 400, { error: `未知 harness：${harness}` });
+		if (verifying.has(harness)) return send(res, 409, { error: `${harness} 正在实测，等它跑完` });
+		verifying.add(harness);
+		const cap = await import("../lib/capture.mjs");
+		try {
+			const mode = resolveActivation(loadState(DATA).state, harness, { launch: true }).mode;
+			const report = await cap.verifyHarnesses([harness], { root: DATA, mode, timeout: 60000 });
+			const r = report.harnesses[0] ?? {};
+			const roles = [...new Set((r.modes ?? []).flatMap(m => (m.requests ?? []).filter(q => q.kind === "main").flatMap(q => q.roles ?? [])))];
+			return send(res, 200, { harness, status: r.status, reason: r.reason ?? null, version: r.version ?? "",
+				scope: r.scope, assessment: verificationEvidence(r), roles, processFile: r.processFile,
+				injected: r.modes?.[0]?.injected ?? null, chars: r.modes?.[0]?.chars ?? 0 });
+		} catch (error) {
+			return send(res, 500, { error: `实测失败：${error.message}` });
+		} finally {
+			verifying.delete(harness);
+			cap.cleanupRoots();
+		}
+	}
 	send(res, 404, { error: "not found" });
 }
 
@@ -108,17 +228,24 @@ async function state(withVersions) {
 	const { state: st } = loadState(DATA);
 	const shims = shimStatus();
 	const slashes = slashStatus(DATA);
+	const projects = new Map(projectStatus(process.cwd(), DATA).map(r => [r.id, r]));
 	const harnesses = Object.entries(matrix.harnesses).map(([id, m]) => {
 		const d = found[id] ?? {};
 		const inst = persisted.find((x) => x.name === id);
 		const armed = armedOf(st, id);
+		const eff = resolveFor(st, id);
+		const caps = capsFor(id, { bin: d.bin ?? null });
+		const activation = resolveActivation(st, id, { channel: armed.includes("install") ? "install" : "slash" });
+		let override = "no";
+		if (m.override === true) override = "yes";
+		else if (m.override) override = String(m.override);
 		return {
 			id,
 			class: m.class,
-			override: m.override === true ? "yes" : m.override ? String(m.override) : "no",
+			override,
 			inject: Boolean(m.inject),
 			hotSwitch: Boolean(m.hotSwitch),
-			chars: m.defaultSystemChars != null ? `${m.defaultSystemChars} → ${m.purgedSystemChars ?? "?"}` : null,
+			chars: m.defaultSystemChars == null ? null : `${m.defaultSystemChars} → ${m.purgedSystemChars ?? "?"}`,
 			version: d.version ?? m.measuredVersion ?? null,
 			residue: m.residue ?? null,
 			reason: m.reason ?? null,
@@ -133,31 +260,53 @@ async function state(withVersions) {
 			installed: Boolean(inst?.installed),
 			persistFile: inst?.file ?? null,
 			armed,
+			// 这家实际生效的人设/模式 + 来源（override 还是跟随全局）
+			persona: eff.persona,
+			mode: eff.mode,
+			personaFrom: eff.personaFrom,
+			modeFrom: eff.modeFrom,
+			// 「本项目」按当前目录的选择显示；暂停撤块后仍可取消选择
+			projectOn: Boolean(projects.get(id)?.selected || projects.get(id)?.on),
+			projectFile: caps.project?.file ?? null,
+			projectPath: projects.get(id)?.file ?? null,
+			projectDirs: projectDirectories(DATA, id),
+			activation,
+			auto: id === "pi" ? st.piAuto === true : id === "omp" ? st.ompAuto === true : null,
+			profiles: id === "dsh" ? dshProfilesOf(st) ?? DSH_PROFILES : undefined,
 			shim: Boolean(shims.find((s) => s.id === id)?.installed),
 			slash: slashes.find((s) => s.id === id) ?? null,
 			// 每条通道「能不能用 + 为什么不能用」由 lib/caps.mjs 统一裁决：
 			// UI 只负责画，不再自己猜（以前 shim 硬编码可点，zcode 点了必然无效）
