agent-purge 0.2.3 → 0.2.5

package/README.md

@@ -1,7 +1,6 @@
 # agent-purge
 
 [![npm](https://img.shields.io/npm/v/agent-purge)](https://www.npmjs.com/package/agent-purge)
-[![downloads](https://img.shields.io/npm/dm/agent-purge)](https://www.npmjs.com/package/agent-purge)
 [![stars](https://img.shields.io/github/stars/ZiChuanLan/agent-purge)](https://github.com/ZiChuanLan/agent-purge/stargazers)
 [![license](https://img.shields.io/npm/l/agent-purge)](LICENSE)
 
@@ -93,8 +92,21 @@ agent-purge uninstall dsh    # 删插件 + 剥离 patch 段，字节还原
 
 装完要**重启一次 dsh**（patch 层只在启动时读）；之后换 persona、切模式、开关全是热生效，不用再重启。
 
+三个形态可以**分别开关**：Web 面板的 dsh 卡片下方有 desktop / web / headless 三个小勾，对应 `state.json` 的 `dshProfiles`。比如只在桌面版用，就把 web 和 headless 关掉；勾选只写状态文件，插件每轮现读，**不用重启**。
+
 只想临时试一下、不碰常驻 profile：`agent-purge dsh --ask "…"`（一次性会话，进程退出即清理）。
 
+#### 为什么不做「文件夹级人设」
+
+很容易想到的下一步是：同一个 dsh 里，A 项目一套人设、B 项目另一套。技术上做得到——插件在 `assemble` 时能拿到 cwd，按目录前缀匹配 persona 即可。但这是**破坏性**的设计，所以刻意不做：
+
+- **唯一真相被打破**。现在所有人设共用一个 `state.json` 指针，换一次、所有入口跟着变。按目录分叉等于把「配置」升级成「规则引擎」，之后每次改人设都要先回答「改的是哪一层」。
+- **规则会自我繁殖**。前缀匹配必然要处理嵌套目录、glob、优先级、冲突兜底。今天一个前缀，明天就要 `.agent-purge/` 文件，后天要继承与覆盖——最后没人说得清当前生效的是哪一条。
+- **跨入口语义分裂**。codex / claude / opencode 这些入口没有「项目」概念（有的是 PATH shim，有的是配置文件）。dsh 里按目录切、别处全局，用户无法解释「为什么这里是人设 A，那里是 B」。
+- **卸载不再是字节还原**。一旦引入目录规则，卸载就要判断哪些规则是用户写的、哪些是工具写的，回滚成本陡增。
+
+一句话：**agent-purge 卖的是「一份人设，所有入口，一起切换」**。做文件夹级隔离，赚的是灵活性，赔的是这句话还成不成立。真有这个需求，给每个项目放不同的人设文件、用 `agent-purge use` 手动切，比在插件里塞一套匹配引擎干净得多。
+
 ## magpie 网关插件（可选）
 
 [magpie](https://github.com/yetone/magpie) 把各家 agent 的请求收进本地网关。挂上这个插件后，**凡是经过网关的请求**（Claude Code、Codex、OpenCode、pi…）的 system 段都按 agent-purge 的当前人设改写——不用逐个 harness 装，换人设也不用重启 magpie。

