@aalis/plugin-user-profile 0.11.1 → 0.13.0

package/dist/index.js

@@ -1,6 +1,13 @@
-import { useCommandService } from '@aalis/api-commands';
-import { resolveLLMModel } from '@aalis/api-llm';
-import { useToolService } from '@aalis/api-tools';
+import { authority, DEFAULT_AUTHORITY } from '@aalis/api-authority';
+import { commands } from '@aalis/api-commands';
+import { contributions } from '@aalis/api-contributions';
+import { hooks } from '@aalis/api-hooks';
+import { llm, resolveLLMModel } from '@aalis/api-llm';
+import { memory } from '@aalis/api-memory';
+import { persona } from '@aalis/api-persona';
+import { tools } from '@aalis/api-tools';
+import { userRelation } from '@aalis/api-user-relation';
+import { config, definePlugin, events, logger, optional } from '@aalis/core';
 import { WellKnownKinds } from '@aalis/schema-message';
 import { parseLLMJsonObject } from '@aalis/util-json-repair';
 // ════════════════════════════════════════════════════════════
@@ -26,13 +33,6 @@ import { parseLLMJsonObject } from '@aalis/util-json-repair';
 // - 上限 100，下限 0
 // 例：群聊纯旁观一条 = +0.1；群聊被 @ 并回复 = +0.1 + 1.5 = +1.6；私聊一条 = +0.1 + 1.0 = +1.1
 // ════════════════════════════════════════════════════════════
-export const name = '@aalis/plugin-user-profile';
-export const displayName = '用户事实档案';
-export const subsystem = 'memory';
-export const inject = {
-    required: ['memory', 'llm'],
-    optional: ['user-relation', 'tools'],
-};
 const PROFILE_NS = 'user:profile';
 /** Aalis 自档案的 userKey 前缀。userKeyOf 形如 `platform:userId`，
  *  这里用 `__self__:<personaName>` 这种不可能在真实平台出现的形式做隔离。
@@ -45,7 +45,7 @@ const DEFAULT_PERSONA_NAME = 'Aalis';
  *  按 persona 名分堆（key = persona 名），与 selfFacts 的归属方式保持一致：
  *  同名 persona（如 onebot 与 webui 两张都叫 Aalis）共享准则；不同 persona（如 Babel）各自独立。 */
 const INSTRUCTIONS_NS = 'aalis:instructions';
-export const configSchema = {
+const configSchema = {
     extractEveryNMessages: {
         type: 'number',
         label: '每 N 条消息提取一次',
@@ -212,15 +212,15 @@ const KNOWN_INSTRUCTION_CATEGORIES = [
     '安全',
     '其他',
 ];
-/** 生成稳定短 ID（6 字符 base36，对 30 条以内规模碰撞概率极低） */
-function genFactId(existing) {
+/** 生成稳定短 ID（6 字符 base36，对 30 条以内规模碰撞概率极低）；前缀 'f' 为事实、'i' 为指令 */
+function genShortId(prefix, existing) {
     for (let i = 0; i < 8; i++) {
-        const id = `f${Math.random().toString(36).slice(2, 7)}`;
+        const id = `${prefix}${Math.random().toString(36).slice(2, 7)}`;
         if (!existing.has(id))
             return id;
     }
     // 极端兜底：加时间戳后缀
-    return `f${Date.now().toString(36).slice(-5)}`;
+    return `${prefix}${Date.now().toString(36).slice(-5)}`;
 }
 function decimalPlaces(value) {
     if (!Number.isFinite(value))
@@ -303,7 +303,29 @@ function renderHistoryForExtract(history, userId, platform) {
         .filter(Boolean)
         .join('\n');
 }
-export function apply(ctx, config) {
+const uses = {
+    memory,
+    llm,
+    events,
+    hooks,
+    contributions,
+    config,
+    logger,
+    authority: optional(authority),
+    tools: optional(tools),
+    commands: optional(commands),
+    persona: optional(persona),
+    userRelation: optional(userRelation),
+};
+export default definePlugin({
+    name: '@aalis/plugin-user-profile',
+    displayName: '用户事实档案',
+    subsystem: 'memory',
+    configSchema,
+    uses,
+    apply: registerUserProfile,
+});
+function registerUserProfile({ memory, llm, events, hooks, contributions, config, logger, authority, tools, commands, persona, userRelation, }) {
     const cfg = {
         extractEveryNMessages: config.extractEveryNMessages ?? 5,
         historyForExtraction: Math.max(2, config.historyForExtraction ?? 8),
@@ -350,8 +372,7 @@ export function apply(ctx, config) {
      *  若 persona 服务不可用或未配 name，回退到默认 `aalis`。 */
     function getCurrentPersonaName() {
         try {
-            const persona = ctx.getService('persona');
-            const name = persona?.getPersonaName?.()?.trim();
+            const name = persona.current?.getPersonaName().trim();
             return name && name.length > 0 ? name : DEFAULT_PERSONA_NAME;
         }
         catch {
@@ -376,15 +397,6 @@ export function apply(ctx, config) {
     function clipInstructionText(s) {
         return s.length > cfg.maxInstructionCharsPerItem ? `${s.slice(0, cfg.maxInstructionCharsPerItem)}…` : s;
     }
-    /** 生成 Instruction 短 ID（与 Fact 同前缀但带 'i' 区分，便于日志中识别） */
-    function genInstructionId(existing) {
-        for (let i = 0; i < 8; i++) {
-            const id = `i${Math.random().toString(36).slice(2, 7)}`;
-            if (!existing.has(id))
-                return id;
-        }
-        return `i${Date.now().toString(36).slice(-5)}`;
-    }
     function parseInstructionArray(raw) {
         const usedIds = new Set();
         const list = [];
@@ -395,9 +407,9 @@ export function apply(ctx, config) {
             const text = typeof obj.text === 'string' ? obj.text.trim() : '';
             if (!text)
                 continue;
-            let id = typeof obj.id === 'string' && obj.id.trim() ? obj.id.trim() : genInstructionId(usedIds);
+            let id = typeof obj.id === 'string' && obj.id.trim() ? obj.id.trim() : genShortId('i', usedIds);
             while (usedIds.has(id))
-                id = genInstructionId(usedIds);
+                id = genShortId('i', usedIds);
             usedIds.add(id);
             const updatedAt = typeof obj.updatedAt === 'number' ? obj.updatedAt : 0;
             const observedAt = typeof obj.observedAt === 'number' ? obj.observedAt : updatedAt || undefined;
@@ -415,28 +427,35 @@ export function apply(ctx, config) {
         }
         return list;
     }
-    async function loadInstructions() {
-        const memory = ctx.getService('memory');
+    /**
+     * 读取指令档案（不存在返回空档案）。读失败原样抛出，理由同 {@link loadProfile}；
+     * 只读渲染走 {@link loadInstructionsLenient}。
+     * mem 由调用方传入：一次操作只认开头取到的实例，理由见 {@link loadProfile}
+     */
+    async function loadInstructions(mem) {
         const empty = { instructions: [], updatedAt: 0 };
-        if (!memory)
+        if (!mem)
             return empty;
+        const doc = await mem.getMetadata(INSTRUCTIONS_NS, getInstructionsKey());
+        if (!doc)
+            return empty;
+        const instructions = Array.isArray(doc.instructions) ? parseInstructionArray(doc.instructions) : [];
+        return { instructions, updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0 };
+    }
+    /** 只读渲染用：读失败按空档案处理，只记 debug（结果不会被写回） */
+    async function loadInstructionsLenient(mem) {
         try {
-            const doc = await memory.getMetadata(INSTRUCTIONS_NS, getInstructionsKey());
-            if (!doc)
-                return empty;
-            const instructions = Array.isArray(doc.instructions) ? parseInstructionArray(doc.instructions) : [];
-            return { instructions, updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0 };
+            return await loadInstructions(mem);
         }
         catch (err) {
-            ctx.logger.debug(`加载指令档案失败: ${err instanceof Error ? err.message : String(err)}`);
-            return empty;
+            logger.debug(`加载指令档案失败: ${err instanceof Error ? err.message : String(err)}`);
+            return { instructions: [], updatedAt: 0 };
         }
     }
-    async function saveInstructions(doc) {
-        const memory = ctx.getService('memory');
-        if (!memory)
+    async function saveInstructions(mem, doc) {
+        if (!mem)
             return;
-        await memory.saveMetadata(INSTRUCTIONS_NS, getInstructionsKey(), {
+        await mem.saveMetadata(INSTRUCTIONS_NS, getInstructionsKey(), {
             instructions: doc.instructions,
             updatedAt: doc.updatedAt,
         });
@@ -468,7 +487,7 @@ export function apply(ctx, config) {
             const text = clipInstructionText(a.text);
             if (textSet.has(text))
                 continue;
-            const id = genInstructionId(usedIds);
+            const id = genShortId('i', usedIds);
             usedIds.add(id);
             byId.set(id, {
                 id,
@@ -531,70 +550,81 @@ export function apply(ctx, config) {
         const s = v.trim();
         return s.length > 0 ? s.slice(0, 40) : undefined;
     }
-    /** 解析 metadata 中的事实数组（兼容旧格式 string[]，自动迁移） */