-			caps: capsFor(id, { bin: d.bin ?? null }),
+			caps,
 		};
 	});
 	const defaults = defaultsOf(st, harnesses);
 	return {
+		version: currentVersion(),
 		harnesses,
 		reconciled,
 		personas: store.list().map((x) => ({ id: x.id, meta: x.meta, body: x.body, chars: x.body.trim().length })),
 		active: store.activeId(),
 		persona: st.persona,
+		overrides: st.overrides ?? {},
 		defaults,
 		// false = state.json 里还没有默认（defaults 只是 UI 的建议值，裸敲 agent-purge 仍会提示“未设置”）
 		defaultsSet: Boolean(st.default?.harness),
 		armed: st.armed ?? {},
+		paused: st.default?.mode === "off",
+		prevMode: st.prevMode ?? 'replace',
+		pausedInstalls: st.pausedInstalls ?? [],
+		lastApply: st.lastApply ?? null,
 		// dsh 的三个 profile（desktop/web/headless）；null 就是全开
 		dshProfiles: dshProfilesOf(st) ?? DSH_PROFILES,
 		dshAll: DSH_PROFILES,
+		// /purge off|mode 写进来的 profile 级运行时状态（暂停/覆盖模式），UI 要能看到，否则
+		// 「装了常驻却没生效」无从解释
+		dshRuntime: st.dshRuntime ?? {},
 		modes: MODES,
 		piAuto: st.piAuto === true,
 		ompAuto: st.ompAuto === true,
-		shimDir: shimStatus()[0]?.dir ?? null,
+		shimDir: shims[0]?.dir ?? null,
 		slashes: slashes,
 	};
 }
@@ -178,34 +327,36 @@ function defaultsOf(st, harnesses) {
 	return { harness: pick?.id ?? null, mode };
 }
 
-function saveDefaults(payload) {
-	const { harness, mode } = payload;
-	const spec = matrix.harnesses[harness];
-	if (!spec) return { error: `未知 harness: ${harness}` };
-	if (spec.class === "unsupported") return { error: `${harness} 做不到：${spec.reason}` };
-	if (mode && !MODES.includes(mode)) return { error: `mode 只能是 ${MODES.join(" / ")}` };
-	try {
-		return { ok: true, defaults: setDefault(DATA, { harness, mode: mode ?? "replace" }) };
-	} catch (e) {
-		return { error: e.message };
+function applyChanges(payload) {
+	for (const key of Object.keys(payload)) if (!["harness", "persona", "mode", "resumeMode", "enabled"].includes(key)) throw httpError(400, `未知配置字段: ${key}`);
+	if (payload.harness !== undefined && payload.harness !== null) {
+		knownHarness(payload.harness);
+		if (matrix.harnesses[payload.harness].class === "unsupported") throw httpError(400, "默认执行器未开放启动入口");
 	}
+	if (payload.persona !== undefined && (typeof payload.persona !== "string" || !store.read(payload.persona))) throw httpError(400, "人设不存在或标识无效");
+	if (payload.mode !== undefined && !MODES.includes(payload.mode)) throw httpError(400, "模式无效");
+	if (payload.resumeMode !== undefined && !["strict", "replace", "append"].includes(payload.resumeMode)) throw httpError(400, "恢复模式无效");
+	if (payload.enabled !== undefined) booleanField(payload, "enabled");
+	return applyConfiguration(DATA, payload);
+}
+function saveDefaults(payload) {
+	const report = applyChanges(payload);
+	return { ...report, defaults: loadState(DATA).state.default };
 }
 
 function saveDshProfile(payload) {
-	const profile = String(payload.profile || "").trim();
-	if (!DSH_PROFILES.includes(profile)) return { error: `未知 profile: ${profile}（${DSH_PROFILES.join(" / ")}）` };
-	try {
-		return { ok: true, dshProfiles: setDshProfile(DATA, profile, payload.on === true, DSH_PROFILES) };
-	} catch (e) {
-		return { error: e.message };
-	}
+	const profile = payload.profile;
+	if (!DSH_PROFILES.includes(profile)) throw httpError(400, `未知 profile: ${profile}`);