package/lib/dsh.mjs

@@ -1,177 +1,316 @@
-// dsh（DeepSeek Harness）的插件通道，三形态（desktop / web / headless）共用一套写法。
-//
-// 两个插件名，互不覆盖：
-//   agent-purge          常驻：每次 assemble 读 state.json + active.md，off 即时生效
-//   agent-purge-session  一次性：persona 快照编译进源码，进程退出即删
-//
-// 三个 profile 都要装：paths 推导自 profile 的 dirname（src/index.js → package root），
-// 所以包必须放在 <profile>/node_modules/<name> 下。
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-export const DSH_PROFILES = ["desktop", "web", "headless"];
-export const RESIDENT = "agent-purge";
-export const SESSION = "agent-purge-session";
-
-export const dshHome = () => process.env.DSH_HOME || join(homedir(), ".dsh");
-export const profileDir = (p) => join(dshHome(), "profiles", p);
-export const pluginDir = (p, name = RESIDENT) => join(profileDir(p), "node_modules", name);
-const patchFile = (p) => join(profileDir(p), "cordis.patch.yml");
-
-const mark = (name) => [`# >>> agent-purge:${name}`, `# <<< agent-purge:${name}`];
-
-/** 这个 package.json 是 agent-purge 写的吗（别碰同名外来目录）。 */
-const isOurs = (meta) => existsSync(meta) && /"?agentPurge"?\s*:\s*true/.test(readFileSync(meta, "utf8"));
-
-/** 常驻插件：不编译人设，每次请求现读 state；off 就原样放过宿主的结果。 */
-export function residentSource(root, activePath) {
-	const state = join(root, "state.json").replace(/\\/g, "/");
-	// active.md 是派生物，实际位置是 <root>/personas/active.md（由 createStore().materialize 给出）
-	const active = String(activePath).replace(/\\/g, "/");
-	return `// 由 agent-purge 生成；删掉本目录 + patch 段即取消。
-import { readFileSync } from "node:fs";
-const STATE = ${JSON.stringify(state)};
-const ACTIVE = ${JSON.stringify(active)};
-function cfg() {
-  try {
-    const st = JSON.parse(readFileSync(STATE, "utf8"));
-    // 磁盘卸载后内存里的回调还在：armed 里没有 install 就当成已关闭
-    const armed = st && st.armed && st.armed.dsh;
-    if (!Array.isArray(armed) || !armed.includes("install")) return null;
-    const mode = (st && st.default && st.default.mode) || "replace";
-    if (mode === "off") return null;
-    const body = readFileSync(ACTIVE, "utf8").trim();
-    return body ? { mode, body } : null;
-  } catch {
-    return null;
-  }
-}
-export default {
-  name: ${JSON.stringify(RESIDENT)},
-  inject: ["systemPrompt"],
-  apply(ctx) {
-    const prompt = ctx.systemPrompt;
-    const orig = prompt.assemble.bind(prompt);
-    prompt.assemble = async (...rest) => {
-      const asm = await orig(...rest);
-      const c = cfg();
-      if (!c) return asm;
-      if (c.mode === "append") return { ...asm, sections: [...(asm.sections || []), { name: ${JSON.stringify(RESIDENT)}, text: c.body }] };
-      return { ...asm, sections: [{ name: ${JSON.stringify(RESIDENT)}, text: c.body }] };
-    };
-  },
-};
-`;
-}
-
-/** 一次性插件：人设快照内嵌，进程结束就没。 */
-export function sessionSource(personaText, mode) {
-	const body =
-		mode === "append"
-			? `\t\tctx.systemPrompt.section({ name: ${JSON.stringify(SESSION)}, order: 5100, interpolate: false, text: PERSONA });`
-			: `\t\tconst prompt = ctx.systemPrompt;\n\t\tconst orig = prompt.assemble.bind(prompt);\n\t\tprompt.assemble = async (...rest) => {\n\t\t\tconst asm = await orig(...rest);\n\t\t\treturn { ...asm, sections: [{ name: ${JSON.stringify(SESSION)}, text: PERSONA }] };\n\t\t};`;
-	return `// 由 agent-purge 生成（一次性，进程退出即删）。
-const PERSONA = ${JSON.stringify(personaText.trim())};
-
-export default {
-  name: ${JSON.stringify(SESSION)},
-  inject: ["systemPrompt"],
-  apply(ctx) {
-${body}
-  },
-};
-`;
-}
-
-/** 装一个插件名到三个 profile，并在 patch 里挂上（同一段 marker 幂等）。 */
-export function addPlugin(name, source) {
-	const pkg = JSON.stringify({ name, version: "0.0.0", type: "module", main: "index.js", agentPurge: true }, null, 1);
-	const [begin, end] = mark(name);
-	const block = `\n${begin}\n- insert:\n    - id: ${name}\n      name: ${name}\n${end}\n`;
-	const files = [];
-	const touched = []; // { dir, patch, before }：中途抛错时按相反顺序回滚
-	// 预检：同名目录要么不存在，要么是我们的（package.json 带 agentPurge 标记），否则不碰
-	for (const p of DSH_PROFILES) {
-		const dir = pluginDir(p, name);
-		const meta = join(dir, "package.json");
-		if (existsSync(dir) && !isOurs(meta)) throw new Error(`${dir} 已存在且不是 agent-purge 装的，拒绝覆盖`);
-	}
-	try {
-		for (const p of DSH_PROFILES) {
-			const dir = pluginDir(p, name);
-			const patch = patchFile(p);
-			const before = existsSync(patch) ? readFileSync(patch, "utf8") : null;
-			// 先登记再动手：下面任何一步抛错，这一轮的产物都能被回滚
-			touched.push({ dir, patch, before });
-			mkdirSync(dir, { recursive: true });
-			writeFileSync(join(dir, "package.json"), pkg);
-			writeFileSync(join(dir, "index.js"), source);
-			files.push(dir);
-			const old = before ?? "# agent-purge 新建的 patch 层\n";
-			if (old.includes(begin)) continue;
-			// `[]` 是合法空数组，后面接 `- insert:` 就是非法 YAML：整份换成我们的段
-			// 不存在也算“空”：走 stash 分支才能把“原本没有这个文件”记下来，卸载后才不会留个空壳
-			const empty = before === null || /^\s*(\[\s*\]\s*)?$/.test(old);