+    /** 解析 metadata 中的事实数组；缺正文、id、时效或时间戳的条目跳过 */
     function parseFactArray(raw) {
         const usedIds = new Set();
         const facts = [];
         for (const item of raw) {
-            if (typeof item === 'string' && item.trim()) {
-                const id = genFactId(usedIds);
-                usedIds.add(id);
-                facts.push({ id, text: item.trim(), temporality: 'permanent', updatedAt: 0 });
-            }
-            else if (item && typeof item === 'object') {
-                const obj = item;
-                const text = typeof obj.text === 'string' ? obj.text.trim() : '';
-                if (!text)
-                    continue;
-                let id = typeof obj.id === 'string' && obj.id.trim() ? obj.id.trim() : genFactId(usedIds);
-                while (usedIds.has(id))
-                    id = genFactId(usedIds);
-                usedIds.add(id);
-                const cat = typeof obj.category === 'string' && KNOWN_CATEGORIES.includes(obj.category)
-                    ? obj.category
-                    : undefined;
-                const updatedAt = typeof obj.updatedAt === 'number' ? obj.updatedAt : 0;
-                const observedAt = typeof obj.observedAt === 'number' ? obj.observedAt : updatedAt || undefined;
-                facts.push({
-                    id,
-                    text,
-                    category: cat,
-                    temporality: normalizeTemporality(obj.temporality, cat),
-                    observedAt,
-                    timeHint: normalizeTextField(obj.timeHint),
-                    updatedAt,
-                });
+            if (!item || typeof item !== 'object')
+                continue;
+            const obj = item;
+            const text = typeof obj.text === 'string' ? obj.text.trim() : '';
+            if (!text ||
+                typeof obj.id !== 'string' ||
+                !obj.id.trim() ||
+                (obj.temporality !== 'permanent' && obj.temporality !== 'temporary') ||
+                typeof obj.observedAt !== 'number' ||
+                typeof obj.updatedAt !== 'number') {
+                continue;
             }
+            let id = obj.id.trim();
+            while (usedIds.has(id))
+                id = genShortId('f', usedIds);
+            usedIds.add(id);
+            const cat = typeof obj.category === 'string' && KNOWN_CATEGORIES.includes(obj.category)
+                ? obj.category
+                : undefined;
+            facts.push({
+                id,
+                text,
+                category: cat,
+                temporality: obj.temporality,
+                observedAt: obj.observedAt,
+                timeHint: normalizeTextField(obj.timeHint),
+                updatedAt: obj.updatedAt,
+            });
         }
         return facts;
     }
-    /** 读取一个用户的现有档案（不存在返回 undefined）。兼容旧格式 string[]，自动迁移 */
-    async function loadProfile(userKey) {
-        const memory = ctx.getService('memory');
-        if (!memory)
+    /**
+     * 读取一个用户的现有档案（getMetadata 返回空才算不存在，返回 undefined）。
+     *
+     * 读失败原样抛出：先读后改再写的一方（关系分、事实提取、自反思、定点删事实）据此中止本次写入。
+     * 若把「读不出」当成「不存在」，调用方会用默认值覆盖写回，一次瞬时读错就清空整份档案。
+     * 只读渲染走 {@link loadProfileLenient}。
+     *
+     * 档案与指令的读写函数都由调用方传入 mem，一次操作（读 → 调 LLM → 重读 → 覆盖写）全程只认
+     * 开头取到的实例：memory 胜者可能在 LLM 调用期间换人而本插件不重启，每步现取胜者会把 A 上
+     * 合并出的整张表覆盖写进 B，B 原有的条目被删。
+     */
+    async function loadProfile(mem, userKey) {
+        if (!mem)
+            return undefined;
+        const doc = await mem.getMetadata(PROFILE_NS, userKey);
+        if (!doc)
             return undefined;
+        const facts = Array.isArray(doc.facts) ? parseFactArray(doc.facts) : [];
+        return {
+            facts,
+            relationScore: typeof doc.relationScore === 'number' ? Math.min(100, Math.max(0, doc.relationScore)) : 0,
+            interactionCount: typeof doc.interactionCount === 'number' ? Math.max(0, Math.floor(doc.interactionCount)) : 0,
+            lastInteractionAt: typeof doc.lastInteractionAt === 'number' ? doc.lastInteractionAt : undefined,
+            updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0,
+        };
+    }
+    /** 只读渲染用：读失败按「暂无档案」处理，只记 debug（结果不会被写回） */
+    async function loadProfileLenient(mem, userKey) {
         try {
-            const doc = await memory.getMetadata(PROFILE_NS, userKey);
-            if (!doc)
-                return undefined;
-            const facts = Array.isArray(doc.facts) ? parseFactArray(doc.facts) : [];
-            return {
-                facts,
-                relationScore: typeof doc.relationScore === 'number' ? Math.min(100, Math.max(0, doc.relationScore)) : 0,
-                interactionCount: typeof doc.interactionCount === 'number' ? Math.max(0, Math.floor(doc.interactionCount)) : 0,
-                lastInteractionAt: typeof doc.lastInteractionAt === 'number' ? doc.lastInteractionAt : undefined,
-                updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0,
-            };
+            return await loadProfile(mem, userKey);
         }
         catch (err) {
-            ctx.logger.debug(`加载用户档案失败 (${userKey}): ${err instanceof Error ? err.message : String(err)}`);
+            logger.debug(`加载用户档案失败 (${userKey}): ${err instanceof Error ? err.message : String(err)}`);
             return undefined;
         }
     }
     /** 保存档案（覆盖式） */
-    async function saveProfile(userKey, profile) {
-        const memory = ctx.getService('memory');
-        if (!memory)
+    async function saveProfile(mem, userKey, profile) {
+        if (!mem)
             return;
         const payload = {
             facts: profile.facts,
@@ -603,13 +633,67 @@ export function apply(ctx, config) {
             lastInteractionAt: profile.lastInteractionAt,
             updatedAt: profile.updatedAt,
         };
-        await memory.saveMetadata(PROFILE_NS, userKey, payload);
+        await mem.saveMetadata(PROFILE_NS, userKey, payload);
     }
     function normalizeCategory(v) {
         if (typeof v !== 'string')
             return undefined;
         return KNOWN_CATEGORIES.includes(v) ? v : undefined;
     }
+    /** 解析 LLM 输出里的 add / update / remove 三类事实操作。sourceQuote 原样带出，是否校验由调用方决定；它不入库（mergeFactList 逐字段构造 Fact） */
+    function parseFactOps(parsed) {
+        const obj = parsed;
+        const add = Array.isArray(obj.add)
+            ? obj.add.flatMap(x => {
+                if (!x || typeof x !== 'object')
+                    return [];
+                const o = x;
+                const t = typeof o.text === 'string' ? o.text.trim() : '';
+                if (!t)
+                    return [];
+                const category = normalizeCategory(o.category);
+                const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
+                return [
+                    {
+                        text: t,
+                        category,
+                        temporality: normalizeTemporality(o.temporality, category),
+                        timeHint: normalizeTextField(o.timeHint),
+                        sourceQuote,
+                    },
+                ];
+            })
+            : [];
+        const update = Array.isArray(obj.update)
+            ? obj.update.flatMap(x => {
+                if (!x || typeof x !== 'object')
+                    return [];
+                const o = x;
+                const id = typeof o.id === 'string' ? o.id.trim() : '';
+                const t = typeof o.text === 'string' ? o.text.trim() : '';
+                if (!id || !t)
+                    return [];
+                const category = normalizeCategory(o.category);
+                const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
+                return [
+                    {
+                        id,
+                        text: t,
+                        category,
+                        temporality: normalizeTemporality(o.temporality, category),
+                        timeHint: normalizeTextField(o.timeHint),
+                        sourceQuote,
+                    },
+                ];
+            })
+            : [];
+        const remove = Array.isArray(obj.remove)
+            ? obj.remove