+	return { ok: true, dshProfiles: setDshProfile(DATA, profile, booleanField(payload, "on"), DSH_PROFILES) };
 }
 
 function savePersona(payload) {
-	const id = String(payload.id || "").trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-");
-	if (!id) return { error: "id 不能为空（小写字母/数字/-/_）" };
-	if (!payload.body?.trim()) return { error: "正文不能为空" };
-	try {
+	const id = payload.id;
+	if (typeof id !== "string" || !isValidId(id) || id !== id.trim()) throw httpError(400, "人设标识无效");
+	if (typeof payload.body !== "string" || !payload.body.trim()) throw httpError(400, "正文应为非空文本");
+	if (payload.meta !== undefined && !plainObject(payload.meta)) throw httpError(400, "meta 应为对象");
+	if (payload.apply !== undefined) booleanField(payload, "apply");
+	return withControlLock(DATA, () => {
 		// 只覆盖表单带上来的键，其余 frontmatter（harness / order / description...）原样保留：
 		// 旧实现直接拿表单三个字段重写文件，点一次保存就把手写的键全吃掉
 		const meta = { ...(store.read(id)?.meta ?? {}) };
@@ -231,160 +382,142 @@ function savePersona(payload) {
 			if (list.length) meta.model = list;
 			else delete meta.model;
 		}
+		const current = store.activeId() === id;
+		const referenced = Object.values(loadState(DATA).state.overrides ?? {}).some(value => value?.persona === id);
 		const saved = store.save(id, { meta: { ...meta, id }, body: payload.body });
-		return { ok: true, persona: { id: saved.id, meta: saved.meta, body: saved.body } };
-	} catch (e) {
-		return { error: e.message };
-	}
+		const applied = current || payload.apply === true ? applyConfiguration(DATA, { persona: id }) : referenced ? applyConfiguration(DATA) : null;
+		return { ok: applied?.ok ?? true, applied, persona: { id: saved.id, meta: saved.meta, body: saved.body } };
+	});
 }
 
 function deletePersona(id) {
-	if (!id) return { error: "缺少 id" };
-	if (store.list().length <= 1) return { error: "至少保留一个 persona" };
-	if (!store.read(id)) return { error: "找不到这个 persona" };
-	if (!store.remove(id)) return { error: "非法 persona id" };
-	return { ok: true, active: store.activeId() };
+	return withControlLock(DATA, () => {
+		if (typeof id !== "string" || !isValidId(id)) throw httpError(400, "人设标识无效");
+		if (!store.read(id)) throw httpError(400, "找不到这个人设");
+		if (store.list().length <= 1) throw httpError(409, "至少保留一个人设");
+		const references = Object.entries(loadState(DATA).state.overrides ?? {}).filter(([, value]) => value?.persona === id).map(([harness]) => harness);
+		if (references.length) throw httpError(409, `人设仍被引用：${references.join("、")}，请先调整分家选择`);
+		const current = store.activeId() === id;
+		if (!store.remove(id)) throw httpError(400, "人设标识无效");
+		const applied = current ? applyConfiguration(DATA, { persona: store.activeId() }) : null;
+		return { ok: applied?.ok ?? true, active: store.activeId(), applied };
+	});
 }
 
 function usePersona(payload) {
-	if (!payload.id) return { error: "缺少 id" };
+	return { ...applyChanges({ persona: payload.id ?? "" }), active: store.activeId() };
+}
+
+async function handleImportPersonas(payload) {
+	const source = String(payload?.source || "").trim();
+	if (!source) throw httpError(400, "导入源不能为空（请提供 GitHub 仓库如 ZiChuanLan/some-magic 或本地目录）");
+	const overwrite = payload?.overwrite !== false;
+	const { importPersonas } = await import("../lib/persona-import.mjs");
 	try {
-		store.setActive(payload.id);
