feat: 心裡話與不重複發言、劇場模式同規則、人格匯出匯入

讓人格講話更像正常人，並讓人格可以搬家。 1. 心裡話（inner voice） - 新增 `think` 子指令：推導/盤算寫進 state/inner.jsonl，只印「💭 心想 N 句」，內容永不回顯給使用者。 - <persona-context> 每輪帶回最近三句，推論因此有連續性。 2. 短時間內不重複 - 說出口的話由 Stop hook 自動記進 state/said.jsonl。 - 新增 `said check|list`：事前確認這句是不是又要說一次。 - 相似度 = 字元 bigram Jaccard(0.4) + 字集合 Jaccard(0.6)，門檻 0.72；字集合權重較高才分得開「重排語序」（要擋）與「換掉關鍵詞」（是新資訊，放行）。 3. 回話一到三句 + 劇場模式同樣適用 - 規則注入 turnContext 與 UserPromptSubmit hint。 - 劇場模式的 CLI 都帶 --quiet，警告會被丟掉，所以 `room post` 對近似重複與超過三句的發言直接拒收（--allow-repeat / --force 例外）， host 與 guest 走同一支 CLI，一視同仁。 4. 人格匯出匯入（新 skill persona-transfer） - `export` / `import`：單一 JSON bundle（可 gzip）＋ sha256 checksum，無外部依賴。不帶載入鎖與 guest 租約，journal/ 需明確 --with-journal。 - 匯出只能匯出本 session 已載入的人格，否則等於跨人格讀取的後門； bundle 內的 ../ 逃逸路徑一律拒收。順帶修正：agents/persona-guest.md 的 CLI 範例都少了 --as-guest，照著跑會被 requireMember 擋下，guest 根本無法認識自己或發言。 selftest 102 項全綠（新增 ⑪ 說話節制、⑫ 匯出匯入，含重複判定校準對照表）。 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-07-30 00:59:16 +00:00
parent 2005f26c94
commit 52a73e81c8
14 changed files with 956 additions and 48 deletions
@@ -7,6 +7,7 @@
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import zlib from "node:zlib";
 import { spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";

@@ -262,6 +263,149 @@ const takeover = cli(["load", "--persona", "alpha", "--session", "sess-fresh-999
 check("死鎖可自動接手並回報", takeover.stdout.includes("接手"), takeover.stdout.slice(0, 200));
 pl.gcRuntime();

+console.log("⑪ 說話節制：心裡話 / 不重複 / 一到三句");
+const S_SPEAK = "sess-fresh-9999"; // ⑩ 接手 alpha 的那個 session
+check("句數以句末標點計算", pl.sentenceCount("好。我想想。") === 2 && pl.sentenceCount("嗯") === 1);
+check("劇場前綴不影響比對",
+  pl.normalizeSpeech("🪼 Alpha（喜悅42/期待31）：今天的風很輕") === pl.normalizeSpeech("今天的風很輕。"));
+// 重複判定的校準對照表：改 similarity() 或 REPEAT_THRESHOLD 時，這張表必須維持全綠
+const REPEAT_CASES = [
+  [true, "我等一下把報告寄給你", "等一下我會把報告寄給你"], // 語序重排＝同一件事
+  [true, "你這次的鐘修得比上次穩", "這次的鐘你修得比上次穩"],
+  [true, "那你先忙，我在這裡等你。", "我在這裡等你，你先忙吧。"],
+  [false, "你今天看起來很累", "你今天看起來很開心"], // 換關鍵詞＝新資訊
+  [false, "報告我明天寄", "報告我後天寄"],
+  [false, "那台舊鐘修好了嗎", "那台舊鐘賣掉了嗎"],
+  [false, "早上的會議又被排進來了", "我幫你把會議挪到下午三點"],
+  [false, "我等一下把報告寄給你", "今天午餐想吃什麼"],
+  [false, "我不同意這個做法", "我不同意，因為它會讓值班的人扛下全部風險"],
+];
+const misjudged = REPEAT_CASES.filter(([want, a, b]) => (pl.similarity(a, b) >= pl.REPEAT_THRESHOLD) !== want);
+check("重複判定校準：換句話說同一件事會擋、只換關鍵詞放行",
+  misjudged.length === 0,
+  misjudged.map(([, a, b]) => `${a}／${b}=${pl.similarity(a, b)}`).join(" | "));
+const think = cli(["think", "--session", S_SPEAK, "--kind", "infer",
+  "--text", "他今天語氣比昨天急，deadline 可能提前了"]);
+check("think 只回報「心想 N 句」，不回顯內容",
+  think.stdout.includes("心想") && !think.stdout.includes("deadline"), JSON.stringify(think.stdout));
+check("心裡話寫進 inner.jsonl", pl.readJsonl(pl.innerPath("alpha")).length === 1);
+check("心裡話不會混進短期記憶",
+  !pl.readJsonl(pl.shortTermPath("alpha")).some((r) => String(r.text || "").includes("deadline 可能提前")));
+cli(["said", "check", "--session", S_SPEAK, "--text", "我等一下把報告寄給你，別擔心。", "--record"]);
+const dup = cli(["said", "check", "--session", S_SPEAK, "--json",
+  "--text", "等一下我會把報告寄給你，別擔心。"]);
+check("said check 抓到短時間內的重複", (() => {
+  try {
+    const parsed = JSON.parse(dup.stdout);
+    return parsed.ok === false && parsed.repeat && parsed.repeat.similarity >= pl.REPEAT_THRESHOLD;