+                .filter((x) => typeof x === 'string' && x.trim().length > 0)
+                .map(s => s.trim())
+            : [];
+        return { add, update, remove };
+    }
     /** 调用 LLM 从历史中提取/修订事实，返回 add / update / remove 三类操作。 */
     async function llmExtractFacts(history, existingFacts, nickname, userId, platform) {
         const empty = {
@@ -658,7 +742,7 @@ export function apply(ctx, config) {
         const user = `# 提取目标\n${who}\n\n# 已知事实（带 id，请在 update/remove 中精确引用 id）\n${factListText}` +
             `\n\n# 会话历史（含多用户，仅供消歧；只能从「目标用户」发言中提取事实）\n${renderedHistory || '（暂无会话历史）'}`;
         // 优先用 cfg.extractLLM 指定的模型；否则取默认 chat-capable LLM。
-        const entry = resolveLLMModel(ctx, cfg.extractLLM, ['chat']);
+        const entry = resolveLLMModel(llm, cfg.extractLLM, ['chat']);
         if (!entry)
             return empty;
         const extractLlm = entry.instance;
@@ -680,7 +764,7 @@ export function apply(ctx, config) {
             if (!parsed) {
                 // util-json-repair 已尝试剥 fence + 修裸引号 + 补括号；仍失败 → 模型多半
                 // 写成了纯文本/markdown。给一次显式反馈再来一次，避免一次失败丢失整批事实。
-                ctx.logger.warn(`[user-profile] LLM 输出无法解析为 JSON，尝试重试一次。原文前 200 字：${text.slice(0, 200)}`);
+                logger.warn(`[user-profile] LLM 输出无法解析为 JSON，尝试重试一次。原文前 200 字：${text.slice(0, 200)}`);
                 const retryResp = await extractLlm.chat({
                     messages: [
                         ...baseMessages,
@@ -700,61 +784,12 @@ export function apply(ctx, config) {
                 text = (retryResp.content ?? '').trim();
                 ({ parsed } = parseLLMJsonObject(text));
                 if (!parsed) {
-                    ctx.logger.warn(`[user-profile] LLM 重试后仍无法解析 JSON，放弃本批次。重试原文前 200 字：${text.slice(0, 200)}`);
+                    logger.warn(`[user-profile] LLM 重试后仍无法解析 JSON，放弃本批次。重试原文前 200 字：${text.slice(0, 200)}`);
                     return empty;
                 }
-                ctx.logger.debug('[user-profile] LLM 重试后解析成功');
+                logger.debug('[user-profile] LLM 重试后解析成功');
             }
-            const parsedObj = parsed;
-            const add = Array.isArray(parsedObj.add)
-                ? parsedObj.add.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
-                    return [
-                        {
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                            sourceQuote,
-                        },
-                    ];
-                })
-                : [];
-            const update = Array.isArray(parsedObj.update)
-                ? parsedObj.update.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const id = typeof o.id === 'string' ? o.id.trim() : '';
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!id || !t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
-                    return [
-                        {
-                            id,
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                            sourceQuote,
-                        },
-                    ];
-                })
-                : [];
-            const remove = Array.isArray(parsedObj.remove)
-                ? parsedObj.remove
-                    .filter((x) => typeof x === 'string' && x.trim().length > 0)
-                    .map(s => s.trim())
-                : [];
+            const { add, update, remove } = parseFactOps(parsed);
             // sourceQuote 校验：quote 可能跨多条消息（LLM 用 \n 拼接），
             // 因此按行拆分，每行（非空）都必须能在「目标用户」语料中找到 normalize 后的子串。
             // 这样即使行与行之间夹着其他用户的消息也不会被错误拒收。
@@ -762,7 +797,7 @@ export function apply(ctx, config) {
             const validateSourceQuote = (item, kind) => {
                 const q = item.sourceQuote?.trim() ?? '';
                 if (!q) {
-                    ctx.logger.warn(`[user-profile] 丢弃 ${kind} fact（未提供 sourceQuote）: ${item.text}`);
+                    logger.warn(`[user-profile] 丢弃 ${kind} fact（未提供 sourceQuote）: ${item.text}`);
                     return false;
                 }
                 const lines = q
@@ -775,7 +810,7 @@ export function apply(ctx, config) {
                     if (!normalized)
                         continue;
                     if (!targetCorpus.includes(normalized)) {
-                        ctx.logger.warn(`[user-profile] 丢弃 ${kind} fact（sourceQuote 片段不在目标用户 ${userId} 发言中）: text="${item.text}" fragment="${frag}"`);
+                        logger.warn(`[user-profile] 丢弃 ${kind} fact（sourceQuote 片段不在目标用户 ${userId} 发言中）: text="${item.text}" fragment="${frag}"`);
                         return false;
                     }
                 }
@@ -783,20 +818,10 @@ export function apply(ctx, config) {
             };
             const validatedAdd = add.filter(item => validateSourceQuote(item, 'add'));
             const validatedUpdate = update.filter(item => validateSourceQuote(item, 'update'));
-            // 剥除 sourceQuote，不入库
-            const stripQuote = (item) => {
-                const { sourceQuote: _omit, ...rest } = item;
-                void _omit;
-                return rest;
-            };
-            return {
-                add: validatedAdd.map(stripQuote),
-                update: validatedUpdate.map(stripQuote),
-                remove,
-            };
+            return { add: validatedAdd, update: validatedUpdate, remove };
         }
         catch (err) {
-            ctx.logger.debug(`事实提取 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
+            logger.debug(`事实提取 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
             return empty;
         }
     }
@@ -857,14 +882,14 @@ export function apply(ctx, config) {
                     id: u.id,
                     text,
                     category: u.category ?? old.category,
-                    temporality: u.temporality ?? old.temporality ?? normalizeTemporality(undefined, u.category ?? old.category),
-                    observedAt: old.observedAt ?? now,
+                    temporality: u.temporality ?? old.temporality,
+                    observedAt: old.observedAt,
                     timeHint: u.timeHint ?? old.timeHint,
                     updatedAt: now,
                 });
             }
             else {
-                const id = genFactId(usedIds);
+                const id = genShortId('f', usedIds);
                 usedIds.add(id);
                 byId.set(id, {
                     id,
@@ -883,7 +908,7 @@ export function apply(ctx, config) {
             const text = clipText(a.text);
             if (textSet.has(text))
                 continue;
-            const id = genFactId(usedIds);
+            const id = genShortId('f', usedIds);
             usedIds.add(id);
             byId.set(id, {
                 id,
@@ -905,9 +930,14 @@ export function apply(ctx, config) {
         merged.sort((a, b) => a.updatedAt - b.updatedAt);
         return merged;
     }
-    /** 合并 facts 部分（向后兼容包装） */
-    function mergeFacts(existing, ops) {
-        return mergeFactList(existing, ops.add, ops.update, ops.remove, cfg.maxFactsPerUser);
+    /**
+     * LLM 的 update 针对调用前快照里的 id。快照里有、重读后已不在的，说明调用期间被删（清空或定点删除），
+     * 丢弃：否则 mergeFactList 把未知 id 当新增，删掉的事实换个 id 写回。快照里本就没有的 id 照旧按新增处理
+     */
+    function dropUpdatesOfDeletedFacts(update, snapshot, fresh) {
+        const snapshotIds = new Set(snapshot.map(f => f.id));
+        const freshIds = new Set(fresh.map(f => f.id));
+        return update.filter(u => !snapshotIds.has(u.id) || freshIds.has(u.id));
     }
     /**
      * 后台触发一次事实提取（并发互斥）。
@@ -919,38 +949,34 @@ export function apply(ctx, config) {
         if (inflightExtractions.has(userKey))
             return;
         inflightExtractions.add(userKey);
-        const memory = ctx.getService('memory');
+        const mem = memory.current;
         try {
-            if (!memory?.getHistory)
+            if (!mem)
                 return;
-            const rawHistory = await memory.getHistory(sessionId, cfg.historyForExtraction);
+            const rawHistory = await mem.getHistory(sessionId, cfg.historyForExtraction);
             // 跨会话委派是另一个 agent 实例发出的指令·不是该用户发言，不能作为他的用户存档提取语料
             const history = rawHistory.filter(m => m.kind !== WellKnownKinds.CrossSessionDelegation);