-		// 两个指针必须一起写，否则 UI 选的“当前人设”和 `agent-purge` 实际用的不是同一个
-		setPersona(DATA, payload.id);
-		const { state: st } = loadState(DATA);
-		const slashTargets = Object.entries(st.armed ?? {})
-			.filter(([, a]) => a.includes("slash"))
-			.map(([k]) => k);
-		const refreshed = refreshSlashes(DATA, slashTargets, { personaId: payload.id, personaBody: store.read(payload.id).body.trim() });
-		return { ok: true, active: payload.id, refreshed };
+		const result = await importPersonas(source, DATA, { overwrite });
+		let applied = null;
+		if (payload?.activateId && store.read(payload.activateId)) {
+			applied = applyConfiguration(DATA, { persona: payload.activateId });
+		}
+		return {
+			ok: true,
+			result,
+			personas: store.list().map((x) => ({ id: x.id, meta: x.meta, body: x.body, chars: x.body.trim().length })),
+			persona: store.activeId(),
+			applied,
+		};
 	} catch (e) {
-		return { error: e.message };
+		throw httpError(400, `拉取人设失败: ${e.message}`);
 	}
 }
 
-/** 全局总开关：所有 harness × 选定通道一次折腾完（= `agent-purge 注册 --all` / `disarm --all`）*/
-function applyArmAll(payload) {
-	if (!payload.action) return { error: "缺少 action" };
-	const { action } = payload;
-	const channel = payload.channel ?? "all";
-	const verb = verbOf(action);
-
-	// 全局总闸 = 电源，不只是注册表：撤的时候把 default.mode 置 off（记下 prevMode），
-	// 否则 `agent-purge <h>` 这条入口永远注入 —— 用户实测“关了也能直接接管”就出在这。
-	// 开的时候把上次的 mode 还回去。
-	const { state: cur } = loadState(DATA);
-	const m = cur.default?.mode ?? "off";
-	if (verb === "off" && m !== "off" && cur.default?.harness) {
-		setDefault(DATA, { harness: cur.default.harness, mode: "off" });
-		patchState(DATA, { prevMode: m });
-	}
-	if (verb === "on" && m === "off" && cur.default?.harness) {
-		const back = MODES.includes(cur.prevMode) && cur.prevMode !== "off" ? cur.prevMode : "replace";
-		setDefault(DATA, { harness: cur.default.harness, mode: back });
+// 按执行器覆盖人设/模式：值传 null / "" / "follow" = 恢复跟随全局。
+function saveHarnessConfig(payload) {
+	const id = knownHarness(payload.harness);
+	const patch = {};
+	for (const key of Object.keys(payload)) if (!["harness", "persona", "mode"].includes(key)) throw httpError(400, `未知分家字段: ${key}`);
+	for (const key of ["persona", "mode"]) {
+		if (!Object.hasOwn(payload, key)) continue;
+		const value = payload[key];
+		if (value !== null && typeof value !== "string") throw httpError(400, `${key} 应为文本或 null`);
+		patch[key] = value === null || value === "" || value === "follow" ? null : value;
 	}
-
-	const perHarness = [];
-	const failed = [];
-	for (const [h, spec] of Object.entries(matrix.harnesses)) {
-		if (spec.class === "unsupported") {
-			failed.push(`${h}: 做不到（${spec.reason}）`);
-			continue;
-		}
-		const r = applyArm({ harness: h, channel, action: verb, persona: payload.persona });
-		if (r.error) failed.push(`${h}: ${r.error}`);
-		else perHarness.push({ harness: h, done: (r.done ?? []).map((d) => d.channel), skipped: r.skipped ?? [] });
-	}
-	if (!perHarness.length) return { error: failed.join("；") || "没有可注册的 harness" };
-	const after = loadState(DATA).state.default;
-	return { ok: true, action: verb, channel, mode: after?.mode ?? null, harnesses: perHarness, failed };
+	if (!Object.keys(patch).length) throw httpError(400, "缺少分家配置字段");
+	if (patch.persona && !store.read(patch.persona)) throw httpError(400, "人设不存在");