-			const next = empty ? block.slice(1) : old + block;
-			if (empty) {
-				// 整份替换会把原文端掉：原文 + 我们写出的成品都存下，卸载时对得上才整份还原
-				// （对不上 = 期间被人改过，那就只剔自己那段）
-				writeFileSync(join(dir, ".patch.before"), JSON.stringify({ before, after: next }));
-			}
-			writeFileSync(patch, next);
-		}
-	} catch (e) {
-		// 回滚：撤销本次已写的文件，宁可完全没装也不留半套
-		for (const { dir, patch, before } of touched.reverse()) {
-			rmSync(dir, { recursive: true, force: true });
-			if (before === null) rmSync(patch, { force: true });
-			else writeFileSync(patch, before);
-		}
-		throw e;
-	}
-	return { dirs: files, profiles: DSH_PROFILES };
-}
-
-/** 只撤自己那一段：目录 + patch marker，别的配置原样。 */
-export function removePlugin(name) {
-	const [begin, end] = mark(name);
-	// 删 install 写入的那一段：前导 \n 可有可无（整份替换的形态没有），尾随 \n 一并吃掉
-	const re = new RegExp(`(?:^|\\n)${begin}[\\s\\S]*?${end}\\n?`, "g");
-	for (const p of DSH_PROFILES) {
-		const dir = pluginDir(p, name);
-		const meta = join(dir, "package.json");
-		// 只删自己装的；同名但不是我们的目录留着（可能被用户或其他包占了）
-		const ours = isOurs(meta);
-		const stashFile = join(dir, ".patch.before");
-		// 当初整份替换过的：记录躲在插件目录里，先读出来，不然删目录就丢了
-		let stash = null;
-		if (ours && existsSync(stashFile)) {
-			try {
-				stash = JSON.parse(readFileSync(stashFile, "utf8"));
-			} catch {
-				stash = null;
-			}
-		}
-		if (ours) rmSync(dir, { recursive: true, force: true });
-		const patch = patchFile(p);
-		if (!existsSync(patch)) continue;
-		const text = readFileSync(patch, "utf8");
-		// 我们整份写的、且此后没人动过 → 整份还原（原本没这个文件就删掉它）
-		if (stash && text === stash.after) {
-			if (stash.before === null) rmSync(patch, { force: true });
-			else writeFileSync(patch, stash.before);
-			continue;
-		}
-		if (text.includes(begin)) writeFileSync(patch, text.replace(re, ""));
-	}
-}
-
-/** patch 里还挂着这个名字吗（status 用；不许在有其他 insert 时谎报干净）。 */
-export function hasPlugin(name) {
-	const [begin] = mark(name);
-	return DSH_PROFILES.every((p) => {
-		const patch = patchFile(p);
-		return existsSync(join(pluginDir(p, name), "index.js")) && existsSync(patch) && readFileSync(patch, "utf8").includes(begin);
-	});
-}
+// dsh（DeepSeek Harness）的插件通道，三形态（desktop / web / headless）共用一套写法。
+//
+// 两个插件名，互不覆盖：
+//   agent-purge          常驻：每次 assemble 读 state.json + active.md，off 即时生效
+//   agent-purge-session  一次性：persona 快照编译进源码，进程退出即删
+//
+// 三个 profile 都要装：paths 推导自 profile 的 dirname（src/index.js → package root），
+// 所以包必须放在 <profile>/node_modules/<name> 下。
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+export const DSH_PROFILES = ["desktop", "web", "headless"];
+export const RESIDENT = "agent-purge";
+export const SESSION = "agent-purge-session";
+
+export const dshHome = () => process.env.DSH_HOME || join(homedir(), ".dsh");
+export const profileDir = (p) => join(dshHome(), "profiles", p);
+export const pluginDir = (p, name = RESIDENT) => join(profileDir(p), "node_modules", name);
+const patchFile = (p) => join(profileDir(p), "cordis.patch.yml");
+
+const mark = (name) => [`# >>> agent-purge:${name}`, `# <<< agent-purge:${name}`];
+
+/** 这个 package.json 是 agent-purge 写的吗（别碰同名外来目录）。 */
+const isOurs = (meta) => existsSync(meta) && /"?agentPurge"?\s*:\s*true/.test(readFileSync(meta, "utf8"));
+
+/** 常驻插件：不编译人设，每次请求现读 state；off 就把宿主的返回值原样透传。 */
+export function residentSource(root, activePath) {
+	const state = join(root, "state.json").replace(/\\/g, "/");
+	// active.md 是派生物，实际位置是 <root>/personas/active.md（由 createStore().materialize 给出）
+	const active = String(activePath).replace(/\\/g, "/");
+	return `// 由 agent-purge 生成；删掉本目录 + patch 段即取消。
+import { readFileSync, appendFileSync, writeFileSync } from "node:fs";
+const STATE = ${JSON.stringify(state)};
+const ACTIVE = ${JSON.stringify(active)};
+const NAME = ${JSON.stringify(RESIDENT)};
+// 一行一条的运行日志，出问题先看它。写失败静默。
+const LOG = STATE.replace(/state\.json$/, "dsh.log");
+function log(ev, extra) {
+  try {
+    appendFileSync(LOG, new Date().toISOString() + " " + PROFILE + " " + ev + (extra ? " " + extra : "") + "\\n");
+  } catch { /* 只读环境不抛 */ }
+}
+// 自己在哪个 profile：<dsh>/profiles/<name>/node_modules/<pkg>/index.js
+const PROFILE = (() => {
+  try {
+    const m = /[\\\\/]profiles[\\\\/]([^\\\\/]+)[\\\\/]/.exec(new URL(import.meta.url).pathname);
+    return m ? decodeURIComponent(m[1]) : "";
+  } catch {
+    return "";
+  }
+})();
+function cfg() {
+  try {
+    const st = JSON.parse(readFileSync(STATE, "utf8"));
+    // 磁盘卸载后内存里的回调还在：armed 里没有任何 dsh 条目就当成已关闭
+    const armed = st && st.armed && st.armed.dsh;
+    if (!Array.isArray(armed) || !armed.includes("install")) return null;
+    // dshProfiles：没设置过 = desktop/web/headless 全开；设了 = 只认列出的那几个（可热改）
+    const on = st && Array.isArray(st.dshProfiles) ? st.dshProfiles : null;
+    if (on && (!PROFILE || !on.includes(PROFILE))) return null;