             // 序列中至少需要一条目标用户发言，否则没有可提取语料
             if (!history.some(m => isTargetUserMessage(m, userId, platform)))
                 return;
-            const profile = (await loadProfile(userKey)) ?? {
-                facts: [],
-                relationScore: 0,
-                interactionCount: 0,
-                updatedAt: 0,
-            };
-            const ops = await llmExtractFacts(history, profile.facts, nickname, userId, platform);
+            const snapshotFacts = (await loadProfile(mem, userKey))?.facts ?? [];
+            const ops = await llmExtractFacts(history, snapshotFacts, nickname, userId, platform);
             const hasFactOps = ops.add.length > 0 || ops.update.length > 0 || ops.remove.length > 0;
             if (!hasFactOps)
                 return;
-            const newFacts = mergeFacts(profile.facts, ops);
-            // 重新读取最新档案，避免覆盖提取期间（LLM 调用时）已写入的 relationScore 等字段
-            const freshProfile = (await loadProfile(userKey)) ?? profile;
-            await saveProfile(userKey, {
-                ...freshProfile,
+            // 以 LLM 返回后重读的档案为合并基底：调用期间档案可能被清空或删了事实，以调用前的快照
+            // 为基底会把删掉的内容整份写回；重读也保住期间写入的 relationScore 等字段
+            const fresh = (await loadProfile(mem, userKey)) ?? { facts: [], updatedAt: 0 };
+            const newFacts = mergeFactList(fresh.facts, ops.add, dropUpdatesOfDeletedFacts(ops.update, snapshotFacts, fresh.facts), ops.remove, cfg.maxFactsPerUser);
+            await saveProfile(mem, userKey, {
+                ...fresh,
                 facts: newFacts,
                 updatedAt: Date.now(),
             });
-            ctx.logger.debug(`用户档案已更新 (${userKey}): facts +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newFacts.length} 条`);
+            logger.debug(`用户档案已更新 (${userKey}): facts +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newFacts.length} 条`);
         }
         catch (err) {
-            ctx.logger.debug(`事实提取失败 (${userKey}): ${err instanceof Error ? err.message : String(err)}`);
+            logger.debug(`事实提取失败 (${userKey}): ${err instanceof Error ? err.message : String(err)}`);
         }
         finally {
             inflightExtractions.delete(userKey);
@@ -1016,7 +1042,7 @@ export function apply(ctx, config) {
             .filter(Boolean)
             .join('\n');
         const user = `# 已知的关于 Aalis 自己的事实（带 id）\n${factListText}\n\n# 最近对话历史\n${renderedHistory || '（暂无）'}`;
-        const entry = resolveLLMModel(ctx, cfg.extractLLM, ['chat']);
+        const entry = resolveLLMModel(llm, cfg.extractLLM, ['chat']);
         if (!entry)
             return empty;
         try {
@@ -1034,59 +1060,13 @@ export function apply(ctx, config) {
                 return empty;
             const { parsed } = parseLLMJsonObject(text);
             if (!parsed) {
-                ctx.logger.warn(`[user-profile] 自反思 LLM 输出无法解析为 JSON，原文前 200 字：${text.slice(0, 200)}`);
+                logger.warn(`[user-profile] 自反思 LLM 输出无法解析为 JSON，原文前 200 字：${text.slice(0, 200)}`);
                 return empty;
             }
-            const obj = parsed;
-            const add = Array.isArray(obj.add)
-                ? obj.add.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    return [
-                        {
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                        },
-                    ];
-                })
-                : [];
-            const update = Array.isArray(obj.update)
-                ? obj.update.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const id = typeof o.id === 'string' ? o.id.trim() : '';
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!id || !t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    return [
-                        {
-                            id,
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                        },
-                    ];
-                })
-                : [];
-            const remove = Array.isArray(obj.remove)
-                ? obj.remove
-                    .filter((x) => typeof x === 'string' && x.trim().length > 0)
-                    .map(s => s.trim())
-                : [];
-            return { ...empty, add, update, remove };
+            return parseFactOps(parsed);
         }
         catch (err) {
-            ctx.logger.debug(`自反思 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
+            logger.debug(`自反思 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
             return empty;
         }
     }
@@ -1098,31 +1078,27 @@ export function apply(ctx, config) {
             return;
         selfReflectionInflight = true;
         try {
-            const memory = ctx.getService('memory');
-            if (!memory?.getHistory)
+            const mem = memory.current;
+            if (!mem)
                 return;
-            const rawHistory = await memory.getHistory(sessionId, cfg.selfReflectHistory);
+            const rawHistory = await mem.getHistory(sessionId, cfg.selfReflectHistory);
             const history = rawHistory.filter(m => m.kind !== WellKnownKinds.CrossSessionDelegation);
             // 至少需要一些 assistant 发言作为"自反思"的材料
             if (!history.some(m => m.role === 'assistant' && m.content))
                 return;
             const selfKey = getSelfKey();
-            const profile = (await loadProfile(selfKey)) ?? {
-                facts: [],
-                relationScore: 0,
-                interactionCount: 0,
-                updatedAt: 0,
-            };
-            const ops = await llmReflectSelf(history, profile.facts);
+            const snapshotFacts = (await loadProfile(mem, selfKey))?.facts ?? [];
+            const ops = await llmReflectSelf(history, snapshotFacts);
             if (ops.add.length === 0 && ops.update.length === 0 && ops.remove.length === 0)
                 return;
-            const newFacts = mergeFactList(profile.facts, ops.add, ops.update, ops.remove, cfg.maxSelfFacts);
-            const fresh = (await loadProfile(selfKey)) ?? profile;
-            await saveProfile(selfKey, { ...fresh, facts: newFacts, updatedAt: Date.now() });
-            ctx.logger.debug(`Aalis 自档案已更新 (${selfKey}): +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newFacts.length} 条`);
+            // 合并基底取重读结果，理由同 triggerExtractionForUser
+            const fresh = (await loadProfile(mem, selfKey)) ?? { facts: [], updatedAt: 0 };
+            const newFacts = mergeFactList(fresh.facts, ops.add, dropUpdatesOfDeletedFacts(ops.update, snapshotFacts, fresh.facts), ops.remove, cfg.maxSelfFacts);
+            await saveProfile(mem, selfKey, { ...fresh, facts: newFacts, updatedAt: Date.now() });
+            logger.debug(`Aalis 自档案已更新 (${selfKey}): +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newFacts.length} 条`);
         }
         catch (err) {
-            ctx.logger.debug(`自反思失败：${err instanceof Error ? err.message : String(err)}`);
+            logger.debug(`自反思失败：${err instanceof Error ? err.message : String(err)}`);
         }
         finally {
             selfReflectionInflight = false;
@@ -1207,7 +1183,7 @@ export function apply(ctx, config) {
                 .join('\n')
             : '（暂无）';
         const user = `# 当前 persona\n${getCurrentPersonaName()}\n\n# 已有指令（带 id，可在 update/remove 中精确引用）\n${existingText}\n\n# 最近会话（仅含授权人 + Aalis + 系统通知）\n${rendered}`;
-        const entry = resolveLLMModel(ctx, cfg.extractLLM, ['chat']);
+        const entry = resolveLLMModel(llm, cfg.extractLLM, ['chat']);
         if (!entry)
             return empty;
         try {
@@ -1225,7 +1201,7 @@ export function apply(ctx, config) {
                 return empty;
             const { parsed } = parseLLMJsonObject(text);
             if (!parsed) {
-                ctx.logger.warn(`[user-profile] 指令提取 LLM 输出无法解析为 JSON，原文前 200 字：${text.slice(0, 200)}`);
+                logger.warn(`[user-profile] 指令提取 LLM 输出无法解析为 JSON，原文前 200 字：${text.slice(0, 200)}`);
                 return empty;
             }
             const obj = parsed;
@@ -1243,7 +1219,7 @@ export function apply(ctx, config) {
                     const srcKey = typeof o.sourceUserKey === 'string' ? o.sourceUserKey.trim() : '';
                     // 拒收：声称的 sourceUserKey 不在授权人集合里 → 说明 LLM 编造或越权采纳