+	if (patch.mode && !MODES.includes(patch.mode)) throw httpError(400, "模式无效");
+	const applied = configureHarness(DATA, id, patch);
+	return { ok: applied.ok, applied, overrides: loadState(DATA).state.overrides ?? {}, effective: applied.effective };
 }
 
+// 兼容旧客户端的全局开关：只暂停/恢复原范围，不再一键全量注册。
+function applyArmAll(payload) {
+	return applyConfiguration(DATA, { enabled: verbOf(payload.action) === "on" });
+}
 function applyInstall(payload) {
-	const { harness, action } = payload;
-	if (action === "uninstall") {
-		const r = uninstall(harness);
-		setArmed(DATA, harness, "install", false);
-		return { ok: true, result: r };
-	}
-	// 装谁就把谁设为 active：active.md 与 install 指向始终是同一份正文
-	const wanted = payload.persona ?? store.activeId();
-	if (!store.read(wanted)) return { error: "没有可用 persona" };
-	store.setActive(wanted);
-	const r = install(harness, { root: DATA, active: store.refreshActive() });
-	if (r.error) return { error: r.error };
-	setArmed(DATA, harness, "install", true);
-	return { ok: true, result: r };
+	return changeChannel(DATA, { harness: knownHarness(payload.harness), channel: "install", enabled: verbOf(payload.action) === "on" });
 }
-
-/** UI 传 install/uninstall、CLI 传 on/off —— 统一成 on/off，否则 uninstall 会被当成安装 */
 const VERB_OFF = new Set(["off", "uninstall", "remove", "stop", "false", false, 0]);
+const VERB_ON = new Set(["on", "install", "add", "start", "true", true, 1]);
 function verbOf(action) {
-	return VERB_OFF.has(action) ? "off" : "on";
+	if (VERB_OFF.has(action)) return "off";
+	if (VERB_ON.has(action)) return "on";
+	throw httpError(400, "action 应明确指定 on 或 off");
 }
-
-/** 裸命令接管（shim）、/purge（slash）、常驻（install）：Web 上一个开关全部搞定 */
 function applyArm(payload) {
-	if (!payload.action) return { error: "缺少 action" };
-	const { harness, channel, action } = payload;
-	const id = payload.persona ?? store.activeId();
-	if (!store.read(id)) return { error: "没有可用 persona" };
-	const verb = verbOf(action);
-	const channels = !channel || channel === "all" ? ["install", "shim", "slash"] : [channel];
-	const done = [];
-	const skipped = [];
-	for (const ch of channels) {
-		const r = armChannel(harness, ch, verb, id);
-		if (r.error) skipped.push(`${ch}: ${r.error}`);
-		else done.push({ channel: ch, ...r });
-	}
-	if (!done.length) return { error: skipped.join("；") || "没有可用通道" };
-	return { ok: true, harness, action: verb, done, skipped };
-}
-
-function armChannel(harness, channel, verb, id) {
-	// 开之前先问能力表：这条通道在这家身上本来就无效的，不写任何文件、直接说明原因
-	if (verb === "on") {
-		const cap = capsFor(harness)[channel];
-		if (cap && !cap.ok) return { error: cap.why };
-	}
-	if (channel === "install") {
-		const r = verb === "off" ? applyInstall({ harness, action: "uninstall" }) : applyInstall({ harness, action: "install", persona: id });
-		return r.error ? { error: r.error } : (r.result ?? { ok: true });
-	}
-	if (channel === "shim") {
-		if (verb === "off") {
-			const r = uninstallShim(DATA, harness);
-			if (r.error) return { error: r.error };
-			setArmed(DATA, harness, "shim", false);
-			return { removed: r.removed };
-		}
-		const r = installShim(DATA, harness);
-		if (r.error) return { error: r.error };
-		setArmed(DATA, harness, "shim", true);
-		return { file: r.file, real: r.real };
-	}
-	if (channel === "slash") {
-		if (verb === "off") {
-			const r = uninstallSlash(harness, DATA);