+  } catch {
+    return false;
+  }
+})(), dup.stdout.slice(0, 160));
+const longSay = cli(["said", "check", "--session", S_SPEAK, "--json",
+  "--text", "第一句在這。第二句在這。第三句在這。第四句在這。"]);
+check("said check 抓到超過三句", (() => {
+  try {
+    const parsed = JSON.parse(longSay.stdout);
+    return parsed.sentences === 4 && parsed.ok === false;
+  } catch {
+    return false;
+  }
+})(), longSay.stdout.slice(0, 160));
+const ctxSpeak = pl.turnContext("alpha", S_SPEAK, "報告");
+check("turnContext 注入說話規則 / 心裡話 / 最近說過",
+  ctxSpeak.includes("說話規則") && ctxSpeak.includes("💭") && ctxSpeak.includes("最近說過的話"),
+  ctxSpeak.slice(0, 400));
+cli(["invite", "--session", S_SPEAK, "--guest", "beta", "--topic", "節制測試"]);
+const room2 = pl.loadSession(S_SPEAK).guests?.beta?.room;
+check("劇場模式的規則也注入了（每輪三句、重複會被擋）", (() => {
+  const ctx = pl.turnContext("alpha", S_SPEAK, "繼續");
+  return ctx.includes("句以內") && ctx.includes("重複");
+})());
+cli(["room", "post", "--session", S_SPEAK, "--room", room2, "--as", "alpha", "--text", "你這次的鐘修得比上次穩。"]);
+const repeatPost = cli(["room", "post", "--session", S_SPEAK, "--room", room2, "--as", "alpha",
+  "--text", "這次的鐘你修得比上次穩。"], { expectOk: false });
+check("room post 擋下近似重複的台詞",
+  repeatPost.status !== 0 && repeatPost.stderr.includes("說過"), repeatPost.stderr.slice(0, 160));
+check("--allow-repeat 可以放行",
+  cli(["room", "post", "--session", S_SPEAK, "--room", room2, "--as", "alpha",
+    "--text", "這次的鐘你修得比上次穩。", "--allow-repeat"]).status === 0);
+const longPost = cli(["room", "post", "--session", S_SPEAK, "--room", room2, "--as", "alpha",
+  "--text", "第一句在這。第二句在這。第三句在這。第四句在這。"], { expectOk: false });
+check("room post 擋下超過三句的發言",
+  longPost.status !== 0 && longPost.stderr.includes("超過"), longPost.stderr.slice(0, 160));
+check("說出口的話有進 said.jsonl",
+  pl.readJsonl(pl.saidPath("alpha")).some((r) => String(r.text).includes("鐘修得比上次穩")));
+hook("turn_end.mjs", { session_id: S_SPEAK, last_assistant_message: "🪼 Alpha（平靜50）：那就這樣說定了。" });
+check("Stop hook 會把說出口的話記進 said（去掉名字前綴）",
+  pl.readJsonl(pl.saidPath("alpha")).some((r) => r.text === "那就這樣說定了。"),
+  JSON.stringify(pl.recentSaid("alpha", 2)));
+const guestThink = cli(["think", "--persona", "beta", "--session", S_SPEAK, "--as-guest",
+  "--room", room2, "--text", "alpha 好像在試探我，先不要接這句"]);
+check("guest 的心裡話只回報數量",
+  guestThink.status === 0 && guestThink.stdout.includes("心想") && !guestThink.stdout.includes("試探"),
+  JSON.stringify(guestThink.stdout));
+check("guest 的心裡話進自己的 inbox，不動自己的狀態",
+  pl.readJsonl(pl.inboxPath("beta", room2)).some((r) => r.role === "inner") &&
+    pl.readJsonl(pl.innerPath("beta")).length === 0);
+check("guard：guest 可以 think / said（白名單）",
+  ["think", "said"].every((sub) =>
+    guard({ session_id: S_SPEAK, agent_id: "guest-2", agent_type: "jsc-persona:persona-guest", tool_name: "Bash",
+      tool_input: { command: `node persona.mjs ${sub} --persona beta --session ${S_SPEAK} --as-guest --text x` } }) === "pass"));
+cli(["leave", "--session", S_SPEAK, "--guest", "beta"]);
+
+console.log("⑫ 匯出 / 匯入");
+const OUT = fs.mkdtempSync(path.join(os.tmpdir(), "persona-bundle-"));
+const bundleFile = path.join(OUT, "alpha.persona.json");
+cli(["export", "--session", S_SPEAK, "--out", bundleFile]);
+check("匯出產生 bundle 檔", fs.existsSync(bundleFile));