                     if (!srcKey || !allowedUserKeys.has(srcKey)) {
-                        ctx.logger.warn(`[user-profile] 丢弃 instruction add（sourceUserKey 不在授权人列表中）: text="${t}" claimed="${srcKey}"`);
+                        logger.warn(`[user-profile] 丢弃 instruction add（sourceUserKey 不在授权人列表中）: text="${t}" claimed="${srcKey}"`);
                         return [];
                     }
                     const srcName = typeof o.sourceUserName === 'string' && o.sourceUserName.trim() ? o.sourceUserName.trim() : '';
@@ -1286,7 +1262,7 @@ export function apply(ctx, config) {
             return { add, update, remove };
         }
         catch (err) {
-            ctx.logger.debug(`指令提取 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
+            logger.debug(`指令提取 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
             return empty;
         }
     }
@@ -1298,53 +1274,58 @@ export function apply(ctx, config) {
             return;
         if (instructionExtractionInflight)
             return;
-        const authority = ctx.getService('authority');
-        if (!authority?.getAuthority) {
-            // authority 不可用 → 无法验证权限，跳过 LLM 自动提取（命令通道仍可用）
+        // 指令只采信有权下指令的人，门槛是发言人的数字权限等级（owner 视为无穷大）
+        const auth = authority.current;
+        if (!auth)
             return;
-        }
-        const authorityFn = (platform, userId) => authority.getAuthority(platform, userId);
+        const authorityFn = (platform, userId) => auth.isOwner(platform, userId)
+            ? Number.POSITIVE_INFINITY
+            : (auth.listUsers().find(u => u.platform === platform && u.userId === userId)?.level ?? DEFAULT_AUTHORITY);
         instructionExtractionInflight = true;
         try {
-            const memory = ctx.getService('memory');
-            if (!memory?.getHistory)
+            const mem = memory.current;
+            if (!mem)
                 return;
-            const rawHistory = await memory.getHistory(sessionId, cfg.instructionHistoryForExtraction);
+            const rawHistory = await mem.getHistory(sessionId, cfg.instructionHistoryForExtraction);
             const history = rawHistory.filter(m => m.kind !== WellKnownKinds.CrossSessionDelegation);
             if (history.length === 0)
                 return;
-            const doc = await loadInstructions();
+            const doc = await loadInstructions(mem);
             const ops = await llmExtractInstructions(history, doc.instructions, authorityFn);
             if (ops.add.length === 0 && ops.update.length === 0 && ops.remove.length === 0)
                 return;
-            const newInstructions = mergeInstructions(doc.instructions, ops.add.map(a => ({ ...a, sourceChannel: 'llm' })), ops.update.map(u => {
+            // 合并基底取 LLM 返回后重读的指令表：调用期间被清掉或删掉的指令不随调用前的快照写回；
+            // update 指向已不在的 id 时 mergeInstructions 本就跳过
+            const fresh = await loadInstructions(mem);
+            const newInstructions = mergeInstructions(fresh.instructions, ops.add.map(a => ({ ...a, sourceChannel: 'llm' })), ops.update.map(u => {
                 const { id, ...patch } = u;
                 return { id, patch };
             }), ops.remove);
-            const fresh = await loadInstructions();
-            await saveInstructions({
-                ...fresh,
-                instructions: newInstructions,
-                updatedAt: Date.now(),
-            });
-            ctx.logger.debug(`指令档案已更新 (${getInstructionsKey()}): +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newInstructions.length} 条`);
+            await saveInstructions(mem, { instructions: newInstructions, updatedAt: Date.now() });
+            logger.debug(`指令档案已更新 (${getInstructionsKey()}): +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newInstructions.length} 条`);
         }
         catch (err) {
-            ctx.logger.debug(`指令提取失败：${err instanceof Error ? err.message : String(err)}`);
+            logger.debug(`指令提取失败：${err instanceof Error ? err.message : String(err)}`);
         }
         finally {
             instructionExtractionInflight = false;
         }
     }
     async function updateRelationForUser(userKey, triggerType, options) {
-        const profile = (await loadProfile(userKey)) ?? { facts: [], relationScore: 0, interactionCount: 0, updatedAt: 0 };
-        await saveProfile(userKey, applyRelationUpdate(profile, triggerType, options));
+        const mem = memory.current;
+        const profile = (await loadProfile(mem, userKey)) ?? {
+            facts: [],
+            relationScore: 0,
+            interactionCount: 0,
+            updatedAt: 0,
+        };
+        await saveProfile(mem, userKey, applyRelationUpdate(profile, triggerType, options));
     }
     // ─── 关系分数：在 agent 触发回复路径上更新 ───
     // 注:钩子无优先级机制,同相位 handler 按插件激活序执行;本 handler 只做副作用
     // (更新关系分数)不改消息,与其它 handler 顺序无关。
     // 关系强度与"是否触发回复"绑定，因此仍走 agent:input:before 中间件。
-    ctx.middleware('agent:input:before', async (data, next) => {
+    hooks.middleware('agent:input:before', async (data, next) => {
         const { userId, platform, triggerType } = data.message;
         if (userId) {
             const userKey = userKeyOf(platform, userId);
@@ -1354,7 +1335,7 @@ export function apply(ctx, config) {
                 await updateRelationForUser(userKey, triggerType, { countInteraction: false });
             }
             catch (err) {
-                ctx.logger.debug(`关系强度更新异常 (${userKey}): ${err instanceof Error ? err.message : String(err)}`);
+                logger.debug(`关系强度更新异常 (${userKey}): ${err instanceof Error ? err.message : String(err)}`);
             }
         }
         await next();
@@ -1362,8 +1343,7 @@ export function apply(ctx, config) {
     // ─── 事实提取触发：每条入站消息落库后立即计数，与 agent 是否回复无关 ───
     // 监听 message-archive 在 archiveIncoming 落库成功后发出的 inbound:message:archived 事件，
     // 确保缓冲消息（onebot saveBufferedMessage 等不触发 agent 回复的路径）也能纳入计数。
-    ctx.on('inbound:message:archived', (...args) => {
-        const data = args[0];
+    events.on('inbound:message:archived', data => {
         const { sessionId, incoming } = data;
         const { userId, platform, nickname } = incoming;
         if (!userId)
@@ -1374,25 +1354,25 @@ export function apply(ctx, config) {
         // lastInteractionAt 的唯一写点，设门会连带关掉计数与时戳（衰减基准、最近互动
         // 排序全失效）。增量为 0 时 relationIncrementFor 自然返回 0，不加分即可。
         const userKey = userKeyOf(platform, userId);
-        void updateRelationForUser(userKey, 'witness').catch((err) => ctx.logger.debug(`witness 关系更新异常 (${userKey}): ${err instanceof Error ? err.message : String(err)}`));
+        void updateRelationForUser(userKey, 'witness').catch((err) => logger.debug(`witness 关系更新异常 (${userKey}): ${err instanceof Error ? err.message : String(err)}`));
         const countKey = extractionCountKeyOf(sessionId, platform, userId);
         const count = (userMessageCount.get(countKey) ?? 0) + 1;
         userMessageCount.set(countKey, count);
         if (cfg.extractEveryNMessages > 0 && count % cfg.extractEveryNMessages === 0) {
-            void triggerExtractionForUser(sessionId, userId, platform ?? '', nickname).catch((err) => ctx.logger.debug(`事实提取异常 (${countKey}): ${err instanceof Error ? err.message : String(err)}`));
+            void triggerExtractionForUser(sessionId, userId, platform ?? '', nickname).catch((err) => logger.debug(`事实提取异常 (${countKey}): ${err instanceof Error ? err.message : String(err)}`));
         }
         // 全局自反思：跨会话累计所有入站消息计数，每 N 触发一次。
         if (cfg.enableSelfProfile && cfg.selfReflectEveryNMessages > 0) {
             globalInboundCount += 1;
             if (globalInboundCount % cfg.selfReflectEveryNMessages === 0) {
-                void triggerSelfReflection(sessionId).catch((err) => ctx.logger.debug(`自反思异常: ${err instanceof Error ? err.message : String(err)}`));
+                void triggerSelfReflection(sessionId).catch((err) => logger.debug(`自反思异常: ${err instanceof Error ? err.message : String(err)}`));
             }
         }
         // 指令提取：独立计数器，与自反思解耦。频率默认更慢（40 条），可单独禁用。
         if (cfg.enableInstructions && cfg.instructionExtractEveryNMessages > 0) {
             globalInstructionCount += 1;