+    const mode = (st && st.default && st.default.mode) || "replace";
+    if (mode === "off") return null;
+    const body = readFileSync(ACTIVE, "utf8").trim();
+    return body ? { mode, body } : null;
+  } catch {
+    return null;
+  }
+}
+function put(asm, c) {
+  if (!asm || typeof asm !== "object") return asm;
+  const sections = Array.isArray(asm.sections) ? asm.sections : [];
+  if (c.mode === "append") return { ...asm, sections: [...sections, { name: NAME, text: c.body }] };
+  return { ...asm, sections: [{ name: NAME, text: c.body }] };
+}
+// ---- /ap 斜杠命令：直接改 state.json，不产生模型消息 ----
+function readState() {
+  try { return JSON.parse(readFileSync(STATE, "utf8")) || {}; } catch { return {}; }
+}
+function saveState(st) {
+  writeFileSync(STATE, JSON.stringify(st, null, 2) + "\\n");
+}
+function apPatch(fn) {
+  const st = readState();
+  if (!st.armed || typeof st.armed !== "object") st.armed = {};
+  if (!Array.isArray(st.armed.dsh)) st.armed.dsh = [];
+  fn(st, st.armed.dsh);
+  saveState(st);
+}
+function handleAp(raw) {
+  const parts = String(raw || "").trim().split(/\s+/).filter(Boolean);
+  const cmd = (parts[0] || "status").toLowerCase();
+  const arg = parts.slice(1).join(" ").trim();
+  if (cmd === "off") {
+    apPatch((st, a) => {
+      if (a.includes("install")) {
+        st.dshPrevArmed = a.slice();
+        st.armed.dsh = a.filter((x) => x !== "install");
+      }
+    });
+    return { kind: "success", text: "agent-purge 已关闭（dsh），下一句起不注入" };
+  }
+  if (cmd === "on") {
+    apPatch((st, a) => {
+      if (!a.includes("install")) a.push("install");
+      delete st.dshPrevArmed;
+    });
+    return { kind: "success", text: "agent-purge 已开启（dsh），下一句起生效" };
+  }
+  if (cmd === "mode") {
+    const m = arg.toLowerCase();
+    if (m !== "strict" && m !== "replace" && m !== "append") {
+      return { kind: "error", text: "用法：/purge mode strict|replace|append" };
+    }
+    apPatch((st) => { if (!st.default || typeof st.default !== "object") st.default = {}; st.default.mode = m; });
+    return { kind: "success", text: "模式已切到 " + m };
+  }
+  if (cmd === "status" || cmd === "help") {
+    const st = readState();
+    const a = st.armed && Array.isArray(st.armed.dsh) ? st.armed.dsh : [];
+    const mode = (st.default && st.default.mode) || "replace";
+    return { kind: "success", text: "agent-purge / dsh：" + (a.includes("install") ? "开" : "关") + " · 模式 " + mode + " · 人设 " + (st.persona || "-") + "（可用：on | off | status | mode <strict|replace|append>）" };
+  }
+  return { kind: "error", text: "用法：/purge on | off | status | mode <strict|replace|append>" };
+}
+export default {
+  name: NAME,
+  inject: ["systemPrompt"],
+  apply(ctx) {
+    log("apply", "inject=" + JSON.stringify(["systemPrompt"]));
+    // /ap 斜杠命令：等 commands 服务就绪再注册；headless 没有该服务就不会触发，注入不受影响
+    try {
+      if (typeof ctx.inject === "function") {
+        ctx.inject(["commands"], (c) => {
+          const spec = {
+            description: "agent-purge 人设注入：开关 / 模式",
+            input: { hint: "on | off | status | mode <strict|replace|append>" },
+            handler: ({ rawInput }) => handleAp(rawInput),
+          };
+          // 主名 /purge（和 pi 等其他 harness 统一），/ap 留作别名；
+          // 与已有同名命令（如 dsh-purge）撞车时只跳过那一个，不影响注入
+          for (const n of ["purge", "ap"]) {
+            try {
+              c.commands.register({ name: n, ...spec });
+              log("command", "registered /" + n);
+            } catch (e) {
+              log("command", "skip /" + n + " " + (e && e.message));
+            }
+          }
+        });
+      } else {
+        log("command", "no inject api");
+      }
+    } catch (e) {
+      log("command", "err " + (e && e.message));
+    }
+    // 宿主每轮 assemble 走 system-prompt/assemble 瀑布。必须 global：agent 作用域的
+    // systemPrompt 是另一个实例，且切预设时宿主会整只换代理，实例上的 monkey-patch 会丢。
+    const handler = async (assembly, _context, next) => {
+      let assembled = assembly;
+      if (typeof next === "function") {
+        try {
+          assembled = await next();
+        } catch {
+          assembled = assembly; // 下游抛错也要让上游兜底，不能把整轮发消息弄死
+        }
+      }
+      const c = cfg();
+      const out = c ? put(assembled, c) : assembled;
+      log("assemble", (c ? "mode=" + c.mode : "off")
+        + " in=" + (Array.isArray(assembled && assembled.sections) ? assembled.sections.length : -1)
+        + " out=" + (Array.isArray(out && out.sections) ? out.sections.length : -1)
+        + " names=" + (Array.isArray(out && out.sections) ? out.sections.map((s) => s && s.name).join(",") : "-"));
+      return out;
+    };
+    try {
+      ctx.on("system-prompt/assemble", handler, { global: true, prepend: true });
+      log("hook", "system-prompt/assemble global");
+    } catch (e) {
+      // 老版本没有这个瀑布：退回包 assemble（关闭时同 this、同参数、同返回类型）