+const bundle = JSON.parse(fs.readFileSync(bundleFile, "utf8"));
+check("bundle 格式與 checksum 正確",
+  bundle.format === pl.BUNDLE_FORMAT && pl.validateBundle(bundle).ok && pl.validateBundle(bundle).checksumOk);
+check("bundle 帶走身分 / 記憶 / 心智圖 / 關係圖",
+  ["IDENTITY.md", "SOUL.md", "state/emotion.json", "memory/long-term/hates-morning-meetings.md",
+    "memory/INDEX.md", "mindmap/semantic.mmd", "relations/graph.json"].every((f) => f in bundle.files));
+check("bundle 不含載入鎖與 guest 租約",
+  !("state/lock.json" in bundle.files) && !("state/guests.json" in bundle.files));
+check("bundle 預設不含 journal（隱私）",
+  !Object.keys(bundle.files).some((f) => f.startsWith("journal/")));
+const gzFile = path.join(OUT, "alpha.persona.json.gz");
+cli(["export", "--session", S_SPEAK, "--out", gzFile, "--with-journal", "--gzip"]);
+const gzBundle = JSON.parse(zlib.gunzipSync(fs.readFileSync(gzFile)).toString("utf8"));
+check("--gzip 可解回同一份，--with-journal 會帶 journal",
+  gzBundle.persona === "alpha" && gzBundle.stats.with_journal === true &&
+    Object.keys(gzBundle.files).some((f) => f.startsWith("journal/")));
+check("匯入既有人格未加 --force 會被擋",
+  cli(["import", "--session", S_SPEAK, "--file", bundleFile], { expectOk: false }).status !== 0);
+cli(["import", "--session", S_SPEAK, "--file", bundleFile, "--persona", "alpha-copy"]);
+check("換名匯入成功", pl.personaExists("alpha-copy"));
+check("匯入後長期記憶與 INDEX 都在",
+  fs.existsSync(path.join(pl.longTermDir("alpha-copy"), "hates-morning-meetings.md")) &&
+    fs.readFileSync(pl.indexPath("alpha-copy"), "utf8").includes("hates-morning-meetings"));
+check("匯入後身分與情緒都在",
+  pl.identityBrief("alpha-copy").includes("Alpha") && pl.loadEmotion("alpha-copy").levels.joy > 0);
+check("匯入的人格不帶鎖（不會綁在原機器的程序上）", !pl.lockStatus("alpha-copy").locked);
+check("config 留下來歷", (pl.loadConfig("alpha-copy").imported_from || {}).persona === "alpha");
+const evil = JSON.parse(JSON.stringify(bundle));
+evil.files["../../../etc/persona-pwned"] = { encoding: "utf8", content: "x" };
+const evilResult = pl.importBundle(evil, "alpha-evil");
+check("bundle 內的 ../ 逃逸路徑會被拒絕",
+  evilResult.rejected.includes("../../../etc/persona-pwned") && !fs.existsSync("/etc/persona-pwned"));
+const tampered = JSON.parse(JSON.stringify(bundle));
+tampered.files["SOUL.md"] = { encoding: "utf8", content: "被改過的靈魂" };
+const tamperedFile = path.join(OUT, "tampered.persona.json");
+fs.writeFileSync(tamperedFile, JSON.stringify(tampered), "utf8");
+check("checksum 不符會被擋（除非 --force）",
+  cli(["import", "--session", S_SPEAK, "--file", tamperedFile, "--persona", "alpha-tampered"],
+    { expectOk: false }).status !== 0);
+check("guard：不得匯出別的人格（跨人格外洩）",
+  guard({ session_id: S_SPEAK, tool_name: "Bash",
+    tool_input: { command: `node persona.mjs export --persona beta --session ${S_SPEAK} --out /tmp/b.json` } }) === "deny");
+check("guard：匯入新人格允許（只寫新目錄，不讀別人）",
+  guard({ session_id: S_SPEAK, tool_name: "Bash",
+    tool_input: { command: `node persona.mjs import --persona gamma --session ${S_SPEAK} --file /tmp/b.json` } }) === "pass");
+fs.rmSync(OUT, { recursive: true, force: true });
+
 console.log(`\n${"=".repeat(60)}\n通過 ${passed} 項，失敗 ${failed} 項　→　${failed === 0 ? "全部通過 ✅" : "有測試失敗 ❌"}`);
 console.log(`（暫存倉庫留在 ${STORE}，可自行刪除）`);
 process.exit(failed ? 1 : 0);