             if (globalInstructionCount % cfg.instructionExtractEveryNMessages === 0) {
-                void triggerInstructionExtraction(sessionId).catch((err) => ctx.logger.debug(`指令提取异常: ${err instanceof Error ? err.message : String(err)}`));
+                void triggerInstructionExtraction(sessionId).catch((err) => logger.debug(`指令提取异常: ${err instanceof Error ? err.message : String(err)}`));
             }
         }
     });
@@ -1401,10 +1381,7 @@ export function apply(ctx, config) {
             return true;
         if (cfg.temporaryFactMaxAgeDays <= 0)
             return true;
-        const base = fact.updatedAt || fact.observedAt || 0;
-        if (!base)
-            return true;
-        return Date.now() - base <= cfg.temporaryFactMaxAgeDays * 86_400_000;
+        return Date.now() - fact.updatedAt <= cfg.temporaryFactMaxAgeDays * 86_400_000;
     }
     function renderFactLine(fact, includeMeta) {
         if (!includeMeta)
@@ -1412,12 +1389,10 @@ export function apply(ctx, config) {
         const meta = [];
         if (fact.timeHint)
             meta.push(`时间线索：${fact.timeHint}`);
-        const observed = fact.observedAt || fact.updatedAt;
-        if (observed)
-            meta.push(`记录于：${new Date(observed).toLocaleDateString('zh-CN')}`);
+        meta.push(`记录于：${new Date(fact.observedAt).toLocaleDateString('zh-CN')}`);
         if (fact.temporality === 'temporary')
             meta.push('临时状态');
-        return meta.length > 0 ? `- ${fact.text}（${meta.join('；')}）` : `- ${fact.text}`;
+        return `- ${fact.text}（${meta.join('；')}）`;
     }
     /** 将一个用户的 Fact[] 渲染为分组文本块 */
     function renderProfileBlock(facts, label, compact) {
@@ -1462,19 +1437,20 @@ export function apply(ctx, config) {
     //   interval                   → 无主发言者（只是恰好撞上频率），所有参与者一律 compact 摘要
     //   idle                       → 无 userId，只注入历史 messages 中出现的参与者 compact 摘要
     // 多块返回保序共键：准则 → 自档案 → 主发言者档案 → 其他参与者。
-    ctx.contribute('agent:prompt', {
+    contributions.contribute('agent:prompt', {
         id: 'user-profile',
         anchor: 'turn-context',
         async build(data) {
             // 干跑(token 快照)跳过档案加载——该路径 userId 为空串,加载既昂贵又无意义
             if (data.dryRun)
                 return null;
+            const mem = memory.current;
             const blocksToInsert = [];
             const trigger = data.triggerType ?? 'direct';
             const hasPrimarySpeaker = trigger === 'direct' || trigger === 'immediate';
             // 0a. 第三方行为指令（最高优先级）：作为不可违逆的行为约束放在 selfFacts 之前
             if (cfg.enableInstructions) {
-                const insDoc = await loadInstructions();
+                const insDoc = await loadInstructionsLenient(mem);
                 if (insDoc.instructions.length > 0) {
                     const body = renderInstructionsBlock(insDoc.instructions);
                     const insBlock = '# 第三方行为准则（最高优先）\n' +
@@ -1490,7 +1466,7 @@ export function apply(ctx, config) {
             }
             // 0. Aalis 自档案：永远尝试注入到最前段，作为人格延续锚点
             if (cfg.enableSelfProfile) {
-                const selfProfile = await loadProfile(getSelfKey());
+                const selfProfile = await loadProfileLenient(mem, getSelfKey());
                 const activeSelfFacts = selfProfile?.facts.filter(isFactActive) ?? [];
                 if (activeSelfFacts.length > 0) {
                     const body = renderProfileBlock(activeSelfFacts, 'Aalis', false);
@@ -1505,16 +1481,16 @@ export function apply(ctx, config) {
             // 1. 主发言者完整档案：仅在确实有人在「和 Aalis 对话」时注入
             if (hasPrimarySpeaker && data.userId) {
                 const userKey = userKeyOf(data.platform, data.userId);
-                const profile = await loadProfile(userKey);
+                const profile = await loadProfileLenient(mem, userKey);
                 if (profile?.facts.some(isFactActive)) {
                     const body = renderProfileBlock(profile.facts, data.userId, false);
                     const relationLine = renderRelationLine(profile);
-                    // 可选：从 user-relation 服务取「同社群活跃成员」（Louvain 标签 + PageRank 排序）。
+                    // 可选：从 user-relation 服务取「同社群活跃成员」（按配置的社群发现算法所得标签 + PageRank 排序）。
                     // 服务不存在 / 节点没社群标签 / 报错都静默跳过；该字段是锦上添花，不破坏档案主体。
                     let communityLine = '';
                     try {
-                        const relation = ctx.getService('user-relation');
-                        if (relation?.getCommunityPeers) {
+                        const relation = userRelation.current;
+                        if (relation) {
                             const r = await relation.getCommunityPeers(userKey, 5);
                             if (r.peers.length > 0) {
                                 const names = r.peers.map(p => p.displayName).join('、');
@@ -1523,7 +1499,7 @@ export function apply(ctx, config) {
                         }
                     }
                     catch (err) {
-                        ctx.logger.debug(`读取 community peers 失败: ${err instanceof Error ? err.message : String(err)}`);
+                        logger.debug(`读取 community peers 失败: ${err instanceof Error ? err.message : String(err)}`);
                     }
                     const block = `# 关于当前对话者（${data.userId}）的已知事实\n` +
                         '以下是你跨会话长期积累的关于该用户的事实，用于让回应更自然贴合其个性。' +
@@ -1572,10 +1548,9 @@ export function apply(ctx, config) {
                         break;
                 }
                 if (cfg.allowGlobalBackfill && others.size < candidateLimit) {
-                    const memory = ctx.getService('memory');
-                    if (memory) {
+                    if (mem) {
                         try {
-                            const globalRecent = await memory.listMetadata(PROFILE_NS);
+                            const globalRecent = await mem.listMetadata(PROFILE_NS);
                             globalRecent.sort((a, b) => {
                                 const at = typeof a.data.lastInteractionAt === 'number' ? a.data.lastInteractionAt : 0;
                                 const bt = typeof b.data.lastInteractionAt === 'number' ? b.data.lastInteractionAt : 0;
@@ -1596,20 +1571,14 @@ export function apply(ctx, config) {
                             }
                         }
                         catch (err) {
-                            ctx.logger.debug(`加载最近互动用户失败: ${err instanceof Error ? err.message : String(err)}`);
+                            logger.debug(`加载最近互动用户失败: ${err instanceof Error ? err.message : String(err)}`);
                         }
                     }
                 }
                 if (others.size > 0) {
                     const snippets = [];
                     for (const [key, info] of others) {
-                        let profile;
-                        try {
-                            profile = await loadProfile(key);
-                        }
-                        catch {
-                            /* 静默跳过 */
-                        }
+                        const profile = await loadProfileLenient(mem, key);
                         if (!profile?.facts.some(isFactActive))
                             continue;
                         const label = info.nickname ? `${info.nickname}（${info.userId}）` : info.userId;
@@ -1634,7 +1603,7 @@ export function apply(ctx, config) {
         },
     });
     // ─── 参与统一的 memory:clear ───
-    ctx.middleware('memory:clear', async (data, next) => {
+    hooks.middleware('memory:clear', async (data, next) => {
         if (data.types && !data.types.includes('user-profile')) {
             await next();
             return;
@@ -1644,8 +1613,8 @@ export function apply(ctx, config) {
             await next();
             return;
         }
-        const memory = ctx.getService('memory');
-        if (!memory) {
+        const mem = memory.current;
+        if (!mem) {
             await next();
             return;
         }
@@ -1654,8 +1623,8 @@ export function apply(ctx, config) {
             // 注意 commitMetadata 的原子性**按后端分档**（见 api-memory 契约）——sqlite/inmemory
             // 是真原子，mongodb 只保证按序执行遇错即停，仍可能停在半新半旧。批量的确定收益是
             // 一次往返 + 遇错即停，不是无条件的「要么全成」。
-            const items = await memory.listMetadata(PROFILE_NS);