+      const prompt = ctx.systemPrompt;
+      const orig = prompt.assemble;
+      prompt.assemble = function (...rest) {
+        const c = cfg();
+        if (!c) return orig.apply(this, rest);
+        const out = orig.apply(this, rest);
+        if (out && typeof out.then === "function") return out.then((asm) => put(asm, c));
+        return put(out, c);
+      };
+    }
+  },
+};
+`;
+}
+
+/** 一次性插件：人设快照内嵌，进程结束就没。 */
+export function sessionSource(personaText, mode) {
+	const put =
+		mode === "append"
+			? `return { ...asm, sections: [...(Array.isArray(asm.sections) ? asm.sections : []), { name: NAME, text: PERSONA }] };`
+			: `return { ...asm, sections: [{ name: NAME, text: PERSONA }] };`;
+	return `// 由 agent-purge 生成（一次性，进程退出即删）。
+const PERSONA = ${JSON.stringify(personaText.trim())};
+const NAME = ${JSON.stringify(SESSION)};
+export default {
+  name: NAME,
+  inject: ["systemPrompt"],
+  apply(ctx) {
+    const prompt = ctx.systemPrompt;
+    const orig = prompt.assemble;
+    // 同常驻插件：不包 async，保持宿主的返回类型
+    prompt.assemble = function (...rest) {
+      const out = orig.apply(this, rest);
+      const put = (asm) => {
+        if (!asm || typeof asm !== "object") return asm;
+        ${put}
+      };
+      if (out && typeof out.then === "function") return out.then(put);
+      return put(out);
+    };
+  },
+};
+`;
+}
+
+/** 装一个插件名到三个 profile，并在 patch 里挂上（同一段 marker 幂等）。 */
+export function addPlugin(name, source) {
+	const pkg = JSON.stringify({ name, version: "0.0.0", type: "module", main: "index.js", agentPurge: true }, null, 1);
+	const [begin, end] = mark(name);
+	const block = `\n${begin}\n- insert:\n    - id: ${name}\n      name: ${name}\n${end}\n`;
+	const files = [];
+	const touched = []; // { dir, patch, before }：中途抛错时按相反顺序回滚
+	// 预检：同名目录要么不存在，要么是我们的（package.json 带 agentPurge 标记），否则不碰
+	for (const p of DSH_PROFILES) {
+		const dir = pluginDir(p, name);
+		const meta = join(dir, "package.json");
+		if (existsSync(dir) && !isOurs(meta)) throw new Error(`${dir} 已存在且不是 agent-purge 装的，拒绝覆盖`);
+	}
+	try {
+		for (const p of DSH_PROFILES) {
+			const dir = pluginDir(p, name);
+			const patch = patchFile(p);
+			const before = existsSync(patch) ? readFileSync(patch, "utf8") : null;
+			// 先登记再动手：下面任何一步抛错，这一轮的产物都能被回滚
+			touched.push({ dir, patch, before });
+			mkdirSync(dir, { recursive: true });
+			writeFileSync(join(dir, "package.json"), pkg);
+			writeFileSync(join(dir, "index.js"), source);
+			files.push(dir);
+			const old = before ?? "# agent-purge 新建的 patch 层\n";
+			if (old.includes(begin)) continue;
+			// `[]` 是合法空数组，后面接 `- insert:` 就是非法 YAML：整份换成我们的段
+			// 不存在也算“空”：走 stash 分支才能把“原本没有这个文件”记下来，卸载后才不会留个空壳
+			const empty = before === null || /^\s*(\[\s*\]\s*)?$/.test(old);
+			const next = empty ? block.slice(1) : old + block;
+			if (empty) {
+				// 整份替换会把原文端掉：原文 + 我们写出的成品都存下，卸载时对得上才整份还原
+				// （对不上 = 期间被人改过，那就只剔自己那段）
+				writeFileSync(join(dir, ".patch.before"), JSON.stringify({ before, after: next }));
+			}
+			writeFileSync(patch, next);
+		}
+	} catch (e) {
+		// 回滚：撤销本次已写的文件，宁可完全没装也不留半套
+		for (const { dir, patch, before } of touched.reverse()) {
+			rmSync(dir, { recursive: true, force: true });
+			if (before === null) rmSync(patch, { force: true });
+			else writeFileSync(patch, before);
+		}
+		throw e;
+	}
+	return { dirs: files, profiles: DSH_PROFILES };
+}
+
+/** 只撤自己那一段：目录 + patch marker，别的配置原样。 */
+export function removePlugin(name) {
+	const [begin, end] = mark(name);
+	// 删 install 写入的那一段：前导 \n 可有可无（整份替换的形态没有），尾随 \n 一并吃掉
+	const re = new RegExp(`(?:^|\\n)${begin}[\\s\\S]*?${end}\\n?`, "g");
+	for (const p of DSH_PROFILES) {
+		const dir = pluginDir(p, name);
+		const meta = join(dir, "package.json");
+		// 只删自己装的；同名但不是我们的目录留着（可能被用户或其他包占了）
+		const ours = isOurs(meta);
+		const stashFile = join(dir, ".patch.before");
+		// 当初整份替换过的：记录躲在插件目录里，先读出来，不然删目录就丢了
+		let stash = null;
+		if (ours && existsSync(stashFile)) {
+			try {
+				stash = JSON.parse(readFileSync(stashFile, "utf8"));
+			} catch {
+				stash = null;
+			}
+		}
+		if (ours) rmSync(dir, { recursive: true, force: true });
+		const patch = patchFile(p);
+		if (!existsSync(patch)) continue;
+		const text = readFileSync(patch, "utf8");
+		// 我们整份写的、且此后没人动过 → 整份还原（原本没这个文件就删掉它）
+		if (stash && text === stash.after) {
+			if (stash.before === null) rmSync(patch, { force: true });
+			else writeFileSync(patch, stash.before);
+			continue;
+		}
+		if (text.includes(begin)) writeFileSync(patch, text.replace(re, ""));
+	}
+}
+
+/** patch 里还挂着这个名字吗（status 用；不许在有其他 insert 时谎报干净）。 */
+export function hasPlugin(name) {
+	const [begin] = mark(name);
+	return DSH_PROFILES.every((p) => {
+		const patch = patchFile(p);
+		return existsSync(join(pluginDir(p, name), "index.js")) && existsSync(patch) && readFileSync(patch, "utf8").includes(begin);
+	});
+}