-			if (r.error) return { error: r.error };
-			setArmed(DATA, harness, "slash", false);
-			return { removed: r.removed };
+	knownHarness(payload.harness);
+	if (payload.channel !== undefined && ![...ARMS, "auto", "all"].includes(payload.channel)) throw httpError(400, "通道无效");
+	const on = verbOf(payload.action) === "on";
+	return withControlLock(DATA, () => {
+	// auto：开关式语义。开 = 挑这个执行器最省心的可用通道；关 = 只撤它真正装着的那几条。
+	if (payload.channel === "auto") {
+		const { state: st } = loadState(DATA);
+		const current = st.armed?.[payload.harness] ?? [];
+		if (on) {
+			const caps = capsFor(payload.harness, { bin: detect()[payload.harness]?.bin ?? null });
+			const pick = ["install", "slash", "shim"].find(channel => caps[channel]?.ok);
+			if (!pick) return { error: "这个执行器暂时没有可用的接管方式，展开细节看原因。" };
+			// 已经是这个通道就什么都不做，开关是幂等的
+			if (current.includes(pick)) return { ok: true, results: [], channel: pick, done: [], skipped: [] };
+			const result = changeChannel(DATA, { harness: payload.harness, channel: pick, enabled: true });
+			return { ok: result.ok, results: [result], channel: pick, done: result.ok ? [result] : [], skipped: result.ok ? [] : [result.error] };
 		}
-		const r = installSlash(harness, DATA, { personaId: id, personaBody: store.read(id).body.trim() });
-		if (r.error) return { error: r.error };
-		setArmed(DATA, harness, "slash", true);
-		return { file: r.file, layer: r.layer };
+		const result = disableHarness(DATA, payload.harness);
+		return { ...result, channel: null, done: result.results.filter(r => r.ok), skipped: result.results.filter(r => !r.ok).map(r => r.error) };
 	}
-	return { error: `未知通道: ${channel}` };
+	const channels = !payload.channel || payload.channel === "all" ? ["install", "shim", "slash"] : [payload.channel];
+	const results = channels.map(channel => changeChannel(DATA, { harness: payload.harness, channel, enabled: on, ...(channel === "project" ? { dir: process.cwd() } : {}) }));
+	return { ok: results.every(r => r.ok), results, done: results.filter(r => r.ok), skipped: results.filter(r => !r.ok).map(r => r.error) };
+	});
 }
 
-const send = (res, code, obj) =>
-	res.writeHead(code, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" }).end(JSON.stringify(obj));
+const send = (res, code, obj) => {
+	if (res.destroyed || res.writableEnded) return;
+	res.writeHead(code === 200 && obj?.error ? 400 : code, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store", "x-content-type-options": "nosniff" }).end(JSON.stringify(obj));
+};
+const plainObject = value => value !== null && typeof value === "object" && !Array.isArray(value);
+const httpError = (statusCode, message) => Object.assign(new Error(message), { statusCode });
+function booleanField(payload, key, fallback) {
+	if (!Object.hasOwn(payload, key) && fallback !== undefined) return fallback;
+	if (typeof payload[key] !== "boolean") throw httpError(400, `${key} 应为布尔值`);
+	return payload[key];
+}
+function knownHarness(id) {
+	if (typeof id !== "string" || !Object.hasOwn(matrix.harnesses, id)) throw httpError(400, "未知执行器");
+	return id;
+}
+function localHost(req) {
+	const host = req.headers.host;
+	if (typeof host !== "string") return false;
+	try {
+		const url = new URL(`http://${host}`);
+		return ["127.0.0.1", "localhost", "[::1]"].includes(url.hostname) && !url.username && !url.password &&