-            await memory.commitMetadata(items.map(it => ({ op: 'del', namespace: PROFILE_NS, key: it.key })));
+            const items = await mem.listMetadata(PROFILE_NS);
+            await mem.commitMetadata(items.map(it => ({ op: 'del', namespace: PROFILE_NS, key: it.key })));
             data.results.push({ source: 'user-profile', success: true, message: `用户档案已清空 (${items.length} 条)` });
         }
         catch (err) {
@@ -1664,20 +1633,19 @@ export function apply(ctx, config) {
         }
         // 同步清空第三方行为指令档案（per-persona）。指令是档案的兄弟概念，
         // memory:clear scope='all' 时一并清理；types 默认包含 user-profile 即也清。
-        if (cfg.enableInstructions) {
-            try {
-                const insItems = await memory.listMetadata(INSTRUCTIONS_NS);
-                await memory.commitMetadata(insItems.map(it => ({ op: 'del', namespace: INSTRUCTIONS_NS, key: it.key })));
-                data.results.push({
-                    source: 'user-profile-instructions',
-                    success: true,
-                    message: `第三方行为指令已清空 (${insItems.length} 条)`,
-                });
-            }
-            catch (err) {
-                const m = err instanceof Error ? err.message : String(err);
-                data.results.push({ source: 'user-profile-instructions', success: false, message: `指令清空失败: ${m}` });
-            }
+        // 不看 enableInstructions：开关管功能用不用，不管已有数据能不能清。
+        try {
+            const insItems = await mem.listMetadata(INSTRUCTIONS_NS);
+            await mem.commitMetadata(insItems.map(it => ({ op: 'del', namespace: INSTRUCTIONS_NS, key: it.key })));
+            data.results.push({
+                source: 'user-profile-instructions',
+                success: true,
+                message: `第三方行为指令已清空 (${insItems.length} 条)`,
+            });
+        }
+        catch (err) {
+            const m = err instanceof Error ? err.message : String(err);
+            data.results.push({ source: 'user-profile-instructions', success: false, message: `指令清空失败: ${m}` });
         }
         await next();
     });
@@ -1686,12 +1654,12 @@ export function apply(ctx, config) {
     // 设计要点：
     // - 全局可查（用户决定 C）：跨平台/跨群均可，含 __self__ 自档案
     // - 三种调用方式：① user_key 直传；② platform+user_id 组合；③ self=true（查当前 persona 自档案）
-    useToolService(ctx).registerGroup({
+    tools.registerGroup({
         name: 'user-profile',
         label: '用户档案',
         description: '查询 Aalis 已经积累的某人事实档案（包括自档案）。',
     });
-    useToolService(ctx).register({
+    tools.register({
         definition: {
             type: 'function',
             function: {
@@ -1740,7 +1708,7 @@ export function apply(ctx, config) {
                     error: '需提供 user_key 或 (platform + user_id) 或 self=true。',
                 });
             }
-            const profile = await loadProfile(userKey);
+            const profile = await loadProfileLenient(memory.current, userKey);
             if (!profile || profile.facts.length === 0) {
                 return JSON.stringify({ ok: true, userKey, found: false, message: '该用户暂无档案数据。' });
             }
@@ -1768,14 +1736,12 @@ export function apply(ctx, config) {
     // /profile              查看自己的档案
     // /profile clear        清除自己的档案（authority=2，自己删自己的）
     // /profile clear nuke   清空所有用户档案（authority=3，dangerous）
-    useCommandService(ctx)
-        .command('profile', '查看你在 Aalis 中的事实档案')
-        .action(async (argv) => {
+    commands.command('profile', '查看你在 Aalis 中的事实档案').action(async (argv) => {
         const userId = argv.session.userId;
         if (!userId)
             return '当前会话未识别用户身份，无法查看档案。';
         const userKey = userKeyOf(argv.session.platform, userId);
-        const profile = await loadProfile(userKey);
+        const profile = await loadProfileLenient(memory.current, userKey);
         if (!profile || profile.facts.length === 0) {
             return `📭 暂无档案数据 (${userKey})`;
         }
@@ -1783,21 +1749,19 @@ export function apply(ctx, config) {
         const meta = `关系强度：${(profile.relationScore ?? 0).toFixed(relationScorePrecision)}/100，互动次数：${profile.interactionCount ?? 0}`;
         return `📇 你的档案 (${userKey})\n${meta}\n\n${block}`;
     });
-    useCommandService(ctx)
-        .command('profile.clear', '清除你自己的事实档案', { visibility: 'restricted' })
-        .action(async (argv) => {
+    commands.command('profile.clear', '清除你自己的事实档案', { visibility: 'restricted' }).action(async (argv) => {
         const userId = argv.session.userId;
         if (!userId)
             return '当前会话未识别用户身份，无法清除档案。';
         const userKey = userKeyOf(argv.session.platform, userId);
-        const memory = ctx.getService('memory');
-        if (!memory)
+        const mem = memory.current;
+        if (!mem)
             return '记忆服务不支持档案删除。';
         try {
-            const existed = await memory.getMetadata(PROFILE_NS, userKey);
+            const existed = await mem.getMetadata(PROFILE_NS, userKey);
             if (!existed)
                 return `📭 你当前没有档案数据 (${userKey})`;
-            await memory.deleteMetadata(PROFILE_NS, userKey);
+            await mem.deleteMetadata(PROFILE_NS, userKey);
             return `✅ 已清除你的档案 (${userKey})`;
         }
         catch (err) {
@@ -1809,7 +1773,7 @@ export function apply(ctx, config) {
     // mongosh 手术或 nuke 全清。dangerous → 等级 2 + confirm，与同族 self.clear/nuke 对齐
     //（它改的是**他人**档案，且 target 含冒号时直传 key、可触及 __self__ 自档案，
     // 必须与 self.clear 同样上确认闸）。id 未命中时列出前若干条供定位。
-    useCommandService(ctx)
+    commands
         .command('profile.forget <target:string> <factId:string>', '定点删除某用户档案中的一条事实（运维除毒）', {
         risk: 'dangerous',
     })
@@ -1817,60 +1781,60 @@ export function apply(ctx, config) {
         const target = String(targetArg ?? '');
         const factId = String(factIdArg ?? '');
         const userKey = target.includes(':') ? target : userKeyOf(argv.session.platform, target);
-        const profile = await loadProfile(userKey);
-        if (!profile || profile.facts.length === 0)
-            return `📭 无档案数据 (${userKey})`;
-        const hit = profile.facts.find(f => f.id === factId);
-        if (!hit) {
-            const listing = profile.facts
-                .slice(0, 20)
-                .map(f => `  [${f.id}] ${f.text.slice(0, 50)}`)
-                .join('\n');
-            return `未找到事实 [${factId}]。${userKey} 现有 ${profile.facts.length} 条：\n${listing}`;
-        }
-        await saveProfile(userKey, {
-            ...profile,
-            facts: profile.facts.filter(f => f.id !== factId),
-            updatedAt: Date.now(),
-        });
-        return `✅ 已删除 ${userKey} 的事实 [${factId}]：${hit.text.slice(0, 60)}`;
+        const mem = memory.current;
+        try {
+            const profile = await loadProfile(mem, userKey);
+            if (!profile || profile.facts.length === 0)
+                return `📭 无档案数据 (${userKey})`;
+            const hit = profile.facts.find(f => f.id === factId);
+            if (!hit) {
+                const listing = profile.facts
+                    .slice(0, 20)
+                    .map(f => `  [${f.id}] ${f.text.slice(0, 50)}`)
+                    .join('\n');
+                return `未找到事实 [${factId}]。${userKey} 现有 ${profile.facts.length} 条：\n${listing}`;
+            }
+            await saveProfile(mem, userKey, {
+                ...profile,
+                facts: profile.facts.filter(f => f.id !== factId),
+                updatedAt: Date.now(),
+            });
+            return `✅ 已删除 ${userKey} 的事实 [${factId}]：${hit.text.slice(0, 60)}`;
+        }
+        catch (err) {
+            return `❌ 删除失败：${err instanceof Error ? err.message : String(err)}`;
+        }
     });
-    useCommandService(ctx)
-        .command('profile.self', '查看 Aalis 的自档案（跨会话的内心状态）')
-        .action(async () => {
+    commands.command('profile.self', '查看 Aalis 的自档案（跨会话的内心状态）').action(async () => {
         const selfKey = getSelfKey();
-        const profile = await loadProfile(selfKey);
+        const profile = await loadProfileLenient(memory.current, selfKey);
         if (!profile || profile.facts.length === 0) {
             return `🌱 ${getCurrentPersonaName()} 还没有积累任何自反思事实。（key=${selfKey}）`;
         }
         const block = renderProfileBlock(profile.facts, getCurrentPersonaName(), false);