package/lib/persist.mjs

@@ -111,11 +111,11 @@ export const AgentPurge = async () => ({
 		file: () => join(pluginDir("desktop"), "index.js"),
 		kind: "file",
 		layer: "sys",
-		note: "cordis 插件包；运行时读 state.json，off 即时生效；desktop 需重启一次",
+		note: "cordis 插件包；运行时每轮读 state.json，开关 / 切模式 / 换人设都即时生效；只有首次安装要重启一次",
 		probe: () => hasPlugin(DSH_RESIDENT),
 		install: ({ root, active }) => {
 			const r = addPlugin(DSH_RESIDENT, residentSource(root, active));
-			return { file: join(pluginDir("desktop"), "index.js"), note: `三个 profile：${r.profiles.join("/")}；desktop 重启 DeepSeek Harness 生效` };
+			return { file: join(pluginDir("desktop"), "index.js"), note: `三个 profile：${r.profiles.join("/")}；重启一次 DeepSeek Harness 后插件开始工作（之后热切换）` };
 		},
 		uninstall: () => {
 			removePlugin(DSH_RESIDENT);

package/lib/state.mjs

@@ -1,140 +1,155 @@
-// 唯一状态文件。
-//
-// 之前是两套：`.defaults.json`（harness+mode）与 `personas/.active`（人设指针），
-// 两个文件、两套语义、Web 与 CLI 各写一边 —— 这就是"用起来混乱"的根源：
-// 用户改了一处以为全生效，其实另一处还压着旧值。
-//
-// 现在只有 state.json：
-//   persona  谁      —— 当前 persona id（人设的唯一指针）
-//   default  注入谁   —— 裸敲 agent-purge 时启动的 harness + 注入模式
-//   armed    怎么生效 —— 每家已经武装了哪几条通道：shim / slash / install
-//
-// personas/active.md 退化为「派生物」：由 launch/arm 时按 persona 生成，
-// 供落盘型 harness 与 opencode 插件读取，不再承载状态。
-import { existsSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-
-const FILE = "state.json";
-const LEGACY_DEFAULTS = ".defaults.json";
-const LEGACY_ACTIVE = join("personas", ".active");
-
-export const MODES = ["strict", "replace", "append", "off"];
-/** 三种生效通道，互不冲突，可以叠加 */
-export const ARMS = ["shim", "slash", "install"];
-
-export const ARM_LABEL = {
-	shim: "裸命令接管（敲 codex 就是接管的）",
-	slash: "会话内 /purge（热切换）",
-	install: "配置文件常驻（连别人启动的也生效）",
-};
-
-export function statePath(root) {
-	return join(root, FILE);
-}
-
-function emptyState() {
-	return { v: 1, persona: null, default: null, armed: {}, piAuto: false, piUserLayer: false };
-}
-
-/**
- * 读状态，顺带把旧布局迁移过来（旧文件改名 `*.migrated` 留档，之后只认 state.json）。
- * 返回 `{ state, migrated[] }`；migrated 是给调用方打印的一行行说明。
- */
-export function loadState(root) {
-	const file = statePath(root);
-	let state = emptyState();
-	const migrated = [];
-
-	if (existsSync(file)) {
-		try {
-			const raw = JSON.parse(readFileSync(file, "utf8"));
-			state = { ...state, ...raw, armed: raw?.armed && typeof raw.armed === "object" ? raw.armed : {} };
-		} catch {
-			migrated.push("state.json 损坏 → 按空状态重来");
-		}
-	}
-
-	const legacy = join(root, LEGACY_DEFAULTS);
-	if (!state.default && existsSync(legacy)) {
-		try {
-			const d = JSON.parse(readFileSync(legacy, "utf8"));
-			if (d?.harness) {
-				state.default = { harness: d.harness, mode: MODES.includes(d.mode) ? d.mode : "replace" };
-				migrated.push(`.defaults.json → default=${state.default.harness} · ${state.default.mode}`);
-			}
-			renameSync(legacy, legacy + ".migrated");
-		} catch {
-			/* 坏文件不动它，留给人工看 */
-		}
-	}
-
-	if (!state.persona) {
-		const old = join(root, LEGACY_ACTIVE);
-		if (existsSync(old)) {
-			const id = readFileSync(old, "utf8").trim();
-			if (id) {
-				state.persona = id;
-				migrated.push(`personas/.active → persona=${id}`);
-			}
-			renameSync(old, old + ".migrated");
-		}
-	}
-
-	// 迁完立即落盘：否则下次调用看不到旧文件，迁移结果直接丢掉
-	if (migrated.length) writeFileSync(file, JSON.stringify(state, null, 2) + "\n");
-
-	return { state, migrated };
-}
-
-export function saveState(root, state) {
-	writeFileSync(statePath(root), JSON.stringify(state, null, 2) + "\n");
-	return state;
-}
-
-/** 浅合并；armed 需要整块替换时传完整对象 */
-export function patchState(root, patch) {
-	const { state } = loadState(root);
-	return saveState(root, { ...state, ...patch });
-}
-
-export function setDefault(root, { harness, mode }) {
-	if (!harness) throw new Error("harness 不能为空");
-	const { state } = loadState(root);
-	const next = { ...state, default: { harness, mode: MODES.includes(mode) ? mode : "replace" } };
-	return saveState(root, next).default;
-}
-
-export function setPersona(root, id) {
-	const { state } = loadState(root);
-	return saveState(root, { ...state, persona: id }).persona;
-}
-
-/** 裸敲 pi 是否也自动注入（装好的扩展直接读这个位） */
-export function setPiAuto(root, on) {
-	const { state } = loadState(root);
-	return saveState(root, { ...state, piAuto: on === true }).piAuto;
-}
-
-/** pi 的人设走哪一层：false = system（默认），true = 额外塞进用户消息（给忽略 system 的模型用） */
-export function setPiUserLayer(root, on) {
-	const { state } = loadState(root);
-	return saveState(root, { ...state, piUserLayer: on === true }).piUserLayer;
-}
-
-/** armed 变成 {codex: ["shim","install"]}；空数组即删键 */
-export function setArmed(root, id, arm, on) {
-	const { state } = loadState(root);
-	const cur = new Set(state.armed?.[id] ?? []);
-	if (on) cur.add(arm);
-	else cur.delete(arm);
-	const list = ARMS.filter((a) => cur.has(a));
-	const armed = { ...state.armed };
-	if (list.length) armed[id] = list;
-	else delete armed[id];
-	saveState(root, { ...state, armed });
-	return list;
-}
-
-export function armedOf(state, id) {
-	return state.armed?.[id] ?? [];
-}
+// 唯一状态文件。