+			url.host === host.toLowerCase() && Number(url.port || 80) === req.socket.localPort;
+	} catch { return false; }
+}
 const html = (res) =>
 	res
-		.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" })
-		.end(readFileSync(join(ROOT, "web", "ui.html"), "utf8"));
+		.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", "x-content-type-options": "nosniff", "content-security-policy": "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'" })
+		.end(readResource("web/ui.html").toString("utf8"));
 
 function isMutating(method) {
 	return method === "POST" || method === "PUT" || method === "PATCH" || method === "DELETE";
@@ -400,43 +533,49 @@ function sameOrigin(req) {
 	try {
 		const u = new URL(origin);
 		const loopback = u.hostname === "127.0.0.1" || u.hostname === "localhost" || u.hostname === "::1" || u.hostname === "[::1]";
-		return loopback && u.host.toLowerCase() === String(req.headers.host ?? "").toLowerCase();
+		return loopback && u.protocol === "http:" && u.origin === origin && u.host.toLowerCase() === String(req.headers.host ?? "").toLowerCase();
 	} catch {
 		return false;
 	}
 }
 
 function body(req) {
-	return new Promise((resolve) => {
-		let raw = "";
-		let size = 0;
-		let done = false;
-		const finish = (value) => {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		let size = 0, done = false;
+		const finish = (error, value) => {
 			if (done) return;
 			done = true;
-			resolve(value);
+			chunks.length = 0;
+			if (error) reject(error); else resolve(value);
 		};
-		req.on("data", (c) => {
-			size += c.length;
-			// 本机也不该接无上限的 body：一个坏页面能靠大 POST 把内存吃光
-			if (size > 2 * 1024 * 1024) {
-				req.destroy();
-				return finish({});
-			}
-			raw += c;
+		const contentType = req.headers["content-type"];
+		if (contentType && !/^application\/(?:[a-z0-9.+-]+\+)?json(?:\s*;|$)/i.test(contentType)) {
+			req.resume(); finish(httpError(415, "请求应为 JSON")); return;
+		}
+		req.on("data", chunk => {
+			if (done) return;
+			size += chunk.length;
+			if (size > 2 * 1024 * 1024) { finish(httpError(413, "请求超过 2 MiB")); return; }
+			chunks.push(chunk);
 		});
-		req.on("end", () => {
-			try {
-				finish(JSON.parse(raw || "{}"));
-			} catch {
-				finish({});
-			}
+		req.once("end", () => {
+			if (done) return;
+			let value;
+			try { value = JSON.parse(Buffer.concat(chunks).toString("utf8")); }
+			catch { finish(httpError(400, "JSON 格式无效")); return; }
+			if (!plainObject(value)) { finish(httpError(400, "JSON 应为对象")); return; }
+			finish(null, value);
 		});
+		req.once("aborted", () => finish(httpError(400, "请求已中断")));
+		req.once("error", error => finish(httpError(400, `请求读取失败：${error.message}`)));
 	});
 }
 
 // 只有被直接当脚本跑（node web/server.mjs --serve 7788）才自启动；
 // 被 bin 导入时必须保持安静——否则 `agent-purge web --serve 7789` 会两个端口各起一个实例，
 // 并在第二个 bind 时吐出误导性的“端口已被占用：老实例还在跑”。
-const isEntry = process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+// 编译态 import.meta.url 也是 exe 路径，光比路径会把 exe 误当入口：只认 .mjs 脚本。
+const selfPath = fileURLToPath(import.meta.url);
+const isEntry = Boolean(process.argv[1]) && selfPath.endsWith(".mjs") && resolve(process.argv[1]) === selfPath;
 if (isEntry && process.argv.includes("--serve")) serveWeb(Number(process.argv[process.argv.indexOf("--serve") + 1] ?? 7788));