         return `🪞 ${getCurrentPersonaName()} 自档案（共 ${profile.facts.length} 条，key=${selfKey}）\n\n${block}`;
     });
-    useCommandService(ctx)
-        .command('profile.self.clear', '【慎用】清空 Aalis 自档案', { risk: 'dangerous' })
-        .action(async () => {
-        const memory = ctx.getService('memory');
-        if (!memory)
+    commands.command('profile.self.clear', '【慎用】清空 Aalis 自档案', { risk: 'dangerous' }).action(async () => {
+        const mem = memory.current;
+        if (!mem)
             return '记忆服务不支持档案删除。';
         const selfKey = getSelfKey();
         try {
-            await memory.deleteMetadata(PROFILE_NS, selfKey);
+            await mem.deleteMetadata(PROFILE_NS, selfKey);
             return `✅ ${getCurrentPersonaName()} 自档案已清空（key=${selfKey}）`;
         }
         catch (err) {
             return `❌ 清空失败：${err instanceof Error ? err.message : String(err)}`;
         }
     });
-    useCommandService(ctx)
-        .command('profile.clear.nuke', '【危险】清空所有用户档案', { risk: 'dangerous' })
-        .action(async () => {
-        const memory = ctx.getService('memory');
-        if (!memory) {
+    commands.command('profile.clear.nuke', '【危险】清空所有用户档案', { risk: 'dangerous' }).action(async () => {
+        const mem = memory.current;
+        if (!mem) {
             return '记忆服务不支持档案批量删除。';
         }
         try {
-            const items = await memory.listMetadata(PROFILE_NS);
-            await memory.commitMetadata(items.map(it => ({ op: 'del', namespace: PROFILE_NS, key: it.key })));
+            const items = await mem.listMetadata(PROFILE_NS);
+            await mem.commitMetadata(items.map(it => ({ op: 'del', namespace: PROFILE_NS, key: it.key })));
             return `✅ 已清空全部用户档案（${items.length} 条）`;
         }
         catch (err) {
@@ -1883,15 +1847,13 @@ export function apply(ctx, config) {
     // /instruct.add <text>   手动添加一条指令（authority=2）
     // /instruct.remove <id>  按 id 删除一条（authority=2）
     // /instruct.clear        清空当前 persona 的全部指令（authority=3, dangerous）
-    useCommandService(ctx)
-        .command('instruct', '查看当前 persona 的第三方行为指令')
-        .action(async () => {
+    commands.command('instruct', '查看当前 persona 的第三方行为指令').action(async () => {
         if (!cfg.enableInstructions)
             return '🚫 第三方行为指令功能未启用。';
-        const persona = getCurrentPersonaName();
-        const doc = await loadInstructions();
+        const personaName = getCurrentPersonaName();
+        const doc = await loadInstructionsLenient(memory.current);
         if (doc.instructions.length === 0) {
-            return `📭 ${persona} 当前没有任何第三方行为指令。`;
+            return `📭 ${personaName} 当前没有任何第三方行为指令。`;
         }
         const lines = doc.instructions.map(ins => {
             const tag = ins.severity === 'must' ? '【必须】' : ins.severity === 'avoid' ? '【避免】' : '【应当】';
@@ -1901,9 +1863,9 @@ export function apply(ctx, config) {
                 : '';
             return `  ${ins.id}  ${tag}${cat} ${ins.text}${src}`;
         });
-        return `📋 ${persona} 的第三方行为指令（共 ${doc.instructions.length} 条）\n${lines.join('\n')}`;
+        return `📋 ${personaName} 的第三方行为指令（共 ${doc.instructions.length} 条）\n${lines.join('\n')}`;
     });
-    useCommandService(ctx)
+    commands
         .command('instruct.add <text:text>', '手动添加一条第三方行为指令', { visibility: 'restricted' })
         .action(async (argv, text) => {
         if (!cfg.enableInstructions)
@@ -1914,21 +1876,27 @@ export function apply(ctx, config) {
         const userId = argv.session.userId;
         const sourceUserKey = userId ? userKeyOf(argv.session.platform, userId) : undefined;
         const sourceUserName = userId ?? '匿名';
-        const doc = await loadInstructions();
-        const merged = mergeInstructions(doc.instructions, [
-            {
-                text: body,
-                severity: 'should',
-                sourceUserKey,
-                sourceUserName,
-                sourceChannel: 'command',
-            },
-        ], [], []);
-        await saveInstructions({ instructions: merged, updatedAt: Date.now() });
-        const added = merged.find(m => m.text === clipInstructionText(body));
-        return `✅ 已添加行为指令${added ? `（id=${added.id}）` : ''}：${clipInstructionText(body)}`;
+        const mem = memory.current;
+        try {
+            const doc = await loadInstructions(mem);
+            const merged = mergeInstructions(doc.instructions, [
+                {
+                    text: body,
+                    severity: 'should',
+                    sourceUserKey,
+                    sourceUserName,
+                    sourceChannel: 'command',
+                },
+            ], [], []);
+            await saveInstructions(mem, { instructions: merged, updatedAt: Date.now() });
+            const added = merged.find(m => m.text === clipInstructionText(body));
+            return `✅ 已添加行为指令${added ? `（id=${added.id}）` : ''}：${clipInstructionText(body)}`;
+        }
+        catch (err) {
+            return `❌ 添加失败：${err instanceof Error ? err.message : String(err)}`;
+        }
     });
-    useCommandService(ctx)
+    commands
         .command('instruct.remove <id:string>', '按 id 删除一条第三方行为指令', { visibility: 'restricted' })
         .action(async (_argv, id) => {
         if (!cfg.enableInstructions)
@@ -1936,34 +1904,40 @@ export function apply(ctx, config) {
         const targetId = typeof id === 'string' ? id.trim() : '';
         if (!targetId)
             return '❌ 需要提供指令 id。';
-        const doc = await loadInstructions();
-        const target = doc.instructions.find(i => i.id === targetId);
-        if (!target)
-            return `❌ 未找到 id=${targetId} 的指令。`;
-        const merged = mergeInstructions(doc.instructions, [], [], [targetId]);
-        await saveInstructions({ instructions: merged, updatedAt: Date.now() });
-        return `✅ 已删除指令（id=${targetId}）：${target.text}`;
+        const mem = memory.current;
+        try {
+            const doc = await loadInstructions(mem);
+            const target = doc.instructions.find(i => i.id === targetId);
+            if (!target)
+                return `❌ 未找到 id=${targetId} 的指令。`;
+            const merged = mergeInstructions(doc.instructions, [], [], [targetId]);
+            await saveInstructions(mem, { instructions: merged, updatedAt: Date.now() });
+            return `✅ 已删除指令（id=${targetId}）：${target.text}`;
+        }
+        catch (err) {
+            return `❌ 删除失败：${err instanceof Error ? err.message : String(err)}`;
+        }
     });
-    useCommandService(ctx)
+    commands
         .command('instruct.clear', '【危险】清空当前 persona 的全部第三方行为指令', {
         visibility: 'restricted',
     })
         .action(async () => {
         if (!cfg.enableInstructions)
             return '🚫 第三方行为指令功能未启用。';
-        const memory = ctx.getService('memory');
-        if (!memory)
+        const mem = memory.current;
+        if (!mem)
             return '记忆服务不支持指令删除。';
         try {
-            const before = (await loadInstructions()).instructions.length;
-            await memory.deleteMetadata(INSTRUCTIONS_NS, getInstructionsKey());
+            const before = (await loadInstructionsLenient(mem)).instructions.length;
+            await mem.deleteMetadata(INSTRUCTIONS_NS, getInstructionsKey());
             return `✅ ${getCurrentPersonaName()} 的第三方行为指令已清空（删除 ${before} 条）。`;
         }
         catch (err) {
             return `❌ 清空失败：${err instanceof Error ? err.message : String(err)}`;
         }
     });
-    ctx.logger.info(`用户事实档案已启用 (every=${cfg.extractEveryNMessages <= 0 ? '禁用提取' : `${cfg.extractEveryNMessages}msgs`}, history=${cfg.historyForExtraction}, ` +
+    logger.info(`用户事实档案已启用 (every=${cfg.extractEveryNMessages <= 0 ? '禁用提取' : `${cfg.extractEveryNMessages}msgs`}, history=${cfg.historyForExtraction}, ` +
         `maxFacts=${cfg.maxFactsPerUser}, ` +
         `self=${cfg.enableSelfProfile ? `every ${cfg.selfReflectEveryNMessages}msgs/max ${cfg.maxSelfFacts}, key=${getSelfKey()}` : 'disabled'}, ` +
         `instructions=${cfg.enableInstructions ? `enabled(every ${cfg.instructionExtractEveryNMessages}msgs/max ${cfg.maxInstructions}/minAuth ${cfg.instructionMinAuthority}, key=${getInstructionsKey()})` : 'disabled'}, ` +