+//
+// 之前是两套：`.defaults.json`（harness+mode）与 `personas/.active`（人设指针），
+// 两个文件、两套语义、Web 与 CLI 各写一边 —— 这就是"用起来混乱"的根源：
+// 用户改了一处以为全生效，其实另一处还压着旧值。
+//
+// 现在只有 state.json：
+//   persona  谁      —— 当前 persona id（人设的唯一指针）
+//   default  注入谁   —— 裸敲 agent-purge 时启动的 harness + 注入模式
+//   armed    怎么生效 —— 每家已经武装了哪几条通道：shim / slash / install
+//
+// personas/active.md 退化为「派生物」：由 launch/arm 时按 persona 生成，
+// 供落盘型 harness 与 opencode 插件读取，不再承载状态。
+import { existsSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+
+const FILE = "state.json";
+const LEGACY_DEFAULTS = ".defaults.json";
+const LEGACY_ACTIVE = join("personas", ".active");
+
+export const MODES = ["strict", "replace", "append", "off"];
+/** 三种生效通道，互不冲突，可以叠加 */
+export const ARMS = ["shim", "slash", "install"];
+
+export const ARM_LABEL = {
+	shim: "裸命令接管（敲 codex 就是接管的）",
+	slash: "会话内 /purge（热切换）",
+	install: "配置文件常驻（连别人启动的也生效）",
+};
+
+export function statePath(root) {
+	return join(root, FILE);
+}
+
+function emptyState() {
+	return { v: 1, persona: null, default: null, armed: {}, piAuto: false, piUserLayer: false, dshProfiles: null };
+}
+
+/**
+ * 读状态，顺带把旧布局迁移过来（旧文件改名 `*.migrated` 留档，之后只认 state.json）。
+ * 返回 `{ state, migrated[] }`；migrated 是给调用方打印的一行行说明。
+ */
+export function loadState(root) {
+	const file = statePath(root);
+	let state = emptyState();
+	const migrated = [];
+
+	if (existsSync(file)) {
+		try {
+			const raw = JSON.parse(readFileSync(file, "utf8"));
+			state = { ...state, ...raw, armed: raw?.armed && typeof raw.armed === "object" ? raw.armed : {} };
+		} catch {
+			migrated.push("state.json 损坏 → 按空状态重来");
+		}
+	}
+
+	const legacy = join(root, LEGACY_DEFAULTS);
+	if (!state.default && existsSync(legacy)) {
+		try {
+			const d = JSON.parse(readFileSync(legacy, "utf8"));
+			if (d?.harness) {
+				state.default = { harness: d.harness, mode: MODES.includes(d.mode) ? d.mode : "replace" };
+				migrated.push(`.defaults.json → default=${state.default.harness} · ${state.default.mode}`);
+			}
+			renameSync(legacy, legacy + ".migrated");
+		} catch {
+			/* 坏文件不动它，留给人工看 */
+		}
+	}
+
+	if (!state.persona) {
+		const old = join(root, LEGACY_ACTIVE);
+		if (existsSync(old)) {
+			const id = readFileSync(old, "utf8").trim();
+			if (id) {
+				state.persona = id;
+				migrated.push(`personas/.active → persona=${id}`);
+			}
+			renameSync(old, old + ".migrated");
+		}
+	}
+
+	// 迁完立即落盘：否则下次调用看不到旧文件，迁移结果直接丢掉
+	if (migrated.length) writeFileSync(file, JSON.stringify(state, null, 2) + "\n");
+
+	return { state, migrated };
+}
+
+export function saveState(root, state) {
+	writeFileSync(statePath(root), JSON.stringify(state, null, 2) + "\n");
+	return state;
+}
+
+/** 浅合并；armed 需要整块替换时传完整对象 */
+export function patchState(root, patch) {
+	const { state } = loadState(root);
+	return saveState(root, { ...state, ...patch });
+}
+
+export function setDefault(root, { harness, mode }) {
+	if (!harness) throw new Error("harness 不能为空");
+	const { state } = loadState(root);
+	const next = { ...state, default: { harness, mode: MODES.includes(mode) ? mode : "replace" } };
+	return saveState(root, next).default;
+}
+
+export function setPersona(root, id) {
+	const { state } = loadState(root);
+	return saveState(root, { ...state, persona: id }).persona;
+}
+
+/** 裸敲 pi 是否也自动注入（装好的扩展直接读这个位） */
+export function setPiAuto(root, on) {
+	const { state } = loadState(root);
+	return saveState(root, { ...state, piAuto: on === true }).piAuto;
+}
+
+/** pi 的人设走哪一层：false = system（默认），true = 额外塞进用户消息（给忽略 system 的模型用） */
+export function setPiUserLayer(root, on) {
+	const { state } = loadState(root);
+	return saveState(root, { ...state, piUserLayer: on === true }).piUserLayer;
+}
+
+/** armed 变成 {codex: ["shim","install"]}；空数组即删键 */
+export function setArmed(root, id, arm, on) {
+	const { state } = loadState(root);
+	const cur = new Set(state.armed?.[id] ?? []);
+	if (on) cur.add(arm);
+	else cur.delete(arm);
+	const list = ARMS.filter((a) => cur.has(a));
+	const armed = { ...state.armed };
+	if (list.length) armed[id] = list;
+	else delete armed[id];
+	saveState(root, { ...state, armed });
+	return list;
+}
+
+export function armedOf(state, id) {
+	return state.armed?.[id] ?? [];
+}
+
+/** dsh 三个 profile 哪些生效：null = 没设置过（全部），[] = 全关 */
+export function dshProfilesOf(state) {
+	return Array.isArray(state?.dshProfiles) ? state.dshProfiles : null;
+}
+
+/** 开/关单个 dsh profile；all 由调用方传入（列表归属 lib/dsh.mjs，别在状态层再写一份） */
+export function setDshProfile(root, profile, on, all) {
+	const { state } = loadState(root);
+	const cur = new Set(dshProfilesOf(state) ?? all);
+	if (on) cur.add(profile);
+	else cur.delete(profile);
+	const list = all.filter((p) => cur.has(p));
+	return saveState(root, { ...state, dshProfiles: list }).dshProfiles;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-purge",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "One persona, many coding agents: replace or inject system prompts across codex, claude, opencode (v1/v2), grok, omp, hermes, pi, zcode, dsh.",
   "type": "module",
   "bin": {

package/web/server.mjs

@@ -6,7 +6,7 @@ import { fileURLToPath } from "node:url";
 import { detect } from "../lib/detect.mjs";
 import { oneshots } from "../backends/index.mjs";
 import { createStore } from "../lib/personas.mjs";
-import { MODES, armedOf, loadState, patchState, setArmed, setDefault, setPersona, setPiAuto } from "../lib/state.mjs";
+import { MODES, armedOf, dshProfilesOf, loadState, patchState, setArmed, setDefault, setPersona, setPiAuto, setDshProfile } from "../lib/state.mjs";
 import { install, status as persistStatus, uninstall } from "../lib/persist.mjs";
 import { plans, summary as armorSummary } from "../lib/armor.mjs";
 import { installShim, shimStatus, uninstallShim } from "../lib/shim.mjs";
@@ -14,6 +14,7 @@ import { installSlash, refreshSlashes, slashStatus, uninstallSlash } from "../li
 import { reconcileArmed } from "../lib/armed.mjs";
 import { capsFor } from "../lib/caps.mjs";
 import { ensureDataHome } from "../lib/home.mjs";
+import { DSH_PROFILES } from "../lib/dsh.mjs";
 
 const ROOT = process.versions.bun ? dirname(process.execPath) : dirname(dirname(fileURLToPath(import.meta.url)));
 // 数据（state.json + personas/）在用户目录，不在安装目录
@@ -55,6 +56,7 @@ async function handle(req, res) {
 	if (req.method === "GET" && p === "/api/armor") return send(res, 200, armorState());
 	if (req.method === "POST" && p === "/api/defaults") return send(res, 200, saveDefaults(await body(req)));
 	if (req.method === "POST" && p === "/api/pi-auto") return send(res, 200, { piAuto: setPiAuto(DATA, (await body(req)).on === true) });
+	if (req.method === "POST" && p === "/api/dsh-profile") return send(res, 200, saveDshProfile(await body(req)));
 	if (req.method === "POST" && p === "/api/persona") return send(res, 200, savePersona(await body(req)));
 	if (req.method === "DELETE" && p === "/api/persona") return send(res, 200, deletePersona(url.searchParams.get("id")));
 	if (req.method === "POST" && p === "/api/use") return send(res, 200, usePersona(await body(req)));
@@ -137,6 +139,9 @@ async function state(withVersions) {
 		// false = state.json 里还没有默认（defaults 只是 UI 的建议值，裸敲 agent-purge 仍会提示“未设置”）
 		defaultsSet: Boolean(st.default?.harness),
 		armed: st.armed ?? {},
+		// dsh 的三个 profile（desktop/web/headless）；null 就是全开
+		dshProfiles: dshProfilesOf(st) ?? DSH_PROFILES,
+		dshAll: DSH_PROFILES,
 		modes: MODES,
 		piAuto: st.piAuto === true,
 		shimDir: shimStatus()[0]?.dir ?? null,
@@ -173,6 +178,16 @@ function saveDefaults(payload) {
 	}
 }
 
+function saveDshProfile(payload) {
+	const profile = String(payload.profile || "").trim();
+	if (!DSH_PROFILES.includes(profile)) return { error: `未知 profile: ${profile}（${DSH_PROFILES.join(" / ")}）` };
+	try {
+		return { ok: true, dshProfiles: setDshProfile(DATA, profile, payload.on === true, DSH_PROFILES) };
+	} catch (e) {
+		return { error: e.message };
+	}
+}
+
 function savePersona(payload) {
 	const id = String(payload.id || "").trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-");
 	if (!id) return { error: "id 不能为空（小写字母/数字/-/_）" };

package/web/ui.html

@@ -260,6 +260,11 @@ h3{margin:0 0 10px;font-family:var(--font-display);font-size:16px;font-weight:60
 white-space:nowrap;overflow:hidden;text-overflow:ellipsis;text-align:left}
 .chan.on{border-color:var(--accent);background:var(--accent-soft)}
 .chan.on .dot{background:var(--accent)}
+.dprof{display:flex;align-items:center;gap:8px;margin-top:10px;flex-wrap:wrap}
+.dprof-k{font-size:11.5px;color:var(--ink-2);letter-spacing:.02em}
+.chan.mini{padding:7px 11px;align-items:center;gap:7px}
+.chan.mini .dot{margin-top:0}
+.chan.mini b{font-size:12px;font-weight:600}
 .chan.on b u{color:var(--accent);border-color:var(--accent-line)}
 .chan.dis{opacity:.62;cursor:not-allowed}
 /* 结构性做不到（不是“没开”）：虚线 + 不跟手，和“关了”区分开 */
@@ -820,6 +825,19 @@ function harnessCard(h) {
 
   const noChannel = h.caps ? !(h.caps.shim.ok || h.caps.install.ok || h.caps.slash.ok) : false;
 
+  // dsh 的 desktop / web / headless 是三个独立 profile，插件分别装在三处；
+  // 这里只改 state.json，插件每次 assemble 现读，下一轮就生效，不用重启。
+  const dshList = S.dshAll || ["desktop", "web", "headless"];
+  const profileRow = h.id === "dsh"
+    ? `<div class="dprof">
+        <span class="dprof-k">生效形态 <i class="hint" title="dsh 三个形态各用一个 profile 目录，插件装在三处。勾选只改 state.json 的 dshProfiles，下一轮即生效">?</i></span>
+        ${dshList.map((p) => {
+          const on = (S.dshProfiles || []).includes(p);
+          return `<button class="chan mini ${on ? "on" : ""}" data-dshprofile="${esc(p)}" data-on="${on ? "off" : "on"}" type="button"><span class="dot"></span><span><b>${esc(p)}</b></span></button>`;
+        }).join("")}
+      </div>`
+    : "";
+
   return `<div class="hc ${h.found ? "" : "dead"}">
     <div class="hhead">
       <span class="hname"><span class="st ${h.armed && h.armed.length ? "on" : ""}"></span>${esc(h.id)}</span>
@@ -839,6 +857,7 @@ function harnessCard(h) {
     </div>
     ${notes.length ? `<div class="hnote">${notes.map(esc).join("<br>")}</div>` : ""}
     <div class="chans">${chans}</div>
+    ${profileRow}
   </div>`;
 }
 function recommendMode(h) {
@@ -1051,6 +1070,19 @@ $("#selbar").addEventListener("click", async (e) => {
   });
 });
 async function onChan(e) {
+  // dsh 的三个形态：勾/取消只改 state.json，不动磁盘，所以是即时可逆的
+  const pb = e.target.closest("[data-dshprofile]");
+  if (pb) {
+    const profile = pb.dataset.dshprofile;
+    const on = pb.dataset.on === "on";
+    try {
+      await api("/api/dsh-profile", { method: "POST", headers: { "content-type": "application/json" },
+        body: JSON.stringify({ profile, on }) });
+      toast(`dsh · ${profile} ${on ? "已开" : "已关"}`);
+      await load();
+    } catch (err) { toast("失败：" + err.message, true); }
+    return;
+  }
   const b = e.target.closest("[data-chan]"); if (!b) return;
   const { chan, h } = b.dataset;
   const on = S.harnesses.find((x) => x.id === h)?.armed?.includes(chan);